SaTC: CORE: Small: Customizable Geo-Obfuscation to Protect Users' Location Privacy in Mobile Crowdsourcing

地理模糊是一种隐私保护技术，允许用户在基于位置的应用程序(如移动众包)中报告混淆的位置，而不是他们的准确位置。虽然地理模糊提供了强大的隐私保障，但由于模糊而产生的位置错误可能会影响服务质量。目前对这一主题的研究主要集中在通过优化技术来最小化质量损失，但由于计算开销较高，因此仅限于少数位置。因此，现有的工作将地理混淆的范围限制在大范围内的低粒度或小范围内的高粒度，几乎没有给用户留下根据自己的特定需求定制地理混淆的空间。该项目的创新之处在于设计了一个以用户为中心的多粒度、多尺度的地理模糊系统，可以根据用户的不同需求进行定制。该研究极大地增强了现有地理模糊技术的灵活性和可扩展性，从而促进了它们在各种移动环境中的应用。该项目的更广泛的意义和重要性是积极影响许多先进的众包应用程序的广泛采用，同时确保个人隐私。此外，这项计划的教育工作包括课程发展、幼稚园至幼稚园的外展活动，以及让未具代表性的学生参与研究工作。首先，该项目设计了能够计算大范围位置粒度和规模的地理模糊的省时算法，覆盖了包括县、市、街道、建筑物和房间在内的层级中的数百万个位置。其次，基于开发的地理模糊算法，该项目旨在根据大量移动用户的需求定制地理模糊，考虑到他们在不同场景下的不同移动特征和上下文信息。最后，该项目确定了各种粒度级别的可定制地理模糊的潜在威胁。根据从威胁模型中获得的见解，该项目设计了对策，以更好地保护用户的位置隐私免受新威胁的影响。这一奖项反映了NSF的法定使命，并通过使用基金会的智力优势和更广泛的影响审查标准进行评估，被认为值得支持。

Geo-obfuscation is a privacy protection technique that allows users to report obfuscated locations instead of their precise locations in location-based applications such as mobile crowdsourcing. While geo-obfuscation offers strong privacy guarantees, the location errors that arise due to obfuscation can affect the quality of the service. Current research on this topic focuses on minimizing quality loss through optimization techniques, but due to the high computation overhead, it is limited to a small number of locations. Consequently, existing works restrict the scope of geo-obfuscation to either low granularity in a large-scale region or high granularity in a small-scale region, leaving little room for users to customize geo-obfuscation to their specific requirements. The project's novelties are to design a user-centric geo-obfuscation in multi-granularity and multi-scale, which can be customized based on users' diverse demands. The proposed research significantly enhances the flexibility and scalability of existing geo-obfuscation techniques, thereby advancing their application in various mobile contexts. The project's broader significance and importance are to positively impact the wide adoption of many advanced crowdsourcing applications while ensuring individual privacy. In addition, the educational efforts of this project encompass curriculum development, K-12 outreach activities, and the engagement of underrepresented students in research.The project comprises three research tasks. Firstly, the project designs time-efficient algorithms capable of calculating geo-obfuscation for a wide range of location granularity and scales, covering millions of locations in a hierarchy that includes counties, cities, streets, buildings, and rooms. Secondly, based on the developed geo-obfuscation algorithms, the project aims to customize geo-obfuscation according to the demands of a large group of mobile users, taking into account their diverse mobility features and contextual information across different scenarios. Finally, the project identifies potential threats to customizable geo-obfuscation at various granularity levels. On the basis of the insights gained from the threat models, the project designs countermeasures to better protect users' location privacy against the new threats.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.