抵御背景信息推理攻击的假位置生成算法  

Dummy Location Generation Algorithm Against Side Information Inference Attack

作　　者：张学军[1] 杨依行 李佳乐 田丰 黄海燕 黄山[3] ZHANG Xuejun;YANG Yixing;LI Jiale;TIAN Feng;HUANG Haiyan;HUANG Shan(School of Electronics and Information Engineering,Lanzhou Jiaotong University,Lanzhou 730070,China;School of Computer Science,Shaanxi Normal University,Xi’an 710062,China;College of Civil Engineering,Lanzhou Jiaotong University,Lanzhou 730070,China)

机构地区：[1]兰州交通大学电子与信息工程学院,兰州730070 [2]陕西师范大学计算机科学学院,西安710062 [3]兰州交通大学土木工程学院,兰州730070

出　　处：《计算机科学》2023年第S02期867-875,共9页Computer Science

基　　金：国家自然科学基金(61762058,61901201);甘肃省自然科学基金(21JR7RA282);兰州交通大学百人青年人才培养计划基金;甘肃省教育厅产业支撑计划项目(2022CYZC-38);中央高校基本科研业务费(GK202103090);陕西省自然科学基础研究计划项目(2022JM-329)。

摘　　要：针对已有的假位置生成算法,设计了一种多次查询请求攻击算法(Multiple Query Request Attack algorithm,MQRA)来测试其安全性。为有效保护用户的位置隐私,提出了一种抵御背景信息推理攻击的假位置生成算法(Dummy Location Ge-neration Algorithm against Side Information Inference Attack,DLG_SIA),该算法综合考虑了查询概率、时间分布、位置语义和物理分散度等背景信息来生成有效的假位置集以抵御概率分布攻击、位置语义攻击和位置同质攻击,避免攻击者结合背景信息过滤掉假位置。用户首次请求时,DLG_SIA算法先利用位置熵和时间熵选取当前请求时间下查询概率相似的位置点来生成假位置集,并通过调整的余弦相似度生成满足语义差异性的位置点;然后通过距离熵保证选取的位置点间具有更大的匿名范围,并将当前请求位置的最佳假位置集进行缓存。安全性分析和仿真实验结果表明:MQRA算法能以很高的概率识别出假位置集中用户的真实位置;与已有的假位置生成算法相比,DLG_SIA算法能有效抵御背景信息推理攻击,保护用户的位置隐私。Aiming at the existing dummy location generation algorithm,a multiple query request attack algorithm(MQRA)is designed to test its security.In order to effectively protect user’s location privacy,a dummy location generation algorithm against side information inference attack(DLG_SIA)is proposed.It comprehensively considers the side information such as query probability,time distribution,location semantics and physical dispersion to generate an effective dummy location set to resist probability distribution attacks,location semantics attacks and location homogeneity attacks,and avoid attackers filtering dummy locations with side information.When the user requests for the first time,the DLG_SIA algorithm first uses the location entropy and time entropy to select the location points with similar query probability at the current request time to generate a dummy location set,and then uses the adjusted cosine similarity to generate the location points that meet the semantic differences.Next,distance entropy is used to ensure that the selected location points have a larger anonymous range,and the best dummy location set of the current request location is cached.Security analysis and simulation results show that MQRA algorithm can identify the real location of users in the dummy location set with high probability.Compared with the existing dummy location generation algorithm,DLG_SIA algorithm can effectively resist the side information inference attack and protect the user’s location privacy.

关 键 词：基于位置的服务 查询概率 位置语义 时间分布 物理分散度 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]