CoChat
Sign Up
Cited by 313Indoor and Outdoor Localization TechnologiesGNSS positioning and interferenceIoT and Edge/Fog Computing

Robustness, Security and Privacy in Location-Based Services for Future IoT: A Survey

Open access
Chen, Liang, Thombre, Sarang, Jarvinen, Kimmo, Lohan, Elena Simona, Alen-Savikko, Anette, Leppakoski, Helena, Bhuiyan, M. Zahidul H., Bu-Pasha, Shakila, Ferrara, Giorgia Nunzia, Honkala, Salomon, Lindqvist, Jenna, Ruotsalainen, Laura, Korpisaari, Paivi, Kuusniemi, Heidi·2017·IEEE Access
DOI 10.1109/access.2017.2695525
Open this paper in CoChat — free account

Abstract

Internet of Things (IoT) connects sensing devices to the Internet for the purpose of exchanging information. Location information is one of the most crucial pieces of information required to achieve intelligent and context-aware IoT systems. Recently, positioning and localization functions have been realized in a large amount of IoT systems. However, security and privacy threats related to positioning in IoT have not been sufficiently addressed so far. In this paper, we survey solutions for improving the robustness, security, and privacy of location-based services in IoT systems. First, we provide an in-depth evaluation of the threats and solutions related to both global navigation satellite system (GNSS) and non-GNSS-based solutions. Second, we describe certain cryptographic solutions for security and privacy of positioning and location-based services in IoT. Finally, we discuss the state-of-the-art of policy regulations regarding security of positioning solutions and legal instruments to location data privacy in detail. This survey paper addresses a broad range of security and privacy aspects in IoT-based positioning and localization from both technical and legal points of view and aims to give insight and recommendations for future IoT systems providing more robust, secure, and privacy-preserving location-based services.

Integrity signals

Registry

Crossref · 10.1109/access.2017.2695525

Cites

3 of 3 references verified0 citation errors · 0 not checkable

Statistics

Recomputing p-values needs the paper’s full text.

Claims the paper makes

We couldn’t retrieve this paper’s full text, so its claims and self-check weren’t run. The registry and citation checks still apply.

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • Traditional AI/ML-based localization systems suffer from lack of robustness and privacy leakage due to centralized processing.

    “Traditional AI/ML-based localization systems often suffer from the lack of robustness due to the dynamics of mobile environments and privacy leakage bottlenecks caused by the centralized data processing architecture for object localization [87].”

    From Federated Learning for Internet of Things: A Comprehensive Survey (2021) · cites this paper as [87]

Cites

Flagged first, then by citations

Research works printed but not linked: 193

  1. ohm, 2010, Broken promises of privacy: Responding to the surprising failure of anonymization, UCLA Law Rev, 57, 1701
  2. gentry, 2010, Fully homomorphic encryption using ideal lattices, Proc ACM Symp on Theory of Computing (STOC), 169
  3. rivest, 1978, On data banks and privacy homomorphisms, Found Secure Comput, 4, 169
  4. 10.1145/2633600 · DOI
  5. balasch, 2010, PrETP: Privacy-preserving electronic toll pricing, Proc Usenix Secur Symp, 63
  6. 10.1109/INFOCOM.2014.6848176 · DOI
  7. narayanan, 2011, Location privacy via private proximity testing, Proc 18th Annu Netw Distrib Syst Sec Symp (NDSS '11), 1-3:1
  8. 10.1109/TDSC.2010.71 · DOI
  9. hamid, 2016, The sorcerer’s apprentice guide to fault attacks, Proc IEEE, 94, 370
  10. shaik, 2016, Practical attacks against privacy and availability in 4G/LTE mobile communication systems, Proc 22nd Annu Netw Distrib Syst Secur Symp (NDSS), 6_5-5:1
  11. 10.5194/acp-16-635-2016 · DOI
  12. kintner, 2009, GNSS and ionospheric scintillation: How to survive the next solar maximum, Inside GNSS, 4, 22
  13. bhattacharyya, 2012, Performance and integrity analysis of the vector tracking architecture of GNSS receivers
  14. dixon, 2012, GNSS vulnerabilities: Testing the truth, Coordinates, 8, 13
  15. isoz, 2015, Interference in Global Positioning System Signals and Its Effect on Positioning and Remote Sensing
  16. 2002, Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 Concerning the Processing of Personal Data and the Protection of Privacy in the Electronic Communications Sector (Directive on Privacy and Electronic Communications
  17. 1995, Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data
  18. barrett, 2013, Location Data Privacy Guidelines Assessments and Recommendations
  19. 2010, App no 35623/05 IHRL 1838 (ECtHR)
  20. 2014, Costeja Gonzales C-131/12 (CJEU) ECLI EU C 2014 317
  21. 2017, Proposal for a Regulation of the European Parliament and of the Council Concerning the Respect for Private Life and the Protection of Personal Data in Electronic Communications and Repealing Directive 2002/58/EC (Regulation on Privacy and Electronic Communications)
  22. 2011, Opinion 13/2011 on Geolocation Services on Smart Mobile Devices
  23. 2005, Working Party 29 Opinion on the Use of Location Data With a View to Providing Value-Added Services
  24. 2013, Fifteenth Annual Report of the Article 29 Working Party on Data Protection
  25. 10.21552/EDPL/2016/3/7 · DOI
  26. 2016, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)
  27. 10.1109/PLANS.2016.7479733 · DOI
  28. van dyke, 2003, GPS integrity failure modes and effects analysis, Proc Nat Tech Meeting Inst Navigat, 689
  29. beutler, 2014, The system: GLONASS in April, what went wrong, GPS World, 2014, 14
  30. edgar, 1999, A cooperative anomaly resolution on PRN-19, Proceedings of the 12th International Technical Meeting of the Satellite Division of Institute of Navigation, 2268
  31. blume, 2014, Effects of the April 1st, 2014 GLONASS outage on GNSS receivers, Proc Amer Geophys Union Fall Meeting
  32. 2015, European GNSS Agency EGNOS Safety of Life (SoL) Service Definition Document
  33. 10.1155/2012/127072 · DOI
  34. kuusniemi, 2013, Signal quality indicators and reliability testing for spoof-resistant GNSS receivers, Eur J Navigat, 11, 12
  35. 10.1007/978-3-540-85893-5_7 · DOI
  36. 10.1109/DSD.2006.40 · DOI
  37. 10.1007/978-3-642-31410-0_11 · DOI
  38. bogdanov, 2007, PRESENT: An ultralightweight block cipher, Cryptographic Hardware and Embedded Systems—CHES, 4727, 450
  39. 10.1007/978-3-642-04138-9_20 · DOI · Paper page
  40. 10.1007/s11227-010-0501-4 · DOI
  41. 10.1109/MDT.2007.178 · DOI · Paper page
  42. de cannière, 2006, TRIVIUM: A stream cipher construction inspired by block cipher design principles, Proc 9th Int Conf Inf Secur (ISC), 171
  43. hell, 2007, Grain: a stream cipher for constrained environments, J Wireless Commun Mobile Computing, 2, 86
  44. jafarnia-jahromi, 2012, Detection and mitigation of spoofing attacks on a vector based tracking GPS receiver, Proc Int Tech Meeting Inst Navigat, 790
  45. 10.1109/EURONAV.2016.7530549 · DOI
  46. 10.1109/ICL-GNSS.2014.6934175 · DOI
  47. 10.1109/NAVITEC.2012.6423048 · DOI
  48. 10.1016/j.icte.2016.02.008 · DOI
  49. fadaei, 2015, Detection, characterization and mitigation of GNSS jammers using windowed-HHT, Proceedings of the 18th International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS, 1625
  50. 10.1155/2014/262186 · DOI
  51. bhuiyan, 2014, The impact of interference on GNSS receiver observables—A running digital sum based simple jammer detector, Radioengineering, 23, 898
  52. macgougan, 2001, Overview of GNSS signal degradation phenomena, Proc IEEE 4th Int Symp Kinematic Systems in Geodesy Geomatics and Navigation, 87
  53. agrawal, 2002, The EM side-channel(s), Cryptographic Hardware and Embedded Systems—CHES, 2523, 29
  54. kocher, 1999, Differential power analysis, Advances in Cryptography, 1666, 388
  55. kocher, 1996, Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems, Adv Cryptology, 1109, 104
  56. roy, 2015, Lightweight coprocessor for Koblitz curves: 283-bit ECC including scalar conversion with only 4300 gates, Cryptographic Hardware and Embedded Systems—CHES, 9293, 102
  57. 10.1007/978-3-319-13066-8_10 · DOI
  58. 10.1145/2593069.2593238 · DOI
  59. liu, 2014, MoTE-ECC: Energy-scalable elliptic curve cryptography for wireless sensor networks, Proc 6th Int Conf Appl Cryptogr Netw Secur (ACNS), 8479, 361, 10.1007/978-3-319-07536-5_22 · DOI
  60. borgia, 2014, The Internet of Things vision: Key features, applications and open issues, Comput Commun, 54, 1, 10.1016/j.comcom.2014.09.008 · DOI
  61. 2017, Fast-Track Your Smart IoT Device Development
  62. 10.1109/TC.2008.148 · DOI
  63. 2017, The First Middleware for Smart Applications
  64. 2017, Sirrra Wireless
  65. 10.1109/JPROC.2016.2543266 · DOI
  66. 10.1090/S0025-5718-1987-0866109-5 · DOI · Paper page
  67. 10.1007/3-540-39799-X_31 · DOI
  68. 2017, Crystal—Critical System Engineering Acceleration
  69. dovis, 2015, GNSS Interference Threats and Countermeasures
  70. kaplan, 2005, Understanding GPS Principles and Applications
  71. 10.1109/JPROC.2016.2532963 · DOI
  72. landry, 1997, Analysis of potential interference sources and assessment of present solutions for GPS/GNSS receivers, Proc 4th St Petersburg Int Conf Integr Navig Syst, 1
  73. 10.1051/swsc/2014024 · DOI
  74. 10.1029/2011SW000707 · DOI · Paper page
  75. lee, 2013, New advanced RAIM with improved availability for detecting constellation-wide faults, using two independent constellations, Navigat J Inst Navigat, 60, 71, 10.1002/navi.28 · DOI
  76. jakowski, 2006, On developing space weather services for the end users of GNSS, 3rd European Space Weather Week
  77. collin, 2006, Investigations of self-contained sensors for personal navigation
  78. 10.3390/s121115983 · DOI
  79. 10.1109/IPIN.2012.6418911 · DOI
  80. 10.1109/IPIN.2013.6817909 · DOI
  81. chen, 2012, Stability analysis of tracking weak GPS signals through non-coherent ultra-tight GPS/INS integration, Indoor Positioning and Indoor Navigation Conference (IPIN)
  82. kim, 2006, A deeply coupled gps/ins integrated Kalman filter design using a linearized correlator output, Proc IEEE/ION Position Location Navigat Symp, 300
  83. 10.1109/PLANS.2010.5507177 · DOI
  84. petovello, 2006, Comparison of vector-based software receiver implementations with application to ultra-tight GPS/INS integration, Proc ION GNSS, 6, 1790
  85. 10.1109/NAVITEC.2012.6423084 · DOI
  86. 10.1109/PLANS.2014.6851480 · DOI
  87. 10.1109/PLANS.2014.6851499 · DOI
  88. 10.1109/SAM.2014.6882352 · DOI
  89. mcdowell, 2007, GPS Spoofer and Repeater Mitigation System Using Digital Spatial Nulling
  90. 10.1109/UPINLBS.2014.7033711 · DOI
  91. ruotsalainen, 2014, Deeply-coupled GNSS, INS and visual sensor integration for interference mitigation, Proc of the Int Technical Meeting of the Satellite Division of the Institute of Navigation, 2243
  92. bauernfeind, 2013, Analysis, detection and mitigation of incar gnss jammer interference in intelligent transport systems, Proc Deutsche Gesellschaft für Luft- und Raumfahrt-Lilienthal-Oberth e V
  93. domínguez, 2016, Performance evaluation of high sensitivity gnss techniques in indoor, urban and space environments, Proc ION GNSS, 373
  94. dampf, 2013, Measuring high bandwidth GNSS signals for indoor positioning, Proc Inside GNSS, 76
  95. 10.5772/30567 · DOI
  96. rüegamer, 2015, Jamming and spoofing of GNSS signals—An underestimated risk, Proc Wisdom Ages Challenges Modern World, 17
  97. 2016, GNSS User Technology Report
  98. 1999, Directive 1999/5/EC of the European Parliament and of the Council of 9 March 1999 on Radio Equipment and Telecommunications Terminal Equipment and the Mutual Recognition of Their Conformity
  99. 2009, Commission Recommendation of 12 5 2009 on the Implementation of Privacy and Data Protection Principles in Applications Supported by Radio Frequency Identification
  100. 10.1016/j.clsr.2009.11.008 · DOI
  101. paez, 2016, The internet of things: Emerging legal issues for businesses, N Ky L Rev, 43, 29
  102. 10.1007/978-94-017-9385-8_12 · DOI
  103. 10.1007/s11277-012-0777-1 · DOI
  104. 2014, Opinion 8/2014 on the on Recent Developments on the Internet of Things
  105. 10.1109/JSAC.2015.2430281 · DOI · Paper page
  106. hert, 2003, Making sense of privacy and data protection A prospective overview in the light of the future of identity location-based services and virtual residence, 111
  107. 10.1109/COMST.2016.2637663 · DOI
  108. 10.1093/idpl/ipv004 · DOI
  109. 10.1109/TMC.2015.2451641 · DOI
  110. du, 0, A map-assisted WiFi AP placement algorithm enabling mobile device’s indoor positioning, IEEE Syst J
  111. radnosrati, 2015, New trends in radio network positioning, Proc 18th Int Conf Inf Fusion (Fusion), 492
  112. 10.1109/TBC.2016.2606939 · DOI
  113. 10.1109/TMC.2014.2307301 · DOI
  114. 10.1109/JSEN.2015.2503640 · DOI
  115. 10.1109/TBC.2015.2465155 · DOI
  116. groves, 2016, Intelligent urban positioning using shadow matching and GNSS ranging aided by 3D mapping, Proc ION GNSS, 534
  117. 10.1017/S0373463311000087 · DOI
  118. 10.1109/MWC.2016.7498078 · DOI
  119. 10.1109/ACCESS.2016.2579879 · DOI
  120. kennedy, 2016, Performance of a deeply coupled commercial grade gps/ins system from KVH and NovAtel Inc, Proc ION GNSS, 17
  121. 10.1109/GLOCOMW.2015.7413967 · DOI
  122. 10.1109/COMST.2016.2553452 · DOI
  123. 10.1109/TASE.2016.2543242 · DOI · Paper page
  124. 10.1109/TIM.2016.2519778 · DOI
  125. 10.1109/WoWMoM.2016.7523540 · DOI
  126. 2004, Directive 2004/108/EC of the European Parliament and of the Council of 15 December 2004 on the Approximation of the Laws of the Member States Relating to Electromagnetic Compatibility and Repealing Directive 89/336/EEC Text with EEA Relevance
  127. 10.1109/ITCC.2003.1197544 · DOI
  128. 10.1109/JSEN.2015.2506166 · DOI
  129. 0, IoT Privacy Data Protection Information Security
  130. 2016, ECC Recommendation (03)04 With Regard to Forbidding the Placing on the Market and Use of Jammers in the CEPT Member Countries
  131. 2011, Decision No 1104/2011/EU of the European Parliament and of the Council of 25 October 2011 on the Rules for Access to the Public Regulated Service Provided by the Global Navigation Satellite System Established Under the Galileo Programme
  132. 1999, Interpretation of the Directive 1999/5/EC
  133. 2016, ECC Recommendation (04)01 With Regard to Forbidding the Placing on the Market and Use of Jammers in the CEPT Member Countries
  134. 2014, Directive 2014/30/EU of the European Parliament and of the Council of 26 February 2014 on the Harmonisation of the Laws of the Member States Relating to Electromagnetic Compatibility (Recast) Text With EEA Relevance
  135. 2013, Report on the Public Consultation on Iot Governance
  136. 2002, Decision No 676/2002/EC of the European Parliament and of the Council of 7 March 2002 on a Regulatory Framework for Radio Spectrum Policy in the European Community (Radio Spectrum Decision)
  137. 2014, Directive 2014/53/EU of the European Parliament and of the Council of 16 April 2014 on the Harmonisation of the Laws of the Member States Relating to the Making Available on the Market of Radio Equipment and Repealing Directive 1999/5/EC Text With EEA Relevance
  138. 2008, The Keyed-Hash Message Authentication Code (HMAC)
  139. 0, Secure Hash Standard (SHS)
  140. 10.1109/MCOM.2008.4481347 · DOI
  141. 10.1109/MNET.2011.5687950 · DOI
  142. 10.1109/TIT.1976.1055638 · DOI · Paper page
  143. 2013, Digital Signature Standard (DSS)
  144. 0, Advanced Encryption Standard (AES)
  145. desmedt, 1988, Major security problems with the ‘unforgeable’ (Feige)-Fiat-Shamir proofs of identity and how to overcome them, Proc 6th Worldwide Congr Comput Commun Secur Protection (SecuriCom), 88, 147
  146. 10.1109/SP.2012.17 · DOI
  147. 2007, Recommendation for Block Cipher Modes of Operation Galois/Counter Mode (GCM) and GMAC
  148. 10.1007/3-540-48285-7_30 · DOI
  149. 10.1007/978-3-662-43933-3_4 · DOI
  150. 10.1145/1998412.1998437 · DOI
  151. 10.1007/978-3-642-00730-9_7 · DOI
  152. ?apkun, 2003, SECTOR: Secure tracking of node encounters in multi-hop wireless networks, Proceedings of the ACM Workshop on Security of Ad Hoc and Sensor Networks (SASN), 21
  153. 10.1109/MAHSS.2005.1542879 · DOI
  154. 10.1109/TII.2012.2218252 · DOI
  155. 10.1109/JSAC.2005.861380 · DOI
  156. 10.1109/IPSN.2005.1440942 · DOI
  157. 10.1145/941311.941313 · DOI
  158. 10.1109/TPDS.2012.42 · DOI
  159. 10.1016/j.future.2013.01.010 · DOI · Paper page
  160. 10.1016/j.comnet.2010.05.010 · DOI · Paper page
  161. 10.1109/TMC.2007.70753 · DOI
  162. 10.1109/COMST.2017.2652320 · DOI · Paper page
  163. 10.1109/MVT.2015.2512358 · DOI
  164. 10.1109/JTEHM.2016.2620971 · DOI
  165. wang, 2007, Enhance the Map Usage for Indoor Location-Aware Systems, 151
  166. 10.1023/A:1016003126882 · DOI
  167. 10.1109/INFCOM.2000.832252 · DOI · Paper page
  168. 10.1109/WPNC.2010.5653409 · DOI
  169. 10.1080/17489720802415205 · DOI
  170. 10.1109/TKDE.2013.184 · DOI
  171. 10.1109/IPIN.2011.6071908 · DOI
  172. 10.1109/JSEN.2016.2566679 · DOI
  173. 2017, Carriots
  174. 2017, Thingworx
  175. van diggelen, 2009, A-GPS Assisted GPS GNSS and SBAS
  176. 10.1109/ICL-GNSS.2016.7533852 · DOI
  177. 0, eMTC and NB-IoT Pave the Way to 5G/IoT
  178. 2016, Progress on 3GPP IoT
  179. 10.1109/ICETECH.2016.7569281 · DOI
  180. 2016, Standardization of NB-IoT completed
  181. 10.1109/IJCNN.2014.6889978 · DOI
  182. 2015, Huawei and Partners Leading NB-IoT Standardization
  183. 2016, LoRaWAN R1 0 Open Standard Released for the IoT
  184. 10.1109/ISCC.2015.7405596 · DOI
  185. vogel, 2005, Effect of a GPS anomaly on different GNSS receivers, Proceedings of the 18th International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS, 1645
  186. 10.1155/2012/961785 · DOI
  187. 10.1016/j.comcom.2014.11.006 · DOI
  188. 10.1109/PERCOMW.2007.19 · DOI
  189. 10.1109/TMC.2016.2616465 · DOI
  190. 10.1109/TITS.2013.2265311 · DOI
  191. 10.1109/ICPADS.2016.0064 · DOI
  192. 10.1109/MDM.2015.18 · DOI
  193. 10.1109/TMC.2013.146 · DOI · Paper page

Cited by

Sorted by citations

Authors
Chen, L., Thombre, S., Jarvinen, K., Lohan, E. S., Alen-Savikko, A., Leppakoski, H., Bhuiyan, M. Z. H., Bu-Pasha, S., Ferrara, G. N., Honkala, S., Lindqvist, J., Ruotsalainen, L., Korpisaari, P., & Kuusniemi, H.
Affiliations
  • Finnish Geospatial Research Institute (FI)
  • University of Helsinki (FI)
  • Tampere University of Technology (FI)
ORCID
Venue
IEEE Access
Publisher
Institute of Electrical and Electronics Engineers (IEEE)
Published
2017
Volume
5
Pages
8956-8977
ISSN
2169-3536 (ISSN-L)
DOI
10.1109/access.2017.2695525
OpenAlex
W2605943641
Cited by
313
References
3
Citations by year
2026: 5 · 2025: 14 · 2024: 23 · 2023: 46 · 2022: 42 · 2021: 50 · 2020: 45 · 2019: 46 · 2018: 34 · 2017: 8
FWCI
15.12
Type
journal article
Language
en
Open access
Licence
ieeexplore.ieee.org/Xplorehelp/downloads/license-information/OAPA.html (vor)
Locations
  • IEEE Access (publishedVersion)
  • DOAJ (DOAJ: Directory of Open Access Journals) (submittedVersion, cc-by-sa)
  • Työväentutkimus Vuosikirja (submittedVersion)
  • Tampere University Institutional Repository (Tampere University) (submittedVersion)
Funders
Academy of Finland (no. 303576)
Topics
  • Physical Sciences › Engineering › Electrical and Electronic Engineering › Indoor and Outdoor Localization Technologies
  • Physical Sciences › Engineering › Aerospace Engineering › GNSS positioning and interference
  • Physical Sciences › Computer Science › Computer Networks and Communications › IoT and Edge/Fog Computing
Keywords
Internet of Things, location-based services, positioning, localization, GNSS, privacy, security (computing), location privacy, legal regulation

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review