Omitola, Temitope, Waterson, Ben, Tsakalakis, Niko, Stalla-Bourdillon, Sophie, Gomer, Richard, Cherrett, Thomas and Wills, Gary (2023) Increasing user trust in Mobility-as-a-Service IoT ecoSystem (UMIS) Project - Final Report PETRAS National Centre of Excellence 19pp.
Abstract
The UMIS (Increasing User trust in Mobility-as-a-Service IoT ecoSystem) project investigated legal, scientific, and engineering techniques that can be used to encourage consumer trust and establish that trust in the usage of Mobility-as-a-Service (MaaS) system as part of the transportation provisioning ecosystem of a society. It was a joint project undertaken by the University of Southampton, Solent Transport, Immuta, and KnowNow Information (kn-I), combining the expertise from the domains of Law, Engineering, and Computer Science. UMIS sat within the Lens of “Law and Economics at the Edge” and within the “Transport and Mobility” Sectors of PETRAS.
MaaS is the integration of, and access to, different transport services (e.g., public ground transportation, vehicle-sharing, taxi, vehicle rental, etc.) on one single digital interface able to offer suitable solutions based on the user’s travel needs. A MaaS interface should be available anytime offering integrated booking and payment as well as supporting service planning and improvement. These different transportation services are embedded in a MaaS ecosystem. MaaS ecosystems are Internet of Things (IoT) enabled complex networks of interconnected stakeholders within which a range of core transport services are integrated together to offer service recipients a set of options for each service request. These ecosystems exist in various configurations and can involve a wide range of stakeholders. A stakeholder is any entity involved in the processing of data generated within the ecosystem.
The list of potential stakeholders is varied, and may include: the MaaS provider, passengers of transport services, the Transport Authority regulating transport services, transport service providers, payment providers, ticketing providers, tracking providers monitoring the status of vehicles, stations, stops and luggage, and potentially cloud providers for data storage, computation, policy enforcement, mobile application providers, travel insurance providers, etc. In order to fulfil a service requirement, different stakeholders may need to interact together and exchange data. Collaborative sharing and linking of safe, useful data between stakeholders under secure and rights-respecting conditions will be vital for building a trustworthy MaaS system. To achieve this objective, MaaS ecosystem stakeholders must be convinced of the benefits of multi-party data sharing across the lifecycle of data generation and consumption, and be confident that security, privacy, and ethical behaviour are assured during this lifecycle.
Numerous studies indicate that people are either unaware of what private information they expose, on the internet, or they do not understand what information they are consenting to share (e.g. [S1]), and previous work, such as [S2], identified fostering user trust in IoT systems as an area that is yet to be addressed. Privacy and security concerns are further complicated because new cyber-physical vulnerabilities exist on many different levels, such as through the app, API, the cloud, or hardware. These novel vulnerabilities challenge existing risk management frameworks [S3] and introduce new demands on existing legislation and regulations.
The aim of UMIS was to research and develop a privacy-preserving and privacy-enhancing data governance framework and data protection models that can be deployed by data producers and third parties to facilitate legal and ethical usage of data, thereby promoting mutual trust, between producers and consumers of data. UMIS research questions were as follows: (a) How do we build in privacy in the data being produced and consumed by the different stakeholders in an IoT-enabled MaaS system? (b) How do we ensure that data management, inferencing and analytics performed by data controllers, data processors, and other third parties, do not diminish the privacy of data subjects? and (c) How do we guarantee data subjects' control over how their data are shared?
More information
Identifiers
Catalogue record
Export record
Contributors
Download statistics
Downloads from ePrints over the past year. Other digital versions may also be available to download e.g. from the publisher's website.