During the summer of 2020, fluxLoop challenged Orange Cyberdefense to perform an attack on anonymised datasets from our Pinch technology. The goal was to see if they were able to identify an individual by combining the anonymised dataset from Pinch with other available datasets and sources.
“Our research has shown that the measures taken by fluxLoop to anonymise the dataset are effective in mitigating re-identification attacks. Especially the fact that journeys contain no personal attributes, and are not linked together, makes it challenging to successfully identify individuals. There is no reliable way of identifying an individual traveling from point A to point B, then to point C.” – Orange Cyberdefence, August 2020
Research shows that several choices made by fluxLoop has makes it very hard or impossible to identify individuals in the dataset.
Some of the measures taken are described below:
There is no device id or similar connecting any journey together with another, which means that even if we can correctly re-identify the individual there is no certain way of tracking where they have been travelling.
The lack of attributes serves two purposes. It makes it impossible to identify individuals based on these attributes, which have been very successful in other studies. Also, in this dataset, the lack of attributes makes it very hard to link journeys as being made by the same individual.
The dataset only contains information and travel data that the individuals themselves have agreed to share, although there are cases where only a small set of individuals live and work in the same locations. However, behind these numbers are all the people who do not submit their travel data, and when performing re-identification, they are also possible candidates as we simply cannot know which person within this group performed a given journey.
At fluxLoop we are more than happy to go through the details of the report with you, at your leisure.
Please contact your Customer Success Manager or Sales representative at fluxLoop.
fluxLoop contacted Orange Cyberdefence Norway AS, to review our anonymized dataset used in the Pinch Analytics application. The goal was to see if individuals could be identified again based on the way the technology anonymizes data.
Orange Cyberdefence attempted various techniques to achieve the set goal, and the results of the challenge is detailed in a downloadable report.
Ulrik Prøitz, CEO fluxLoop, +47 41 30 33 75, email@example.com