Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces SP2UBI, a privacy-preserving Usage-Based Insurance (UBI) framework that leverages coarse-grained telematics data and Torus Fully Homomorphic Encryption to ensure mutual confidentiality between insurers and policyholders. By avoiding the use of spatiotemporal identifiers, SP2UBI mitigates the risk of reconstructing detailed mobility traces, addressing significant privacy concerns in traditional UBI systems. Experimental results demonstrate that SP2UBI operates efficiently, with a protocol execution time of just 41.2 ms, while offering enhanced privacy guarantees over existing solutions.
SP2UBI achieves mutual confidentiality in UBI by processing encrypted telematics data without compromising user privacy, setting a new standard for secure insurance models.
The transition from traditional auto insurance, whose basis is defined by a set of static parameters, like the age of driver and number of accidents, to Usage-Based Insurance, whose pricing is based on driving behavior, was boosted by Intelligent Transportation Systems. At the same time, the analysis of high-resolution telematics data might reveal users' behavior and habits, which is associated with significant privacy concerns. The majority of privacy-preserving UBI systems are subject to policyholders' data leaks at some point during the life cycle of their protocol. Moreover, it is challenging to ensure data integrity against possible intentional or unintentional sensor anomalies (like sensor spoofing or malfunctioning) since the approaches used in this case require privacy-compromising audits and do not consider the oracle problem. In order to address the issues, we propose SP2UBI, a privacy-preserving UBI solution which guarantees mutual confidentiality. SP2UBI collects the telematics data in coarse-grained, statistical form without any spatiotemporal identifiers so that it is impossible to reconstruct fine-grained mobility traces. By utilizing the Torus Fully Homomorphic Encryption scheme, which incurs low computational overhead, computations are performed directly over encrypted data. This way, the insurer calculates risk factors without accessing any sensitive information, while parameters of its risk model are confidential. In order to protect data integrity against sensor level manipulation, SP2UBI incorporates a speed verification system assisted by Integrated Sensing and Communications (ISAC) technology which is capable of detecting fraud while preserving user privacy. Experimental evaluation shows that one round of protocol execution takes 41.2 ms, showing that our framework is lightweight and preserves more privacy guarantees compared to state-of-the-art solutions.