Unmanned aerial vehicles (UAVs), or drones, are increasingly being used to deliver goods from vendors to customers. To safely conduct these operations at scale, drones are required to broadcast position information as codified in remote identification (remote ID) regulations. However, location broadcast of package delivery drones introduces a privacy risk for customers using these delivery services: Third-party observers may leverage broadcast drone trajectories to link customers with their purchases, potentially resulting in a wide range of privacy risks. We propose a probabilistic definition of privacy risk based on the likelihood of associating a customer to a vendor given a package delivery route. Next, we quantify these risks, enabling drone operators to assess privacy risks when planning delivery routes. We then evaluate the impacts of various factors (e.g., drone capacity) on privacy and consider the trade-offs between privacy and delivery wait times. Finally, we propose heuristics for generating routes with privacy guarantees to avoid exhaustive enumeration of all possible routes and evaluate their performance on several realistic delivery scenarios.
翻译:无人驾驶飞行器(无人驾驶飞行器)或无人驾驶飞机(无人驾驶飞行器)正越来越多地被用来从供应商向客户运送货物。为了安全地进行大规模行动,无人驾驶飞机必须按远程识别(远程识别)条例的编码,广播位置信息;然而,包装投送无人机的定位广播给使用这些交付服务的客户带来了隐私风险:第三方观察员可能利用广播无人驾驶飞行器的轨迹将客户与其采购联系起来,从而有可能造成广泛的隐私风险。我们建议根据客户与供应商联手提供包件路线的可能性,对隐私风险进行概率性定义。我们对这些风险进行量化,使无人驾驶飞机操作员能够在规划交付路线时评估隐私风险。我们随后评估各种因素(如无人驾驶飞机能力)对隐私的影响,并考虑隐私与交货等候时间之间的权衡。最后,我们提议在生成具有隐私保障的路线时采用超标准,以避免详尽地罗列所有可能的路线,并评估其在若干现实的交付情景下的表现。