Towards Lightweight and Privacy-preserving Data Provision in Digital Forensics for Driverless Taxi

TL;DR

This paper introduces a lightweight, privacy-preserving data provision framework for digital forensics in driverless taxis, addressing data integrity, privacy, and access control challenges with novel cryptographic mechanisms.

Contribution

It proposes a comprehensive LPDP approach combining elliptic curve cryptography, attribute-based encryption, and secret sharing to enhance privacy and efficiency in vehicular digital forensics.

Findings

Ensures privacy of data providers and investigators during data upload and access.

Achieves scalable data integrity verification with low overhead.

Validates security and performance through analysis and experiments.

Abstract

Data provision, referring to the data upload and data access, is one key phase in vehicular digital forensics. The unique features of Driverless Taxi (DT) bring new issues to this phase: 1) efficient verification of data integrity when diverse Data Providers (DPs) upload data; 2) DP privacy preservation during data upload; and 3) privacy preservation of both data and INvestigator (IN) under complex data ownership when accessing data. To this end, we propose a novel Lightweight and Privacy-preserving Data Provision (LPDP) approach consisting of three mechanisms: 1) the Privacy-friendly Batch Verification Mechanism (PBVm) based on elliptic curve cryptography, 2) Data Access Control Mechanism (DACm) based on ciphertext-policy attribute-based encryption, and 3) Decentralized IN Warrant Issuance Mechanism (DIWIm) based on secret sharing. Privacy preservation of data provision is achieved through: 1) ensuring the DP privacy preservation in terms of the location privacy and unlinkability of data upload requests by PBVm, 2) ensuring data privacy preservation by DACm and DIWIm, and 3) ensuring the identity privacy of IN in terms of the anonymity and unlinkability of data access requests without sacrificing the traceability. Lightweight of data provision is achieved through: 1) ensuring scalable verification of data integrity by PBVm, and 2) ensuring low-overhead warrant update with respect to DIWIm. Security analysis and performance evaluation are conducted to validate the security and performance features of LPDP.