Android平台上的位置隐私保护方法研究

发布时间：2018-10-22 20:31

【摘要】：随着无线通讯技术和定位技术的不断发展和完善,基于位置服务(Location-based Services,LBS)的应用越来越受到人们的关注。移动用户可以通过基于位置的服务查询附近的餐馆,酒店,加油站等场所的位置。但是,在用户享受到基于位置服务的便利的同时,自身的隐私也遭受着泄露的风险。攻击者可以通过得到用户的位置数据推测出用户的宗教信仰、身体状况、个性习惯等信息。因此人们越来越关注位置隐私方面的研究。而移动设备市场上占有率80%的平台Android平台上的位置隐私保护方法研究成为当前的研究热点。当前Android平台位置隐私保护的研究存在着两方面不足。在算法上,目前独立架构下的隐私保护方法和Android平台下的位置隐私保护方法很多都只考虑了利用用户的历史查询记录,而攻击者除此之外还掌握着位置属性信息,比如当前位置的人口密集程度。攻击者可以以此推测出用户的敏感位置。在系统上,目前修改位置的方法大多都对位置服务APP或者Android系统进行修改,这些对普通用户都不现实。而采用API劫持技术的方法也只针对于GPS定位。目前位置服务APP通常综合考虑GPS定位、基站定位、Wifi定位等三种定位方式,所以只对GPS定位进行修改并不能有效改变Android系统位置信息。本文针对这两方面的不足提出了一种位置隐私保护算法,充分考虑到了位置属性信息。并且采用API劫持技术,综合考虑Android平台的定位方式,实现在Android系统上改变位置的目的。并将位置隐私保护算法应用在Android平台上,设计了一个APP,实现用户可控的不同粒度上的隐私保护方法。同时保证位置服务APP对位置信息的访问,不影响服务的可用性。实验结果表明,本文提出的算法能有效的防止用户敏感位置的泄露,实现在不同粒度上保护用户的位置隐私。并且设计的隐私保护APP系统开销都在合理的范围内,不影响位置服务APP的可用性。
[Abstract]:With the development and perfection of wireless communication technology and location technology, the application of location based service (Location-based Services,LBS) has attracted more and more attention. Mobile users can query the location of nearby restaurants, hotels, gas stations and so on through location-based services. However, while users enjoy the convenience of location-based services, their privacy is also exposed to the risk of disclosure. The attacker can infer the user's religious belief, physical condition, personality habits and so on by obtaining the user's location data. Therefore, people pay more and more attention to the research of location privacy. The research of location privacy protection on Android platform, which has 80% of mobile device market, has become a hot research topic. At present, there are two deficiencies in the research of Android platform location privacy protection. In the algorithm, many privacy protection methods based on independent architecture and Android platform only consider using the user's history query record, and the attacker also has the location attribute information, in addition to this, many of the privacy protection methods under the independent architecture and the location privacy protection method under the Android platform only consider using the user's history query record. For example, the current location of the population density. An attacker can use this to speculate on the sensitive location of the user. In the system, most of the methods to modify the location of the location service APP or Android system, these are not realistic for ordinary users. The method of using API hijack technology is only for GPS positioning. At present, APP generally considers GPS location, base station location and Wifi location, so only modifying GPS location can not change the location information of Android system effectively. In this paper, a location privacy protection algorithm is proposed, which takes the location attribute information into account. The purpose of changing the position on Android system is realized by using API hijack technology and considering the positioning mode of Android platform. The location privacy protection algorithm is applied to the Android platform, and a APP, is designed to realize privacy protection in different granularity that the user can control. At the same time, ensure that the location service APP access to location information, do not affect the availability of the service. The experimental results show that the proposed algorithm can effectively prevent the leak of user's sensitive location and realize the protection of user's location privacy at different granularity. The designed privacy protection APP system overhead is within a reasonable range and does not affect the availability of location service APP.
【学位授予单位】：东北师范大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP309;TP316

【相似文献】