Data query method and device, equipment, storage medium and program product

By implementing a data query method that separates query operations in the on-board terminal, the security problems of data leakage and internal attacks in the outsourcing cloud environment are solved, and efficient and secure data query is achieved.

CN120011611APending Publication Date: 2025-05-16CHINA MOBILE (SUZHOU) SOFTWARE TECH CO LTD +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510151825.1
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-02-11
Publication Date
2025-05-16

AI Technical Summary

Technical Problem

In a centralized structure based on outsourcing cloud, malicious behavior or security vulnerabilities within the cloud server may lead to data leakage stored in the cloud server, and the existing technology is difficult to effectively resist attacks from within the cloud environment.

Method used

By implementing a data query method in the on-board terminal, the method separates the keywords, location information and query location range of the query operation, and sends query requests to the type server and the location server respectively. The type server is responsible for processing data attribute information matching the keyword, and the location server determines feedback information based on this information, querying the location range and location information of the on-board terminal.

Benefits of technology

While ensuring data privacy, this method effectively resists attacks from within cloud servers, reducing potential security risks, and thus improving the security and efficiency of data queries.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120011611A_ABST
    Figure CN120011611A_ABST
Patent Text Reader

Abstract

The invention discloses a data query method and device, equipment, a storage medium and a program product, and the method comprises the steps: responding to a query operation of a user, and determining a keyword of the query operation, position information of a vehicle-mounted terminal and a query position range of the query operation; sending a type query request carrying the keyword to a type server, and sending a position query request carrying the position information of the vehicle-mounted terminal and querying the position range to a position server; and feedback information sent by the position server is received. Wherein the type server is used for determining at least one piece of data attribute information matched with the keyword in response to the type query request, and sending the at least one piece of data attribute information to the position server; and the position server is used for responding to the position query request and determining feedback information based on the at least one piece of data attribute information, the query position range and the position information of the vehicle-mounted terminal.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of privacy protection, and in particular to a data query method, device, equipment, storage medium and program product. Background Art

[0002] In a centralized structure based on outsourced cloud, data is stored and managed on a single cloud server, which has limited ability to resist malicious behavior or security vulnerabilities from within the cloud server. If the internal staff of the cloud server takes improper actions for personal gain, or if an external attacker breaks through the security line of the cloud environment, the data stored in the cloud server may face the risk of complete leakage. Summary of the invention

[0003] According to a first aspect of an embodiment of the present application, an embodiment of the present application provides a data query method, which is applied to a vehicle-mounted terminal, and the data query method includes: in response to a user's query operation, determining a keyword of the query operation, location information of the vehicle-mounted terminal, and a query location range of the query operation; sending a type query request carrying the keyword to a type server, and sending a location query request carrying the location information of the vehicle-mounted terminal and the query location range to a location server; receiving feedback information sent by the location server; wherein the type server is used to determine at least one data attribute information matching the keyword in response to the type query request, and send the at least one data attribute information to the location server; the location server is used to determine the feedback information based on the at least one data attribute information, the query location range, and the location information of the vehicle-mounted terminal in response to the location query request.

[0004] According to a second aspect of an embodiment of the present application, an embodiment of the present application provides a data query method, which is applied to a type server, and the data query method includes: receiving a type query request sent by a vehicle-mounted terminal; the type query request carries a keyword of a query operation of a user of the vehicle-mounted terminal; in response to the type query request, determining at least one data attribute information matching the keyword, and sending the at least one data attribute information to a location server; wherein the location server is used to receive a location query request sent by the vehicle-mounted terminal carrying the location information of the vehicle-mounted terminal and the query location range, and the at least one data attribute information sent by the type server; in response to the location query request, determining feedback information based on the data attribute information, the query location range and the location information of the vehicle-mounted terminal, and sending the feedback information to the vehicle-mounted terminal.

[0005] According to a third aspect of an embodiment of the present application, an embodiment of the present application provides a data query method, which is applied to a location server, and the data query method includes: receiving a location query request sent by a vehicle terminal, which carries the location information of the vehicle terminal and a query location range, and at least one data attribute information sent by a type server; the at least one data attribute information is determined based on a keyword; the query location range, the location information, and the keyword are determined based on a query operation of a user of the vehicle terminal; in response to the location query request, feedback information is determined based on the at least one data attribute information, the query location range, and the location information of the vehicle terminal; and the feedback information is sent to the vehicle terminal.

[0006] According to a fourth aspect of an embodiment of the present application, an embodiment of the present application provides a data query device, which is applied to a vehicle-mounted terminal, and the data query device includes: a determination module, which is used to determine, in response to a user's query operation, a keyword of the query operation, the location information of the vehicle-mounted terminal, and a query location range of the query operation; a sending module, which is used to send a type query request carrying the keyword to a type server, and to send a location query request carrying the location information of the vehicle-mounted terminal and the query location range to a location server; a receiving module, which is used to receive feedback information sent by the location server; wherein the type server is used to determine, in response to the type query request, at least one data attribute information matching the keyword, and send the at least one data attribute information to the location server; the location server is used to determine the feedback information based on the at least one data attribute information, the query location range, and the location information of the vehicle-mounted terminal in response to the location query request.

[0007] According to a fifth aspect of an embodiment of the present application, an embodiment of the present application provides a data query device, which is applied to a type server, and the data query device includes: a receiving module, which is used to receive a type query request sent by a vehicle-mounted terminal; the type query request carries a keyword of a query operation of a user of the vehicle-mounted terminal; a determination module, which is used to determine at least one data attribute information matching the keyword in response to the type query request, and send the at least one data attribute information to a location server; wherein the location server is used to receive a location query request sent by the vehicle-mounted terminal carrying the location information of the vehicle-mounted terminal and the query location range, and the at least one data attribute information sent by the type server; in response to the location query request, feedback information is determined based on the data attribute information, the query location range and the location information of the vehicle-mounted terminal, and the feedback information is sent to the vehicle-mounted terminal.

[0008] In a sixth aspect of an embodiment of the present application, an embodiment of the present application provides a data query device, which is applied to a location server, and the data query device includes: a receiving module, which is used to receive a location query request sent by a vehicle-mounted terminal and carrying the location information of the vehicle-mounted terminal and a query location range, and at least one data attribute information sent by a type server; the at least one data attribute information is determined based on a keyword; the query location range, the location information, and the keyword are determined based on the query operation of the user of the vehicle-mounted terminal; a determination module, which is used to determine feedback information based on the at least one data attribute information, the query location range, and the location information of the vehicle-mounted terminal in response to the location query request; and a sending module, which is used to send the feedback information to the vehicle-mounted terminal.

[0009] In a seventh aspect of the embodiments of the present application, a computer device is provided, comprising: a memory for storing executable instructions; and a processor for implementing the method provided in the above embodiments when executing the executable instructions stored in the memory.

[0010] According to an eighth aspect of the embodiments of the present application, a computer-readable storage medium is provided, on which executable instructions are stored. When the executable instructions are executed by a processor, the method provided in the above embodiment is implemented.

[0011] In the embodiment of the present application, after receiving the query operation of the user, the vehicle terminal will parse out the keywords, the location information of the vehicle terminal and the query location range. Subsequently, the vehicle terminal will send a type query request containing keywords to the type server, and send a location query request with location information and query location range to the location server. The type server is responsible for determining the matching data attribute information based on the received keywords, and sending these data attribute information to the location server; while the location server uses the received data attribute information, combined with the query location range and the location information of the vehicle terminal to screen and determine the final feedback information, and then returns this information to the vehicle terminal. In this way, the type server focuses on processing the data attribute information matching the keywords, while the location server is responsible for screening the data attribute information based on the location. This data query method allows the two servers to share part of the query results, but not share the data stored by each server. While ensuring data privacy, it can effectively resist attacks from the inside, reduce potential security risks, and thus improve the security of data query. In addition, by executing the type retrieval and location detection actions by different servers, the query can be targeted and efficient, reducing unnecessary computing burden, thereby optimizing the data retrieval performance in the outsourced cloud environment.

[0012] It should be understood that the above general description and the following detailed description are merely exemplary and explanatory, and are not intended to limit the technical solutions of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] The drawings herein are incorporated into the specification and constitute a part of the specification. These drawings illustrate embodiments consistent with the present application and are used together with the specification to illustrate the technical solution of the present application.

[0014] Figure 1 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 1 ;

[0015] Figure 2 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 2 ;

[0016] Figure 3 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 3 ;

[0017] Figure 4 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 4 ;

[0018] Figure 5 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 5

[0019] Figure 6 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 6 ;

[0020] Figure 7 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 7 ;

[0021] Figure 8 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 8 ;

[0022] Fig. 9 It is a schematic diagram of the architecture of a data query method provided in an embodiment of the present application;

[0023] Fig.10 A schematic diagram of the structure of a data query device provided in an embodiment of the present application Figure 1 ;

[0024] Fig.11 A schematic diagram of the structure of a data query device provided in an embodiment of the present application Figure 2 ;

[0025] Fig.12 A schematic diagram of the structure of a data query device provided in an embodiment of the present application Figure 3 ;

[0026] Fig.13 A hardware entity diagram of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0027] In order to make the purpose, technical solutions and advantages of the present application clearer, the technical solutions of the present application are further elaborated in detail below in conjunction with the drawings and embodiments. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present application.

[0028] In the following description, reference is made to "some embodiments", which describe a subset of all possible embodiments, but it is understood that "some embodiments" may be the same subset or different subsets of all possible embodiments, and may be combined with each other without conflict. The terms "first / second / third" involved are merely used to distinguish similar objects and do not represent a specific order for the objects. It is understood that "first / second / third" may be interchanged in a specific order or sequence where permitted, so that the embodiments of the present application described herein can be implemented in an order other than that illustrated or described herein.

[0029] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing this application and are not intended to limit this application.

[0030] Before further describing the embodiments of the present application in detail, the nouns and terms involved in the embodiments of the present application are explained. The nouns and terms involved in the embodiments of the present application are subject to the following interpretations.

[0031] Location Based Services (LBS) is a technology or application that provides various customized services and information based on the user's geographic location.

[0032] Point of Interest (POI) refers to a place or thing with some significance or attraction in a specific geographical location, usually related to the user's needs, interests or activities. POI can be a real physical location, such as a restaurant, store, gas station, scenic spot, hospital, etc., or it can be virtual, such as a network service or online resource.

[0033] Secure Multi-Party Computation (SMPC) is a cryptographic protocol that allows multiple parties to jointly compute the result of a predetermined function without disclosing their private data. It allows multiple parties to perform calculations without disclosing their private data, which can save the computational cost of retrieval.

[0034] Searchable Symmetric Encryption (SSE) is an encryption scheme that combines encryption and search functions, allowing users to perform search operations on encrypted data while encrypting the data.

[0035] With the growth of market demand, technological progress and the rapid development of the Internet, people's demand for connectivity is increasing, including achieving anytime and anywhere Internet access in vehicles. This demand has given rise to the desire to connect vehicles to the Internet. The development of the Internet of Vehicles is the result of the combined effect of many factors: the maturity of technology, the growth of market demand and the pursuit of smarter, safer and more convenient transportation methods. The Internet of Vehicles enables vehicles to connect with other vehicles, pedestrians, infrastructure and even everything. Through highly networked smart vehicles and location services, it supports advanced applications such as autonomous driving, vehicle-road cooperative intelligent systems, and intelligent driving. However, the Internet of Vehicles not only promotes the development of smart transportation, but also brings complex security challenges and privacy risks. Highly networked smart vehicles and detailed location services may expose vehicles to potential security threats and location privacy leakage issues. As a typical representative of cyber-physical fusion systems, the Internet of Vehicles is at risk of being exploited by attackers - by analyzing the location data of smart vehicles or directly invading vehicles, attackers may obtain information about real-world entities or even carry out physical attacks, which poses a serious threat to national security.

[0036] With the increase in the number of cars and the advantages of cloud computing in data computing and storage, location service providers are increasingly inclined to outsource large-scale databases to cloud service providers. In this outsourced cloud scenario, vehicles can send location-based service requests to LBSPs, but this also raises privacy issues, especially when performing location queries. The location privacy protection of smart vehicles is imminent, which is not only related to the safety of car owners, but also to national security. Therefore, this application proposes a dual-cloud architecture to enhance the privacy protection capabilities of vehicle information, and adopts secure multi-party computing and searchable symmetric encryption technology to support vehicle type queries and location queries. This can reduce the computational burden while improving query accuracy.

[0037] Based on the above challenges, current research has proposed many solutions, mainly including the following:

[0038] The first solution is privacy protection based on encryption technology. That is, privacy protection on the vehicle side is achieved through various encryption methods. For example, the privacy protection function of the location range query model is implemented based on encryption technology, so that only authorized smart vehicles can perform service retrieval.

[0039] The second solution is a centralized structure based on a unilateral outsourcing cloud. In general, outsourcing cloud solutions adopt a single cloud structure, which is a "centralized" structure to some extent, that is, the storage of outsourced encrypted data, the retrieval, calculation and authentication of query requests are all on the same cloud.

[0040] However, the existing solutions still have many shortcomings, such as: 1) The current security protection mechanism can only support encryption and search for search areas of standard shapes, which is difficult to meet the spatial range query requirements of complex search area structures in the Internet of Vehicles. 2) In the centralized structure solution based on the outsourced cloud, if a single outsourced cloud is controlled by internal personnel of the system or the stored data is stolen by attackers, since all data is concentrated in a single cloud, sensitive data may be fully leaked. This means that a single cloud structure lacks the ability to resist attacks from within the outsourced cloud.

[0041] It can be seen that there is still a risk of privacy leakage in the related technology. In order to solve the problem of low security of data query in the related technology, an embodiment of the present application provides a data query method, which can be executed by the cloud. Figure 1 A schematic diagram of an implementation process of a data query method provided in an embodiment of the present application Figure 1 ,like Figure 1 As shown, the method includes the following steps S101 to S103:

[0042] Step S101 , in response to a user's query operation, determining a keyword of the query operation, location information of the vehicle-mounted terminal, and a query location range of the query operation.

[0043] It is understandable that when a user issues a query operation for a point of interest, the relevant attribute information of the point of interest, such as the type keyword of the point of interest, the query location range, etc., will be involved. These relevant attribute information will help the vehicle push available resources and services in the surrounding environment to the user based on the current location of the vehicle. Then, after the user issues a query operation, the vehicle terminal can determine the keywords of the point of interest that can express the user's query intention, the vehicle's location information, and the query location range based on the relevant information generated after the user issues the query operation, thereby realizing the subsequent server's accurate query of the point of interest.

[0044] In some embodiments, the keywords of the query operation include the types of points of interest, such as dining, accommodation, entertainment, transportation, shopping, etc.

[0045] In some embodiments, the user's query operation can be initiated through a voice command. For example, the user in the vehicle issues a voice command, such as "check for me restaurants within 10 kilometers (km)", and this voice command will be passed to the vehicle's on-board gateway to enable the sending of subsequent query requests. Here, "restaurant" in the voice command is the keyword of the query operation, and "10km" is the query location range of the query operation. Among them, the on-board gateway is a key component in the vehicle system, responsible for connecting the vehicle terminal with external systems (such as cloud platforms, Internet of Vehicles, etc.) and performing data transmission and processing.

[0046] In the embodiment of the present application, the vehicle gateway can understand the voice command through the language model and generate an original query request. For example, after receiving the voice command "find restaurants within 10km for me", the vehicle gateway understands the keyword "restaurant" and the query location range "10km" in the voice command, and then generates the original query request "find restaurants within 10km".

[0047] In some embodiments, the user's query operation can be initiated by manual input in the software installed in the vehicle terminal.

[0048] For example, a user in a vehicle enters the keyword "restaurant" in the search box of the software installed in the vehicle terminal and sets the location query range to 10km in the location query range control. The software will generate an original query request, namely "query for restaurants within 10km". This original query instruction will also be passed to the vehicle's on-board gateway to enable the sending of subsequent query requests.

[0049] Furthermore, the software installed in the vehicle terminal presets a location query range. For example, the software installed in the vehicle terminal presets a location query range of 5km. When a user in the vehicle enters the keyword "hotel" in the search box of the software installed in the vehicle terminal, but does not set the location query range in the location query range control, the software will generate an original query request, i.e., "query hotels within 5km".

[0050] In some embodiments, determining the keywords of the query operation, the location information of the vehicle terminal, and the query location range of the query operation may include determining the keywords of the query operation, the location information of the vehicle terminal, and the query location range of the query operation through the vehicle gateway of the vehicle terminal.

[0051] Step S102: sending a type query request carrying keywords to a type server, and sending a location query request carrying location information of the vehicle-mounted terminal and a query location range to a location server.

[0052] Among them, the type server is a cloud computing-based service system that is specifically used to classify, store and retrieve data or information to help users quickly and accurately find content or information that meets a specific type in massive data.

[0053] In some embodiments, before sending the type query request and the location query request, the original query request may be understood by a natural language processing engine and the type query request and the location query request may be generated.

[0054] It is understandable that the type server and the location server store a type database (TDB) related to the type of the point of interest and a location database (LDB) related to the location of the point of interest, respectively. When a user performs a query operation, the query operation may include queries on the type and location of the point of interest at the same time, that is, the original query request generated when the user performs the query operation includes both type information and location information that meet the user's requirements. Since the type database does not contain data related to the location, if the type server searches the type database based on the original query request at this time, the search result may be empty, which in turn causes the query to fail. Therefore, the vehicle-mounted terminal needs to send a type query request for the type database to the type server, and send a location query request for the location database to the location server.

[0055] The type database is a system for storing and managing type data about points of interest, aiming to achieve effective access, management and maintenance of the data. It can be composed of tables, each of which contains multiple type data attributes about points of interest. Each data attribute of the table in the type database corresponds to a data attribute information, and these data attribute information describe various characteristics of the points of interest. Exemplarily, the data attributes of the type database in the type server include at least an identifier of the point of interest, a type keyword of the point of interest, and description information. Some data items in the type database can be shown in Table 1:

[0056] Table 1

[0057] Identifier Type Keywords describe 001 shopping mall The first shopping mall, service rating five stars 002 hotel The second hotel has a three-star service rating and costs RMB 433 per person. 003 Gas station XX gas station, service rating five stars, 300 yuan per person

[0058] In Table 1, the data attribute information corresponding to the point of interest with identifier "001" is: the attribute information of the data attribute being the type keyword is "shopping mall", and the attribute information of the data attribute being the description is "the first shopping mall, with a service rating of five stars".

[0059] The location database is a system for storing and managing location data about points of interest, aiming to achieve effective access, management and maintenance of the data. It can be composed of tables, each of which contains multiple location data attributes about points of interest. Each data attribute information of the table in the location database describes various characteristics of the points of interest. Exemplarily, the data attributes of the location database in the location server include at least the identifier of the point of interest, the latitude and longitude coordinates of the point of interest, and the location supplementary information of the point of interest. Some data items in the location database can be shown in Table 2:

[0060] Table 2

[0061] Identifier Latitude and longitude coordinates Supplementary location information 001 (-123°N,15°W) Room 501, XX Building, XX County, XX City, XX Province 011 (60°N,85°W) Room 307, XX Building, XX County, XX City, XX Province 102 (78°N,-43°W) Room 701, Unit 3, XX Community, XX County, XX City, XX Province

[0062] In Table 2, the data attribute information corresponding to the point of interest with identifier "011" is: the attribute information of the data attribute being the latitude and longitude coordinates is (-123°N, 15°W), and the attribute information of the data attribute being the location supplementary information is "the first shopping mall, service rating five stars".

[0063] For example, the vehicle-mounted gateway of the vehicle-mounted terminal standardizes the original query request generated by the user query operation into the format of I = (ID, (X, Y), I r ,G,ts), where ID is the identifier (ID) assigned to the vehicle by LBSP after the vehicle registration is completed. After responding to the query request, the server needs to feed back the response data to the vehicle corresponding to the ID; (X,Y) represents the latitude and longitude coordinates corresponding to the current position of the vehicle; I r is the query range specified by the user, G is the keyword corresponding to the type of interest point specified by the user (extracted by the vehicle gateway according to the language model), and ts is the timestamp. The server can refuse to process expired or repeated requests based on the timestamp of the query request. Further, based on the standardized format, the type query request EI1 = (ID, G, ts) and the location query request EI2 = (ID, (X, Y), I r ,ts), after processing, the type query request is sent to the type server and the location query request is sent to the location server.

[0064] For example, the original query request generated by the user query operation is "query restaurants within 10km", and the vehicle gateway will standardize the original query request as I = ("1", (45°N, 122°W), 10, "restaurant", "2024-12-24 15:30:00") based on the vehicle identifier "1", the latitude and longitude coordinates of the vehicle's current location (45°N, 122°W), the keyword "restaurant" corresponding to the type of the point of interest in the original query request, and the time information "2024-12-24 15:30:00" when the query request is issued. And based on the standardized original query request, the type query request EI1 = ("1", "restaurant", "2024-12-2415:30:00") and the location query request EI2 = ("1", (45°N, 122°W), 10, "2024-12-24 15:30:00").

[0065] Step S103: receiving feedback information sent by the location server.

[0066] Among them, the type server is used to respond to the type query request, determine at least one data attribute information matching the keyword, and send at least one data attribute information to the location server; the location server is used to respond to the location query request, and determine feedback information based on at least one data attribute information, the query location range and the location information of the vehicle-mounted terminal.

[0067] Among them, the location server is a cloud computing-based service system that is specifically used to manage and retrieve data related to the geographic location information of points of interest, aiming to help users achieve specific query needs based on the geographic location information of points of interest.

[0068] In some embodiments, the type server determines data attribute information related to the point of interest in the type database through keywords.

[0069] Exemplarily, in the above Table 1, when the keyword in the type query request is "mall", the type server searches for all points of interest with the keyword "mall" in the type database, that is, the data attribute information corresponding to the point of interest with identifier "001" is filtered out as follows: identifier "001", keyword "mall", description "the first mall, service rating five stars", and sends the data attribute information corresponding to the point of interest with identifier "001" to the location server.

[0070] In some embodiments, the location server determines the longitude and latitude coordinates corresponding to the point of interest in the location database based on the identifier in the data attribute information sent by the type server, and determines feedback information based on the longitude and latitude coordinates, the location information of the vehicle terminal, and the query location range.

[0071] For example, as shown in Table 1 above, when the type keyword is "shopping mall", the type server can send the type keyword attribute information and description information of the point of interest with identifier 001 to the location server. After receiving these data attribute information, the location server retrieves the longitude and latitude coordinates (-123°N, 15°W) of the point of interest with identifier 001 in the location database (such as Table 2) based on the identifier in the received data attribute information. Afterwards, the location server calculates the distance between the point of interest and the vehicle terminal based on the longitude and latitude coordinates in the location information provided by the vehicle terminal, and determines whether the distance information is within the query location range. If the calculated distance information is within the query location range, the location server determines the data attribute information corresponding to the point of interest as feedback information.

[0072] In the embodiment of the present application, the feedback information includes relevant data attribute information of the point of interest that satisfies the user's query operation.

[0073] In some embodiments, the feedback information may include the type keyword, description, latitude and longitude coordinates, and distance of the point of interest, etc. The type keyword is used to indicate the type of the point of interest, such as shopping malls, hotels, etc.; the description is used to describe the point of interest, such as the name and rating of the point of interest; the latitude and longitude coordinates indicate the latitude and longitude coordinates of the point of interest; and the distance indicates the distance between the point of interest and the vehicle-mounted terminal.

[0074] For example, the feedback information may be as shown in Table 3:

[0075] Table 3

[0076]

[0077] Among them, in Table 3, the data attribute information corresponding to the point of interest with identifier "011" is: type is "shopping mall", description is "the first shopping mall, service rating five stars", longitude and latitude coordinates are (-123°N, 15°W), and the distance information from the vehicle terminal is 0.1km.

[0078] It is understandable that if the location server first performs location retrieval based on the location query request, it may inadvertently leak the user's current location to more entities, while performing type retrieval first means performing more detailed location filtering among the multiple points of interest that have been narrowed down to meet the user's requirements, which can effectively reduce the exposure of sensitive location information.

[0079] Exemplarily, the type server matches the type database based on the keywords in the type query request, obtains at least one matching data attribute information, that is, at least one type data item in the type database, and sends the matching type data item to the location server, so that the location server can subsequently determine the data item that meets the user location query request from the type data item.

[0080] Exemplarily, after receiving the type data item, the location server screens the points of interest based on the query location range and the location information of the vehicle terminal, and determines the points of interest that meet the user's location requirements, that is, obtains a set of points of interest that meet both the user's type requirements and the user's location requirements, and further obtains data attribute information corresponding to each point of interest in the set of points of interest.

[0081] In some embodiments, after receiving the feedback information sent by the location server, the vehicle-mounted terminal may store the received feedback information in a local storage system.

[0082] It is understandable that after the feedback information is stored in the local storage system, the feedback information can be persisted and can still be used in subsequent queries even if the vehicle system is restarted or the power is lost.

[0083] In some embodiments, after receiving the feedback information sent by the location server, the vehicle-mounted terminal may store the received feedback information in a memory.

[0084] It is understandable that after the feedback information is stored in the memory, it is temporarily saved and is only valid in the current session and calculation. This can reduce the local storage capacity and improve access speed and response efficiency.

[0085] In some embodiments, the type database and the location database may be generated based on data attribute information of points of interest stored in a location service provider.

[0086] In some embodiments, the data attribute information of the point of interest stored in the location service provider may include an identifier ID of the data item, a type keyword G of the point of interest, longitude and latitude coordinates (X, Y) and a description Des. The data attribute information of each point of interest is in plain text.<POIID,G,(X,Y),Des> stored in the form of.

[0087] The identifier ID of each data item and the keyword of the POI type can be represented by a character string. For example, the data item can be <"01","Gas Station",(133°N,122°W),"XX Gas Station, located at XX Street, XX City">.

[0088] The identifier ID of each data item and the keyword of the POI type can also be represented by a bit string. For example, the identifier POI ID of each point of interest and the keyword of the type of the point of interest can be represented by a bit string, that is, ID∈{0,1} λ , where λ represents the length of bits,

[0089] In the embodiment of the present application, after receiving the query operation of the user, the vehicle terminal will parse out the keywords, the location information of the vehicle terminal and the query location range. Subsequently, the vehicle terminal will send a type query request containing keywords to the type server, and send a location query request with location information and query location range to the location server. The type server is responsible for determining the matching data attribute information based on the received keywords, and sending these data attribute information to the location server; while the location server uses the received data attribute information, combined with the query location range and the location information of the vehicle terminal to screen and determine the final feedback information, and then returns this information to the vehicle terminal. In this way, the type server focuses on processing the data attribute information matching the keywords, while the location server is responsible for screening the data attribute information based on the location. This data query method allows the two servers to share part of the query results, but not share their respective data. While ensuring data privacy, it can effectively resist attacks from within, reduce potential security risks, and thus improve the security of data query. In addition, by executing type retrieval and location detection actions on different servers, the query can be targeted and efficient, reducing unnecessary computing burden, thereby optimizing the data retrieval performance in the outsourced cloud environment.

[0090] Figure 2 This is a schematic diagram of the implementation process of a data query method provided in an embodiment of the present application. Figure 2 The method can be executed by the vehicle terminal. The above data query method can also include step S201 and step S202. Figure 2 The steps shown are explained.

[0091] Step S201: Encrypt the keyword based on a preset first key to obtain the encrypted keyword.

[0092] In the embodiment of the present application, the vehicle-mounted terminal may encrypt the keyword using a pseudo-random function based on a preset first key to obtain the encrypted keyword.

[0093] In some embodiments, a location based services provider (LBSP) may preset a first key and share the preset first key with the vehicle terminal.

[0094] Among them, location service providers refer to companies or platforms that provide various services based on the user's geographic location. They usually use the user's real-time location data and combine it with other relevant information to provide users with customized services and content.

[0095] For example, the location service provider may generate the first key K in advance by using a pseudo-random function F2. T , and share the first key K with the vehicle terminal T Before the vehicle terminal issues a type query request, the vehicle gateway of the vehicle terminal uses the first key K T , use the pseudo-random function F2 to encrypt the query keyword, thereby obtaining the encrypted keyword, namely the identifier Stag.

[0096] Step S202: Generate signature information based on the private key of the vehicle-mounted terminal and the timestamp corresponding to the type query request.

[0097] Among them, signature information refers to specific data generated during the digital signature process, which is used to verify identity and data integrity.

[0098] In some embodiments, the vehicle-mounted terminal may generate signature information using a hash function based on the private key of the vehicle-mounted terminal and a timestamp corresponding to the type query request.

[0099] For example, the vehicle terminal generates a public-private key pair (PK U , S.K. U ), and the public key PK U Then, the vehicle terminal uses a hash function to convert the vehicle terminal's private key SK U And the timestamp corresponding to the type query request, generate the signature Sig(ID, ts).

[0100] In some embodiments, the step S102 of "sending a type query request carrying keywords to a type server" may include the following step S203:

[0101] Step S203, sending a type query request carrying the encrypted keyword and signature information to the type server. The type server is used to verify the signature information based on the public key of the vehicle terminal in response to the type query request; if the verification is successful, determine at least one encrypted data attribute information based on the encrypted keyword.

[0102] In some embodiments, sending the type query request carrying the encrypted keyword and signature information to the type server may include sending the type query request carrying the encrypted keyword and signature information to the type server via Bluetooth.

[0103] Exemplarily, the vehicle-mounted terminal establishes a Bluetooth connection with the type server, generates a type query request carrying encrypted keywords and signature information, and transmits the encrypted keywords and signature information to the type server via Bluetooth.

[0104] For example, the type server responds to the type query request and verifies the signature information based on the public key of the vehicle terminal in the following steps: first, the vehicle terminal uses its private key SK U The signature information is generated at the timestamp of the vehicle terminal sending the type query request. The signature information contains the encryption result of data such as the vehicle identifier and timestamp. During the verification process, the type server uses the public key PK provided by the vehicle terminal to U The signature information is decrypted to restore the original timestamp and vehicle identifier. The type server then compares the decrypted timestamp with the timestamp contained in the received type query request. If the two are consistent and the timestamp falls within the predefined validity period, it means that the signature information has not been tampered with and is indeed generated by the vehicle terminal holding the corresponding private key, and the representation verification is passed; if the comparison fails or the timestamp is invalid, it means that the signature information is invalid or has been tampered with, and the representation verification fails.

[0105] In some embodiments, the type server determines at least one encrypted data attribute information in the encrypted type database based on the encrypted keyword. The type database is based on the symmetric key K E The type database associated with the type keyword of the point of interest is encrypted using a searchable symmetric encryption algorithm.

[0106] It can be understood that the searchable symmetric encryption algorithm allows search operations to be performed while the data remains encrypted. Therefore, in the type server, when the type database uses searchable symmetric encryption, when the encrypted type data attribute information is retrieved based on keywords, the retrieved data attribute information remains encrypted.

[0107] In some embodiments, the category database in the category server is encrypted by the location service provider.

[0108] For example, the location service provider generates a symmetric key K for the searchable symmetric encryption SSE. E (in K E is an integer that is relatively prime to n under modulus n. This key can be used in encryption algorithms and is reversible and can be used for encryption or decryption operations). The vehicle user uses SSE to generate a public-private key pair (PK U , S.K. U ) and publish its public key PK U , the location service provider uses the symmetric key KE , the type database related to the type of the point of interest is encrypted using searchable symmetric encryption to obtain an encrypted type database.

[0109] Exemplarily, as shown in Table 1 above, the location service provider encrypts the data items in Table 1 above using a symmetric key and a searchable symmetric encryption algorithm, and some data items of the obtained encrypted database may be shown in Table 4:

[0110] Table 4

[0111] Identifier Type Keywords describe 28yi703b78 C1D3F5A7B9C6 A4B9C8D3E7F6 d6b33f71c2 A3B7C9D4E1F2 Z9X8W6V5T3Q1 3c4a3c2d5e G7F8L3D2A9B0 A3B9D8G7K1L0

[0112] Exemplarily, as shown in Table 4 above, when the signature information is verified, the type server searches the type database based on the keyword "mall" encrypted to obtain "C1D3F5A7B9C6", and can determine the encrypted data attributes of at least one point of interest matching the mall in the type database, such as the attribute information of the identifier of a point of interest is "28yi703b78", and the attribute information of the description is "A4B9C8D3E7F6".

[0113] In some embodiments, the location database in the location server is encrypted by the location service provider.

[0114] For example, the location service provider uses the vehicle's public key PK U , a hash algorithm is used to encrypt the location database associated with the latitude and longitude coordinates to obtain the encrypted location database, and the encrypted location database is outsourced to the location server.

[0115] For example, as shown in Table 2 above, the location service provider uses the vehicle's public key PK to store the data items in Table 2 above. U The encrypted data items are shown in Table 5. Each encrypted data attribute information can be a 32-bit string:

[0116] Table 5

[0117]

[0118] In an embodiment of the present application, the keyword is encrypted based on a preset first key, and then the private key and timestamp of the vehicle terminal are used to generate signature information. The vehicle terminal sends a type query request carrying the encrypted keyword and signature information to the type server. After receiving the request, the type server verifies the signature information using the public key of the vehicle terminal. After the verification is passed, the relevant encrypted data attribute information is determined based on the encrypted keyword. First, the keyword is encrypted so that the data will not be leaked or tampered with during the transmission process. Even if the data is intercepted, the undecrypted encrypted data cannot be used by the attacker. Secondly, based on the encrypted keyword, the encrypted data attribute information is determined, so that while protecting the user's sensitive information, the required results can still be obtained, reducing the risk of exposing unencrypted data. In addition, the signature information is verified based on the public key of the vehicle terminal. The type server verifies the authenticity and legitimacy of the request by verifying the signature, thereby reducing the situation of malicious forged requests and malicious attacks.

[0119] Figure 3 This is a schematic diagram of the implementation process of a data query method provided in an embodiment of the present application. Figure 3 The method can be executed by the vehicle terminal. The above data query method can also include step S301 and step S302. Figure 3 The steps shown are explained.

[0120] Step S301, decrypt the feedback information to obtain encrypted target data attribute information and distance information between the target data attribute information and the vehicle-mounted terminal.

[0121] It is understandable that in order to protect the security of data, when the vehicle terminal sends a request to the location server, the location server uses the public key of the vehicle terminal to encrypt the feedback information, reducing the possibility of data being obtained by entities other than the vehicle terminal during transmission.

[0122] In some embodiments, the feedback information may be decrypted based on the private key of the vehicle-mounted terminal to obtain encrypted target data attribute information and distance information between the target data attribute information and the vehicle-mounted terminal.

[0123] Step S302, decrypt the encrypted target data attribute information to obtain the target data attribute information.

[0124] The encrypted target data attribute information is determined based on the target data attribute information in at least one encrypted data attribute information; the target data attribute information is determined based on the distance information between each data attribute information and the vehicle-mounted terminal and the query location range.

[0125] It is understandable that the location server will screen out the target data attribute information that meets the conditions based on the distance information between each data attribute information and the vehicle terminal and the query location range specified by the user. Then, the corresponding encrypted target data attribute information is determined in at least one encrypted data attribute information. Finally, the vehicle terminal decrypts the encrypted target data attribute information to obtain the decrypted target data attribute information.

[0126] In some embodiments, the encrypted target data attribute information is decrypted to obtain the target data attribute information, which may include a symmetric key K E The encrypted target data attribute information is decrypted to obtain the target data attribute information.

[0127] In the embodiment of the present application, the feedback information is decrypted twice. First, the encrypted target data attribute information and the distance information between the vehicle terminal and the target data are decrypted, and then the encrypted target data attribute information is decrypted to obtain the final target data attribute information. This scheme uses distance information and query location range to determine the target data attributes related to the vehicle terminal, and realizes secure data query and processing based on geographic location. In the first decryption step, the encrypted target data attribute information and the distance information between the vehicle terminal and the target data are obtained, reducing the exposure of sensitive information. The second decryption step allows the final target data attribute information to be obtained only after multiple verifications, thereby reducing potential security risks and improving the security of data queries.

[0128] Figure 4 This is a schematic diagram of the implementation process of a data query method provided in an embodiment of the present application. Figure 4 The method can be executed by a type server. The above data query method can also include step S401 and step S402. Figure 4 The steps shown are explained.

[0129] Step S401, receiving a type query request sent by a vehicle-mounted terminal.

[0130] In the embodiment of the present application, the type query request carries keywords of the query operation of the user of the vehicle-mounted terminal.

[0131] In some embodiments, receiving a type query request sent by the vehicle-mounted terminal may include receiving a type query request carrying signature information sent by the vehicle-mounted terminal.

[0132] In some embodiments, after receiving the type query request sent by the vehicle-mounted terminal, the type database is searched based on the encrypted keywords.

[0133] It can be understood that since the type database is searchably symmetrically encrypted, the data items in the type database can be matched based on the encrypted keyword Stag to obtain a list t including multiple data items e, wherein the point of interest type of each encrypted data item e in the list t is consistent with the type of the point of interest in the requested query.

[0134] Step S402: In response to the type query request, determine at least one piece of data attribute information matching the keyword, and send the at least one piece of data attribute information to a location server.

[0135] Among them, the location server is used to receive a location query request carrying the location information of the vehicle-mounted terminal and the query location range sent by the vehicle-mounted terminal, and at least one data attribute information sent by the type server; in response to the location query request, feedback information is determined based on the data attribute information, the query location range and the location information of the vehicle-mounted terminal, and the feedback information is sent to the vehicle-mounted terminal.

[0136] It is understandable that each point of interest in the database of the type server will be marked with a data attribute information related to the type keyword (such as gas station, hotel, etc.). When the vehicle terminal issues a type query request, the type server will search for matching data attribute information based on the keywords in the request, filter out the points of interest that meet the requirements, and send other data attribute information corresponding to these points of interest (such as point of interest identifiers, descriptions, etc.) to the location server. After the location server receives the location information and the location query request for the query location range from the vehicle terminal and the data attribute information from the type server, it will filter out the points of interest that meet the user's needs based on the data attribute information, the query location range and the location information of the vehicle terminal, and determine the feedback information. Finally, the location server sends this feedback information back to the vehicle terminal.

[0137] For example, as shown in Table 1 above, after the vehicle terminal sends a type query request carrying the keyword "gas station" to the type server, the type server can filter out points of interest matching the keyword "gas station" in the type database, that is, obtain the data attribute information shown in Table 6 below:

[0138] Table 6

[0139] Identifier Type Keywords describe 003 Gas station XX gas station, service rating five stars, 300 yuan per person

[0140] In some embodiments, sending the at least one data attribute information to the location server may include sending the at least one data attribute information to the location server in the form of a list.

[0141] Exemplarily, the type server inserts the encrypted data attribute information corresponding to each retrieved point of interest that meets the requested type into an empty list t', and after the insertion is completed, sends the list t' to the LRC.

[0142] Let's take an example to show how to determine at least one data attribute that matches a keyword.

[0143] In the embodiment of the present application, the vehicle terminal sends a type query request carrying the user's query keywords, and the server matches the relevant data attribute information according to the keywords and sends it to the location server. After receiving the location information and query location range of the vehicle terminal, the location server combines the data attribute information and location data to determine and return the corresponding feedback information. By sending the type query request and the location query request to different servers respectively, the sensitive information is processed in a decentralized manner, reducing the risk of data leakage on a single server.

[0144] Figure 5 This is a schematic diagram of the implementation process of a data query method provided in an embodiment of the present application. Figure 5 The type query request carries the encrypted keyword and signature information; the signature information is generated based on the private key of the vehicle terminal and the timestamp corresponding to the type query request; the method can be executed by the type server. The "determining at least one data attribute information matching the keyword" in step S402 can be implemented by steps S501 and S502, which will be combined with Figure 5 The steps shown are explained.

[0145] Step S501: verify the signature information based on the public key of the vehicle-mounted terminal.

[0146] In some embodiments, verifying the signature information based on the public key of the vehicle-mounted terminal may include verifying the timestamp in the signature information based on the public key of the vehicle-mounted terminal.

[0147] For example, the type server is based on the public key PK of the vehicle terminal U , decrypt the signature information, restore the original hash value, compare the hash value with the calculated hash value to see if they are consistent, and verify whether the timestamp in the signature information is within the allowed time range. If the timestamp is within the allowed time range and the hash value verification is consistent, the signature information is valid.

[0148] Step S502: if the verification is successful, at least one encrypted data attribute information is determined in the ciphertext database based on the encrypted keyword.

[0149] In the embodiment of the present application, when the signature information verification fails, information indicating the query failure is fed back to the vehicle-mounted terminal.

[0150] In some embodiments, Figure 5 As shown, the "sending at least one data attribute information to the location server" in step S402 may include step S503:

[0151] Step S503: Send at least one encrypted data attribute information to the location server.

[0152] In some embodiments, sending at least one encrypted data attribute information to the location server may include sending at least one encrypted data attribute information to the location server via HyperText Transfer Protocol (HTTP).

[0153] In the embodiment of the present application, the type server verifies the signature information based on the public key of the vehicle terminal. After the verification is passed, the type server searches for the relevant encrypted data attribute information in the ciphertext database based on the encrypted keywords, and sends the encrypted data attribute information to the location server. The type server uses the encrypted keywords to query the encrypted data attribute information, thereby realizing the privacy protection of user data and query content during transmission, effectively reducing the leakage of sensitive information, and improving the security of data query.

[0154] Figure 6 This is a schematic diagram of the implementation process of a data query method provided in an embodiment of the present application. Figure 6 The method may be executed by a location server. The above data query method may also include steps S601 to S603. Figure 6 The steps shown are explained.

[0155] Step S601: receiving a location query request for querying a location range and carrying location information of the vehicle-mounted terminal sent by a vehicle-mounted terminal, and at least one piece of data attribute information sent by a type server.

[0156] In an embodiment of the present application, at least one piece of data attribute information is determined based on a keyword; the query location range, location information, and keyword are determined based on a query operation of a user of the vehicle-mounted terminal.

[0157] In the embodiment of the present application, the query location range in the location query request is encrypted by the vehicle-mounted terminal.

[0158] For example, the location service provider uses a hash function H (where H: {0,1}→Z n * ) and the public key PK of the location server T Encrypt the query position range. If n = 7, then the group of the hash function is Z7 *={1,2,3,4,5,6}, then each digit in the data encrypted based on the hash function is an integer between 1 and 6.

[0159] In the embodiment of the present application, the location information of the vehicle-mounted terminal in the location query request is encrypted by the vehicle-mounted terminal.

[0160] For example, the vehicle terminal generates a key K based on the hash function itself. H Encrypt the current location information.

[0161] Step S602, in response to the location query request, feedback information is determined based on at least one data attribute information, a query location range, and location information of the vehicle-mounted terminal.

[0162] In some embodiments, after receiving the location query request, the query location range and the location information of the vehicle-mounted terminal are decrypted.

[0163] It can be understood that when the location server receives the location query request sent by the vehicle terminal and at least one data attribute information sent by the type server, the location server first finds the corresponding location information of each point of interest in the location database based on the identifier data attribute information corresponding to these points of interest. Then, the location server uses the current location information provided by the vehicle terminal and the query location range specified by the user to calculate the distance information between each point of interest and the vehicle terminal. Finally, the location server selects eligible points of interest based on the calculated distance information and query location range, and determines the relevant data attribute information of these points of interest as feedback information.

[0164] Step S603: Send feedback information to the vehicle terminal.

[0165] In some embodiments, sending the feedback information to the vehicle-mounted terminal may include sending the feedback information to an in-vehicle infotainment system of the vehicle-mounted terminal.

[0166] Exemplarily, after receiving the feedback information sent by the location database, the in-vehicle infotainment system of the in-vehicle terminal may display the feedback information.

[0167] In the embodiment of the present application, after the location server receives the query request including location information, query location range and keywords sent by the vehicle terminal, and the encrypted data attribute information determined based on the keywords sent by the type server, the location server processes the encrypted data attribute information according to the data attribute information, query location range and location information of the vehicle terminal, generates feedback information, and sends it back to the vehicle terminal. When processing these encrypted data, the location server does not expose the original data, but matches and filters them in an encrypted state, further improving the security of data query.

[0168] Figure 7 This is a schematic diagram of the implementation process of a data query method provided in an embodiment of the present application. Figure 7 The method may be executed by a location server. The step S602 of "determining feedback information based on at least one data attribute information, the query location range, and the location information of the vehicle terminal" may be implemented by steps S701 to S704. Figure 7 The steps shown are explained.

[0169] Step S701, based on at least one piece of data attribute information, determining the location information corresponding to each piece of data attribute information in a location database.

[0170] In some embodiments, based on at least one data attribute information, determining the location information corresponding to each data attribute information in the location database may include determining the location information corresponding to each data attribute information in the location database based on an identifier of the data item in the data attribute information.

[0171] It can be understood that the attribute information of each type data item includes the identifier of the data item, the type keyword and description of the point of interest, and the attribute information of each location data item includes the identifier of the data item, the latitude and longitude coordinates corresponding to the point of interest, and the location supplementary information. It can be seen that the type database and the location database have the identifier of the common data item, so after obtaining the identifier of the data item in the type database, the location information corresponding to the identifier of the data item can be found in the location database based on the identifier of the data item.

[0172] Step S702: Based on the location information corresponding to each data attribute information and the location information of the vehicle terminal, the distance information between each data attribute information and the vehicle terminal is determined.

[0173] In some embodiments, based on the position information corresponding to each data attribute information and the position information of the vehicle terminal, the distance information between each data attribute information and the vehicle terminal is determined, which may include using the spherical distance formula to determine the distance information between each data attribute information and the vehicle terminal based on the position information corresponding to each data attribute information and the position information of the vehicle terminal.

[0174] In some embodiments, the location database decrypts the location information of the vehicle terminal based on the key.

[0175] It can be understood that the vehicle terminal generates a key K based on itself. H The current location information is encrypted and carried in the location query request. Therefore, when the location server receives the location query request, it needs to use the key K H Decrypt the location information to obtain the current location information of the vehicle.

[0176] Step S703: determining target data attribute information in at least one data attribute information based on the distance information between each data attribute information and the vehicle-mounted terminal and the query location range.

[0177] In some embodiments, before determining the target data attribute information, a list t' is constructed based on the distance information between each data attribute information and the vehicle-mounted terminal.

[0178] It is understandable that the data attribute information stored in the location database does not include the distance information between the point of interest and the vehicle, so it is necessary to construct a list based on the distance information between each data attribute information and the vehicle terminal. Exemplarily, the data in the list includes at least an identifier of the data item, a type keyword of the point of interest, a description, and the distance information corresponding to the vehicle terminal.

[0179] In some embodiments, determining the target data attribute information may include decrypting the query position range, and screening the list t' based on the query position range obtained after decryption to determine the target data attribute information.

[0180] It is understandable that the vehicle terminal uses the public key PK based on the location database T The current query location range is encrypted and carried in the location query request. Therefore, when the location server receives the location query request, it needs to use the private key SK of the location database. T The location information is decrypted to obtain the user's query location range.

[0181] Exemplarily, the location server finds all target data attribute information within the query location range in the list t'.

[0182] Step S704: determine the target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal as feedback information.

[0183] In some embodiments, determining the target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal as feedback information may include determining the target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal, and the longitude and latitude coordinates and position supplementary information corresponding to the target data attribute information as feedback information.

[0184] In the embodiment of the present application, first, the corresponding location information is determined in the location database based on the data attribute information; then, the distance between the data attribute information and the vehicle terminal is calculated in combination with the location information of the vehicle terminal; then, according to the query location range, the target data attribute information within the range of the vehicle terminal is screened out; finally, these target data attribute information and the distance between them and the vehicle terminal are returned as feedback information. By combining the real-time location information of the vehicle terminal, the system can accurately determine the data attribute information related to the location of the vehicle terminal, and filter out valid data according to the specified query location range. In this way, the vehicle terminal can dynamically obtain relevant information nearby according to its own location, and provide users with personalized, location-related feedback information.

[0185] In the embodiment of the present application, "receiving at least one data attribute information sent by the type server" in step S601 may include step S6011.

[0186] Step S6011, receiving at least one encrypted data attribute information sent by the type server.

[0187] It is understandable that, since the data in the type database is searchably symmetric encrypted, the data items obtained based on the type query request are still encrypted. Therefore, when further filtering based on the data in the type database, the encrypted data needs to be sent to the location server for decryption and processing.

[0188] In some embodiments, receiving at least one encrypted data attribute information sent by the type server may include receiving an identifier of at least one encrypted data item and a type keyword of the point of interest sent by the type server.

[0189] In the embodiment of the present application, the above data query method may further include step S705.

[0190] Step S705: Based on the target data attribute information, determine the encrypted target data attribute information in at least one encrypted data attribute information.

[0191] In some embodiments, based on the target data attribute information, determining the encrypted target data attribute information in at least one encrypted data attribute information may include encrypting all data attribute information based on the target data attribute information to obtain all encrypted target data attribute information.

[0192] In the embodiment of the present application, step S704 may include step S7041.

[0193] Step S7041, encrypt the encrypted target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal to obtain feedback information.

[0194] In some embodiments, the encrypted target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal are encrypted, which may include encrypting the encrypted target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal based on the public key of the vehicle-mounted terminal.

[0195] In the embodiment of the present application, the encrypted data attribute information sent by the receiving server is used to determine the encrypted target data attribute information based on the target data attribute information. Subsequently, encryption processing is performed in combination with the distance between the target data attribute information and the vehicle-mounted terminal, and the encrypted target data attribute information and its distance information are returned as feedback information. By encrypting the data attribute information, the security of the information during transmission is achieved, the possibility of data leakage or tampering is reduced, and the confidentiality of the system is improved.

[0196] Figure 8 This is a schematic diagram of the implementation process of a data query method provided in an embodiment of the present application. Figure 8 .like Figure 8 As shown, the method includes the following steps S801 to S814:

[0197] The data query method in the embodiment of the present application includes the following data preparation stage shown in step S801 to step S806, which is a key generation process and an encrypted database generation process:

[0198] Step S801: The location service provider allocates a key to the vehicle terminal.

[0199] For example, the location service provider is a secure cryptographic hash function H (where H: {0,1}→Z n * , if n = 7, then the group of hash functions is Z7 * ={1,2,3,4,5,6}, then each digit in the data encrypted based on the hash function is an integer between 1 and 6) to generate the key K H, generates K for the pseudo-random function F1 T , generate the symmetric key K for searchable symmetric encryption SSE E (in K E is an integer that is relatively prime to n modulo n). LBSP shares the key K with the vehicle H , K T and K E .

[0200] Step S802: The vehicle-mounted terminal generates a public-private key pair.

[0201] For example, the vehicle generates a public-private key pair (PK U , S.K. U ) and publish its public key PK U .

[0202] Step S803: The location server generates a public-private key pair.

[0203] For example, the location server generates a public-private key pair (PK T , S.K. T ) and publish its public key PK T .

[0204] Step S804: The location service provider encrypts the type database and the location database.

[0205] In some embodiments, the location service provider divides the stored data items into a type database and a location database.

[0206] For example, the information of the data item stored in the location service provider may include a point of interest identifier POIID, a point of interest keyword G, longitude and latitude coordinates (X, Y), a description Des and location supplementary information Info, etc. Each data item is in plain text.<POI ID,G,(X,Y),Des,Info> The POI identifier and POI keyword of each data item can be represented as a bit string, i.e. ID∈{0,1} λ (λ is the security parameter of the pseudo-random function F and the pseudo-random permutation P. λ represents the length of the bit. The larger the λ is, the more complex the generated ID is.) Similarly, keywords can also be represented by bit strings.

[0207] In some embodiments, the type database includes point of interest identifiers, point of interest keywords, and description information of the point of interest.

[0208] Exemplarily, some data items obtained in the type database in response to the type query request are shown in Table 7:

[0209] Table 7

[0210] Identifier Type Keywords describe 001 Gas station XX gas station, service rating five stars, 300 yuan per person 002 hotel First hotel, service rating three stars

[0211] In some embodiments, the location database includes an identifier of the point of interest, the latitude and longitude coordinates of the point of interest, and supplementary location information about the point of interest.

[0212] Exemplarily, some data items obtained in the location database in response to the type query request are shown in Table 8:

[0213] Table 8

[0214] Identifier Latitude and longitude coordinates Supplementary location information 011 (-123°N,15°W) XX Building, XX District, XX City, XX Province 102 (78°N,-43°W) XX Community, XX Street, XX District, XX City, XX Province

[0215] Step S805: The location service provider stores the encrypted type database in the type server.

[0216] For example, the location service provider uses a symmetric key K E The type database associated with the type keyword of the point of interest is encrypted with the searchable symmetric encryption SSE to obtain a database TDB.

[0217] Step S806: The location service provider stores the encrypted location database in the location server.

[0218] For example, the location service provider uses a vehicle-based public key PK T The location database associated with the latitude and longitude coordinates of the point of interest is encrypted to obtain a location database LDB.

[0219] The data query method in the embodiment of the present application further includes the query request phase shown in the following steps S807 to S809, which is a process of performing encryption operations on the query request:

[0220] Step S807, in response to the user's query operation, determining the keyword of the query operation, the location information of the vehicle-mounted terminal, and the query location range of the query operation.

[0221] For example, a user in a vehicle issues a voice command, such as "Search for restaurants within 10km", which will be transmitted to the vehicle's onboard gateway; or the user can directly enter the keyword "restaurant" in the search box of the supporting software and set the distance to 10km in the control. The software will generate an original query request, such as "Search for restaurants within 10km". The onboard gateway understands the voice command or original query request through the language model and parses it into a standardized format; the standardized query request I = (ID, (X, Y), I r ,G,ts), where ID is the identifier assigned to the vehicle by LBSP after vehicle registration is completed, ID is the identifier of the vehicle terminal that issued the request, (X,Y) is the current location of the vehicle, and Ir is the query range of the vehicle, G is the keyword of the query request POI type, and ts is the timestamp.

[0222] Step S808: Send a type query request EI1 carrying encrypted keywords to the type server.

[0223] It is understandable that, in order to ensure the confidentiality of the query content, it is necessary to encrypt the keywords in the type query request before sending the type query request.

[0224] For example, the vehicle uses a key K provided by a location service provider. T , use the pseudo-random function F2 to encrypt the POI type keyword G to be queried, and obtain the type retrieval identifier Stag, where Stag is used to help the type server locate the encrypted data item that matches the vehicle string request when performing type retrieval in the cloud.

[0225] Step S809: Send a location query request EI2 carrying the encrypted vehicle terminal location information and the encrypted query location range to the location server.

[0226] It is understandable that, in order to ensure the confidentiality of the query content, it is necessary to encrypt the keywords in the type query request before sending the type query request.

[0227] In some embodiments, the encrypted vehicle terminal location information, the encrypted query location range, and the encrypted signature information are sent to the location server, wherein the signature information is used to verify the identity and data integrity.

[0228] For example, the vehicle generates a key K for a secure cryptographic hash function H based on a location service provider. H , use the hash function to encrypt the current location and obtain the encrypted location; based on the public key PK shared by the location server T , use the hash function to query range I r Encryption; based on the vehicle's own private key SK u Generate a signature Sig(ID,ts) on the timestamp ts.

[0229] The data query method in the embodiment of the present application further includes the query retrieval stage shown in the following steps S810 to S812, which is a type retrieval and a location range retrieval, that is, the data is retrieved according to the type query request and the location query request:

[0230] Step S810: In response to the type query request, determine at least one data attribute information matching the keyword.

[0231] Exemplarily, after receiving the query request EI1, the type server finds the data item e matching the type search identifier Stag from the database according to Stag in the type query request, and collects all the data items e matching Stag and generates a list t.

[0232] It can be understood that the type database is encrypted by a searchable symmetric algorithm, and each data item e therein is encrypted. The searchable symmetric encryption allows a search operation to be performed on the encrypted data, and the interest point type of each data item e in the list is consistent with the interest point type requested for query. Therefore, when performing type retrieval, the data items in the type database do not need to be decrypted, but a list t is generated based on the retrieved data items.

[0233] Step S811: Send at least one data attribute information to a location server.

[0234] Exemplarily, the type server inserts each data item e in the retrieved list t that matches the type search identifier Stag into an empty list t ′ and insert the list t obtained after the insertion ′ Sent to the location server.

[0235] Step S812, in response to the location query request, decrypt the data attribute information, the query location range and the location information of the vehicle terminal, and determine feedback information based on at least one data attribute information, the query location range and the location information of the vehicle terminal.

[0236] Exemplarily, first, since the data item e in the type database is based on the key K E Encrypted, query range I r It is based on the public key PK of the location database T After the location server receives the request from the type server, it first uses the key K E For list t ′ Decrypt the data item e in the data item to obtain the point of interest identifier POI ID in the data item, and use the private key SK of the location database T The query range is decrypted. Secondly, the location server finds the longitude and latitude coordinates (x′) corresponding to the type data item e in the location database according to the point of interest identifier. i ,y′ i ). Afterwards, the type server uses the key K H Decrypt the current location information to obtain the latitude and longitude coordinates (x, y) of the current location based on PT T (I r ) distance algorithm calculates the longitude and latitude coordinates (x′) of each point of interest i,y′ i ) and the distance d between the vehicle i , where d i = dis((x,y),(x′ i ,y′ i )). Again, build a list t″, insert the type data item e and the d corresponding to each type data item e into it. i , that is, t″ includes the POI identifier, POI type keyword, description, and distance information between the POI and the vehicle. Finally, the type server filters the data items in list t″ based on the query range and finds all data item sets res in list t″ within the vehicle user's query radius.

[0237] It is understandable that the functions of database processing are relatively limited. If the data is filtered when calculating the distance, it will lead to a heavy computational burden. Therefore, filtering can be taken as a separate step, that is, building a list t″, and based on this, batch processing of data items in the database is implemented to make data query more efficient.

[0238] The data query method in the embodiment of the present application further includes the result feedback stage shown in the following steps S813 and S814, which is to feed back the data set after the type search and range search to the vehicle terminal:

[0239] Step S813: Send the encrypted feedback information to the vehicle terminal.

[0240] For example, the location database uses the vehicle public key PK U The data item set res obtained in step S812 is encrypted, and the data item set is returned to the vehicle corresponding to the identifier ID through the identifier ID of the query vehicle carried in the location query request.

[0241] Step S814: decrypt the feedback information to obtain data.

[0242] For example, after obtaining the returned result set res, the vehicle terminal uses its own private key SK U Decrypt the data item set res to obtain the encrypted type data item e and the distance information d between the vehicle and the point of interest i After that, the vehicle terminal is based on K E The encrypted data item e is decrypted to obtain the identifier, keyword, description and distance information of the point of interest that meets the user operation.

[0243] Fig. 9Schematic diagram of the architecture of a data query method provided in an embodiment of the present application, including four entities: a location service provider LBSP, a type retrieval cloud TRC (Location Retrieval Cloud, LRC) (which can be understood as the type server mentioned above), a location retrieval cloud (Location Retrieval Cloud, LRC) (which can be understood as the location server mentioned above) and a smart vehicle. Fig. 9 As shown, the method includes the following steps S901 to S907:

[0244] In the embodiments of the present application, it is necessary to assume that the entities LBSP, TRC and LRC are honest and have autonomous learning capabilities (curiosity).

[0245] It is understandable that the assumption that entities are honest is reflected in the fact that these entities need to operate in accordance with the agreement or regulations. The assumption that entities have autonomous learning capabilities is reflected in the fact that when there are multiple databases in the cloud, there may be common items between the databases. The cloud may access and associate data that should not be shared during the learning process, resulting in the leakage or abuse of sensitive information. In the embodiments of the present application, the sensitive data is distributed to two independent clouds respectively, which means that each entity can not only execute the protocol honestly, but also because the data is distributed on two independent servers, even if each server has autonomous learning capabilities (curiosity), it cannot access or learn data on other servers. In addition, there is no collusion between the entities. In this way, each entity is only curious about the data it has, thereby achieving data security and privacy protection.

[0246] Among them, the physical location service provider LBSP is the owner of the database. LBSP outsources its database and query services to the cloud. In order to protect the confidentiality of the outsourced data, the type database and location database need to perform encryption operations before outsourcing to reduce the leakage of information contained in the data to the cloud. In addition, LBSP is also responsible for registering information for vehicle users.

[0247] The type retrieval cloud is responsible for storing and retrieving databases related to types, and the location retrieval cloud is responsible for storing and retrieving databases related to locations. The two retrieval clouds are cloud servers provided by different operators.

[0248] Smart vehicles in the IoV system request location services (LBS) queries from the outsourced cloud based on their current locations to find certain types of points of interest within a specified range. For example, a registered vehicle queries the outsourced cloud for hotels within a 10km range based on its current location. To ensure query privacy and security, the query request sent by the vehicle needs to be encrypted.

[0249] Step S901: The location service provider outsources the encrypted type database related to the type of the point of interest to the type search cloud.

[0250] Step S902: The location service provider outsources the encrypted location database related to the location of the point of interest to a location retrieval cloud.

[0251] Step S903: the vehicle-mounted terminal sends the type query request to the type retrieval cloud.

[0252] Step S904: the vehicle-mounted terminal sends a location query request to the location retrieval cloud.

[0253] Among them, step S903 and step S904 can be issued at the same time.

[0254] Wherein, if the type search cloud responds to the type query request first, step S905 is executed. If the location search cloud responds to the location query request first, step S906 is executed.

[0255] Step S905: The type retrieval cloud sends the retrieved data items that match the type of the point of interest to the location retrieval cloud.

[0256] Step S906: The location retrieval cloud sends the retrieved data items that match the location of the point of interest to the type retrieval cloud.

[0257] In some embodiments, the control order of the type search cloud and the location search cloud can be set in the backend code through synchronous calls. Exemplarily, the type search cloud processes the type query request first, and after the type search cloud sends the data items matching the type of the point of interest to the location search cloud, the location search cloud starts processing the location query request.

[0258] Step S907, the location retrieval cloud filters the data items matching the type of the point of interest to obtain target data items that meet the query location range, and feeds back the target data items to the vehicle terminal.

[0259] This application is different from the outsourcing cloud system architecture of vehicle location services in the current Internet of Vehicles system. It proposes an outsourcing system architecture based on two independent cloud platforms to enhance the privacy protection of sensitive information. Based on the dual-cloud system architecture, combined with secure multi-party computing and searchable encryption technology, type query and location range query are realized. While improving the query targeting, the computing burden is reduced, thereby improving the data retrieval efficiency of the outsourcing cloud.

[0260] This application designs a dual-cloud architecture to enhance the privacy protection capabilities of sensitive information. Based on SMPC and SSE technologies, it supports type query and range query, effectively improving query efficiency and reducing the computational burden on the vehicle side.

[0261] The solution proposed in this application can be applied to privacy protection in different location service scenarios. The data query solution can not only be combined with location services, but also be extended to the privacy protection issues of enterprise functions outsourced to the cloud.

[0262] The solution proposed in this application can also be combined with different encryption methods. For example, at different data query stages, it can be combined with the EIGamal encryption method to implement the data query solution that can achieve privacy protection as described in this application.

[0263] The solution of this application adopts a dual-cloud structure of the outsourced cloud. Sensitive information is stored separately on two non-collusive clouds to reduce the situation where the cloud has complete control over the outsourced data information. The main work and innovations of this application are as follows: 1) In the privacy protection scheme based on the dual-cloud architecture, the cloud includes two clouds, namely the type retrieval cloud and the location retrieval cloud. TRC and LRC are responsible for storing and retrieving type data and location data, respectively. This design can effectively protect the information contained in the database. 2) Since the sensitive information in the Internet of Vehicles query is processed by different clouds, the scheme has the ability to resist internal attacks while ensuring the confidentiality of outsourced data. 3) The scheme supports both type query and location query. Type retrieval can find encrypted data items of a specified type, so type query can significantly improve the retrieval capability of the outsourced cloud when processing query requests. Therefore, this application can effectively improve the pertinence of queries and reduce the computing burden on the cloud and vehicle sides.

[0264] The goal of this application is to design an efficient and secure vehicle network LBS query solution in the outsourcing cloud scenario. Therefore, the following goals must be achieved: 1) Security requirements guarantee, the confidentiality of data information and the privacy protection of vehicle query requests are prerequisites for realizing spatial range query in the outsourcing cloud scenario; 2) Ensure the data retrieval efficiency of the outsourcing cloud, for vehicle query requests, data retrieval should be carried out in a targeted manner, rather than retrieving all data in the vehicle query area every time.

[0265] The technical idea of ​​this application is: first, a dual-cloud architecture is proposed to enhance the privacy protection capability of sensitive information; second, based on SMPC and SSE technologies, it is able to support type queries and location range queries at the same time, thereby improving the query targeting and reducing the computational burden, thereby realizing a safe and efficient LBS query solution.

[0266] Based on the confidentiality of data and the security of vehicle query requests that can be obtained by this application, the following two security requirements need to be met: 1) Data storage security: The data information in the location service provider is very important. Therefore, when these data resources are outsourced to the cloud, the information in the outsourced data should also be kept confidential from the cloud. Even if the data resources are stored in the cloud, the cloud cannot directly access or decrypt these data information. At the same time, the cloud should have a certain ability to resist internal attacks. 2) Query request security: The query content in the vehicle query request, such as the query location and query content, are all sensitive data information. Therefore, in the process of processing the query, even if the cloud responds to the query and returns a response result, it is impossible to identify the above sensitive information from the query request, which can be achieved through data encryption, data desensitization, and data query.

[0267] In general, this application proposes a privacy protection solution based on a dual-cloud architecture for outsourced cloud vehicle network location range queries. This solution designs a dual-cloud architecture to enhance the privacy protection capabilities of vehicle query sensitive information. Based on SMPC and SSE technologies, the confidentiality of outsourced data is guaranteed, and the privacy of vehicle queries can be protected without leaking sensitive information to the cloud. It supports type queries and range queries, effectively improving query efficiency.

[0268] Fig.10 A schematic diagram of the structure of a data query device provided in an embodiment of the present application Figure 1 ,like Figure 8 As shown, the data query device 1000 includes: a first determination module 1001, a first sending module 1002 and a first receiving module 1003, wherein:

[0269] The first determination module 1001 is used to determine the keyword of the query operation, the location information of the vehicle terminal and the query location range of the query operation in response to the query operation of the user;

[0270] The first sending module 1002 is used to send a type query request carrying keywords to the type server, and send a location query request carrying location information of the vehicle-mounted terminal and a query location range to the location server;

[0271] The first receiving module 1003 is used to receive feedback information sent by the location server;

[0272] Among them, the type server is used to respond to the type query request, determine at least one data attribute information matching the keyword, and send at least one data attribute information to the location server; the location server is used to respond to the location query request, and determine feedback information based on at least one data attribute information, the query location range and the location information of the vehicle-mounted terminal.

[0273] In some embodiments, the data query device also includes: an encryption unit, used to encrypt the keyword based on a preset first key to obtain the encrypted keyword; a generation unit, used to generate signature information based on the private key of the vehicle terminal and the timestamp corresponding to the type query request.

[0274] In some embodiments, the first sending module 1002 further includes a sending unit, and the sending unit is used to send a type query request carrying encrypted keywords and signature information to the type server.

[0275] Among them, the type server is used to respond to the type query request and verify the signature information based on the public key of the vehicle-mounted terminal; if the verification is successful, at least one encrypted data attribute information is determined based on the encrypted keyword.

[0276] In some embodiments, the data query device also includes: a first decryption unit, used to decrypt the feedback information to obtain the encrypted target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal; a second decryption unit, used to decrypt the encrypted target data attribute information to obtain the target data attribute information.

[0277] The encrypted target data attribute information is determined based on the target data attribute information in at least one encrypted data attribute information; the target data attribute information is determined based on the distance information between each data attribute information and the vehicle-mounted terminal and the query location range.

[0278] Fig.11 A schematic diagram of the structure of a data query device provided in an embodiment of the present application Figure 2 ,like Fig.11 As shown, the data query device 1100 includes: a second receiving module 1101 and a second determining module 1102, wherein:

[0279] The second receiving module 1101 is used to receive a type query request sent by the vehicle terminal;

[0280] The second determination module 1102 is used to determine at least one piece of data attribute information matching the keyword in response to the type query request, and send the at least one piece of data attribute information to the location server.

[0281] Among them, the location server is used to receive a location query request carrying the location information of the vehicle-mounted terminal and the query location range sent by the vehicle-mounted terminal, and at least one data attribute information sent by the type server; in response to the location query request, feedback information is determined based on the data attribute information, the query location range and the location information of the vehicle-mounted terminal, and the feedback information is sent to the vehicle-mounted terminal.

[0282] In some embodiments, the type query request carries encrypted keywords and signature information; the signature information is generated based on the private key of the vehicle-mounted terminal and the timestamp corresponding to the type query request; the second determination module 1102 includes: a verification unit, used to verify the signature information based on the public key of the vehicle-mounted terminal; a determination unit, used to determine at least one encrypted data attribute information in the ciphertext database based on the encrypted keywords when the verification passes; the second determination module 1102 includes: a sending unit, used to send at least one encrypted data attribute information to the location server.

[0283] Fig.12 A schematic diagram of the structure of a data query device provided in an embodiment of the present application Figure 3 ,like Fig.12 As shown, the data query device 1200 includes: a third receiving module 1201, a third determining module 1202 and a second sending module 1203, wherein:

[0284] The third receiving module 1201 is used to receive the location information of the vehicle-mounted terminal and the location query request for querying the location range sent by the vehicle-mounted terminal, and at least one data attribute information sent by the type server;

[0285] The third determination module 1202 is used to determine feedback information based on at least one data attribute information, the query location range and the location information of the vehicle terminal in response to the location query request;

[0286] The second sending module is used to send the feedback information to the vehicle terminal.

[0287] In some embodiments, the third determination module 1202 includes: a first determination unit, used to determine the location information corresponding to each data attribute information in the location database based on at least one data attribute information; a second determination unit, used to determine the distance information between each data attribute information and the vehicle-mounted terminal based on the location information corresponding to each data attribute information and the location information of the vehicle-mounted terminal; a third determination unit, used to determine the target data attribute information in at least one data attribute information based on the distance information between each data attribute information and the vehicle-mounted terminal and the query location range; a fourth determination unit, used to determine the target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal as feedback information.

[0288] In some embodiments, the third receiving module 1201 includes a receiving unit for receiving at least one encrypted data attribute information sent by the type server.

[0289] In some embodiments, the data query device further includes: a fifth determination unit, configured to determine the encrypted target data attribute information in at least one encrypted data attribute information based on the target data attribute information.

[0290] In some embodiments, the fourth determination unit includes: an encryption unit, which is used to encrypt the encrypted target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal to obtain feedback information.

[0291] The description of the above device embodiment is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. In some embodiments, the functions or modules included in the device provided in the embodiment of the present application can be used to execute the method described in the above method embodiment. For technical details not disclosed in the device embodiment of the present application, please refer to the description of the method embodiment of the present application for understanding.

[0292] It should be noted that in the embodiment of the present application, if the above-mentioned data processing method is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the embodiment of the present application is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, which is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the methods of each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a U disk, a mobile hard disk, a read-only memory (ROM), a disk or an optical disk. In this way, the embodiment of the present application is not limited to any specific hardware, software or firmware, or any combination of hardware, software, and firmware.

[0293] An embodiment of the present application provides a computer device, including a memory and a processor, wherein the memory stores a computer program that can be run on the processor, and when the processor executes the program, some or all of the steps in the above method are implemented.

[0294] The embodiment of the present application provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, some or all of the steps in the above method are implemented. The computer-readable storage medium can be transient or non-transient.

[0295] An embodiment of the present application provides a computer program, including a computer-readable code. When the computer-readable code is run in a computer device, a processor in the computer device executes some or all of the steps for implementing the above method.

[0296] The embodiment of the present application provides a computer program product, which includes a non-transitory computer-readable storage medium storing a computer program, and when the computer program is read and executed by a computer, some or all of the steps in the above method are implemented. The computer program product can be implemented specifically by hardware, software or a combination thereof. In some embodiments, the computer program product is specifically embodied as a computer storage medium, and in other embodiments, the computer program product is specifically embodied as a software product, such as a software development kit (SDK) and the like.

[0297] It should be noted here that the description of the various embodiments above tends to emphasize the differences between the various embodiments, and the same or similar aspects can be referenced to each other. The description of the above device, storage medium, computer program and computer program product embodiments is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. For technical details not disclosed in the embodiments of the device, storage medium, computer program and computer program product of this application, please refer to the description of the method embodiment of this application for understanding.

[0298] Fig.13 A schematic diagram of the structure of a computer device provided in an embodiment of the present application is shown in FIG. Fig.13 As shown, the computer device 1300 includes: a memory 1301 and a processor 1302; wherein the memory 1301 stores a computer program that can be run on the processor 1302; when the processor 1302 executes the computer program, the data query method provided in the above embodiment is implemented.

[0299] The memory 1301 stores a computer program that can be run on the processor. The memory 1301 is configured to store instructions and applications executable by the processor 1302. It can also cache data to be processed or processed by the processor 1302 and each module in the control device 1300 (for example, image data, audio data, voice communication data, and video communication data). This can be achieved through flash memory (FLASH) or random access memory (Random Access Memory, RAM).

[0300] When the processor 1302 executes the program, the steps of any of the above control methods are implemented. The processor 1302 generally controls the overall operation of the computer device 1300.

[0301] An embodiment of the present application provides a computer storage medium, which stores one or more programs. The one or more programs can be executed by one or more processors to implement the steps of the data query method of any of the above embodiments.

[0302] It should be noted here that the description of the above storage medium and device embodiments is similar to the description of the above method embodiments, and has similar beneficial effects as the method embodiments. For technical details not disclosed in the storage medium and device embodiments of this application, please refer to the description of the method embodiments of this application for understanding.

[0303] The processor may be at least one of an Application Specific Integrated Circuit (ASIC), a Digital Signal Processor (DSP), a Digital Signal Processing Device (DSPD), a Programmable Logic Device (PLD), a Field Programmable Gate Array (FPGA), a Central Processing Unit (CPU), a controller, a microcontroller, and a microprocessor. It is understandable that the electronic device that implements the functions of the processor may also be other, and the embodiments of the present application are not specifically limited.

[0304] The above-mentioned computer storage medium / memory can be a read-only memory, a programmable read-only memory (Programmable Read-Only Memory, PROM), an erasable programmable read-only memory (Erasable Programmable Read-Only Memory, EPROM), an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), a magnetic random access memory (Ferromagnetic Random Access Memory, FRAM), a flash memory (Flash Memory), a magnetic surface memory, an optical disk, or a compact disc read-only memory (CD-ROM) and other memories; it can also be various terminals including one or any combination of the above-mentioned memories, such as mobile phones, computers, tablet devices, personal digital assistants, etc.

[0305] It should be understood that "one embodiment" or "an embodiment" mentioned throughout the specification means that specific features, structures or characteristics related to the embodiment are included in at least one embodiment of the present application. Therefore, "in one embodiment" or "in an embodiment" appearing throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It should be understood that in various embodiments of the present application, the size of the serial number of each step / process mentioned above does not mean the order of execution, and the execution order of each step / process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiment of the present application. The serial numbers of the embodiments of the present application mentioned above are for description only and do not represent the advantages and disadvantages of the embodiments.

[0306] It should be noted that, in this article, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the sentence "comprises a ..." does not exclude the existence of other identical elements in the process, method, article or device including the element.

[0307] The above is only an implementation method of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application.

Claims

1. A data query method, characterized in that: Applied to a vehicle-mounted terminal, the data query method includes: In response to a query operation by a user, determining a keyword of the query operation, location information of the vehicle-mounted terminal, and a query location range of the query operation; Sending a type query request carrying the keyword to a type server, and sending a location query request carrying the location information of the vehicle-mounted terminal and the query location range to a location server; receiving feedback information sent by the location server; Among them, the type server is used to respond to the type query request, determine at least one data attribute information matching the keyword, and send the at least one data attribute information to the location server; the location server is used to respond to the location query request, determine the feedback information based on the at least one data attribute information, the query location range and the location information of the vehicle-mounted terminal.

2. The data query method according to claim 1, characterized in that: The method further comprises: Encrypting the keyword based on a preset first key to obtain an encrypted keyword; Generate signature information based on the private key of the vehicle-mounted terminal and the timestamp corresponding to the type query request; The sending a type query request carrying the keyword to the type server includes: Sending a type query request carrying the encrypted keyword and signature information to the type server; The type server is used to verify the signature information based on the public key of the vehicle-mounted terminal in response to the type query request; if the verification is successful, at least one encrypted data attribute information is determined based on the encrypted keyword.

3. The data query method according to claim 2, characterized in that: The method further comprises: Decrypting the feedback information to obtain encrypted target data attribute information and distance information between the target data attribute information and the vehicle-mounted terminal; Decrypting the encrypted target data attribute information to obtain the target data attribute information; Among them, the encrypted target data attribute information is based on the target data attribute information and is determined in the at least one encrypted data attribute information; the target data attribute information is determined based on the distance information between each of the data attribute information and the vehicle-mounted terminal and the query location range.

4. A data query method, characterized in that: Applied to the type server, the data query method includes: receiving a type query request sent by a vehicle-mounted terminal; the type query request carries a keyword of a query operation of a user of the vehicle-mounted terminal; In response to the type query request, determining at least one piece of data attribute information matching the keyword, and sending the at least one piece of data attribute information to a location server; Among them, the location server is used to receive a location query request sent by the vehicle-mounted terminal carrying the location information of the vehicle-mounted terminal, the query location range, and the at least one data attribute information sent by the type server; in response to the location query request, determine feedback information based on the data attribute information, the query location range and the location information of the vehicle-mounted terminal, and send the feedback information to the vehicle-mounted terminal.

5. The data query method according to claim 4, characterized in that: The type query request carries an encrypted keyword and signature information; the signature information is generated based on the private key of the vehicle-mounted terminal and a timestamp corresponding to the type query request; The determining of at least one piece of data attribute information matching the keyword includes: Verifying the signature information based on the public key of the vehicle-mounted terminal; If the verification is successful, determining at least one encrypted data attribute information in the ciphertext database based on the encrypted keyword; The sending the at least one data attribute information to the location server comprises: The at least one encrypted data attribute information is sent to a location server.

6. A data query method, characterized in that: Applied to a location server, the data query method includes: Receiving a location query request sent by a vehicle-mounted terminal and carrying location information of the vehicle-mounted terminal and a query location range, and at least one piece of data attribute information sent by a type server; the at least one piece of data attribute information is determined based on a keyword; the query location range, the location information, and the keyword are determined based on a query operation of a user of the vehicle-mounted terminal; In response to the location query request, determining feedback information based on the at least one data attribute information, the query location range, and the location information of the vehicle-mounted terminal; The feedback information is sent to the vehicle-mounted terminal.

7. The data query method according to claim 6, characterized in that: in, The determining the feedback information based on the at least one data attribute information, the query location range, and the location information of the vehicle-mounted terminal includes: Based on the at least one data attribute information, determining, in a location database, location information corresponding to each data attribute information; Based on the location information corresponding to each piece of data attribute information and the location information of the vehicle-mounted terminal, determining the distance information between each piece of data attribute information and the vehicle-mounted terminal; Determine target data attribute information in the at least one data attribute information based on the distance information between each data attribute information and the vehicle-mounted terminal and the query location range; The target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal are determined as the feedback information.

8. The data query method according to claim 7, characterized in that: At least one data attribute information sent by the receiving type server includes: receiving at least one encrypted data attribute information sent by the type server; The method further comprises: Based on the target data attribute information, determining the encrypted target data attribute information in the at least one encrypted data attribute information; The step of determining the target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal as the feedback information includes: The encrypted target data attribute information and the distance information between the target data attribute information and the vehicle-mounted terminal are encrypted to obtain the feedback information.

9. A data query device, characterized in that: Applied to a vehicle-mounted terminal, the data query device comprises: A first determination module, configured to determine, in response to a user's query operation, a keyword of the query operation, location information of the vehicle-mounted terminal, and a query location range of the query operation; A first sending module is used to send a type query request carrying the keyword to a type server, and send a location query request carrying the location information of the vehicle-mounted terminal and the query location range to a location server; A first receiving module, used to receive feedback information sent by the location server; Among them, the type server is used to respond to the type query request, determine at least one data attribute information matching the keyword, and send the at least one data attribute information to the location server; the location server is used to respond to the location query request, determine the feedback information based on the at least one data attribute information, the query location range and the location information of the vehicle-mounted terminal.

10. A data query device, characterized in that: Applied to a type server, the data query device comprises: The second receiving module is used to receive a type query request sent by the vehicle-mounted terminal; the type query request carries a keyword of a query operation of a user of the vehicle-mounted terminal; A second determination module, configured to determine at least one piece of data attribute information matching the keyword in response to the type query request, and send the at least one piece of data attribute information to a location server; Among them, the location server is used to receive a location query request sent by the vehicle-mounted terminal carrying the location information of the vehicle-mounted terminal, the query location range, and the at least one data attribute information sent by the type server; in response to the location query request, determine feedback information based on the data attribute information, the query location range and the location information of the vehicle-mounted terminal, and send the feedback information to the vehicle-mounted terminal.

11. A data query device, characterized in that: Applied to a location server, the data query device comprises: A third receiving module is used to receive a location query request sent by the vehicle terminal and carrying the location information of the vehicle terminal and the query location range, and at least one piece of data attribute information sent by the type server; the at least one piece of data attribute information is determined based on a keyword; the query location range, the location information, and the keyword are determined based on a query operation of a user of the vehicle terminal; A third determination module, configured to determine feedback information in response to the location query request based on the at least one data attribute information, the query location range, and the location information of the vehicle-mounted terminal; The second sending module is used to send the feedback information to the vehicle-mounted terminal.

12. A computer device, wherein: include: A memory for storing executable instructions; A processor, configured to implement the method of any one of claims 1 to 3, the method of claim 4 or 5, or the method of any one of claims 6 to 8 when executing the executable instructions stored in the memory.

13. A computer-readable storage medium, wherein: The storage medium stores executable instructions, which, when executed by a processor, implement the method described in any one of claims 1 to 3, the method described in claim 4 or 5, or the method described in any one of claims 6 to 8.

14. A computer program product comprising a computer program or instructions, wherein: When the computer program or instruction is executed by a processor, the method described in any one of claims 1 to 3, the method described in claim 4 or 5, or the method described in any one of claims 6 to 8 is implemented.