老澳门开奖结果

The U.S. Department of Transportation on Monday that it is proceeding with an effort to reduce traffic accidents by creating a 鈥淰ehicle to Vehicle鈥� wireless infrastructure (known as V2V) through which cars can communicate with each other while on the roads and automatically avert certain accidents. Details can be found in this story by the , and in this in-depth look by .

What about the privacy implications? This is a technology that I鈥檝e been following since 2006, when I and some other privacy activists attended a briefing and feedback session sponsored by DOT. I recall saying some pretty severe things about some of the ideas that were presented. Since that time, the agency running this program, the National Highway Transportation Safety Administration, has shifted focus away from the idea of creating a network of sensors in the roadway (known as V2I, for 鈥淰ehicle to Infrastructure) in favor of V2V, apparently because V2I would simply be too expensive.

Still, the vision here is that every vehicle would be required to include a transponder that would transmit data about a vehicle鈥攗nencrypted鈥攕uch as its GPS location, heading, yaw, and how high above the ground it is (to deal with multi-story roadways). The system uses a specialized wireless protocol (DSRC, for 鈥淒edicated Short Range Communications鈥�)鈥攁 variant of WiFi with some modifications to allow for low-latency connections by fast-moving vehicles. It makes use of spectrum (5.9 GHz) allocated by the FCC for public safety applications.

So what are we to make of this from a privacy perspective? I guess I would make three related points:

• We don鈥檛 want this to become yet another vector for location tracking. It certainly has that potential. We鈥檝e already got our hands full trying to protect our privacy in the face of mobile phone tracking, license-plate readers, aerial surveillance, and GPS tracking.
• Cars under this system must not broadcast a unique identifier. My understanding is that the system will need to include certain rigorous authentication protocols to ensure that hackers can鈥檛 subvert the system and use it to cause accidents instead of prevent them. But the authentication headers need to be designed so they do not function as unique identifiers; with careful design, this should be entirely doable. (The security issues around automobiles are already becoming significant.)
• We also don鈥檛 want it used as an automated enforcement mechanism. Dorothy Glancy is a professor at Santa Clara Law who has worked on this issue for a long time (including as a consultant to the DOT), and has kept me updated on this issue over the years. She tells me that 鈥渢he automated enforcement people just love the idea of this. They鈥檙e asking, 鈥榃hy can鈥檛 I just read people鈥檚 speed and automatically just send them tickets?鈥欌�� I have written before about the problematic nature of automated law enforcement, as well as Americans鈥� notably ambivalent relationship to traffic enforcement.

As Glancy pointed out to me, the DOT鈥檚 Monday was vague on the privacy questions. It boasts that 鈥渟everal layers of security and privacy protection鈥� will ensure that V2V 鈥渄oes not involve exchanging or recording personal information or tracking vehicle movements.鈥� At the same time, it says that 鈥渁 vehicle or group of vehicles would be identifiable鈥� if 鈥渢here is a need to fix a safety problem.鈥�

Glancy was also quite surprised that the statement didn鈥檛 actually say anything about when this would become required. 鈥淭hey say they鈥檙e waiting for a research report, and then will work on a regulatory proposal,鈥� she pointed out. 鈥淏ut they鈥檝e been working on a regulatory proposal for years. The big news will be when they start to move to require this, and when they say exactly how the privacy and security side of this is going to work.鈥�

One final note: many privacy-invasive government projects and proposals are aimed at stopping terrorism鈥攂uilt around stopping what are basically very rare freak events, where the chances that the program will even be effective and the cost-benefit calculus are highly questionable. This, however, is different. Unfortunately, automobile accidents are NOT freak events. The number of annual fatalities on U.S. roadways is around 42,000. Can you imagine Americans tolerating 42,000 deaths a year from terrorism? There are roughly 6 million total traffic accidents a year, and the cost of all this is an estimated $230 billion a year.

We can鈥檛 be certain how effective these techniques will be in the end鈥擨 would expect a certain degree of to kick in, for example鈥攂ut Glancy tells me that 鈥渢he technology鈥檚 really very good at preventing right-angle collisions, which are very hard to see, especially at night, or because of shrubbery or what have you.鈥� And overall, the results of a large test in Michigan last year showed that the technology did work largely as hoped鈥攖hat DRSC was a good way to exchange data to avoid accidents, and that it worked not just in the lab but also in the real world.

So, unlike many anti-terrorism schemes, there seems to be plenty of reason to believe this system will prove effective. Considering the very real daily carnage and suffering out there on our roads each day, this is not a program where I would want to 鈥渏ust say no,鈥� privacy threat or not. Everyone knows of someone killed in a car crash. But there is no reason that we can鈥檛 get the safety benefits here while being consistent with our values by making sure that any system that鈥檚 rolled out has privacy hard-coded in, in ways that cannot easily be altered.