WO2022028246A1

WO2022028246A1 - Vehicle start control method and vehicle-mounted authentication device

Info

Publication number: WO2022028246A1
Application number: PCT/CN2021/107483
Authority: WO
Inventors: 王思善; 王梓
Original assignee: 华为技术有限公司
Priority date: 2020-08-06
Filing date: 2021-07-21
Publication date: 2022-02-10
Also published as: CN114095924A

Abstract

Provided are a vehicle start control method and a vehicle-mounted authentication device. The vehicle-mounted authentication device is deployed in a vehicle and can acquire biological feature information of a user located in a cab of the vehicle; and whether the biological feature information matches a biological feature template is determined by means of the vehicle-mounted authentication device or a mobile device in which a digital key to the vehicle is deployed, wherein the biological feature template is biological feature information of a user holding the mobile device. If the biological feature information matches the biological feature template, this indicates that the user located in the cab has the right to legitimately use the vehicle, and the mobile device is located in the vehicle; and the vehicle-mounted authentication device can start or trigger, when receiving a vehicle start signal, a vehicle control apparatus to start the vehicle. Where a mobile device in which a digital key to a vehicle is deployed is located in the vehicle, the vehicle can be started without adding a sensor or other assemblies, which are used for assisting with accurate positioning of the mobile device, in the vehicle.

Description

Vehicle start control method and vehicle-mounted authentication device

This application claims the priority of the Chinese patent application with the application number 202010785537.9 and the application title "Starting Control Method for Vehicles and On-Board Authentication Equipment", which was filed with the State Intellectual Property Office of China on August 6, 2020, the entire contents of which are incorporated by reference in this application.

technical field

The present application relates to the field of smart vehicles, and in particular, to a vehicle startup control method and a vehicle-mounted authentication device.

Background technique

With the popularity of the Internet of Vehicles, digital car key products came into being. Wherein, the digital car key product may include a mobile device and a digital key of a vehicle deployed in the mobile device. The mobile device can assist in realizing functions such as unlocking the door and starting the vehicle by exchanging information with the in-vehicle authentication device deployed in the vehicle.

Considering regulatory needs and vehicle safety, when the vehicle needs to be started, it is usually necessary to ensure that the digital car key product is located inside the vehicle, that is, to ensure that the mobile device on which the vehicle's digital key is deployed is located inside the vehicle.

Generally, Bluetooth communication or Ultra Wide Band (Ultra Wide Band, UWB) communication technology can be used to accurately locate the mobile device, and determine whether the mobile device is located inside the vehicle according to the positioning result. This requires the deployment of sensors with extremely high performance requirements in the vehicle, or by increasing the number of sensor nodes in the vehicle, or by adding components to support UWB communication technology in the vehicle and mobile devices to assist in the realization of accurate mobile devices. position.

SUMMARY OF THE INVENTION

The embodiments of the present application provide a vehicle startup control method and an on-board authentication device, which can realize the deployment of digital sensors or other components in the vehicle without adding sensors or other components for assisting in accurately locating the mobile device. The vehicle can only be started when the mobile device of the key is located inside the vehicle, which meets regulatory requirements and ensures the safety of vehicle use.

In a first aspect, a vehicle startup control method is provided, and the method can be executed by an in-vehicle authentication device of the vehicle. The method includes: the in-vehicle authentication device obtains the biometric information of the target user; wherein, the target user sits on a target seat of the vehicle, and the target seat is located in the cab of the vehicle. Next, the in-vehicle authentication device encrypts the biometric information obtained by it according to the first key associated with the first mobile device, and sends the encrypted biometric information to the first mobile device; wherein the first mobile device and the vehicle The authentication device establishes a communication connection, the digital key of the vehicle is deployed in the first mobile device, and the in-vehicle authentication device has determined that the digital key has passed the authentication. Next, the in-vehicle authentication device receives a matching result from the first mobile device; wherein, the matching result is used to indicate whether the biometric information matches a biometric template, and the biometric template is the biometric feature of the user holding the first mobile device information. If the biometric information matches the biometric template, it means that the user in the cab of the vehicle has legal authority to use the vehicle; in addition, since mobile devices are usually carried by the user, the mobile device where the digital key of the vehicle is deployed is also in this vehicle. Correspondingly, the in-vehicle authentication device may activate/trigger the vehicle control device of the vehicle to activate the vehicle when the vehicle activation signal is received and the matching result indicates that the biometric information matches the biometric template.

In this way, after the digital key of the vehicle is authenticated, it is not necessary to add sensors or other components in the vehicle for assisting in the accurate positioning of the mobile device, so that the situation that the mobile device on which the digital key of the vehicle is deployed is located inside the vehicle can be realized. The vehicle can only be started under the following conditions, which can meet the regulatory requirements and ensure the safety of the vehicle, such as reducing the risk of mis-starting and theft of the vehicle.

In addition, the in-vehicle authentication device completes authentication of the digital key and authentication of the target user's authority to use the vehicle before receiving the vehicle start signal. The digital key is authenticated and the target user in the cab has the authority to legally use the vehicle. In this case, after receiving the vehicle start signal, the vehicle-mounted authentication device quickly starts or triggers the vehicle control device of the vehicle to start the vehicle, and the user experience is better.

In a possible implementation manner, the vehicle-mounted authentication device may further determine whether the trigger condition for collecting the biometric information is reached before acquiring the biometric information of the target user; if so, start the information collection unit of the vehicle-mounted authentication device; wherein , the information collection unit is used to collect the biometric information of the target user. In this way, the information collection unit can be started on demand, so that the information collection state is prevented from being in the started state for a long time, and the power consumption of the information collection unit can be reduced.

In a possible implementation, the triggering condition for collecting biometric information includes at least one of the following items: the target user is seated on the target seat, the target user seated in the target seat is wearing a seat belt, and the The doors of the vehicle are closed.

In a possible implementation manner, the in-vehicle authentication device may further collect at least two scene images of the cab of the vehicle before acquiring the biometric information of the target user; and determine whether there is a target user performing the operation according to the at least two scene images at least one preset action; wherein, the at least one preset action includes at least one of the following actions: sitting on the target seat, wearing a seat belt, and looking at the information collection unit of the vehicle-mounted authentication device; if yes, Then it is determined that there is a target user who has performed at least one preset action.

In a possible implementation manner, the in-vehicle authentication device may extract the face image of the target user from the at least two scene images after determining that the target user has performed at least one preset action. The face image of the target user is the Biometric information for the target user. In this way, the fatigue monitoring cameras, visual distraction cameras, etc. deployed in the vehicle can be reused to collect face images, and there is no need to add a new information collection unit in the vehicle for collecting other biometric information of the user.

In a possible implementation manner, the vehicle-mounted device may further determine whether the face image satisfies a preset condition before encrypting the biometric information according to the first key associated with the first mobile device; wherein the preset condition Including at least one of the following items: the brightness value of the face image reaches a preset threshold, the face image does not have occlusion phenomenon, and the pose of the face image meets the predetermined requirements; if so, it is determined that the face image meets the preset requirements. Set conditions. In this way, it can be ensured that the face image sent to the first mobile device has good quality, so that the first mobile device can quickly match the face image and the face template in the subsequent process without requiring re-acquisition, thereby Helps to start the vehicle quickly.

In a possible implementation manner, the in-vehicle authentication device may further switch the current state of the vehicle from a non-startable state to a startable state when the matching result indicates that the biometric information matches the biometric template. Correspondingly, the in-vehicle device may trigger the vehicle control device to start the vehicle only when the vehicle start signal is received and the current state of the vehicle is a startable state.

In a possible implementation manner, the in-vehicle authentication device may also switch the current state of the vehicle from a startable state to a non-startable state when there is a state switching event; wherein the state switching event includes at least one of the following events : The target user sitting on the target seat leaves the target seat, the seat belt detection circuit corresponding to the target seat is switched from on to off, the door of the vehicle is switched from the closed state to the open state, and the vehicle is in the startable state for a continuous period of time. The time has reached the predetermined time.

In other words, if and only when the vehicle-mounted authentication device receives the vehicle start signal and the vehicle is in a startable state, the vehicle control device is triggered to start the vehicle, so as to avoid the verification of the digital key due to the completion of the vehicle-mounted authentication device. And after the target user's authorization to use the vehicle is authenticated, if the target user sitting in the target seat changes, the target user no longer wears the seat belt, the door is reopened, etc., the vehicle is wrongly started and the Affecting driving safety.

In a possible implementation manner, the vehicle-mounted authentication device may further determine the respective location information of the plurality of second mobile devices before encrypting the biometric information according to the first key associated with the first mobile device; wherein the first The second mobile device has established a communication connection with the vehicle-mounted authentication device, the digital key of the vehicle is deployed in the second mobile device, and the vehicle-mounted authentication device has determined that the digital key deployed in the second mobile device has passed the authentication; location information to determine the first mobile device located in the cab of the vehicle.

In a second aspect, a vehicle startup control device is provided. The vehicle startup control device is deployed in an in-vehicle authentication device, and reference is made to the description in the first aspect for its beneficial effects. Wherein the apparatus may comprise means or means implementing the method as provided in the first aspect.

In a possible implementation manner, the apparatus includes: a feature information acquisition unit for acquiring biometric information of the target user; wherein the target user sits on a target seat of the vehicle, and the target seat is located in the cab of the vehicle. A feature information processing unit, configured to encrypt the biometric information according to the first key associated with the first mobile device, and send the encrypted biometric information to the first mobile device; wherein the first mobile device and the vehicle-mounted authentication device The communication connection is established, the digital key of the vehicle is deployed in the first mobile device, and the in-vehicle authentication device has determined that the digital key has passed the authentication. The matching result receiving unit is configured to receive the matching result from the first mobile device; wherein, the matching result is used to indicate whether the biometric information matches the biometric template. The starting signal receiving unit is used for receiving the vehicle starting signal. The vehicle starting control unit is configured to trigger the vehicle control device of the vehicle to start the vehicle when the matching result indicates that the biometric information matches the biometric template.

In a possible implementation manner, the device further includes: a feature collection control unit, configured to determine whether a trigger condition for collecting biometric information is reached, and if so, start an information collection unit of the vehicle-mounted authentication device; wherein, the information collection unit uses It is used to collect the biometric information of the target user.

In a possible implementation manner, the apparatus further includes: a camera, configured to collect at least two scene images of the cab of the vehicle. A feature acquisition control unit, configured to determine whether there is a target user who has performed at least one preset action according to the at least two scene images; wherein, the at least one preset action includes at least one of the following actions: sitting on the target seat, The seat belt, and gaze at the information collection unit of the vehicle-mounted authentication device; if yes, it is determined that there is a target user who has performed at least one preset action.

In a possible implementation manner, the feature information acquisition unit is specifically configured to extract the face image of the target user from the at least two scene images.

In a possible implementation, the preprocessing unit is configured to determine whether the face image satisfies a preset condition; wherein the preset condition includes at least one of the following items: the brightness value of the face image reaches a preset value The threshold value, the face image does not have occlusion phenomenon, and the pose of the face image meets the predetermined requirements; if yes, it is determined that the face image meets the preset condition.

In a possible implementation manner, the device further includes: a state maintenance unit, configured to switch the current state of the vehicle from the non-startable state to the biometric template when the matching result indicates that the biometric information matches the biometric template. startable state. Correspondingly, the vehicle start control unit is specifically configured to trigger the vehicle control device of the vehicle to start the vehicle when the current state of the vehicle is a startable state.

In a third aspect, an in-vehicle authentication device is provided, and reference is made to the description in the first aspect for its beneficial effects. The in-vehicle authentication device includes: a communication module, a memory and a processor. Wherein, computer programs/instructions are stored in the memory. The communication module is used to communicate with the first mobile device. When the processor executes the computer program/instruction, the in-vehicle authentication device is made to implement the method provided in any one of the first aspects.

In a possible implementation manner, the vehicle-mounted authentication device further includes: an information collection unit, configured to collect biometric information of the target user.

In a possible implementation, the information collection unit includes a camera; and the biometric information includes a face image.

In a possible implementation, the vehicle-mounted authentication device further includes: a vehicle door sensor, configured to provide a sensor signal to the processor when the vehicle door is in a closed state; wherein the sensor signal is used to indicate that the vehicle door is in a closed state.

In a possible implementation manner, the in-vehicle authentication device further includes: a seat sensor, the seat sensor is disposed on a target seat in the cab of the vehicle, and is used to notify the processor to the processor when there is a target user sitting on the target seat Provide a trigger signal.

In a possible implementation manner, the in-vehicle authentication device further includes: a seat belt detection circuit, configured to detect whether the user seated in the target seat is wearing a seat belt.

A fourth aspect, a computer-readable storage medium for storing a computer program/instruction, when the computer program/instruction is executed on an in-vehicle authentication device, the in-vehicle authentication device is made to execute any one of the above-mentioned first aspects the method described.

A fifth aspect provides a computer program product comprising a computer program/instruction, characterized in that, when the computer program product is run on an electronic device, the electronic device is made to perform any one of the above-mentioned first aspects. method described.

Description of drawings

The following briefly introduces the accompanying drawings required in the description of the embodiments or the prior art.

FIG. 1 is a schematic structural diagram of a vehicle-mounted authentication device provided in an embodiment of the application.

FIG. 2 is a schematic diagram of the deployment position of the camera of the in-vehicle authentication device in the vehicle.

FIG. 3 is a schematic structural diagram of a mobile device provided in an embodiment of the present application.

FIG. 4 is a schematic diagram of a service scenario according to an embodiment of the present application.

FIG. 5 is a schematic flowchart of a vehicle startup control method provided in an embodiment of the present application.

FIG. 6 is a schematic structural diagram of a starting control device for a vehicle provided in an embodiment of the application.

detailed description

The technical solutions in the embodiments of the present application will be described below with reference to the accompanying drawings in the embodiments of the present application.

In the embodiments of this application, unless otherwise specified, "/" means or means, for example, A/B can mean A or B. In this application, "and/or" is only an association relationship to describe associated objects, indicating that there can be three kinds of relationships; for example, A and/or B can mean that A exists alone, A and B exist simultaneously, and exist independently B these three cases. In addition, a plurality of means two or more.

In the embodiments of the present application, the terms "first" and "second" are only used for description purposes, and cannot be understood as indicating or implying relative importance or implying the quantity of indicated technical features. Thus, a feature defined as "first" or "second" may expressly or implicitly include one or more of that feature. The terms "including", "including", "having" and their variants mean "including but not limited to" unless specifically emphasized otherwise.

A vehicle is a vehicle on land that uses wheels to turn. Such as fuel vehicles, electric vehicles, trucks, buses, etc.

The in-vehicle authentication device is deployed in the vehicle, and is used for information interaction with the mobile device on which the vehicle's digital key is deployed, so as to authenticate the vehicle's digital key and perform corresponding control operations. Wherein, the authentication of the digital key of the vehicle may include, but is not limited to, one or more of key authentication, anti-relay authentication and location authentication for the digital key. Wherein, if it is judged that the service key of the digital key is deployed in the mobile device, and the identity authentication of the mobile device is completed through the authentication protocol, the digital key passes the key authentication; if it is judged that the mobile device with the digital key deployed does not exist If it is determined that the distance between the mobile device where the digital key is deployed and the vehicle is not greater than the preset distance, the digital key passes the positioning authentication. After the digital key is authenticated, the in-vehicle authentication device can control/trigger the body control device and engine control device of the vehicle to achieve vehicle control functions such as unlocking the vehicle, starting the engine, and starting the trunk.

FIG. 1 is a schematic structural diagram of a vehicle-mounted authentication device provided in an embodiment of the application. As shown in FIG. 1 , the in-vehicle authentication device 100 may include a processor 110 , an internal memory 120 and a communication module 130 . One or more of the sensor module 160, the camera 180, and the seat belt detection circuit 190 may also be included. The sensor module 160 may include, but is not limited to, a seat sensor 160A and a door sensor 160B.

The internal memory 120 is used to store computer instructions/computer program codes, and is also used to store various data created by the in-vehicle authentication device 100 during use. In addition, the internal memory 120 may include high-speed random access memory and non-volatile memory, such as disk memory, flash memory, universal flash storage (UFS), and the like.

The internal memory 120 may include one or more secure storage modules for storing data related to the digital key and authentication algorithms. Wherein, the secure storage module may include, but is not limited to, a secure element (secure element, SE), for example, may also include a hardware security module (hardware Secure module, HSM). SE is an independent hardware unit with anti-physical attack and anti-tampering capabilities, which is used to provide a safe operating environment for some applet (Applet), and can guarantee the security and confidentiality of digital assets stored in it. The SE may be an embedded SE (embedded SE, ESE), an integrated SE (INSE) integrated into a system on chip (system on chip, SOC), or a universal integrated circuit card SE (universal integrated circuit card SE, UICCSE).

The processor 110 is used to execute computer instructions/computer program codes stored in the internal memory 120 to implement various functions and data processing procedures of the vehicle-mounted authentication device 100 . For example, after establishing a communication connection with the mobile terminal, operations such as key authentication, anti-relay authentication, and location authentication may be performed. For another example, the seat sensor 160A may be deployed on the target seat in the cab of the vehicle, and the processor 110 may determine whether there is a target user sitting on the target seat according to the trigger signal from the seat sensor 160A. For another example, a door sensor 160B may be deployed on a door or a corresponding position of the vehicle, and the processor 110 may determine whether the door of the vehicle is in a closed state according to a trigger signal from the door sensor 160B. For another example, for the target seat in the cab of the vehicle, the seat belt detection circuit 190 may be deployed in the correspondingly configured seat belt. The on and off detection circuit 190 determines whether the user seated in the target seat is wearing a seat belt.

The seat sensor 160A is used to assist in detecting whether there is a user sitting on a corresponding seat. Typically, the seat sensor 160A may be configured on a target seat in the cab of the vehicle. In some embodiments, the seat sensor 160A may be a thin-film contact sensor, and its contacts may be uniformly or non-uniformly distributed on the force-bearing surface of the seat; when the seat is subjected to external pressure, such as When the user sits on the seat, the seat sensor 160A may generate a trigger signal, which will be provided to the processor 110 .

The door sensor 160B is used to detect whether the door of the vehicle is in a closed state. Exemplarily, the door sensor may be a pressure sensor, a corresponding rubber strip may be provided on the vehicle door, the pressure sensor is located in the rubber strip, and when the vehicle door is in a closed state, the vehicle door and the vehicle body squeeze the rubber strip, so that the pressure sensor A larger pressure signal (or a trigger signal) may be generated, and the pressure signal may be provided to the processor 110, so that the processor 110 determines that the vehicle door is in a closed state according to the pressure signal. It can be understood that the door sensor can also be other types of sensors, and can also be replaced by a signal detection device composed of an infrared radiation tube or a detection circuit including a Hall element.

The communication module 130 is used to support the on-board authentication device 100 to communicate with the mobile device on which the digital key of the vehicle is deployed. The communication module 130 may include two types of mobile communication modules and short-range communication modules. The mobile communication module is used to support the in-vehicle authentication device 100 to connect to the mobile communication network, so that the in-vehicle authentication device 100 establishes a network connection with the mobile device through the mobile communication network. The short-range communication module is used to support the establishment of a short-range communication connection between the in-vehicle authentication device 100 and the mobile device in a relatively short distance; for example, the short-range communication module may include a Bluetooth module, and the in-vehicle authentication device 100 may establish a connection with the mobile device through the Bluetooth module Bluetooth connection, and further information exchange with the mobile device through the Bluetooth connection to complete the authentication process of the digital key.

The in-vehicle authentication device 100 may generally include a plurality of cameras 180 each used to support the implementation of a specific service. As shown in FIG. 2, one or more cameras 180 may be deployed in the cab of the vehicle for collecting face images of the target user located in the cab. Generally, the camera 180 may include, but is not limited to, a fatigue monitoring camera or a visual distraction camera; the camera 180 may be deployed on the upper right side of the steering wheel 11 of the vehicle, or may be arranged at other positions inside the vehicle, such as the steering wheel of the vehicle on the upper left side, on the steering wheel, or on the front windshield.

The in-vehicle authentication device 100 may include one or more seat belt detection circuits 190, each seat belt detection circuit 190 being used to detect whether a user seated in a corresponding seat is wearing a seat belt. Taking the target seat in the vehicle cab as an example, when the target user inserts the seat belt buckle corresponding to the target seat into the seat belt buckle, the seat belt detection circuit 190 corresponding to the seat belt is turned on, The processor 110 can sense the conduction of the seat belt detection circuit 190, so as to determine that the user seated in the target seat in the cab is wearing a seat belt.

It should be noted that the structure and function of the vehicle-mounted authentication device 100 described by way of example do not constitute a limitation on the specific structure of the vehicle-mounted authentication device 100 . The in-vehicle authentication device 100 may further include more or less components; for example, the in-vehicle authentication device 100 may further include an information collection module for collecting other biometric information of the user, specifically, a fingerprint collection module for collecting fingerprint information. Certain components in the in-vehicle authentication device 100 may also be combined. Certain components in the vehicle-mounted authentication device 100 may also be split; for example, the processor 110 may be split into a plurality of mutually independent processing units. Various components in the vehicle-mounted authentication device 100 may also have other connection relationships.

A mobile device refers to an electronic device that can be carried around by the user, in which the digital key of the vehicle can be deployed.

Mobile devices may include, but are not limited to, mobile phones, tablet computers, digital cameras, personal digital assistants (PDAs), wearable devices, laptops, and other portable electronic devices.

After the digital key (DK) of the vehicle is deployed in the mobile device, information can be exchanged with the on-board authentication device 100 deployed in the vehicle according to the digital key, so that the on-board authentication device can authenticate the digital key.

FIG. 3 is a schematic structural diagram of a mobile device provided in an embodiment of the present application. As shown in FIG. 3 , the mobile device 300 may include a processor 310 , an internal memory 320 and a communication module 330 .

The internal memory 320 is used to store computer instructions/computer program codes, such as computer program codes corresponding to the digital key of the vehicle. It is also used to store various data created during the use of the mobile device 300, for example, to store biometric templates such as face images and fingerprint information entered by the user. In addition, the internal memory 320 may include high-speed random access memory and non-volatile memory, such as disk memory, flash memory, general-purpose flash memory, and the like.

The internal memory 320 may include one or more secure storage modules for storing computer program code corresponding to the digital key and data related to the digital key. The security storage module of the mobile device 300 is similar to the security storage module of the vehicle-mounted authentication device 100 , and details are not described here.

The processor 310 is used to execute computer instructions/computer program codes stored in the internal memory 320 to implement various functions and data processing processes of the mobile device 300 . For example, decrypt the encrypted face image from the in-vehicle authentication device 100, and compare the face image from the in-vehicle authentication device 100 with the face template pre-entered by the user.

Processor 310 may include one or more processing units.

In some embodiments, some processing units included in the processor 310 or the operating mode of the processor 310 may be configured to form a trusted execution environment (TEE) for processing sensitive information. Among them, the rich execution environment (rich execution environment) corresponding to the TEE cannot access the resources of the TEE, so as to realize the security protection of the TEE-based business.

In some embodiments, a first trusted application (TA) can be run in the TEE, and the first TA is used to perform encryption/decryption operations on the information that the mobile device 300 interacts with the in-vehicle authentication device 100; Second TA, the second TA is used to compare the biometric information from the in-vehicle authentication device 100 with the biometric template.

For the digital key deployed in the mobile device 300, according to the communication technology adopted by the digital key and/or user experience, the digital key usually includes a remote keyless entry (RKE) key, a near field communication (NFC) key and passive entry passive start (PEPS) keys and other types.

The RKE key usually needs to be operated by the user on the mobile device after the mobile device establishes a near-field communication connection with the vehicle authentication device, thereby initiating the business process of unlocking the door and/or starting the vehicle, unlocking the door and/or starting the vehicle The process is independent of the mobile communication network.

The NFC key usually does not require the user to perform corresponding operations on the mobile device, but requires the user to place the mobile device in the NFC card reading area of the vehicle to initiate the business process of unlocking the door and/or starting the vehicle.

The PEPS key usually does not require the user to perform any operation on the mobile device, nor to connect the mobile device to the mobile communication network. In the case that the mobile device establishes a short-range communication connection with the vehicle-mounted authentication device, the vehicle-mounted authentication device can authenticate the digital key deployed in the mobile device. When the digital key is authenticated, the door can be unlocked.

For PEPS keys, considering regulatory needs and vehicle use safety, when starting the vehicle, it is often necessary to ensure that the mobile device on which the vehicle's digital key is deployed is located inside the vehicle. Sensors with extremely high performance requirements can be deployed in vehicles, or by increasing the number of sensors, or by adding components that support UWB communication technology in vehicles and mobile devices, to assist in the accurate positioning of mobile devices, and determine mobile devices according to the positioning results. is inside the vehicle.

In view of this, the embodiments of the present application provide at least a vehicle startup control method and a vehicle-mounted authentication device. The in-vehicle authentication device is deployed in the vehicle and can obtain the biometric information of the target user located in the cab of the vehicle. Then, the on-board authentication device or the mobile device on which the digital key of the vehicle is deployed determines whether the biometric information matches the biometric template; wherein the biometric template is stored in the mobile device on which the digital key of the vehicle is deployed, and the biometric The template is the biometric information of the user holding the mobile device. If the biometric information matches the biometric template, it means that the user in the cab of the vehicle has legal authority to use the vehicle; in addition, since mobile devices are usually carried by the user, the mobile device where the digital key of the vehicle is deployed also in this vehicle. After the digital key is authenticated, the vehicle-mounted authentication device can start/trigger the vehicle control device of the vehicle to start the vehicle when receiving the vehicle start signal. In this way, without adding sensors or other components in the vehicle to assist in the accurate positioning of the mobile device, the vehicle can be started only when the mobile device to which the vehicle's digital key is deployed is located inside the vehicle, meeting regulatory requirements and It can ensure the safety of vehicle use, such as reducing the risk of misstarting and theft of the vehicle.

In the following, in conjunction with the business scenario shown in FIG. 4 , an exemplary description will be given of the process of controlling the startup of the vehicle 10 by the information interaction between the mobile device M1 and the vehicle-mounted authentication device 100 deployed in the vehicle 10 . Among them, the digital key of the vehicle 10 is deployed in the mobile device M1. As shown in FIG. 5 , the mobile device M1 exchanges information with the in-vehicle authentication device 100 , and the process of controlling the start of the vehicle 10 may include the following steps.

In step 501, after the mobile device M1 enters the short-range communication area P1 of the vehicle 10, the in-vehicle authentication device 100 can discover the mobile device M1 and establish a communication connection with the mobile device M1.

The communication connection may be a short-range communication connection, such as a Bluetooth connection.

The in-vehicle authentication device 100 may also discover other mobile devices entering the short-range communication area P1, and establish a communication connection with the other mobile devices; the digital key of the vehicle 10 may or may not be deployed in other mobile devices. . As shown in FIG. 4 , regardless of whether the digital key of the vehicle 10 is deployed on the mobile device M2 and the mobile device M3, when the mobile device M2 and the mobile device M3 enter the short-range communication area P1 of the vehicle 10, the on-board authentication device 100 can discover the mobile device M2 and mobile device M3, and establish communication connections with mobile device M2 and mobile device M3 respectively.

Step 502, the in-vehicle authentication device 100 sends a digital key authentication request to the mobile device M1.

The in-vehicle authentication device 100 may send a digital key authentication request to each mobile device with which a communication connection is established. As shown in FIG. 4 , for the mobile device M2 and the mobile device M3 that have established a communication connection with the in-vehicle authentication device 100, the in-vehicle authentication device 100 may also send a digital key authentication request to the mobile device M2 and the mobile device M3.

Step 503 , the mobile device M1 sends the authentication ciphertext to the vehicle-mounted authentication device 100 .

A digital key is deployed in the mobile device M1, and an authentication ciphertext can be generated according to the service key of the digital key and the information in the authentication request.

In step 504, the vehicle-mounted authentication device 100 determines whether the digital key has passed the key authentication according to the authentication ciphertext.

If the in-vehicle authentication device 100 determines that the digital key has passed the key authentication, step 505 is executed to perform positioning authentication and anti-relay authentication on the mobile device M1.

After the in-vehicle authentication device 100 locates the mobile device M1 into the door unlocking area of the vehicle 10 and the mobile device M1 does not have a relay attack, that is, after the mobile device M1 passes the location authentication and the anti-relay authentication, the in-vehicle authentication device can execute step 506 , unlock the door of the vehicle 10 and associate the first key with the target communication connection.

Wherein, the first key is used to encrypt the biometric information in the subsequent process. The target communication connection refers to the communication connection established between the in-vehicle authentication device 100 and the mobile device M1, so the first key can also be associated with the mobile device M1. The first key may be the service key of the digital key deployed in the mobile device M1; or the first key may be obtained by using the service key for derivative calculation; or the first key may be pre-stored in the vehicle-mounted authentication device. 100, and different digital keys correspond to different first keys.

Exemplarily, after the mobile device M1 enters the short-range communication area P1 of the vehicle 10, establishes a communication connection with the in-vehicle authentication device 100, and after the digital key deployed by the mobile device M1 passes the key authentication, the in-vehicle authentication device 100 can continue/periodically. The mobile device M1 is located, the location of the mobile device M1 is obtained, and whether there is a relay attack on the mobile device M1 is determined. After the mobile device M1 enters the door unlocking area P2 of the vehicle 10 under the carrying of the user, the mobile device M1 passes the positioning authentication; at this time, if the mobile device M1 passes the anti-relay authentication, that is, if it is determined that there is no relay attack on the mobile device M1 , the in-vehicle authentication device 100 can unlock the door of the vehicle 10 , or trigger the body control device to unlock the door of the vehicle 10 .

After the in-vehicle authentication device 100 successfully unlocks the door of the vehicle 10 , the user carrying the mobile device M1 can enter the interior of the vehicle 10 through the unlocked door. Correspondingly, the in-vehicle authentication device 100 may execute step 507 to determine whether a trigger condition for collecting biometric information is reached.

In some embodiments, the triggering conditions for collecting biometric information may include, but are not limited to, one or more of the following conditions: there is a target seat where the target user is seated in the cab of the vehicle 10 , the target user is seated on the target seat of users wear seat belts and the vehicle's doors are closed. The trigger condition for collecting biometric information may also include: for the target user sitting on the target seat, the target user's eyes are fixed on the information collection unit (such as a camera) of the in-vehicle authentication device 100 or the start button of the vehicle.

In some embodiments, the in-vehicle authentication device may collect at least two scene images of the cab of the vehicle 10 through a camera; determine whether the target user has performed at least one preset action according to the at least two scene images; Trigger condition for collecting biometric information. The at least one preset action includes at least one of the following actions: sitting on the target seat, fastening a seat belt, and looking at the information collection unit of the vehicle-mounted authentication device.

If the in-vehicle authentication device 100 determines that the trigger condition for collecting biometric information is met, the in-vehicle authentication device may execute step 508 to collect biometric information of the user seated in the cab of the vehicle 10 .

Wherein, the biometric information may include, but is not limited to, one or more of information such as face image, fingerprint information, voiceprint information or iris information.

In some embodiments, the information collection unit for collecting biometric information may be activated after the vehicle-mounted authentication device 100 determines that a trigger condition for collecting biometric information is reached, so as to reduce the power consumption of the information collection unit.

Exemplarily, after the in-vehicle authentication device 100 determines that the trigger condition for collecting biometric information is reached, the camera (such as a fatigue monitoring camera, a visual distraction camera) 180 located in the cab of the vehicle 10 is activated, and the processor 310 triggers the camera 180 to collect the user. face image. Alternatively, after the in-vehicle authentication device 100 determines that the trigger condition for collecting biometric information is reached, the processor 310 may extract the face image of the target user from the at least two scene images collected by the camera.

In some embodiments, after the in-vehicle authentication device 100 determines that the triggering condition for collecting biometric information is reached, it can also provide corresponding image information and/or sound information to the user through its display screen and/or speaker, so that the user can use the image information according to the image information and/or sound information. Information and/or voice information prompts, and actively cooperate with the vehicle-mounted authentication device 100 to collect its own biometric information, which is beneficial for the vehicle-mounted authentication device 100 to quickly complete the collection of high-quality biometric information.

Step 509 , the vehicle-mounted authentication device 100 determines the mobile device located in the cab of the vehicle 10 from the mobile devices according to the positions of the mobile devices with which the communication connection has been established and the deployed digital key has been authenticated.

Exemplarily, the vehicle-mounted authentication device may locate the mobile devices M1, M2, and M3 to obtain the positions of the mobile devices M1, M2, and M3 in a specified coordinate system (eg, the earth coordinate system). In addition, the in-vehicle authentication device can also determine the position of a certain reference object (such as a communication module of the in-vehicle authentication device) in the specified coordinate system through a corresponding positioning technology. Next, the vehicle-mounted authentication device can determine the distances between the mobile devices M1, M2, M3 and the reference objects according to the positions of the mobile devices M1, M2, and M3 in the specified coordinate system and the position of the reference object in the specified coordinate system. . Finally, according to the respective distances of the mobile devices M1 , M2 and M3 and the deployment position of the reference object in the vehicle, the mobile device located in the cab of the vehicle is determined. For example, if the reference object is deployed in the cab, the mobile device with the smallest distance from the reference object may be determined as the mobile device located in the cab of the vehicle.

In some embodiments, different from step 509, a distance measuring device may also be added at a designated position in the vehicle, such as adding a distance measuring device on the steering wheel of the vehicle. For each terminal device that has established a communication connection with the in-vehicle authentication device, the distance between the ranging device and each mobile device can be measured based on fine timing measurement (FTM) or other ranging technologies, and the distance between the ranging device and each mobile device can be measured. The mobile device with the smallest distance between the devices is determined as the mobile device located in the cab of the vehicle.

It should be noted that step 509 is optional. Exemplarily, for multiple mobile devices such as mobile device M1, mobile device M2, and mobile device M3 that have established a communication connection with the in-vehicle authentication device 100, if the digital keys deployed in the mobile device M1 and the mobile device M2 pass the authentication , then the on-board authentication device 100 can perform step 509 for the mobile device M1 and the mobile device M2; if only the digital key deployed in one mobile device passes the authentication, for example, only the digital key deployed in the mobile device M1 passes the authentication, the on-board authentication device 100 does not need to perform step 509, and can directly perform the following step 510.

Assuming that only the digital key deployed in the mobile device M1 passes the authentication, or the in-vehicle authentication device determines that the mobile device M1 is located in the cab of the vehicle 10, the in-vehicle authentication device 100 may execute step 510, using the target communication to connect the associated first key pair The biometric information is encrypted, wherein the target communication connection is a communication connection established between the mobile device M1 and the vehicle-mounted authentication device 100, and the encrypted biometric information is sent to the mobile device M1.

In some embodiments, the in-vehicle authentication device 100 may further preprocess the biometric information collected by it, and the preprocessing process may include, but is not limited to, determining whether the biometric information satisfies a preset condition, wherein the biometric information that satisfies the preset condition of relatively good quality.

Taking the biometric information being a face image as an example, the preset conditions include: the brightness of the face image reaches a preset threshold, the face area in the face image is not blocked, and the pose of the face image meets predetermined requirements, etc. If the face image collected by the in-vehicle authentication device 100 does not meet the preset conditions, the in-vehicle authentication device 100 may play the corresponding voice message through the speaker or in other ways, prompting the user to cooperate with the in-vehicle authentication device 100 to complete the collection of the face image that meets the preset conditions , until the face image that meets the preset condition is obtained, the face image that meets the preset condition is encrypted with the first key and sent to the mobile device M1. In this way, it is ensured that the face image sent to the mobile device M1 has good quality, so that the mobile device M1 can quickly match the face image and the face template in the subsequent process without requiring re-acquisition, which is conducive to rapid Start the vehicle 10 .

The in-vehicle authentication device 100 sends the biometric information encrypted with the first key to the mobile device M1 through the target communication connection associated with the first key, so that the biometric information collected by the in-vehicle authentication device 100 will not be transmitted to the mobile device M1. The authentication device 100 establishes a communication connection with other mobile devices. On the one hand, it can ensure the security of biometric information; Other mobile devices perform meaningless processing of encrypted biometric information.

Step 511, the mobile device M1 determines whether the biometric information matches the biometric template.

Wherein, the biometric template can usually be pre-deployed in the mobile device M1, such as pre-deployed in the TEE or SE of the mobile device M1. The biometric template refers to the biometric information of the user holding the mobile device M1.

In some embodiments, the encrypted biometric information may be decrypted using the second key corresponding to the first key in the TEE of the mobile device M1 to obtain the biometric information. The second key and the first key constitute a key pair, and the specific implementation can refer to the relevant description of the first key, which will not be repeated here.

Generally, the mobile device M1 can decrypt the encrypted biometric information with the second key through the first TA in its TEE to obtain the biometric information. The biometric information is then provided to the second TA, and the second TA calculates the similarity between the biometric information and the biometric template. If the similarity reaches a preset threshold, it is determined that the biometric information matches the biometric template; otherwise, it is determined that the biometric information does not match the biometric template.

It can be understood that, if the biometric information matches the biometric template, it means that the user sitting in the seat of the cab of the vehicle 10 is the user holding the mobile device M1. In addition, since the mobile device M1 is usually carried by the user who holds the mobile device M1, it can be considered that the mobile device M1 is also located in the vehicle 10, or the user sitting on the seat of the vehicle cab has the right to legally use the vehicle 10. . In this way, the risk of vehicle theft and mis-starting of the vehicle can be mitigated, and regulatory requirements can be met.

Step 512 , the mobile device M1 sends the matching result to the in-vehicle authentication device 100 .

The matching result is used to indicate whether the biometric information matches the biometric template.

If the matching result indicates that the biometric information matches the biometric template, the in-vehicle authentication device 100 may execute step 513 to make the vehicle 10 enter the startable state from the non-startable state.

In some embodiments, the in-vehicle authentication device 100 may run a state machine for recording the current state of the vehicle 10 . Before the in-vehicle authentication device executes step 512 , the current state of the vehicle 10 recorded by the state machine is a non-startable state. After the in-vehicle authentication device 100 determines that the matching result indicates that the biometric information matches the biometric template, the running state machine is updated, so that the current state of the vehicle 10 recorded by the state machine is switched to the startable state.

Step 514, the vehicle-mounted authentication device 100 receives the vehicle start signal.

Step 515 , the vehicle-mounted authentication device 100 triggers the vehicle control device to start the vehicle 10 in the startable state.

That is, if and only when the vehicle 10 is in a startable state and the vehicle-mounted authentication device 100 receives a start signal for instructing to start the vehicle 10 , the vehicle-mounted authentication device 100 starts/triggers the vehicle control device to start the vehicle 10 .

In some embodiments, after the vehicle 10 enters the startable state, the in-vehicle authentication device may continuously or periodically detect whether the conditions for maintaining the startable state of the vehicle are still satisfied. If the in-vehicle authentication device 100 determines that the conditions for the vehicle to be in the startable state are no longer satisfied, the in-vehicle authentication device 100 makes the vehicle 10 enter the inactive state from the startable state. The conditions for the vehicle to maintain the startable state may include, but are not limited to, one of the following conditions: the target user is seated on the target seat, the target user seated in the target seat is wearing a seat belt, and the door of the vehicle is closed. or more.

In some embodiments, after the vehicle 10 enters the startable state, the in-vehicle authentication device may continuously monitor whether there is a state switching event, and when there is a state switching event, the current state of the vehicle is switched from the startable state to the non-startable state. The state switching event includes at least one of the following events: the target user sitting on the target seat leaves the target seat, the seat belt detection circuit corresponding to the target seat is switched from on to off, and the door of the vehicle changes from the closed state Switch to the ON state and the vehicle is in the startable state for a predetermined period of time.

In other words, if and only when the vehicle-mounted authentication device receives the vehicle start signal and the vehicle is in a startable state, the vehicle control device is triggered to start the vehicle, so as to avoid the verification of the digital key due to the completion of the vehicle-mounted authentication device. And after the target user's authorization to use the vehicle is authenticated, if the target user sitting in the target seat changes, the target user no longer wears the seat belt, or the door is opened, the vehicle is started and the driving safety is affected.

In some embodiments, the user may provide a sound signal to the vehicle-mounted authentication device 100 through the microphone of the vehicle-mounted authentication device 100 , and the sound signal may be used as a vehicle start signal for instructing the vehicle-mounted authentication device 100 to start the vehicle 10 .

In some embodiments, the user may press the start button of the in-vehicle authentication device 100 to complete providing the in-vehicle authentication device 100 with a vehicle activation signal for instructing the in-vehicle authentication device 100 to start the vehicle 10 .

According to the technical solutions of the embodiments of the present application, on the basis that the digital key of the vehicle 10 deployed in the mobile device M1 passes the authentication, if the biometric template stored in the mobile device M1 matches the biometric information of the user in the cab of the vehicle, then It is explained that the user is a user who holds the mobile device M1. Since the mobile device M1 is usually carried by the user holding the mobile device M1 , it is explained that the mobile device M1 is also located in the vehicle 10 . Only when the biometric information matches the biometric template, the in-vehicle authentication device 100 can start/trigger the vehicle control device to start the vehicle 10 after receiving the vehicle start signal. In this way, there is no need to add sensors or other components in the vehicle 10 for assisting in the accurate positioning of the mobile device M1, and it can be realized only when the mobile device M1 on which the digital key of the vehicle 10 is deployed is located inside the vehicle 10. Start the vehicle 10 to meet regulatory requirements and ensure safe vehicle use.

According to the technical solutions of the embodiments of the present application, the collection of the user's biometric information and the matching between the biometric information and the biometric template occur before the vehicle-mounted authentication device 100 receives the vehicle start signal, which is beneficial for the vehicle-mounted authentication device 100 to quickly start the vehicle 10 , Avoid giving users a sense of delay and improve user experience.

According to the technical solutions of the embodiments of the present application, whether the biometric information matches the biometric template is determined by the mobile device, and there is no need to pre-store the user's biometric template in the vehicle-mounted authentication device, which is beneficial to the sharing of digital keys, driving on behalf of vehicles, and fleets. Management and other remote scenarios.

According to the technical solutions of the embodiments of the present application, the mobile device and the vehicle-mounted authentication device can directly exchange corresponding information through the short-range communication connection established by the mobile device, and have no dependence on the mobile communication network. Unlock the doors and start the vehicle.

According to the technical solutions of the embodiments of the present application, the fatigue monitoring camera and the visual distraction camera deployed in the vehicle can be reused to collect face images, and there is no need to add a new information collection unit in the vehicle, let alone to assist in the realization of mobile A sensor or other component of a device for accurate positioning.

In some embodiments, compared with the process shown in FIG. 5 , the difference is that the mobile device M1 receives the digital key authentication request from the vehicle-mounted authentication device 100 for the first time, and the digital key deployed in the mobile device M1 passes the key authentication Afterwards, the mobile device M1 can send its stored biometric template to the vehicle-mounted authentication device. The in-vehicle authentication device 100 does not need to perform associating the first key with the target communication connection, nor does it need to perform steps 509 to 512, but the in-vehicle authentication device 100 determines whether the biometric information it collects and the biometric template from the mobile device M1 are not. match to get the corresponding matching result.

In addition, the in-vehicle authentication device 100 may store the biometric template from the mobile device M1 and associate the biometric template with the mobile device M1. If it is not the first time that the in-vehicle authentication device 100 sends a digital key authentication request to the mobile device M1, the in-vehicle authentication device 100 may match the biometric template associated with the mobile device M1 with the biometric information collected.

Based on the same concept as the foregoing method embodiments, the embodiments of the present application also provide a vehicle startup control apparatus, which may include units or means for implementing each step performed by the vehicle-mounted authentication device in the foregoing method embodiments .

In a possible implementation, as shown in Figure 6, the device may include:

A feature information acquisition unit 601, configured to acquire biometric information of a target user; wherein, the target user sits on a target seat of the vehicle, and the target seat is located in the cab of the vehicle;

The feature information processing unit 602 is configured to encrypt the biometric information according to the first key associated with the first mobile device, and send the encrypted biometric information to the first mobile device; wherein the first mobile device and the vehicle-mounted authentication The device has established a communication connection, the digital key of the vehicle is deployed in the first mobile device, and the in-vehicle authentication device has determined that the digital key has passed the authentication;

A matching result receiving unit 603, configured to receive a matching result from the first mobile device; wherein, the matching result is used to indicate whether the biometric information matches the biometric template;

a start signal receiving unit 604, configured to receive a vehicle start signal;

The vehicle start control unit 605 is configured to trigger the vehicle control device of the vehicle to start the vehicle when the matching result indicates that the biometric information matches the biometric template.

In a possible implementation manner, the feature information obtaining unit 601 is specifically configured to extract the face image of the target user from the at least two scene images.

In a possible implementation, the preprocessing unit is configured to determine whether the face image satisfies a preset condition; wherein the preset condition includes at least one of the following items: the brightness value of the face image reaches a preset threshold , there is no occlusion phenomenon in the face image, and the pose of the face image meets the predetermined requirements; if yes, it is determined that the face image meets the preset conditions.

Based on the same concept as the foregoing method embodiments, the embodiments of the present application also provide a vehicle-mounted authentication device, in which a vehicle startup control device can be deployed. It can be understood that the in-vehicle authentication device may perform various steps performed by the in-vehicle authentication device in the method shown in FIG. 5 , which will not be described in detail here in order to avoid repetition.

Wherein, as shown in Figure 1, the vehicle-mounted authentication device may include:

Internal memory 120 for storing computer programs/instructions;

a communication module 130, configured to communicate with a mobile device, for example, to communicate with the mobile device 300 shown in FIG. 3 or the mobile devices M1, M2, and M3 shown in FIG. 4;

The processor 110 is configured to execute the computer program/instruction in the internal memory 120, when the computer program/instruction is executed: the processor 110 obtains the biometric information of the target user; wherein, the target user is seated in the The target seat of the vehicle is located in the cab of the vehicle. The processor 110 encrypts the biometric information according to the first key associated with the first mobile device, and sends the encrypted biometric information to the first mobile device through the communication module 130; Wherein, the first mobile device establishes a communication connection with the vehicle-mounted authentication device, the digital key of the vehicle is deployed in the first mobile device, and the vehicle-mounted authentication device has determined that the digital key has passed the authentication. The processor 110 receives the matching result from the first mobile device through the communication module 130; wherein the matching result is used to indicate whether the biometric information matches the biometric template. The processor 110 receives a vehicle activation signal. The processor 110 triggers the vehicle control device of the vehicle to start the vehicle if the matching result indicates that the biometric information matches the biometric template.

It can be understood that the first mobile device may include the mobile device M1 described in the foregoing method embodiments, and the first key may be a key associated with the communication connection established between the first mobile device and the vehicle-mounted authentication device.

It can be understood that the processor 110 can cooperate with other functional modules of the in-vehicle authentication device, such as cooperating with a camera and a seat belt detection circuit, to implement one or more steps performed by the in-vehicle authentication device in the foregoing method embodiments. Referring to the foregoing method embodiments and the related introduction to the in-vehicle authentication device 100 shown in FIG. 1 , details are not repeated here.

Those of ordinary skill in the art can realize that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Experts may use different methods for each specific application to implement the described functions, but such implementation should not be considered beyond the scope of the embodiments of the present application.

It can be understood that, in various embodiments of the embodiments of the present application, the size of the sequence numbers of the above-mentioned processes does not mean the sequence of execution, and the execution sequence of each process should be determined by its functions and internal logic, and should not be applied to the present application. The implementation of the embodiments constitutes no limitation. In addition, those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the above-mentioned vehicle-mounted authentication device may refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.

It can be understood that the device embodiments described above are schematic, for example, the division of the modules/units is only a logical function division, and other division methods may be used in actual implementation, for example, multiple units or components may be Combinations can either be integrated into another system, or some features can be omitted, or not implemented. On the other hand, the shown or discussed mutual coupling or direct coupling or communication connection may be through some interfaces, indirect coupling or communication connection of devices or units, and may be in electrical, mechanical or other forms.

The above are only specific implementations of the embodiments of the present application, but the protection scope of the embodiments of the present application is not limited thereto. Any person skilled in the art can easily think of changes or Replacement, all should be covered within the protection scope of the embodiments of the present application

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that it is still possible to The technical solutions provided in the foregoing embodiments are modified, or some technical features thereof are equivalently replaced, and these modifications or replacements do not make the essence of the corresponding technical solutions depart from the spirit of the technical solutions provided in the various embodiments of the present application and range.

Claims

A vehicle startup control method, characterized in that the vehicle-mounted authentication device applied to the vehicle comprises:

acquiring biometric information of a target user; wherein the target user is seated in a target seat of the vehicle, and the target seat is located in a cab of the vehicle;

The biometric information is encrypted according to a first key associated with a first mobile device, and the encrypted biometric information is sent to the first mobile device; wherein the first mobile device and the The in-vehicle authentication device has established a communication connection, the digital key of the vehicle is deployed in the first mobile device, and the in-vehicle authentication device has determined that the digital key has passed the authentication;

receiving a matching result from the first mobile device; wherein the matching result is used to indicate whether the biometric information matches a biometric template;

Receive vehicle start signal;

In a case where the matching result indicates that the biometric information matches the biometric template, a vehicle control device of the vehicle is triggered to start the vehicle.
The method of claim 1, wherein:

Before obtaining the biometric information of the target user, the method further includes:

determining whether a trigger condition for collecting biometric information is met;

If yes, start the information collection unit of the vehicle-mounted authentication device; wherein, the information collection unit is used to collect the biometric information of the target user.
The method of claim 2, wherein:

Trigger conditions for collecting biometric information include at least one of the following: the target user is seated on the target seat, the target user seated in the target seat is wearing a seat belt, and the door of the vehicle is closed.
The method of claim 1, wherein:

Before obtaining the biometric information of the target user, the method further includes:

collecting at least two scene images of the cab of the vehicle;

According to the at least two scene images, it is determined whether there is a target user who has performed at least one preset action; wherein, the at least one preset action includes at least one of the following actions: sitting on the target seat, wearing a seat belt, and gaze at the information collection unit of the vehicle-mounted authentication device;

If so, it is determined that there is a target user who has performed at least one preset action.
The method of claim 4, wherein:

The acquiring biometric information of the target user includes: extracting a face image of the target user from the at least two scene images.
The method of claim 4, wherein:

Before the encrypting the biometric information according to the first key associated with the first mobile device, further comprising:

Determine whether the face image satisfies a preset condition; wherein, the preset condition includes at least one of the following items: the brightness value of the face image reaches a preset threshold, the face image does not have occlusion phenomenon, and the human face image The pose of the face image meets the predetermined requirements;

If yes, it is determined that the face image satisfies the preset condition.
The method according to any one of claims 1 to 6, wherein the method further comprises:

In the case that the matching result indicates that the biometric information matches the biometric template, switching the current state of the vehicle from a non-startable state to a startable state;

Triggering the vehicle control device of the vehicle to start the vehicle when the matching result indicates that the biometric information matches the biometric template includes: when the current state of the vehicle is a startable state next, trigger the vehicle control device of the vehicle to start the vehicle.
The method according to claim 7, wherein the method further comprises:

When there is a state switching event, the current state of the vehicle is switched from a startable state to a non-startable state; wherein, the state switching event includes at least one of the following events: the target user sitting on the target seat leaves the target The seat belt detection circuit corresponding to the seat and the target seat is switched from on to off, the door of the vehicle is switched from the closed state to the open state, and the vehicle is in the startable state for a predetermined time duration.
The method according to any one of claims 1 to 8, characterized in that,

Before encrypting the biometric information according to the first key associated with the first mobile device, the method further includes:

Determine the respective location information of a plurality of second mobile devices; wherein, the second mobile device establishes a communication connection with the vehicle-mounted authentication device, the digital key of the vehicle is deployed in the second mobile device, and the vehicle-mounted authentication device is deployed in the second mobile device. The authentication device has determined that the digital key deployed in the second mobile device is authenticated;

The first mobile device located in the cab of the vehicle is determined according to the respective location information of the plurality of second mobile devices.
An in-vehicle authentication device is characterized in that, comprising: a communication module, a memory and a processor; wherein,

a computer program/instruction is stored in the memory;

the communication module is used to communicate with the first mobile device;

When the processor executes the computer program/instructions, the in-vehicle authentication device implements the method of any one of claims 1 to 9.
The in-vehicle authentication device according to claim 10, wherein:

The in-vehicle authentication device further includes: an information collection unit for collecting biometric information of the target user.
The in-vehicle authentication device according to claim 11, wherein:

The information collection unit includes a camera;

The biometric information includes an image of a human face.
The in-vehicle authentication device according to any one of claims 10 to 12, characterized in that:

The in-vehicle authentication device further includes: a door sensor, configured to provide a sensing signal to the processor when the vehicle door is in a closed state; wherein the sensing signal is used to indicate that the vehicle door is in a closed state.
The in-vehicle authentication device according to any one of claims 10 to 13, wherein:

The in-vehicle authentication device further includes: a seat sensor; wherein,

the seat sensor is arranged on the target seat;

The seat sensor is configured to provide a trigger signal to the processor when there is a target user sitting on the target seat; wherein the trigger signal is used to indicate that the target user is sitting on the target seat.
The in-vehicle authentication device according to any one of claims 10 to 14, wherein:

The in-vehicle authentication device further includes: a seat belt detection circuit for detecting whether the user seated in the target seat is wearing a seat belt.
A computer-readable storage medium for storing a computer program/instruction, when the computer program/instruction is executed on an in-vehicle authentication device, the in-vehicle authentication device is made to execute the method described in any one of claims 1 to 9. method.
A computer program product comprising a computer program/instruction, characterized in that, when the computer program product is run on an electronic device, the electronic device is caused to perform the method of any one of claims 1-9.