Vehicle Probe Data Privacy via Carrier Disassociation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The collection of vehicle probe data raises privacy concerns due to the association of identifying information, such as MAC addresses, which can lead to issues like inaccurate crash avoidance systems when randomized, as seen in existing DSRC technologies.

Innovation Solution

A method where probe data is collected and transmitted by a host vehicle to a carrier vehicle, with identifying information disassociated from the data, ensuring privacy by removing MAC addresses before transmission to an external communication device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If MAC addresses are randomized to protect privacy, then privacy is improved, but crash avoidance system accuracy deteriorates

Engineering Contradiction:

Improveprivacy protectionVSAvoidcrash avoidance system accuracy

Core Design Contradiction:

ReliabilityVSMeasurement precision

Solution Approach 1:

The system segments the communication process into two distinct phases: a safety-critical phase where MAC addresses are associated with probe data for accurate crash avoidance, and a privacy-protecting phase where MAC addresses are disassociated from probe data for anonymous collection. This segmentation allows each phase to optimize for its specific goal without compromising the other.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary mechanism (the disassociation process) that separates the identifying information (MAC address) from the probe data before transmission to external servers. This intermediary step protects privacy while maintaining the integrity of safety-related communications that occur directly between vehicles.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If identifying information is disassociated from probe data, then privacy is improved, but data traceability deteriorates

Engineering Contradiction:

Improveprivacy protectionVSAvoiddata traceability

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The system extracts the identifying information (MAC address) from the probe data package before transmission to external servers. This extraction removes the privacy risk while preserving the utility of the probe data for traffic analysis and infrastructure planning. The MAC address remains available in the vehicle for safety communications but is removed from the anonymous dataset.

Inventive Principle:

Principle #2Taking out (Extraction)

3Measurement precision

If MAC addresses are not randomized, then crash avoidance accuracy is maintained, but privacy concerns worsen

Engineering Contradiction:

Improvecrash avoidance system accuracyVSAvoidprivacy concerns

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The system dynamically adjusts the use of MAC addresses based on the communication context: MAC addresses are maintained and associated with probe data during direct vehicle-to-vehicle safety communications, but are disassociated and anonymized when transmitting probe data to external servers for non-safety applications. This dynamic approach allows the system to optimize for accuracy when needed and protect privacy when appropriate.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS8279083B2Vehicle information communication method

Publication Date: 2012.10.02 NISSAN MOTOR CO LTD

AI summary

A vehicle information communication method is provided in which at least one of host vehicle probe data and surrounding vehicle probe data is collected in a host vehicle. After collection, the data is transmitted to a carrier vehicle. The carrier vehicle then disassociates identifying information from the data before sending the data to an external communication device.