How to Build Privacy into Intelligent Transportation Systems PROFESSOR DOROTHY J. GLANCY SANTA CLARA UNIVERSITY SCHOOL OF LAW

Transcription

1 How to Build Privacy into Intelligent Transportation Systems PROFESSOR DOROTHY J. GLANCY SANTA CLARA UNIVERSITY SCHOOL OF LAW University of Minnesota Center for Transportation Studies ITS Institute Advanced Transportation Technologies Seminar October 21, 2010

2 Roadmap The Matrix Current trends in privacy law and policy Transportation Matrices Two examples of privacy-smart ITS projects TravInfo, now 511 Driving Times SM Vehicle Infrastructure Integration Lessons learned October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 2

3 3

4 Trends in Privacy Law and Policy Mass surveillance GPS Vehicle Tracking October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 4

5 Mass Surveillance Privacy expectations in vehicles on roadways Gant v. Arizona 129 S.Ct (2009) Indianapolis v. Edmund 531 U.S. 32 (2000) Carroll v. United States 267 U.S. 280 (1925) European Court of Human Rights S. and Marper v. UK ( ) October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 5

6 GPS Vehicle Tracking Recent Fourth Amendment court decisions United States v. Jones 2010 U.S. App. LEXIS (D.C.Cir. August 6, 2010): People v. Weaver 12 N.Y. 3d 433 (N.Y. 2009) Commonwealth v. Connolly 454 Mass. 808, 913 N.E.2d 356 (Mass. 2009) Recent Polls about Tracking October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 6

7 Transportation Matrices IntelliDrive SM Vehicle Infrastructure Integration Interoperable Toll systems Event Data Recorders October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 7

8 It s All About Connectivity E-payment Transactions The Network Opportunit Bridge and Highway y for Innovation Tolls V2V Safety Messages Signal Phase and Timing Information Real Time Network Data Situation Relevant Information Probe Data Infrastructure Communications October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 8

9 Vehicle Infrastructure Integration Vehicle V2I MODEL OF DATA FLOW Infrastructure Basic Safety Message Broadcast SPaT and Related Messages Broadcast WAVE Service Announcement Broadcast Transaction Message Unicast Exchange DSRC, BSM DSRC Listener Traffic Signal Probe Data Safety app Authority DSRC, BSM Toll Safety app TBD radio Transponder Bank OEM Toll 9

10 Toll Systems participating in the Interoperability Forum sponsored by IBTTA October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 10

11 11 October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 11

12 Separate Payment Systems Toll Tag Transit Card Unless a user provides the same bank account or credit card for both October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 12

13 Potential Expansion of Event Data Recorders Vehicle Diagnostics DSRC Transceiver Highway Infrastructure or DSRC Transceiver attached to a mobile phone October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 13

14 Privacy-Smart ITS Projects TRAVINFO, now 511 Driving Times SM VEHICLE INFRASTRUCTURE INTEGRATION (VII) October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 14

15 TravInfo Metropolitan Transportation Commission San Francisco Bay Area Pilot Project Traveler Information System Calculating real time traffic flow from reading toll tags at non-toll locations Tag Identifiers Anonymized de-identified Retained only 24 hours October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 15

16 Driving Times SM and Toll Facilities HOT Lanes to open 2011 HOT Lanes opened September 2010 October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 16

17 Traffic Watch Toll Tag Data Collection QuickTime and a TIFF (Uncompressed) decompressor are needed to see this picture. FasTrak Customer Database Database BATA 5 Physical Access Physical Access yields: Personal Location Info Personal Information UDP/IP Encapsulated AT&T to Frame Relay Network 1 Sirit Reader Sirit Reader Protocol (Data) 915 MHz Protocol (Data) 850/1900 MHz GPRS Network Serial I/O UDP/IP Title 21 Protocol Sirit Reader Encapsulated 4 Exchanges Protocol (Control) Sirit Reader Sirit Title 21 Reader Protocol (Control) 2 3 October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 17

18 Internal Data Flow in Traffic Watch System GPRS Network October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 18

19 Recipients of Traffic Watch Data Encrypted Toll Tag Data Raw Data Aggregated & Summarized Data AT&T October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 19

20 Privacy Protections Privacy protection required by RFP De-identification anonymization Encryption Opt-out Option SB signed September 28, 2010 Effective January 1, 2011 $2500 minimum damages for misusing personal information collected by toll authorities October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 20

21 Vehicle Infrastructure Integration Initial Deployment Plan

22 HIA Here I Am Basic Safety Message October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 22

23 Vehicle Infrastructure Integration now part of IntelliDrive SM Focused on privacy at the beginning of the project Good managers Wise policy people VII Coalition complex public-private cooperation Privacy Advocates Roundtables bring privacy community into the process Privacy Policies Framework Privacy Principles Privacy Limits VII technology measured by these standards October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 23

24 VII Privacy Policies Framework TWO PARTS

25 Lessons Learned Pro-action is more effective than reaction Consult with Privacy advocates Transportation systems rarely need personal information Anonymous data is generally sufficient for traffic management and safety systems Segregate personally identifiable information (e.g., payment systems) and apply Fair Information Practices, plus Encryption De-identification Practical anonymity Short retention Collecting and sharing personal information can endanger an ITS project October 21, 2010 Avoiding the Matrix: How to Build Privacy into Intelligent Transportation Systems Professor Dorothy J. Glancy 25

26 I look forward to your questions and comments about PROFESSOR DOROTHY J. GLANCY SANTA CLARA UNIVERSITY SCHOOL OF LAW University of Minnesota Center for Transportation Studies ITS Institute Advanced Transportation Technologies Seminar October 21, 2010