Semantic Privacy Index for Trajectory Anonymization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Anonymization of trajectories for privacy preservation reduces their utility in location-based services, as existing methods do not effectively balance the risk of re-identification with the retention of service utility.
Innovation Solution
A method to determine a semantic privacy index, which assesses the risk of re-identifying a trajectory post-anonymization, allowing for context-dependent anonymization that balances re-identification risk with service utility by using a risk estimation model incorporating spatial, temporal, and user-specific information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If trajectory data is anonymized to protect user privacy, then the risk of re-identification is reduced, but the utility of the trajectory data for location-based services deteriorates
Solution Approach 1:
The patent changes the parameter of anonymization from a fixed binary state (anonymized/not anonymized) to a continuous spectrum controlled by a semantic privacy index. This index dynamically adjusts the degree of anonymization based on contextual factors such as trajectory characteristics, location sensitivity, and service requirements, allowing optimization of both privacy protection and service utility simultaneously
Solution Approach 2:
The patent introduces a dynamic anonymization framework where the anonymization level is not static but adapts based on the semantic privacy index. This index is calculated in real-time considering multiple factors including trajectory patterns, geographic context, and service type, enabling the system to maintain high utility for low-risk trajectories while applying stronger anonymization only where necessary
Data Source
AI summary
A method, apparatus and computer program product are provided to determine a semantic privacy index that quantifies the risk associated with re-identification of a trajectory following anonymization of the trajectory. In the context of a method, information regarding a trajectory is received. After the trajectory has been map matched to a portion of a road network, the method associates contextual information comprising one or more map features with the trajectory. The method also provides the information regarding the trajectory and the contextual information comprising the one or more map features to a risk estimation model in order to generate the semantic privacy index.