Anonymizing location information of a mobile device

• US 9,585,011 B2
• Filed: 02/18/2016
• Issued: 02/28/2017
• Est. Priority Date: 05/30/2014
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Arunkumar, Saritha, Pipes, Stephen D., Srivatsa, Mudhakar
• Primary Examiner(s): WASHINGTON, ERIKA ALISE
• Application Number:
  US15/046,529
• Publication Number:
  US 20160165437A1
• Time in Patent Office: 376 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Anonymizing location information of a mobile device by an anonymization provider. The anonymizing provider receives, from the mobile device, location information identifying the location of the mobile device and an anonymity requirement. The anonymization provider selects an obfuscation value indicating an extent of location obfuscation that satisfies the received anonymity requirement. The extent of location obfuscation determines location boundaries within which a generated obfuscated location will reside. The anonymization provider generates an obfuscated location for the mobile device and sends the obfuscated location to the mobile device.

Claims

1. A method for anonymizing location information of a mobile device, the method comprising:

receiving, by an anonymization provider, from the mobile device, location information identifying the location of the mobile device;

receiving, by the anonymization provider, from the mobile device, an anonymity requirement, wherein the received anonymity requirement includes a k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device;

selecting, by the anonymization provider, an obfuscation value indicating an extent of location obfuscation that satisfies the received anonymity requirement, wherein the extent of location obfuscation determines location boundaries within which a generated obfuscated location will reside;

verifying, by the anonymization provider, that the k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device is satisfied within the location boundaries determined by the selected obfuscation value;

generating, by the anonymization provider, an obfuscated location for the mobile device; and

sending, by the anonymization provider, to the mobile device, the obfuscated location.

2. The method according to claim 1, further comprising:

receiving, by the anonymization provider, from the mobile device, a maximum obfuscation value.

3. The method according to claim 2, wherein selecting, by the anonymization provider, an obfuscation value further comprises:

selecting, by the anonymization provider, a minimum obfuscation value that satisfies the received anonymity requirement; and

based on the minimum obfuscation value that satisfies the received anonymity requirement being larger than the received maximum obfuscation value;

selecting, by the anonymization provider, the received maximum obfuscation value as the minimum obfuscation value.

4. The method according to claim 1, further comprising:

sending, by the anonymization provider, to the mobile device, the selected obfuscation value.

5. A computer program product for anonymizing location information of a mobile device, the computer program product comprising one or more computer readable storage medium and program instructions stored on at least one of the one or more computer readable storage medium, the program instructions comprising:

program instructions to receive, by an anonymization provider, from the mobile device, location information identifying the location of the mobile device;

program instructions to receive, by the anonymization provider, from the mobile device, an anonymity requirement, wherein the received anonymity requirement includes a k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device;

program instructions to select, by the anonymization provider, an obfuscation value indicating an extent of location obfuscation that satisfies the received anonymity requirement, wherein the extent of location obfuscation determines location boundaries within which a generated obfuscated location will reside;

program instruction to verify, by the anonymization provider, that the k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device is satisfied within the location boundaries determined by the selected obfuscation value;

program instructions to generate, by the anonymization provider, an obfuscated location for the mobile device; and

program instructions to send, by the anonymization provider, to the mobile device, the obfuscated location.

6. The computer program product according to claim 5, further comprising:

program instructions to receive, by the anonymization provider, from the mobile device, a maximum obfuscation value.

7. The computer program product according to claim 6, wherein program instruction to select, by the anonymization provider, an obfuscation value further comprise:

program instructions to select, by the anonymization provider, a minimum obfuscation value that satisfies the received anonymity requirement; and

based on the minimum obfuscation value that satisfies the received anonymity requirement being larger than the received maximum obfuscation value;

program instructions to select, by the anonymization provider, the received maximum obfuscation value as the minimum obfuscation value.

8. The computer program product according to claim 5, further comprising:

program instructions to send, by the anonymization provider, to the mobile device, the selected obfuscation value.

9. A computer system for anonymizing location information of a mobile device, the computer system comprising one or more processors, one or more computer readable memories, one or more computer readable tangible storage medium, and program instructions stored on at least one of the one or more storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, the program instructions comprising:

program instructions to receive, by an anonymization provider, from the mobile device, location information identifying the location of the mobile device;

program instructions to receive, by the anonymization provider, from the mobile device, an anonymity requirement, wherein the received anonymity requirement includes a k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device;

program instructions to select, by the anonymization provider, an obfuscation value indicating an extent of location obfuscation that satisfies the received anonymity requirement, wherein the extent of location obfuscation determines location boundaries within which a generated obfuscated location will reside;

program instruction to verify, by the anonymization provider, that the k-anonymity value specifying how many other mobile devices cannot be distinguished from the mobile device is satisfied within the location boundaries determined by the selected obfuscation value;

program instructions to generate, by the anonymization provider, an obfuscated location for the mobile device; and

program instructions to send, by the anonymization provider, to the mobile device, the obfuscated location.

10. The computer system according to claim 9, further comprising:

program instructions to receive, by the anonymization provider, from the mobile device, a maximum obfuscation value.

11. The computer system according to claim 10, wherein program instruction to select, by the anonymization provider, an obfuscation value further comprise:

program instructions to select, by the anonymization provider, a minimum obfuscation value that satisfies the received anonymity requirement; and

based on the minimum obfuscation value that satisfies the received anonymity requirement being larger than the received maximum obfuscation value;

program instructions to select, by the anonymization provider, the received maximum obfuscation value as the minimum obfuscation value.

12. The computer system according to claim 9, further comprising:

program instructions to send, by the anonymization provider, to the mobile device, the selected obfuscation value.