On the Trade-Off between User-Location Privacy and Queried-Location Privacy in Wireless Sensor Networks

By eavesdropping on a user's query in a sensor network, an adversary can deduce both the user's location and his/her area of interest. In many domains it is desitable to guarantee privary of both places. We propose an effective way to measure how well issuing a disperse set of k queries protects the user's area of interest However, issing k queries instead of one facilitates the adversary determining the user's location. To address that issue, we define a quantitative measure of how much information the k queries leak about the user's location Experiments reveral that how dispersed the k queries are has no effect on the privacy of the user's location. Howerver, smaller k. randomized routing, and non-broadcast transmission improve the user's location privacy. We also show that compromissing nodes in the user's network yields no significant advantage to the adversary over an eavesdropping strategy.