Perceived K-value Location Privacy Protection Method Based on LBS in Augmented Reality

Yang Yang 보안공학연구지원센터 2015 International Journal of Security and Its Applicat Vol.9 No.4

In Augmented Reality (AR), users’ main concern includes privacy and safety of data. Since location based services(LBS) are one of the major applications of the AR, it is important to have a privacy-aware management of location information, providing location privacy for clients against vulnerabilities or abuse. Here we analyzed the merit and demerit of exiting location privacy protection method. Then a perceived K-value location privacy protection method was raised. Hereafter the protocol of this algorithm was described and simulated in detail. The results demonstrated this method can effectively realize the location privacy protection.

Providing Together Security, Location Privacy and Trust for Moving Objects

Amit Kumar Tyagi,Dr. N. Sreenath 보안공학연구지원센터 2016 International Journal of Hybrid Information Techno Vol.9 No.3

In last few years, vehicular networks (or moving objects) are gaining more and more attraction from the researchers and the automobile industries. In that, Location-Based Services (LBSs) become more feature-rich and versatile due to the explosion of mobile devices and the advances of positioning technologies. Trust and Privacy are the two key parts of security and it is undoubtedly a necessity to develop (or maintain) trust for moving objects (or vehicular users). The main aim of this paper is to propose a trust model for vehicular environment with desired level of privacy protection. The proposed model contains two different modules. First, this paper analyzed the merit and demerit of exiting location privacy protection method.Then a perceived k-value location privacy protection algorithmdiscussed to provide desired level of privacy protection. Hereafter the protocol (or procedure) of this algorithm; simulation result are discussed in detail.Second,it provides a model to maintain trust for vehicle Ad-hoc Network (VANET) users in LBSs. The results show that proposed method outperforms the existing privacy preservation method by effectively enhances privacy and trust against various adversaries. Hence,the purpose of this work is to maintain trust and certain level of privacy among vehicular users without revealing her identity in LBSs.

A Survey of System Architectures, Privacy Preservation, and Main Research Challenges on Location-Based Services

( Mulugeta K. Tefera ),( Xiaolong Yang ),( Qifu Tyler Sun ) 한국인터넷정보학회 2019 KSII Transactions on Internet and Information Syst Vol.13 No.6

Location-based services (LBSs) have become popular in recent years due to the ever-increasing usage of smart mobile devices and mobile applications through networks. Although LBS application provides great benefits to mobile users, it also raises a sever privacy concern of users due to the untrusted service providers. In the lack of privacy enhancing mechanisms, most applications of the LBS may discourage the user’s acceptance of location services in general, and endanger the user’s privacy in particular. Therefore, it is a great interest to discuss on the recent privacy-preserving mechanisms in LBSs. Many existing location-privacy protection-mechanisms (LPPMs) make great efforts to increase the attacker’s uncertainty on the user’s actual whereabouts by generating a multiple of fake-locations together with user’s actual positions. In this survey, we present a study and analysis of existing LPPMs and the state-of-art privacy measures in service quality aware LBS applications. We first study the general architecture of privacy qualification system for LBSs by surveying the existing framework and outlining its main feature components. We then give an overview of the basic privacy requirements to be considered in the design and evaluation of LPPMs. Furthermore, we discuss the classification and countermeasure solutions of existing LPPMs for mitigating the current LBS privacy protection challenges. These classifications include anonymization, obfuscation, and an encryption-based technique, as well as the combination of them is called a hybrid mechanism. Finally, we discuss several open issues and research challenges based on the latest progresses for on-going LBS and location privacy research.

위치정보의 보호와 산업진흥을 위한 정책결정 연구

오태원(Oh, Tai-Won) 한국의사결정학회 2015 의사결정학연구 Vol.23 No.2

위치정보의 보호 및 이용 등에 관한 법률은 2005년 제정 당시 위치정보의 사용이 일반적이지 않은 상황임에도 불구하고 매우 선도적으로 제정된 법률이었다. 그러나 스마트폰의 보급과 함께 급속도로 발전한 기술 및 사회환경은 기존의 위치정보법을 변화된 환경에 대응하지 못하는 법률의 사례로 손꼽히게 만들었다. 위치정보와 개인위치정보의 개념문제, 이와 더불어 개념적으로 규정하고 있지는 않지만 항상 논란이 되고 있는 사물위치정보의 문제는 단순히 사물위치정보의 무단 수집 또는 이용에 대한 규제조항의 삭제만을 생각할 것이라 아니라 사물위치정보를 적극적으로 개념규정하여 산업진흥의 방편으로 삼는 방법을 생각할 필요가 있다. 위치정보사업자와 위치기반서비스제공자에 대한 관리에 있어서, 현재의 위치정보사업자에 대한 허가제와 위치기반서비스제공자에 대한 신고제는 분명히 변화의 필요성이 있을 것이다. 그러나 단지 허가제와 신고제를 신고제 등으로 단일화하는 것을 생각하는 것이 아니라 허가제와 신고제를 취했던 본래의 취지, 즉 위치정보를 효과적으로 보호하자는 입법취지를 고려하여 현실에 맞는 사후적 관리체계와 결합된 규제체계를 만드는 것이 타당할 것이다. Location Privacy Protection Act was one of the most progressive act in Korea when people did not use location information generally. However, technological and social environment which was rapidly changed with smart devices make Location Privacy Protection Act to be the case which the act did not correspond against social change. The concept of location information and personal location information, together with the concept of location information of thing which was not formally regulated in the act, are the first issue of the arguments. deleting the prohibition of location information of thing is not a good answer. We need to consider promotion of industry by formalizing the concept of location information of thing and some method of enhancement. It is necessary that license system of location information provider and report system of location based service provider should be changed. However, it is not a good answer that merging of license system and report system without any consideration. we need to consider the purpose of license system of location information provider and report system of location based service provider. The meaning of two systems is protection of location privacy. It is better that we make regulation system which is connected to administrative authentication about privacy protection.

中国北斗产业化中位置隐私保护法律问题研究

闫欢 원광대학교 한중관계연구원 2021 韓中關係硏究 Vol.7 No.1

중국 제19차 전국인민대표대회에서 스마트 사회건설을 위한 중대 전략을 마련하였 다. 이는 스마트시대를 열기 위한 최상위적 결단이자 총체적 포석이다. 스마트 사회건 설은 국가통치 수단으로써 인터넷과 정보보안을 기반으로 하는 군(军)-민(民) 간의 심 도 있는 융합발전이다. 이러한 군-민의 융합발전은 수십 년에 걸쳐 효과를 보았으며, 미래에 대한 가능성도 높여왔다. 특히, 북두위성항법시스템은 군-민 통합의 모델로 지난 수십 년간 크게 발전하면서 세계의 주목을 받았다. 인터넷과 정보보안은 군-민 통합발전의 관건이며, 인터넷 통신 보안에서의 위치 사생활 보호문제는 군에서 민간으로 넘어가는 과정에서 발생한다. 이에 본 연구는 스마트 군-민 융합발전의 모범사례인 북두위성항법시스템의 운영 예를 통해 위치 사생활보호문제를 논의한다. 이에 먼저 위성항법시스템으로 인한 위치 의 사생활 개념에 대하여 논하고, 위치 프라이버시와 개인정보에 관한 중국 및 세계 각국의 규정을 소개한다. 이를 기초로 계약감독책임을 명시한 제3자의 데이터 사용감 독에 대한 사후책임과 구제를 미국 및 유럽의 선진 경험을 참고하여 해결방안을 검토 하였다. 나아가 위성항법시스템으로 인한 위치 사생활에 대한 입법적 결함, 비밀유지 의무의 명확화, 감독책임의 규범화, 법적 책임의 명확화, 권리구제의 실현 등에 대한 해결방안을 제시하였다. The 19th National Congress of the Communist Party of China (CPC) made a major strategic plan for building intelligence society into the intelligence era, which is the overall layout of the national social development from the top-level design. The construction of a intelligence society is a deeply integrated military-civilian approach to national governance on the basis of network information security. As a model of civil-military integration, Beidou navigation system has made great progress in the past decades. Network and information security is the key to the development of civil-military integration. Especially, the protection of location-based-service (LBS) privacy is a peculiar problem in military-civilian conversion. Taking the Beidou navigation satellite system as an example, which is a model of civil-military integration development in the era of intelligence, this paper introduces the concept and protection of LBS privacy as well as the domestic and foreign regulations on LBS privacy and personal information. Based on the similarity between LBS privacy and personal information, the legal protection of location privacy can refer to the relevant legal provisions of personal information. This paper analyzes the use of location information and the protection of location privacy by operators and third parties. As the privacy of users, location privacy information may be infringed by operators and third parties. However, at this stage, it is not possible to carry out the technical constraints of location privacy protection, therefore it can only rely on legal means for effective protection. We need to learn from the advanced experience of American and European countries, including clarification of contract supervision responsibilities, internal supervision and control of the use of data by third parties, post-event accountability and relief systems, and coordinated development mechanisms for the industrialization of dual-use technologies. This paper explores the path of legal protection of location privacy from the above six aspects, including improving legislative design, clarifying confidentiality obligations, standardizing regulatory responsibilities, clarifying legal responsibilities, implementing incentive mechanism, and realizing right rescue.

A Novel Dummy-Based KNN Query Anonymization Method in Mobile Services

Huan Zhao,Jiaolong Wan,Zuo Chen 보안공학연구지원센터 2016 International Journal of Smart Home Vol.10 No.6

Due to the advances of mobile devices with GPS (Global Positioning System), a user's privacy threat is increased in location based services (LBSs).So, various Location Privacy-Preserving Mechanisms (LPPMs) have been proposed in the literature to address the privacy risks derived from the exposure of user locations through the use of LBSs. However, these methods obfuscate the locations disclosed to the LBS provider using a variety of strategies, most of which come at a cost of resource consumption. Therefore, we propose a privacy-protected KNN query anonymization method based on Bayesian estimation for Location-based services. Unlike previous dummy-based approaches, in our method, the request to the LBS server doesn't contain the genuine user location, so we can't calculate whether meet the threshold condition of two location directly, but must to decision making by transition probability. In addition, our method just requires the server returns the results the client needs. Further, we propose an effective search algorithm to improve the server processing. So it can reduce bandwidth usages and efficiently support K-nearest neighbor queries without revealing the private information of the query issuer. An empirical study shows that our proposal is effective in terms of offering location privacy, and efficient in terms of computation and communication costs.

정보통신기기의 위치추적에 대한 헌법적 통제에 관한 소고

이상경 헌법재판연구원 2019 헌법재판연구 Vol.6 No.1

Recently, a so-called Location-Based Service (LBS) has been activated using geographical location information, which can lead to various constitutional problems as well as various beneficial services. In particular, there is a great deal of concern about infringement of fundamental rights in using such location information for investigation purposes. The conflicts occur between the basic rights, especially securing freedom of communication, privacy, protection of personal information, and the investigatory utilization of location information. Therefore, this paper discusses the key issues related to location tracking, which are currently in question, in the following three categories. First, this paper discusses the sorts of location information tracking methods, the second, tracking cell-site location information, and the third, tracking real time GPS location information. In addition to these discussions, this paper examines whether investigatory use of location information infringes search warrant, freedom of communication, and right to self -determination of personal information. Use of location information can be largely classified into tracking of cell-site location information and GPS location tracking. The cell-site location information tracking can be divided into two again. The first is a location tracking method through the use of mobile information and communication equipment, which is related to the request of the communication confirmation fact data in the recent constitutional case. The second is a form in which communication history and location information of all communication subscribers existing in a specific base station are collectively. The following is the tracking of GPS location information. The tracking of such GPS location information can be further divided into two. First, there is a way to continuously track by attaching a location tracking device. Second, there is a method of tracking real time GPS location information using a virtual cell-site location, namely, a cell-site simulator. Since tracking real time GPS location information is directly related to the privacy, freedom of communication, and right to self-determination of personal information, this papers suggests that search warrant issued by courts be strictly needed for investigatory use of real time GPS location information. 최근 개인의 위치정보(Location Information)를 활용하는 소위 “위치기반서비스(Location-Based Service)”가 활성화되었다. 이러한 위치정보의 활용은 다양한 편의를 제공함에도 불구하고 여러 가지 헌법적 문제를 발생시킨다. 특히 국가가 개인의 위치정보를 수사목적으로 활용하는 경우, 정보주체의 통신비밀, 사생활의 비밀 및 개인정보 등의 침해를 야기할 수 있다. 따라서 본 논문은 현재 문제 되고있는 위치추적과 관련된 핵심 쟁점을 다음 3가지로 구분하여 논의한다. 먼저 정보통신기기의 위치추적의 종류를 논의하고, 두 번째로 발신기지국 위치추적, 세 번째로 실시간 GPS위치정보 추적에 관해 순서대로 논의한다. 이러한 논의와 더불어 위치추적의 헌법적 통제문제로서 영장주의, 통신비밀의 보장 및 개인정보자기결정권 등 침해 여부에 관해 검토한다. 위치정보를 수사목적으로 활용하는 방법은 다양하다. 크게는 발신기지국 위치정보 추적과 실시간 GPS위치정보의 추적으로 구별할 수 있다. 발신기지국 위치정보 추적은 다시 2가지로 구별될 수 있다. 첫째는 이동정보통신기기의 사용을 통한 위치추적 방법으로 과거의 발신기지국 접속 정보를 통한 위치추적-우리의 경우 통신확인사실자료의 요청과 관련된 부분-이다. 둘째는 특정한 기지국 내에 존재하는 모든 통신 가입자들에 대한 통신내역과 위치정보를 일괄 제공받는 형태-소위. ‘기지국 수사’-의 위치정보 추적이다. 우리나라 헌법재판소와 미국의 연방법원의 판례를 통해 발신기지국 위치정보의 추적에 관한 헌법적 통제문제를 살펴본다. 다음은 실시간 GPS위치정보의 추적이다. GPS위치정보는 인공위성과 GPS장치 부착 단말기 사이를 신호가 이동하는 시간을 측정하여 단말기의 위치가 파악되는 것으로써, 기술적인 수단이나 추적범위, 추적의 용이성 등의 측면에서 ‘발신기지국 위치정보’와 구별된다. 실시간 GPS위치정보의 추적도 다시 2가지로 구별될 수 있다. 첫째는 GPS위치추적 장치를 부착하여 지속적으로 실시간 추적하는 방법이고, 둘째는 가상기지국을 이용한 실시간 GPS위치정보의 추적방법이다. 실시간 GPS위치정보의 활용은 명문의 근거 법률이 없다는 점에서 법률유보 위반 문제와 사생활의 비밀과 자유 등 침해문제를 야기하므로, 활용에 대한 법적 근거를 마련하되 법원의 영장주의를 요건으로 하는 등 엄격하게 인정되어야 한다. 이와 관련된 미국 연방법원의 판례를 고찰함으로써 우리에게 필요한 시사점을 얻고자 한다.

위치기반서비스에서 프라이버시 염려와 보호행동에 영향을 미치는 요인과 혁신성의 조절효과 검증

이동만,장성희 한국인터넷전자상거래학회 2014 인터넷전자상거래연구 Vol.14 No.4

The purpose of this study is to examine the factors influencing protection behaviors of privacy concerns of Location-Based Services(LBS) and moderating effect of innovativeness. This study classifies personalization, location awareness, and perceived risk as LBS characteristics, and personal information and privacy invasion experience as personal characteristics. The target population of this study was LBS users. Data for this study were collected from January 21 to March 20, 2014. The data were gathered from 231 questionnaire respondents with experience using LBS. Among these responses, 11 were excluded because of missing or inappropriate data. After removing the unsuitable questionnaires, a total of 220 surveys were considered for analysis. The result of hypothesis testing are as follows. First, personalization, location awareness, and perceived risk positively influence privacy concerns. Second, personal information positively influence privacy concerns. But privacy invasion experience does not influence privacy concerns. Third, privacy concerns positively influence privacy protection behaviors. Finally, innovativeness as a moderating effect significanty influenced the relationship between privacy concerns and privacy protection behaviors. This study will provide LBS providers with significant and strategic insights for identifying the privacy protection behavior of LBS.

스마트폰 위치기반서비스에서 정보제공의도: 프라이버시 계산 관점을 중심으로

김종기 ( Jong Ki Kim ),김상희 ( Sang Hee Kim ) 한국정보시스템학회 2012 情報시스템硏究 Vol.21 No.4

LBS(Location-Based Service) is one of the smartphone application services which has been receiving great attention recently. Various applications of smartphone use LBS to provide innovative services. However, use of LBS raises privacy concerns because the location information of users is constantly exposed. Privacy calculus perspective attempts to understand the characteristics of the user`s privacy. It is based on the risk-benefit analysis in the economics` perspective. That is, when the benefit expected through personal information disclosure is higher than risk, we are willing to provide personal information. This research suggested a research model based on the privacy calculus perspective to clarify the effect of information disclosure intention of smartphone LBS application users. Based on the main factors of privacy calculus, perception of privacy risk and privacy benefit, the relationship of the perceived value and the information disclosure intention was empirically analyzed by utilizing structural equation modeling(SEM) methodology. According to the results of the empirical analysis, it was found that all relations have statistically significant explanatory power except the relation between privacy concern and information disclosure intention. This study showed a strong evidence of antecedent factors based on privacy calculus of personal information disclosure in smartphone LBS applications.

A Framework for measuring query privacy in Location-based Service

( Xuejun Zhang ),( Xiaolin Gui ),( Feng Tian ) 한국인터넷정보학회 2015 KSII Transactions on Internet and Information Syst Vol.9 No.5

The widespread use of location-based services (LBSs), which allows untrusted service provider to collect large number of user request records, leads to serious privacy concerns. In response to these issues, a number of LBS privacy protection mechanisms (LPPMs) have been recently proposed. However, the evaluation of these LPPMs usually disregards the background knowledge that the adversary may possess about users` contextual information, which runs the risk of wrongly evaluating users` query privacy. In this paper, we address these issues by proposing a generic formal quantification framework,which comprehensively contemplate the various elements that influence the query privacy of users and explicitly states the knowledge that an adversary might have in the context of query privacy. Moreover, a way to model the adversary`s attack on query privacy is proposed, which allows us to show the insufficiency of the existing query privacy metrics, e.g., k-anonymity. Thus we propose two new metrics: entropy anonymity and mutual information anonymity. Lastly, we run a set of experiments on datasets generated by network based generator of moving objects proposed by Thomas Brinkhoff. The results show the effectiveness and efficient of our framework to measure the LPPM.