Vehicle access control methods, devices, electronic equipment and storage media
By receiving and processing filter chains in permission requests, the problem of low flexibility in vehicle permission management is solved, achieving more flexible and secure permission management.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2023-05-25
- Publication Date
- 2026-04-03
AI Technical Summary
Existing technologies for vehicle access control lack flexibility, have limited application scenarios, and are not very secure.
By receiving permission requests sent by the terminal, a filter chain group including at least one filtering condition is determined, and permission information is determined based on the filter chain group and sent to the terminal to manage permissions.
It enables configurable settings for vehicle access control, increasing flexibility and generalization capabilities while improving security.
Smart Images

Figure CN116614279B_ABST
Abstract
Description
Technical Field
[0001] This application relates to the field of automotive technology, and in particular to a vehicle access control method, device, electronic device, and storage medium. Background Technology
[0002] With the development of automotive technology, vehicles are equipped with an increasing number of functions, such as memory parking, vehicle location, and air conditioning control. Access control for these functions can be managed through a vehicle management platform. In related technologies, access control for these functions is typically tied to the vehicle model; for example, all vehicles of a certain model may support memory parking, or none may support air conditioning control. This configuration method lacks flexibility, has limited application scenarios, and is not very secure. Summary of the Invention
[0003] In view of this, embodiments of this application provide a vehicle access management method, device, electronic device, and storage medium to solve the problems of low flexibility, limited application scenarios, and weak security in the prior art of vehicle access management.
[0004] A first aspect of this application provides a vehicle access control method, which is executed by a vehicle management platform and includes:
[0005] The receiving terminal sends a first permission request, which includes a first permission;
[0006] Determine the first filter chain group corresponding to the first permission, the first filter chain group includes at least one filter condition;
[0007] The first permission information is determined based on the first filter chain group;
[0008] Send first permission information to the terminal so that the terminal can manage first permissions based on the first permission information.
[0009] A second aspect of this application provides a vehicle access control device, comprising:
[0010] The receiving module is configured to receive a first permission request sent by the terminal, the first permission request including a first permission;
[0011] The determination module is configured to determine the first filter chain group corresponding to the first permission, and the first filter chain group includes at least one filter condition.
[0012] The determination module is also configured to determine first permission information based on the first filter chain group;
[0013] The sending module is configured to send first permission information to the terminal so that the terminal can manage first permissions based on the first permission information.
[0014] A third aspect of this application provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the above-described method.
[0015] A fourth aspect of this application provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the steps of the above-described method.
[0016] The beneficial effects of this application embodiment compared with the prior art are as follows: This application embodiment determines a filter chain group including at least one filtering condition by receiving the first permission in the permission request sent by the terminal, and determines the first permission information by the filter chain group and sends it to the terminal, so that the terminal can manage the first permission based on the first permission information, realize the configurable setting of vehicle permission management, increase the flexibility and generalization of vehicle permission management, and improve the security of vehicle permission management. Attached Figure Description
[0017] To more clearly illustrate the technical solutions in the embodiments of this application, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0018] Figure 1 This is a schematic diagram illustrating the application scenario of this application embodiment.
[0019] Figure 2 This is a flowchart illustrating a vehicle access control method provided in an embodiment of this application.
[0020] Figure 3 This is a flowchart illustrating a method for determining first permission information based on a first filter chain group, as provided in an embodiment of this application.
[0021] Figure 4 This is a flowchart illustrating a vehicle access control method provided in an embodiment of this application.
[0022] Figure 5 This is a flowchart illustrating a vehicle access control method provided in an embodiment of this application.
[0023] Figure 6 This is a schematic diagram of a vehicle access control device provided in an embodiment of this application.
[0024] Figure 7 This is a schematic diagram of the electronic device provided in the embodiments of this application. Detailed Implementation
[0025] In the following description, specific details such as particular system architectures and techniques are set forth for illustrative purposes and not for limitation, in order to provide a thorough understanding of the embodiments of this application. However, those skilled in the art will understand that this application may also be implemented in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, apparatuses, circuits, and methods have been omitted so as not to obscure the description of this application with unnecessary detail.
[0026] The vehicle access confirmation method and apparatus according to embodiments of this application will now be described in detail with reference to the accompanying drawings.
[0027] Figure 1 This is a schematic diagram illustrating an application scenario according to an embodiment of this application. The application scenario may include server 1, mobile terminal 2, vehicle 3, and network 4.
[0028] Server 1 can be a server that provides vehicle management services, such as a backend server that receives requests sent by mobile terminal 2 or vehicle 3 with which it has established a communication connection. This backend server can receive and analyze the requests sent by mobile terminal 2 or vehicle 3 and generate processing results. Server 1 can be a single server, a server cluster consisting of several servers, or a cloud computing service center. These servers together constitute a vehicle management platform, and this application embodiment does not impose any limitations on this.
[0029] The mobile terminal 2 can be either hardware or software. When the mobile terminal 2 is hardware, it can be various electronic devices with a display screen that support communication with the server 1 and the vehicle 3, including but not limited to smartphones, tablets, laptops, and desktop computers. When the mobile terminal 2 is software, it can be installed in the electronic devices described above. The mobile terminal 2 can be implemented as multiple software programs or software modules, or as a single software program or software module; this embodiment does not limit this. Furthermore, various applications can be installed on the mobile terminal 2, such as data processing applications, instant messaging tools, social platform software, search applications, shopping applications, etc.
[0030] Vehicle 3 can be either hardware or software. When vehicle 3 is hardware, it can be various electronic devices with a display screen that support communication with server 1 and mobile terminal 2, including but not limited to vehicle control units, vehicle entertainment systems, etc. When vehicle 3 is software, it can be installed in the electronic devices described above. Vehicle 3 can be implemented as multiple software programs or software modules, or as a single software program or software module; this application embodiment does not impose any limitations on this.
[0031] Network 4 can be a wired network using coaxial cable, twisted pair, and fiber optic connection, or it can be a wireless network that enables interconnection of various communication devices without wiring, such as Bluetooth, Near Field Communication (NFC), and Infrared. This application embodiment does not limit this.
[0032] Users can directly establish a communication connection between vehicle 3 and server 1 via network 4 to receive or send information related to vehicle function permissions. Alternatively, users can establish a communication connection between mobile terminal 2 and server 1 via network 4 to receive or send information related to vehicle function permissions. Specifically, users can send function permission requests via vehicle 3 or mobile terminal 2. After receiving the request, the server queries the permission status of the function, returns permission information to vehicle 3 or mobile terminal 2, or enables or disables the corresponding permission based on the request.
[0033] It should be noted that the specific types, quantities, and combinations of server 1, mobile terminal 2, vehicle 3, and network 4 can be adjusted according to the actual needs of the application scenario, and this application embodiment does not impose any restrictions on this.
[0034] As mentioned above, in related technologies, the access management of various vehicle functions is usually tied to the vehicle model. For example, all vehicles of a certain model may support the memory parking function, or none may support the air conditioning control function. In other words, the vehicle management platform only configures vehicle access management based on the vehicle model. This configuration method has the following problems:
[0035] 1. The function permission control is too simplistic and lacks multi-dimensional management, resulting in insufficient management flexibility.
[0036] 2. It cannot meet the requirements of certain special scenarios. For example, if it is necessary to test a certain function on one or a few vehicles, fine-grained function permission management cannot be performed.
[0037] 3. It is not possible to associate multiple permissions for a single function. For example, when a certain vehicle is using a specific version of the vehicle software, only the vehicle owner can use it.
[0038] In view of this, embodiments of this application provide a vehicle access control method, which receives a first permission from a permission request sent by a terminal, including a filter chain group with at least one filtering condition, and determines the first permission information through the filter chain group and sends it to the terminal, so that the terminal can manage the first permission based on the first permission information. This realizes configurable settings for vehicle access control, increases the flexibility and generalization of vehicle access control, and improves the security of vehicle access control.
[0039] Figure 2 This is a flowchart illustrating a vehicle access control method provided in an embodiment of this application. Figure 2 The vehicle access management method can be provided by Figure 1 The process is executed on server 1, which can be a vehicle management platform. For example... Figure 2 As shown, the vehicle access control method includes:
[0040] In step S201, a first permission request is sent by the receiving terminal, the first permission request including a first permission.
[0041] In step S202, the first filter chain group corresponding to the first permission is determined.
[0042] The first filter chain includes at least one filter condition.
[0043] In step S203, the first permission information is determined based on the first filter chain group.
[0044] In step S204, first permission information is sent to the terminal so that the terminal can manage the first permission based on the first permission information.
[0045] In this embodiment of the application, the terminal may be as follows: Figure 1 The mobile terminal 2 or vehicle 3 shown can be connected via a network. The vehicle management platform receives a first permission request from the mobile terminal or vehicle. This first permission request includes a first permission, which is a permission that requires permission management. Permission management can include enabling, disabling, querying, and confirming permissions.
[0046] In related technologies, access control is managed only at the vehicle type level. After receiving a permission request from a mobile terminal or vehicle, the vehicle management platform queries whether the vehicle type of the vehicle or the vehicle connected to the mobile terminal supports the corresponding permission in the request to manage vehicle access. This method is inflexible, has limited use cases, and is not very secure.
[0047] In this embodiment, after receiving a first permission request, the vehicle management platform can determine the first filter chain group corresponding to the first permission in the first permission request. The first filter chain group refers to an array composed of filtering conditions used to manage the first permission. These filtering conditions are used to determine vehicle function permission conditions, including but not limited to vehicle model, in-vehicle remote communication device software version, vehicle software version, user authorization status, vehicle identifier, and user subscription / purchase status. In one example, if the filtering conditions for managing the first permission include vehicle model, in-vehicle remote communication device software version, and vehicle software version, then the first filter chain group can be (vehicle model, in-vehicle remote communication device software version, vehicle software version). The first filter chain group and its correspondence with the first permission can be stored in the vehicle management platform. In other words, in this embodiment, the vehicle management platform can determine the filter chain group corresponding to the vehicle permission included in the received permission request.
[0048] In this embodiment, first permission information can be determined based on a first filter chain. As mentioned above, the first filter chain is an array including at least one filter condition. By determining whether a vehicle meets each filter condition in the first filter chain, the first permission information can be determined. The first permission information can be confirmation that the vehicle has first permission, confirmation that the vehicle does not have first permission, or that the vehicle can use first permission after meeting preset conditions, such as performing a specified operation.
[0049] In this embodiment, after determining the first permission information, the vehicle management platform can send the first permission information to the terminal, so that the terminal and the first permission information can manage the first permission. For example, if the first permission information determined by the vehicle management platform confirms that the vehicle has the first permission, the user can directly control the vehicle or control the vehicle through a mobile terminal to achieve the function corresponding to the first permission. Alternatively, if the first permission information determined by the vehicle management platform confirms that the vehicle does not have the first permission, a prompt indicating that the vehicle does not have the first permission can be displayed on the vehicle's in-vehicle infotainment system (IVI) or the mobile terminal. Furthermore, if the first permission information determined by the vehicle management platform indicates that the vehicle can use the first permission after performing a specified operation, a prompt indicating that the vehicle can use the first permission after performing the specified operation can be displayed on the vehicle's IVI or the mobile terminal, and further, prompts on the execution steps of the specified operation can be displayed.
[0050] According to the technical solution provided in the embodiments of this application, by receiving the first permission in the permission request sent by the terminal, a filter chain group including at least one filtering condition is determined, and the first permission information is determined by the filter chain group and sent to the terminal, so that the terminal can manage the first permission based on the first permission information. This realizes the configurable settings of vehicle permission management, increases the flexibility and generalization of vehicle permission management, and improves the security of vehicle permission management.
[0051] Figure 3 This is a flowchart illustrating a method for determining first permission information based on a first filter chain group, as provided in an embodiment of this application. Figure 3 As shown, the method includes the following steps:
[0052] In step S301, the filtering result corresponding to each filtering condition in the first filtering chain group is determined.
[0053] In step S302, the filtering results corresponding to each filtering condition are combined to obtain the first permission information.
[0054] In this embodiment of the application, the filtering result corresponding to each filtering condition in the first filtering chain group can be determined first, and then the filtering results corresponding to each filtering condition can be combined to obtain the first permission information.
[0055] The union of the filtering results corresponding to each filtering condition can be as follows: the first permission information is "true" only when all the filtering results corresponding to each filtering condition are "true"; the first permission information is "false" when any one or more of the filtering results corresponding to each filtering condition are "false"; and the first permission information is also "true" with the additional condition when one of the filtering results corresponding to each filtering condition is "true" with the additional condition.
[0056] In one example, if the first permission is a permission for a specific function of a specific vehicle model, and this function is a paid function, then the first filter chain can be configured as (vehicle model, user subscription purchase status). When a user wants to use this function, they can send a first permission request to the vehicle management platform through the user terminal or the vehicle terminal. Upon receiving the first permission request, the vehicle management platform parses out the first permission and determines the first filter chain corresponding to that first permission. Subsequently, it judges each filter condition in the first filter chain to determine the filter result corresponding to each filter condition. For example, it judges whether the vehicle meets the vehicle model filter condition and whether the vehicle meets the user subscription purchase status filter condition. When the vehicle meets the vehicle model filter condition and the user has subscribed to the function, all filter results in the first filter chain are "true," and the first permission information can be determined as "true." Conversely, if any filter result in the first filter chain is "false," the determined first permission information is also "false." If one filter result is "true" with an additional condition and all other filter conditions are "true," the determined first permission information is also "true" with that additional condition.
[0057] According to the technical solution provided in the embodiments of this application, by first determining the permission result corresponding to each filtering condition in the first filtering chain group, and then taking the union of the permission results corresponding to each filtering condition to obtain the first permission information, various filtering conditions can be combined to quickly and efficiently determine vehicle permissions and improve the efficiency of vehicle permission management.
[0058] It should be noted that when judging each filtering condition, the filtering conditions in the first filtering chain can be executed sequentially. For example, the filtering conditions can be executed in the order they are arranged in the first filtering chain. When the filtering result of a certain filtering condition in the first filtering chain is "false", the first permission information is directly determined to be "false", without the need to execute the filtering of subsequent filtering conditions.
[0059] Furthermore, taking the first filter chain group as an array (vehicle model, vehicle remote communication device software version, vehicle software version, user authorization status, vehicle identifier, user subscription purchase status) as an example, the first permission information can be obtained by filtering each filter condition in the first filter chain group in the following order:
[0060] Execution sequence 1: Vehicle model filtering. Determine if the vehicle is a specified vehicle model. If it is, the filtering result is "true" and continue to the next execution sequence. Otherwise, the filtering result is "false", terminate the filtering operation, and return the first permission information as "false".
[0061] Execution sequence 2: TBOX software version filtering. Determine if the TBOX software version is the specified version. If it is, the filtering result is "true" and continue to the next execution sequence. Otherwise, the filtering result is "false", terminate the filtering operation, and return the first permission information as "false".
[0062] Execution sequence 3: Vehicle software version filtering. Determine whether the software version of other modules in the vehicle, such as the vehicle control unit, is the specified version. If so, the filtering result is "true" and the next execution sequence continues. Otherwise, the filtering result is "false", the filtering operation is terminated, and the first permission information is returned as "false".
[0063] Execution sequence 4: Authorized user filtering, determine whether the user sending the permission request is the car owner, an authorized user, or a visitor. If it is the car owner, the filtering result is "true" and continue to the next execution sequence. If it is an authorized user or a visitor, the filtering result is "false", terminate the filtering operation, and return the first permission information as "false".
[0064] Execution sequence 5: Specify vehicle filtering, determine whether the vehicle identification, such as the vehicle identification number, matches the specified vehicle identification. If it does, the filtering result is "true" and continue to the next execution sequence. Otherwise, the filtering result is "false", terminate the filtering operation, and return the first permission information as "false".
[0065] Execution sequence 6: Subscribed purchase filter. Determine whether the user has purchased the first permission in the first permission request. If so, the filter result is "true" and the first permission information is returned as "true". Otherwise, the filter result is "false" and the first permission information is returned as "false".
[0066] This approach, which pre-defines the execution order of filtering conditions within the filter chain, can improve judgment speed and enhance access control efficiency. It's understood that the specific execution order can be flexibly set according to actual needs; no restrictions are imposed here.
[0067] In this embodiment, the first filter chain group can be a pre-configured filter chain group or a default filter chain group. That is, a suitable first filter chain group can be pre-configured for the first functional permission. Alternatively, to simplify operation, a default filter chain group can be used as the first filter chain group corresponding to the first functional permission. The default filter chain group can also be configured according to actual needs. For example, to avoid needing to modify the first functional chain group when subsequent functional permissions change, the default filter chain group can be configured to include all filtering conditions. On the other hand, to speed up the judgment and reduce resource consumption, a filter chain group including only a few filtering conditions can be configured as the default filter group for the first permission.
[0068] For each function permission of the vehicle, a first filter chain group is pre-configured, or a default filter chain group is specified as the first filter chain group.
[0069] Figure 4 This is a flowchart illustrating a vehicle access control method provided in an embodiment of this application. Wherein, Figure 4 Steps S401 to S404 in the illustrated embodiment are Figure 2 Steps S201 to S204 in the illustrated embodiment are the same and will not be repeated here. Figure 4 As shown, the method further includes the following steps:
[0070] In step S405, in response to a change in the first permission, the first filter chain group corresponding to the first permission is modified.
[0071] In step S406, the first permission information is determined based on the modified first filter chain group.
[0072] In this embodiment, the first filter chain group corresponding to the first permission can be modified at any time. When the first permission changes, for example, when the first permission is expanded from a function permission exclusive to vehicle model A to a function permission supported by both vehicle model A and vehicle model B with vehicle software version C, the filtering conditions "vehicle model" and "vehicle software version" in the first filter chain group must be modified. At this time, the first filter chain group corresponding to the first permission stored in the vehicle management platform can be directly modified, changing "vehicle model" from "vehicle model A" to "vehicle model A and vehicle model B", and adding "vehicle software version C" to "vehicle software version". This allows for flexible updating of the filter chain group corresponding to the permission, achieving real-time and efficient permission management.
[0073] Figure 5 This is a flowchart illustrating a vehicle access control method provided in an embodiment of this application. Wherein, Figure 5 Steps S501 to S504 in the illustrated embodiment are Figure 2 Steps S201 to S204 in the illustrated embodiment are the same and will not be repeated here. Figure 5 As shown, the method further includes the following steps:
[0074] In step S505, in response to the vehicle gaining a second permission, a second filter chain group is configured for the vehicle.
[0075] In step S506, a second permission request is sent by the receiving terminal, the second permission request including a second permission.
[0076] In step S507, the second permission information is determined based on the second filter chain group.
[0077] In step S508, the second permission information is sent to the terminal so that the terminal can manage the second permission based on the second permission information.
[0078] In this embodiment of the application, as technology develops, new functional permissions may emerge. At this time, it is necessary to configure a new filter chain group for the new permissions so that users can manage the new permissions through the terminal.
[0079] In this embodiment, in response to the addition of a second permission to a vehicle, a second filter chain group can be configured for the vehicle. The second filter chain group is the filter chain group corresponding to the second permission. The second filter chain group and its correspondence with the permission can also be stored in the vehicle management platform. The configuration method of the second filter chain group is the same as that of the first filter chain group; that is, the second filter chain group can also be a filter chain group configured for the second permission, or it can be a default filter chain group.
[0080] In this embodiment, the vehicle management platform can assist users in managing second permissions using a terminal based on a second filtering chain. Specifically, the vehicle management platform can receive a second permission request sent by the terminal, the second permission request including the second permission. The platform determines the second permission information based on the second filtering chain and sends the second permission information to the terminal, thereby allowing the user to manage the second permissions through the terminal based on the second permission information.
[0081] In one example, if advanced autonomous driving functions are developed as vehicle technology advances, a corresponding second filter chain can be configured for the permissions of these advanced autonomous driving functions. When configuring the second filter chain, if the function is only applicable to a specific vehicle model, the second filter chain can include an array (vehicle model); if the function is only applicable to a specific vehicle software version for a specific vehicle model, the second filter chain can include an array (vehicle model, vehicle software version); if the function is only applicable to a specific vehicle model and requires payment, the second filter chain can include an array (vehicle model, user subscription purchase status), etc.
[0082] It is understandable that the second filter chain can also be the default filter chain. In this case, there is no need to configure a second filter chain for the second permission; instead, when a second permission request is received from the terminal, the default filter chain is used as the second filter chain to perform conditional filtering and determine the second permission information.
[0083] According to the technical solution provided in the embodiments of this application, after adding new functional permissions, the filter chain group corresponding to the new permission can be further configured, which improves the flexibility of filter chain group configuration and thus improves the flexibility of vehicle permission management.
[0084] The following examples illustrate the workflow of the vehicle access management fee method provided in this application.
[0085] Application Scenario 1: Gray-scale testing of functional permissions.
[0086] If a vehicle manufacturer develops new features for one or more vehicle models and needs to test these new features, a batch of vehicles can be selected for testing after authorization from the owners. However, other vehicles may also have the feature due to software upgrades or other operations. In this case, to avoid affecting non-selected vehicles during testing, a gray-scale test of the new feature can be conducted only on the designated vehicles.
[0087] During testing, the filter chain corresponding to the function permission can be modified for the selected vehicle. This filter chain includes at least the vehicle model and vehicle identifier, where the vehicle identifier can be the vehicle identification number (VIN). A request for this function permission can be sent by the vehicle or a mobile terminal connected to the vehicle. Upon receiving the permission request, the vehicle management platform searches for the corresponding filter chain. The platform filters each condition in the filter chain to determine the vehicle's permission information, i.e., whether the vehicle has the required function permission, and sends this permission information to the vehicle or the mobile terminal connected to the vehicle. After receiving the permission information, the vehicle and mobile terminal can display the permission information on the vehicle's IVI interface or the mobile terminal's app interface, indicating whether the vehicle has the required function permission or not. If the vehicle has the required function permission, it can then use that permission normally. This method allows for the gray-scale testing of some vehicle function permissions without affecting the user experience of other vehicles.
[0088] Application Scenario 2: Confirmation of sellable function permissions.
[0089] If a vehicle requires a purchase for certain permissions, and the user may forget whether they purchased the feature or if their purchase has expired, they can confirm their eligibility by sending a permission request. The user sends the permission request through the vehicle or a connected mobile device. Upon receiving the request, the vehicle management platform determines the corresponding filter chain. Since this is a paid feature, the filter chain must include at least the user's subscription purchase information. This subscription information is automatically recorded by the vehicle management platform after the user subscribes to the feature in the online store, thus controlling access to the feature. The vehicle management platform filters each condition in the filter chain to determine the vehicle's permission information (whether it has the required permission) and sends this information to the vehicle or a connected mobile device. Upon receiving the permission information, the vehicle and mobile device can display it on the vehicle's IVI interface or the mobile app interface, indicating whether the vehicle has the permission or not. If the vehicle has the permission, it can then use it normally.
[0090] Application Scenario 3: The difference in experience between car owners and authorized users.
[0091] For certain vehicle functions, such as privacy-related features, the vehicle owner may wish to have exclusive access to those functions, preventing other authorized users or visitors from using them. In this case, the user can also confirm their eligibility by sending a permission request. The user sends the permission request through the vehicle or a connected mobile device. Upon receiving the request, the vehicle management platform determines the corresponding filter chain, which includes at least the user's authorization status. This authorization status can be determined during vehicle account login, and the result is stored to establish the relationship between the user and the vehicle, thus implementing access control. The vehicle management platform filters each condition in the filter chain to determine the vehicle's permission information—whether the vehicle has the necessary permission—and sends this information to the vehicle or a connected mobile device. Upon receiving the permission information, the vehicle and mobile device can display it on the vehicle's IVI interface or the mobile app interface, indicating whether the vehicle has the permission or not. If the vehicle has the permission, it can then use that permission normally.
[0092] The technical solution adopted in this application embodiment enriches the vehicle access control methods and adds more dimensions of management, such as TBOX version and vehicle software version, thus increasing the control methods for functional permissions and enabling the use of more business scenarios. It can meet the requirements of special scenarios and save subsequent development costs, such as testing a specific functional permission for a specific vehicle; it allows for arbitrary combination of control over functional permissions, for example, setting a specific vehicle version so that only the owner can use a certain function, meaning multi-dimensional control is flexibly configurable and takes effect immediately after configuration. Furthermore, the filtering chain groups for functional permissions can be iteratively added later. At the same time, the technical solution in this application embodiment does not increase operating costs compared to traditional methods; when no filtering chain group configuration is performed, the default filtering chain group can be used directly.
[0093] The following are embodiments of the apparatus described in this application, which can be used to execute the embodiments of the method described in this application. For details not disclosed in the apparatus embodiments of this application, please refer to the embodiments of the method described in this application.
[0094] Figure 6 This is a schematic diagram of a vehicle access control device provided in an embodiment of this application. Figure 6 As shown, the vehicle access control device includes:
[0095] The receiving module 601 is configured to receive a first permission request sent by the terminal, the first permission request including a first permission.
[0096] The determination module 602 is configured to determine the first filter chain group corresponding to the first permission, and the first filter chain group includes at least one filter condition.
[0097] The determination module is also configured to determine first permission information based on the first filter chain group.
[0098] The sending module 603 is configured to send first permission information to the terminal so that the terminal can manage the first permission based on the first permission information.
[0099] According to the technical solution provided in the embodiments of this application, by receiving the first permission in the permission request sent by the terminal, a filter chain group including at least one filtering condition is determined, and the first permission information is determined by the filter chain group and sent to the terminal, so that the terminal can manage the first permission based on the first permission information. This realizes the configurable settings of vehicle permission management, increases the flexibility and generalization of vehicle permission management, and improves the security of vehicle permission management.
[0100] In this embodiment of the application, the filtering conditions include: vehicle model, in-vehicle remote communication device software version, vehicle software version, user authorization status, vehicle identification, and user subscription purchase status.
[0101] In this embodiment of the application, determining the first permission information based on the first filter chain group includes: determining the filtering result corresponding to each filtering condition in the first filter chain group; and taking the union of the filtering results corresponding to each filtering condition to obtain the first permission information.
[0102] According to the technical solution provided in the embodiments of this application, by first determining the permission result corresponding to each filtering condition in the first filtering chain group, and then taking the union of the permission results corresponding to each filtering condition to obtain the first permission information, various filtering conditions can be combined to quickly and efficiently determine vehicle permissions and improve the efficiency of vehicle permission management.
[0103] In this embodiment of the application, the first filter chain group is a pre-configured filter chain group; or the first filter chain group is a default filter chain group; wherein, each vehicle permission corresponds to a filter chain group.
[0104] In this embodiment of the application, the method further includes: in response to a change in the first permission, modifying the first filter chain group corresponding to the first permission; and determining the first permission information based on the modified first filter chain group.
[0105] In this embodiment of the application, the method further includes: in response to the vehicle adding a second permission, configuring a second filter chain group for the vehicle; receiving a second permission request sent by the terminal, the second permission request including the second permission; determining second permission information based on the second filter chain group; and sending the second permission information to the terminal so that the terminal manages the second permission based on the second permission information.
[0106] According to the technical solution provided in the embodiments of this application, after adding new functional permissions, the filter chain group corresponding to the new permission can be further configured, which improves the flexibility of filter chain group configuration and thus improves the flexibility of vehicle permission management.
[0107] In this embodiment of the application, the first permission information includes: the vehicle has first permission, the vehicle does not have first permission, or the vehicle has first permission after meeting preset conditions.
[0108] Figure 7 This is a schematic diagram of the electronic device provided in an embodiment of this application. For example... Figure 7 As shown, the electronic device 7 of this embodiment includes a processor 701, a memory 702, and a computer program 703 stored in the memory 702 and executable on the processor 701. When the processor 701 executes the computer program 703, it implements the steps in the various method embodiments described above. Alternatively, when the processor 701 executes the computer program 703, it implements the functions of each module / unit in the various device embodiments described above.
[0109] Electronic device 7 can be a desktop computer, laptop, handheld computer, cloud server, or other electronic device. Electronic device 7 may include, but is not limited to, processor 701 and memory 702. Those skilled in the art will understand that... Figure 7 This is merely an example of electronic device 7 and does not constitute a limitation on electronic device 7. It may include more or fewer components than shown, or different components.
[0110] The processor 701 can be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), field-programmable gate arrays (FPGAs), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc.
[0111] The memory 702 can be an internal storage unit of the electronic device 7, such as a hard disk or RAM of the electronic device 7. The memory 702 can also be an external storage device of the electronic device 7, such as a plug-in hard disk, Smart Media Card (SMC), Secure Digital (SD) card, Flash Card, etc., equipped on the electronic device 7. The memory 702 can also include both internal and external storage units of the electronic device 7. The memory 702 is used to store computer programs and other programs and data required by the electronic device.
[0112] Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the above-described division of functional units and modules is merely an example. In practical applications, the above functions can be assigned to different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiments can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.
[0113] If an integrated module / unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, all or part of the processes in the methods of the above embodiments can also be implemented by a computer program instructing related hardware. The computer program can be stored in a computer-readable storage medium, and when executed by a processor, it can implement the steps of the various method embodiments described above. The computer program may include computer program code, which can be in the form of source code, object code, executable files, or certain intermediate forms. The computer-readable medium may include: any entity or device capable of carrying computer program code, recording media, USB flash drives, portable hard drives, magnetic disks, optical disks, computer memory, read-only memory (ROM), random access memory (RAM), electrical carrier signals, telecommunication signals, and software distribution media, etc. It should be noted that the content included in the computer-readable medium may be appropriately added to or subtracted according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, according to legislation and patent practice, the computer-readable medium does not include electrical carrier signals and telecommunication signals.
[0114] The above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some of the technical features. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the spirit and scope of the technical solutions of the embodiments of this application, and should all be included within the protection scope of this application.
Claims
1. A vehicle access control method, characterized in that, include: The receiving terminal sends a first permission request, the first permission request including a first permission; Determine the first filter chain group corresponding to the first permission, wherein the first filter chain group is an array consisting of at least one filter condition for managing the first permission; The filtering result corresponding to each filtering condition in the first filtering chain group is determined according to the order of the first filtering chain group, and the filtering result corresponding to each filtering condition is combined to obtain the first permission information. The first permission information is sent to the terminal so that the terminal manages the first permission based on the first permission information.
2. The method according to claim 1, characterized in that, The filtering conditions include: Vehicle model, in-vehicle remote communication device software version, vehicle software version, user authorization status, vehicle identification, and user subscription purchase status.
3. The method according to claim 1 or 2, characterized in that, The first filter chain group is a pre-configured filter chain group; or The first filter chain group is the default filter chain group; Each vehicle permission corresponds to a set of filter chains.
4. The method according to claim 3, characterized in that, The method further includes: In response to a change in the first permission, modify the first filter chain group corresponding to the first permission; The first permission information is determined based on the modified first filter chain group.
5. The method according to claim 3, characterized in that, The method further includes: In response to the vehicle being granted a second permission, a second filter chain group is configured for the vehicle. The receiving terminal sends a second permission request, the second permission request including a second permission; The second permission information is determined based on the second filter chain group; The second permission information is sent to the terminal so that the terminal can manage the second permission based on the second permission information.
6. The method according to claim 1, characterized in that, The first permission information includes: The vehicle has first authority, the vehicle does not have first authority, or the vehicle has first authority after meeting preset conditions.
7. A vehicle access control device, characterized in that, include: The receiving module is configured to receive a first permission request sent by the terminal, wherein the first permission request includes a first permission. The determination module is configured to determine a first filter chain group corresponding to the first permission, wherein the first filter chain group is an array consisting of at least one filter condition for managing the first permission; The determining module is further configured to determine the filtering result corresponding to each filtering condition in the first filtering chain group according to the order of the first filtering chain group, and take the union of the filtering results corresponding to each filtering condition to obtain the first permission information. The sending module is configured to send the first permission information to the terminal so that the terminal manages the first permission based on the first permission information.
8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the method as described in any one of claims 1 to 6.
9. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method as described in any one of claims 1 to 6.
Citation Information
Patent Citations
Vehicle access permission control method, on-board unit, and vehicle
WO2022188809A1