{"id":"https://openalex.org/W4411495153","doi":"https://doi.org/10.3390/info16070514","title":"A Systematic Literature Review on Cyber Security and Privacy Risks in MaaS (Mobility-as-a-Service) Systems","display_name":"A Systematic Literature Review on Cyber Security and Privacy Risks in MaaS (Mobility-as-a-Service) Systems","publication_year":2025,"publication_date":"2025-06-20","ids":{"openalex":"https://openalex.org/W4411495153","doi":"https://doi.org/10.3390/info16070514"},"language":"en","primary_location":{"id":"doi:10.3390/info16070514","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16070514","pdf_url":"https://www.mdpi.com/2078-2489/16/7/514/pdf?version=1750413853","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2078-2489/16/7/514/pdf?version=1750413853","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068404894","display_name":"Rahime Belen-Saglam","orcid":"https://orcid.org/0000-0002-6969-6451"},"institutions":[{"id":"https://openalex.org/I157227730","display_name":"University of East London","ror":"https://ror.org/057jrqr44","country_code":"GB","type":"education","lineage":["https://openalex.org/I157227730"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Rahime Belen-Saglam","raw_affiliation_strings":["Computer Science and Digital Technologies, University of East London, London E16 2RD, UK"],"raw_orcid":"https://orcid.org/0000-0002-6969-6451","affiliations":[{"raw_affiliation_string":"Computer Science and Digital Technologies, University of East London, London E16 2RD, UK","institution_ids":["https://openalex.org/I157227730"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001627689","display_name":"Haiyue Yuan","orcid":"https://orcid.org/0000-0001-6084-6719"},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Haiyue Yuan","raw_affiliation_strings":["Institute of Cyber Security for Society (iCSS) & School of Computing, University of Kent, Canterbury CT2 7NP, UK"],"raw_orcid":"https://orcid.org/0000-0001-6084-6719","affiliations":[{"raw_affiliation_string":"Institute of Cyber Security for Society (iCSS) & School of Computing, University of Kent, Canterbury CT2 7NP, UK","institution_ids":["https://openalex.org/I20581793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036733824","display_name":"Maria Sophia Heering","orcid":"https://orcid.org/0000-0002-5755-5256"},"institutions":[{"id":"https://openalex.org/I9360294","display_name":"University of Bologna","ror":"https://ror.org/01111rn36","country_code":"IT","type":"education","lineage":["https://openalex.org/I9360294"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Maria Sophia Heering","raw_affiliation_strings":["Department of Psychology, Alma Mater Studiorum University of Bologna, 40126 Bologna, Italy"],"raw_orcid":"https://orcid.org/0000-0002-5755-5256","affiliations":[{"raw_affiliation_string":"Department of Psychology, Alma Mater Studiorum University of Bologna, 40126 Bologna, Italy","institution_ids":["https://openalex.org/I9360294"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5118515009","display_name":"Ramsha Ashraf","orcid":"https://orcid.org/0000-0002-0057-9994"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ramsha Ashraf","raw_affiliation_strings":["Faculty of Politics and International Relations, Northeastern University London, London E1W 1LP, UK"],"raw_orcid":"https://orcid.org/0000-0002-0057-9994","affiliations":[{"raw_affiliation_string":"Faculty of Politics and International Relations, Northeastern University London, London E1W 1LP, UK","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100745576","display_name":"Shujun Li","orcid":"https://orcid.org/0000-0001-5628-7328"},"institutions":[{"id":"https://openalex.org/I20581793","display_name":"University of Kent","ror":"https://ror.org/00xkeyj56","country_code":"GB","type":"education","lineage":["https://openalex.org/I20581793"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Shujun Li","raw_affiliation_strings":["Institute of Cyber Security for Society (iCSS) & School of Computing, University of Kent, Canterbury CT2 7NP, UK"],"raw_orcid":"https://orcid.org/0000-0001-5628-7328","affiliations":[{"raw_affiliation_string":"Institute of Cyber Security for Society (iCSS) & School of Computing, University of Kent, Canterbury CT2 7NP, UK","institution_ids":["https://openalex.org/I20581793"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5068404894"],"corresponding_institution_ids":["https://openalex.org/I157227730"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1515},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1515},"fwci":2.6093,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.89522463,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"16","issue":"7","first_page":"514","last_page":"514"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11942","display_name":"Transportation and Mobility Innovations","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/2203","display_name":"Automotive Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11942","display_name":"Transportation and Mobility Innovations","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/2203","display_name":"Automotive Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12392","display_name":"Sharing Economy and Platforms","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1406","display_name":"Marketing"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.6621161699295044},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.6045557856559753},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5445182919502258},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5315102338790894},{"id":"https://openalex.org/keywords/service-provider","display_name":"Service provider","score":0.5080351829528809},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.5012240409851074},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.4671337902545929},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.44863057136535645},{"id":"https://openalex.org/keywords/privacy-by-design","display_name":"Privacy by Design","score":0.42661529779434204},{"id":"https://openalex.org/keywords/personally-identifiable-information","display_name":"Personally identifiable information","score":0.4266054928302765},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3098914623260498},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.07917061448097229}],"concepts":[{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.6621161699295044},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.6045557856559753},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5445182919502258},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5315102338790894},{"id":"https://openalex.org/C116537","wikidata":"https://www.wikidata.org/wiki/Q2169973","display_name":"Service provider","level":3,"score":0.5080351829528809},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.5012240409851074},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.4671337902545929},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.44863057136535645},{"id":"https://openalex.org/C193934123","wikidata":"https://www.wikidata.org/wiki/Q7246028","display_name":"Privacy by Design","level":3,"score":0.42661529779434204},{"id":"https://openalex.org/C169093310","wikidata":"https://www.wikidata.org/wiki/Q3702971","display_name":"Personally identifiable information","level":2,"score":0.4266054928302765},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3098914623260498},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.07917061448097229},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/info16070514","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16070514","pdf_url":"https://www.mdpi.com/2078-2489/16/7/514/pdf?version=1750413853","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},{"id":"pmh:oai:kar.kent.ac.uk:110347","is_oa":false,"landing_page_url":"https://doi.org/10.3390/info16070514>)","pdf_url":null,"source":{"id":"https://openalex.org/S4377196264","display_name":"Kent Academic Repository (University of Kent)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I20581793","host_organization_name":"University of Kent","host_organization_lineage":["https://openalex.org/I20581793"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"PeerReviewed"},{"id":"pmh:oai:doaj.org/article:e1218fd3821c4ab78d01c7eb9bb47214","is_oa":true,"landing_page_url":"https://doaj.org/article/e1218fd3821c4ab78d01c7eb9bb47214","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Information, Vol 16, Iss 7, p 514 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/info16070514","is_oa":true,"landing_page_url":"https://doi.org/10.3390/info16070514","pdf_url":"https://www.mdpi.com/2078-2489/16/7/514/pdf?version=1750413853","source":{"id":"https://openalex.org/S4210219776","display_name":"Information","issn_l":"2078-2489","issn":["2078-2489"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/11","score":0.4300000071525574,"display_name":"Sustainable cities and communities"},{"id":"https://metadata.un.org/sdg/9","score":0.41999998688697815,"display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G6298090864","display_name":"Mobility as a service: MAnaging Cybersecurity Risks across Consumers, Organisations and Sectors (MACRO)","funder_award_id":"EP/V039164/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320314731","display_name":"UK Research and Innovation","ror":"https://ror.org/001aqnf71"},{"id":"https://openalex.org/F4320320343","display_name":"Cranfield University","ror":"https://ror.org/05cncd958"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4411495153.pdf","grobid_xml":"https://content.openalex.org/works/W4411495153.grobid-xml"},"referenced_works_count":107,"referenced_works":["https://openalex.org/W1969512764","https://openalex.org/W2029758586","https://openalex.org/W2205558186","https://openalex.org/W2207884471","https://openalex.org/W2461992254","https://openalex.org/W2521105011","https://openalex.org/W2549955619","https://openalex.org/W2626285097","https://openalex.org/W2752007092","https://openalex.org/W2766202943","https://openalex.org/W2769914502","https://openalex.org/W2791312769","https://openalex.org/W2793016116","https://openalex.org/W2885574584","https://openalex.org/W2889780985","https://openalex.org/W2899994266","https://openalex.org/W2901429638","https://openalex.org/W2902882062","https://openalex.org/W2903115795","https://openalex.org/W2909392949","https://openalex.org/W2913839118","https://openalex.org/W2922097866","https://openalex.org/W2943572316","https://openalex.org/W2943871268","https://openalex.org/W2944579186","https://openalex.org/W2945880681","https://openalex.org/W2953067060","https://openalex.org/W2969575248","https://openalex.org/W2971061604","https://openalex.org/W2975628834","https://openalex.org/W2976077326","https://openalex.org/W2976300868","https://openalex.org/W2976366234","https://openalex.org/W2977010617","https://openalex.org/W2980666808","https://openalex.org/W2980694152","https://openalex.org/W2991444771","https://openalex.org/W2999242581","https://openalex.org/W3004454911","https://openalex.org/W3010601619","https://openalex.org/W3026452568","https://openalex.org/W3046050222","https://openalex.org/W3048006183","https://openalex.org/W3048151457","https://openalex.org/W3080511871","https://openalex.org/W3082626844","https://openalex.org/W3092649065","https://openalex.org/W3095330340","https://openalex.org/W3101147252","https://openalex.org/W3107425836","https://openalex.org/W3113093152","https://openalex.org/W3124371390","https://openalex.org/W3133391457","https://openalex.org/W3135364964","https://openalex.org/W3144543375","https://openalex.org/W3156289917","https://openalex.org/W3161320000","https://openalex.org/W3165553181","https://openalex.org/W3194658931","https://openalex.org/W4205517619","https://openalex.org/W4226039509","https://openalex.org/W4286434171","https://openalex.org/W4293236027","https://openalex.org/W4295182934","https://openalex.org/W4297322117","https://openalex.org/W4307645717","https://openalex.org/W4320018437","https://openalex.org/W4320037394","https://openalex.org/W4365513578","https://openalex.org/W4378417250","https://openalex.org/W4387319226","https://openalex.org/W4387670153","https://openalex.org/W4389915115","https://openalex.org/W4390503950","https://openalex.org/W4391686644","https://openalex.org/W4391928416","https://openalex.org/W4392939514","https://openalex.org/W4394944562","https://openalex.org/W4396680992","https://openalex.org/W4400763351","https://openalex.org/W4401218713","https://openalex.org/W4401328639","https://openalex.org/W4401453226","https://openalex.org/W4404564574","https://openalex.org/W4404592844","https://openalex.org/W4406070635","https://openalex.org/W4406149785","https://openalex.org/W4406230458","https://openalex.org/W4407152657","https://openalex.org/W4407510107","https://openalex.org/W4408069401","https://openalex.org/W4408179986","https://openalex.org/W4408329252","https://openalex.org/W4408703910","https://openalex.org/W6744409857","https://openalex.org/W6746733056","https://openalex.org/W6754855872","https://openalex.org/W6756388469","https://openalex.org/W6795767841","https://openalex.org/W6805562698","https://openalex.org/W6842597452","https://openalex.org/W6871276006","https://openalex.org/W6877576560","https://openalex.org/W6878079863","https://openalex.org/W6893092368","https://openalex.org/W6907585262","https://openalex.org/W7020736442"],"related_works":["https://openalex.org/W2295836226","https://openalex.org/W4225340788","https://openalex.org/W2272742059","https://openalex.org/W2025792237","https://openalex.org/W2940702331","https://openalex.org/W2480449659","https://openalex.org/W1993866990","https://openalex.org/W4245303888","https://openalex.org/W1996189363","https://openalex.org/W2027335090"],"abstract_inverted_index":{"Mobility":[0],"as":[1],"a":[2,78],"Service":[3],"(MaaS)":[4],"is":[5],"anticipated":[6],"to":[7,128,134,172,197],"revolutionize":[8],"transport":[9,14],"by":[10],"integrating":[11],"conventional":[12],"public":[13],"with":[15,74],"on-demand":[16],"and":[17,26,36,46,56,63,68,71,91,105,124,144,150,153,159,165,179,185,192],"shared":[18],"services.":[19],"This":[20],"innovation":[21],"promises":[22],"enhanced":[23],"convenience,":[24],"flexibility,":[25],"sustainability":[27],"in":[28],"urban":[29],"mobility,":[30],"drawing":[31],"interest":[32],"from":[33],"both":[34],"researchers":[35],"industry.":[37],"However,":[38],"those":[39],"systems":[40,164],"heavily":[41],"rely":[42],"on":[43,102,187],"the":[44,61,97,118,188,193],"collection":[45],"sharing":[47],"of":[48,65,108,162],"personal":[49],"data":[50],"among":[51],"various":[52],"stakeholders,":[53],"introducing":[54],"security":[55,67,104,123,158],"privacy":[57,69,106,125,160],"risks.":[58],"To":[59],"understand":[60],"scale":[62],"scope":[64],"cyber":[66,103,122,157],"concerns":[70,140],"risks":[72,126,143,190],"associated":[73],"MaaS,":[75],"we":[76],"conducted":[77],"systematic":[79],"literature":[80],"review":[81,95],"(SLR)":[82],"covering":[83],"87":[84],"relevant":[85],"research":[86,170],"papers":[87],"published":[88],"between":[89],"2017":[90],"April":[92],"2025.":[93],"Our":[94,111],"represents":[96],"most":[98],"comprehensive":[99],"examination":[100],"focusing":[101],"issues":[107],"MaaS":[109,119,129,148,163,176],"systems.":[110],"findings":[112],"reveal":[113],"three":[114],"themes":[115],"discussed":[116],"within":[117],"literature:":[120],"(i)":[121],"inherent":[127],"systems,":[130],"alongside":[131],"proposed":[132],"solutions":[133],"mitigate":[135],"such":[136],"risks;":[137],"(ii)":[138],"users\u2019":[139],"about":[141],"these":[142],"how":[145],"they":[146],"affect":[147],"adoption;":[149],"(iii)":[151],"laws":[152],"policies":[154],"that":[155],"govern":[156],"aspects":[161],"solutions.":[166],"As":[167],"such,":[168],"our":[169],"serves":[171],"not":[173],"only":[174],"inform":[175],"service":[177],"providers":[178],"users":[180],"but":[181],"also":[182],"advise":[183],"policymakers":[184],"legislators":[186],"potential":[189],"involved":[191],"regulatory":[194],"measures":[195],"required":[196],"address":[198],"them.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":2}],"updated_date":"2026-06-01T08:46:32.239190","created_date":"2025-10-10T00:00:00"}