ShiftRoute: Achieving Location Privacy for Map Services on Smartphones
ShiftRoute: Achieving Location Privacy for Map Services on Smartphones
复制标题
DOI：
10.1109/tvt.2018.2791402
复制
发表时间：
2018-01
影响因子：
6.8
通讯作者：
Peng Zhang;Chengchen Hu;Di Chen;Hao Li;Qi Li
中科院分区：
文献类型：
--
作者：
Peng Zhang;Chengchen Hu;Di Chen;Hao Li;Qi Li
地图服务，例如，谷歌地图，越来越受欢迎的车辆导航。然而，地图服务用户必须提供敏感信息，如精确的地理位置或详细的地址，这些信息很容易被意外泄露，甚至在未来的数据挖掘。我们发现，现有的通用位置隐私保护机制（LPPM）不有效，当应用到智能手机上的地图服务。本文介绍了ShiftRoute，一个新的LPPM专为智能手机上的地图服务。ShiftRoute使智能手机用户能够查询地图上两个端点之间的路线，而不会泄露任何有意义的位置信息。基本思想是策略性地将端点转移到附近的端点，使得：1）在这些端点中编码的语义含义（例如，他们的地址）变化很大，即，位置隐私在很大程度上受到保护; 2）由地图服务返回的路线几乎不改变，即，服务可用性得以保留。具体来说，我们设计了一个协议，允许一个移动的客户端检索的兴趣点（POI）接近原始端点，并从这些POI选择移动端点的算法，实现地理不可侵犯的隐私属性。我们在Android上实现了ShiftRoute的应用程序，并从生产地图服务的真实的痕迹进行实验。实验结果表明，ShiftRoute在位置隐私和服务可用性之间取得了较好的平衡.
Map services, e.g., Google Maps, are gaining popularity for vehicle navigation. However, map service users have to provide sensitive information like precise geographic locations or detailed addresses, which are susceptible to accidental leakage or even data mining in the future. We find existing general-purposed location privacy protection mechanisms (LPPMs) not effective, when applied to map service on smartphones. This paper presents ShiftRoute, a new LPPM specially designed for map services on smartphones. ShiftRoute enables smartphone users to query a route between two endpoints on the map, without revealing any meaningful location information. The basic idea is to strategically shift the endpoints to nearby ones, such that: 1) the semantic meanings encoded in these endpoints (e.g., their addresses) change much, i.e., location privacy is largely protected; 2) the routes returned by map services change little, i.e., service usability is preserved. Specifically, we design a protocol to allow a mobile client to retrieve point of interests (POIs) close to the original endpoints, and an algorithm that selects shifted endpoints from these POIs, that achieves the privacy property of geo-indistinguishability. We implement an application of ShiftRoute on Android, and conduct experiments with real traces from a production map service. Experimental results show that ShiftRoute strikes a good tradeoff between location privacy and service usability.