On-demand ride and ride-sharing services have revolutionized the point-to-point transportation market and they are rapidly gaining acceptance among customers worldwide. Alone, Uber and Lyft are providing over 11 million rides per day. These services are provided using a client-server infrastructure. The client is a smartphone-based application used for: i) registering riders and drivers, ii) connecting drivers with riders, iii) car-sharing to share the expenses, minimize traffic congestion and saving traveling time, iv) allowing customers to book their rides. The server typically, run by multinational companies such as Uber, Ola, Lyft, BlaBlaCar, manages drivers and customers registrations, allocates ride-assignments, sets tariffs, guarantees payments, ensures safety and security of riders, etc. However, the reliability of drivers have emerged as a critical problem, and as a consequence, issues related to riders safety and security have started surfacing. The lack of robust driver verification mechanisms has opened a room to an increasing number of misconducts (i.e., drivers subcontracting ride-assignments to an unauthorized person, registered drivers sharing their registration with other people whose eligibility to drive is not justified, etc.) [3, 4, 5]. This paper proposes DriverAuth-a novel risk-based multi-modal biometric-based authentication solution, to make the on-demand ride and ride-sharing services safer and more secure for riders. DriverAuth utilizes three biometric modalities, i.e., swipe, text-independent voice, and face, in a multi-modal fashion to verify the identity of registered drivers. We evaluated DriverAuth on a dataset of 10, 320 samples collected from 86 users and achieved a True Acceptance Rate (TAR) of 96.48% at False Acceptance Rate (FAR) of 0.02% using Ensemble Bagged Tree (EBT) classifier. Furthermore, the architecture used to design DriverAuth enables easy integration with most of the existing on-demand ride and ride-sharing systems.

DriverAuth: A risk-based multi-modal biometric-based driver authentication scheme for ride-sharing platforms / Gupta, Sandeep; Buriro, Attaullah; Crispo, Bruno. - In: COMPUTERS & SECURITY. - ISSN 0167-4048. - STAMPA. - 83:(2019), pp. 122-139. [10.1016/j.cose.2019.01.007]

DriverAuth: A risk-based multi-modal biometric-based driver authentication scheme for ride-sharing platforms

Gupta, Sandeep;Buriro, Attaullah;Crispo, Bruno
2019-01-01

Abstract

On-demand ride and ride-sharing services have revolutionized the point-to-point transportation market and they are rapidly gaining acceptance among customers worldwide. Alone, Uber and Lyft are providing over 11 million rides per day. These services are provided using a client-server infrastructure. The client is a smartphone-based application used for: i) registering riders and drivers, ii) connecting drivers with riders, iii) car-sharing to share the expenses, minimize traffic congestion and saving traveling time, iv) allowing customers to book their rides. The server typically, run by multinational companies such as Uber, Ola, Lyft, BlaBlaCar, manages drivers and customers registrations, allocates ride-assignments, sets tariffs, guarantees payments, ensures safety and security of riders, etc. However, the reliability of drivers have emerged as a critical problem, and as a consequence, issues related to riders safety and security have started surfacing. The lack of robust driver verification mechanisms has opened a room to an increasing number of misconducts (i.e., drivers subcontracting ride-assignments to an unauthorized person, registered drivers sharing their registration with other people whose eligibility to drive is not justified, etc.) [3, 4, 5]. This paper proposes DriverAuth-a novel risk-based multi-modal biometric-based authentication solution, to make the on-demand ride and ride-sharing services safer and more secure for riders. DriverAuth utilizes three biometric modalities, i.e., swipe, text-independent voice, and face, in a multi-modal fashion to verify the identity of registered drivers. We evaluated DriverAuth on a dataset of 10, 320 samples collected from 86 users and achieved a True Acceptance Rate (TAR) of 96.48% at False Acceptance Rate (FAR) of 0.02% using Ensemble Bagged Tree (EBT) classifier. Furthermore, the architecture used to design DriverAuth enables easy integration with most of the existing on-demand ride and ride-sharing systems.
2019
Gupta, Sandeep; Buriro, Attaullah; Crispo, Bruno
DriverAuth: A risk-based multi-modal biometric-based driver authentication scheme for ride-sharing platforms / Gupta, Sandeep; Buriro, Attaullah; Crispo, Bruno. - In: COMPUTERS & SECURITY. - ISSN 0167-4048. - STAMPA. - 83:(2019), pp. 122-139. [10.1016/j.cose.2019.01.007]
File in questo prodotto:
File Dimensione Formato  
1-s2.0-S0167404818310113-main.pdf

Solo gestori archivio

Tipologia: Versione editoriale (Publisher’s layout)
Licenza: Tutti i diritti riservati (All rights reserved)
Dimensione 3.71 MB
Formato Adobe PDF
3.71 MB Adobe PDF   Visualizza/Apri
DriverAuth_COSE.pdf

accesso aperto

Tipologia: Pre-print non referato (Non-refereed preprint)
Licenza: Tutti i diritti riservati (All rights reserved)
Dimensione 2.04 MB
Formato Adobe PDF
2.04 MB Adobe PDF Visualizza/Apri

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11572/235260
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 34
  • ???jsp.display-item.citation.isi??? 23
social impact