Anonymizing location information of a mobile device

• US 9,319,876 B2
• Filed: 03/26/2015
• Issued: 04/19/2016
• Est. Priority Date: 05/30/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arunkumar, Saritha, Pipes, Stephen D., Srivatsa, Mudhakar
• Primary Examiner(s): WASHINGTON, ERIKA ALISE
• Application Number:
  US14/669,020
• Publication Number:
  US 20150350890A1
• Time in Patent Office: 390 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Anonymizing location information of a mobile device by an anonymization provider. The anonymization provider receives, from the mobile device, location information identifying the location of the mobile device and anonymity requirements. The anonymization provider determines whether the received location information satisfies the received anonymity requirements. Based on the received location information satisfying the received anonymity requirements, the anonymization provider generates an obfuscated location for the mobile device and sends the obfuscated location to the mobile device. Based on the received location information not satisfying the received anonymity requirements, the anonymization provider sends a request for new anonymity requirements to the mobile device.

Claims

1. A method for anonymizing location information of a mobile device, the method comprising:

receiving, by an anonymization provider, from the mobile device, location information identifying the location of the mobile device;

receiving, by the anonymization provider, from the mobile device, anonymity requirements;

determining, by the anonymization provider, whether the received location information satisfies the received anonymity requirements; and

based on the received location information satisfying the received anonymity requirements;

generating, by the anonymization provider, an obfuscated location for the mobile device; and

sending, by the anonymization provider, to the mobile device, the obfuscated location; and

based on the received location information not satisfying the received anonymity requirements, sending, by the anonymization provider, to the mobile device, a request for new anonymity requirements.

2. The method according to claim 1, wherein the received location information includes an obfuscation value indicating an extent of location obfuscation, whereby location boundaries within which a generated obfuscated location will reside are determined.

3. The method according to claim 2, wherein based on the received location information not satisfying the received anonymity requirements further comprises:

sending, by the anonymization provider, to the mobile device, a request for a second obfuscation value indicating a second extent of location obfuscation.

4. The method according to claim 2, wherein determining, by the anonymization provider, whether the received location information satisfies the received anonymity requirements further comprises:

verifying, by the anonymization provider, that the anonymity requirements are satisfied within the location boundaries determined by the obfuscation value received with the location information.

5. The method according to claim 1, wherein the received anonymity requirements include a k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device.

6. The method according to claim 1, wherein determining, by the anonymization provider, whether the received location information satisfies the received anonymity requirements further comprises:

selecting, by the anonymization provider, an obfuscation value indicating an extent of location obfuscation; and

verifying, by the anonymization provider, that the anonymity requirements are satisfied within location boundaries determined by the selected obfuscation value.

7. The method according to claim 6, further comprising:

sending, by the anonymization provider, to the mobile device, the selected obfuscation value.

8. A computer program product for anonymizing location information of a mobile device, the computer program product comprising one or more computer readable storage medium and program instructions stored on at least one of the one or more computer readable storage medium, the program instructions comprising:

program instructions to receive, by an anonymization provider, from the mobile device, location information identifying the location of the mobile device;

program instructions to receive, by the anonymization provider, from the mobile device, anonymity requirements;

program instructions to determine, by the anonymization provider, whether the received location information satisfies the received anonymity requirements; and

based on the received location information satisfying the received anonymity requirements;

program instructions to generate, by the anonymization provider, an obfuscated location for the mobile device; and

program instructions to send, by the anonymization provider, to the mobile device, the obfuscated location; and

based on the received location information not satisfying the received anonymity requirements, program instructions to send, by the anonymization provider, to the mobile device, a request for new anonymity requirements.

9. The computer program product according to claim 8, wherein the received location information includes an obfuscation value indicating an extent of location obfuscation, whereby location boundaries within which a generated obfuscated location will reside are determined.

10. The computer program product according to claim 9, wherein based on the received location information not satisfying the received anonymity requirements further comprises:

program instructions to send, by the anonymization provider, to the mobile device, a request for a second obfuscation value indicating a second extent of location obfuscation.

11. The computer program product according to claim 9, wherein program instructions to determine, by the anonymization provider, whether the received location information satisfies the received anonymity requirements further comprises:

program instructions to verify, by the anonymization provider, that the anonymity requirements are satisfied within the location boundaries determined by the obfuscation value received with the location information.

12. The computer program product according to claim 8, wherein the received anonymity requirements include a k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device.

13. The computer program product according to claim 8, wherein program instructions to determine, by the anonymization provider, whether the received location information satisfies the received anonymity requirements further comprises:

program instructions to select, by the anonymization provider, an obfuscation value indicating an extent of location obfuscation; and

program instructions to verify, by the anonymization provider, that the anonymity requirements are satisfied within location boundaries determined by the selected obfuscation value.

14. The computer program product according to claim 13, further comprising:

program instructions to send, by the anonymization provider, to the mobile device, the selected obfuscation value.

15. A computer system for anonymizing location information of a mobile device, the computer system comprising one or more processors, one or more computer readable memories, one or more computer readable tangible storage medium, and program instructions stored on at least one of the one or more storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising:

program instructions to receive, by an anonymization provider, from the mobile device, location information identifying the location of the mobile device;

program instructions to receive, by the anonymization provider, from the mobile device, anonymity requirements;

program instructions to determine, by the anonymization provider, whether the received location information satisfies the received anonymity requirements; and

based on the received location information satisfying the received anonymity requirements;

program instructions to generate, by the anonymization provider, an obfuscated location for the mobile device; and

program instructions to send, by the anonymization provider, to the mobile device, the obfuscated location; and

based on the received location information not satisfying the received anonymity requirements, program instructions to send, by the anonymization provider, to the mobile device, a request for new anonymity requirements.

16. The computer system according to claim 15, wherein the received location information includes an obfuscation value indicating an extent of location obfuscation, whereby location boundaries within which a generated obfuscated location will reside are determined.

17. The computer system according to claim 16, wherein program instructions to determine, by the anonymization provider, whether the received location information satisfies the received anonymity requirements further comprises:

program instructions to verify, by the anonymization provider, that the anonymity requirements are satisfied within the location boundaries determined by the obfuscation value received with the location information.

18. The computer system according to claim 15, wherein the received anonymity requirements include a k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device.

19. The computer system according to claim 15, wherein program instructions to determine, by the anonymization provider, whether the received location information satisfies the received anonymity requirements further comprises:

program instructions to select, by the anonymization provider, an obfuscation value indicating an extent of location obfuscation; and

program instructions to verify, by the anonymization provider, that the anonymity requirements are satisfied within location boundaries determined by the selected obfuscation value.

20. The computer system according to claim 19, further comprising:

program instructions to send, by the anonymization provider, to the mobile device, the selected obfuscation value.