Anonymizing Navigation Routes by Removing Identity-Sensitive Segments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Portable navigation devices face challenges in maintaining user privacy while collecting and transmitting location data, as trace data can be traced back to individual users, and existing methods for anonymization are not effective in protecting sensitive locations.
Innovation Solution
The device determines identity-sensitive portions of a route based on associated properties and forms anonymized routes by modifying or removing these portions, such as reducing location accuracy or displacing locations, to protect user privacy during data transmission and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If location data is collected and transmitted for route analysis, then data utility is improved, but user privacy deteriorates due to traceability
Solution Approach 1:
The patent extracts and removes identity-sensitive portions (such as start location, end location, and way points) from the route trace data before transmission. This extraction process separates the useful route information from the privacy-sensitive components, allowing data utility to be maintained while protecting user privacy by eliminating the traceable elements that could identify users.
Solution Approach 2:
The patent modifies parameters of location data by reducing accuracy or displacing locations within identity-sensitive portions. Instead of completely removing all location data, the parameters are changed to maintain aggregate statistical value while making individual route traces untraceable to specific users, thus balancing data utility with privacy protection.
2Object-affected harmful factors
If identity-sensitive portions are removed from route data, then user privacy is improved, but data completeness deteriorates
Solution Approach 1:
The patent segments the route trace data into distinct portions: identity-sensitive portions (start location, end location, way points) and non-sensitive portions (intermediate route segments). By selectively processing only the identity-sensitive segments while preserving the rest, the system maintains data completeness for analytical purposes while removing only the necessary privacy-sensitive elements.
Solution Approach 2:
Instead of complete removal, the patent applies parameter changes to identity-sensitive locations by reducing accuracy or displacing them within acceptable margins. This approach preserves the overall structure and statistical value of the route data while making individual traces untraceable, thus maintaining data completeness without compromising privacy.
3Object-affected harmful factors
If location accuracy is reduced for privacy protection, then user privacy is improved, but measurement precision deteriorates
Solution Approach 1:
The patent applies different quality levels to different portions of the route data. Identity-sensitive portions undergo accuracy reduction or displacement for privacy protection, while non-sensitive intermediate portions maintain full accuracy. This local differentiation ensures that privacy protection is applied only where necessary without degrading the overall measurement precision of the route data.
Solution Approach 2:
The patent selectively changes accuracy parameters only for identity-sensitive locations rather than uniformly reducing precision across all data points. By applying parameter changes locally to specific portions that require privacy protection, the system maintains high measurement precision for analytical purposes while ensuring privacy where needed.
Data Source
Figure 1~3
Figure 2
Figure 4~5
AI summary
A mapping or navigation device (200) comprises or is connectable to position determining apparatus (224), the position determining apparatus (224) being operable to determine one or more locations of the mapping or navigation device (200), the one or more determined locations forming at least one route (405), wherein the mapping or navigation device (200) is configured to determine at least one portion (425, 430, 435) of the at least one route (405), where the at least one portion (425, 430, 435) is determined according to at least one property associated with at least one location (410, 415, 525) comprised in the portion (425, 430, 435), and the mapping or navigation device (200) is configured to form at least one anonymized route (440) from the at least one determined route (405), wherein the at least one anonymized route (440) does not include the at least one portion (425, 430, 435) of the at least one route (405).