In vehicular networks when map databases may be used to deanonymize user locations, we propose location based services, LBSs, be designed so that LBS users are grouped by spatial location, into endpoint protection zones, EPZs.
Users in the same EPZ would share login credentials, and remain transmission-silent until outside of the EPZ, thus preventing an LBS administrator from knowing which particular user from the EPZ is active – even if the LBS administrator colludes with administrators of roadside units, RSUs. Simulations using realistic vehicle traffic mobility models measure improvements in privacy protection under varying EPZ sizes and vehicle densities.