Abstract:It is crucial to protect users’ location traces against inference attacks on aggregate mobility data collected from multiple users in various real-world applications. Most of the existing works on aggregate mobility data are focusing on inference attacks rather than designing privacy-preserving release mechanisms, and a few differential private release mechanisms suffer from poor utility-privacy tradeoffs. In this paper, we propose optimal centralized privacy-preserving aggregate mobility data release mechanisms (PAMDRMs) that minimize the leakage from an information-theoretic perspective by releasing perturbed versions of the raw aggregate location. Specifically, we use mutual information to measure user-level and aggregate-level privacy leakage separately, and formulate leakage minimization problems under utility constraints. As directly solving the optimization problems incur exponential complexity w.r.t. users’ trace length, we transform them into belief state Markov Decision Processes (MDPs), with a focus on the MDP formulation for the user-level privacy problem. We build reinforcement learning (RL) models and leverage the efficient Asynchronous Advantage Actor-Critic RL algorithm to derive the solutions to the MDPs as our optimal PAMDRMs. We compare them with two state-of-the-art privacy protection mechanisms PDPR (context-aware local design) and DMLM (context-free centralized design) in terms of mutual information leakage and adversary’s attack success (evaluated by her expected estimation error and Jensen-Shannon Divergence-based error). Extensive experimental results on both synthetic and real-world datasets demonstrate that the user-level PAMDRM performs the best on both measures thanks to its context-aware property and centralized design. Even though the aggregate-level PAMDRM achieves better privacy-utility tradeoff than the other two, it does not always perform better than them on adversarial success, highlighting the necessity of considering privacy measures from different perspectives to avoid overestimating the level of privacy offered to users. Lastly, we discuss an alternative, fully data-driven approach to derive the optimal PAMDRM by leveraging adversarial training on limited data samples.

PAS-MC: Privacy-preserving Analytics Stream for the Mobile Cloud

PLAM: A Privacy-Preserving Framework for Local-Area Mobile Social Networks.

Mobile Privacy-Preserving Crowdsourced Data Collection in the Smart City

Dynamic Pricing for Privacy-Preserving Mobile Crowdsensing: A Reinforcement Learning Approach

An Efficient and Differential Privacy-Based Scheme for Aggregating Mobility Datasets

PrivacyStreams: Enabling Transparency in Personal Data Processing for Mobile Apps.

Privacy Preserving Stream Analytics: The Marriage of Randomized Response and Approximate Computing

Privacy in Information-Rich Intelligent Infrastructure

SaC-FRAPP: a scalable and cost-effective framework for privacy preservation over big data on cloud.

Privacy-preserving computation of participatory noise maps in the cloud

What Does The Crowd Say About You? Evaluating Aggregation-based Location Privacy

Verifiable and Privacy-Preserving Traffic Flow Statistics for Advanced Traffic Management Systems

Stream on the Sky: Outsourcing Access Control Enforcement for Stream Data to the Cloud

A Privacy-Preserving Traffic Monitoring Scheme via Vehicular Crowdsourcing

When Mobile Crowdsensing Meets Privacy

Privacy Preserving Techniques Applied to CPNI Data: Analysis and Recommendations

Towards Real-Time Privacy Preservation: A Streaming Location Anonymous Method Based On Distributed Framework

Mobile cloud computing based privacy protection in location-based information survey applications

Privacy-Preserving Aggregate Mobility Data Release: An Information-Theoretic Deep Reinforcement Learning Approach

Practical Privacy Preserving Cloud Resource-Payment for Constrained Clients

Secure Stream Processing for Medical Data