A Privacy-Preserving Passenger Information Management Scheme for Road Transport System in Nigeria

In Nigeria road transport system, the conventional paper-based manifest allows passengers' information to be collected and used for emergency purposes. However, the privacy of passengers is not preserved because an adversary can easily obtain these sensitive information for malicious intentions such as extortion, kidnapping, route monitoring, assassination, spying, and so forth. To address this problem, we develop a provably secure scalable lightweight data management scheme for achieving data privacy, authenticity, integrity, and confidentiality in road transport systems. An efficient authentication scheme is developed to achieve data authenticity and integrity, and a novel perturbation to guarantee data privacy and confidentiality. We show that the scheme is provably secure in the random oracle model based on Discrete Logarithm Assumption (DLA). In addition, the scheme achieves strong anonymity, conditional traceability and resistance to various attacks, and provides countermeasure against privilege escalation. The novel perturbation prevents gleaning by adversaries and ensures perfect reconstruction of original data from the perturbed data. Compared with related schemes, the performance evaluation and comparisons show an improved efficiency in terms of computation and communication overheads. Therefore, the proposed scheme is suitable for practical applications in the road transport system in Nigeria to overcome the weaknesses and limitations of the paper manifest.