Geo-Indistinguishability: Differential Privacy for Location-Based Systems

Abstract

The growing popularity of location-based systems, allowing unknown/untrusted servers to easily collect huge amounts of information regarding users' location, has recently started raising serious privacy concerns. In this paper we study geo-indistinguishability, a formal notion of privacy for location-based systems that protects the user's exact location, while allowing approximate information - typically needed to obtain a certain desired service - to be released. Our privacy definition formalizes the intuitive notion of protecting the user's location within a radius r with a level of privacy that depends on r, and corresponds to a generalized version of the well-known concept of differential privacy. Furthermore, we present a perturbation technique for achieving geo-indistinguishability by adding controlled random noise to the user's location. We demonstrate the applicability of our technique on a LBS application. Finally, we compare our mechanism with other ones in the literature. It turns our that our mechanism offers the best privacy guarantees, for the same utility, among all those which do not depend on the prior.

15 pages

References in corpus (1)

• Preserving differential privacy under finite-precision semantics

Cited by in corpus (99)

• Protecting Locations with Differential Privacy under Temporal Correlations
• Technical Privacy Metrics: a Systematic Survey
• Optimal Geo-Indistinguishable Mechanisms for Location Privacy
• The Long Road to Computational Location Privacy: A Survey
• A Comprehensive Survey on Local Differential Privacy Toward Data Statistics and Analysis
• Privacy in Deep Learning: A Survey
• A multi-layered blockchain framework for smart mobility data-markets
• Constructing elastic distinguishability metrics for location privacy
• Multi-Objective Eco-Routing for Dynamic Control of Connected & Automated Vehicles
• A Survey of Privacy Vulnerabilities of Mobile Device Sensors
• LDPTrace: Locally Differentially Private Trajectory Synthesis
• Real-World Trajectory Sharing with Local Differential Privacy
• Advanced Probabilistic Couplings for Differential Privacy
• Location Privacy in Cognitive Radio Networks: A Survey
• Privacy-Preserving Obfuscation for Distributed Power Systems
• PriSTE: From Location Privacy to Spatiotemporal Event Privacy
• F-BLEAU: Fast Black-box Leakage Estimation
• Protecting Spatiotemporal Event Privacy in Continuous Location-Based Services
• Differentially Private Location Privacy in Practice
• Location Privacy Preservation in Database-Driven Wireless Cognitive Networks Through Encrypted Probabilistic Data Structures
• Privacy-preserving Travel Time Prediction with Uncertainty Using GPS Trace Data
• Resilient Privacy Protection for Location-Based Services through Decentralization
• Local Obfuscation Mechanisms for Hiding Probability Distributions
• Utility-Optimized Local Differential Privacy Mechanisms for Distribution Estimation
• Location Privacy in Cognitive Radios with Multi-Server Private Information Retrieval
• Differentially Private k-Means Clustering with Guaranteed Convergence
• SynTF: Synthetic and Differentially Private Term Frequency Vectors for Privacy-Preserving Text Mining
• Secure and Utility-Aware Data Collection with Condensed Local Differential Privacy
• Advancing Personalized Federated Learning: Group Privacy, Fairness, and Beyond
• OptStream: Releasing Time Series Privately
• PRIVIC: A privacy-preserving method for incremental collection of location data
• On a Utilitarian Approach to Privacy Preserving Text Generation
• Local Distribution Obfuscation via Probability Coupling
• Element Level Differential Privacy: The Right Granularity of Privacy
• On (The Lack Of) Location Privacy in Crowdsourcing Applications
• Privacy-preserving Publication of Mobility Data with High Utility
• DPIVE: A Regionalized Location Obfuscation Scheme with Personalized Privacy Levels
• Locality Sensitive Hashing with Extended Differential Privacy
• A novel analysis of utility in privacy pipelines, using Kronecker products and quantitative information flow
• A privacy preserving querying mechanism with high utility for electric vehicles
• $k^{\tau ,\epsilon }$-anonymity: Towards Privacy-Preserving Publishing of Spatiotemporal Trajectory Data
• When the Hammer Meets the Nail: Multi-Server PIR for Database-Driven CRN with Location Privacy Assurance
• The fallacy of the closest antenna: Towards an adequate view of device location in the mobile network
• Differentially Private GANs for Generating Synthetic Indoor Location Data
• A Predictive Differentially-Private Mechanism for Mobility Traces
• Voice-Indistinguishability: Protecting Voiceprint in Privacy-Preserving Speech Data Release
• On the Anonymization of Differentially Private Location Obfuscation
• Optimal noise functions for location privacy on continuous regions
• Where have you been? A Study of Privacy Risk for Point-of-Interest Recommendation
• Ensuring Privacy in Location-Based Services: A Model-based Approach
• Privacy-Protecting Techniques for Behavioral Biometric Data: A Survey
• Quantifying the Tradeoff Between Cybersecurity and Location Privacy
• Multilayer Nonlinear Processing for Information Privacy in Sensor Networks
• Towards Information Privacy for the Internet of Things
• Sub-trajectory Similarity Join with Obfuscation
• Toward a Secure Crowdsourced Location Tracking System
• Generalised Differential Privacy for Text Document Processing
• Spatial Privacy Pricing: The Interplay between Privacy, Utility and Price in Geo-Marketplaces
• Context-aware Data Aggregation with Localized Information Privacy
• Differentially-Private Counting of Users' Spatial Regions
• A Differentially Private Text Perturbation Method Using a Regularized Mahalanobis Metric
• Differentially Private Adversarial Robustness Through Randomized Perturbations
• Local Differential Privacy for Regret Minimization in Reinforcement Learning
• Privacy through Fake yet Semantically Real Traces
• Local Information Privacy and Its Application to Privacy-Preserving Data Aggregation
• Location Leakage in Federated Signal Maps
• Linear and Range Counting under Metric-based Local Differential Privacy
• Lower-Cost epsilon-Private Information Retrieval
• Model-based Differentially Private Data Synthesis and Statistical Inference in Multiply Synthetic Differentially Private Data
• Providing Input-Discriminative Protection for Local Differential Privacy
• PGLP: Customizable and Rigorous Location Privacy through Policy Graph
• Differential Privacy for Text Analytics via Natural Text Sanitization
• Obfuscation of Images via Differential Privacy: From Facial Images to General Images
• On the Data Fight Between Cities and Mobility Providers
• On the differential privacy of dynamic location obfuscation with personalized error bounds
• Please Forget Where I Was Last Summer: The Privacy Risks of Public Location (Meta)Data
• Geographic Differential Privacy for Mobile Crowd Coverage Maximization
• CONNA: Addressing Name Disambiguation on The Fly
• Improving Utility and Security of the Shuffler-based Differential Privacy
• HTF: Homogeneous Tree Framework for Differentially-Private Release of Location Data
• PANDA: Policy-aware Location Privacy for Epidemic Surveillance
• Protecting Geolocation Privacy of Photo Collections
• Location Trace Privacy Under Conditional Priors
• Design of Policy-Aware Differentially Private Algorithms
• Artificial Impostors for Location Privacy Preservation
• Multifaceted Privacy: How to Express Your Online Persona without Revealing Your Sensitive Attributes
• Metric Differential Privacy at the User-Level Via the Earth Mover's Distance
• Not All Attributes are Created Equal: $d_{\mathcal{X}}$-Private Mechanisms for Linear Queries
• Relations among different privacy notions
• Utility-Optimized Synthesis of Differentially Private Location Traces
• Location Privacy in Conservation
• Mitigating Location Privacy Attacks on Mobile Devices using Dynamic App Sandboxing
• Kinsey Reporter: Citizen Science for Sex Research
• Rethinking Location Privacy for Unknown Mobility Behaviors
• Towards Privacy-aware Task Allocation in Social Sensing based Edge Computing Systems
• A Differentially Private Framework for Spatial Crowdsourcing with Historical Data Learning
• Collusion-Secure Watermarking for Sequential Data
• Privacy-Preserving Vehicle Assignment for Mobility-on-Demand Systems
• What Does The Crowd Say About You? Evaluating Aggregation-based Location Privacy