The First International Conference on IoT in Urban Space

Research Article

A Simple and Secure E-Ticketing System for Intelligent Public Transportation based on NFC

  • @INPROCEEDINGS{10.4108/icst.urb-iot.2014.257244,
        author={Ivan Gudymenko and Felipe Sousa and Stefan Koepsell},
        title={A Simple and Secure E-Ticketing System for Intelligent Public Transportation based on NFC},
        proceedings={The First International Conference on IoT in Urban Space},
        publisher={ACM},
        proceedings_a={URB-IOT},
        year={2014},
        month={11},
        keywords={domain-specific security and privacy architectures secure online transactions distributed systems security},
        doi={10.4108/icst.urb-iot.2014.257244}
    }
    
  • Ivan Gudymenko
    Felipe Sousa
    Stefan Koepsell
    Year: 2014
    A Simple and Secure E-Ticketing System for Intelligent Public Transportation based on NFC
    URB-IOT
    ICST
    DOI: 10.4108/icst.urb-iot.2014.257244
Ivan Gudymenko1,*, Felipe Sousa2, Stefan Koepsell1
  • 1: TU Dresden
  • 2: Universidade Federal de Campina Grande
*Contact email: ivan.gudymenko@mailbox.tu-dresden.de

Abstract

E-ticketing systems for public transportation (ESPT) are an integral part of intelligent transportation systems (ITS) which shape the urban environment of the future. The wide deployment of ESPT around the world has proven its success and demonstrated large potential. However, till now the majority of such systems being in operation adhere to the specific standards which are often closed. In this paper, we aim at suggesting an open and secure e-ticketing architecture which provides an alternative to the conventional paper-based ticketing and is customizable for different tariff schemes. Our solution is based on NFC which should facilitate its interoperability with value-added services (from the third parties as well) and pave the way to its convergence with other applications comprising an Internet of Things (IoT) ecosystem in the urban environment.

The suggested architecture covers the main processes specific to the ESPT scenario and provides for e-ticket unclonability, unforgeability as well as for protection from tapping and replay attacks. Finally, the results of practical validation using real hardware are presented to demonstrate the real-world pertinence of our solution.