201226854 六、發明說明： 【發明所屬之技術領域】 本發明係關於以下類型之映射或導航裝置：即用於（例 如）確疋自一位置至另一位置之路線且視情況可與遠端系 統通信路線資訊，本發明亦係關於一種操作一映射或導航 裝置（視情況’涉及其與遠端系統的通信）之方法。 【先前技術】 攜帶型計算器件（例如，包括GPS(全球定位系統）信號接 收及處理功能性之攜帶型導航器件（PND))係熟知的且廣泛 地用作車内或其他運輸工具導航系統。 一般而言，現代PND包含處理器、記憶體（揮發性及非 揮發性中之至少一者，且通常兩者皆有）及儲存於該記憶 體内之地圖資料。處理器與記憶體合作以提供執行環境， 在此環境中可建立軟體作業系統，且另外，常常提供一或 多個額外軟體程式錢PND之功能性能夠受控制，# 各種其他功能。 八 通常，料n件進-步包含允許使用者與^件 =件之-或多個輸入介面’及一或多個輸出介面，： :或多個輸出介面’可將資訊中繼傳遞至使用者 ::面：說明性實例包括視覺顯示器及用於聲訊輸出之揚 。輸入介面之說明性實例包括用以控 關操作或a他牲n^ — 丨卞 < 開/ 實體独（若11件内建於運 月'J -，則该等按紐未必在該器件自身上，而是可 向盤上)’及用於偵測使用者話語之麥克風。在一特定配 152808.doc 201226854 置中’輸出介面顯示器可另外组態為觸摸感應式顯示器 (藉由觸摸感應式覆疊片或其他)以提供一輸入介面，藉由 泫輸入介面，使用者可（例如藉由使用軟鍵）藉由觸摸來操 作該器件。 此類型之器件亦將常常包括：一或多個實體連接器介 面藉由”亥或夕個實體連接器介面，可將電力信號及 (視情況）資料信號發射至該器件並自該器件接收該等信 號，及（視情況）-或多個無線發射器/接收器，以允許在蜂 巢式電信及其他信號及資料網路（例如，藍芽（Biuet〇〇th)、201226854 VI. Description of the Invention: [Technical Field] The present invention relates to a mapping or navigation device of the type: for example, for determining a route from one location to another and optionally to a remote system Communication Route Information, The present invention is also directed to a method of operating a mapping or navigation device (as appropriate, involving its communication with a remote system). [Prior Art] Portable computing devices (e.g., portable navigation devices (PNDs) including GPS (Global Positioning System) signal receiving and processing functionality) are well known and widely used as in-vehicle or other vehicle navigation systems. In general, modern PNDs include a processor, memory (at least one of volatility and non-volatile, and usually both) and map data stored in the memory. The processor cooperates with the memory to provide an execution environment in which the software operating system can be established and, in addition, one or more additional software programs are often provided to control the functionality of the PND, # various other functions. In general, the n-steps include the user and the component-or-input interface and one or more output interfaces:: or multiple output interfaces to relay the information to the user. :: Face: Illustrative examples include visual displays and for the output of voice output. Illustrative examples of the input interface include a control operation or a n 丨卞 丨卞 < open / physical independence (if 11 pieces are built in the month of the month 'J -, then the buttons are not necessarily in the device itself On the top, but on the disc) and the microphone used to detect the user's words. In a specific configuration 152808.doc 201226854, the 'output interface display can be additionally configured as a touch-sensitive display (by touch-sensitive overlay or other) to provide an input interface, by means of the input interface, the user can The device is operated by touch (for example by using soft keys). Devices of this type will also often include one or more physical connector interfaces that transmit power signals and (as appropriate) data signals to and receive from the device by means of a "black or a physical connector interface". Equal signals, and (as appropriate) - or multiple wireless transmitters/receivers to allow for cellular telecommunications and other signal and data networks (eg, Bluetooth (Biuet〇〇th),
Wi-Fi、Wi_Max、GSM、UMTS及其類似者）上通信❶ 此類型之PND亦包括—Gps天線，藉由該Gps天線，可 接收包括位置資料之衛星廣播信號，且隨後處理該等衛星 廣播信號以確定該器件之當前位置。 PND亦可包括產生信號之電子回轉儀及加速計，該等信 號可經處理以確定當前角加速度及線加速度，並且又結合 自GPSL號導出之位置資訊來確定該器件及因此安裝了該 器件的運輸工具之速度及相對位移。通常，此等特徵最常 見地提供於運輸工具㈣航錢中，但村提詩觸中 (若此舉係有利的）。 此等聊之效用主要表現在其確定在第一位置(通常， f發或當前位置）與第二位置（通常，目的地）之間的路線之 能力上。此等位置可由器件之使用者藉由廣泛各種不同方 法中之任—者輸入’例如’藉由郵政編石馬、街道名稱及門 牌號、先前儲存之「熟知」目的地（諸如，著名位置、市 152 名 08.doc 201226854 政位置（諸如，體育場或游泳池）或其他興趣點）及最愛目的 地或近來造訪之目的地。 通常，PND具備用於根據地圖資料計算在出發地址位置 與目的地地址位置之間的「最好」或「最適宜」路線之軟 體的功能。「最好」或「最適宜」路線係基於預定準則確 定且不-定為最快或最短路線。指引司機所沿著的路線之 選擇可為非常複雜的，且所選路線可考量現有、預測的及 以動態及/或無線方式接收到的交通及道路資訊、關於道 路速度之歷史資訊及司機對於確定道路備選項之因素的自 身偏好（例如’司機可指定路線不應包括高速公路或收費 道路）。 此外，該器件可連續地監視道路及交通狀況，且由於改 變之狀況而提供或選擇改變路線，在此路線上將進行剩下 之旅途。基於各種技術（例如，行動電話資料交換、固定 相機、GPS車隊追蹤）之即時交通監視系統正用來識別交通 延遲且將資訊饋入至通知系統中。 此類型之PND通常可安裝於運輸卫具之儀錶板或擔^ 璃上，但亦可形成為運輸工具收音機之機載電腦之部分 實際上形成為運輸工具自身之控制系統之部分。導航器> 亦可為手持型系統之部分，諸如，PDA(攜帶型數位」 理）、媒體播放器、行動電話或其類似者，且在此等情 下，手持型系統之常規功能性藉由將軟體安裝於器件上 執行路線計算及沿著計算出之路線的導航而得以擴展。 路線規劃及導航功能性亦可由執行適當軟體之桌上型 152808.doc 201226854 行動計算資源來提供。舉例而言，皇家汽車俱樂部（RAC) 在httP://www.rac.co.u]^供線上路線規劃及導航設施，該 叹施允af使用者輸入起點及目的地，於是，伺服器（使用 者之計算資源正與之通信）計算路線（其態樣可為使用者指 定的）、產生地圖，且產生詳盡的導航指令集以用於將使 用者自選定起點指引至選定目的地。該設施亦提供計算出 之路線的偽三維呈現（rendering)及路線預覽功能性，該路 線預覽功能性模擬使用者沿著該路線行進’且藉此向使用 者提供計算出之路線的預覽。 在PND之情況下，一旦計算了線路，使用者便與導航器 件互動以視情況自戶斤冑議路線之清單選擇所要的計算出之 路線。視情況，錢者可干預或指引路線選擇過程，例如 错由指定對於-特定旅途，應避免或必須遵循某些路線、 道路、位置或準貞卜PND之路線計算g樣形成—主要功 能，且沿著此路線之導航為另—主要功能。 、在沿著-計算出之路線的導航期間’此等娜常常提供 視覺及/或聲訊指卜用以沿著一所選路線將使用者指引 至彼路線之終點，亦即所要之目的地亦常常在導航 期間於瑩幕上顯示地圖資訊，此資訊在螢幕上定期更新， 使得所顯示之地圖資訊表示器件之當前位置，I因此表亍 =者或使用者之運輸工具之當前位置（若該器件正用於 運輸工具内導航）。 顯示於螢幕上之圖符通常表示當前器件位置，且居中， 其中亦正在顯示在當前器件位置附近的當前及·道路之 I52808.doc 201226854 地圖資訊及其他地圖特徵。另外， ^ Γ祝障况，可於在所顯示 之地圖資訊上方、下方或一伽 d *' 飞相J之狀態攔中顯示導航資訊， 導航資訊之實例包括自使用者需要選取的當前道路至下一 個偏離之距離、該偏離之性質，此性質可由表明該偏離之 特定類型⑼如’左轉彎或右轉物另—圖符表示。導航 功能亦確定聲訊指令之㈣、持續時間及時序，可藉由梦 等指令來沿著路線指引使用去, 9 ^ 扣5丨使用者。如可瞭解，諸如「100 m 後左轉」之簡單指令需要 而文八重處理及分析。如先前所提 ’使用者與|§件之万動可轉士結钟处甘 ^ 動了藉由觸控螢幕、或者（另外或 八他）藉由駕駛桿安裝式遙控、 裔精由6吾音啟動或者藉由 任何其他適宜方法。 :::狀況下’由該器件提供之另一重要功能為自動路 、、’。十算.使用者在導航期間偏離先前計算出之路線（竟 外或故意地），·即時交通狀況指示替代路線將更有利且: -件能夠適當地自動辨識此等狀況，或者當使用者由於任 何原因主動地使器件執行路線再計算時。 亦已知允許按❹者定義切則來計算路線；例如，使 用者可能更喜歡由器件計算出之風景路線，或者可能希望 避開交，擁擠可能發生、預計會發生或當前正發生之任何 t路&件軟體將接著計算各種路線且更青睞沿著其路線 最问數目個標註為（例如）有美景之興趣點（稱為POI)的 或者使用指示特定道路上的正發生之交通狀況之已 算資》K按可能的堵塞或由於堵塞之延遲的程度來對計 線排序。其他基於POI及基於交通資訊之路線計 152808.doc 201226854 算及導航準則亦有可能。 雖然路線計算及導航功能對PND之總體效用很重要，但 有可能將器件純粹用於資訊顯示或「自由駕駛」，其中僅 顯示與當前器件位置相關之地圖資訊，且其中，尚未計算 出路線且器件當前不執行導航。此操作模式常可適用於當 使用者已知行進所要沿著之路線且不需要導航輔助時。 上述類型的器件（例如，由TomTom Internati〇nal B v製 造並供應之920Τ型）提供一用於使使用者能夠自一位置導 航至另—位置的可靠手段。當使用者不熟悉通向其所導航 至之目的地的路線時，此等器件具有極大效用。 如上文所提及，PND之記憶體儲存地圖資料及其他資料 (諸如，道路資訊及關於道路速度之歷史資訊），pND可使 用此等資料來計算路線並向使用者提供必要的導航指令。 雖然對於某道路段而言，可使用其特定的路線資訊（諸 如道路之最大法定速度）來計算運輸工具之預期速度，但 實際上，諸如擁擠之因素或諸如一系列急轉彎之道路特徵 可能會變更運輸工具在特定道路段上及/或特定時間可達 成的實際速度。可在某些道路之適當位置安裝實體交通流 量監視系統來確定平均交通速度。然而，安裝此等系統的 成本昂貴且覆蓋範圍並不廣範。 收集更精確的映射及路線規劃資料之另一方式為，利用 儲存於個別導航器件中之跡線資料。跡線資料表示路線或 旅途’且通常包含複數個位置及時間資料點，可用以確定 諸如運輸工具速度之資訊。可視情況剔除此跡線資料中諸 152808.doc 201226854 如使用者姓名或器件識別符之一些個人識別資料，再將其 發射至中央伺服器’此等個人識別資料可在中央词服器上 與其他導航器件所提供的類似資料彙總，從而提供針對特 定位置及時間之客觀「真實」的彙總或平均旅途資料。因 為此資料可在較長時段内對諸多使用者進行平均而得到， 所以其可更加精確及有代表性地表示旅途資料（諸如，典 型速度）。另外，此資料可用以比較實際路線與預測或預 期路線，從而改良映射及導航邏輯。 然而，對使用者且因此對此等導航器件之提供者而言， 個人隱私權通常是重要問題。就此而言，甚至已自導航器 件所提供之資料中移除諸如使用者姓名或器件識別符之個 人識別資料，仍然有可能從跡線資料回溯到特定使用者 (例如，藉由將跡線資料與其他資料源對照）。舉例而言， 使用者選取之旅途常常開始及/或結束於與該使用者相關 聯之位置（諸如，使用者的家、使用者的工作場所，或使 用者的朋友或家人的位置在此狀況下，可藉由比較儲 存於跡線資料中之路線開始位置及結束位置與地址清單， 確定在起點及結束點處（或其周圍）的地址清單並藉此確定 當地居住者，在一些狀況下，此舉有助於根據路線跡線識 別出器件之使用者。應瞭解，可使用統計方法增強此過 程。 然而’與諸如起點或終點之位置有關的資料可尤其適用 於（例如）確定停車位之位置及/或可用性。 本發明之至少一實施例之至少一目標為，克服或減輕先 152808.doc •10. 201226854 j技術中之至少一問題。本發明之至少一實施例之至少一 目軲為，增大攜帶型導航及/或映射器件之使用者的隱私 權及/或在維護其隱私權的同時增加可自此等器件擷取的 貝料之$。本發明之至少一實施例之至少一目標為，改良 可自導航或映射器件獲得的位置資料之有用1生或增加可由 此專器件錯存的有用資料之量。 【發明内容】 根據本發明之第_態樣，提供一種映射或導航器件，其 包含位置球定裝置或可連接至位置確定裝置，該位置確定 裝置可操作以確定該映射或導航器件之一或多個位置，該 -或多個經確定之位置形成至少一路線；其中 立該映射或導航器件經組態以確定該至少―路線之至少一 π分’其中該至少-部分係根據與該部分中所包含的至少 一位置相關聯之至少一性質來確定；且 該映射或導航器件經組能以白兮s , i以自該至少一經確定之路線形 成至少一匿名化路線，Α ψ 4 $ /1、 rrt s , '、中^至少一匿名化路線不包括該 至 >、一路線之該至少—部分。 :該至少一性質相關聯的該至少一位置可為一識別敏感 該識別敏感位置可包含與該映射或導航器件之一使 用者相關聯之一位置及/啖可扣_ —从 及了扣不该使用者之一位置及/或 該使用者可據以被識別之—位置。 該映射或導航器件可缒細能，、，& 動態地衫該至少-路線 之该至少一部分。該部分 間有所改變。 大小及/或形狀可在不同路線 152808.doc 201226854 ^ 路線之該部分可為與—識別敏感位置相關聯之—識別 敏感。卩分。該路線之該部分可為 置之前及/或之彳^部^純線之在—識別敏感位 該映射或導航n件可經組態以執行訂㈣：確 ，至少-路線的一經確定之位置是否與一識別敏相 關聯，且確定該—或多條路線之—或多個_㈣部^ 該等識別敏感位置中之至少一者相關聯。 ’、 該路線可包含—路線跡線及/或由_路線跡線表示。 至少一匿名化路線可包含一相應路線之一子集或一超 集。至少-匿名化路線可為—簡略路線，簡略路線可為不 具有該路線之一或多個識別敏感部分之路線。 該位置確定裝置可包含一GPS裝置及/或一三角量測器件 (諸如’ 一微波或射頻三角量測器件）。 該映射或導航ϋ件可包含-用於儲存該—或多個經確定 之位置的資料儲存器（諸如，一記憶體或大容量儲存号 件）。 ° 該映射或導航器件可包含通信裂置，通信裝置可為用於 與一外部或遠端器件通信之通信裝置，諸如，一伺服器。 通信裝置可包含：-或多個實體連接器介面，藉由該一或 多個實體連接器介面，可將電力信號及（視情況）資料信號 發射至該器件並自該器件接收該等信號；及（視情況）一或 多個無線發射器/接收器，以允許在蜂巢式電信及其他信 號及資料網路（例如，藍芽、Wi_Fi、w卜Max、GSM、 UMTS及其類似者）上通信。 152808.doc -12· 201226854 5亥映射或導航器件可經調適以使用該通信裝置傳達屬於 °玄至J —路線的經確定之位置中之至少一些位置。有利 地’ β亥映射或導航器件可經組態以使用該通信裝置傳達匿 名化路線。 °亥映射或導航裝置可經組態以藉由修改及/或刪除及/或 移除及/或選擇性地不儲存及/或選擇性地不傳達一相應路 線之至少一識別敏感部分而形成該至少一匿名化路線。該 至少—識別敏感部分之該修改可包含將一或多個位置添加 至該識別敏感部分。 在 #代或另外實施例中，該映射或導航裝置可經組態 以藉由修改該路線之至少一識別敏感部分而形成該至少一 匿名化路線，該修改可包含減小該識別敏感部分内之至少 一位置且較佳地每一位置之精確度。該修改可包含移置該 路線之至少一識別敏感部分之至少一位置且較佳地每一位 置，其可按一隨機量或根據一組預定準則而進行。舉例而 言，若一位置在一住宅區街道上（諸如，在一住宅區衔道 的一端），則可將該等位置移置至一街道的中間或一住宅 區或其他預定義區域的中間。以此方式，可能較難以根據 該匿名化跡線資料確定識別敏感位置之位置。可對該路線 之已修改之部分加標籤以使得稍後可識別該已修改之部 分’以使得在處理資料時可將該已修改之部分識別為已修 改的以便不影響自其所擷取之任何資料的精確度。該匿名 化路線可包含自至少—識別敏感位置導出的該已修改之位 置資料。 152808.doc •13· 201226854 在一替代或另外實施例中，該映射或導航裝置可經組態 以根據個別經確定之路線確定複數條匿名化路線，該複數 .條路線中之至少一者包含至少一第一識別敏感部分而不包 含至少一第二識別敏感部分，且該複數條路線中之至少另 一者包含一第二識別敏感部分而不包含至少一第一識別敏 感部分。此可包含將該經確定之路線劃分成至少兩個區 段，每一區段包含一不同識別敏感部分，且每一區段形成 一不同匿名化路線。該至少兩個區段組合起來可包含該經 確定之路線。該映射或導航裝置可經組態以單獨儲存及/ 或傳達該等區段中之每一者。舉例而言，可將該路線劃分 成與該路線之起點相關聯的一起點區段及與該路線之一終 點相關聯的一終點區段。以此方式，查看該等匿名化跡線 之第三方將不知曉哪一匿名化跡線含有旅途之起點或旅途 之終點。應瞭解，可視情況將該路線劃分成兩個以上區 段’例如，包含—路線之起點之—區段、包含—路線之終 點之一區段，及包含一或多個中間或途經點（vU 或 其他識別敏感位置之一或多個區段。以此方式，可進一步 增大使用者之隱私權。 該等識別敏感位置可包含一路線之對應於該路線之一起 點及/或該路線之一終點及/或由使用者指定之一位置（諸 如，一途經點或中間旅途點）之位置及/或部分。 該等識別敏感位置可包含一路線之對應於與該導航及/ 或映射裝置之一使用者相關聯的一位置（諸如，家庭地 址、工作地址及/或儲存於使用者通訊錄或最愛清單中之 I52808.doc •14· 201226854 地址或其類似者）之位置及/或冑分。該導航及/或導航器件 可操作以將與該使用者相_之至少-位㈣存於該記憶 體中，及/或經由該通信裝置（例如）自m存取與該使 用者相關聯之至少-位置。該導航及/或映射裝置可包含 一使用者輸人料，且可經組態以經由該制者輸入器件 接收與該使用者相關聯之位置。 該識別敏感位置可包含一與用於識別一使用者之構件 (諸如，一 CCTV相機）相關聯之位置。與用於識別一使用 者之構件相關聯之位置可儲存於該映射或導航器件之該記 憶體中’及/或彳由該映射料航器件使用t玄通信裝置（例 如）自一伺服器擷取。 該一或多個經確定之位置可包含相關聯之時間及/或曰 期資料，該資料表示該導航器件在該經確定之位置處之時 間及/或日期。 該一或多個經確定之位置可包含一方向及/或距一參考 位置之距離。 至少一路線之該識別敏感部分可包含該路線之在一識別 敏感位置及/或與一識別敏感位置相關聯之—經確定之位 置之一臨限距離及/或時間段及/或位置資料點數目内的位 置。 至少一識別敏感部分之一大小或一或多個尺寸可經動態 地確定或可變。該臨限值可經動態地確定或可變。 該識別敏感部分之該確定或變更可取決於與該識別敏感 位置相關聯之地圖資料。該地圖資料可儲存於該映射咬導 152808.doc •15· 201226854 航器件之該記憶體中’及/或可由該映射及導航器件經由 該通信裝置（例如）自一伺服器存取。 該地圖資料可包含一類型或類別之特徵（諸如，道路及/ 或建築物及/或郵政地址及其類似者）之密度。該識別敏感 部分在至少一第一特徵密度下可比在至少一第二特徵密度 下要大’其中該第一特徵密度低於該第二特徵密度。該識 別敏感部分之大小可與該特徵密度成反比。具有高特徵 (諸如，道路或建築物）密度之識別敏感位置可指示人口稠 密的市中心區域，在此等區域中可能有更多可能的地址， 且因此，可能較難以使所收集之位置資料關聯於任何可識 別使用者。在此狀況下，可使相關聯之識別敏感部分較 小，藉此在維護該使用者之隱私權的同時減少自該匿名化 路線所排除的資料之量且最大化所收集之可用資料。相反 地，具有低的特徵密度之識別敏感位置可指示人口稀少的 區域’在此等區域中潛在的地址可分開很遠。在此等狀況 下，可增大相關聯之識別敏感部分之大小，進而增加自該 識別敏感位置周圍的路線所移除之位置資料之量。此可增 加該識別敏感部分所覆蓋之潛在或可能的地址或位置之數 目，此可使得較難以根據匿名化路線資料來識別與一使用 者相關聯之一識別敏感位置。 該地圖資料可包含特徵屬性或分類。舉例而言，若一識 別敏感位置與指示通常與大量人相關聯的公共位置或建築 物或位置類型（諸如，高層住宅或辦公樓或諸如運動場、 劇場、大型購物中心之市民設施位置）或其類似者之一特 152808.doc 201226854 徵屬性或分類相關聯，則可減小相關聯之識別敏感部分之 大小（可此或視情況減少至零），亦即，忽視該識別敏感部 分/位置，藉此減少包含於該識別敏感部分内之路線之經 確定之位置資料的量。此在維護使用者之隱私權的同時增 加可收集之可用資料之量，此係因為將更難以自可與此公 共或人Π稠密之區域、建築物或位置相關聯的大量潛在使 用者當中識別任何特定使用者。 該地圖資料T包含與該識別敏感位置相關聯之興趣點資 訊及/或類別及/或使用資料。舉例而言，若該識別敏感位 置與可指示公共或人σ稠密之區域（諸如，公共停車場、 大型購物中心、旅遊勝地、劇場等等）之一特定興趣點標 籤相關聯，則可減小該識別敏感部分之大小，此係因為可 能難以自彳存在於此興趣點處的大量潛在使用者f中確定 一與該識別敏感位置相關聯之個別使用者識別。 該識別敏感部分之該確定或變更可取決於已由該映射或 導航器件及/或該映射或導航器件所連接至或可連接至的 任何伺服器儲存之與該識別敏感位置相關聯的位置資料， 例如，由該伺服器及/或導航或映射器件儲存之資料之量 及/或品質及/或類型。該資料之品質可與該資料之精確度 及/或疋義有關，其可關於一或多個預定臨限值來表徵。 舉例而言，若關於一位置儲存了大量位置資料及/或多種 位置資料及/或若干類型的位置資料及/或低品質位置資 料，則可減小相關聯之識別敏感部分之大小，此係因為可 在與彼特定識別敏感位置相關聯之大量其他位置.資料中識 152808.doc 201226854 別該位置資料的可能性可能較小。相反地，對於可獲得高 品質資料或先前所獲得之資料之量為低的識別敏感位置， 可能較容易識別任何新的位置資料。在此等區域中，可增 大相關聯之識別敏感部分之大小以便增加在與彼識別敏感 位置相關聯之該識別敏感部分内的路線之量，亦即，自跡 線所移除的可·能為識別敏感位置（可根據該識別敏感位置 來識別使用者）之位置資料之量有所增加。以此方式可 增大使用者隱私權。 該識別敏感部分之該確定或變更可取決於可儲存於該導 航及/或映射器件上或可由該導航及/或映射器件存取之使 用者資料。該使用者資料可包含與該使用者相關聯及/或 由該使用者提供及/或由該使用者選擇之位置。該使用者 資料可儲存於該器件之該記憶體中，及/或可經由該通信 裝置自该伺服器擷取，及/或由該使用者輸入。合適使用 者資料之實例包括一最愛清單及/或近來造訪之位置及/或 頻繁造訪之位置及/或家庭或工作位置。該映射或導航裝 置可能能夠存取使用者之通訊錄或其他類似資訊，且其中 所含之位置可包含於該使用者資料中。該最愛清單或通訊 錄可包括（例如）使用者之家庭地址，或與該使用者的朋 友、家人或其他人（其可與該使用者聯繫起來或可用以識 別該使用者）相關聯之地址。在此狀況下，在該識別敏感 位置對應於該使用者資料内所包含的一位置時，可增大該 臨限值。藉由增大該路線之與使用者資料_所含之此等識 別敏感位置相關聯的識別敏感部分之臨限值，自匿名化路 152808.doc 201226854 線移除在識別敏感位置周圍之大量跡線資料，以使得可能 較難以根據該匿名化路線來識別識別敏感位置，此可進而 增大使用者之隱私權（尤其在該識別敏感位置對應於路線 之起點、終點或目的地或途經點或中間點時）。 視情況’遠映射或導航器件可經組態以確定儲存於該映 射或導航器件或一相關聯之伺服器上的位置資料之數量， 且在已充分覆蓋一位置（亦即’已儲存關於該位置之大量 位置資料）時增大臨限值，或在相關聯之位置具有低覆蓋 性時減小臨限值。此可允許在記憶體容量低的器件上進行 有用的位置資料收集，此係因為僅儲存有用資料，且進而 更有效地使用記憶體。 應瞭解，以上器件解決潛在隱私權問題，此係因為該資 料之覆蓋識別敏感位置（諸如，每一路線之起點及/或終點） 之一部分可在自導航器件發射至伺服器之前及/或在儲存 於伺服器上之前被移除或修改，進而減小基於匿名化路線 之挨家挨戶使用者可追溯性。同時，因為基於與每一特定 識別敏感位置相關聯的一組預定義參數（諸如，特徵密 度、相關聯之興趣點、特徵類型、使用者資料及其類似 者）來確定路線之識別敏感部分（亦即，路線之被移除或修 改之部分），所以可最大化所收集之位置資料之量，此係 因為針對可能較難以與個別使用者相關聯的位置可減小或 最小化識別敏感部分，而同日寺，藉由增大或最大化與識別 1感位置（其可指示較容易與使用者聯繫起來之位置）相關 聯的識別敏感部分而增大隱私權。來自或靠近起點及終點 I52808.doc •19· 201226854 之資訊可尤其適用於(例如)獲得關於停車位之資料 發明之器件可操作以在適 者隱私權。 田-收集此資科’同時保護使用 根據本發明之第二態樣’提供—種處理器件，其包含一 耗接至通信裝置之處理器，今·虎押 ㈣益5亥處理盗件經組態以經由該通 ^裝置接收位置資料，唁^罟 一々 针°亥位置#科包含映射或導航器件之 或多個位置，該—或多個位置形成至少_路線. 該處理器件可操作以確㈣至少-路線之至少-部分， 其中該至少一部分係根據與該至少一部分中所包含的至少 一位置相關聯之至少一性質而綠定；且自該至少一經確定 之路線形成一至少—薛玄於攸姑 氐名化路線，其中該至少一匿名化路 線不包括該至少一路線之該至少一部分。 該處理器件可經組態以自一映射或導航或位置確定器件 接收位置資料。 省處理益件可進一步包含記憶體或_資料儲存器。該處 理器件可經組態以將該至少一匿名化路線儲存於該記憶體 或資料儲存器中。 該處理器件可包含一伺服器或包含於一伺服器中。 該處理器件可包含一中間器件或包含於一中間器件中， 其經組態以經由該通信裝置自一映射或導航裝置接收位置 資料且，經由該通信I置將至少一匿名化路線發送至一外部 系統（諸如，一伺服器）。 根據本發明之第三態樣，提供一種處理一路線之方法， 其包含接收或確定一或多個位置，該一或多個經確定之位 152808.doc -20· 201226854 置形成至少一路線； 確定該路線之至少一部分，其中該至少一部分係根據與 該部分中所包含的至少一位置相關聯之至少一性質來確 定；及 自°亥經確定之路線形成一匿名化路線，其中該匿名化路 線不包括該至少-路線之該至少一部分。 «亥方法可包含—種操作一映射或通信器件之方法。該方 法可i3 —種操作根據第一態樣之一映射或通信器件之方 法。 康本么明之第四態樣，提供-種映射或導航器件，其 包含位置確定裝置或可連接至位置確定裝置，該位置確定 裝置可操作以確㈣映射或導航器件之—或多個位置，該 一或多個經確定之位置形成至少—路線；其中 广射或導航器件經組態以確定該至少一路線之至少一 #分’且修改包含於該至少一 夕。卩分内之至少一位置以形成 5亥路線之-已修改之部分；及 該映射或導航器件經組離 ^ s , 〜、u自s玄至少一經確定之路線形 成至乂 一匿名化路線，其中 修Λ 、甲5亥至少一匿名化路線包含該已 修改之部分來代替該至少一 ^ 硌線之該至少一部分。 该路線之該至少一部分 聯之-識別敏感部分。匕3可與一識別敏感位置相關 該映射或導航裝置可經 部分内之至少-位置且較佳=藉由減小至少—識別敏感 路線之該識別敏感部分。該修之精確度而修改該 ι改可包含移置該路線之至少 152808.doc • 21 - 201226854 —識別敏感部分之至少一位置且較佳地每一位置及/或與 該路線之至少一識別敏感部分相關聯之一時間，其可按— 隨機量或根據一組預定準則而進行。舉例而言，若一位置 在一住宅區衔道上（諸如’在一住宅區街道的一端），則可 將該等位置移置至一衔道的中間或一住宅區或其他預定義 區域的中間。以此方式’可能較難以㈣輕名化跡線資 料確定識別敏感位置之位置。可對該路線之已修改之部分 加標籤以使得㈣可朗該已修改之部分，以使得在處理 資料時可將該已修改之部分識別為已修改的，以便不影響 自其所擷取之任何資料的精確度。 曰 器 该映射或導航器件可包含根據第一態樣之一映射或導航 件及/或包含關於第-態樣所描述之任何特徵。 ，提供一種經組態以接收一或多 或多個經確定之位置形成至少一 根據本發明之第五態樣 個位置之處理器件，該— 路線；其中 該處理器件經組態以確定該至少—路線之至少一部分 且修改包含於該至少一部分内之至少-位置以形成該路 之一已修改之部分；及 =處理器件經組態以自該至少一經確定之路線形成至 一匿名化路線，苴中缽 、 ’、^ 一匿名化路線包含該已修改 。”刀來代替該至少一路線之該至少一部分。 該處理器件可經組態 ..,,,_ 接收位置資料。，4-映射或導航或位置確定器 該處理器件可進—牛h ，匕έ記憶體或一資料儲存器。該 152808.doc •22· 201226854 理器件可經組態以將該至少一匿名㈣線儲存於該記憶體 或資料儲存器中。 該處理器件可包含一伺服器或包含於一伺服器令。 該處理器件可包含一中間器件或包含於一中間器件中， 其經組態以經由該通信裝置自一映射或導航裝置接收位置 資料且經由該通信裝置將至少一匿名化路線發送至一外部 系統（諸如’一伺服器）。 該處理器件可包含第二態樣之處理器件。 根據本發明之第六態樣，提供一種處理一路線之方法， 其包含接收或確定一或多個位置，該一或多個經確定之位 置形成至少一路線； 確定該至少-路線之至少—部分，且修改包含於該至少 一部分内之至少-位置以形成該路線之_已修改之部分·及 自該至少-經確定之路線形成至少一匿名化路線，其中 該至少—匿名化路線包含該已修改之部分來代替該至少一 路線之該至少一部分。 根據本發明之第七態樣，提供—種映射或導航器件，其 包含位置確定裝置或可連接至位置確定裝置，該位置確^ 裝置可操作以確定該映射或導航器件之-或多個位置該 或夕個經確定之位置形成至少一路線，·其中 該映射或導航器件經組態以將該至少—路線分成至少兩 個區段以便形成至少兩條匿名化路線。 該映射或導航器件可經組態以確定至少一識別敏感位 置。該匿名化路線之至少—區段且較佳地每—區段可包含 152808.doc -23- 201226854 與至少-其他區段且較佳地每一其他區段不同的至少一識 別敏感位置。可動態地確定該路線之該等區段。 5 該至少兩個區段組合起來可包含該經確定之路線。該映 射或導航裝置可經組態以單獨儲存及/或傳達該等區段中 之每-者。舉例而言’可將該路線劃分成與該路線之起點 相關聯的-起點區段及與該路線之一終點相關聯的—終點 區段。以此方式，查看該等匿名化跡線之第三方將不知曉 哪-匿名化跡線含有旅途之起點或旅途之終點^應瞭解， 可視情況將該路線劃分成兩個以上區段，例如，=含一路 線之起點之—區段、包含—路線之終點之—區段二包含 一或多個中間或途經點或其他識別敏感位置之—或多個區 段。以此方式，可進-步增大使用者之隱私權。 根據本發明之第八態樣’提供一種經組態以接收及/或 確定一或多個位置之處理器#，該—或多個經確定之位置 形成至少一路線；其中 該處理器件經組態以將該至少—路線分成至少兩個區段 以便形成至少兩條匿名化路線。 該處理器件可經組態以自—映射或導航或位置確定器件 接收位置資料。 ** 該處理器件可進一步包含邙，陪脚 7匕3 〇己憶體或一資料儲存器。該處 理器件可經組態以將該至少一匿名化路線儲存於該記憶體 或資料儲存器中。 該處理器件可包含-伺服器或包含於—伺服器中。 該處理器件可包含一中間器件或包含於一中間器件中， 152808.doc -24· 201226854 其經組態以.經由該通信I置自-映射#導航裝置接收位置 資料且經由該通信裝置將至少一匿名化路線發送至一外部 系統（諸如，一伺服器）。 二態樣及/或第五態樣之處理器 該處理器件可包含第 件。 根據本發明之第九態樣，提供一種處理位置資料之方 法，其包含確定或接收-或多個位置，該一或多個經確定 之位置形成至少一路線；其中 該映射或導航器件經組態以將該至少—路線分成至少兩 個區段以便形成至少兩條匿名化路線。 該方法可為操作一映射及/或導航器件之方法，該映射 及/或導航器件諸如本發明之第一及/或第四及/或第七態樣 之映射或導航器件。 根據本發明之第十態樣，提供-種電腦程式元件，其包 含用以使一電腦執行如上文關於本發明之第三及/或第六 及/或第九態樣所陳述之方法或實施如在本發明之第一、 第二、第五、第六、第八或第九態樣中之任一者中所陳述 的裝置的電腦程式元件。 該電腦程式元件可體現於一電腦可讀媒體上。 根據本發明之第十一態樣，提供一種藉由本發明之第十 態樣之之電腦程式元件來程式化的裝置。 下文中陳述此等實施例之優點，且此等實施例中之每一 者之另外的細節及特徵定義於隨附之附屬項中及以下實施 方式_之其他處。 152808.doc -25- 201226854 應瞭解，關於本發明之以上態樣中之任_者 徵亦可視情況通常適用於本發明之任何其他能樣為述的特 亦應瞭解，類似於任何所描述之裝置特徵的方法特=， 屬於本發明之料内，且反m 特徵意欲 【實施方式】 現將參考隨附圓式僅藉由實例來描述本發明之至+ — 施例。 乂 貫 在以下全m中’相同參考數字將用以識別相 分0 ' 。’ 現將特定參考PND來描述本發明之實施例。然而，應記 住’本發明之教示不限於PND，而是實情為可普遍適用於 經組態而以可攜帶方式執行導航及/或映射軟體以便提供 路線規劃、位置確定及/或導航功能性的任何類型之處理 器件。因此，由此可見，在本申請案之情況下，導航器件 意欲包括（但不限於）任何類型之路線規劃、映射或導航器 件，無論該器件是體現為PND、諸如汽車之運輸工具或 疋實際上體現為執行路線規劃及導航軟體之攜帶型計算資 源（例如，攜帶型個人電腦（PC)、行動電話或個人數位助 理（PDA))。 自下文亦將顯而易見，本發明之教示甚至在使用者並不 尋求對於如何自一點導航至另一點的指導而僅想要被提供 其位置或所選取路線的情況下仍有效用。在此等情況下， 使用者所選擇之「目的地」位置無需具有相應的開始位置 (使用者希望自其開始導航），且因此，本文中對「目的 152808.doc -26- 201226854 地」位置或實際上對「目的地」視圖的參考不應被解釋為 意謂路線之產生係必需的，行進至「目的地」必須發生， 或貫際上’目的地之存在需要指定相應的開始位置。 記住以上附帶條件，圖1之全球定位系統（GPS)及其類似 物係用於多種目的。一般而言，GPS為基於衛星無線電之 導航系統’其能夠為無限數目個使用者確定連續的位置、 速度、時間及（在一些情況下）方向資訊。先前稱為 NAVSTAR之GPS併有在極精確的軌道中繞地球運轉之複數 個衛星。基於此等精確軌道’ GPS衛星可將其位置中繼傳 遞至任何數目個接收單元。 當經專門配備以接收GPS資料之器件開始掃描射頻以發 現GPS衛星信號時，實施GPS系統。在自一 〇1>8衛星接收 到一無線電信號時，該器件經由複數種不同習知方法中之 一者來確定該衛星之精確位置。在多數情況下，該器件將 繼續掃描以發現信號，直至其已獲取至少三個不同的衛星 信號為止（注意，可使用其他三角量測技術藉由僅兩個信 號來確定位置，雖然此並非常例）。實施幾何三角量測 後，接收器利用三個已知位置來確定其自身相對於該等衛 星之一維位置。可以已知方式進行此確定。另外，獲取第 四個衛星信號允許接收器件藉由同一幾何計算以已知方式 計算其三維位置。無限數目個使用者可連續地即時更新位 置及速度資料。 如圖1中所展示，GPS系統1 〇〇包含圍繞地球丨〇4運轉的 複數個術星102。GPS接收器I 〇6自該複數個衛星j 〇2中的 152808.doc -27- 201226854 若干衛星接收展頻GPS衛星資料信號108。展頻資料信號 1 08係自每一衛星102連續地發射，所發射的展頻資料信號 108各自包含一包括識別一特定衛星ι〇2之資訊的資料流， 該資料流來源於該特定衛星1〇2。GPS接收器106通常需要 來自至少三個衛星1〇2之屐頻資料信號1〇8以便能夠計算二 維位置。對第四個展頻資料信號之接收使GPS接收器1 〇6 能夠使用已知技術計算三維位置。 轉而參看圖2，包含GPS接收器器件1〇6或耦接至gps接 收器器件106之導航器件2〇〇能夠在需要時經由行動器件 (圖中未展示）（例如，行動電話、pDA及/或具有行動電話 技術之任何器件）建立與「行動」或電信網路之網路硬體 之資料會話，以便建立數位連接（例如，經由已知的藍去 技術之數位連接）。此後，行動器件可經由其網路服務去 供者建立與伺服器15〇之網路連接（例如，經由網際網路）。 因而，可建立介於導航器件2〇〇(當其獨自地及/或以處於避 ，工具中之方式行進時，其可為且f常為行動的）與祠那 裔1 50之間的「仃動」㈣路連接從而為資訊提供「巧 時」或至少很「新的」閘道。 可使用（例如）網際網路以已知方式進行在行動器件（經由 服務提供者）與另一器件（諸如， Ή服盗1 50)之間的網路读 接之建立。就此而言’可使 — 使用任何數目種適當資料通信協 協定，，行動器件可利用任何 數種通W準’諸如，CDMA2_、GSM、臟802 1] a/b/c/g/n等等。 152808.doc -28- 201226854 因此可看出，可利用（例如）可經由資料連接、經由行動 電話或導航器件2 0 0内之行動電話技術所達成的網際網路 連接。 雖然未展示，但導航器件200當然可在導航器件2〇〇自身 内包括其自身的行動電話技術（包括例如天線’或視情況 使用導航器件200之内部天線）。導航器件2〇〇内之行動電 話技術可包括内部組件，及/或可包括一可插入卡（例如， 用戶身分模組（SIM)卡），該可插入卡配有（例如）必要的行 動電話技術及/或天線。因而，導航器件2〇〇内之行動電話 技術可類似地經由（例如）網際網路來建立介於導航器件2 〇 〇 與伺服器150之間的網路連接，其建立方式類似於任何行 動器件之方式》 對於電話設定而言’具備藍芽功能之導航器件可用以與 行動電話模型、製造商等等之不斷改變的頻譜一起正確地 工作’舉例而言’模型/製造商特定設定可儲存於導航器 件200上。可更新為此資訊而儲存之資料。 舉例而言’當導航器件直接經由wi_fi或纜線式連接或藉 由連接（其可包括無線連接）該器件與具有網路連接之中間 器件（諸如，個人電腦）而連接至網路（諸如，網際網路\ 時’亦可間歇式地提供網路連接。 網路連接可並非直接的，亦即，導航器件無需直接連接 至遠端飼服器’而實情為’可將資料自導航器件下载至中 間器件中，且此後(其可能是在稍後的時間或曰期，且可 能在導航器件已斷開之後）’中間器件可將該資料轉遞至 I52808.doc •29· 201226854 遠端伺服器。 在圖2中’將導航器件2〇〇描繪為經由一般通信頻道152 與祠服器150通信，通信頻道152可藉由若干不同配置中之 任一者來實施。通信頻道152一般表示連接導航器件2〇〇與 4司服器150之傳播媒體或路徑。當建立了介於伺服器15〇與 導航器件200之間的經由通信頻道152之連接（注意，此連 接可為經由行動器件之資料連接、經由個人電腦經由網際 網路之直接連接等等）時，伺服器15〇與導航器件2〇〇可通 信。 通信頻道152不限於特定通信技術。另外，通信頻道152 不限於單一通信技術；亦即，頻道丨52可包括使用多種技 術之若干通信鏈路。舉例而言，通信頻道丨52可經調適以 提供一用於電通信、光通信及/或電磁通信等等之路徑。 因而，通信頻道152包括（但不限於）以下各者中之一者或組 合：電路、諸如電線及同轴電纜之電導體、光纖纜線、轉 換器、射頻（RF)波、大氣、空白空間（free space)等等。此 外，通信頻道15 2可包括諸如路由器、中繼器、緩衝器、 發射器及接收器之中間器件。 在一說明性配置中’通信頻道152包括電話網路及電腦 網路。此外’通信通道152可能能夠適用於無線通信，例 如，紅外線通信、射頻通信（諸如微波頻率通信）等等。另 外，通信頻道152可適用於衛星通信。 經由通信頻道152所發射之通信信號包括（但不限於）如 可為給定之通信技術所需或所要之信號。舉例而言，該等 152808.doc •30· 201226854 信號可適合用於蜂巢式通信技術（諸如，分時多重存取 (TDMA)、分頻多重存取（FDMA)、分碼多重存取 (CDMA)、全球行動通信系統（GSM)等等）中。可經由通信 頻道15 2發射數位信號及類比信號兩者。此等信號可為對 於通仏技術可旎為所要的經調變、經加密及/或經壓縮之 信號。 伺服器150包括（除了可能未說明之其他组件之外）一處 理器154，該處理器154操作性地連接至一記憶體156且經 由有線或無線連接15 8而進一步操作性地連接至一大容量 資料儲存器件160〇該大容量儲存器件16〇含有導航資料及 地圖資訊之儲存，且可同樣為與伺服器15〇分離之器件， 或可併入至伺服器150中。處理器154進一步操作性地連接 至發射器162及接收器164，以經由通信頻道i 52將資訊發 射至導航器件200且自導航器件200接收資訊。所發送及接 收之彳§號可包括資料、通信及/或其他傳播信號。可根據 對於導航器件200之通信設計中所使用之通信要求及通信 技術來選擇或設計發射器162及接收器164。另外，應注 意’可將發射器162及接收器164之功能組合成單一收發 器。 如上文所提及’導航器件200可經配置以經由通信頻道 152與伺服器150通信’其使用發射器i66及接收器168經由 通信頻道152發送並接收信號及/或資料，注意，此等器件 可進一步用以與除了伺服器150之外的器件通信。另外， 根據對於導航器件200之通信設計中所使用之通信要求及 I52808.doc 201226854 通信技術來選擇或設計發射器166及接收器168，且可將發 射器166及接收器168之功能組合成單一收發器’如上文關 於圖2所描述。當然，導航器件2〇〇包含其他硬體及/或功 能部件’稍後將在本文中對其進行更詳細描述。 儲存於词服器記憶體156中之軟體向處理器154提供指令 且允許词服器1 50將服務提供至導航器件2〇〇。由伺服器 150提供之一服務包括處理來自導航器件2〇〇之請求及將導 航資料自大容量資料儲存器160發射至導航器件2〇(^可由 饲服器150提供之另一服務包括針對所要應用使用各種演 算法來處理導航資料及將此等計算之結果發送至導航器件 200 〇 伺服器150構成可由導航器件2〇〇經由無線頻道來存取之 遠鳊資料源。伺服器15 〇可包括位於區域網路（LAN)、廣域 網路（WAN)、虛擬私用網路（vpN)等等上之網路伺服器。 伺服器150可包括諸如桌上型或膝上型電腦之個人電 腦，且通信頻道152可為連接在個人電腦與導航器件2〇〇之 間的纜線。或者，可將個人電腦連接在導航器件2〇〇與伺 服器150之間以建立介於伺服器15〇與導航器件2〇〇之間的 網際網路連接。 "T、’’!由資n凡下載向導航器件2〇〇提供來自词服器1 $〇之資 訊’該資訊可自動定期更新，或在使用者將導航器件2〇〇 連接至伺服器15〇後更新，及/或在經由（例^無線行動連 接器件及TCP/IP連接而在祠服II 15G與導航器件·之間建 立較為持續或頻繁的連接後，以較動態之方式更新。對於 152808.doc •32· 201226854 許多動態計算而士 大部分處理需二器15°中之處理器154可用以處置 ，」而，導航器件200之處理器（圖2中未 =亦可時常獨立於至健器15。之連接而處置許多處理 及計异。 參看圖3，Λ、、拿立 ^ 心/主思、，導航器件2⑼之方塊圖不包括導航器 件之所有纟且彳 朱，t g 疋僅代表許多實例組件。導航器件200 位於一外殼(圖中未展示)内。導航器件200包括一處理資 源i該處理資源包含（例如）上文所提及之處理器2〇2,該處 耦接至一輸入器件2〇4及一顯示器件（例如，顯示 2〇6)。雖然此處參考單數形式之輸入器件，但熟習 此項技術者應瞭解，輸入器件2〇4表示任何數目個輸入器 件，·包括鍵盤器件、語音輸入器件、觸控面板及/或用以 H fl之任何其他已知輸人器件。同樣，顯示幕施可 包括諸如液晶顯示器（LCD)之任何類型之顯示幕。 在配置中，輸入器件2〇4之_態樣（觸控面板）與顯示 幕206經整合以便提供—整合式輸人與顯示器件，該整合 式輸入與顯示器件包括觸控板或觸控營幕輸人25〇(圖句， 以實現經由觸控面板螢幕的資訊之輸人（經由直接輸入、 選單選擇等等）及資訊顯示兩者’以使得使用者僅需觸摸 顯示幕206之-部分便可選擇複數個顯示選項中之一者或 啟動複數個虛擬或「軟」按紐中之一者。就此而言，處理 器202支援結合觸控螢幕而操作之圖形使用者介面（gui)。 在導般器件200中，處理器202經由連接2i〇而操作性地 連接至輸入器件204且能夠，經由連接2 j 〇自輸入器件2〇4接 152808.doc • 33- 201226854 收輸入資訊’且經由個別輸出連接212而操作性地連接至 顯示幕206及輸出器件期中之至少—者以將資訊輸出至該 至少一者。導航器件200可包括輸出器件2〇8，例如，聲訊 輸出器件（例如，揚聲器）。因為輸出器件2〇8可為導航器件 200之使用者產生聲sfL資訊，所以應同樣理解，輸入器件 2〇4亦可包括用於接收輸入語音命令之麥克風及軟體。另 外’導航器件200亦可包括任何額外輸入器件2〇4及/或任 何額外輸出器件，諸如，音訊輸入/輸出器件。 處理器202經由連接216而操作性地連接至記憶體214， 且^進一步調適以經由連接22〇自輸入/輸出（ι/〇)槔US接 收資訊/將資訊發送至輸入/輸出（1/〇)埠218，其中ι/〇埠US 可連接至在導航器件200外部的1/〇器件222。外部ι/〇器件 222可包括（但不限於）外部收聽器件，諸如，聽筒。至"ο 器件222之連接可另外為至任何其他外部器件（諸如汽車立 體聲單元）之有線或無線連接’例如用於免持操作及/或用 於語音啟動式操作、用於至聽筒或頭戴式耳機之連接及/ 或用於至(例如)行動電話、個人電腦、網際網路路由器或 數據機之連接，其中該連接可用以建立介於導航器件細 與（例如）網際網路或任何其他網路之間的資料連接，及/或 用以建立經由（例如）網際網路或某一其他網路至伺服器之 連接。 圖3進一步說明經由連接226之介於處理器2〇2與天線/接 收器224之間的操作性連接，其中天線/接收器224可為（例 如)GPS天線/接收器。應理解，為了說明而示意性地組合 lS2808.doc -34· 201226854 由 > 考數字224表示之天線及接收器，但天線及接收器可 為刀開疋位之組件，且天線可為（例如）GPS片狀天線或螺 旋天線。 *然’ 一般熟習此項技術者應理解，圖3中所展示之電 子組件係以習知方式由一或多個電源（圖中未展示）供電。 如一般熟習此項技術者應理解，想到了圖3中所展示之組 件的不同組態。舉例而言，圖3所展示之組件可經由有線 及/或無線連接及其類似者而彼此通信。因此，本文中所 描述之導航器件2〇〇可為攜帶型或手持型導航器件2〇〇。 另外，圖3之攜帶型或手持型導航器件2〇〇可以已知方式 連接或「銜接」至諸如腳踏車、機器腳踏車、汽車或船之 運輸工具。接著可為了攜帶型或手持型導航用途而自銜接 位置移除此導航器件2〇〇。 參看圖4，導航器件2〇〇可為包括整合式輸入與顯示器件 206及圖2之其他組件（包括但不限於内部Gps接收器224、 微處理器202、電源供應器（圖中未展示）、記憶體系統214 等等）的一單元。 導航器件200可位於臂252上，可使用吸盤254將臂252本 身緊固至運輸工具儀錶板/窗/等等。此臂252為導航器件 200可銜接至之銜接台之一實例。例如，導航器件可藉 由將導航器件200連接至臂252的搭扣而銜接或以其他方式 連接至銜接台之臂252 »導航器件2〇〇可接著可在臂252上 方疋轉。為了釋放導航器件2〇〇與銜接台之間的連接，可（例 如）按壓導航器件200上之按鈕（圖中未展示）。用於將導航 152808.doc •35· 201226854 器件200耦接至銜接台及將導航器件2〇〇與銜接台解輕之其 他同等合適的配置係一般熟習此項技術者所熟知。 轉而參看圖5，處理器202與記憶體214合作以支援 BIOS(基本輸入/輸出系統）282，bios 282充當導航器件 200之功能硬體組件280與由該器件執行之軟體之間的介 面。處理器202接著自記憶體214載入作業系統284，該作 業系統284提供應用軟體286(其實施上文所描述之路線規 劃及導航功能性288中的一些或全部）可執行之環境。 現參看圖6至圖14，首先將關於開始位置係Ly〇n(France) 的機％且希望導航至Gren〇ble(France)的一衔道地址之使 用者來描述說明性目的地位置輸入過程，該使用者知曉該 街道地址之街道名稱及門牌號。雖然未展示，但使用者使 用由應用軟體286支援之一設定選單選項以便選擇三維模 式下的視圖產生。 當此使用者開啟導航器件2〇〇時，該器件2〇〇獲取Gps定 位且計算（以已知方式）該導航器件200之當前位置。接著向 使用者呈現（如圖6中所展示）一顯示3〇〇，其以偽三維展示 導航器件200經確定所處之局部環境3〇2，且在顯示3〇〇之 位於該局部環境下方之區3〇4中展示一系列控制及狀態訊 息。 藉由觸摸局部環境302之顯示，導航器件200切換至顯示 (士圖7中所展不）一系、列虛擬或軟按紐306，藉由該等虛擬 或軟知紐306’使用者可（尤其是）輸入其希望導航至之目的 地。 152808.doc -36- 201226854 藉由觸摸「導航至」虛擬按鈕308，導航器件200切換至 顯示（如圖8中所示）複數個虛擬按鈕，該複數個虛擬按鈕各 自與一不同類別之可選擇目的地相關聯。在此情況下，該 顯示展示一「家庭」按鈕，該按鈕在被按壓時將會將目的 地《又疋為所儲存之家庭位置。「最愛」按鈕在被按壓時顯 現先前已由使用者儲存於導航器件200中之目的地清單， 且在接著選擇了此等目的地中之一者時’將待計算的路線 之目的地叹疋為選定的先前所儲存之目的地。「近來目的 地」軟按紐在被按壓時顯現保存於導航器件2〇〇之記憶體 中且使用者近來已導航至的可選擇目的地之清單。對填入 此清單的目的地中之一者之選擇將會將此路線之目的地位 置設定為選定（先前造訪）之位置。「興趣點」按鈕在被按壓 時顯現若干選項，藉由該等選項，使用者可選擇導航至複 數個位置中之任一者，諸如，自動櫃員機（ATM)、加油站 或旅遊勝地，該複數個位置已（例如）預先儲存於導航器件 200中以作為導航器件200之使用者可能想要導航至的位 置。三角「箭頭」形虛擬按鈕通往與「導航至…」選單選 項有關之額外子選單選項，且「地址」按鈕310開始一過 程，藉由該過程，使用者可輸入其希望導航至的目的地之 街道地址。 由於在此實例中使用者知曉使用者希望導航器件2〇〇導 航至的目的地之街道地址，所以假定操作了「地址」按鈕 31〇(藉由觸摸在觸控螢幕上所顯示之按鈕），於是（如圖9中 所展示）向使用者呈現一系列地址輸入選項：詳言之，針 152808.doc •37· 201226854 對藉由市中心」進行地址輸入、藉由「郵政編碼」進行 地址輸入、藉φ「十字路口或交叉點」X例如，兩條道路 之匯合處）進行地址輪入及藉由「街道及門牌號」進行地 址輸入。 在此貫例中，使用者知曉目的地之街道地址及門牌號且 因此選擇街道及門牌號」虛擬按纽312，於是接著向使 用者呈現（如圖10中所示）：對鍵入使用者希望導航至的城 市之名稱之提不314;旗標按鈕316，藉由該旗標按鈕 316,使用者可選擇所要之城市所在的國家；及虛擬鍵盤 318 ’其可由使用者在必要時操作以輸入目的地城市之名 稱。在此情況下’使用者先前已導航至在Ly0n及Grenoble 中之位置，且因此導航器件2〇〇另外向使用者提供可選擇 城市之清單320。 在此情況下’使用者希望導航至Grenob】e，且在自清單 320選擇了 Grenoble後，導航器件200(如圖Π中所展示）顯 示：使用者可藉以輸入街道名稱之虛擬鍵盤318、對鍵入 街道名稱之提示322，及（在此情況下，因為使用者先前已 導航至Grenoble中之街道）Grenoble中的可選擇衔道之清單 324 ° 在此實例中，使用者希望返回至使用者先前造訪的街道Wi-Fi, Wi_Max, GSM, UMTS and the like) communication over this type of PND also includes a -Gps antenna with which the satellite broadcast signal including the location data can be received and subsequently processed. A signal determines the current location of the device. The PND may also include an electronic gyroscope and an accelerometer that generate signals that can be processed to determine the current angular acceleration and linear acceleration, and in conjunction with positional information derived from the GPSL number to determine the device and thus the device is mounted. The speed and relative displacement of the vehicle. Usually, these features are most commonly provided in the transportation (4) air money, but the village is touching the poem (if this is advantageous). The utility of such chats is primarily manifested in their ability to determine the route between the first location (typically, f- or current location) and the second location (usually, the destination). Such locations may be entered by the user of the device by a wide variety of different methods - for example, by postal code, street name and house number, previously stored "well known" destinations (such as famous locations, City 152 08. Doc 201226854 Political location (such as stadium or swimming pool) or other points of interest) and destinations of favorite destinations or recent visits. Generally, the PND has a function for calculating a "best" or "best" route between the destination address and the destination address based on the map data. The "best" or "best fit" route is based on predetermined criteria and is not defined as the fastest or shortest route. The choice of route to guide the driver can be very complex, and the selected route can take into account existing, predicted and dynamically and/or wirelessly received traffic and road information, historical information about road speed and driver's Determine your own preferences for the factors of the road alternative (for example, 'Driver can specify a route that should not include a highway or toll road). In addition, the device continuously monitors road and traffic conditions and provides or chooses to change routes due to changing conditions, on which the rest of the journey will take place. An instant traffic monitoring system based on various technologies (e.g., mobile phone data exchange, fixed camera, GPS fleet tracking) is being used to identify traffic delays and feed information into the notification system. This type of PND can usually be mounted on the dashboard or lining of the transport guard, but can also be formed as part of the onboard computer of the transport radio. It is actually part of the control system of the transport itself. The navigator> can also be part of a handheld system, such as a PDA (portable digital), a media player, a mobile phone, or the like, and in this case, the conventional functionality of the handheld system It is extended by mounting the software on the device to perform route calculations and navigation along the calculated route. Route planning and navigation functionality can also be performed by a desktop that implements appropriate software 152808. Doc 201226854 Mobile computing resources to provide. For example, the Royal Automobile Club (RAC) is at httP://www. Rac. Co. u]^ for online route planning and navigation facilities, the sigh allows the user to enter the starting point and destination, so the server (the user's computing resources are communicating with it) calculates the route (the aspect can be specified by the user Generating a map and generating a detailed set of navigation instructions for directing the user from the selected starting point to the selected destination. The facility also provides pseudo-three-dimensional rendering and route preview functionality for the calculated route, which simulates the user's travel along the route' and thereby provides the user with a preview of the calculated route. In the case of a PND, once the line is calculated, the user interacts with the navigation device to select the desired calculated route from the list of household routes as appropriate. Depending on the circumstances, the money user may intervene or direct the route selection process, such as by specifying that for certain journeys, the route should be avoided or must follow certain routes, roads, locations, or routes to calculate the PND - the main function, and Navigation along this route is another—main feature. During the navigation along the - calculated route, 'These often provide visual and/or audio guidance to guide the user along the selected route to the end of the route, ie the desired destination. Map information is often displayed on the screen during navigation, and this information is regularly updated on the screen so that the displayed map information indicates the current location of the device, so I indicate the current location of the vehicle or the user's vehicle (if The device is being used for navigation within the vehicle). The icon displayed on the screen usually indicates the current device location and is centered, which is also showing the current and road I52808 near the current device location. Doc 201226854 Map information and other map features. In addition, ^ 障 障 , , , , , ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ The distance of the next deviation, the nature of the deviation, which can be represented by a particular type (9) indicating the deviation, such as 'left turn or right turn another. The navigation function also determines the (4), duration and timing of the voice command, which can be used along the route by instructions such as dreams. As you can see, simple instructions such as "turn left after 100 m" require eight-fold processing and analysis. As mentioned earlier, the user and the § 之 可 可 can be moved by the touch screen, or (other or eight) by the steering wheel mounted remote control, The tone is activated or by any other suitable method. ::: Under the condition 'another important function provided by the device is automatic way, '. Ten counts. The user deviates from the previously calculated route during navigation (extra or intentionally), and the immediate traffic condition indicates that the alternative route will be more advantageous and: - the piece can automatically identify such conditions automatically, or when the user actively initiates for any reason When the device is used to perform route recalculation. It is also known to allow the rule to be defined by the ruler; for example, the user may prefer the scenic route calculated by the device, or may wish to avoid the intersection, any congestion that may occur, is expected to occur or is currently occurring. The Road & Software will then calculate the various routes and prefer the number of points along the route that are labeled as, for example, a point of interest (called a POI) with a view or use to indicate the traffic conditions that are occurring on a particular road. It has been calculated that the ranks are sorted according to the degree of possible blockage or delay due to blockage. Other POI based and traffic information based routes 152808. Doc 201226854 Calculation and navigation guidelines are also possible. Although the route calculation and navigation functions are important for the overall utility of the PND, it is possible to use the device purely for information display or "free driving", in which only map information related to the current device location is displayed, and wherein the route has not been calculated and The device is currently not performing navigation. This mode of operation is often applicable when the user knows the route to travel along and does not require navigation assistance. Devices of the type described above (e.g., Model 920, manufactured and supplied by TomTom Internati〇nal Bv) provide a reliable means for enabling the user to navigate from one location to another. These devices are extremely useful when the user is unfamiliar with the route to the destination to which they are navigating. As mentioned above, the memory of the PND stores map data and other data (such as road information and historical information about road speed), which the pND can use to calculate routes and provide the necessary navigation instructions to the user. Although for a road segment, its specific route information (such as the maximum legal speed of the road) can be used to calculate the expected speed of the vehicle, in fact, factors such as crowding or road features such as a series of sharp turns may Change the actual speed that the vehicle can achieve on a particular road segment and/or at a specific time. A physical traffic flow monitoring system can be installed at appropriate locations on certain roads to determine the average traffic speed. However, the installation of such systems is costly and not widely available. Another way to collect more accurate mapping and route planning data is to utilize trace data stored in individual navigation devices. The trace data represents a route or journey' and typically includes a plurality of location and time data points that can be used to determine information such as the speed of the vehicle. The 152808 may be removed from this trace data as appropriate. Doc 201226854 Some personally identifiable information such as user name or device identifier, then transmitted to the central server 'This personally identifiable information can be aggregated on the central vocabulary with similar information provided by other navigation devices to provide An objective "real" summary or average travel profile for a specific location and time. Since this data can be averaged over a long period of time for many users, it can represent travel information (such as typical speed) more accurately and representatively. In addition, this information can be used to compare actual routes with predicted or expected routes to improve mapping and navigation logic. However, personal privacy is often an important issue for users and therefore for providers of such navigation devices. In this regard, even if personal identification data such as user names or device identifiers have been removed from the information provided by the navigation device, it is still possible to trace back from trace data to a particular user (eg, by using trace data) Compare with other sources). For example, the journey selected by the user often begins and/or ends at a location associated with the user (such as the user's home, the user's workplace, or the location of the user's friend or family member in this situation). By comparing the route start location and the end location and address list stored in the trace data, determining a list of addresses at (and around) the start and end points and thereby determining the local occupants, in some cases This will help identify the user of the device based on the route trace. It should be understood that statistical methods can be used to enhance this process. However, 'data related to the location such as the start or end point can be especially useful for determining parking spaces, for example. Location and/or availability. At least one object of at least one embodiment of the present invention is to overcome or mitigate 152808. Doc •10. 201226854 j at least one of the problems. At least one aspect of at least one embodiment of the present invention is to increase the privacy of a user of a portable navigation and/or mapping device and/or to increase the privacy of the device while increasing the privacy of the device. $. At least one object of at least one embodiment of the present invention is to improve the usefulness of location data available from a navigation or mapping device or to increase the amount of useful data that can be stored by the device. SUMMARY OF THE INVENTION According to a first aspect of the present invention, a mapping or navigation device is provided that includes a position balling device or is connectable to a position determining device operable to determine one of the mapping or navigation devices or a plurality of locations, the one or more determined locations forming at least one route; wherein the mapping or navigation device is configured to determine at least one π-minute of the at least one of the routes, wherein the at least-part is based on the portion Determining at least one property associated with at least one location included in the mapping; and the mapping or navigation device is capable of forming at least one anonymized route from the at least one determined route, Α ψ 4 $ /1, rrt s, ', medium ^ at least one anonymization route does not include the at least part of the route to the >. The at least one location associated with the at least one property may be an identification sensitive. the identification sensitive location may include a location associated with a user of the mapping or navigation device and/or may be deducted The location of one of the users and/or the location by which the user can be identified. The mapping or navigation device can dynamically slap the at least a portion of the at least-route. There has been a change in this part. Size and / or shape can be on different routes 152808. Doc 201226854 ^ This part of the route can be sensitive to identifying - identifying sensitive locations. Score. This portion of the route may be prior to and/or prior to the line - identifying sensitive bits. The mapping or navigation n pieces may be configured to perform a subscription (4): indeed, at least - a determined position of the route Whether or not associated with an identification sensitivity, and determining that - or a plurality of routes - or a plurality of _ (four) portions - are associated with at least one of the identification sensitive locations. ', the route may include - route traces and / or represented by - route traces. At least one anonymized route may comprise a subset of a respective route or a superset. At least the anonymized route can be a simple route, and the abbreviated route can be a route that does not have one or more of the identified portions of the route. The position determining device can include a GPS device and/or a triangulation device (such as ' a microwave or radio frequency triangulation device). The mapping or navigation component can include - a data store (e.g., a memory or mass storage number) for storing the location or locations. The mapping or navigation device can include a communication burst, and the communication device can be a communication device for communicating with an external or remote device, such as a server. The communication device can include: - or a plurality of physical connector interfaces, through which the power signal and (as appropriate) data signals can be transmitted to and received from the device; And (as appropriate) one or more wireless transmitters/receivers to allow for cellular telecommunications and other signal and data networks (eg, Bluetooth, Wi_Fi, Wi-Max, GSM, UMTS and the like) Communication. 152808. Doc -12· 201226854 The 5H map or navigation device can be adapted to communicate at least some of the determined locations belonging to the route to the J-route using the communication device. Advantageously, the beta mapping or navigation device can be configured to communicate the anonymous route using the communication device. The map or navigation device can be configured to be formed by modifying and/or deleting and/or removing and/or selectively not storing and/or selectively not communicating at least one identification sensitive portion of a respective route The at least one anonymized route. The at least identifying the modification of the sensitive portion can include adding one or more locations to the identifying sensitive portion. In the #代 or other embodiment, the mapping or navigation device can be configured to form the at least one anonymized route by modifying at least one identification sensitive portion of the route, the modification comprising reducing the identification within the sensitive portion At least one location and preferably the accuracy of each location. The modification may include shifting at least one location of the at least one identification sensitive portion of the route and preferably each location, which may be performed at a random amount or according to a predetermined set of criteria. For example, if a location is on a residential street (such as at one end of a residential area), the location can be displaced to the middle of a street or to a residential area or other predefined area. . In this way, it may be more difficult to determine the location of the identified sensitive location based on the anonymized trace data. The modified portion of the route may be tagged such that the modified portion may be identified later such that the modified portion may be identified as modified when processing the material so as not to affect the The accuracy of any information. The anonymized route may include the modified location material derived from at least the identified sensitive location. 152808. Doc • 13· 201226854 In an alternative or additional embodiment, the mapping or navigation device can be configured to determine a plurality of anonymized routes based on the determined route, the plural. At least one of the plurality of routes includes at least one first identification sensitive portion and does not include at least one second identification sensitive portion, and at least another of the plurality of routes includes a second identification sensitive portion and does not include at least one A sensitive part is identified. This may include dividing the determined route into at least two segments, each segment containing a different identification sensitive portion, and each segment forming a different anonymization route. The at least two segments can be combined to include the determined route. The mapping or navigation device can be configured to store and/or communicate each of the segments separately. For example, the route can be divided into a point segment associated with the beginning of the route and an endpoint segment associated with one of the endpoints of the route. In this way, a third party viewing the anonymized traces will not know which anonymized trace contains the starting point of the journey or the end of the journey. It should be understood that the route may be divided into two or more sections as the case may be 'for example, a section containing the starting point of the route, one section including the end point of the route, and one or more intermediate or way points (vU) Or identifying one or more segments of the sensitive location. In this way, the privacy of the user may be further increased. The identifying sensitive locations may include a route corresponding to a starting point of the route and/or the route. An end point and/or a location and/or portion of a location (such as a waypoint or an intermediate travel point) designated by the user. The identification sensitive locations may include a route corresponding to the navigation and/or mapping device A location associated with a user (such as a home address, a work address, and/or I52808 stored in a user's address book or favorite list. Doc •14· 201226854 Address and/or similar) Location and/or rating. The navigation and/or navigation device is operative to store at least a bit (four) with the user in the memory, and/or to access the user via the communication device, for example, from m access At least - location. The navigation and/or mapping device can include a user input and can be configured to receive a location associated with the user via the maker input device. The identification sensitive location can include a location associated with a component for identifying a user, such as a CCTV camera. A location associated with a component for identifying a user may be stored in the memory of the mapping or navigation device 'and/or by the mapping device using a t-communication device (eg, from a server) take. The one or more determined locations may include associated time and/or period data indicative of the time and/or date of the navigation device at the determined location. The one or more determined positions may include a direction and/or a distance from a reference position. The identification-sensitive portion of the at least one route may include a route-identified distance and/or a time period and/or a location data point of the route associated with a recognized sensitive location and/or associated with a recognized sensitive location The location within the number. The size or one or more sizes of at least one of the identification sensitive portions may be dynamically determined or variable. The threshold can be dynamically determined or variable. The determination or change of the identification sensitive portion may depend on the map material associated with the identified sensitive location. The map material can be stored in the map bite 152808. Doc • 15· 201226854 in the memory of the avionic device' and/or may be accessed by the mapping and navigation device via a communication device, e.g., from a server. The map material may include the density of a type or category of features, such as roads and/or buildings and/or postal addresses and the like. The identification sensitive portion may be greater at at least a first characteristic density than at least a second characteristic density 'where the first characteristic density is lower than the second characteristic density. The size of the identifying sensitive portion can be inversely proportional to the characteristic density. An identification-sensitive location with a high density (such as a road or building) density may indicate a densely populated downtown area where there may be more possible addresses and, therefore, may be more difficult to locate the collected location data Associated with any identifiable user. In this case, the associated identification sensitive portion can be made smaller, thereby reducing the amount of data excluded from the anonymized route and maximizing the collected available data while maintaining the user's privacy. Conversely, an identification sensitive location with a low feature density may indicate a sparsely populated area' where potential addresses may be separated far apart. In such situations, the size of the associated identification sensitive portion can be increased, thereby increasing the amount of location data removed from the route around the identified sensitive location. This may increase the number of potential or possible addresses or locations covered by the identification sensitive portion, which may make it more difficult to identify one of the sensitive locations identified by a user based on the anonymized route data. The map material can contain feature attributes or categories. For example, if a sensitive location is identified with a public location or building or location type that is typically associated with a large number of people (such as a high-rise residential or office building or a civic facility location such as a sports field, theater, shopping mall) or One of the similar ones is 152808. Doc 201226854 Attributes or classifications can be associated to reduce the size of the associated identification-sensitive portion (which can be reduced to zero as appropriate), ie, ignoring the identification-sensitive portion/location, thereby reducing the inclusion in the identification The amount of location data determined by the route within the sensitive portion. This increases the amount of data that can be collected while maintaining the privacy of the user, as it is more difficult to identify among a large number of potential users associated with this public or densely populated area, building or location. Any specific user. The map data T contains the point of interest information and/or category and/or usage information associated with the identified sensitive location. For example, if the identification sensitive location is associated with a particular point of interest tag that can indicate a public or human σ dense area (such as a public parking lot, a shopping mall, a tourist attraction, a theater, etc.), then the The size of the sensitive portion is identified because it may be difficult to determine an individual user identification associated with the identified sensitive location from a large number of potential users f present at the point of interest. The determination or change of the identification sensitive portion may depend on location data associated with the identification sensitive location that has been stored by the mapping or navigation device and/or any server to which the mapping or navigation device is connected or connectable. For example, the amount and/or quality and/or type of data stored by the server and/or navigation or mapping device. The quality of the material may be related to the accuracy and/or ambiguity of the material, which may be characterized in relation to one or more predetermined thresholds. For example, if a large amount of location data and/or multiple location data and/or several types of location data and/or low quality location data are stored with respect to a location, the size of the associated identification sensitive portion can be reduced. Because it can be in a number of other locations associated with a particular location that identifies it. Information in the knowledge 152808. Doc 201226854 The possibility of not having location information may be small. Conversely, it may be easier to identify any new location data for identification-sensitive locations where high quality data or previously obtained data is low. In such regions, the associated identification-sensitive portion may be increased in size to increase the amount of the route within the identification-sensitive portion associated with the identified sensitive location, i.e., removed from the trace. The amount of location data that can be identified for identifying sensitive locations (which can be identified based on the identified sensitive locations) has increased. In this way, user privacy can be increased. The determination or change of the identification sensitive portion may depend on user data that may be stored on or accessible by the navigation and/or mapping device. The user profile may include a location associated with and/or provided by the user and/or selected by the user. The user profile can be stored in the memory of the device and/or can be retrieved from the server via the communication device and/or input by the user. Examples of suitable user profiles include a favorite list and/or location of recent visits and/or frequent visits to locations and/or home or work locations. The mapping or navigation device may be able to access the user's address book or other similar information, and the location contained therein may be included in the user profile. The favorite list or address book may include, for example, the user's home address, or an address associated with the user's friend, family member, or other person who may be associated with the user or available to identify the user. . In this case, the threshold can be increased when the identification sensitive location corresponds to a location contained within the user profile. By augmenting the threshold of the identification-sensitive portion of the route associated with such identifying sensitive locations contained in the user profile_, anonymized way 152808. Doc 201226854 The line removes a large amount of trace data around the identified sensitive location, making it more difficult to identify the sensitive location based on the anonymized route, which in turn increases the privacy of the user (especially in the identification of sensitive locations) At the start, end or destination of the route or at the transit or intermediate point). Optionally, the 'far mapping or navigation device can be configured to determine the amount of location data stored on the mapping or navigation device or an associated server, and has fully covered a location (ie, 'has been stored about The threshold value is increased when the location is large, or the threshold is decreased when the associated location has low coverage. This allows for useful location data collection on devices with low memory capacities because only useful data is stored and the memory is used more efficiently. It should be appreciated that the above devices address potential privacy issues because the coverage of the data identifies a portion of the sensitive location (such as the start and/or end of each route) before the self-navigation device is transmitted to the server and/or Removed or modified before being stored on the server, thereby reducing the traceability of door-to-door users based on anonymized routes. At the same time, the identification-sensitive portion of the route is determined based on a set of predefined parameters associated with each particular identified sensitive location, such as feature density, associated points of interest, feature type, user profile, and the like ( That is, the portion of the route that was removed or modified, so that the amount of location data collected can be maximized because the sensitive portion can be reduced or minimized for locations that may be more difficult to associate with individual users. In the same day, Tongri Temple increases privacy by increasing or maximizing the identification-sensitive portion associated with identifying the location of the sensation (which may indicate a location that is easier to associate with the user). From or near the start and end points I52808. Doc • 19· 201226854 Information may be particularly useful, for example, for obtaining information about parking spaces. The inventive device is operable to provide privacy for the right person. Field-collecting this subject' while protecting the use of the second aspect of the present invention to provide a processing device that includes a processor that is consuming to the communication device, and today's Hube (four) Yi 5 Hai processing thieves The state receives the location data via the device, and the location includes a mapping or navigation device or a plurality of locations, the at least one location forming at least a route. The processing device is operable to determine (d) at least - at least a portion of the route, wherein the at least one portion is green based on at least one property associated with at least one location included in the at least one portion; and from the at least one determined The route forms at least one of the Xue Xuan's naming routes, wherein the at least one anonymized route does not include the at least one portion of the at least one route. The processing device can be configured to receive location data from a mapping or navigation or position determining device. The provincial processing benefit may further include a memory or a data storage. The processing device can be configured to store the at least one anonymized route in the memory or data store. The processing device can include a server or be included in a server. The processing device can include an intermediate device or be included in an intermediate device configured to receive location data from a mapping or navigation device via the communication device and to transmit at least one anonymized route to the communication device via the communication device External system (such as a server). In accordance with a third aspect of the present invention, a method of processing a route includes receiving or determining one or more locations, the one or more determined bits 152808. Doc -20 - 201226854 forming at least one route; determining at least a portion of the route, wherein the at least a portion is determined based on at least one property associated with at least one location included in the portion; and determining from The route forms an anonymized route, wherein the anonymized route does not include the at least a portion of the at least-route. The «Hai method can include a method of operating a mapping or communication device. The method can i3 operate as a method of mapping or communicating a device according to one of the first aspects. A fourth aspect of Kang Benming provides a mapping or navigation device that includes position determining means or is connectable to a position determining device operable to determine (d) a mapping or navigation device - or a plurality of locations, The one or more determined locations form at least a route; wherein the wide shot or navigation device is configured to determine at least one of the at least one route and the modification is included in the at least one night. At least one position within the sub-range to form a modified portion of the 5H route; and the mapping or navigation device is formed by the grouping of ^s, ~, u from at least one determined route to the anonymized route, Wherein at least one anonymized route of the repair, A 5H includes the modified portion instead of the at least one portion of the at least one of the lines. At least a portion of the route is associated with the identification of the sensitive portion.匕3 may be associated with an identification sensitive location. The mapping or navigation device may identify the sensitive portion of the sensitive route via at least a location within the portion and preferably = by at least reducing. Modification of the modification may include at least 152808 of displacing the route. Doc • 21 - 201226854 - identifying at least one location of the sensitive portion and preferably each location and/or a time associated with at least one identification sensitive portion of the route, which may be in a random amount or according to a predetermined set of criteria And proceed. For example, if a location is on a residential area (such as 'at one end of a residential street'), the location can be displaced to the middle of a course or to a residential area or other predefined area. . In this way, it may be more difficult (4) to lighten the trace data to determine the location of the sensitive location. The modified portion of the route may be tagged such that (4) the modified portion may be revisited such that the modified portion may be identified as modified when processing the data so as not to affect the The accuracy of any information. The mapping or navigation device may include mapping or navigation according to one of the first aspects and/or including any features described with respect to the first aspect. Providing a processing device configured to receive one or more or more determined locations to form at least one location according to a fifth aspect of the present invention, wherein the processing device is configured to determine the at least At least a portion of the route and modifying at least a location included in the at least one portion to form a modified portion of the path; and = the processing device is configured to form from the at least one determined route to an anonymized route,苴中钵, ', ^ An anonymized route contains the modified. A knife replaces at least a portion of the at least one route. The processing device is configurable. . ,,,_ Receive location data. , 4-map or navigation or position determiner The processing device can be entered into a cow, a memory or a data storage device. The 152808. Doc • 22· 201226854 The device can be configured to store the at least one anonymous (four) line in the memory or data store. The processing device can include a server or be included in a server command. The processing device can include an intermediate device or be included in an intermediate device configured to receive location data from a mapping or navigation device via the communication device and to transmit at least one anonymized route to an external system via the communication device (such as 'a server'). The processing device can include a processing device of a second aspect. According to a sixth aspect of the present invention, a method of processing a route includes receiving or determining one or more locations, the one or more determined locations forming at least one route; determining at least - at least - And modifying at least a location included in the at least one portion to form a modified portion of the route and forming at least one anonymized route from the at least determined route, wherein the at least an anonymized route includes the The modified portion replaces at least a portion of the at least one route. According to a seventh aspect of the present invention, there is provided a mapping or navigation device comprising position determining means or connectable to a position determining means operable to determine - or a plurality of positions of the mapping or navigation device The determined location forms at least one route, wherein the mapping or navigation device is configured to divide the at least-route into at least two segments to form at least two anonymized routes. The mapping or navigation device can be configured to determine at least one identification sensitive location. At least the segment and preferably each segment of the anonymization route may comprise 152808. Doc -23- 201226854 At least one identifying sensitive location that differs from at least - other segments and preferably each other segment. The segments of the route can be dynamically determined. 5 The at least two segments may be combined to include the determined route. The mapping or navigation device can be configured to store and/or communicate each of the segments separately. For example, the route may be divided into a start point section associated with the start of the route and an end point section associated with one of the route end points. In this way, the third party viewing the anonymized traces will not know which one - the anonymized trace contains the starting point of the journey or the end of the journey. ^ It should be understood that the route can be divided into more than two sections, for example, = The starting point of a route - the section containing the end of the route - the section 2 contains one or more intermediate or waypoints or other identifying sensitive locations - or a plurality of sections. In this way, the privacy of the user can be further increased. According to an eighth aspect of the present invention, a processor # configured to receive and/or determine one or more locations is provided, the at least one determined location forming at least one route; wherein the processing device is grouped The state divides the at least-route into at least two segments to form at least two anonymized routes. The processing device can be configured to receive location data from a mapping or navigation or position determining device. ** The processing device may further include 邙, 陪7匕3 〇 体 或 or a data storage device. The processing device can be configured to store the at least one anonymized route in the memory or data store. The processing device can include a server or be included in a server. The processing device can include an intermediate device or be included in an intermediate device, 152808. Doc -24· 201226854 It is configured to. The location information is received via the communication I-located navigation device and the at least one anonymized route is transmitted via the communication device to an external system (such as a server). A two-state and/or fifth aspect processor The processing device can include a first component. According to a ninth aspect of the present invention, a method of processing location data is provided, comprising determining or receiving - or a plurality of locations, the one or more determined locations forming at least one route; wherein the mapping or navigation device is grouped The state divides the at least-route into at least two segments to form at least two anonymized routes. The method can be a method of operating a mapping and/or navigation device, such as a mapping or navigation device of the first and/or fourth and/or seventh aspects of the present invention. According to a tenth aspect of the present invention, there is provided a computer program component, comprising: a method or implementation for causing a computer to perform the third and/or sixth and/or ninth aspects of the invention as set forth above A computer program element of the device as set forth in any one of the first, second, fifth, sixth, eighth or ninth aspects of the invention. The computer program component can be embodied on a computer readable medium. According to an eleventh aspect of the present invention, there is provided an apparatus programmed by the computer program element of the tenth aspect of the present invention. The advantages of these embodiments are set forth below, and additional details and features of each of these embodiments are defined in the accompanying sub-claims and elsewhere in the following embodiments. 152808. Doc -25- 201226854 It should be understood that any of the above aspects of the invention may also be applied to any other embodiment of the invention as may be understood, similar to any of the described device features. The method of the invention is in the material of the invention, and the inverse m is intended to be described. [Embodiment] The present invention will be described by way of example only with reference to the examples. The same reference number will be used to identify the phase 0 ' in the following m. The embodiments of the present invention will now be described with particular reference to PNDs. However, it should be borne in mind that the teachings of the present invention are not limited to PNDs, but rather are generally applicable to configured to perform navigation and/or mapping software in a portable manner to provide route planning, location determination, and/or navigation functionality. Any type of processing device. Thus, it can thus be seen that in the context of the present application, the navigation device is intended to include, but is not limited to, any type of route planning, mapping or navigation device, whether the device is embodied as a PND, such as a vehicle or an actual vehicle. It is embodied as a portable computing resource that performs route planning and navigation software (for example, a portable personal computer (PC), a mobile phone, or a personal digital assistant (PDA). It will also be apparent from the following that the teachings of the present invention are effective even when the user does not seek guidance on how to navigate from one point to another and only wants to be provided with its location or selected route. In such cases, the "destination" location selected by the user does not need to have a corresponding starting position (the user wishes to start navigation from it), and therefore, in this article, "purpose 152808. Doc -26- 201226854 The location of the location or the actual reference to the "destination" view should not be interpreted as meaning that the route is required to be generated, the travel to the "destination" must occur, or the "destination" There is a need to specify a corresponding starting position. With the above conditions in mind, the Global Positioning System (GPS) and its like in Figure 1 are used for a variety of purposes. In general, GPS is a satellite radio based navigation system that is capable of determining continuous position, speed, time and, in some cases, direction information for an unlimited number of users. The GPS, formerly known as NAVSTAR, has multiple satellites orbiting the Earth in extremely precise orbits. Based on these precise orbits, GPS satellites can relay their location to any number of receiving units. A GPS system is implemented when a device specially equipped to receive GPS data begins scanning a radio frequency to detect a GPS satellite signal. Upon receiving a radio signal from a &1 > 8 satellite, the device determines the exact location of the satellite via one of a plurality of different conventional methods. In most cases, the device will continue to scan to find the signal until it has acquired at least three different satellite signals (note that other triangulation techniques can be used to determine position by only two signals, although this is very example). After performing the geometric triangulation, the receiver uses three known positions to determine its own position relative to one of the satellites. This determination can be made in a known manner. In addition, obtaining the fourth satellite signal allows the receiving device to calculate its three-dimensional position in a known manner by the same geometric calculation. An unlimited number of users can continuously update location and speed data in real time. As shown in FIG. 1, the GPS system 1 includes a plurality of satellites 102 that operate around the Earth 丨〇4. The GPS receiver I 〇 6 is from 152808 of the plurality of satellites j 〇 2 . Doc -27- 201226854 Several satellites receive spread spectrum GPS satellite data signals 108. The spread spectrum data signal 108 is continuously transmitted from each satellite 102, and the transmitted spread spectrum data signals 108 each include a data stream including information identifying a particular satellite ι2, the data stream being derived from the particular satellite 1 〇 2. The GPS receiver 106 typically requires a frequency data signal 1 〇 8 from at least three satellites 1 以便 2 to enable calculation of the two dimensional position. The receipt of the fourth spread spectrum data signal enables the GPS receiver 1 〇 6 to calculate the three dimensional position using known techniques. Referring now to FIG. 2, a navigation device 2 including a GPS receiver device 1 or 6 coupled to a gps receiver device 106 can be via a mobile device (not shown) when needed (eg, a mobile phone, pDA, and / or any device with mobile phone technology) establish a data session with the network hardware of the "action" or telecommunications network to establish a digital connection (eg, via a digital connection to a known blue technology). Thereafter, the mobile device can establish a network connection with the server via its network service provider (e.g., via the Internet). Thus, it is possible to establish a relationship between the navigation device 2 (when it travels alone and/or in a way that is in the tool, it can be and f is often action) and the 祠 1 1 50 "Twisting" (4) road links to provide "smart" or at least "new" gateways for information. The establishment of a network read between a mobile device (via a service provider) and another device (such as a hacker 1 50) can be done in a known manner using, for example, the Internet. In this regard, 'can be used', using any number of appropriate data communication protocols, the mobile device can utilize any of a number of standards such as CDMA2_, GSM, dirty 802 1] a/b/c/g/n, etc. . 152808. Doc -28- 201226854 It can thus be seen that, for example, an internet connection can be made via a data connection, via a mobile phone or a mobile phone technology within the navigation device 2000. Although not shown, the navigation device 200 can of course include its own mobile phone technology (including, for example, an antenna 'or an internal antenna of the navigation device 200 as appropriate) within the navigation device 2 itself. The mobile phone technology within the navigation device 2 may include internal components and/or may include an insertable card (eg, a user identity module (SIM) card) that is equipped with, for example, a necessary mobile phone Technology and / or antenna. Thus, the mobile phone technology within the navigation device 2 can similarly establish a network connection between the navigation device 2 and the server 150 via, for example, the Internet, in a manner similar to any mobile device. Ways] For phone settings, 'Bluetooth-enabled navigation devices can be used to work correctly with changing spectrum of mobile phone models, manufacturers, etc.' For example, model/manufacturer-specific settings can be stored in On the navigation device 200. The information stored for this information can be updated. For example, 'when the navigation device is directly connected via wi_fi or cable or by connection (which may include a wireless connection) the device is connected to a network (such as a personal computer) with a network connection (such as a personal computer) (such as, Internet access can also be provided intermittently. The network connection is not straightforward, that is, the navigation device does not need to be directly connected to the remote feeder. The fact is that the data can be downloaded from the navigation device. In the intermediate device, and thereafter (which may be at a later time or later, and possibly after the navigation device has been disconnected), the intermediate device can forward the data to I52808. Doc •29· 201226854 Remote server. The navigation device 2 is depicted in Figure 2 as being in communication with the server 150 via a general communication channel 152, which may be implemented by any of a number of different configurations. Communication channel 152 generally represents the propagation medium or path connecting navigation device 2 to server 150. When a connection between the server 15A and the navigation device 200 via the communication channel 152 is established (note that this connection may be a data connection via a mobile device, a direct connection via a personal computer via the Internet, etc.) The server 15 is communicable with the navigation device 2A. Communication channel 152 is not limited to a particular communication technology. In addition, communication channel 152 is not limited to a single communication technology; that is, channel 丨 52 may include several communication links using a variety of techniques. For example, communication channel 52 can be adapted to provide a path for electrical, optical, and/or electromagnetic communication, and the like. Thus, communication channel 152 includes, but is not limited to, one or a combination of: electrical circuits, electrical conductors such as wires and coaxial cables, fiber optic cables, converters, radio frequency (RF) waves, atmosphere, white space (free space) and so on. In addition, communication channel 15 2 may include intermediate devices such as routers, repeaters, buffers, transmitters, and receivers. In an illustrative configuration, the communication channel 152 includes a telephone network and a computer network. Further, the communication channel 152 may be adapted for wireless communication, such as infrared communication, radio frequency communication (such as microwave frequency communication), and the like. In addition, communication channel 152 can be adapted for satellite communications. Communication signals transmitted via communication channel 152 include, but are not limited to, signals as may be required or desired for a given communication technology. For example, the 152808. Doc •30· 201226854 Signals are suitable for cellular communication technologies (such as Time Division Multiple Access (TDMA), Frequency Division Multiple Access (FDMA), Code Division Multiple Access (CDMA), Global System for Mobile Communications (GSM) ) etc.). Both the digital signal and the analog signal can be transmitted via communication channel 15 2 . These signals may be modulated, encrypted and/or compressed signals that are desirable for the overnight technology. The server 150 includes (in addition to other components not otherwise described) a processor 154 operatively coupled to a memory 156 and further operatively coupled to a large via wired or wireless connection 15 8 The capacity data storage device 160 includes the storage of navigation data and map information, and may also be a device separate from the server 15 or may be incorporated into the server 150. Processor 154 is further operatively coupled to transmitter 162 and receiver 164 for transmitting information to and receiving information from navigation device 200 via communication channel i52. The § number sent and received may include data, communications and/or other propagating signals. Transmitter 162 and receiver 164 may be selected or designed in accordance with communication requirements and communication techniques used in the communication design of navigation device 200. Additionally, it should be noted that the functions of transmitter 162 and receiver 164 can be combined into a single transceiver. As mentioned above, 'navigation device 200 can be configured to communicate with server 150 via communication channel 152', which uses transmitter i66 and receiver 168 to transmit and receive signals and/or data via communication channel 152, noting that such devices It can further be used to communicate with devices other than the server 150. In addition, according to the communication requirements used in the communication design of the navigation device 200 and I52808. Doc 201226854 communication techniques to select or design transmitter 166 and receiver 168, and combine the functions of transmitter 166 and receiver 168 into a single transceiver' as described above with respect to FIG. Of course, the navigation device 2 includes other hardware and/or functional components' which will be described in more detail later herein. The software stored in the word processor memory 156 provides instructions to the processor 154 and allows the word processor 150 to provide services to the navigation device 2A. One of the services provided by the server 150 includes processing the request from the navigation device 2 and transmitting the navigation data from the large-capacity data store 160 to the navigation device 2 (the other service that can be provided by the feeder 150 includes The application uses various algorithms to process the navigation data and send the results of such calculations to the navigation device 200. The server 150 constitutes a remote source of data that can be accessed by the navigation device 2 via the wireless channel. The server 15 can include A network server located on a local area network (LAN), a wide area network (WAN), a virtual private network (vpN), etc. The server 150 may include a personal computer such as a desktop or laptop computer, and The communication channel 152 can be a cable connected between the personal computer and the navigation device 2. Alternatively, a personal computer can be connected between the navigation device 2 and the server 150 to establish a server 15 and navigation. Internet connection between device 2。. "T, ''! From the download of the user to the navigation device 2〇〇 from the word server 1 〇 information 'this information can be automatically updated regularly, or in Make The navigation device 2〇〇 is connected to the server 15 and then updated, and/or is established continuously or frequently between the service device 15G and the navigation device via the wireless mobile device and the TCP/IP connection. After the connection, update in a more dynamic way. For 152808. Doc •32· 201226854 Many dynamic calculations are mostly processed by the processor 154 in 15° for disposal,” the processor of the navigation device 200 (not in Figure 2 can also be independent of the health device) 15. The connection handles many processing and calculations. Referring to Figure 3, Λ, 拿立^心/主思,, the block diagram of the navigation device 2 (9) does not include all the navigation devices, and tg 疋 only represents many An example component. The navigation device 200 is located within a housing (not shown). The navigation device 200 includes a processing resource i. The processing resource includes, for example, the processor 2〇2 mentioned above, coupled to the Input device 2〇4 and a display device (eg, display 2〇6). Although reference is made herein to the singular form of input device, those skilled in the art will appreciate that input device 2〇4 represents any number of input devices, This includes keyboard devices, voice input devices, touch panels, and/or any other known input device for H fl. Also, display screens can include any type of display screen such as a liquid crystal display (LCD). , input The device's 2〇4 (touch panel) and display screen 206 are integrated to provide an integrated input and display device that includes a touchpad or touchscreen input. (Figure, in order to realize the input of information via the touch panel screen (via direct input, menu selection, etc.) and information display both' so that the user only needs to touch the part of the display screen 206 to select a plurality of One of the display options or one of a plurality of virtual or "soft" buttons is activated. In this regard, the processor 202 supports a graphical user interface (gui) that operates in conjunction with the touch screen. The processor 202 is operatively connected to the input device 204 via the connection 2i, and can be connected to the input device 2〇4 via the connection 2j. The doc • 33-201226854 receives the input information' and is operatively coupled to at least one of the display screen 206 and the output device via the individual output connection 212 to output information to the at least one. The navigation device 200 can include an output device 2〇8, such as an audio output device (e.g., a speaker). Since the output device 2〇8 can generate acoustic sfL information for the user of the navigation device 200, it should be understood that the input device 2〇4 can also include a microphone and software for receiving input voice commands. Further, the navigation device 200 can also include any additional input devices 2〇4 and/or any additional output devices, such as audio input/output devices. The processor 202 is operatively coupled to the memory 214 via connection 216, and is further adapted to receive information/input information to/from the input/output (ι/〇) 经由 US via connection 22 (1/〇 ) 埠 218, where ι / 〇埠 US can be connected to the 1 / 〇 device 222 outside the navigation device 200. External ι/〇 device 222 may include, but is not limited to, an external listening device, such as an earpiece. The connection to "ο device 222 may additionally be a wired or wireless connection to any other external device (such as a car stereo unit)' for example for hands-free operation and/or for voice-activated operation, for to the earpiece or head The connection of the headset and/or the connection to, for example, a mobile phone, a personal computer, an internet router, or a data machine, where the connection can be used to establish a navigation device with, for example, an internet or any Data connections between other networks, and/or to establish connections to the server via, for example, the Internet or some other network. 3 further illustrates an operative connection between processor 2〇2 and antenna/receiver 224 via connection 226, where antenna/receiver 224 can be, for example, a GPS antenna/receiver. It should be understood that the lS2808 is schematically combined for illustrative purposes. Doc -34· 201226854 The antenna and receiver are represented by the number 224, but the antenna and receiver can be components of the knife opening and the antenna can be, for example, a GPS chip antenna or a helical antenna. *Rather, it will be understood by those skilled in the art that the electronic components shown in Figure 3 are powered by one or more power sources (not shown) in a conventional manner. As will be understood by those skilled in the art, the different configurations of the components shown in Figure 3 are contemplated. For example, the components shown in Figure 3 can communicate with one another via wired and/or wireless connections and the like. Thus, the navigation device 2 described herein can be a portable or handheld navigation device. In addition, the portable or handheld navigation device 2 of Figure 3 can be connected or "coupled" to a vehicle such as a bicycle, bicycle, car or boat in a known manner. This navigation device can then be removed from the docking position for portable or handheld navigation purposes. Referring to FIG. 4, the navigation device 2 can include an integrated input and display device 206 and other components of FIG. 2 (including but not limited to an internal GPS receiver 224, a microprocessor 202, a power supply (not shown) , a unit of memory system 214, etc.). The navigation device 200 can be located on the arm 252, which can be fastened to the vehicle dashboard/window/etc. using the suction cup 254. This arm 252 is an example of one of the docking stations to which the navigation device 200 can be coupled. For example, the navigation device can be coupled or otherwise coupled to the arm 252 of the docking station by attaching the navigation device 200 to the buckle of the arm 252. The navigation device 2 can then be pivoted over the arm 252. In order to release the connection between the navigation device 2 and the docking station, a button (not shown) on the navigation device 200 can be pressed, for example. Used to navigate 152808. Doc •35· 201226854 Other suitable configurations for coupling the device 200 to the docking station and displacing the navigation device 2〇〇 with the docking station are well known to those skilled in the art. Referring now to Figure 5, processor 202 cooperates with memory 214 to support a BIOS (Basic Input/Output System) 282, which acts as an interface between the functional hardware component 280 of the navigation device 200 and the software executed by the device. Processor 202 then loads from operating system 214 into operating system 284, which provides an environment in which application software 286 (which implements some or all of the route planning and navigation functionality 288 described above) can be executed. Referring now to FIGS. 6-14, an illustrative destination location input process is first described with respect to a user who begins a location of Ly% (France) and wants to navigate to a track address of Gren〇ble (France). The user knows the street name and house number of the street address. Although not shown, the user uses one of the application menu options supported by the application software 286 to select the view in 3D mode. When the user turns on the navigation device 2, the device 2 acquires the GPS position and calculates (in a known manner) the current position of the navigation device 200. Then, a display (shown in FIG. 6) is displayed to the user (3), which displays the local environment 3〇2 in which the navigation device 200 is determined in a pseudo three-dimensional manner, and is located under the local environment in the display 3〇〇. A series of control and status messages are displayed in Zone 3〇4. By touching the display of the local environment 302, the navigation device 200 switches to display (shown in Figure 7) a series, column virtual or soft button 306 by which the virtual or soft nick 306' user can ( In particular, enter the destination you wish to navigate to. 152808. Doc -36- 201226854 By touching the "navigate to" virtual button 308, the navigation device 200 switches to display (as shown in Figure 8) a plurality of virtual buttons, each of which has a different category of selectable destinations Associated. In this case, the display shows a "family" button that, when pressed, will change the destination to the stored home location. The "favorite" button, when pressed, reveals a list of destinations that have been previously stored by the user in the navigation device 200, and when one of these destinations is subsequently selected, 'sighs the destination of the route to be calculated For the selected previously stored destination. The "Recent Destination" soft button appears as a list of selectable destinations that have been stored in the memory of the navigation device 2 and that the user has recently navigated to when pressed. The selection of one of the destinations filled in this list will set the destination location of this route to the location of the selected (previous visit). The "point of interest" button, when pressed, presents a number of options by which the user can choose to navigate to any of a plurality of locations, such as an automated teller machine (ATM), a gas station, or a tourist attraction, the plural The locations have been pre-stored, for example, in the navigation device 200 as a location that the user of the navigation device 200 may wish to navigate to. A triangular "arrow" shaped virtual button leads to an additional sub-menu option associated with the "Navigate to..." menu option, and the "Address" button 310 begins a process by which the user can enter the destination to which he wishes to navigate. Street address. Since the user knows the street address of the destination to which the user wants the navigation device 2 to navigate in this example, it is assumed that the "address" button 31 is operated (by touching the button displayed on the touch screen), The user is then presented with a series of address input options (as shown in Figure 9): in detail, pin 152808. Doc •37· 201226854 Address input by city center, address input by “zip code”, φ “crossroads or intersections” X, for example, the junction of two roads, address rounding and borrowing The address is entered by "Street and House Number". In this example, the user knows the street address and house number of the destination and thus selects the street and house number "virtual button 312, which is then presented to the user (as shown in Figure 10): The name of the city to which the navigation is directed is not 314; the flag button 316, by which the user can select the country in which the desired city is located; and the virtual keyboard 318 'which can be operated by the user to input as necessary The name of the destination city. In this case, the user has previously navigated to the location in Ly0n and Grenoble, and thus the navigation device 2 provides the user with a list 320 of selectable cities. In this case, 'user wants to navigate to Grenob' e, and after selecting Grenoble from list 320, navigation device 200 (shown in FIG. 显示) displays: virtual keyboard 318 by which the user can enter the street name, pair Type the street name hint 322, and (in this case, because the user has previously navigated to the street in Grenoble) the list of selectable lanes in Grenoble 324 ° In this example, the user wants to return to the user previously Visiting street
Avenue Du G0n0ral De Gaulle ’使用者自所顯示清單324選 擇 Avenue Du G6n0ral De Gaulle。 一旦已選擇一街道，導航器件200便接著顯示一受限制 的主要為數字之虛擬小鍵盤326’且藉由提示328來提示使 152808.doc -38 · 201226854 用者鍵入在使用者希望導航至的選定街道及城市中之門牌 说右使用者先則已導航至此街道中之一門牌號，則最初 展示該門牌號（如圖12中所展示）。若在此情況下使用者希 望再次導航至Avenue Du G6n0ral De Gaulle第6號，則使用 者僅需觸摸在顯示300之右下角所顯示的「完成」虛擬按 钮330。若使用者希望導航至Avenue Dll G0n0ral De Gaulle 中的不同門牌號’則使用者需要做的僅僅是操作虛擬小鍵 盤328以輸入適當門牌號。 一旦已輸入或選擇門牌號，便在圖13中詢問使用者是否 需要特定的到達時間。若使用者按壓「是」按鈕，則調用 估計行進至目的地所需之時間且建議使用者何時應離開 (或者在使用者快遲到的情況下，何時應已離開）其當前位 置以便準時到達其目的地之功能性。在此情況下，使用者 並不關心在特定時間到達且因此選擇「否」虛擬按鈕。 選擇「否」按鈕332使導航器件2〇〇計算當前位置與選定 目的地之間的路線，且在展示整條路線的相對較低放大率 之地圖上顯示該路線334(如圖14中所展示）。亦向使用者提 供·「完成」虛擬按鈕336,使用者可按壓該「完成」虛擬 按鈕336以指示計算出之路線係可接受的；「尋找替代」按 紐338使用者可按屋該「尋找替代」按紐奶以使導航器 件200計算至選定目的地之另—路線；及「細節」按叙 34〇,使用者可按壓該「細節」—以顯現用於顯示關 於當前所顯示之路線334的更詳細資訊之可選擇選項。 在此清況下作又定使用者認為所顯示之路線為可接受 152808.doc -39- 201226854 的’且一旦已按壓「完成」按鈕336,便向使用者呈現導 航器件200之當前開始位置之三維視圖（圖中未展示）。 使用者接著開始其旅途’且導航器件2〇〇以已知方式藉 由根據導航器件200之位置的經確定之改變而更新地圖且 藉由向使用者提供視覺導航指令及（視情況）聲訊導航指令 而指引使用者。 一旦目的地已由使用者設定’且導航器件2〇〇已開始為 使用者導航，導航器件200便經由處理器202及構成位置確 疋單元之GPS接收器224監視導航器件2〇〇之位置。一旦導 航器件200已沿著由導航器件2〇〇之應用軟體286所規劃的 路線前進一充分距離’便有必要更新由顯示器件2〇6顯示 之二維視圖。在使用與導航器件200之位置有關的經度及 緯度資料的情況下’地圖資料處理器29〇存取地圖資料293 並擷取地形資料294、土地使用資料296及道路資料298。 在整個旅途中，將使用GPS接收器224所確定之導航器 件200之位置儲存於器件記憶體2丨4中，以便建構一包含複 數個位置資料點之路線跡線4〇5，該複數個位置資料點表 示導航器件200在旅途之整個至少一部分中的位置。在合 適的時間或按合適的時間間隔，諸如當導航器件2〇〇連接 至個人電腦或經由通信頻道丨52直接連接至伺服器丨5〇時， 將儲存於導航器件200之記憶體2 14中之路線跡線405上載 至伺服器150。 伺服器1 50可操作以收集並彙總來自若干導航器件2〇〇之 路線跡線405。可分析路線跡線4〇5以便確定運輸工具位置 152808.doc -40- 201226854 及在每一路線跡線405内之各個位置處的參數（諸如速度及 時間）。可分析此彙總路線跡線資料以基於實際用途提供 資訊，諸如，在道路網中之任一點及在任何時間之典型運 輸工具速度。彙總資料可用以確定所導航路線之變更及偏 離預期道路地圖資料（其可指示道路網之改變及其類似 者），以使得可獲得地圖及導航資料及演算法之驗證。 在將路線跡線405發送至伺服器15〇之前，處理器202可 操作以分析路線跡線405以便確定識別敏感位置41〇、 415、420在該路線跡線405内，識別敏感位置41〇、415、 420可此允許導航器件2〇〇之使用者被識別。識別敏感位置 之實例包括路線跡線405之開始位置41〇、目的地415及/或 由使用者指定或輸入之一或多個中間或導航點位置42〇。 在-可選實施例中，識別敏感位置可包含㈣者識別裝置 (諸如，CCTV相機，或自動牌照掃描閘或相機(諸如擁擠 計費區之自動牌照掃描閘或相機))之位置。視情況，可分 析儲存於導航器件200上或可由導航器件2〇〇存取之使用者 資料以擷取（例如）儲存於使用者之通訊錄中之地址或儲存 於使用者之最愛清單或近來造訪之清單中的位置。自使用 者資料導出之位置可被視為識別敏感位置。 自上文Jim使用預定準則根據位置資料/路線跡 線來確定識別敏感位置’及/或可將識別敏感位置儲存於 或可經由通信頻道152自词 ㈣料器16〇存取識別 置。 〜 152808.doc -41 - 201226854 導航器件200可操作以確定路線跡線405之與每一識別敏 感位置410、415、420相關聯之識別敏感部分425、430、 435。 可基於與一給定之識別敏感位置41〇、415、42〇相關聯 之參數來確定該識別敏感位置410、415、420之識別敏感 部分425、430、435。識別敏感部分425、430、435包含以 下資料：其表示路線跡線4〇5上之與相關聯之識別敏感位 置410、415、420之間的距離、時間或位置資料點數目處 於一經確定之臨限值内的位置。 藉由結合儲存於導航器件200上或可由導航器件2〇〇存取 的預定準則而評估與識別敏感位置41 〇、415、420相關聯 之參數來確定該臨限值之大小且進而確定識別敏感部分 425、430、435之大小。 導航器件200經組態而在將匿名化路線跡線440發送至伺 服器150之前或之後不再將識別敏感部分425、430、435儲 存於其記憶體200中或自路線跡線移除識別敏感部分425、 430、435以便形成匿名化路線跡線440。以此方式，若有 人意圖藉由將路線跡線405之識別敏感位置41 〇、41 5、 420(諸如，起點410及/或結束點415及/或中間或途經點 420)與其他資料源對照（例如，藉由與諸如地址清單、電話 薄、銷售清單、選民名單條目及其類似物之公眾可得資料 對照）來識別使用者，是不太容易實現的，因為路線跡線 405之圍繞識別敏感位置41 0、41 5、420(亦即，在識別敏 感位置410、41 5、420前及/或後）的經動態確定之識別敏感 152808.doc -42- 201226854 部分425、430、435不存在於匿名化路線跡線44〇中。 同時，本發明者已認識到，與每一識別敏感位置41〇、 415、420相關聯之參數體現出容易將路線跡線位置資料 4〇5與其他資料對照以識別發端使甩者。藉由基於與識別 敏感位置410、415、420相關聯之此等參數動態地確定路 線跡線405之識別敏感部分425、430、435(在將路線跡線 405傳達至伺服器15〇之刖移除或不儲存此等識別敏感部 刀），可瞭解，對於被認為較容易藉由對照來識別使用者 的識別敏感位置410、415、420，可擴大識別敏感部分 425' 430、435以便最大化隱私權，且對於被認為較難以 藉由對照來識別使用者的識別敏感位置，可縮小或消除識 別敏感部分425、430、435以便最大化可獲得之可用資 料。 與識別敏感位置410、415、420相關聯之參數包括地圖 資料、使用者資料及先前所儲存之位置資料。地圖資料之 實例包括道路網密度、特徵密度、特徵屬性或性質、興趣 點或位置分類。使用者資料之實例包括通訊錄資料、最愛 位置^料、近來造訪之位置資料、家庭或工作地址資料及 其類似者。 應瞭解，與識別敏感位置410、415、420相關聯之參數 可儲存於導航器件200之記憶體214中，或可經由通信頻道 !52(諸如）自伺服器ι5〇之記憶體156或資料儲存器16〇存 取。 舉例而言’道路密度高之區域可指示人口稠密的區域 152808.doc • 43· 201226854 (諸如’市中心區域），在此等區域中可能或潛在的使用者 地址之密度可能很尚。導航器件2〇〇經組態以（例如）藉由以 下步驟來確定並量化與識別敏感位置41〇、415、420相關 聯之道路密度：分析地圖資料、確定在識別敏感位置 410、415、420處之道路密度或在識別敏感位置41〇、 415、420周圍的一預定義區域之道路密度’且比較經確定 之道路密度與儲存於查找表中之參考值或道路密度臨限 值。當導航器件200之處理器202確定識別敏感位置410、 41 5、420與高的道路密度相關聯時，可相應地減小在相關 聯之使用者識別位置4 1 〇、41 5、420周圍的識別敏感部分 425、430、435之大小。相反地，若確定識別敏感位置 410、415、420在具有低的道路密度之區域中，則此可指 不人口稀少的農村區域，在農村區域可能較容易實現特定 地址或其他位置之可追溯性，且可相應地增大相關聯之識 別敏感部分425、430、435以減小可追溯性。以此方式， 若為人口稠密的區域，其中可能有大量可能地址以致可能 難以根據位置來識別任何特定使用者，則僅丟棄路線跡線 405之極小部分。相比之下，若為人口稀少的區域，其中 可能在很大區域中僅有少數幾個地址如此使得較容易將地 址或使用者與位置聯繫起來，則增大與該識別敏感位置 410、415、420相關聯之識別敏感部分425、43〇、435，進 而增加在識別敏感部分425、43〇、435内所包含的潛在地 址之數目’從而使得較難以識別在識別敏感部分425、 430、435内之識別敏感位置410、415、420且進而增大使 152808.doc 201226854 用者之隱私權。 類似地，根據地圖資料來確定並分類一指定之合適特徵 (例如，特定類型之建築物或天然地標）或指定之合適特徵 (諸如，在識別敏感位置410、415、42〇中之每一者處或在 識別敏感位置410、415、420中之每—者周圍的一預定區 域内之若干高層建築物）之組合之密度，且比較該密度與 查找表中之值。可取決於經確定之特徵密度分類來增大或 減小與使用者識別位置相關聯之識別敏感部分之大小。 若特徵密度為高的，則可減小識別敏感部分425、43〇、 435之大小，此係因為高的特徵密度可指示與該位置相關 聯的地址選項之數目高從而使得較難以識別與該位置相關 聯之使用者。 相反地，若確定特徵密度為低的，則可增大識別敏感部 分425、430、435。低的特徵密度可指示具有較少地址之 農村區域，從而使得根據該識別敏感位置41〇、415、42〇 來識別使用者較為容易。在此等狀況下，藉由增大自路線 跡線所移除之識別敏感部分425、43〇、435，來擴大自路 線跡線405所移除之在識別敏感位置々ίο、415、420周圍的 區域從而增加了該區域中所含之可能地址之數目，從而使 得較難以識別與使用者有關的地址。 應瞭解，可使用一個以上指定之特徵密度或特徵密度之 組合。舉例而言，若識別敏感位置410、415、520與高的 道路密度但低的建築物密度相關聯，則此可指示農村區 域’且相應地增大識別敏感部分425、430、435。 152808.doc •45- 201226854 亦可使用表徵與識別敏感位置410、415、420相關聯之 特徵之資料來確定或調整自路線跡線所移除之相關聯$ % 敏感部分425、430、435 ^舉例而言，若在地圖資料中將 與識別敏感位置4 10、41 5、420相關聯之一或多個建築物 表徵為辦公樓或樓群，則減小相關聯之識別敏感部分 425、430、435 ’此係因為可能有大量的人在此處工作， 從而使得根據該位置資料識別個別使用者較為困難。即使 辦公樓或樓群位於具有低的道路密度之區域（例如，農村 區域）中’情況可能仍然如此。類似地，若主要旅遊勝地 或市民設施與識別敏感位置41〇、415、420相關聯，則減 小識別敏感部分425、430、435，此係因為較難將很多人 造訪的公共位置與任何個別使用者聯繫起來。類似地，可 使用興趣點（P〇I)或其他特性化資訊，該資訊可自地圖資 料或由使用者進行之資料輸入（例如’藉由自導航器件 上之POI選單選擇停車場作為目的地）掘取得到。在此狀況 下，減小相關聯之識別敏感部分425、43〇、435，此係因 為難X將A共#車％或路旁停車位與任何個別使用者聯繫 此外，可取決於由词服器15〇及/或導航器件所健 之過去的跡線資料之量、類型或品質來調整識別敏感部 425、430、435 »舉例而言，導航器件2〇〇可與伺服器” ^ 、，位置相關聯之所儲存路線跡線資 405之量及品質。若斜科—y @ 十子一位置所獲取之跡線資料為大·ί 的、多種路線類型或低σ哲 ' 乂低口口 I的，則可相應地減小相關聯 I52808.doc • 46 - 201226854 識別敏感部分425、430、435之大小，此係因為在識別敏 感位置410、415、420處之量測結果可能湮沒在大量跡線 資料405中。類似地，#區域之跡線資料具有高品質或其 以往的量測結果之量為低，則新的量測結果「脫穎而出」 且容易偵測。在此等區域_ ’可增大識別敏感部分仏、 430、435 ° 在-可選實施例中，導航器件職經組態以執行以下步 .確定針對-特定位置所儲存之位置資料之量，且取決 於位置資料之量來調整操作。若資料已充分覆蓋一位置， 則所收集或所儲存的資料可能較多，且若__位置具有低覆 蓋性，則所收集或所儲存的位置資料可能較少。如此可在 儲存空間低的導航器件2〇〇上有效地收集跡線資料，因為 僅在需要彌補所儲存資料之覆蓋性缺陷處财詩，且因 此可更有效地使用健存空間。導航器件2⑼可與舰器15〇 通仏以確定·那些位置是由足夠的相關聯跡線資料405充 刀表徵的及那些區域需要另外的路線跡線資料他來充 分表徵。導航器件200經組態以僅在有關位置之位置資料 之覆蓋性被確定為不足時才儲存並傳達跡線資料405。 可使用館存於導航器件2〇〇上或可由導航器件細存取之 使用2料（諸如，電子通訊錄、家庭位置、X作位置、 最愛清单、近來造訪之位置及其類似者）來識別各識別敏 感位置410 415、420及/或確定各識別敏感部分425、 • 使用者資料可（例如）儲存於個人資訊管理（PIM) 資料系、先（諸如’使用者之行事層）上及，或自資料系統 152 觀 doc -47· 201226854 (諸如，使用者之行事曆）存取。通常將敏感地對待儲存於 此PIM資料系統上或自此PIM資料系統存取之任何位置或 時間資料。導航器件200可經組態以在確定相關聯之識別 敏感位置410、415、420對應於使用者資料中所包含的地 址或位置時增大識別敏感部分425、430、435之大小。亦 可根據預定準則來分類使用者資料’且可取決於使用者資 料之分類而改變識別敏感部分425、430、435之大小。舉 例而言’導航器件200可經組態以儲存使用者之家庭位 置’且此資δ扎被視為最敏感的。因此，若跡線資料405中 之一位置與使用者之家庭位置相關聯，則增大與此識別敏 感位置410、415、420相關聯之識別敏感部分425、430、 435之大小以反映此情況。所儲存之聯絡人或最愛項目亦 可被視為敏感的’但可能沒有家庭位置那樣敏感，且相應 地確定相關聯之識別敏感部分425、430、435。 在一替代或另外實施例中，可人工修改關於路線跡線 405之識別敏感位置41〇、415、420或在路線跡線405之識 別敏感部分425、430、435内的位置資料之品質（例如，藉 由提供較少位置資料、不太精確的位置資料及/或故意虛 假的量測結果（諸如，虛假位置）、時間或距離方面之位置 偏移，及其類似者）。舉例而言，如圖16中所說明，指示 一識別敏感位置450之位置資料可指示在街道一端的房 子。在此狀況下，可減小位置資料之精確度，以使得其改 為扣不整條衔道455，進而減小該識別敏感位置41〇、 415、420之可追溯性’同時保持資料之相關性。對此已修 152808.doc •48- 201226854 改之育料進行標記或加標籤以使得其可被識別，（例如）使 付稍後的處理可將此考慮在内以便防止因為對資料進行了 修改而導致自其導出之資訊之品質降級。 在另一替代或另外實施例中，如圖丨7中所說明，可將路 線跡線405分成兩個或兩個以上匿名化子跡線460、465、 470，例如，分成包含路線之起點41〇之起點跡線及包 3目的地415之終點跡線4 6 7 〇。以此方式，進一步增強使 用者之隱私權’此係因為使用者不可能確定子跡線460、 465 470疋否包含路線之起點4丨〇或路線之終點45或實際 上路線之任何其他部分。較佳地，每一子跡線46〇、々Μ、 47〇了包含至少一獨特的識別敏感位置410、420、415(且 實際上，子跡線可被視為與擴大之識別敏感部分等效）。 用於使資料匿名化之另一解決方案係拒絕在後端之奇異 的跡線。以此方4，可接受表示高速公路或風行路線之路 線跡線，而可拒絕諸如鄉村道路或私人道路之不太風行的 路線。 亦應瞭解，雖然本發明之各種態樣及實施例已在此前加 以描述，但本發明之範疇不限於本文中所陳述之特定配 置，而實情為，本發明之範疇擴展為包含屬於附加申請專 利範圍之範疇的所有配置及其修改及變更。 雖然前述詳細描述中所描述之實施例參考Gps，但應注 意，導航器件可利用任何種類之位置感應技術作為對Gps 之替代（或實際上，除了GPS之外）。舉例而言，導航器件 可利用使用其他全球導航衛星系統，諸如歐洲伽利略 152808.doc -49- 201226854 (Galileo)系統。同樣地，其不限於基於衛星，而是可易於 使用基於地面之信標或使該器件能夠確定其地理位置的任 何其他種類的系統來發揮作用。 此外，雖然以上之特定描述描述了在攜帶型導航器件 200上將路線跡線405處理及轉換成匿名化路線跡線44〇， 但應瞭解，可在包含或能夠使用位置確定功能性之其他攜 帶型器件（諸如，映射器件）上進行此處理。此外，可在將 資料發送至伺服器150之前在導航器件所銜接至、連接至 或進行通彳s的中間器件（諸如，個人電腦）上進行處理及轉 換，及/或可在自導航或其他器件或自中間器件接收位置 資料之伺服器150上進行處理及轉換。在導航器件2〇〇上進 行處理及轉換確保來自該過程中之最早階段之資料的隱私 權，藉此增大使用者隱私權。此外，因為匿名化資料44〇 可為經確定之路線跡線4〇5之子集或超集，及/或與經確定 之路線跡線405相比而言需要較少記憶體來儲存，所以在 收集資料時及/或在將資料儲存於記憶體2丨4或1 %中之前 執行此處理可增加導航器件2〇〇上的記憶體利用率，且在 任何情況下，執行該處理及轉換可減少發送路線資料所需 之頻寬且改良通信效率。 此外，已描述用於確定路線跡線4〇5之識別敏感位置 410、415、420及/或識別敏感部分425、43〇、435之範圍 的若干準則及位置相關參數。然、@，應瞭解，本發明無需 α用所有此等準則或參數，及/或可應用所描述之準則或 參數中的-些或全部之任何組合，或實際上可應用本文中 152808.doc 201226854 未描述但鑒於本文中所提供之教示將對熟習此項技術者顯 而易見的其他參數或其組合。 此外’雖然識別敏感部分425、430、435之確定已被描 述為係藉由臨限距離、時間及/或位置資料點數目來定 義’但應瞭解，可使用用於確定識別敏感部分425、43〇、 435之尺寸之其他技術。此外，應瞭解’識別敏感部分 425、430、435無需為對稱的’而實情為可在一方向上比 在另一方向上擴展更遠（亦即，之前或之後），其中識別敏 感部分之任何不對稱性可為預定義的、取決於相關聯之識 別敏感位置410、415、420之參數及/或為隨機化的或具有 隨機分量。 本發明之替代實施例可實施為供電腦系統使用之電腦程 式產。〇，该電腦程式產品為（例如）一系列電腦指令，該等 電腦指令儲存於諸如磁片、CD_R〇M、R〇M或固定磁碟之 有形貧料記錄媒體上’或體現於電腦資料信號中，該信號 經由有形媒體或無線媒體（例如，微波或紅外線）發射。該 系列電腦指令可構成上文所料之功雜之全部或部分， 且亦可料於任何記憶體器件（揮發性或非揮發性的，諸 如半導體記憶體器件、磁性記憶體㈣、光學記憶體器件 或其他記憶體器件）中。 =習此項技術者《轉，雖然較㈣㈣藉由軟 體m功能性’但該功能性可同樣僅在硬體中⑼ =藉由-或多個ASIC(特殊應用積體電路))實施或實際 藉由硬體與軟體之混合來實施。因而，本發不 152808.doc -51 · 201226854 應被解釋為僅限於在軟體中實施。 s t 'IT' Li f雖然隨附巾請專利範圍陳述本文中所 描述之特徵之特定組合，但本發明之範嘴不限於此後所主 張之特定組。，而實情為，本發明之範嘴擴展為包含本文 中所揭示之特徵或實施例之任何組合，不管此時是否已在 隨附申請專利範圍中具體列舉該特定組合。 【圖式簡單說明】 圖1為可由導航器件使用的全球定位系統（GPS)之一例示 性部分的示意說明； 圖2為用於在導航器件與伺服器之間的通信之通信系統 的示意圖； 圖3為圖2之導航器件或任何其他合適導航器件之電子組 件的示意說明； 圖4為安裝及/或銜接導航器件之配置的示意圖； 圖5為由圖3之導航器件使用之架構堆疊的示意表示； 圖ό至圖14為來自圖3之導航器件的螢幕擷取晝面； 圖15為用於使路線跡線匿名化之過程的示意圖； 圖16為用於使路線跡線匿名化之一替代過程的示意圖；及 圖Π為用於使路線跡線匿名化之另一過程的示意圖。 【主要元件符號說明】 100 全球定位系統系統 102 衛星 104 地球 106 全球定位系統接收器 152808.doc •52· 201226854 108 展頻全球定位系統衛星資料信號 150 伺服器 152 通信頻道 154 處理器 156 伺服器記憶體 158 有線或無線連接 160 大容量資料儲存器件 162 發射器 164 接收器 166 發射器 168 接收器 200 導航器件 202 處理器 204 輸入器件 206 顯示幕/顯示器件 208 輸出器件 210 連接 212 輸出連接 214 記憶體糸統/器件記憶體 216 連接 218 輸入/輸出（I/O)淳 220 連接 222 外部輸入/輸出器件 224 天線/接收器/全球定位系統接收器/位置確定裝置 152808.doc -53- 201226854 226 連接 250 觸控板或觸控螢幕輸入 252 臂 254 吸盤 280 功能硬體組件 2 82 基本輸入/輸出系統 284 作業系統 286 應用軟體 288 路線規劃及導航功能性 300 顯示 302 局部環境 304 局部環境下方之區 306 虛擬或軟按鈕 308 「導航至」虛擬按鈕 3 10 「地址」按鈕 312 「街道及門牌號」虛擬按鈕 314 提示 316 旗標按鈕 318 虛擬鍵盤 320 可選擇城市之清單 322 提示 324 可選擇街道之清單 326 虛擬小鍵盤 328 提示 152808.doc -54· 201226854 330 「完成」虛擬按紐 332 「否」按鈕 334 路線 33 6 「完成」虛擬按紐 338 「尋找替代」按鈕 340 「細節」按钮 405 路線跡線 410 識別敏感位置/開始位置 415 識別敏感位置/目的地/終點 420 識別敏感位置/中間或導航點位置/途經點或中 間旅途點 425 識別敏感部分 430 識別敏感部分 435 識別敏感部分 440 匿名化路線跡線 450 識別敏感位置 455 街道 460 匿名化路線跡線/起點跡線 465 匿名化路線跡線 470 匿名化路線跡線/終點跡線 152808.doc -55·The Avenue Du G0n0ral De Gaulle ‘user selects Avenue Du G6n0ral De Gaulle from the displayed list 324. Once a street has been selected, the navigation device 200 then displays a restricted, mostly digital virtual keypad 326' and prompts 152808.doc -38 · 201226854 to prompt the user to navigate to the user by prompt 328. The selected street and the house number in the city say that the right user has first navigated to one of the street numbers in the street, and the house number is initially displayed (as shown in Figure 12). If the user wishes to navigate to Avenue Du G6n0ral De Gaulle No. 6 again in this case, the user only needs to touch the "Complete" virtual button 330 displayed in the lower right corner of the display 300. If the user wishes to navigate to a different house number in the Avenue Dll G0n0ral De Gaulle, all the user needs to do is to operate the virtual keypad 328 to enter the appropriate house number. Once the house number has been entered or selected, a query is made in Figure 13 as to whether a particular arrival time is required. If the user presses the "Yes" button, it calls to estimate the time required to travel to the destination and advises the user when to leave (or when the user is late, when should have left) their current location in order to arrive on time. The functionality of the destination. In this case, the user does not care about arriving at a specific time and therefore selects the "no" virtual button. Selecting the "No" button 332 causes the navigation device 2 to calculate the route between the current location and the selected destination, and displays the route 334 on a map showing a relatively lower magnification of the entire route (as shown in Figure 14). ). A "Complete" virtual button 336 is also provided to the user, and the user can press the "Complete" virtual button 336 to indicate that the calculated route is acceptable; the "Find Alternative" button 338 can be searched for by the house. Instead of pressing the button milk to cause the navigation device 200 to calculate another route to the selected destination; and the "details" button 34, the user can press the "details" - to visualize the display for the currently displayed route 334 Optional options for more detailed information. In this case, the user is deemed to have accepted the route 152808.doc -39-201226854 and once the "Complete" button 336 has been pressed, the user is presented with the current starting position of the navigation device 200. 3D view (not shown). The user then begins his journey' and the navigation device 2 updates the map in a known manner by determining the change in position of the navigation device 200 and by providing visual navigation instructions and (as appropriate) audio navigation to the user Direct the user to the instructions. Once the destination has been set by the user' and the navigation device 2 has started navigating for the user, the navigation device 200 monitors the position of the navigation device 2 via the processor 202 and the GPS receiver 224 that constitutes the position confirmation unit. Once the navigation device 200 has advanced a sufficient distance along the route planned by the application software 286 of the navigation device 2, it is necessary to update the two-dimensional view displayed by the display device 2〇6. In the case where the longitude and latitude data relating to the position of the navigation device 200 is used, the map data processor 29 accesses the map data 293 and extracts the terrain data 294, the land use data 296, and the road data 298. Throughout the journey, the location of the navigation device 200 determined using the GPS receiver 224 is stored in the device memory 2丨4 to construct a route trace 4〇5 containing a plurality of location data points, the plurality of locations The data points represent the location of the navigation device 200 in at least a portion of the journey. At the appropriate time or at appropriate time intervals, such as when the navigation device 2 is connected to the personal computer or directly connected to the server via the communication channel 52, it will be stored in the memory 2 14 of the navigation device 200. The route trace 405 is uploaded to the server 150. Server 150 is operable to collect and aggregate route traces 405 from a number of navigation devices. The route traces 4〇5 can be analyzed to determine the vehicle location 152808.doc -40- 201226854 and parameters (such as speed and time) at various locations within each route trace 405. This summary route trace data can be analyzed to provide information based on actual use, such as the speed of a typical transport tool at any point in the road network and at any time. Aggregate data can be used to determine changes to the navigation route and deviations from expected road map data (which can indicate changes in the road network and the like) to enable verification of maps and navigational data and algorithms. Prior to transmitting the route trace 405 to the server 15A, the processor 202 is operable to analyze the route trace 405 to determine that the identification sensitive location 41〇, 415, 420 is within the route trace 405, identifying the sensitive location 41〇, 415, 420 may thus allow the user of the navigation device 2 to be identified. Examples of identifying sensitive locations include a starting location 41 of the routing trace 405, a destination 415, and/or one or more intermediate or navigation point locations 42〇 specified or entered by the user. In an alternative embodiment, the identification of the sensitive location may include the location of a (4) person identification device such as a CCTV camera, or an automatic license plate scanning gate or camera (such as an automatic license plate scanning gate or camera for a crowded billing area). Depending on the situation, the user data stored on the navigation device 200 or accessible by the navigation device 2 can be analyzed to retrieve, for example, an address stored in the user's address book or stored in the user's favorite list or more recently. The location in the list of visits. Locations derived from user profiles can be considered to identify sensitive locations. From above, Jim uses the predetermined criteria to determine the identification sensitive location based on the location data/route traces' and/or may store the identification sensitive location or may access the identification via the communication channel 152 from the word processor. ~ 152808.doc -41 - 201226854 The navigation device 200 is operable to determine the identification sensitive portions 425, 430, 435 of the route trace 405 associated with each of the identification sensitive locations 410, 415, 420. The identification sensitive portions 425, 430, 435 of the identification sensitive locations 410, 415, 420 can be determined based on parameters associated with a given identification sensitive location 41, 415, 42A. The identification sensitive portion 425, 430, 435 includes information indicating that the distance between the associated sensitive location 410, 415, 420 on the route trace 4〇5, the time or the number of location data points is in a determined presence. The location within the limit. The parameters associated with the identified sensitive locations 41 〇, 415, 420 are evaluated by combining predetermined criteria stored on or accessible by the navigation device 200 to determine the magnitude of the threshold and thereby determine the identification sensitivity. The size of portions 425, 430, 435. The navigation device 200 is configured to no longer store the identification sensitive portions 425, 430, 435 in its memory 200 or to remove sensitive identification from the route traces before or after transmitting the anonymized route traces 440 to the server 150. Portions 425, 430, 435 form an anonymized route trace 440. In this manner, if someone intends to collide with other sources by identifying the sensitive locations 41 〇, 41 5, 420 of the route trace 405 (such as the start point 410 and/or the end point 415 and/or the intermediate or way point 420) (For example, by identifying users with publicly available data such as address lists, phonebooks, sales lists, voter list entries, and the like), it is not easy to implement because of the surrounding identification of route traces 405 Dynamically determined identification sensitivity 152808.doc -42 - 201226854 portions 425, 430, 435 of sensitive locations 41 0, 41 5, 420 (i.e., before and/or after identifying sensitive locations 410, 41 5, 420) Exists in the anonymized route trace 44〇. At the same time, the inventors have recognized that the parameters associated with each of the identified sensitive locations 41, 415, 420 reflect the ease with which the route trace location data 4〇5 can be compared to other data to identify the originator. The identification-sensitive portions 425, 430, 435 of the route trace 405 are dynamically determined (based on the transfer of the route trace 405 to the server 15) by based on such parameters associated with the identified sensitive locations 410, 415, 420 With or without the identification of the sensitive portion of the knife, it can be appreciated that the identification sensitive portions 425' 430, 435 can be enlarged to maximize the identification of the sensitive locations 410, 415, 420 that are considered to be easier to identify by the user. Privacy, and for identifying sensitive locations that are considered to be more difficult to identify by the user, the sensitive portions 425, 430, 435 can be narrowed or eliminated to maximize the available material available. The parameters associated with identifying sensitive locations 410, 415, 420 include map data, user data, and previously stored location data. Examples of map data include road network density, feature density, feature attributes or properties, points of interest, or location classification. Examples of user data include address book data, favorite location information, location information recently visited, family or work address information, and the like. It should be appreciated that the parameters associated with identifying sensitive locations 410, 415, 420 can be stored in memory 214 of navigation device 200, or can be stored via communication channel !52, such as from server 156 or data storage. 16 accesses. For example, areas with high road density may indicate densely populated areas 152808.doc • 43· 201226854 (such as the 'central area) where the density of possible or potential user addresses may be high. The navigation device 2 is configured to determine and quantify the road density associated with identifying the sensitive locations 41〇, 415, 420, for example by analyzing the map data, determining the identifying sensitive locations 410, 415, 420, for example, by the following steps: The road density at the road or the road density of a predefined area around the identified sensitive locations 41〇, 415, 420 and compares the determined road density with a reference value or road density threshold stored in the lookup table. When the processor 202 of the navigation device 200 determines that the identification sensitive locations 410, 41 5, 420 are associated with a high road density, the surrounding around the associated user identification locations 4 1 〇, 41 5, 420 can be correspondingly reduced. The size of the sensitive portions 425, 430, 435 is identified. Conversely, if it is determined that the identification sensitive locations 410, 415, 420 are in an area with low road density, this may refer to a rural area that is not sparsely populated, and it may be easier to achieve traceability of a particular address or other location in a rural area. And the associated identification sensitive portions 425, 430, 435 can be correspondingly increased to reduce traceability. In this way, only a very small portion of the route trace 405 is discarded if it is a densely populated area where there may be a large number of possible addresses such that it may be difficult to identify any particular user based on location. In contrast, if it is a sparsely populated area, where there may be only a few addresses in a large area such that it is easier to associate the address or user with the location, then the identification sensitive location 410, 415 is increased. The identification-sensitive portions 425, 43A, 435 associated with 420, thereby increasing the number of potential addresses contained within the identification-sensitive portions 425, 43A, 435, thereby making it more difficult to identify the sensitive portions 425, 430, 435. The sensitive locations 410, 415, 420 are identified and further increased by the privacy of the 152808.doc 201226854 user. Similarly, a specified suitable feature (e.g., a particular type of building or natural landmark) or a designated appropriate feature (e.g., at each of the identified sensitive locations 410, 415, 42) is determined and classified based on the map material. The density of the combination of the plurality of high-rise buildings within a predetermined area around each of the sensitive locations 410, 415, 420 is identified and the values in the density and lookup tables are compared. The size of the identification sensitive portion associated with the user identification location may be increased or decreased depending on the determined feature density classification. If the feature density is high, the size of the identification sensitive portions 425, 43A, 435 can be reduced, because the high feature density can indicate that the number of address options associated with the location is high, making it more difficult to identify The user associated with the location. Conversely, if it is determined that the feature density is low, the identification sensitive portions 425, 430, 435 can be increased. A low feature density may indicate a rural area with fewer addresses, making it easier to identify the user based on the identified sensitive locations 41〇, 415, 42〇. Under these conditions, the identification sensitive locations 425, 43, 435 removed from the route traces are enlarged to enhance the removal from the alignment traces 405 around the identification sensitive locations 々, 415, 420. The area thus increases the number of possible addresses contained in the area, making it more difficult to identify the address associated with the user. It will be appreciated that more than one of the specified feature densities or combinations of feature densities may be used. For example, if the identified sensitive locations 410, 415, 520 are associated with a high road density but a low building density, this may indicate the rural area' and correspondingly increase the identification sensitive portions 425, 430, 435. 152808.doc •45- 201226854 may also use data characterizing the features associated with identifying sensitive locations 410, 415, 420 to determine or adjust the associated $% sensitive portions 425, 430, 435 removed from the route traces ^ For example, if one or more buildings associated with the identified sensitive locations 4 10, 41 5, 420 are characterized as office buildings or buildings in the map material, the associated identification sensitive portions 425, 430 are reduced. 435 'This is because it is possible to have a large number of people working here, making it difficult to identify individual users based on the location data. This may still be the case even if the office building or group of buildings is located in an area with low road density (for example, rural areas). Similarly, if the primary tourist attraction or civic facility is associated with the identification sensitive location 41〇, 415, 420, the identification sensitive portion 425, 430, 435 is reduced, because it is more difficult to place many public visits and any individual locations. The user is connected. Similarly, a point of interest (P〇I) or other characterization information can be used, which can be entered from the map material or by the user (eg, 'select the parking lot as a destination by the POI menu on the self-navigation device') Drilled. In this case, the associated identification sensitive portions 425, 43〇, 435 are reduced, which is because the difficulty X will contact the A total vehicle or the roadside parking space with any individual user. The amount, type, or quality of past trace data that the device 15 and/or the navigation device are tuned to adjust the identification sensitive portion 425, 430, 435 » for example, the navigation device 2 can be coupled to the server "^, The quantity and quality of the stored route traces 405 associated with the location. If the oblique line-y @十子一位置 obtained the trace data is large · ί, multiple route types or low σ 哲 ' 乂 low mouth I, the corresponding I52808.doc • 46 - 201226854 can be reduced accordingly to identify the size of the sensitive parts 425, 430, 435, because the measurement results at the identification sensitive locations 410, 415, 420 may be devoid of a large number Trace data 405. Similarly, if the trace data of the # region has high quality or the amount of previous measurement results is low, the new measurement result "stands out" and is easy to detect. In these areas _ 'can increase the identification of sensitive parts 430, 430, 435 ° in an alternative embodiment, the navigation device is configured to perform the following steps. Determine the amount of location data stored for a particular location, And adjust the operation depending on the amount of location data. If the data has adequately covered a location, there may be more data collected or stored, and if the __ location has low coverage, the location data collected or stored may be less. In this way, the trace data can be efficiently collected on the navigation device 2 with low storage space, because it is only necessary to make up for the coverage defect of the stored data, and thus the storage space can be used more effectively. The navigation device 2 (9) can communicate with the vessel 15 to determine that those locations are characterized by sufficient associated trace data 405 and those regions require additional route trace information to characterize them. The navigation device 200 is configured to store and communicate the trace data 405 only when the coverage of the location data for the location is determined to be insufficient. The library can be stored on the navigation device 2 or can be accessed by the navigation device (such as electronic address book, home location, X position, favorite list, recent visit location, and the like) to identify Each of the identification sensitive locations 410 415, 420 and/or the respective identification sensitive portions 425, • the user profile can be stored, for example, in a personal information management (PIM) data system, first (such as the 'user's action layer), and Or access from the data system 152 doc -47· 201226854 (such as the user's calendar). Any location or time data stored on or accessible from this PIM data system will usually be treated sensitively. The navigation device 200 can be configured to increase the size of the identification sensitive portion 425, 430, 435 when determining that the associated identification sensitive location 410, 415, 420 corresponds to an address or location contained in the user profile. The user profile can also be classified according to predetermined criteria and the size of the identification sensitive portions 425, 430, 435 can be varied depending on the classification of the user's data. For example, 'navigation device 200 can be configured to store the user's home position' and this asset is considered to be the most sensitive. Thus, if one of the locations in the trace data 405 is associated with the user's home location, the size of the identification sensitive portions 425, 430, 435 associated with the identified sensitive locations 410, 415, 420 is increased to reflect this condition. . The stored contacts or favorite items may also be considered sensitive 'but may not be as sensitive as the home location, and the associated identification sensitive portions 425, 430, 435 are determined accordingly. In an alternative or additional embodiment, the quality of the location data for the identification sensitive locations 41〇, 415, 420 of the route trace 405 or within the identification sensitive portions 425, 430, 435 of the route trace 405 can be manually modified (eg, By providing less location data, less accurate location data, and/or deliberately false measurement results (such as spurious locations), positional shifts in time or distance, and the like). For example, as illustrated in Figure 16, indicating location information identifying a sensitive location 450 may indicate a room at one end of the street. In this case, the accuracy of the location data can be reduced so that it is not buckled to the entire track 455, thereby reducing the traceability of the identification sensitive locations 41〇, 415, 420 while maintaining data correlation. Sex. For this, 152808.doc •48- 201226854 has been marked or tagged so that it can be identified, for example, so that later processing can be taken into account in order to prevent modification of the data. The quality of the information derived from it is degraded. In another alternative or additional embodiment, as illustrated in Figure 7, the route trace 405 can be split into two or more anonymized sub-trace 460, 465, 470, for example, into a starting point 41 containing the route. The starting point trace of the 〇 and the end point of the package 3 destination 415 are 4 6 7 〇. In this way, the privacy of the user is further enhanced' because the user is unlikely to determine whether the sub-trace 460, 465 470 includes the starting point of the route 4 or the end 45 of the route or any other portion of the actual route. Preferably, each of the sub-tracks 46, 々Μ, 47 includes at least one unique identification-sensitive location 410, 420, 415 (and in fact, the sub-trace can be considered as an enlarged identification-sensitive portion, etc.) effect). Another solution for anonymizing data is to reject singular traces at the back end. With this side 4, it is acceptable to represent the route traces of highways or popular routes, and to reject routes that are not very popular, such as country roads or private roads. It should also be understood that although various aspects and embodiments of the invention have been described hereinabove, the scope of the invention is not limited to the specific configuration set forth herein, but the scope of the invention is extended to include additional patent applications. All configurations of the scope of the scope and its modifications and changes. While the embodiments described in the foregoing detailed description refer to Gps, it should be noted that the navigation device can utilize any kind of position sensing technology as an alternative to (or in fact, in addition to GPS) GPS. For example, navigation devices may utilize other global navigation satellite systems, such as the European Galileo 152808.doc -49-201226854 (Galileo) system. As such, it is not limited to satellite-based, but can function easily using ground-based beacons or any other kind of system that enables the device to determine its geographic location. Moreover, while the above specific description describes processing and converting route traces 405 onto anonymized route traces 44 on the portable navigation device 200, it should be appreciated that other carry-over functions may be included or capable of using location determination functionality. This processing is performed on a type device such as a mapped device. In addition, processing and conversion may be performed on an intermediate device (such as a personal computer) that the navigation device is coupled to, connected to, or otherwise traversed before being sent to the server 150, and/or may be self-navigation or otherwise The device or processing and conversion is performed on the server 150 that receives the location data from the intermediate device. Processing and conversion on the navigation device 2〇〇 ensures privacy rights from the earliest stages of the process, thereby increasing user privacy. In addition, because the anonymized data 44 may be a subset or superset of the determined route traces 4〇5, and/or require less memory to store than the determined route trace 405, Performing this process when collecting data and/or before storing the data in memory 2丨4 or 1% can increase the memory utilization on the navigation device 2, and in any case, perform the processing and conversion. Reduce the bandwidth required to send route data and improve communication efficiency. In addition, several criteria and position dependent parameters for determining the range of identification sensitive locations 410, 415, 420 and/or identifying sensitive portions 425, 43A, 435 of route traces 4〇5 have been described. However, @, it should be understood that the present invention does not require all of these criteria or parameters to be used by α, and/or any combination of some or all of the described criteria or parameters may be applied, or may actually be applied to 152808.doc herein. 201226854 is not described, but in view of the teachings provided herein, other parameters or combinations thereof that are apparent to those skilled in the art will be apparent. Furthermore, although the determination of the identification sensitive portions 425, 430, 435 has been described as being defined by the threshold distance, time and/or number of location data points, it should be understood that the identification sensitive portions 425, 43 may be used. Other technologies for the size of 〇, 435. Furthermore, it should be understood that 'the identification sensitive portions 425, 430, 435 need not be symmetrical' and the fact is that they can extend further in one direction than in the other (i.e., before or after), wherein any asymmetry of the sensitive portion is identified. The traits may be predefined, dependent on the parameters of the associated identification sensitive locations 410, 415, 420 and/or randomized or have random components. Alternative embodiments of the present invention can be implemented as a computer program for use with a computer system. The computer program product is, for example, a series of computer instructions stored on a tangible and lean recording medium such as a magnetic disk, CD_R〇M, R〇M or a fixed disk or embodied in a computer data signal. The signal is transmitted via tangible media or wireless media (eg, microwave or infrared). This series of computer instructions may constitute all or part of the above-mentioned functions, and may also be expected to be any memory device (volatile or non-volatile, such as semiconductor memory devices, magnetic memory (4), optical memory). In devices or other memory devices). = learner of this technology "transfer, although more than (4) (four) by software m functionality 'but this functionality can also be implemented only in hardware (9) = by - or multiple ASIC (special application integrated circuit)) or actual It is implemented by a mixture of hardware and software. Therefore, this document should not be construed as being limited to implementation in software. s t 'IT' Li f Although the patent scope sets forth a particular combination of features described herein, the scope of the invention is not limited to the particular group that is claimed. It is to be understood that the scope of the present invention is extended to include any combination of features or embodiments disclosed herein, whether or not the specific combination is specifically recited in the accompanying claims. BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a schematic illustration of one exemplary portion of a Global Positioning System (GPS) that can be used by a navigation device; FIG. 2 is a schematic diagram of a communication system for communication between a navigation device and a server; 3 is a schematic illustration of the electronic components of the navigation device of FIG. 2 or any other suitable navigation device; FIG. 4 is a schematic diagram of a configuration for mounting and/or engaging a navigation device; FIG. 5 is a stack of architectures used by the navigation device of FIG. Figure 14 is a schematic view of the screen from the navigation device of Figure 3; Figure 15 is a schematic diagram of a process for anonymizing the route trace; Figure 16 is for anonymizing the route trace A schematic diagram of an alternative process; and a schematic diagram of another process for anonymizing a route trace. [Main component symbol description] 100 Global Positioning System 102 Satellite 104 Earth 106 Global Positioning System Receiver 152808.doc •52· 201226854 108 Spread Spectrum Global Positioning System Satellite Data Signal 150 Server 152 Communication Channel 154 Processor 156 Server Memory Body 158 wired or wireless connection 160 bulk data storage device 162 transmitter 164 receiver 166 transmitter 168 receiver 200 navigation device 202 processor 204 input device 206 display screen / display device 208 output device 210 connection 212 output connection 214 memory System/Device Memory 216 Connection 218 Input/Output (I/O)淳220 Connection 222 External I/O Device 224 Antenna/Receiver/Global Positioning System Receiver/Position Determination Device 152808.doc -53- 201226854 226 Connection 250 Touchpad or Touch Screen Input 252 Arm 254 Suction Cup 280 Functional Hardware Components 2 82 Basic Input/Output System 284 Operating System 286 Application Software 288 Route Planning and Navigation Functionality 300 Display 302 Local Environment 304 Area 306 under Local Environment Virtual or soft button 308 "Navigate to" virtual Button 3 10 "Address" button 312 "Street and House Number" virtual button 314 Tip 316 Flag button 318 Virtual keyboard 320 Selectable city list 322 Tip 324 Optional street list 326 Virtual keypad 328 Tip 152808.doc -54 · 201226854 330 "Complete" Virtual Button 332 "No" Button 334 Route 33 6 "Complete" Virtual Button 338 "Find Replacement" Button 340 "Detail" Button 405 Route Trace 410 Identify Sensitive Location / Start Position 415 Identify Sensitive Locations / Destination / Endpoint 420 Identify sensitive location / intermediate or navigation point location / waypoint or intermediate journey point 425 Identify sensitive portion 430 Identify sensitive portion 435 Identify sensitive portion 440 Anonymize route trace 450 Identify sensitive location 455 Street 460 Anonymous route Trace/Start Trace 465 Anonymous Route Trace 470 Anonymous Route Trace/End Trace 152808.doc -55·