Trajectory Reconstruction from Anonymized Location Data

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional anonymization techniques for location data are insufficiently robust, allowing malicious adversaries to reconstruct user trajectories and compromising user privacy, especially in sparse data regions.

Innovation Solution

A state-space model is used to predict user or object locations based on anonymized data, employing discrete and continuous prediction algorithms to link trajectory segments and reconstruct trajectories, thereby assessing the quality of anonymization and informing necessary modifications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional anonymization techniques are applied to location data, then user privacy is protected to some extent, but the anonymization is insufficiently robust and allows trajectory reconstruction by malicious adversaries

Engineering Contradiction:
Improveanonymization robustnessVSAvoidtrajectory information leakage
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent applies preliminary action by performing trajectory reconstruction analysis before actual data publication. The system evaluates the vulnerability of anonymized location data by attempting to reconstruct trajectories using state-space models and prediction algorithms, allowing data owners to identify and fix weaknesses in the anonymization process before sensitive data is exposed to adversaries.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements preliminary anti-action by creating an adversarial reconstruction system that proactively identifies vulnerabilities in anonymization schemes. This anti-action mechanism simulates malicious attacks on anonymized data, enabling data owners to strengthen their anonymization protocols against trajectory reconstruction attempts before real adversaries can exploit weaknesses.

Inventive Principle:
Principle #9Preliminary anti-action

2Adaptability or versatility

If more location data is collected and shared for urban planning and logistics applications, then the usefulness of the data increases, but the risk of revealing personal and sensitive information also increases

Engineering Contradiction:
Improvedata utility for applicationsVSAvoidprivacy risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies feedback by creating a closed-loop system where anonymized location data undergoes vulnerability assessment through trajectory reconstruction attempts. The results of these reconstruction attempts feed back to data owners, enabling them to adjust and improve their anonymization strategies while maintaining data utility for urban planning, logistics, and other applications.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary vulnerability assessment on anonymized location datasets before they are published or shared for various applications. This advance evaluation allows data owners to ensure that the data can be safely used for urban planning, logistics, and other purposes without exposing users to privacy risks.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If the sophistication of attacks on anonymized data increases, then the ability to detect vulnerabilities improves, but the challenge of protecting data privacy becomes more difficult

Engineering Contradiction:
Improvevulnerability detection accuracyVSAvoidprivacy protection system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary vulnerability assessment system that mediates between anonymization techniques and potential attacks. This intermediary system uses state-space models and prediction algorithms to evaluate anonymization robustness, providing data owners with actionable insights without requiring them to develop complex defensive mechanisms themselves.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11537924B2Systems and methods for reconstructing a trajectory from anonymized data
Publication Date: 2022.12.27 HERE GLOBAL BV
  • US11537924B2 patent drawing
  • US11537924B2 patent drawing
  • US11537924B2 patent drawing

AI summary

Systems and methods for reconstructing a trajectory from anonymized data are provided. In some aspects, a method includes receiving anonymized data corresponding to a trajectory of a user or object, and assembling, based on the anonymized data, a state-space model. The method also includes executing a prediction algorithm, based on the state-space model, to generate predicted data from the anonymized data, and reconstructing the trajectory of the user or object using the predicted data. The method further includes generating a report indicative of the trajectory.