WO2023220935A1

WO2023220935A1 - Vehicle access right control method and related apparatus

Info

Publication number: WO2023220935A1
Application number: PCT/CN2022/093396
Authority: WO
Inventors: 郑云文; 罗俊; 李海林; 尚瑜; 李江琪
Original assignee: 华为技术有限公司
Priority date: 2022-05-17
Filing date: 2022-05-17
Publication date: 2023-11-23

Abstract

Disclosed in the embodiments of the present application are a vehicle access right control method and a related apparatus, the method comprising: on the basis of first indication information, determining a first mode, the first mode being one mode of a plurality of data protection modes of a vehicle, the plurality of data protection modes of the vehicle comprising modes provided for at least two different kinds of vehicle users, and the plurality of data protection modes being used for limiting access to data of the vehicle; and switching the mode of the vehicle to the first mode. The present application can protect personal data of interest-related persons such as vehicle owners, relatives, designated drivers, passengers in a vehicle and pedestrians outside the vehicle.

Description

Vehicle access authority control method and related devices

Technical field

This application relates to the field of smart car technology, and in particular to a vehicle access authority control method and related devices.

Background technique

A smart car can be regarded as a computer-centered mobile terminal computing device. Smart cars are similar to mobile smart terminals. They can have multiple user roles and process personal data of various roles. For example, taking a family car as an example, users include the car owner, family members, car borrowers, and drivers. For example, taking the car rental scenario as an example, users include vehicle owners, car rental company employees, and car rental personnel. For car use scenarios where the vehicle is used by people other than the car owner and family members, if the personal data in the vehicle is not protected, it may easily lead to the leakage of personal data.

Contents of the invention

The embodiment of this application discloses a vehicle access authority control method and related devices, which can protect the personal data of various stakeholders such as vehicle owners, relatives and friends, driving personnel, passengers in the vehicle, and pedestrians outside the vehicle.

In the first aspect, this application provides a vehicle access authority control method, which method includes:

The first mode is determined based on the first indication information. The first mode is one of multiple data protection modes of the vehicle. The multiple data protection modes of the vehicle include modes provided for at least two different vehicle users. , the aforementioned multiple data protection modes are used to restrict access to the data of the aforementioned vehicle; and the mode of the aforementioned vehicle is switched to the aforementioned first mode.

By providing different modes of restricting access to data for a variety of different users, this solution can protect personal information in the vehicle from being leaked, and at the same time, it can provide more services to different users as much as possible and improve the user experience.

In a possible implementation, the first instruction information is instruction information input by a first user, and the first user is a user who has no access restrictions on the vehicle;

Before determining the first mode based on the first indication information, the method further includes:

Receive the login information of the user system of the aforementioned vehicle, where the aforementioned login information includes the identity information of the aforementioned first user;

Based on the aforementioned login information, the aforementioned first user is provided with the function usage authority of the aforementioned vehicle.

In this solution, after logging into the vehicle's user system, the first user can instruct the vehicle to lock the first mode and switch the vehicle's mode to the first mode. The first mode may be, for example, a valet mode, a maintenance mode, a used car mode, or the like. The above-mentioned valet mode may be a usage mode provided by the vehicle for a third user. The third user may be, for example, an external person such as a car loaner, a car rental person, or a driving agent. In valet mode, the vehicle hides the owner's personal data by default and disables features involving the owner's privacy. The above-mentioned maintenance mode may be a usage mode provided by the vehicle for the fourth user. The fourth user may be a maintenance personnel or the like. In this maintenance mode, the above-mentioned personal data of the vehicle is encrypted and isolated and cannot be accessed or copied through external devices. The above-mentioned second-hand car transaction model can be used in the scenario of vehicle handover during the second-hand car transaction process. In this solution, before handing over the vehicle to others for use, the first user can switch the vehicle's mode to the corresponding data protection mode in advance to restrict other people's access to personal data in the vehicle, thus achieving the protection of personal data.

In a possible implementation, after determining the first mode based on the first indication information, the method further includes:

Check the driving status of the aforementioned vehicle;

The aforementioned switching of the mode of the aforementioned vehicle to the aforementioned first mode includes:

When the vehicle is in a stopped state, the mode of the vehicle is switched to the first mode.

In this solution, mode switching can only be performed when the vehicle is parked to ensure the safety of the vehicle and users. And it can avoid safety hazards caused by mode switching due to misoperation.

In a possible implementation, after determining the first mode based on the first indication information and before switching the mode of the vehicle to the first mode, the method further includes:

Configure the exit code of the aforementioned first mode. The aforementioned exit code is a verification code used to exit the aforementioned first mode.

In this solution, by setting the exit code, only those who know the exit code can exit the first mode, preventing other people from arbitrarily exiting the mode and causing data leakage.

In a possible implementation, the aforementioned method further includes: in the aforementioned first mode, executing the transfer of ownership of the first user of the aforementioned vehicle, the transfer of the aforementioned first user’s authorization authority, and releasing the relationship between the aforementioned vehicle and the aforementioned first user. The identity binding of the aforementioned vehicle is bound to the identity of the new owner of the aforementioned vehicle, or one or more operations of deleting the personal data in the aforementioned vehicle, and the aforementioned first user is a user who has no access restrictions to the aforementioned vehicle.

The first mode in this solution is the aforementioned second-hand car transaction mode. In the second-hand car transaction mode, vehicles can perform the operations described above, thereby improving the efficiency of second-hand car handover procedures.

In a possible implementation, the first instruction information is information for a second user to log in to the user system of the vehicle, the first instruction information includes the identity information of the second user, and the second user is authorized to log in by the first user. As a user of the user system of the aforementioned vehicle, the aforementioned first user is a user who has no access restrictions to the aforementioned vehicle.

The first mode in this solution may be the friends and relatives mode. Friends and family mode may be a usage mode provided by the vehicle to a second user. The second user can be the car owner's family member, full-time driver, relative or friend, etc. For example, in the friends and family mode, the vehicle provides the same function usage rights as the above-mentioned car owner mode by default. Or the friends and family mode can also restrict the second user from using some functions in the vehicle based on the first user's customized configuration to achieve the purpose of protecting personal data in the vehicle. In this solution, the second user can independently log in to the vehicle's user system and enter the corresponding friends and family mode after the first user authorizes it, which is convenient and flexible and improves the second user's car experience.

In a possible implementation, before determining the first mode based on the first indication information, the method further includes: registering the identity information of the second user in the user system of the vehicle based on the indication information input by the first user.

In this solution, the friends and family mode requires authorization from the first user before it can be used. Therefore, before the second user logs in to the vehicle's user system, the first user needs to register the second user's identity information into the user system.

In a possible implementation, the method further includes: configuring the functions that are allowed and/or prohibited to be used in the first mode based on the second instruction information input by the first user.

In this solution, the function usage status of the data protection mode can be customized and flexibly configured, which can realize the configuration requirements of different scenarios and realize data protection in different car usage scenarios.

In a possible implementation, after configuring the functions allowed and/or prohibited in the first mode based on the second instruction information input by the first user, the method further includes:

Based on the third instruction information, the function usage status configured in the aforementioned first mode is saved as the function usage status of the first application scenario; the first application scenario is one of the plurality of application scenarios in the aforementioned first mode, and the aforementioned plurality of Different application scenarios in the application scenario have different usage states of the functions configured in the first mode.

In this solution, the same data protection mode can have functional configurations for multiple different application scenarios, and the functional configurations of the different application scenarios can be saved correspondingly so that they can be directly selected and used later to improve the switching efficiency of the data protection mode.

In a possible implementation, the method further includes: querying the function usage status configured in the first mode; sending a display instruction, where the display instruction is used to instruct display of the function usage status configured in the first mode.

In this solution, you can query the usage status of functions configured in data protection mode and quickly understand the usage status of each function in data protection mode.

In a possible implementation, the method further includes: upon sensing a preset action on the vehicle, activating a second mode among the plurality of data protection modes; the second mode is used to indicate the location of the vehicle. The camera captures images around the aforementioned vehicle.

The second mode in this solution is the outside-vehicle shooting prompt mode. Through this mode, you can quickly understand the situation around the vehicle, detect abnormalities around the vehicle in a timely manner, and protect the vehicle.

In a possible implementation, after switching the mode of the vehicle to the first mode, the step further includes: activating a third mode based on fourth indication information; the third mode is used to detect the status of the passengers in the vehicle.

The third mode in this solution is the passenger protection mode. Through the passenger protection mode, safety hazards of passengers can be discovered in time and passengers can be protected from harm.

In a possible implementation, after switching the mode of the vehicle to the first mode, the method further includes: activating a fourth mode based on the fifth instruction information; the fourth mode is used to turn off the camera in the vehicle and/or microphone.

The fourth mode in this solution is another passenger protection mode. Through this passenger protection mode, the vehicle cannot obtain the images and/or sounds of the passengers, thereby protecting the passengers' personal data from being leaked.

In the second aspect, this application provides a vehicle access permission control method, which method includes:

The first mode is determined based on the first indication information. The first mode is one of multiple data protection modes of the vehicle. The multiple data protection modes of the vehicle include modes provided for at least two different vehicle users. , the aforementioned multiple data protection modes are used to restrict access to the aforementioned vehicle data;

Send a first message to the aforementioned vehicle; the aforementioned first message indicates switching the mode of the aforementioned vehicle to the aforementioned first mode;

A first response message is received; the aforementioned first response message indicates that the mode of the aforementioned vehicle has been switched to the aforementioned first mode.

The execution subject of this solution can be a terminal device, which instructs the vehicle to switch modes through interactive communication with the vehicle. In this solution, different modes of restricting data access are provided for a variety of different users. While protecting the car owner's data, it can provide more services to different users as much as possible and improve the user experience.

In this solution, after logging into the vehicle's user system, the first user can instruct the vehicle to lock the first mode and switch the vehicle's mode to the first mode. The first mode may be, for example, the above-mentioned valet mode, maintenance mode, used car mode, etc. In this solution, before handing over the vehicle to others for use, the first user can switch the vehicle's mode to the corresponding data protection mode in advance to restrict other people's access to personal data in the vehicle, thus achieving the protection of personal data.

In a possible implementation, after providing the first user with the function usage rights of the vehicle based on the login information, the method further includes:

The functions that are allowed and/or prohibited to be used in the first mode are configured based on the second instruction information input by the first user.

Based on the third instruction information, the function usage status configured in the first mode is saved as the status of the first application scenario; the first application scenario is one of the multiple application scenarios in the first mode, and the multiple application scenarios are The function usage status configured in the aforementioned first mode corresponding to different application scenarios is different.

In this solution, the same data protection mode can have functional configurations for multiple different application scenarios, and the functional configurations for different application scenarios can be saved accordingly so that they can be directly selected for use later, improving the efficiency of switching data protection modes.

In a possible implementation, the method further includes: querying the function usage status configured in the first mode; displaying the function usage status configured in the first mode.

In a possible implementation, after the first mode is determined based on the first indication information and before the first message is sent to the vehicle based on the determined first mode, the method further includes:

In a possible implementation, the aforementioned method further includes: registering the identity information of the second user in the user system of the aforementioned vehicle based on the instruction information input by the first user, and the aforementioned first user is a user with no access restrictions to the aforementioned vehicle, The identity information of the second user is used for the second user to use the vehicle in a second mode, and the second mode is one of multiple data protection modes of the vehicle.

In this solution, the friends and family mode requires authorization from the first user before it can be used. Therefore, before the second user logs in to the vehicle's user system, the first user needs to register the second user's identity information into the user system, that is, authorize the second user. You can log in to the user system. After the second user obtains authorization from the first user, the user system that logs in to the vehicle independently enters the corresponding friends and family mode, which is convenient and flexible and improves the second user's car experience.

In the third aspect, this application provides a vehicle access authority control method, which method includes:

Receive the first message; the first message indicates switching the mode of the vehicle to the first mode; the first mode is one of the multiple data protection modes of the vehicle; the multiple data protection modes of the vehicle include protection for at least two Modes provided by different vehicle users, the aforementioned multiple data protection modes are used to restrict access to the data of the aforementioned vehicles;

Switch the mode of the aforementioned vehicle to the aforementioned first mode;

Send a first response message; the aforementioned first response message indicates that the mode of the aforementioned vehicle has been switched to the aforementioned first mode.

The execution subject of this solution can be a vehicle or a vehicle-machine control system in the vehicle, which can interact and communicate with the above-mentioned terminal device, so that the mode of the vehicle can be switched based on instructions from the terminal device. In this solution, different modes of restricting data access are provided for a variety of different users. While protecting the car owner's data, it can provide more services to different users as much as possible and improve the user experience.

In a possible implementation, after receiving the first message, the method further includes: querying the driving status of the vehicle;

The aforementioned switching of the mode of the vehicle to the aforementioned first mode based on the aforementioned first message includes: when the aforementioned vehicle is in a stopped state, switching the mode of the aforementioned vehicle to the aforementioned first mode based on the aforementioned first message.

In a possible implementation, after receiving the first message, the method further includes: querying the identity information of the user currently logged in to the user system of the vehicle; and switching the mode of the vehicle to the first mode, including: If the identity information is the identity information of the first user, the mode of the vehicle is switched to the first mode, and the first user is a user with no access restrictions to the vehicle.

In this solution, the identity of the currently logged-in user can be verified before switching modes of the vehicle. Only the first user has the authority to switch modes, thereby protecting the vehicle from being controlled by others.

In a possible implementation, the aforementioned method further includes:

Receive login information, the aforementioned login information includes the identity information of the second user, the aforementioned second user is a user authorized by the first user to log in to the user system of the aforementioned vehicle, and the aforementioned first user is a user with no access restrictions to the aforementioned vehicle;

The second user is provided with function usage rights in a second mode, where the second mode is one of a plurality of data protection modes of the vehicle.

The second mode in this solution may be the above-mentioned family and friends mode. In this solution, the second user can independently log in to the vehicle's user system and enter the corresponding friends and family mode after the first user authorizes it, which is convenient and flexible and improves the second user's car experience.

In a fourth aspect, this application provides a vehicle access authority control device, which is included in the vehicle and includes:

A determining unit configured to determine a first mode based on the first indication information. The first mode is one of multiple data protection modes of the vehicle. The multiple data protection modes of the vehicle include at least two different vehicles. The mode provided by the user, the aforementioned multiple data protection modes are used to restrict access to the aforementioned vehicle data;

A switching unit is used to switch the mode of the vehicle to the first mode.

The aforementioned device further includes a receiving unit configured to receive login information of the user system of the aforementioned vehicle before the determining unit determines the first mode based on the first indication information, where the aforementioned login information includes the identity information of the aforementioned first user;

The aforementioned device further includes a providing unit configured to provide the aforementioned first user with the function usage authority of the aforementioned vehicle based on the aforementioned login information.

In a possible implementation, the aforementioned device further includes a query unit configured to query the driving status of the aforementioned vehicle after the determining unit determines the first mode based on the first indication information;

The switching unit is specifically used to switch the mode of the vehicle to the first mode when the vehicle is in a stopped state.

In a possible implementation, the aforementioned device further includes a first configuration unit configured to configure the aforementioned vehicle before the switching unit switches the mode of the aforementioned vehicle to the aforementioned first mode after the determining unit determines the first mode based on the first indication information. The exit code of the first mode, the aforementioned exit code is a verification code used to exit the aforementioned first mode.

In a possible implementation, the aforementioned device further includes an execution unit for:

In the aforementioned first mode, the ownership of the first user of the aforementioned vehicle is transferred, the authorization rights of the aforementioned first user are transferred, the identity binding of the aforementioned vehicle and the aforementioned first user is released, and the aforementioned vehicle and the aforementioned vehicle are newly owned. Binding the user's identity, or deleting one or more operations of the personal data in the aforementioned vehicle. The aforementioned first user is a user who has no access restrictions to the aforementioned vehicle.

In a possible implementation, the aforementioned device further includes a registration unit configured to register the aforementioned third mode in the user system of the vehicle based on the instruction information input by the first user before the determining unit determines the first mode based on the first instruction information. 2. User’s identity information.

In a possible implementation, the aforementioned device further includes a second configuration unit configured to configure the functions that are allowed and/or prohibited to be used in the first mode based on the second instruction information input by the first user.

In a possible implementation, the aforementioned device further includes a saving unit configured to configure the functions that are allowed and/or prohibited to be used in the first mode based on the second instruction information input by the first user based on the second configuration unit, Based on the third instruction information, the function usage status configured in the aforementioned first mode is saved as the function usage status of the first application scenario; the first application scenario is one of the plurality of application scenarios in the aforementioned first mode, and the aforementioned plurality of Different application scenarios in the application scenario have different usage states of the functions configured in the first mode.

In a possible implementation, the aforementioned device further includes a query unit for querying the function usage status configured in the aforementioned first mode;

The aforementioned device further includes a sending unit for sending a display instruction, and the aforementioned display instruction is used for instructing to display the function usage status configured in the aforementioned first mode.

In a possible implementation, the aforementioned device further includes a starting unit configured to activate a second mode among the plurality of data protection modes upon sensing a preset action on the vehicle; the second mode is used to Instruct the camera of the aforementioned vehicle to capture images around the aforementioned vehicle.

In a possible implementation, the aforementioned device further includes an enabling unit configured to enable a third mode based on the fourth indication information after the switching unit switches the mode of the vehicle to the aforementioned first mode; the aforementioned third mode is used for Detect the status of the passengers in the aforementioned vehicle.

In a possible implementation, the aforementioned enabling unit is also used to enable the fourth mode based on the fifth instruction information after the aforementioned switching unit switches the mode of the aforementioned vehicle to the aforementioned first mode; the aforementioned fourth mode is used to turn off the aforementioned Cameras and/or microphones in the vehicle.

In a fifth aspect, this application provides a terminal device, which includes:

A sending unit, configured to send a first message to the aforementioned vehicle; the aforementioned first message indicates switching the mode of the aforementioned vehicle to the aforementioned first mode;

The receiving unit is configured to receive a first response message; the aforementioned first response message indicates that the mode of the aforementioned vehicle has been switched to the aforementioned first mode.

The aforementioned terminal device further includes a receiving unit configured to receive the login information of the user system of the aforementioned vehicle before the determining unit determines the first mode based on the first indication information, where the aforementioned login information includes the identity information of the aforementioned first user;

The aforementioned terminal device further includes a providing unit configured to provide the aforementioned first user with the function usage authority of the aforementioned vehicle based on the aforementioned login information.

In a possible implementation, the aforementioned terminal device further includes a first configuration unit configured to, after the aforementioned providing unit provides the aforementioned first user with the function usage authority of the aforementioned vehicle based on the aforementioned login information, based on the first user inputted by the aforementioned first user. The second instruction information configures the functions that are allowed and/or prohibited to be used in the first mode.

In a possible implementation, the terminal device further includes a saving unit configured to configure the functions allowed and/or prohibited in the first mode after the first configuration unit configures the functions allowed and/or prohibited in the first mode based on the second instruction information input by the first user. , based on the third instruction information, save the function usage status configured in the first mode as the status of the first application scenario; the first application scenario is one of the multiple application scenarios in the first mode, and the multiple applications Different application scenarios in the scene have different usage states of the functions configured in the first mode.

In a possible implementation, the aforementioned terminal device further includes a query unit for querying the function usage status configured in the aforementioned first mode;

The aforementioned terminal device further includes a display unit for displaying the function usage status configured in the aforementioned first mode.

In a possible implementation, the terminal device further includes a second configuration unit configured to send the sending unit to the vehicle based on the determined first mode after the determining unit determines the first mode based on the first indication information. Before a message, configure the exit code of the aforementioned first mode, and the aforementioned exit code is a verification code used to exit the aforementioned first mode.

In a possible implementation, the aforementioned terminal device further includes a registration unit, configured to register the identity information of the second user in the user system of the aforementioned vehicle based on the instruction information input by the first user, and the aforementioned first user has no knowledge of the aforementioned vehicle. For users with restricted access, the identity information of the second user is used for the second user to use the vehicle in a second mode, and the second mode is one of multiple data protection modes of the vehicle.

In a sixth aspect, this application provides a vehicle access authority control device, which is included in the vehicle and includes:

The receiving unit is configured to receive the first message; the first message indicates switching the mode of the vehicle to the first mode; the first mode is one of the multiple data protection modes of the vehicle; the multiple data protection modes of the vehicle The modes include modes provided for at least two different vehicle users, and the aforementioned multiple data protection modes are used to restrict access to the aforementioned vehicle data;

A switching unit used to switch the mode of the aforementioned vehicle to the aforementioned first mode;

A sending unit, configured to send a first response message; the aforementioned first response message indicates that the mode of the aforementioned vehicle has been switched to the aforementioned first mode.

In a possible implementation, the aforementioned device further includes a query unit configured to query the driving status of the aforementioned vehicle after the aforementioned receiving unit receives the first message;

The aforementioned switching unit is specifically configured to: when the aforementioned vehicle is in a stopped state, switch the mode of the aforementioned vehicle to the aforementioned first mode based on the aforementioned first message.

In a possible implementation, the aforementioned device further includes a query unit, further configured to query the identity information of the user currently logged in to the user system of the aforementioned vehicle after the aforementioned receiving unit receives the first message;

The aforementioned switching unit is specifically used to: switch the mode of the aforementioned vehicle to the aforementioned first mode when the identity information of the aforementioned user is the identity information of the first user, and the aforementioned first user is a user who has no access restrictions on the aforementioned vehicle. .

In a possible implementation, the aforementioned receiving unit is further configured to: receive login information. The aforementioned login information includes the identity information of a second user. The aforementioned second user is a user authorized by the first user to log in to the user system of the aforementioned vehicle. The aforementioned third user One user is a user who has no access restrictions to the aforementioned vehicles;

The aforementioned device further includes a providing unit configured to provide the aforementioned second user with function usage rights in a second mode, where the aforementioned second mode is one of a plurality of data protection modes of the aforementioned vehicle.

In a seventh aspect, the present application provides a vehicle access authority control device, which is included in the vehicle and includes a processor and a memory. The memory is coupled to the processor. When the processor executes the computer program stored in the memory, the vehicle access permission control method described in any one of the above first aspects can be implemented. The device may also include a communication interface for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module or other types of communication interfaces.

In one possible implementation, the device may include:

Memory, used to store computer programs;

A processor configured to determine a first mode based on the first indication information. The first mode is one of a plurality of data protection modes of the vehicle. The plurality of data protection modes of the vehicle include at least two different vehicles. The mode provided by the user, the plurality of data protection modes are used to restrict access to the data of the vehicle; the mode of the vehicle is switched to the first mode.

It should be noted that in this application, the computer program in the memory can be stored in advance or can be downloaded from the Internet and stored when using the device. This application does not specifically limit the source of the computer program in the memory. The coupling in the embodiment of this application is an indirect coupling or connection between devices, units or modules, which may be in electrical, mechanical or other forms, and is used for information interaction between devices, units or modules.

In an eighth aspect, the present application provides a terminal device, which includes a processor and a memory. The memory is coupled to a processor, and when the processor executes the computer program stored in the memory, the vehicle access permission control method described in any one of the above second aspects can be implemented. The device may also include a communication interface, which is used for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module or other types of communication interfaces.

In one possible implementation, the device may include:

Memory, used to store computer programs;

Processor for:

A first mode is determined based on the first indication information. The first mode is one of a plurality of data protection modes of the vehicle. The plurality of data protection modes of the vehicle include modes provided for at least two different vehicle users. , the multiple data protection modes are used to restrict access to the vehicle's data;

Send a first message to the vehicle through the communication interface; the first message indicates switching the mode of the vehicle to the first mode;

A first response message is received through the communication interface; the first response message indicates that the mode of the vehicle has been switched to the first mode.

It should be noted that the computer program in the memory in this application can be stored in advance or downloaded from the Internet when using the device. This application does not specifically limit the source of the computer program in the memory. The coupling in the embodiment of this application is an indirect coupling or connection between devices, units or modules, which may be in electrical, mechanical or other forms, and is used for information interaction between devices, units or modules.

In a ninth aspect, the present application provides a vehicle access authority control device, which is included in the vehicle and includes a processor and a memory. The memory is coupled to the processor, and when the processor executes the computer program stored in the memory, the vehicle access permission control method described in any one of the above third aspects can be implemented. The device may also include a communication interface for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module or other types of communication interfaces.

In one possible implementation, the device may include:

Memory, used to store computer programs;

Processor for:

A first message is received through the communication interface; the first message indicates switching the mode of the vehicle to a first mode; the first mode is one of multiple data protection modes of the vehicle; the multiple data protection modes of the vehicle include The plurality of data protection modes are provided for at least two different modes for vehicle users, and the plurality of data protection modes are used to restrict access to data of the vehicle;

Switch the mode of the vehicle to the first mode;

A first response message is sent through the communication interface; the first response message indicates that the mode of the vehicle has been switched to the first mode.

In a tenth aspect, the present application provides a vehicle, which includes the vehicle access control device described in any one of the fourth aspect, the sixth aspect, the seventh aspect or the ninth aspect.

In an eleventh aspect, the present application provides a computer-readable storage medium that stores a computer program. The computer program is executed by a processor to implement the above-mentioned first aspect or any possible implementation of the first aspect. the method described in the method;

In a twelfth aspect, the present application provides a computer-readable storage medium that stores a computer program. The computer program is executed by a processor to implement the above-mentioned second aspect or any possible implementation of the second aspect. the method described in the method;

In a thirteenth aspect, the present application provides a computer-readable storage medium that stores a computer program. The computer program is executed by a processor to implement the above-mentioned third aspect or any possible implementation of the third aspect. method as described.

In a fourteenth aspect, this application provides a computer program product. When the computer program product is executed by a processor, the method described in the above first aspect or any possible implementation of the first aspect will be executed.

In a fifteenth aspect, this application provides a computer program product. When the computer program product is executed by a processor, the method described in the above second aspect or any possible implementation of the second aspect will be executed.

In a sixteenth aspect, this application provides a computer program product. When the computer program product is executed by a processor, the method described in the above third aspect or any possible implementation manner of the third aspect will be executed.

The solutions provided in the above-mentioned fourth to sixteenth aspects are used to implement or cooperate with the methods provided in the above-mentioned first, second or third aspects, and therefore can be combined with the first, second or third aspects. Corresponding methods in aspects achieve the same or corresponding beneficial effects, and will not be described again here.

Description of the drawings

Figure 1 shows a schematic diagram of an application scenario provided by an embodiment of the present application;

Figure 2 shows a schematic structural diagram of a vehicle control system provided by an embodiment of the present application;

Figure 3 shows a schematic diagram of another application scenario provided by the embodiment of the present application;

Figure 4 shows a schematic flow chart of the method provided by the embodiment of the present application;

Figures 5 to 10 show a schematic diagram of the interaction flow of the method provided by the embodiment of the present application;

Figures 11 to 13 show a schematic diagram of the logical structure of the device provided by the embodiment of the present application;

Figures 14 and 15 show a schematic diagram of the hardware structure of the device provided by the embodiment of the present application.

Detailed ways

The drawings needed to be used in the embodiments of this application will be introduced below.

Referring to Figure 1, a schematic diagram of an application scenario of an example of this application is schematically shown. In this application scenario, the vehicle 100 can perform human-computer interaction with the user 110 . For example, the vehicle 100 can perform human-computer interaction with the user 110 through a human-computer interaction device such as the display screen 102 or the microphone 105 . In addition to the display screen 102 and the microphone 105, the vehicle 100 also includes a vehicle control system 101, a memory 103, a camera 104, etc.

The above-mentioned vehicle control system 101 is the computing system of the vehicle 100 and is also the control center of the vehicle 100 .

For example, see Figure 2 . The vehicle control system 101 may include a vehicle mode management module 1011, a rights management module 1012 and a user system 1013. Among them, the vehicle mode management module 1011 can be used to manage the status of the vehicle 100 and various components in the vehicle 100 . The rights management module 1012 is used to manage the function rights available to the user of the vehicle. The user system 1013 is used to manage the user information of the vehicle, such as managing the user's identity information, etc.

In a possible embodiment, the above-mentioned vehicle mode management module 1011, authority management module 1012 and user system 1013 can be deployed on the processing unit of the vehicle 100. For example, the vehicle mode management module 1011, the authority management module 1012 and the user system 1013 can be deployed on the same processing unit. Or, for example, the vehicle mode management module 1011, the authority management module 1012 and the user system 1013 can be deployed on different processing units respectively. This application does not limit the specific deployment of the vehicle mode management module 1011, the authority management module 1012 and the user system 1013.

The above-mentioned display screen 102 is used to display an operable user interface. Human-computer interaction between the vehicle 100 and the user 110 can be realized through the display screen 102 . The display screen 102 may be a physical display screen or may be a virtual display screen.

The above-mentioned memory 103 may be used to store user information of the vehicle 100 and functional status information of various configurations, etc. For the functional status information of this configuration, please refer to the subsequent introduction, and will not be detailed here.

The above-mentioned cameras 104 may include cameras inside the vehicle 100 and cameras outside the vehicle 100 . Among them, the camera inside the vehicle 100 can be used to collect image information inside the vehicle 100 . For example, facial images in the vehicle 100 and so on can be collected. The camera outside the vehicle 100 may be used to collect image information outside the vehicle 100 . For example, images of the environment surrounding the vehicle 100 may be collected, and so on.

The above-mentioned microphone 105 can be used to receive voice information of the user 110 and so on. Human-computer interaction between the vehicle 100 and the user 110 can also be realized by receiving the voice information of the user 110 through the microphone 105 .

Referring to Figure 3, another schematic diagram of an application scenario of an example of the present application is schematically shown. In the application scenario shown in FIG. 3 , the user 110 can control the vehicle 100 through the terminal device 120 . Specifically, the terminal device 120 can communicate with the vehicle 100 . For example, the terminal device 120 may communicate with the vehicle 100 through a cloud server. Then, the user 110 can perform human-computer interaction with the terminal device 120 and send messages to the vehicle 100 through the terminal device 120 to control the vehicle 100 . For example, the user 110 can perform human-computer interaction with the terminal device 120 through a user interface or voice function provided by the terminal device 120 .

For example, the above-mentioned terminal device may include but is not limited to any electronic product based on an intelligent operating system, which can perform human-computer interaction with the user through input devices such as keyboards, virtual keyboards, touch pads, touch screens, and voice control devices. Such as smartphones, tablets, handheld computers or wearable electronic devices (such as smart bracelets or smart watches, etc.). The embodiments of this application do not limit the specific form of the terminal device.

For the above application scenarios of Figure 1 and Figure 3, the users 110 may include a variety of different users. For example, it includes the car owner, the car owner's family members, the car owner's relatives and friends, car rental personnel, car loaners, driving personnel or maintenance personnel, etc. Among them, the vehicle owner refers to the owner of the vehicle 100 . A car rental person refers to a person who rents a vehicle 100. The person who borrows the car refers to the person who borrows the vehicle 100. The driver refers to the person who drives the vehicle 100 on his behalf. Maintenance personnel refers to people who maintain vehicles 100.

Based on the above description, in specific car use scenarios, there will be various users using the vehicle. There is personal data of users such as car owners or their family members on the vehicle. If the personal data in the vehicle is not protected, it will easily lead to the leakage of personal data. To this end, embodiments of this application provide a vehicle access permission control method to protect the personal data of various stakeholders such as car owners, family members, relatives and friends, driving personnel, passengers in the vehicle, and pedestrians outside the vehicle.

In a possible embodiment, the execution subject of the vehicle access permission control method provided by the embodiment of the present application is the vehicle control system in the vehicle. In this case, the vehicle-machine control system receives the user's instructions through human-computer interaction, and then implements the vehicle access permission control method based on the received instructions. In another possible embodiment, the vehicle access permission control method provided by the embodiment of the present application can be implemented through interactive communication between the terminal device and the vehicle. They are introduced below.

First, the specific process of the vehicle-machine control system receiving user instructions through human-computer interaction and then implementing the vehicle access permission control method based on the received instructions is introduced. For ease of description, subsequent operations performed by the vehicle's on-board control system may be described as being performed by the vehicle. Referring to Figure 4, the vehicle access permission control method provided by the embodiment of the present application includes but is not limited to the following steps:

S401. Determine a first mode based on the first indication information. The first mode is one of multiple data protection modes of the vehicle. The multiple data protection modes of the vehicle include data protection for at least two different vehicle users. Modes, multiple data protection modes used to restrict access to the vehicle's data.

S402. Switch the mode of the vehicle to the first mode.

In a specific implementation, the above-mentioned multiple data protection modes may include a car owner mode, a family and friends mode, a valet mode, a maintenance mode, a second-hand car transaction mode, an outside-car shooting prompt mode, a first passenger protection mode or a second passenger protection mode. At least two modes. It should be noted that the names of the multiple data protection modes are not limited to the names described in the embodiments of this application. The embodiments of this application do not limit the names of each of the multiple data protection modes, as long as the embodiments of this application are implemented. The described functional modes are all within the protection scope of the embodiments of this application.

The above-mentioned car owner mode may be a usage mode provided by the vehicle for the first user. The first user may be the vehicle owner or a person authorized by the vehicle owner to manage the vehicle. The first user is a user who has no access restrictions to the vehicle. For example, in a specific implementation, after the vehicle receives the login information input by the first user, it logs in to the user system of the vehicle based on the login information and activates the car owner mode. The login information includes the first user's identity information. The identity information is, for example, the user's face image information, fingerprint information, preset voice information, car owner's password, or a username and password customized to be registered to the user's system, etc. That is, the first user can input login information through face recognition, fingerprint recognition, voice recognition, car owner password, or user name and password. In the method of inputting login information through face recognition, the face image of the first user collected by the vehicle camera is the login information input by the first user. In the method of inputting login information through fingerprint recognition, the fingerprint information of the first user collected by the fingerprint collector of the vehicle is the login information input by the first user. In the method of inputting login information through voice recognition, the preset voice information of the first user collected by the vehicle's microphone is the login information input by the first user. In the method in which the vehicle owner inputs login information with a password, the password input by the first user received by the vehicle through the display screen is the login information input by the first user. For example, the vehicle owner password may be any number of numbers, letters, or special symbols, or may be a string of any number of numbers, a combination of at least two of numbers, letters, or special symbols. After the vehicle receives the login information input by the first user and verifies the information, the vehicle owner mode can be enabled. In this car owner mode, the vehicle can provide complete functional permissions to the first user. This car owner mode can automatically exit after the vehicle is turned off.

In a possible embodiment, in the above description of the car owner mode, the instruction information input by the first user may be the first instruction information in the above step S401, and the above first mode is the car owner mode.

The above-mentioned friends and family mode may be a usage mode provided by the vehicle for the second user. The second user can be the car owner's family member, full-time driver, relative or friend, etc. For example, in the friends and family mode, the vehicle provides the same function usage rights as the above-mentioned car owner mode by default.

In specific implementation, the above-mentioned second user can independently enter the vehicle's friends and family mode with the authorization of the above-mentioned first user. For example, the vehicle receives the instruction information input by the first user in the above-mentioned vehicle owner mode. The identity information of the second user is received based on the indication information, and then the received identity information of the second user is registered to the user system. This allows the second user to log in to the vehicle's user system based on the registered identity information, and then enter the vehicle's family and friends mode.

The identity information of the second user is, for example, the second user's face image information, fingerprint information, preset voice information, user password, or customized user name and password. For example, if the identity information of the second user registered in the user system is face image information, then the vehicle receiving the identity information of the second user may collect the face image of the second user through a camera. For example, if the identity information of the second user registered in the user system is fingerprint information, then the identity information of the second user received by the vehicle may be the fingerprint information of the second user collected by a fingerprint collector. For example, if the identity information of the second user registered in the user system is preset voice information, then the identity information of the second user received by the vehicle may be the preset voice information of the second user collected through the microphone of the vehicle. . For example, if the identity information of the second user registered in the user system is a user password, then the identity information of the second user received by the vehicle may be the user password received through the display screen. The user password may be, for example, any number of numbers, letters or special symbols, or it may be a string of any number of numbers, a combination of at least two of numbers, letters or special symbols. For example, if the identity information of the second user registered in the user system is a customized user name and password, then the identity information of the second user received by the vehicle may be the customized user name and password received through the display screen. password.

After the vehicle completes the registration of the identity information of the second user, it may receive login information input by the second user to log in to the vehicle user system, where the login information includes the identity information of the second user. After the vehicle verifies the login information, it locks the family and friends mode based on the login information, and then switches the vehicle's mode to the family and friends mode.

In a possible embodiment, in the above description of the family and friends mode, the family and friends mode may be the first mode in the above step S401. The login information input by the second user to log in to the vehicle user system is the first information in step S401.

In a possible embodiment, after the vehicle enters the friends and family mode based on the second user's login information, the second user's personal data on the vehicle can be deleted or the second user's personal data in the user system can be logged out based on the second user's instructions. User Info.

In a possible embodiment, when the vehicle is in the above-mentioned car owner mode, it can query the usage status of functions configured in the friends and family mode. That is, query whether the usage status of each function in the friends and family mode is allowed or prohibited. In specific implementation, it can be queried by the vehicle control system. After querying the corresponding function usage status, the vehicle control system can send a display instruction to the vehicle's display screen, instructing the display screen to display the query function usage status.

For example, when the vehicle is in the above-mentioned vehicle owner mode, it receives the instruction information input by the first user to select the family and friends mode. Based on this indication, the vehicle can lock the Friends and Family mode among its multiple data protection modes. Then query the usage status of the functions configured in the friends and family mode.

In a possible implementation, the above instruction information for selecting the friends and family mode may be input by the first user through the display screen of the vehicle. For example, the user interface displayed on the vehicle's display screen may include controls indicating the friends and family mode. The vehicle senses the first user's click operation on the control through the user interface, and can generate the above instruction information for selecting the friends and family mode based on the click operation.

In a possible implementation, the above instruction information for selecting the friends and family mode may be input by the first user through a microphone of the vehicle. Exemplarily, the vehicle receives the voice information input by the first user through the microphone, and the voice information indicates selecting the above-mentioned friends and family mode. For example, the content of the voice message may be "Friends and Relatives Mode", "Switch to Relatives and Friends Mode", or "Go to Relatives and Friends Mode", etc. The embodiment of the present application does not limit the specific input voice content.

In one possible embodiment, the vehicle can receive instruction information from the first user through human-computer interaction to customize the functions that are allowed and/or prohibited in the friends and family mode.

In one possible implementation, through custom configuration, the vehicle can allow or prohibit the use of one or more APPs on the vehicle. For example, opening the one or more APPs through an APP icon displayed on the vehicle's display screen may be allowed or prohibited. For example, the vehicle can display the function switch control of the APP on the display screen, and receive instruction information to allow or prohibit the use of the APP by sensing the first user's click operation on the function switch control of the APP. Or, for example, the vehicle can receive the voice information input by the first user through the microphone to allow or prohibit the use of a certain APP, and then turn on and off the use function of the certain APP based on the voice information.

In one possible implementation, through custom configuration, the vehicle can allow or prohibit the use of controllable private physical spaces such as the glove box, front trunk, or trunk in the vehicle. For example, the vehicle can display the function switch control of a controllable private physical space such as the glove box, front trunk or trunk on the display screen, and receive the information by sensing the first user's click operation on the function switch control of the private physical space. Instructions for permitting or prohibiting use of the private physical space. Or, for example, the vehicle can receive the voice information input by the first user through the microphone to allow or prohibit the use of a certain private physical space, and then turn on and off the use function of the certain private physical space based on the voice information.

In one possible implementation, through custom configuration, the maximum speed of the vehicle can be limited and/or the geographical range in which the vehicle can travel can be limited. The vehicle can issue a warning if the restricted maximum speed is exceeded or the travelable geographical range is exceeded. For example, the vehicle may display a selectable maximum speed (or geographical range) on the display screen, and after sensing the first user's selection operation on a displayed maximum speed (or geographical range), the vehicle will display the selected maximum speed (or geographical range). A certain maximum speed (or geographical range) is set as the maximum speed (or geographical range within which the vehicle can travel) in Friends and Family mode. Or, for example, the vehicle may receive any top speed (or geographical range) input by the first user through the display screen or microphone, and then set the input top speed (or geographical range) as the top speed in the friends and family mode. (or the geographical range within which the vehicle can travel).

It should be noted that the above customized configuration is only an example. The specific implementation may also include customized configuration of other function usage rights. This application does not limit the functions of customized configuration in the friends and family mode.

Although the vehicle in the family and friends mode defaults to the same function usage rights as the above-mentioned owner mode, in the embodiment of the present application, the vehicle can flexibly reconfigure the function usage status in the family and friends mode based on the user's instructions, which can realize the configuration requirements of different scenarios. , to achieve data protection in different car usage scenarios.

In a possible embodiment, the above-mentioned application scenarios of the family and friends mode may include multiple application scenarios. For example, the application scenarios of the family and friends mode may include application scenarios for family members, application scenarios for full-time drivers, or application scenarios for relatives and friends, etc. For family member application scenarios, the person using the vehicle is the above-mentioned family member. For the full-time driver application scenario, the person using the vehicle is the above-mentioned full-time driver. For the relative and friend application scenario, the person using the vehicle is the above-mentioned relative and friend. Different people use the vehicle in different application scenarios, so different function usage states can be set in the family and friends mode of different application scenarios. For example, take the application scenario of full-time drivers and the application scenario of relatives and friends. In the full-time driver application scenario, the maximum speed of the vehicle can be opened, that is, the driving speed of the vehicle is not limited. In the application scenario of relatives and friends, the maximum speed of the vehicle can be limited. This is only an example and does not constitute a limitation on the embodiments of the present application. The embodiments of this application do not limit the specific function usage status in the family and friends mode in different application scenarios.

Based on the above description, the application scenarios of the above-mentioned family and friend mode may include multiple. Then, after the customized configuration of the friends and family mode in an application scenario is completed, the configured function usage status can be saved as the function usage status of the certain application scenario. The next time you use it, you can directly reuse the family and friends mode of a certain application scenario without reconfiguring it, so you can quickly switch to the family and friends mode of the corresponding scene.

In a possible implementation, after the vehicle completes the custom configuration of the functions allowed and/or prohibited in the friends and family mode through the first user's instruction information, the configured functions can be configured based on additional instruction information from the first user. The usage status is saved as the function usage status of one of the above multiple application scenarios. The additional instruction information may be, for example, selection information for a certain application scenario. For example, after the vehicle completes the custom function configuration of the family and friends mode, based on the saving instructions input by the first user, the selection controls of the multiple application scenarios are displayed on the display screen. Then, the vehicle senses the first user's click operation on the selection control of the certain application scenario, and can generate selection information for the certain application scenario based on the click operation. Thus, the configured function usage status is saved as the function usage status of a certain application scenario based on the selection information.

In one possible implementation, in the above-mentioned friends and family mode, for prohibited APPs, their icons are not visible on the vehicle's display screen, or the icons turn gray. For prohibited functions, the function controls may not be displayed or turn gray on the vehicle's display screen.

In one possible implementation, in the above-mentioned car owner mode, the vehicle cannot provide the second user's personal data based on the first user's instruction information. That is, the first user cannot view the personal data of the second user on the vehicle.

In one possible implementation, in the above-mentioned car owner mode, the vehicle can delete the second user's information in the user system and delete the second user's personal data in the vehicle based on the first user's instruction information.

In order to facilitate understanding of the specific implementation process related to the above-mentioned family and friends mode, see Figure 5 for example. Figure 5 takes the human-computer interaction between the vehicle's display screen and the user as an example. The vehicle mode management module, authority management module and user system belong to the functional modules in the vehicle's vehicle control system. The specific functions of these functional modules can be found in the aforementioned description of Figure 2 and will not be described again here.

As shown in Figure 5, the first user can input login information through the display screen. The login information can be, for example, the car owner's password, or the first user's username and password. The display sends the received login information to the user system. The user system verifies the received login information. When the verification is successful, the vehicle enters the owner mode, and the display screen can display the user interface of the owner mode.

In the user interface of the car owner mode, the display screen can receive the first instruction information input by the first user. For example, the first user's operation of inputting the first indication information may be performed as a click operation on a certain control in the displayed user interface. The subsequent operation of the user inputting instruction information is the same and will not be described again. The first indication information indicates receiving the identity information of the second user. The display screen receives the identity information of the second user. The identity information may be, for example, the user password of the second user, or the user name and password customized by the second user, etc. Then, the display screen sends the received identity information of the second user to the user system. The user system saves the identity information of the second user and completes the registration of the information. After completing the registration, the second user can log in to the user system based on the registered identity information and obtain the functional permissions of the friends and relatives mode.

In a possible implementation, in the user interface in the car owner mode, the display screen can receive the second instruction information input by the first user. The second instruction information indicates entering the family and friend mode configuration menu. After receiving the second indication information, the display screen may first send a query message to the rights management module to query the usage status of functions configured in the friends and family mode.

In one possible implementation, after receiving the above query message, the rights management module queries the user system for the identity of the currently logged in user. The user system feeds back the queried identity information of the currently logged-in user to the authority management module.

Then, the rights management module can determine whether the logged-in user is the first user based on the identity information of the currently logged-in user. When the currently logged-in user is the first user, the rights management module sends the function usage status configured in the friends and family mode to the display screen. The display shows the usage status of functions configured in Friends and Family mode.

In a possible implementation, after the above-mentioned display screen displays the function usage status configured in the friends and family mode, the display screen can also receive third instruction information input by the first user. The third indication information indicates configuring the usage status of one or more functions. For example, the third indication information may indicate whether to allow or prohibit the use of the one or more functions. The one or more functions may be a private physical space usage function or a vehicle maximum speed limiting function, etc., which are not limited in the embodiments of the present application. After receiving the above third indication information, the display screen sends a configuration indication of the usage status of the one or more functions to the rights management module. The rights management module saves the configuration of the usage status of the one or more functions, and feeds back the result of successful configuration to the display screen to display to the first user. In the embodiment of this application, the first user can customize the function usage status in the friends and family mode, which can realize flexible configuration requirements in different scenarios and realize data protection in different car usage scenarios.

In the above Figure 5, after the vehicle exits the above-mentioned car owner mode, or the vehicle receives an instruction to switch the logged-in user, the second user can enter the login information through the display screen, and the login information is the user password of the above-mentioned registered second user, or The username and password of the second user. The display sends the received login information to the user system. The user system verifies the received login information. When it is verified that the login information is the identity information of the second user, the user system sends instruction information for enabling the friends and family mode to the rights management module. The authority management module enables the family and friends mode based on the instruction information, and the vehicle enters the family and friends mode. Optionally, the rights management module feeds back the result of successfully enabling the friends and family mode to the display screen to display to the second user.

It should be noted that the above process shown in Figure 5 is only an example and does not constitute a limitation on the embodiments of the present application.

The above-mentioned valet mode may be a usage mode provided by the vehicle for third users. The third user may be, for example, an external person such as a car loaner, a car rental person, or a driving agent. In valet mode, the vehicle hides the owner's personal data by default and disables features involving the owner's privacy.

Illustratively, the above-mentioned personal data includes, for example, the car owner's identity information, historical navigation information, historical call records, video or sound data in the car, application (APP) data used privately by the car owner, the car owner's private configuration information or the car owner's private download to Local data, etc.

Illustratively, the above-mentioned functions related to the car owner's personal information include, for example, the usage functions of the car owner's private APP (such as instant messaging and other APPs) or smart cockpit functions related to the interaction of the car owner's personal information (such as face recognition, fingerprint recognition, voice control or fatigue driving). monitoring and other functions) etc.

The above-mentioned valet mode is actively turned on by the above-mentioned first user. In specific implementation, the vehicle receives instruction information input by the first user in the above-mentioned vehicle owner mode. The vehicle determines the valet mode based on the indication information, and then switches the vehicle's mode from the owner mode to the valet mode. For example, the instruction information input by the first user may be instruction information for selecting the valet mode. Based on the indication information, the vehicle can lock the valet mode in its multiple data protection modes, and then switch the vehicle's mode from the owner mode to the valet mode.

In a possible implementation, the above instruction information for selecting the valet mode may be input by the first user through a display screen of the vehicle. For example, a user interface displayed on a display screen of the vehicle may include controls indicating the valet mode. The vehicle senses the first user's click operation on the control through the user interface, and can generate the above instruction information for selecting the valet mode based on the click operation.

In a possible implementation, the above instruction information for selecting the valet mode may be input by the first user through a microphone of the vehicle. Exemplarily, the vehicle receives voice information input by the first user through a microphone, and the voice information indicates selecting the above-mentioned valet mode. For example, the content of the voice message may be "valet mode", "switch to valet mode" or "turn to valet mode" and so on. The embodiment of the present application does not limit the specific input voice content.

In a possible embodiment, in the above description of the valet mode, the valet mode may be the first mode in the above step S401. The above instruction information for selecting the valet mode is the first information in the above step S401.

In a possible embodiment, the third user can independently enter the valet mode of the vehicle with the authorization of the first user. For specific implementation, reference can be made to the above description of the second user autonomously entering the vehicle's friends and family mode with the authorization of the first user, which will not be described again here.

In a possible embodiment, after the vehicle determines the valet mode based on the instruction information input by the first user, it may first check the current driving status of the vehicle. If the vehicle is in a stopped state, the mode of the vehicle can be switched from the owner mode to the valet mode. If the vehicle is in a driving state, mode switching is not performed and the first user can be notified. In the embodiment of this application, mode switching can only be performed in the parking state to ensure the safety of the vehicle and the user. And it can avoid safety hazards caused by mode switching due to misoperation.

In the above valet mode, the vehicle exits the valet mode through the preset exit method. The preset exit method is to exit the valet mode upon receiving a preset exit code. The exit code is the verification code to exit the valet mode. The vehicle can set and save this exit code before entering valet mode. For example, the exit code can be any number of numbers, letters, or special symbols; or the exit code can be any combination of numbers, letters, or special symbols, and so on. The embodiment of this application does not limit the specific form of the exit code. In addition to the preset exit mode, the valet mode cannot be exited by other methods such as turning off the vehicle, powering off the vehicle, or operating the vehicle's display screen. This ensures that when the above-mentioned third user uses the vehicle, the personal data of the owner and other users in the vehicle cannot be viewed, thereby protecting the personal data of the vehicle user.

In a possible embodiment, after determining the valet mode, the vehicle may query the function usage status configured in the valet mode. That is to query whether the usage status of each function in the valet mode is allowed or prohibited. In specific implementation, it can be queried by the vehicle control system. After querying the corresponding function usage status, the vehicle control system can send a display instruction to the vehicle's display screen, instructing the display screen to display the query function usage status.

In one possible implementation, after the vehicle determines the valet mode, the vehicle may query the function usage status configured in the valet mode after receiving the query instruction information from the first user. For example, the user interface displayed on the vehicle's display screen may include a query control for querying the usage status of functions configured in the valet mode. The vehicle senses the first user's click operation on the query control through the user interface, and can generate the above query instruction information based on the click operation. Or, for example, the vehicle receives the query voice information input by the first user through the microphone, and the query voice information indicates querying the function usage status configured in the valet mode. For example, the content of the query voice information may be "function usage status of valet mode", "function configuration of valet mode" or "configuration of valet mode", etc. The embodiment of the present application does not limit the specific input query voice content.

In one possible embodiment, the vehicle can receive instruction information from the first user through human-computer interaction to customize the functions allowed and/or prohibited in the valet mode.

In one possible implementation, through custom configuration, the maximum speed of the vehicle can be limited and/or the geographical range in which the vehicle can travel can be limited. The vehicle can issue a warning if the restricted maximum speed is exceeded or the travelable geographical range is exceeded. For example, the vehicle may display a selectable maximum speed (or geographical range) on the display screen, and after sensing the first user's selection operation on a displayed maximum speed (or geographical range), the vehicle will display the selected maximum speed (or geographical range). A certain maximum speed (or geographical range) is set to the maximum speed (or geographical range within which the vehicle can travel) in valet mode. Alternatively, for example, the vehicle may receive any top speed (or geographical range) input by the first user through the display screen or microphone, and then set the input top speed (or geographical range) to the highest speed in the valet mode. speed (or the geographical range within which the vehicle can travel).

It should be noted that the above customized configuration is only an example. The specific implementation may also include customized configuration of other function usage rights. This application does not limit the functions of customized configuration in the valet mode.

Although the vehicle hides the owner's personal data and disables the owner's private functions by default in the valet mode, in the embodiment of the present application, the vehicle can flexibly reconfigure the function usage status in the valet mode based on the user's instructions, which can achieve different Scenario configuration requirements to achieve data protection in different car usage scenarios.

In a possible embodiment, the above-mentioned application scenarios of the valet mode may include multiple application scenarios. For example, the application scenarios of the valet mode may include a car loan application scenario, a car rental application scenario, a driving application scenario, and so on. For the car borrowing application scenario, the person using the vehicle is the person borrowing the car mentioned above. For car rental application scenarios, the person using the vehicle is the above-mentioned car rental person. In the driver application scenario, the person using the vehicle is the driver mentioned above. Different people use the vehicle in different application scenarios, so different function usage states can be set in the valet mode of different application scenarios. For example, take the car rental application scenario and the driving application scenario as examples. In the car rental application scenario, the geographical range where the vehicle can travel can be opened, that is, the geographical range where the vehicle can travel is not restricted. In the driving application scenario, the driving range of the vehicle can be limited. This is only an example and does not constitute a limitation on the embodiments of the present application. The embodiments of this application do not limit the specific function usage status in the valet mode in different application scenarios.

Based on the above description, the application scenarios of the above-mentioned valet mode may include multiple. Then, after the custom configuration of the valet mode in a certain application scenario is completed, the configured function usage status can be saved as the function usage status of the certain application scenario. The next time you use it, you can directly reuse the valet mode of a certain application scenario without reconfiguring it, so you can quickly switch to the valet mode of the corresponding scenario.

In one possible implementation, after the vehicle completes the custom configuration of the functions allowed and/or prohibited in the valet mode through the first user's instruction information, the configured vehicle can be configured based on additional instruction information from the first user. The function usage status is saved as the function usage status of one of the above multiple application scenarios. The additional instruction information may be, for example, selection information for a certain application scenario. For example, after the vehicle completes the custom function configuration of the valet mode, based on the saving instruction input by the first user, the selection controls of the multiple application scenarios are displayed on the display screen. Then, the vehicle senses the first user's click operation on the selection control of the certain application scenario, and can generate selection information for the certain application scenario based on the click operation. Thus, the configured function usage status is saved as the function usage status of a certain application scenario based on the selection information.

In a possible implementation, in the above-mentioned valet mode, for prohibited APPs, their icons are not visible on the vehicle's display screen, or the icons turn gray. For prohibited functions, the function controls may not be displayed or turn gray on the vehicle's display screen.

In a possible implementation, in order to protect the data of the above-mentioned third user, the personal data of the third user is not collected in the valet mode.

In order to facilitate understanding of the specific implementation process related to the above-mentioned valet mode, please refer to Figure 6 as an example. Figure 6 takes the human-computer interaction between the vehicle's display screen and the first user as an example. The vehicle mode management module, authority management module and user system belong to the functional modules in the vehicle's vehicle control system. The specific functions of these functional modules can be found in the aforementioned description of Figure 2 and will not be described again here.

As shown in Figure 6, the first user can input login information through the display screen. The login information can be, for example, the car owner's password, or the first user's username and password. The display sends the received login information to the user system. The user system verifies the received login information. When the verification is successful, the vehicle enters the owner mode, and the display screen can display the user interface of the owner mode.

In the user interface of the car owner mode, the display screen can receive the instruction information A input by the first user. The indication information A indicates to display the above multiple data protection modes. Then, the multiple data protection modes can be displayed on the user interface of the display screen. For example, the first user's operation of inputting the indication information A may be a click operation on a certain control in the displayed user interface. The subsequent operation of the first user inputting the instruction information is the same and will not be described again.

Then, in the user interface displaying multiple data protection modes, the display screen may receive the indication information B input by the first user. The instruction information B indicates entering the valet mode configuration menu. After receiving the indication information B, the display screen can first send a query message to the rights management module to query the usage status of the functions configured in the valet mode.

In a possible implementation, the display screen does not need to display a user interface including the above multiple data protection modes. Specifically, after the above-mentioned display screen displays the user interface of the car owner mode, the vehicle can receive the voice instruction information to enter the valet mode configuration menu through the microphone. After receiving the voice instruction information, the vehicle mode management module can send a query message to the authority management module to query the usage status of functions configured in the valet mode.

In one possible implementation, after receiving the above query message, the authority management module queries the vehicle mode management module for the current driving status of the vehicle. The vehicle mode management module feeds back the queried current driving status to the authority management module.

In one possible implementation, after receiving the above query message, the rights management module queries the user system for the identity of the currently logged in user. The user system feeds back the queried identity information of the currently logged-in user to the rights management module.

Then, the authority management module can determine whether the current driving state of the vehicle is in a stopped state based on the current driving state of the vehicle, and/or determine whether the logged-in user is the first user based on the identity information of the currently logged-in user. When the current driving state of the vehicle is in a stopped state and/or the currently logged-in user is the first user, the authority management module sends the function usage status configured in the valet mode to the display screen. The display shows the usage status of the functions configured in Valet mode.

In the above user interface for displaying the function usage status configured in the valet mode, the display screen can receive the instruction information C input by the first user. The indication information C indicates that the valet mode is enabled. The display screen sends an instruction message for enabling the valet mode to the rights management module based on the instruction information C.

After receiving the instruction message to enable the valet mode, the authority management module can first determine whether the exit code of the valet mode has been set. For example, you can query whether there is an exit code stored in your own memory, or query the cloud server whether an exit code has been set, etc. The embodiments of this application do not limit the specific method of determining whether an exit code is set. When the exit code is not set, the authority management module sends an instruction message for setting the exit code to the display screen. The display screen displays information instructing the first user to set the exit code, and receives the exit code input by the first user. The display screen sends the exit code to the rights management module. The authority management module sets the received exit code to the exit code of the valet mode, and synchronizes the exit code to the cloud server. Then, the authority management module enables the valet mode, and feeds back the result of successfully enabling the valet mode to the display screen to display to the first user.

In a possible implementation, when the above authority management module determines that the exit code of the valet mode is not set, it can randomly set an exit code of the valet mode and save it, and then send the set exit code to the display screen is displayed to the user.

In a possible implementation, the exit code of the above-mentioned valet mode can be reset. For example, the vehicle can receive the exit code newly input by the first user through the display screen, and then the permission management module replaces the original exit code with the newly entered exit code and saves it, thereby resetting the exit code.

In a possible implementation, see FIG. 7 for example. After the above display screen displays the function usage status configured in the valet mode, the display screen can also receive instruction information D input by the first user. The indication information D indicates configuring the usage status of one or more functions. For example, the indication information D may indicate whether to allow or prohibit the use of the one or more functions. The one or more functions may be a private physical space usage function or a vehicle maximum speed limiting function, etc., which are not limited in the embodiments of the present application.

After receiving the above indication information D, the display screen sends a configuration indication of the usage status of the one or more functions to the rights management module. The rights management module saves the configuration of the usage status of the one or more functions, and feeds back the result of successful configuration to the display screen to display to the first user. In the embodiment of this application, the first user can customize the function usage status in the valet mode, which can realize flexible configuration requirements in different scenarios and realize data protection in different car usage scenarios.

It should be noted that the above-mentioned processes shown in Figures 6 and 7 are only an example and do not constitute a limitation on the embodiments of the present application.

The above-mentioned maintenance mode may be a usage mode provided by the vehicle for the fourth user. The fourth user may be a maintenance personnel or the like. In this maintenance mode, the above-mentioned personal data of the vehicle is encrypted and isolated and cannot be accessed or copied through external devices. That is, maintenance personnel cannot access the personal data of car owners and other users. For example, the isolation of personal data can be achieved by separately storing personal data, supporting the encryption of personal data in maintenance mode, and changing the business involving personal data to an unauthorized access state. After exiting the maintenance mode, the vehicle automatically decrypts personal data and restores the historical authorization of the personal data business.

The above-mentioned maintenance mode is actively turned on by the above-mentioned first user. In specific implementation, the vehicle receives instruction information input by the first user in the above-mentioned vehicle owner mode. The vehicle determines the maintenance mode based on the indication information, and then switches the vehicle's mode from the owner mode to the maintenance mode. For example, the instruction information input by the first user may be instruction information for selecting the maintenance mode. Based on the indication information, the vehicle can lock the maintenance mode in its multiple data protection modes, and then switch the vehicle's mode from the owner mode to the maintenance mode.

In a possible implementation, the above instruction information for selecting the maintenance mode may be input by the first user through a display screen of the vehicle. For example, the user interface displayed on the vehicle's display screen may include controls indicating the maintenance mode. The vehicle senses the first user's click operation on the control through the user interface, and can generate the above instruction information for selecting the maintenance mode based on the click operation.

In a possible implementation, the instruction information for selecting the maintenance mode may be input by the first user through a microphone of the vehicle. Exemplarily, the vehicle receives voice information input by the first user through a microphone, and the voice information indicates selecting the above-mentioned maintenance mode. For example, the content of the voice message may be "maintenance mode", "switch to maintenance mode" or "go to maintenance mode" and so on. The embodiment of the present application does not limit the specific input voice content.

In a possible embodiment, in the above description of the maintenance mode, the maintenance mode may be the first mode in the above step S401. The above instruction information for selecting the maintenance mode is the first information in the above step S401.

In a possible embodiment, after the vehicle determines the maintenance mode based on the instruction information input by the first user, the vehicle may first check the current driving status of the vehicle. If the vehicle is in a stopped state, the mode of the vehicle can be switched from the owner mode to the maintenance mode. If the vehicle is in a driving state, mode switching is not performed and the first user can be notified. In the embodiment of this application, mode switching can only be performed in the parking state to ensure the safety of the vehicle and the user. And it can avoid safety hazards caused by mode switching due to misoperation.

In the above maintenance mode, the vehicle exits the maintenance mode through the preset exit method. The preset exit method is to exit the maintenance mode upon receiving a preset exit code. For specific implementation, please refer to the above description on exiting the valet mode, and will not be described in detail here.

In a possible embodiment, after determining the maintenance mode, the vehicle can query the function usage status configured in the maintenance mode. For specific implementation, please refer to the above description about querying the function usage status configured in the valet mode, and will not be described in detail here.

In one possible embodiment, the vehicle can receive instruction information from the first user through human-computer interaction to customize the functions allowed and/or prohibited in the maintenance mode. For specific implementation, please refer to the above description of the custom configuration of function usage status in valet mode, which will not be described here.

In a possible embodiment, for the specific implementation process related to the above-mentioned maintenance mode, reference may be made to the description related to the valet mode shown in FIG. 6 or FIG. 7 , and will not be described again here.

In order to facilitate understanding of the usage process of the above-mentioned maintenance mode, reference may be made to FIG. 8 as an example. Figure 8 shows the process of human-computer interaction between the first user and the fourth user respectively. In specific implementation, in the vehicle owner mode, the vehicle receives the first instruction information input by the first user. The first instruction information is used to instruct switching to the maintenance mode. For example, the first indication information may be indication information received through a display screen or a microphone. In one possible implementation, the vehicle may instruct the user to further confirm whether to enter maintenance mode. For example, the information requiring further confirmation can be displayed through the display screen or further confirmed through voice prompts. Then, the vehicle receives information input by the first user confirming entering the maintenance mode. Based on this confirmation information, the vehicle activates service mode and displays the service mode menu on the display. Then, the fourth user, that is, the maintenance personnel, performs maintenance on the vehicle based on the menu in the maintenance mode. After the maintenance is completed, the vehicle receives instruction information to exit the maintenance mode input by the first user, such as receiving a preset exit code. Based on this indication information, the vehicle exits maintenance mode and switches the vehicle's mode back to owner mode. It should be noted that the process shown in Figure 8 is only an example and does not constitute a limitation on the embodiments of the present application.

The above-mentioned second-hand car transaction model can be used in the scenario of vehicle handover during the second-hand car transaction process. In the second-hand car transaction mode, the vehicle can transfer the ownership of the first user of the vehicle, transfer the authorization rights of the first user, unbind the identity of the vehicle and the first user, and transfer the new ownership of the vehicle to the vehicle. Bind the user’s identity or delete one or more of the personal data in the vehicle. Optionally, the vehicle can also be restored to factory settings.

The above-mentioned second-hand car trading mode is actively started by the above-mentioned first user. In specific implementation, the vehicle receives instruction information input by the first user in the above-mentioned vehicle owner mode. The vehicle determines the second-hand car transaction mode based on the instruction information, and then switches the vehicle's mode from the car owner mode to the second-hand car transaction mode. For example, the instruction information input by the first user may be instruction information for selecting the second-hand car transaction mode. Based on the instruction information, the vehicle can lock the second-hand car transaction mode in its multiple data protection modes, and then switch the vehicle's mode from the car owner mode to the second-hand car transaction mode.

In a possible implementation, the above instruction information for selecting the second-hand car transaction mode may be input by the first user through the display screen of the vehicle. For example, the user interface displayed on the display screen of the vehicle may include controls indicating the second-hand car transaction mode. The vehicle senses the first user's click operation on the control through the user interface, and based on the click operation, the above instruction information for selecting the second-hand car transaction mode can be generated.

In a possible implementation, the above instruction information for selecting the second-hand car transaction mode may be input by the first user through a microphone of the vehicle. For example, the vehicle receives the voice information input by the first user through the microphone, and the voice information indicates selecting the above-mentioned second-hand car transaction mode. For example, the content of the voice message may be "used car transaction mode", "switch to used car transaction mode" or "switch to used car transaction mode" and so on. The embodiment of the present application does not limit the specific input voice content.

In a possible embodiment, in the description of the above-mentioned second-hand car transaction mode, the second-hand car transaction mode may be the first mode in the above-mentioned step S401. The above-mentioned instruction information for selecting the second-hand car transaction mode is the first information in the above-mentioned step S401.

In a possible embodiment, after the vehicle determines the second-hand car transaction mode based on the instruction information input by the first user, the vehicle may first check the current driving status of the vehicle. If the vehicle is in a stopped state, the mode of the vehicle can be switched from the car owner mode to the second-hand car transaction mode. If the vehicle is in a driving state, mode switching is not performed and the first user can be notified. In the embodiment of this application, mode switching can only be performed in the parking state to ensure the safety of the vehicle and the user. And it can avoid safety hazards caused by mode switching due to misoperation.

In the above-mentioned second-hand car transaction mode, the vehicle exits the maintenance mode through the preset exit method. For example, the preset exit method is to exit the maintenance mode upon receiving a preset exit code. For specific implementation, please refer to the above description on exiting the valet mode, and will not be described in detail here. In another possible implementation, the preset exit method may be that the vehicle automatically exits the second-hand car transaction mode after completing the preset operation process in the second-hand car transaction mode. For example, after the second-hand car transaction mode is enabled, the vehicle automatically transfers the ownership of the first user of the vehicle, transfers the authorization rights of the first user, and unbinds the identity of the vehicle from the first user. One or more operations to bind the identity of the new owner of the vehicle, or to delete personal data in the vehicle. During the execution of one or more operations, the user may input information or perform corresponding operations based on the vehicle's instructions, which is not limited by the embodiments of the present application. During the process of completing one or more operations, the vehicle automatically exits the second-hand car transaction mode and prompts the user.

In a possible embodiment, after the vehicle determines the second-hand car transaction mode, it can query the function usage status configured in the second-hand car transaction mode. For specific implementation, please refer to the above description about querying the function usage status configured in the valet mode, and will not be described in detail here.

In one possible embodiment, the vehicle can receive instruction information from the first user through human-computer interaction to customize the functions that are allowed and/or prohibited in the second-hand car transaction mode. For specific implementation, please refer to the above description of the custom configuration of function usage status in valet mode, which will not be described here.

In a possible embodiment, the specific implementation process related to the above-mentioned second-hand car transaction mode can be exemplarily referred to the description related to the valet mode shown in FIG. 6 or FIG. 7 , and will not be described again here.

The above-mentioned off-car shooting prompt mode can be used to view the situation around the vehicle. In the off-car shooting prompt mode, when a preset action on the vehicle is sensed, the vehicle's camera can be activated to capture images around the vehicle. The preset action may be, for example, an action of slapping the vehicle, scratching the vehicle, knocking on the glass of the vehicle, or prying the door, etc. to cause abnormal contact with the vehicle.

In a possible implementation, the above-mentioned off-vehicle shooting prompt mode may be triggered when the vehicle is parked.

Specifically, after the vehicle senses the above preset action, the camera outside the vehicle can be instructed to capture images of the environment around the vehicle. Optionally, the camera can also emit lights to alert users of abnormal situations.

The image data captured above around the vehicle can be encrypted and stored in the vehicle's memory. Only the above-mentioned first user has the authority to access these image data.

In one possible implementation, if the above image data stored in the vehicle leaves the vehicle, for example, is copied or sent to another device, the vehicle will first desensitize the image data before allowing it to leave the vehicle. The desensitization operation may be, for example, removing or masking (eg mosaicing) sensitive data included in the image data. The sensitive data includes, for example, face images of vehicle users or pedestrians outside the vehicle, etc., which are not limited in the embodiments of the present application.

The above-mentioned off-car shooting prompt mode is preset by the above-mentioned first user. For example, the vehicle receives the instruction information input by the first user in the above-mentioned vehicle owner mode. The vehicle activates the use function of the off-vehicle shooting prompt mode based on the indication information. Therefore, when the vehicle senses the above-mentioned preset action, it can activate the vehicle's camera to capture images around the vehicle.

In a possible implementation manner, the above information instructing to turn on the usage function of the off-vehicle shooting prompt mode may be input by the first user through the display screen of the vehicle. For example, the user interface displayed on the display screen of the vehicle may include a control indicating the off-vehicle shooting prompt mode or a function switch control including the off-vehicle shooting prompt mode. The vehicle senses the first user's click operation on the control through the user interface, and based on the click operation, the use function of the off-vehicle shooting prompt mode can be enabled.

In a possible implementation, the above-mentioned information for enabling the usage function of the outside-vehicle shooting prompt mode may be input by the first user through a microphone of the vehicle. Exemplarily, the vehicle receives the voice information input by the first user through the microphone, and the voice information instructs to turn on the use function of the off-vehicle shooting prompt mode. For example, the content of the voice message may be "turn on the outside shooting prompt mode", "enable the outside shooting prompt mode" or "activate the outside shooting prompt mode" and so on. The embodiment of the present application does not limit the specific input voice content.

In a possible embodiment, after the above-mentioned vehicle turns on the use function of the off-car shooting prompt mode, it can query the usage status of the functions configured in the off-car shooting prompt mode. The function usage status configured in the vehicle exterior shooting prompt mode may include the usage status of each of multiple cameras outside the vehicle. For example, after the vehicle receives the query instruction information through the display screen or microphone, it can instruct the authority management module in the vehicle control system to query. After querying the corresponding function usage status, the authority management module can send a display instruction to the vehicle's display screen to instruct the display screen to display the query function usage status.

In one possible embodiment, the vehicle can receive instruction information from the first user through human-computer interaction to custom configure the functions allowed and/or prohibited in the above-mentioned off-vehicle shooting prompt mode. For example, the vehicle may receive the first user's instruction information through a display screen or a microphone. The indication information may indicate enabling or disabling a camera outside a certain vehicle in the exterior shooting prompt mode. Then, the vehicle instructs the rights management module to save the usage status configuration of a certain vehicle external camera based on the instruction information. Thus, when the vehicle exterior shooting prompt mode is turned on, the camera outside the vehicle is enabled or disabled based on the configuration. The embodiment of the present application can customize the usage status of the camera in the off-car shooting prompt mode to flexibly adapt to various off-car shooting scenarios.

The above-mentioned first passenger protection mode may be used to detect the status of passengers in the vehicle. For example, in the first passenger protection mode, the vehicle may detect a stranded passenger in the vehicle. For passengers in the vehicle, operations such as body temperature detection or facial image analysis can be performed. It can also detect the temperature inside the car and so on. Through these operations, passengers' discomfort or abnormalities can be detected in time to prevent unexpected dangers to passengers.

In a possible implementation, the above-mentioned passengers may be the elderly, children, patients or ordinary passengers.

In a possible implementation, the above-mentioned first passenger protection mode may be a mode that is further enabled when the above-mentioned car owner mode, family and friends mode, valet mode, maintenance mode or second-hand car transaction mode is enabled.

In a possible implementation, the function usage status of the first passenger protection mode that is further turned on when mode A is turned on may be different from the function usage status of the first passenger protection mode that is further turned on when mode B is turned on. . Both Mode A and Mode B are one of the above-mentioned car owner mode, family and friend mode, valet mode, maintenance mode or second-hand car transaction mode, and Mode A and Mode B are different. For example, take mode A as the friends and relatives mode and mode B as the maintenance mode. In the family and friends mode, considering that there may be children in the vehicle, the first passenger protection mode that is further turned on when the family and friends mode is turned on can enable the function of detecting the stranded status of passengers in the vehicle. In the maintenance mode, maintenance personnel are generally operating the vehicle and there are no other passengers. Therefore, the first passenger protection mode that is further turned on when the maintenance mode is turned on can turn off the function of detecting the stranded status of passengers in the vehicle. This is only an example and does not constitute a limitation on the embodiments of the present application.

In a possible implementation, the different function usage states of the first passenger protection mode that are further turned on in different modes may be customized and configured by the vehicle based on the above-mentioned first user's instruction information, or may be preset at the factory. , the embodiment of this application does not limit this.

In a possible implementation, the above-mentioned first passenger protection mode may be further turned on after confirmation by the currently logged-in user of the vehicle. For example, the passenger mode is enabled based on the activation indication information actively input by the currently logged-in user. Or, for example, the passenger mode can be enabled by the vehicle automatically asking whether to enable it through the display screen or microphone, and after receiving the confirmation instruction information.

The above-mentioned second passenger protection mode can be used to turn off the camera and/or microphone in the vehicle. In a specific implementation, the user can input instruction information through the display screen or microphone. This instruction message can instruct all cameras or microphones in the car to be turned off. In another possible implementation, a button is provided in the vehicle, and the user can press the button to instruct to turn off the camera or microphone in the vehicle. Optionally, the user can view the business list specifically involving the camera or microphone in the vehicle through the vehicle's display screen.

In a possible implementation, the above-mentioned second passenger protection mode may be a mode that is further enabled when the above-mentioned car owner mode, family and friends mode, valet mode, maintenance mode or second-hand car transaction mode is enabled.

For scenarios where passengers go out for a ride, especially in scenarios such as car rental, online ride-hailing, or carpooling, this second passenger protection mode can further protect the personal information of people in the car from being leaked.

In another possible embodiment, the vehicle access permission control method provided by the embodiment of the present application can be implemented through interactive communication between the terminal device and the vehicle. In this case, referring to Figure 9 for example, the vehicle access permission control method provided by the embodiment of the present application includes but is not limited to the following steps:

S901. The terminal device determines a first mode based on the first indication information, where the first mode is one of multiple data protection modes of the vehicle.

For example, the terminal device may be the terminal device 120 shown in FIG. 3 above, and the vehicle may be the vehicle 100 shown in FIG. 3 above. For the above multiple data protection modes, please refer to the previous description and will not be described again here. The first mode may be, for example, a valet mode, a maintenance mode, a second-hand car transaction mode or a first passenger protection mode, or the like.

In one possible implementation, messages exchanged between the terminal device and the vehicle can be forwarded by the cloud server. Or, in another possible implementation, the terminal device can communicate directly with the vehicle after establishing a communication connection. The embodiments of this application do not limit the communication method between the terminal device and the vehicle.

In specific implementation, the terminal device may receive the login information input by the first user. For example, the terminal device may receive the login information through a display screen or a microphone. The subsequent terminal device may receive the information input by the user through the display screen or the microphone. The specific description mainly takes the reception through the display screen as an example.

The above login information includes the identity information of the first user. For descriptions of identity information, please refer to the previous introduction and will not be repeated here. This login information is used to log into the vehicle's user system. Based on the login information, the terminal device can enter the user system of the vehicle. For example, the display screen of the terminal device may display the user interface of the user system. The user system can provide function usage rights of the vehicle. For example, the function usage status of the vehicle and the like can be controlled through the user interface of the user system.

Specifically, in the user interface of the user system displayed on the terminal device, the terminal device may receive the instruction information input by the first user. The vehicle determines the first mode based on the indication information. For example, the instruction information input by the first user may be instruction information for selecting the first mode. For example, the user interface of the user system displayed by the terminal device may include a control indicating the first mode. The terminal device senses the first user's click operation on the control through the user interface, and can generate the above instruction information for selecting the first mode based on the click operation.

Or, for example, the instruction information input by the first user may be instruction information for turning on the first mode. For example, the user interface of the user system displayed by the terminal device may include the function switch control of the first mode. The terminal device senses the first user's click operation on the function switch control through the user interface, and can generate the above instruction information for turning on the first mode based on the click operation.

In one possible implementation, the terminal device can perform human-computer interaction with the user through a corresponding APP, applet, or web page, and conduct interactive communication with the vehicle.

S902. The terminal device sends a first message to the vehicle, and the first message instructs to switch the mode of the vehicle to the first mode.

In a specific implementation, after receiving the instruction information input by the first user, the terminal device sends the above-mentioned first message to the vehicle based on the instruction information.

S903. The vehicle receives the first message.

S904. The vehicle switches the vehicle mode to the first mode.

After the vehicle receives the above-mentioned first message, based on the first message, the vehicle can lock the first mode among its multiple data protection modes, and then switch the vehicle's mode to the first mode. Regarding the specific implementation of vehicle mode switching, you can refer to the corresponding descriptions in each data protection mode mentioned above, and will not be described again here.

In a possible embodiment, before the vehicle switches the vehicle mode to the first mode, the vehicle may first check the current driving status of the vehicle. If the vehicle is in a stopped state, the mode of the vehicle can be switched from the car owner mode to the second-hand car trading mode. If the vehicle is in a driving state, mode switching is not performed and the first user can be notified. Regarding the specific implementation of checking the current driving status of the vehicle, reference can be made to the description in Figure 6 and will not be described again here. In the embodiment of this application, mode switching can only be performed in the parking state to ensure the safety of the vehicle and the user. And it can avoid safety hazards caused by mode switching due to misoperation.

In a possible embodiment, before the vehicle switches the vehicle mode to the first mode, the identity of the user currently logged in to the vehicle user system may be checked. When the logged-in user is the above-mentioned first user, the vehicle switches the vehicle mode to the first mode. Regarding the specific implementation of checking the identity of the user currently logged in to the vehicle user system, reference can be made to the description in Figure 6 and will not be described again here.

S905. The vehicle sends a first response message to the terminal device. The first response message indicates that the mode of the vehicle has been switched to the first mode.

After the vehicle switches to the first mode, the above-mentioned first response message is generated and sent to the above-mentioned terminal device.

In a possible embodiment, after the above-mentioned terminal device enters the user system of the vehicle and the display screen of the terminal device displays the user interface of the user system, the function usage status configured in the first mode can be queried.

For example, in a possible implementation, the terminal device may send a query message for the function usage status configured in the first mode to the vehicle. For example, the user interface displayed on the display screen of the terminal device may include a query control for querying the usage status of the functions configured in the first mode. The terminal device senses the first user's click operation on the query control through the user interface, and based on This click operation can generate the above query message and send it to the vehicle. After receiving the query message, the vehicle sends the function usage status configured in the first mode to the terminal device. The terminal device may display the received function usage status configured in the first mode on the display screen.

In another possible implementation, the cloud server backup has the function usage status configured in the first mode. For example, the user interface displayed on the display screen of the terminal device may include a query control for querying the usage status of the functions configured in the first mode. The terminal device senses the first user's click operation on the query control through the user interface, and based on This click operation can generate the above query message and send it to the cloud server. The terminal device may send a query message about the function usage status configured in the first mode to the cloud server. After receiving the query message, the cloud server sends the function usage status configured in the first mode to the terminal device. The terminal device may display the received function usage status configured in the first mode on the display screen.

In another possible implementation, when the terminal device determines the first mode based on the first indication information, the terminal device may also send the query message to the vehicle or cloud server, thereby obtaining the function usage configured in the first mode. status and displayed on the display. This implementation does not require additional query based on the query instructions input by the user, but can lock the first mode based on the first instruction information and simultaneously send the above query message to the vehicle or cloud server.

In a possible embodiment, after the above-mentioned terminal device enters the user system of the vehicle and the display screen of the terminal device can display the user interface of the user system, the terminal device can configure the above-mentioned first command based on the second instruction information input by the first user. Features allowed and/or prohibited in the mode.

In a specific implementation, after receiving the instruction information input by the first user to enable or disable a certain function in the first mode, the terminal device generates a corresponding instruction message based on the instruction information and sends it to the vehicle. The instruction message may include instruction information for enabling or disabling a certain function in the first mode. After receiving the instruction message, the vehicle saves the configuration of enabling or disabling the certain function in the first mode, so that the certain function is enabled or disabled after the subsequent vehicle enters the first mode. Optionally, after the vehicle saves the configuration of enabling or disabling the certain function in the first mode, the vehicle can also synchronize and back up the usage status of the certain function in the first mode to the cloud server.

For example, the user interface displayed on the display screen of the terminal device may include switch controls for each function in the first mode, and the first user can indicate enabling or disabling the corresponding function by clicking on these switch controls. The terminal device generates indication information for enabling or disabling the corresponding function based on the corresponding click operation, and then generates a corresponding indication message and sends it to the vehicle.

In a possible embodiment, if the first mode is a valet mode, a maintenance mode, a second-hand car transaction mode, etc., the vehicle exits the first mode through a preset exit method. The preset exit method is to exit the maintenance mode upon receiving a preset exit code.

In a possible implementation, before sending the first message to the vehicle, the terminal device may check whether the first mode has an exit code set.

For example, if an exit code has been set, the exit code can be saved on the terminal device. In this case, the terminal device can check whether the exit code is stored in its own preset memory. If it has been stored, the above-mentioned first message can be sent to the vehicle. If it is not stored, the first user can be instructed to set the exit code. The first user enters a customized exit code based on instructions from the terminal device. After receiving the exit code input by the first user, the terminal device saves the exit code and sends the exit code to the vehicle for storage. Optionally, the terminal device can also send the exit code to the cloud server for storage.

For example, the terminal device may send a query message to the vehicle or cloud server to determine whether an exit code is set. If the received response message indicates that the exit code has been set, the above-mentioned first message may be sent to the vehicle. If the received response message indicates that the exit code is not set, the terminal device may instruct the first user to set the exit code. The first user enters a customized exit code based on instructions from the terminal device. After receiving the exit code input by the first user, the terminal device sends the exit code to the vehicle for storage. Optionally, the terminal device can also send the exit code to the cloud server for storage.

In a possible implementation, when the terminal device learns that the exit code of the first mode is not set, it may generate a random exit code as the exit code of the first mode. And the generated exit code is displayed on the display screen to the user. Additionally, this generated exit code is sent to the vehicle save. Optionally, the terminal device can also send the generated exit code to the cloud server for storage.

After the exit code of the first mode is set, the terminal device can send the first message to the vehicle.

In a possible implementation, the operation of checking whether the exit code is set in the first mode may be implemented by the vehicle after the vehicle receives the first message. For example, after receiving the first message, the vehicle may first check whether the first mode has an exit code set. For example, the vehicle can query whether an exit code is stored in its own memory, or query the cloud server whether an exit code has been set, etc. The embodiments of this application do not limit the specific method of determining whether an exit code is set. If an exit code has been set, the vehicle switches the mode of the vehicle to the first mode. If the exit code is not set, the vehicle sends an instruction message requesting to set the exit code to the terminal device. Then the terminal device can instruct the first user to set the exit code. The first user enters a customized exit code based on instructions from the terminal device. After receiving the exit code input by the first user, the terminal device sends the exit code to the vehicle for storage. Optionally, the terminal device can also send the exit code to the cloud server for storage. After the vehicle receives the exit code and saves it, the vehicle's mode can be switched to the first mode.

In a possible implementation, when the vehicle learns that the exit code of the first mode is not set, a random exit code may be generated as the exit code of the first mode. And save the generated exit code. The vehicle also sends the generated exit code to the terminal device for display to the user. Optionally, the vehicle can also send the generated exit code to the cloud server for storage.

In a possible embodiment, the terminal device may register the identity information of the second user in the user system of the vehicle based on the instruction information input by the first user. This allows the second user to log in to the user system on the vehicle based on the registered identity information and enter the above-mentioned family and friend mode.

In specific implementation, the above-mentioned second user can independently enter the vehicle's friends and family mode with the authorization of the above-mentioned first user. For example, after the terminal device enters the user system of the vehicle based on the identity information of the first user and displays the user interface of the user system, the terminal device may receive the instruction information input by the first user. and receiving the identity information of the second user based on the instruction information, and then registering the received identity information of the second user to the user system. Specifically, after receiving the identity information of the second user, the terminal device sends the identity information to the vehicle. The vehicle saves the second user's identity information to its own user system to complete the registration of the second user's identity information. The identity information of the second user is, for example, the second user's face image information, fingerprint information, preset voice information, user password, or customized user name and password.

After the vehicle completes the registration of the identity information of the second user, it may receive login information input by the second user to log in to the vehicle user system, where the login information includes the identity information of the second user. After the vehicle verifies the login information, it locks the family and friends mode based on the login information, and then switches the vehicle's mode to the family and friends mode, providing the second user with the function usage rights of the family and friends mode.

In a possible embodiment, the terminal device can query the function usage status configured in the above friends and family mode. In another possible embodiment, the terminal device may configure the functions that are allowed and/or prohibited to be used in the friends and family mode based on the instruction information input by the first user. For the specific implementation of this query and configuration, please refer to the previous description and will not be repeated here.

In order to facilitate understanding of the specific implementation process related to the above-mentioned first mode, reference may be made to Figure 10 as an example. Figure 10 takes the terminal device communicating with the vehicle through the cloud server as an example. In Figure 10, the vehicle mode management module, authority management module and user system belong to the functional modules in the vehicle's on-board control system. The specific functions of these functional modules can be found in the aforementioned description of Figure 2 and will not be described again here.

As shown in Figure 10, the terminal device receives login information input by the first user, and the login information may include the identity information of the first user. The terminal device sends the received login information to the vehicle through the cloud server. The user system in the vehicle verifies the received login information. When the verification is successful, the vehicle sends a response message indicating that the login information has been verified to the cloud server. The cloud server displays the user interface of the user system on the display screen based on the response information.

In the user interface of the user system, the terminal device may receive the instruction information A input by the first user. The instruction information A indicates entering the first mode configuration menu. After receiving the indication information A, the terminal device may first send a query message to the cloud server to query the usage status of the functions configured in the first mode.

In one possible implementation, after receiving the above query message, the cloud server can query the function usage status configured in the first mode in its own storage system. and sends the queried function usage status configured in the first mode to the terminal device. The terminal device displays the function usage status configured in the first mode.

In a possible implementation, in the above user interface that displays the function usage status configured in the first mode, the terminal device can also receive the instruction information B input by the first user. The indication information B indicates configuring the usage status of one or more functions. For example, the indication information B may indicate whether to allow or prohibit the use of the one or more functions. The one or more functions may be, for example, a private physical space usage function or a vehicle maximum speed limiting function, etc., which are not limited in the embodiments of the present application.

After receiving the above instruction information B, the terminal device sends a configuration instruction message for the usage status of the one or more functions to the vehicle through the cloud server. The vehicle saves the configuration of the usage status of one or more functions through the rights management module, and feeds back the successful configuration results to the terminal device through the cloud server to display to the first user. Optionally, the vehicle can also synchronize and save the configuration backup of the usage status of one or more functions to the cloud server. In the embodiment of this application, the first user can customize the function usage status in the valet mode, which can realize flexible configuration requirements in different scenarios and realize data protection in different car usage scenarios.

In a possible implementation, the terminal device may receive the indication information C input by the first user. The indication information C indicates enabling the first mode. The terminal device sends the instruction information for enabling the first mode to the vehicle through the cloud server based on the instruction information C.

In one possible implementation, after receiving the above instruction information for enabling the first mode, the vehicle's authority management module queries the vehicle mode management module for the current driving status of the vehicle. The vehicle mode management module feeds back the queried current driving status to the authority management module.

In one possible implementation, after receiving the above instruction information for enabling the first mode, the vehicle's authority management module queries the user system for the identity of the currently logged-in user. The user system feeds back the queried identity information of the currently logged-in user to the rights management module.

Then, the authority management module can determine whether the current driving state of the vehicle is in a stopped state based on the current driving state of the vehicle, and/or determine whether the logged-in user is the first user based on the identity information of the currently logged-in user. When the current driving state of the vehicle is in a stopped state and/or the current logged-in user is the first user, the authority management module determines whether the exit code of the first mode has been set. For example, you can query whether there is an exit code stored in your own memory, or query the cloud server whether an exit code has been set, etc. The embodiments of this application do not limit the specific method of determining whether an exit code is set.

When no exit code is set, the vehicle sends an instruction message to set the exit code to the terminal device through the cloud server. The terminal device can display information instructing the first user to set the exit code on the display screen, and receive the exit code input by the first user. The terminal device sends the exit code to the vehicle through the cloud server. The vehicle's authority management module sets the received exit code as the exit code of the first mode, and synchronously saves the exit code to the cloud server. Then, the rights management module enables the first mode, and feeds back the result of successfully enabling the first mode to the terminal device to display to the first user.

In a possible implementation, when the above authority management module determines that the exit code of the first mode is not set, it can randomly set an exit code of the first mode and save it, and then send the set exit code to the terminal. The device is presented to the user.

In a possible implementation, the exit code of the first mode can be reset. For example, the terminal device may receive the exit code newly input by the first user through the display screen, and then send instruction information to reset the exit code to the vehicle, where the instruction information includes the newly input exit code. The vehicle's authority management module replaces the original exit code with the newly entered exit code and saves it, thereby resetting the exit code.

It should be noted that the process shown in Figure 10 is only an example and does not constitute a limitation on the embodiments of the present application.

The above mainly introduces the vehicle access permission control method provided by the embodiment of the present application. It can be understood that, in order to implement the corresponding functions mentioned above, each device includes a corresponding hardware structure and/or software module to perform each function. In conjunction with the units and steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is performed by hardware or computer software driving the hardware depends on the specific application and design constraints of the technical solution. Skilled artisans may implement the described functionality using different methods for each specific application, but such implementations should not be considered beyond the scope of this application.

Embodiments of the present application can divide the device into functional modules according to the above method examples. For example, each functional module can be divided corresponding to each function, or two or more functions can be integrated into one module. The above integrated modules can be implemented in the form of hardware or software function modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical function division. In actual implementation, there may be other division methods.

In the case where each functional module is divided according to each function, FIG. 11 shows a possible logical structure diagram of the device. The device may be the above-mentioned vehicle or an on-board control system in the vehicle. The device 1100 includes a determining unit 1101 and a switching unit 1102. in:

The determining unit 1101 is configured to determine a first mode based on the first indication information. The first mode is one of multiple data protection modes of the vehicle. The multiple data protection modes of the vehicle include at least two different data protection modes. Mode provided by the vehicle user, the aforementioned multiple data protection modes are used to restrict access to the aforementioned vehicle data;

The switching unit 1102 is used to switch the mode of the vehicle to the first mode.

The aforementioned device further includes a receiving unit configured to receive the login information of the user system of the aforementioned vehicle before the determining unit 1101 determines the first mode based on the first indication information, where the aforementioned login information includes the identity information of the aforementioned first user;

In a possible implementation, the aforementioned device further includes a query unit configured to query the driving status of the aforementioned vehicle after the determining unit 1101 determines the first mode based on the first indication information;

The switching unit 1102 is specifically used to switch the mode of the vehicle to the first mode when the vehicle is in a stopped state.

In a possible implementation, the aforementioned device further includes a first configuration unit configured to, after the determining unit 1101 determines the first mode based on the first indication information, before the switching unit 1102 switches the mode of the aforementioned vehicle to the aforementioned first mode, Configure the exit code of the aforementioned first mode. The aforementioned exit code is a verification code used to exit the aforementioned first mode.

In a possible implementation, the aforementioned device further includes a registration unit configured to register the aforementioned information in the user system of the aforementioned vehicle based on the instruction information input by the first user before the determining unit 1101 determines the first mode based on the first instruction information. The identity information of the second user.

In a possible implementation, the aforementioned device further includes an enabling unit configured to enable the third mode based on the fourth instruction information after the switching unit 1102 switches the mode of the vehicle to the first mode; the third mode is To detect the status of the passengers in the aforementioned vehicle.

In a possible implementation, the aforementioned enabling unit is also configured to enable the fourth mode based on the fifth instruction information after the aforementioned switching unit 1102 switches the mode of the aforementioned vehicle to the aforementioned first mode; the aforementioned fourth mode is used to turn off Cameras and/or microphones in the aforementioned vehicles.

For the specific operations and beneficial effects of each unit in the device 1100 shown in Figure 11, please refer to the corresponding descriptions in Figure 4 and its possible embodiments, and will not be described again here.

In the case where each functional module is divided corresponding to each function, FIG. 12 shows a possible logical structure diagram of the device, and the device may be the above-mentioned terminal device. The device 1200 includes a determining unit 1201, a sending unit 1202 and a receiving unit 1203. in:

The determining unit 1201 is configured to determine a first mode based on the first indication information. The first mode is one of multiple data protection modes of the vehicle. The multiple data protection modes of the vehicle include at least two different data protection modes. Mode provided by the vehicle user, the aforementioned multiple data protection modes are used to restrict access to the aforementioned vehicle data;

The sending unit 1202 is configured to send a first message to the aforementioned vehicle; the aforementioned first message indicates switching the mode of the aforementioned vehicle to the aforementioned first mode;

The receiving unit 1203 is configured to receive a first response message; the aforementioned first response message indicates that the mode of the aforementioned vehicle has been switched to the aforementioned first mode.

The aforementioned terminal device also includes a receiving unit 1203, configured to receive the login information of the user system of the aforementioned vehicle before the determining unit 1201 determines the first mode based on the first indication information, where the aforementioned login information includes the identity information of the aforementioned first user;

In a possible implementation, the aforementioned terminal device further includes a second configuration unit configured to, after the aforementioned determining unit 1201 determines the first mode based on the first indication information, the aforementioned sending unit 1202 sends a message to the aforementioned vehicle based on the aforementioned determined first mode. Before sending the first message, configure an exit code for the first mode, where the exit code is a verification code for exiting the first mode.

For the specific operations and beneficial effects of each unit in the device 1200 shown in Figure 12, please refer to the corresponding description of the terminal device in Figure 9 and its possible embodiments, and will not be described again here.

In the case where each functional module is divided according to each function, FIG. 13 shows a possible logical structure diagram of the device. The device may be the above-mentioned vehicle or the vehicle-machine control system of the vehicle. The device 1300 includes a receiving unit 1301, a switching unit 1302 and a sending unit 1303. in:

The receiving unit 1301 is configured to receive a first message; the first message indicates switching the mode of the vehicle to the first mode; the first mode is one of the multiple data protection modes of the vehicle; the multiple data of the vehicle The protection mode includes modes provided for at least two different vehicle users, and the aforementioned multiple data protection modes are used to restrict access to the data of the aforementioned vehicle;

The switching unit 1302 is used to switch the mode of the aforementioned vehicle to the aforementioned first mode;

The sending unit 1303 is configured to send a first response message; the aforementioned first response message indicates that the mode of the aforementioned vehicle has been switched to the aforementioned first mode.

In a possible implementation, the aforementioned device further includes a query unit configured to query the driving status of the aforementioned vehicle after the aforementioned receiving unit 1301 receives the first message;

The aforementioned switching unit 1302 is specifically configured to: when the aforementioned vehicle is in a stopped state, switch the mode of the aforementioned vehicle to the aforementioned first mode based on the aforementioned first message.

In a possible implementation, the aforementioned device further includes a query unit, which is further configured to query the identity information of the user currently logged in to the user system of the aforementioned vehicle after the aforementioned receiving unit 1301 receives the first message;

The aforementioned switching unit 1302 is specifically used to: switch the mode of the aforementioned vehicle to the aforementioned first mode when the identity information of the aforementioned user is the identity information of the first user, and the aforementioned first user has no access restrictions on the aforementioned vehicle. user.

In a possible implementation, the receiving unit 1301 is further configured to: receive login information. The login information includes the identity information of a second user. The second user is a user authorized by the first user to log in to the user system of the vehicle. The first user is a user who has no access restrictions to the aforementioned vehicle;

For the specific operations and beneficial effects of each unit in the device 1300 shown in Figure 13, please refer to the corresponding description of the vehicle in Figure 9 and its possible embodiments, and will not be described again here.

Figure 14 is a schematic diagram of a possible hardware structure of the device provided by this application. The device may be the vehicle or the vehicle-machine control system of the vehicle in the method described in the above embodiment. The device 1400 includes: a processor 1401, a memory 1402 and a communication interface 1403. The processor 1401, the communication interface 1403, and the memory 1402 may be connected to each other or to each other via a bus 1404.

Exemplarily, the memory 1402 is used to store computer programs and data of the device 1400. The memory 1402 may include, but is not limited to, random access memory (random access memory, RAM), read-only memory (read-only memory, ROM), Erasable programmable read only memory (EPROM) or portable read-only memory (compact disc read-only memory, CD-ROM), etc.

In the above method embodiment, the software or program code required for the functions of all or part of the units of the vehicle or the vehicle's on-board control system is stored in the memory 1402 .

In a possible implementation, if the software or program code required for the functions of some units is stored in the memory 1402, the processor 1401, in addition to calling the program code in the memory 1402 to implement some of the functions, can also cooperate with other components ( Such as the communication interface 1403) together to complete other functions described in the method embodiment (such as the function of receiving or sending data).

The number of communication interfaces 1403 may be multiple, and are used to support the device 1400 to communicate, such as receiving or sending data or signals.

For example, the processor 1401 may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. The processor can also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a digital signal processor and a microprocessor, and so on. The processor 1401 may be used to read the program stored in the memory 1402 and execute the method described in FIG. 4 and its possible embodiments. Alternatively, the processor 1401 may be used to read the program stored in the above-mentioned memory 1402 and perform the operations performed by the vehicle or the vehicle-machine control system of the vehicle in the method described in FIG. 9 and its possible embodiments.

For the specific operations and beneficial effects of each unit in the device 1400 shown in Figure 14, please refer to the corresponding descriptions in the above method embodiments, and will not be described again here.

Figure 15 shows a schematic diagram of a possible hardware structure of the device provided by this application. The device may be a terminal device in the method described in the above embodiment. The device 1500 includes: a processor 1501, a memory 1502 and a communication interface 1503. The processor 1501, communication interface 1503, and memory 1502 may be connected to each other or to each other through a bus 1504.

Exemplarily, the memory 1502 is used to store computer programs and data of the device 1500. The memory 1502 may include, but is not limited to, random access memory (random access memory, RAM), read-only memory (read-only memory, ROM), Erasable programmable read only memory (EPROM) or portable read-only memory (compact disc read-only memory, CD-ROM), etc.

The software or program code required for the functions of all or part of the units of the terminal device in the above method embodiment is stored in the memory 1502.

In a possible implementation, if the software or program code required for the functions of some units is stored in the memory 1502, the processor 1501 can also cooperate with other components ( Such as communication interface 1503) together to complete other functions described in the method embodiment (such as the function of receiving or sending data).

The number of communication interfaces 1503 may be multiple, and are used to support the device 1500 to communicate, such as receiving or sending data or signals.

For example, the processor 1501 may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. The processor can also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a digital signal processor and a microprocessor, and so on. The processor 1501 may be used to read the program stored in the memory 1502 and perform the operations performed by the terminal device in the method described in FIG. 9 and its possible embodiments.

For the specific operations and beneficial effects of each unit in the device 1500 shown in Figure 15, please refer to the corresponding descriptions in the above method embodiments, and will not be described again here.

An embodiment of the present application also provides a vehicle, which includes the device shown in Figure 11, Figure 13 or Figure 14.

Embodiments of the present application also provide a computer-readable storage medium. The computer-readable storage medium stores a computer program. The computer program is executed by a processor to implement any one of the above-mentioned embodiments and possible embodiments. Operations performed by the vehicle or vehicle control system.

Embodiments of the present application also provide a computer-readable storage medium. The computer-readable storage medium stores a computer program. The computer program is executed by a processor to implement any one of the above-mentioned embodiments and possible embodiments. The operations performed by the terminal device.

Embodiments of the present application also provide a computer program product. When the computer program product is read and executed by a computer, the vehicle or vehicle control system in any one of the above embodiments and possible embodiments does The operation will be performed.

Embodiments of the present application also provide a computer program product. When the computer program product is read and executed by a computer, the operations performed by the terminal device in any of the above embodiments and possible embodiments will be executed. .

To sum up, this solution can protect personal information in the vehicle from being leaked by providing different modes of restricting access to data for a variety of different users, and at the same time, it can provide more services to different users as much as possible. , improve user experience.

In this application, the terms "first", "second" and other words are used to distinguish the same or similar items with basically the same functions and functions. It should be understood that the terms "first", "second" and "nth" There is no logical or sequential dependency, and there is no limit on the number or execution order. It should also be understood that, although the following description uses the terms first, second, etc. to describe various elements, these elements should not be limited by the terms. These terms are only used to distinguish one element from another.

It should also be understood that in each embodiment of the present application, the size of the sequence number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not be determined by the execution order of the embodiments of the present application. The implementation process constitutes no limitation.

It will also be understood that the term "includes" (also "includes," "including," "comprises," and/or "comprising") when used in this specification specifies the presence of stated features, integers, steps, operations, elements , and/or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and/or groupings thereof.

It should also be understood that references throughout this specification to "one embodiment," "an embodiment," and "a possible implementation" mean that specific features, structures, or characteristics related to the embodiment or implementation are included herein. In at least one embodiment of the application. Therefore, “in one embodiment” or “in an embodiment” or “a possible implementation” appearing in various places throughout this specification do not necessarily refer to the same embodiment. Furthermore, the particular features, structures or characteristics may be combined in any suitable manner in one or more embodiments.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solution of the present application, but not to limit it; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: The technical solutions described in the foregoing embodiments can still be modified, or some or all of the technical features can be equivalently replaced; and these modifications or substitutions do not deviate from the essence of the corresponding technical solutions from the technical solutions of the embodiments of the present application. scope.

Claims

A vehicle access authority control method, characterized in that the method includes:

A first mode is determined based on the first indication information. The first mode is one of a plurality of data protection modes of the vehicle. The plurality of data protection modes of the vehicle include protection for at least two different vehicle users. Provided modes, the plurality of data protection modes for restricting access to data of the vehicle;

Switch the mode of the vehicle to the first mode.
The method of claim 1, wherein the first instruction information is instruction information input by a first user, and the first user is a user with no access restrictions to the vehicle;

Before determining the first mode based on the first indication information, the method further includes:

Receive login information of the user system of the vehicle, where the login information includes the identity information of the first user;

Provide the first user with function usage rights of the vehicle based on the login information.
The method according to claim 2, characterized in that after determining the first mode based on the first indication information, further comprising:

Query the driving status of the vehicle;

Switching the mode of the vehicle to the first mode includes:

When the vehicle is in a stopped state, the mode of the vehicle is switched to the first mode.
The method according to claim 2 or 3, characterized in that after determining the first mode based on the first indication information and before switching the mode of the vehicle to the first mode, it further includes:

Configure an exit code for the first mode, where the exit code is a verification code for exiting the first mode.
The method according to any one of claims 1-4, characterized in that the method further includes:

In the first mode, the ownership of the first user of the vehicle is transferred, the authorization rights of the first user are transferred, and the identity binding of the vehicle and the first user is released. One or more operations of binding the identity of the new owner of the vehicle or deleting personal data in the vehicle, and the first user is a user with no access restrictions to the vehicle.
The method according to claim 1, characterized in that the first indication information is information for a second user to log in to the user system of the vehicle, and the first indication information includes the identity information of the second user, so The second user is a user authorized by the first user to log in to the vehicle's user system, and the first user is a user who has no access restrictions to the vehicle.
The method according to claim 6, characterized in that before determining the first mode based on the first indication information, further comprising:

The identity information of the second user is registered in the user system of the vehicle based on the instruction information input by the first user.
The method according to any one of claims 1-7, characterized in that the method further includes:

Functions that are allowed and/or prohibited to be used in the first mode are configured based on the second instruction information input by the first user.
The method according to claim 8, characterized in that after configuring the functions allowed and/or prohibited from use in the first mode based on the second instruction information input by the first user, it further includes:

The function usage status configured in the first mode is saved as the function usage status of the first application scenario based on the third indication information; the first application scenario is one application scenario among multiple application scenarios of the first mode, so Function usage states configured in the first mode corresponding to different application scenarios in the multiple application scenarios are different.
The method according to any one of claims 1-9, characterized in that the method further includes:

Query the function usage status configured in the first mode;

Send a display instruction, where the display instruction is used to instruct display of the function usage status configured in the first mode.
The method according to any one of claims 1-10, characterized in that the method further includes:

When a preset action on the vehicle is sensed, a second mode among the plurality of data protection modes is activated; the second mode is used to instruct the camera of the vehicle to capture images around the vehicle.
The method according to any one of claims 1-11, characterized in that after switching the mode of the vehicle to the first mode, it further includes:

A third mode is enabled based on the fourth indication information; the third mode is used to detect the status of passengers in the vehicle.
The method according to any one of claims 1 to 12, characterized in that after switching the mode of the vehicle to the first mode, it further includes:

A fourth mode is enabled based on the fifth indication information; the fourth mode is used to turn off the camera and/or microphone in the vehicle.
A vehicle access authority control method, characterized in that the method includes:

A first mode is determined based on the first indication information. The first mode is one of a plurality of data protection modes of the vehicle. The plurality of data protection modes of the vehicle include protection for at least two different vehicle users. Provided modes, the plurality of data protection modes for restricting access to data of the vehicle;

Send a first message to the vehicle; the first message indicates switching the mode of the vehicle to the first mode;

A first response message is received; the first response message indicates that the mode of the vehicle has been switched to the first mode.
The method of claim 14, wherein the first indication information is indication information input by a first user, and the first user is a user with no access restrictions to the vehicle;

Before determining the first mode based on the first indication information, the method further includes:

Receive login information of the user system of the vehicle, where the login information includes the identity information of the first user;

Provide the first user with function usage rights of the vehicle based on the login information.
The method according to claim 15, characterized in that after providing the first user with the function usage rights of the vehicle based on the login information, it further includes:

Functions that are allowed and/or prohibited to be used in the first mode are configured based on the second instruction information input by the first user.
The method according to claim 16, characterized in that after configuring the functions allowed and/or prohibited from use in the first mode based on the second instruction information input by the first user, it further includes:

Based on the third indication information, the function usage status configured in the first mode is saved as the status of the first application scenario; the first application scenario is one of the multiple application scenarios of the first mode, and the multiple application scenarios are Function usage states configured in the first mode corresponding to different application scenarios in each application scenario are different.
The method according to any one of claims 15-17, characterized in that the method further includes:

Query the function usage status configured in the first mode;

Display the function usage status configured in the first mode.
The method according to any one of claims 15 to 18, characterized in that after determining the first mode based on the first indication information, before sending the first message to the vehicle based on the determined first mode ,Also includes:

Configure an exit code for the first mode, where the exit code is a verification code for exiting the first mode.
The method according to any one of claims 14-18, characterized in that the method further includes:

Register the identity information of the second user in the user system of the vehicle based on the instruction information input by the first user. The first user is a user with no access restrictions to the vehicle. The identity information of the second user is used for The second user uses the vehicle in a second mode, the second mode being one of a plurality of data protection modes of the vehicle.
A vehicle access authority control method, characterized in that the method includes:

Receive a first message; the first message indicates switching the mode of the vehicle to a first mode; the first mode is one of a plurality of data protection modes of the vehicle; a plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

Switch the mode of the vehicle to the first mode;

A first response message is sent; the first response message indicates that the mode of the vehicle has been switched to the first mode.
The method according to claim 21, characterized in that after receiving the first message, further comprising:

Query the driving status of the vehicle;

Switching the mode of the vehicle to the first mode based on the first message includes:

When the vehicle is in a stopped state, the mode of the vehicle is switched to the first mode based on the first message.
The method according to claim 21 or 22, characterized in that after receiving the first message, it further includes:

Query the identity information of the user currently logged into the user system of the vehicle;

Switching the mode of the vehicle to the first mode includes:

In the case where the user's identity information is the identity information of a first user, the mode of the vehicle is switched to the first mode, and the first user is a user with no access restrictions to the vehicle.
The method according to any one of claims 21-23, characterized in that the method further includes:

Receive login information. The login information includes the identity information of a second user. The second user is a user authorized by the first user to log in to the user system of the vehicle. The first user has no access restrictions to the vehicle. user;

Provide the second user with function usage rights in a second mode, where the second mode is one of a plurality of data protection modes of the vehicle.
A vehicle access authority control device, characterized in that the device includes:

a determining unit configured to determine a first mode based on the first indication information, the first mode being one of a plurality of data protection modes of the vehicle, the plurality of data protection modes of the vehicle including at least two Modes provided by different vehicle users, the plurality of data protection modes are used to restrict access to the vehicle's data;

A switching unit is used to switch the mode of the vehicle to the first mode.
A terminal device, characterized in that the terminal device includes:

a determining unit configured to determine a first mode based on the first indication information, the first mode being one of a plurality of data protection modes of the vehicle, the plurality of data protection modes of the vehicle including at least two Modes provided by different vehicle users, the plurality of data protection modes are used to restrict access to the vehicle's data;

A sending unit configured to send a first message to the vehicle; the first message indicates switching the mode of the vehicle to the first mode;

A receiving unit configured to receive a first response message; the first response message indicates that the mode of the vehicle has been switched to the first mode.
A vehicle access authority control device, characterized in that the device includes:

A receiving unit, configured to receive a first message; the first message indicates switching the mode of the vehicle to a first mode; the first mode is one of a plurality of data protection modes of the vehicle; A plurality of data protection modes including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

A switching unit configured to switch the mode of the vehicle to the first mode;

A sending unit, configured to send a first response message; the first response message indicates that the mode of the vehicle has been switched to the first mode.
A vehicle access authority control device, characterized in that the device includes a processor and a memory, wherein the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the The device performs the method according to any one of claims 1-13; or, the device is caused to perform the method according to any one of claims 21-24.
A terminal device, characterized in that the terminal device includes a processor and a memory, wherein the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the terminal device Carry out the method as claimed in any one of claims 14-20.
A vehicle, characterized in that the vehicle includes the vehicle access authority control device according to any one of claims 25, 27 or 28.
A computer-readable storage medium, characterized in that the computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the method described in any one of claims 1 to 13;

Alternatively, the computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the method described in any one of claims 14 to 20;

Alternatively, the computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the method described in any one of claims 21 to 24.