Abstract:With the advancing of location-detection technologies and the increasing popularity of mobile phones and other location-aware devices, trajectory data is continuously growing. While large-scale trajectories provide opportunities for various applications, the locations in trajectories pose a threat to individual privacy. Recently, there has been an interesting debate on the reidentifiability of individuals in the Science magazine. The main finding of Sánchez et al. is exactly opposite to that of De Montjoye et al. , which raises the first question: “what is the true situation of the privacy preservation for trajectories in terms of reidentification?” Furthermore, it is known that anonymization typically causes a decline of data utility, and anonymization mechanisms need to consider the trade-off between privacy and utility. This raises the second question: “what is the true situation of the utility of anonymized trajectories?” To answer these two questions, we conduct a systematic experimental study, using three real-life trajectory datasets, five existing anonymization mechanisms (i.e., identifier anonymization, grid-based anonymization, dummy trajectories, k -anonymity and ε -differential privacy), and two practical applications (i.e., travel time estimation and window range queries). Our findings reveal the true situation of the privacy preservation for trajectories in terms of reidentification and the true situation of the utility of anonymized trajectories, and essentially close the debate between De Montjoye et al. and Sánchez et al. To the best of our knowledge, this study is among the first systematic evaluation and analysis of anonymized trajectories on the individual privacy in terms of unicity and on the utility in terms of practical applications.

PrivateCheckIn: Trajectory Privacy-Preserving for Check-In Services in MSNS

Pseudonym Changing Strategy with Multiple Mix Zones for Trajectory Privacy Protection in Road Networks.

No More Than What I Post: Preventing Linkage Attacks on Check-in Services

Towards privacy preservation for “check-in” services in location-based social networks

Spatiotemporal Mobility Based Trajectory Privacy-Preserving Algorithm in Location-Based Services

Privcheck: Privacy-Preserving Check-In Data Publishing For Personalized Location Based Services

Protecting the Moving User's Locations by Combining Differential Privacy and K -Anonymity under Temporal Correlations in Wireless Networks.

A Local Differential Privacy Trajectory Protection Method Based on Temporal and Spatial Restrictions for Staying Detection

A Trajectory Privacy Protect Method Based on Location Pair Reorganization

A Trajectory K-Anonymity Model Based on Point Density and Partition

Feel Free to Check-in: Privacy Alert against Hidden Location Inference Attacks in GeoSNs

Efficient Scheme for User's Trajectory Privacy

Protecting Trajectory from Semantic Attack Considering ${k}$ -Anonymity, ${l}$ -Diversity, and ${t}$ -Closeness.

Personalized Privacy-Preserving Trajectory Data Publishing

Your Trajectory Privacy Can Be Breached Even if You Walk in Groups

Privacy Preserving Moving KNN Queries

Experiments and Analyses of Anonymization Mechanisms for Trajectory Data Publishing.

Trajectory Privacy Preserving for LBS in P2P Environment.

A Trajectory Preserving Method Based On Semantic Anonymity Proxy

A Differential Private Mechanism to Protect Trajectory Privacy in Mobile Crowd-Sensing

Personalized semantic trajectory privacy preservation through trajectory reconstruction