2025/07/22 by Sebastian Pape, Anis Bkakria, Pape, Sebastian +13
Engineering · #Automotive industry #Control (management) #Cryptography and Security (cs.CR) #Domain (mathematical analysis) #FOS: Computer and information sciences #Information privacy #Privacy by Design #Process (computing) #Radiation Effects in Electronics #Safety Systems Engineering in Autonomy #Vehicular Ad Hoc Networks (VANETs)
paper · pdf · doi:10.48550/arxiv.2507.16788
published in arXiv (Cornell University) (Cornell University)
openalex publication_date 2025/07/22 · openalex created_date 2025/10/10 · openalex updated_date 2026/08/05
With the General Data Protection Regulation (GDPR) in place, all domains have to ensure compliance with privacy legislation. However, compliance does not necessarily result in a privacy-friendly system as for example getting users' consent to process their data does not improve the privacy-friendliness of the system. Therefore, the goal of the AUTOPSY project was to support the privacy engineering process in the automotive domain by providing several building blocks which technically improve the privacy-friendliness of modern, i.e., connected and (partially) automated vehicles. This paper presents the results of the AUTOPSY project: a system model to identify relevant entities and locations to apply privacy enhancing technologies (PETs); the privacy manager aiming at more control of the data flow from the vehicle, a PET selection approach based on GDPR principles, and an architectural framework for automotive privacy. Furthermore, we built a demonstrator for location-based services to evaluate the architectural framework.