Limits of location privacy under anonymization and obfuscation
Geo-indistinguishability: differential privacy for location-based systems