HRNet: Differentially Private Hierarchical and Multi-Resolution Network for Human Mobility Data Synthesization
Shun Takagi, Li Xiong, Fumiyuki Kato, Yang Cao, Masatoshi Yoshikawa
TL;DR
This work presents HRNet, a differentially private generator for human mobility data that achieves strong utility under DP by combining a hierarchical location encoding via a 2D quad deconvolutional network, multi-resolution multi-task learning, and private pre-training based on a DP transition matrix. The method addresses two DP bottlenecks—model size and learning complexity for large POI vocabularies—by parameterizing location with logarithmic growth and distributing learning across resolutions. Empirical results across multiple real and synthetic datasets show HRNet outperforms state-of-the-art DP methods on key trajectory statistics, while providing a principled DP budget allocation between pre-training and DP-SGD. The approach delivers privacy-preserving synthetic mobility data with practical utility for tasks such as next-location prediction, trajectory classification, and commuting analysis, enabling safer urban analytics and public health research.
Abstract
Human mobility data offers valuable insights for many applications such as urban planning and pandemic response, but its use also raises privacy concerns. In this paper, we introduce the Hierarchical and Multi-Resolution Network (HRNet), a novel deep generative model specifically designed to synthesize realistic human mobility data while guaranteeing differential privacy. We first identify the key difficulties inherent in learning human mobility data under differential privacy. In response to these challenges, HRNet integrates three components: a hierarchical location encoding mechanism, multi-task learning across multiple resolutions, and private pre-training. These elements collectively enhance the model's ability under the constraints of differential privacy. Through extensive comparative experiments utilizing a real-world dataset, HRNet demonstrates a marked improvement over existing methods in balancing the utility-privacy trade-off.
