Why is it difficult to keep personal information safe in the "safest" mode of travel?
Read tips
In order to attract more customers and improve competitiveness, airlines generally launch frequent flyer programs, in which passengers can accumulate miles on flights and exchange them for tickets, gifts, etc.
However, the recent issue of users’ air miles being stolen has exposed many problems and loopholes in personal information security in the aviation sector.
Experts suggest that the information and data management of the civil aviation system should be upgraded as soon as possible.
Recently, a number of celebrities said that airline mileage was stolen, which aroused public concern.
Taking an airplane is called the "safest" mode of transportation due to the low accident rate.
However, the misappropriation of Star Air Miles has exposed many problems and loopholes in personal information security in the aviation sector.
How are air miles stolen?
Is it illegal?
Who should bear the responsibility?
How to fill the loopholes?
With a series of issues of public concern, a reporter from the Workers' Daily launched an investigation.
It's not just stars who are recruited
In order to attract more customers and improve competitiveness, airlines generally launch frequent flyer programs, in which passengers can accumulate miles on flights and exchange them for tickets, gifts, etc.
On September 6, artist Wu Lei was exposed to theft of air miles. The pirate used Wu Lei's air miles to redeem multiple tickets.
One stone stirred up a thousand waves.
On September 8, artist Jiang Yingrong also posted on Weibo that her airline mileage had been stolen, while artist Huang Ying left a message saying that a similar situation had occurred.
On September 9, artist Li Chen checked his air mileage out of curiosity and found that it had also been stolen.
The reporter learned that one of the technical foundations for the embezzlement of airline miles is the airline's assignee system, that is, frequent travelers can transfer their redemption qualifications.
Taking Air China as an example, the company's customer service stated that one member can set up to 8 assignees, and they can be eligible for redemption 60 days after submitting the application.
Qi Qi, associate professor of Guangzhou Civil Aviation Vocational and Technical College, said that the assignee system is to give frequent travelers a more sense of value.
For example, a passenger who travels frequently on official business has accumulated a lot of miles, so that people around him can also enjoy the mileage redemption.
"Stars have more activities, often with higher positions and accumulated mileage, so some criminals will use the idea of star mileage." Qi Qi said that there have been cases of non-star airline mileage being stolen before.
"Air miles can be exchanged for air tickets, gifts, etc. These are all valuable, which gives them property attributes." Hao Xudong, a lawyer from Beijing Shengqi Law Firm, said that the case of embezzling air miles would constitute a crime.
As early as 2011, the Wuhou District People’s Court of Chengdu sentenced the defendant for stealing other people’s air miles to 9 months in prison and fined 1,000 yuan as well as returning the illegal proceeds to the victim in the case.
The first-instance criminal verdict on fraud by Nie and Chen published by the Nanshan District People’s Court in Shenzhen last year showed that the two defendants were sentenced to 6 months’ imprisonment and 4 months’ imprisonment and fined for stealing points from others in exchange for air tickets and selling them for profit .
Finding the source is not difficult
After the incident of embezzling star airline miles, the relevant airlines have launched an investigation.
When the reporter tried to add the transferee through Air China's official website, he found that the member himself must be authenticated.
There are 3 authentication methods: mobile phone text messages, applet face recognition, and bank verification.
However, Air China customer service stated that the transferee does not need to perform face authentication.
How did criminals steal Star Air Miles through certification?
Qi Qi analyzed that the embezzlement of airline mileage may be due to the internal and external cooperation between airline internal and external personnel, or it may be that criminals have stolen celebrity-related information, such as cloned mobile phone numbers and ID cards.
According to industry insiders, the misappropriation of air miles reveals that the airline's backstage rule design and identity verification mechanism are flawed.
Jiang Yingrong’s studio once called Air China’s customer service phone to defend rights, and the other party proposed a solution: change the password and call the police.
"If the airline fails to fulfill the necessary security obligations during the exchange process, it may have to bear civil liability." Hao Xudong said that these illegal exchange activities have corresponding records and ID card information. difficult.
The incident of theft of airline mileage also raises a problem: personal information leaks, especially celebrities' personal information leaks seriously.
In the gray industry chain of star chasers that has been repeatedly exposed, the star's flight itinerary, passport information, ID number, mobile phone number, WeChat account, etc. can all be used as commodity transactions.
The reporter randomly asked a merchant on the second-hand trading platform Xianyu. The other party said that the star’s itinerary and hotel information can be sold, and the flight number only costs 5 yuan.
Most of this information is obtained from the organizers of the stars participating in the event.
If the information is not available or is not accurate, you can refund the money.
According to media reports, the internal staff of some brokerage companies and the staff of airlines and hotels may also be the source of celebrity information leakage.
Experts suggest building a passenger information firewall
In response to the problem of how to plug the loopholes in the stolen air mileage, Zhao Zhanzhu, a special researcher of the Intellectual Property Research Center of China University of Political Science and Law, said that the most critical link is the identity authentication link. Airlines should strictly control them and avoid negligence.
"If the design of mileage redemption is very complicated, then the passenger experience will be poor. But if the design is too simple, it is easy to be exploited." Qi Qi also believes that the key is to rely on airlines to improve their technical level and improve the recognition rate. .
Some comments pointed out that it should be taken as an opportunity to upgrade the information and data management of the civil aviation system, establish a passenger information firewall, block illegal access and attacks, and provide early warning of abnormal behaviors, and timely block system loopholes to ensure passenger information security.
It is understood that in many airlines, staff who have key data will sign confidentiality agreements. If the information is leaked, they will lose their jobs and even assume legal liabilities.
Zhao Zhanzhu said that leaking and selling other people’s information is an illegal act that infringes on the privacy of others. In serious cases, it is also suspected of infringing on company personal information.
In addition to severe crackdowns by public security organs in accordance with the law, online trading platforms are also required to crack down on transactions of such personal information, impose penalties such as bans on relevant sellers, and promptly provide relevant illegal or criminal clues to public security organs.
Qi Qi also suggested that people who frequently take airplanes should strengthen the protection of personal information, and if they find that airline mileage has been stolen, they should report to the airlines and report to the police in time to cooperate in combating illegal activities.
Du Xin