Subscriber Identification Pseudonymization for Traffic Forecasting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for traffic forecasting using cellular network data face challenges in ensuring user anonymity while allowing data interrelation for traffic analysis, as current standards restrict the use and configuration of person-associated identifications, making it difficult to balance privacy and data correlation.
Innovation Solution
Employing a one-way function to calculate a functional value from the subscriber's numerical identification, associating it with registration data, and transmitting this functional value without the identification to enable data interrelation while maintaining user anonymity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If the subscriber's numerical identification is transmitted to enable data interrelation for traffic forecasting, then data correlation capability is improved, but user anonymity and privacy are compromised
Solution Approach 1:
A pseudonym is introduced as an intermediary between the subscriber's real identification and the traffic forecasting system. The pseudonym allows data to be correlated and linked across different registration events without exposing the actual subscriber identity. The correlation table acts as a mediator that connects pseudonyms to real identities but is controlled by the cellular provider, not the traffic forecasting company.
Solution Approach 2:
The real numerical identification (IMSI) is extracted and kept separate from the data transmitted to the traffic forecasting system. Only the pseudonym is transmitted, while the real identification remains securely stored in the correlation table controlled by the cellular provider. This separation allows data correlation functionality while removing the privacy risk associated with transmitting actual identifiers.
2Loss of information
If a correlation table with real identifications is used to enable data interrelation, then data correlation is improved, but the system becomes vulnerable to identification attacks
Solution Approach 1:
The pseudonym serves as a secure intermediary that breaks the direct link between the traffic forecasting system and the subscriber's real identity. Even though a correlation table exists, the pseudonym acts as a protective layer that prevents unauthorized access to real identities, as only the cellular provider with secure access to the correlation table can perform the mapping.
3Object-affected harmful factors
If the subscriber's real identification is replaced with a pseudonym, then user anonymity is improved, but the ability to interrelate data within a certain period is reduced
Solution Approach 1:
The essential correlating features (time and location information) are extracted and retained in the pseudonymized data, while only the identifying component (real numerical ID) is removed and replaced with a pseudonym. This allows data interrelation to function based on temporal and spatial patterns without requiring access to the actual subscriber identity.
Data Source
AI summary
In a method and an arrangement for using certain data acquired upon registration of a mobile communication device of a mobile subscriber of a cellular provider at a switching center, in particular for traffic forecasting, wherein the acquired data comprise at least a numerical identification associated with the person of the subscriber and time and location of registration at the switching center, the numerical identification is used at least partially as an argument of a true one-way function or pseudo one-way function for calculating a functional value. The functional value is associated with the acquired data, especially time and location of the registration. The acquired data including the functional value but without the numerical identification are transmitted to a unit using the data.