Time-Efficient Locally Relevant Geo-Location Privacy Protection

Chenxi Qiu,Ruiyao Liu,Primal Pappachan,Anna Squicciarini,Xinpeng Xie

2024-12-14

Abstract:Geo-obfuscation serves as a location privacy protection mechanism (LPPM), enabling mobile users to share obfuscated locations with servers, rather than their exact locations. This method can protect users' location privacy when data breaches occur on the server side since the obfuscation process is irreversible. To reduce the utility loss caused by data obfuscation, linear programming (LP) is widely employed, which, however, might suffer from a polynomial explosion of decision variables, rendering it impractical in largescale geo-obfuscation applications. In this paper, we propose a new LPPM, called Locally Relevant Geo-obfuscation (LR-Geo), to optimize geo-obfuscation using LP in a time-efficient manner. This is achieved by confining the geo-obfuscation calculation for each user exclusively to the locally relevant (LR) locations to the user's actual location. Given the potential risk of LR locations disclosing a user's actual whereabouts, we enable users to compute the LP coefficients locally and upload them only to the server, rather than the LR locations. The server then solves the LP problem based on the received coefficients. Furthermore, we refine the LP framework by incorporating an exponential obfuscation mechanism to guarantee the indistinguishability of obfuscation distribution across multiple users. Based on the constraint structure of the LP formulation, we apply Benders' decomposition to further enhance computational efficiency. Our theoretical analysis confirms that, despite the geo-obfuscation being calculated independently for each user, it still meets geo-indistinguishability constraints across multiple users with high probability. Finally, the experimental results based on a real-world dataset demonstrate that LR-Geo outperforms existing geo-obfuscation methods in computational time, data utility, and privacy preservation.

Cryptography and Security

What problem does this paper attempt to address?

The main problem that this paper attempts to solve is the problem of excessively high computational complexity encountered by existing linear - programming (LP) - based geo - obfuscation methods when dealing with large - scale geo - obfuscation applications. Specifically:

1. **Computational efficiency problem**: When generating the obfuscation matrix, traditional LP methods need to consider all positions within the target area, resulting in a polynomial explosion in the number of decision variables, which makes it impractical in large - scale application scenarios.
2. **Privacy protection problem**: In order to ensure the privacy of users' geographical locations, when performing calculations on the server side, the actual location information of users or the locally relevant location sets cannot be directly uploaded, because this information may disclose the real locations of users.

To solve the above problems, the paper proposes a new location privacy protection mechanism, called "Locally Relevant Geo - obfuscation" (LR - Geo). LR - Geo improves computational efficiency and protects user privacy by restricting geo - obfuscation calculations to the locally relevant area of the user's actual location and allowing the user to calculate LP coefficients locally and then upload them to the server. In addition, the paper also introduces methods such as exponential obfuscation mechanism and Benders decomposition to further optimize computational efficiency and ensure geo - indistinguishability (Geo - Ind) among multiple users.

In summary, the paper aims to develop a time - efficient and highly privacy - protective geo - obfuscation method to address the computational complexity and privacy leakage problems of existing methods in large - scale applications.