Putting people in their place: an anonymous and privacy-sensitive approach to collecting sensed data in location-based applications

ABSTRACT

The emergence of location-based computing promises new and compelling applications, but raises very real privacy risks. Existing approaches to privacy generally treat people as the entity of interest, often using a fidelity tradeoff to manage the costs and benefits of revealing a person's location. However, these approaches cannot be applied in some applications, as a reduction in precision can render location information useless. This is true of a category of applications that use location data collected from multiple people to infer such information as whether there is a traffic jam on a bridge, whether there are seats available in a nearby coffee shop, when the next bus will arrive, or if a particular conference room is currently empty. We present hitchhiking, a new approach that treats locations as the primary entity of interest. Hitchhiking removes the fidelity tradeoff by preserving the anonymity of reports without reducing the precision of location disclosures. We can therefore support the full functionality of an interesting class of location-based applications without introducing the privacy concerns that would otherwise arise.

REFERENCES

• 1: Bahl, P., Balachandran, A., Miu, A., Voelker, G.M., Russell, W. and Wang, Y.-M. (2002) PAWNS: Satisfying the Need for Ubiquitous Connectivity and Location Services. IEEE Personal Communications Magazine (PCS), 9 (1).
• 2: Alastair R. Beresford , Frank Stajano, Location Privacy in Pervasive Computing, IEEE Pervasive Computing, v.2 n.1, p.46-55, January 2003 [doi>10.1109/MPRV.2003.1186725]
• 3: Keith Cheverst , Nigel Davies , Keith Mitchell , Adrian Friday, Experiences of developing and deploying a context-aware tourist guide: the GUIDE project, Proceedings of the 6th annual international conference on Mobile computing and networking, p.20-31, August 06-11, 2000, Boston, Massachusetts, United States [doi>10.1145/345910.345916]
• 4: Sunny Consolvo , Ian E. Smith , Tara Matthews , Anthony LaMarca , Jason Tabert , Pauline Powledge, Location disclosure to social relations: why, when, & what people want to share, Proceedings of the SIGCHI conference on Human factors in computing systems, April 02-07, 2005, Portland, Oregon, USA [doi>10.1145/1054972.1054985]
• 5: Cranor, L., Langheinrich, M., Marchiori, M. and Reagle, J. The Platform for Privacy Preferences 1.0 (P3P1.0) Specification. http://www.w3.org/TR/P3P
• 6: Anind K. Dey , Gregory D. Abowd, CybreMinder: A Context-Aware System for Supporting Reminders, Proceedings of the 2nd international symposium on Handheld and Ubiquitous Computing, p.172-186, September 25-27, 2000, Bristol, UK
• 7: William G. Griswold , Patricia Shanahan , Steven W. Brown , Robert Boyer , Matt Ratto , R. Benjamin Shapiro , Tan Minh Truong, ActiveCampus: Experiments in Community-Oriented Ubiquitous Computing, Computer, v.37 n.10, p.73-81, October 2004 [doi>10.1109/MC.2004.149]
• 8: Gruteser, M. and Grunwald, D. (2003) Anonymous Use of Location-Based Services Through Spatial and Temporal Cloaking. Proceedings of the ACM Conference on Mobile Systems, Applications, and Services (MobiSys 2003), 31--42.
• 9: Marco Gruteser , Dirk Grunwald, Enhancing location privacy in wireless LAN through disposable interface identifiers: a quantitative analysis, Proceedings of the 1st ACM international workshop on Wireless mobile applications and services on WLAN hotspots, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941326.941334]
• 10: Jeffrey Hightower , Gaetano Borriello, Location Systems for Ubiquitous Computing, Computer, v.34 n.8, p.57-66, August 2001 [doi>10.1109/2.940014]
• 11: Jason I. Hong , James A. Landay, An architecture for privacy-sensitive ubiquitous computing, Proceedings of the 2nd international conference on Mobile systems, applications, and services, June 06-09, 2004, Boston, MA, USA [doi>10.1145/990064.990087]
• 12: Jason I. Hong , Jennifer D. Ng , Scott Lederer , James A. Landay, Privacy risk models for designing privacy-sensitive ubiquitous computing systems, Proceedings of the 2004 conference on Designing interactive systems: processes, practices, methods, and techniques, August 01-04, 2004, Cambridge, MA, USA [doi>10.1145/1013115.1013129]
• 13: Giovanni Iachello , Ian Smith , Sunny Consolvo , Mike Chen , Gregory D. Abowd, Developing privacy guidelines for social location disclosure applications and services, Proceedings of the 2005 symposium on Usable privacy and security, p.65-76, July 06-08, 2005, Pittsburgh, Pennsylvania [doi>10.1145/1073001.1073008]
• 14: Kearney, C. Ex-AOL Employee Sentenced to 15 Months in Spam Case. Washington Post, August 17, 2005.
• 15: Krumm, J., Cermak, G. and Horvitz, E. (2003) RightSPOT: A Novel Sense of Location for Smart Personal Object. Proceedings of the International Conference on Ubiquitous Computing (UbiComp 2003), 36--43.
• 16: LaMarca, A., Chawathe, Y., Consolvo, S., Hightower, J., Smith, I., Scott, J., Sohn, T., Howard, J., Hughes, J., Potter, F., Tabert, J., Powledge, P., Borriello, G. and Schilit, B.N. (2005) Place Lab: Device Positioning Using Radio Beacons in the Wild. Proceedings of the International Conference on Pervasive Computing (Pervasive 2005), 116--133.
• 17: Marc Langheinrich, A Privacy Awareness System for Ubiquitous Computing Environments, Proceedings of the 4th international conference on Ubiquitous Computing, p.237-245, September 29-October 01, 2002, Göteborg, Sweden
• 18: Lawrence Lessig , Lawrence Lessing, Code and Other Laws of Cyberspace, Basic Books, Inc., New York, NY, 1999
• 19: Stuart D. Maclean , Daniel J. Dailey, MyBus: Helping Bus Riders Make Informed Decisions, IEEE Intelligent Systems, v.16 n.1, p.84-87, January 2001 [doi>10.1109/MIS.2001.1183341]
• 20: Leysia Palen , Paul Dourish, Unpacking "privacy" for a networked world, Proceedings of the SIGCHI conference on Human factors in computing systems, April 05-10, 2003, Ft. Lauderdale, Florida, USA [doi>10.1145/642611.642635]
• 21: Patterson, D.J., Liao, L., Fox, D. and Kautz, H. (2003) Inferring High-Level Behavior from Low-Level Sensors. Proceedings of the International Conference on Ubiquitous Computing (UbiComp 2003), 73--89.
• 22: Paul F. Syverson , David M. Goldschlag , Michael G. Reed, Anonymous Connections and Onion Routing, Proceedings of the 1997 IEEE Symposium on Security and Privacy, p.44, May 04-07, 1997
• 23: Bill N. Schilit , Anthony LaMarca , Gaetano Borriello , William G. Griswold , David McDonald , Edward Lazowska , Anand Balachandran , Jason Hong , Vaughn Iverson, Challenge: ubiquitous location-aware computing and the "place lab" initiative, Proceedings of the 1st ACM international workshop on Wireless mobile applications and services on WLAN hotspots, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941326.941331]
• 24: Smith, I., Consolvo, S., Hightower, J., Iachello, G., LaMarca, A., Scott, J., Sohn, T. and Abowd, G. (2005) Social Disclosure of Place: From Location Technology to Communications Practices. Proceedings of the International Conference on Pervasive Computing (Pervasive 2005), 134--151.
• 25: Voelker, G.M. and Bershad, B.N. (1994) Mobisaic: An Information System for a Mobile Wireless Computing Environment. Proceedings of the IEEE Workshop on Mobile Computing Systems and Applications (WMCSA 1994), 185--190.
• 26: Zipdash - Mobile Map and Traffic App. http://www.zipdash.com

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)

Additional Classification:
  H. Information Systems
  H.1 MODELS AND PRINCIPLES
      H.1.2 User/Machine Systems

Keywords:
anonymity, hitchhiking, location-based computing, privacy