Real-time privacy-preserving model-based estimation of traffic flows