Privacy protection method and device and vehicle

Abstract

The invention discloses a privacy protection method and device and a vehicle, and the method comprises the steps: obtaining an enabled privacy protection mode which is used for indicating that data generated by a service corresponding to a first service type can be communicated between communication modules of the vehicle; according to the privacy protection mode, data generated by a first service is controlled to communicate between communication modules of the vehicle, and the service type of the first service is the first service type. Through the method, the authority control of the in-vehicle communication authority can be realized aiming at a specific type of service, and the personalized demand of a user on the in-vehicle communication authority control is met.

Description

Privacy protection method, device and vehicle Technical Field

[0001] The embodiments of the present application relate to the field of smart cars, and more specifically, to a privacy protection method, device, and vehicle. Background Art

[0002] In recent years, with the rapid development of information and communications technology (ICT), the scale of personal data flows has gradually expanded. Against this backdrop, user privacy protection has received increasing attention, and relevant laws, policies, and technical standards have gradually been introduced.

[0003] Smart cars, a key development area in recent years, also present privacy protection challenges. Due to the unique characteristics of the smart car sector, existing privacy protection technologies developed for mobile phones, computers, cloud computing, and other fields cannot be directly applied to vehicles. Currently, most connected smart vehicles on the market only provide a privacy document for the entire vehicle, without controllable reading instructions. Vehicles even provide "function switches" that, when turned off by the user, disable the entire service or the use of permissions for all services. These approaches, on the one hand, cannot guarantee the protection of users' personal privacy data and fail to meet users' personalized needs for privacy protection. On the other hand, for vehicle safety and user safety, vehicles must strictly restrict the reporting of certain data. Therefore, simply disconnecting the network or disabling permissions for all services is an urgent need for improvement in protecting user privacy.

[0004] Summary of the Invention

[0005] The embodiments of the present application provide a privacy protection method, device, and vehicle, which can implement the management and control of specific permissions for specific types of services and meet the user's personalized needs for personal privacy protection.

[0006] In a first aspect, a privacy protection method is provided, comprising: obtaining an enabled privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a first business type can be communicated between communication modules of a vehicle; and according to the privacy protection mode, controlling the data generated by the first business to communicate between the communication modules of the vehicle, wherein the business type of the first business is the first business type.

[0007] Among them, there are many ways to enable the vehicle to activate the corresponding privacy protection mode.

[0008] In one possible implementation, when a vehicle receives a first instruction from a user, the vehicle may activate a corresponding privacy protection mode. The first instruction may be a voice command from the user, for example, a first voice command input by the user through an onboard microphone. The vehicle recognizes the first voice command and activates the corresponding privacy protection mode.

[0009] In one possible implementation, a user can click on the vehicle's display screen. Once the vehicle detects the user's operation, it can identify the input operation and match the identification result with a preset result. Upon successful matching, the vehicle can activate the corresponding privacy protection mode. For example, the vehicle pre-establishes a mapping relationship between a first option and a first privacy protection mode. When the user clicks on the first option on the vehicle's display screen, the vehicle recognizes the user's operation and determines that it corresponds to the preset operation of clicking on the first option. At this time, the vehicle can activate the first privacy protection mode corresponding to the first option.

[0010] In one possible implementation, a vehicle can quickly set up a privacy protection mode based on a privacy preference profile. A privacy profile can specify one or more application permissions for one or more services. Once the vehicle detects the user's privacy preferences, it can quickly set up and activate privacy protection mode based on the privacy profile.

[0011] The first service type may be a service type of the first service. The specific content of the first service type may be determined based on the actual application of the first service. For example, the first service type may include: legal and regulatory services or non-legal and regulatory services. For another example, the first service type may include: legal and regulatory services, personal safety and vehicle safety services, or value-added experience services.

[0012] It should be understood that in addition to being used to indicate that data generated corresponding to a first business type can be communicated between the vehicle's communication modules, the privacy protection mode turned on by the vehicle can also be used to indicate that data generated corresponding to a certain business type cannot be communicated between the vehicle's communication modules.

[0013] In this embodiment of the present application, data generated by a first service type can be controlled to be communicated between communication modules within the vehicle based on the privacy protection mode enabled by the user. In this way, specific permission management can be implemented for specific types of services, meeting the user's personalized needs for in-vehicle communication permission control.

[0014] In combination with the first aspect, in certain implementations of the first aspect, the privacy protection mode is also used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle, and the method further includes: according to the privacy protection mode, saving the data generated by the second business in the vehicle, and the business type of the second business is the second business type.

[0015] The specific content of the second service type can be determined based on the actual application of the second service. For example, the second service type may include: legal and regulatory services or non-legal and regulatory services. For another example, the second service type may include: legal and regulatory services, personal safety and vehicle safety services, or value-added experience services.

[0016] It should be understood that in addition to being used to indicate that data generated by services corresponding to a second business type can be stored in the vehicle, the privacy protection mode turned on in the vehicle can also be used to indicate that data generated by services corresponding to a certain business type cannot be stored in the vehicle.

[0017] In an embodiment of the present application, data generated by the business corresponding to the second business type can be stored in the vehicle according to the privacy protection mode enabled by the user. In this way, differentiated permission management can be achieved for different types of business, meeting the user's personalized needs for permission control of different categories of business.

[0018] In combination with the first aspect, in certain implementations of the first aspect, the privacy protection mode is also used to indicate that data generated by a business corresponding to a third business type can be sent to an external device, and the method also includes: sending the data generated by the third business to the external device according to the privacy protection mode, and the business type of the third business is the third business type.

[0019] Among them, the external device can be a cloud server, other devices or other vehicles, etc.

[0020] In an embodiment of the present application, data generated by the third business type can be transmitted out of the vehicle according to the user's privacy protection mode, and differentiated permission control can be further implemented for different types of business to meet the user's personalized needs for personal privacy protection.

[0021] In combination with the first aspect, in certain implementations of the first aspect, the privacy protection mode is also used to indicate that data generated by a business corresponding to a fourth business type cannot be sent to an external device, and the method also includes: according to the privacy protection mode, prohibiting the data generated by the fourth business from being sent to the external device, and the type of the fourth business is the fourth business type.

[0022] In this embodiment of the present application, depending on the privacy protection mode enabled, data generated by the third service type can be transmitted out of the vehicle, while data generated by the fourth service type cannot be transmitted out of the vehicle. This approach enables fine-grained control over data access permissions, avoiding the existing practice of preventing data generated by all service types under the permission from being sent to external devices after the permission is disabled.

[0023] It should be understood that the specific content of the third or fourth service type can be determined based on the actual application of the third or fourth service. For example, the third or fourth service type can include: legal and regulatory services or non-legal and regulatory services. For another example, the third or fourth service type can include: legal and regulatory services, personal safety and vehicle safety services, or value-added experience services.

[0024] In combination with the first aspect, in certain implementations of the first aspect, the third business type is a legal and regulatory business type, and the fourth business type is a non-legal and regulatory business type.

[0025] In this embodiment of the present application, depending on the privacy protection mode enabled, data generated by legal and regulatory services can be transmitted out of the vehicle to external devices, while data generated by non-legal and regulatory services cannot be transmitted out of the vehicle to external devices. This approach solves the problem of the existing technology lacking an extreme privacy protection mode and further meets the user's personalized needs for personal privacy protection.

[0026] In combination with the first aspect, in certain implementations of the first aspect, controlling the communication of data generated by the first service between the communication modules of the vehicle according to the privacy protection mode includes: controlling the communication of data generated by the first service between the communication modules of the vehicle according to a first privacy preference profile, wherein the first privacy preference profile corresponds to the privacy protection mode, and the first privacy preference profile is used to indicate that the first service corresponds to the activation of in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to be communicated between the communication modules of the vehicle.

[0027] In combination with the first aspect, in certain implementations of the first aspect, controlling the communication of data generated by the first service between the communication modules of the vehicle according to the privacy protection mode includes: obtaining a first privacy preference profile corresponding to the privacy protection mode, the first privacy preference profile being used to indicate that the first service has a corresponding relationship with the activation of in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to be communicated between the communication modules of the vehicle; controlling the communication of data generated by the first service between the communication modules of the vehicle according to the first privacy preference profile.

[0028] In an embodiment of the present application, for specific types of services, the permission management and control of in-vehicle communication permissions can be quickly implemented through privacy profiles, further meeting the user's personalized needs for in-vehicle communication permission control.

[0029] In combination with the first aspect, in certain implementations of the first aspect, sending the data generated by the third business to the external device according to the privacy protection mode and prohibiting the data generated by the fourth business from being sent to the external device according to the privacy protection mode include: sending the data generated by the third business to the external device and prohibiting the data generated by the fourth business from being sent to the external device according to the second privacy preference profile, wherein the second privacy preference profile has a corresponding relationship with the privacy protection mode, and the second privacy preference profile is used to indicate that the third business has a corresponding relationship with the cloud vehicle communication permission being turned on, and the fourth business has a corresponding relationship with the cloud vehicle communication permission being turned off, and the cloud vehicle communication permission is the permission to send data to the external device.

[0030] In combination with the first aspect, in certain implementations of the first aspect, sending the data generated by the third business to the external device according to the privacy protection mode and prohibiting the data generated by the fourth business from being sent to the external device according to the privacy protection mode include: obtaining a second privacy preference profile corresponding to the privacy protection mode, the second privacy preference profile being used to indicate that the third business has a corresponding relationship with the cloud vehicle communication permission being turned on, and the fourth business has a corresponding relationship with the cloud vehicle communication permission being turned off, and the cloud vehicle communication permission is the permission to send data to the external device; according to the second privacy preference profile, sending the data generated by the third business to the external device, and prohibiting the data generated by the fourth business from being sent to the external device.

[0031] In an embodiment of the present application, differentiated permission control can be quickly implemented for different types of business through privacy profiles, avoiding the situation in the prior art where, after the vehicle dispatch permission is closed, the data generated by all business types corresponding to the permission cannot be sent to external devices, thereby further realizing differentiated permission management.

[0032] In combination with the first aspect, in certain implementations of the first aspect, the first privacy preference profile or the second privacy preference profile includes: information and / or text information that is mutually exclusive with the privacy protection mode function, and the text information includes content associated with the first privacy preference profile or the second privacy preference profile for presentation on a human-computer interaction interface.

[0033] The information regarding mutually exclusive functions with respect to the privacy protection mode can be used to describe that, when privacy protection mode is enabled, certain mutually exclusive functions corresponding to the privacy protection mode are unavailable. For example, when non-legal business type data is prohibited from being transmitted to external data according to the second privacy preference profile, the mutually exclusive information can be used to describe that pet mode is unavailable. Textual information can be used to describe the effects of enabling privacy protection mode, for example, describing that legal business type data can be transmitted out of the vehicle, but non-legal business type data cannot be transmitted out of the vehicle.

[0034] In an embodiment of the present application, text information or mutually exclusive information can be set in the privacy preference configuration file to inform the user of relevant matters regarding starting the privacy protection mode, which can improve the user's human-computer interaction experience.

[0035] In a second aspect, a privacy protection method is provided, which includes: obtaining an enabled privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle; according to the privacy protection mode, the data generated by the second business is saved in the vehicle, and the business type of the second business is the second business type.

[0036] In this embodiment of the present application, the data generated by the second type of business can be controlled to be stored in the vehicle according to the privacy protection mode enabled by the user. In this way, specific permission management can be implemented for specific types of business, meeting the user's personalized needs for vehicle data storage permission control.

[0037] According to a third aspect, a privacy protection method is provided, which includes: obtaining an enabled privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a third business type can be sent to an external device; and according to the privacy protection mode, sending the data generated by the third business to the external device, wherein the business type of the third business is the third business type.

[0038] In this embodiment of the present application, the data generated by the third service type can be controlled and sent to the external device according to the privacy protection mode enabled by the user. In this way, specific permission management can be implemented for specific types of services, meeting the user's personalized needs for external communication permission control.

[0039] In a fourth aspect, a privacy protection method is provided, which includes: obtaining a privacy protection mode of a vehicle, the privacy protection mode including at least one of a first privacy protection mode, a second privacy protection mode, and a third privacy protection mode; and controlling the transmission of business data corresponding to the vehicle according to the privacy protection mode.

[0040] Optionally, the contents of the first to third privacy protection modes can be pre-set by the original equipment manufacturer (OEM). The OEM will present the set privacy protection mode options on the vehicle's display screen, and the user can click on the vehicle's display screen to select the privacy protection mode to be enabled.

[0041] In the embodiment of the present application, the transmission of the vehicle's business data can be controlled according to the vehicle's privacy protection mode, meeting the user's personalized needs for privacy protection.

[0042] In combination with the fourth aspect, in certain implementations of the fourth aspect, the first privacy protection mode is used to indicate whether first business data corresponding to a first business type can be communicated between communication modules of the vehicle; when the first privacy protection mode is used to indicate that the first business data can be communicated between communication modules of the vehicle, controlling the transmission of business data corresponding to the vehicle according to the privacy protection mode includes: controlling the communication of the first business data between communication modules of the vehicle according to the first privacy protection mode.

[0043] In an embodiment of the present application, the communication of the first business data in the vehicle's communication module can be controlled according to the first privacy protection mode selected by the user, and specific permission management can be implemented for specific types of business to meet the user's personalized needs for privacy protection.

[0044] In combination with the fourth aspect, in certain implementations of the fourth aspect, the second privacy protection mode is used to indicate whether second business data corresponding to a second business type can be stored in the vehicle; when the second privacy protection mode indicates that the second business data can be stored in the vehicle, controlling the transmission of the business data corresponding to the vehicle according to the privacy protection mode includes: storing the second business data in the vehicle according to the second privacy protection mode.

[0045] In an embodiment of the present application, the second business data can be stored in the vehicle according to the second privacy protection mode selected by the user, and specific permission management can be implemented for specific types of business, further meeting the user's personalized needs for privacy protection.

[0046] In combination with the fourth aspect, in certain implementations of the fourth aspect, the third privacy protection mode is used to indicate that third business data corresponding to the third business type can be sent to an external device, and controlling the transmission of business data corresponding to the vehicle according to the privacy protection mode includes: sending the third business data to the external device according to the third privacy protection mode.

[0047] Among them, the external device can be a cloud server, other devices or other vehicles, etc.

[0048] In an embodiment of the present application, the third business data can be sent to an external device according to the third privacy protection mode selected by the user, and specific permission management can be implemented for specific types of business, further meeting the user's personalized needs for privacy protection.

[0049] In combination with the fourth aspect, in certain implementations of the fourth aspect, the third business type is a legal and regulatory business type.

[0050] In combination with the fourth aspect, in certain implementations of the fourth aspect, the third privacy protection mode is used to indicate that fourth business data corresponding to the fourth business type cannot be sent to an external device, and controlling the transmission of business data corresponding to the vehicle according to the privacy protection mode includes: prohibiting the fourth business data from being sent to the external device.

[0051] In an embodiment of the present application, in addition to stipulating that the third business data can be sent to external devices, the third privacy protection mode can also stipulate that data of the fourth business type cannot be sent to external devices. In this way, fine-grained control can be achieved for the vehicle's authority to transmit data, avoiding the situation in the prior art where, after the vehicle's permission is closed, the data generated by all business types corresponding to the permission cannot be sent to external devices.

[0052] In combination with the fourth aspect, in certain implementations of the fourth aspect, the fourth business type is a non-legal and regulatory business type.

[0053] In combination with the fourth aspect, in certain implementations of the fourth aspect, the privacy protection mode is associated with a privacy preference profile, and the privacy preference profile is used to indicate at least one of the following: the correspondence between the vehicle's business data and in-vehicle communication permissions, the correspondence between the vehicle's business data and external-vehicle communication permissions, and the correspondence between the vehicle's business data and the vehicle's storage permissions.

[0054] The association of the privacy protection mode with the privacy preference profile can be understood as the privacy protection mode being implementable through the privacy preference profile.

[0055] Optionally, a privacy preference profile can be pre-set by the OEM, and the vehicle can provide a privacy protection mode to the user based on the settings in the privacy preference profile. In the privacy preference profile, the correspondence between the vehicle's business data and different permissions can also be pre-set. For example, a first business data can be set to correspond to enabling in-vehicle communication permissions. A third business data can be set to correspond to enabling external vehicle communication permissions. For another example, a fourth business data can be set to correspond to disabling external vehicle communication permissions.

[0056] In an embodiment of the present application, the privacy protection mode can be quickly set by the correspondence between different types of business data and different permissions set in the privacy preference configuration file, and differentiated permission management can be implemented for different types of business.

[0057] In combination with the fourth aspect, in certain implementations of the fourth aspect, the privacy preference profile includes at least one of the following: control authority and control business, wherein the control authority includes: one or more of in-vehicle communication authority, out-of-vehicle communication authority and data storage authority; the control business is the business corresponding to the control authority.

[0058] In combination with the fourth aspect, in certain implementations of the fourth aspect, the privacy preference profile also includes: information and / or text information that is functionally mutually exclusive with the privacy protection mode; the text information includes: content associated with the privacy preference profile for presentation in the human-computer interaction interface.

[0059] The information mutually exclusive with the privacy protection mode can be used to describe that after a privacy protection mode is enabled, certain functions corresponding to that privacy protection mode are unavailable. For example, after the third privacy protection mode is enabled, the mutually exclusive information can be used to describe that the pet mode is unavailable. The text information can be used to describe the effects that can be achieved after the privacy mode is enabled. For example, after the third privacy protection mode is enabled, the text information can be used to describe that data of the fourth service type cannot be sent to external devices while the third privacy mode is enabled.

[0060] In an embodiment of the present application, some text information or mutually exclusive information can be set in the privacy preference configuration file to inform the user of relevant matters of starting a certain privacy protection mode, which can improve the user's human-computer interaction experience.

[0061] In a fifth aspect, a privacy protection device is provided, which includes: an acquisition unit for acquiring an enabled privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a first business type can be communicated between communication modules of a vehicle; and a processing unit for controlling the data generated by the first business to communicate between communication modules of the vehicle according to the privacy protection mode, wherein the business type of the first business is the first business type.

[0062] In combination with the fifth aspect, in certain implementations of the fifth aspect, the privacy protection mode is also used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle, and the processing unit is further used to save the data generated by the second business in the vehicle according to the privacy protection mode, and the business type of the second business is the second business type.

[0063] In combination with the fifth aspect, in certain implementations of the fifth aspect, the privacy protection mode is also used to indicate that data generated by a business corresponding to a third business type can be sent to an external device, and the processing unit is further used to send the data generated by the third business to the external device according to the privacy protection mode, and the business type of the third business is the third business type.

[0064] In combination with the fifth aspect, in certain implementations of the fifth aspect, the privacy protection mode is also used to indicate that data generated by a business corresponding to a fourth business type cannot be sent to an external device, and the processing unit is further used to prohibit data generated by the fourth business from being sent to the external device according to the privacy protection mode, and the type of the fourth business is the fourth business type.

[0065] In combination with the fifth aspect, in certain implementations of the fifth aspect, the third business type is a legal and regulatory business type, and the fourth business type is a non-legal and regulatory business type.

[0066] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is specifically used to control the communication of data generated by the first service between the communication modules of the vehicle according to the first privacy preference profile, the first privacy preference file has a corresponding relationship with the privacy protection mode, and the first privacy preference profile is used to indicate that the first service has a corresponding relationship with the activation of the in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to communicate between the communication modules of the vehicle.

[0067] In combination with the fifth aspect, in certain implementations of the fifth aspect, the acquisition unit is specifically used to obtain a first privacy preference profile corresponding to the privacy protection mode, where the first privacy preference profile is used to indicate that the first service has a corresponding relationship with the activation of in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to be communicated between the communication modules of the vehicle; the processing unit is specifically used to control the communication of data generated by the first service between the communication modules of the vehicle according to the first privacy preference profile.

[0068] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is specifically used to send the data generated by the third service to the external device and prohibit the data generated by the fourth service from being sent to the external device according to the second privacy preference profile, wherein the second privacy preference profile corresponds to the privacy protection mode, and the second privacy preference profile is used to indicate that the third service has a corresponding relationship with the cloud vehicle communication permission being turned on, and the fourth service has a corresponding relationship with the cloud vehicle communication permission being turned off, and the cloud vehicle communication permission is the permission to send data to the external device.

[0069] In combination with the fifth aspect, in certain implementations of the fifth aspect, the acquisition unit is specifically used to obtain a second privacy preference profile corresponding to the privacy protection mode, the second privacy preference profile is used to indicate that the third service has a corresponding relationship with the activation of the cloud vehicle communication permission, and the fourth service has a corresponding relationship with the closure of the cloud vehicle communication permission, and the cloud vehicle communication permission is the permission to send data to the external device; the processing unit is specifically used to send the data generated by the third service to the external device according to the second privacy preference profile, and prohibit the data generated by the fourth service from being sent to the external device.

[0070] In combination with the fifth aspect, in certain implementations of the fifth aspect, the first privacy preference profile or the second privacy preference profile includes: information and / or text information that is mutually exclusive with the privacy protection mode function, and the text information includes content associated with the first privacy preference profile or the second privacy preference profile for presentation in the human-computer interaction interface.

[0071] In a sixth aspect, a privacy protection device is provided, which includes: an acquisition unit for acquiring an activated privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle; and a processing unit for saving the data generated by the second business in the vehicle according to the privacy protection mode, wherein the business type of the second business is the second business type.

[0072] In the seventh aspect, a privacy protection device is provided, which includes: an acquisition unit for acquiring an enabled privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a third business type can be sent to an external device, and a processing unit for sending the data generated by the third business to the external device according to the privacy protection mode, wherein the business type of the third business is the third business type.

[0073] In an eighth aspect, a privacy protection device is provided, which includes: an acquisition unit for acquiring a privacy protection mode of a vehicle, wherein the privacy protection mode includes at least one of a first privacy protection mode, a second privacy protection mode, and a third privacy protection mode; and a processing unit for controlling the transmission of business data corresponding to the vehicle according to the privacy protection mode.

[0074] In combination with the eighth aspect, in certain implementations of the eighth aspect, the first privacy protection mode is used to indicate whether first business data corresponding to a first business type can be communicated between communication modules of the vehicle; when the first privacy protection mode is used to indicate that the first business data can be communicated between communication modules of the vehicle, the processing unit is specifically used to control the communication of the first business data between the communication modules of the vehicle according to the first privacy protection mode.

[0075] In combination with the eighth aspect, in certain implementations of the eighth aspect, the second privacy protection mode is used to indicate whether second business data corresponding to a second business type can be stored in the vehicle; when the second privacy protection mode indicates that the second business data can be stored in the vehicle, the processing unit is specifically used to save the second business data in the vehicle according to the second privacy protection mode.

[0076] In combination with the eighth aspect, in certain implementations of the eighth aspect, the third privacy protection mode is used to indicate that third business data corresponding to the third business type can be sent to an external device, and the processing unit is specifically used to send the third business data to the external device.

[0077] In combination with the eighth aspect, in certain implementations of the eighth aspect, the third business type is a legal and regulatory business type.

[0078] In combination with the eighth aspect, in certain implementations of the eighth aspect, the third privacy protection mode is used to indicate that fourth business data corresponding to the fourth business type cannot be sent to the external device, and the processing unit is specifically used to prohibit the fourth business data from being sent to the external device.

[0079] In combination with the eighth aspect, in certain implementations of the eighth aspect, the fourth business type is a non-legal and regulatory business type.

[0080] In combination with the eighth aspect, in certain implementations of the eighth aspect, the privacy protection mode is associated with a privacy preference profile, and the privacy preference profile is used to indicate at least one of the following: the correspondence between the vehicle's business data and the in-vehicle communication permissions, the correspondence between the vehicle's business data and the out-of-vehicle communication permissions, and the correspondence between the vehicle's business data and the vehicle's storage permissions.

[0081] In combination with the eighth aspect, in certain implementations of the eighth aspect, the privacy preference profile includes at least one of the following: control authority and control business, wherein the control authority includes: one or more of in-vehicle communication authority, out-of-vehicle communication authority and data storage authority; the control business is the business corresponding to the control authority.

[0082] In combination with the eighth aspect, in certain implementations of the eighth aspect, the privacy preference profile also includes: information and / or text information that is functionally mutually exclusive with the privacy protection mode; the text information includes: content associated with the privacy preference profile for presentation in the human-computer interaction interface.

[0083] In a ninth aspect, a privacy protection device is provided, which includes: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is used to read and execute instructions in the memory, and the device is used to execute the methods in the above aspects.

[0084] In a tenth aspect, a computer-readable medium is provided, wherein the computer-readable medium stores a program code, and when the computer program code is run on a computer, the computer executes the methods in the above aspects.

[0085] In the eleventh aspect, a chip is provided, which includes: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is used to read and execute instructions in the memory, and the device is used to execute the methods in the above aspects.

[0086] In a twelfth aspect, a computer program product is provided, comprising: a computer program, which, when executed, enables a computer to execute the methods in the above aspects.

[0087] In the thirteenth aspect, a component is provided, comprising: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is used to read and execute instructions in the memory, and the component is used to execute the methods in the above-mentioned various aspects.

[0088] The component can be a smart cockpit domain controller in the vehicle or a domain controller with strong computing power. The domain controller with strong computing power can, for example, include components that can run management services and intelligent applications in addition to the operating system.

[0089] In a fourteenth aspect, a vehicle is provided, comprising: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is configured to read and execute instructions in the memory, and the vehicle is configured to execute the methods in the above-mentioned aspects. BRIEF DESCRIPTION OF THE DRAWINGS

[0090] FIG1 is a functional schematic diagram of a vehicle provided in an embodiment of the present application;

[0091] FIG2 is a system architecture applicable to the privacy protection method provided in an embodiment of the present application;

[0092] FIG3 is a schematic flow chart of a privacy protection method provided in an embodiment of the present application;

[0093] FIG4 is a schematic flow chart of another privacy protection method provided in an embodiment of the present application;

[0094] FIG5 is a diagram of an application scenario to which the privacy protection method provided in an embodiment of the present application is applicable;

[0095] FIG6 is a schematic diagram of creating a privacy preference profile according to an embodiment of the present application;

[0096] FIG7 is a schematic diagram of another method for creating a privacy preference profile according to an embodiment of the present application;

[0097] FIG8 is a schematic diagram of a complete privacy permission control method provided in an embodiment of the present application;

[0098] FIG9 is a schematic diagram of another complete privacy permission control method provided in an embodiment of the present application;

[0099] FIG10 is a schematic flow chart of another privacy protection method provided in an embodiment of the present application;

[0100] FIG11 is a schematic diagram of a privacy protection device provided in an embodiment of the present application;

[0101] FIG12 is a schematic diagram of another privacy protection device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0102] The technical solution in this application will be described below with reference to the accompanying drawings.

[0103] For ease of understanding, the following, in conjunction with Figure 1, takes the scenario of intelligent driving as an example to introduce an example scenario to which the embodiments of the present application are applicable. It should be noted that the example of Figure 1 is only to help those skilled in the art understand the embodiments of the present application, and is not intended to limit the application embodiments to the specific numerical values ​​or specific scenarios illustrated. Those skilled in the art can obviously make various equivalent modifications or changes based on the example of Figure 1 given, and such modifications and changes also fall within the scope of the embodiments of the present application.

[0104] FIG1 is a functional schematic diagram of a vehicle 100 provided in an embodiment of the present application. It should be understood that FIG1 and the related description are merely examples and do not limit the vehicle in the embodiment of the present application.

[0105] During implementation, the vehicle 100 can be configured in a fully or partially autonomous driving mode, or can be manually driven by a user. For example, the vehicle 100 can obtain environmental information about its surroundings through the perception system 120 and, based on analysis of the environmental information, derive an autonomous driving strategy to achieve fully autonomous driving, or present the analysis results to the user to achieve partially autonomous driving.

[0106] Vehicle 100 may include various subsystems, such as a perception system 120, a computing platform 130, and a display device 140. Alternatively, vehicle 100 may include more or fewer subsystems, and each subsystem may include one or more components. Furthermore, each subsystem and component of vehicle 100 may be interconnected via wired or wireless means.

[0107] The perception system 120 may include several sensors that sense information about the environment surrounding the vehicle 100. For example, the perception system 120 may include a positioning system, which may be a global positioning system (GPS), a Beidou system, or other positioning systems. The perception system 120 may include one or more of an inertial measurement unit (IMU), a laser radar, a millimeter-wave radar, an ultrasonic radar, and a camera 121.

[0108] The camera device 121 can be used to capture image information of the surrounding environment of the vehicle 100. The camera device 121 can include a monocular camera, a binocular camera, a structured light camera, or a panoramic camera. The image information captured by the camera device 121 can include static image information or video stream information. The image information can be stored in the form of an image or video, or in the form of image or video parameters, such as image brightness, grayscale, color distribution, contrast, pixel, and other parameter information.

[0109] Some or all functions of the vehicle 100 may be controlled by a computing platform 130. The computing platform 130 may include processors 131 to 13n (n is a positive integer). A processor is a circuit capable of processing signals. In one implementation, the processor may be a circuit capable of reading and executing instructions, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, the processor may implement certain functions through the logical relationships of a hardware circuit. The logical relationships of the hardware circuit may be fixed or reconfigurable. For example, the processor may be a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration file to implement the hardware circuit configuration can be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, it can also be a hardware circuit designed for artificial intelligence, which can be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc. In addition, the computing platform 130 can also include a memory for storing instructions. Some or all of the processors 131 to 13n can call the instructions in the memory and execute them to achieve corresponding functions.

[0110] The computing platform 130 may control functions of the vehicle 100 based on input received from various subsystems (eg, the perception system 120). In some embodiments, the computing platform 130 may be operable to provide control over many aspects of the vehicle 100 and its subsystems.

[0111] Optionally, the above components are only an example. In actual applications, the components in the above modules may be added or deleted according to actual needs. Figure 1 should not be understood as a limitation to the embodiments of the present application.

[0112] An autonomous vehicle traveling on a road, such as vehicle 100 above, can identify objects in its surroundings to determine adjustments to its current speed. These objects can be other vehicles, traffic control devices, or other types of objects. In some examples, each identified object can be considered independently, and the speed adjustment to be made to the autonomous vehicle can be determined based on its respective characteristics, such as its current speed, acceleration, and distance from the vehicle.

[0113] Optionally, the vehicle 100 or a perception and computing device associated with the vehicle 100 (e.g., a computing platform 130) can predict the behavior of the identified objects based on the characteristics of the identified objects and the state of the surrounding environment (e.g., traffic, rain, ice on the road, etc.). Optionally, each identified object depends on the behavior of each other, so all identified objects can also be considered together to predict the behavior of a single identified object. The vehicle 100 can adjust its speed based on the predicted behavior of the identified objects. In other words, the autonomous vehicle can determine what stable state the vehicle will need to adjust to (e.g., accelerate, decelerate, or stop) based on the predicted behavior of the objects. In this process, other factors can also be considered to determine the speed of the vehicle 100, such as the lateral position of the vehicle 100 in the road it is traveling on, the curvature of the road, the proximity of static and dynamic objects, etc.

[0114] In addition to providing instructions to adjust the speed of the autonomous vehicle, the computing device may also provide instructions to modify the steering angle of vehicle 100 so that the autonomous vehicle follows a given trajectory and / or maintains a safe lateral and longitudinal distance from objects near the autonomous vehicle (e.g., cars in adjacent lanes on the road).

[0115] The vehicle 100 may be a car, truck, motorcycle, bus, ship, airplane, helicopter, lawn mower, recreational vehicle, amusement park vehicle, construction equipment, tram, golf cart, train, etc., and the embodiments of the present application do not impose any particular limitation.

[0116] In recent years, with the rapid development of information and communications technology (ICT), the scale of personal data flows has gradually expanded. This trend, on the one hand, increases the risk of privacy violations when users use systems, products, and services; on the other hand, it increases the frequency of data breaches, causing numerous companies to be embroiled in user information leaks. Against this backdrop, user privacy protection has received increasing attention, and relevant laws, policies, and technical standards have been gradually introduced.

[0117] An important goal of privacy protection is to achieve consumer-friendly and controllable privacy, which means that the user experience needs to be continuously improved while ensuring basic compliance. Different from the traditional information technology (IT) field, smart cars, as a key development field in recent years, also have privacy protection issues. Because the smart car field has its own unique characteristics, the existing privacy protection technologies in the market for mobile phones, computers, cloud computing and other fields cannot be directly applied to vehicles. For example, in the field of mobile terminals, users can understand the privacy protection content by reading the privacy text of the application, and control the privacy protection through the settings of the system privacy menu. That is, users can control the use of permissions by different applications (APP) through the "Permission Menu" in the system privacy settings menu of the mobile phone.

[0118] In the field of smart cars, most smart connected vehicles on the market can only provide a privacy document for the entire vehicle, and cannot provide controllable reading instructions. Even if users can set privacy protection options, there are very few privacy configurable options that can be provided to users for operation. The vehicle even directly provides some "function switches", and when the user turns off the function switch, the vehicle's overall business or the use of permissions for all businesses is directly turned off. Through these methods, on the one hand, it cannot guarantee that the user's personal privacy data will not be violated, nor can it meet the user's personalized needs for personal privacy protection. On the other hand, for the sake of vehicle safety and personal safety, some data needs to be reported with strict constraints. Therefore, the method of protecting user privacy by simply disconnecting the network and closing permissions for all business uses urgently needs to be improved.

[0119] The embodiments of the present application provide a privacy protection method, device, and vehicle, which can implement the management and control of specific permissions for specific types of services and meet the user's personalized needs for personal privacy protection.

[0120] FIG2 is a system architecture 200 applicable to the privacy protection method provided in an embodiment of the present application. The system architecture 200 can be applied to the vehicle 100 of FIG1 .

[0121] As shown in FIG2 , the system architecture 200 includes a user 210 and a user privacy protection module 220 . The user privacy protection module 220 includes a privacy document and setting management module 221 , a privacy policy management module 222 , and a privacy proxy module 223 .

[0122] The privacy document and settings management module 221 is responsible for interacting with the user 210. For example, after receiving an instruction from the user 210 to turn off the privacy mode switch, the privacy document and settings management module 221 can pass this instruction to the privacy policy management module 222. The privacy policy management module 222 is responsible for parsing the user's instruction and formulating the user's privacy control policy. Specifically, based on the input from the privacy document and settings management module 221, it activates the corresponding control policy and passes the specific actions required to execute the policy to the privacy proxy module 222. After receiving the policy passed by the privacy policy management module 222, the privacy proxy module 223 formally implements the control of the user's privacy. The control objects here can include not only the user's personal data, but also privacy controls in other dimensions such as the user's physical space, depending on the definition of the policy configuration file in the privacy policy management module 222. The control of the user's physical space can include opening or closing car doors, opening or closing the trunk, and so on.

[0123] FIG3 is a schematic flowchart of a privacy protection method provided in an embodiment of the present application. Method 300 may include the following steps:

[0124] S301, obtain the privacy protection mode that is enabled

[0125] The privacy protection mode is used to indicate that data generated by a service corresponding to a first service type can be communicated between the communication modules of the vehicle. The first service type may be a service type of the first service, and the specific content of the first service type may be determined based on the actual application of the first service. For example, the first service type may include: legal and regulatory services or non-legal and regulatory services. For another example, the first service type may include: legal and regulatory services, personal safety and vehicle safety services, or value-added experience services.

[0126] There are multiple ways to obtain the privacy protection mode enabled in a vehicle.

[0127] In one possible implementation, when a vehicle receives a first instruction from a user, the vehicle may activate a corresponding privacy protection mode. The first instruction may be a voice command from the user, for example, a first voice command input by the user through an onboard microphone. The vehicle recognizes the first voice command and activates the corresponding privacy protection mode.

[0128] In one possible implementation, a user can click on the vehicle's display screen. Once the vehicle detects the user's operation, it can identify the input operation and match the identification result with a preset result. Upon successful matching, the vehicle can activate the corresponding privacy protection mode. For example, the vehicle pre-establishes a mapping relationship between a first option and a first privacy protection mode. When the user clicks on the first option on the vehicle's display screen, the vehicle recognizes the user's operation and determines that it corresponds to the preset operation of clicking on the first option. At this time, the vehicle can activate the first privacy protection mode corresponding to the first option.

[0129] In one possible implementation, a vehicle can quickly set up a privacy protection mode based on a privacy preference profile. A privacy profile can specify one or more application permissions for one or more services. Once the vehicle detects the user's privacy preferences, it can quickly set up and activate privacy protection mode based on the privacy profile.

[0130] S302 : Controlling the communication of data generated by the first service between communication modules of the vehicle according to the privacy protection mode.

[0131] Among them, the privacy protection mode turned on by the vehicle can not only be used to indicate that data generated corresponding to the first business type can be communicated between the vehicle's communication modules, but also can be used to indicate that data generated corresponding to a certain business type cannot be communicated between the vehicle's communication modules.

[0132] In this embodiment of the present application, data generated by a first service type can be controlled to be communicated between communication modules within the vehicle based on the privacy protection mode enabled by the user. In this way, specific permission management can be implemented for specific types of services, meeting the user's personalized needs for in-vehicle communication permission control.

[0133] In one possible implementation, the privacy protection mode is also used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle. This step also includes: according to the privacy protection mode, saving the data generated by the second business in the vehicle, and the business type of the second business is the second business type.

[0134] The second service type may be a service type of the second service. The specific content of the second service type may be determined based on the actual application of the second service. For example, the second service type may include: legal and regulatory services or non-legal and regulatory services. For another example, the second service type may include: legal and regulatory services, personal safety and vehicle safety services, or value-added experience services.

[0135] In addition, in addition to being used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle, the privacy protection mode turned on by the vehicle can also be used to indicate that data generated by a business corresponding to a certain business type cannot be stored in the vehicle.

[0136] In an embodiment of the present application, data generated by the business corresponding to the second business type can be stored in the vehicle according to the privacy protection mode enabled by the user. In this way, differentiated permission management can be achieved for different types of business, meeting the user's personalized needs for permission control of different categories of business.

[0137] In one possible implementation, the privacy protection mode is also used to indicate that data generated by a business corresponding to a third business type can be sent to an external device. This step also includes: sending the data generated by the third business to the external device according to the privacy protection mode, and the business type of the third business is the third business type.

[0138] The external device may be a cloud server, other devices or other vehicles, etc. The third service type may be a service type of the third service, and the specific content of the third service type may be determined according to the actual application of the third service.

[0139] In an embodiment of the present application, data generated by the third business type can be transmitted out of the vehicle according to the user's privacy protection mode, and differentiated permission control can be further implemented for different types of business to meet the user's personalized needs for personal privacy protection.

[0140] In one possible implementation, the privacy protection mode is also used to indicate that data generated by a business corresponding to a fourth business type cannot be sent to an external device. This step also includes: according to the privacy protection mode, prohibiting the data generated by the fourth business from being sent to the external device, and the type of the fourth business is the fourth business type.

[0141] The fourth service type may be a service type of the fourth service, and specific content of the fourth service type may be determined according to actual application of the fourth service.

[0142] In this embodiment of the present application, depending on the privacy protection mode enabled, data generated by the third service type can be transmitted out of the vehicle, while data generated by services of the fourth service type cannot be transmitted out of the vehicle. This approach enables fine-grained control over data access permissions, avoiding the existing practice of preventing data generated by all service types corresponding to the permission from being sent to external devices after the permission is disabled.

[0143] In a possible implementation, the third business type is a legal and regulatory business type, and the fourth business type is a non-legal and regulatory business type.

[0144] In this embodiment of the present application, the privacy protection mode can be activated so that data generated during legal and regulatory activities can be transmitted out of the vehicle to external devices, while data generated during non-legal and regulatory activities cannot be transmitted out of the vehicle to external devices. This approach solves the problem of the existing technology lacking an extreme privacy protection mode and meets the user's personalized needs for personal privacy protection.

[0145] In one possible implementation, controlling the communication of data generated by the first service between the communication modules of the vehicle according to the privacy protection mode includes: obtaining a first privacy preference profile corresponding to the privacy protection mode, the first privacy preference profile being used to indicate a correspondence between the first service and the activation of in-vehicle communication permission, the in-vehicle communication permission being the permission for data to be communicated between the communication modules of the vehicle; and controlling the communication of data generated by the first service between the communication modules of the vehicle according to the first privacy preference profile.

[0146] In one possible implementation, controlling the communication of data generated by the first service between the communication modules of the vehicle according to the privacy protection mode includes: controlling the communication of data generated by the first service between the communication modules of the vehicle according to a first privacy preference profile, wherein the first privacy preference profile corresponds to the privacy protection mode, and the first privacy preference profile is used to indicate that the first service corresponds to the activation of in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to be communicated between the communication modules of the vehicle.

[0147] In an embodiment of the present application, for specific types of services, the permission management and control of in-vehicle communication permissions can be quickly implemented through privacy profiles, further meeting the user's personalized needs for in-vehicle communication permission control.

[0148] In one possible implementation, sending the data generated by the third service to the external device according to the privacy protection mode and prohibiting the data generated by the fourth service from being sent to the external device according to the privacy protection mode include: obtaining a second privacy preference profile corresponding to the privacy protection mode, the second privacy preference profile being used to indicate that the third service has a corresponding relationship with the activation of the cloud-vehicle communication permission, and the fourth service has a corresponding relationship with the closure of the cloud-vehicle communication permission, and the cloud-vehicle communication permission is the permission to send data to the external device; according to the second privacy preference profile, sending the data generated by the third service to the external device, and prohibiting the data generated by the fourth service from being sent to the external device.

[0149] In one possible implementation, sending the data generated by the third business to the external device according to the privacy protection mode and prohibiting the data generated by the fourth business from being sent to the external device according to the privacy protection mode include: sending the data generated by the third business to the external device and prohibiting the data generated by the fourth business from being sent to the external device according to the second privacy preference profile, wherein the second privacy preference profile has a corresponding relationship with the privacy protection mode, and the second privacy preference profile is used to indicate that the third business has a corresponding relationship with the cloud vehicle communication permission being turned on, and the fourth business has a corresponding relationship with the cloud vehicle communication permission being turned off, and the cloud vehicle communication permission is the permission to send data to the external device.

[0150] In an embodiment of the present application, differentiated permission control can be quickly implemented for different types of business through privacy profiles, avoiding the situation in the prior art where, after the vehicle dispatch permission is closed, the data generated by all business types corresponding to the permission cannot be sent to external devices, thereby further realizing differentiated permission management.

[0151] In one possible implementation, the first privacy preference profile or the second privacy preference profile includes: information and / or text information that is mutually exclusive with the privacy protection mode function, and the text information includes content associated with the first privacy preference profile or the second privacy preference profile for presentation in a human-computer interaction interface.

[0152] Information about mutually exclusive functions with the privacy protection mode can be used to describe that certain mutually exclusive functions corresponding to the privacy protection mode are unavailable after the privacy protection mode is enabled. For example, when non-legal business type data is prohibited from being sent to external data according to the second privacy preference profile, the mutually exclusive information can be used to describe that the pet mode is unavailable. Text information can be used to describe the effects of the privacy protection mode being enabled, for example, text information describing that legal business type data can be transmitted out of the vehicle, but non-legal business type data cannot be transmitted out of the vehicle.

[0153] In an embodiment of the present application, text information or mutually exclusive information can be set in the privacy preference configuration file to inform the user of relevant matters regarding starting the privacy protection mode, which can improve the user's human-computer interaction experience.

[0154] FIG4 is a schematic flowchart of another privacy protection method provided in an embodiment of the present application. Method 400 may be applied to the vehicle 100 of FIG1 .

[0155] The method 400 can be applied to various stages of different product life cycles. The product life cycle can be divided into the following stages.

[0156] (1) Product design stage

[0157] During this stage, the original equipment manufacturer (OEM) can pre-set the user's privacy preference mode. The selection and classification of the privacy preference mode can be based on the current application status of the product.

[0158] (2) Product development stage

[0159] During this stage, OEMs can implement the privacy preference model obtained during the design phase through code or other means.

[0160] (3) Product integration stage

[0161] During this phase, OEMs can review the completion of product software development and perform some non-code-related configuration tasks, such as creating privacy preference configuration files.

[0162] After the product has gone through the above steps, the product can be delivered to the consumer for use. Based on the above stage division, method 400 may include the following steps.

[0163] S401, classify the business involving personal data on the vehicle

[0164] Specifically, this step can be applied to the vehicle design phase. Through this step, the personal data services involved in the vehicle can be divided into the following categories:

[0165] (1) Legal and regulatory related business

[0166] Specifically, if a user uses the vehicle, he or she must agree to the use of business data related to laws and regulations.

[0167] For example, 4.2.3.1 of the national standard 32960 stipulates that the vehicle terminal should save the collected real-time data in the internal storage medium at a maximum time interval of no more than 30 seconds. When the user uses the vehicle, he must comply with this provision in the national standard 32960.

[0168] (2) Business related to personal safety and driving safety

[0169] Specifically, this data service is not related to laws and regulations, but involves services related to the personal safety of users and the driving safety of vehicles.

[0170] For example, the vehicle's engine control data, cockpit control data, vehicle driving position and driving trajectory data, user's call records, user's identity information data, etc.

[0171] (3) Value-added service related businesses

[0172] Specifically, this data service is not related to laws and regulations, but it can bring users a better driving experience.

[0173] For example, the user’s movie viewing records, music playback records, records of interactions with voice assistants, records of the user’s personal habits, etc.

[0174] S402, providing users with multi-level and different-strength privacy protection modes

[0175] Specifically, this step can provide users with multi-level and different-strength privacy protection modes based on the classification of personal business data. Privacy protection modes can be divided into the following categories:

[0176] (1) Experience guarantee model

[0177] Specifically, in the experience guarantee mode, all services on the vehicle can operate normally, and all data generated by the services can be transmitted out of the vehicle.

[0178] (2) Basic Privacy Mode

[0179] Specifically, in basic privacy mode, vehicles operating in connection with legal and regulatory matters, personal safety, and driving safety can operate normally, and the data generated by these services can be transmitted out of the vehicle. However, when other personal data services are being conducted on the vehicle (for example, when conducting value-added services), the data generated cannot be transmitted out of the vehicle.

[0180] (3) Complete privacy mode

[0181] Specifically, in full privacy mode, businesses related to laws and regulations can operate normally on the vehicle, and data generated by such businesses can be transmitted out of the vehicle. However, data generated by other personal data businesses on the vehicle other than businesses related to laws and regulations cannot be transmitted out of the vehicle.

[0182] (4) User-defined mode

[0183] Specifically, the vehicle can control data access permissions based on user preferences. For example, users can set the vehicle to only transmit data generated during value-added services, while not transmitting data generated during personal safety and driving safety services.

[0184] S403, define the permission control granularity to ensure that it can be implemented logically

[0185] Specifically, this step can be applied to the vehicle development stage and involves user rights management. In this step, the use rights of each service can be mapped to a logic, and each logic can be controlled separately without interfering with each other.

[0186] For example, permissions for vehicle data services are divided into local data usage permissions and permissions for transferring data out of the vehicle. During the development phase, these two permissions are mapped to the local data usage logic and the personal data transfer logic, respectively. These two logics can be controlled independently. When the transfer permission is disabled, data generated by the user's service cannot be transferred out of the vehicle, but the data can be used locally.

[0187] For example, the business permissions on the vehicle are divided into storage permissions and in-vehicle communication permissions. During the development stage, the above two permissions correspond to the personal data storage logic and the in-vehicle module communication logic respectively. The two logics are controlled separately. When the storage logic is turned off, the data generated by the user's use of the service cannot be stored in the vehicle, but the communication between the modules in the vehicle can proceed normally.

[0188] S404: Create a privacy preference profile based on the privacy protection mode

[0189] Specifically, this step can be applied to the vehicle integration stage, in which a user's privacy preference profile can be created based on the privacy protection mode.

[0190] Among them, the privacy preference profile is used to describe the operating requirements of each business in the startup mode. The privacy preference profile may include at least one of the following: control authority, control business under the control authority, and other constraints. Among them, the control authority may include: one or more of cloud-vehicle communication, data storage, and in-vehicle communication. Among them, cloud-vehicle communication authority may refer to the authority to send data to the external device, in-vehicle communication authority may refer to the authority to communicate data between the vehicle's communication modules, and storage authority may refer to the authority to store data in the vehicle.

[0191] Controlled services under control permissions may refer to the corresponding controlled services under the above permissions. For example, if the cloud-vehicle communication permission corresponds to the music service, when the cloud-vehicle communication permission is disabled, the data generated by the user's use of the music service in the vehicle cannot be transmitted out of the vehicle and uploaded to the cloud server (a type of external device).

[0192] Other constraints may include: description text, startup events, and preference conflict priorities. The description text describes the function of the user permission, that is, the result of turning on or off the permission. The startup event can be used to explain how the permission is started, for example, by turning on a switch on the vehicle, starting the vehicle, and so on. The preference conflict priority can be used to indicate the priority of starting the user's privacy preference. For example, in full privacy mode, when conducting other business except for laws and regulations, other personal data generated cannot be transmitted out of the vehicle. In pet mode, when conducting other business except for laws and regulations, other personal data generated needs to be transmitted out of the vehicle. In addition, the priority of full privacy mode is greater than the priority of pet mode. When both of these privacy preferences are turned on, the system will turn off the use of pet mode by default.

[0193] It should be understood that pet mode can mean that when the user leaves the vehicle and leaves the pet in the car, the user can observe the status of the pet in the car through the mobile phone. In pet mode, the data generated by the vehicle's video service needs to be transmitted out of the vehicle.

[0194] After creating a privacy preference profile, the vehicle can quickly set the privacy protection mode according to the privacy preference profile and provide the user with the privacy protection mode option on the vehicle. The user can quickly select and set the privacy protection mode through the vehicle's display.

[0195] In this embodiment, the vehicle's services involving personal data are categorized, and privacy preference modes are developed based on the operational requirements of each service. The vehicle can then provide users with privacy protection mode options based on the privacy preference file. In this way, users can quickly set up their privacy preference mode based on their privacy preferences, which not only meets their personalized needs for personal privacy protection but also ensures the security of their personal privacy data.

[0196] FIG5 is a diagram of an application scenario of a privacy protection method provided in an embodiment of the present application. The application scenario described in FIG5 may be a specific application scenario to which the privacy protection method provided in FIG4 is applicable.

[0197] As shown in FIG5(a), when the vehicle is in its initial state, the central control screen displays: a display interface 500 and a function bar 510. Display interface 500 includes user account login information 501, a Bluetooth function icon 505, a Wi-Fi function icon 503, a cellular network signal icon 504, an in-vehicle map application search box 505, a card 506 that switches to displaying all installed vehicle applications, a card 507 that switches to displaying in-vehicle music applications, a card 508 that displays the vehicle's remaining battery life and remaining mileage, and a card 509 that displays the vehicle's 360-degree surround view function. The in-vehicle map application search box 505 may include a user-configured home control 5051 and a go-to-work control 5055. The function bar 510 includes an icon 511 for switching to the central control large screen desktop, a vehicle internal circulation icon 515, a driver's seat heating function icon 513, a driver's area air-conditioning temperature display icon 514, a passenger area air-conditioning temperature display icon 515, a passenger seat heating function icon 516 and a volume setting icon 517.

[0198] As shown in (b) of FIG5 , the graphical user interface (GUI) is an interactive interface of the application card 506. When the vehicle detects that the user clicks on the setting option 5061, the GUI as shown in (c) of FIG5 may be displayed on the display screen of the vehicle.

[0199] As shown in (c) in Figure 5, the GUI is a setting interface, which includes: date and time options, security options, language and input method options, add account options and privacy protection options 5062. When the vehicle detects that the user clicks on the privacy protection option 5062, the GUI shown in (d) in Figure 5 can be displayed on the vehicle's display screen.

[0200] As shown in (d) of Figure 5 , the GUI is a privacy protection interface, which includes: Experience Guarantee Mode option 5063, Basic Privacy Mode option 5064, Full Privacy Mode option 5065, and Custom Mode option 5066. The specific meanings of these four modes have been described in detail in step S403 of Figure 4 and will not be repeated here. When the user selects any of these four modes, the vehicle's privacy protection is set to the corresponding mode. The following example uses the user selecting Custom Mode as an example.

[0201] When the vehicle detects that the user has selected the custom mode option 5066, the vehicle's display screen may display the GUI shown in FIG5(e). This GUI is the custom mode interface, which includes an "allow vehicle dispatch services" option 5067 and a "save" control 5068. The user can select the services to be permitted in the submenu of "allow vehicle dispatch services" option 5067. Legal services are selected by default, and the user can select one or more of personal safety services, vehicle safety services, and value-added experience services. After the user has selected all services and the vehicle detects that the user has clicked the "save" control 5068, the vehicle's privacy protection mode may be set to the corresponding mode.

[0202] In the embodiment of the present application, the user can select or set the privacy protection mode he or she requires through the vehicle-mounted display screen. In this way, the user's personalized needs for personal privacy protection can be met and the user's human-computer interaction experience can be improved.

[0203] FIG6 is a schematic diagram of creating a privacy preference configuration file provided by an embodiment of the present application, which may be a specific embodiment of step S404 in FIG4 .

[0204] As shown in (a) of Figure 6, the privacy preference profile includes: preference N, permission group or other constraints, and related services controlled by the permission group. Among them, preference N represents the total node, N is a positive integer greater than 0, and preference N can be any of the four business modes in step S403 in Figure 4. Permission group a1 and permission group a2 can be secondary nodes, used to represent the scope of permissions constrained by preference N. The type of permission and the activation or deactivation status of the permission can be defined in permission group a1 and permission group a2. Permission group a1 and permission group a2 can refer to the same control permission or different control permissions. For example, permission group a1 and permission group a2 can both refer to cloud-vehicle communication permissions. Alternatively, permission group a1 can refer to cloud-vehicle communication permissions, and permission group a2 can refer to the permission to store data generated by the business in the vehicle. In addition, permission group a1 and permission group a2 can include, but are not limited to: cloud-vehicle communication permissions, permissions for data to be communicated in various communication modules of the vehicle, permissions for storing personal data in the vehicle, and permissions for collecting data from sensors or communication interfaces. One or more of the following.

[0205] Other constraint nodes can be used to describe non-authority-related request content. Other constraints may include: description text, trigger events, and preference conflict priorities.

[0206] Associated Services 1 to 3 can be third-level nodes. Associated Services 1 can be controlled by permission group a1, while Associated Services 2 and 3 can be controlled by permission group a2. Associated Services 1 to 3 can include all services involving personal data, as well as one or more of the following: music, voice memos, automatic parking, and GB 32960 services.

[0207] It should be understood that the structure and content of the privacy preference configuration file shown in (a) of FIG6 are merely exemplary, and the structure and content of the privacy preference configuration file can be flexibly adjusted according to actual project requirements.

[0208] Among them, in the process of making privacy preference files, the control method of user permissions can be adjusted according to different implementation methods.

[0209] In a possible implementation, the permission control method can be implemented in a coarse-grained manner, that is, all related services controlled by the permission group are turned on or off through the permission group.

[0210] For example, as shown in (b) in Figure 6, permission group 1 corresponding to preference 1 is the cloud-vehicle communication permission. When the cloud-vehicle communication permission is closed, all data related to the business corresponding to this permission shall not be transmitted out of the vehicle.

[0211] In a possible implementation, the permission control method can be implemented in a fine-grained control manner, that is, the permission group is enabled or disabled to control some of the related services controlled by the permission group.

[0212] For example, as shown in (c) in Figure 6, preference 2 can correspond to permission group 2 (in-car communication) and permission group 3 (storage). When the in-car communication permission in permission group 2 is turned off, the associated services (music and voice notepad) that use this permission cannot perform in-car communication, and other associated services except music and notepad that use this permission can perform in-car communication. When the storage permission corresponding to permission group 3 is turned off, the data generated by the associated services (user experience improvement) that use this permission will not be stored in the vehicle, and other associated services except user experience improvement that use this permission can be stored in the vehicle. Among them, the user experience improvement service can be that after this service is turned on, the vehicle can collect user data for analysis and provide better services to the user.

[0213] In the embodiment of the present application, when creating a privacy preference file, the user rights can be managed in a coarse-grained or fine-grained manner. In this way, the method of creating a privacy preference file is more diverse, thereby meeting the personalized privacy protection needs of different users.

[0214] FIG7 is a schematic diagram of another method for creating a privacy preference profile provided in an embodiment of the present application. Method 700 can be applied to the vehicle 100 of FIG1 . Method 600 is a detailed introduction to the application of the full privacy mode in step S403 .

[0215] When full privacy mode is enabled, personal data related to legally mandated operations can be transferred out of the vehicle. Personal data related to non-legally mandated operations cannot be transferred out of the vehicle, but can be used locally. When full privacy mode is disabled, non-legally mandated operations can be switched back to the original operating mode, meaning personal data can be restored out of the vehicle, and personal data generated during the mode activation process can continue to be used locally, or all data can be deleted.

[0216] For example, as shown in Figure 7, when full privacy mode is enabled, for GB 32960 services (a type of legal and regulatory service) associated with the cloud-vehicle communication group permission group status being on, personal data related to GB 32960 services is allowed to be transmitted out of the vehicle. For non-legal and regulatory services such as music, voice notes, and automatic parking, personal data related to these services is not allowed to be transmitted out of the vehicle when the cloud-vehicle communication permission group status is off. When full privacy mode is disabled, personal data related to music, voice notes, automatic parking, and GB 32960 services are allowed to be transmitted out of the vehicle.

[0217] Other constraints can include non-permission constraints such as "No data leaving the vehicle while mode is enabled" and "Pet Mode." "No data leaving the vehicle while mode is enabled" can be a descriptive text within other constraints, explaining the effect of enabling cloud-vehicle communication permissions. Pet Mode can be a conflicting event within other constraints; when Full Privacy Mode is enabled, the vehicle's Pet Mode function is unavailable (Pet Mode requires personal data to be transferred out of the vehicle to function).

[0218] It should be understood that other constraints including pet mode are merely exemplary descriptions, and the contents included in other constraints may vary in different projects. OEMs may adjust the configuration file to make settings based on actual needs.

[0219] It should also be understood that the content of legal and regulatory-related businesses is not limited to the businesses specified in GB 32960. The content of legal and regulatory-related businesses can be flexibly adjusted according to the real-time legal and regulatory requirements of different countries, regions, and time periods.

[0220] In an embodiment of the present application, the user can control whether personal business data that is not related to laws and regulations is transmitted out of the vehicle by controlling the opening or closing of the full privacy mode. In this way, the user's personalized needs for personal privacy protection can be met, and the user can choose whether to transmit personal data out of the vehicle.

[0221] FIG8 is a schematic diagram of a complete privacy permission control method provided by an embodiment of the present application. Method 800 can be applied to the vehicle 100 of FIG1 . Method 800 is a flowchart of applying the privacy preference file in FIG7 . Method 800 may include the following steps.

[0222] S801, user enables full privacy mode

[0223] Specifically, after the user activates the full privacy mode, the privacy and copywriting management module 221 can receive the user's instructions and process them.

[0224] S802, full privacy mode activated

[0225] Specifically, the privacy and copywriting management module 221 transmits the user's instruction to start the full privacy module to the privacy policy management module 222 .

[0226] S803: The privacy policy management module parses the complete privacy configuration file and issues the privacy control policy.

[0227] Specifically, the privacy policy management module 222 can parse the configuration file of the complete privacy mode and enable the relevant privacy control policy. For example, the configuration file of the complete privacy mode can be the configuration file shown in Figure 7, and the privacy control policy can also be the privacy control policy shown in Figure 7.

[0228] S804: The privacy policy management module sends the privacy control policy to the privacy proxy module.

[0229] Specifically, the privacy policy management module 222 sends a privacy control policy to the privacy proxy module 223. The privacy control policy may specify that personal data related to services related to GB 32960 is allowed to be released from the vehicle, while personal data related to services such as music, voice memo, and automatic parking is not allowed to be released from the vehicle. Pet mode cannot be activated.

[0230] S805: Business 1 module requests the communication middleware to dispatch a vehicle

[0231] Specifically, business 1 may be a music business, and personal data related to the music business may submit a vehicle dispatch request to the privacy proxy module 223 through the communication middleware.

[0232] It should be understood that in the vehicle's service-oriented architecture (SOA), information exchange is achieved through service-based data protocols (for example, scalable service-oriented middleware over IP (SOME / IP) or data distribution service (DDS)). Different services run as different service callers, so when a service is called, the caller can be identified through the communication middleware, that is, by identifying the identity of the service, it can be determined which service's data needs to be sent out of the vehicle.

[0233] S806: The communication middleware determines the subject and target authority of the service request of business 1

[0234] Specifically, in this step, the communication middleware can identify the subject and authority of business 1 through the identifier carried in the request information, thereby determining that the service request subject of business 1 is the music business and the target authority action is to dispatch a vehicle.

[0235] S807: The communication middleware asks the privacy proxy module whether the music service can be dispatched.

[0236] Specifically, in this step, the communication middleware sends a request message to the privacy proxy module 223 to inquire whether the personal data involved in the music business can be released.

[0237] S808, privacy proxy module execution policy judgment

[0238] Specifically, the privacy proxy module 223 determines whether the personal data involved in the music business can be used to leave the vehicle.

[0239] S809, the communication middleware provides feedback to the privacy proxy module

[0240] Specifically, the communication middleware feeds back to the privacy proxy module 223 that the personal data involved in the music business cannot be taken out of the vehicle.

[0241] S810, the communication middleware sends a rejection request to the service 1 module

[0242] Specifically, after receiving the indication from the privacy proxy module 223 that the music service cannot be dispatched, the communication middleware sends an indication message to service 1 to refuse data dispatch.

[0243] It should be understood that although personal data involved in the music business is not allowed to be transmitted out of the vehicle, this data is used locally.

[0244] S811, Business 2 module requests the communication middleware to dispatch a vehicle

[0245] Specifically, service 2 may be a national standard 32960 service, and personal data related to the national standard 32960 service may submit a vehicle dispatch request to the privacy proxy module 223 through the communication middleware.

[0246] S812, the communication middleware determines the subject and target authority of the service request of business 2

[0247] Specifically, in this step, the communication middleware can identify the subject and authority of business 2 through the identifier in the request information, thereby determining that the service request subject of business 2 is the national standard 32960 business, and the target authority action is to dispatch a vehicle.

[0248] S813: The communication middleware asks the privacy proxy module whether the national standard 32960 service can be dispatched.

[0249] Specifically, in this step, the communication middleware sends information to the privacy proxy module 223 to inquire whether the personal data involved in the national standard 32960 business can be used for vehicle delivery.

[0250] S814, privacy proxy module execution policy judgment

[0251] Specifically, the privacy proxy module 223 determines whether the personal data involved in the national standard 32960 business can be used for vehicle delivery.

[0252] S815, the privacy proxy module provides feedback to the communication middleware

[0253] Specifically, the privacy proxy module 223 feeds back to the communication middleware the personal data involved in the national standard 32960 business so that the vehicle can be dispatched.

[0254] S816, the communication middleware sends personal data covered by GB 32960 to the cloud server

[0255] S817, the communication middleware provides feedback to the privacy proxy module

[0256] Specifically, the personal data involved in the national standard 32960 business is fed back to the communication middleware and the privacy proxy module 223 to indicate that the vehicle has been dispatched successfully.

[0257] In this embodiment of the application, when the user selects to enable full privacy mode, personal data related to legal and regulatory matters is allowed to leave the vehicle, while personal data related to non-legal and regulatory matters is not allowed to leave the vehicle. In this way, the user can control the non-legal and regulatory matters from leaving the vehicle, thereby protecting the user's private data.

[0258] Figure 9 is a schematic diagram of another complete privacy permission control method provided in an embodiment of the present application. Method 900 can be applied to the vehicle 100 in Figure 1. Method 900 is another application scenario of the privacy preference profile in Figure 7. Method 900 and method 800 are parallel technical solutions.

[0259] As shown in (a) of FIG9 , the GUI is a privacy protection interface. After the vehicle detects that the user clicks on the full privacy mode 5065 , the GUI as shown in (b) of FIG9 may be displayed on the display screen of the vehicle.

[0260] The GUI shown in Figure 9 (b) is the full privacy mode interface, which includes: control 801, full privacy mode description text 802, control 803, and pet mode description text 804. The user can use control 801 to enable full privacy mode. When full privacy mode is enabled, the vehicle system will allow personal data generated by legal and regulatory business operations to be released, while personal data generated by other business operations will not be released. In addition, the pet mode control is disabled by default, and pet mode is not available.

[0261] The following is a detailed introduction to the operating principle of the full privacy permission control method.

[0262] As shown in Figure 9 (c), the in-vehicle operating system can provide two operating environments: a normal operating space and a closed sandbox operating space. In the normal operating space, related services can interact with devices outside the vehicle. In the closed sandbox operating space, related services cannot interact with devices outside the vehicle. The sandbox is isolated from the normal space.

[0263] When the user turns on the full privacy mode, the system task manager receives the preference profile. Based on the settings of the preference profile, the system task manager can set the legal and regulatory related business to run in the normal space. At this time, the personal data generated when the legal and regulatory related business is executed can be exported. The system task manager sets other business 1 and other business 2 to run in the sandbox space. The personal data generated when other business 1 and other business 2 are executed cannot be exported. After the user turns off the full privacy mode, the system task manager can move other business 1 and other business 2 in the sandbox out of the closed sandbox running space, and the user can choose whether to delete the data generated when other business 1 and other business 2 are performed.

[0264] The legal and regulatory related business may be the national standard 32960 in FIG. 6 or FIG. 7 , and the other business 1 and the other business 2 may be one or more of the music, voice notepad, and automatic parking businesses in FIG. 6 .

[0265] In an embodiment of the present application, users can control whether non-legal and regulatory related businesses are run in the sandbox space by starting or closing the full privacy mode, thereby protecting the user's privacy while reasonably handling the user's privacy data and providing users with a variety of privacy preference solutions.

[0266] FIG10 is a schematic flowchart of another privacy protection method provided in an embodiment of the present application. The method 1000 may be applied to the vehicle 100 of FIG1 . The method 1000 may include the following steps.

[0267] S1001, obtain the vehicle's privacy protection mode

[0268] The privacy protection mode includes at least one of a first privacy protection mode, a second privacy protection mode, and a third privacy protection mode.

[0269] Optionally, the contents of the first to third privacy protection modes can be pre-set by the OEM. The OEM can present the set privacy protection mode options on the vehicle's display screen, and the user can click on the vehicle's display screen to select the privacy protection mode to be turned on.

[0270] Optionally, the privacy protection mode may be one or more of the privacy protection modes shown in FIG5( d ).

[0271] Among them, there are many ways to obtain the privacy protection mode of the vehicle.

[0272] In one possible implementation, when a vehicle receives a first instruction from a user, the vehicle may select a corresponding privacy protection mode. The first instruction may be a voice command from the user, for example, a first voice command input by the user through an onboard microphone. After the vehicle recognizes the first voice command, it selects the corresponding privacy protection mode.

[0273] In one possible implementation, a user can click on the vehicle's display screen. Once the vehicle detects the user's action, it can identify the input action and match the identified result with a preset result. Upon successful matching, the vehicle can access the corresponding privacy protection mode. For example, the vehicle pre-establishes a mapping relationship between a first option and a first privacy protection mode. When the user clicks on the first option on the vehicle's display screen, the vehicle recognizes the user's action and determines that it corresponds to the preset action of clicking on the first option. At this point, the vehicle can access the first privacy protection mode corresponding to the first option.

[0274] In one possible implementation, a vehicle can quickly set a privacy protection mode based on a privacy preference profile. A privacy profile can specify one or more application permissions for one or more services. When the vehicle detects the user's privacy preferences, it can select a privacy protection mode based on the privacy profile.

[0275] S1002, controlling the transmission of the business data corresponding to the vehicle according to the privacy protection mode

[0276] In an embodiment of the present application, the transmission of the vehicle's business data can be controlled according to the vehicle's privacy protection mode to meet the user's personalized needs for privacy protection.

[0277] In one possible implementation, the first privacy protection mode is used to indicate whether first business data corresponding to a first business type can be communicated between the communication modules of the vehicle; when the first privacy protection mode is used to indicate that the first business data can be communicated between the communication modules of the vehicle, controlling the transmission of the business data corresponding to the vehicle according to the privacy protection mode includes: controlling the communication of the first business data between the communication modules of the vehicle according to the first privacy protection mode.

[0278] Optionally, if the first privacy protection mode is used to indicate that data generated by a service corresponding to a first service type cannot be communicated between communication modules of the vehicle, then controlling the transmission of service data corresponding to the vehicle according to the privacy protection mode includes: prohibiting the communication of the first service data between the communication modules of the vehicle according to the first privacy protection mode.

[0279] In an embodiment of the present application, the communication of the first business data in the vehicle's communication module can be controlled according to the first privacy protection mode selected by the user, and specific permission management can be implemented for specific types of business to meet the user's personalized needs for privacy protection.

[0280] In one possible implementation, the second privacy protection mode is used to indicate whether second business data corresponding to a second business type can be stored in the vehicle; when the second privacy protection mode indicates that the second business data can be stored in the vehicle, controlling the transmission of the business data corresponding to the vehicle according to the privacy protection mode includes: storing the second business data in the vehicle according to the second privacy protection mode.

[0281] Optionally, if the second privacy protection mode is used to indicate that second service data corresponding to a second service type cannot be stored in the vehicle, in this case, controlling the transmission of service data corresponding to the vehicle according to the privacy protection mode includes: prohibiting the second service data from being stored in the vehicle according to the second privacy protection mode.

[0282] In an embodiment of the present application, the second business data can be stored in the vehicle according to the second privacy protection mode selected by the user, and specific permission management can be implemented for specific types of business, further meeting the user's personalized needs for privacy protection.

[0283] In one possible implementation, the third privacy protection mode is used to indicate that third business data corresponding to a third business type can be sent to an external device, and controlling the transmission of business data corresponding to the vehicle according to the privacy protection mode includes: sending the third business data to the external device according to the third privacy protection mode.

[0284] Among them, the external device can be a cloud server, other devices or other vehicles, etc.

[0285] In an embodiment of the present application, the third business data can be sent to an external device according to the third privacy protection mode selected by the user, and specific permission management can be implemented for specific types of business, further meeting the user's personalized needs for privacy protection.

[0286] In a possible implementation, the third business type is a legal and regulatory business type.

[0287] In one possible implementation, the third privacy protection mode is used to indicate that fourth business data corresponding to a fourth business type cannot be sent to an external device, and controlling the transmission of business data corresponding to the vehicle according to the privacy protection mode includes: prohibiting the fourth business data from being sent to the external device.

[0288] In an embodiment of the present application, in addition to stipulating that the third business data can be sent to external devices, the third privacy protection mode can also stipulate that data of the fourth business type cannot be sent to external devices. In this way, fine-grained control can be achieved for the vehicle's authority to transmit data, avoiding the situation in the prior art where, after the vehicle's permission is closed, the data generated by all business types corresponding to the permission cannot be sent to external devices.

[0289] In a possible implementation, the fourth business type is a non-legal and regulatory business type.

[0290] In one possible implementation, the privacy protection mode is associated with a privacy preference profile, and the privacy preference profile is used to indicate at least one of the following: the correspondence between the vehicle's business data and in-vehicle communication permissions, the correspondence between the vehicle's business data and out-of-vehicle communication permissions, and the correspondence between the vehicle's business data and the vehicle's storage permissions.

[0291] The association of the privacy protection mode with the privacy preference profile can be understood as the privacy protection mode being implementable through the privacy preference profile.

[0292] Optionally, the privacy preference profile can be pre-set by the OEM, and the vehicle can provide the user with a privacy protection mode based on the settings in the privacy preference profile. In the privacy preference profile, the correspondence between the vehicle's business data and different permissions can also be pre-set. For example, the first business data can be set to have a correspondence with the in-vehicle communication permission being enabled. The third business data can be set to have a correspondence with the out-vehicle communication permission being enabled. For another example, the fourth business data can be set to have a correspondence with the out-vehicle communication permission being disabled. For another example, the correspondence between the privacy protection mode and each permission can be the correspondence shown in Figures 5 to 7.

[0293] In an embodiment of the present application, the privacy protection mode can be quickly set by the correspondence between different types of business data and different permissions set in the privacy preference configuration file, and differentiated permission management can be implemented for different types of business.

[0294] In one possible implementation, the privacy preference profile includes at least one of the following: control authority and control business, wherein the control authority includes one or more of in-vehicle communication authority, out-of-vehicle communication authority and data storage authority; the control business is the business corresponding to the control authority.

[0295] In one possible implementation, the privacy preference profile also includes: information and / or text information that is functionally mutually exclusive with the privacy protection mode; the text information includes: content associated with the privacy preference profile for presentation on a human-computer interaction interface.

[0296] The information mutually exclusive with the privacy protection mode can be used to describe that, after a privacy protection mode is enabled, certain functions corresponding to that privacy protection mode are unavailable. For example, after the third privacy protection mode is enabled, the mutually exclusive information can be used to describe that the pet mode is unavailable, i.e., the mutually exclusive information can be the mutually exclusive information shown in FIG7 . The text information can be used to describe the effects that can be achieved after the privacy mode is enabled. For example, after the third privacy protection mode is enabled, the text information can be used to describe that data of the fourth service type cannot be sent to external devices while the third privacy mode is enabled, i.e., the descriptive text can be the description text 802 or 804 shown in FIG9 (b).

[0297] In the embodiment of the present application, some text information or mutually exclusive information can be set in the privacy preference configuration file to inform the user of relevant matters after starting a certain privacy protection mode, which can improve the user's human-computer interaction experience.

[0298] The embodiments of the present application also provide a device for implementing any of the above methods. For example, a device is provided that includes units (or means) for implementing each step performed by the vehicle in any of the above methods.

[0299] FIG11 is a schematic diagram of a privacy protection device 1100 provided in an embodiment of the present application. The device 1100 can be applied to the vehicle 100 in FIG1 .

[0300] The apparatus 1100 may include an acquisition unit 1110, a storage unit 1120, and a processing unit 1130. Acquisition unit 1110 may implement corresponding communication functions and may also be referred to as a communication interface or communication unit for acquiring data. Storage unit 1120 is configured to store corresponding instructions and / or data. Processing unit 1130 is configured to perform data processing. Processing unit 1130 may read instructions and / or data from the storage unit to enable the apparatus to implement the aforementioned method embodiments.

[0301] As a design, the device 1100 includes: an acquisition unit 1110, used to obtain an enabled privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a first business type can be communicated between communication modules of the vehicle; a processing unit 1130, used to control the data generated by the first business to communicate between the communication modules of the vehicle according to the privacy protection mode, and the business type of the first business is the first business type.

[0302] In one possible implementation, the privacy protection mode is also used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle, and the processing unit 1130 is further used to save the data generated by the second business in the vehicle according to the privacy protection mode, and the business type of the second business is the second business type.

[0303] In one possible implementation, the privacy protection mode is also used to indicate that data generated by a business corresponding to a third business type can be sent to an external device, and the processing unit 1130 is also used to send the data generated by the third business to the external device according to the privacy protection mode, and the business type of the third business is the third business type.

[0304] In one possible implementation, the privacy protection mode is also used to indicate that data generated by a business corresponding to a fourth business type cannot be sent to an external device, and the processing unit 1130 is further used to prohibit data generated by the fourth business from being sent to the external device according to the privacy protection mode, and the type of the fourth business is the fourth business type.

[0305] In a possible implementation, the third business type is a legal and regulatory business type, and the fourth business type is a non-legal and regulatory business type.

[0306] In one possible implementation, the processing unit 1130 is specifically used to control the communication of data generated by the first service between the communication modules of the vehicle according to the first privacy preference profile, the first privacy preference profile has a corresponding relationship with the privacy protection mode, and the first privacy preference profile is used to indicate that the first service has a corresponding relationship with the activation of in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to be communicated between the communication modules of the vehicle.

[0307] In one possible implementation, the acquisition unit 1110 is specifically used to obtain a first privacy preference profile corresponding to the privacy protection mode, where the first privacy preference profile is used to indicate that the first service has a corresponding relationship with the activation of in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to be communicated between the communication modules of the vehicle; the processing unit 1130 is specifically used to control the communication of data generated by the first service between the communication modules of the vehicle according to the first privacy preference profile.

[0308] In one possible implementation, the processing unit 1130 is specifically configured to send the data generated by the third service to the external device and prohibit the data generated by the fourth service from being sent to the external device according to the second privacy preference profile, wherein the second privacy preference profile corresponds to the privacy protection mode, and the second privacy preference profile is used to indicate that the third service corresponds to the activation of the cloud-vehicle communication permission, and the fourth service corresponds to the closure of the cloud-vehicle communication permission, and the cloud-vehicle communication permission is the permission to send data to the external device.

[0309] In one possible implementation, the acquisition unit 1110 is specifically used to obtain a second privacy preference profile corresponding to the privacy protection mode, where the second privacy preference profile is used to indicate that the third service has a corresponding relationship with the activation of the cloud-vehicle communication permission, and the fourth service has a corresponding relationship with the closure of the cloud-vehicle communication permission, and the cloud-vehicle communication permission is the permission to send data to the external device; the processing unit 1130 is specifically used to send the data generated by the third service to the external device according to the second privacy preference profile, and prohibit the data generated by the fourth service from being sent to the external device.

[0310] As another design, the device 1100 includes: an acquisition unit 1110, used to obtain an activated privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a second business type can be stored in the vehicle, and a processing unit 1130, used to save the data generated by the second business in the vehicle according to the privacy protection mode, and the business type of the second business is the second business type.

[0311] As another design, the device 1100 includes: an acquisition unit 1110, used to obtain an enabled privacy protection mode, wherein the privacy protection mode is used to indicate that data generated by a business corresponding to a third business type can be sent to an external device, and a processing unit 1130, used to send the data generated by the third business to the external device according to the privacy protection mode, and the business type of the third business is the third business type.

[0312] In one possible implementation, the first privacy preference profile or the second privacy preference profile includes: information and / or text information that is mutually exclusive with the privacy protection mode function, and the text information includes content associated with the first privacy preference profile or the second privacy preference profile for presentation in a human-computer interaction interface.

[0313] As another design, the device 1100 includes: an acquisition unit 1110, used to obtain a privacy protection mode of a vehicle, wherein the privacy protection mode includes at least one of a first privacy protection mode, a second privacy protection mode, and a third privacy protection mode; and a processing unit 1130, used to control the transmission of business data corresponding to the vehicle according to the privacy protection mode.

[0314] In one possible implementation, the first privacy protection mode is used to indicate whether first business data corresponding to a first business type can be communicated between the communication modules of the vehicle; when the first privacy protection mode is used to indicate that the first business data can be communicated between the communication modules of the vehicle, the processing unit 1130 is specifically used to control the communication of the first business data between the communication modules of the vehicle according to the first privacy protection mode.

[0315] In one possible implementation, the second privacy protection mode is used to indicate whether second business data corresponding to the second business type can be stored in the vehicle; when the second privacy protection mode indicates that the second business data can be stored in the vehicle, the processing unit 1130 is specifically used to save the second business data in the vehicle according to the second privacy protection mode.

[0316] In a possible implementation, the third privacy protection mode is used to indicate that third service data corresponding to a third service type can be sent to an external device, and the processing unit 1130 is specifically configured to send the third service data to the external device.

[0317] In a possible implementation, the third business type is a legal and regulatory business type.

[0318] In a possible implementation, the third privacy protection mode is used to indicate that fourth service data corresponding to a fourth service type cannot be sent to an external device, and the processing unit 1130 is specifically used to prohibit the fourth service data from being sent to the external device.

[0319] In a possible implementation, the fourth business type is a non-legal and regulatory business type.

[0320] In one possible implementation, the privacy protection mode is associated with a privacy preference profile, and the privacy preference profile is used to indicate at least one of the following: the correspondence between the vehicle's business data and in-vehicle communication permissions, the correspondence between the vehicle's business data and out-of-vehicle communication permissions, and the correspondence between the vehicle's business data and the vehicle's storage permissions.

[0321] In one possible implementation, the privacy preference profile includes at least one of the following: control authority and control business, wherein the control authority includes one or more of in-vehicle communication authority, out-of-vehicle communication authority and data storage authority; the control business is the business corresponding to the control authority.

[0322] In one possible implementation, the privacy preference profile also includes: information and / or text information that is functionally mutually exclusive with the privacy protection mode; the text information includes: content associated with the privacy preference profile for presentation on a human-computer interaction interface.

[0323] It should be understood that the specific process of each unit executing the above corresponding steps has been described in detail in the above method embodiment, and for the sake of brevity, it will not be repeated here.

[0324] It should also be understood that the processing unit 1130 in FIG. 11 may be implemented by at least one processor or processor-related circuit, the acquisition unit 1110 may be implemented by a transceiver or a transceiver-related circuit, and the storage unit may be implemented by at least one memory.

[0325] Optionally, if the device 1100 is located in a vehicle, the processing unit 1130 may be the processors 131 to 13n shown in FIG1 .

[0326] Optionally, the processing unit 1130 may be the processor 1220 in FIG. 12 , the storage unit 1120 may be the memory 1210 in FIG. 12 , and the acquiring unit 1110 may be the communication interface 1230 in FIG. 12 .

[0327] FIG12 is a schematic diagram of another privacy protection device 1200 provided in an embodiment of the present application. The device 1200 can be applied to the vehicle 100 in FIG1 .

[0328] The apparatus 1200 includes a memory 1210, a processor 1220, and a communication interface 1230. The memory 1210, processor 1220, and communication interface 1230 are connected via an internal connection path. The memory 1210 is used to store instructions, and the processor 1220 is used to execute the instructions stored in the memory 1220 to control the input / output interface 1230 to receive / send at least some parameters of the second channel model. Optionally, the memory 1210 can be coupled to the processor 1220 via an interface or integrated with the processor 1220.

[0329] It should be noted that the communication interface 1230 uses a transceiver device such as, but not limited to, a transceiver to implement communication between the communication device 1000 and other devices or a communication network. The communication interface 1230 may also include an input / output interface.

[0330] The processor 1220 stores one or more computer programs, which include instructions. When the instructions are executed by the processor 1220, the privacy protection device 1200 executes the privacy protection technical solutions in the above-mentioned embodiments.

[0331] Alternatively, the device 1200 may be located in the vehicle 100 in FIG. 1 .

[0332] Optionally, the device 1200 may be the computing platform 130 in the vehicle in FIG. 1 .

[0333] An embodiment of the present application further provides a computer-readable medium storing a program code. When the computer program code is executed on a computer, the computer executes any one of the methods in FIG. 3 to FIG. 10 .

[0334] An embodiment of the present application also provides a chip, comprising: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is used to read and execute instructions in the memory to execute any one of the methods in Figures 3 to 10 above.

[0335] A computer program product, characterized in that the computer product comprises: a computer program, which, when executed, enables a computer to execute any one of the methods in FIG. 3 to FIG. 10 .

[0336] A component comprising: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is configured to read and execute instructions in the memory, and the component is configured to execute any one of the methods described in FIG. 3 to FIG. 10 .

[0337] Among them, this component can be an intelligent cockpit domain controller in the vehicle or a domain controller with strong computing power.

[0338] Those skilled in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0339] Those skilled in the art will clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0340] In addition, in the embodiments of the present application, words such as "exemplary" and "for example" are used to indicate examples, illustrations or explanations. Any embodiment or design described in this application as "exemplary" should not be interpreted as being more preferred or more advantageous than other embodiments or design. To be precise, the use of the word "exemplary" is intended to present the concept in a concrete way. In the embodiments of the present application, "corresponding" and "corresponding" can sometimes be used interchangeably. It should be noted that when the distinction is not emphasized, the meanings to be expressed are consistent.

[0341] In this application, "at least one" means one or more, and "more" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone, where A and B can be singular or plural. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0342] In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are merely schematic. For example, the division of the units is merely a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0343] The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple network units. Some or all of these units may be selected to achieve the purpose of this embodiment according to actual needs.

[0344] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0345] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or the part of the technical solution, can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes several instructions for enabling a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0346] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

Claims

1. A privacy protection method, characterized in that: The method comprises: Acquire an enabled privacy protection mode, where the privacy protection mode is used to indicate that data generated by a service corresponding to a first service type can be communicated between communication modules of the vehicle; According to the privacy protection mode, data generated by a first service is controlled to communicate between the communication modules of the vehicle, and the service type of the first service is the first service type.

2. The method according to claim 1, wherein The privacy protection mode is further used to indicate that data generated by a service corresponding to a second service type can be stored in the vehicle, and the method further includes: According to the privacy protection mode, data generated by the second service is stored in the vehicle, and the service type of the second service is the second service type.

3. The method according to claim 1 or 2, wherein: The privacy protection mode is further used to indicate that data generated by a service corresponding to the third service type can be sent to an external device, and the method further includes: According to the privacy protection mode, data generated by the third service is sent to the external device, and the service type of the third service is the third service type.

4. The method according to claim 3, wherein The privacy protection mode is further used to indicate that data generated by a service corresponding to the fourth service type cannot be sent to an external device, and the method further includes: According to the privacy protection mode, data generated by a fourth service is prohibited from being sent to the external device, and the type of the fourth service is the fourth service type.

5. The method according to claim 3 or 4, wherein: The third business type is a legal and regulatory business type, and the fourth business type is a non-legal and regulatory business type.

6. The method according to any one of claims 1 to 5, characterized in that The controlling, according to the privacy protection mode, the communication of data generated by the first service between the communication modules of the vehicle includes: According to a first privacy preference configuration file, data generated by a first service is controlled to be communicated between the communication modules of the vehicle, wherein the first privacy preference file corresponds to the privacy protection mode, and the first privacy preference configuration file is used to indicate that the first service corresponds to the activation of in-vehicle communication permission, and the in-vehicle communication permission is the permission for data to be communicated between the communication modules of the vehicle.

7. The method according to claim 4 or 5, characterized in that The sending of data generated by the third service to the external device according to the privacy protection mode and prohibiting the sending of data generated by the fourth service to the external device according to the privacy protection mode include: According to the second privacy preference profile, the data generated by the third service is sent to the external device, and the data generated by the fourth service is prohibited from being sent to the external device, wherein the second privacy preference profile has a corresponding relationship with the privacy protection mode, and the second privacy preference profile is used to indicate that the third service has a corresponding relationship with the activation of the cloud-vehicle communication permission, and the fourth service has a corresponding relationship with the closure of the cloud-vehicle communication permission, and the cloud-vehicle communication permission is the permission to send data to the external device.

8. The method according to claim 7, wherein The first privacy preference profile or the second privacy preference profile includes: information and / or text information that is mutually exclusive with the privacy protection mode function, and the text information includes content associated with the first privacy preference profile or the second privacy preference profile for presentation in a human-computer interaction interface.

9. A privacy protection device, characterized in that: The device comprises: an acquiring unit, configured to acquire an enabled privacy protection mode, wherein the privacy protection mode is configured to indicate that data generated by a service corresponding to the first service type can be communicated between communication modules of the vehicle; A processing unit is configured to control the communication of data generated by a first service between communication modules of the vehicle according to the privacy protection mode, wherein the service type of the first service is the first service type.

10. The device according to claim 9, wherein The privacy protection mode is further used to indicate that data generated by a service corresponding to the second service type can be stored in the vehicle. The processing unit is further configured to store data generated by a second service in the vehicle according to the privacy protection mode, where the service type of the second service is the second service type.

11. The device according to claim 9 or 10, characterized in that The privacy protection mode is also used to indicate that data generated by a service corresponding to the third service type can be sent to an external device. The processing unit is further configured to send data generated by a third service to the external device according to the privacy protection mode, where the service type of the third service is the third service type.

12. The device according to claim 11, wherein The privacy protection mode is further used to indicate that data generated by a service corresponding to the fourth service type cannot be sent to an external device. The processing unit is further configured to prohibit data generated by a fourth service from being sent to the external device according to the privacy protection mode, where the type of the fourth service is the fourth service type.

13. The device according to claim 11 or 12, characterized in that The third business type is a legal and regulatory business type, and the fourth business type is a non-legal and regulatory business type.

14. The device according to any one of claims 9 to 13, characterized in that The processing unit is specifically configured to control the communication of data generated by the first service between the communication modules of the vehicle according to the first privacy preference configuration file, wherein the first privacy preference configuration file corresponds to the privacy protection mode, and the first privacy preference configuration file is configured to indicate a correspondence between the first service and the activation of in-vehicle communication permission, wherein the in-vehicle communication permission is permission for data to be communicated between the communication modules of the vehicle.

15. The device according to claim 12 or 13, characterized in that The processing unit is specifically used to send data generated by the third service to the external device and prohibit data generated by the fourth service from being sent to the external device according to the second privacy preference profile, wherein the second privacy preference profile has a corresponding relationship with the privacy protection mode, and the second privacy preference profile is used to indicate that the third service has a corresponding relationship with the activation of cloud-vehicle communication permission, and the fourth service has a corresponding relationship with the closure of cloud-vehicle communication permission, and the cloud-vehicle communication permission is the permission to send data to the external device.

16. The device according to claim 15, characterized in that The first privacy preference profile or the second privacy preference profile includes: information and / or text information that is mutually exclusive with the privacy protection mode function, and the text information includes content associated with the first privacy preference profile or the second privacy preference profile for presentation in a human-computer interaction interface.

17. A privacy protection device, characterized in that: include: At least one processor and a memory, wherein the at least one processor is coupled to the memory and configured to read and execute instructions in the memory to perform the method according to any one of claims 1 to 8.

18. A computer-readable medium, characterized in that The computer-readable medium stores a program code, and when the computer program code is run on a computer, the computer is caused to perform the method according to any one of claims 1 to 8.

19. A chip, characterized in that: include: At least one processor and a memory, wherein the at least one processor is coupled to the memory and configured to read and execute instructions in the memory to perform the method according to any one of claims 1 to 8.

20. A computer program product, characterized in that The computer product comprises a computer program, which enables a computer to perform the method according to any one of claims 1 to 8 when the computer program is executed.

21. A component, characterized in that The component includes: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is configured to read and execute instructions in the memory to perform the method according to any one of claims 1 to 8.

22. A vehicle, characterized in that: include: At least one processor and a memory, wherein the at least one processor is coupled to the memory and configured to read and execute instructions in the memory to perform the method according to any one of claims 1 to 8.

Images