A classification of location privacy attacks and approaches
A classification of location privacy attacks and approaches
复制标题
DOI：
10.1007/s00779-012-0633-z
复制
发表时间：
2012
影响因子：
--
通讯作者：
Marius Wernke;P. Skvortsov;Frank Dürr;K. Rothermel
中科院分区：
文献类型：
--
作者：
Marius Wernke;P. Skvortsov;Frank Dürr;K. Rothermel
近年来，基于位置的服务变得非常流行，这主要是由集成位置传感器的现代移动设备的可用性所驱动的。突出的例子是兴趣点查找器或地理社交网络，如Facebook Places、Qype和Loopt。但是，在提供此类服务时，如果这些用户位置没有得到充分保护，可能会引起严重的隐私问题。因此，位置隐私概念成为强制性的，以确保用户接受基于位置的服务。文献中描述了许多不同的位置隐私保护概念和方法。这些方法在受保护的信息及其对不同攻击的有效性方面有所不同。本文的目的是系统地评估位置隐私方法的适用性和有效性。我们首先确定了不同的保护目标，即个人信息（用户身份）、空间信息（用户位置）和时间信息（身份/位置+时间）。其次，我们概述了保护这些隐私目标的基本原则和现有方法。第三步，我们对可能的攻击进行分类。最后，我们分析了现有方法的保护目标和抵抗引入攻击的能力。
In recent years, location-based services have become very popular, mainly driven by the availability of modern mobile devices with integrated position sensors. Prominent examples are points of interest finders or geo-social networks such as Facebook Places, Qype, and Loopt. However, providing such services with private user positions may raise serious privacy concerns if these positions are not protected adequately. Therefore, location privacy concepts become mandatory to ensure the user’s acceptance of location-based services. Many different concepts and approaches for the protection of location privacy have been described in the literature. These approaches differ with respect to the protected information and their effectiveness against different attacks. The goal of this paper is to assess the applicability and effectiveness of location privacy approaches systematically. We first identify different protection goals, namely personal information (user identity), spatial information (user position), and temporal information (identity/position + time). Secondly, we give an overview of basic principles and existing approaches to protect these privacy goals. In a third step, we classify possible attacks. Finally, we analyze existing approaches with respect to their protection goals and their ability to resist the introduced attacks.