Disclosure Of Location Information Research Articles

Location-based service information disclosure on social networking sites: The effect of privacy calculus, subjective norms, trust, and cultural difference

Along with the development of social networking sites, sharing location is becoming mainstream, offering many opportunities and promoting sustainable business performance of firm. Based on a survey of 433 Facebook users and the application of quantitative method, the paper found that the privacy concern substantially influences the perceived risk of location sharing. In addition, tendency is witnessed on trust in the social networking site providers and members. Also, impression management and incentive provision are strongly involved in the perceived benefits of location information disclosure intention. Both perceived risks and perceived benefits illustrate distinctive effects on sharing users’ location. The impact of subjective norms on sharing information related to a users’ location and observing the potential influence of culture, played as moderator. The finding also confirms subjective norms positively impact location information disclosure intention, while the moderating of culture does not play a contribution role.

Protection of the right to self-determination of personal information in the era of COVID-19

개인정보자기결정권은 헌법전에 명문으로 규정되지 않았음에도 불구하고 헌법해석에 의해 기본권으로 인정되는 기본권이다. 그리고 개인정보자기결정권이라는 기본권은 정보화시대에 정보주체의 사생활 보호 등 여러 보호영역과의 관련성을 갖는 중요한 기본권이다. 그런데 메르스 사태 이후 현재의 코로나19 상황에 이르기까지 감염병 예방과 전파방지의 과정 속에서 개인정보의 제한과 침해에 대한 숙고와 검토가 필요하다는 것이 자명해졌다. 왜냐하면 실제로 코로나 19에 대한 효과적 대응을 위한 정보공개 시스템 실행의 이면에는 확진환자 개인의 사생활이 여과 없이 공개되는 부작용 발생이 적지 않았기 때문이다. 이미 국가인권위원회도 확진자의 과도한 사생활 노출로 인한 인권침해가 발생하지 않도록 해야 한다고 권고한 바 있다. 이러한 상황에 대한 문제의식을 바탕으로 이 글에서는 개인의 민감정보 등 개인정보 공개와 관련한 개인정보 보호법과 감염병 예방법의 관련 규정들을 상관적으로 검토하였다. 특히 개인정보자기결정권과 관련하여 감염병 예방법상의 정보공개와 관련된 규정인 제34조의2 규정을 중심으로, 확진자의 내밀한 사생활을 보호할 수 있는 세부적이고 합리적인 공개기준의 정립 여부와 특히 위치정보 등의 공개로 인한 권리침해의 문제에 대해 살펴 보았다. 일반적인 개인정보와 구분되는 개인위치정보의 특성을 고려할 때 개인위치정보가 개인정보 보호법상의 민감정보에 해당될 수 있는가, 개인위치정보의 분류에 관하여 온라인행태정보유형으로 생존하는 개인에 관한 정보로써 개인정보 가명가공정보익명가공정보 중 어디에도 해당하지 않는 정보유형으로 새로이 “개인관련정보”를 입안하는 방안의 검토, 감염병 예방법상 개인위치정보를 비롯한 개인정보를 제공하고 공개함으로써 발생될 수 있는 권리침해에 관한 대책과 절차에 대해 검토하였다. 개인정보에 관련된 법제는 그 정보의 보호와 이용이 동시에 고려되어야 할 필요가 있다. 즉 개인정보 관련법제는 ‘개인정보의 유용성 배려’와 ‘개인의 권리이익 보호’의 균형을 맞추는 병존적 구조를 반영한 것이어야 할 것이다. 다만 양법익 간의 관계에 있어서는 ‘개인의 권리이익 보호’가 우선적으로 고려되는 것이어야만 함은 물론이다. 안전사회 추구로 인한 부작용을 간과해서는 안되는 것도, 개인정보의 유통으로 인한 비재산적 손해에 대한 배상책임을 고민해야 하는 것 도 이러한 헌법정신에 기인한다고 하겠다. 감염병 예방법의 새로운 수정이 시작되어야 한다.The right to self-determination of personal information is a basic right recognized as a basic right by constitutional interpretation, even though it was not prescribed in the Constitution. And this right is an important basic right that has relevance to various areas of protection, such as protection of the privacy of the information subject in the information age. However, from the MERS outbreak to the current COVID-19, it has become apparent that it is necessary to consider and review the restrictions and infringements of personal information in the process of preventing infectious diseases and preventing transmission. This is because, in fact, behind the implementation of the information disclosure system for effective response to COVID-19, there were not a few occurrences of side effects in which the personal life of confirmed patients was disclosed without filtering. The National Human Rights Commission of Korea has already recommended that human rights violations should not occur due to excessive exposure of the confirmed person s private life. Based on the awareness of the problem in this situation, in this article, the related regulations of the Personal Information Protection Act and the Infectious Disease Control and Prevention Act related to the disclosure of personal information, such as personal sensitive information, were reviewed correlatively. In particular, with respect to the right to self-determination of personal information, detailed and reasonable disclosure standards have been established to protect the confidential personal life of the confirmed person, with a focus on Article 34-2, which is a regulation related to the disclosure of information in the Infectious Disease Prevention Act, and, in particular, disclosure of location information, etc., I reviewed the problem of infringement of rights caused by. Considering the characteristics of personal location information that are distinguished from general personal information, can personal location information correspond to sensitive information of the Personal Information Protection Act?, review of a plan to devise a new “personal-related information” as an information type, review measures and procedures for rights infringement that may occur by providing and disclosing personal information including personal location information in the Infectious Disease Control and Prevention Act. Legal systems related to personal information need to consider the protection and use of the information at the same time. In other words, the legislation related to personal information should reflect the coexistence structure that balances “consideration of the usefulness of personal information” and “protection of individual rights and interests”. However, in the relationship between the two legal interests, ‘protection of individual rights and interests’ should be given priority. It can be said that this constitutional spirit should not overlook the side effects caused by the pursuit of a safe society and the need to consider liability for compensation for non-property damages caused by the distribution of personal information. A new modification of the Infectious Disease Control and Prevention Act must be initiated.

Enabling Smart Anonymity Scheme for Security Collaborative Enhancement in Location-Based Services

Security enhancement is and always will be a prime concern for the deployment of point-of-interest (POI) recommendation services in mobile sensing environment. Recent tamper-proof technical protection such as strong encryption has undoubtedly become a major safeguard against threats to privacy in location-based services. Although the disclosure of location information could increase recommendation accuracy, the publication of trajectory data to untrusted entities could reveal sensitive details, e.g., daily routes, destinations, and favorite restaurants. In this paper, we propose a smart scheme named BUSA to approach the above problem by reconciling the tension between privacy protection and recommendation accuracy in location-based recommendation services. This scheme uses anonymizer agents positioned between the service-requesting users and location service providers; these agents operate by dividing the query information and using k -anonymity to enhance privacy protection. The scheme also utilizes clustering techniques to group users into clusters by learning their trajectory data and selects the spatial center cells as a cluster core and a benchmark for calculating recommendations via trust computing. An anonymizer coordination strategy is proposed to replace a low-performing anonymizer with one that provides stronger privacy protection for a recommendation service. The BUSA scheme adopts k-anonymity and clustering to protect privacy, and the calculated recommendation will be suitable for the cluster core that represents the entirety of users' location preferences. The security analysis reveals that the BUSA scheme can effectively protect privacy against fraudulent query requestors and the simulation results also indicate that it provides stronger privacy protection than its counterparts from the perspective of recommendation hit rate and the extent of disclosure.

How pull vs. push information delivery and social proof affect information disclosure in location based services

With the boom of the app economy, users’ location information has become an increasingly valuable differentiator to deliver personalized products and services, yet continues to raise severe privacy concerns. While research on information privacy has paid great attention on explaining and predicting factors of information disclosure decisions, there is still a significant gap in terms of how app providers can combine different mechanisms in the design of their apps to effectuate better disclosure outcomes. Drawing on a randomized online experiment with 143 smartphone users, we analyze how pull (i.e., services with user-controlled position awareness) and push (i.e., demanding always-on access location tracking) information delivery and social proof cues separately and jointly affect users’ actual location information disclosure. The results reveal that both strategies increase actual location information disclosure via two distinct mediation paths. While pull information delivery mitigates users’ privacy concerns, social proof increases their trusting beliefs. However, when both strategies are employed together, we found that social proof overrides the effect of pull information delivery mechanisms.

Retention and disclosure of location information and location identifiers OTT content and communication services

This article describes how Australia’s metadata retention and disclosure regime addresses the retention and disclosure of location information and location identifiers by locally licensed telecommunications service providers and those that do not require a licence to operate in Australia. The article specifically looks at over the-top-content and communication services. The retention and disclosure duties are described in contrast to the powers of the law enforcement agencies to access and use location information from free online social networking services, whereas the law seeks to restrict the retention and thereby the disclosure of location information in respect of over the-top-content and communication services that are not provided by the licensed or unlicensed telecommunications service provider. The paper argues the retention limitations in respect of over the-top-content and communication services are undermined by the actions of the agencies to harvest location information and conduct big data analytics. Similarly, so does the discretion granted to the telecommunications service provider to retain location information in respect of over the-top-content and communication services, provided by a third party content service provider and then be required to disclose it, without any additional safeguards. The actions of the agencies and the discretion granted to the telecommunications companies undermine privacy protections.

Retention and disclosure of location information and location identifiers OTT content and communication services

This article describes how Australia’s metadata retention and disclosure regime addresses the retention and disclosure of location information and location identifiers by locally licensed telecommunications service providers and those that do not require a licence to operate in Australia. The article specifically looks at over the-top-content and communication services. The retention and disclosure duties are described in contrast to the powers of the law enforcement agencies to access and use location information from free online social networking services, whereas the law seeks to restrict the retention and thereby the disclosure of location information in respect of over the-top-content and communication services that are not provided by the licensed or unlicensed telecommunications service provider. The paper argues the retention limitations in respect of over the-top-content and communication services are undermined by the actions of the agencies to harvest location information and conduct big data analytics. Similarly, so does the discretion granted to the telecommunications service provider to retain location information in respect of over the-top-content and communication services, provided by a third party content service provider and then be required to disclose it, without any additional safeguards. The actions of the agencies and the discretion granted to the telecommunications companies undermine privacy protections.

Enhanced EPS-AKA for adapting LTE technology in Military Tactical Communication Network

With the development of wireless mobile communication, our MOD(Ministry of Defense) try to apply LTE technology. However, since security is essential in Military Network, the disclosure of IMSI and user’s location information should be solved. To address those problems, in this paper, we propose an enhanced EPS-AKA that can strengthen the authentication process in original EPS-AKA using IMEI and hash function. The enhanced EPS-AKA generates LTE-K adding IMEI to prevent illegal connection and tapping caused by duplicated USIM. It also generates the authentication message using IMEI and hash function to prevent the disclosure of location information and IMSI. Because the proposed EPS-AKA does not use an additional encryption algorithms to enhanced the secrity, it has lower computational overhead compared to other approaches.

Location information disclosure in location-based social network services: Privacy calculus, benefit structure, and gender differences

As the mechanisms underlying users’ location information disclosure behavior under the context of location-based social network services (LBSNS) have been rarely investigated, this study builds a research model to examine the privacy calculus, benefit structure and gender differences. Specifically, hedonic benefits have stronger impacts on perceived benefits than utilitarian benefits and there is an interaction effect between perceived benefits and privacy risks. Further, utilitarian (hedonic) benefits are more influential for males (females) than for females (males) when formulating overall benefit perceptions, and perceived benefits (privacy risks) have stronger impacts on disclosure intention for males (females) than for females (males). Theoretical and practical implications are also discussed.