Security and Privacy Issues in Mobility-as-a-Service (MaaS): A Systematic Review

Amid climate change challenges, rethinking transportation has become crucial. Mobility-as-a-Service (MaaS) emerges as a sustainable alternative to individual car use, offering eco-friendly multimodal options. MaaS operates as a system of systems, integrating data producers, backend systems, third-party providers, and endpoints to provide comprehensive mobility solutions. This complex integration requires adequate security and privacy measures to protect users and their data. While existing studies address security and privacy challenges in MaaS, a comprehensive review is lacking. Our study fills this gap by presenting a systematic review on the state-of-the-art of security and privacy issues in MaaS. In doing so, we identify common themes such as data security, single-point-of-failure, privacy issues, security design flaws, insider threats, spoofing, and denial of service. We also highlight challenges in identity management, interoperability, single intermediaries, privacy and data sharing, paving the way for future research.