Data processing system, method and device

Abstract

The invention provides a data processing system, method and device which are used for adjusting a desensitization processing rule of spatio-temporal information so as to meet the supervision requirement of a data supervision mechanism on the spatio-temporal information. The data processing system comprises a first module deployed on a vehicle and a second module deployed on a server. The first module can perform desensitization processing on the first spatio-temporal information based on a conventional desensitization processing rule; the second module can determine the occurrence of an emergency event and send first indication information to the first module, and the first indication information is used for indicating a first special desensitization processing rule set; the first module receives the first indication information, and in response to the first indication information, desensitization processing on the first spatio-temporal information based on a conventional desensitization processing rule is changed into desensitization processing on the second spatio-temporal information based on a first special desensitization processing rule set.

Description

Technical Field

[0001] This application relates to the field of data production in the surveying and mapping and geographic information industries, and particularly to a data processing system, method, and device. Background Art

[0002] The geographic information generated and used by intelligent connected vehicles (ICVs) is collectively referred to as ICV spatio-temporal information, which includes time information and space information. For example, ICV spatio-temporal information may include coordinate data, sensor data, mapping data, map product data of a vehicle at a specific time, and derivative and combined data of the foregoing several types.

[0003] According to legal regulations, spatio-temporal information should be desensitized and reviewed by a regulatory agency before it can be used in compliance. However, the current desensitization process of ICV spatio-temporal information usually adopts fixed data desensitization rules, which are difficult to meet the diverse application and regulatory requirements of ICV spatio-temporal information. Summary of the Invention

[0004] This application provides a data processing system, method, and device for adjusting the desensitization rules of spatio-temporal information to meet the diverse regulatory requirements of data regulatory agencies for spatio-temporal information.

[0005] In a first aspect, an embodiment of this application provides a data processing system, which includes a first module deployed on a vehicle and a second module deployed on a server; the first module is used to desensitize first spatio-temporal information based on conventional desensitization rules; the second module is used to determine that an emergency event occurs and send first indication information to the first module, and the first indication information is used to indicate a first set of special desensitization rules; the first module is further used to receive the first indication information; and in response to the first indication information, change the desensitization of the first spatio-temporal information based on the conventional desensitization rules to the desensitization of second spatio-temporal information based on the first set of special desensitization rules.

[0006] Among them, the specific implementation object of the data processing system can be a mapping company, and the first module and the second module can run map software associated with the mapping company to implement the data processing function of the data processing system.

[0007] In the embodiment of this application, "first spatio-temporal information" can be understood as the spatio-temporal information before the occurrence of an emergency event; "second spatio-temporal information" can be understood as the spatio-temporal information after the occurrence of an emergency event. "Desensitization rules" can be understood as at least one of data collection rules, data processing rules, or data transmission rules.

[0008] In an embodiment of the present application, when the first indication information indicates the first special desensitization processing rule set, the first indication information may include the first special desensitization processing rule set; alternatively, the first desensitization processing rule set may be pre-configured by the second module for the first module, and the first indication information does not include the first special desensitization processing rule set.

[0009] In an embodiment of the present application, considering that the mapping merchant uses fixed data desensitization processing rules for the desensitization processing of ICV spatio-temporal information, it is difficult to meet the diverse application and supervision requirements of ICV spatio-temporal information. A data processing system is provided. After determining the occurrence of an emergency event, the second module in the data processing system can indicate the first special desensitization processing rule set to the first module in the data processing system, so that the first module can desensitize the second spatio-temporal information based on the first special desensitization processing rule set. In this way, the desensitization processing rules are flexibly adjusted based on the emergency event, so that the desensitization processing of the spatio-temporal information (i.e., the second spatio-temporal information) collected by the vehicle after the emergency event meets the supervision requirements of the regulatory agency.

[0010] In a possible design, the second module is used to determine the occurrence of an emergency event, including: the second module is used to receive a request message from the first module, and the request message is used to request an adjustment of the desensitization processing rules for the emergency event; determining the occurrence of the emergency event according to the request message; and / or, the second module is used to receive a notification message from the regulatory agency, and the notification message is used to indicate a change in the supervision rules; determining the occurrence of the emergency event according to the notification message. In this design, both the first module deployed in the vehicle and the regulatory agency can trigger the process of adjusting the desensitization processing rules of the spatio-temporal information, so that the desensitization processing rules of the spatio-temporal information can be flexibly adjusted.

[0011] In a possible design, the above-mentioned emergency event may include at least one of a collision event, a takeover event, an active safety event, a system exception event, an event of violating traffic regulations, or an event that does not meet the first condition; wherein, the first condition includes that the distance between the vehicle and people and / or objects on the road surface is less than a safety threshold, and / or, the driving parameters of the vehicle are greater than a preset value. Among them, the objects on the road surface may include other vehicles (i.e., traffic participants), obstacles, road facilities (such as guardrails), etc. in the road surface, and the embodiments of the present application do not make specific limitations. The driving parameters of the vehicle may include at least one of the longitudinal / lateral acceleration, longitudinal / lateral acceleration change rate, absolute value of curvature, or absolute value of curvature change rate of the vehicle.

[0012] In this design, multiple types of emergency events are provided, thereby expanding the applicable scenarios for the data processing system to flexibly adjust the desensitization processing rules.

[0013] In a possible design, the first module may also send the second spatio-temporal information after desensitization processing to the second module; correspondingly, the second module is further configured to receive the second spatio-temporal information after desensitization processing; furthermore, the second module may further use the second spatio-temporal information after desensitization processing for service processing; or, the second module may further perform secondary desensitization processing on the second spatio-temporal information after desensitization processing using the second special desensitization processing rule set to obtain the second spatio-temporal information after secondary desensitization processing; and when the sensitivity level of the second spatio-temporal information after secondary desensitization processing meets the requirements, send the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer or supplier.

[0014] In this design, the first module and the second module in the data processing system can directly use the second spatio-temporal information after desensitization processing for service processing; or, the second module can perform secondary desensitization processing on the second spatio-temporal information after desensitization processing, and when the sensitivity level of the second spatio-temporal information after secondary desensitization processing meets the requirements, send the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer or supplier, so as to meet the regulatory requirements of the regulatory agency for the use of spatio-temporal information in the public network environment (i.e., the use environment of the original equipment manufacturer or supplier).

[0015] In a possible design, the first special desensitization processing rule set or the second special desensitization processing rule set includes at least one of the following: the geographical range allowed for single collection of various types of data in spatio-temporal information, the geographical range allowed for single processing of various types of data in spatio-temporal information, the frame extraction density of sensor data in spatio-temporal information, the image processing method of sensor data in spatio-temporal information, the thinning density of coordinate data in spatio-temporal information, the AOI screening method for the region of interest of composition data in spatio-temporal information, the semantic processing method of composition data in spatio-temporal information, the geographical range allowed for single transmission of various types of data in spatio-temporal information, and the transmission method allowed for various types of data in spatio-temporal information. In this design, multiple implementation methods of the first special desensitization processing rule set are provided, and thus the second module in the data processing system can have a high degree of flexibility in adjusting the desensitization processing rules for spatio-temporal information.

[0016] Optionally, the first special desensitization processing rule set and the second special desensitization processing rule set are determined according to at least one of the data processing capabilities of the vehicle, the transmission requirements of spatio-temporal information, the acquisition requirements of spatio-temporal information, and the application scenarios of spatio-temporal information. In this design, the first special desensitization processing rule set and the second special desensitization processing rule set can be flexibly adjusted according to actual needs.

[0017] In the embodiments of the present application, the specific indicators corresponding to the conventional desensitization processing rules are different from the specific indicators corresponding to the special desensitization processing rules. For example, the conventional desensitization processing rule is that the geographical range corresponding to various types of data in the spatio-temporal information allowed to be collected once is X square kilometers, and the special desensitization processing rule is that the geographical range corresponding to various types of data in the spatio-temporal information allowed to be collected once is Y square kilometers.

[0018] In a possible design, the first set of special desensitization processing rules is a plurality of special desensitization processing rules; the first module is further configured to: determine a target desensitization processing rule from the first set of special desensitization processing rules according to the sensitivity level of the second spatio-temporal information; perform desensitization processing on the second spatio-temporal information based on the first set of special desensitization processing rules, including: performing desensitization processing on the second spatio-temporal information based on the target desensitization processing rule. In this design, the first module can also combine the sensitivity level of the spatio-temporal information to select a target desensitization processing rule in the first set of special desensitization processing rules for execution, which can reduce the situation where the first module executes invalid desensitization processing rules, and thus effectively save the computing resources of the first module.

[0019] In a possible design, the above sensitivity level can be determined according to at least one of the following indicators: the collection frequency, collection interval period, data type, coordinate system, geographical range, or spatial distribution of various types of data in the spatio-temporal information, the indicators of the sensor data in the spatio-temporal information, the indicators of the composition data in the spatio-temporal information, or the indicators of the coordinate data in the spatio-temporal information. In this design, multiple indicators for determining the sensitivity level of the spatio-temporal information are provided, enabling the sensitivity level of the spatio-temporal information to be flexibly defined.

[0020] In a possible design, the second module is further configured to send second indication information to the first module, where the second indication information is used to indicate the conventional desensitization processing rule; the first module is further configured to receive the second indication information; and in response to the second indication information, change the desensitization processing of the second spatio-temporal information based on the first set of special desensitization processing rules to the desensitization processing of the third spatio-temporal information based on the conventional desensitization processing rule. Herein, the "second spatio-temporal information" can be understood as the spatio-temporal information after the end of an emergency event. In this design, when the first module does not need to use the special desensitization processing rule (for example, after the second module receives the second spatio-temporal information for desensitization processing from the first module), the rule for desensitizing the current spatio-temporal information (i.e., the third spatio-temporal information) can also be replaced with the conventional desensitization processing rule, making the desensitization processing rule used by the entire data processing system more reasonable.

[0021] In a possible design, the second module may also obtain the data processing capability of the vehicle; and determine that the data processing capability of the vehicle matches the first set of special desensitization processing rules. In this design, after the second module determines that the data processing capability of the vehicle matches the first set of special desensitization processing rules, it then instructs the first module deployed in the vehicle about the first set of special desensitization processing rules, so that the first module can normally execute the first set of special desensitization processing rules.

[0022] In a possible design, the second module may also determine that the emergency event meets a preset condition based on at least one of the severity of the emergency event, the sensor data of the emergency event, or the historical data of the vehicle. Herein, "the emergency event meets a preset condition" can be understood as that the authenticity and rationality of the emergency event meet the requirements. In this design, the second module can verify the authenticity and rationality of the emergency event. When it determines that the emergency event meets the preset condition, it then instructs the first module deployed in the vehicle about the first set of special desensitization processing rules, so that the adjustment of the desensitization processing rules for the emergency event by the second module conforms to the actual requirements.

[0023] In a second aspect, an embodiment of the present application provides a data processing method, which can be applied to a vehicle or a component deployed in a vehicle. The method includes: performing desensitization processing on first spatio-temporal information based on conventional desensitization processing rules; receiving first indication information for indicating a first set of special desensitization processing rules; and in response to the first indication information, changing the desensitization processing of the first spatio-temporal information based on the conventional desensitization processing rules to desensitize the second spatio-temporal information based on the first set of special desensitization processing rules.

[0024] In a possible design, the method further includes: sending a request message to a server, where the request message is used to request an adjustment of the desensitization processing rules for an emergency event.

[0025] In a possible design, the emergency event includes at least one of the following: a collision event, a takeover event, an active safety event, a system exception event, an event of violating traffic regulations, or an event that does not meet a first condition; wherein the first condition includes that the distance between the vehicle and people and / or objects on the road surface is less than a safety threshold, and / or the driving parameters of the vehicle are greater than a preset value.

[0026] In a possible design, the first set of special desensitization processing rules includes at least one of the following: the geographical range corresponding to various types of data in the spatio-temporal information allowed for single acquisition, the geographical range corresponding to various types of data in the spatio-temporal information allowed for single processing, the frame extraction density of the sensor data in the spatio-temporal information, the image processing method of the sensor data in the spatio-temporal information, the thinning density of the coordinate data in the spatio-temporal information, the method for screening the region of interest (AOI) of the composition data in the spatio-temporal information, the semantic processing method of the composition data in the spatio-temporal information, the geographical range corresponding to the single transmission of various types of data in the spatio-temporal information, and the transmission method of various types of data in the spatio-temporal information.

[0027] In a possible design, the first set of special desensitization processing rules is a plurality of special desensitization processing rules; the method further includes: determining a target desensitization processing rule from the first set of special desensitization processing rules according to the sensitivity level of the second spatio-temporal information; and performing desensitization processing on the second spatio-temporal information based on the first set of special desensitization processing rules, including: performing desensitization processing on the second spatio-temporal information according to the target desensitization processing rule to obtain the second spatio-temporal information after the first desensitization processing.

[0028] In a possible design, the sensitivity level is determined according to at least one of the following indicators: the acquisition frequency, acquisition interval period, data type, coordinate system, geographical range, or spatial distribution of various types of data in the spatio-temporal information, the indicators of the sensor data in the spatio-temporal information, the indicators of the composition data in the spatio-temporal information, or the indicators of the coordinate data in the spatio-temporal information.

[0029] In a possible design, the method further includes: receiving second indication information from the server, where the second indication information is used to indicate the conventional desensitization processing rules; and in response to the second indication information, changing the desensitization processing of the second spatio-temporal information based on the first set of special desensitization processing rules to the desensitization processing of the third spatio-temporal information based on the conventional desensitization processing rules.

[0030] In a third aspect, an embodiment of the present application provides a data processing method, which can be applied to a server or a component deployed in the server. The method includes: determining that an emergency event occurs; and sending first indication information to a vehicle, where the first indication information is used to indicate a first set of special desensitization processing rules.

[0031] In a possible design, determining that an emergency event occurs includes: receiving a request message from a vehicle, where the request message is used to request an adjustment of the desensitization processing rules for the emergency event; determining that the emergency event occurs according to the request message; and / or receiving a notification message from a regulatory agency, where the notification message is used to indicate a change in the regulatory rules; and determining that the emergency event occurs according to the notification message.

[0032] In a possible design, the emergency event includes at least one of a collision event of the vehicle, a takeover event, an active safety event, a system exception event, an event of violating traffic regulations, or an event not meeting the first condition; wherein, the first condition includes that the distance between the vehicle and people and / or objects on the road surface is less than a safety threshold, and / or, the driving parameter of the vehicle is greater than a preset value.

[0033] In a possible design, the method further includes: receiving the second spatio-temporal information after desensitization processing from the vehicle; performing service processing using the second spatio-temporal information after desensitization processing; or, performing secondary desensitization processing on the second spatio-temporal information after desensitization processing using a second set of special desensitization processing rules to obtain the second spatio-temporal information after secondary desensitization processing; when the sensitivity level of the second spatio-temporal information after secondary desensitization processing meets the requirements, sending the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer or supplier.

[0034] In a possible design, the first set of special desensitization processing rules or the second set of special desensitization processing rules includes at least one of the following: the geographical range allowed for single-time collection of various types of data in spatio-temporal information, the geographical range allowed for single-time processing of various types of data in spatio-temporal information, the frame extraction density of sensor data in spatio-temporal information, the image processing method of sensor data in spatio-temporal information, the thinning density of coordinate data in spatio-temporal information, the method for screening the region of interest AOI of composition data in spatio-temporal information, the semantic processing method of composition data in spatio-temporal information, the geographical range allowed for single-time transmission of various types of data in spatio-temporal information, and the transmission method allowed for various types of data in spatio-temporal information.

[0035] In a possible design, the first set of special desensitization processing rules and the second set of special desensitization processing rules are determined according to at least one of the data processing capability of the vehicle, the transmission requirements of spatio-temporal information, the acquisition requirements of spatio-temporal information, and the application scenario of spatio-temporal information.

[0036] In a possible design, the sensitivity level is determined according to at least one of the following indicators: the acquisition frequency, acquisition interval period, data type, coordinate system, geographical range, or spatial distribution of various types of data in spatio-temporal information, the indicators of sensor data in spatio-temporal information, the indicators of composition data in spatio-temporal information, or the indicators of coordinate data in spatio-temporal information.

[0037] In a possible design, the method further includes: obtaining the data processing capability of the vehicle; determining that the data processing capability of the vehicle matches the first set of special desensitization processing rules.

[0038] In a possible design, before sending the first indication information to the vehicle, the method further includes: determining that the emergency event meets a preset condition according to at least one of the severity of the emergency event, the sensor data of the emergency event, or the historical data of the vehicle.

[0039] Fourthly, an embodiment of the present application provides a data processing device, which may include corresponding means or modules for executing the corresponding aspects or any optional implementation manners of the above second aspect. Alternatively, the data processing device may include corresponding means or modules for executing the corresponding aspects or any optional implementation manners of the above third aspect.

[0040] Fifthly, an embodiment of the present application provides a computing device, including: a processor, the processor is coupled with a memory, and the memory is used for storing instructions. When the instructions are executed by the processor, the data processing device is enabled to execute the method described in the second aspect and any optional design of the second aspect, or execute the method described in the third aspect and any optional design of the third aspect.

[0041] Sixthly, an embodiment of the present application provides a chip system, which includes: a processor and an interface. Wherein, the processor is used to call and run instructions from the interface. When the processor executes the instructions, the method described in the second aspect and any optional design of the second aspect is implemented, or the method described in the third aspect and any optional design of the third aspect is implemented.

[0042] Seventhly, an embodiment of the present application provides a computer-readable storage medium, which is used for storing computer programs or instructions. When it runs, the method described in the second aspect and any optional design of the second aspect is implemented, or the method described in the third aspect and any optional design of the third aspect is implemented.

[0043] Eighthly, an embodiment of the present application provides a computer program product containing instructions. When it runs on a computer, the method described in the second aspect and any optional design of the second aspect is implemented, or the method described in the third aspect and any optional design of the third aspect is implemented.

[0044] Regarding the beneficial effects of any of the technical solutions in the above second aspect to the eighth aspect, reference may be made to the beneficial effects of the corresponding technical solutions in the first aspect, and the repeated parts are not listed here. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] Figure 1 is a schematic architecture diagram of a data processing system provided by the present application;

[0046] Figure 2 One of the flow diagrams of the data processing method provided by this application;

[0047] Figure 3 Another flow diagram of the data processing method provided by this application;

[0048] Figure 4A Another flow diagram of the data processing method provided by this application;

[0049] Figure 4B Another flow diagram of the data processing method provided by this application;

[0050] Figure 5 Structural diagram of a data processing device provided by this application;

[0051] Figure 6 Structural diagram of a chip system provided by this application. Detailed implementation manners

[0052] To make the objectives, technical solutions, and advantages of the embodiments of this application clearer, the embodiments of this application will be further described in detail below with reference to the accompanying drawings. Among them, in the description of the embodiments of this application, hereinafter, the terms "first" and "second" are only used for descriptive purposes and cannot be construed as indicating or implying relative importance or implicitly specifying the quantity of the indicated technical features. Thus, the features defined with "first" and "second" may explicitly or implicitly include one or more of such features.

[0053] For ease of understanding, illustrative descriptions of concepts related to this application are given for reference.

[0054] 1) Spatiotemporal information. The geographical information generated and used by intelligent connected vehicles (ICVs) is collectively referred to as ICV spatiotemporal information, and ICV spatiotemporal information includes time information and space information. For example, ICV spatiotemporal information may include coordinate data of vehicles, sensor data, mapping data, map product data, and derivative and combined data of the foregoing categories. Among them, coordinate data is a set of ordered numerical values used to accurately represent the position of a point in space. Sensor data can be understood as the data collected by sensors. Sensor data may be, for example, image data and / or video data collected by in-vehicle cameras, point cloud data collected by in-vehicle radars, temperature data collected by in-vehicle temperature sensors, etc. Mapping data can be understood as various geographical space and attribute information sets that can visually display geographical environments, natural resources, and socioeconomic phenomena after being collected and processed.

[0055] 2) The desensitization processing rules may include at least one of the data collection rules, data processing rules, or data transmission rules for spatio-temporal information. Among them, the data collection rule may be, for example, the geographical range allowing the collection of various types of data in spatio-temporal information in a single collection. The data processing rule may be, for example, the geographical range allowing the processing of various types of data in spatio-temporal information in a single processing, the frame extraction density of sensor data, the image processing method of sensor data, the thinning density of coordinate data, the method of screening the area of interest AOI of composition data, or the semantic processing method of composition data. The data transmission rule may be, for example, the geographical range allowing the single transmission of various types of data in spatio-temporal information, the transmission method of various types of data in spatio-temporal information.

[0056] In the embodiments of the present application, the specific indicators corresponding to the conventional desensitization processing rules are different from the specific indicators corresponding to the special desensitization processing rules. Exemplarily, as shown in Table 1, for the coordinate data in spatio-temporal information, the conventional desensitization processing rule is that the density of reported coordinate data does not exceed X points / km, and the special desensitization processing rule is that the density of reported coordinate data does not exceed Y points / km; for the sensor data in spatio-temporal information, the conventional desensitization processing rule is that the frame extraction density of reported sensor data does not exceed X frames / second, and the special desensitization processing rule is that the frame extraction density of reported sensor data does not exceed Y frames / second; for the sensor data and composition data in spatio-temporal information, the conventional desensitization processing rule is that the area of single reporting or single processing of sensor data and composition data does not exceed X square kilometers, and the special desensitization processing rule is that the area of single reporting or single processing of sensor data and composition data does not exceed Y square kilometers; for the sensor data in spatio-temporal information, the conventional desensitization processing rule is that the image processing method of sensor data is frame-by-frame deletion, occlusion of sensitive objects, or replacement of sensitive objects, and the special desensitization processing rule is that the image processing method may not be performed; for the highly sensitive data (such as point cloud) in spatio-temporal information, the conventional desensitization processing rule is that wireless transmission is not allowed, and the special desensitization processing rule is that the area allowed for single upload does not exceed X square kilometers; for the composition data in spatio-temporal information, the conventional desensitization processing rule is that sensitive word deletion processing must be performed based on a sensitive word library and the AOI area screening must be within the road surface, and the special desensitization processing rule is that sensitive word deletion processing is allowed not to be performed and AOI area screening is allowed not to be performed.

[0057] Table 1

[0058]

[0059]

[0060] It should be understood that the general desensitization processing rules and special desensitization processing rules in Table 1 are only examples and can be changed dynamically. The interaction between the vehicle and the server can realize the dynamic update of the general desensitization processing rules and special desensitization processing rules, and can also be upgraded through OTA.

[0061] 3) Sensor data framing refers to the process of reducing the amount of data by retaining only representative data points from the large amount of continuously collected or transmitted raw sensor data using specific algorithms or strategies. In some application scenarios, sensors may collect data at a high frequency, but this high-frequency data often contains a large amount of redundant information, especially when it changes slowly. Data framing technology can reduce the pressure on data processing and storage, while improving the efficiency of subsequent analysis, transmission, and display.

[0062] 4) Coordinate data thinning is a technique used in geographic information systems and spatial data analysis to reduce the number of densely distributed geographic coordinate points while preserving the original geographic features and shapes as much as possible. The thinning process is typically based on certain rules or algorithms to determine which coordinate points can be safely removed or merged. These rules can be based on distance thresholds, angle changes, curvature analysis, or more complex spatial interpolation methods. Through thinning, data storage requirements can be reduced, data processing efficiency can be improved, graphics rendering performance can be optimized, and subsequent data analysis and presentation can be facilitated without affecting the actual representation of geographic information.

[0063] 5) Vehicle driving parameters, which can be understood as various parameters of vehicle driving. Vehicle driving parameters can include, for example, at least one of the vehicle's longitudinal / lateral acceleration, longitudinal / lateral acceleration change rate, curvature absolute value, or curvature change rate absolute value.

[0064] The Curvature Rate of Change (CRC) refers to how quickly the curvature changes with the length of the curve as a vehicle negotiates it, or the amount of curvature change per unit arc length. In track engineering, highway design, and the automotive industry, this parameter is crucial for describing the continuity and comfort of road or track curves. If a curve initially has a large radius (smaller curvature) and then quickly changes to a smaller radius (larger curvature), the curvature rate of change of this curve is high. When high-speed vehicles pass through sections of road with a high curvature rate of change, passengers experience a greater sense of centrifugal force, which has a direct impact on driving safety and comfort. Therefore, excessive curvature rates of change are limited during design. In track inspection or highway design specifications, the curvature rate of change is usually measured and limited according to certain standards to ensure that trains or cars can negotiate curves smoothly and safely.

[0065] It should be understood that in the embodiments of the present application, "at least one" means one or more, and "a plurality" means two or more. "And / or" describes the association relationship of associated objects and indicates that there can be three relationships. For example, A and / or B can represent the situations of existing A alone, existing A and B simultaneously, and existing B alone, where A and B can be singular or plural. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of a single item or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, a and b, a and c, b and c, or a, b, and c, where a, b, and c can be single or plural.

[0066] In addition, unless otherwise specified, the ordinal numbers such as "first" and "second" mentioned in the embodiments of the present application are used to distinguish multiple objects and are not used to limit the priority or importance of multiple objects. For example, the first set of special desensitization processing rules and the second set of special desensitization processing rules are only used to distinguish different sets of special desensitization processing rules, rather than indicating differences in the priority or importance of these two sets of special desensitization processing rules.

[0067] In view of the fact that the mapping merchant uses fixed data desensitization processing rules for desensitizing the spatio-temporal information of ICV, it is difficult to meet the diverse application and supervision requirements of ICV spatio-temporal information. A data processing system is provided. After the second module in the data processing system determines that an emergency event occurs, it can indicate the first set of special desensitization processing rules to the first module in the data processing system, so that the first module can desensitize the second spatio-temporal information based on the first set of special desensitization processing rules. In this way, the desensitization processing rules are flexibly adjusted based on the emergency event, so that the desensitization processing of the spatio-temporal information (i.e., the second spatio-temporal information) collected by the vehicle after the emergency event occurs meets the supervision requirements of the regulatory agency for the emergency event.

[0068] The data processing system in the embodiments of the present application can be applied to the vehicle networking, such as vehicle to everything (V2X), long term evolution-vehicle (LTE-V), vehicle to vehicle (V2V), etc. For example, it can be applied to vehicles with data processing functions, or other devices with data processing functions in vehicles. The other devices include but are not limited to: in-vehicle terminals, in-vehicle controllers, in-vehicle modules, in-vehicle component modules, in-vehicle components, in-vehicle chips, in-vehicle units, in-vehicle radars, or other sensors such as in-vehicle cameras. The vehicle can implement the data processing method provided by the present application through the in-vehicle terminal, in-vehicle controller, in-vehicle module, in-vehicle component module, in-vehicle component, in-vehicle chip, in-vehicle unit, in-vehicle radar, or in-vehicle camera. Of course, the data processing system in the embodiments of the present application can also be used in other intelligent terminals with data processing functions except vehicles, or be set in other intelligent terminals with data processing functions except vehicles, or be set in the components of the intelligent terminal. The intelligent terminal can be an intelligent transportation device, a smart home device, a robot, etc. For example, it includes but is not limited to intelligent terminals or other sensors such as controllers, chips, radars, or cameras in the intelligent terminal, as well as other components, etc.

[0069] Next, the technical solutions in the embodiments of the present application will be described with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments.

[0070] Figure 1 FIG. shows a schematic architecture diagram of a data processing system provided by an embodiment of the present application. The data processing system includes a first module 101 and a second module 201, and the first module 101 can communicate and interact with the second module 201. Among them, the specific implementation object of the data processing system is a mapping company. The first module 101 and the second module 201 can run the mapping software associated with the mapping company to implement the desensitization processing of spatio-temporal information.

[0071] Among them, the first module 101 and the second module 201 can be deployed in different devices. For example, the first module 101 can be deployed in the vehicle 100 or a certain component of the vehicle 100, and the second module 201 can be deployed in the server 200. The server 200 can be a cloud server, for example.

[0072] As Figure 2 shown, based on Figure 1 the data processing system shown, an embodiment of the present application provides a data processing method. This method can be executed by the first module 101 and the second module 201. The method includes the following steps:

[0073] S201. The first module 101 desensitizes the first spatio-temporal information based on the regular desensitization processing rules.

[0074] S202. The second module 201 determines that an emergency event has occurred.

[0075] When specifically implementing S202, the second module 201 determining that an emergency event has occurred may include, but is not limited to, the following implementation manners:

[0076] Implementation manner 1. The second module 201 receives a request message from the first module 101, and this request message is used to request an adjustment of the desensitization processing rules for the emergency event. Correspondingly, the second module 201 may determine that an emergency event has occurred based on this request message.

[0077] In implementation manner 1, the first module 101 triggers the second module 201 to adjust the desensitization processing rules for the emergency event.

[0078] Implementation manner 2. The second module 201 receives a notification message from the regulatory agency, and this notification message is used to indicate a change in the regulatory rules. Correspondingly, the second module 201 may determine that an emergency event has occurred based on this notification message, that is, consider the change in the regulatory rules as an emergency event. Here, the regulatory agency is the agency that supervises the spatio-temporal information of the ICV.

[0079] In implementation manner 2, the regulatory agency may trigger the second module 201 to adjust the desensitization processing rules for the emergency event.

[0080] Implementation manner 3. The second module 201 receives a request message from the first module 101, and this request message is used to request an adjustment of the desensitization processing rules for the emergency event; and the second module 201 receives a notification message from the regulatory agency, and this notification message is used to indicate a change in the regulatory rules. Correspondingly, the second module 201 may determine that an emergency event has occurred based on the request message of the first module 101 and the notification message of the regulatory agency.

[0081] In implementation manner 3, both the first module 101 deployed in the vehicle and the regulatory agency may trigger the adjustment process of the desensitization processing rules for the deployed spatio-temporal information. In this way, the second module 201 determines the emergency event more accurately, making the adjustment of the desensitization processing rules by the second module 201 more accurate.

[0082] S203. The second module 201 sends a first indication message to the first module 101, and this first indication message is used to indicate the first set of special desensitization processing rules; correspondingly, the first module 101 receives this first indication message.

[0083] In an embodiment of the present application, when the first indication information indicates the first special desensitization processing rule set, the first indication information may include the first special desensitization processing rule set; alternatively, the first desensitization processing rule set may be pre-configured for the first module 101 by the second module 201, and the first indication information does not include the first special desensitization processing rule set.

[0084] S204. In response to the first indication information, the first module 101 changes the desensitization processing of the first spatio-temporal information based on the conventional desensitization processing rule to the desensitization processing of the second spatio-temporal information based on the first special desensitization processing rule set.

[0085] In an embodiment of the present application, the "first spatio-temporal information" may be understood as the spatio-temporal information before an emergency occurs; the "second spatio-temporal information" may be understood as the spatio-temporal information after an emergency occurs. The "desensitization processing rule" may be understood as at least one of a data collection rule, a data processing rule, or a data transmission rule.

[0086] In the embodiments of the present application, an emergency event may include at least one of a collision event of a vehicle, a takeover event, an active safety event, a system exception event, an event of violating traffic regulations, or an event that does not meet the first condition; wherein, the first condition includes that the distance between the vehicle and people and / or objects on the road surface is less than a safety threshold, and / or, the driving parameters of the vehicle are greater than a preset value. Among them, the collision event may be, for example, a collision event that occurs when the advanced driving system (ADS) is running, and the takeover event may be, for example, at least one of events such as a request for takeover by the leveraged autonomous system (LAS), a request for takeover by the adaptive cruise control (ACC), a request for takeover by the integrated cruise assist (ICA), a request for takeover by the navigated cruise assist (NCA), or an active takeover by the driver when the ADS is running; the active safety event may be, for example, a longitudinal emergency braking event or a lateral deviation correction / emergency steering event; the system exception event may be, for example, an ADS module exception event, an event of excessive system delay, or a sensor exception event; the event of violating traffic regulations may be, for example, at least one of the vehicle driving over a solid line, the vehicle crossing a solid line, the vehicle running a (yellow) red light, the speed of the vehicle being higher than the road speed limit, etc.; the objects on the road surface may include, for example, other vehicles (i.e., traffic participants), obstacles, road facilities (such as guardrails), etc. on the road surface, and the driving parameters of the vehicle may include, for example, at least one of the longitudinal / lateral acceleration of the vehicle, the longitudinal / lateral acceleration change rate, the absolute value of the curvature, or the absolute value of the curvature change rate; correspondingly, the event that does not meet the first condition may be, for example, that the distance between the vehicle and other vehicles, obstacles, and road facilities is less than the safety threshold, the longitudinal / lateral acceleration of the vehicle is greater than the preset value, the longitudinal / lateral acceleration change rate is greater than the preset value, the absolute value of the curvature is greater than the preset value, or the absolute value of the curvature change rate is greater than the preset value.

[0087] In the embodiments of the present application, the first set of special desensitization processing rules includes multiple special desensitization processing rules. Correspondingly, when specifically implementing S204, the first module 101 may further determine a target desensitization processing rule from the first set of special desensitization processing rules according to the sensitivity level of the second spatio-temporal information, and desensitize the second spatio-temporal information based on the target desensitization processing rule. In this way, by selecting a target desensitization processing rule that is adapted to the sensitivity level of the second spatio-temporal information for execution, the situation where the first module 101 executes redundant desensitization processing rules can be effectively reduced, thereby effectively saving the computing resources of the first module 101.

[0088] In the embodiments of the present application, the first set of special desensitization processing rules may include, but are not limited to, at least one of the following: the geographical range corresponding to various types of data in the spatio-temporal information allowed for single acquisition, the geographical range corresponding to various types of data in the spatio-temporal information allowed for single processing, the frame extraction density of sensor data in the spatio-temporal information, the image processing method of sensor data in the spatio-temporal information, the thinning density of coordinate data in the spatio-temporal information, the method for screening the area of interest (AOI) of composition data in the spatio-temporal information, the semantic processing method of composition data in the spatio-temporal information, the geographical range corresponding to single transmission of various types of data in the spatio-temporal information, or the transmission method of various types of data in the spatio-temporal information. In this way, multiple implementation methods of the first set of special desensitization processing rules are provided, and thus the second module 201 in the data processing system can have a high degree of flexibility in adjusting the desensitization processing rules of the spatio-temporal information.

[0089] The following gives examples of each rule in the first set of special desensitization processing rules.

[0090] 1) The geographical range corresponding to single acquisition of various types of data in the spatio-temporal information may include, for example, at least one of the following:

[0091] The area corresponding to single acquisition of coordinate data, the area corresponding to single acquisition of sensor data, the area corresponding to single acquisition of composition data.

[0092] 2) The geographical range corresponding to single processing of various types of data in the spatio-temporal information may include, for example, at least one of the following:

[0093] The area corresponding to single thinning processing of coordinate data, the area corresponding to single frame extraction processing of sensor data, the area corresponding to single semantic processing of composition data.

[0094] 3) The frame extraction density of sensor data in the spatio-temporal information may be, for example, that the frame extraction density does not exceed X frames / second.

[0095] 4) The image processing method of sensor data in the spatio-temporal information may be, for example, deleting sensitive frames in the image data, covering sensitive objects in the image data, or replacing sensitive objects in the image data.

[0096] 5) The thinning density of coordinate data in the spatio-temporal information may be, for example, that the thinning density does not exceed X points / km.

[0097] 6) The AOI screening method of composition data in the spatio-temporal information may be, for example, that the AOI is within the road surface.

[0098] 7) The semantic processing method of composition data in the spatio-temporal information may be, for example, deleting sensitive words from the semantic information in the composition data based on a sensitive word library.

[0099] 8) The geographical range corresponding to the single - time transmission of various types of data in spatio - temporal information may include, for example, at least one of the following:

[0100] The area corresponding to the single - time reporting of coordinate data, the area corresponding to the single - time reporting of sensor data, and the area corresponding to the single - time reporting of composition data.

[0101] 9) The transmission methods of various types of data in spatio - temporal information may include, for example, at least one of the following:

[0102] Allowing wireless and wired transmission of coordinate data, allowing wired transmission of sensor data and composition data, but not allowing wireless transmission of sensor data and composition data.

[0103] In the embodiments of the present application, the sensitivity level of spatio - temporal information can be determined according to at least one of the following indicators: the collection frequency of various types of data in spatio - temporal information, the collection interval period, the data type, the coordinate system, the geographical range, or the spatial distribution, the indicators of sensor data in spatio - temporal information, the indicators of composition data in spatio - temporal information, or the indicators of coordinate data in spatio - temporal information. Thus, multiple indicators for determining the sensitivity level of spatio - temporal information are provided, and the sensitivity level of spatio - temporal information can be flexibly defined. Among them, the collection frequency of various types of data in spatio - temporal information can be continuous or sporadic, the collection interval period of various types of data in spatio - temporal information can be in units of any one of seconds, minutes, hours, days, or months, the data type of various types of data in spatio - temporal information can include, for example, at least one of coordinates, point clouds, pictures, videos, or compositions, etc., the coordinate system of various types of data in spatio - temporal information can include a global coordinate system and / or a local coordinate system, the geographical range of various types of data in spatio - temporal information can include an area not exceeding XX square kilometers, the spatial distribution of various types of data in spatio - temporal information can be characterized by the matching result with a compliance fence or a sensitive information point (POI), the indicators of sensor data in spatio - temporal information can be whether image processing is performed on the sensor data and whether frame extraction is performed on the sensor data, the indicators of composition data in spatio - temporal information can be whether the semantic information of the composition data involves sensitive words, and the indicators of composition data in spatio - temporal information can be whether the thinning density of coordinate data exceeds a threshold.

[0104] Example 1. The sensitivity level of spatio-temporal information is determined according to the collection frequency of various types of data in the spatio-temporal information. The higher the collection frequency of the data, the lower the sensitivity level. If the second spatio-temporal information only includes coordinate data and the collection frequency of the coordinate data is high, it is considered that the sensitivity level of the second spatio-temporal information is low; the first module 101 may use the thinning density of the coordinate data in the spatio-temporal information in the first set of special desensitization processing rules as the target desensitization processing rule, and based on this target desensitization processing rule, perform desensitization processing on the second spatio-temporal information. Or, if the second spatio-temporal information only includes sensor data and the collection frequency of the sensor data is low, it is considered that the sensitivity level of the second spatio-temporal information is high; the first module 101 may use the frame extraction density of the sensor data, the image processing method of the sensor data, the geographical range corresponding to allowing single transmission of the sensor data, and the transmission method of the sensor data in the first set of special desensitization processing rules as the target desensitization processing rule, and based on this target desensitization processing rule, perform desensitization processing on the second spatio-temporal information.

[0105] Example 2. The sensitivity level of spatio-temporal information is determined according to the coordinate system of various types of data in the spatio-temporal information. The data corresponding to the global coordinate system has a lower sensitivity level, and the data corresponding to the local coordinate system has a higher sensitivity level. If the second spatio-temporal information only includes coordinate data and the coordinate data corresponds to the global coordinate system, it is considered that the sensitivity level of the second spatio-temporal information is low; the first module 101 may use the thinning density of the coordinate data in the spatio-temporal information in the first set of special desensitization processing rules as the target desensitization processing rule, and based on this target desensitization processing rule, perform desensitization processing on the second spatio-temporal information. Or, if the second spatio-temporal information only includes composition data and the composition data corresponds to the local coordinate system, it is considered that the sensitivity level of the second spatio-temporal information is high; the first module 101 may use the semantic processing method of the composition data in the first set of special desensitization processing rules as the target desensitization processing rule, and based on this target desensitization processing rule, perform desensitization processing on the second spatio-temporal information.

[0106] As Figure 3 shown, the data processing method corresponding to the above data processing system may further include the following steps:

[0107] S205. The first module 101 may also send the second spatio-temporal information after desensitization processing to the second module 201; correspondingly, the second module 201 receives the second spatio-temporal information after desensitization processing.

[0108] S206A. The second module 201 may use the second spatio-temporal information after desensitization processing for service processing.

[0109] In S206A, the second module 201 may directly use the second spatio-temporal information after desensitization processing and does not need to continue to perform desensitization processing on the second spatio-temporal information after desensitization processing.

[0110] S206B. The second module 201 may also perform a secondary desensitization process on the desensitized second spatio-temporal information using a second set of special desensitization rules to obtain the second spatio-temporal information after the secondary desensitization process.

[0111] In S206B, the second module 201 performs a secondary desensitization process on the desensitized second spatio-temporal information, so that the second spatio-temporal information after the secondary desensitization process meets the regulatory requirements for the use of spatio-temporal information in the public network environment. Furthermore, the second module 201 may execute step S207.

[0112] It should be understood that S206A and S206B respectively correspond to two different situations. In specific implementation, the second module 201 only needs to execute one of the situations.

[0113] In the embodiments of the present application, the second set of special desensitization rules may include at least one of the following: the geographical range allowed for single collection of various types of data in spatio-temporal information, the geographical range allowed for single processing of various types of data in spatio-temporal information, the frame extraction density of sensor data in spatio-temporal information, the image processing method of sensor data in spatio-temporal information, the thinning density of coordinate data in spatio-temporal information, the AOI (Area of Interest) screening method for composition data in spatio-temporal information, the semantic processing method of composition data in spatio-temporal information, the geographical range allowed for single transmission of various types of data in spatio-temporal information, and the transmission method allowed for various types of data in spatio-temporal information. In this way, multiple implementation methods of the first set of special desensitization rules are provided, and thus the second module 201 in the data processing system can have a high degree of flexibility in adjusting the desensitization rules of spatio-temporal information.

[0114] Optionally, the first set of special desensitization rules and the second set of special desensitization rules are determined according to at least one of the data processing capabilities of the vehicle, the transmission requirements of spatio-temporal information, the acquisition requirements of spatio-temporal information, and the application scenarios of spatio-temporal information. In this way, the first set of special desensitization rules and the second set of special desensitization rules can be flexibly adjusted according to actual needs.

[0115] S207. When the sensitivity level of the second spatio-temporal information after the secondary desensitization process meets the requirements, the second module 201 sends the second spatio-temporal information after the secondary desensitization process to the original equipment manufacturer or supplier.

[0116] In S207, the second module 201 may perform secondary desensitization processing on the second spatio-temporal information after desensitization processing. When the sensitivity level of the second spatio-temporal information after secondary desensitization processing meets the requirements, the second module 201 may send the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer (OEM) or the supplier (tier), which can meet the regulatory requirements for the use of spatio-temporal information in the public network environment (i.e., the usage environment of the OEM or the supplier).

[0117] Exemplarily, the second spatio-temporal information after secondary desensitization processing includes coordinate data, sensor data, and composition data. When the thinning density of the coordinate data is less than the threshold, the frame extraction density of the sensor data is less than the first value, and there are no sensitive words in the semantic information of the composition data, the second module 201 considers that the sensitivity level of the second spatio-temporal information after secondary desensitization processing meets the requirements, and sends the second spatio-temporal information after secondary desensitization processing to the OEM or the tier.

[0118] In some possible implementation manners, the second module 201 is further configured to send second indication information to the first module 101, where the second indication information is used to indicate the regular desensitization processing rule; the first module 101 receives the second indication information, and in response to the second indication information, changes the desensitization processing of the second spatio-temporal information based on the first special desensitization processing rule set to the desensitization processing of the third spatio-temporal information based on the regular desensitization processing rule. Herein, the "second spatio-temporal information" may be understood as the spatio-temporal information after the end of an emergency event. In this way, when the first module 101 does not need to use the special desensitization processing rule (for example, after the second module 201 receives the desensitized second spatio-temporal information from the first module 101; or when the regulatory agency notifies the server 200 that the regulatory rule is restored), the rule for desensitizing the current spatio-temporal information (i.e., the third spatio-temporal information) can also be replaced with the regular desensitization processing rule, making the desensitization processing rule used by the entire data processing system more reasonable.

[0119] The data processing method provided in the embodiments of the present application has been described above from the perspective of the data processing system. Next, the data processing method provided in the embodiments of the present application will be described in more detail from the perspectives of the vehicle 100 and the server 200.

[0120] Figure 4A The flowchart of a data processing method provided by the present application is shown. The execution subject of this method is the vehicle 100 and the server 200, and this method includes:

[0121] S401. The vehicle 100 performs desensitization processing on the first spatio-temporal information based on the regular desensitization processing rule.

[0122] S402. The vehicle 100 detects an emergency event.

[0123] Exemplarily, as shown in Table 2, the emergency events are exemplified by collision events, takeover events, active safety events, system exception events, events that do not meet the first condition (also known as vehicle safety self-inspection events), and events that violate traffic regulations (also known as traffic regulation self-inspection events).

[0124] Among them, the collision event is a collision that occurs during the operation of the advanced driving system (ADS). The specific triggering condition for the collision event is that the vehicle generates an airbag signal and / or a collision detection signal during the period when the intelligent driving function is enabled; correspondingly, if the vehicle generates an airbag signal and / or a collision detection signal during the period when the intelligent driving function is enabled, it is considered that the vehicle has detected a collision event.

[0125] Among them, takeover events include LAS requesting takeover, ACC requesting takeover, ICA requesting takeover, NCA requesting takeover, or the driver actively taking over during ADS operation. The specific triggering conditions for takeover events are the takeover signals corresponding to LAS requesting takeover, ACC requesting takeover, ICA requesting takeover, NCA requesting takeover, or the driver actively taking over during ADS operation. Correspondingly, if the vehicle detects the takeover signals corresponding to LAS requesting takeover, ACC requesting takeover, ICA requesting takeover, NCA requesting takeover, or the driver actively taking over during ADS operation during the period when the intelligent driving function is enabled, it is considered that the vehicle has detected a takeover event. Among them, active safety events include warning events (such as forward collision warning (FCW), rear collision warning (RCW), front cross traffic alert (FCTA), rear cross traffic alert (RCTA), blind spot detection / lane change assist (BSD / LCA) warning, door open warning (DOW), etc.), longitudinal emergency braking events (such as forward automatic emergency braking (FAEB), low speed automatic emergency braking (LAEB), rear automatic emergency braking (RAEB), front cross traffic brake (FCTB), rear cross traffic brake (RCTB), etc.), and lateral deviation / emergency steering events (such as lane support system / lane keeping assist (LAS), emergency lane keeping (ELK), emergency steering assist (ESA), etc.). The specific triggering conditions for active safety events are the triggering of active safety event functions. Correspondingly, if the vehicle detects the triggering of an active safety event function, it is considered that the vehicle has detected an active safety event.

[0126] Among them, system exception events include ADS module exception events, system delay too high events, and sensor exception events. The specific trigger condition for active safety events is system failure. Correspondingly, when the vehicle detects a system failure (such as ADS module exception, system delay too high, sensor), it is considered that the vehicle has detected a system exception event.

[0127] Among them, events that do not meet the first condition are events that the planning and control (PNC) module in the vehicle determines to have significant safety risks. The specific trigger conditions include that the distance between the vehicle and people and / or objects on the road surface is less than the safety threshold, and / or the driving parameters of the vehicle are greater than the preset value. Correspondingly, when the vehicle detects that the distance between the vehicle and people and / or objects on the road surface is less than the safety threshold, and / or the driving parameters of the vehicle (such as at least one of the vehicle's longitudinal / lateral acceleration, longitudinal / lateral acceleration change rate, absolute value of curvature, absolute value of curvature change rate) are greater than the preset value, it is considered that the vehicle has detected an event that does not meet the first condition. Among them, the specific values of the preset values corresponding to each parameter in the driving parameters are different.

[0128] Among them, events of violating traffic regulations can include, for example, at least one of the vehicle driving over the solid line, the vehicle crossing the solid line, the vehicle running a (yellow) red light, the vehicle's speed being higher than the road speed limit, etc. The specific trigger condition is violating traffic regulations. Correspondingly, when the vehicle detects at least one of the vehicle driving over the solid line, the vehicle crossing the solid line, the vehicle running a (yellow) red light, the vehicle's speed being higher than the road speed limit, etc., it is considered that the vehicle has detected an event of violating traffic regulations.

[0129] Table 2

[0130]

[0131] S403. Vehicle 100 sends a request message to server 200. This request message is used to request an adjustment of the desensitization processing rule for emergency events. Correspondingly, server 200 receives this request message.

[0132] When specifically implementing S403, vehicle 100 can send a request message to server 200 through a wireless communication network.

[0133] S404. Server 200 determines that an emergency event has occurred.

[0134] Specifically, server 200 can determine that an emergency event has occurred based on the vehicle's request message.

[0135] In a possible implementation, after the server 200 determines that an emergency event has occurred, it can also verify the authenticity and reasonableness of the emergency event. When it is determined that the emergency event meets the preset conditions, the desensitization processing rule for the emergency event is adjusted, so that the adjustment of the desensitization processing rule for the emergency event meets the actual requirements.

[0136] In a possible implementation, the server 200 can determine whether the emergency event meets the preset conditions according to at least one of the emergency level of the emergency event, the sensor data of the emergency event, or the historical data of the vehicle. That is to say, the server 200 can evaluate at least one of the emergency level, reasonableness, or authenticity of the emergency event. Among them, the emergency level of the emergency event can be divided into a first-level emergency event, a second-level emergency event, and a third-level emergency event. The lower the level, the higher the emergency level of the emergency event. For example, the server 200 can define a vehicle collision event and a system exception event as first-level emergency events, and an active safety event as a second-level emergency event. Among them, the reasonableness of the emergency event can be judged according to the sensor data of the emergency event. For example, taking the collision event as an example of the emergency event, it can be judged whether the collision event is caused by the driver or the intelligent driving system according to the sensor data, so as to evaluate the reasonableness of the emergency event. Among them, the authenticity of the emergency event can be judged according to the historical data of the vehicle. For example, by querying whether the current emergency event exists in the historical emergency events, the authenticity of the current emergency event is judged. If the current emergency event exists in the historical emergency events, it is considered that the current emergency event is real.

[0137] S405. The server 200 reports the emergency event to the regulatory agency.

[0138] S406. The regulatory agency conducts filing management on the emergency event.

[0139] In S405 - S406, the server 200 reports the emergency event to the regulatory agency, so that the regulatory agency conducts filing management on the emergency event, which helps to trace and analyze the emergency event.

[0140] S407. The regulatory agency sends a notification message to the server 200, and the notification message is used to indicate a change in the regulatory rule. Correspondingly, the server 200 receives the notification message.

[0141] S408. The server 200 determines a first special desensitization processing rule set corresponding to the emergency event.

[0142] Among them, S408 is an optional step. In one case, if the first set of special desensitization processing rules is not pre-configured for vehicle 100, the server 200 can determine the first set of special desensitization processing rules in combination with the current emergency event. For example, if the emergency event is a collision event, the first set of special desensitization processing rules determined by the server 200 may include that the area corresponding to allowing single-frame extraction processing of sensor data once is XX square kilometers and the frame extraction density of sensor data does not exceed X frames / second. In another case, if the first set of special desensitization processing rules is pre-configured for vehicle 100 and the first set of special desensitization processing rules is applicable to all emergency events, the server 200 may not execute S408.

[0143] S409. The server 200 sends the first indication information to the vehicle 100, and the first indication information is used to indicate the first set of special desensitization processing rules. Correspondingly, the vehicle 100 receives the first indication information.

[0144] It should be understood that the above S405 - S407 are optional steps. That is to say, in one case, after determining that an emergency event has occurred, the server 200 can directly execute S409 to instruct the vehicle 100 to desensitize the spatio-temporal information using the special desensitization processing rules. In another case, after determining that an emergency event has occurred, the server 200 executes S405 - S407 to report the emergency event to the regulatory agency, and under the trigger of the regulatory agency, instructs the vehicle 100 to desensitize the spatio-temporal information using the special desensitization processing rules.

[0145] In the embodiment of the present application, before the server 200 executes S409, the server 200 can also obtain the data processing capability of the vehicle 100 and determine that the data processing capability of the vehicle matches the first set of special desensitization processing rules. In this way, it is possible to avoid the situation where the server 200 instructs the vehicle 100 with special desensitization processing rules beyond the data processing capability of the vehicle 100, thereby reducing the transmission volume of the special desensitization processing rules and further reducing unnecessary communication overhead.

[0146] Among them, the server 200 obtaining the data processing capability of the vehicle 100 may include but is not limited to the following implementation manners:

[0147] Implementation manner 1. When the vehicle 100 detects an emergency event, it can automatically report its own data processing capability to the server 200.

[0148] Embodiment 2. The server 200 can pre-store the ability scores of the vehicle 100 to execute various special desensitization processing rules, and the ability scores can represent the data processing ability of the vehicle 100. Exemplarily, if the ability score of the vehicle 100 to execute sensor data frame extraction is 10 points, the first set of special desensitization rules configured by the server 200 for the vehicle 100 may include sensor data frame extraction; if the ability score of the vehicle 100 to execute image processing of sensor data is 3 points, the first set of special desensitization rules configured by the server 200 for the vehicle 100 does not include the image processing method of sensor data.

[0149] Optionally, the ability scores of the vehicle 100 to execute various special desensitization processing rules can be dynamically updated. Exemplarily, after the software version of the vehicle 100 is OTA upgraded, the vehicle 100 can report its data processing ability to the server 200 again. If the ability score of the vehicle 100 to execute image processing of sensor data is updated to 8 points, the first set of special desensitization rules configured by the server 200 for the vehicle 100 can include the image processing method of sensor data.

[0150] S410. In response to the first indication information, the vehicle 100 changes the desensitization processing of the first spatio-temporal information based on the conventional desensitization processing rules to the desensitization processing of the second spatio-temporal information based on the first set of special desensitization rules.

[0151] S411. The vehicle 100 determines the sensitivity of the desensitized second spatio-temporal information.

[0152] Among them, the vehicle 100 determines the sensitivity of the desensitized second spatio-temporal information, that is, the process of the vehicle 100 performing security verification on the desensitized second spatio-temporal information. Specifically, the vehicle 100 determines the sensitivity of the desensitized second spatio-temporal information. When the sensitivity of the desensitized second spatio-temporal information meets the requirements, S412 is executed; when the sensitivity of the desensitized second spatio-temporal information does not meet the requirements, the vehicle 100 controls the prompting device to send out an alarm message to prompt the user to desensitize the desensitized second spatio-temporal information again. Among them, the prompting device can be, for example, an in-vehicle prompting device or a device associated with the vehicle (such as a mobile phone, a smart watch, etc.).

[0153] Exemplarily, the second spatio-temporal information after desensitization processing includes sensor data, and the preset requirement is that the frame rate of the sensor data is less than 5 HZ. If the frame rate of the sensor data in the second spatio-temporal information after desensitization processing is 4 HZ, then the sensitivity of the second spatio-temporal information after desensitization processing meets the requirement, and vehicle 100 sends the second spatio-temporal information after desensitization processing to server 200. Or, if the frame rate of the sensor data in the second spatio-temporal information after desensitization processing is 10 HZ, then the sensitivity of the second spatio-temporal information after desensitization processing does not meet the requirement, and the in-vehicle display screen of vehicle 100 outputs a prompt message "The current sensor data has not been successfully desensitized".

[0154] S412. When the sensitivity of the second spatio-temporal information after desensitization processing by vehicle 100 meets the requirement, vehicle 100 sends the second spatio-temporal information after desensitization processing to server 200. Correspondingly, server 200 receives the second spatio-temporal information after desensitization processing.

[0155] S413. Vehicle 100 sends the processing log of the second spatio-temporal information to server 200. Correspondingly, server 200 receives the processing log of the second spatio-temporal information.

[0156] In S413, by sending the processing log of the second spatio-temporal information to server 200, vehicle 100 enables server 200 to conduct traceability management on the desensitization processing process of the second spatio-temporal information.

[0157] As Figure 4B shown, after server 200 receives the second spatio-temporal information after desensitization processing, the above data processing method further includes:

[0158] S414A. Server 200 uses the second spatio-temporal information after desensitization processing for service processing

[0159] S414B. Server 200 performs secondary desensitization processing on the second spatio-temporal information after desensitization processing using the second special desensitization processing rule set to obtain the second spatio-temporal information after secondary desensitization processing.

[0160] S415. Server 200 discriminates the sensitivity of the second spatio-temporal information after secondary desensitization processing.

[0161] Among them, when server 200 discriminates the sensitivity of the second spatio-temporal information after secondary desensitization processing, when the sensitivity of the second spatio-temporal information after secondary desensitization processing meets the requirement, S416 is executed; when the sensitivity of the second spatio-temporal information after secondary desensitization processing does not meet the requirement, the prompting device is controlled to send out an alarm message to prompt the user to perform desensitization processing on the second spatio-temporal information after secondary desensitization processing again.

[0162] Exemplarily, the second spatio-temporal information after secondary desensitization processing includes coordinate data and composition data. The preset requirements are that the thinning density of the coordinate data is less than 10 points / km, and the semantic information of the composition data does not include sensitive words. If the thinning density of the coordinate data in the second spatio-temporal information after secondary desensitization processing is less than 8 points / km, and the semantic information of the composition data in the second spatio-temporal information after secondary desensitization processing does not include sensitive words, the server 200 determines that the sensitivity of the second spatio-temporal information after secondary desensitization processing meets the requirements, and the server 200 sends the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer or supplier. Or, if the thinning density of the coordinate data in the second spatio-temporal information after secondary desensitization processing is less than 20 points / km, or the semantic information of the composition data in the second spatio-temporal information after secondary desensitization processing includes sensitive words, the server 200 determines that the sensitivity of the second spatio-temporal information after secondary desensitization processing does not meet the requirements, and the server 200 controls the prompting device to output a prompt message "The current spatio-temporal information has not been desensitized successfully".

[0163] S416. The server 200 sends the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer or supplier. Correspondingly, the original equipment manufacturer or supplier receives the second spatio-temporal information after desensitization processing.

[0164] S417. The server 200 sends the processing log of the secondary desensitization processing to the regulatory agency. Correspondingly, the regulatory agency receives the processing log of the secondary desensitization processing.

[0165] In S417, the server 200 sends the processing log of the secondary desensitization processing to the regulatory agency, so that the regulatory agency can conduct traceability management on the desensitization processing process of the spatio-temporal information.

[0166] In the embodiment of the present application, the server 200 can also send second indication information to the vehicle 100; correspondingly, the vehicle 100 receives the second indication information from the server 200, and the second indication information is used to indicate the conventional desensitization processing rules; furthermore, the vehicle 100 can respond to the second indication information and change the desensitization processing of the second spatio-temporal information based on the first special desensitization processing rule set to the desensitization processing of the third spatio-temporal information based on the conventional desensitization processing rules. In this way, when the vehicle 100 does not need to use special desensitization processing rules (for example, the server 200 can receive the second spatio-temporal information after desensitization processing from the vehicle 100; or, after the regulatory agency notifies the server 200 that the regulatory rules are restored), the rules for desensitizing the current spatio-temporal information (i.e., the third spatio-temporal information) are replaced with conventional desensitization processing rules, making the desensitization processing rules reasonably used by the vehicle 100 more reasonable.

[0167] Please refer to Figure 5, which is a schematic structural diagram of a possible data processing device provided for the embodiments of the present application. As Figure 5 shown, the data processing device 500 includes a first processing module 501 and a second processing module 502. Among them, the first processing module 501 is used to desensitize the first spatio-temporal information based on conventional desensitization processing rules; the second processing module 502 is used to determine that an emergency event occurs and send a first indication message to the first module, and the first indication message is used to indicate a first set of special desensitization processing rules; the first processing module 501 is further used to receive the first indication message; and in response to the first indication message, change the desensitization processing of the first spatio-temporal information based on the conventional desensitization processing rules to the desensitization processing of the second spatio-temporal information based on the first set of special desensitization processing rules.

[0168] For the specific implementation manner of the data processing device 500, please refer to the relevant description in the foregoing method embodiments, which will not be elaborated here.

[0169] As Figure 6 shown is a chip system provided for the embodiments of the present application. Figure 6 The chip system shown can be an implementation manner of a hardware circuit. The chip system is applicable to perform the functions of the first device in the foregoing method embodiments. For the sake of convenience of description, Figure 6 only the main components of the chip system are shown. Figure 6 The chip system 600 shown includes at least one processor 620, which is used to implement the method provided for the embodiments of the present application.

[0170] The chip system 600 may further include at least one memory 630, which is used to store program instructions and / or data. The memory 630 and the processor 620 are coupled. The coupling in the embodiments of the present application is an indirect coupling or communication connection between the chip system, unit or module, which can be electrical, mechanical or other forms, and is used for information interaction between the chip system, unit or module. The processor 620 may cooperate with the memory 630. The processor 620 may execute the program instructions stored in the memory 630. At least one of the at least one memories may be included in the processor.

[0171] In the implementation process, each step of the foregoing method may be completed by the integrated logic circuit in the hardware of the processor or the instructions in the form of software. The steps of the method disclosed in combination with the embodiments of the present application may be directly embodied as being executed and completed by the hardware processor, or executed and completed by the combination of the hardware and software modules in the processor. The software module may be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. This storage medium is located in the memory, and the processor reads the information in the memory and combines its hardware to complete the steps of the foregoing method. To avoid repetition, it will not be described in detail here.

[0172] It should be noted that the processor in the embodiments of the present application may be an integrated circuit chip with signal processing capabilities. In the implementation process, the steps of the above method embodiments can be completed by the integrated logic circuit in the hardware of the processor or instructions in software form. The above-mentioned processor may be a general-purpose processor, a digital signal processing circuit (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components. It can implement or execute the various methods, steps, and logic block diagrams disclosed in the embodiments of the present application. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor, etc. The steps of the method disclosed in combination with the embodiments of the present application can be directly embodied as being executed and completed by the hardware decoding processor, or executed and completed by a combination of the hardware and software modules in the decoding processor. The software module may be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory, or an electrically erasable programmable memory, a register, etc. This storage medium is located in the memory, and the processor reads the information in the memory and combines its hardware to complete the steps of the above method.

[0173] It can be understood that the memory in the embodiments of the present application can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), which is used as an external cache. By way of example but not limitation, many forms of RAM are available, such as static random access memory (SRAM), dynamic random access memory (DRAM), synchronous dynamic random access memory (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchlink dynamic random access memory (SLDRAM), and direct rambus random access memory (DR RAM). It should be noted that the memory of the systems and methods described herein is intended to include but not be limited to these and any other suitable types of memory.

[0174] The chip system 600 may further include a communication interface 610 for communicating with other devices through a transmission medium, so that the chip system in the chip system 600 can communicate with other devices. In the embodiments of the present application, the communication interface can be a transceiver, a circuit, a bus, a module, or other types of communication interfaces. In the embodiments of the present application, when the communication interface is a transceiver, the transceiver can include an independent receiver, an independent transmitter; it can also be a transceiver integrating transceiver functions, or an interface circuit.

[0175] The chip system 600 may further include a communication line 640. Among them, the communication interface 610, the processor 620, and the memory 630 may be interconnected through the communication line 640; the communication line 640 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The communication line 640 may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, Figure 6 only a thick line is used to represent it in the figure, but it does not mean that there is only one bus or one type of bus.

[0176] According to the method provided by the embodiments of the present application, the present application further provides a computer program product, which includes: computer program code, when the computer program code runs on a computer, enabling the computer to execute the method of any one of the above embodiments.

[0177] According to the method provided by the embodiments of the present application, the present application further provides a computer-readable medium, which stores program code, when the program code runs on a computer, enabling the computer to execute the method of any one of the above embodiments.

[0178] The method steps in the various embodiments of the present application can be implemented in hardware or in software instructions executable by a processor. The software instructions may be composed of corresponding software modules, and the software modules may be stored in a random access memory, a flash memory, a read-only memory, a programmable read-only memory, an erasable programmable read-only memory, an electrically erasable programmable read-only memory, a register, a hard disk, a removable hard disk, a CD-ROM, or any other form of storage medium well known in the art. An exemplary storage medium is coupled to the processor, so that the processor can read information from the storage medium and write information to the storage medium. The storage medium may also be a component of the processor. The processor and the storage medium may be located in an ASIC. In addition, the ASIC may be located in a base station or a terminal. The processor and the storage medium may also exist as discrete components in a base station or a terminal.

[0179] In the above embodiments, it can be implemented in whole or in part by software, hardware, firmware, or any combination thereof. When implemented using software, it can be implemented in the form of a computer program product in whole or in part. The computer program product includes one or more computer programs or instructions. When the computer program or instructions are loaded and executed on a computer, the processes or functions described in the embodiments of the present application are executed in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, a network device, a user device, or other programmable devices. The computer program or instructions can be stored in a computer-readable storage medium, or transmitted from one computer-readable storage medium to another computer-readable storage medium. For example, the computer program or instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center in a wired or wireless manner. The computer-readable storage medium can be any available medium that can be accessed by a computer, or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium, such as a floppy disk, a hard disk, or a magnetic tape; it can also be an optical medium, such as a digital video disc; or it can be a semiconductor medium, such as a solid-state drive. The computer-readable storage medium can be a volatile or non-volatile storage medium, or can include both volatile and non-volatile types of storage media.

[0180] In various embodiments of the present application, if there is no special description and logical conflict, the terms and / or descriptions between different embodiments are consistent and can be cross-referenced. The technical features in different embodiments can be combined to form new embodiments according to their inherent logical relationships.

[0181] It can be understood that the various numerical numbers involved in the embodiments of the present application are only for the convenience of description and do not limit the scope of the embodiments of the present application. The magnitude of the serial numbers of the above processes does not mean the order of execution, and the order of execution of each process should be determined by its function and internal logic.

Claims

1. A data processing system, characterized in that, The system includes a first module deployed on a vehicle and a second module deployed on a server; The first module is configured to desensitize first spatio-temporal information based on regular desensitization rules; The second module is configured to determine the occurrence of an emergency event; The second module is further configured to send first indication information to the first module, and the first indication information is used to indicate a first set of special desensitization rules; The first module is further configured to receive the first indication information; The first module is further configured to, in response to the first indication information, change the desensitization of the first spatio-temporal information based on the regular desensitization rules to the desensitization of second spatio-temporal information based on the first set of special desensitization rules.

2. The system according to claim 1, wherein The second module is configured to determine the occurrence of an emergency event, including: The second module is configured to receive a request message from the first module, where the request message is used to request an adjustment of the desensitization rules for the emergency event; and determine the occurrence of the emergency event according to the request message; and / or, The second module is configured to receive a notification message from a regulatory agency, where the notification message is used to indicate a change in the regulatory rules; and determine the occurrence of the emergency event according to the notification message.

3. The system according to claim 1 or 2, characterized in that, The emergency event includes at least one of a collision event of the vehicle, a takeover event, an active safety event, a system anomaly event, an event of violating traffic regulations, or an event not meeting a first condition; where the first condition includes that the distance between the vehicle and people and / or objects on the road surface is less than a safety threshold, and / or the driving parameters of the vehicle are greater than a preset value.

4. The system according to any one of claims 1-3, wherein The first module is further configured to send the desensitized second spatio-temporal information to the second module; The second module is further configured to receive the desensitized second spatio-temporal information; The second module is further configured to perform business processing using the desensitized second spatio-temporal information; or, The second module is further configured to perform secondary desensitization processing on the desensitized second spatio-temporal information using a second set of special desensitization rules to obtain second spatio-temporal information after secondary desensitization processing; When the sensitivity level of the second spatio-temporal information after secondary desensitization processing meets the requirements, send the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer or supplier.

5. The system according to claim 4, wherein The first set of special desensitization rules or the second set of special desensitization rules includes at least one of the following; The geographical range allowed for single acquisition of various types of data in spatio-temporal information, the geographical range allowed for single processing of various types of data in spatio-temporal information, the frame extraction density of sensor data in spatio-temporal information, the image processing method of sensor data in spatio-temporal information, the thinning density of coordinate data in spatio-temporal information, the method for screening the region of interest AOI of composition data in spatio-temporal information, the semantic processing method of composition data in spatio-temporal information, the geographical range allowed for single transmission of various types of data in spatio-temporal information, or the transmission method allowed for various types of data in spatio-temporal information.

6. The system according to claim 4 or 5, characterized in that, The first set of special desensitization processing rules and the second set of special desensitization processing rules are determined according to at least one of the vehicle's data processing capabilities, the transmission requirements of spatio-temporal information, the acquisition requirements of spatio-temporal information, and the application scenarios of spatio-temporal information.

7. The system according to claim 6, wherein The first set of special desensitization processing rules includes multiple special desensitization processing rules; The first module is further configured to: determine a target desensitization processing rule from the first set of special desensitization processing rules according to the sensitivity level of the second spatio-temporal information; The first module performs desensitization processing on the second spatio-temporal information based on the first set of special desensitization processing rules, including: performing desensitization processing on the second spatio-temporal information based on the target desensitization processing rule.

8. The system according to any one of claims 4 to 7, characterized in that, The sensitivity level is determined according to at least one of the following indicators: The acquisition frequency, acquisition interval period, data type, coordinate system, geographical range, or spatial distribution of various types of data in the spatio-temporal information, the indicators of the sensor data in the spatio-temporal information, the indicators of the composition data in the spatio-temporal information, or the indicators of the coordinate data in the spatio-temporal information.

9. The system according to any one of claims 1-8, wherein The second module is further configured to send second indication information to the first module, and the second indication information is used to indicate the conventional desensitization processing rules; The first module is further configured to receive the second indication information; And, in response to the second indication information, change the desensitization processing of the second spatio-temporal information based on the first set of special desensitization processing rules to the desensitization processing of the third spatio-temporal information based on the conventional desensitization processing rules.

10. The system according to any one of claims 1-9, characterized in that, The second module is further configured to: Obtain the data processing capabilities of the vehicle; Determine that the data processing capabilities of the vehicle match the first set of special desensitization processing rules.

11. The system according to any one of claims 1-10, characterized in that, The second module is further configured to: Determine that the emergency event meets a preset condition according to at least one of the emergency level of the emergency event, the sensor data corresponding to the emergency event, or the historical data of the vehicle.

12. A data processing method, characterized in that, The method includes: Performing desensitization processing on the first spatio-temporal information based on the conventional desensitization processing rules; Receiving first indication information, where the first indication information is used to indicate the first set of special desensitization processing rules; In response to the first indication information, change the desensitization processing of the first spatio-temporal information based on the conventional desensitization processing rules to the desensitization processing of the second spatio-temporal information based on the first set of special desensitization processing rules.

13. The method according to claim 12, wherein The method further includes: Sending a request message to the server, where the request message is used to request an adjustment of the desensitization processing rules for the emergency event.

14. The method according to claim 12 or 13, characterized in that, The emergency event includes at least one of the following: a collision event, a takeover event, an active safety event, a system exception event, an event of violating traffic regulations, or an event that does not meet the first condition; wherein, the first condition includes that the distance between the vehicle and the people and / or objects on the road surface is less than a safety threshold, and / or, the driving parameters of the vehicle are greater than a preset value.

15. The method according to any one of claims 12-14, characterized in that, The first set of special desensitization processing rules includes at least one of the following; The geographical scope corresponding to various types of data in the spatio-temporal information allowed for single acquisition, the geographical scope corresponding to various types of data in the spatio-temporal information allowed for single processing, the frame extraction density of the sensor data in the spatio-temporal information, the image processing method of the sensor data in the spatio-temporal information, the thinning density of the coordinate data in the spatio-temporal information, the AOI (Area of Interest) screening method for the composition data in the spatio-temporal information, the semantic processing method for the composition data in the spatio-temporal information, the geographical scope corresponding to single transmission of various types of data in the spatio-temporal information, and the transmission method for various types of data in the spatio-temporal information.

16. The method according to any one of claims 12-14, characterized in that, The first set of special desensitization processing rules includes multiple special desensitization processing rules; The method further includes: determining a target desensitization processing rule from the first set of special desensitization processing rules according to the sensitivity level of the second spatio-temporal information; Performing desensitization processing on the second spatio-temporal information based on the first set of special desensitization processing rules includes: performing desensitization processing on the second spatio-temporal information based on the target desensitization processing rule.

17. The method according to claim 16, wherein The sensitivity level is determined according to at least one of the following indicators: The acquisition frequency, acquisition interval period, data type, coordinate system, geographical scope, or spatial distribution of various types of data in the spatio-temporal information, the indicators of the sensor data in the spatio-temporal information, the indicators of the composition data in the spatio-temporal information, or the indicators of the coordinate data in the spatio-temporal information.

18. The method according to any one of claims 12-17, characterized in that The method further includes: Receiving second indication information from the server, where the second indication information is used to indicate conventional desensitization processing rules; In response to the second indication information, changing the desensitization processing of the second spatio-temporal information based on the first set of special desensitization processing rules to desensitization processing of the third spatio-temporal information based on the conventional desensitization processing rules.

19. A data processing method, characterized in that, The method includes: Determining that an emergency event occurs; Sending first indication information to the vehicle, where the first indication information is used to indicate the first set of special desensitization processing rules.

20. The method according to claim 19, wherein Determining that an emergency event occurs includes: Receiving a request message from the vehicle, where the request message is used to request adjustment of the desensitization processing rules for the emergency event; determining that the emergency event occurs according to the request message; and / or, Receiving a notification message from a regulatory agency, where the notification message is used to indicate a change in regulatory rules; determining that the emergency event occurs according to the notification message.

21. The method according to claim 19 or 20, characterized in that The emergency event includes at least one of a collision event, a takeover event, an active safety event, a system anomaly event, an event of violating traffic regulations, or an event not meeting the first condition; where the first condition includes that the distance between the vehicle and people and / or objects on the road surface is less than a safety threshold, and / or, the driving parameters of the vehicle are greater than a preset value.

22. The method according to any one of claims 19-21, characterized in that, The method further includes: Receiving the desensitized second spatio-temporal information from the vehicle; Using the desensitized second spatio-temporal information for service processing; or, Perform secondary desensitization processing on the desensitized second spatio-temporal information using the second set of special desensitization processing rules to obtain the second spatio-temporal information after secondary desensitization processing; when the sensitivity level of the second spatio-temporal information after secondary desensitization processing meets the requirements, send the second spatio-temporal information after secondary desensitization processing to the original equipment manufacturer or supplier.

23. The method according to claim 22, wherein The first set of special desensitization processing rules or the second set of special desensitization processing rules includes at least one of the following: The geographical range allowed for single collection of various types of data in spatio-temporal information, the geographical range allowed for single processing of various types of data in spatio-temporal information, the frame extraction density of sensor data in spatio-temporal information, the image processing method of sensor data in spatio-temporal information, the thinning density of coordinate data in spatio-temporal information, the method for screening the region of interest AOI of composition data in spatio-temporal information, the semantic processing method of composition data in spatio-temporal information, the geographical range allowed for single transmission of various types of data in spatio-temporal information, the transmission method allowed for various types of data in spatio-temporal information.

24. The method according to claim 22 or 23, characterized in that, The first set of special desensitization processing rules and the second set of special desensitization processing rules are determined according to at least one of the vehicle's data processing capabilities, the transmission requirements of spatio-temporal information, the acquisition requirements of spatio-temporal information, and the application scenarios of spatio-temporal information.

25. The method according to any one of claims 22-24, characterized in that, The sensitivity level is determined according to at least one of the following indicators: The acquisition frequency, acquisition interval period, data type, coordinate system, geographical range, or spatial distribution of various types of data in spatio-temporal information, the indicators of sensor data in spatio-temporal information, the indicators of composition data in spatio-temporal information, or the indicators of coordinate data in spatio-temporal information.

26. The method according to any one of claims 22-25, characterized in that, The method further includes: Obtain the vehicle's data processing capabilities; Determine that the vehicle's data processing capabilities match the first set of special desensitization processing rules.

27. The method according to any one of claims 19-26, characterized in that, Before sending the first indication information to the vehicle, the method further includes: Determine that the emergency event meets the preset conditions according to at least one of the emergency level of the emergency event, the sensor data of the emergency event, or the historical data of the vehicle.

28. A data processing device, characterized in that, Includes a module or unit for executing the method according to any one of claims 12 to 18, or includes a module or unit for executing the method according to any one of claims 19 to 27.

29. A computing device, characterized in that, Includes: A processor, the processor is coupled with a memory, the memory is used to store instructions, when the instructions are executed by the processor, the method according to any one of claims 12 to 18 is executed, or the method according to any one of claims 19 to 27 is executed.

30. A computer-readable storage medium, characterized in that, The computer program or instructions are stored in the storage medium, when the computer program or instructions are executed by the communication device, the method according to any one of claims 12 to 18 is implemented, or the method according to any one of claims 19 to 27 is implemented.

Images