location privacy concerns. Location conveys a rich set of
potentially private contextual information. Even if devices
are only identified by pseudonymous addresses, an
adversary could learn the user’s identity if the location is
linkable to publicly available, identified location records.
For example, if a query originates from a car on a
suburban driveway, the likely household could be
identified by looking at a public address database. The
location architecture should incorporate privacy
mechanisms across all layers to address location privacy
concerns.