Supporting anonymous location queries in mobile environments with privacygrid

Bamba, Bhuvan; Liu, Ling; Pesti, Peter; Wang, Ting

doi:10.1145/1367497.1367531

Cited by 319 publications

(161 citation statements)

References 14 publications

Supporting

Mentioning

161

Contrasting

Order By: Relevance

“…Various privacy protection algorithms proposed for data privacy have been adopted for protecting location privacy of mobile users. The types of privacy protection algorithms include anonymization [1,5,8,10,13,20], data suppression [18], trajectory inference prevention [2,3,[14][15][16] and encryption [11]. While most of the existing schemes are aimed at preventing the adversary from distinguishing the location of a given user from that of other users, their perturbation techniques are mostly unidirectional and lack the ability to de-anonymize the perturbed information even when a user accessing the information has suitable credentials for obtaining finer information.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

De-anonymizable Location Cloaking for Privacy-Controlled Mobile Systems

Palanisamy

2015

Network and System Security

View full text Add to dashboard Cite

Abstract. The rapid technology upgrades of mobile devices and the popularity of wireless networks significantly drive the emergence and development of Location-based Services (LBSs), thus greatly expanding the business of online services and enriching the user experience. However, the personal location data shared with the service providers also leave hidden risks on location privacy. Location anonymization techniques transform the exact location of a user into a cloaking area by including the locations of multiple users in the exposed area such that the exposed location is indistinguishable from that of the other users. However in such schemes, location information once perturbed cannot be recovered from the cloaking region and as a result, users of the location cannot obtain fine granular information even when they have access to it. In this paper, we propose Dynamic Reversible Cloaking (DRC) a new de-anonymziable location cloaking mechanism that allows to restore the actual location from the perturbed information through the use of an anonymization key. Extensive experiments using realistic road network traces show that the proposed scheme is efficient, effective and scalable.

show abstract

Section: Related Workmentioning

confidence: 99%

“…During the last several years, many location anonymization techniques [1,6,8,10,13,20] have been proposed. Most of them were developed as unidirectional cloaking techniques without considering the ability to de-anonymize the perturbed data.…”

Section: Introductionmentioning

confidence: 99%

De-anonymizable Location Cloaking for Privacy-Controlled Mobile Systems

Palanisamy

2015

Network and System Security

View full text Add to dashboard Cite

show abstract

“…presented a hierarchical partitioning method to improve the efficiency of location perturbation [14], however it was shown in [7] that this fails to provide location anonymity under non-uniform distribution of user locations. Selection of optimal subdivision spaces was investigated in [12,1]. Finally, in [7] a decentralized approach without an anonymizer was considered in order to realize a good load balancing property, however communication between users is required to calculate anonymized location information.…”

Section: Related Workmentioning

confidence: 99%

Privacy-Aware Location Database Service for Granular Queries

Kiyomoto

Martin

Fukushima

2009

Information Security Theory and Practice. Smart Devices, Pervasive Systems, and Ubiquitous Networks

View full text Add to dashboard Cite

Abstract. Future mobile markets are expected to increasingly embrace location-based services. This paper presents a new system architecture for location-based services, which consists of a location database and distributed location anonymizers. The service is privacy-aware in the sense that the location database always maintains a degree of anonymity. The location database service permits three different levels of query and can thus be used to implement a wide range of location-based services. Furthermore, the architecture is scalable and employs simple functions that are similar to those found in general database systems.

show abstract

“…We can broadly classify the state of art research and development results into two categories. The first category is represented by location cloaking techniques [20,7,17,26,32]. Spatial location cloaking typically adds uncertainty to the location information exposed to the location query services by increasing the spatial resolution of a mobile user's locations while meeting location k-anonymity and/or location l-diversity [7].…”

Section: Introductionmentioning

confidence: 99%

“…The first category is represented by location cloaking techniques [20,7,17,26,32]. Spatial location cloaking typically adds uncertainty to the location information exposed to the location query services by increasing the spatial resolution of a mobile user's locations while meeting location k-anonymity and/or location l-diversity [7]. More specifically, the spatially cloaked region is constructed to ensure that at least k users (location k anonymity) are located in the same region, which contains l different static sensitive objects (locations).…”

Section: Introductionmentioning

confidence: 99%

Anonymizing continuous queries with delay-tolerant mix-zones over road networks

Palanisamy

Liu

Lee

et al. 2013

Distrib Parallel Databases

Self Cite

View full text Add to dashboard Cite

This paper presents a delay-tolerant mix-zone framework for protecting the location privacy of mobile users against continuous query correlation attacks. First, we describe and analyze the continuous query correlation attacks (CQ-attacks) that perform query correlation based inference to break the anonymity of road networkaware mix-zones. We formally study the privacy strengths of the mix-zone anonymization under the CQ-attack model and argue that spatial cloaking or temporal cloaking over road network mix-zones is ineffective and susceptible to attacks that carry out inference by combining query correlation with timing correlation (CQ-timing attack) and transition correlation (CQ-transition attack) information. Next, we introduce three types of delay-tolerant road network mix-zones (i.e., temporal, spatial and spatio-temporal) that are free from CQ-timing and CQ-transition attacks and in contrast to conventional mix-zones, perform a combination of both location mixing and identity mixing of spatially and temporally perturbed user locations to achieve stronger anonymity under the CQ-attack model. We show that by combining temporal and spatial delay-tolerant mix-zones, we can obtain the strongest anonymity for continuous queries while making acceptable tradeoff between anonymous query processing cost and temporal delay incurred in anonymous query processing. We evaluate the proposed techniques through extensive experiments conducted on realistic traces produced by GTMobiSim on different scales of geographic maps. Our experiments show that the proposed techniques offer high level of anonymity and attack resilience to continuous queries.

show abstract

Supporting anonymous location queries in mobile environments with privacygrid

Cited by 319 publications

References 14 publications

De-anonymizable Location Cloaking for Privacy-Controlled Mobile Systems

De-anonymizable Location Cloaking for Privacy-Controlled Mobile Systems

Privacy-Aware Location Database Service for Granular Queries

Anonymizing continuous queries with delay-tolerant mix-zones over road networks

Contact Info

Product

Resources

About