A system for privacy-preserving analysis of vehicle movements