一种连续LBS请求下的位置匿名方法

为避免不同时刻来自同一用户的连续位置服务(LBS)请求之间的相关攻击,提出一种改进的k-匿名模型,设计一种连续LBS请求下的位置匿名方法。在满足用户隐私要求的前提下,利用位置采样寻找最优的匿名集,使用户平均匿名区域最小。分析结果表明,该方法能合理利用系统计算资源,提高在多用户请求下系统的响应速度。     

FM radio for indoor localization with spontaneous recalibration

The position of mobile users has become highly important information in pervasive computing environments. Indoor localization systems based on Wi–Fi signal strength fingerprinting techniques are widely used in office buildings with an existing Wi–Fi infrastructure. Our previous work has proposed a solution based on exploitation of a FM signal to deal with environments not covered with Wi–Fi signal or environments with only a single Wi–Fi access point. However, a general problem of indoor wireless positioning systems pertains to signal degradation due to the environmental factors affecting signal propagation. Therefore, in order to maintain a desirable level of localization accuracy, it becomes necessary to perform periodic calibrations of the system, which is either time consuming or requires dedicated equipment and expert knowledge. In this paper, we present a comparison of FM versus Wi–Fi positioning systems and a combination of both systems, exploiting their strengths for indoors positioning. We also address the problem of recalibration by introducing a novel concept of spontaneous recalibration and demonstrate it using the FM localization system. Finally, the results related to device orientation and localization accuracy are discussed.     

K‐MING: A mobile proxy handoff control scheme for proximate group‐based geodata sharing

This work adopts a mobile social network in proximity (MSNP)–centric group touring service concept to share geo–points of interest's (POIs') data among mobile users belonging to the same touring group. In a group‐based touring service, a mobile user can create a group in the MSNP that can consist of some clusters in which some members having the 3G/3.5G/4G cellular network service are selected as cluster leaders to enable their Wi‐Fi hot spot functions as mobile proxies. After that, each group member can join one of the clusters by connecting with a cluster leader's Wi‐Fi hot spot. Thereafter, each cluster leader downloads geo‐POIs' data using 3G/3.5G/4G cellular network and then shares the downloaded POIs' data with its cluster members through its Wi‐Fi hot spot. This work proposed a handoff mechanism such that each mobile user can handoff from its currently connected cluster to the other one that belongs to the same MNSP group. The main handoff concern is that each handheld device only allows a limited number of handheld devices to connect with its Wi‐Fi hot spot at the same time. This work proposed a K‐member‐limited MSNP‐based INter Group handoff scheme called K‐MING to tackle the handoff problem. The performance analysis shows that K‐MING for the group touring scenario has better performance for the sharing of geo‐POIs' data downloading in terms of average power consumption and average downloaded data volume from 3G/3.5G/4G cellular network than that of the individual touring scenario.     

A context-aware scheme for privacy-preserving location-based services

We address issues related to privacy protection in location-based services (LBSs). Most existing privacy-preserving LBS techniques either require a trusted third-party (anonymizer) or use cryptographic protocols that are computationally and communicationally expensive. Our design of privacy-preserving techniques is principled on not requiring a trusted third-party while being highly efficient in terms of time and space complexities. The problem has two interesting and challenging characteristics: First, the degree of privacy protection and LBS accuracy depends on the context, such as population and road density, around a user’s location. Second, an adversary may violate a user’s location privacy in two ways: (i) based on the user’s location information contained in the LBS query payload and (ii) by inferring a user’s geographical location based on the device’s IP address. To address these challenges, we introduce CAP, a context-aware privacy-preserving LBS system with integrated protection for both data privacy and communication anonymity. We have implemented CAP and integrated it with Google Maps, a popular LBS system. Theoretical analysis and experimental results validate CAP’s effectiveness on privacy protection, LBS accuracy, and communication QoS (Quality-of-Service).     

Remote service discovery and binding architecture for soft real-time QoS in indoor location-based service

Indoor location-based service (LBS) is generally distinguished from web services that have no physical location and user context. In particular, various resources have dynamic and frequent mobility in indoor environments. In addition, an indoor LBS includes numerous service lookups being requested concurrently and frequently from several locations, even through a network infrastructure requiring high scalability in indoor environments. The traditional centralized LBS approach needs to maintain a geographical map of the entire building or complex in its central server, which can cause low scalability and traffic congestion. This paper presents a self-organizing and fully distributed indoor LBS platform with regional cooperation among devices. A service lookup algorithm based on the proposed distributed architecture searches for the shortest physical path to the nearest service resource. A continuous service binding mechanism guarantees a probabilistic real-time QoS regardless of dynamic and frequent mobility in a soft real-time system such as an indoor LBS. Performance evaluation of the proposed algorithm and platform is compared to the traditional centralized architecture in the experimental evaluation of scalability and real test bed environments.     

云环境下的基于Min-Max的节能资源调度算法的研究

针对云计算环境下的高能耗问题,从系统节能的角度提出一种节能资源调度算法(energy-saving scheduling algorithm based on min-max,ESSAMM)。在Min-Max算法的基础上综合考虑了用户对于任务期望的完成时间和能量消耗两个因素,以节省任务执行过程中产生的能量消耗,并提高用户的时间QoS满意度,实现负载均衡。将任务集合中各任务按照长度从小到大排序,并根据时间QoS为该集合中长度最大和最小的任务选出符合用户期望的物理资源;根据能量估算模型,计算出这两个任务在各物理机上的执行能耗;选择最小能耗对应的物理机来执行该任务;将这两个任务在任务集合中删除,并重复上述过程,直到任务集合为空。仿真结果表明,相比于Min-Max和Min-Min资源调度算法,该算法能够有效降低系统执行任务产生的总能耗,提高用户时间服务质量,并实现调度系统负载均衡。     

保护位置隐私和查询内容隐私的路网K近邻查询方法

位置隐私和查询内容隐私是LBS兴趣点（point of interest,简称POI）查询服务中需要保护的两个重要内容,同时,在路网连续查询过程中,位置频繁变化会给LBS服务器带来巨大的查询处理负担,如何在保护用户隐私的同时,高效地获取精确查询结果,是目前研究的难题.以私有信息检索中除用户自身外其他实体均不可信的思想为基本假设,基于Paillier密码系统的同态特性,提出了无需用户提供真实位置及查询内容的K近邻兴趣点查询方法,实现了对用户位置、查询内容隐私的保护及兴趣点的精确检索;同时,以路网顶点为生成元组织兴趣点分布信息,进一步解决了高强度密码方案在路网连续查询中因用户位置变化频繁导致的实用效率低的问题,减少了用户的查询次数,并能确保查询结果的准确性.最后从准确性、安全性及查询效率方面对本方法进行了分析,并通过仿真实验验证了理论分析结果的正确性.     

边缘环境下计算密集型任务调度研究综述

随着移动设备数量的急剧增长及计算密集型应用如人脸识别、车联网以及虚拟现实等的广泛使用,为了实现满足用户QoS请求的任务和协同资源的最优匹配,使用合理的计算密集型应用的任务调度方案,从而解决边缘云中心时延长、成本高、负载不均衡和资源利用率低等问题。阐述了边缘计算环境下计算密集型应用的任务调度框架、执行过程、应用场景及性能指标。从时间和成本、能耗和资源利用率以及负载均衡和吞吐量为优化目标的边缘计算环境下计算密集型应用的任务调度策略进行了对比和分析,并归纳出目前这些策略的优缺点及适用场景。通过分析5G环境下基于SDN的边缘计算架构,提出了基于SDN环境下的边缘计算密集型数据包任务调度策略、基于深度强化学习的计算密集型应用的任务调度策略和5G IoV网络中多目标跨层任务调度策略。从容错调度、动态微服务调度、人群感知调度以及安全和隐私等几个方面总结和归纳了目前边缘计算环境中任务调度所面临的挑战。     

云计算虚拟资源的熵优化和动态加权评估模型

云资源的动态变化和不确定性给资源管理及任务调度带来了很大的困难.为了准确地掌握资源动态负载和可用能力信息,提出一种基于熵优化和动态加权的资源评估模型,其中,熵优化模型利用最大熵和熵增原理的目标函数及约束条件,筛选出满足用户 QoS 和系统最大化的资源,实现最优调度,保障用户 QoS.对筛选后的资源再进行动态加权负载评估,对负载过重及长期不可用资源进行迁移、释放等,可减少能耗,实现负载均衡和提高系统利用率.设计了仿真实验,以验证所提评估模型的性能.实验结果表明,熵优化模型对用户 QoS 和系统最大化有很好的效果,动态加权负载评估有利于均衡负载,提高系统利用率.该评估模型实现了用户QoS保障、减少能耗、负载均衡以及提高系统利用率等多目标的优化.     

LBS中基于移动终端的连续查询用户轨迹隐匿方法*

为减少现有LBS(基于位置的服务)机制给用户位置信息和个人隐私泄露带来的威胁,提出并实现了一个基于移动智能终端的连续查询用户运动轨迹保护方案.该方法利用移动终端来规划虚拟路径,以减少用户在连续查询中的隐私泄露,且不需要第三方服务器提供位置匿名服务,由用户自主决定何时启动位置隐匿机制.实验证明,提出的方法有效地隐匿了连续查询用户的位置及轨迹信息.     

面向移动用户的城市空间信息服务平台

随着移动通信技术的发展,基于位置的服务(LBS)越来越受到重视。然而传统的位置管理、空间位置信息服务系统(GIS)均是基于大型机/桌面机、宽带宽的应用环境;另一方面,在移动应用领域中的资源受限性使得传统的GIS构建方法并不适应于移动环境。文中旨在使移动用户能够在受限的移动应用环境中能和桌面用户一样使用城市空间信息服务。主要论述了在服务器端所要做的工作,并从多源数据的集成、空间数据的压缩方法及服务平台的框架结构等三个方面进行了论述。提出了基于WebServices的数据集成、基于小波的矢量地图压缩和JPEG2000的珊格地图压缩方法,并给出具体框架体系例子。文中所涉及到的框架体系原型在实际环境下运行良好,达到了预期的目的。     

移动对象连续查询位置匿名策略

用户位置隐私保护已经成为基于位置服务领域研究的热点问题之一,现有的方法多是只针对用户单独一次查询的隐私保护,没有考虑移动过程中由于连续查询而造成的位置隐私泄露问题。主要针对连续查询下的移动对象位置隐私保护提出一种基于历史用户的虚假用户生成的位置匿名方法,该方法结合用户历史数据,通过确定合理的假用户生成区域及假用户生成时刻其空间位置,使虚假用户能够实时对真实用户位置进行保护,通过实验验证其可行性和有效性。     

基于辅助特征的Web服务QoS预测

随着互联网以及Web服务技术的快速发展,相同功能的Web服务数量越来越多.在构建面向服务的应用时,服务质量（QoS）作为Web服务的非功能特性开始被越来越多的用户所重视.为了向用户推荐高质量的服务,首先我们需要对服务质量进行预测.现今有很多关于Web服务QoS预测的工作,这些研究大都关注在建模方法的优化上,忽视了辅助特征对于QoS预测的影响.着重分析辅助特征对于QoS预测的影响,例如服务类别和用户地理位置.为了实现此目标,基于因子分解机（Factorization Machines）设计并构建了一个统一的QoS预测架构,该架构可以灵活、方便地考虑进多个辅助特征.结合服务类别和用户地理位置这两类辅助特征,提出了一种QoS预测方法,并通过在真实数据上的实验证明了我们的方法的优越性.     

基于稳定匹配的多用户任务卸载策略

随着许多计算密集型应用的出现,移动设备因其有限的计算能力无法满足用户时延、能耗等需求。移动边缘计算（MEC）通过无线信道将用户的任务计算卸载到MEC服务器,从而显著减少任务响应时延和能耗。针对多用户任务卸载问题,提出了基于稳定匹配的多用户任务卸载策略（MUTOSA）,在保证用户的时延要求下达到能耗最小化。首先,在综合考虑时延与能耗的基础上,对独立任务场景下的多用户任务卸载问题进行建模;然后,基于博弈论的稳定匹配中的延迟接收思想,提出了一种调整策略;最后,通过不断迭代,解决了多用户任务卸载问题。实验结果表明,该策略相较于基准策略和启发式策略能够满足更多用户的时延要求,平均提高约10%的用户满意度,并能减少约50%的用户设备总能耗。所提策略在保证用户时延要求的同时有效地减少了能耗,可以有效地提高用户对于时延敏感型应用的体验。     

移动云计算中基于延时传输的多目标工作流调度

云计算和移动互联网的不断融合,促进了移动云计算的产生与发展.在移动云计算环境下,用户可将工作流的任务迁移到云端执行,这样不但能够提升移动设备的计算能力,而且可以减少电池能源消耗.但是不合理的任务迁移会引起大量的数据传输,这不仅损害工作流的服务质量,而且会增加移动设备的能耗.基于此,本文提出了基于延时传输机制的多目标工作流调度算法MOWS-DTM.该算法基于遗传算法,结合工作流的调度过程,在编码策略中考虑了工作流任务的调度位置和执行排序.由于用户在不断移动的过程中,移动设备的无线网络信号也在不断变化.当传输一定大小的数据时,网络信号越强则需要的时间越少,从而移动设备的能耗也越少.而且工作流结构中存在许多非关键任务,延长非关键任务的执行时间并不会对工作流的完工时间造成影响.因此,本文在工作流调度过程中融入了延时传输机制DTM,该机制能够同时有效地优化移动设备的能耗和工作流的完工时间.仿真结果表明,相比MOHEFT算法和RANDOM算法,MOWS-DTM算法在多目标性能上更优.     

An Adaptive Location Detection scheme for energy-efficiency of smartphones

Global Positioning System (GPS) is widely used for the Location-Based Service (LBS) of smartphones. However, GPS dramatically increases the power consumption of a smartphone due to heavy computation overhead. Cell-tower Based Localization (CBL) can be an alternative solution to perform LBS in an energy-efficient way; but its adoption is limited due to the low positioning accuracy. This paper presents a new location estimation scheme for smartphones called Adaptive Location Detection (ALD). ALD adaptively detects the location of a smartphone considering the category of applications executed, movement pattern of a user, and the battery level. Specifically, ALD categorizes applications according to the required level of positioning accuracy, and then adaptively utilizes GPS and CBL. ALD also takes different actions according to the movement pattern of a user and the remaining battery level of the smartphone. To assess the effectiveness of the proposed scheme, we perform simulations under five location based applications and six scenarios. The evaluation results show that ALD reduces the energy consumption of GPS by 49.5% on average. Nevertheless, it satisfies the accuracy requirement of each situation.     

Dynamic path privacy protection framework for continuous query service over road networks

Many applications of location based services (LBSs), it is useful or even necessary to ensure that LBSs services determine their location. For continuous queries where users report their locations periodically, attackers can infer more about users’ privacy by analyzing the correlations of their query samples. The causes of path privacy problems, which emerge because the communication by different users in road network using location based services so, attacker can track continuous query information. LBSs, albeit useful and convenient, pose a serious threat to users’ path privacy as they are enticed to reveal their locations to LBS providers via their queries for location-based information. Traditional path privacy solutions designed in Euclidean space can be hardly applied to road network environment because of their ignorance of network topological properties. In this paper, we proposed a novel dynamic path privacy protection scheme for continuous query service in road networks. Our scheme also conceals DPP (Dynamic Path Privacy) users’ identities from adversaries; this is provided in initiator untraceability property of the scheme. We choose the different attack as our defending target because it is a particularly challenging attack that can be successfully launched without compromising any user or having access to any cryptographic keys. The security analysis shows that the model can effectively protect the user identity anonymous, location information and service content in LBSs. All simulation results confirm that our Dynamic Path Privacy scheme is not only more accurate than the related schemes, but also provide better locatable ratio where the highest it can be around 95 % of unknown nodes those can estimate their position. Furthermore, the scheme has good computation cost as well as communication and storage costs.Simulation results show that Dynamic Path Privacy has better performances compared to some related region based algorithms such as IAPIT scheme, half symmetric lens based localization algorithm (HSL) and sequential approximate maximum a posteriori (AMAP) estimator scheme.     

基于连续查询的用户轨迹k-匿名隐私保护算法

随着移动服务和移动网络的持续发展,基于LBS的连续查询服务被广泛应用。基于单点的K-匿名位置隐私保护算法已经不能满足连续查询下用户位置隐私需求。针对用户轨迹隐私保护提出新的保护方法,该方法采用不可信第三方中心匿名器,用户获取自己的真实位置后首先在客户端进行模糊处理,然后提交给第三方匿名器,第三方匿名器根据用户的隐私需求结合用户某时刻的真实位置信息生成虚假用户,然后根据历史数据生成虚假轨迹。为了进一步提高虚假轨迹与用户真实轨迹的相似性,该算法提出了虚假轨迹生成的两个约束条件：虚假轨迹距用户真实轨迹的距离约束和相似性约束。经大量实验证明,该算法与传统的不同时刻K-匿名算法相比,不仅可以满足连续查询的用户轨迹隐私保护而且可以满足基于快照的LBS用户位置隐私保护。     

数据中心能耗有效性系统框架构建

为降低数据中心的能量消耗,提出一个具有2层能耗模块结构的数据中心能耗有效性系统框架EADC,其中,虚拟环境管理子系统通过节点状态的按需变化降低能耗,数据中心管理子系统通过控制节点在应用间的按需切换满足其所有的服务需求。测试结果表明,ECDA可在满足能耗与性能要求的前提下实现能耗最低。