User Configurable Privacy Requirements Elicitation in Cyber-Physical Systems

The combination of our need for efficient mobility systems coupled with cyber-physical systems has brought about the evolution of Mobility-as-a-Service (MaaS), integrating transport services to provide one-stop access through a custom interface. Our interactions with these MaaS systems lead to a surfeit of data generation and consumption. And for MaaS growth to be sustained, users’ trust in the system, especially in their data privacy, needs to be addressed. In this paper, we use LINDDUN privacy analysis framework to elicit privacy requirements of MaaS systems. We show how User-Dependent Analysis, i.e. modularizing complete use cases to different usage contexts and analysing these usages, can help guide us to discern that usage’s privacy requirements, which can be enacted by relevant MaaS participants.