The Golden Gate Bridge is Watching YouSeth Schoen The current implementation of electronic tolling here (and elsewhere) is unnecessarily privacy-invasive and represents a missed opportunity to collect tolls electronically in more privacy-friendly ways. Since March 27, motorists entering San Francisco have three different payment options. One option involves recognizing an RFID token in the motorists vehicle, while the remaining two use a camera to photograph and recognize the license plate. (A cute new animation [YouTube link] from the bridge operator explains the options, though not their privacy consequences.) Motorists can sign up for a FasTrak RFID token, placed on the dashboard or under the windshield of their cars. The FasTrak system has operated for bridge-toll collection in California since 1997 and been available as an option for paying tolls on the Golden Gate Bridge since 2000. FasTrak subscribers must register an account (giving their legal names and license plate numbers, among other information) and obtain a token; as a car passes through the toll gates, an RFID reader detects the tokens presence, reads its serial number, and debits the corresponding prepaid toll accounts. At the same time, a record is created in the FasTrak database. Motorists who havent preregistered with either FasTrak or the license plate account system also have their license plates photographed as they pass through the toll gate. In this case, the Golden Gate Bridge toll operator will work with the Department of Motor Vehicles to send an invoice in the mail (akin to a parking or speeding ticket, but not including a fine or penalty). They must then pay the invoice by mail or online. Yesterdays change involved phasing out the traditional cash payment option, and expanding the use of existing license-plate recognition technology. As the Wall Street Journal explained last year in an in-depth report, this technology has become widely used by police and law enforcement, municipalities, and even private companies. (Just on the other side of the bridge, beautiful Tiburon, CA, already uses license plate readers to track every car entering or leavingvia the few roads leading in and out of town.) The Golden Gate Bridge already had license plate readers in place, but in the past they were used only to ticket motorists who tried to evade tolls; now, theyve been made a routine part of the toll-collection infrastructure itself. Though the physical infrastructure hasnt changed much, a significant shift has taken place in the purpose to which license plate recognition is being putfrom a tool to catch a tiny minority of law-evaders to a routine, automatic part of the payment process. The privacy loss from creating a database of who crosses the bridge (and other toll roads and bridges across California) is considerable, though as the Journal noted, creating such records is only one example of how storing and studying peoples everyday activities,even the seemingly mundane, has become the default rather than the exception. Subpoenas to access FasTrak data for purposes other than toll collection have become a trendeven in contested divorce cases. The tragedy in all of this is that most of these privacy harms could have been (and could still be) avoided while still achieving the benefits of electronic tolling. Toll collectors just need to decide that not collecting the identities of those whove paid their tolls should be a priority. At the simplest level, FasTrak could easily allow people to purchase prepaid transponders for cash at a kiosk or grocery store, and use them without registering them to a particular vehicle or namejust as the Bay Areas mass transit card, Clipper, does1. (There are a number of other privacy and security concerns about FasTrak, which is using a pretty basic technology, perhaps since its design has changed so little over the fifteen years its been in use.) There are also higher-tech privacy solutions available. David Chaum published a cryptographic technique thirty years ago that can be used for anonymous electronic payments with many of the properties of cash; dozens of refinements to Chaums methods have been discovered in the meantime, and theres a thriving field of research on privacy-preserving electronic toll collection. Many modern designs allow much more complex forms of toll collection (like congestion and per-kilometer charges), yet without creating an extensive database of who went where when. Our 2009 white paper on locational privacy and transportation emphasizes some of the ways that technology can solve these problems without taking away the benefits of electronic paymentsif transportation infrastructure providers and the public recognize that privacy needs to be protected. You can open your account with cash, money order, or cashiers check. A Representative will be able to open your account without requiring customer name, address or vehicle information. (If you try to open an account online, your name, address and vehicle information will be required.) This option could benefit from much more publicity (and convenience). But thanks are due to FasTrak for offering it. linkwithin_text=Related Articles: 