Identification or personal information on a passenger or a corporate user must remain private; whereas, therefore, a system vendor has to ensure by technical means and appropriate safeguards, at least regarding software, that no unauthorized access to information can take place.