Authority management method, system and equipment applied to in-vehicle infotainment system

Abstract

The invention relates to the field of application security, in particular to an authority management method, system and device applied to a vehicle-mounted infotainment system, and the method comprises the steps: responding to an authority application of an application for a target authority; checking a global permission corresponding to the target permission; when the global permission is enabled, processing the permission application; and when the global permission is closed, popping up a corresponding global permission setting window, responding to an operation acting on the global permission setting window, adjusting the global permission and a corresponding time limit, and processing the permission application according to the adjusted global permission. According to the method, the concept of global permission is introduced, and a user can uniformly control on-off states of various sensitive permissions on a system level. When the global authority switch is turned off, the authority application of any application program can be intercepted by the system, and the user can flexibly authorize through the popped authority setting window, so that the application program cannot occupy the authority for a long time, and the risk of privacy disclosure is further reduced.

Description

Technical Field

[0001] The present invention relates to the field of application security, and in particular to a permission management method, system and device applied to a vehicle computer. Background Art

[0002] Application permission management is an important security mechanism in modern mobile operating systems. It allows users to control the access rights of applications to various sensitive resources and data of the device, such as geographic location, address book, camera, etc. By setting application permissions properly, malicious applications can be prevented from illegally obtaining user privacy, ensuring system security and data confidentiality. At the same time, application permission management also provides users with the ability to independently control application behavior, improving user experience and trust.

[0003] At present, the application permission management in mainstream mobile operating systems adopts the "application-level permission + static authorization" model. Specifically, each application has its own permission list, which declares the system resources it needs to access. When the application is installed or run for the first time, the user needs to authorize these permissions one by one. Once the authorization is completed, the application can continue to access these resources during its life cycle unless the user actively modifies the permissions in the system settings. Although this static permission management method is simple and intuitive, it has certain security risks. Since the permission granting occurs when the application is first run, the user lacks a deep understanding of the application's functions and behaviors, and it is easy to mistakenly grant unnecessary permissions. In addition, users rarely take the initiative to pay attention to and adjust application permissions in daily use, which makes the authorized applications have sensitive permissions for a long time, posing the risk of privacy leakage and data abuse. Summary of the invention

[0004] In order to solve the above problems, the present invention provides a permission management method, system and device applied to a vehicle computer.

[0005] The first aspect of the present invention discloses a permission management method applied to a vehicle computer, comprising:

[0006] Respond to the application's permission request for the target permission;

[0007] Check the global permissions corresponding to the target permissions;

[0008] When the global permission is enabled, processing the permission application;

[0009] When the global permission is closed, a corresponding global permission setting window pops up, and in response to operations performed on the global permission setting window, the global permission and its corresponding time limit are adjusted, and the permission application is processed according to the adjusted global permission.

[0010] Furthermore, the step of checking the global permission corresponding to the target permission includes:

[0011] Read the activation time limit and temporary permissions of the global permissions corresponding to the target permissions;

[0012] Determining whether the activation time limit is a preset first constant;

[0013] When the activation time limit is the first constant, the temporary permission is used as the current global permission;

[0014] When the activation time limit is not the first constant, the current time is detected:

[0015] If the current time falls within the activation time limit, the global permission is determined to be enabled;

[0016] If the current time does not fall within the activation time limit, the global permission is determined to be closed, and the corresponding activation time limit is set to the first constant and stored persistently.

[0017] Furthermore, a corresponding global permission setting window is popped up, and in response to an operation on the global permission setting window, the step of adjusting the global permission and its corresponding time limit includes:

[0018] A global permission setting window pops up; wherein the global permission setting window includes: a time-limited opening option, a single opening option, and a single closing option;

[0019] When the time-limited option is selected, the activation time limit of the global permission is determined according to the current time and the preset time limit, and the activation time limit is persistently stored;

[0020] When the one-time option is selected, select the global permission to enable and use it as a temporary permission;

[0021] When the one-time shutdown option is selected, the global permission is closed and it is used as a temporary permission.

[0022] Further, the step of determining the activation time limit of the global permission according to the current time and the preset validity period, and persistently storing the activation time limit includes:

[0023] Read the current time of the vehicle computer;

[0024] The current time and the validity period are added together to serve as the activation period of the global permission;

[0025] The activation time limit is persistently stored.

[0026] Furthermore, when the one-time enable option is selected, the steps of selecting the global permission to enable and using it as a temporary permission include:

[0027] Select the One-time Enable option;

[0028] Using the first constant as the activation time limit and persistently storing the activation time limit;

[0029] Set the global permission to on and use it as a temporary permission;

[0030] The temporary permissions are stored in a non-persistent manner.

[0031] Furthermore, when the one-time closing option is selected, the steps of selecting the global permission closing and using it as a temporary permission include:

[0032] Select the Single Close option;

[0033] Using the first constant as the activation time limit and persistently storing the activation time limit;

[0034] Set the global permission to off and use it as a temporary permission;

[0035] The temporary permissions are stored in a non-persistent manner.

[0036] Further, after the vehicle is powered on and off, the temporary permission in non-persistent storage is initialized to be closed.

[0037] Furthermore, the step of persistently storing the activation time limit includes:

[0038] Read the user ID of the current vehicle user;

[0039] The user identification and the activation time limit are combined and stored persistently.

[0040] A second aspect of the present invention discloses a rights management system applied to a vehicle computer, the system comprising:

[0041] The response module is used to respond to the application's permission request for the target permission;

[0042] A checking module, used for checking the global permissions corresponding to the target permissions;

[0043] A first processing module, used for processing the permission application when the global permission is enabled;

[0044] The second processing module is used to pop up a corresponding global permission setting window when the global permission is closed, adjust the global permission and its corresponding time limit in response to the operation acting on the global permission setting window, and process the permission application according to the adjusted global permission.

[0045] The third aspect of the present invention discloses an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the steps of the permission management method applied to a vehicle computer as described in any one of the first aspect of the present invention are implemented.

[0046] The present invention proposes a more secure and flexible application permission management method. The method introduces the concept of global permissions, and users can uniformly control the switch status of various sensitive permissions at the system level. When the global permission switch is turned off, the permission application of any application will be intercepted by the system, and users can flexibly authorize through the pop-up permission setting window to ensure that the application will not occupy permissions for a long time, further reducing the risk of privacy leakage. The present invention comprehensively considers security and usability, and provides a more powerful and intelligent application permission management and control mechanism. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0048] Figure 1 It is a flowchart of a method for managing permissions applied to a vehicle computer disclosed in an embodiment of the present invention;

[0049] Figure 2 It is a global permission setting window corresponding to the microphone disclosed in the embodiment of the present invention;

[0050] Figure 3 It is a structural diagram of a permission management system applied to a vehicle computer disclosed in an embodiment of the present invention;

[0051] Figure 4 It is a schematic diagram of the structure of an electronic device disclosed in an embodiment of the present invention. DETAILED DESCRIPTION

[0052] In order to enable those skilled in the art to better understand the scheme of the present invention, the technical scheme in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0053] The terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, device, or product end including a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units that are not listed, or may optionally include other steps or units inherent to these processes, methods, products, or ends.

[0054] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present invention. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0055] See also Figure 1 As shown, Figure 1 1 is a flow chart of a method for managing permissions applied to a vehicle computer disclosed in an embodiment of the present invention. Figure 1 As shown, the permission management method applied to the vehicle computer may include the following operations:

[0056] S101, responding to the application's permission request for the target permission;

[0057] In an optional embodiment, the target permission may be location permission, Bluetooth permission, microphone permission, camera permission, network permission, etc., which is not limited in the embodiment of the present invention.

[0058] The application described in this embodiment refers to a software program running on the in-vehicle infotainment system or the in-vehicle computing platform. These applications can be developed separately or integrated applications for specific functions or services, and the present invention does not limit this.

[0059] S102, checking the global permission corresponding to the target permission;

[0060] In an optional embodiment, the step of checking the global permission corresponding to the target permission includes:

[0061] Read the activation time limit and temporary permissions of the global permissions corresponding to the target permissions;

[0062] Determining whether the activation time limit is a preset first constant;

[0063] When the activation time limit is the first constant, the temporary permission is used as the current global permission;

[0064] When the activation time limit is not the first constant, the current time is detected:

[0065] If the current time falls within the activation time limit, the global permission is determined to be enabled;

[0066] If the current time does not fall within the activation time limit, the global permission is determined to be closed, and the corresponding activation time limit is set to the first constant and stored persistently.

[0067] In this optional embodiment, global permissions refer to unified permission settings for all applications in the vehicle system, which determine whether to allow these applications to access target permissions, such as location, microphone, or storage, to ensure user privacy and security. With global permissions, users can centrally manage and adjust application permission requests.

[0068] In this optional embodiment, the first constant represents that the global permission corresponding to the target permission is temporarily turned on or off. The value of the first constant can be NULL, or the maximum value of the Unix timestamp, or the minimum value of the Unix timestamp, which is not limited by the embodiment of the present invention.

[0069] In this optional embodiment, persistent storage refers to saving data (such as configuration information, user settings, permission status, etc.) to a storage medium that can retain the data after the system is restarted or powered off. This storage method ensures the long-term existence of data so that it can be quickly restored and used when the system is started next time, such as saving in flash memory or hard disk drive.

[0070] In this optional embodiment, determining whether the current time falls within the activation time limit refers to determining whether the current time exceeds the activation time limit. If so, the current time does not fall within the activation time limit; if not, the current time falls within the activation time limit.

[0071] S103, when the global permission is enabled, processing the permission application;

[0072] In an optional embodiment, if the global permission is on, the application-level permission switch of the application for the target permission is read; if the application-level permission switch is on, the application is allowed to access the target permission; if the application-level permission switch is off, the application is denied access to the target permission, or a setting page for the application-level permission switch is popped up to guide the customer to set the application-level permission switch.

[0073] S104. When the global permission is closed, a corresponding global permission setting window pops up, and in response to an operation performed on the global permission setting window, the global permission and its corresponding time limit are adjusted, and the permission application is processed according to the adjusted global permission.

[0074] In an optional embodiment, a corresponding global permission setting window is popped up, and in response to an operation performed on the global permission setting window, the step of adjusting the global permission and its corresponding time limit includes:

[0075] A global permission setting window pops up; wherein the global permission setting window includes: a time-limited opening option, a single opening option, and a single closing option;

[0076] When the time-limited option is selected, the activation time limit of the global permission is determined according to the current time and the preset time limit, and the activation time limit is persistently stored;

[0077] When the one-time option is selected, select the global permission to enable and use it as a temporary permission;

[0078] When the one-time shutdown option is selected, the global permission is closed and it is used as a temporary permission.

[0079] like Figure 2 As shown, Figure 2 The figure shows the pop-up global permission setting window when the target permission is a microphone and the global permission corresponding to the target permission is off. In this global permission setting window, the time-limited opening option corresponds to the "Open for 12 months" option, the single opening option corresponds to the "Only for this trip" option, and the single closing option corresponds to the "Cancel" option. When the user selects the time-limited opening option, the system automatically determines the activation time limit of the global permission based on the current time and the preset time limit, and stores it persistently. This method simplifies user operations and does not require users to manually enter a specific time range. At the same time, through persistent storage, it ensures that the permission setting can still take effect after the vehicle is restarted or powered off, thereby improving the reliability of the system. In addition, the single opening and single closing options provide users with a convenient way to adjust global permissions at one time. The system processes the user's choice as a temporary permission, meeting the user's need to temporarily open or close a permission, while not affecting the existing activation time limit settings, thereby enhancing the flexibility of permission management.

[0080] It can be seen that this optional embodiment provides three options in the global permission setting window: time-limited opening, single opening, and single closing. Users can conveniently adjust the status and time limit of global permissions according to their needs and preferences. This design enhances the user's control over permission management and improves the usability and user experience of the vehicle system.

[0081] In an optional embodiment, the steps of determining the activation time limit of the global permission according to the current time and the preset validity period, and persistently storing the activation time limit include:

[0082] Read the current time of the vehicle computer;

[0083] The current time and the validity period are added together to serve as the activation period of the global permission;

[0084] The activation time limit is persistently stored.

[0085] In this optional embodiment, the current system time is read through the time interface provided by the vehicle operating system to obtain the current time expressed in the form of a Unix timestamp. Then, the read current time is added to the preset validity period to obtain the activation period of the global permission. The validity period is in seconds or milliseconds, indicating that the global permission will remain activated for a period of time in the future starting from the current time. Finally, the calculated activation period is saved in a persistent storage, such as a file, a database, or a non-volatile memory of the vehicle, so that the activation state of the global permission can be restored after the vehicle is restarted or powered off. The storage format can be designed according to specific needs and the storage mechanism of the vehicle. Common methods include direct storage in the form of a Unix timestamp, or converting the activation period into a string in a specific format and then storing it.

[0086] For example, call the time interface to obtain the current (May 1, 2023 12:00:00) Unix timestamp: 1682924400, which represents the number of seconds that have passed since January 1, 1970. Add the current timestamp 1682924400 to the validity period of 30 days (i.e. 2592000 seconds), and the calculation result is: 1682924400+2592000=1685516400, and the corresponding date and time is May 31, 2023 12:00:00.

[0087] In an optional embodiment, when the one-time enable option is selected, the step of selecting the global permission to enable and using it as a temporary permission includes:

[0088] Select the One-time Enable option;

[0089] Using the first constant as the activation time limit and persistently storing the activation time limit;

[0090] Set the global permission to on and use it as a temporary permission;

[0091] The temporary permissions are stored in a non-persistent manner.

[0092] In this optional embodiment, non-persistent storage refers to storing data in volatile memory, such as random access memory cache. Unlike persistent storage (such as files, databases, or non-volatile memory), data in non-persistent storage will be lost after the vehicle computer is powered off or restarted.

[0093] In an optional embodiment, when the one-time closing option is selected, the step of selecting the global permission closing and using it as a temporary permission includes:

[0094] Select the Single Close option;

[0095] Using the first constant as the activation time limit and persistently storing the activation time limit;

[0096] Set the global permission to off and use it as a temporary permission;

[0097] The temporary permissions are stored in a non-persistent manner.

[0098] In another optional embodiment, after the vehicle is powered on after being turned off, the temporary permission in non-persistent storage is initialized to be closed.

[0099] In this optional embodiment, since the data in the non-persistent storage will be lost after the vehicle computer is powered off or restarted, the temporary permission is reinitialized to closed when the vehicle computer is started, which can ensure that the user selects the "single enable option" to only enable the global permission corresponding to the target permission before the vehicle computer is powered off.

[0100] In an optional embodiment, the step of persistently storing the activation time limit includes:

[0101] Read the user ID of the current vehicle user;

[0102] The user identification and the activation time limit are combined and stored persistently.

[0103] It can be seen that this optional embodiment can achieve more sophisticated and personalized permission management by combining the user identification and activation time limit and storing them persistently. Different users can have different permission settings and activation time limits, and the system can load the corresponding permission configuration according to the currently logged in user. This design improves the flexibility and security of the vehicle system, so that when multiple users share the same vehicle, the permissions of each user can be independently controlled and managed, avoiding permission conflicts and interference between different users. At the same time, this method also facilitates the preservation and restoration of user personalized settings, improving the user experience.

[0104] In another optional embodiment, another method for managing permissions applied to a vehicle computer disclosed in an embodiment of the present invention includes the following steps:

[0105] Respond to the application's access to the target permissions;

[0106] Traversing a preset super-authorization application list, wherein the super-authorization application list stores identification information of all super-authorization applications;

[0107] Check the global permissions corresponding to the target permissions;

[0108] When the global permission is enabled, processing the access to the target permission;

[0109] When the global permission is closed, a corresponding global permission setting window pops up, and in response to operations performed on the global permission setting window, the global permission and its corresponding time limit are adjusted, and the access to the target permission is processed according to the adjusted global permission.

[0110] In this optional embodiment, access to the target permission refers to an application that has obtained the target permission using or accessing this permission to perform an operation or access a resource. For example, if an application has obtained permission to access the location information of the in-vehicle infotainment system (vehicle computer), the application attempts to obtain the current location information, that is, access to the target permission (location information).

[0111] Super-privileged applications refer to native applications in the system that have access to target permissions. Super-privileged applications do not apply for permissions before accessing target permissions.

[0112] See also Figure 3 As shown, Figure 3 Schematic diagram of a permission management system for vehicle computers disclosed in an embodiment of the present invention. Figure 3 As shown, the rights management system includes:

[0113] A response module 301 is used to respond to the application's permission application for the target permission;

[0114] A checking module 302, used to check the global permission corresponding to the target permission;

[0115] A first processing module 303, configured to process the permission application when the global permission is enabled;

[0116] The second processing module 304 is used to pop up a corresponding global permission setting window when the global permission is closed, adjust the global permission and its corresponding time limit in response to the operation performed on the global permission setting window, and process the permission application according to the adjusted global permission.

[0117] For the specific limitations of the permission management system applied to the vehicle computer, please refer to the limitations of the permission management method applied to the vehicle computer above, which will not be repeated here. Each module in the above-mentioned permission management system applied to the vehicle computer can be implemented in whole or in part by software, hardware and a combination thereof. The above-mentioned modules can be embedded in or independent of the processor in the electronic device in hardware format, or can be stored in the memory of the electronic device in software format, so that the processor can call the operations corresponding to the above modules.

[0118] It should be noted that, in order to highlight the innovative part of the present invention, the present embodiment does not introduce modules that are not closely related to solving the technical problem proposed by the present invention, but this does not mean that there are no other modules in the present embodiment.

[0119] like Figure 4 As shown, the electronic device 1 provided by the present invention may include a memory 12, a processor 13 and a bus, and may also include a computer program stored in the memory 12 and executable on the processor 13, such as a permission management program applied to a vehicle computer.

[0120] Among them, the memory 12 includes at least one type of readable storage medium, and the readable storage medium includes flash memory, mobile hard disk, multimedia card, card-type memory (for example: SD or DX memory, etc.), magnetic memory, disk, optical disk, etc. In some embodiments, the memory 12 can be an internal storage unit of the electronic device 1, such as a mobile hard disk of the electronic device 1. In other embodiments, the memory 12 can also be an external storage device of the electronic device 1, such as a plug-in mobile hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device 1. Further, the memory 12 can also include both an internal storage unit of the electronic device 1 and an external storage device. The memory 12 can not only be used to store application software and various types of data installed in the electronic device 1, such as codes for permission management applied to the vehicle computer, but also can be used to temporarily store data that has been output or is to be output.

[0121] In some embodiments, the processor 13 may be composed of an integrated circuit, for example, a single packaged integrated circuit, or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and a combination of various control chips. The processor 13 is the control core (Control Unit) of the electronic device 1, and uses various interfaces and lines to connect the various components of the entire electronic device 1, and executes or runs programs or modules stored in the memory 12 (such as the permission management program applied to the vehicle computer, etc.), and calls the data stored in the memory 12 to execute various functions of the electronic device 1 and process data.

[0122] The processor 13 executes the operating system and various installed applications of the electronic device 1. The processor 13 executes the applications to implement the steps in the above-mentioned permission management method applied to the vehicle computer.

[0123] Exemplarily, the computer program may be divided into one or more modules, which are stored in the memory 12 and executed by the processor 13 to complete the present application. The one or more modules may be a series of computer program instruction segments capable of completing specific functions, which are used to describe the execution process of the computer program in the electronic device 1. For example, the computer program may be divided into a response module 301, a check module 302, a first processing module 303, and a second processing module 304.

[0124] The above-mentioned integrated unit implemented in the form of a software function module can be stored in a computer-readable storage medium, and the storage medium can be non-volatile or volatile. The above-mentioned software function module is stored in a storage medium, including several instructions for enabling a computer device (which can be a personal computer, a computer device, or a network device, etc.) or a processor to perform part of the functions of the permission management method applied to the vehicle computer described in each embodiment of the present application.

[0125] In summary, the present invention discloses a permission management method, system and device for vehicle computers, and proposes a more secure and flexible application permission management method. The method introduces the concept of global permissions, and users can uniformly control the switch status of various sensitive permissions at the system level. When the global permission switch is turned off, any application's permission application will be intercepted by the system, and users can flexibly authorize through the pop-up permission setting window to ensure that the application does not occupy permissions for a long time, further reducing the risk of privacy leakage. The present invention comprehensively considers security and usability, and provides a more powerful and intelligent application permission management mechanism. Therefore, the present invention effectively overcomes the various shortcomings in the prior art and has a high industrial utilization value.

[0126] The above embodiments are merely illustrative of the principles and effects of the present invention, and are not intended to limit the present invention. Anyone familiar with the art may modify or alter the above embodiments without departing from the spirit and scope of the present invention. Therefore, all equivalent modifications or alterations made by a person of ordinary skill in the art without departing from the spirit and technical concept disclosed by the present invention shall still be covered by the claims of the present invention.

Claims

1. A method for managing permissions applied to a vehicle computer, characterized in that: The method comprises: Respond to the application's permission request for the target permission; Check the global permissions corresponding to the target permissions; When the global permission is enabled, processing the permission application; When the global permission is closed, a corresponding global permission setting window pops up, and in response to operations performed on the global permission setting window, the global permission and its corresponding time limit are adjusted, and the permission application is processed according to the adjusted global permission.

2. The permission management method applied to a vehicle computer according to claim 1 is characterized in that: The step of checking the global permission corresponding to the target permission includes: Read the activation time limit and temporary permissions of the global permissions corresponding to the target permissions; Determining whether the activation time limit is a preset first constant; When the activation time limit is the first constant, the temporary permission is used as the current global permission; When the activation time limit is not the first constant, the current time is detected: If the current time falls within the activation time limit, the global permission is determined to be enabled; If the current time does not fall within the activation time limit, the global permission is determined to be closed, and the corresponding activation time limit is set to the first constant and stored persistently.

3. The permission management method applied to a vehicle computer according to claim 1 is characterized in that: A corresponding global permission setting window pops up, and in response to an operation on the global permission setting window, the steps of adjusting the global permission and its corresponding time limit include: A global permission setting window pops up; wherein the global permission setting window includes: a time-limited opening option, a single opening option, and a single closing option; When the time-limited option is selected, the activation time limit of the global permission is determined according to the current time and the preset time limit, and the activation time limit is persistently stored; When the one-time option is selected, select the global permission to enable and use it as a temporary permission; When the one-time shutdown option is selected, the global permission is closed and it is used as a temporary permission.

4. The permission management method applied to a vehicle computer according to claim 3 is characterized in that: The steps of determining the activation time limit of the global permission according to the current time and the preset validity period, and persistently storing the activation time limit include: Read the current time of the vehicle computer; The current time and the validity period are added together to serve as the activation period of the global permission; The activation time limit is persistently stored.

5. The method for managing permissions applied to a vehicle computer according to claim 3, characterized in that: When the one-time option is selected, the steps to select global permission and use it as a temporary permission include: Select the One-time Enable option; Using the first constant as the activation time limit and persistently storing the activation time limit; Set the global permission to on and use it as a temporary permission; The temporary permissions are stored in a non-persistent manner.

6. The permission management method applied to a vehicle computer according to claim 3 is characterized in that: When the one-time shutdown option is selected, the steps to close the global permission and use it as a temporary permission include: Select the Single Close option; Using the first constant as the activation time limit and persistently storing the activation time limit; Set the global permission to off and use it as a temporary permission; The temporary permissions are stored in a non-persistent manner.

7. A method for managing permissions applied to a vehicle computer according to claim 5 or 6, characterized in that: After the vehicle is powered on and off, the temporary permission in non-persistent storage is initialized to be closed.

8. A method for managing permissions applied to a vehicle computer according to any one of claims 4 to 6, characterized in that: The step of persistently storing the activation time limit includes: Read the user ID of the current vehicle user; The user identification and the activation time limit are combined and stored persistently.

9. A rights management system applied to a vehicle computer, characterized in that: The system comprises: The response module is used to respond to the application's permission request for the target permission; A checking module, used for checking the global permissions corresponding to the target permissions; A first processing module, used for processing the permission application when the global permission is enabled; The second processing module is used to pop up a corresponding global permission setting window when the global permission is closed, adjust the global permission and its corresponding time limit in response to the operation acting on the global permission setting window, and process the permission application according to the adjusted global permission.

10. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the steps of the permission management method applied to a vehicle computer as claimed in any one of claims 1 to 8 are implemented.

Images