Identification via location-profiling in GSM networks

ABSTRACT

As devices move within a cellular network, they register their new location with cell base stations to allow for the correct forwarding of data. We show it is possible to identify a mobile user from these records and a pre-existing location profile, based on previous movement. Two different identification processes are studied, and their performances are evaluated on real cell location traces. The best of those allows for the identification of around 80% of users. We also study the misidentified users and characterise them using hierarchical clustering techniques. Our findings highlight the difficulty of anonymizing location data, and firmly establish they are personally identifiable.

REFERENCES

• 1: MIT Media Lab: Reality Mining. http://reality.media.mit.edu/, 2007.
• 2: A. Beresford. Location Privacy in Ubiquitous Computing. PhD thesis, University of Cambridge, 2004.
• 3: Amiya Bhattacharya , Sajal K. Das, LeZi-update: an information-theoretic framework for personal mobility tracking in PCS networks, Wireless Networks, v.8 n.2/3, p.121-135, March-May 2002 [doi>10.1023/A:1013759724438]
• 4: Dan Cvrcek , Marek Kumpost , Vashek Matyas , George Danezis, A study on the value of location privacy, Proceedings of the 5th ACM workshop on Privacy in electronic society, October 30-30, 2006, Alexandria, Virginia, USA [doi>10.1145/1179601.1179621]
• 5: C. Goemans and J. Dumortier. Enforcement issues - mandatory retention of traffic data in the eu: possible impact on privacy and on-line anonymity. Digital Anonymity and the Law, series IT & Law, pages 161--183, 2003.
• 6: D. Gu and S. Rappaport. A dynamic location tracking strategy for mobile communicationsystems. Vehicular Technology Conference, 1998. VTC 98. 48th IEEE, 1, 1998.
• 7: Stan Salvador , Philip Chan, Determining the Number of Clusters/Segments in Hierarchical Clustering/Segmentation Algorithms, Proceedings of the 16th IEEE International Conference on Tools with Artificial Intelligence, p.576-584, November 15-17, 2004 [doi>10.1109/ICTAI.2004.50]
• 8: B. Sidhu and H. Singh. Location Management in Cellular Networks. In Proceedings of World Academy of Science, Engineering and Technology, pages 314--319, 2007.

INDEX TERMS

Primary Classification:
  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
      K.4.1 Public Policy Issues
          Subjects: Privacy

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Experimentation, Performance, Security

Keywords:
cellular network, identification, location privacy, location profile