Abstract:Human mobility trajectories are increasingly collected by ISPs to assist academic research and commercial applications. Meanwhile, there is a growing concern that individual trajectories can be de-anonymized when the data is shared, using information from external sources (e.g., online social networks). To understand this risk, prior works either estimate the theoretical privacy bound or simulate de-anonymization attacks on synthetically created datasets. However, it is not clear how well the theoretical estimations are preserved in practice. In this article, we collected a large-scale ground-truth trajectory dataset from 2,161,500 users of a cellular network, and two matched external trajectory datasets from a large social network (56,683 users) and a check-in/review service (45,790 users) on the same user population. The two sets of large ground-truth data provide a rare opportunity to extensively evaluate a variety of de-anonymization algorithms (nine in total). We find that their performance in the real-world dataset is far from the theoretical bound. Further analysis shows that most algorithms have under-estimated the impact of spatio-temporal mismatches between the data from different sources, and the high sparsity of user generated data also contributes to the under-performance. Based on these insights, we propose four new algorithms that are specially designed to tolerate spatial or temporal mismatches (or both) and model location contexts and time contexts. Extensive evaluations show that our algorithms achieve more than 17 percent performance gain over the best existing algorithms, confirming our insights. Further, we propose two new location-privacy preserving mechanisms utilizing the spatio-temporal mismatches to better protect users' privacy against the de-anonymization attack. Evaluation results show that our proposed mechanisms can reduce the performance of de-anonymization attacks by over 8.0 percent, demonstrating the effectivene-s of our insights.

No More Than What I Post: Preventing Linkage Attacks on Check-in Services

PLAM: A Privacy-Preserving Framework for Local-Area Mobile Social Networks.

Towards privacy preservation for “check-in” services in location-based social networks

Checking In Without Worries: Location Privacy In Location Based Social Networks

Privcheck: Privacy-Preserving Check-In Data Publishing For Personalized Location Based Services

PrivateCheckIn: Trajectory Privacy-Preserving for Check-In Services in MSNS

Feel Free to Check-in: Privacy Alert against Hidden Location Inference Attacks in GeoSNs

Preventing Location-based Inference Attack in Location Based Services

Asynchronous Side Information Attack from the Edge: an Approach to Identify Participants from Anonymous Mobility Traces.

FriendSeeker: Inferring Hidden Friendship in Mobile Social Networks with Sparse Check-in Data

Where have you been? A Study of Privacy Risk for Point-of-Interest Recommendation

Privacy-Aware Information Sharing in Location-Based Services: Attacks and Defense.

Discovering People's Life Patterns from Anonymized WiFi Scanlists

Understanding Motivations Behind Inaccurate Check-ins.

A privacy-enhancing scheme against contextual knowledge-based attacks in location-based services

Walking without Friends: Publishing Anonymized Trajectory Dataset without Leaking Social Relationships

Anonymization and De-Anonymization of Mobility Trajectories: Dissecting the Gaps Between Theory and Practice

Check in or Not? A Stochastic Game for Privacy Preserving in Point-of-Interest Recommendation System

Privacy Preservation in Social Network Against Public Neighborhood Attacks

Enhancing Frequent Location Privacy-Preserving Strategy Based on Geo-Indistinguishability

Privacy Leakage of Location Sharing in Mobile Social Networks: Attacks and Defense