Using Blockchain to Secure Passenger Name Records and Effectively Protect Citizen Rights
Michal Koutenský, Vladimír Veselý, Martin Perešíni, Daniel Dolejška, Jan Pluskal · 2024
Passenger Name Records (so called PNR) collected by airlines and processed by Passenger Information Units (dedicated police task force), are critical data in the prevention and successful investigation of terrorism, drug smuggling, human trafficking and other serious crimes. This work addresses the challenges of building a blockchain-based, tamper-proof system for PNR data exchange between different Passenger Information Units. Utilizing Hyperledger Fabric, we propose a decentralized architecture that ensures data confidentiality, traceability, and non-repudiation in order to maintain the chain of custody. Our solution includes a private data collection mechanism and an offchain storage system to manage sensitive information securely. The resulting design and implementation are incorporated into the TENACITy project platform and further integrated with its other modules to use travel intelligence data in the fight against crime. The blockchain subsystem facilitates a secure, auditable exchange of PNR data, with the key benefit being compliance with European Union regulations on the protection and retention of personal data. This paper contributes to the field by demonstrating the practical application of blockchain technology in a sensitive data exchange scenario, offering insights into system design, implementation challenges, and potential future enhancements.