Folien Einfhrung Sensibilisierung

1
Dark clouds over travellers privacyThe
challenge
Jean-Marie WilligensDeutsche Lufthansa AG
Cologne cgndsb_at_dlh.de
2

• The lost paradise
• . We only know the name of our passengers (we
  need to, we have name contracts!)
• We live in a nice protected oligopoly, prices are
  set and services standardised
• We make money out of 65 load factors
• Premiums, miles, upgrades and rebates have not
  been invented nor autorised, why should we know
  our customers?
• We bring nice german tourists and investors with
  us, they are heartily welcome....nobody asks for
  data!
• This was around 1970-1980...

3
The industry trends after exile from Eden

• Deregulation strong competition
• Globalisation hub building
• Over-average industry growth
• Individual marketing and customer orientation
• Strong pressure on prices and cost
• Strong call for optimisation/automation in new
  customer and passenger processes

4
Do we have more data?

• We sell much more by credit card, so we need
  access to card holder data
• We offer seamless travel and need to pass more
  service data to more partners
• We enhance CRM-marketing so we need customer data
  about profile and preference
• We do a lot of "mileage" marketing, so we need
  frequent traveller history

• But basically the minimum requirement is still
  only for having just a name for one "travel", the
  so-called name entry in a PNR

5
The regulatory environment

• Pre-2001
• Liberal
• Visa-freedom extensions
• "Blue-line" for voluntary
• API participants
• Very loose international cooperation
• Spot-check controls

• Post 2001 (9/11)
• Restrictive
• "Visa" schemes
• API mandatory, "blue line" only for selected
  "trusted travellers"
• International actionism
• Exhaustive controls
• Frentic data hunger

6
Some genuine "states" concerns

• Globalisation and hubbing have changed traffic
  patterns. Terrorists and illegal migrants come
  from/via everywhere
• True origin of passenger cannot always be
  determined
• Higher traffic and inadequate airport layout
  render exhaustive post-arrival controls
  inadequate
• "lower administrations" joining on the bandwaggon
  of security and immigration, hunting for
  smugglers and other lesser criminals.

7
Legitimate data for genuine concerns tentative
ranking

• Identity data (Name/passport/nationality)
• Travel data about origin, destination/connections
• Additional travel data about flight documents,
  payment, baggage.
• "Behavior data" for data-mining based profiling,
  eg seat number, Special Service Requests,
  frequent flyer details
• Remark Airlines do not normally have Item 1 gtgt
  implies extra capture

8
Legitimate data for genuine concerns tentative
ranking

• Identity data (Name/passport/nationality)
• Travel data about origin, destination/connections
• Additional travel data about flight documents,
  payment, baggage.
• "Behavior data" for data-mining based profiling,
  eg seat number, Special Service Requests,
  frequent flyer details
• Remark Airlines do not normally have Item 1 gtgt
  implies extra capture

9
Legitimate data for genuine concerns Current
trends

• Identity data (Name/passport/nationality) gt
  APIS (Passenger manifest)
• Travel data about origin, destination/connections
  Additional travel data about flight documents,
  payment, baggage gt Pushed PNR/CKI
• "Behavior data" for data-mining based profiling,
  eg seat number, Special Service Requests,
  frequent flyer details gt Hopefully USA
  remaining exceptional case

10
The trends ahead/The airlines

• Cost and capacity pressures the airlines into
  further " E-ising" E-Tix, E-Booking, E-CRM
  (IATA-Project Simplifying Passenger Travel No
  more paper tickets)
• Strong authentication required
• More interaction ("E-dialog") with passenger
• Governments ready to ease pressure on "trusted
  persons", provided
• Strong authentication guaranteed
• gt The upcoming trend Bio and more...

11
check-in
boarding
Airline
Airport security
Police
12
check-in
boarding
Airline
Airport security
Police
13
Booking
check-in
PNR
boarding
Airline
Airport security
Police
APIS
14
The menace



CKI
CRS
CRM
Xtra capture/passport
PNR CKI Customer Passport ID Bio
Uncontrollable look-up by
tax
others
customs
police
immigration
15
Enters the bio-chip card
check-in
boarding
Airline
Airport security
Police
16
Enters the bio-chip card
check-in
boarding
Airline
x
Airport security
Police
RFID?
17
The future badge's layers
credit card
customer
passport/ID
bio template
18
The future badge's layers, an alternative
Customer/ credit card
"trusted" card
passport/ID
bio template
19
Some basics

• One card gtgt Long term No paper
• Each layer independent
• Each layer with specific privacy rules
• Each layer resp. set of layers only accessible by
  "relevant" applications
• Each layer managed individually by holder
• Common authentication via bio

20
Some conditions

• Travellers' acceptance
• Process improvements and savings
• Reliability
• Effective privacy protection
• Compatibility with tools and concepts on
  government side
• Progressive standardisation