Department of Software, Hallym University, Chuncheon-si, Gangwon-do, Republic of Korea.
Graduate School of Information Security, Korea University, Seoul, Republic of Korea.
PLoS One. 2019 Dec 5;14(12):e0225688. doi: 10.1371/journal.pone.0225688. eCollection 2019.
Participatory sensing is gaining popularity as a method for collecting and sharing information from distributed local environments using sensor-rich mobile devices. There are a number of participatory sensing applications currently in wide use, such as location-based service applications (e.g., Waze navigation). Usually, these participatory applications collect tremendous amounts of sensing data containing personal information, including user identity and current location. Due to the high sensitivity of this information, participatory sensing applications need a privacy-preserving mechanism, such as anonymity, to secure and protect personal user data. However, using anonymous identifiers for sensing sources proves difficult when evaluating sensing data trustworthiness. From this perspective, a successful participatory sensing application must be designed to consider two challenges: (1) user privacy and (2) data trustworthiness. To date, a number of privacy-preserving reputation techniques have been proposed to satisfy both of these issues, but the protocols contain several critical drawbacks or are impractical in terms of implementation. In particular, there is no work that can transparently manage user reputation values while also tracing anonymous identities. In this work, we present a blockchain-based privacy-preserving reputation framework called BPRF to transparently manage user reputation values and provide a transparent tracing process for anonymous identities. The performance evaluation and security analysis show that our solution is both practical and able to satisfy the two requirements for user privacy and data trustworthiness.
参与式感知作为一种利用传感器丰富的移动设备从分布式本地环境中收集和共享信息的方法,越来越受到人们的欢迎。目前有许多参与式感知应用程序被广泛使用,例如基于位置的服务应用程序(例如 Waze 导航)。通常,这些参与式应用程序会收集大量包含个人信息的感知数据,包括用户身份和当前位置。由于这些信息的敏感性很高,参与式感知应用程序需要一种隐私保护机制,例如匿名性,以确保和保护个人用户数据。然而,在评估感知数据可信度时,使用匿名标识符来标识感知源会变得很困难。从这个角度来看,一个成功的参与式感知应用程序必须设计为同时考虑两个挑战:(1)用户隐私和(2)数据可信度。迄今为止,已经提出了许多隐私保护声誉技术来满足这两个问题,但这些协议存在几个关键缺陷,或者在实施方面不切实际。特别是,没有工作可以在透明地管理用户声誉值的同时跟踪匿名身份。在这项工作中,我们提出了一个名为 BPRF 的基于区块链的隐私保护声誉框架,用于透明地管理用户声誉值,并为匿名身份提供透明的跟踪过程。性能评估和安全分析表明,我们的解决方案既实用又能满足用户隐私和数据可信度这两个要求。