Dynamic Mix Zones for Location Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Location-based services face privacy concerns due to unauthorized access and analysis of probe data, which can reveal users' identities and habits, compromising their privacy.
Innovation Solution
A method and apparatus using dynamic mix zones that selectively block device identities by generating pseudonyms for probe data based on geographic features, ensuring anonymity by adjusting the size and shape of the mix zone to maintain a predetermined anonymity level, thereby preventing unauthorized tracking.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If probe data is collected and stored for location-based services, then service functionality is improved, but user privacy is compromised
Solution Approach 1:
The patent introduces mix zones as intermediary geographic areas where probe identities are anonymized. When probes enter a mix zone, their identities are replaced with pseudonyms, acting as a mediator between data collection needs and privacy protection requirements. This allows location data to be utilized while preventing direct tracking of individual user identities.
Solution Approach 2:
The system dynamically changes the anonymity parameter (k-value) based on geographic location and traffic conditions. Mix zones are defined with specific anonymity levels, and the system adjusts these parameters to balance service functionality with privacy protection. The mix zone boundary and anonymity level are configurable parameters that can be modified to resolve the contradiction.
2Object-affected harmful factors
If mix zone size is increased to improve anonymity, then privacy protection is enhanced, but data precision is reduced
Solution Approach 1:
The mix zone boundaries and anonymity parameters are made dynamic rather than static. The system adjusts mix zone sizes and anonymity levels based on real-time conditions such as probe density, geographic features, and privacy requirements. This dynamic adjustment allows the system to optimize the balance between anonymity and precision for different locations and time periods.
Solution Approach 2:
Different anonymity levels and mix zone configurations are applied to different geographic areas based on local characteristics. High-privacy areas may have larger mix zones with higher anonymity levels, while areas requiring precise location data may have smaller mix zones. This local customization allows the system to address the contradiction differently in different contexts.
3Object-affected harmful factors
If pseudonyms are assigned to probes in mix zones, then tracking prevention is improved, but system complexity increases
Solution Approach 1:
The system segments the geographic space into mix zones and non-mix zones, and segments probe identities into real identities and pseudonyms. This segmentation allows tracking prevention to be applied only where necessary (in mix zones) while maintaining simplicity in other areas. The pseudonym assignment is segmented to specific geographic boundaries rather than applied universally.
Solution Approach 2:
The system automatically manages pseudonym assignment and mix zone operations without requiring manual intervention. The mix zone generator automatically defines zones based on geographic data, and the pseudonym generator automatically assigns pseudonyms when probes enter mix zones. This automation reduces the operational complexity despite the increased system architecture complexity.
Data Source
AI summary
An apparatus for providing anonymity in geographic data for probes using a variable mix zone in a geographic region includes a geographic database, a mix zone generator, and a pseudonym generator. The geographic database is configured to store one or more map features in the geographic region. The mix zone generator is configured to define a mix zone boundary having a size based on the one or more map features and monitor probe data for at least one probe. The probe data including a location within a predetermined distance of the mix zone boundary. The pseudonym generator is configured to select a pseudonym for the at least one probe in response to the location of the probe data and apply the pseudonym for the at least one probe in the geographic data when the at least one probe exits the mix zone.