Abstract:Trajectory data have rich spatiotemporal information,which may cause users' personal privacy leakage.In order to avoid this,privacy-preserving techniques are required before the publication of trajectory data.Most of the existing trajectory privacy-preserving techniques are based on the k-anonymity model,which has two main drawbacks:one is low privacy guarantee;the other is heavily dependent on the background knowledge that the attackers know.In recent years,researchers proposed differential privacy,which is known as the strongest privacy-preserving model,and it is quite good at publication of statistical information.While,publication of statistical information may also cause leakage of users' location privacy.At first,we propose two attack models in publication of count values of location samples,called sparse location attack and maximum moving speed attack.Then we propose two trajectory data publication methods under differential privacy:in free space,we propose a differentially private trajectory data publication method based on noisy quad-tree.The privacy budget is divided according to the level of the quad-tree;Laplace noise is added into each level's count value of moving object.In road network space,we propose a differentially private trajectory data publication method base on noisy R-tree.While R-tree is used to index road segment,privacy budget is divided and Laplace noise is added to the count values of each road segment or the minimum bounding rectangles of road segment.Both method spublish noisy count values of location data of each timestamp,which form a sequence of count values.Differential privacy algorithms have higher privacy guarantee than traditional k-anonymity methods.Actually,published trajectory data is a location count value sequence of multiple consequent timestamps.Since the main idea of differential privacy is to add Laplace noise into original data,and the added Laplace noise are independent at each timestamp,it may cause data inconsistency,which may reduce the utility of the published data.The data inconsistency happens when publication of location data of two or more consequent timestamps.We propose a heuristic algorithm to solve this problem.This algorithm is an extreme value problem under certain constraints.The constraints we conclude are the maximum and minimum numbers of each area or road segment,according to the moving speed,area size or the length of a road segment.The extreme value function is the L2 distance between the noisy count value sequence and the consistency count value sequence,we may find a consistent count value sequence which is most close to the noisy data.At last,we conduct a set of experiments on two data sets,one is generated location data under Gaussian distribution,and the other is generated data under Oldenburg city road network constraints.We measure data utility and runtime of each algorithm before and after consistency procedure,the results show that the consistency algorithm may improve the data utility about 200％ in average,which shows the effectiveness of the consistency algorithm.We also test runtime of each algorithm,with the incensement of the data set size,run time increases linearly,which means the algorithms are easy to extend.

Sequential Trajectory Data Publishing with Adaptive Grid-Based Weighted Differential Privacy

Real-time trajectory privacy protection based on improved differential privacy method and deep learning model

Privacy Preservation for Trajectory Publication Based on Differential Privacy

Differentially Private Spatiotemporal Trajectory Synthesis with Retained Data Utility

A Trajectory Data Publication Method under Differential Privacy

BiGRU-DP: Improved differential privacy protection method for trajectory data publishing

Differentially Private Publication of Streaming Trajectory Data.

OPTDP: Towards optimal personalized trajectory differential privacy for trajectory data publishing

Differentially Private Publication Scheme for Trajectory Data.

Personalized Differential Privacy Preservation Method for Trajectory Based on Regional Density Analysis

Achieving Differential Privacy of Trajectory Data Publishing in Participatory Sensing

Spatio-temporal Trajectory Dataset Privacy Based on Network Traffic Control

PrivTrace: Differentially Private Trajectory Synthesis by Adaptive Markov Models

Personalized Privacy-Preserving Trajectory Data Publishing

Publishing Sensitive Trajectory Data under Enhanced L-Diversity Model.

A Novel Personalized Differential Privacy Mechanism for Trajectory Data Publication

Frequency-based Randomization for Guaranteeing Differential Privacy in Spatial Trajectories

Synthesizing Realistic Trajectory Data With Differential Privacy

Differentially Private Publication of General Time-Serial Trajectory Data

Differentially Private Trajectory Data Publication

Differential privacy protection method based on published trajectory cross-correlation constraint