Vehicle sentry mode starting control method and system and intelligent domain controller

Abstract

The invention discloses a starting control method and system of a vehicle sentry mode and an intelligent domain controller, the method is applied to the intelligent domain controller IDCU of a vehicle, and the method comprises the steps that a first wake-up instruction of a remote information processor TBOX is received; in response to the first wake-up instruction, detecting whether a first removable storage device is inserted into the interface, the first removable storage device being provided with at least one data storage partition; detecting a target data storage partition in the at least one data storage partition to obtain a detection result of the first removable storage device when it is detected that the first removable storage device is inserted into the interface; the detection result is sent to an automatic driving domain controller ADCU, so that the ADCU judges whether to start a vehicle sentry mode or not according to the detection result, the state of the storage device can be accurately and efficiently detected, and the problem that the sentry function cannot be correctly activated due to the fact that the state of the storage device is misjudged due to the fact that the time consumed by detection of the storage device is too long is effectively solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of vehicles, in particular to a starting control method and system of a vehicle sentry mode and an intelligent domain controller. BACKGROUND

[0002] With the development of intelligent technology of automobiles, the data security and protection function of vehicles are increasingly important. As an advanced vehicle safety monitoring system, the "sentry mode" can continuously monitor the surrounding environment through vehicle-mounted sensors after the user leaves the vehicle, and record video evidence when potential threats are detected. The normal operation of this function highly depends on the reliability and real-time availability of removable storage devices (usually large-capacity USB flash drives).

[0003] In the existing removable storage device detection scheme, when the user inserts a removable storage device with an ultra-large capacity (such as 512GB or 1TB) and a low read-write speed, the system main controller (such as IDCU) will consume a large amount of time to perform a complete detection process, often more than 30 seconds. During this long detection process, the system main controller cannot complete the final verification due to slow detection, and cannot report the "inserted" state, and its external communication interface will still maintain the initial "uninserted" state signal (for example, 0x1:notinserted), causing misjudgment of the state of the removable storage device and thus the sentry function cannot be activated correctly.

[0004] Therefore, how to provide a method that can accurately and efficiently detect the state of a storage device and effectively avoid the problem that the state of the storage device is misjudged due to the long detection time of the storage device and thus the sentry function cannot be activated correctly is currently an urgent problem to be solved. SUMMARY

[0005] The embodiments of the present application provide a starting control method and system of a vehicle sentry mode and an intelligent domain controller, which can accurately and efficiently detect the state of a storage device and effectively avoid the problem that the state of the storage device is misjudged due to the long detection time of the storage device and thus the sentry function cannot be activated correctly.

[0006] In a first aspect, the embodiments of the present application provide a starting control method of a vehicle sentry mode, which is applied to an intelligent domain controller (IDCU) of a vehicle, and an interface of a removable storage device is arranged on the vehicle, and the method comprises the following steps: receiving a first wake-up instruction of a telematics box (TBOX); the first wake-up instruction is sent by the TBOX in response to receiving a request message for starting the vehicle sentry mode from the cloud; in response to the first wake-up instruction, detecting whether a first removable storage device is inserted into the interface, and the first removable storage device is provided with at least one data storage partition; In a case where it is detected that the first removable storage device is inserted into the interface, a target data storage partition in the at least one data storage partition is detected to obtain a detection result of the first removable storage device, the target data storage partition being a data storage partition required for running a vehicle sentry mode; The detection result is sent to an autonomous driving domain controller (ADCU) to enable the ADCU to determine whether to start the vehicle sentry mode according to the detection result.

[0007] In some possible implementation manners, the detection of the target data storage partition in the at least one data storage partition to obtain the detection result of the first removable storage device includes: It is detected whether the at least one target data storage partition is present in the at least one data storage partition; In a case where any target data storage partition in the at least one target data storage partition is absent, an abnormal detection result of the first removable storage device is obtained; In a case where the at least one target data storage partition is present, it is detected whether the at least one target data storage partition is normal to obtain a detection result of the at least one target data storage partition; In a case where the at least one target data storage partition is normal, a normal detection result of the first removable storage device is obtained.

[0008] In some possible implementation manners, the detection of whether the at least one target data storage partition is present in the at least one data storage partition includes: Identification information of the at least one target data storage partition is acquired; Based on the identification information, it is detected from a data storage partition table of the first removable storage device whether the at least one target data storage partition is present.

[0009] In some possible implementation manners, the detection of whether the at least one target data storage partition is normal to obtain the detection result of the at least one target data storage partition includes: For each target data storage partition, it is detected whether available storage space of the target data storage partition reaches a preset storage space to obtain a first detection result; It is detected whether a detection duration of the target data storage partition is less than a first duration, or whether a total detection duration of all target data storage partitions is less than a second duration, the first duration being less than the second duration, to obtain a second detection result; It is detected whether a file system format of the target data storage partition conforms to a preset format requirement to obtain a third detection result; The fourth detection result is obtained by detecting whether the data storage partition table type of the first removable storage device meets the preset requirements. If the first detection result, the second detection result, the third detection result, and the fourth detection result are all normal, a detection result is obtained in which the functions of the at least one target data storage partition are all normal.

[0010] In some possible implementations, after responding to the first wake-up command, the method further includes: Mark the state of the IDCU as the first state and record the marking time; Starting from the marked time, a preset duration of time is recorded to detect the first removable storage device; The preset duration information is sent to the autonomous driving domain controller ADCU, so that if the ADCU does not receive a detection result from the first removable storage device after waiting for the preset duration from the marked time, and the detection result is normal, the vehicle sentry mode is prohibited from being activated.

[0011] In some possible implementations, after obtaining the detection result of the first removable storage device malfunction, the method further includes: Output alarm information to the autonomous driving domain controller (ADCU).

[0012] In some possible implementations, the method further includes: Record the first identification information and detection results of the first removable storage device; In response to the second wake-up command of the TBOX, the second identification information of the second removable storage device inserted into the interface is obtained; Compare the second identification information with the first identification information; When the second identification information is consistent with the first identification information, the detection result is normal, and the available storage space of the second removable storage device reaches the preset storage space, a trigger signal for activating vehicle sentry mode is sent to the autonomous driving domain controller ADCU so that the ADCU activates vehicle sentry mode. If the second identification information is inconsistent with the first identification information, or if the second identification information is consistent with the first identification information and the detection result is abnormal, the second removable storage device shall be re-detected according to the steps for detecting the first removable storage device.

[0013] Secondly, this application provides a vehicle sentry mode start control system, including: a remote information processor TBOX, an intelligent domain controller IDCU applied to the vehicle, and an autonomous driving domain controller ADCU, wherein the vehicle is provided with an interface for a removable storage device. The TBOX is used to receive a request message from the cloud to activate the vehicle sentry mode; and based on the request message, to send a first wake-up command to the IDCU. The IDCU is configured to receive a first wake-up command from the TBOX; in response to the first wake-up command, detect whether a first removable storage device is inserted into the interface, the first removable storage device having at least one data storage partition; if a first removable storage device is detected inserted into the interface, detect a target data storage partition among the at least one data storage partition to obtain a detection result for the first removable storage device, the target data storage partition being the data storage partition required for running the vehicle sentry mode; and send the detection result to the autonomous driving domain controller ADCU. The ADCU is used to receive the detection result of the first removable storage device sent by the IDCU, and determine whether to activate the vehicle sentry mode based on the detection result of the first removable storage device; if the detection result of the first removable storage device is normal, the vehicle sentry mode is activated; if the detection result of the first removable storage device is abnormal, the vehicle sentry mode is disabled.

[0014] Thirdly, this application provides an intelligent domain controller (IDCU) applied to a vehicle. The vehicle is equipped with an interface for a removable storage device. The IDCU includes a receiving module for receiving a first wake-up command from a remote information processor (TBOX). The first wake-up command is sent by the TBOX to the IDCU after receiving a request message from the cloud for activating the vehicle's sentry mode. The detection module is used to detect, in response to the first wake-up command, whether a first removable storage device is inserted into the interface, wherein the first removable storage device is provided with at least one data storage partition; The detection module is further configured to detect a target data storage partition in the at least one data storage partition when a first removable storage device is detected inserted into the interface, and obtain the detection result of the first removable storage device, wherein the target data storage partition is the data storage partition required to run the vehicle sentry mode; The sending module is used to send the detection result to the autonomous driving domain controller (ADCU) so that the ADCU can determine whether to activate the vehicle sentry mode based on the detection result.

[0015] Fourthly, embodiments of this application provide a vehicle including the Intelligent Domain Controller (IDCU) described in the third aspect above.

[0016] In this embodiment, after receiving the first wake-up command from the remote information processor (TBOX), the vehicle's intelligent domain controller (IDCU) first checks whether a first removable storage device is inserted into the interface of the removable storage device. If a first removable storage device is inserted, the IDCU further detects the target data storage partition required for running the vehicle sentry mode in at least one data storage partition of the first removable storage device, obtaining the detection result of the first removable storage device. The detection result is then sent to the autonomous driving domain controller (ADCU), allowing the ADCU to determine whether to activate the vehicle sentry mode based on the detection result. Thus, this method only needs to perform targeted and precise detection of the target data storage partition required to activate the vehicle sentry mode when detecting the removable storage device, eliminating the need for a comprehensive detection of the entire removable storage device. This significantly shortens the detection time, especially for large-capacity removable storage devices, enabling rapid detection results and effectively avoiding the problem of misjudging the status of the removable storage device due to excessive detection time, thus preventing the correct activation of the sentry function. Attached Figure Description

[0017] The features, advantages, and technical effects of exemplary embodiments of this application will now be described with reference to the accompanying drawings.

[0018] Figure 1 A schematic diagram of the structure of a vehicle sentry mode start control system provided in one embodiment of this application; Figure 2 A first flowchart of a vehicle sentry mode activation control method provided in one embodiment of this application; Figure 3 A second flowchart of a vehicle sentry mode activation control method provided in one embodiment of this application; Figure 4 A flowchart of S330 provided in one embodiment of this application; Figure 5 A schematic diagram of the structure of an intelligent domain controller (IDCU) provided in another embodiment of this application. Detailed Implementation

[0019] The features and exemplary embodiments of various aspects of this application will be described in detail below. To make the objectives, technical solutions, and advantages of this application clearer, the application will be further described in detail below with reference to the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain this application and not to limit it. For those skilled in the art, this application can be implemented without some of these specific details. The following description of the embodiments is merely to provide a better understanding of this application by illustrating examples.

[0020] It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising..." does not exclude the presence of additional identical elements in the process, method, article, or apparatus that includes said element.

[0021] It should be noted that in the embodiments of this application, certain software, components, models and other existing solutions in the industry may be mentioned. These should be regarded as exemplary and are only intended to illustrate the feasibility of implementing the technical solution of this application. However, it does not mean that the applicant has used or necessarily used the solution.

[0022] "Sentry Mode," an advanced vehicle security monitoring system, continuously monitors the surrounding environment using onboard sensors after the user leaves the vehicle and records video evidence when a potential threat is detected. The proper functioning of this feature heavily relies on the reliability and real-time availability of removable storage devices (typically high-capacity USB flash drives).

[0023] In existing removable storage device detection solutions, when a user inserts a large-capacity (e.g., 512GB or 1TB) removable storage device with low read / write speeds, the system main controller (e.g., IDCU) consumes a significant amount of time, often exceeding 30 seconds, to complete the full detection process. During this lengthy detection process, the system main controller fails to complete the final verification due to slow detection and cannot report the "inserted" status. Its external communication interface will still maintain the initial "not inserted" status signal (e.g., 0x1: notinserted), causing misjudgment of the removable storage device's status and thus preventing the correct activation of the sentinel function.

[0024] To address the problems in the prior art, this application provides a method, system, and intelligent domain controller for starting a vehicle sentry mode.

[0025] The starting control system for the vehicle sentry mode provided in this application embodiment will be introduced below.

[0026] Figure 1 A schematic diagram of the structure of a vehicle sentry mode start control system provided in one embodiment of this application is shown.

[0027] The vehicle's sentry mode start control system 100 may include: a telematics BOX 110, an intelligent domain control unit (IDCU) 120, and an autonomous driving control unit (ADCU) 130.

[0028] In this embodiment of the application, a USB flash drive is used as an example of a removable storage device. After receiving a request message from the cloud to start the vehicle sentry mode, the TBOX110 wakes up the IDCU120. The IDCU120 detects the status of the removable storage device and sends the detection result to the ADCU130 via CAN_FD or Ethernet. The ADCU130 decides whether to start the sentry mode based on the detection result.

[0029] The following combination Figure 2 The testing process for removable storage devices is described in detail.

[0030] First, the S210 and TBOX110 receive a request message from the cloud to activate the vehicle's sentry mode.

[0031] For example, the TBOX110 is a remote information processor responsible for interacting with the cloud and the user. When the user remotely activates the sentry mode via a mobile app, the mobile app sends the request message for activating the vehicle's sentry mode to the cloud via a mobile network (4G / 5G) or Wi-Fi. After the cloud confirms the request message, it sends the request message to the TBOX110.

[0032] After receiving the request message from the cloud to activate the vehicle sentry mode, TBOX110 executes S220 and sends the first wake-up command to IDCU120 based on the request message.

[0033] For example, the first wake-up command could be to wake up the vehicle network, that is, to wake up the IDCU120 from its sleep state.

[0034] Subsequently, S230 and IDCU120 receive the first wake-up command from TBOX; in response to the first wake-up command, IDCU120 detects whether a first removable storage device is inserted into the interface of the removable storage device installed on the vehicle, and the first removable storage device is provided with at least one data storage partition; if the first removable storage device is detected to be inserted into the interface, the target data storage partition in the at least one data storage partition is detected, and the target data storage partition is the data storage partition required to run the vehicle sentry mode, thereby obtaining the detection result of the first removable storage device.

[0035] Then, in step S240, IDCU120 sends the detection result of the first removable storage device to ADCU130; after receiving the detection result of the first removable storage device sent by IDCU, ADCU130 executes step S250, and ADCU130 determines whether to activate the vehicle sentry mode based on the detection result of the first removable storage device.

[0036] For example, if the detection result of the first removable storage device is normal, the ADCU130 activates the vehicle sentry mode; if the detection result of the first removable storage device is abnormal, the ADCU130 disables the activation of the vehicle sentry mode. Simultaneously, if the detection result of the first removable storage device is abnormal, the ADCU130 reports the abnormal detection result to the TBOX110. The TBOX110 further sends the abnormal detection result of the first removable storage device to the cloud TSP (Telematics Service Provider), so that the cloud can send the abnormal detection result of the first removable storage device to the user's mobile APP, thereby prompting the user to replace the removable storage device.

[0037] It should be noted that before the ADCU130 determines whether to activate the vehicle sentry mode based on the detection results of the first removable storage device, after the TBOX110 receives the request message from the cloud to activate the vehicle sentry mode, it also sends a wake-up signal to the ADCU130 when waking up the vehicle network, waking the ADCU130 from its sleep state. Specifically, TBOX_SentryModReq=0x1: Sentry Mod request ON. After receiving the signal, the ADCU130 responds that sentry mode is starting, ADCU_SentryModSts=0x5: Initialization, and begins checking the preconditions for sentry mode operation, i.e., whether the status of the first removable storage device meets the conditions for activating sentry mode.

[0038] Furthermore, in order to meet the power requirements of Sentinel Mode, TBOX110 will also send a request message to the Intelligent Body Control Module (IBCM) to request the IBCM to switch the power mode to remote on mode. Remote on mode is the power mode required to meet Sentinel Mode. After receiving the request message from TBOX110, IBCM will switch the power mode to remote on mode, i.e., IBCM_VehPowerMode=0x3:Remote on, so that ADCU130 can directly start the vehicle Sentinel Mode if the detection result of the first removable storage device is normal.

[0039] The above describes the overall process of the vehicle sentry mode activation control system. In this embodiment, after receiving the first wake-up command from the remote information processor TBOX, the vehicle's intelligent domain controller (IDCU) first checks whether a first removable storage device is inserted into the interface of the removable storage device. If a first removable storage device is inserted, the IDCU further detects the target data storage partition required for running the vehicle sentry mode in at least one data storage partition of the first removable storage device, obtaining the detection result of the first removable storage device. The detection result is then sent to the autonomous driving domain controller (ADCU), allowing the ADCU to determine whether to activate the vehicle sentry mode based on the detection result. Thus, this method only needs to perform targeted and precise detection of the target data storage partition required to activate the vehicle sentry mode when detecting the removable storage device, without requiring a comprehensive detection of the entire removable storage device. This significantly shortens the detection time of the removable storage device, especially for large-capacity removable storage devices, enabling rapid detection results and effectively avoiding the problem of misjudging the status of the removable storage device due to excessive detection time, thus preventing the correct activation of the sentry function.

[0040] In this embodiment of the application, when detecting whether a first removable storage device is inserted into the detection interface, if a first removable storage device is inserted into the interface of the removable storage device installed on the vehicle, the IDCU120 can further detect a target data storage partition in at least one data storage partition, which is a necessary data storage partition for running the vehicle sentry mode.

[0041] For example, the target data storage partition may include a sentinel data storage partition ( / sentinel), a configuration file storage partition ( / config), and a cache data storage partition ( / cache). The sentinel data partition stores video / log files generated in sentinel mode, the configuration file storage partition stores system configuration files (such as sentinel.cfg), and the cache data storage partition stores temporary data.

[0042] It should be noted that if the first removable storage device is not inserted into the interface of the removable storage device installed on the vehicle, the IDCU120 can directly output alarm information to the ADCU130. For example, the IDCU120 can send the signal "0x1: not inserted" to the ADCU130. After receiving this signal, the ADCU130 can determine that the first removable storage device is abnormal, and then the ADCU130 will execute the above-mentioned abnormal reporting process.

[0043] As an example, when the IDCU120 detects a target data storage partition in at least one data storage partition, it first checks whether at least one preset target data storage partition exists in the at least one data storage partition, that is, whether all three necessary data storage partitions exist. If any target data storage partition is missing in at least one target data storage partition, the detection result of the first removable storage device is obtained. The IDCU120 can directly output alarm information to the ADCU130, and then the ADCU130 executes the above-mentioned abnormal reporting process.

[0044] It should be noted that if any of the three necessary partitions are missing, the IDCU120 can directly send a 0x3:fault signal to the ADCU130 to issue an alarm. Taking a USB flash drive as the first removable storage device, the alarm message may include: the name of the missing partition (e.g., " / sentinel missing"), suggested actions, etc. For example, the suggested action could be: Please reformat USB drive with required partitions. Furthermore, the IDCU120 supports an automatic repair process. If a user inserts a blank USB flash drive, the AUTO_PARTITION function can be triggered, automatically creating three necessary partitions on the USB flash drive: a sentinel data storage partition ( / sentinel), a configuration file storage partition ( / config), and a cache data storage partition ( / cache). Simultaneously, the correct file system format and capacity are set for each partition, thus transforming an unusable USB flash drive into a device that meets system requirements and is immediately usable.

[0045] If at least one target data storage partition exists, IDCU120 further detects whether the function of at least one target data storage partition is normal. If the function of at least one target data storage partition is normal, the detection result of the first removable storage device being normal is obtained.

[0046] For example, IDCU120 can send the signal "0x2:inserted" to ADCU130. After receiving the signal, ADCU130 can determine that the first removable storage device is normal, and then ADCU130 executes the above-mentioned process of starting the vehicle sentry mode.

[0047] By prioritizing the detection of the existence of pre-defined necessary target data storage partitions, structural anomalies caused by missing partitions in removable storage devices can be quickly identified in the early stages of detection (e.g., before partition mounting or deep file system checks). Once any necessary partition is found to be missing, IDCU can immediately determine that the removable storage device is abnormal and terminate subsequent unnecessary detection processes. This avoids continuing invalid and time-consuming deep detection on damaged or incompatible removable storage devices, thereby greatly shortening the fault diagnosis time of removable storage devices and improving detection efficiency.

[0048] As an example, when the IDCU120 detects whether at least one preset target data storage partition exists in at least one data storage partition, it can first obtain the identification information of at least one target data storage partition, and then, based on the identification information, detect whether at least one target data storage partition exists from the data storage partition table of the first removable storage device.

[0049] For example, the identification information can be the volume label of the target data storage partition. For instance, the volume label of the sentinel data storage partition can be "SENTINEL", the volume label of the configuration file storage partition can be "CONFIG", and the volume label of the cache data storage partition can be "CACHE".

[0050] It should be noted that the data storage partition table of the first removable storage device lists the volume label, name, location, and size of all partitions. When the IDCU120 detects the existence of the target data storage partition based on the above volume labels, it does not need to traverse the entire directory structure of the removable storage device. Instead, it directly reads the data storage partition table of the removable storage device (such as MBR or GPT), and then quickly queries the data storage partition table to see if all target data storage partitions exist. If even one is missing, it can be immediately determined that the target data storage partition is missing.

[0051] By using labels and data storage partition tables to detect whether target data storage partitions exist, this approach avoids the time-consuming operation of traversing the entire removable storage device in traditional methods. Instead, it directly reads and parses the partition table, enabling a quick determination of the existence of target data storage partitions and improving the detection efficiency of removable storage devices. Furthermore, since the partition table is a structural definition of the storage device, detection based on the partition table can most directly reflect the physical existence of partitions, avoiding misjudgments caused by file system corruption, driver anomalies, etc., and ensuring accurate and reliable judgment results.

[0052] As an example, when the IDCU120 detects whether the function of at least one target data storage partition is normal and obtains the detection result of at least one target data storage partition, for each target data storage partition, it detects whether the available storage space of the target data storage partition has reached the preset storage space and obtains the first detection result.

[0053] For example, the Sentinel data partition is used to store video / log files generated in Sentinel mode. As an example, the preset storage space of the Sentinel data storage partition should be no less than a first preset storage space. As a more specific example, the first preset storage space can be 10GB. The available storage space of the target data storage partition can be the difference between the total capacity and the used capacity. As an example, the available storage space of the target data storage partition should be greater than a second preset storage space. As a more specific example, the second preset storage space can be 2.5GB. If the actual available capacity is <2.5GB (the threshold is configurable), the IDCU120 sends a 0x4:Storage full signal (insufficient available space signal) to the ADCU130.

[0054] As an example, the default storage space of the configuration file storage partition should be no less than the third default storage space; more specifically, the third default storage space could be 100MB. As an example, the default storage space of the cache data storage partition should be no less than the fourth default storage space; more specifically, the fourth default storage space could be 2GB.

[0055] It should be noted that the above-mentioned preset storage space can be configured according to actual needs. When the available storage space of the target data storage partition reaches the preset storage space, a first detection result can be obtained. This first detection result is used to indicate that the available storage space of the target data storage partition is normal. When the available storage space of any target data storage partition does not reach the preset storage space, IDCU120 sends an insufficient available space signal to ADCU130, that is, the first removable storage device is abnormal.

[0056] As an example, the IDCU120 includes a partition detection toolset. The IDCU120 can use a capacity detection algorithm (accurate to the MB level) to detect whether the available storage space of the target data storage partition has reached the preset storage space. For example, the available storage space of the target data storage partition can be obtained as follows: Obtain the start sector and end sector of each necessary partition; calculate the number of sectors based on the start and end sectors of each necessary partition, i.e., number of sectors = end sector - start sector + 1; then, obtain the capacity of each sector. The available storage space of the target data storage partition is then: number of sectors × sector capacity.

[0057] When the IDCU120 detects whether the function of at least one target data storage partition is normal, in addition to detecting whether the available storage space of any target data storage partition has reached the preset storage space, it will also detect whether the detection time of the target data storage partition is less than the first time, or detect whether the total detection time of all target data storage partitions is less than the second time. If the first time is less than the second time, a second detection result is obtained.

[0058] As a more concrete example, for each target data storage partition, the initial duration could be 5 seconds, and the corresponding total partition duration could be 15 seconds. If the detection duration of any target data storage partition is less than 5 seconds, or the total duration of the three partitions is less than 15 seconds, the target data storage partition is deemed to be functioning normally. For example, if the detection duration of any target data storage partition exceeds 5 seconds, that partition is marked as "unresponsive," and the detection of other partitions continues.

[0059] It should be noted that when the IDCU120 detects the target data storage partition, it also sets a fallback duration, or a second duration. As a more specific example, the second duration can be 60 seconds. If the total detection time of all target data storage partitions is less than 60 seconds, the target data storage partition is considered to be functioning normally.

[0060] In addition to available space detection and duration detection, IDCU120 also detects whether the file system format of the target data storage partition meets the preset format requirements, thus obtaining a third detection result.

[0061] For example, the IDCU120 can use a file system identification component (supporting exFAT / FAT32 / NTFS format verification) to verify the file system format of the three necessary partitions. The Sentinel data partition corresponds to the exFAT file system format. The IDCU120 can send a VERIFY_FS_TYPE command to the USB drive to confirm whether it is exFAT. Simultaneously, the IDCU120 attempts to create and delete a test file (test_sentinel.tmp) on the USB drive to verify whether the USB drive's read and write permissions are normal.

[0062] The file system format corresponding to the configuration file storage partition is FAT32. IDCU120 confirms whether the file system is FAT32 (to ensure cross-system compatibility). At the same time, it will also check critical files, check whether the sentinel.cfg configuration file exists, and verify whether the file format conforms to the XML Schema specification. If the file is missing or the format is incorrect, a default configuration file can be created.

[0063] The cache data storage partition uses an NTFS file system. The IDCU120 verifies if the file system is NTFS (supporting large-capacity single-file storage) and performs performance tests. For example, it writes a 100MB test file (cache_test.dat), reads the file, and calculates the transfer rate. If the rate is less than 15MB / s (the threshold is configurable), a performance degradation warning is recorded. After the test, if the file system format of the target data storage partition meets the preset requirements, the target data storage partition is considered to be functioning correctly.

[0064] The IDCU120 will also detect whether the data storage partition table type of the first removable storage device meets the preset requirements, thus obtaining a fourth detection result.

[0065] For example, the IDCU120 can verify the integrity of the partition table through the partition table parsing module (supporting MBR / GPT formats). The IDCU120 sends a GET_PARTITION_TABLE command via the USB protocol, parses the data returned by the USB, verifies whether the partition table type (MBR / GPT) meets the system compatibility requirements, whether the partition table checksum matches to exclude corrupted partition tables, and whether the total number of partitions is ≥3 (additional user partitions are allowed, but must include 3 necessary partitions). If the partition table is corrupted or incompatible, the USB flash drive detection is terminated immediately, and a 0x3:fault signal is sent to the ADCU130.

[0066] The above is the overall testing process for whether at least one target data storage partition is functioning properly. It should be noted that only if the first, second, third, and fourth test results are all normal can a test result indicating that at least one target data storage partition is functioning properly be obtained. If any test result is abnormal, the USB drive is considered abnormal, and the remaining tests are terminated.

[0067] Of course, in practical applications, if the test result shows that the USB drive has a non-fatal problem, such as performance degradation, it can also be considered that the USB drive status test has passed and is marked as "warning passed". At the same time, the IDCU120 can also generate a partition test report for the above results of the USB drive test passing completely (all three necessary partition functions meet all conditions), warning passed, and USB drive test abnormality, and store the test report locally so that the test results of the USB drive can be reused when the vehicle is powered on again.

[0068] To further improve the efficiency and accuracy of removable storage device detection, after responding to the first wake-up command, IDCU120 marks the IDCU's state as the first state (e.g., 0x0:invalid) and records the marking time. Starting from the marking time, it records the preset duration information required to detect the first removable storage device. IDCU120 sends the preset duration information to the autonomous driving domain controller ADCU130 so that if ADCU130 does not receive the detection result of the first removable storage device after waiting for the preset duration from the marking time, it is considered normal and the vehicle sentry mode is prohibited from being activated.

[0069] It should be noted that when the IDCU receives the wake-up command and begins detecting the USB drive, it immediately marks its own status as "first state" (e.g., 0x0: invalid) and records the precise moment the detection began. This marked moment is the timing start point jointly agreed upon by the IDCU and ADCU. The IDCU120 sends the maximum waiting time required to complete this detection (i.e., the preset duration information) to the ADCU130. This duration is preset based on the USB drive's capacity and detection complexity. Upon receiving the information, the ADCU130 starts a timer synchronized with the IDCU120, using the same marked moment as the starting point, and waits for the IDCU120's final detection result for the USB drive within the entire preset duration. If the ADCU130 does not receive a normal detection result for the USB drive within the agreed time, the ADCU130 will not wait indefinitely but will actively disable the Sentinel Mode.

[0070] By dynamically transmitting the preset duration, the waiting time of the ADCU is precisely matched with the actual detection needs of the IDCU, fundamentally eliminating misjudgments caused by insufficient waiting time, greatly improving the accuracy of the system's judgment, and avoiding the problem in traditional solutions where the ADCU may only wait for a fixed short time, which is very easy to misjudge as "no USB drive" or "USB drive abnormal" due to the long detection time of large-capacity USB drives.

[0071] To further improve the detection efficiency of removable storage devices, after obtaining the detection result of the first removable storage device, the IDCU120 will also record the first identification information of the first removable storage device and the detection result.

[0072] For example, the first identification information may be the UUID (Universally Unique Identifier) ​​of the first removable storage device, and the detection result may be a normal detection result of the first removable storage device or an abnormal detection result of the first removable storage device.

[0073] As an example, IDCU120 can store the first identification information of the first removable storage device and the detection result in a non-volatile memory. As a more specific example, the non-volatile memory can be an EEPROM (Electrically Erasable Programmable Read-Only Memory).

[0074] When the vehicle is powered on for the second time, IDCU120 responds to the second wake-up command of TBOX110, obtains the second identification information of the second removable storage device inserted into the interface, and determines whether the first removable storage device and the second removable storage device are the same removable storage device by comparing the second identification information with the first identification information.

[0075] For example, when the second identification information is consistent with the first identification information, the detection result is normal, and the available storage space of the second removable storage device reaches the preset storage space, the IDCU120 sends a trigger signal to the autonomous driving domain controller ADCU to start the vehicle sentry mode, so that the ADCU starts the vehicle sentry mode.

[0076] It should be noted that since the first removable storage device has already undergone a complete testing process, when the vehicle is powered on for the second time, for the same removable storage device that has already been verified, the time-consuming complete partition testing and functional verification process can be skipped. Only key indicators (such as available capacity and the existence of key files) need to be re-verified. If the above indicators meet the conditions, the historical test results can be directly reused, which greatly improves the system's response speed.

[0077] For example, if the second identification information is inconsistent with the first identification information, or if the second identification information is consistent with the first identification information but the detection result is abnormal, the second removable storage device can be re-detected following the steps for detecting the first removable storage device.

[0078] It should be noted that if the second removable storage device is not the first removable storage device, or even if they are the same removable storage device but the detection result of the first removable storage device is abnormal, the historical detection result cannot be reused, and the complete removable storage device detection process needs to be re-executed.

[0079] By comparing the unique hardware identifier (UUID) of removable storage devices, the accuracy and security of state reuse are ensured, effectively preventing the risk of functional abnormalities or data loss that may be caused by incorrect reuse of historical states when replacing different removable storage devices. Simultaneously, by recording and reusing historically valid device state information, when the vehicle is powered on again, for the same verified removable storage device, the time-consuming full partition detection and functional verification process can be skipped, and the historical normal state can be directly used as the decision-making basis. This achieves rapid state recovery across power-on cycles, greatly improving system response speed.

[0080] In this embodiment, after receiving the first wake-up command from the remote information processor TBOX, the vehicle's intelligent domain controller (IDCU) first checks whether a first removable storage device is inserted into the interface of the removable storage device. If a first removable storage device is inserted, the IDCU further detects the target data storage partition required for running the vehicle sentry mode in at least one data storage partition of the first removable storage device, obtaining the detection result of the first removable storage device. The detection result is then sent to the autonomous driving domain controller (ADCU), which determines whether to activate the vehicle sentry mode based on the detection result. Thus, this method only needs to perform targeted and precise detection of the target data storage partition required for running the vehicle sentry mode when detecting removable storage devices, without requiring a comprehensive detection of the entire removable storage device. This significantly shortens the detection time for removable storage devices, especially for large-capacity removable storage devices, enabling rapid detection results and effectively avoiding the problem of misjudging the status of the removable storage device due to excessive detection time, thus preventing the correct activation of the sentry function.

[0081] Based on the vehicle sentry mode start control system provided in the above embodiments, this application also provides a specific implementation of the vehicle sentry mode start control method, as shown in the following embodiments.

[0082] Figure 3A flowchart illustrating a vehicle sentry mode activation control method according to an embodiment of this application is shown. Figure 3 As shown, the method for starting the vehicle's sentry mode is applied to the vehicle's intelligent domain controller (IDCU). The vehicle has an interface for a removable storage device. The method may include the following steps: S310, Receive the first wake-up command from the remote information processor TBOX; the first wake-up command is sent by the TBOX to the IDCU after receiving the request message from the cloud for activating the vehicle sentry mode; S320. In response to the first wake-up command, detect whether a first removable storage device is inserted into the interface, wherein the first removable storage device is provided with at least one data storage partition; S330. When a first removable storage device is detected inserted into the interface, a target data storage partition in at least one data storage partition is detected to obtain the detection result of the first removable storage device. The target data storage partition is the data storage partition required to run the vehicle sentry mode. S340. Send the detection results to the Autonomous Driving Domain Controller (ADCU) so that the ADCU can determine whether to activate the vehicle sentry mode based on the detection results. S350: If no first removable storage device is detected inserted into the interface, an alarm message is output to the Autopilot Domain Controller (ADCU).

[0083] In some possible implementations, such as Figure 4 As shown, S330 may include: S410. Detect whether at least one preset target data storage partition exists in at least one data storage partition; S420. Detect whether any target data storage partition in at least one target data storage partition is missing; S430. If any target data storage partition is missing in at least one target data storage partition, obtain the detection result of the first removable storage device being abnormal. S440. If at least one target data storage partition exists, check whether the function of at least one target data storage partition is normal, and obtain the detection result of at least one target data storage partition. S450. If the functions of at least one target data storage partition are normal, the test result of the first removable storage device is obtained.

[0084] If any target data storage partition in at least one target data storage partition malfunctions, execute S430.

[0085] Among some possible implementations, the method also includes: Record the first identification information of the first removable storage device and the detection results; In response to the second wake-up command from the TBOX, the second identification information of the second removable storage device inserted into the interface is obtained; Compare the second identification information with the first identification information; When the second identification information is consistent with the first identification information, the detection result is normal, and the available storage space of the second removable storage device reaches the preset storage space, a trigger signal for activating vehicle sentry mode is sent to the autonomous driving domain controller ADCU to enable the ADCU to activate vehicle sentry mode. If the second identification information is inconsistent with the first identification information, or if the second identification information is consistent with the first identification information but the detection result is abnormal, the second removable storage device shall be re-detected in accordance with the steps for detecting the first removable storage device.

[0086] In some possible implementations, detecting whether at least one preset target data storage partition exists in at least one data storage partition includes: Obtain the identification information of at least one target data storage partition; Based on the identification information, detect whether at least one target data storage partition exists from the data storage partition table of the first removable storage device.

[0087] In some possible implementations, the functionality of at least one target data storage partition is checked to obtain the detection result of at least one target data storage partition, including: For each target data storage partition, check whether the available storage space of the target data storage partition has reached the preset storage space to obtain the first detection result; The detection time of the target data storage partition is less than the first time, or the total detection time of all target data storage partitions is less than the second time. If the first time is less than the second time, the second detection result is obtained. The third detection result is obtained by checking whether the file system format of the target data storage partition meets the preset format requirements. The fourth test result is obtained by checking whether the data storage partition table type of the first removable storage device meets the preset requirements. If the first, second, third, and fourth test results are all normal, a test result is obtained indicating that at least one target data storage partition is functioning normally.

[0088] In some possible implementations, after responding to the first wake-up instruction, the method further includes: Mark the IDCU state as the first state and record the marking time; Start timing from the marked moment and record the preset duration information required to detect the first removable storage device; The preset duration information is sent to the autonomous driving domain controller ADCU so that if the ADCU does not receive the detection result from the first removable storage device after waiting for the preset duration from the marked time, it is considered normal and the vehicle sentry mode is prohibited from being activated.

[0089] In some possible implementations, after obtaining the detection result of the first removable storage device malfunction, the method further includes: Output alarm information to the autonomous driving domain controller (ADCU).

[0090] In this embodiment, after receiving the first wake-up command from the remote information processor (TBOX), the vehicle's intelligent domain controller (IDCU) first checks whether a first removable storage device is inserted into the interface of the removable storage device. If a first removable storage device is inserted, the IDCU further detects the target data storage partition required for running the vehicle sentry mode in at least one data storage partition of the first removable storage device, obtaining the detection result of the first removable storage device. The detection result is then sent to the autonomous driving domain controller (ADCU), allowing the ADCU to determine whether to activate the vehicle sentry mode based on the detection result. Thus, this method only needs to perform targeted and precise detection of the target data storage partition required to activate the vehicle sentry mode when detecting the removable storage device, eliminating the need for a comprehensive detection of the entire removable storage device. This significantly shortens the detection time, especially for large-capacity removable storage devices, enabling rapid detection results and effectively avoiding the problem of misjudging the status of the removable storage device due to excessive detection time, thus preventing the correct activation of the sentry function.

[0091] Based on the vehicle sentry mode activation control method provided in the above embodiment, this application also provides a specific implementation of an intelligent domain controller (IDCU). Please refer to the following embodiments.

[0092] First see Figure 5 The intelligent domain controller IDCU500 provided in this application embodiment is applied to a vehicle, which is equipped with an interface for a removable storage device. The IDCU includes: The receiving module 510 is used to receive the first wake-up command from the remote information processor TBOX; the first wake-up command is sent by the TBOX to the IDCU after receiving the request message from the cloud for activating the vehicle sentry mode; The detection module 520 is used to detect whether a first removable storage device is inserted into the interface in response to a first wake-up command. The first removable storage device is provided with at least one data storage partition. The detection module 520 is also used to detect a target data storage partition in at least one data storage partition when a first removable storage device is detected inserted into the interface, and to obtain the detection result of the first removable storage device. The target data storage partition is the data storage partition required to run the vehicle sentry mode. The sending module 530 is used to send the detection results to the autonomous driving domain controller ADCU, so that the ADCU can determine whether to activate the vehicle sentry mode based on the detection results.

[0093] In some possible implementations, the detection module 520 is also used for: Detect whether at least one preset target data storage partition exists in at least one data storage partition; If any target data storage partition is missing in at least one target data storage partition, a detection result of the first removable storage device anomaly is obtained; If at least one target data storage partition exists, check whether the function of at least one target data storage partition is normal, and obtain the detection result of at least one target data storage partition. If at least one target data storage partition functions normally, the test result of the first removable storage device is obtained.

[0094] In some possible implementations, the Intelligent Domain Controller IDCU500 also includes: a logging module; A recording module is used to record the first identification information of the first removable storage device and the detection results; In response to the second wake-up command from the TBOX, the second identification information of the second removable storage device inserted into the interface is obtained; Compare the second identification information with the first identification information; When the second identification information is consistent with the first identification information, the detection result is normal, and the available storage space of the second removable storage device reaches the preset storage space, a trigger signal for activating vehicle sentry mode is sent to the autonomous driving domain controller ADCU to enable the ADCU to activate vehicle sentry mode. If the second identification information is inconsistent with the first identification information, or if the second identification information is consistent with the first identification information but the detection result is abnormal, the second removable storage device shall be re-detected in accordance with the steps for detecting the first removable storage device.

[0095] In some possible implementations, the detection module 520 is also used for: Obtain the identification information of at least one target data storage partition; Based on the identification information, detect whether at least one target data storage partition exists from the data storage partition table of the first removable storage device.

[0096] In some possible implementations, the detection module 520 is also used for: For each target data storage partition, check whether the available storage space of the target data storage partition has reached the preset storage space to obtain the first detection result; The detection time of the target data storage partition is less than the first time, or the total detection time of all target data storage partitions is less than the second time. If the first time is less than the second time, the second detection result is obtained. The third detection result is obtained by checking whether the file system format of the target data storage partition meets the preset format requirements. The fourth test result is obtained by checking whether the data storage partition table type of the first removable storage device meets the preset requirements. If the first, second, third, and fourth test results are all normal, a test result is obtained indicating that at least one target data storage partition is functioning normally.

[0097] In some possible implementations, after responding to the first wake-up command, the intelligent domain controller IDCU500 also includes: a timing module; The timing module is used to mark the IDCU's state as the first state and record the marking time; Start timing from the marked moment and record the preset duration information required to detect the first removable storage device; The preset duration information is sent to the autonomous driving domain controller ADCU so that if the ADCU does not receive the detection result from the first removable storage device after waiting for the preset duration from the marked time, it is considered normal and the vehicle sentry mode is prohibited from being started.

[0098] In some possible implementations, after receiving the detection result of an anomaly in the first removable storage device, the intelligent domain controller IDCU500 also includes: an output module; The output module is used to output alarm information to the autonomous driving domain controller (ADCU).

[0099] The various modules of the Intelligent Domain Controller (IDCU) provided in this application embodiment can achieve... Figure 3 The system provides the functionality of each step in the activation control method for vehicle sentry mode and achieves the corresponding technical effects. For the sake of brevity, these steps will not be elaborated upon here.

[0100] Based on the aforementioned Intelligent Domain Controller (IDCU), this application also provides a vehicle.

[0101] It should also be noted that the exemplary embodiments mentioned in this application describe methods or systems based on a series of steps or apparatus. However, this application is not limited to the order of the above steps; that is, the steps can be performed in the order mentioned in the embodiments, or in a different order, or several steps can be performed simultaneously.

[0102] The aspects of this disclosure have been described above with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this disclosure. It should be understood that each block in the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing apparatus to produce a machine such that these instructions, executable via the processor of the computer or other programmable data processing apparatus, enable the implementation of the functions / actions specified in one or more blocks of the flowchart illustrations and / or block diagrams. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field-programmable logic circuit. It is also understood that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can also be implemented by special-purpose hardware performing the specified functions or actions, or can be implemented by a combination of special-purpose hardware and computer instructions.

[0103] The above are merely specific embodiments of this application. Those skilled in the art will clearly understand that, for the sake of convenience and brevity, the specific working processes of the systems, modules, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here. It should be understood that the protection scope of this application is not limited thereto. Any person skilled in the art can easily conceive of various equivalent modifications or substitutions within the technical scope disclosed in this application, and these modifications or substitutions should all be covered within the protection scope of this application.

Claims

1. A method for starting a vehicle sentry mode, characterized in that, An intelligent domain controller (IDCU) for use in a vehicle, wherein the vehicle is equipped with an interface for a removable storage device, the method comprising: The system receives a first wake-up command from the remote information processor (TBOX); the first wake-up command is sent by the TBOX to the IDCU after receiving a request message from the cloud for activating the vehicle sentry mode. In response to the first wake-up command, it is detected whether a first removable storage device is inserted into the interface, wherein the first removable storage device is provided with at least one data storage partition; If a first removable storage device is detected inserted into the interface, the target data storage partition in the at least one data storage partition is detected to obtain the detection result of the first removable storage device. The target data storage partition is the data storage partition required to run the vehicle sentry mode. The detection results are sent to the Autonomous Driving Domain Controller (ADCU) so that the ADCU can determine whether to activate the vehicle sentry mode based on the detection results.

2. The method according to claim 1, characterized in that, The step of detecting the target data storage partition in the at least one data storage partition to obtain the detection result of the first removable storage device includes: Detect whether at least one preset target data storage partition exists in the at least one data storage partition; If any of the at least one target data storage partitions is missing, a detection result of an anomaly in the first removable storage device is obtained. If at least one target data storage partition exists, check whether the function of the at least one target data storage partition is normal, and obtain the detection result of the at least one target data storage partition; If all at least one target data storage partition functions normally, the test result of the first removable storage device being normal is obtained.

3. The method according to claim 2, characterized in that, The detection of whether at least one preset target data storage partition exists in the at least one data storage partition includes: Obtain the identification information of the at least one target data storage partition; Based on the identification information, the existence of at least one target data storage partition is detected from the data storage partition table of the first removable storage device.

4. The method according to claim 2, characterized in that, The step of detecting whether the function of the at least one target data storage partition is normal, and obtaining the detection result of the at least one target data storage partition, includes: For each target data storage partition, it is detected whether the available storage space of the target data storage partition has reached the preset storage space, and a first detection result is obtained; The detection time of the target data storage partition is less than the first time, or the total detection time of all target data storage partitions is less than the second time. If the first time is less than the second time, a second detection result is obtained. The file system format of the target data storage partition is checked to see if it meets the preset format requirements, and a third detection result is obtained. The fourth detection result is obtained by detecting whether the data storage partition table type of the first removable storage device meets the preset requirements. If the first detection result, the second detection result, the third detection result, and the fourth detection result are all normal, a detection result is obtained in which the functions of the at least one target data storage partition are all normal.

5. The method according to claim 1, characterized in that, Following the first wake-up command, the method further includes: Mark the state of the IDCU as the first state and record the marking time; Starting from the marked time, a preset duration of time is recorded to detect the first removable storage device; The preset duration information is sent to the autonomous driving domain controller ADCU, so that if the ADCU does not receive a detection result from the first removable storage device after waiting for the preset duration from the marked time, and the detection result is normal, the vehicle sentry mode is prohibited from being activated.

6. The method according to claim 2, characterized in that, After obtaining the detection result of the first removable storage device malfunction, the method further includes: Output alarm information to the autonomous driving domain controller (ADCU).

7. The method according to claim 1, characterized in that, The method further includes: Record the first identification information and detection results of the first removable storage device; In response to the second wake-up command of the TBOX, the second identification information of the second removable storage device inserted into the interface is obtained; Compare the second identification information with the first identification information; When the second identification information is consistent with the first identification information, the detection result is normal, and the available storage space of the second removable storage device reaches the preset storage space, a trigger signal for activating vehicle sentry mode is sent to the autonomous driving domain controller ADCU so that the ADCU activates vehicle sentry mode. If the second identification information is inconsistent with the first identification information, or if the second identification information is consistent with the first identification information and the detection result is abnormal, the second removable storage device shall be re-detected according to the steps for detecting the first removable storage device.

8. A vehicle start-up control system in sentry mode, characterized in that, include: The system includes a remote information processor (TBOX), an intelligent domain controller (IDCU) for vehicles, and an autonomous driving domain controller (ADCU), wherein the vehicle is equipped with an interface for a removable storage device. The TBOX is used to receive a request message from the cloud to activate the vehicle sentry mode; Based on the request message, a first wake-up command is sent to the IDCU; The IDCU is used to receive a first wake-up command from the TBOX; in response to the first wake-up command, it detects whether a first removable storage device is inserted into the interface, the first removable storage device having at least one data storage partition; when a first removable storage device is detected inserted into the interface, it detects a target data storage partition in the at least one data storage partition to obtain a detection result of the first removable storage device, the target data storage partition being a data storage partition required for running the vehicle sentry mode; The detection results are sent to the Autonomous Driving Domain Controller (ADCU); The ADCU is used to receive the detection result of the first removable storage device sent by the IDCU, and determine whether to activate the vehicle sentry mode based on the detection result of the first removable storage device. If the detection result of the first removable storage device is normal, activate the vehicle sentry mode; If the detection result of the first removable storage device is abnormal, the vehicle sentry mode shall be prohibited from being activated.

9. An intelligent domain controller (IDCU), characterized in that, Applied to vehicles, the vehicles are provided with an interface for a removable storage device, and the IDCU includes: The receiving module is used to receive a first wake-up command from the remote information processor TBOX; the first wake-up command is sent by the TBOX to the IDCU after receiving a request message from the cloud for activating the vehicle sentry mode; The detection module is used to detect, in response to the first wake-up command, whether a first removable storage device is inserted into the interface, wherein the first removable storage device is provided with at least one data storage partition; The detection module is further configured to detect a target data storage partition in the at least one data storage partition when a first removable storage device is detected inserted into the interface, and obtain the detection result of the first removable storage device, wherein the target data storage partition is the data storage partition required to run the vehicle sentry mode; The sending module is used to send the detection result to the autonomous driving domain controller (ADCU) so that the ADCU can determine whether to activate the vehicle sentry mode based on the detection result.

10. A vehicle, characterized in that, Includes the Intelligent Domain Controller (IDCU) as described in claim 9.

Images