Navigation method based on privacy protection and electronic equipment

Abstract

The invention provides a navigation method based on privacy protection and electronic equipment, and relates to the technical field of privacy protection.The method comprises the steps that firstly, under the condition that a privacy navigation mode of target equipment is started, candidate places around a destination are retrieved from map data based on the destination indicated by a navigation instruction, and the candidate places are selected from the candidate places; the present invention makes it possible to make a candidate location spatially close to a destination point and not directly point to the destination point. And then, based on the candidate place, the map data and the current place of the target equipment, generating a navigation route, and performing navigation according to the navigation route, so that plaintext data of a destination point is not reserved in the navigation process, and the risk of destination leakage in the navigation process is reduced. Therefore, on the premise of ensuring that the navigation route is available, the plaintext data of the destination in the navigation process can be effectively protected in a candidate place replacement manner.

Description

Technical Field

[0001] This disclosure relates to the field of privacy protection technology, and in particular to a privacy-protected navigation method and electronic device. Background Technology

[0002] Navigation can provide users with real-time, optimal driving routes in complex road environments, guiding them to their destinations efficiently and safely, significantly reducing travel burdens. However, navigation involves a large amount of sensitive data related to user location and itinerary. If this data is leaked, it may expose users' whereabouts and daily routines, leading to privacy violations and even risks to personal safety and property. Therefore, protecting the privacy of navigation data is crucial.

[0003] Currently, navigation privacy protection typically involves encrypting or transmitting the generated navigation data after navigation is complete. However, this method is primarily post-hoc protection; if the encryption mechanism is breached, the data remains at risk of leakage. Furthermore, during navigation, the data is often in a decrypted or plaintext state, which also poses a risk of privacy exposure. Therefore, current navigation privacy protection measures are still insufficient. Summary of the Invention

[0004] In view of the above problems, this disclosure provides a privacy-preserving navigation method and electronic device that overcomes or at least partially solves the problem of insufficient protection in current privacy-preserving navigation methods. The technical solution is as follows: A privacy-preserving navigation method includes: when the target device has enabled privacy navigation mode, responding to a navigation command, retrieving candidate locations from map data based on the destination location indicated by the navigation command, the candidate locations being points of interest around the destination; generating a navigation route based on the candidate locations, map data, and the current location of the target device; and navigating according to the navigation route.

[0005] In the above solution, firstly, when the target device has enabled privacy navigation mode, in response to navigation commands, candidate locations are retrieved from map data based on the destination indicated by the navigation commands. These candidate locations are points of interest (POIs) surrounding the destination, and the destination is obfuscated to prevent the disclosure of plaintext destination information. Then, based on the candidate locations, map data, and the target device's current location, a navigation route is generated and followed. This allows for real-time protection of user navigation privacy while the navigation function operates normally. Overall, by obfuscating the destination before navigation, the solution significantly reduces the risk of user data leakage while ensuring navigation availability and protecting the privacy of navigation data during the navigation process.

[0006] A privacy-preserving navigation device, the device comprising: The retrieval module, when the target device is in privacy navigation mode, responds to navigation commands and retrieves candidate locations from map data based on the destination indicated by the navigation commands. The candidate locations are points of interest around the destination. The generation module, based on the candidate locations, map data, and the current location of the target device, generates a navigation route. The navigation module, based on the navigation route, performs navigation.

[0007] An electronic device includes a memory for storing a computer program; and a processor for implementing any of the optional privacy-preserving navigation methods described above when executing the computer program.

[0008] A computer-readable storage medium storing a computer program that, when executed by a processor, implements any of the optional privacy-preserving navigation methods described above.

[0009] A computer program product, when run on a computer, causes the computer to perform the aforementioned steps to implement any of the optional privacy-preserving navigation methods described above.

[0010] By employing the above technical solution, this disclosure provides a privacy-preserving navigation method and electronic device. First, when the target device is in privacy navigation mode, candidate locations around the destination are retrieved from map data based on the destination indicated by the navigation command. This ensures that the candidate locations are spatially close to the destination without directly pointing to it. Then, based on the candidate locations, map data, and the target device's current location, a navigation route is generated, and navigation is performed according to the route. This eliminates the retention of plaintext data of the destination during navigation, reducing the risk of destination leakage. Thus, while ensuring the usability of the navigation route, effective protection of plaintext data of the destination is achieved through candidate location substitution during navigation.

[0011] The above description is merely an overview of the technical solution disclosed herein. In order to better understand the technical means of this disclosure and to implement it in accordance with the contents of the specification, and to make the above and other objects, features and advantages of this disclosure more apparent and understandable, specific embodiments of this disclosure are described below. Attached Figure Description

[0012] Various other advantages and benefits will become apparent to those skilled in the art upon reading the following detailed description of preferred embodiments. The accompanying drawings are for illustrative purposes only and are not intended to limit the scope of this disclosure. Furthermore, the same reference numerals denote the same parts throughout the drawings. In the drawings: Figure 1 A schematic diagram of a privacy-preserving navigation system provided in an embodiment of this disclosure is shown; Figure 2 One of the flowcharts of the privacy-preserving navigation method provided in this disclosure is shown. Figure 3 A second schematic flowchart of the privacy-preserving navigation method provided in this disclosure embodiment is shown; Figure 4 This illustration shows one of the application scenarios of the privacy-preserving navigation method provided in this disclosure. Figure 5 This illustration shows a second application scenario diagram of the privacy-preserving navigation method provided in this embodiment of the present disclosure; Figure 6 This illustration shows the third application scenario diagram of the privacy-preserving navigation method provided in this embodiment of the present disclosure; Figure 7 The third schematic flowchart of the privacy-preserving navigation method provided in this embodiment of the present disclosure is shown; Figure 8 The fourth schematic flowchart of the privacy-preserving navigation method provided in this embodiment of the present disclosure is shown. Figure 9 The fourth illustration shows an application scenario diagram of the privacy-preserving navigation method provided in this disclosure embodiment; Figure 10 The fifth schematic flowchart of the privacy-preserving navigation method provided in this embodiment of the present disclosure is shown; Figure 11 The fifth illustration shows an application scenario diagram of the privacy-preserving navigation method provided in this disclosure embodiment; Figure 12 A schematic diagram of the structure of a privacy-preserving navigation device provided in an embodiment of this disclosure is shown; Figure 13 A schematic diagram of the structure of an electronic device provided in an embodiment of this disclosure is shown. Detailed Implementation

[0013] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.

[0014] With the widespread adoption of intelligent connected vehicles, in-vehicle navigation systems have become a standard feature. After users set their destination, the system can quickly plan routes and provide real-time navigation. However, existing in-vehicle navigation systems have significant privacy vulnerabilities in their route calculation and data storage mechanisms. During vehicle sharing, when the system is viewed externally, or when data is uploaded, third parties can directly access the user's travel history and actual destination through historical records and screen displays, easily leading to privacy leaks. Most current navigation privacy protection solutions only encrypt and store navigation data, indicating that this approach is primarily reactive and cannot fundamentally solve the privacy leakage problem.

[0015] To address the aforementioned issues, this disclosure provides a privacy-preserving navigation solution. First, with the target device in privacy navigation mode enabled, candidate locations around the destination are retrieved from map data based on the destination indicated by the navigation command. This ensures that the candidate locations are spatially close to the destination without directly pointing to it. Then, based on the candidate locations, map data, and the target device's current location, a navigation route is generated, and navigation is performed according to the route. This eliminates the retention of plaintext data of the destination during navigation, reducing the risk of destination leakage. Thus, while ensuring the usability of the navigation route, effective protection of plaintext data of the destination is achieved through candidate location substitution during navigation.

[0016] Therefore, this disclosure provides a privacy-preserving navigation system, such as... Figure 1 As shown, the system mainly includes a server 100 and electronic devices 200.

[0017] The electronic device 200 provided in this embodiment can be any electronic device with navigation function, such as an in-vehicle device, smart vehicle, mobile phone, computer, tablet computer, etc. The electronic device 200 can communicate with the server 100. The electronic device 200 can communicate with the server 100 via a local area network (LAN) or a wireless local area network (WLAN). The server 100 can be a server providing various services, can be a server cluster or multiple server clusters, and can include one or more types of servers.

[0018] It should be noted that the privacy-protected navigation method provided in this embodiment can be executed by the aforementioned electronic device 200.

[0019] Furthermore, the privacy-preserving navigation method provided in this disclosure can be executed by a privacy-preserving navigation device, which can be either hardware or software. When the privacy-preserving navigation device is hardware, it can be an electronic device with privacy-preserving navigation functionality. When the privacy-preserving navigation device is software, it can be installed in the aforementioned electronic device. It can be implemented as multiple software programs or software modules, or as a single software program or software module. No specific limitations are made here.

[0020] Based on the aforementioned privacy-preserving navigation system, and to address the technical problem that current privacy-preserving navigation methods lack comprehensive protection, this disclosure provides a privacy-preserving navigation method, such as... Figure 2 As shown, Figure 2 This is a schematic flowchart illustrating a privacy-preserving navigation method provided in this disclosure, which may include the following steps S11-S13: S11. When the target device has enabled privacy navigation mode, in response to the navigation command, retrieve candidate locations from the map data based on the destination location indicated by the navigation command.

[0021] The target device is the device that executes the privacy-preserving navigation method disclosed herein. For example, the target device can be an in-vehicle device, a smart vehicle, a mobile phone, a computer, etc. Candidate locations are points of interest (POIs) surrounding the destination; that is, the destination is not included in the candidate locations. A point of interest is a searchable geographic entity in the map data, which can be a shop, gas station, park, entrance to a residential area, road intersection, or other point with a specific geographical location. It is the basic geographic data for map navigation.

[0022] First, determine whether the target device has enabled privacy navigation mode. Specifically, the target device can provide an option to enable and disable privacy navigation mode, allowing users to control the privacy navigation function. When the option to enable privacy navigation mode is detected, it can be determined that the user has enabled privacy protection.

[0023] Secondly, in response to navigation instructions, candidate locations are retrieved from map data based on the destination indicated by the navigation instructions.

[0024] The navigation commands can be voice commands issued by the user, or they can be commands triggered by the user entering the desired destination in the search box of the target device's navigation interface and clicking search.

[0025] The method of retrieving candidate locations from map data based on the destination indicated by navigation instructions can be to first search for multiple locations close to the destination in the map data, and then filter out invalid locations and prohibited POIs from the multiple locations to obtain candidate locations.

[0026] In some embodiments, the process of retrieving candidate locations may also consider, but is not limited to, factors such as the location's geographical location, the distance between the location and the destination, the location's category (used to describe the function or purpose of the location; for example, specific categories may include public places, private places, etc.; more abstract categories may include commercial, transportation, service, etc.), and the location's attributes (used to describe the unique characteristics or status of the location, such as name, location, business hours, etc.) to ensure that candidate locations are spatially close to the destination but different in type from the destination's category, thus avoiding the deduction of the destination from the candidate location's category. For example, when the destination's location category is commercial, non-commercial locations around the destination can be identified as candidate locations.

[0027] S12. Generate a navigation route based on candidate locations, map data, and the current location of the target device.

[0028] Specifically, the method for generating navigation routes based on candidate locations, map data, and the current location of the target device can be as follows: First, use map data, the current location of the target device, and each candidate location to calculate the candidate navigation route corresponding to each candidate location. Then, evaluate each candidate navigation route based on traffic constraints such as traffic conditions and road attributes, and select the optimal route from multiple candidate navigation routes as the navigation route. Alternatively, the target location can be selected from the candidate locations first, and then the optimal navigation route between the current location and the target location can be calculated by combining map data and the current location of the target device, which will be the final navigation route.

[0029] S13. Navigate according to the navigation route.

[0030] In the above solution, firstly, when the target device has enabled privacy navigation mode, in response to navigation commands, candidate locations are retrieved from map data based on the destination indicated by the navigation commands. These candidate locations are points of interest (POIs) surrounding the destination, and the destination is obfuscated to prevent the disclosure of plaintext destination information. Then, based on the candidate locations, map data, and the target device's current location, a navigation route is generated, and navigation is performed according to the route. This allows for real-time protection of user navigation privacy while the navigation function operates normally. Overall, by obfuscating the destination before navigation, the solution significantly reduces the risk of user data leakage while ensuring navigation availability and protecting the privacy of navigation data during the navigation process.

[0031] In some implementations, such as Figure 3 As shown, the method of retrieving candidate locations from map data based on the destination indicated by the navigation command in step S11 above may include the following steps S111-S112.

[0032] S111. In the map data, determine the search range with the destination point as the center point and the target distance as the radius.

[0033] The target distance is a preset value, such as a default value or a value set by relevant personnel based on actual conditions. For example, the target distance could be any value between 50m and 500m.

[0034] In other words, the search range is defined as a circular area centered on the destination and with the target distance as its radius. For example, in... Figure 4 In the simplified map shown, a circular search range O is obtained with the destination point M as the center and r as the radius.

[0035] S112. Determine candidate locations based on the categories of each point of interest within the search scope.

[0036] Specifically, the method of determining candidate locations based on the categories of each point of interest within the search scope can be either to determine locations within the search scope that are different from the destination in category, or to determine locations within the search scope that belong to one or more categories.

[0037] In some embodiments, a category selection entry for candidate locations may also be provided to users, allowing them to specify the category of the candidate locations, and then candidate locations are determined from the search scope based on the category selected by the user.

[0038] In the above scheme, the search range is determined by using the destination point as the center point and the target distance as the radius in the map data. Candidate locations are determined according to the category of each location within the search range. By providing candidate locations that are close to the destination point but do not include the destination point, the navigation system can avoid directly using the plaintext data of the destination point when generating navigation routes. This achieves the protection of the plaintext data of the destination point by obfuscation, which reduces the risk of plaintext data leakage during navigation while ensuring the availability of navigation routes.

[0039] In some embodiments, the method for determining candidate locations based on the categories of points of interest within the search range can be to first use points of interest within the search range that belong to the target category as filter points, and then use filter points that are different from the destination as candidate locations. Here, the target category can be a pre-defined category of locations, or a category of locations specified by the user. For example, when the category of locations includes public places and private places, the target category can be public places.

[0040] For example, when the target category is public places, in situations such as Figure 4 In the simplified map shown, M represents the destination point, and P1 (public place), P2 (private place), P3 (public place), and P4 (public place) are all locations within the search range. Therefore, P1 (public place), P3 (public place), and P4 (public place) are identified as candidate locations. Among them, P2 is excluded because it is a private place.

[0041] In the above scheme, by identifying locations belonging to the target category other than the destination within the search range as candidate locations, the rationality of the candidate location selection can be guaranteed even without including the destination.

[0042] In some embodiments, the method for determining candidate locations based on the category of each point of interest within the search range can be as follows: first, select points of interest within the search range that belong to the target category as filter points, and then select filter points that are different from the destination point as candidate filter points. Next, obtain the location distance between each candidate filter point and the destination point, and sort the candidate filter points in ascending order based on the location distance to obtain a candidate filter point sequence. Finally, determine the top N candidate filter points in the candidate filter point sequence as candidate locations.

[0043] The filter points include any one of the locations, where N is greater than or equal to 2. The target category is either a pre-defined category for the location or a category specified by the user. For example, when the location categories include public places and private places, the target category could be public places.

[0044] For example, in such Figure 4 In the simplified map shown, N=2, M is the destination point, and P1 (public place, distance from M is m1), P2 (private place, distance from M is m2), P3 (public place, distance from M is m3), and P4 (public place, distance from M is m4) are all locations within the search range, and m1>m2>m3>m4.

[0045] The candidate selection point sequence is as follows: P4 (public place, distance from M is m4), P3 (public place, distance from M is m3), P1 (public place, distance from M is m1). Since N=2, P3 and P4 are selected as candidate locations. P2 is excluded because it is a private place, and P1 is excluded because the distance order is 3>(N=2).

[0046] In the above scheme, by identifying candidate locations that are outside the target category and are close to the destination within the search range, the candidate locations can be spatially closer to the destination, thereby further improving the rationality of the candidate location selection without including the destination.

[0047] In some embodiments, when no location of the target category exists within the search range, the privacy-preserving navigation method may further include increasing the search range by a first value and re-searching until a candidate location is determined.

[0048] In some embodiments, when the search scope is expanded to the preset maximum search scope and no candidate location has been determined, the geographical unit (such as an administrative region) to which the destination belongs can be determined as the search scope, thereby determining the candidate location.

[0049] In some embodiments, when no location of the target category exists within the search range, the privacy-preserving navigation method may further include first rasterizing the physical area corresponding to the search range to obtain multiple grids. For example, in... Figure 5 In the simplified map shown, M represents the destination point, and O represents the search range. The search range is rasterized to obtain multiple grids within it. Then, grids located within a preset range are identified as target grids. Finally, a grid location point is determined from each target grid, and this grid location point is designated as a candidate location. The preset range is smaller than the search range and does not include the location of the destination point. The shape of the preset range and its position within the search range are not limited herein.

[0050] In some embodiments, the preset range can be a ring-shaped range. For example, the ring-shaped range can be a ring-shaped area centered on the destination point, with a first distance as the inner radius and a second distance as the outer radius. The first distance is less than the second distance, and the second distance is less than or equal to the radius of the search range. For example, in... Figure 6 In the simplified map shown, M is the destination point, O is the search range, r is the radius of the search range, the area corresponding to the first distance r1 is area A, the annular area with the first distance r1 as the inner radius and the second distance r2 as the outer radius is area B, and the grid within area B is determined as the target grid.

[0051] In the above scheme, firstly, when no location of the target category exists within the search range, the search range is increased by a first value and the search is repeated until a candidate location is determined. This avoids the inability to proceed with subsequent processing due to insufficient candidate locations, thus improving the stability of candidate location determination. Secondly, when no location of the target category exists within the search range, the physical area corresponding to the search range can also be rasterized, and the positioning points corresponding to the grids within the preset range can be determined as candidate locations. This allows candidate locations to be distributed around the destination point without including it, thereby ensuring the rationality of the number and spatial distribution of candidate locations while reducing the direct pointing to the destination point by the candidate locations, thus reducing the possibility of the destination point being identified or inferred.

[0052] In some implementations, such as Figure 7 As shown, when there are at least two candidate locations, the method of generating a navigation route based on the candidate locations, map data, and the current location of the target device in step S12 may include the following steps S21-S22.

[0053] S21. Determine the target location from at least two candidate locations and use the target location as the navigation destination.

[0054] Specifically, determining the target location from at least two candidate locations can be done in two ways: either by selecting any one candidate location as the target location, or by selecting the candidate location closest to the destination. The distance between the candidate location and the destination can be a straight-line distance or a travel distance. Selecting the candidate location closest to the destination avoids directly using the destination's plaintext data for navigation, mitigating the risk of destination leakage. It also allows users to reach the destination more quickly, reducing the time and effort required to find it after arrival. Conversely, selecting any candidate location as the target location, while ensuring spatial proximity, reduces the certainty of the selection result and decreases the direct directional connection between the target location and the destination.

[0055] Then, the target location will be used as the navigation destination.

[0056] S22. Generate a navigation route based on the navigation destination, map data, and the current location of the target device.

[0057] Specifically, based on the target device's current location and navigation destination, and combined with map data, route planning is initiated to generate a navigation route, which is then displayed on the target device. Multiple navigation routes can be planned based on at least one of the following criteria: most efficient path, shortest distance, and least time, for the user to choose from.

[0058] In some embodiments, when the route planning fails due to network issues, data loss, or other reasons during the process of planning a navigation route based on the current location of the target device and the navigation destination combined with map data, the process returns to step S21 to determine the target location from the candidate locations and replans the navigation route until the navigation route planning is completed.

[0059] In the above solution, the target location is determined from the candidate locations, and a navigation route is generated based on the target location, map data, and the current location of the target device, thus avoiding the risk of the user directly exposing the real destination.

[0060] In some implementations, such as Figure 8 As shown, the method of determining the target location from the candidate locations in step S21 above may include the following steps S210-S211.

[0061] S210. Display the candidate tabs corresponding to each candidate location in the navigation interface.

[0062] The candidate tab includes the name of the candidate location and the distance between the candidate location and the destination, which guides the user in selecting the target location.

[0063] Specifically, in the navigation interface, candidate tabs corresponding to each candidate location can be displayed around it. For example, in... Figure 9 In the simplified map shown, candidate locations include P1, P2, P3, and P4. Candidate tabs for each candidate location can be displayed around it. Alternatively, a list of candidate tabs can be displayed in a specific area of ​​the navigation interface for user selection. This disclosure does not limit the specific display method of the candidate tabs.

[0064] S211. In response to the user's triggering operation on the target candidate tab, the candidate location corresponding to the target candidate tab is determined as the target location.

[0065] The target candidate tab is any candidate tab.

[0066] For example, in such Figure 9 The simplified map shown includes four candidate locations: P1, P2, P3, and P4. When the user triggers the candidate location P1, P1 will be selected as the target location.

[0067] In the above solution, before determining the target location from the candidate locations, a candidate tab is displayed in the navigation interface for each candidate location. This tab provides the name of each candidate location and its distance from the destination, allowing users to intuitively compare the spatial relationships between the candidate locations and the destination, thereby improving the understandability and accuracy of the target location selection. Furthermore, in response to the user's triggering of the target candidate tab, the corresponding candidate location is determined as the target location. This allows the user to participate in the target location determination process, enhancing the flexibility and controllability of the selection process while ensuring that the target location originates from the candidate locations.

[0068] In some implementations, privacy-preserving navigation methods also include deleting search records for the destination before navigating according to the navigation route.

[0069] In some implementations, privacy-preserving navigation methods also include deleting search records for candidate locations before navigating according to the navigation route.

[0070] When navigating according to a navigation route, the actual destination point will no longer be used during the navigation process because it has been replaced with candidate or target locations. Therefore, deleting the plaintext data corresponding to the destination point will not affect the navigation process. Furthermore, deleting the plaintext data ensures that any subsequent information about the destination point will not be leaked, thus guaranteeing the effectiveness of user navigation privacy protection.

[0071] The search history refers to the data recorded when a user enters a destination and clicks the search button to locate the destination in the map data; the candidate location retrieval history refers to the data recorded when retrieving candidate locations from the map data based on the destination in step S11. This avoids the risk of subsequent leakage caused by the retention of destination data.

[0072] Furthermore, the storage location of search records for destinations and retrieval records for candidate locations depends on how the map data is acquired. For example, when the map data is an online map, the search and retrieval processes may generate records both locally and on the server (e.g., cached records); while when the map data is an offline map, the search and retrieval processes may only generate relevant records locally. Therefore, when deleting search records for destinations and retrieval records for candidate locations, if the map data is an online map, in addition to deleting the local records, it is also necessary to delete the relevant records on the server. This ensures that the plaintext data corresponding to the destination is cleared from both server and local storage media in online map data scenarios, and from local records in offline map data scenarios. This avoids the risk of subsequent leakage due to data remaining on the server or local storage.

[0073] In some implementations, such as Figure 10 As shown, the privacy-preserving navigation method may also include the following steps S31-S33.

[0074] S31. When the target device does not enable the privacy navigation mode, if the user enters and locates the destination point on the navigation interface, display the privacy navigation control and the normal navigation control on the navigation interface.

[0075] First, the method for determining that the target device has not enabled privacy navigation mode is the same as the method for determining that the target device has enabled privacy navigation mode in step S11, and will not be repeated here. Second, the user inputs and locates the destination point in the navigation interface, which means that the user inputs the destination point in the search box of the navigation interface and triggers the operation of locating the destination point (such as clicking the search control).

[0076] Then, privacy navigation controls and regular navigation controls are displayed on the navigation interface. For example, such as... Figure 11 As shown, when a user enters and locates their destination M in the search box, privacy navigation controls and regular navigation controls are displayed at the bottom of the navigation interface for the user to choose from.

[0077] S32. When the user triggers the privacy navigation control, determine that the user has enabled the privacy protection mode and execute the privacy protection-based navigation process. Specifically, when the user triggers the privacy navigation control, the privacy-preserving navigation process disclosed herein is executed, such as retrieving candidate locations based on destination M, determining the target location, determining the navigation route based on the current location and the target location, deleting the plaintext data of destination M, and starting the navigation process.

[0078] S33. When it is detected that the user has triggered the normal navigation control, determine that the user has not enabled the privacy protection mode, and execute the normal navigation process.

[0079] Specifically, when a user triggers a normal navigation control, the normal navigation process is executed, such as determining the navigation route based on the destination M and the target location - starting the navigation process.

[0080] In the above solution, when the target device does not have privacy navigation mode enabled, displaying privacy navigation controls and normal navigation controls on the navigation interface allows users to choose whether to enable privacy protection before navigation begins, thereby improving the perceptibility of the function. Furthermore, responding to user actions on the privacy navigation controls, a privacy-protected navigation process is executed; or responding to user actions on the normal navigation controls, a normal navigation process is executed. This allows users to actively control the navigation method, ensuring that privacy protection is optional while also catering to the differentiated needs of users in different scenarios.

[0081] In some embodiments, the privacy-preserving navigation method further includes encrypting and storing the generated navigation data after navigation has ended. Encryption methods include, but are not limited to, symmetric encryption, asymmetric encryption, hash encryption combined with salting, data segmentation encryption, or obfuscation. By encrypting and storing the generated navigation data after navigation has ended, data generated during the navigation process is saved in encrypted form in subsequent storage stages, thereby preventing unauthorized access or data leakage risks. This provides supplementary security protection for the generated data and, in conjunction with the aforementioned plaintext data deletion mechanism, further enhances the overall security of the navigation data.

[0082] In summary, firstly, unlike existing solutions that only encrypt without addressing privacy concerns, this disclosure achieves triple privacy protection from the route calculation source (replacing the actual destination with nearby candidate locations) and the storage end (deleting the actual destination data after navigation and encrypting and storing the remaining navigation data), fundamentally solving the problem of user privacy, especially the exposure of the actual destination. Secondly, the navigation route is planned based on effective candidate locations around the actual destination, ensuring that the navigation route guides the user to the vicinity of the actual destination, while maintaining the planning logic and user experience of conventional navigation, without affecting the practicality of navigation and avoiding sacrificing user experience for privacy. Thirdly, it supports one-click activation of the privacy protection mode and is compatible with both manual and voice input methods for the two mainstream destination input methods. Users only need to complete four steps: activating the mode, inputting the destination, selecting candidate locations, and starting navigation, adapting to the convenience needs of in-vehicle scenarios and ensuring a good user experience while protecting user privacy. In addition, when privacy navigation mode is enabled, all display devices, including the vehicle screen, history records, and lock screen, can hide the real destination and only show the target location and a vague route. Third parties cannot obtain any user's privacy information through intuitive viewing, which greatly improves the effect of real-time privacy protection.

[0083] This disclosure embodiment can divide the privacy-protected navigation device into functional modules according to the above method example. For example, each function can be divided into its own functional module, or two or more functions can be integrated into one processing unit. The integrated module can be implemented in hardware or as a software functional module. It should be noted that the module division in this disclosure embodiment is illustrative and only represents one logical functional division; other division methods may be used in actual implementation.

[0084] In addition, such as Figure 12 As shown, Figure 12 This is a schematic diagram of a privacy-preserving navigation device 700 provided in an embodiment of this disclosure. The privacy-preserving navigation device 700 includes: The retrieval module 701 is used to retrieve candidate locations from map data based on the destination location indicated by the navigation command when the target device is in privacy navigation mode. The candidate locations are points of interest around the destination. The generation module 702 is used to generate a navigation route based on the candidate locations, map data and the current location of the target device. The navigation module 703 is used to navigate according to the navigation route.

[0085] In some embodiments, the retrieval module 701 is specifically used to: determine a retrieval range in map data with the destination point as the center point and the target distance as the radius; and determine candidate locations based on the categories of each point of interest within the retrieval range.

[0086] In some embodiments, the retrieval module 701 is specifically used to: use points of interest within the retrieval range that belong to the target category as filter points; and use filter points that are different from the destination as candidate locations.

[0087] In some embodiments, the retrieval module 701 is specifically used to: use points of interest within the retrieval range that belong to the target category as filter points; determine filter points that are different from the destination point as candidate filter points; obtain the location distance between each candidate filter point and the destination point, and sort the candidate filter points in ascending order based on the location distance to obtain a candidate filter point sequence; determine the top N candidate filter points in the candidate filter point sequence as candidate locations; where N is greater than or equal to 2.

[0088] In some embodiments, the retrieval module 701 is further configured to: when there is no location of the target category within the retrieval range, increase the retrieval range by a first value and re-retrieve until a candidate location is determined; Alternatively, if no location of the target category exists within the search range, the physical area corresponding to the search range is rasterized to obtain multiple grids; the grids within the preset range are identified as target grids; the preset range is smaller than the search range and does not include the location of the destination; a grid location point is determined from each target grid, and the grid location point of each grid is identified as a candidate location.

[0089] In some embodiments, the generation module 702 is specifically configured to: when there are at least two candidate locations, determine a target location from the at least two candidate locations, and use the target location as the navigation destination; and generate a navigation route based on the navigation destination, map data, and the current location of the target device.

[0090] In some embodiments, the generation module 702 is specifically used to: determine any candidate location as the target location; or, determine the candidate location closest to the destination as the target location.

[0091] In some embodiments, the generation module 702 is specifically configured to: display a candidate tab corresponding to each candidate location in the navigation interface before determining the target location from the candidate locations; the candidate tab includes the name of the candidate location and the distance between the candidate location and the destination point, for guiding the user to select the target location; in response to the user's triggering operation on the target candidate tab, determine the candidate location corresponding to the target candidate tab as the target location; the target candidate tab can be any candidate tab.

[0092] In some embodiments, the navigation module 703 is further configured to delete the search records corresponding to the destination before navigating according to the navigation route.

[0093] In some embodiments, the privacy-protected navigation device further includes a display module and a determination module; the display module is configured to display privacy navigation controls and normal navigation controls on the navigation interface when the user inputs and locates a destination point on the navigation interface, provided that the privacy navigation mode is not enabled on the target device; the determination module is configured to: determine that the user has enabled the privacy protection mode when the user triggers the privacy navigation control, and execute the privacy-protected navigation process; and determine that the user has not enabled the privacy protection mode when the user triggers the normal navigation control, and execute the normal navigation process.

[0094] Regarding the apparatus in the above embodiments, the specific manner in which each unit performs its operation has been described in detail in the embodiments related to the method, and will not be elaborated upon here.

[0095] Figure 13 This is a schematic diagram of the structure of an electronic device 800 provided in an embodiment of this disclosure. For example, as shown... Figure 13 As shown, the electronic device 800 includes a memory 801 and a processor 802, wherein the memory 801 stores executable program code 8011, and the processor 802 is used to call and execute the executable program code 8011 to perform a privacy-preserving navigation method.

[0096] This embodiment can divide the privacy-preserving navigation system into functional modules based on the above method example. For example, each module can be assigned to a separate functional module, or two or more functions can be integrated into one processing module. The integrated module can be implemented in hardware. It should be noted that the module division in this embodiment is illustrative and only represents one logical functional division. In actual implementation, there may be other division methods.

[0097] When each functional module is divided according to its corresponding function, the privacy-preserving navigation system may include: a retrieval module, a generation module, a navigation module, etc. It should be noted that all relevant content of each step involved in the above method embodiments can be referenced from the functional descriptions of the corresponding functional modules, and will not be repeated here.

[0098] The privacy-preserving navigation system provided in this embodiment is used to execute the above-described privacy-preserving navigation method, and thus can achieve the same effect as the above-described implementation method.

[0099] When using integrated units, a privacy-preserving navigation system can include a processing module and a storage module. The processing module can be used to control and manage the actions of the privacy-preserving navigation system. The storage module can support the execution of program code and data by the privacy-preserving navigation system.

[0100] The processing module may be a processor or a controller, which can implement or execute various exemplary logic blocks, modules, and circuits described in conjunction with embodiments of this disclosure. The processor may also be a combination of functions that implement computing capabilities, such as a combination of one or more microprocessors, a combination of digital signal processing (DSP) and a microprocessor, etc., and the storage module may be a memory.

[0101] This disclosure also provides a computer-readable storage medium (including but not limited to disk storage, compact disc read-only memory (CD-ROM), optical storage, etc.) storing computer program code. When the computer program code is run on a computer, the computer executes the above-described related method steps to implement the privacy-protected navigation method provided in the above embodiments.

[0102] This disclosure also provides a computer program product that, when run on a computer, causes the computer to perform the aforementioned steps to implement a privacy-protected navigation method provided in the above embodiments.

[0103] The beneficial effects of the above embodiments can be referred to the beneficial effects of the corresponding methods provided above, and will not be repeated here.

[0104] Through the above description of the embodiments, those skilled in the art will understand that, for the sake of convenience and brevity, only the division of the above functional modules is used as an example. In actual applications, the above functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0105] In the embodiments provided in this disclosure, it should be understood that the disclosed apparatus and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another device, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection of devices or units may be electrical, mechanical, or other forms.

[0106] In the description of this disclosure, it should be understood that if the terms "upper", "lower", "front", "rear", "left" and "right" are used to indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings, they are only for the convenience of describing the present invention and simplifying the description, and do not indicate or imply that the position or element referred to must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of this disclosure.

[0107] It should be noted that, in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes the element.

[0108] The above are merely embodiments of this disclosure and are not intended to limit the scope of this disclosure. Various modifications and variations can be made to this disclosure by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this disclosure should be included within the scope of the claims of this disclosure.

Claims

1. A privacy-preserving navigation method, characterized in that, The method includes: When the target device has enabled privacy navigation mode, in response to a navigation command, candidate locations are retrieved from map data based on the destination indicated by the navigation command. The candidate locations are points of interest around the destination. A navigation route is generated based on the candidate locations, the map data, and the current location of the target device; Follow the navigation route provided.

2. The privacy-preserving navigation method according to claim 1, characterized in that, The process of retrieving candidate locations from map data based on the destination indicated by the navigation instructions includes: In the map data, the search range is determined with the destination point as the center point and the target distance as the radius; Candidate locations are determined based on the categories of each point of interest within the search range.

3. The privacy-preserving navigation method according to claim 2, characterized in that, The step of determining candidate locations based on the categories of points of interest within the search range includes: Use points of interest within the search range that belong to the target category as filter points; Select locations that are different from the destination as candidate locations.

4. The privacy-preserving navigation method according to claim 2, characterized in that, The step of determining candidate locations based on the categories of points of interest within the search range includes: Use points of interest within the search range that belong to the target category as filter points; The filter points that are different from the destination point are identified as candidate filter points; Obtain the location distance between each candidate screening point and the destination point, and sort the candidate screening points in ascending order based on the location distance to obtain a candidate screening point sequence; The top N candidate screening points in the candidate screening point sequence are determined as candidate locations; N is greater than or equal to 2.

5. The privacy-preserving navigation method according to claim 3 or 4, characterized in that, The method further includes: If no location of the target category is found within the search range, the search range is increased by a first value and the search is repeated until a candidate location is identified. or, If no location of the target category exists within the search range, the physical area corresponding to the search range is rasterized to obtain multiple grids; Grids within a preset range are identified as target grids; the preset range is smaller than the search range, and the preset range does not include the location of the destination point; A grid location point is determined from each of the target grids, and the grid location point of each grid is determined as a candidate location.

6. The privacy-preserving navigation method according to claim 1, characterized in that, When the number of candidate locations is at least two, generating a navigation route based on the candidate locations, the map data, and the current location of the target device includes: A target location is determined from at least two candidate locations, and the target location is used as the navigation destination; A navigation route is generated based on the navigation destination, the map data, and the current location of the target device.

7. The privacy-preserving navigation method according to claim 1, characterized in that, Before determining the target location from the candidate locations, the method further includes: The navigation interface displays a candidate tab corresponding to each candidate location; the candidate tab includes the name of the candidate location and the distance between the candidate location and the destination, to guide the user in selecting the target location; Determining the target location from the candidate locations includes: In response to a user's triggering action on a target candidate tab, the candidate location corresponding to the target candidate tab is determined as the target location; the target candidate tab can be any candidate tab.

8. The privacy-preserving navigation method according to claim 1, characterized in that, The method further includes: Before navigating according to the navigation route, delete the search records corresponding to the destination.

9. The privacy-preserving navigation method according to any one of claims 1-4 and 6-8, characterized in that, The method further includes: When the privacy navigation mode is not enabled on the target device, if the user enters and locates the destination on the navigation interface, both privacy navigation controls and normal navigation controls will be displayed on the navigation interface. When the user triggers the privacy navigation control, it is determined that the user has enabled the privacy protection mode, and a privacy-protected navigation process is executed. When a user triggers a normal navigation control, if the user does not enable privacy protection mode, the normal navigation process is executed.

10. An electronic device, characterized in that, include: Memory, used to store computer programs; A processor, configured to implement the privacy-preserving navigation method as described in any one of claims 1 to 9 when executing the computer program.

Images