Privacy protection for participatory sensing system

• US 9,530,026 B2
• Filed: 06/08/2012
• Issued: 12/27/2016
• Est. Priority Date: 06/08/2012
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Zhang, Junsong, Ma, Jian, Li, Xiong, Liu, Yazhi, Tian, Ye
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US14/398,183
• Publication Number:
  US 20150128282A1
• Time in Patent Office: 1,663 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 63/0414 during transmission, i.e. party's identity is protected against eavesdropping, e.g. by using temporary identifiers, but is known to the other party or parties involved in the communication
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

Provided is a method that may be used for privacy protection. The method comprises: generating a pseudonym at a user equipment in association with sensed data; calculating a unique value based upon the pseudonym using a first algorithm; sending the unique value and the sensed data to a server; receiving from the server a certificate, wherein the certificate is calculated based at least in part on the unique value using a second algorithm; and sending at least the pseudonym and the certificate to a certification center via a secure channel, for obtaining a reward associated with the sensed data; wherein the certification center is internal or external to the server. By this method, a user'"'"'s identify may be protected.

Claims

1. A user equipment, comprising:

a sensor arrangement comprising at least one sensor for sensing data associated with an environment surrounding the user equipment, the sensed data having at least one attribute;

at least one processor; and

at least one memory including a computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the user equipment to at least;

generate a pseudonym in association with sensed data;

calculate a unique value based upon the pseudonym using a first algorithm;

generate an electronic communication data structure comprising the unique value and the sensed data;

send the electronic communication data structure to a server;

receive from the server, in response to the server receiving the electronic communication data structure, an electronic certificate, wherein the electronic certificate is calculated at the server, based at least in part on the unique value and the at least one attribute of the sensed data, using a second algorithm; and

send, from the user equipment to the certification center via a secure channel, an electronic communication data structure comprising at least the pseudonym and the certificate;

receive, from the certification center, at the user equipment, an electronic communication data structure comprising an electronic reward associated with the sensed data, the electronic reward generated by the certification center based on the unique value generated by the user equipment and the certificate calculated at the server;

wherein the certification center is internal or external to the server.

2. The user equipment according to claim 1, wherein the first algorithm comprises a hash function.

3. The user equipment according to claim 1, wherein the second algorithm comprises an encryption function.

4. The user equipment according to claim 1, wherein the user equipment is further configured to at least:

prior to calculating the unique value, receive from the server information associated with the first algorithm.

5. The user equipment according to claim 1, wherein the user equipment is further configured to at least:

prior to sending at least the pseudonym and the certificate, save at least the pseudonym, the certificate, and a timestamp associated with the sensed data.

6. An apparatus, comprising:

at least one processor; and

at least one memory including a computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to at least;

receive, from a user equipment and in an electronic communication data structure, a unique value and sensed data from the user equipment, the sensed data associated with an environment surrounding the user equipment, the sensed data having at least one attribute and the unique value calculated at the user equipment using a first algorithm based upon a pseudonym generated by the user equipment, the pseudonym associated with the sensed data;

calculate an electronic certificate, based at least in part on the unique value and the at least one attribute of the sensed data, using a second algorithm; and

send the certificate, in an electronic communication data structure, to the user equipment so that the certificate may be forwarded to a certification center by the user equipment, in an electronic communication data structure and via a secure channel, for obtaining a reward associated with the sensed data, the reward generated by a certification center based on the unique value generated by the user equipment and the certificate;

wherein the certification center is internal or external to the apparatus.

7. The apparatus according to claim 6, wherein the apparatus is further configured to at least:

prior to receiving the unique value, determine a first algorithm and send information associated with the first algorithm to the user equipment.

8. The apparatus according to claim 6, wherein the first algorithm comprises a hash function.

9. The apparatus according to claim 6, wherein the second algorithm comprises an encryption function.

10. The apparatus according to claim 6, wherein the apparatus is further configured to at least:

prior to calculating the certificate, determine a grade of the sensed data.

11. The apparatus according to claim 6, wherein the apparatus is further configured to at least:

calculate the certificate using the second algorithm based upon the unique value and at least one of the grade of the sensed data and a timestamp associated with the sensed data.

12. The apparatus according to claim 6, wherein the at least one memory and the computer program code are further configured to, with the at least one processor, cause the apparatus to:

prior to receiving the unique value and the sensed data, define a data format.

13. An apparatus, comprising:

at least one processor; and

at least one memory including a computer program code, wherein the at least one memory and the computer program code are configured to, with the at least one processor, cause the apparatus to at least;

receive, from a user equipment, an electronic communication data structure, including at least a pseudonym and a certificate, and via a secure channel, the pseudonym generated by the user equipment and associated with sensed data obtained by the user equipment;

calculate a unique value using a first algorithm based upon the pseudonym;

calculate at least one reference value based at least in part on the unique value using a second algorithm;

compare the at least one reference value with the received certificate; and

if the at least one reference value matches the received certificate, confirm validity of the received certificate so that the user equipment may obtain an electronic reward associated with sensed data, the electronic reward based on the unique value generated by the user equipment and the certificate;

wherein the apparatus is internal or external to a server.

14. The apparatus according to claim 13, wherein the first algorithm comprises a hash function determined by the server.

15. The apparatus according to claim 13, wherein the second algorithm comprises an encryption function determined by the server.

16. The apparatus according to claim 13, the apparatus further configured to at least:

calculate a reference value based upon the unique value and at least one of a timestamp associated with the sensed data and one of a plurality of data grades, the plurality of data grades being predefined by the server.