Location privacy without mutual trust: the Spatial Bloom Filter