Privacy-Preserving Location Query via Encrypted Quantization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current location-based applications on mobile devices require cloud servers to access actual user locations, compromising privacy as they compare latitude/longitude coordinates to determine proximity or historical visits, which raises concerns about data security and user anonymity.
Innovation Solution
Implementing encryption and quantization techniques, where mobile devices share a private key and quantization interval to encrypt and quantify location data, allowing servers to respond to location-based queries without decrypting or knowing the actual locations, ensuring user privacy by using identical mappings between quantized locations and random numbers generated by a shared random number generator.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If cloud servers access and compare actual user locations to determine proximity or historical visits, then location-based services can be accurately provided, but user privacy and data security are compromised
Solution Approach 1:
The patent introduces encrypted location data as an intermediary between users and the cloud server. Instead of the server directly accessing actual locations, it receives and processes encrypted location representations (ciphertext) that preserve spatial relationships without revealing true locations. This intermediary layer enables proximity queries while maintaining privacy, as the server operates on encrypted data that cannot be decrypted without user-specific keys.
Solution Approach 2:
The patent transforms location data from its original form (plain text coordinates) to an encrypted form (ciphertext) before transmission to the cloud server. This parameter change maintains the functional properties needed for proximity comparison while eliminating the harmful exposure of actual location information. The encryption algorithm and keys are carefully designed to preserve spatial relationships in the encrypted domain.
2Object-affected harmful factors
If location data is encrypted on mobile devices before upload, then user privacy is protected, but the server's ability to process location-based queries is limited
Solution Approach 1:
The encrypted location data serves as an intermediary that enables server processing while maintaining privacy. The server receives ciphertext, performs proximity comparisons on the encrypted data, and returns encrypted results. This intermediary approach allows the server to process queries without needing to decrypt the data, avoiding the complexity of implementing decryption infrastructure while preserving privacy.
Solution Approach 2:
The patent creates a functional copy of location data in encrypted form that preserves the necessary spatial relationships for proximity queries. This encrypted copy allows the server to perform comparisons and return results without accessing the original location information. The encryption scheme is designed so that the encrypted data maintains the structural properties needed for geometric operations.
3Device complexity
If a shared encryption key is used across all users, then key management is simplified, but security is compromised as any user can decrypt any other user's location data
Solution Approach 1:
The patent segments the single shared encryption key into multiple user-specific keys. Each user has their own private key that they control, while the cloud server holds corresponding public keys or encrypted data that can be processed without revealing other users' locations. This segmentation maintains security by ensuring that only the intended user can decrypt their own location data, while simplifying key management through automated key distribution mechanisms.
Solution Approach 2:
Instead of using a single shared key where the server can decrypt any user's data, the patent inverts the approach by giving each user their own private key. The server operates with public keys or encrypted representations that cannot be used to decrypt other users' data. This inversion of the key hierarchy maintains both security and simplified management by eliminating the need for the server to store or manage multiple private keys.
Data Source
AI summary
Described herein are technologies pertaining to preserving privacy of users of mobile computing devices. Two users of two mobile computing devices share a quantization scheme for quantizing location data using a predefined quantization interval. The two users additionally share a private key that is utilized to encrypt locations obtained by the two computing devices that have been quantized using the shared quantization scheme. Encrypted, quantized locations are compared in a cloud computing service in connection with answering location-based queries, where the comparison is undertaken without the cloud computing service decrypting the encrypted, quantized locations.