%0 Conference Proceedings %T Geo-Graph-Indistinguishability: Protecting Location Privacy for LBS over Road Networks %+ Graduate School of Informatics [Kyoto] %A Takagi, Shun %A Cao, Yang %A Asano, Yasuhito %A Yoshikawa, Masatoshi %Z Part 3: Privacy %< avec comité de lecture %( Lecture Notes in Computer Science %B 33th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec) %C Charleston, SC, United States %Y Simon N. Foley %I Springer International Publishing %3 Data and Applications Security and Privacy XXXIII %V LNCS-11559 %P 143-163 %8 2019-07-15 %D 2019 %R 10.1007/978-3-030-22479-0_8 %K Location privacy %K Geo-Indistinguishability %K Road network %K Differential privacy %Z Computer Science [cs]Conference papers %X In recent years, Geo-Indistinguishability (GeoI) has been increasingly explored for protecting location privacy in location-based services (LBSs). GeoI is considered a theoretically rigorous location privacy notion since it extends differential privacy to the setting of location privacy. However, GeoI does not consider the road network, which may cause insufficiencies in terms of both privacy and utility for LBSs over a road network. In this paper, we first empirically evaluate the privacy guarantee and the utility loss of GeoI for LBSs over road networks. We identify an extra privacy loss when adversaries have the knowledge of road networks and the degradation of LBS quality of service. Second, we propose a new privacy notion, Geo-Graph-Indistinguishability (GeoGI), for protecting location privacy for LBSs over a road network and design a Graph-Exponential mechanism (GEM) satisfying GeoGI. We also show the relationship between GeoI and GeoGI to explain theoretically why GeoGI is a more suitable privacy notion over road networks. Finally, we evaluate the empirical privacy and utility of the proposed mechanism in real-world road networks. Our experiments confirm that GEM achieves higher utility for LBSs over a road network than the planar Laplace mechanism for GeoI under the same empirical privacy level. %G English %Z TC 11 %Z WG 11.3 %2 https://inria.hal.science/hal-02384594/document %2 https://inria.hal.science/hal-02384594/file/115590133_chap-corr.pdf %L hal-02384594 %U https://inria.hal.science/hal-02384594 %~ IFIP-LNCS %~ IFIP %~ IFIP-TC %~ IFIP-WG %~ IFIP-TC11 %~ IFIP-WG11-3 %~ IFIP-DBSEC %~ IFIP-LNCS-11559