Abstract:The proliferation of various mobile devices equipped with GPS positioning modules makes the collection of trajectories more easier than ever before, and more and more trajectory datasets have been available for business applications or academic researches. Normally, published trajectories are often anonymized by replacing real identities of mobile objects with pseudonyms (e.g., random identifiers); however, privacy leaks can hardly be prevented. In this paper, we introduce a novel paradigm of deanonymization attack re-identifying trajectories of victims from anonymous trajectory datasets. Different from existing attacks, no background knowledge or side channel information about the target dataset is required. Instead, we claim that, for each moving object, there exist somemobility patterns that reflect the preference or usual behavior of the object, and will not change dramatically over a period of time. As long as those relatively stable patterns can be extracted from trajectories and be utilized as quasi-identifiers, trajectories can be linked to anonymous historical ones. To implement such kind of de-anonymization attacks, an adversary only needs to collect a few trajectory segments of a victim, the durations of which do not necessarily overlap with that of trajectories in the target dataset (in simple terms, those trajectory segments are not necessary sub-trajectories included in the target dataset). Since the movements of victims in public areas could be observed openly, an adversary can obtain traces or locations about the victims either by direct monitoring them (e.g., tracking) or fromthird parties (e.g., social-networks). Then, the adversary extracts useful patterns from both the historical trajectories in the accessible dataset and newly obtained trajectory segments of victims, the historical trajectory with most similar patterns to that of a victim is considered as belonging to the victim. In order to demonstrate the feasibility of such attacks, we conduct extensive trace-driven simulations. We extract road segment preferences and stop of interests from trajectories of vehicles, and construct feature vectors (mobility patterns) of vehicles according to them, used for trajectory comparisons. Simulation results show that the adversary could re-identify anonymous trajectories effectively.

Beyond K-Anonymity: Protect Your Trajectory from Semantic Attack

Protecting Trajectory from Semantic Attack Considering ${k}$ -Anonymity, ${l}$ -Diversity, and ${t}$ -Closeness.

Personalized semantic trajectory privacy preservation through trajectory reconstruction

A Trajectory K-Anonymity Model Based on Point Density and Partition

A User Study on the Capability of Three Geo-Based Features in Analyzing and Locating Trajectories

Walking without Friends: Publishing Anonymized Trajectory Dataset without Leaking Social Relationships

An Enhanced Method Of Trajectory Privacy Preservation Through Trajectory Reconstruction

A Privacy-Preserving Trajectory Publishing Method Based on Multi-Dimensional Sub-Trajectory Similarities

Trajectory Privacy Protection Mechanism based on Social Attributes

Pseudonym Changing Strategy with Multiple Mix Zones for Trajectory Privacy Protection in Road Networks.

Revealing Privacy Vulnerabilities of Anonymous Trajectories

Personalized Privacy-Preserving Trajectory Data Publishing

$k^{τ,ε}$-anonymity: Towards Privacy-Preserving Publishing of Spatiotemporal Trajectory Data

Adversarial Reconstruction of Trajectories: Privacy Risks and Attack Models in Trajectory Embedding

Demystifying Trajectory Recovery From Ash: An Open-Source Evaluation and Enhancement

Anonymization and De-Anonymization of Mobility Trajectories: Dissecting the Gaps Between Theory and Practice

A Trajectory Preserving Method Based On Semantic Anonymity Proxy

Utility-aware and Privacy-preserving Trajectory Synthesis Model that Resists Social Relationship Privacy Attacks

A Trajectory Privacy Protect Method Based on Location Pair Reorganization

Your Trajectory Privacy Can Be Breached Even if You Walk in Groups

Where Were You Yesterday: Privacy Risk Of Published Anonymous Trajectories