CN114706932A - Method and system for encryption desensitization and query of geographic information - Google Patents

Abstract

Embodiments of the present invention relate to the technical field of information acquisition, and disclose a method and system for encryption, desensitization and query of geographic information. The method includes: receiving address information input by a first user, processing the address information by an encryption method to obtain multiple sets of address labels; receiving a query request from a target terminal, and determining one or more sets of target addresses based on the query request label, and decrypt the target address label, and send the decrypted relevant information to the target terminal. In the implementation of the embodiments of the present invention, geographic information can be converted into multiple sets of address labels. On the one hand, information desensitization is realized through a grouped and hierarchical encryption method, and the user's real address information is not stored in the background. On the other hand, the query person is limited according to the query authority. The queried information can effectively ensure the security of user address information.

Description

Method and system for encryption, desensitization and query of geographic information

technical field

The invention relates to the technical field of encryption, in particular to a method and system for encryption, desensitization and query of geographic information.

Background technique

Physical geographic information is stored, displayed and transmitted in the form of text, and the user's personal residential address information can easily leak out, resulting in the leakage of personal privacy.

In real life, it is very common to fill in the residential address or habitual address. For example, online registration and filling in offline paper materials need to use address information. After personal information is associated with address information, it may lead to the leakage of personal information, which will bring risks to personal privacy.

SUMMARY OF THE INVENTION

Aiming at the defects, the embodiments of the present invention disclose a method and system for encryption, desensitization and query of geographic information, which can encrypt and desensitize geographic information to ensure user information security.

A first aspect of the embodiments of the present invention discloses a method for encryption, desensitization and query of geographic information, the method comprising:

receiving the address information input by the first user, and processing the address information by an encryption method to obtain multiple groups of address labels;

Receive a query request from a target terminal, determine one or more groups of target address labels based on the query request, decrypt the target address labels, and send the decrypted relevant information to the target terminal.

As a preferred embodiment, in the first aspect of the embodiment of the present invention, the address information input by the first user is received, and the address information is processed by an encryption method to obtain multiple sets of address labels, including:

receiving the address information input by the first user;

converting the address information into multiple sets of defined values according to preset rules;

Each set of defined values is encrypted through an encryption algorithm to obtain address labels corresponding to each set of defined values.

As a preferred embodiment, in the first aspect of the embodiment of the present invention, the address information is converted into multiple sets of defined values according to preset rules, including:

Divide the address information into a plurality of word segments through a region division mechanism;

Convert each word segment into a corresponding defined value according to preset rules.

As a preferred embodiment, in the first aspect of the embodiment of the present invention, the address information is converted into multiple sets of defined values according to preset rules, including:

Obtain the encoding value corresponding to each word in the address information by an encoding method, and the encoding method is any one of an international code, an internal code, a location code and an ASCII code;

Any combination of one or more encoded values forms a defined value.

As a preferred embodiment, in the first aspect of the embodiment of the present invention, a query request from a target terminal is received, one or more groups of target address labels are determined based on the query request, and the target address labels are decrypted and decrypted. After the relevant information is sent to the target terminal, including:

Receive the query request of the target terminal, and determine the query authority corresponding to the query request;

When the query authority is full authority, decrypt multiple groups of address labels of the users corresponding to the full authority, and splicing to form address information, which is sent to the target terminal;

When the query authority is a partial authority, the number of people in the address label corresponding to the partial authority is sent to the target terminal.

As a preferred embodiment, in the first aspect of the embodiment of the present invention, when the query authority is a full authority, multiple sets of address labels of users corresponding to the full authority are decrypted, and spliced to form address information , sent to the target terminal, including:

When the query request is initiated by the first user or an authorized user of the first user, determining that the query authority is a full authority;

Decrypting all group address labels generated by the address information input by the first user, and splicing the decrypted address labels in sequence to form address information, which is sent to the target terminal.

As a preferred embodiment, in the first aspect of the embodiment of the present invention, all group address labels generated by the address information input by the first user are decrypted, and the decrypted address labels are spliced in sequence to form address information, Sent to the target terminal, including:

Perform the inverse operation on each group of address labels according to the encryption method to decrypt to obtain the defined value corresponding to each group of address labels;

Determine the address sub-information corresponding to each set of defined values according to the defined values and preset rules;

The address self-information is spliced according to the order of the corresponding address labels to form complete address information, which is sent to the target terminal.

As a preferred embodiment, in the first aspect of the embodiment of the present invention, when the query authority is a partial authority, the number of people in the address label corresponding to the partial authority is sent to the target terminal, including:

When the query request is the second user, determine that the query permission is a partial permission;

Determine the address sub-information corresponding to the partial authority;

Determine the corresponding address label according to the same encryption method to the address sub-information, and record it as the target address label;

The number of people corresponding to the target address label is counted, and the number of people information is sent to the target terminal.

The second aspect of the embodiment of the present invention discloses a system for encryption, desensitization and query of geographic information, which includes:

an encryption module for receiving the address information input by the first user, and processing the address information through an encryption method to obtain multiple groups of address labels;

The query module is configured to receive a query request from a target terminal, determine one or more groups of target address labels based on the query request, decrypt the target address labels, and send the decrypted relevant information to the target terminal.

A third aspect of the embodiments of the present invention discloses an electronic device, comprising: a memory storing executable program codes; a processor coupled to the memory; the processor calling the executable program codes stored in the memory , which is used to execute the method for encryption, desensitization and query of geographic information disclosed in the first aspect of the embodiments of the present invention.

A fourth aspect of the embodiments of the present invention discloses a computer-readable storage medium, which stores a computer program, wherein the computer program causes a computer to execute the method for encrypting, desensitizing and querying geographic information disclosed in the first aspect of the embodiments of the present invention .

A fifth aspect of the embodiments of the present invention discloses a computer program product, which, when the computer program product runs on a computer, enables the computer to execute the encryption, desensitization and query of geographic information disclosed in the first aspect of the embodiments of the present invention. method.

A sixth aspect of the embodiments of the present invention discloses an application publishing platform, and the application publishing platform is used for publishing a computer program product, wherein when the computer program product runs on a computer, the computer is made to execute the first embodiment of the present invention. On the one hand, a method for encrypting, desensitizing and querying geographic information is disclosed.

Compared with the prior art, the embodiments of the present invention have the following beneficial effects:

In the present invention, by converting geographic information into multiple sets of address labels, on the one hand, information desensitization is realized through a grouped and hierarchical encryption method, and the real address information of the user is not stored in the background; on the other hand, the information queried by the query person is limited according to the query authority , which can effectively ensure the security of user address information.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present invention more clearly, the following briefly introduces the drawings required in the embodiments. Obviously, the drawings in the following description are only some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without any creative effort.

1 is a schematic flowchart of a method for encrypting, desensitizing and querying geographic information disclosed in an embodiment of the present invention;

2 is a schematic structural diagram of a system for encrypting, desensitizing and querying geographic information disclosed in an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of an electronic device disclosed in an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

It should be noted that the terms "first", "second", "third", "fourth", etc. in the description and claims of the present invention are used to distinguish different objects, rather than to describe specific order. The terms "comprising" and "having" and any variations thereof in the embodiments of the present invention are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to Those steps or elements that are expressly listed may instead include other steps or elements that are not expressly listed or are inherent to the process, method, product or apparatus.

The embodiment of the present invention discloses a method and a system for encryption, desensitization and query of geographic information. By converting geographic information into multiple sets of address labels, on the one hand, information desensitization is realized through a grouped and hierarchical encryption method, and the real information of users is not stored in the background. Address information, on the other hand, restricting the information queried by the inquirer according to the query authority can effectively ensure the security of the user's address information, which will be described in detail below with reference to the accompanying drawings.

Example 1

Please refer to FIG. 1. FIG. 1 is a schematic flowchart of a method for encrypting, desensitizing and querying geographic information disclosed in an embodiment of the present invention. As shown in Figure 1, the method for encrypting, desensitizing and querying geographic information includes the following steps:

S110: Receive the address information input by the first user, and process the address information through an encryption method to obtain multiple sets of address labels.

The execution body here may be a server and related software technologies of the server, which have certain processing and storage capabilities.

After the first user inputs the corresponding address information, the executive body structures the address information input by the user into address fields, and encrypts each address field to generate multiple sets of address labels. Since the address information stored by the execution body is actually an address label, and does not store the user's real address information, the user's privacy will not be directly disclosed. In the event of a data breach, administrators can modify the encryption algorithm to generate new ciphertext address labels.

There are various ways for the first user to input the address information. Exemplarily, manual input through a corresponding APP, applet or web page or selection through a drop-down box is feasible.

After receiving the address information input by the first user, the address information is to be graded and segmented to generate multiple groups of address labels. The reason why multiple sets of address labels are generated is that, on the one hand, it is more useful to protect the privacy of users, that is, if some address labels are lost or cracked, it is very likely that users will not be affected, and the security of personal address information is more effectively protected. On the other hand, different query rights can be given to different queryers through multiple sets of tags, so that all the people with various query permissions can obtain the data they need.

There are various ways of structurally splitting address information into address fields. In a preferred embodiment of the present invention, the address information can be divided into a plurality of word segments through a regional division mechanism. As shown in Figure 1, the word segments that can be divided, that is, the address segments, can include: province, city, district, Street, community, community/yard, building number, unit and room number, of course, can also be divided according to other regional division mechanisms.

Table 1 Encryption and desensitization data table based on area division mechanism

Province city Area street Community Community / Courtyard Building number unit Room No address Province A City B Area C D Street E-community F compound building no.1 1 unit 101 define value 1200 0200 2100 0052 0103 0011 0100 0010 0101 Encryption Algorithm Algorithm 1 Algorithm 1 Algorithm 1 Algorithm 1 Algorithm 1 Algorithm 1 Algorithm 1 Algorithm 1 Algorithm 1 ciphertext Label A Label B Label C Label D Label E Label F Label G Label H Label I

After the division, a corresponding defined value can be set for each address segment. For example, for the word segment of province A, its value can be set to 1200. When the address information input by the first user includes province A, the corresponding definition value is automatically obtained. Define the value of 1200, and set the defined value for all address fields accordingly.

In order to avoid including the same word segment in different regional divisions, for example, both province A and province X have an E community. In this case, on the one hand, the word segment can be automatically converted into a defined value according to the semantics of the context, that is, the defined value can be determined by referring to the province corresponding to the E community; on the other hand, the word segment with the same content can be defined as the same Define the value, this way you can also avoid conversion errors.

The definition value may be set to multiple characters as required, for example, four characters in FIG. 1 , and may also be two or more characters in other embodiments. If the content of a certain part is omitted when the first user inputs, the part is automatically filled with 0 of the same character as other parts. For example, if no street information is input, the defined value of the street information is set to 0000, Of course, in order to distinguish it from other defined values that may appear the same, this part can also be filled with 0s that are different from other parts.

For example, when the defined value of Street Y in District C, City B, Province A is 0000, if the first user does not input the street information when filling in, if this part is automatically converted to 0000, it will be identified as Street Y. Therefore, In this case, the defined value corresponding to the street information not input by the first user may be 00.

As another method of dividing address segments, each word input by the user can also be used as a field, and a coding value can be set for it. It needs a certain conversion method to get its coded value, thereby improving the efficiency.

Exemplarily, the encoding value of each word can be determined by any one of international code, built-in code, area code, and ASCII code.

In this case, the coded value corresponding to each word can be used as the defined value, or the coded values corresponding to any two or more words can be combined together to form the defined value. If the two characters Henan are input, the corresponding area codes are 2651 and 3647, respectively, and Henan can be used as an address area, and its defined values are 2651 and 3647, or they can be combined to form a set of definitions. value, that is, the defined value corresponding to Henan is 26513647.

After the defined values are determined, each set of defined values can be converted into ciphertext labels, that is, address labels, through an encryption algorithm. There are many kinds of encryption algorithms. Any existing relatively mature encryption algorithm can be used to encrypt the defined value to obtain the corresponding address label. The encryption algorithm of each group of defined values can be the same or different.

S120: Receive a query request from a target terminal, determine one or more groups of target address labels based on the query request, decrypt the target address labels, and send the decrypted relevant information to the target terminal.

For the query request of the target terminal, there may be a query with full authority and a query with incomplete authority. Of course, in addition to the two, it also includes a query without authority at all.

For a query with full authority, it means that the complete address information of a specific individual can be queried, while a query with incomplete authority, i.e. partial authority, means that the number of people corresponding to a certain address label can be queried, but it cannot be queried about a specific individual. full address information.

The query intention of the target terminal can be determined according to the query request, that is, the query request includes the content of the query permission. If the query request is to query specific personal address information, the query permission is temporarily regarded as full permission, and the query permission is temporarily regarded as full permission. After the relevant information of the authority has been verified, it is confirmed that it has full authority. Perform the decryption operation corresponding to the encryption algorithm to form complete address information and send it to the target terminal.

The process of decrypting to obtain complete address information and the encryption process are mutually inverse processes. When decrypting, each address label is firstly obtained by the decryption algorithm (the inverse operation corresponding to the encryption algorithm) to obtain the defined value, and then the corresponding set of defined values is determined according to the preset rules. The address sub-information is spliced in order to complete the decryption.

The method for verifying the above-mentioned relevant information temporarily regarded as the query authority as full authority is to determine whether the inquirer (the operator of the target terminal) is the first user or a user authorized by the first user, and if so, confirm that it has full authority , then decrypt all the address labels associated with the address information input by the first user to form complete address information and return to the target terminal.

When the inquirer is the first user, the verification methods include but are not limited to biometric information verification, such as face recognition, fingerprint recognition, iris recognition, and voice recognition, etc., and may also be handwriting recognition or verification information input recognition. Of course, the premise is that the information associated with the first user is also stored in the execution body or the execution body can retrieve the information associated with the first user.

Exemplarily, for the input recognition of verification information, one or more verification information can be randomly presented on the target terminal for the inquirer to input and verify, for example, please enter your mobile phone number, please enter your primary school name, please enter your parents' names, etc.

When the inquirer is a user authorized by the first user, the verification can be performed according to the first user authorization document such as a combination of a power of attorney and a scanned copy of an ID card. Of course, the verification can also be completed according to the handwriting comparison in the power of attorney.

When the inquiring person is the first user and other users other than the user authorized by the first user, the verification cannot be passed, and he cannot obtain the address information of the first user.

When the query request of the inquirer is partial authority, the number of people corresponding to the target address label related to the authority is returned. Therefore, it can be understood that the first user with partial authority is generally the regional management personnel, such as street management personnel, community Managers, etc., whose query purpose is to count the number of people entering the system (that is, the geographic information encryption, desensitization and query system involved in the present invention) on the one hand, so as to judge whether to increase publicity to make more people enter the information into the system, on the other hand. When the amount of data is sufficient, the number and flow of people in the management area can also be counted in time.

Therefore, for the second user, it may be a relevant person entered into the system in advance, and it can be determined by comparing it with the relevant personnel information entered into the system (similar to the comparison with the first user) to determine whether it has partial authority, if With partial authority, extract its authority area (called address sub-information) involved in its query request, and then determine the corresponding address label in this area through a method similar to the above encryption process, and define the address label as the target address. label, and then send the same amount of the target address label to the target terminal.

In order to avoid the same target address labels corresponding to different address sub-information, in a preferred embodiment of the present invention, generally the upper-level address sub-information where the address sub-information is located or all the upper-level address sub-information are also used as the address to be queried. The sub-information is recorded as an address sub-information set, and then the same number of target address tags corresponding to these address sub-information sets are sent to the target terminal.

Exemplarily, still taking the data in Table 1 as an example, when it is judged that the second user is the manager of D street in district C, city A, province A, and his request is also to obtain the number of people in street D, then it can be The street is used as an address sub-information set, and the corresponding target address labels are obtained as label C and label D, and all labels C and label D are identically stored in the personnel of the executive body (all address labels of each person are a unit) The quantity is sent to the target terminal. Of course, it is also possible that different provinces or cities have the same definition values of districts and streets, so that the obtained target address labels will also be the same, causing certain errors. Therefore, D Street, District C, District C, City A, Province A can be used as an address sub-information Set, get the corresponding target address labels as label A, label B, label C and label D, count the number of people with the same label A, label B, label C and label D, and send the number to the target terminal.

Of course, the second user may also not be the relevant person who implements the system, for example, to determine his query authority and query content through a corresponding authorization letter, such as a street authorization letter (stamped by the street office) and the second user's personal information.

It can be seen from the above: 1. The database of the executive body will not store the real address information of the user, which realizes the encryption and desensitization of personal information; 2. Unless the first user is himself or authorized, no one else can query the complete information of the first user. 3. If the background data is leaked, the stored data will not directly reveal user privacy because it does not contain any plaintext address information. Even after the data is leaked, the system administrator can modify the encryption algorithm of the system, and the system will re-encrypt the stored encrypted data to generate a new ciphertext address label, which can be re-encrypted after the desensitized data is leaked to ensure the security of user information.

Embodiment 2

Please refer to FIG. 2. FIG. 2 is a schematic structural diagram of a system for encryption, desensitization and query of geographic information disclosed in an embodiment of the present invention. As shown in Figure 2, the system for encrypting, desensitizing and querying geographic information may include:

an encryption module 210, configured to receive the address information input by the first user, and process the address information through an encryption method to obtain multiple sets of address labels;

The query module 220 is configured to receive a query request from a target terminal, determine one or more groups of target address labels based on the query request, decrypt the target address labels, and send the decrypted relevant information to the target terminal.

As an implementation manner, the encryption module 210 may include:

a division unit, used for dividing the address information into a plurality of word segments through a region division mechanism;

The conversion unit is used to convert each word segment into a corresponding defined value according to a preset rule.

As another implementation manner, the encryption module 210 may include:

An encoding unit, used for obtaining the encoding value corresponding to each word in the address information by an encoding method, and the encoding method is any one of an international code, an internal code, a location code and an ASCII code;

The combination unit is used to combine any one or more encoded values to form a defined value.

Preferably, the query module 220 may include:

a receiving unit, configured to receive the query request of the target terminal, and determine the query authority corresponding to the query request;

a first judging unit, configured to decrypt multiple sets of address labels of users corresponding to the full authority when the query authority is full authority, and splicing to form address information, which is sent to the target terminal;

The second judging unit is configured to, when the query authority is a partial authority, send the number of people in the address tag corresponding to the partial authority to the target terminal.

Preferably, the first judgment unit may include:

When the query request is initiated by the first user or an authorized user of the first user, determining that the query authority is a full authority;

All group address labels generated by the address information input by the first user are decrypted, and the decrypted address labels are spliced in order to form address information and send to the target terminal, which specifically includes:

Perform inverse operations on each group of address labels according to the encryption method to decrypt and obtain the defined value corresponding to each group of address labels;

Determine the address sub-information corresponding to each set of defined values according to the defined values and preset rules;

The address self-information is spliced according to the order of the corresponding address labels to form complete address information, which is sent to the target terminal.

Preferably, the second judgment unit may include:

When the query request is the second user, determine that the query permission is a partial permission;

Determine the address sub-information corresponding to the partial authority;

Determine the corresponding address label according to the same encryption method to the address sub-information, and record it as the target address label;

The number of people corresponding to the target address label is counted, and the number of people information is sent to the target terminal.

Embodiment 3

Please refer to FIG. 3 , which is a schematic structural diagram of an electronic device disclosed in an embodiment of the present invention. As shown in Figure 3, the electronic device may include:

a memory 310 storing executable program code;

a processor 320 coupled to the memory 310;

The processor 320 invokes the executable program code stored in the memory 310 to execute part or all of the steps in the method for encryption, desensitization and query of geographic information in the first embodiment.

An embodiment of the present invention discloses a computer-readable storage medium storing a computer program, wherein the computer program enables a computer to execute some or all of the steps in the method for encryption, desensitization and query of geographic information in the first embodiment.

The embodiment of the present invention also discloses a computer program product, wherein when the computer program product runs on the computer, the computer is made to execute some or all of the steps in the method for encryption, desensitization and query of geographic information in the first embodiment.

The embodiment of the present invention also discloses an application publishing platform, wherein the application publishing platform is used to publish a computer program product, wherein, when the computer program product runs on a computer, the computer is made to execute a geographic information encryption decryption method in the first embodiment. Some or all of the steps in the method of sensitivity and query.

In various embodiments of the present invention, it should be understood that the size of the sequence numbers of the described procedures does not imply a necessary order of execution, and the execution order of each procedure should be determined by its functions and internal logic, and does not deal with the present invention. The implementation of the embodiments constitutes no limitation.

The units described as separate components may or may not be physically separated, and components displayed as units may or may not be physical units, and may be located in one place or distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit. The integrated unit may be implemented in the form of hardware, or may be implemented in the form of software functional units.

The integrated unit, if implemented as a software functional unit and sold or used as a stand-alone product, may be stored in a computer-accessible memory. Based on such understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a memory , including several requests to cause a computer device (which may be a personal computer, a server, or a network device, etc., specifically a processor in the computer device) to execute some or all of the steps of the methods described in the various embodiments of the present invention.

In the embodiments provided by the present invention, it should be understood that "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that determining B according to A does not mean that B is only determined according to A, and B may also be determined according to A and/or other information.

Those of ordinary skill in the art can understand that some or all of the steps in the various methods of the embodiments can be completed by instructing the relevant hardware through a program, and the program can be stored in a computer-readable storage medium, and the storage medium includes only Read-Only Memory (ROM), Random Access Memory (RAM), Programmable Read-only Memory (PROM), Erasable Programmable Read-Only Memory (Erasable Programmable Read-Only Memory) , EPROM), One-time Programmable Read-Only Memory (OTPROM), Electronically Erasable Programmable Read-Only Memory (EEPROM), CompactDisc Read -Only Memory, CD-ROM) or other optical disk storage, magnetic disk storage, magnetic tape storage, or any other computer-readable medium that can be used to carry or store data.

A method and system for encrypting, desensitizing and querying geographic information disclosed in the embodiments of the present invention have been described above in detail. The principles and implementations of the present invention are described with specific examples in this paper. In order to help understand the method of the present invention and its core idea; at the same time, for those skilled in the art, according to the idea of the present invention, there will be changes in the specific implementation and application scope. In summary, this specification The content should not be construed as limiting the present invention.

Claims (10)

1. A method for encryption desensitization and query of geographic information, comprising:

receiving address information input by a first user, and processing the address information by an encryption method to obtain a plurality of groups of address labels;

receiving a query request of a target terminal, determining one or more groups of target address tags based on the query request, decrypting the target address tags, and sending the decrypted related information to the target terminal.

2. The method for encryption desensitization and query of geographic information according to claim 1, wherein receiving address information input by a first user, processing said address information by encryption to obtain a plurality of sets of address labels, comprises:

receiving address information input by a first user;

converting the address information into a plurality of groups of defined values according to a preset rule;

and encrypting each group of definition values through an encryption algorithm to obtain the address label corresponding to each group of definition values.

3. The method for encryption desensitization and query of geographic information according to claim 2, wherein converting said address information into a plurality of groups of defined values according to a predetermined rule comprises:

dividing the address information into a plurality of word segments through a region division mechanism;

and converting each word segment into a corresponding definition value according to a preset rule.

4. The method for encryption desensitization and query of geographic information according to claim 2, wherein converting said address information into a plurality of groups of defined values according to a predetermined rule comprises:

acquiring a coding value corresponding to each word in the address information by a coding method, wherein the coding method is any one of international code, machine-in code, zone bit code and ASCII code;

any combination of one or more of the encoded values is formed into a defined value.

5. The method of claim 1, wherein receiving an inquiry request from a target terminal, determining one or more sets of target address tags based on the inquiry request, decrypting the target address tags, and sending the decrypted related information to the target terminal comprises:

receiving a query request of a target terminal, and determining a query authority corresponding to the query request;

when the inquiry authority is the complete authority, decrypting a plurality of groups of address labels of the user corresponding to the complete authority, splicing to form address information, and sending the address information to a target terminal;

and when the inquiry authority is a partial authority, sending the number of people of the address label corresponding to the partial authority to a target terminal.

6. The method for encryption desensitization and query of geographic information according to claim 5, wherein when the query right is a full right, the method decrypts the multiple groups of address labels of the users corresponding to the full right, splices the address labels to form address information, and sends the address information to the target terminal, comprising:

when the query request is initiated by the first user or an authorized user of the first user, determining the query right as a full right;

and decrypting all groups of address labels generated by the address information input by the first user, splicing the decrypted address labels in sequence to form address information, and sending the address information to a target terminal.

7. The method for desensitizing encryption and query of geographic information according to claim 6, wherein decrypting all sets of address tags generated from the address information inputted by the first user, splicing the decrypted address tags in order to form address information, and sending the address information to the target terminal comprises:

carrying out inverse operation on each group of address tags according to an encryption method so as to decrypt and obtain a defined value corresponding to each group of address tags;

determining address sub-information corresponding to each group of definition values according to the definition values and preset rules;

and splicing the address self-information according to the sequence of the corresponding address labels to form complete address information, and sending the complete address information to the target terminal.

8. The method for encryption desensitization and query of geographic information according to claim 5, wherein when the query right is a partial right, the number of people of the address tag corresponding to the partial right is sent to the target terminal, comprising:

when the query request is a second user, determining that the query authority is a partial authority;

determining address sub-information corresponding to the partial authority;

determining a corresponding address label for the address sub-information according to the same encryption method, and marking as a target address label;

and counting the number of people corresponding to the target address label, and sending the information of the number of people to the target terminal.

9. A system for encryption desensitization and querying of geographic information, comprising:

the encryption module is used for receiving address information input by a first user and processing the address information by an encryption method to obtain a plurality of groups of address labels;

and the query module is used for receiving a query request of a target terminal, determining one or more groups of target address labels based on the query request, decrypting the target address labels, and sending the decrypted related information to the target terminal.

10. A computer-readable storage medium storing a computer program, wherein the computer program causes a computer to execute a method of geographic information encryption desensitization and query according to any one of claims 1 to 8.

Images