AI 中文总结
针对UBI系统的数据泄露、传感器异常及隐私与数据完整性难以兼顾的问题，提出基于Torus全同态加密与ISAC速度验证的SP2UBI方案，该轻量级框架可在保护隐私的同时保障数据完整性。
AI 中文摘要
基于使用量的保险（Usage-Based Insurance，UBI）的兴起，推动了传统汽车保险向以驾驶行为为定价依据的模式转变，传统保险则基于驾驶员年龄、事故数量等静态参数。与此同时，高分辨率远程信息处理数据的分析可能会泄露用户的行为和习惯，引发严重的隐私担忧。大多数隐私保护型UBI系统在协议生命周期的某个阶段都会面临投保人数据泄露的问题。此外，由于此类方法需要损害隐私的审计且未考虑预言机问题，确保数据免受可能的故意或无意传感器异常（如传感器欺骗或故障）的影响颇具挑战。为解决这些问题，我们提出了SP2UBI，一种保证相互保密性的隐私保护型UBI解决方案。SP2UBI以粗粒度统计形式收集远程信息处理数据，不含任何时空标识符，因此无法重建细粒度的移动轨迹。通过采用计算开销较低的Torus全同态加密方案，可直接对加密数据进行计算，保险公司无需访问任何敏感信息即可计算风险因素，同时其风险模型参数保持保密。为保护数据免受传感器层面的操纵，SP2UBI整合了由集成感知与通信（Integrated Sensing and Communications，ISAC）技术辅助的速度验证系统，该系统能够在保护用户隐私的同时检测欺诈行为。实验评估表明，协议执行一轮耗时41.2毫秒，说明我们的框架是轻量级的，且相比最先进的解决方案提供了更多的隐私保障。
英文摘要
The transition from traditional auto insurance, whose basis is defined by a set of static parameters, like the age of driver and number of accidents, to Usage-Based Insurance, whose pricing is based on driving behavior, was boosted by Intelligent Transportation Systems. At the same time, the analysis of high-resolution telematics data might reveal users' behavior and habits, which is associated with significant privacy concerns. The majority of privacy-preserving UBI systems are subject to policyholders' data leaks at some point during the life cycle of their protocol. Moreover, it is challenging to ensure data integrity against possible intentional or unintentional sensor anomalies (like sensor spoofing or malfunctioning) since the approaches used in this case require privacy-compromising audits and do not consider the oracle problem. In order to address the issues, we propose SP2UBI, a privacy-preserving UBI solution which guarantees mutual confidentiality. SP2UBI collects the telematics data in coarse-grained, statistical form without any spatiotemporal identifiers so that it is impossible to reconstruct fine-grained mobility traces. By utilizing the Torus Fully Homomorphic Encryption scheme, which incurs low computational overhead, computations are performed directly over encrypted data. This way, the insurer calculates risk factors without accessing any sensitive information, while parameters of its risk model are confidential. In order to protect data integrity against sensor level manipulation, SP2UBI incorporates a speed verification system assisted by Integrated Sensing and Communications (ISAC) technology which is capable of detecting fraud while preserving user privacy. Experimental evaluation shows that one round of protocol execution takes 41.2 ms, showing that our framework is lightweight and preserves more privacy guarantees compared to state-of-the-art solutions.
