Abstract:Human mobility trajectories are increasingly collected by ISPs to assist academic research and commercial applications. Meanwhile, there is a growing concern that individual trajectories can be de-anonymized when the data is shared, using information from external sources (e.g., online social networks). To understand this risk, prior works either estimate the theoretical privacy bound or simulate de-anonymization attacks on synthetically created datasets. However, it is not clear how well the theoretical estimations are preserved in practice. In this article, we collected a large-scale ground-truth trajectory dataset from 2,161,500 users of a cellular network, and two matched external trajectory datasets from a large social network (56,683 users) and a check-in/review service (45,790 users) on the same user population. The two sets of large ground-truth data provide a rare opportunity to extensively evaluate a variety of de-anonymization algorithms (nine in total). We find that their performance in the real-world dataset is far from the theoretical bound. Further analysis shows that most algorithms have under-estimated the impact of spatio-temporal mismatches between the data from different sources, and the high sparsity of user generated data also contributes to the under-performance. Based on these insights, we propose four new algorithms that are specially designed to tolerate spatial or temporal mismatches (or both) and model location contexts and time contexts. Extensive evaluations show that our algorithms achieve more than 17 percent performance gain over the best existing algorithms, confirming our insights. Further, we propose two new location-privacy preserving mechanisms utilizing the spatio-temporal mismatches to better protect users' privacy against the de-anonymization attack. Evaluation results show that our proposed mechanisms can reduce the performance of de-anonymization attacks by over 8.0 percent, demonstrating the effectivene-s of our insights.

Dummy Based Privacy Preservation in Continuous Querying Road Network Services

Preserving Location Privacy for Location-Based Services with Continuous Queries on Road Network

QBPP: Quality of Services–based Location Privacy Protection Method for Location-Based Services in Cloud-Enabled Internet of Vehicles

Pseudonym Changing Strategy with Multiple Mix Zones for Trajectory Privacy Protection in Road Networks.

A Dummy-Based Anonymization Method Based on User Trajectory with Pauses.

Dummy Generation Based on User-Movement Estimation for Location Privacy Protection

A Location Privacy Preservation Method Based on Dummy Locations in Internet of Vehicles

Protection of Location Privacy in Continuous LBSs Against Adversaries with Background Information

A dynamic programming algorithm for continuous queries privacy preserving in location based services

Dummy-Based User Location Anonymization under Real-World Constraints.

User Location Anonymization Method for Wide Distribution of Dummies.

Private Location Sharing for Decentralized Routing services

A Vehicle Trajectory Privacy Preservation Method Based on Caching and Dummy Locations in the Internet of Vehicles

A Novel Time-Obfuscated Algorithm for Trajectory Privacy Protection

Preventing Location-based Inference Attack in Location Based Services

Anonymization and De-Anonymization of Mobility Trajectories: Dissecting the Gaps Between Theory and Practice

Using location semantics to realize personalized road network location privacy protection

Trajectory Privacy Protection Method based on Shadow vehicles

Location Anonymization Using Real Car Trace Data for Location Based Services.

A Trajectory Privacy Protect Method Based on Location Pair Reorganization

Preserving Privacy in WiFi Localization With Plausible Dummy Locations