Protecting query privacy with differentially private k-anonymity in location-based services