Abstract:Valuable information and knowledge can be learned from users' location traces and support various location-based applications such as intelligent traffic control, incident response, and COVID-19 contact tracing. However, due to privacy concerns, no authority could simply collect users' private location traces for mining or even publishing. To echo such concerns, local differential privacy (LDP) enables individual privacy by allowing each user to report a perturbed version of their data. Unfortunately, when applied to location traces, LDP cannot preserve the semantics in the context of location traces because it treats all locations (i.e., various points of interest) as equally sensitive. This results in a low utility of LDP mechanisms for collecting location traces. In this paper, we address the challenge of collecting and sharing location traces with valuable semantics while providing sufficient privacy protection for participating users. We first propose semantic-constrained local differential privacy (SLDP), a new privacy model to provide a provable mathematical privacy guarantee while preserving desirable semantics. Then, we design a location trace perturbation mechanism (LTPM) that users can use to perturb their traces in a way that satisfies SLDP. Finally, we propose a private location trace synthesis (PLTS) framework in which users use LTPM to perturb their traces before sending them to the collector, who aggregates the users' perturbed data to generate location traces with valuable semantics. Extensive experiments on three real-world datasets demonstrate that our PLTS outperforms existing state-of-the-art methods by at least 21% in a range of real-world applications, such as spatial visiting queries and frequent pattern mining, under the same privacy leakage.

Protecting Locations with Differential Privacy Against Location-Dependent Attacks in Continuous LBS Queries.

Privacy Preserving Publication of Locations Based on Delaunay Triangulation.

RobLoP: Towards Robust Privacy Preserving Against Location Dependent Attacks in Continuous LBS Queries

An Efficient Differential Privacy-Based Method for Location Privacy Protection in Location-Based Services

LDPart: Effective Location-Record Data Publication Via Local Differential Privacy

Differential Privacy Preservation for Location Semantics

Differential Privacy Location Protection Method Based on the Markov Model

Protecting Query Privacy with Differentially Private K-Anonymity in Location-Based Services

Preventing Location-based Inference Attack in Location Based Services

Continuous Release of Location Data Based on Differential Privacy

Privacy Preserving for Continuous Query in Location Based Services

A Geo-Indistinguishable Location Perturbation Mechanism for Location-Based Services Supporting Frequent Queries

Protection of Location Privacy in Continuous LBSs Against Adversaries with Background Information

Protecting Locations with Differential Privacy under Temporal Correlations

Local Differential Private Data Aggregation for Discrete Distribution Estimation

PrivLBS : Local Differential Privacy for Location-Based Services with Staircase Randomized Response

Generating Location Traces With Semantic- Constrained Local Differential Privacy

A location data protection protocol based on differential privacy

Trajectory Data Collection with Local Differential Privacy

Efficient Query Processing with Mutual Privacy Protection for Location-Based Services.

L-SRR: Local Differential Privacy for Location-Based Services with Staircase Randomized Response