Differential Privacy Models for Location- Based Services

Ehab Elsalamouny 1, 2, 3 Sébastien Gambs 4
1 COMETE - Concurrency, Mobility and Transactions
LIX - Laboratoire d'informatique de l'École polytechnique [Palaiseau], Inria Saclay - Ile de France, X - École polytechnique, CNRS - Centre National de la Recherche Scientifique : UMR7161
Abstract : In this paper, we consider the adaptation of differential privacy to the context of location-based services (LBSs), which personalize the information provided to a user based on his current position. Assuming that the LBS provider is queried with a perturbed version of the position of the user instead of his exact one, we rely on differential privacy to quantify the level of indistinguishability (i.e., privacy) provided by this perturbation with respect to the user's position. In this setting, the adaptation of differential privacy can lead to various models depending on the precise form of indistinguishability required. We discuss the set of properties that hold for these models in terms of privacy, utility and also implementation issues. More precisely, we first introduce and analyze one of these models, the (D,eps)-location privacy, which is directly inspired from the standard differential privacy model. In this context, we describe a general probabilistic model for obfuscation mechanisms for the locations whose output domain is the Euclidean space E^2. In this model, we characterize the satisfiability conditions of (D,eps)-location privacy for a particular mechanism and also measure its utility with respect to an arbitrary loss function. Afterwards, we present and analyze symmetric mechanisms in which all locations are perturbed in a unified manner through a noise function, focusing in particular on circular noise functions. We prove that, under certain assumptions, the circular functions are rich enough to provide the same privacy and utility levels as other more complex (i.e., non-circular) noise functions, while being easier to implement. Finally, we extend our results to a generalized notion for location privacy, called `l-privacy' capturing both (D,eps)-location privacy and also the notion of geo-indistinguishability recently introduced by Andrès, Bordenabe, Chatzikokolakis and Palamidessi.
Type de document :
Article dans une revue
Transactions on Data Privacy, IIIA-CSIC, 2016, 9 (1), pp.15 - 48. 〈http://www.tdp.cat/〉
Liste complète des métadonnées

https://hal.inria.fr/hal-01418136
Contributeur : Ehab Elsalamouny <>
Soumis le : vendredi 16 décembre 2016 - 20:37:52
Dernière modification le : jeudi 10 mai 2018 - 02:06:30
Document(s) archivé(s) le : mardi 21 mars 2017 - 00:08:22

Fichier

tdp.a220a15.pdf
Fichiers éditeurs autorisés sur une archive ouverte

Licence


Domaine public

Identifiants

  • HAL Id : hal-01418136, version 1

Citation

Ehab Elsalamouny, Sébastien Gambs. Differential Privacy Models for Location- Based Services. Transactions on Data Privacy, IIIA-CSIC, 2016, 9 (1), pp.15 - 48. 〈http://www.tdp.cat/〉. 〈hal-01418136〉

Partager

Métriques

Consultations de la notice

607

Téléchargements de fichiers

166