哑元位置隐私博弈机制  

Dummy-based Location Privacy Game Mechanism

作　　者：牛晓磊 沈航 白光伟[1] 陈林 NIU Xiao-lei;SHEN Hang;BAI Guang-wei;CHEN Lin(College of Computer Science and Technology,Nanjing Tech University,Nanjing 211816,China;State Key Laboratory for Novel Software Technology,Nanjing University,Nanjing 210093,China)

机构地区：[1]南京工业大学计算机科学与技术学院,南京211816 [2]南京大学计算机软件新技术国家重点实验室,南京210093

出　　处：《小型微型计算机系统》2020年第3期610-616,共7页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(61502230,61073197)资助;江苏省自然科学基金项目(BK20150960)资助;江苏省普通高校自然科学研究项目(15KJB520015)资助;南京市科技计划项目(201608009)资助;计算机软件新技术国家重点实验室(南京大学)项目(KFKT2017B21)资助.

摘　　要：本文提出哑元位置隐私博弈机制,目的是在满足服务质量的基础上,最小化整体效用代价.该机制根据LBS中查询用户设定的当前查询的隐私保护需求,将用户的真实位置经坐标转换为哑元与其余k-1个用户进行k匿名处理后发送给LBS服务器,使攻击者难以确定用户的真实位置.然而掌握用户背景知识的攻击者会利用匿名区域内所有用户的数据进行更深层次的信息挖掘,并根据用户策略调整攻击方式.该机制基于Stackelberg博弈模型对位置匿名进行优化,在确保一定服务质量前提下设定合理的隐私保护策略以降低攻击者推测的准确度,随后攻击者执行攻击策略,设定合适的推测机制来提高攻击的准确度.实验结果表明,该保护机制在位置暴露率、隐私水平和位置熵等方面有着良好的表现,同时将服务质量损失限制在可控范围内,在损失一定的服务质量的同时换取更高的隐私保护效果.This paper proposes a game mechanism based on dummy location privacy to minimize the overall utility cost while satisfying the service quality. This mechanism sets the privacy protection requirements of the current query according to the requirements,and converts the real location of the user into dummy coordinates and performs k anonymous processing with the remaining k-1 users before sending to the LBS server,making it difficult for the attacker to determine the real location of the user. However,an attacker with user background knowledge will use the data of all users in the anonymous area to conduct deeper information mining and adjust the attack mode according to user policies. This mechanism optimizes the positional anonymity algorithm based on the Stackelberg game model,and sets a reasonable privacy protection strategy to reduce the accuracy of the attacker’s prediction under the premise of ensuring a certain quality of service. Then the attacker executes the attack strategy and sets an appropriate prediction mechanism to improve the accuracy of the attack. The experimental results show that this protection mechanism has a good performance in the aspects of location exposure rate,privacy level and location entropy,and at the same time,it limits the loss of service quality to a controllable range and gains higher privacy protection effect while losing certain service quality.

关 键 词：哑元 斯塔克尔伯格博弈 服务质量 隐私保护 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]