Ensuring Anonymity for LBSs in Smartphone Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
With the rapid growth of GPS-enable Smartphones, the interest on using Location Based Services (LBSs) has increased significantly. The evolution in the functionalities provided by those smartphones has enabled them to accurately pinpoint the location of a user. Because location information is what all LBSs depend on to process user’s request, it should be properly protected from attackers or malicious service providers (SP). Additionally, maintaining user’s privacy and confidentiality are imperative challenges to be overcome. A possible solution for these challenges is to provide user anonymity, which means to ensure that a user initiating a request to the SP should be indistinguishable from a group of people by any adversary who had access to the request. Most of the proposals that maintain user’s anonymity are based on location obfuscation. It mainly focuses on adjusting the resolution of the user’s location information. In this paper, we present a new protocol that is focused on using cryptographic techniques to provide anonymity for LBSs users in the smartphone environment. This protocol makes use of a trusted third party called the Anonymity Server (AS) that ensures anonymous communication between the user and the service provider.
Abstract
With the rapid growth of GPS-enable Smartphones, the interest on using Location Based Services (LBSs) has increased significantly. The evolution in the functionalities provided by those smartphones has enabled them to accurately pinpoint the location of a user. Because location information is what all LBSs depend on to process user’s request, it should be properly protected from attackers or malicious service providers (SP). Additionally, maintaining user’s privacy and confidentiality are imperative challenges to be overcome. A possible solution for these challenges is to provide user anonymity, which means to ensure that a user initiating a request to the SP should be indistinguishable from a group of people by any adversary who had access to the request. Most of the proposals that maintain user’s anonymity are based on location obfuscation. It mainly focuses on adjusting the resolution of the user’s location information. In this paper, we present a new protocol that is focused on using cryptographic techniques to provide anonymity for LBSs users in the smartphone environment. This protocol makes use of a trusted third party called the Anonymity Server (AS) that ensures anonymous communication between the user and the service provider.
참고문헌 (20)
- N. Poolsappasit, "Towards Achieving Personalized Privacy for Location-Based Services", Proceedings of Transactions on Data Privacy 2, Catalonia, Spain, pp.77~99 (2009)
- L.F. Cranor, "Spam!", Communications of the ACM, 41(8), pp.74~83 (1998)
- A.S. Gajparia, "Supporting User Privacy in Location Based Services", Proceedings of Mobile Multimedia Communications on IEICE Transactions on Communications, pp.2837~2847 (2005)
- 김광조, "A secure and privacy enhanced protocol for location-based services in ubiquitous society", GLOBECOM`04 - IEEE Global Telecommunications Conference, pp.2164~2168 (2004)
- M. Gruteser, "Anonymous Usage of Location-Based Services through Spatial and Temporal Cloaking", Proceedings of the 1st International Conference on Mobile Systems, Applications and Services (MobiSys '03), San Francisco, CA, USA, pp.31~42 (2003)
- C. Bettini, "Protecting privacy against location-based personal identification", Proceedings of the 2nd VLDB Workshop on Secure Data Management (SDM'05), Trondheim, Norway, pp.185~199 (2005)
- M. Gheorghita, "Location Privacy in Chain-Based protocols for Location- Based services", Proceedings of Third International Conference on Digital Telecommunications, Bucharest, Romania, pp.64~69 (2008)
- C. Bettini, "Anonymity in Location-Based Services: Towards a General Framework", Proceedings of the International Conference on Mobile Data Management,Mannheim, Germany, pp.69~76 (2007)
- C. Bettini, "Anonymity and diversity in LBS: a preliminary investigation", Proceedings of Fifth IEEE International Conference on Pervasive Computing and Communications (PERCOM-07), DC, USA, pp.577~580 (2007)
- D. Chaum, "Untraceable Electronic, Mail Return Addresses, and Digital Pseudonyms", Communication of the ACM, 24(2), pp.84~90 (1981)
- "Anonymous Authentication"[URL]
- A.S. Gajparia, "Using constraints to protect personal location information", Proceedings of the 58th IEEE Semi-annual VTC 2003-Fall, Orlando, Florida, USA, pp.2112~2116 (2003)
- B. Gedik, "Location Privacy in Mobile Systems: A Personalized Anonymization Model", Proceedings of the 25th IEEE International Conference on Distributed Computing Systems, Columbus, Ohio, USA, pp.620~629 (2005)
- P. Kalnis, "Preventing Location-Based Identity Inference in Anonymous Spatial Queries", IEEE Transactions on Knowledge and Data Engineering (IEEE TKDE), 19(12), pp.1719~1733 (2007)
- L. Sweeney, "k-anonymity: a model for protecting privacy", International Journal on Uncertainty Fuzziness and Knowledge-based Systems, 10(5), pp.557~570 (2002)
- H. Kido, "An anonymous communication technique using dummies for location-based services", Proceedings of the International Conference on Pervasive Services (ICPS), Santorini, Greece, pp.88~97 (2005)
- J. I. Hong, "An architecture for privacy-sensitive ubiquitous computing", Proceedings of the International Conference on Mobile Systems (MOBISYS), New York, NY, USA, pp.177~189 (2004)
- G. Ghinita, "Priv´e: Anonymous location-based queries in distributed mobile systems", Proceedings of the International World Wide Web conference, Banff, Canada, pp.476~485 (2007)
- G. Ghinita, "Private queries in location based services: Anonymizers are not necessary", Proceedings of the International conference on Management of data (SIGMOD), Vancouver, BC, Canada, pp.121~132 (2008)
- G. Ghinita, "Mobihide : A mobile peer-to-peer system for anonymous location-based queries", Proceedings of the Symposium on Spatial and Temporal Databases (SSTD), Boston, MA, pp.221~238 (2007)