WO2019169878A1 - User privacy-protective position information publishing system - Google Patents

Abstract

Provided in the present invention is a user privacy-protective position information publishing system, comprising: a position information acquisition module for acquiring position information of a user, and specifically comprising: a client for processing the position information of the user by means of a privacy-removal processing method, so as to obtain a privacy-removed clusterable position code; a server for receiving the privacy-removed clusterable position code sent by the client, and using a recovery method corresponding to the privacy-removal processing method to restore the privacy-removed clusterable position code, so as to obtain the position information of the user; and a position information publishing module for publishing, according to different authorization permissions, user position information having different degrees of precision by means of a hierarchical position privacy protection method. Said system displays position information as a privacy-removed clusterable code, and obtains position information having different degrees of precision according to authorization permissions, thereby publishing position information while protecting position information privacy.

Description

Location information publishing system for protecting user privacy

Cross-reference to related applications

The present application claims priority from the Chinese Patent Application No. "201810183549.7" filed by Tsinghua University on March 26, 2018, entitled "Location Information Release System for Protecting User Privacy".

Technical field

The present invention relates to the field of computer network technologies, and in particular, to a location information publishing system for protecting user privacy.

Background technique

Geographical location is usually presented in the form of longitude and latitude. Due to the existence of binary or even more metadata such as height, such data is usually not convenient for storage and presentation. When the Internet is used, it is inconvenient to use due to the complicated data structure. It is usually wrapped in a complex data structure over HTTP (HyperText Transfer Protoco). In the implementation of HTML5, the Geolocation API uses GPS (Global Positioning System, Global Positioning System), IP (Internet Protocol), RFID (Radio Frequency Identification), WiFi (WIreless-Fidelity). , wireless network), Bluetooth MAC address, GSM (Global System for Mobile communication) / CDMA (Code Division Multiple Access) card ID (Identification, identification number) and other information, get longitude and The location information represented by the latitude is then returned to the browser.

However, as users become more aware of the protection of location privacy, users tend not to expose their precise location information, but only submit fuzzy location information that is sufficient for the network application to continue, and the user does not allow privacy protection considerations. The release of location information limits the development of location-related applications.

Summary of the invention

The present invention aims to solve at least one of the technical problems in the related art to some extent.

To this end, an object of the present invention is to provide a location information distribution system that protects user privacy, and the system can effectively implement location information distribution based on privacy of location information.

To achieve the above objective, an embodiment of the present invention provides a location information distribution system for protecting user privacy, including: a location information acquisition module, configured to acquire user location information, where the location information acquisition module specifically includes: a client End, for processing the location information of the user by using a de-privacy processing method, to obtain a clusterable location code after de-privacy processing; and a server, configured to receive the convergence after the de-privacy processing sent by the client Class location coding, and recovering the de-privacy-processable clusterable location code by using a recovery method corresponding to the de-privacy processing method to obtain location information of the user; and a location information publishing module, configured to pass The hierarchical location privacy protection method separately publishes different precision information of the user location according to different authorization rights.

The location information issuance system for protecting user privacy according to the embodiment of the present invention ensures that applications with different authorizations are obtained through the hierarchical protection mechanism of the user location privacy. By using different parameters, location information with different precision can be obtained, and the location information is obtained by using the location information. The clusterable coded representation after de-privacy processing enables the network application to obtain location information with different degrees of accuracy according to its own authorization authority, thereby effectively implementing location information release based on the protection of location information privacy.

In addition, the location information distribution system for protecting user privacy according to the above-described embodiments of the present invention may further have the following additional technical features:

Further, in an embodiment of the present invention, the client accesses the server through a WWW, and the server queries the location information of the user by calling an interface, and the client sends the convergence of the de-privacy process. Class location code.

Further, in an embodiment of the present invention, the client embeds the clusterable location code of the de-privacy processing into the last 64 bits of the IPv6 unicast address, and recovers the content according to parameters preset by the user. The clustering position code of the privacy process is obtained to obtain the location information of the user.

Further, in an embodiment of the invention, the clusterable position coding algorithm satisfies:

Hm(F(p,n))=F(p,m),

Where F(p,n) is an encoding algorithm from the position space P to the coded value S _C space of length n length unit, and Hm(C) is a m-length unit before the position code of the length unit is intercepted. Mapping.

Further, in an embodiment of the present invention, the de-privacy processing method is:

a=a ₁ a ₂ ...a _n ;F(a)=a ₁ ' a ₂ '...a _n ',

代表异或操作，i＝1,2,…n，f _i是一个从{0,1} ⁱ到{0,1}的映射，i＝1,2…n-1；f ₀是常数，定义去隐私处理函数F是一个从{0,1} ⁿ到{0,1} ⁿ的映射。 among them,

Represents the XOR operation, i = 1, 2, ... n, f _i is a mapping from {0, 1} ⁱ to {0, 1}, i = 1, 2...n-1; f ₀ is a constant, defined The de-privacy processing function F is a mapping from {0, 1} ⁿ to {0, 1} ⁿ .

Further, in an embodiment of the present invention, the method for recovering the post-privacy clusterable location code corresponding to the de-privacy processing method is:

代表异或操作。

Represents an XOR operation.

代表异或操作。

Represents an XOR operation.

Further, in an embodiment of the present invention, before the user location information is released, the location information publishing module is further configured to obtain the location information of the user obtained by deprivation processing of multiple access rights to obtain The clusterable location code after the privacy process is released before the release.

Further, in an embodiment of the present invention, the location information issuing module is further configured to recover the clusterable location code after the pre-release privacy processing, to obtain location information of the user, and issue the User's location information.

Further, in an embodiment of the present invention, the previous part of the pre-release clusterable location code is not subjected to de-privacy processing, and the remaining part is subjected to de-privacy processing by the password preset by the user on the server. .

Further, in an embodiment of the present invention, the system further includes: a rights management module, configured to separately grant a visitor to view rights according to different rights of different visitors, to obtain location information of the user according to the viewing rights.

The additional aspects and advantages of the invention will be set forth in part in the description which follows.

DRAWINGS

The above and/or additional aspects and advantages of the present invention will become apparent and readily understood from

1 is a schematic structural diagram of a location information publishing system for protecting user privacy according to an embodiment of the present invention;

2 is a diagram of a method for generating clusterable position codes according to an embodiment of the present invention;

3 is a flow chart of location information release through de-privacy processing according to an embodiment of the present invention;

4 is a schematic diagram of an algorithm for embedding a position code c into 64 bits after IPv6 according to an embodiment of the present invention;

5 is a schematic diagram of an algorithm for embedding a position code c into 64 bits after IPv6 according to an embodiment of the present invention;

6 is an algorithm for embedding a position code c into 64 bits after IPv6 according to an embodiment of the present invention;

7 is a flow diagram of multi-level de-privacy processing using a password of a client on a server, in accordance with one embodiment of the present invention.

Detailed ways

The embodiments of the present invention are described in detail below, and the examples of the embodiments are illustrated in the drawings, wherein the same or similar reference numerals are used to refer to the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the drawings are intended to be illustrative of the invention and are not to be construed as limiting.

A location information distribution system for protecting user privacy according to an embodiment of the present invention will be described below with reference to the accompanying drawings.

FIG. 1 is a schematic structural diagram of a location information publishing system for protecting user privacy according to an embodiment of the present invention.

As shown in FIG. 1, the location information issuance system 10 for protecting user privacy includes: a location information acquisition module 100 and a location information distribution module 200.

The location information obtaining module 100 is configured to obtain user location information, where the location information obtaining module 100 specifically includes: a client and a server. The client is configured to process the location information of the user by using a de-privacy processing method to obtain the clusterable location code after the privacy processing; the server is configured to receive the clusterable location code sent by the client after the privacy process, and The clusterable location code after the de-privacy processing is restored by the recovery method corresponding to the de-privacy processing method to obtain the location information of the user. The location information issuance module 200 is configured to separately publish different accuracy information of the user location according to different authorization rights by using the hierarchical location privacy protection method. The system 10 of the embodiment of the present invention presents the location information in a clusterable code after de-privacy processing, so that the network application can obtain location information with different degrees of accuracy according to its own authorization authority, thereby realizing the protection of the location information privacy. Location information is posted.

It can be understood that the embodiment of the present invention relates to an internet device that knows the geographical location of its own, encodes its own geographic location, and the location range of the code that satisfies the longer prefix calibration is included in the location described by the shorter prefix. In the scope. This encoding can be multi-level de-private processing and can be shared with servers and other connected devices.

That is to say, the embodiment of the present invention can realize the position information expression of different positional precision by using the clusterable position coding. For the same position, the more the number of bits used, the higher the positional accuracy and the higher the positional accuracy. Position-coded positional accuracy with positional coding with lower positional accuracy. By using the cryptography-based de-privacy algorithm, users with different authorization information can be guaranteed to obtain different precision location information for the same privacy location code, thereby protecting the user's location privacy security.

In an embodiment of the present invention, the client provides its own de-privatized clusterable location code to the server, and the server decodes the location code after the privacy-removal process to learn the location information of the client. Among them, the client can be a variety of Internet devices such as mobile phones and computers.

Specifically, the client provides the server with the clustered location code after the privacy process, and the server can restore the location code after the privacy process to the original location code according to the previously learned parameters, and then decode the data. Know the location information of the client. Other users cannot get accurate location information or even obtain location information without these pre-know parameters.

Further, in an embodiment of the invention, the clusterable position coding algorithm satisfies:

Hm(F(p,n))=F(p,m),

Where F(p,n) is an encoding algorithm from the position space P to the coded value S _C space of length n length unit, and Hm(C) is a m-length unit before the position code of the length unit is intercepted. Mapping.

Specifically, the clusterable position coding satisfies the condition that F(p, n) is an encoding algorithm from the position space P to the coded value S _C space of length n length unit, and Hm(C) is a The position coding unit of length n is a mapping of the m length units before interception, and the clusterable position coding algorithm satisfies Hm(F(p, n))=F(p, m).

The most important feature of the clusterable position coding algorithm is that the position range of the longer prefix calibration is included in the range of positions described by the shorter prefix. Obviously, simply connecting the latitude and longitude latitude does not satisfy this: assuming that the binary representation of longitude is a ₁ a ₂ ... a _n and the binary representation of latitude is b ₁ b ₂ ... b _n , then the 4-bit encoding is a ₁ a ₂ b ₁ b ₂ , and 2n bits are encoded as a ₁ a ₂ ... a _n b ₁ b ₂ ... b _n , whose first 4 bits are not a ₁ a ₂ b ₁ b ₂ .

For example, as shown in Figure 2, the following is a position code with such features:

The longitude and latitude are converted into binary representations of n bits, and the binary representations of longitude and latitude are crossed to form a positional code. The method of converting the longitude to n-bit binary is to use 1 bit to represent the symbol, 8 bits to represent the data to the left of the decimal point, and the remaining n-9 bits to represent the data to the right of the decimal point; the conversion method for the latitude is One bit is used to represent the symbol, 7 bits are used to represent the data to the left of the decimal point, and the remaining n-8 bits are used to represent the data to the right of the decimal point. The binary representation of equal length latitude and longitude is cross-combined to form the final position code.

Further, in an embodiment of the present invention, the client accesses the server through the WWW, and the server queries the location information of the client by calling the interface, and the client returns a clusterable location code that has undergone de-privacy processing. As shown in Figure 3, the specific steps are:

S101: The client accesses a WWW server.

S102: The server queries the location information of the client through a call interface such as Javascript or HTML5.

S103: The client obtains a clusterable position code of the current location information according to longitude and latitude.

S104: The client performs de-privacy processing on the clusterable location code and returns to the server.

S105: The server restores the de-privatization-processable clusterable location code to the original clusterable location code.

S106: The server extracts location information from the clusterable location code.

Further, in an embodiment of the present invention, the client embeds the clusterable location code of the de-privacy process into the last 64 bits of the IPv6 unicast address, and restores the clustering of the privacy process according to the parameters preset by the user. Position code to get the user's location information.

For example, the client can embed the clusterable location code of the IPv6 unicast address into the last 64 bits of the IPv6 unicast address, so that the server can recover the clusterable location code according to the previously known parameters, thereby obtaining Customer location information. Other systems on the Internet cannot obtain accurate location information or even location information without these pre-known parameters.

In addition, as shown in Figure 4, one possible embedding method is as follows:

Set the 7th bit of the 64-bit IPv6 address (also referred to as the interface identifier of the IPv6 address) to 1, and set one of the 25th to 39th bits of the last 64 bits (such as the 25th bit) to 0. The rest is used to store the location code that has been de-private processed. Since the EUI64 specification in the 64-bit generation scheme after the IPv6 address requires the 7th bit to be 1, and the 4th-5th byte is 0xFFFE, the above generation scheme can identify that the interface identifier contains location information.

Further, as shown in FIG. 5, another possible embedding method is as follows:

The 7th bit of the 64-bit IPv6 address (also referred to as the interface identifier of the IPv6 address) is set to 1, the 40th bit of the last 64 bits is set to 1, and the rest is used to store the position code after de-privacy processing. . Since the EUI64 specification in the 64-bit generation scheme after the IPv6 address requires the 7th bit to be 1, and the 4th-5th byte is 0xFFFE, the above generation scheme can identify that the interface identifier contains location information.

Further, as shown in FIG. 6 (where 0x0001 is only used as an example, any value other than 0xFFFE may be selected in the implementation), and another possible embedding method is as follows:

Set the 7th bit of the 64 bits after the IPv6 address (also referred to as the interface identifier of the IPv6 address) to 1, and set the 25th to 40th bits of the last 64 bits to a value other than 0xFFFE, and the rest is used for the rest. Stores the location code that has been de-private processed. This not only distinguishes it from the EUI64 specification, but also reserves space for other possible extensions.

An important advantage of issuing location information by the above location coding is that it is convenient to adopt hierarchical location privacy protection measures, so that different precision information can be provided with different precision for different authorizations.

Further, in an embodiment of the present invention, the method of de-privacy processing is:

a=a ₁ a ₂ ...a _n ;F(a)=a ₁ ' a ₂ '...a _n ',

代表异或操作，i＝1,2,…n，f _i是一个从{0,1} ⁱ到{0,1}的映射，i＝1,2…n-1；f ₀是常数，定义去隐私处理函数F是一个从{0,1} ⁿ到{0,1} ⁿ的映射。 among them,

Represents the XOR operation, i = 1, 2, ... n, f _i is a mapping from {0, 1} ⁱ to {0, 1}, i = 1, 2...n-1; f ₀ is a constant, defined The de-privacy processing function F is a mapping from {0, 1} ⁿ to {0, 1} ⁿ .

It can be understood that the embodiment of the present invention relates to a privacy protection measure for clusterable location coding as above. In order to protect the location privacy of the user, the clusterable location code is deprived. Let f _i be a mapping from {0,1} ⁱ to {0,1}, i=1,2...n-1; f ₀ is a constant, and define the de-privacy processing function F to be a slave {0,1} The mapping of ⁿ to {0,1} ⁿ is defined as follows:

For a = a ₁ a ₂ ... a _n ; F(a) = a ₁ ' a ₂ '... a _n ', where

代表异或操作，i＝1,2,…n。

Represents an XOR operation, i=1, 2,...n.

The algorithm for de-privacy processing is a de-privacy algorithm that maintains the prefix, that is, for any two position codes, if the first k bits are the same before de-privacy, then the first k bits are the same after the privacy.

Further, in an embodiment of the present invention, the method for recovering the post-privacy clusterable location code corresponding to the de-privacy processing method is:

代表异或操作。

Represents an XOR operation.

代表异或操作。

Represents an XOR operation.

It can be understood that the present invention relates to a method for recovering the clusterable position code after de-privacy, as described above. For the position code processed by the de-privacy algorithm of the hold prefix, the following method may be used for recovery: Encoding a=a ₁ a ₂ ... a _n , and the privacy is treated as a ₁ ' a ₂ '...a _n ' in the manner of maintaining the prefix, then if f _i , i=0,1,...n-1 is known, the original The location code can be recovered using the following procedure.

代表异或操作。

Represents an XOR operation.

代表异或操作。

Represents an XOR operation.

For example, for each input clusterable n-bit position code a = a ₁ a ₂ ... a _n , an algorithm for implementing the de-privacy process is as follows:

S201: Initially form a 2 ^n- bit string S, so that i=1, P(a, 0)=1.

S202: If the i-th bit a _{i of a} is 1, P(a, i)=(P(a, i-1)<<1)+1, otherwise (P(a, i-1)<< 1) +2.

S203: Let B(S, i)=((S[i>>3]&(0x80>>(i&0x07)))!=0). Where >> is a number of bits shifted to the right, << is to move left a few bits, and & means bitwise AND.

代表异或操作。 S204:

Represents an XOR operation.

S205: Let i=i+1, and repeat S202 to S205 until the de-privacy processing of the entire position encoding is completed.

For each input clusterable n-bit position code a = a ₁ a ₂ ... a _n , an algorithm for implementing the de-privacy process is as follows:

S301: Initially form a 2 ^n- bit character string S, so that i=1, P(a, 0)=1.

S302: If the i-th bit a _{i of a} is 1, P(a, i)=(P(a, i-1)+(1<<(ni)), otherwise ((P(a, i-) 1) <<1) +1).

S303: Let B(S,i)=((S[i>>3]&(0x80>>(i&0x07)))!=0). Where >> is a number of bits shifted to the right, << is to move left a few bits, and & means bitwise AND.

代表异或操作。 S304:

Represents an XOR operation.

S305: Let i=i+1, and repeat S302 to S305 until the de-privacy processing of the entire position encoding is completed.

For each input a'=a ₁ ' a ₂ '...a _n ' after S201-S205 de-privacy processing, an algorithm for recovering a=a ₁ a ₂ ... a _n is as follows:

S401: Initially form a 2 ^n- bit character string S, so that i=1, P(a, 0)=1.

代表异或操作。 S402:

Represents an XOR operation.

S403: If the i-th bit a _{i of a} is 1, P(a, i)=(P(a, i-1)<<1)+1, otherwise (P(a, i-1)<< 1) +2.

S404: Let B(S,i)=((S[i>>3]&(0x80>>(i&0x07)))!=0). Where >> is a number of bits shifted to the right, << is to move left a few bits, and & means bitwise AND.

S405: Let i=i+1, and repeat S402 to S405 until the restoration of the entire position code is completed.

For each input a'=a ₁ ' a ₂ '...a _n ' after S301-S305 de-privacy processing, an algorithm for recovering a=a ₁ a ₂ ... a _n is as follows:

S501: Initially form a 2 ^n- bit string S, so that i=1, P(a, 0)=1.

代表异或操作。 S502:

Represents an XOR operation.

S503: If the i-th bit a _{i of a} is 1, P(a, i)=(P(a, i-1)+(1<<(ni)), otherwise ((P(a, i-) 1) <<1) +1).

S504: Let B(S, i)=((S[i>>3]&(0x80>>(i&0x07)))!=0). Where >> is a number of bits shifted to the right, << is to move left a few bits, and & means bitwise AND.

S505: Let i=i+1, and repeat S502 to S505 until the de-privacy processing of the entire position encoding is completed.

Further, in an embodiment of the present invention, before the user location information is released, the location information issuance module 200 is further configured to obtain the location information of the user obtained through the de-privacy processing of the multiple access rights to obtain the privacy process before the release. The latter can be clustered position code.

Specifically, the embodiment of the present invention relates to a multi-level privacy protection measure for clusterable coding as above. In order to protect the location privacy of a user, before the release, a privacy process with multiple access rights is performed, so that E is A block encryption algorithm, K is the encryption key, Ψ = U ^m _{i = 1} (E _i , K _i , n _i ). Where U represents a union and satisfies the n _i power of each block of the block encryption algorithm E _i greater than 2, and can encode the clusterable position a = a ₁ a ₂ ... a _n before ∑ ^m _{i = 1} n _i bits for de-privacy processing. Specific steps are as follows:

S601: Let i=1, N ₀ =0.

比特的可聚类位置编码，使用E _i算法、K _i密钥进行加密，得到字符串S _i。 S602: before extraction

The clusterable position code of the bit is encrypted using the E _i algorithm and the K _i key to obtain the string S _i .

S603: Perform the de-privacy processing on the N _i-1 +1 to N _i-1 + n _i bits of a with the parameter S _i using the steps S201 to S205 or the steps S301 to S305.

S604: N _i = n _i + N _i-1 , then let i=i+1, and repeat S602 to S604 until the de-privacy processing of the position encoding is completed.

Further, in an embodiment of the present invention, the location information issuance module 200 is further configured to recover the clusterable location code after the privacy process is released, to obtain the location information of the user, and publish the location information of the user.

Specifically, the embodiment of the present invention relates to recovery of clusterable coding after multi-level privacy protection processing, where E is a block encryption algorithm, K is an encryption key, and Ψ=U ^m _i=1 (E _i , K _i , n _i ). Where U represents a union and satisfies the n _i power of each block of the block encryption algorithm E _i greater than 2, and can encode the clusterable position after the multi-privacy protection process a'=a ₁ ' a ₂ The front ∑ ^m _i=1 n _i bit of '...a _n ' is restored. Specific steps are as follows:

S701: Let i=1, N ₀ =0.

比特的已经恢复的可聚类位置编码a，使用E _i算法、K _i密钥进行加密，得到字符串S _i。 S702: before extraction

The recovered clusterable position code a of the bit is encrypted using the E _i algorithm and the K _i key to obtain the string S _i .

S703: Restore the N _i-1 +1 to N _i-1 + n _i bits of a with the parameter S _i using the steps S401 to S405 or the steps S501 to S505.

S704: N _i = n _i + N _i-1 , then let i=i+1, and repeat S702 to S704 until the de-privacy processing of the position encoding is completed.

It should be noted that the encryption algorithm may be an AES algorithm, where the encryption algorithm may be 128, 192 or 256 bits. In addition, the encryption algorithm therein may not perform any encryption, which is equivalent to not performing privacy processing.

Further, in an embodiment of the present invention, the previous part of the clusterable position code before the release is not subjected to the de-privacy process, and the remaining part is subjected to the privacy process by the password preset by the user on the server.

Further, in an embodiment of the present invention, the system 10 of the embodiment of the present invention further includes: a rights management module. The rights management module is configured to respectively grant the access rights to the visitor according to the different rights of different visitors, so as to obtain the location information of the user according to the viewing rights.

Specifically, embodiments of the present invention relate to a method for a client to provide location information of a hierarchical authority to a server in an internetwork. When the server needs to know the location of the client, the client reports to the server a clusterable location code that has been de-privatized. The first part of the client does not perform privacy processing, and the latter part uses the password of the user on the server. The agreed-to-private algorithm performs de-privacy processing so that other users on the network can only know the approximate scope of the user, and the server can know the exact location of the user according to the user's password. The client replies the de-privatized clusterable location code to the server or embeds it into the IPv6 unicast address to implement location information release based on the privacy protection. As shown in Figure 7, the specific steps are as follows:

S801: The client obtains its own location information.

S802: Perform clusterable position coding on the location information.

S803: No de-privacy processing is performed on the first m bits of the clusterable position coding.

S804: Perform de-privacy processing on the remaining bits of the clusterable position code, where the key is an authentication password of the client on the server, and the encryption algorithm is an appointment algorithm.

S805: Repeat S804 until the remaining bits of the clusterable position code are deprived.

S806: The result is handed to the server or embedded in the last 64 bits of IPv6.

The location information issuance system for protecting user privacy according to the embodiment of the present invention ensures that applications with different authorizations are obtained through the hierarchical protection mechanism of user location privacy. By using different parameters, location information with different precision can be obtained. The location information is presented in a clusterable code after de-privacy processing, so that the network application can obtain location information with different degrees of accuracy according to its own authorization authority, thereby effectively implementing location information release based on the protection of location information privacy.

In the description of the present invention, it is to be understood that the terms "center", "longitudinal", "transverse", "length", "width", "thickness", "upper", "lower", "front", " After, "Left", "Right", "Vertical", "Horizontal", "Top", "Bottom", "Inside", "Outside", "Clockwise", "Counterclockwise", "Axial", The orientation or positional relationship of the "radial", "circumferential" and the like is based on the orientation or positional relationship shown in the drawings, and is merely for convenience of description of the present invention and simplified description, and does not indicate or imply the indicated device or component. It must be constructed and operated in a particular orientation, and is not to be construed as limiting the invention.

Moreover, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or implicitly indicating the number of technical features indicated. Thus, features defining "first" or "second" may include at least one of the features, either explicitly or implicitly. In the description of the present invention, the meaning of "a plurality" is at least two, such as two, three, etc., unless specifically defined otherwise.

In the present invention, the terms "installation", "connected", "connected", "fixed" and the like shall be understood broadly, and may be either a fixed connection or a detachable connection, unless explicitly stated and defined otherwise. , or integrated; can be mechanical or electrical connection; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of two elements or the interaction of two elements, unless otherwise specified Limited. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood on a case-by-case basis.

In the present invention, the first feature "on" or "under" the second feature may be a direct contact of the first and second features, or the first and second features may be indirectly through an intermediate medium, unless otherwise explicitly stated and defined. contact. Moreover, the first feature "above", "above" and "above" the second feature may be that the first feature is directly above or above the second feature, or merely that the first feature level is higher than the second feature. The first feature "below", "below" and "below" the second feature may be that the first feature is directly below or obliquely below the second feature, or merely that the first feature level is less than the second feature.

In the description of the present specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms is not necessarily directed to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples. In addition, various embodiments or examples described in the specification, as well as features of various embodiments or examples, may be combined and combined.

Although the embodiments of the present invention have been shown and described, it is understood that the above-described embodiments are illustrative and are not to be construed as limiting the scope of the invention. The embodiments are subject to variations, modifications, substitutions and variations.

Claims (10)

A location information publishing system for protecting user privacy, comprising: a location information obtaining module, configured to acquire user location information, where the location information acquiring module specifically includes: a client, configured to process location information of the user by using a de-privacy processing method to obtain a clusterable location code after de-privacy processing; a server, configured to receive the de-privatization-processable clusterable location code sent by the client, and encode the de-privatization-processable clusterable location by using a recovery method corresponding to the de-privacy processing method Recovering to obtain location information of the user; The location information publishing module is configured to separately publish different precision information of the user location according to different authorization rights by using the hierarchical location privacy protection method. The location information issuance system for protecting user privacy according to claim 1, wherein the client accesses the server through a WWW, and the server queries the location information of the user by calling an interface, and the client sends The clusterable location code of the de-privacy process. The location information issuance system for protecting user privacy according to claim 1, wherein the client embeds the clusterable location code of the de-privacy process into the last 64 bits of the IPv6 unicast address, and according to the user The preset parameters are restored to the clusterable position code of the de-privacy process to obtain location information of the user. The location information issuance system for protecting user privacy according to claim 1, wherein the clusterable position coding algorithm satisfies: Hm(F(p,n))=F(p,m), Where F(p,n) is an encoding algorithm from the position space P to the coded value S _C space of length n length unit, and Hm(C) is a m-length unit before the position code of the length unit is intercepted. Mapping. The location information issuance system for protecting user privacy according to claim 1, wherein the de-privacy processing method is: a=a ₁ a ₂ ...a _n ;F(a)=a ₁ 'a ₂ '...a _n ', among them,

Represents the XOR operation, i = 1, 2, ... n, f _i is a mapping from {0, 1} ⁱ to {0, 1}, i = 1, 2...n-1; f ₀ is a constant, defined The de-privacy processing function F is a mapping from {0, 1} ⁿ to {0, 1} ⁿ . The location information issuance system for protecting user privacy according to claim 5, wherein the method for restoring the clusterable location code corresponding to the de-privacy processing method is:

The location information issuance system for protecting user privacy according to claim 1, wherein the location information issuance module is further configured to obtain a location obtained by deprivation processing of multiple access rights before the user location information is released. The location information of the user is obtained to obtain the clusterable location code after the privacy process is released. The location information issuance system for protecting user privacy according to claim 7, wherein the location information issuance module is further configured to recover the clusterable location code after the pre-release privacy process to obtain a user. Location information and publish the location information of the user. The location information issuance system for protecting user privacy according to claim 7, wherein the pre-release clusterable location code is not subjected to de-privacy processing, and the remaining portion is passed by the user on the server. The default password is used for privacy processing. A location information distribution system for protecting user privacy according to any one of claims 1-9, further comprising: The rights management module is configured to respectively grant the access rights to the visitor according to the different rights of different visitors, so as to obtain the location information of the user according to the viewing rights.

Images