Preserving location privacy in wireless lans

ABSTRACT

The broadcast and tetherless nature of wireless networks and the widespread deployment of Wi-Fi hotspots makes it easy to remotely locate a user by observing her wireless signals. Location is private information and can be used by malicious individuals for blackmail, stalking, and other privacy violations. In this paper, we analyze the problem of location privacy in wireless networks and present a protocol for improving location privacy. Our basic approach is to obfuscate several types of privacy-compromising information revealed by a mobile node, including sender identity, time of transmission, and signal strength. Our design is driven by real-system implementation and field experiments along with analysis and simulations. Our system allows users to choose the level of privacy they desire, thereby increasing the performance of less private users (while not sacrificing private users' privacy at the same time). We evaluated our system based on real-life mobility data and wireless LAN coverage. Our results show that a user of our system can be indistinguishable from a thousand users in the same coverage area.

REFERENCES

• 1: D. Aguayo, J. Bicket, S. Biswas, D. S. J. De Couto, and R. Morris. MIT Roofnet implementation. Technical report, MIT, Aug. 2003. Available at http://pdos.lcs.mit.edu/roofnet/design/.
• 2: P. Bahl and V. N. Padmanabhan. RADAR: An in-building RF-based user location and tracking system. In Proceedings of IEEE INFOCOM '00, volume 2, pages 775--784, Tel-Aviv, Israel, March 2000.
• 3: P. Bahl, V. N. Padmanabhan, and A. Balachandran. Enhancements to the RADAR user location and tracking system. Technical Report 12, Microsoft Research, February 2000.
• 4: Alastair R. Beresford , Frank Stajano, Location Privacy in Pervasive Computing, IEEE Pervasive Computing, v.2 n.1, p.46-55, January 2003 [doi>10.1109/MPRV.2003.1186725]
• 5: P. Bhagwat, B. Raman, and D. Sanghi. Turning 802.11 inside-out. In Proceedings of the Second Workshop on Hot Topics in Networks (HotNets-II), Nov. 2003.
• 6: David L. Chaum, Untraceable electronic mail, return addresses, and digital pseudonyms, Communications of the ACM, v.24 n.2, p.84-90, Feb. 1981 [doi>10.1145/358549.358563]
• 7: Yu-Chung Cheng , Yatin Chawathe , Anthony LaMarca , John Krumm, Accuracy characterization for metropolitan-scale Wi-Fi localization, Proceedings of the 3rd international conference on Mobile systems, applications, and services, June 06-08, 2005, Seattle, Washington [doi>10.1145/1067170.1067195]
• 8: Cisco Aironet wireless LAN client adapters installation and configuration guide for Windows, 2003.
• 9: CRAWDAD: Achiving wireless data at Dartmouth College. Available at http://crawdad.cs.dartmouth.edu.
• 10: D. Dailey, G. Fisher, and S. Maclean. Busview and transit watch: an update on two products from the seattle smart trek model deployment initiative. In Sixth Annual World Congress on Intelligent Transport Systems, Nov. 1999.
• 11: Matthew S Gast, 802.11 Wireless Networks: The Definitive Guide, Second Edition, O'Reilly Media, Inc., 2005
• 12: The IETF Geopriv working group. http://www.ietf.org/html.charters/geopriv-charter.html.
• 13: R. Gerdes, T. Daniels, M. Mina, and S. Russell. Device identification via analog signal fingerprinting: A matched filter approach. In Proceedings of The 13th Annual Network and Distributed System Security Symposium, NDSS'06, San Diego, California, February 2006.
• 14: A. Görlach, A. Heinemann, and W. W. Terpstra. Survey on location privacy in pervasive computing. In P. Robinson, H. Vogt, and W. Wagealla, editors, Privacy, Security and Trust within the Context of Pervasive Computing, The Kluwer International Series in Engineering and Computer Science, 2004.
• 15: Marco Gruteser , Dirk Grunwald, Anonymous Usage of Location-Based Services Through Spatial and Temporal Cloaking, Proceedings of the 1st international conference on Mobile systems, applications and services, p.31-42, May 05-08, 2003, San Francisco, California [doi>10.1145/1066116.1189037]
• 16: Marco Gruteser , Dirk Grunwald, Enhancing location privacy in wireless LAN through disposable interface identifiers: a quantitative analysis, Proceedings of the 1st ACM international workshop on Wireless mobile applications and services on WLAN hotspots, September 19-19, 2003, San Diego, CA, USA [doi>10.1145/941326.941334]
• 17: J. Hall, M. Barbeau, and E. Kranakis. Radio frequency fingerprinting for intrusion detection in wirless networks. IEEE Transactions on Defendable and Secure Computing, 2005. DRAFT.
• 18: Mike Hazas , Andy Ward, A High Performance Privacy-Oriented Location System, Proceedings of the First IEEE International Conference on Pervasive Computing and Communications, p.216, March 23-26, 2003
• 19: Q. He, D. Wu, and P. Khosla. Quest for personal control over mobile location privacy. IEEE Communications Magazine, 42(5):130--136, May 2004.
• 20: Y.-C. Hu and H. J. Wang. Location privacy in wireless networks. In Proceedings of the ACM SIGCOMM Asia Workshop, Beijing, 2005.
• 21: L. Huang, K. Matsuura, H. Yamane, and K. Sezaki. Enhancing wireless location privacy using silent period. In Proceedings of IEEE Wireless Communications and Networking Conference (WCNC), New Orleans, LA, 2005.
• 22: V. Kawadia and P. R. Kumar. Power control and clustering in ad hoc networks. In Proceedings of IEEE Infocom, San Francisco, California, April 2003.
• 23: Andrew M. Ladd , Kostas E. Bekris , Algis Rudys , Guillaume Marceau , Lydia E. Kavraki , Dan S. Wallach, Robotics-based location sensing using wireless ethernet, Proceedings of the 8th annual international conference on Mobile computing and networking, September 23-28, 2002, Atlanta, Georgia, USA [doi>10.1145/570645.570674]
• 24: G. Montenegro and C. Castelluccia. Statistically unique and cryptographically verifiable (SUCV) identifiers and addresses. In Symposium on Network and Distributed Systems Security (NDSS2002), 2002.
• 25: Michael K. Reiter , Aviel D. Rubin, Crowds: anonymity for Web transactions, ACM Transactions on Information and System Security (TISSEC), v.1 n.1, p.66-92, Nov. 1998 [doi>10.1145/290163.290168]
• 26: C. Shannon. A mathematical theory of communication. Bell Systems Technical Journal, 27:379--423, 623--656, July, October 1948.
• 27: R. van Drunen, D.-W. van Gulik, J. Koolhaas, H. Schuurmans, and M. Vijn. Building a wireless community network in the Netherlands. In Proceedings of the USENIX 2003 Annual Technical Conference, pages 219--230, June 2003.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.m Miscellaneous

General Terms:
Design, Experimentation, Measurement, Security

Keywords:
802.11, localization, privacy