Mobile Devices as Digital Sextants for Zero-Permission Geolocation

Lorenz Schwittmann, Matthäus Wander, Torben Weis

2019

Abstract

Sensors in mobile devices can be used to infer information about a user’s context, most notably the location. Android apps and websites shown in Firefox for Android allow software to read the ambient light sensor, gyroscope and accelerometer without asking the user for permission. We show that these three sensors are sufficient to determine the rough geographical location of a user by turning the mobile device into a digital sextant. Despite low-quality sensor data, our approach is able to determine the position of the sun and thereby the geographical area where the user is located. Our approach works even if the user holding the device does not cooperate in being located or employs location-disguising techniques such as a VPN. We analyze in detail the different error sources and show in which settings and situations our approach works best. The location accuracy was at best 146 km with a medium accuracy better than 500 km. Truncating the positional sensor readings minimizes the privacy threat, while truncation of the ambient light sensor has almost no effect.

Paper Citation

in Harvard Style

Schwittmann L., Wander M. and Weis T. (2019). Mobile Devices as Digital Sextants for Zero-Permission Geolocation.In Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-359-9, pages 55-66. DOI: 10.5220/0007254000550066

in Bibtex Style

@conference{icissp19,
author={Lorenz Schwittmann and Matthäus Wander and Torben Weis},
title={Mobile Devices as Digital Sextants for Zero-Permission Geolocation},
booktitle={Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2019},
pages={55-66},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0007254000550066},
isbn={978-989-758-359-9},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 5th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - Mobile Devices as Digital Sextants for Zero-Permission Geolocation
SN - 978-989-758-359-9
AU - Schwittmann L.
AU - Wander M.
AU - Weis T.
PY - 2019
SP - 55
EP - 66
DO - 10.5220/0007254000550066