Towards a Privacy Resilient Mobility-as-a-Service (MaaS): A Threat-driven Approach

Mobility-as-a-Service (MaaS) is transforming smart cities by promoting affordability, inclusivity, multimodal efficiency, and environmental sustainability. This platform collects, uses, and shares sensitive user information, such as geolocation, payment, and personal data, to enable its service offerings. These information are valuable targets for attackers; thus, securing them requires a holistic approach that addresses the platform's security and privacy requirements. However, despite the growing adoption of MaaS, their privacy risk assessment is still an open issue. In this study, we present a threat-driven approach that leverages LINDDUN privacy threat analysis to support the Threat, Vulnerability, and Risk Assessment (TVRA) methodology. We demonstrate the utility of our approach through a simple case study of the trip booking fulfillment process. The main result of this study, alongside the threat-driven approach, is the identification of twenty soft privacy threats in MaaS and their corresponding controls. Additionally, leveraging the NIST 800-53 framework, our study extends privacy risk assessment literature by addressing specific privacy risks in MaaS.