Securing the future: How Web3 empowers privacy in green cars

AS BITCOIN crosses US$100,000, interest in Web3 extends beyond cryptocurrency speculation to innovations such as green cars security. These green vehicles are not only technological marvels but also data generators, pivotal as the global automobile sector evolves towards sustainability. Advanced sensors in these vehicles amass vast data ranging from driving habits to fleet performance indicators, raising concerns about privacy infringements. The adoption of Web3 technologies addresses these concerns by embodying the cypherpunk ethos, ensuring personal data protection while maintaining transparency about data usage. These measures transform the vehicle into a secure, efficient mobile fort, not merely a means of transport.

Originating in the early 1990s, the cypherpunk movement advocates for the robust use of cryptography to protect individual privacy against authoritarian oversight in the digital age. The movement is grounded in a simple yet profound philosophy: “privacy for the weak, transparency for the powerful”. This ideology holds that every person has the right to privacy, safeguarding their data and communications from undue interference, while demanding that digital empires, institutions and authorities conduct their operations transparently, subject to public oversight. The overarching goal is to curb power abuses and enhance accountability, particularly critical in an age where artificial intelligence (AI) tends to consolidate power rather than distribute it equitably.

Federated computing boosts privacy in EVs

Federated computing, while a transformative privacy-first approach in machine learning across various sectors, has yet to find its footing in the electric vehicle (EV) industry. This approach enables multiple parties, including carmakers and technology developers, to collaboratively enhance models without sharing the underlying raw data. Instead, each entity retains its own data, sharing only processed results to further product development and safeguard user privacy.

Although not currently utilised in EVs, the potential applications of federated computing in this field are promising. For instance, it could process sensitive data directly within each vehicle, sharply lowering the risk of data breaches. Vehicles might independently assess battery usage to optimise performance, subsequently sharing anonymised insights with manufacturers. This would aid in refining battery management systems while complying with stringent privacy standards.

Additionally, federated computing could enable predictive maintenance and enhanced navigation capabilities without compromising personal data. Vehicles could independently predict maintenance needs and analyse road conditions, relaying processed data back to central navigation systems to recommend the most efficient routes in real time. Such advancements would not only uphold privacy but also enhance urban planning and air quality by optimising transportation systems.

Enhancing car security with Trusted Execution Environments

Trusted Execution Environments (TEEs) are proving crucial in bolstering the cybersecurity of increasingly data-dependent green vehicles. TEEs, which operate in a secure area of a car’s main processor, protect the confidentiality and integrity of data by shielding it from unauthorised access and external threats.

As green cars evolve, their operation heavily relies on data integrity and privacy. For instance, if the Over-The-Air (OTA) software updates – used to improve vehicle functionality – are compromised, it could put drivers at significant risk. However, by implementing TEEs in managing these updates, cars are safeguarded against such external threats. Software updates are rigorously verified before installation, preventing unauthorised changes and the introduction of malicious programs. This not only protects the system’s safety but also ensures the privacy of drivers.

In comparison, traditional car security systems often lack the sophisticated isolation provided by TEEs. These older systems are generally based on simpler software protections, which do not offer the same level of security. TEEs, by contrast, create a hardware-based security layer that distinctly separates sensitive operations and data from other processes, significantly enhancing a vehicle’s cybersecurity.

TEEs also find important applications in secure payment processing, particularly at EV charging stations. By integrating TEEs into the charging network, the safety of transactions is assured. Sensitive payment information, such as credit card details, is stored securely within the TEE, shielding it from potential cyberattacks or unauthorised access. This security measure not only makes the charging process smoother but also boosts consumer confidence, potentially accelerating the adoption of EVs by ensuring transaction safety.

Advancements in data security with Fully Homomorphic Encryption

Fully Homomorphic Encryption (FHE) is a ground-breaking technology that enables the processing of encrypted data without the need to decrypt it first, significantly enhancing security during data processing. This capability is particularly crucial as it shields sensitive data from hackers, who typically exploit moments when data is decrypted for processing.

Recently, FHE has been tested through three distributed competitions within a smart mobility environment. An academic evaluation highlighted that the latest advancements in FHE technology only add about 100 milliseconds to transaction times and cost less than 3 microcents per transaction. These findings underscore FHE’s potential as a cost-effective and efficient solution for maintaining privacy in smart mobility systems.

This technology not only secures data against external threats but also ensures that privacy is maintained without compromising system performance, marking a significant step forward in the evolution of data security technologies.

Zero Knowledge Proofs: Enhancing privacy in green car insurance and security

Zero Knowledge Proofs (ZK proofs) represent a sophisticated form of cryptography that enables one party to prove the truth of a statement to another without disclosing any more information than what is absolutely necessary for the proof. This characteristic of ZK proofs is invaluable for maintaining privacy while fulfilling specific verification needs.

In the realm of eco-friendly cars, ZK proofs are innovatively applied in the insurance sector to bolster both privacy and security. For instance, they allow insurance companies to verify whether a driver qualifies for “good driver” discounts based on safe driving habits, without needing to access or reveal any personal details about the drivers’ routes or behaviours. This method ensures that drivers can benefit from reduced insurance costs based on their driving records while their privacy remains intact.

Additionally, ZK proofs are used to control access to certain vehicle functions or services securely. They can confirm authorised identities without requiring the owners to expose sensitive personal data, safeguarding both the anonymity and security of users. This application of ZK proofs is helping to redefine privacy and security standards in the automotive industry, making green vehicles safer and more user-friendly.

Multi-party Computation: Securing privacy in transportation and charging systems

Multi-party Computation (MPC) is a sophisticated cryptographic technique that allows multiple parties to jointly process computations on their individual inputs without revealing those inputs to each other. This ensures the output is both accurate and secure from tampering, making MPC a valuable tool in applications ranging from electronic voting and digital auctions to data mining and asset custody.

In transportation, MPC offers significant benefits. For instance, vehicles equipped with MPC technology can send encrypted data such as speeds and positions to a central server without disclosing individual details to other parties. By aggregating this data, navigation systems can then assist drivers in finding more efficient routes or the nearest available charging stations, enhancing both privacy and transportation efficiency.

Unlike traditional cloud computing, which requires data to be decrypted before processing – raising the risk of data breaches – MPC keeps data encrypted during computation, reducing the likelihood of unauthorised access. This is particularly relevant for EV charging systems, where sensitive information such as location, duration, and fees must be handled securely. With MPC, only the parties involved in the computation can access their inputs and the results, safeguarding the privacy of all stakeholders and boosting the security of charging station recommendations.

Furthermore, integrating MPC with Fully Homomorphic Encryption (FHE) can distribute the computational load among multiple parties, enhancing the efficiency and scalability of data operations without the need to decrypt data. This combination is particularly innovative for recommending charging stations, proving that the fusion of FHE and MPC not only protects privacy but also improves overall system efficiency.

Potential risks and challenges

It is true that integrating Web3 technologies is a transformative advantage for green vehicles, but also poses a lot of complexities and challenges. These technologies are inherently complex and require high levels of technical expertise and innovation, which may be expensive to develop and deploy. The investment needed goes beyond financial commitments to embrace extensive research and interoperability efforts. Successful implementation of these technologies requires extensive collaboration across many sectors, including car manufacturers, technology providers, regulators, and cybersecurity experts. Every stakeholder plays an important role in the ecosystem as they work together to bridge emerging technology with practical automotive applications.

Regulatory compliance is also a considerable challenge. Because these technologies work with private user information and significantly affect the safety and consistency of a vehicle, they are required to comply with strict regulatory standards that can vary greatly from one region to another. To manoeuvre through this intricate legislative minefield, technology development must be flexible yet strong enough to meet all the necessary rules on privacy, data protection, or vehicle safety differing across jurisdictions.

Furthermore, there is an ongoing dependence on sophisticated cybersecurity measures. As cyber threats advance, this industry needs to upgrade its security procedures constantly. This ever-changing situation calls for regular updating and thorough assessment of security practices, as well as safeguarding sensitive data and maintaining vehicle functionality unhampered. An agile, proactive cybersecurity strategy is necessary for keeping Web3 technologies intact and ensuring vehicle users’ safety.

Despite the critical importance of privacy protection, there is currently a lack of awareness of this issue among both consumers and manufacturers. The use of Web3 technologies to improve privacy protection is of great importance for safeguarding user rights, preventing data misuse, and maintaining personal freedom. In the current information age, personal data is a valuable commodity. Vehicles, like mobile smart devices, collect a vast amount of sensitive information, including location data, driving habits, and even personal conversations. However, most consumers are not yet aware of the potential risks and long-term impacts of privacy breaches, nor are privacy protection features considered as a primary factor when purchasing a vehicle. Electrical vehicle manufacturers lack the motivation to invest in technologies that protect privacy as these endeavours cannot bring obvious market advantages. To solve this problem, public education about the importance of data privacy is important. Besides, it is necessary to encourage manufacturers to consider data privacy as a core value to differentiate themselves from other brands. Only when consumers care about data protection would manufacturers be willing to invest resources to boost innovation and development.

Conclusion

Green cars equipped with Web3 technologies represent the future of sustainable automotive technology, enhancing both functionality and user privacy. Crucial elements such as federated computing, Trusted Execution Environments (TEEs), Zero-Knowledge proofs (ZKs), and Multi-Party Computation (MPCs) play a pivotal role in this evolution. As vehicles increasingly rely on data, these technologies ensure that the pursuit of sustainability does not compromise privacy, thereby building user confidence and enhancing the overall security and safety of the automotive industry.

Although privacy might not be the initial driving force behind the adoption of these technologies, broader security concerns could indeed catalyse their integration. In the modern era, the sale of green vehicles transcends the mere act of selling a car; it involves providing a secure mobile computing environment. This perspective treats vehicles as mobile chips or free-roaming devices with significant data and security ramifications. In more extreme scenarios, certain countries might view these centrally controlled mobile devices, particularly cars, as potential threats or weapons. This apprehension could prompt a shift towards adopting Web3 technologies with Public Private Key infrastructures and distributed computing to mitigate concerns about weaponisation. No government will like to see a moving self-driving car controlled by a centralised computing and data platform that can potentially be turned into a weapon.

As these technologies continue to develop, addressing potential risks will pave the way for a more human-centred mobility system. Singapore, with its politically neutral economy, is uniquely positioned to lead this charge. By adopting these advanced security technologies, Singapore could become a global champion for security governance in the automotive sector, setting a benchmark for others to follow.

David Lee Kuo Chuen is a professor at the Singapore University of Social Sciences (SUSS). Zheng Jincheng was, until recently, a research fellow at SUSS. Rayaan Niaz, a student at Singapore American School, is a research assistant at SUSS and at the National University of Singapore.