Vehicle access authority control method and related device

Abstract

The embodiment of the invention discloses a vehicle access authority control method and a related device, and the method comprises the steps: determining a first mode based on first indication information, and enabling the first mode to be one of a plurality of data protection modes of a vehicle, the plurality of data protection modes of the vehicle comprise modes provided for at least two different vehicle users, and the plurality of data protection modes are used for limiting access to data of the vehicle; and switching the mode of the vehicle into the first mode. According to the invention, the personal data of the owner, relatives and friends, designated drivers, passengers in the vehicle and pedestrians outside the vehicle can be protected.

Description

Vehicle access permission control method and related device Technical Field

[0001] The present application relates to the field of intelligent automobile technology, and in particular to a vehicle access permission control method and related devices. Background Art

[0002] Smart cars can be considered computer-centric, mobile terminal computing devices. Similar to mobile smart terminals, smart cars can have multiple user roles and process the personal data of various roles. For example, in the case of a family car, users include the owner, family members, borrowers, and designated drivers. For example, in the case of a rental car, users include the vehicle owner, rental company employees, and rental personnel. In scenarios where vehicles are used by people other than the owner and family members, failure to protect personal data in the vehicle can easily lead to personal data leaks.

[0003] Summary of the Invention

[0004] The embodiments of the present application disclose a vehicle access permission control method and related devices, which can protect the personal data of various stakeholders such as the vehicle owner, relatives and friends, designated drivers, passengers in the vehicle, and pedestrians outside the vehicle.

[0005] In a first aspect, the present application provides a method for controlling vehicle access rights, the method comprising:

[0006] Determine a first mode based on the first indication information, the first mode being one of multiple data protection modes of the vehicle, the multiple data protection modes of the vehicle including modes provided for at least two different vehicle users, and the multiple data protection modes being used to limit access to data of the vehicle; switch the mode of the vehicle to the first mode.

[0007] This solution can protect personal information in the vehicle from being leaked by providing different modes of restricting access to data for a variety of different users, while providing more services to different users as much as possible and improving user experience.

[0008] In a possible implementation, the first instruction information is instruction information input by a first user, and the first user is a user who has no access restrictions to the vehicle;

[0009] Before determining the first mode based on the first indication information, the method further includes:

[0010] receiving login information of a user system of the vehicle, wherein the login information includes identity information of the first user;

[0011] Based on the aforementioned login information, the aforementioned first user is provided with functional usage rights of the aforementioned vehicle.

[0012] In this solution, after the first user logs into the vehicle's user system, they can instruct the vehicle to lock the first mode and switch the vehicle's mode to the first mode. The first mode can be, for example, valet mode, maintenance mode, used car mode, etc. The valet mode can be a usage mode provided by the vehicle for a third user. The third user can be, for example, an external person such as a borrower, a renter, or a designated driver. In valet mode, the vehicle hides the owner's personal data and disables functions related to the owner's personal information by default. The maintenance mode can be a usage mode provided by the vehicle for a fourth user. The fourth user can be a maintenance person, etc. In this maintenance mode, the vehicle's personal data is encrypted and isolated and cannot be accessed or copied by external devices. The used car transaction mode can be used in scenarios where the vehicle is handed over during the formalities of a used car transaction. In this solution, before handing over the vehicle to someone else for use, the first user can switch the vehicle's mode to the corresponding data protection mode in advance to restrict others from accessing the personal data in the vehicle, thereby protecting personal data.

[0013] In one possible implementation, after determining the first mode based on the first indication information, the method further includes:

[0014] Query the driving status of the aforementioned vehicle;

[0015] The switching of the mode of the vehicle to the first mode includes:

[0016] When the vehicle is stopped, the mode of the vehicle is switched to the first mode.

[0017] In this solution, mode switching can only be performed when the vehicle is parked, ensuring the safety of the vehicle and the user. It also avoids potential safety hazards caused by mode switching due to misoperation.

[0018] In a possible implementation, after determining the first mode based on the first indication information and before switching the mode of the vehicle to the first mode, the method further includes:

[0019] Configure the exit code of the first mode, where the exit code is a verification code for exiting the first mode.

[0020] In this solution, an exit code is set so that only people who know the exit code can exit the first mode, thereby preventing other people from arbitrarily exiting the mode and causing data leakage.

[0021] In one possible implementation, the method further includes: in the first mode, executing one or more operations of transferring ownership of the first user of the vehicle, transferring the authorization authority of the first user, releasing the identity binding between the vehicle and the first user, binding the vehicle to the identity of the new owner of the vehicle, or deleting personal data in the vehicle, wherein the first user is a user with no access restrictions to the vehicle.

[0022] The first mode in this solution is the aforementioned second-hand car transaction mode. In the second-hand car transaction mode, the vehicle can perform the operations described above, thereby improving the efficiency of the second-hand car handover procedures.

[0023] In one possible implementation, the first indication information is information of the second user logging into the user system of the vehicle. The first indication information includes the identity information of the second user. The second user is a user authorized by the first user to log into the user system of the vehicle. The first user is a user who has no access restrictions to the vehicle.

[0024] In this solution, the first mode can be the friends and family mode. The friends and family mode can be a usage mode provided by the vehicle for the second user. The second user can be a family member of the owner, a full-time driver, a relative or friend, etc. For example, in the friends and family mode, the vehicle provides the same function usage permissions as the above-mentioned owner mode by default. Alternatively, the friends and family mode can also limit the second user's use of some functions in the vehicle based on the first user's customized configuration, so as to achieve the purpose of protecting personal data in the vehicle. In this solution, the second user can log in to the vehicle's user system and enter the corresponding friends and family mode independently after authorization by the first user, which is convenient and flexible, and improves the second user's car-using experience.

[0025] In a possible implementation, before determining the first mode based on the first indication information, the method further includes: registering the identity information of the second user in the user system of the vehicle based on the indication information input by the first user.

[0026] In this solution, the friends and family mode can only be used after authorization by the first user. Therefore, before the second user logs into the vehicle's user system, the first user needs to register the second user's identity information to the user system.

[0027] In a possible implementation, the method further includes: configuring functions that are allowed and / or prohibited in the first mode based on the second indication information input by the first user.

[0028] In this solution, the functional usage status of the data protection mode can be customized and flexibly configured to meet the configuration requirements of different scenarios and realize data protection in different vehicle usage scenarios.

[0029] In a possible implementation, after configuring the functions allowed and / or prohibited in the first mode based on the second indication information input by the first user, the method further includes:

[0030] Based on the third indication information, the function usage status configured in the aforementioned first mode is saved as the function usage status of the first application scenario; the first application scenario is one of the multiple application scenarios of the aforementioned first mode, and different application scenarios in the aforementioned multiple application scenarios correspond to different function usage statuses configured in the aforementioned first mode.

[0031] In this solution, the same data protection mode can have functional configurations for multiple different application scenarios, and the functional configurations of different application scenarios can be saved accordingly so that they can be directly selected and used later, thereby improving the switching efficiency of data protection modes.

[0032] In a possible implementation, the method further includes: querying the usage status of the function configured in the first mode; and sending a display instruction, where the display instruction is used to instruct the display of the usage status of the function configured in the first mode.

[0033] In this solution, you can query the usage status of the functions configured in the data protection mode and quickly understand the usage status of each function in the data protection mode.

[0034] In a possible implementation, the method further includes: upon sensing a preset action on the vehicle, activating a second mode among the plurality of data protection modes; the second mode is used to instruct a camera of the vehicle to capture images around the vehicle.

[0035] The second mode in this solution is the off-vehicle shooting prompt mode. Through this mode, you can quickly understand the situation around the vehicle, detect abnormalities around the vehicle in time, and protect the vehicle.

[0036] In a possible implementation manner, after switching the mode of the vehicle to the first mode, the method further includes: activating a third mode based on fourth indication information; the third mode is used to detect the status of passengers in the vehicle.

[0037] The third mode in this solution is the passenger protection mode, which can timely detect safety hazards of passengers and protect passengers from harm.

[0038] In a possible implementation, after switching the mode of the vehicle to the first mode, the method further includes: enabling the fourth mode based on the fifth indication information; the fourth mode is used to turn off the camera and / or microphone in the vehicle.

[0039] The fourth mode in this solution is another passenger protection mode, through which the vehicle cannot obtain the passenger's image and / or voice, thereby protecting the passenger's personal data from leakage.

[0040] In a second aspect, the present application provides a method for controlling vehicle access rights, the method comprising:

[0041] determining a first mode based on the first indication information, the first mode being one of a plurality of data protection modes for the vehicle, the plurality of data protection modes for the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0042] Sending a first message to the vehicle; the first message instructing to switch the mode of the vehicle to the first mode;

[0043] A first response message is received; the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0044] This solution can be implemented by a terminal device, which communicates with the vehicle to instruct it to switch modes. This solution provides different modes for restricting data access for different users, protecting the owner's data while providing more services to different users and improving the user experience.

[0045] In a possible implementation, the first instruction information is instruction information input by a first user, and the first user is a user who has no access restrictions to the vehicle;

[0046] Before determining the first mode based on the first indication information, the method further includes:

[0047] receiving login information of a user system of the vehicle, wherein the login information includes identity information of the first user;

[0048] Based on the aforementioned login information, the aforementioned first user is provided with functional usage rights of the aforementioned vehicle.

[0049] In this solution, after logging into the vehicle's user system, the first user can instruct the vehicle to lock into the first mode and switch the vehicle's mode to the first mode. This first mode can be, for example, the aforementioned valet mode, maintenance mode, or used car mode. Before handing the vehicle over to someone else, the first user can switch the vehicle's mode to a corresponding data protection mode in advance to restrict access to personal data in the vehicle, thereby protecting personal data.

[0050] In one possible implementation, after providing the first user with permission to use the vehicle's functions based on the login information, the method further includes:

[0051] The functions allowed and / or prohibited from use in the first mode are configured based on the second indication information input by the first user.

[0052] In this solution, the functional usage status of the data protection mode can be customized and flexibly configured to meet the configuration requirements of different scenarios and realize data protection in different vehicle usage scenarios.

[0053] In a possible implementation, after configuring the functions allowed and / or prohibited in the first mode based on the second indication information input by the first user, the method further includes:

[0054] Based on the third indication information, the function usage status configured in the aforementioned first mode is saved as the status of the first application scenario; the first application scenario is one of the multiple application scenarios of the aforementioned first mode, and different application scenarios in the aforementioned multiple application scenarios correspond to different function usage statuses configured in the aforementioned first mode.

[0055] In this solution, the same data protection mode can have functional configurations for multiple different application scenarios, and the functional configurations of different application scenarios can be saved accordingly so that they can be directly selected and used later, thereby improving the switching efficiency of data protection modes.

[0056] In a possible implementation, the method further includes: querying the usage status of the function configured in the first mode; and displaying the usage status of the function configured in the first mode.

[0057] In this solution, you can query the usage status of the functions configured in the data protection mode and quickly understand the usage status of each function in the data protection mode.

[0058] In one possible implementation, after determining the first mode based on the first indication information and before sending the first message to the vehicle based on the determined first mode, the method further includes:

[0059] Configure the exit code of the first mode, where the exit code is a verification code for exiting the first mode.

[0060] In this solution, an exit code is set so that only people who know the exit code can exit the first mode, thereby preventing other people from arbitrarily exiting the mode and causing data leakage.

[0061] In a possible implementation, the method further includes: registering identity information of a second user in a user system of the vehicle based on instruction information input by the first user, the first user being a user with no access restrictions to the vehicle, and the identity information of the second user being used by the second user to use the vehicle in a second mode, the second mode being one of multiple data protection modes of the vehicle.

[0062] In this solution, Friends and Family mode requires authorization from the first user. Therefore, before a second user can log into the vehicle's user system, the first user must first register the second user's identity information with the user system, effectively authorizing the second user to log into the system. After obtaining authorization from the first user, the second user can log into the vehicle's user system and enter the corresponding Friends and Family mode. This provides a convenient and flexible experience for the second user.

[0063] In a third aspect, the present application provides a method for controlling vehicle access rights, the method comprising:

[0064] receiving a first message; the first message instructing a mode of the vehicle to be switched to a first mode; the first mode being one of a plurality of data protection modes of the vehicle; the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0065] switching the mode of the vehicle to the first mode;

[0066] Sending a first response message; the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0067] This solution can be implemented by the vehicle or its onboard control system, which can interact and communicate with the aforementioned terminal device, thereby switching vehicle modes based on the terminal device's instructions. This solution provides different modes for restricting data access for different users, protecting the vehicle owner's data while maximizing services for different users and improving the user experience.

[0068] In a possible implementation manner, after receiving the first message, the method further includes: querying the driving status of the vehicle;

[0069] The switching of the mode of the vehicle to the first mode based on the first message includes: when the vehicle is in a stopped state, switching the mode of the vehicle to the first mode based on the first message.

[0070] In this solution, mode switching can only be performed when the vehicle is parked, ensuring the safety of the vehicle and the user. It also avoids potential safety hazards caused by mode switching due to misoperation.

[0071] In one possible implementation, after receiving the first message, the method further includes: querying the identity information of the user currently logged into the user system of the vehicle; the method of switching the mode of the vehicle to the first mode includes: switching the mode of the vehicle to the first mode when the identity information of the user is the identity information of the first user, and the first user is a user who has no access restrictions to the vehicle.

[0072] In this solution, the identity authentication of the currently logged-in user can be performed before switching the vehicle mode. Only the first user has the authority to switch the mode, thereby protecting the vehicle from being controlled by other people.

[0073] In a possible implementation manner, the aforementioned method further includes:

[0074] receiving login information, the login information including identity information of a second user, the second user being a user authorized by the first user to log into the user system of the vehicle, and the first user being a user with no access restrictions to the vehicle;

[0075] The second user is provided with permission to use the functions of the second mode, where the second mode is one of the multiple data protection modes of the vehicle.

[0076] The second mode in this solution can be the above-mentioned friends and family mode. In this solution, the second user can log in to the vehicle's user system and enter the corresponding friends and family mode after the first user's authorization, which is convenient and flexible, and improves the second user's car experience.

[0077] In a fourth aspect, the present application provides a vehicle access permission control device, which is included in the vehicle and includes:

[0078] a determining unit, configured to determine a first mode based on the first indication information, the first mode being one of a plurality of data protection modes for the vehicle, the plurality of data protection modes for the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0079] A switching unit is used to switch the mode of the vehicle to the first mode.

[0080] In a possible implementation, the first instruction information is instruction information input by a first user, and the first user is a user who has no access restrictions to the vehicle;

[0081] The apparatus further includes a receiving unit configured to receive login information of a user system of the vehicle before the determining unit determines the first mode based on the first indication information, wherein the login information includes identity information of the first user;

[0082] The aforementioned device also includes a providing unit for providing the aforementioned first user with functional usage rights of the aforementioned vehicle based on the aforementioned login information.

[0083] In a possible implementation, the apparatus further includes a query unit configured to query a driving state of the vehicle after the determination unit determines the first mode based on the first indication information;

[0084] The switching unit is specifically configured to switch the mode of the vehicle to the first mode when the vehicle is in a stopped state.

[0085] In one possible embodiment, the aforementioned device also includes a first configuration unit, which is used to configure the exit code of the aforementioned first mode after the determination unit determines the first mode based on the first indication information and before the switching unit switches the mode of the aforementioned vehicle to the aforementioned first mode, and the aforementioned exit code is a verification code for exiting the aforementioned first mode.

[0086] In a possible implementation, the aforementioned apparatus further includes an execution unit configured to:

[0087] In the aforementioned first mode, one or more operations of transferring ownership of the aforementioned vehicle to the first user, transferring the authorization authority of the aforementioned first user, releasing the identity binding between the aforementioned vehicle and the aforementioned first user, binding the aforementioned vehicle to the identity of the new owner of the aforementioned vehicle, or deleting personal data in the aforementioned vehicle are performed, and the aforementioned first user is a user with no access restrictions to the aforementioned vehicle.

[0088] In one possible implementation, the first indication information is information of the second user logging into the user system of the vehicle. The first indication information includes the identity information of the second user. The second user is a user authorized by the first user to log into the user system of the vehicle. The first user is a user who has no access restrictions to the vehicle.

[0089] In a possible implementation, the device further includes a registration unit configured to register the identity information of the second user in the user system of the vehicle based on the indication information input by the first user before the determination unit determines the first mode based on the first indication information.

[0090] In a possible implementation, the apparatus further includes a second configuration unit configured to configure functions that are allowed and / or prohibited in the first mode based on second indication information input by the first user.

[0091] In one possible embodiment, the aforementioned device also includes a saving unit, which is used to save the function usage status configured in the aforementioned first mode as the function usage status of the first application scenario based on the third indication information after the aforementioned second configuration unit configures the functions allowed and / or prohibited in the aforementioned first mode based on the second indication information input by the aforementioned first user; the first application scenario is one of the multiple application scenarios of the aforementioned first mode, and different application scenarios in the aforementioned multiple application scenarios correspond to different function usage statuses configured in the aforementioned first mode.

[0092] In a possible implementation, the aforementioned apparatus further includes a query unit, configured to query the usage status of the function configured in the aforementioned first mode;

[0093] The aforementioned device also includes a sending unit, which is used to send a display instruction, and the aforementioned display instruction is used to instruct the display of the function usage status configured in the aforementioned first mode.

[0094] In one possible embodiment, the aforementioned device further includes a starting unit for starting a second mode among the aforementioned multiple data protection modes when a preset action on the aforementioned vehicle is sensed; the aforementioned second mode is used to instruct the camera of the aforementioned vehicle to capture images around the aforementioned vehicle.

[0095] In one possible embodiment, the aforementioned device further includes an enabling unit for enabling a third mode based on fourth indication information after the aforementioned switching unit switches the mode of the aforementioned vehicle to the aforementioned first mode; the aforementioned third mode is used to detect the status of passengers in the aforementioned vehicle.

[0096] In one possible embodiment, the aforementioned activation unit is also used to activate the fourth mode based on the fifth indication information after the aforementioned switching unit switches the mode of the aforementioned vehicle to the aforementioned first mode; the aforementioned fourth mode is used to turn off the camera and / or microphone in the aforementioned vehicle.

[0097] In a fifth aspect, the present application provides a terminal device, the terminal device comprising:

[0098] a determining unit, configured to determine a first mode based on the first indication information, the first mode being one of a plurality of data protection modes for the vehicle, the plurality of data protection modes for the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0099] a sending unit, configured to send a first message to the vehicle; the first message instructing to switch the mode of the vehicle to the first mode;

[0100] The receiving unit is configured to receive a first response message, wherein the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0101] In a possible implementation, the first instruction information is instruction information input by a first user, and the first user is a user who has no access restrictions to the vehicle;

[0102] The terminal device further includes a receiving unit configured to receive login information of a user system of the vehicle before the determining unit determines the first mode based on the first indication information, wherein the login information includes identity information of the first user;

[0103] The aforementioned terminal device also includes a providing unit for providing the aforementioned first user with functional usage rights of the aforementioned vehicle based on the aforementioned login information.

[0104] In one possible embodiment, the terminal device further includes a first configuration unit for configuring the functions allowed and / or prohibited in the first mode based on second indication information input by the first user after the providing unit provides the first user with functional usage rights of the vehicle based on the login information.

[0105] In one possible implementation, the terminal device further includes a saving unit for saving the function usage status configured in the first mode as the status of the first application scenario based on the third indication information after the first configuration unit configures the functions allowed and / or prohibited in the first mode based on the second indication information input by the first user; the first application scenario is one of the multiple application scenarios of the first mode, and different application scenarios among the multiple application scenarios correspond to different function usage statuses configured in the first mode.

[0106] In a possible implementation, the terminal device further includes a query unit configured to query the usage status of the function configured in the first mode;

[0107] The aforementioned terminal device also includes a display unit for displaying the function usage status configured in the aforementioned first mode.

[0108] In one possible implementation, the terminal device further includes a second configuration unit for configuring an exit code for the first mode after the determination unit determines the first mode based on the first indication information and before the sending unit sends the first message to the vehicle based on the determined first mode, wherein the exit code is a verification code for exiting the first mode.

[0109] In one possible embodiment, the terminal device further includes a registration unit for registering the identity information of a second user in the user system of the vehicle based on the instruction information input by the first user, the first user being a user with no access restrictions to the vehicle, and the identity information of the second user being used by the second user to use the vehicle in a second mode, the second mode being one of the multiple data protection modes of the vehicle.

[0110] In a sixth aspect, the present application provides a vehicle access permission control device, which is included in the vehicle and includes:

[0111] a receiving unit configured to receive a first message; the first message instructing a mode of the vehicle to be switched to a first mode; the first mode being one of a plurality of data protection modes of the vehicle; the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being configured to restrict access to data of the vehicle;

[0112] a switching unit, configured to switch the mode of the vehicle to the first mode;

[0113] The sending unit is used to send a first response message; the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0114] In a possible implementation, the apparatus further includes a query unit configured to query the driving status of the vehicle after the receiving unit receives the first message;

[0115] The switching unit is specifically configured to: when the vehicle is in a stopped state, switch the mode of the vehicle to the first mode based on the first message.

[0116] In a possible implementation, the apparatus further includes a query unit, further configured to query the identity information of a user currently logged into the user system of the vehicle after the receiving unit receives the first message;

[0117] The switching unit is specifically configured to switch the mode of the vehicle to the first mode when the identity information of the user is the identity information of the first user, and the first user is a user who has no access restrictions to the vehicle.

[0118] In one possible implementation, the receiving unit is further configured to: receive login information, the login information including identity information of a second user, the second user being a user authorized by the first user to log into the user system of the vehicle, and the first user being a user with no access restrictions to the vehicle;

[0119] The aforementioned device also includes a providing unit for providing the aforementioned second user with functional usage rights of a second mode, where the aforementioned second mode is one of the multiple data protection modes of the aforementioned vehicle.

[0120] In a seventh aspect, the present application provides a vehicle access permission control device, which is included in the vehicle and includes a processor and a memory. The memory is coupled to the processor, and when the processor executes a computer program stored in the memory, it can implement the vehicle access permission control method described in any of the first aspects above. The device may also include a communication interface for communicating with other devices. Exemplarily, the communication interface may be a transceiver, circuit, bus, module, or other type of communication interface.

[0121] In one possible implementation, the apparatus may include:

[0122] memory for storing computer programs;

[0123] A processor is configured to determine a first mode based on first indication information, where the first mode is one of multiple data protection modes of the vehicle, the multiple data protection modes of the vehicle including modes provided for at least two different vehicle users, and the multiple data protection modes are used to restrict access to data of the vehicle; and switch the mode of the vehicle to the first mode.

[0124] It should be noted that the computer program in the memory in this application can be pre-stored or downloaded from the Internet and stored when the device is used. This application does not specifically limit the source of the computer program in the memory. The coupling in the embodiments of this application is an indirect coupling or connection between devices, units or modules, which can be electrical, mechanical or other forms, and is used for information exchange between devices, units or modules.

[0125] In an eighth aspect, the present application provides a terminal device comprising a processor and a memory. The memory is coupled to the processor, and when the processor executes a computer program stored in the memory, the vehicle access permission control method described in any one of the second aspects above can be implemented. The device may also include a communication interface for communicating with other devices. Exemplarily, the communication interface may be a transceiver, circuit, bus, module, or other type of communication interface.

[0126] In one possible implementation, the device may include:

[0127] memory for storing computer programs;

[0128] Processor for:

[0129] determining a first mode based on the first indication information, the first mode being one of a plurality of data protection modes of the vehicle, the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0130] Sending a first message to the vehicle through the communication interface; the first message instructs switching the mode of the vehicle to the first mode;

[0131] A first response message is received through the communication interface; the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0132] It should be noted that the computer program in the memory in this application can be pre-stored or downloaded from the Internet and stored when the device is used. This application does not specifically limit the source of the computer program in the memory. The coupling in the embodiments of this application is an indirect coupling or connection between devices, units or modules, which can be electrical, mechanical or other forms, and is used for information exchange between devices, units or modules.

[0133] In a ninth aspect, the present application provides a vehicle access permission control device, which is included in the vehicle and includes a processor and a memory. The memory is coupled to the processor, and when the processor executes a computer program stored in the memory, it can implement the vehicle access permission control method described in any of the third aspects above. The device may also include a communication interface for communicating with other devices. Exemplarily, the communication interface may be a transceiver, circuit, bus, module, or other type of communication interface.

[0134] In one possible implementation, the apparatus may include:

[0135] memory for storing computer programs;

[0136] Processor for:

[0137] receiving a first message via a communication interface; the first message instructing a mode of the vehicle to be switched to a first mode; the first mode being one of a plurality of data protection modes of the vehicle; the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0138] switching the mode of the vehicle to the first mode;

[0139] A first response message is sent through the communication interface; the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0140] It should be noted that the computer program in the memory in this application can be pre-stored or downloaded from the Internet and stored when the device is used. This application does not specifically limit the source of the computer program in the memory. The coupling in the embodiments of this application is an indirect coupling or connection between devices, units or modules, which can be electrical, mechanical or other forms, and is used for information exchange between devices, units or modules.

[0141] In a tenth aspect, the present application provides a vehicle comprising the vehicle access permission control device described in any one of the fourth, sixth, seventh or ninth aspects above.

[0142] In an eleventh aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, wherein the computer program is executed by a processor to implement the method described in the first aspect or any possible implementation manner of the first aspect;

[0143] In a twelfth aspect, the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, wherein the computer program is executed by a processor to implement the method described in the second aspect or any possible implementation of the second aspect;

[0144] In a thirteenth aspect, the present application provides a computer-readable storage medium storing a computer program, wherein the computer program is executed by a processor to implement the method described in the third aspect or any possible implementation method of the third aspect.

[0145] In a fourteenth aspect, the present application provides a computer program product. When the computer program product is executed by a processor, the method described in the above-mentioned first aspect or any possible implementation of the first aspect will be executed.

[0146] In a fifteenth aspect, the present application provides a computer program product. When the computer program product is executed by a processor, the method described in the second aspect or any possible implementation of the second aspect will be executed.

[0147] In a sixteenth aspect, the present application provides a computer program product. When the computer program product is executed by a processor, the method described in the third aspect or any possible implementation of the third aspect will be executed.

[0148] The solutions provided in the above-mentioned fourth to sixteenth aspects are used to implement or cooperate with the corresponding methods provided in the above-mentioned first, second or third aspects, and therefore can achieve the same or corresponding beneficial effects as the corresponding methods in the first, second or third aspects, and will not be repeated here. BRIEF DESCRIPTION OF THE DRAWINGS

[0149] FIG1 is a schematic diagram of an application scenario provided by an embodiment of the present application;

[0150] FIG2 is a schematic structural diagram of a vehicle control system provided by an embodiment of the present application;

[0151] FIG3 is a schematic diagram of another application scenario provided by an embodiment of the present application;

[0152] FIG4 is a schematic diagram of a method flow chart provided in an embodiment of the present application;

[0153] Figures 5 to 10 are schematic diagrams of the interaction flow of the method provided in the embodiments of the present application;

[0154] 11 to 13 are schematic diagrams showing the logical structure of the device provided in the embodiments of the present application;

[0155] 14 and 15 are schematic diagrams showing the hardware structure of the device provided in the embodiments of the present application. DETAILED DESCRIPTION

[0156] The following is an introduction to the drawings required for use in the embodiments of this application.

[0157] Referring to FIG1 , a schematic diagram illustrating an application scenario of an example of the present application is shown. In this application scenario, a vehicle 100 can interact with a user 110. For example, the vehicle 100 can interact with the user 110 via a human-computer interaction device such as a display screen 102 or a microphone 105. In addition to the display screen 102 and microphone 105, the vehicle 100 also includes a vehicle control system 101, a memory 103, and a camera 104.

[0158] The vehicle control system 101 is the computing system of the vehicle 100 and also the control center of the vehicle 100 .

[0159] For example, see Figure 2. The vehicle control system 101 may include a vehicle mode management module 1011, a rights management module 1012, and a user system 1013. The vehicle mode management module 1011 may be used to manage the status of the vehicle 100 and its components. The rights management module 1012 is used to manage the functional permissions available to vehicle users. The user system 1013 is used to manage vehicle user information, such as user identity information.

[0160] In a possible embodiment, the above-mentioned vehicle mode management module 1011, permission management module 1012 and user system 1013 can be deployed on the processing unit of the vehicle 100. Exemplarily, the vehicle mode management module 1011, permission management module 1012 and user system 1013 can be deployed on the same processing unit. Alternatively, for example, the vehicle mode management module 1011, permission management module 1012 and user system 1013 can be deployed on different processing units respectively. This application does not limit the specific deployment of the vehicle mode management module 1011, permission management module 1012 and user system 1013.

[0161] The display screen 102 is used to display an operable user interface. The display screen 102 can realize human-computer interaction between the vehicle 100 and the user 110. The display screen 102 can be a physical display screen or a virtual display screen.

[0162] The memory 103 can be used to store user information of the vehicle 100 and functional status information of various configurations, etc. The functional status information of the configuration can be found in the subsequent introduction and will not be described in detail here.

[0163] The cameras 104 may include cameras inside and outside the vehicle 100. The cameras inside the vehicle 100 may be used to capture image information inside the vehicle 100, such as facial images of people inside the vehicle 100. The cameras outside the vehicle 100 may be used to capture image information outside the vehicle 100, such as images of the environment surrounding the vehicle 100.

[0164] The microphone 105 may be used to receive voice information from the user 110 , etc. Receiving the voice information from the user 110 via the microphone 105 may also enable human-computer interaction between the vehicle 100 and the user 110 .

[0165] Referring to Figure 3, another application scenario diagram of an example of the present application is shown. In the application scenario shown in Figure 3, the user 110 can control the vehicle 100 through the terminal device 120. Specifically, the terminal device 120 can communicate with the vehicle 100. For example, the terminal device 120 can communicate with the vehicle 100 through a cloud server. Then, the user 110 can perform human-computer interaction with the terminal device 120 and control the vehicle 100 by sending messages to the vehicle 100 through the terminal device 120. For example, the user 110 can perform human-computer interaction with the terminal device 120 through the user interface or voice function provided by the terminal device 120.

[0166] For example, the terminal device may include, but is not limited to, any electronic product based on an intelligent operating system that can interact with a user through input devices such as a keyboard, virtual keyboard, touchpad, touch screen, and voice control device. Such devices include smartphones, tablet computers, handheld computers, or wearable electronic devices (such as smart bracelets or smart watches). The embodiments of this application do not limit the specific form of the terminal device.

[0167] For the application scenarios of Figures 1 and 3 above, user 110 can include a variety of different users. For example, they may include the vehicle owner, the vehicle owner's family members, relatives and friends of the vehicle owner, vehicle rental personnel, vehicle borrowing personnel, designated drivers, or maintenance personnel, etc. The vehicle owner refers to the owner of the vehicle 100. The vehicle rental personnel refers to the person who rents the vehicle 100. The vehicle borrower refers to the person who borrows the vehicle 100. The designated driver refers to the person who drives the vehicle 100 on behalf of the vehicle owner. The maintenance personnel refers to the person who repairs the vehicle 100.

[0168] Based on the above description, in specific vehicle usage scenarios, there will be various different users using the vehicle. The vehicle contains personal data of users such as the owner or their family members. If the personal data in the vehicle is not protected, it is easy to lead to the leakage of personal data. To this end, the embodiment of the present application provides a vehicle access permission control method for protecting the personal data of various stakeholders such as the owner and his or her family members, relatives and friends, designated drivers, passengers in the vehicle, and pedestrians outside the vehicle.

[0169] In one possible embodiment, the vehicle access control method provided in the embodiments of the present application is implemented by a vehicle control system (VCS) in the vehicle. In this case, the VCS receives user instructions through human-computer interaction and then implements the vehicle access control method based on the received instructions. In another possible embodiment, the vehicle access control method provided in the embodiments of the present application can be implemented through interactive communication between a terminal device and the vehicle. Each of these is described below.

[0170] First, we will introduce the specific process of the vehicle control system receiving user instructions through human-computer interaction and then implementing the vehicle access permission control method based on the received instructions. For ease of description, the subsequent operations performed by the vehicle's vehicle control system can be described as being performed by the vehicle. Referring to Figure 4, the vehicle access permission control method provided in this embodiment of the application includes but is not limited to the following steps:

[0171] S401. Determine a first mode based on first indication information, where the first mode is one of multiple data protection modes of the vehicle, where the multiple data protection modes of the vehicle include modes provided for at least two different vehicle users, and the multiple data protection modes are used to limit access to data of the vehicle.

[0172] S402: Switch the mode of the vehicle to the first mode.

[0173] In a specific implementation, the aforementioned multiple data protection modes may include at least two of the following: owner mode, friends and family mode, valet mode, maintenance mode, used car transaction mode, exterior camera mode, first passenger protection mode, or second passenger protection mode. It should be noted that the names of the multiple data protection modes are not limited to those described in the embodiments of this application. The embodiments of this application do not restrict the names of the individual modes within the multiple data protection modes. Any mode that implements the functions described in the embodiments of this application is within the scope of protection of the embodiments of this application.

[0174] The aforementioned owner mode may be a usage mode provided by the vehicle for a first user. The first user may be the vehicle owner or a person authorized by the vehicle owner to manage the vehicle. The first user has no access restrictions to the vehicle. For example, in a specific implementation, after receiving login information input by the first user, the vehicle logs into the vehicle's user system based on the login information and enables owner mode. The login information includes the first user's identity information. This identity information may include, for example, a user's facial image, fingerprint, preset voice information, an owner password, or a user name and password registered with the user system. Specifically, the first user may enter login information through facial recognition, fingerprint recognition, voice recognition, an owner password, or a user name and password. In the facial recognition mode, the login information entered by the first user is the facial image of the first user captured by the vehicle's camera. In the fingerprint recognition mode, the login information entered by the first user is the fingerprint of the first user captured by the vehicle's fingerprint collector. In the voice recognition mode, the login information entered by the first user is the preset voice information of the first user captured by the vehicle's microphone. In the owner password login method, the password entered by the first user and received by the vehicle via the display screen is the login information entered by the first user. For example, the owner password can be any number of numbers, letters, or special symbols, or a string of any number of numbers, letters, or special symbols combined. After the vehicle receives and verifies the login information entered by the first user, it can enable the owner mode. In this owner mode, the vehicle can provide the first user with full functional permissions. This owner mode can be automatically exited when the vehicle is turned off.

[0175] In a possible embodiment, in the description of the above-mentioned vehicle owner mode, the indication information input by the first user may be the first indication information in the above-mentioned step S401, and the above-mentioned first mode is the vehicle owner mode.

[0176] The above-mentioned Friends and Family Mode can be a usage mode provided by the vehicle for a second user. The second user can be a family member of the vehicle owner, a full-time driver, a relative or friend, etc. For example, in the Friends and Family Mode, the vehicle defaults to providing the same function usage permissions as the above-mentioned Owner Mode.

[0177] In a specific implementation, the second user can autonomously enter the vehicle's Friends and Family mode with the authorization of the first user. For example, in the vehicle's Owner mode, the vehicle receives instruction information input by the first user. Based on the instruction information, the second user's identity information is received, and then the received second user's identity information is registered with the user system. This allows the second user to log in to the vehicle's user system using the registered identity information and enter the vehicle's Friends and Family mode.

[0178] The identity information of the second user may include, for example, facial image information, fingerprint information, preset voice information, a user password, or a custom username and password. For example, if the identity information of the second user registered with the user system is facial image information, the vehicle may receive the identity information of the second user by capturing the facial image of the second user via a camera. For example, if the identity information of the second user registered with the user system is fingerprint information, the vehicle may receive the identity information of the second user by capturing the fingerprint of the second user via a fingerprint collector. For example, if the identity information of the second user registered with the user system is preset voice information, the vehicle may receive the identity information of the second user by capturing the preset voice information of the second user via the vehicle's microphone. For example, if the identity information of the second user registered with the user system is a user password, the vehicle may receive the identity information of the second user via a display screen. For example, the user password may be any number of digits, letters, or special symbols, or a string of any number of digits consisting of at least two of the following: digits, letters, or special symbols. For example, if the identity information of the second user registered in the user system is a customized user name and password, then the identity information of the second user received by the vehicle may be the customized user name and password received through the display screen.

[0179] After the vehicle completes registration of the second user's identity information, it may receive login information from the second user for logging into the vehicle user system, the login information including the second user's identity information. After verifying the login information, the vehicle locks the Friends and Family mode based on the login information, thereby switching the vehicle mode to Friends and Family mode.

[0180] In a possible embodiment, in the description of the friends and family mode, the friends and family mode may be the first mode in step S401. The login information input by the second user to log into the vehicle user system is the first information in step S401.

[0181] In one possible embodiment, after the vehicle enters the friends and family mode based on the login information of the second user, the personal data of the second user on the vehicle can be deleted or the user information of the second user in the user system can be cancelled based on the instructions of the second user.

[0182] In one possible embodiment, while in the aforementioned owner mode, the vehicle can query the usage status of functions configured in the friends and family mode. Specifically, it can query whether the usage status of each function in the friends and family mode is permitted or prohibited. In a specific implementation, this query can be performed by the vehicle control system. After querying the corresponding function usage status, the vehicle control system can send a display instruction to the vehicle's display screen, instructing the display screen to display the queried function usage status.

[0183] For example, when the vehicle is in the aforementioned owner mode, it receives an instruction from a first user to select the Friends and Family mode. Based on the instruction, the vehicle can lock the Friends and Family mode among its multiple data protection modes and then query the usage status of the functions configured in the Friends and Family mode.

[0184] In one possible implementation, the indication for selecting the Friends and Family mode may be input by the first user via the vehicle's display screen. For example, a user interface displayed on the vehicle's display screen may include a control indicating the Friends and Family mode. The vehicle, through the user interface, senses a click of the control by the first user and, based on the click, generates the indication for selecting the Friends and Family mode.

[0185] In one possible implementation, the instruction to select the Friends and Family mode may be input by the first user through the vehicle's microphone. For example, the vehicle receives voice information input by the first user through the microphone, and the voice information indicates the selection of the Friends and Family mode. For example, the content of the voice information may be "Friends and Family Mode," "Switch to Friends and Family Mode," or "Go to Friends and Family Mode." This embodiment of the application does not limit the specific content of the voice input.

[0186] In a possible embodiment, the vehicle may receive instruction information from the first user through human-computer interaction to customize the functions allowed and / or prohibited in the above-mentioned friends and family mode.

[0187] In one possible implementation, the vehicle can allow or prohibit the use of one or more apps on the vehicle through custom configuration. For example, it can allow or prohibit the opening of one or more apps through the app icons displayed on the vehicle's display screen. For example, the vehicle can display the function switch control of the app on the display screen, and receive the instruction information of allowing or prohibiting the use of the app by sensing the first user's click operation on the function switch control of the app. Or, for example, the vehicle can receive the voice information input by the first user through the microphone to allow or prohibit the use of a certain app, and then turn on and off the use function of the certain app based on the voice information.

[0188] In one possible implementation, a vehicle can, through custom configuration, allow or prohibit the use of controllable private physical spaces within the vehicle, such as the glove box, front trunk, or rear trunk. For example, the vehicle can display function switch controls for controllable private physical spaces, such as the glove box, front trunk, or rear trunk, on a display screen and receive information indicating whether to allow or prohibit the use of the private physical space by sensing a first user's click on the function switch control for the private physical space. Alternatively, for example, the vehicle can receive a voice message from the first user via a microphone indicating whether to allow or prohibit the use of a particular private physical space, and then enable or disable the use of the particular private physical space based on the voice message.

[0189] In one possible implementation, the maximum speed of the vehicle and / or the geographical range in which the vehicle can be driven can be limited through custom configuration. If the maximum speed limit is exceeded or the geographical range in which the vehicle can be driven is exceeded, the vehicle can issue an alarm. For example, the vehicle can display the selectable maximum speed (or geographical range) on the display screen, and after sensing the first user's selection operation on a certain displayed maximum speed (or geographical range), the vehicle sets the selected maximum speed (or geographical range) as the maximum speed in the friends and family mode (or the geographical range in which the vehicle can be driven). Alternatively, for example, the vehicle can receive any maximum speed (or geographical range) input by the first user through the display screen or microphone, and then set the input maximum speed (or geographical range) as the maximum speed in the friends and family mode (or the geographical range in which the vehicle can be driven).

[0190] It should be noted that the above-mentioned customized configuration is only an example. The specific implementation may also include customized configuration of other function usage permissions. This application does not limit the functions of customized configuration in the friends and family mode.

[0191] Although the vehicle in the friends and family mode provides the same function usage permissions as the above-mentioned owner mode by default, in the embodiment of the present application, the vehicle can flexibly reconfigure the function usage status in the friends and family mode based on the user's instructions, thereby realizing the configuration requirements of different scenarios and achieving data protection in different vehicle usage scenarios.

[0192] In a possible embodiment, the application scenarios of the above-mentioned friends and family mode may include multiple, for example, the application scenarios of the friends and family mode may include family member application scenarios, full-time driver application scenarios or relatives and friends application scenarios, etc. For the family member application scenario, the person using the vehicle is the above-mentioned family member. For the full-time driver application scenario, the person using the vehicle is the above-mentioned full-time driver. For the relatives and friends application scenario, the person using the vehicle is the above-mentioned relatives and friends. Different application scenarios use different people for the vehicle, so different function usage states can be set in the friends and family mode for different application scenarios. For example, take the full-time driver application scenario and the relatives and friends application scenario as examples. In the full-time driver application scenario, the maximum speed of the vehicle can be opened, that is, the driving speed of the vehicle is not restricted. In the relatives and friends application scenario, the maximum speed of the vehicle can be restricted. This is only an example and does not constitute a limitation on the embodiments of the present application. The embodiments of the present application do not limit the specific function usage states in the friends and family mode in different application scenarios.

[0193] Based on the above description, the application scenarios of the above-mentioned friends and family mode can include multiple ones. Then, after the custom configuration of the friends and family mode in a certain application scenario is completed, the configured function usage status can be saved as the function usage status of the certain application scenario. The next time you use it, you can directly reuse the friends and family mode of the certain application scenario without reconfiguring it, so that you can quickly switch to the friends and family mode of the corresponding scenario.

[0194] In one possible implementation, after the vehicle completes the customized configuration of the functions allowed and / or prohibited in the friends and family mode through the instruction information of the first user, the configured function usage status can be saved as the function usage status of a certain application scenario in the above-mentioned multiple application scenarios based on the additional instruction information of the first user. The additional instruction information can be, for example, selection information for the certain application scenario. For example, after the vehicle completes the customized function configuration of the friends and family mode, the selection controls of the multiple application scenarios are displayed on the display screen based on the save instruction input by the first user. Then, the vehicle perceives the first user's click operation on the selection control of the certain application scenario, and based on the click operation, selection information for the certain application scenario can be generated. Thereby, the configured function usage status is saved as the function usage status of the certain application scenario based on the selection information.

[0195] In one possible implementation, in the above-mentioned friends and family mode, for prohibited apps, their icons are not visible on the vehicle's display screen, or the icons are grayed out. For prohibited functions, their function controls may not be displayed or may be grayed out on the vehicle's display screen.

[0196] In one possible implementation, in the aforementioned vehicle owner mode, the vehicle cannot provide the second user's personal data based on the first user's instruction information. That is, the first user cannot view the second user's personal data on the vehicle.

[0197] In one possible implementation, in the above-mentioned vehicle owner mode, the vehicle can delete the second user's information in the user system and delete the second user's personal data on the vehicle based on the instruction information of the first user.

[0198] To facilitate understanding of the specific implementation process for the Friends and Family mode, please refer to Figure 5 for an example. Figure 5 uses the vehicle's display screen as an example of human-computer interaction. The vehicle mode management module, permission management module, and user system are functional modules within the vehicle's onboard control system. The specific functions of these modules can be found in the description of Figure 2 above and will not be repeated here.

[0199] As shown in Figure 5, the first user can enter login information through the display screen. This login information can be, for example, the vehicle owner's password or the first user's username and password. The display screen sends the received login information to the user system. The user system verifies the received login information. If the verification is successful, the vehicle enters the owner mode, and the display screen can display the owner mode user interface.

[0200] In the user interface of the car owner mode, the display screen can receive the first indication information input by the first user. For example, the operation of the first user inputting the first indication information can be expressed as a click operation on a certain control in the displayed user interface. The operation of subsequent users inputting indication information is similar and will not be repeated here. The first indication information indicates the reception of the identity information of the second user. The display screen receives the identity information of the second user, which can be, for example, the user password of the second user, or a user name and password customized by the second user, etc. Then, the display screen sends the received identity information of the second user to the user system. The user system saves the identity information of the second user and completes the registration of the information. After completing the registration, the second user can log in to the user system based on the registered identity information and obtain the functional permissions of the friends and family mode.

[0201] In one possible implementation, in the user interface in the vehicle owner mode, the display screen may receive second instruction information input by the first user. The second instruction information indicates entering a configuration menu for the friends and family mode. After receiving the second instruction information, the display screen may first send a query message to the permission management module to inquire about the usage status of functions configured in the friends and family mode.

[0202] In a possible implementation, after receiving the query message, the rights management module queries the user system for the identity of the currently logged-in user. The user system feeds back the retrieved identity information of the currently logged-in user to the rights management module.

[0203] Then, the rights management module can determine whether the logged-in user is the first user based on the identity information of the currently logged-in user. If the currently logged-in user is the first user, the rights management module sends the function usage status configured in the friends and family mode to the display screen. The display screen displays the function usage status configured in the friends and family mode.

[0204] In one possible implementation, after the above-mentioned display screen displays the usage status of the functions configured in the friends and family mode, the display screen can also receive a third indication message input by the first user. The third indication message indicates the usage status of the configured one or more functions. For example, the third indication message can indicate whether the use of the one or more functions is allowed or prohibited. The one or more functions can be the usage function of a private physical space or the maximum speed limit function of a vehicle, etc., which is not limited in this embodiment of the present application. After receiving the above-mentioned third indication message, the display screen sends a configuration indication of the usage status of the one or more functions to the permission management module. The permission management module saves the configuration of the usage status of the one or more functions, and feeds back the result of the successful configuration to the display screen for display to the first user. In this embodiment of the present application, the first user can customize the usage status of the functions in the friends and family mode, which can realize flexible configuration demands in different scenarios and realize data protection in different vehicle usage scenarios.

[0205] In Figure 5 above, after the vehicle exits the above-mentioned owner mode, or the vehicle receives an instruction to switch the logged-in user, the second user can enter login information through the display screen. The login information is the user password of the second user registered above, or the user name and password of the second user. The display screen sends the received login information to the user system. The user system verifies the received login information. When the login information is verified to be the identity information of the second user, the user system sends an instruction to enable the friends and family mode to the authority management module. The authority management module enables the friends and family mode based on the instruction information, and the vehicle enters the friends and family mode. Optionally, the authority management module feeds back the result of successfully enabling the friends and family mode to the display screen for display to the second user.

[0206] It should be noted that the process shown in FIG5 is merely an example and does not constitute a limitation to the embodiments of the present application.

[0207] Valet mode is a mode in which the vehicle is used by a third party. This third party can be an external party such as a borrower, renter, or designated driver. In valet mode, the vehicle hides the owner's personal data and disables private features by default.

[0208] Exemplarily, the above personal data includes the owner's identity information, historical navigation information, historical call records, video or sound data in the car, application (APP) data used privately by the owner, the owner's private configuration information or data downloaded locally by the owner, etc.

[0209] For example, the above-mentioned functions involving the car owner's personal information include, for example, the use of the car owner's personal APP (such as instant messaging APP) or smart cockpit functions involving the interaction of the car owner's personal information (such as face recognition, fingerprint recognition, voice control or fatigue driving monitoring, etc.), etc.

[0210] The valet mode is initiated by the first user. Specifically, while in owner mode, the vehicle receives an instruction from the first user. Based on the instruction, the vehicle determines valet mode and switches the vehicle from owner mode to valet mode. For example, the instruction from the first user may be an instruction to select valet mode. Based on the instruction, the vehicle may lock the valet mode among its multiple data protection modes, thereby switching the vehicle from owner mode to valet mode.

[0211] In one possible implementation, the indication for selecting the valet mode may be input by the first user via the vehicle's display screen. For example, a user interface displayed on the vehicle's display screen may include a control indicating the valet mode. The vehicle senses a click of the control by the first user via the user interface and, based on the click, generates the indication for selecting the valet mode.

[0212] In one possible implementation, the indication for selecting valet mode may be input by the first user through the vehicle's microphone. For example, the vehicle receives voice information from the first user through the microphone, indicating the selection of valet mode. For example, the voice information may include "valet mode," "switch to valet mode," or "go to valet mode." This embodiment of the present application does not limit the specific content of the voice information input.

[0213] In a possible embodiment, in the description of the valet mode, the valet mode may be the first mode in step S401. The instruction information for selecting the valet mode is the first information in step S401.

[0214] In one possible embodiment, the third user can autonomously enter the valet mode of the vehicle with the authorization of the first user. The specific implementation can refer to the description of the second user autonomously entering the friend and family mode of the vehicle with the authorization of the first user, which is not repeated here.

[0215] In one possible embodiment, after the vehicle determines valet mode based on the instruction information input by the first user, it may first check the vehicle's current driving state. If the vehicle is stopped, the vehicle mode may be switched from owner mode to valet mode. If the vehicle is in motion, the mode switch is not performed, and the first user may be notified. In this embodiment of the present application, the mode switch is only performed when the vehicle is parked, ensuring the safety of the vehicle and the user. This also avoids safety hazards caused by mode switching due to misoperation.

[0216] In the above-mentioned valet mode, the vehicle exits the valet mode through a preset exit method. The preset exit method is to exit the valet mode upon receiving a preset exit code. The exit code is the verification code for exiting the valet mode. The vehicle can set and save the exit code before entering the valet mode. Exemplarily, the exit code can be any number of digits, letters or special symbols; or the exit code can be a combination of any numbers, letters or special symbols, etc. The embodiment of the present application does not limit the specific form of the exit code. In addition to the preset exit mode, other methods such as turning off the vehicle, turning off the power, or operating the vehicle's display screen cannot exit the valet mode. Thereby ensuring that when the above-mentioned third user uses the vehicle, the personal data of the owner and other users in the vehicle cannot be viewed, thereby protecting the personal data of the vehicle user.

[0217] In one possible embodiment, after the vehicle determines that it is in valet mode, it can query the usage status of the functions configured in valet mode. Specifically, it can query whether the usage status of each function in valet mode is allowed or prohibited. In a specific implementation, the vehicle control system can query this status. After querying the corresponding function usage status, the vehicle control system can send a display instruction to the vehicle display screen, instructing the display screen to display the queried function usage status.

[0218] In one possible implementation, after the vehicle determines the valet mode, the vehicle may query the functional usage status configured in the valet mode after receiving the query indication information from the first user. For example, the user interface displayed on the display screen of the vehicle may include a query control for querying the functional usage status configured in the valet mode. The vehicle perceives the first user's click operation on the query control through the user interface, and the above-mentioned query indication information may be generated based on the click operation. Or, for example, the vehicle receives the query voice information input by the first user through the microphone, and the query voice information indicates the query functional usage status configured in the valet mode. For example, the content of the query voice information may be "functional usage status of valet mode", "functional configuration of valet mode" or "configuration of valet mode", etc. The embodiment of the present application does not limit the content of the query voice input specifically.

[0219] In a possible embodiment, the vehicle may receive instruction information from the first user through human-computer interaction to customize the functions allowed and / or prohibited in the valet mode.

[0220] In one possible implementation, the vehicle can allow or prohibit the use of one or more apps on the vehicle through custom configuration. For example, it can allow or prohibit the opening of one or more apps through the app icons displayed on the vehicle's display screen. For example, the vehicle can display the function switch control of the app on the display screen, and receive the instruction information of allowing or prohibiting the use of the app by sensing the first user's click operation on the function switch control of the app. Or, for example, the vehicle can receive the voice information input by the first user through the microphone to allow or prohibit the use of a certain app, and then turn on and off the use function of the certain app based on the voice information.

[0221] In one possible implementation, a vehicle can, through custom configuration, allow or prohibit the use of controllable private physical spaces within the vehicle, such as the glove box, front trunk, or rear trunk. For example, the vehicle can display function switch controls for controllable private physical spaces, such as the glove box, front trunk, or rear trunk, on a display screen and receive information indicating whether to allow or prohibit the use of the private physical space by sensing a first user's click on the function switch control for the private physical space. Alternatively, for example, the vehicle can receive a voice message from the first user via a microphone indicating whether to allow or prohibit the use of a particular private physical space, and then enable or disable the use of the particular private physical space based on the voice message.

[0222] In one possible implementation, the maximum speed of the vehicle and / or the geographical range in which the vehicle can be driven can be limited through custom configuration. If the maximum speed limit or the geographical range in which the vehicle can be driven is exceeded, the vehicle can issue an alarm. For example, the vehicle can display the selectable maximum speed (or geographical range) on the display screen, and after sensing the first user's selection operation on a certain displayed maximum speed (or geographical range), the selected maximum speed (or geographical range) is set as the maximum speed in valet mode (or the geographical range in which the vehicle can be driven). Alternatively, for example, the vehicle can receive an arbitrary maximum speed (or geographical range) input by the first user through the display screen or microphone, and then set the input maximum speed (or geographical range) as the maximum speed in valet mode (or the geographical range in which the vehicle can be driven).

[0223] It should be noted that the above-mentioned customized configuration is only an example. The specific implementation may also include customized configuration of other function usage permissions. This application does not limit the functions of customized configuration in the valet mode.

[0224] Although the vehicle hides the owner's personal data and disables functions related to the owner's private affairs by default in valet mode, in the embodiment of the present application, the vehicle can flexibly reconfigure the function usage status in valet mode based on the user's instructions, thereby realizing the configuration requirements of different scenarios and achieving data protection in different vehicle usage scenarios.

[0225] In a possible embodiment, the application scenarios of the above-mentioned valet mode may include multiple, for example, the application scenarios of the valet mode may include a car borrowing application scenario, a car rental application scenario or a designated driver application scenario, etc. For the car borrowing application scenario, the person using the vehicle is the above-mentioned car borrowing person. For the car rental application scenario, the person using the vehicle is the above-mentioned car rental person. For the designated driver application scenario, the person using the vehicle is the above-mentioned designated driver. Different application scenarios use different people for the vehicle, so different function usage states can be set in the valet mode of different application scenarios. For example, take the car rental application scenario and the designated driver application scenario as examples. In the car rental application scenario, the geographical range in which the vehicle can travel can be opened, that is, the geographical range in which the vehicle can travel is not restricted. In the designated driver application scenario, the range in which the vehicle can travel can be restricted. This is only an example and does not constitute a limitation on the embodiments of the present application. The embodiments of the present application do not limit the specific function usage states in the valet mode in different application scenarios.

[0226] Based on the above description, the valet mode can be used in multiple scenarios. After customizing the valet mode for a specific scenario, the configured functional usage status can be saved as the functional usage status for that specific scenario. The next time you use the valet mode, you can directly reuse the valet mode for that specific scenario without reconfiguring it, allowing you to quickly switch to the valet mode for the corresponding scenario.

[0227] In one possible implementation, after the vehicle completes the customized configuration of the functions allowed and / or prohibited in the valet mode through the instruction information of the first user, the configured function usage status can be saved as the function usage status of a certain application scenario in the above-mentioned multiple application scenarios based on the additional instruction information of the first user. The additional instruction information can be, for example, selection information for the certain application scenario. For example, after the vehicle completes the customized function configuration of the valet mode, the selection controls for the multiple application scenarios are displayed on the display screen based on the save instruction input by the first user. Then, the vehicle perceives the first user's click operation on the selection control for the certain application scenario, and based on the click operation, selection information for the certain application scenario can be generated. Thereby, the configured function usage status is saved as the function usage status for the certain application scenario based on the selection information.

[0228] In one possible implementation, in the valet mode, for prohibited apps, their icons may not be visible on the vehicle's display screen, or their icons may be grayed out. For prohibited functions, their function controls may not be displayed or may be grayed out on the vehicle's display screen.

[0229] In a possible implementation, in order to protect the data of the third user, the personal data of the third user is not collected in the valet mode.

[0230] To facilitate understanding of the specific implementation process for the aforementioned valet mode, please refer to Figure 6 for an example. Figure 6 illustrates human-computer interaction between a vehicle's display screen and a first user. The vehicle mode management module, permissions management module, and user system are functional modules within the vehicle's onboard control system. The specific functions of these modules can be found in the description of Figure 2 above and are not detailed here.

[0231] As shown in Figure 6, the first user can enter login information through the display screen. This login information can be, for example, the vehicle owner's password or the first user's username and password. The display screen sends the received login information to the user system. The user system verifies the received login information. If the verification is successful, the vehicle enters the owner mode, and the display screen can display the owner mode user interface.

[0232] In the user interface of the vehicle owner mode, the display screen can receive instruction information A input by a first user. The instruction information A indicates the display of the aforementioned multiple data protection modes. The multiple data protection modes can then be displayed in the user interface of the display screen. For example, the operation of the first user inputting instruction information A can be manifested as a click operation on a control in the displayed user interface. Subsequent operations of the first user inputting instruction information are similar and will not be further described.

[0233] Then, in a user interface displaying multiple data protection modes, the display screen may receive instruction information B input by the first user. Instruction information B indicates entering a valet mode configuration menu. After receiving instruction information B, the display screen may first send a query message to the rights management module to inquire about the usage status of functions configured in the valet mode.

[0234] In one possible implementation, the display screen need not display a user interface including the aforementioned multiple data protection modes. Specifically, after the display screen displays the user interface for owner mode, the vehicle may receive a voice instruction via a microphone to enter the valet mode configuration menu. Upon receiving this voice instruction, the vehicle mode management module may send a query message to the permission management module regarding the usage status of functions configured in valet mode.

[0235] In one possible implementation, after receiving the query message, the authority management module queries the vehicle mode management module for the vehicle's current driving status. The vehicle mode management module feeds the query current driving status back to the authority management module.

[0236] In a possible implementation, after receiving the query message, the rights management module queries the user system for the identity of the currently logged-in user. The user system feeds back the retrieved identity information of the currently logged-in user to the rights management module.

[0237] The rights management module can then determine whether the vehicle is currently stopped based on the vehicle's current driving state, and / or determine whether the logged-in user is the first user based on the identity information of the currently logged-in user. If the vehicle is currently stopped and / or the currently logged-in user is the first user, the rights management module sends the display screen the status of the functions configured in valet mode. The display screen displays the status of the functions configured in valet mode.

[0238] In the user interface for displaying the function usage status configured in the valet mode, the display screen may receive instruction information C input by the first user. The instruction information C indicates that the valet mode is enabled. The display screen sends an instruction message for enabling the valet mode to the authority management module based on the instruction information C.

[0239] After the permission management module receives the instruction message for enabling the valet mode, it can first determine whether the exit code for the valet mode has been set. For example, it can query whether the exit code is stored in its own memory, or query the cloud server whether the exit code has been set, etc. The embodiment of the present application does not limit the specific method of determining whether the exit code is set. In the case where the exit code is not set, the permission management module sends an instruction message for setting the exit code to the display screen. The display screen displays information instructing the first user to set the exit code, and receives the exit code entered by the first user. The display screen sends the exit code to the permission management module. The permission management module sets the received exit code as the exit code for the valet mode, and synchronously saves the exit code to the cloud server. Then, the permission management module enables the valet mode, and feeds back the result of successfully enabling the valet mode to the display screen for display to the first user.

[0240] In a possible implementation, when the authority management module determines that no exit code for the valet mode is set, it may randomly set an exit code for the valet mode and save it, and then send the set exit code to the display screen for display to the user.

[0241] In one possible implementation, the exit code for the valet mode can be reset. For example, the vehicle can receive a new exit code entered by the first user via a display screen, and then the permission management module replaces the original exit code with the newly entered exit code and saves it, thereby resetting the exit code.

[0242] In one possible implementation, see Figure 7 for an example. After the display screen displays the usage status of the functions configured in valet mode, the display screen may also receive instruction information D input by the first user. The instruction information D indicates the usage status of one or more configured functions. For example, the instruction information D may indicate whether the one or more functions are allowed or prohibited. The one or more functions may be functions for using private physical space or functions for limiting the maximum speed of a vehicle, etc., which are not limited in this embodiment of the present application.

[0243] After receiving the above-mentioned instruction information D, the display screen sends a configuration instruction of the usage status of the one or more functions to the permission management module. The permission management module saves the configuration of the usage status of the one or more functions and sends a feedback of the successful configuration result to the display screen for display to the first user. In this embodiment of the present application, the first user can customize the usage status of the functions in the valet mode, realizing flexible configuration requirements for different scenarios and achieving data protection for different vehicle usage scenarios.

[0244] It should be noted that the processes shown in FIG. 6 and FIG. 7 are merely examples and do not constitute a limitation to the embodiments of the present application.

[0245] The aforementioned maintenance mode can be a vehicle usage mode for a fourth user. This fourth user can be, for example, a maintenance technician. In this maintenance mode, the vehicle's personal data is encrypted and isolated, making it impossible to access or copy it via external devices. This means that maintenance personnel cannot access the personal data of the vehicle owner or other users. For example, personal data can be encrypted in maintenance mode, for example by storing it separately. Services involving personal data are then changed to an unauthorized access state, thereby achieving personal data isolation. Upon exiting maintenance mode, the vehicle automatically decrypts the personal data and restores the previously authorized services related to the personal data.

[0246] The maintenance mode is initiated by the first user. Specifically, while in owner mode, the vehicle receives instruction information input by the first user. Based on the instruction information, the vehicle determines the maintenance mode and switches the vehicle mode from owner mode to the maintenance mode. For example, the instruction information input by the first user may be an instruction to select the maintenance mode. Based on the instruction information, the vehicle may lock the maintenance mode among its multiple data protection modes, thereby switching the vehicle mode from owner mode to the maintenance mode.

[0247] In one possible implementation, the indication for selecting the maintenance mode may be input by the first user via a display screen of the vehicle. For example, a user interface displayed on the vehicle display screen may include a control indicating the maintenance mode. The vehicle, through the user interface, senses a click of the control by the first user and, based on the click, generates the indication for selecting the maintenance mode.

[0248] In one possible implementation, the instruction to select maintenance mode may be input by the first user via the vehicle's microphone. For example, the vehicle receives voice information input by the first user via the microphone, indicating the selection of maintenance mode. For example, the content of the voice information may be "maintenance mode," "switch to maintenance mode," or "go to maintenance mode." This embodiment of the application does not limit the specific content of the voice input.

[0249] In a possible embodiment, in the description of the maintenance mode, the maintenance mode may be the first mode in step S401. The instruction information for selecting the maintenance mode is the first information in step S401.

[0250] In one possible embodiment, after the vehicle determines the maintenance mode based on the instruction information input by the first user, it may first check the vehicle's current driving state. If the vehicle is stopped, the vehicle mode may be switched from owner mode to the maintenance mode. If the vehicle is in motion, the mode switch is not performed, and the first user may be notified. In this embodiment of the present application, the mode switch is only performed when the vehicle is parked, ensuring the safety of the vehicle and the user. This also avoids safety hazards caused by mode switching due to misoperation.

[0251] In the aforementioned maintenance mode, the vehicle exits the maintenance mode via a pre-set exit method. This pre-set exit method is to exit the maintenance mode upon receiving a pre-set exit code. The specific implementation can be found in the above description of exiting the valet mode and will not be elaborated here.

[0252] In a possible embodiment, after the vehicle determines the maintenance mode, it can query the usage status of the functions configured in the maintenance mode. The specific implementation can refer to the above description of querying the usage status of the functions configured in the valet mode, which will not be repeated here.

[0253] In one possible embodiment, the vehicle may receive instructions from the first user through human-computer interaction to customize the functions allowed and / or prohibited in the maintenance mode. For specific implementation, please refer to the above description of customizing the function usage status in the valet mode and will not be repeated here.

[0254] In a possible embodiment, the specific implementation process related to the maintenance mode can be exemplarily referred to the description related to the valet mode shown in Figure 6 or Figure 7 above, and will not be repeated here.

[0255] To facilitate understanding of the maintenance mode usage process, please refer to Figure 8 for an example. Figure 8 illustrates the process for the first and fourth users to interact with the vehicle. In a specific implementation, in owner mode, the vehicle receives a first instruction from the first user. This first instruction indicates a switch to maintenance mode. For example, this first instruction may be received via a display screen or a microphone. In one possible implementation, the vehicle may request further confirmation from the user regarding entry into maintenance mode. This confirmation request may be displayed on the display screen or through a voice prompt. The vehicle then receives confirmation from the first user regarding entry into maintenance mode. Based on this confirmation, the vehicle activates maintenance mode and displays a menu within maintenance mode on the display screen. The fourth user, a maintenance technician, then performs maintenance on the vehicle based on the menu within maintenance mode. After the maintenance is complete, the vehicle receives an instruction from the first user to exit maintenance mode, such as a preset exit code. Based on this instruction, the vehicle exits maintenance mode and switches back to owner mode. It should be noted that the process illustrated in Figure 8 is merely an example and does not constitute a limitation of the embodiments of this application.

[0256] The above-described used car transaction model can be used to facilitate the handover of vehicles during a used car transaction. Under this model, the vehicle can perform one or more of the following operations: transfer ownership of the vehicle to the first user, transfer authorization permissions to the first user, unbind the vehicle from the first user's identity, bind the vehicle to the new owner's identity, or delete personal data in the vehicle. Optionally, the vehicle can also be restored to factory settings.

[0257] The used car transaction mode is initiated by the first user. In a specific implementation, the vehicle, while in owner mode, receives instruction information input by the first user. Based on the instruction information, the vehicle determines the used car transaction mode and switches the vehicle mode from owner mode to the used car transaction mode. For example, the instruction information input by the first user may be an instruction to select the used car transaction mode. Based on the instruction information, the vehicle may lock the used car transaction mode among its multiple data protection modes, thereby switching the vehicle mode from owner mode to the used car transaction mode.

[0258] In one possible implementation, the indication information for selecting the used car transaction mode may be input by the first user via the vehicle's display screen. For example, a user interface displayed on the vehicle's display screen may include a control indicating the used car transaction mode. The vehicle, through the user interface, senses a click operation on the control by the first user and, based on the click operation, may generate the indication information for selecting the used car transaction mode.

[0259] In one possible implementation, the instruction to select the used car trading mode may be input by the first user through the vehicle's microphone. For example, the vehicle receives voice information input by the first user through the microphone, where the voice information indicates the selection of the used car trading mode. For example, the content of the voice information may be "used car trading mode," "switch to used car trading mode," or "go to used car trading mode." This embodiment of the application does not limit the specific content of the voice input.

[0260] In a possible embodiment, in the description of the used car transaction mode, the used car transaction mode may be the first mode in step S401. The instruction information for selecting the used car transaction mode is the first information in step S401.

[0261] In one possible embodiment, after the vehicle determines the used car transaction mode based on the instruction information input by the first user, it may first check the vehicle's current driving state. If the vehicle is stopped, the vehicle mode may be switched from owner mode to the used car transaction mode. If the vehicle is in motion, the mode switch is not performed, and the first user may be notified. In this embodiment of the present application, the mode switch is only performed when the vehicle is parked, ensuring the safety of the vehicle and the user. This also avoids safety hazards caused by mode switching due to misoperation.

[0262] In the above-mentioned second-hand car transaction mode, the vehicle exits the maintenance mode through a preset exit method. For example, the preset exit method is to exit the maintenance mode upon receiving a preset exit code. For specific implementation, please refer to the above description of exiting the valet mode, which will not be repeated here. In another possible implementation, the preset exit method may be that the vehicle automatically exits the second-hand car transaction mode after completing the preset operation process in the second-hand car transaction mode. For example, after the second-hand car transaction mode is enabled, the vehicle automatically executes one or more operations in sequence: the transfer of ownership of the first user of the vehicle, the transfer of the authorization authority of the first user, the release of the identity binding of the vehicle with the first user, the identity binding of the vehicle with the new owner of the vehicle, or the deletion of personal data in the vehicle. In the process of executing the one or more operations, the user can input information or perform corresponding operations based on the instructions of the vehicle, and the embodiments of the present application are not limited to this. In the process of executing and completing the one or more operations, the vehicle automatically exits the second-hand car transaction mode and prompts the user.

[0263] In one possible embodiment, after the vehicle determines the used car transaction mode, it can query the usage status of the functions configured in the used car transaction mode. The specific implementation can be found in the above description of querying the usage status of the functions configured in the valet mode, which is not repeated here.

[0264] In one possible embodiment, the vehicle may receive instructions from the first user through human-computer interaction to customize the functions permitted and / or prohibited in the used car transaction mode. For specific implementation details, please refer to the above description of customizing the function usage status in the valet mode and will not be further elaborated here.

[0265] In a possible embodiment, the specific implementation process related to the above-mentioned second-hand car transaction model can be exemplarily referred to the description related to the valet model shown in Figure 6 or Figure 7 above, and will not be repeated here.

[0266] The aforementioned exterior camera mode can be used to monitor the vehicle's surroundings. In this mode, upon detecting a pre-set action against the vehicle, the vehicle's camera can be activated to capture images of the vehicle's surroundings. For example, the pre-set action could be an abnormal contact with the vehicle, such as hitting the vehicle, scratching the vehicle, knocking on the glass, or prying on the door.

[0267] In a possible implementation, the above-mentioned vehicle exterior shooting prompt mode may be triggered and enabled when the vehicle is parked.

[0268] Specifically, after the vehicle senses the above-mentioned preset action, it can instruct the camera outside the vehicle to capture the environment around the vehicle. Optionally, the camera can also emit a light to remind the user of an abnormal situation.

[0269] The image data of the vehicle's surroundings captured above can be encrypted and stored in the vehicle's memory. Only the first user has the authority to access these image data.

[0270] In one possible implementation, if the image data stored in the vehicle leaves the vehicle, such as being copied or sent to another device, the vehicle will first perform a desensitization operation on the image data before allowing it to leave the vehicle. The desensitization operation can, for example, remove or mask (e.g., mosaic) sensitive data included in the image data. The sensitive data may include, for example, facial images of vehicle users or pedestrians outside the vehicle, etc., which is not limited in this embodiment of the present application.

[0271] The above-mentioned vehicle exterior photography prompt mode is pre-set by the above-mentioned first user. For example, when the vehicle is in the above-mentioned owner mode, it receives the instruction information input by the first user. Based on the instruction information, the vehicle activates the use function of the vehicle exterior photography prompt mode. In this way, when the vehicle senses the above-mentioned preset action, it can activate the vehicle camera to capture images of the vehicle's surroundings.

[0272] In one possible implementation, the information indicating the activation of the exterior photography prompt mode may be input by the first user via the vehicle's display screen. For example, a user interface displayed on the vehicle's display screen may include a control indicating the exterior photography prompt mode or a control indicating a function switch for the exterior photography prompt mode. The vehicle, through the user interface, senses a click of the control by the first user and, based on the click, may activate the exterior photography prompt mode.

[0273] In one possible implementation, the information for enabling the exterior photography prompt mode may be input by the first user through the vehicle's microphone. For example, the vehicle receives voice information input by the first user through the microphone, where the voice information indicates the activation of the exterior photography prompt mode. For example, the content of the voice information may be "Enable exterior photography prompt mode," "Enable exterior photography prompt mode," or "Activate exterior photography prompt mode." This embodiment of the present application does not limit the specific content of the voice information input.

[0274] In a possible embodiment, after the vehicle activates the function of the exterior vehicle shooting prompt mode, it can query the function usage status configured in the exterior vehicle shooting prompt mode. The function usage status configured in the exterior vehicle shooting prompt mode may include the usage status of each of multiple cameras outside the vehicle. For example, after the vehicle receives the query instruction information through the display screen or microphone, it can instruct the permission management module in the vehicle control system to query. After the permission management module inquires about the corresponding function usage status, it can send a display instruction to the vehicle's display screen, instructing the display screen to display the queried function usage status.

[0275] In a possible embodiment, the vehicle can receive the instruction information of the first user through human-computer interaction to customize the functions allowed and / or prohibited in the above-mentioned outside vehicle shooting prompt mode. Exemplarily, the vehicle can receive the instruction information of the first user through a display screen or a microphone. The instruction information can indicate whether to enable or disable a camera outside the vehicle in the outside vehicle shooting prompt mode. Then, based on the instruction information, the vehicle instructs the permission management module to save the usage status configuration of the camera outside the vehicle. Thereby, when the outside vehicle shooting prompt mode is turned on, the camera outside the vehicle is enabled or disabled based on the configuration. The embodiment of the present application can customize the usage status of the camera in the outside vehicle shooting prompt mode to flexibly adapt to various outside vehicle shooting scenarios.

[0276] The first passenger protection mode can be used to monitor the status of passengers within the vehicle. For example, in this mode, the vehicle can monitor the presence of passengers. For passengers within the vehicle, operations such as body temperature measurement or facial image analysis can be performed. Other functions include monitoring the vehicle's interior temperature. These operations can promptly detect any discomfort or abnormalities in passengers, preventing them from experiencing unexpected danger.

[0277] In a possible implementation, the above-mentioned passengers may be elderly people, children, patients or ordinary passengers, etc.

[0278] In one possible implementation, the first passenger protection mode may be a mode that is further activated when the owner mode, friends and relatives mode, valet mode, maintenance mode or used car transaction mode is activated.

[0279] In one possible implementation, the functional usage state of the first passenger protection mode that is further enabled when mode A is enabled may be different from the functional usage state of the first passenger protection mode that is further enabled when mode B is enabled. Both mode A and mode B are one of the above-mentioned owner mode, friends and family mode, valet mode, maintenance mode or second-hand car transaction mode, and mode A and mode B are different. For example, take mode A as the friends and family mode and mode B as the maintenance mode as an example. In the friends and family mode, considering that there may be children in the vehicle, the first passenger protection mode that is further enabled when the friends and family mode is enabled can enable the function of detecting the detention of passengers in the vehicle. In the maintenance mode, generally, it is maintenance personnel who operate the vehicle, and there are no other passengers. Therefore, the first passenger protection mode that is further enabled when the maintenance mode is enabled can turn off the function of detecting the detention of passengers in the vehicle. This is only an example and does not constitute a limitation to the embodiments of the present application.

[0280] In one possible implementation, the different functional usage states of the first passenger protection mode further enabled in different modes may be customized by the vehicle based on the instruction information of the above-mentioned first user, or may be preset at the factory. This embodiment of the present application does not impose any restrictions on this.

[0281] In one possible implementation, the first passenger protection mode may be enabled after confirmation by the vehicle's currently logged-in user. Exemplarily, the passenger mode is enabled based on active activation instruction information input by the currently logged-in user. Alternatively, the vehicle may automatically inquire via a display screen or microphone whether to enable the mode, and enable the mode upon receiving a confirmation instruction.

[0282] The second passenger protection mode can be used to disable the vehicle's cameras and / or microphones. In a specific implementation, the user can input an instruction via the display screen or microphone. This instruction can indicate that all cameras or microphones in the vehicle should be disabled. In another possible implementation, the vehicle is provided with a button that the user can press to disable the vehicle's cameras or microphones. Optionally, the user can view a list of services specifically related to the vehicle's cameras or microphones via the vehicle's display screen.

[0283] In one possible implementation, the second passenger protection mode may be a mode that is further activated when the owner mode, friends and relatives mode, valet mode, maintenance mode or used car transaction mode is activated.

[0284] For scenarios where passengers are traveling by car, especially in scenarios such as renting a car, hailing a car online, or carpooling, the second passenger protection mode can further protect the personal information of people in the car from being leaked.

[0285] In another possible embodiment, the vehicle access permission control method provided in the embodiment of the present application can be implemented through interactive communication between the terminal device and the vehicle. In this case, as shown in Figure 9, the vehicle access permission control method provided in the embodiment of the present application includes but is not limited to the following steps:

[0286] S901. The terminal device determines a first mode based on first indication information, where the first mode is one of multiple data protection modes of the vehicle.

[0287] For example, the terminal device may be terminal device 120 shown in FIG. 3 , and the vehicle may be vehicle 100 shown in FIG. The aforementioned multiple data protection modes can be described above and are not further elaborated here. The first mode may be, for example, a valet mode, a maintenance mode, a used car transaction mode, or a first passenger protection mode.

[0288] In one possible implementation, messages exchanged between the terminal device and the vehicle can be forwarded by a cloud server. Alternatively, in another possible implementation, the terminal device can communicate with the vehicle after establishing a direct communication connection. The embodiments of this application do not limit the communication method between the terminal device and the vehicle.

[0289] In a specific implementation, the terminal device may receive the login information input by the first user. For example, the terminal device may receive the login information via a display screen or a microphone. Subsequent user input information received by the terminal device may be received via the display screen or the microphone. The specific description mainly uses receiving information via the display screen as an example.

[0290] The above-mentioned login information includes the identity information of the first user. A description of the identity information can be found in the previous introduction and will not be repeated here. This login information is used to log in to the vehicle's user system. Based on this login information, the terminal device can access the vehicle's user system. For example, the terminal device's display screen can display the user interface of the user system. This user system can provide access rights to vehicle functions. For example, the user interface of the user system can be used to control the vehicle's functional usage status, etc.

[0291] Specifically, in the user interface of the user system displayed on the terminal device, the terminal device may receive instruction information input by a first user. The vehicle determines the first mode based on the instruction information. Exemplarily, the instruction information input by the first user may be instruction information for selecting the first mode. For example, the user interface of the user system displayed on the terminal device may include a control indicating the first mode. The terminal device perceives a click operation of the first user on the control through the user interface, and based on the click operation, may generate the instruction information for selecting the first mode.

[0292] Alternatively, illustratively, the instruction information input by the first user may be instruction information for enabling the first mode. For example, the user interface of the user system displayed by the terminal device may include a function switch control for the first mode. The terminal device senses, through the user interface, a click operation of the first user on the function switch control, and may generate the instruction information for enabling the first mode based on the click operation.

[0293] In one possible implementation, the terminal device can perform human-computer interaction with the user and interactive communication with the vehicle through a corresponding APP, mini-program, or web page.

[0294] S902. The terminal device sends a first message to the vehicle, where the first message instructs the vehicle to switch its mode to the first mode.

[0295] In a specific implementation, after the terminal device receives the instruction information input by the first user, it sends the above-mentioned first message to the vehicle based on the instruction information.

[0296] S903: The vehicle receives the first message.

[0297] S904: The vehicle switches the vehicle mode to the first mode.

[0298] After receiving the first message, the vehicle can lock the first mode among its multiple data protection modes based on the first message, thereby switching the vehicle mode to the first mode. For the specific implementation of vehicle mode switching, please refer to the corresponding descriptions of the aforementioned data protection modes and will not be repeated here.

[0299] In one possible embodiment, the above-mentioned vehicle may check the current driving status of the vehicle before switching the vehicle mode to the first mode. If the vehicle is in a stopped state, the vehicle mode may be switched from the owner mode to the second-hand car transaction mode. If the vehicle is in a driving state, the mode is not switched, and the first user may be informed. For the specific implementation of checking the current driving status of the vehicle, reference may be made to the description in FIG6 above, which will not be repeated here. In the embodiment of the present application, mode switching can only be performed in the parking state to ensure the safety of the vehicle and the user. It can also avoid safety hazards caused by mode switching due to misoperation.

[0300] In one possible embodiment, before switching the vehicle mode to the first mode, the vehicle may check the identity of the user currently logged into the vehicle user system. The vehicle switches the vehicle mode to the first mode only if the logged-in user is the first user. The specific implementation of checking the identity of the user currently logged into the vehicle user system can be found in the description of FIG. 6 and is not further elaborated here.

[0301] S905. The vehicle sends a first response message to the terminal device, where the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0302] After the vehicle switches to the first mode, the first response message is generated and sent to the terminal device.

[0303] In a possible embodiment, after the terminal device enters the user system of the vehicle and the display screen of the terminal device displays the user interface of the user system, the function usage status configured in the first mode can be queried.

[0304] For example, in one possible implementation, the terminal device may send a query message regarding the usage status of the function configured in the first mode to the vehicle. For example, the user interface displayed on the display screen of the terminal device may include a query control for querying the usage status of the function configured in the first mode. The terminal device may perceive the first user's click operation on the query control through the user interface, and based on the click operation, may generate the above-mentioned query message and send it to the vehicle. After receiving the query message, the vehicle sends the usage status of the function configured in the first mode to the terminal device. The terminal device may display the received usage status of the function configured in the first mode on the display screen.

[0305] In another possible implementation, the cloud server backs up the function usage status configured in the first mode. For example, the user interface displayed on the display screen of the terminal device may include a query control for querying the function usage status configured in the first mode. The terminal device perceives the first user's click operation on the query control through the user interface, and based on the click operation, the above-mentioned query message can be generated and sent to the cloud server. The terminal device can send a query message for the function usage status configured in the first mode to the cloud server. After receiving the query message, the cloud server sends the function usage status configured in the first mode to the terminal device. The terminal device can display the received function usage status configured in the first mode on the display screen.

[0306] In another possible implementation, when the terminal device determines the first mode based on the first indication information, the terminal device may also send the query message to the vehicle or cloud server to obtain the usage status of the functions configured in the first mode and display it on the display screen. This implementation does not require a separate query based on the query indication input by the user. Instead, the first mode can be locked based on the first indication information and the query message can be sent to the vehicle or cloud server at the same time.

[0307] In a possible embodiment, after the above-mentioned terminal device enters the user system of the vehicle and the display screen of the terminal device can display the user interface of the user system, the terminal device can configure the functions allowed and / or prohibited in the above-mentioned first mode based on the second indication information input by the first user.

[0308] In a specific implementation, after the terminal device receives instruction information input by the first user to enable or disable a certain function in the first mode, it generates a corresponding instruction message based on the instruction information and sends it to the vehicle. The instruction message may include instruction information to enable or disable a certain function in the first mode. After the vehicle receives the instruction message, it saves the configuration of enabling or disabling the certain function in the first mode, so that the certain function is enabled or disabled when the vehicle subsequently enters the first mode. Optionally, after the vehicle saves the configuration of enabling or disabling the certain function in the first mode, it can also synchronize and back up the usage status of the certain function in the first mode to the cloud server.

[0309] For example, the user interface displayed on the terminal device display may include switch controls for various functions in the first mode, and the first user may click these switch controls to indicate whether to enable or disable the corresponding functions. Based on the corresponding click operation, the terminal device generates instruction information indicating whether the corresponding functions are enabled or disabled, and further generates a corresponding instruction message to be sent to the vehicle.

[0310] In one possible embodiment, if the first mode is a valet mode, a maintenance mode, or a used car transaction mode, the vehicle exits the first mode through a preset exit method. The preset exit method is to exit the maintenance mode upon receiving a preset exit code.

[0311] In a possible implementation, before the terminal device sends the first message to the vehicle, it may check whether an exit code is set for the first mode.

[0312] For example, if an exit code has been set, the terminal device may store the exit code. In this case, the terminal device may check whether the exit code is stored in its preset memory. If it is, the first message may be sent to the vehicle. If it is not, the first user may be instructed to set the exit code. Based on the instructions of the terminal device, the first user enters a customized exit code. After receiving the exit code entered by the first user, the terminal device saves the exit code and sends it to the vehicle for storage. Optionally, the terminal device may also send the exit code to a cloud server for storage.

[0313] For example, the terminal device may send a query message to the vehicle or cloud server to inquire whether an exit code has been set. If the received response message indicates that an exit code has been set, the first message may be sent to the vehicle. If the received response message indicates that an exit code has not been set, the terminal device may instruct the first user to set the exit code. The first user enters a customized exit code based on the terminal device's instructions. After receiving the exit code entered by the first user, the terminal device sends the exit code to the vehicle for storage. Optionally, the terminal device may also send the exit code to the cloud server for storage.

[0314] In one possible implementation, if the terminal device learns that the exit code for the first mode is not set, it may generate a random exit code as the exit code for the first mode. The generated exit code is displayed on a display screen to the user. Furthermore, the generated exit code is sent to the vehicle for storage. Optionally, the terminal device may also send the generated exit code to a cloud server for storage.

[0315] After the exit code of the first mode is set, the terminal device can send the first message to the vehicle.

[0316] In one possible implementation, the operation of checking whether the first mode is set with an exit code can be performed by the vehicle after the vehicle receives the first message. For example, after receiving the first message, the vehicle can first check whether the first mode is set with an exit code. For example, the vehicle can query whether the exit code is stored in its own memory, or query the cloud server whether the exit code has been set, etc. The embodiment of the present application does not limit the specific method of determining whether the exit code is set. If the exit code has been set, the vehicle switches the vehicle mode to the first mode. If the exit code has not been set, the vehicle sends an instruction message to the terminal device requesting the exit code to be set. The terminal device can then instruct the first user to set the exit code. The first user enters a customized exit code based on the instruction of the terminal device. After receiving the exit code entered by the first user, the terminal device sends the exit code to the vehicle for storage. Optionally, the terminal device can also send the exit code to the cloud server for storage. After the vehicle receives the exit code and saves it, it can switch the vehicle mode to the first mode.

[0317] In one possible implementation, if the vehicle learns that the exit code for the first mode is not configured, it may generate a random exit code as the exit code for the first mode. The generated exit code is stored. The vehicle also transmits the generated exit code to a terminal device for display to the user. Optionally, the vehicle may also transmit the generated exit code to a cloud server for storage.

[0318] In one possible embodiment, the terminal device may register the identity information of the second user in the vehicle's user system based on the instruction information input by the first user, so that the second user can log in to the user system on the vehicle based on the registered identity information and enter the friends and family mode.

[0319] In a specific implementation, the second user can autonomously enter the friends and family mode of the vehicle with the authorization of the first user. For example, after the terminal device enters the user system of the vehicle based on the identity information of the first user and displays the user interface of the user system, the terminal device can receive the instruction information input by the first user. And based on the instruction information, the identity information of the second user is received, and then the received identity information of the second user is registered to the user system. Specifically, after the terminal device receives the identity information of the second user, it sends the identity information to the vehicle. The vehicle saves the identity information of the second user to its own user system to complete the registration of the identity information of the second user. The identity information of the second user is, for example, the facial image information, fingerprint information, preset voice information, user password, or a customized user name and password of the second user.

[0320] After the vehicle completes registration of the second user's identity information, it may receive login information from the second user to log into the vehicle user system, including the second user's identity information. After verifying the login information, the vehicle locks the Friends and Family mode based on the login information, and then switches the vehicle mode to Friends and Family mode, providing the second user with access to the Friends and Family mode functions.

[0321] In one possible embodiment, the terminal device may query the usage status of the functions configured in the above-mentioned friends and family mode. In another possible embodiment, the terminal device may configure the functions allowed and / or prohibited in the friends and family mode based on the instruction information input by the first user. The specific implementation of this query and configuration can be referred to the above description and will not be repeated here.

[0322] To facilitate understanding of the specific implementation process associated with the first mode described above, please refer to Figure 10 for example. Figure 10 illustrates communication between a terminal device and a vehicle via a cloud server. The vehicle mode management module, permission management module, and user system in Figure 10 are functional modules within the vehicle's onboard control system. The specific functions of these modules can be found in the description of Figure 2 above and are not detailed here.

[0323] As shown in Figure 10, a terminal device receives login information input by a first user, which may include the first user's identity information. The terminal device transmits the received login information to the vehicle via a cloud server. The user system in the vehicle verifies the received login information. If the verification is successful, the vehicle sends a response message to the cloud server indicating that the login information has been verified. Based on this response, the cloud server displays the user interface of the user system on a display screen.

[0324] In the user interface of the user system, the terminal device may receive instruction information A input by the first user. The instruction information A indicates entering the first mode configuration menu. After receiving the instruction information A, the terminal device may first send a query message to the cloud server to query the usage status of the function configured in the first mode.

[0325] In one possible implementation, after receiving the query message, the cloud server may query its own storage system for the usage status of the function configured in the first mode. The queried usage status of the function configured in the first mode is sent to the terminal device. The terminal device displays the usage status of the function configured in the first mode.

[0326] In one possible implementation, in the user interface displaying the usage status of the functions configured in the first mode, the terminal device may further receive indication information B input by the first user. The indication information B indicates the usage status of one or more configured functions. For example, the indication information B may indicate whether the use of the one or more functions is permitted or prohibited. The one or more functions may, for example, be a function for using a private physical space or a function for limiting the maximum speed of a vehicle, etc., which is not limited in this embodiment of the present application.

[0327] After receiving the above-mentioned indication information B, the terminal device sends a configuration indication message of the usage status of the one or more functions to the vehicle through the cloud server. The vehicle saves the configuration of the usage status of the one or more functions through the permission management module, and feeds back the result of successful configuration to the terminal device through the cloud server to display it to the first user. Optionally, the vehicle can also save the configuration of the usage status of the one or more functions to the cloud server in a synchronous backup. In this embodiment of the present application, the first user can customize the configuration of the function usage status in the valet mode, which can realize flexible configuration demands in different scenarios and achieve data protection in different vehicle usage scenarios.

[0328] In one possible implementation, the terminal device may receive instruction information C input by the first user. The instruction information C indicates activation of the first mode. Based on the instruction information C, the terminal device sends instruction information for activating the first mode to the vehicle via the cloud server.

[0329] In one possible implementation, after receiving the instruction to activate the first mode, the vehicle's permission management module queries the vehicle mode management module for the vehicle's current driving status. The vehicle mode management module feeds the query current driving status back to the permission management module.

[0330] In one possible implementation, after receiving the instruction to activate the first mode, the vehicle's rights management module queries the user system for the identity of the currently logged-in user. The user system feeds the retrieved identity information of the currently logged-in user back to the rights management module.

[0331] Then, the rights management module can determine whether the vehicle's current driving state is in a stopped state based on the vehicle's current driving state, and / or determine whether the logged-in user is the first user based on the identity information of the currently logged-in user. When the vehicle's current driving state is in a stopped state and / or the currently logged-in user is the first user, the rights management module determines whether an exit code for the first mode has been set. For example, the rights management module can query whether an exit code is stored in its own memory, or query a cloud server whether an exit code has been set, etc. The embodiments of the present application do not limit the specific method for determining whether an exit code has been set.

[0332] If no exit code has been set, the vehicle sends an instruction message to the terminal device via the cloud server, requesting that an exit code be set. The terminal device may display a message on its display screen instructing the first user to set an exit code and receive the exit code entered by the first user. The terminal device then sends the exit code to the vehicle via the cloud server. The vehicle's permission management module sets the received exit code as the exit code for the first mode and synchronizes the exit code to the cloud server. The permission management module then activates the first mode and sends a successful activation result back to the terminal device for display to the first user.

[0333] In a possible implementation, when the authority management module determines that no exit code for the first mode is set, it may randomly set an exit code for the first mode and save it, and then send the set exit code to the terminal device for display to the user.

[0334] In one possible implementation, the exit code for the first mode can be reset. For example, the terminal device can receive a new exit code entered by the first user via a display screen and then send an instruction to reset the exit code to the vehicle, including the newly entered exit code. The vehicle's permission management module then replaces the original exit code with the newly entered exit code and saves it, thereby resetting the exit code.

[0335] It should be noted that the process shown in FIG10 is merely an example and does not constitute a limitation to the embodiments of the present application.

[0336] The above mainly introduces the vehicle access permission control method provided in the embodiment of the present application. It is understandable that, in order to realize the corresponding functions mentioned above, each device includes a hardware structure and / or software module corresponding to the execution of each function. In combination with the units and steps of each example described in the embodiments disclosed herein, the present application can be implemented in the form of hardware or a combination of hardware and computer software. Whether a function is executed in the form of hardware or computer software driving hardware depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0337] The embodiment of the present application can divide the functional modules of the device according to the above method example. For example, each functional module can be divided according to each function, or two or more functions can be integrated into one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. It should be noted that the division of modules in the embodiment of the present application is schematic and is only a logical function division. In actual implementation, there may be other division methods.

[0338] In the case of dividing each functional module into corresponding functional modules, FIG11 shows a possible logical structure diagram of a device, which may be the above-mentioned vehicle or a vehicle-mounted control system in the vehicle. The device 1100 includes a determination unit 1101 and a switching unit 1102.

[0339] a determining unit 1101 configured to determine a first mode based on the first indication information, wherein the first mode is one of a plurality of data protection modes for the vehicle, the plurality of data protection modes for the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0340] The switching unit 1102 is used to switch the mode of the vehicle to the first mode.

[0341] In a possible implementation, the first instruction information is instruction information input by a first user, and the first user is a user who has no access restrictions to the vehicle;

[0342] The apparatus further includes a receiving unit configured to receive login information of a user system of the vehicle before the determining unit 1101 determines the first mode based on the first indication information, wherein the login information includes identity information of the first user;

[0343] The aforementioned device also includes a providing unit for providing the aforementioned first user with functional usage rights of the aforementioned vehicle based on the aforementioned login information.

[0344] In a possible implementation, the apparatus further includes a query unit configured to query the driving state of the vehicle after the determining unit 1101 determines the first mode based on the first indication information;

[0345] The switching unit 1102 is specifically configured to switch the mode of the vehicle to the first mode when the vehicle is in a stopped state.

[0346] In one possible embodiment, the aforementioned device also includes a first configuration unit, which is used to configure the exit code of the aforementioned first mode after the determination unit 1101 determines the first mode based on the first indication information and before the switching unit 1102 switches the mode of the aforementioned vehicle to the aforementioned first mode, wherein the aforementioned exit code is a verification code for exiting the aforementioned first mode.

[0347] In a possible implementation, the aforementioned apparatus further includes an execution unit configured to:

[0348] In the aforementioned first mode, one or more operations of transferring ownership of the aforementioned vehicle to the first user, transferring the authorization authority of the aforementioned first user, releasing the identity binding between the aforementioned vehicle and the aforementioned first user, binding the aforementioned vehicle to the identity of the new owner of the aforementioned vehicle, or deleting personal data in the aforementioned vehicle are performed, and the aforementioned first user is a user with no access restrictions to the aforementioned vehicle.

[0349] In one possible implementation, the first indication information is information of the second user logging into the user system of the vehicle. The first indication information includes the identity information of the second user. The second user is a user authorized by the first user to log into the user system of the vehicle. The first user is a user who has no access restrictions to the vehicle.

[0350] In a possible implementation, the device further includes a registration unit for registering the identity information of the second user in the user system of the vehicle based on the indication information input by the first user before the determination unit 1101 determines the first mode based on the first indication information.

[0351] In a possible implementation, the apparatus further includes a second configuration unit configured to configure functions that are allowed and / or prohibited in the first mode based on second indication information input by the first user.

[0352] In one possible embodiment, the aforementioned device also includes a saving unit, which is used to save the function usage status configured in the aforementioned first mode as the function usage status of the first application scenario based on the third indication information after the aforementioned second configuration unit configures the functions allowed and / or prohibited in the aforementioned first mode based on the second indication information input by the aforementioned first user; the first application scenario is one of the multiple application scenarios of the aforementioned first mode, and different application scenarios in the aforementioned multiple application scenarios correspond to different function usage statuses configured in the aforementioned first mode.

[0353] In a possible implementation, the aforementioned apparatus further includes a query unit, configured to query the usage status of the function configured in the aforementioned first mode;

[0354] The aforementioned device also includes a sending unit, which is used to send a display instruction, and the aforementioned display instruction is used to instruct the display of the function usage status configured in the aforementioned first mode.

[0355] In one possible embodiment, the aforementioned device further includes a starting unit for starting a second mode among the aforementioned multiple data protection modes when a preset action on the aforementioned vehicle is sensed; the aforementioned second mode is used to instruct the camera of the aforementioned vehicle to capture images around the aforementioned vehicle.

[0356] In one possible embodiment, the aforementioned device further includes an enabling unit for enabling a third mode based on fourth indication information after the aforementioned switching unit 1102 switches the mode of the aforementioned vehicle to the aforementioned first mode; the aforementioned third mode is used to detect the status of passengers in the aforementioned vehicle.

[0357] In one possible embodiment, the aforementioned enabling unit is further used to enable the fourth mode based on the fifth indication information after the aforementioned switching unit 1102 switches the mode of the aforementioned vehicle to the aforementioned first mode; the aforementioned fourth mode is used to turn off the camera and / or microphone in the aforementioned vehicle.

[0358] The specific operations and beneficial effects of each unit in the device 1100 shown in Figure 11 can be found in the corresponding descriptions in Figure 4 and its possible embodiments, and will not be repeated here.

[0359] In the case of dividing each functional module into corresponding functional modules, FIG12 shows a possible logical structure diagram of a device, which may be the above-mentioned terminal device. The device 1200 includes a determining unit 1201, a sending unit 1202, and a receiving unit 1203.

[0360] a determining unit 1201 configured to determine a first mode based on the first indication information, wherein the first mode is one of a plurality of data protection modes for the vehicle, the plurality of data protection modes for the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0361] The sending unit 1202 is configured to send a first message to the vehicle; the first message instructs the vehicle to switch its mode to the first mode;

[0362] The receiving unit 1203 is configured to receive a first response message, wherein the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0363] In a possible implementation, the first instruction information is instruction information input by a first user, and the first user is a user who has no access restrictions to the vehicle;

[0364] The terminal device further includes a receiving unit 1203 configured to receive login information of a user system of the vehicle before the determining unit 1201 determines the first mode based on the first indication information, wherein the login information includes identity information of the first user;

[0365] The aforementioned terminal device also includes a providing unit for providing the aforementioned first user with functional usage rights of the aforementioned vehicle based on the aforementioned login information.

[0366] In one possible embodiment, the terminal device further includes a first configuration unit for configuring the functions allowed and / or prohibited in the first mode based on second indication information input by the first user after the providing unit provides the first user with functional usage rights of the vehicle based on the login information.

[0367] In one possible implementation, the terminal device further includes a saving unit for saving the function usage status configured in the first mode as the status of the first application scenario based on the third indication information after the first configuration unit configures the functions allowed and / or prohibited in the first mode based on the second indication information input by the first user; the first application scenario is one of the multiple application scenarios of the first mode, and different application scenarios among the multiple application scenarios correspond to different function usage statuses configured in the first mode.

[0368] In a possible implementation, the terminal device further includes a query unit configured to query the usage status of the function configured in the first mode;

[0369] The aforementioned terminal device also includes a display unit for displaying the function usage status configured in the aforementioned first mode.

[0370] In one possible implementation, the terminal device further includes a second configuration unit for configuring an exit code for the first mode after the determination unit 1201 determines the first mode based on the first indication information and before the sending unit 1202 sends the first message to the vehicle based on the determined first mode, wherein the exit code is a verification code for exiting the first mode.

[0371] In one possible embodiment, the terminal device further includes a registration unit for registering the identity information of a second user in the user system of the vehicle based on the instruction information input by the first user, the first user being a user with no access restrictions to the vehicle, and the identity information of the second user being used by the second user to use the vehicle in a second mode, the second mode being one of the multiple data protection modes of the vehicle.

[0372] The specific operations and beneficial effects of each unit in the device 1200 shown in Figure 12 can be found in the corresponding description of the terminal device in Figure 9 and its possible embodiments, and will not be repeated here.

[0373] In the case of dividing each functional module into corresponding functional modules, FIG13 shows a possible logical structure diagram of a device, which may be the above-mentioned vehicle or vehicle-mounted control system. The device 1300 includes a receiving unit 1301, a switching unit 1302, and a sending unit 1303.

[0374] Receiving unit 1301 is configured to receive a first message; the first message instructing to switch the vehicle mode to a first mode; the first mode being one of a plurality of data protection modes of the vehicle; the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle;

[0375] a switching unit 1302, configured to switch the mode of the vehicle to the first mode;

[0376] The sending unit 1303 is configured to send a first response message; the first response message indicates that the mode of the vehicle has been switched to the first mode.

[0377] In a possible implementation, the apparatus further includes a query unit configured to query the driving status of the vehicle after the receiving unit 1301 receives the first message;

[0378] The switching unit 1302 is specifically configured to: when the vehicle is in a stopped state, switch the mode of the vehicle to the first mode based on the first message.

[0379] In one possible implementation, the apparatus further includes a query unit, further configured to query the identity information of a user currently logged into the user system of the vehicle after the receiving unit 1301 receives the first message;

[0380] The switching unit 1302 is specifically configured to switch the mode of the vehicle to the first mode when the identity information of the user is the identity information of the first user, and the first user is a user who has no access restrictions to the vehicle.

[0381] In one possible implementation, the receiving unit 1301 is further configured to: receive login information, the login information including identity information of a second user, the second user being a user authorized by the first user to log into the user system of the vehicle, and the first user being a user with no access restrictions to the vehicle;

[0382] The aforementioned device also includes a providing unit for providing the aforementioned second user with functional usage rights of a second mode, where the aforementioned second mode is one of the multiple data protection modes of the aforementioned vehicle.

[0383] The specific operations and beneficial effects of each unit in the device 1300 shown in Figure 13 can be found in the corresponding description of the vehicle in Figure 9 and its possible embodiments, and will not be repeated here.

[0384] Figure 14 shows a schematic diagram of a possible hardware structure of a device provided herein. This device may be a vehicle or a vehicle-mounted control system in the methods described in the above embodiments. Device 1400 includes a processor 1401, a memory 1402, and a communication interface 1403. Processor 1401, communication interface 1403, and memory 1402 may be interconnected or connected via a bus 1404.

[0385] Exemplarily, the memory 1402 is used to store computer programs and data of the device 1400. The memory 1402 may include, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), or portable read-only memory (CD-ROM).

[0386] The software or program codes required for the functions of the vehicle or all or part of the units of the vehicle's onboard control system in the above method embodiment are stored in the memory 1402 .

[0387] In one possible implementation, if the software or program code required for the functions of some units is stored in the memory 1402, the processor 1401, in addition to calling the program code in the memory 1402 to implement some functions, can also cooperate with other components (such as the communication interface 1403) to jointly complete other functions described in the method embodiment (such as the function of receiving or sending data).

[0388] There may be multiple communication interfaces 1403 , which are used to support the device 1400 to communicate, such as receiving or sending data or signals.

[0389] Exemplarily, the processor 1401 may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field programmable gate array, or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. The processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a digital signal processor and a microprocessor, and so on. The processor 1401 may be used to read the program stored in the memory 1402 and execute the method described in FIG. 4 and its possible embodiments. Alternatively, the processor 1401 may be used to read the program stored in the memory 1402 and execute the operations performed by the vehicle or the vehicle's on-board control system in the method described in FIG. 9 and its possible embodiments.

[0390] The specific operations and beneficial effects of each unit in the device 1400 shown in Figure 14 can be found in the corresponding description in the above method embodiment, and will not be repeated here.

[0391] Figure 15 shows a schematic diagram of a possible hardware structure of the apparatus provided herein, which may be a terminal device in the method described in the above embodiment. Apparatus 1500 includes a processor 1501, a memory 1502, and a communication interface 1503. Processor 1501, communication interface 1503, and memory 1502 may be interconnected or connected via a bus 1504.

[0392] Exemplarily, the memory 1502 is used to store computer programs and data of the device 1500. The memory 1502 may include, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), or portable read-only memory (CD-ROM).

[0393] The software or program codes required for the functions of all or part of the units of the terminal device in the above method embodiment are stored in the memory 1502 .

[0394] In one possible implementation, if the software or program code required for the functions of some units is stored in the memory 1502, the processor 1501, in addition to calling the program code in the memory 1502 to implement some functions, can also cooperate with other components (such as the communication interface 1503) to jointly complete other functions described in the method embodiment (such as the function of receiving or sending data).

[0395] There may be multiple communication interfaces 1503 , which are used to support the device 1500 to communicate, such as receiving or sending data or signals.

[0396] Exemplarily, processor 1501 may be a central processing unit, a general-purpose processor, a digital signal processor, an application-specific integrated circuit, a field programmable gate array, or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. A processor may also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a digital signal processor and a microprocessor, and so on. Processor 1501 may be configured to read the program stored in memory 1502 and execute the operations performed by the terminal device in the method described in FIG. 9 and its possible embodiments.

[0397] The specific operations and beneficial effects of each unit in the device 1500 shown in Figure 15 can be found in the corresponding description in the above method embodiment, and will not be repeated here.

[0398] An embodiment of the present application also provides a vehicle, which includes the device shown in Figure 11, Figure 13 or Figure 14 above.

[0399] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. The computer program is executed by a processor to implement the operations performed by the vehicle or vehicle control system of any one of the above-mentioned embodiments and possible embodiments thereof.

[0400] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. The computer program is executed by a processor to implement the operations performed by the terminal device of any one of the above-mentioned embodiments and possible embodiments thereof.

[0401] An embodiment of the present application also provides a computer program product. When the computer program product is read and executed by a computer, the operations performed by the vehicle or vehicle control system of any of the above-mentioned embodiments and possible embodiments thereof will be executed.

[0402] An embodiment of the present application also provides a computer program product. When the computer program product is read and executed by a computer, the operations performed by the terminal device in any of the above-mentioned embodiments and possible embodiments thereof will be executed.

[0403] In summary, this solution can protect personal information in the vehicle from being leaked by providing different modes of restricting access to data for a variety of different users, while providing more services to different users as much as possible and improving user experience.

[0404] In this application, the terms "first," "second," and the like are used to distinguish between identical or similar items having substantially the same function or effect. It should be understood that "first," "second," and "nth" do not have a logical or temporal dependency, nor do they limit the quantity or order of execution. It should also be understood that although the following description uses the terms "first," "second," and the like to describe various elements, these elements should not be limited by these terms. These terms are simply used to distinguish one element from another.

[0405] It should also be understood that in the various embodiments of the present application, the size of the serial number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0406] It will also be understood that the term “comprise” (also known as “includes,” “including,” “comprises,” and / or “comprising”) when used in this specification specifies the presence of stated features, integers, steps, operations, elements, and / or components, but does not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof.

[0407] It should also be understood that references throughout this specification to "one embodiment," "an embodiment," or "one possible implementation" mean that specific features, structures, or characteristics associated with that embodiment or implementation are included in at least one embodiment of the present application. Therefore, the appearance of "in one embodiment," "in an embodiment," or "one possible implementation" throughout this specification does not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0408] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some or all of the technical features therein. These modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present application.

Claims

1. A vehicle access rights control method, characterized in that: The method comprises: determining a first mode based on first indication information, the first mode being one of a plurality of data protection modes of the vehicle, the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle; The mode of the vehicle is switched to the first mode.

2. The method according to claim 1, characterized in that The first instruction information is instruction information input by a first user, and the first user is a user who has no access restriction to the vehicle; Before determining the first mode based on the first indication information, the method further includes: receiving login information of a user system of the vehicle, the login information including identity information of the first user; The first user is provided with permission to use functions of the vehicle based on the login information.

3. The method according to claim 2, characterized in that After determining the first mode based on the first indication information, the method further includes: querying the driving status of the vehicle; Switching the mode of the vehicle to the first mode includes: When the vehicle is in a stopped state, the mode of the vehicle is switched to the first mode.

4. The method according to claim 2 or 3, characterized in that After determining the first mode based on the first instruction information and before switching the mode of the vehicle to the first mode, the method further includes: An exit code for the first mode is configured, where the exit code is a verification code for exiting the first mode.

5. The method according to any one of claims 1 to 4, characterized in that The method further comprises: In the first mode, one or more operations are performed: transferring ownership of the vehicle to the first user, transferring the authorization authority of the first user, releasing the identity binding between the vehicle and the first user, binding the vehicle to the identity of the new owner of the vehicle, or deleting personal data in the vehicle, and the first user is a user who has no access restrictions to the vehicle.

6. The method according to claim 1, wherein The first indication information is information of the second user logging into the user system of the vehicle. The first indication information includes the identity information of the second user. The second user is a user authorized by the first user to log into the user system of the vehicle. The first user is a user with no access restrictions to the vehicle.

7. The method according to claim 6, characterized in that Before determining the first mode based on the first indication information, the method further includes: The identity information of the second user is registered in the user system of the vehicle based on the instruction information input by the first user.

8. The method according to any one of claims 1 to 7, characterized in that The method further comprises: The functions allowed and / or prohibited in the first mode are configured based on the second indication information input by the first user.

9. The method according to claim 8, characterized in that After configuring the functions allowed and / or prohibited in the first mode based on the second indication information input by the first user, the method further includes: Based on the third indication information, the function usage status configured in the first mode is saved as the function usage status of the first application scenario; the first application scenario is one of the multiple application scenarios of the first mode, and different application scenarios in the multiple application scenarios correspond to different function usage statuses configured in the first mode.

10. The method according to any one of claims 1 to 9, characterized in that The method further comprises: Querying the usage status of the functions configured in the first mode; Send a display instruction, where the display instruction is used to instruct to display the function usage status configured in the first mode.

11. The method according to any one of claims 1 to 10, characterized in that The method further comprises: When a preset action on the vehicle is sensed, a second mode among the multiple data protection modes is activated; the second mode is used to instruct the camera of the vehicle to capture images around the vehicle.

12. The method according to any one of claims 1 to 11, characterized in that After the mode of the vehicle is switched to the first mode, the method further includes: A third mode is enabled based on fourth indication information; the third mode is used to detect the status of passengers in the vehicle.

13. The method according to any one of claims 1 to 12, characterized in that After the mode of the vehicle is switched to the first mode, the method further includes: A fourth mode is enabled based on fifth indication information; the fourth mode is used to turn off the camera and / or microphone in the vehicle.

14. A vehicle access permission control method, characterized in that: The method comprises: determining a first mode based on first indication information, the first mode being one of a plurality of data protection modes of the vehicle, the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle; Sending a first message to the vehicle; the first message instructs switching the mode of the vehicle to the first mode; A first response message is received; the first response message indicates that the mode of the vehicle has been switched to the first mode.

15. The method according to claim 14, characterized in that The first instruction information is instruction information input by a first user, and the first user is a user who has no access restriction to the vehicle; Before determining the first mode based on the first indication information, the method further includes: receiving login information of a user system of the vehicle, the login information including identity information of the first user; The first user is provided with permission to use functions of the vehicle based on the login information.

16. The method according to claim 15, characterized in that After providing the first user with permission to use the vehicle function based on the login information, the method further includes: The functions allowed and / or prohibited in the first mode are configured based on the second indication information input by the first user.

17. The method according to claim 16, characterized in that After configuring the functions allowed and / or prohibited in the first mode based on the second indication information input by the first user, the method further includes: Based on the third indication information, the function usage status configured in the first mode is saved as the status of the first application scenario; the first application scenario is one of the multiple application scenarios of the first mode, and different application scenarios in the multiple application scenarios correspond to different function usage statuses configured in the first mode.

18. The method according to any one of claims 15 to 17, characterized in that: The method further comprises: Querying the usage status of the functions configured in the first mode; Displays the usage status of the functions configured in the first mode.

19. The method according to any one of claims 15 to 18, characterized in that: After determining the first mode based on the first indication information and before sending the first message to the vehicle based on the determined first mode, the method further includes: An exit code for the first mode is configured, where the exit code is a verification code for exiting the first mode.

20. The method according to any one of claims 14 to 18, characterized in that: The method further comprises: Based on the instruction information input by the first user, the identity information of the second user is registered in the user system of the vehicle, the first user is a user who has no access restrictions to the vehicle, and the identity information of the second user is used by the second user to use the vehicle in a second mode, which is one of the multiple data protection modes of the vehicle.

21. A vehicle access permission control method, characterized in that: The method comprises: receiving a first message; the first message instructing to switch a mode of the vehicle to a first mode; the first mode being one of a plurality of data protection modes of the vehicle; the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle; switching the mode of the vehicle to the first mode; A first response message is sent; the first response message indicates that the mode of the vehicle has been switched to the first mode.

22. The method according to claim 21, characterized in that After receiving the first message, the method further includes: querying the driving status of the vehicle; The switching the mode of the vehicle to the first mode based on the first message includes: When the vehicle is in a stopped state, the mode of the vehicle is switched to the first mode based on the first message.

23. The method according to claim 21 or 22, characterized in that After receiving the first message, the method further includes: Query the identity information of the user currently logged into the user system of the vehicle; Switching the mode of the vehicle to the first mode includes: In a case where the identity information of the user is identity information of a first user, the mode of the vehicle is switched to the first mode, and the first user is a user who has no access restriction to the vehicle.

24. The method according to any one of claims 21 to 23, characterized in that The method further comprises: receiving login information including identity information of a second user, where the second user is a user authorized by the first user to log into the user system of the vehicle, and the first user is a user with no access restrictions to the vehicle; The second user is provided with permission to use functions in a second mode, where the second mode is one of a plurality of data protection modes of the vehicle.

25. A vehicle access permission control device, characterized in that: The device comprises: a determining unit, configured to determine a first mode based on first indication information, the first mode being one of a plurality of data protection modes of the vehicle, the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle; A switching unit is used to switch the mode of the vehicle to the first mode.

26. A terminal device, characterized in that: The terminal device includes: a determining unit, configured to determine a first mode based on first indication information, the first mode being one of a plurality of data protection modes of the vehicle, the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being used to restrict access to data of the vehicle; a sending unit, configured to send a first message to the vehicle; the first message instructing to switch the mode of the vehicle to the first mode; The receiving unit is configured to receive a first response message, wherein the first response message indicates that the mode of the vehicle has been switched to the first mode.

27. A vehicle access permission control device, characterized in that: The device comprises: a receiving unit configured to receive a first message; the first message instructing to switch a mode of the vehicle to a first mode; the first mode being one of a plurality of data protection modes of the vehicle; the plurality of data protection modes of the vehicle including modes provided for at least two different vehicle users, the plurality of data protection modes being configured to restrict access to data of the vehicle; a switching unit, configured to switch the mode of the vehicle to the first mode; A sending unit is used to send a first response message; the first response message indicates that the mode of the vehicle has been switched to the first mode.

28. A vehicle access permission control device, characterized in that: The device includes a processor and a memory, wherein the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the device performs the method according to any one of claims 1 to 13; or, the device performs the method according to any one of claims 21 to 24.

29. A terminal device, characterized in that: The terminal device includes a processor and a memory, wherein the memory is used to store a computer program, and the processor is used to execute the computer program stored in the memory, so that the terminal device executes the method according to any one of claims 14 to 20.

30. A vehicle, characterized in that: The vehicle includes the vehicle access permission control device according to any one of claims 25, 27 or 28.

31. A computer-readable storage medium, characterized in that The computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the method according to any one of claims 1 to 13; Alternatively, the computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the method according to any one of claims 14 to 20; Alternatively, the computer-readable storage medium stores a computer program, and the computer program is executed by a processor to implement the method according to any one of claims 21 to 24.

Images