Vehicle Data Anonymization via Location and Time Masking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Modern motor vehicles collect data that can infer personal information about drivers, necessitating consent for use, which is often cumbersome and not customary in the automotive field, and existing methods do not fully address the need for anonymization without user consent.

Innovation Solution

A method and apparatus for processing vehicle data using location-oriented or time-oriented masking and content-oriented focusing to anonymize data, allowing collection without user consent by masking data to achieve group anonymity and preventing personal links, with masking intensity adjusted based on traffic flow and data criticality.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of information

If data are collected and processed without anonymization, then data utility for evaluation is improved, but personal information privacy is compromised requiring user consent

Engineering Contradiction:
Improvedata utilityVSAvoidprivacy risk
Core Design Contradiction:
Loss of informationVSObject-affected harmful factors

Solution Approach 1:

The patent extracts and removes personally identifiable information from vehicle data before processing. By separating and removing identifying elements such as exact location coordinates, timestamps, and vehicle identifiers, the system maintains useful traffic and weather data while eliminating privacy risks that would otherwise require user consent.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent applies different levels of anonymization to different types of data based on their sensitivity and utility. For example, aggregate traffic flow data may be fully anonymized while weather data collected from the same vehicle may require less anonymization. This localized approach optimizes both data utility and privacy protection.

Inventive Principle:
Principle #3Local quality

2Ease of operation

If anonymization methods are applied to protect privacy, then user consent requirements are reduced, but data processing complexity increases

Engineering Contradiction:
Improveconsent processVSAvoiddata processing system
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent implements anonymization processing in advance, before data is stored or analyzed. By automatically removing personally identifiable information at the point of collection through integrated processing units in the vehicle, the system eliminates the need for complex ongoing consent management while maintaining a streamlined data processing workflow.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If precise location and time data are collected, then data accuracy is improved, but ability to identify individuals increases requiring consent

Engineering Contradiction:
Improvelocation and time accuracyVSAvoididentifiability
Core Design Contradiction:
Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent segments precise location and time data into broader categories that maintain analytical value while reducing identifiability. For example, instead of recording exact GPS coordinates and timestamps, the system aggregates data into geographic zones and time periods, preserving traffic flow patterns and weather conditions while preventing individual vehicle identification.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS10846428B2Method, apparatus and computer readable storage medium having instructions for processing data collected by a motor vehicle
Publication Date: 2020.11.24 VOLKSWAGEN AG
  • US10846428B2 patent drawing
  • US10846428B2 patent drawing
  • US10846428B2 patent drawing

AI summary

A method, an apparatus and a computer-readable storage medium having instructions for processing data captured by a motor vehicle. In a first operation, a datum captured by a motor vehicle is received. Subsequently, location-oriented or time-oriented masking is applied to the received datum. Alternatively or additionally, the received datum is separated from other data captured by the motor vehicle. The masked or separated datum is forwarded for evaluation. The location-oriented or time-oriented masking or the separating of the received datum from other data captured by the motor vehicle is effected inside the motor vehicle or in a reception system with a connection to the motor vehicle.