Improving customer experience while ensuring data privacy for intelligent mobility

Lead Research Organisation: University of Surrey
Department Name: Computing Science

Abstract

The proposed research applies computer science solutions to an end-user-focussed challenge. The challenge is how to achieve an enhanced customer experience during a journey, through detailed knowledge of an individual traveller, whilst protecting the privacy of their data. As well as developing technical solutions to data privacy, this project aims to encourage passengers to provide this data by developing an evaluation framework to enhance their understanding of how it is used and how they can control it, thus maximising trust in the service. Currently, such a framework does not exist and this is an impediment to the opportunities offered by increased sharing of personal data, i.e. transport customers are, in the majority, unwilling to share personal data due to privacy concerns. The research findings will be applicable to a range of journey modes but the focus here will be on rail travel.

The project has been developed closely with the rail industry through partnership with the Association of Train Operating Companies (ATOC) and the Rail Safety and Standards Board (RSSB). In recent years, the availability of data in the rail industry has increased significantly in terms of timetabling, disruption and real-time provision to passengers. Currently there is little in the way of individual customer information but this is increasingly possible through smartphones and other mobile devices and will become more prevalent with the introduction of smartcards and contactless technologies. The industry's Rail Technical Strategy aims to establish rail as customers' preferred form of transport for reliability, ease of use and perceived value. Increased understanding of passengers through information such as their location, their plans, their mobility or luggage limitations, or where they are on the train would enable a more personalised service and an improved experience. The challenge is to assure customers that their data is being protected and used appropriately and that they are fully in control.

The consortium assembled for this project brings together the three academic disciplines required to solve this challenge: computer science, to develop the framework and technical solutions (University of Surrey and Royal Holloway, University of London); human factors, to develop the use cases, evaluate passenger perceptions and ensure usable solutions (Loughborough University) and transport systems to bring understanding of the data streams to be integrated (University of Southampton). To ensure the solutions are co-created with the industry and have a direct pathway to impact, ATOC and RSSB have a key role as stakeholders and on the project's External Advisory board, alongside other sector experts such as EnableID (Internet of Things and personal data), the Transport Systems Catapult (the UK government's innovation centre for intelligent mobility knowledge exchange) and ThalesUK (rail technology).

The objective is to develop a privacy evaluation framework underpinned by statistical analysis, data provenance and mobile technology. This framework will be integrated with emerging data systems being developed by the rail industry and also into a wider (sector-independent) framework being proposed by the Digital Catapult (the UK government's innovation centre for digital technologies). This will enable better communication to passengers as to why their data is needed and how it will be handled in order to increase trust and feelings of control, thus providing a virtuous circle of data provision, leading to enhanced customer experience and hence further data provision.

Planned Impact

The technical innovation of a new privacy framework has the potential to impact on three key aspects of mobility: 1) It can help encourage a modal shift to more sustainable forms of mobility, and particularly a shift from car to public transport; 2) It can enable a greater understanding of privacy by consumers, and confidence that they have the means to control who does and not have access to aspects of their personal data; 3) It will help facilitate commercial opportunities for product and service provision to customers, associated with mobility.

The findings of this project - by helping to enhance the rail passenger experience and facilitate opportunities for commercial offerings associated with mobility - therefore have substantial benefits for many stakeholders within UK society and the UK economy. Environmental and societal benefits occur due to the transition to forms of transport that reduce carbon emissions and travel congestion. The potential shift towards public transport also helps to ensure that all members of the public (including those with disability, and those on low incomes) can benefit from mobility, without requiring the ownership or use of a private car.

Economic benefits arise due to the opportunity to develop products, and services in particular, that provide real benefit to consumers, related to their mobility. The key drivers for these will be the access to personal data that individuals will be more willing to provide, due to better understanding of privacy concerns, and effective means for ensuring control of data. These opportunities include services that are offered to customers, and underlying technologies such as smart billing and ticketless travel.

The tangible benefits to the public will be a better journey experience, and opportunities for accomplishing other activities that had not previously been possible. Rather than merely providing additional 'conveniences', the project will open up the opportunity for new 'freedoms' for consumers. These provide the opportunity to make public transport the mode of choice for individuals. Outside the rail sector, the new possibilities for enhancing the user experience in relation to mobility will apply to other modes of transport. Outside of transport, the new privacy framework will help enable the development of services based on personal data that were previously seen as unacceptable by consumers.

The initial beneficiaries of the research will be the project partners. Their findings will be disseminated to the wider academic community through workshops, conferences and academic papers. The project research team will work closely with commercial partners including ATOC, RSSB and Thales, and these partners will benefit directly through knowledge transfer. The project will also engage a wider selection of stakeholders who have interest in developing and delivering value-adding services for consumers. These wider stakeholders will gain a better understanding of the role that personal data plays in enabling these services, and will also be able to deliver these services based on the technological developments within the project.

Publications

10 25 50
 
Description The research has included a review of rail customer complaints to help identify where better information provision and/or the use of more personal data could be used to mitigate issues in the future, and survey work to understand how rail passengers value data privacy. Analysis of data for one train operating company showed how there is a trade-off between how anonymous data really are and the usefulness of the data (e.g. for making operational decisions or providing passenger information). Different scenarios were considered, which highlight the potential for better information provision and the potential for personal data to enhance the experience of passengers. Outputs from the survey work have helped to establish the extent to which railway passengers are willing to trade personal information in order to gain a better level of service. This analysis has focused particularly on passenger behaviour during disruptions to services. The research has also assessed the trade-offs passengers are prepared to make between provision of personal data and an improved journey experience during times of disruption. This involved carrying out on-train surveys of passenger preferences, and found that passengers can be categorised into four groups according to their attitudes to data privacy. The survey analysis found evidence that rail passengers would be prepared to trade privacy for service improvements, and that privacy concerns may have less of an impact on actual behaviour than is implied by people's stated preferences. This suggests that passengers could be incentivised to become data providers for location based services which offered them benefits.
The research also has contributed fundamentally to new proposals for smart ticketing which enables the passenger to remain anonymous and not tracked as they use services. The research also investigated the use of IoT systems to support information provision in a rail information systems. This included field trials to automatically determine the consist of a train to feed into passenger information systems to improve customer experience. The research also supported a fundamental analysis of the IoT protocols used in such systems.
The research also broadened to include examining the impact authentication on customer experience and has led to new interesting ideas on passwordless technologies.
Exploitation Route The outcomes from the funding have led to two IAA projects. Firstly, in collaboration with the Rail Delivery Group to investigate the use of IoT systems in automatic consist recognition. Secondly, in collaboration with key stakeholders from financial services we are seeking to develop interoperable scalable architectures for our ideas on passwordless technologies. The benefits of the qualitative research have also enabled the Rail Delivery Group to understand the impact on the customer journey through disruption and feed into their work on customer experience.
Sectors Digital/Communication/Information Technologies (including Software),Financial Services, and Management Consultancy,Transport

 
Description The importance of data privacy has fed into several other projects: TOC Ability funded by rail innovation TOC 16, and Ilids funded by Innovate UK Accelerating Innovation in Rail, SAFRON funded by Innovate UK Accelerating Innovation In Rail, and two EPSRC IAA projects. The research contribution in these projects was to provide a security analysis of the systems with respect to data privacy and GDPR compliance. The impact of Surrey's work in these project also enabled us to share the expertise on secure protocol design in rail applications. One of the EPSRC IAA project builds on the work on passwordless authentication to improve the customer experience and has led to numerous research directions and new collaborations with industry partners.
First Year Of Impact 2018
Sector Digital/Communication/Information Technologies (including Software),Transport
Impact Types Societal

 
Description Open Governance for Public and Private Sector
Geographic Reach Multiple continents/international 
Policy Influence Type Participation in a guidance/advisory committee
 
Description EPSRC IAA Scalable Passwordless Architectures
Amount £40,396 (GBP)
Organisation Engineering and Physical Sciences Research Council (EPSRC) 
Sector Public
Country United Kingdom
Start 03/2021 
End 06/2021
 
Description Innovation in Rail 4
Amount £740,729 (GBP)
Organisation Innovate UK 
Sector Public
Country United Kingdom
Start 12/2017 
End 11/2018
 
Description Innovation in Rail 5
Amount £475,285 (GBP)
Organisation Innovate UK 
Sector Public
Country United Kingdom
Start 04/2018 
End 09/2019
 
Description IoT for automatic consist recognition
Amount £30,409 (GBP)
Organisation Engineering and Physical Sciences Research Council (EPSRC) 
Sector Public
Country United Kingdom
Start 03/2019 
End 12/2019
 
Description RRUKA
Amount £120,697 (GBP)
Organisation Rail Safety and Standards Board 
Sector Public
Country United Kingdom
Start 04/2017 
End 11/2018
 
Description TOC 16
Amount £821,804 (GBP)
Organisation Railway Safety 
Sector Private
Country United Kingdom
Start 04/2017 
End 11/2018
 
Description Google 
Organisation Google
Country United States 
Sector Private 
PI Contribution With the work on passwordless authentication, we have been in discussions with Google on the topics and we have built a demonstrator process called a Virtual CTAP2 WebAuthn Authenticator to demonstrate the work and we have had numerous discussions with colleagues at Google specialising in WebAuthn and FIDO.
Collaborator Contribution This contribution was from the team at the University of Surrey
Impact A technical report has resulted from work that has been shared with Google and publicly available.
Start Year 2021
 
Description LoRa Alliance 
Organisation LoRa Alliance
Country United States 
Sector Charity/Non Profit 
PI Contribution We have joined the LoRa Allicance as an institutional member and Surrey has joined the Alliance's Technical Committee and Security Working Group. The University will contribute its expertise in security-protocol design and formal security verification to the Security Working Group to help inform the security of current and future versions of the LoRa specifications.
Collaborator Contribution None
Impact None
Start Year 2020
 
Title DAA C++ Implementation code 
Description C++ Implementation for DAA Implementation related to Asia CSS 2020 paper 
Type Of Technology New/Improved Technique/Technology 
Year Produced 2020 
Impact The reference implementation has been used in the Future TPM H2020 project (779391) as the basis for preserving anonymity in a healthcare wearable application. The implementation has also been used by its authors as a basis in further refinements of the DAA algorithm to improve its efficiency and published in Transactions in Information Security. 
URL https://dl.acm.org/doi/10.1145/3320269.3372197
 
Title DAA Tamarin Implementation Models 
Description Tamarin implementation models for ECC-DAA implementations. 
Type Of Technology New/Improved Technique/Technology 
Year Produced 2020 
Impact publication in Asia CCS 2020 
URL https://dl.acm.org/doi/10.1145/3320269.3372197
 
Title Entity-Centric Provenance 
Description Mongo open source distribution was modified to support the unique way of collecting provenance about actions performed on data stored in the database. The unique process of provenance is termed as Entity-Centric Provenance and it increases the traceability and searchability of activities performed on a dataset. 
Type Of Technology New/Improved Technique/Technology 
Year Produced 2018 
Impact a) Increased tracking of activities performed on a dataset b) Capturing full evolution of data in the database c) Faster search of activity records 
 
Title LoRaWAN Tamarin Models 
Description Tamarin models for the LoRaWAN 1.1 specification and also LoRaWAN 1.0 models. We considered three increasingly strong threat models, resting on a Dolev-Yao attacker acting modulo different requirements made on various channels (e.g., secure/insecure) and the level of trust placed on entities (e.g., honest/corruptible network servers). Importantly, one of these threat models is exactly in line with the LoRaWAN specification, yet it unfortunately still leads to attacks. In response to the exhibited attacks, we propose a minimal patch of the LoRaWAN 1.1 
Type Of Technology New/Improved Technique/Technology 
Year Produced 2020 
Impact Fed back the findings to the LoRaWAN Security Working Group to disseminate findings and taken the comments on board and updated the specifications. 
URL https://ieeexplore.ieee.org/document/9230413
 
Title NFC protocol framework 
Description We have developed an NFC platform for evaluation of new nfc protocols on an Android platform. 
Type Of Technology Software 
Year Produced 2017 
Open Source License? Yes  
Impact Supports evaluation of new privacy preserving protocols means to determine whether they meet the timing requests for transport application domains. 
URL https://github.com/swesemeyer/BenchmarkingETicketingSystems
 
Title New DAA TAMARIN models 
Description Tamarin models of the ECC_DAA implementations presented in the Euro S&P conference paper in 2019. 
Type Of Technology New/Improved Technique/Technology 
Year Produced 2019 
Impact Led to further research in refining DAA specifications suitable for implementations and a subsequent Asia CCS 2020 paper. 
URL https://github.com/tamarin-prover/tamarin-prover/tree/develop/examples/eurosp19-eccDAA
 
Title Transport Simulator Data Generator 
Description Transport simulation tool developed to generated data input to a transport database/infrastructure. 
Type Of Technology New/Improved Technique/Technology 
Year Produced 2018 
Impact - Data generation from a simulated transport system (Transport for London Underground) - Visualisation of the simulated transport system (with ability to increase and reduce the time-intervals) 
 
Title Virtual CTAP2 WebAuthn Authenticator 
Description It is a software virtual authenticator that supports CTAP2 
Type Of Technology New/Improved Technique/Technology 
Year Produced 2021 
Open Source License? Yes  
Impact This has led to a new architecture to support more resilience in the backup and recovery of webauthn credentials using a cloud environment. 
URL https://arxiv.org/pdf/2108.04131.pdf
 
Description ITC Conference 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Industry/Business
Results and Impact Presentation on the DICE project by Helen Treharne, Surrey, and Tracy Ross, Loughborough, on importance of data in improving customer experience. Helen presented future directions for anonymous smart ticketing.
Year(s) Of Engagement Activity 2019
 
Description Industry Presentation 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Industry/Business
Results and Impact Presentation to the Data and Information System Interface Committee at RSSB to present findings on using IoT to automatically detect consist using low powered IoT devices using LoRa technology.
Year(s) Of Engagement Activity 2019
 
Description Interaction with Transport for the Noth 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach Regional
Primary Audience Industry/Business
Results and Impact Influencing the decision making process for tender of a information system procurement which has GDPR and privacy implications.
Year(s) Of Engagement Activity 2017,2018
URL https://transportforthenorth.com/
 
Description Open Governance for Public and Private Sector 
Form Of Engagement Activity A formal working group, expert panel or dialogue
Part Of Official Scheme? No
Geographic Reach International
Primary Audience Third sector organisations
Results and Impact World Economic Forum (WEF) approached the RHUL team for this expert advice related to the Open Governance work. The RHUL team working towards providing consumer control and building tools that enable them audit/check both the public and private sector organisations. WEF is currently undertaking a project in designing a secure, reliable and open government tendering scheme on blockchains. They want to design a system that provides transparency to the tendering framework and enabling an open/fair auditing mechanism on the blockchain.

RHUL has already proposed such a mechanism, which is going to form the backbone of the WEF project. Beside the RHUL team is activity engaged with the WEF team in their design and development of the open, transparent and fair tendering scheme.
Year(s) Of Engagement Activity 2018,2019
 
Description Presentation at UK Security Expo 2016 
Form Of Engagement Activity A talk or presentation
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Industry/Business
Results and Impact Presentation on Rail Security and the DICE project at the UK Security Expo 2016 (November) at Olympia, London as part of a special session on Rail Security.
Year(s) Of Engagement Activity 2016
URL https://www.ipsa.org.uk/calendar/2016/11/uk-security-expo-2016/
 
Description Rail Industry Train Consist Recognition Industry Event 
Form Of Engagement Activity Participation in an activity, workshop or similar
Part Of Official Scheme? No
Geographic Reach National
Primary Audience Industry/Business
Results and Impact Presented research related to calculating train consist data using IoT devices to the rail industry and associated industrial partners.
This sparked a lively discussion around the various technologies with rail operators and SME organisations working in the rail industry.
Year(s) Of Engagement Activity 2018