Probe Data Mode Switching for Privacy-Safe Traffic Mapping

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing systems face challenges in determining traffic and map information in areas with low probe apparatus density, compromising user privacy due to reliance on limited data from a few devices.

Innovation Solution

Probe apparatuses switch between sensing and obfuscation modes based on traffic volume, providing complete individual data in high-density areas and contributing to collaborative data in low-density areas to maintain privacy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If probe apparatuses provide individual probe information/data in low-density areas, then traffic and map information accuracy is improved, but user privacy is compromised

Engineering Contradiction:
Improvetraffic and map information accuracyVSAvoiduser privacy compromise
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The probe apparatus dynamically switches between sensing mode and obfuscation mode based on the density of probe apparatuses in the current geographical area. This dynamic adaptation allows the system to provide accurate individual data when safe (high density) and protect privacy when necessary (low density), resolving the contradiction between accuracy and privacy.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of data provision from individual probe information to collaborative probe information based on the density parameter. When density is low, the apparatus contributes to collaborative data pools rather than providing individual data, thereby maintaining accuracy through aggregated data while protecting user privacy.

Inventive Principle:
Principle #35Parameter changes

2Object-affected harmful factors

If probe apparatuses operate in obfuscation mode in low-density areas, then user privacy is preserved, but traffic and map information accuracy deteriorates

Engineering Contradiction:
Improveuser privacy protectionVSAvoidtraffic and map information accuracy
Core Design Contradiction:
Object-affected harmful factorsVSMeasurement precision

Solution Approach 1:

In low-density areas, the probe apparatus merges its probe information with collaborative probe information from other sources. This combination allows the system to maintain sufficient data volume for accurate traffic and map information while preserving user privacy through the obfuscation mode.

Inventive Principle:
Principle #5Merging (Combining)

3Object-affected harmful factors

If the system uses collaborative probe information, then user privacy is protected, but the complexity of data processing increases

Engineering Contradiction:
Improveuser privacy protectionVSAvoiddata processing complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The system segments the data processing into two distinct modes: sensing mode for individual data collection and obfuscation mode for collaborative data contribution. This segmentation simplifies the overall complexity by providing clear guidelines for when to use each approach, rather than requiring complex real-time analysis for every data point.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP3757962B1Dynamic privacy-sensitive operating modes
Publication Date: 2025.12.10 HERE GLOBAL BV
  • EP3757962B1 patent drawingFigure 1
  • EP3757962B1 patent drawingFigure 2A~2B
  • EP3757962B1 patent drawingFigure 3

AI summary

It is determined whether the number of second probe apparatuses in the vicinity of a first probe apparatus satisfies a volume threshold requirement. Responsive to determining that the volume threshold requirement is satisfied, an instance of individual probe data is generated and provided. Responsive to determining that the volume threshold requirement is not satisfied, it is determined if a first instance of collaborative probe data corresponds to a portion of a trajectory of the first probe apparatus. Responsive to determining that the first instance of collaborative probe data corresponds to the portion of the trajectory, a contribution is added to the first instance of collaborative probe data and the updated first instance of collaborative probe data is provided. Otherwise, a first instance of collaborative probe data is generated that comprises a partial representation of probe data corresponding to the portion of the trajectory of the first probe apparatus.