Verifying Location-Based Services with Declassification Enforcement
Location privacy has been considered to be an important issue along with the advances of location technologies and the pervasive use of location based services. Although a variety of location privacy techniques have been developed, language-based techniques have rarely been used on privacy enforcement of location-based services. In this work, we propose a verification framework to enforce the privacy preservation of locations. The enforcement leverages reachability analysis of pushdown system to ensure that the service-specific data aggregation functions comply with the privacy property. The approach supports inter-procedural analysis and is more precise than existing work.
KeywordsMobile Node Location Information Aggregation Function Output Channel Private Location
Unable to display preview. Download preview PDF.
- 1.Barthe, G., D’Argenio, P.R., Rezk, T.: Secure information flow by self-composition. In: CSFW, pp. 100–114. IEEE Computer Society (2004)Google Scholar
- 6.Ravi, N., Gruteser, M., Iftode, L.: Non-inference: An information flow control model for location-based services. In: 3rd International Conference on Mobile and Ubiquitous Systems Workshops, pp. 1–10 (2006)Google Scholar
- 8.Samarati, P., Sweeney, L.: Protecting privacy when disclosing information: k-anonymity and its enforcement through generalization and suppression. Tech. Rep. SRI-CSL-98-04, SRI International (1998)Google Scholar
- 9.Schwoon, S.: Model Checking Pushdown Systems. Ph.D. thesis, Technical University of Munich, Munich, Germany (2002)Google Scholar
- 10.Sun, C., Tang, L., Chen, Z.: Secure information flow by model checking pushdown system. In: UIC-ATC 2009, pp. 586–591. IEEE Computer Society (2009)Google Scholar
- 11.Sun, C., Tang, L., Chen, Z.: A new enforcement on declassification with reachability analysis. In: INFOCOM 2011 Workshops, pp. 1024–1029. IEEE (2011)Google Scholar