Aircraft Location Privacy Protection via ADS-B Identifier Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Air traffic communications systems, such as ADS-B, pose privacy threats due to unauthorized location tracking of aircraft, as periodic broadcasts can be detected by external entities, revealing sensitive location information and travel intentions.

Innovation Solution

Implementing methods to protect location privacy by designating bounded regions for aircraft to cease ADS-B transmissions and update identifiers, using random time periods for silence, and forming privacy-enhancing groups to reduce transmission ranges and enhance anonymity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If periodic ADS-B traffic beacons are broadcast to enable traffic control and ensure liability, then air traffic control efficiency is improved, but location privacy of aircraft operators is compromised

Engineering Contradiction:

Improveair traffic control efficiencyVSAvoidlocation tracking by unauthorized entities

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent segments the identification system into two distinct components: permanent identifiers (ICAO addresses) for liability and control purposes, and temporary anonymous identifiers for privacy protection. This segmentation allows the system to fulfill traffic control requirements while preventing unauthorized tracking, as ground controllers can verify aircraft identity without exposing operators to location tracking by external entities.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces anonymous identifiers as an intermediary layer between the aircraft and unauthorized monitoring entities. This intermediary protects the permanent identifier from being directly observed by external parties while still enabling traffic control functions. The anonymous identifier acts as a mediator that satisfies control requirements without revealing sensitive location information to adversaries.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Object-affected harmful factors

If anonymous identifiers are used in ADS-B broadcasts to protect privacy, then location tracking is mitigated, but the ability to establish liability and traceability is weakened

Engineering Contradiction:

Improvelocation tracking mitigationVSAvoidliability and traceability verification

Core Design Contradiction:

Object-affected harmful factorsVSReliability

Solution Approach 1:

The patent divides the identification function into two separate identifier types with distinct purposes: permanent ICAO addresses for liability establishment and traceability, and temporary anonymous identifiers for privacy protection. This segmentation resolves the contradiction by ensuring that liability verification can occur through the permanent identifier while the anonymous identifier prevents tracking by unauthorized entities.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies different identifier types in different contexts: anonymous identifiers are used in broadcasts visible to external entities to provide privacy, while permanent identifiers are used internally between the aircraft and ground controllers to establish liability. This local differentiation of identifier quality allows simultaneous achievement of privacy protection and liability verification.

Inventive Principle:

Principle #3Local quality

3Object-affected harmful factors

If cryptographic encryption is used to protect sensitive data in aircraft messages, then confidentiality is improved, but system complexity and key management requirements increase

Engineering Contradiction:

Improvedata confidentialityVSAvoidcryptographic key management

Core Design Contradiction:

Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent employs temporary anonymous identifiers that are short-lived and disposable, replacing the need for complex cryptographic key management. These identifiers can be changed periodically or randomly without requiring cryptographic operations, significantly reducing system complexity while still providing confidentiality protection against tracking.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The patent protects confidentiality by changing the identifier parameter over time rather than using cryptographic encryption. The anonymous identifier changes periodically or randomly, making tracking difficult without requiring complex cryptographic key management systems. This parameter change approach achieves confidentiality with minimal system complexity.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS8248294B2Method for protecting location privacy of air traffic communications

Publication Date: 2012.08.21 THE BOEING CO

AI summary

Methods of protecting location privacy of air traffic communications from unauthorized monitoring of aircraft locations in an uncontrolled airspace include designating a bounded region of uncontrolled airspace; ceasing transmission of a traffic beacon by each aircraft of a plurality of aircraft upon the aircraft entering the bounded region; and updating a unique identifier associated with each of the aircraft while the aircraft is traversing the bounded region.