Trajectory collection is fundamental for location-based services but often involves sensitive information, such as users' daily activities, raising significant privacy concerns. Local Differential Privacy (LDP) provides strong privacy guarantees for users, even when the data collector is untrusted. Existing trajectory collection methods under LDP are limited to discrete location spaces, where the number of locations affects both privacy guarantees and trajectory utility. Moreover, many real-world scenarios, such as flying trajectories or sensor trajectories of wearable devices, operate in continuous location spaces, making existing methods inadequate. This paper shifts the focus from discrete to continuous spaces for trajectory collection under LDP. We propose two novel methods: TraCS-D, which perturbs the direction and distance of locations, and TraCS-C, which perturbs the Cartesian coordinates of locations. Both methods are theoretically and experimentally analyzed for trajectory utility in continuous spaces. TraCS can also be applied to discrete spaces by rounding perturbed locations to the nearest discrete points. In this case, TraCS's privacy and utility guarantees are independent of the number of locations in the space, and has only $\Theta(1)$ time complexity in each perturbation generation. Evaluation results on discrete location spaces validate the efficiency advantage and show that TraCS outperforms state-of-the-art methods with improved trajectory utility, especially for large privacy parameters.
翻译:轨迹收集是基于位置服务的基础,但通常涉及用户日常活动等敏感信息,引发了显著的隐私担忧。局部差分隐私(LDP)为用户提供了强大的隐私保障,即使数据收集者不可信。现有的LDP轨迹收集方法仅限于离散位置空间,其中位置数量同时影响隐私保障和轨迹效用。此外,许多现实场景(如飞行轨迹或可穿戴设备的传感器轨迹)在连续位置空间中运行,使得现有方法不足。本文将LDP下轨迹收集的研究重点从离散空间转向连续空间。我们提出了两种新方法:TraCS-D(扰动位置的方向和距离)和TraCS-C(扰动位置的笛卡尔坐标)。两种方法均在理论和实验上分析了连续空间中的轨迹效用。TraCS也可通过将扰动位置四舍五入至最近离散点应用于离散空间。在此情况下,TraCS的隐私与效用保障与空间中位置数量无关,且每次扰动生成仅具有$\Theta(1)$时间复杂度。在离散位置空间上的评估结果验证了其效率优势,并表明TraCS在轨迹效用方面优于现有先进方法,尤其在大隐私参数条件下表现更佳。