US 11,386,228 B2Granted

Real-time session-based anonymization and blurring of high-resolution GPS data

AssigneeGM Global Technology Operations LLC

InventorDonal B. McErlean

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system for anonymizing motor vehicle position information includes a global positioning system (GPS) module disposed within a host vehicle, a control module disposed within the host vehicle and in electronic communication with the GPS module. The control module executes a control logic for collecting real-time host vehicle telemetry data packets from the GPS module, and a control logic for continuously wirelessly communicating the real-time host vehicle telemetry data packets. A remote end-point is in wireless electronic communication with the control module, and executes end-point control logic that continuously receives the real-time host vehicle telemetry data packets from the control module, performs session-based anonymization of the real-time host vehicle telemetry data packets, performs distance-based start location and end location blurring of host vehicle position, writes the real-time host vehicle telemetry data packets to a persistent database once the anonymization and blurring have been executed.

Claims15

Dependent claims

A system for anonymizing motor vehicle position information, the system comprising:

a global positioning system (GPS) module disposed within a host vehicle;
a control module disposed within the host vehicle and in electronic communication with the GPS module, the control module having a memory for storing control logic and a processor configured to execute the control logic, the control logic comprising:
a first control logic for collecting real-time host vehicle telemetry data packets from the GPS module, wherein the real-time host vehicle telemetry data packets further comprise:
a host vehicle identification number (VIN);
a host vehicle speed;
a host vehicle bearing;
a host vehicle altitude;
and
a host vehicle ignition position;
and
a second control logic for continuously wirelessly communicating the real-time host vehicle telemetry data packets;
a remote end-point in wireless electronic communication with the control module, the remote end-point having a memory for storing end-point control logic and a processor configured to execute the end-point control logic, the end-point control logic comprising:
a first end-point control logic for continuously receiving the real-time host vehicle telemetry data packets from the control module;
a second end-point control logic for performing session-based anonymization of the real-time host vehicle telemetry data packets, wherein the second end-point control logic further comprises:
a control logic for removing the host vehicle VIN and replacing the VIN with a unique session identifier (ID) for a current host vehicle trip;
a control logic for generating keys that associate the host vehicle with the unique session ID for the current host vehicle trip;
and
a control logic for associating new real-time host vehicle telemetry data packets with the unique session ID for the current host vehicle trip;
a third end-point control logic for performing distance-based start location and end location blurring of host vehicle position, wherein the third end-point control logic further comprises:
control logic for determining a start location based on a first in time of the real-time host vehicle telemetry data packets, and for determining an end location based on a last in time of the real-time host vehicle telemetry data packets;
control logic for checking all of the real-time host vehicle telemetry data packets to determine a current distance from the start location;
and
control logic for checking all of the real-time host vehicle telemetry data packets to determine a current distance from the end location;
and
a fourth end-point control logic for writing the real-time host vehicle telemetry data packets to a persistent database once the second end-point control logic and the third end-point control logic have been executed.

22 more elements

A method for anonymizing motor vehicle position information, the method comprising:

collecting real-time host vehicle telemetry data packets from a global positioning system (GPS) module disposed within a host vehicle;
utilizing a control module disposed within the host vehicle and in electronic communication with the GPS module, the control module having a memory for storing control logic and a processor configured to execute the control logic;
collecting real-time host vehicle telemetry data packets from the GPS module including:
collecting a host vehicle identification number (VIN);
collecting a host vehicle speed;
collecting a host vehicle bearing;
collecting a host vehicle altitude;
and
collecting a host vehicle ignition position;
and
continuously wirelessly communicating the real-time host vehicle telemetry data packets;
utilizing a remote end-point in wireless electronic communication with the control module, the remote end-point having a memory for storing end-point control logic and a processor configured to execute the end-point control logic;
continuously receiving the real-time host vehicle telemetry data packets from the control module;
performing session-based anonymization of the real-time host vehicle telemetry data packets, including:
removing the host vehicle VIN and replacing the VIN with a unique session identifier (ID) for a current host vehicle trip;
generating keys that associate the host vehicle with the unique session ID for the current host vehicle trip;
and
associating new real-time host vehicle telemetry data packets with the unique session ID for the current host vehicle trip;
performing distance-based start location and end location blurring of host vehicle position;
determining a start location based on a first in time of the real-time host vehicle telemetry data packets, and for determining an end location, different from the start location, based on a last in time of the real-time host vehicle telemetry data packets;
and
writing the real-time host vehicle telemetry data packets to a persistent database once the session-based anonymization of the real-time host vehicle telemetry data packets has been performed, and once the distance-based start location and end location blurring has been performed.

19 more elements

A method for anonymizing motor vehicle position information, the method comprising:

collecting real-time host vehicle telemetry data packets, including collecting a host vehicle identification number (VIN) from a global positioning system (GPS) module disposed within a host vehicle;
utilizing a control module disposed within the host vehicle and in electronic communication with the GPS module, the control module having a memory for storing control logic and a processor configured to execute the control logic;
continuously wirelessly communicating the real-time host vehicle telemetry data packets;
utilizing a remote end-point in wireless communication with the control module, the remote end-point continuously receiving the real-time host vehicle telemetry data packets from the control module, the remote end-point having a memory for storing end-point control logic and a processor configured to execute the end-point control logic;
performing session-based anonymization of the real-time host vehicle telemetry data packets, including:
removing the host vehicle VIN and replacing the VIN with a unique session identifier (ID) for a current host vehicle trip;
associating new host vehicle telemetry data packets with the unique session ID for the current host vehicle trip;
deleting keys associating the host vehicle telemetry data packets with the unique session ID for the current host vehicle trip after a predetermined period of time or after a key-off packet has been received;
writing the host vehicle telemetry data packets to an end-point in-memory cache with the unique session ID as an indexed field;
and
performing distance-based start location and end location blurring of host vehicle position, including:
querying all of the host vehicle telemetry data packets for the unique session ID;
sequentially ordering all of the host vehicle telemetry data packets for the unique session ID based on time stamps;
checking all of the data packets to determine a distance from a first in time of the host vehicle telemetry data packets;
and
checking all of the data packets to determine a distance from a last in time of the host vehicle telemetry data packets;
decreasing a precision of location information in each of the host vehicle telemetry data packets within a first predetermined radial distance of a location of the first in time of the host vehicle telemetry data packets by decreasing GPS precision by a predetermined quantity of numerical location digits or decimal places;
deleting the real-time host vehicle telemetry data packets from the in-memory cache once a current trip has ended;
and
wherein checking all of the data packets to determine a distance from a last in time of the host vehicle telemetry data packets further comprises:
decreasing a precision of location information in each of the host vehicle telemetry data packets within a second predetermined radial distance of a location of the last in time of the host vehicle telemetry data packets by decreasing GPS precision by a predetermined quantity of numerical location digits or decimal places, wherein the precision of location information within the second predetermined radial distance is greater than the precision of location information within the first predetermined radial distance, wherein the first predetermined radial distance is smaller than the second predetermined radial distance.

18 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/430,927Filed 4 Jun 2019
Published: US 2020/0387632 A110 Dec 2020
Granted: 12 Jul 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

G06F 21/6245
To a system of files or objects, e.g. local or distributed file system or database: protecting personal data, e.g. for financial or medical purposes
G06F 21/6254
Protecting personal data, e.g. for financial or medical purposes: by anonymising data, e.g. decorrelating personal data from the owner's…
G01S 5/0027
Transmission from mobile station to base station: of actual mobile position, i.e. position determined on mobile
G01S 19/24
Receivers: acquisition or tracking or demodulation of signals transmitted by the system