LocationSafe: Granular Location Privacy for IoT Devices
This addresses privacy concerns for IoT device users by enabling granular control over GPS location data, though it is incremental as it builds on existing GPS infrastructure.
The paper tackles the lack of consent and control over location data release for IoT device users by designing and implementing a privacy module integrated into the GPSD daemon, demonstrating that it provides strong privacy guarantees with minimal to no overhead.
Today, mobile data owners lack consent and control over the release and utilization of their location data. Third party applications continuously process and access location data without data owners granular control and without knowledge of how location data is being used. The proliferation of IoT devices will lead to larger scale abuses of trust. In this paper we present the first design and implementation of a privacy module built into the GPSD daemon. The GPSD daemon is a low-level GPS interface that runs on GPS enabled devices. The integration of the privacy module ensures that data owners have granular control over the release of their GPS location. We describe the design of our privacy module and then evaluate the performance of private GPS release and demonstrate that strong privacy guarantees can be built into the GPSD daemon itself with minimal to no overhead.