Query m-Invariance: Preventing Query Disclosures in Continuous Location-Based Services

Abstract—Location obfuscation using cloaking regions preserves location anonymity by hiding the true user among a set of other equally likely users. Furthermore, a cloaking region should also guarantee that the type of queries issued by users within the region are mutually diverse enough. The first requirement is fulfilled by satisfying location k-anonymity while the second one is ensured by satisfying query -diversity. However, these two models are not sufficient to prevent the association of queries to users when the service depends on continuous location updates. Successive cloaking regions for a user may be k-anonymous and query -diverse but still be prone to correlation attacks. In this paper, we provide a formal analysis of the privacy risks involved in a continuous location-based service, and show how continuous queries can invalidate the privacy guarantees provided by k-anonymity and -diversity. Drawing upon the principle of m-invariance in database privacy, we show how qu...

• Type: Conference
• Year: 2010
• Where: MDM
• Authors: Rinku Dewri, Indrakshi Ray, Indrajit Ray, Darrell Whitley
• Keywords: Cloaking Regions, Communications, Continuous Location-based Services, MDM 2010, Regions Preserves Location