PriTKT: A Blockchain-Enhanced Privacy-Preserving Electronic Ticket System for IoT Devices

Yonghua Zhan,Feng Yuan,Rui Shi,Guozhen Shi,Chen Dong

DOI: https://doi.org/10.3390/s24020496

IF: 3.9

2024-01-14

Sensors

Abstract:Electronic tickets (e-tickets) are gradually being adopted as a substitute for paper-based tickets to bring convenience to customers, corporations, and governments. However, their adoption faces a number of practical challenges, such as flexibility, privacy, secure storage, and inability to deploy on IoT devices such as smartphones. These concerns motivate the current research on e-ticket systems, which seeks to ensure the unforgeability and authenticity of e-tickets while simultaneously protecting user privacy. Many existing schemes cannot fully satisfy all these requirements. To improve on the current state-of-the-art solutions, this paper constructs a blockchain-enhanced privacy-preserving e-ticket system for IoT devices, dubbed PriTKT, which is based on blockchain, structure-preserving signatures (SPS), unlinkable redactable signatures (URS), and zero-knowledge proofs (ZKP). It supports flexible policy-based ticket purchasing and ensures user unlinkability. According to the data minimization and revealing principle of GDPR, PriTKT empowers users to selectively disclose subsets of (necessary) attributes to sellers as long as the disclosed attributes satisfy ticket purchasing policies. In addition, benefiting from the decentralization and immutability of blockchain, effective detection and efficient tracing of double spending of e-tickets are supported in PriTKT. Considering the impracticality of existing e-tickets schemes with burdensome ZKPs, we replace them with URS/SPS or efficient ZKP to significantly improve the efficiency of ticket issuing and make it suitable for use on smartphones.

engineering, electrical & electronic,chemistry, analytical,instruments & instrumentation

What problem does this paper attempt to address?

### Problems Addressed by the Paper

The paper proposes a blockchain-enhanced privacy-preserving electronic ticketing system named PriTKT, primarily targeting IoT devices (such as smartphones). It aims to address several key issues in existing electronic ticketing systems:

1. **Privacy Protection**: In current electronic ticketing systems, users' personal information (such as name, ID number, purchase date, etc.) may be collected and misused. Therefore, this system aims to reduce the collection of personal data and ensure user privacy is protected.

2. **Attribute-Based Ticket Issuance**: Many existing systems do not support attribute-based ticket issuance protocols. PriTKT supports issuing tickets based on user attributes (such as age, disability status, etc.), allowing users to enjoy discounts without revealing sensitive information.

3. **Efficiency Improvement**: To accommodate IoT devices (such as smartphones), the system significantly reduces the computational cost and communication overhead of the ticket issuance algorithm, making the system more efficient.

4. **Prevention of Double-Spending Attacks**: Through blockchain technology, double-spending attacks on electronic tickets can be effectively detected and tracked, ensuring the security and transparency of transactions.

5. **Anonymity and Anti-Framing**: The system guarantees the unlinkability of tickets and ensures that malicious sellers cannot frame honest users for double-spending attacks.

In summary, the paper aims to build an efficient, secure, and privacy-preserving electronic ticketing system suitable for IoT devices, addressing multiple shortcomings of existing systems.