Digitisation is often viewed as beneficial to a user. Whereas traditionally, people would physically have to identify to a service, pay for a ticket in cash, or go into a library to access a book, people can now achieve all of this through a click of a button. Such actions may seem functionally identical to their analogue counterparts, but in the digital case, a user's actions are automatically recorded. The recording of user's interactions presents a problem because once the information is collected, it is outside of the control of the person whom it concerns. This issue is only exacerbated by the centralisation of the authentication mechanisms underpinning the aforementioned services, permitting the aggregation and analysis of even more data. This work aims to motivate the need and establish the feasibility of the application of a privacy-enhancing digital token management service to public transit. A proof-of-concept implementation is developed, building upon a design proposed by Goodell and Aste. This implementation was optimised for the public transport use case. Its performance is tested in a local environment to better understand the technical challenges and assess the technical feasibility of the system in a production setting. It was observed that for loads between one and five requests per second the proof-of-concept performs comparably to other contactless payment systems, with a maximum median response time less than two seconds. Due to hardware bottlenecks, reliable throughput in our test environment was limited to five requests per second. The demonstrated throughput and latency indicate that the system can feasibly compete with solutions currently in use. Yet, further work is needed to demonstrate their performance characteristics in an environment similar to that experienced in production.
翻译:数字化常被视为对用户有益。传统上,人们需要亲自前往服务点进行身份验证、用现金购买车票或前往图书馆借阅书籍,而现在只需点击按钮即可完成所有这些操作。这些行为在功能上似乎与其模拟对应物相同,但在数字场景中,用户的行为会被自动记录。用户交互行为的记录带来了问题,因为信息一旦被收集,便脱离了相关当事人的控制。支撑上述服务的中心化认证机制进一步加剧了这一问题,使得更多数据能够被聚合与分析。本研究旨在论证将隐私增强型数字代币管理服务应用于公共交通的必要性并验证其可行性。基于Goodell与Aste提出的设计方案,我们开发了概念验证实现,并针对公共交通使用场景进行了优化。通过在本地环境中测试其性能,我们深入理解了技术挑战,并评估了该系统在生产环境中的技术可行性。实验表明,在每秒1至5次请求的负载下,该概念验证系统的性能与其他非接触式支付系统相当,最大中位响应时间小于2秒。受硬件瓶颈限制,测试环境中的可靠吞吐量被限制在每秒5次请求。所展示的吞吐量与延迟表明,该系统具备与现有解决方案竞争的可行性。然而,仍需进一步研究以验证其在接近生产环境中的性能表现。