Toward Personalized Location Privacy Trading for Mobile Crowd Sensing

With the commercialization of private data, location privacy trading in Mobile Crowd Sensing (MCS) has become a fascinating research topic. In consideration of location-dependent sensing tasks, mobile workers take risks at location privacy disclosure when reporting their actual locations. Existing work fail to take workers' diverse privacy protection and trading into account. This paper proposes a novel trading framework with personalized differential privacy guarantee, referred to as <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Leaper</i>, to bridge the gap between location privacy protection and task allocation efficiency. In particular, <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Leaper</i> outputs a personalized obfuscated range for each worker and further obfuscates his location based on a perturbation set within this range by incorporating differential privacy and <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"><tex-math notation="LaTeX">$k$</tex-math></inline-formula>-anonymity techniques, and thus improves the efficiency of task allocation. Moreover, <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Leaper</i> quantifies each worker's location privacy loss and compensates him with reasonable payment by running auction in a cost-effective way. Through real-world datasets, our evaluations and analysis demonstrate that <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">Leaper</i> indeed guarantees all desired properties of personalized differential privacy, truthfulness, individual rationality and budget feasibility.