Vehicle-mounted privacy protection method and system based on passenger frequency identification

Abstract

The invention discloses a vehicle-mounted privacy protection method and system based on passenger frequency identification, and relates to the technical field of vehicle-mounted privacy protection.The method comprises the steps that when a passenger riding trigger condition or a vehicle-mounted system power-on signal is detected, a vehicle-mounted sensing assembly is started to collect passenger identity associated information; identifying the identity of the passenger based on the information, creating a unique identity label and initializing a riding frequency record if the passenger takes the passenger for the first time, and calling a historical riding frequency record if the identity is stored; a preset privacy triggering frequency threshold value of the user is obtained, and the current riding frequency is compared with the threshold value to distinguish high-frequency passengers and low-frequency passengers; triggering a privacy protection mode for low-frequency passengers, executing operations of hiding vehicle-mounted historical sensitive information, adjusting a real-time interaction information display carrier and an output channel, and keeping a normal operation mode for high-frequency passengers; and after it is detected that the low-frequency passenger leaves the vehicle, the privacy protection mode is terminated, the initial state of the system is recovered, and the balance between vehicle-mounted privacy protection and use experience is achieved.

Description

Technical Field

[0001] This application relates to the field of vehicle privacy protection technology, and in particular to a vehicle privacy protection method and system based on occupant frequency identification. Background Technology

[0002] As vehicles become increasingly intelligent, in-vehicle infotainment systems, navigation systems, and voice assistants are becoming more feature-rich. Consequently, the amount of sensitive information stored in these systems, such as user destination history, playback records, and voice commands, is also increasing. In-vehicle privacy protection is gradually becoming one of the core concerns for users. Currently, in-vehicle privacy protection technologies primarily achieve initial protection of sensitive information by manually triggering privacy modes, automatically clearing sensitive information in fixed scenarios, or enabling basic privacy protection based on simple identity recognition, thereby reducing the risk of information leakage.

[0003] Existing in-vehicle privacy protection solutions use a unified control method, which, because it does not differentiate between passenger types, can easily lead to inconvenience for frequent passengers and easy exposure of sensitive information for infrequent passengers.

[0004] Therefore, there is a need for a vehicle privacy protection method and system based on occupant frequency identification. This method distinguishes between high-frequency and low-frequency occupants, triggering privacy protection for low-frequency occupants and maintaining normal mode for high-frequency occupants. This achieves a precise balance between vehicle privacy protection and user experience, thereby improving the problem that existing vehicle privacy protection solutions use a uniform control approach, which does not distinguish between occupant types, resulting in inconvenience for high-frequency occupants and easy exposure of sensitive information for low-frequency occupants. Summary of the Invention

[0005] The purpose of this invention is to provide a vehicle privacy protection method and system based on occupant frequency identification, which at least solves the problem that existing vehicle privacy protection schemes adopt a unified control method, which does not distinguish between occupant types, easily causing inconvenience for high-frequency occupants and easy exposure of sensitive information for low-frequency occupants.

[0006] This invention provides the following solution:

[0007] According to one aspect of the present invention, an in-vehicle privacy protection method based on occupant frequency identification is provided, comprising the following steps:

[0008] S1. When the occupant riding trigger condition or the vehicle system power-on signal is detected, the vehicle sensing component is activated to collect the occupant's identity association information.

[0009] S2. Identify the passenger's identity based on the identity association information; if it is the first ride, create a unique identity identifier and initialize the ride frequency record; if the identity has been stored, retrieve the historical ride frequency record;

[0010] S3. Obtain the user's preset privacy trigger frequency threshold, compare the passenger's current riding frequency with the threshold, and determine whether the passenger is a high-frequency or low-frequency passenger based on the result;

[0011] S4. If the passenger is a low-frequency occupant, trigger the vehicle privacy protection mode and perform privacy protection operations; the operations include at least hiding vehicle historical sensitive information and adjusting the display carrier and output channel of vehicle real-time interactive information.

[0012] S5. If the passenger is a high-frequency passenger, maintain the normal vehicle operation mode, do not trigger the privacy protection mode, allow access to vehicle historical sensitive information, and display and output real-time interactive information in the default way.

[0013] S6. When a low-frequency occupant leaves the vehicle in privacy protection mode, terminate the mode and restore the default display carrier and output channel for normal display of vehicle historical sensitive information and real-time interactive information.

[0014] Furthermore, activating the vehicle-mounted sensing component includes the following steps:

[0015] Determine the type of the occupant seating trigger condition, which includes a door opening signal or a seat pressure detection signal;

[0016] The system retrieves the pre-stored hardware configuration information from the vehicle system and selects the corresponding sensing component to start based on the hardware configuration information: if the vehicle system is equipped with an image acquisition component, then the image acquisition component is started; if the vehicle system is not equipped with an image acquisition component, then the wireless communication recognition component is started.

[0017] After startup, the sensing components perform a self-test to check whether their signal transmission and data acquisition functions are normal. If the self-test is abnormal, a component abnormality warning signal is sent to the vehicle system. If the self-test is normal, the process proceeds to the step of collecting the occupant's identity association information.

[0018] Furthermore, the collection of the occupant's identity association information includes the following steps:

[0019] If the activated sensing component is an image acquisition component, control the image acquisition component to aim at the occupant, adjust the acquisition parameters according to the in-vehicle environment, and then acquire the occupant's facial feature image. Then check whether the acquired facial feature image contains the complete key facial area. If it is incomplete, re-acquire the image.

[0020] If the sensing component activated is a wireless communication identification component, control the wireless communication identification component to scan the surrounding mobile devices, filter out the mobile devices associated with the occupants and obtain the wireless identification information of the devices, and then check whether the obtained wireless identification information is in complete format. If it is incomplete, rescan and obtain it.

[0021] The collected facial feature images or wireless identification information are temporarily cached as the identity association information, and the collection timestamp of the identity association information is marked.

[0022] Furthermore, the identification of the occupant based on the identity association information includes the following steps:

[0023] Confirm the type of the identity-associated information, which includes one of facial feature images and wireless identification information;

[0024] The system retrieves a pre-stored database of known occupant information from the vehicle system. This database contains associated information corresponding to occupants with stored identities, and the associated information corresponding to the stored identities is of the same type as the identity-related information.

[0025] If the identity association information is a facial feature image, facial feature data is extracted from the facial feature image, and the extracted facial feature data is compared with the facial feature data of the known occupant information database that has already stored the identity of the occupant.

[0026] If the identity association information is wireless identification information, the wireless identification information is compared with the wireless identification information of the known occupant information stored in the known occupant information database for character consistency.

[0027] If the facial feature data comparison meets the preset matching conditions, or the wireless identification information comparison is completely consistent, then the passenger is determined to be the passenger whose identity has been stored; if not, then the passenger is determined to be the passenger who is taking the ride for the first time.

[0028] Furthermore, retrieving historical ride frequency records includes the following steps:

[0029] Based on the passenger's stored identity, retrieve the unique identifier corresponding to that passenger;

[0030] The system retrieves a pre-stored passenger frequency database, which stores the association between the unique identifier of each passenger with a stored identity and the corresponding historical passenger frequency record.

[0031] Use the retrieved unique identifier as the search condition to search the historical ride frequency records corresponding to the unique identifier in the ride frequency database;

[0032] After retrieving the corresponding historical ride frequency record, extract the cumulative number of rides and the start and end times of each ride from the record;

[0033] Check if the extracted cumulative number of rides and the start and end times of each ride are complete. If the information is incomplete, search the ride frequency database again. If the information is complete, transmit the historical ride frequency record to S3.

[0034] Furthermore, comparing the passenger's current travel frequency with the threshold includes the following steps:

[0035] S31. Based on the passenger's identity determination result, determine the passenger's current riding frequency; the identity determination result is either a passenger riding for the first time or a passenger whose identity has been stored. If it is a passenger riding for the first time, retrieve the value corresponding to the passenger's initial riding frequency record; if it is a passenger whose identity has been stored, retrieve the cumulative number of rides in the passenger's historical riding frequency record and add it to the current riding frequency.

[0036] S32. Retrieve the user's preset privacy trigger frequency threshold;

[0037] S33. Compare the current riding frequency of the passenger determined in S31 with the privacy trigger frequency threshold retrieved in S32; if the current riding frequency is less than or equal to the privacy trigger frequency threshold, the passenger is determined to be a low-frequency passenger; if the current riding frequency is greater than or equal to the privacy trigger frequency threshold, the passenger is determined to be a high-frequency passenger.

[0038] S34. Retrieve the unique identification of the occupant and associate the unique identification with the comparison result, wherein the comparison result is a high-frequency occupant or a low-frequency occupant.

[0039] Furthermore, triggering the in-vehicle privacy protection mode includes the following steps:

[0040] Based on the low-frequency occupant results, retrieve the unique identifier of the low-frequency occupant;

[0041] Generate a trigger command, which includes the unique identifier, the mode activation command type, and the scope of privacy protection operations. The scope of privacy protection operations includes hiding in-vehicle historical sensitive information and adjusting the display carrier and output channel of in-vehicle real-time interactive information.

[0042] The trigger command is sent to the privacy mode control unit of the vehicle system, which then distributes the trigger command to the information hiding unit and the interaction adjustment unit respectively.

[0043] The privacy mode control unit receives instructions and confirmation signals from the information hiding unit and the interaction adjustment unit.

[0044] The privacy mode control unit sends a start execution signal to the information hiding unit and the interaction adjustment unit to trigger the vehicle privacy protection mode.

[0045] Furthermore, the process of hiding sensitive vehicle history information includes the following steps:

[0046] S41. The information hiding unit receives the start execution signal sent by the privacy mode control unit and confirms the types of vehicle history sensitive information to be hidden. The types of vehicle history sensitive information include the historical destination records of the navigation module, the historical playback records of the music module, and the historical command records of the voice assistant module.

[0047] S42. The information hiding unit blocks the display entrances of vehicle history sensitive information of each module on the central control screen: hides the historical destination list entrance of the navigation module, the historical playlist entrance of the music module, and the historical command query entrance of the voice assistant module, and only retains the real-time display interface of the current operation.

[0048] S43. If a low-frequency passenger initiates a new search operation in the vehicle privacy protection mode, the information hiding unit temporarily caches the data of this operation and does not include the data of this operation in the vehicle's historical sensitive information record.

[0049] S44. After completing the operations in S42 and S43, the information hiding unit sends a hiding completion signal to the privacy mode control unit.

[0050] Furthermore, detecting low-frequency occupant departures in privacy protection mode includes the following steps:

[0051] S61. Retrieve the low-frequency occupant unique identifier and the seat position information of the occupant corresponding to the current vehicle privacy protection mode from the privacy mode control unit.

[0052] S62. Based on the seat position information, activate the seat pressure detection component for the corresponding seat and the image acquisition component covering the seat area;

[0053] S63. The seat pressure detection component monitors the pressure status of the corresponding seat. When the pressure value drops to a preset no-occupant threshold and remains there for a preset duration, a seat pressure disappearance signal is generated.

[0054] S64. The image acquisition component performs a visual scan of the corresponding seat area. If no facial features matching the unique identifier of the low-frequency occupant are identified for a consecutive preset number of frames, a visual unidentified signal is generated.

[0055] S65. Retrieve the signal from the vehicle door status detection unit. If the door on the side of the passenger seat sends a door opening signal, generate a door opening signal.

[0056] S66. If a seat pressure loss signal, a visual non-recognition signal, and a door opening signal are obtained simultaneously, it is determined that the low-frequency occupant has left the vehicle.

[0057] S67. If the current vehicle privacy protection mode corresponds to multiple low-frequency occupants, repeat S62 to S66. After confirming that all low-frequency occupants meet the exit judgment conditions, generate the exit judgment results of all low-frequency occupants.

[0058] S68. Transmit the vehicle departure determination result to the privacy mode control unit.

[0059] According to a second aspect of the present invention, an in-vehicle privacy protection system based on occupant frequency identification is provided, comprising:

[0060] The sensing and acquisition module is used to activate the vehicle sensing component and collect the identity association information of the passenger when the occupant riding trigger condition or the vehicle system power-on signal is detected.

[0061] The identity frequency management module is used to identify the passenger's identity based on the identity association information; if it is the first ride, a unique identity identifier is created and the ride frequency record is initialized; if the identity has been stored, the historical ride frequency record is retrieved.

[0062] The threshold comparison and determination module is used to obtain the user's preset privacy trigger frequency threshold, compare the passenger's current riding frequency with the threshold, and determine whether the passenger is a high-frequency or low-frequency passenger based on the result.

[0063] The privacy mode execution module is used to trigger the vehicle privacy protection mode and perform privacy protection operations if the passenger is a low-frequency occupant; the operations include at least hiding vehicle historical sensitive information and adjusting the display carrier and output channel of vehicle real-time interactive information.

[0064] The high-frequency normal mode module is used to maintain the normal vehicle operation mode if the passenger is a high-frequency occupant, without triggering the privacy protection mode, allowing access to the vehicle's historical sensitive information, and displaying and outputting real-time interactive information in the default manner.

[0065] The vehicle departure mode recovery module is used to terminate the mode when it detects that a low-frequency occupant has left the vehicle in the privacy protection mode, and restore the default display carrier and output channel for the normal display of vehicle historical sensitive information and real-time interactive information.

[0066] The above solution achieves the following beneficial technical effects:

[0067] This application distinguishes between high-frequency and low-frequency occupants based on their frequency of use, triggering privacy protection for low-frequency occupants and maintaining normal mode for high-frequency occupants. This achieves a precise balance between in-vehicle privacy protection and user experience, thereby improving the problem that traditional in-vehicle privacy protection solutions use a unified control method, which does not distinguish between occupant types, resulting in inconvenience for high-frequency occupants and easy exposure of sensitive information for low-frequency occupants.

[0068] This application improves upon the traditional data collection scheme by selecting sensing components based on the vehicle's hardware configuration and performing integrity checks on the collected identity-related information. This allows for adaptation to different vehicle models and ensures the validity of the information. The scheme uses a single component without verification, which leads to data collection failure and subsequent recognition errors due to hardware mismatch or incomplete information.

[0069] This application combines seat pressure, visual scanning, and door status to determine low-frequency occupant departures, thereby accurately detecting departure behavior. This improves upon the problem of traditional solutions relying on a single signal for judgment, which leads to the accidental termination of privacy mode due to the lack of consideration of the actual departure status. Attached Figure Description

[0070] Figure 1 This is a flowchart of an in-vehicle privacy protection method based on occupant frequency identification provided by one or more embodiments of the present invention.

[0071] Figure 2 This is an architecture diagram of an in-vehicle privacy protection system based on occupant frequency identification, provided by one or more embodiments of the present invention. Detailed Implementation

[0072] The technical solution of the present invention will now be clearly and completely described with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0073] Figure 1 This is a flowchart of an in-vehicle privacy protection method based on occupant frequency identification provided by one or more embodiments of the present invention.

[0074] like Figure 1 The in-vehicle privacy protection method based on occupant frequency identification, as shown, includes the following steps:

[0075] S1. When the occupant riding trigger condition or the vehicle system power-on signal is detected, the vehicle sensing component is activated to collect the occupant's identity association information.

[0076] Activating the vehicle sensing component involves the following steps:

[0077] Determine the type of occupant seating trigger condition, which includes door opening signal or seat pressure detection signal;

[0078] The system retrieves the pre-stored hardware configuration information from the vehicle system and selects the corresponding sensing component to start based on the hardware configuration information: if the vehicle system is equipped with an image acquisition component, then the image acquisition component is started; if the vehicle system is not equipped with an image acquisition component, then the wireless communication recognition component is started.

[0079] After startup, the sensing components perform a self-test to check whether their signal transmission and data acquisition functions are normal. If the self-test is abnormal, a component abnormality warning signal is sent to the vehicle system. If the self-test is normal, the process proceeds to the step of collecting the occupant's identity association information.

[0080] Specifically, during the initial process of collecting occupant identity information, the system first monitors occupant seating trigger conditions and vehicle system power-on signals in real time. Upon detecting either signal, the type of occupant seating trigger condition is determined: the door opening signal originates from a Hall sensor on the edge of the vehicle door, which collects real-time data on the relative position of the door and the vehicle body and converts it into an electrical signal; this signal is generated when the door changes from closed to open. The seat pressure detection signal originates from a pressure sensor inside the seat, which collects real-time data on the seat surface pressure; this signal is generated when the pressure value exceeds a preset occupant seating threshold. The preset occupant seating threshold is a manufacturer-default value of 35N, which can be fine-tuned by the user within the range of 20-50N through the vehicle system sensor threshold interface. Subsequently, the system retrieves the hardware configuration information pre-stored in the vehicle system's storage unit. This information is written by the manufacturer at the time of vehicle manufacturing and includes whether the vehicle system is configured. The system identifies the data acquisition components, such as the in-vehicle camera. To activate the sensing component, select the identifier: if the image acquisition component is configured, a start command is generated and sent to the control terminal to activate it; otherwise, a start command is generated and sent to the control terminal to activate the wireless communication identification component, such as the Bluetooth module. Next, the activated sensing component performs a self-test: the system sends a signal transmission test command to verify the component's ability to receive commands and provide feedback; simultaneously, the control component performs pre-acquisition operations, with the image acquisition component capturing an image of the in-vehicle environment and the wireless communication identification component scanning for signals from surrounding devices to verify the data acquisition function. If the self-test fails, an error signal is generated and sent to the in-vehicle central control screen, such as no signal transmission response or invalid data acquisition. If the self-test is normal, the system proceeds to the occupant identity association information acquisition step. At this point, the sensing component is in a waiting-to-acquire state, awaiting subsequent acquisition control commands to obtain occupant identity association information.

[0081] In this embodiment, collecting the occupant's identity association information includes the following steps:

[0082] If the activated sensing component is an image acquisition component, control the image acquisition component to aim at the occupant, adjust the acquisition parameters according to the in-vehicle environment, and then acquire the occupant's facial feature image. Then check whether the acquired facial feature image contains the complete key facial area. If it is incomplete, re-acquire the image.

[0083] If the sensing component activated is a wireless communication identification component, control the wireless communication identification component to scan the surrounding mobile devices, filter out the mobile devices associated with the occupants and obtain the wireless identification information of the devices, and then check whether the obtained wireless identification information is in complete format. If it is incomplete, rescan and obtain it.

[0084] The collected facial feature images or wireless identification information are temporarily cached as identity association information, and the collection timestamp of the identity association information is marked.

[0085] Specifically, when performing the occupant identity association information collection step, the system first operates according to the type of sensing component that has been activated: If it is an image acquisition component, the system first acquires the occupant's seating position data from the seat position sensor, generates an angle adjustment command to control the component to align with the occupant; simultaneously, it acquires the real-time light intensity data I from the in-vehicle ambient light sensor, adjusts the parameters to 1 / 30s exposure and ISO 400 when I < 50 lux, and 1 / 200s exposure and ISO 100 when I > 500 lux, and then acquires the occupant's facial feature image; after acquisition, it calls the facial region detection logic to determine whether it contains the complete key area consisting of the eyes, bridge of the nose, and mouth; if incomplete, it re-acquires until a valid image is obtained; if it is a wireless communication recognition component, the system first sets a 5-meter radius scanning range centered on the vehicle host and a 3-second scanning time. The system scans surrounding mobile devices and acquires their signal strength S. It then retrieves historical connection records of mobile devices stored in the vehicle, filtering devices with S > a preset threshold S0 = −70dBm and historical connection records as associated mobile devices, and acquires their wireless identification information. The system checks if the identification information conforms to the 12-digit hexadecimal format of the MAC address XX:XX:XX:XX:XX:XX. If not, it rescans until valid information is acquired. After successful acquisition, the system stores the facial feature image or wireless identification information as identity association information in the vehicle's temporary cache. Simultaneously, it calls the clock module to obtain the current time T, using T as the acquisition timestamp and associating it with the identity association information. This identity association information is used for subsequent occupant identification. The next step involves the system performing identity verification based on this information to determine whether the occupant is a first-time passenger or has already had their identity stored.

[0086] In this embodiment, S2, the passenger's identity is identified based on the identity association information; if it is the first ride, a unique identity is created and the ride frequency record is initialized; if the identity has been stored, the historical ride frequency record is retrieved.

[0087] The identification of this passenger based on identity association information includes the following steps:

[0088] Confirm the type of identity-related information, which includes one of facial feature images or wireless identification information;

[0089] Retrieve the known occupant information database pre-stored in the vehicle system. The known occupant information database stores the associated information corresponding to the occupants whose identities have been stored. The associated information corresponding to the occupants whose identities have been stored is of the same type as the identity-related information.

[0090] If the identity association information is a facial feature image, facial feature data is extracted from the facial feature image, and the extracted facial feature data is compared with the facial feature data of the known occupant information database that has already stored the identity of the occupant.

[0091] If the identity association information is wireless identification information, perform a character consistency comparison between the wireless identification information and the wireless identification information of the known occupants already stored in the known occupant information database;

[0092] If the facial feature data comparison meets the preset matching conditions, or the wireless identification information comparison is completely consistent, then the passenger is determined to be a passenger whose identity has been stored; otherwise, the passenger is determined to be a passenger taking the ride for the first time.

[0093] Specifically, during the occupant identification process, the system first reads the identity association information from the temporary cache unit and confirms the type through information format recognition logic: if it contains a pixel matrix and coordinates of key facial regions, it is a facial feature image; if it is a 12-bit hexadecimal character sequence, it is wireless identification information. Then, the system retrieves the known occupant information database pre-stored in the vehicle's storage unit. This database consists of first-time passenger association information and user-entered information, storing facial feature data or wireless identification information of already identified occupants, and the type is consistent with the current identity association information. If it is a facial feature image, the system calls a facial feature extraction algorithm based on a convolutional neural network to extract facial feature data A containing dimensions such as interpupillary distance and nasal bridge height. A is a 128-dimensional feature vector, preset by the convolutional neural network model. Simultaneously, the system retrieves the facial feature data of already identified occupants one by one from the known occupant information database. Using the cosine similarity algorithm Calculate the similarity, where A⋅Bi is the vector dot product. , Let A be the vector magnitude, and let A be extracted from the current image. The information is pre-stored in the database; the system presets a similarity matching threshold Th=0.8, and there exists a Bi such that Sim(A, If )≥Th, the matching condition is met; if it is wireless identification information, the system retrieves the wireless identification information Cj of the known passenger information database one by one, j=1,2,...,m, and compares the current wireless identification information C with Cj character by character. If every character is the same, it is determined to be completely consistent; if the facial feature matching condition is met or the wireless identification comparison is completely consistent, it is determined to be a passenger with a stored identity; if no match is found after traversing the information database, it is determined to be a first-time passenger; the identity determination result is directly used for subsequent operations: for first-time passengers, a unique identity identifier of 8 digits and letters is created, and the passenger frequency record is initialized with an initial value of 1; for passengers with a stored identity, the historical passenger frequency record is retrieved based on the unique identity identifier; the next step is for the system to perform passenger frequency calculation and threshold comparison operations based on the current identity determination result.

[0094] In this embodiment, retrieving historical ride frequency records includes the following steps:

[0095] Based on the passenger's stored identity, retrieve the unique identifier corresponding to that passenger;

[0096] The system retrieves the pre-stored passenger frequency database from the vehicle system. The passenger frequency database stores the unique identifiers of each passenger with a stored identity and the corresponding historical passenger frequency records.

[0097] Use the retrieved unique identifier as the search condition to search the historical ride frequency records corresponding to the unique identifier in the ride frequency database;

[0098] After retrieving the corresponding historical ride frequency record, extract the cumulative number of rides and the start and end times of each ride from the record;

[0099] Check if the extracted cumulative number of rides and the start and end times of each ride are complete. If the information is incomplete, search the ride frequency database again. If the information is complete, transmit the historical ride frequency record to S3.

[0100] Specifically, when retrieving the historical ride frequency records of passengers with stored identities, the system first retrieves the unique identification ID corresponding to the passenger from the known passenger information database in the vehicle storage unit, based on the passenger identification results from the previous identification process. The ID is an 8-digit number and letter combination created by the system when the passenger first rides, and is stored in the known passenger information database in association with the passenger. Next, the system retrieves the pre-stored ride frequency database in the vehicle storage unit. This database has a key-value pair structure, where the "key" is the ID of each passenger with stored identities, and the "value" is the corresponding historical ride frequency record. The database association is automatically updated by the system each time a passenger leaves the vehicle. Then, the system uses the retrieved ID as a search index and matches the corresponding "key" in the ride frequency database using a hash search method. If the matching results in an index deviation, the system re-executes the index matching until the historical frequency record corresponding to the ID is located. After locating the target record, the system extracts the cumulative ride count N from it. The system retrieves the start and end times T1, T2, ..., Tk, where N is a non-negative integer. Ti−start and Ti−end are timestamps recorded by the system clock module, in the format 'year-month-day hour:minute:second'. The system then performs a completeness check on the extracted information: if N is empty, negative, or if Ti contains only Ti−start and no Ti−end, or only Ti−end and no Ti−start, the information is considered incomplete, and the system re-retrieves the information using ID as the index; if N is a non-negative integer and all Ti contain complete Ti−start and Ti−end, the information is considered complete, and the system transmits the historical frequency records containing ID, N, and T1 to Tk to S3. In the historical frequency records transmitted to S3, N is used by S3 to calculate the passenger's current riding frequency, and T1 to Tk are used to assist in verifying the validity of the frequency records. Next, S3 will compare this record with the user-preset privacy trigger frequency threshold to determine whether the passenger is a high-frequency or low-frequency passenger.

[0101] In this embodiment, S3, obtain the user's preset privacy trigger frequency threshold, compare the current riding frequency of the passenger with the threshold, and determine whether the passenger is a high-frequency or low-frequency passenger based on the result;

[0102] Comparing the passenger's current travel frequency with a threshold includes the following steps:

[0103] S31. Based on the passenger's identity determination result, determine the passenger's current ride frequency; if the identity determination result is a passenger taking the ride for the first time or a passenger whose identity has been stored, if it is a passenger taking the ride for the first time, retrieve the value corresponding to the passenger's initial ride frequency record; if it is a passenger whose identity has been stored, retrieve the cumulative number of rides in the passenger's historical ride frequency record and add it to the current ride frequency.

[0104] S32. Retrieve the user's preset privacy trigger frequency threshold;

[0105] S33. Compare the current riding frequency of the passenger determined in S31 with the privacy trigger frequency threshold retrieved in S32; if the current riding frequency is less than or equal to the privacy trigger frequency threshold, the passenger is determined to be a low-frequency passenger; if the current riding frequency is greater than or equal to the privacy trigger frequency threshold, the passenger is determined to be a high-frequency passenger.

[0106] S34. Retrieve the occupant's unique identification identifier, associate the unique identification identifier with the comparison result, and determine whether the comparison result indicates a high-frequency or low-frequency occupant.

[0107] Specifically, when performing the step of comparing the current passenger ride frequency with the privacy trigger frequency threshold, S31 is first performed to determine the passenger's current ride frequency Fcurrent: Based on the identity determination result of the previous identity recognition step, if it is a first-time passenger, the system retrieves the passenger's initial ride frequency record value Finit from the temporary storage unit. Finit has a value of 1 and is used as the current ride frequency Fcurrent. If it is a passenger whose identity has been stored, the system retrieves the cumulative ride count N from the historical ride frequency record transmitted to S3. N is a non-negative integer generated by the system automatically incrementing by 1 after each departure from the vehicle. At the same time, the current ride count is determined to be 1, and the current ride frequency Fcurrent is calculated by Fcurrent=N+1. Then, S32 is performed, and the system retrieves the user-preset privacy trigger frequency threshold Thprivacy stored in the vehicle storage unit. Thprivacy is manually entered by the user through the privacy settings interface of the vehicle's central control screen, and the range is set. The process is repeated 2 to 5 times, and the data can be modified at any time after storage. Next, S33 is executed, where the system compares the Fcurrent determined in S31 with the Thprivacy retrieved in S32: if Fcurrent ≤ Thprivacy, the passenger is identified as a low-frequency occupant; if Fcurrent > Thprivacy, the passenger is identified as a high-frequency occupant, resulting in a comparison result R. Finally, S34 is executed, where the system retrieves the occupant's unique identifier ID from the known occupant information database. The ID is an 8-digit combination of numbers and letters. For first-time passengers, the ID is created by the system, and stored identities are retrieved from the known occupant information database. The ID is then associated with the comparison result R, forming associated data containing both ID and R. This associated data is the output of the comparison step and is used to provide a basis for subsequent vehicle mode control. The next step involves the system performing corresponding operations based on the R value in the associated data: if R is "low-frequency occupant," the vehicle privacy protection mode is triggered and privacy protection operations are performed; if R is "high-frequency occupant," the normal vehicle operation mode is maintained, and the privacy protection mode is not triggered.

[0108] In this embodiment, S4, if the passenger is a low-frequency passenger, the vehicle privacy protection mode is triggered and privacy protection operations are performed; the operations include at least hiding vehicle historical sensitive information and adjusting the display carrier and output channel of vehicle real-time interactive information.

[0109] Triggering the in-vehicle privacy protection mode involves the following steps:

[0110] Based on the low-frequency occupant results, retrieve the unique identifier of the low-frequency occupant;

[0111] Generate a trigger command, which includes the unique identifier, the mode activation command type, and the scope of privacy protection operations. The scope of privacy protection operations includes hiding in-vehicle historical sensitive information and adjusting the display carrier and output channel of in-vehicle real-time interactive information.

[0112] The trigger command is sent to the privacy mode control unit of the vehicle system, which then distributes the trigger command to the information hiding unit and the interaction adjustment unit respectively.

[0113] The privacy mode control unit receives instructions and confirmation signals from the information hiding unit and the interaction adjustment unit.

[0114] The privacy mode control unit sends a start execution signal to the information hiding unit and the interaction adjustment unit to trigger the vehicle privacy protection mode.

[0115] Specifically, when triggering the in-vehicle privacy protection mode for low-frequency occupants, the system first retrieves the occupant's unique identifier ID from the associated storage data based on the previously determined frequency comparison. The ID is an 8-digit combination of numbers and letters; for first-time occupants, it comes from a temporary storage unit created by the system; for occupants with pre-existing identities, it comes from the known occupant information database and is bound to the occupant's identity information. Subsequently, the system generates a trigger command Cmd, which contains three core elements: first, the unique identifier ID, used to locate the trigger target and ensure that the operation is only performed on the low-frequency occupant; second, the mode activation command type Code, with a value of "Privacy_Protection". The system defines three parameters: "ct_Mode_Start", which is a pre-defined instruction code for the in-vehicle system to clarify the instruction function; and "Scope", which includes two aspects: "hiding sensitive historical information in the vehicle" and "adjusting the display carrier and output channel of real-time interactive information in the vehicle." The command (Cmd) is generated by the in-vehicle system instruction generation module based on the above three parameters in a pre-defined format "ID|Code|Scope." The system then sends the trigger command Cmd to the in-vehicle privacy mode control unit via the in-vehicle internal communication bus, such as the CAN bus. This unit is the core of the in-vehicle privacy protection logic control; after receiving the Cmd, it parses the Scope content and, based on the two operations included in the Scope, performs the corresponding operations. The Cmd is distributed to the information hiding unit and the interaction adjustment unit. The information hiding unit is responsible for performing sensitive information hiding operations, and the interaction adjustment unit is responsible for performing interaction carrier and output channel adjustment operations. After distributing the Cmd, the privacy mode control unit waits for the instruction reception confirmation signal ACK from the information hiding unit and the interaction adjustment unit. ACK is a system-preset 4-bit feedback code, and a value of "0001" indicates successful instruction reception. If ACK signals from both units are received within a preset time of 2 seconds, the instruction reception is confirmed as valid. If no ACK signal is received within the preset time or only one unit's ACK signal is received, the system resends the Cmd until ACK signals are received from both units. After confirming instruction reception, the privacy mode control unit... The unit sends a start execution signal StartSig to the information hiding unit and the interaction adjustment unit. StartSig is the signal that triggers execution and is encoded as "Exec_Start". After this signal is sent, the vehicle privacy protection mode is triggered. At this time, the output result is "Vehicle privacy protection mode has been started". This result is used to provide the execution trigger basis for subsequent privacy protection operations, ensuring that the information hiding unit and the interaction adjustment unit perform specific operations based on the start state. The next step is for the system to enter the privacy protection operation execution stage. The information hiding unit performs the vehicle historical sensitive information hiding operation, and the interaction adjustment unit performs the vehicle real-time interactive information display carrier and output channel adjustment operation to realize the privacy protection function.After receiving the Cmd, the interaction adjustment unit performs adjustments according to the Scope requirements: Regarding the display medium, real-time navigation prompts and music playback information are switched from the in-vehicle central control screen to the dedicated interactive area on the instrument panel; regarding the output channel, the voice assistant's response audio is switched from the main in-vehicle speaker to the driver's side independent speaker to prevent low-frequency occupants from receiving interactive audio from other seats; after the adjustment is completed, the interaction adjustment unit sends a signal indicating that the channel adjustment is complete to the privacy mode control unit.

[0116] In this embodiment, hiding sensitive vehicle history information includes the following steps:

[0117] S41. The information hiding unit receives the start execution signal sent by the privacy mode control unit and confirms the types of vehicle history sensitive information to be hidden. The types of vehicle history sensitive information include the historical destination records of the navigation module, the historical playback records of the music module, and the historical command records of the voice assistant module.

[0118] S42. The information hiding unit blocks the display entrances of vehicle history sensitive information of each module on the central control screen: hides the historical destination list entrance of the navigation module, the historical playlist entrance of the music module, and the historical command query entrance of the voice assistant module, and only retains the real-time display interface of the current operation.

[0119] S43. If a low-frequency passenger initiates a new search operation in the vehicle privacy protection mode, the information hiding unit temporarily caches the data of this operation and does not include the data of this operation in the vehicle's historical sensitive information record.

[0120] S44. After completing the operations in S42 and S43, the information hiding unit sends a hiding completion signal to the privacy mode control unit.

[0121] Specifically, when performing the step of hiding in-vehicle historical sensitive information, the following steps are taken first: S41: The information hiding unit receives the start execution signal StartSig sent by the privacy mode control unit through the in-vehicle internal communication bus. StartSig is encoded as "Exec_Start" and is a trigger signal sent by the privacy mode control unit after confirming that the instruction has been received. After parsing StartSig, the information hiding unit confirms the types of in-vehicle historical sensitive information to be hidden based on the system's preset list of sensitive information types, including historical destination records stored in the navigation module, historical playback records stored in the music module, and historical command records stored in the voice assistant module. Next, S42 is executed: the information hiding unit sends the interface adjustment command UIAdjCmd to the vehicle central control screen display control module. The command contains the hiding rules for the display entry of each module. For the navigation module, the command controls the central control screen navigation interface to not display the "historical destination" option, and only retains the real-time search entry of "enter destination". For the music module, the command controls the central control screen music interface to not display the "recently played" list, and only retains the currently playing music track and playback control buttons. For the voice assistant module, the command controls the central control screen voice assistant interface to not display the "historical command" query entry, and only retains the real-time interaction area of ​​"voice wake-up". Through the above operations, only the real-time display interface of the current operation of each module is retained, and the display entry of all historical sensitive information is blocked. Then, S43 is executed: If a low-frequency occupant initiates a new search operation in the vehicle privacy protection mode, such as searching for a new destination through the navigation module or searching for a new song through the music module, the information hiding unit captures the data NewData generated by this operation in real time and stores NewData in the vehicle temporary storage area TempStore. TempStore is a non-permanent storage area preset by the system, which only retains data during the current privacy protection mode. At the same time, the information hiding unit sends a write prohibition command NoWriteCmd to the history storage module of each module to ensure that NewData is not written to the historical destination database of the navigation module, the historical playback database of the music module, and the historical command database of the voice assistant module, and is not included in the vehicle's historical sensitive information record.Finally, in step S44: After completing the interface entry blocking operation in S42 and the temporary caching configuration of new operation data in S43, the information hiding unit generates a hiding completion signal HideAck, encoded as "Hide_Complete", which is fed back to the privacy mode control unit via the internal communication bus. The output of this step is the HideAck signal, which is used to confirm to the privacy mode control unit that the hiding operation of the vehicle's historical sensitive information has been completed, ensuring that historical sensitive information is not viewed by low-frequency occupants in the privacy protection mode. In the next step, after receiving the HideAck signal, the privacy mode control unit records the completion status of the current privacy protection operation, which serves as the basis for the status of the historical sensitive information display restoration operation when a low-frequency occupant leaves the vehicle. At the same time, it continuously monitors the operation of low-frequency occupants in the privacy protection mode to ensure that newly generated operation data is always only temporarily cached and not included in the history record.

[0122] In this embodiment, S5, if the passenger is a high-frequency passenger, maintain the normal vehicle operation mode, do not trigger the privacy protection mode, allow access to vehicle historical sensitive information, and display and output real-time interactive information in the default manner;

[0123] S6. When a low-frequency occupant leaves the vehicle in privacy protection mode, the mode is terminated, and the default display carrier and output channel for the normal display of vehicle historical sensitive information and real-time interactive information are restored.

[0124] Detecting low-frequency occupant departures in privacy protection mode includes the following steps:

[0125] S61. Retrieve the low-frequency occupant unique identifier and the seat position information of the occupant corresponding to the current vehicle privacy protection mode from the privacy mode control unit.

[0126] S62. Based on the seat position information, activate the seat pressure detection component for the corresponding seat and the image acquisition component covering the seat area;

[0127] S63. The seat pressure detection component monitors the pressure status of the corresponding seat. When the pressure value drops to a preset no-occupant threshold and remains there for a preset duration, a seat pressure disappearance signal is generated.

[0128] S64. The image acquisition component performs a visual scan of the corresponding seat area. If no facial features matching the unique identifier of the low-frequency occupant are identified for a consecutive preset number of frames, a visual unidentified signal is generated.

[0129] S65. Retrieve the signal from the vehicle door status detection unit. If the door on the side of the passenger seat sends a door opening signal, generate a door opening signal.

[0130] S66. If a seat pressure loss signal, a visual non-recognition signal, and a door opening signal are obtained simultaneously, it is determined that the low-frequency occupant has left the vehicle.

[0131] S67. If the current vehicle privacy protection mode corresponds to multiple low-frequency occupants, repeat S62 to S66. After confirming that all low-frequency occupants meet the exit judgment conditions, generate the exit judgment results of all low-frequency occupants.

[0132] S68. Transmit the vehicle departure determination result to the privacy mode control unit.

[0133] Specifically, when handling operations related to detecting high-frequency and low-frequency occupants leaving the vehicle, S5 is executed first for high-frequency occupants: when the frequency comparison previously determined that the occupant is a high-frequency occupant, the system maintains the normal vehicle operation mode, does not send mode trigger commands to the privacy mode control unit, allows high-frequency occupants to access vehicle historical sensitive information, the central control screen navigation module displays the "historical destinations" list, the music module displays the "recently played" list, the voice assistant module provides the "historical command" query entry, and at the same time displays and outputs real-time interactive information in the default manner, with the default display carrier being the vehicle central control screen and the default output channel being the vehicle main speaker.Subsequently, for low-frequency occupants in privacy protection mode, the system performs an exit detection step: S61, the system retrieves the unique identification ID of the low-frequency occupant corresponding to the current privacy protection mode from the privacy mode control unit storage module. The ID is an 8-digit combination of numbers and letters and comes from the associated storage of previous identification. At the same time, it retrieves the seat position information Pos of the occupant. The value of Pos is "driver's seat", "passenger seat", "rear left side", or "rear right side". The seat pressure sensor triggers the recording when the occupant sits down and transmits it to the privacy mode control unit; S62, the system sends a start command StartP to the seat pressure detection component of the corresponding seat based on Pos, and sends a signal to the image acquisition component covering the seat area. Start command StartC; S63, the seat pressure detection component collects the pressure value P of the corresponding seat in real time. P is in N and is calculated by the pressure sensor converting the physical quantity of pressure into an electrical signal. The system presets the no-occupant threshold P0 to be 50N and the duration T0 to be 3 seconds. P0 is set by the manufacturer based on human weight range testing. When P≤P0 is detected and the duration of this state is T≥T0, the seat pressure detection component generates a seat pressure disappearance signal SigP; simultaneously, S64 is executed, the image acquisition component performs a visual scan of the corresponding seat area at a frequency of 10 frames per second. Each frame image is compared with the facial feature data A of the low-frequency occupant. A comes from the facial features in the previously associated identity information. Based on the image extraction results, the system presets the number of consecutive unrecognized frames F0 to be 20 frames. If no facial feature matching A is recognized for F≥F0 consecutive frames, the image acquisition component generates a visual unrecognized signal SigC. Simultaneously, in S65, the system retrieves the low-frequency door status detection unit signal of the occupant seat side door via the vehicle's internal bus. The door status detection unit has a built-in Hall sensor, which sends a door status signal when it detects the door changing from closed to open. The system generates a door opening signal SigD based on this signal. In S66, the system sets the signal judgment logic. When the seat pressure disappearance signal SigP, the visual unrecognized signal SigC, and the door opening signal SigD are simultaneously acquired, a signal is generated. The departure determination result R1 of the low-frequency occupant is set to "departed from the vehicle". If three signals are not acquired simultaneously, monitoring continues until the conditions are met. If the current privacy protection mode corresponds to multiple low-frequency occupants, then S67 is executed: S62 to S66 are repeated for the seat position information Pos of each low-frequency occupant to generate the departure determination result R1 for each occupant. When the R1 of all occupants is "departed from the vehicle", the departure determination result Rall of all low-frequency occupants is generated, and the Rall value is "all low-frequency occupants have left the vehicle". S68, the system transmits the departure determination result to the privacy mode control unit through the internal communication bus. The determination result is either the R1 of a single occupant or the Rall of multiple occupants.The output of this vehicle departure detection step is the vehicle departure determination result transmitted to the privacy mode control unit. Its purpose is to provide a trigger for terminating the vehicle privacy protection mode. The system will only return to normal after a low-frequency occupant has actually left the vehicle, thus avoiding premature termination of the privacy mode and exposure of sensitive information. In the next step, after receiving the vehicle departure determination result, the privacy mode control unit will send a sensitive information recovery command to the information hiding unit and a real-time interactive information carrier and output channel recovery command to the interaction adjustment unit, thereby terminating the vehicle privacy protection mode and restoring the normal display of historical sensitive information and the default display carrier and output channel of real-time interactive information.

[0134] Figure 2 This is an architecture diagram of an in-vehicle privacy protection system based on occupant frequency identification, provided by one or more embodiments of the present invention.

[0135] like Figure 2 The in-vehicle privacy protection system shown includes:

[0136] The sensing and acquisition module is used to activate the vehicle sensing component and collect the identity association information of the passenger when the occupant riding trigger condition or the vehicle system power-on signal is detected.

[0137] The identity frequency management module is used to identify the passenger's identity based on identity association information; if it is the first ride, a unique identity identifier is created and the ride frequency record is initialized; if the identity has been stored, the historical ride frequency record is retrieved.

[0138] The threshold comparison and determination module is used to obtain the user's preset privacy trigger frequency threshold, compare the passenger's current riding frequency with the threshold, and determine whether the passenger is a high-frequency or low-frequency passenger based on the result.

[0139] The privacy mode execution module is used to trigger the in-vehicle privacy protection mode and perform privacy protection operations if the passenger is a low-frequency occupant. The operations include at least hiding in-vehicle historical sensitive information and adjusting the display carrier and output channel of in-vehicle real-time interactive information.

[0140] The high-frequency normal mode module is used to maintain the normal vehicle operation mode if the passenger is a high-frequency occupant, without triggering the privacy protection mode, allowing access to the vehicle's historical sensitive information, and displaying and outputting real-time interactive information in the default manner.

[0141] The vehicle departure mode recovery module is used to terminate the mode when it detects that a low-frequency occupant has left the vehicle in the privacy protection mode, and restore the default display carrier and output channel for the normal display of vehicle historical sensitive information and real-time interactive information.

[0142] In family car use scenarios, car owners need convenient access to in-vehicle navigation history and music recordings. Since occasional rides by relatives and friends may compromise privacy, and the system needs to automatically restore normal operation after infrequent passengers leave the vehicle to avoid affecting frequent passengers' use, this invention provides an in-vehicle privacy protection system based on passenger frequency identification. The specific implementation process of this system is as follows:

[0143] Perception and Acquisition Module: After a friend or relative opens the car door and triggers a signal, the module activates the in-vehicle camera. After a normal self-test, the camera is aimed at the friend or relative in the front passenger seat, capturing an image containing the complete key facial area. The image is then stored in a temporary cache and marked with a timestamp, effectively collecting low-frequency occupant identity information.

[0144] Identity and frequency management module: Read facial images and compare them with the known passenger database. If the similarity is below the threshold of 0.8, it is determined that the relatives or friends are taking the ride for the first time. A unique ID is created and the frequency is initialized to 1. This can distinguish between high and low frequency passengers and realize the binding of identity and operation.

[0145] Threshold comparison and judgment module: retrieves the current frequency of relatives and friends, compares it with the car owner's preset threshold, determines them as low-frequency passengers, and stores the results with their associated IDs, providing a clear basis for system mode selection.

[0146] Privacy mode execution module: Based on low-frequency results, it generates trigger commands to start protection, the information hiding unit blocks the entry of historical information, temporarily caches new operation data, and the interaction adjustment unit switches real-time information from the central control screen to the instrument panel and the voice response to the driver's side speaker, blocking privacy leakage and ensuring normal use by low-frequency occupants.

[0147] High-frequency normal mode module: When the vehicle owner uses the module, if the frequency of the vehicle owner's use is greater than that of relatives and friends, the module will maintain normal mode, allow access to historical information, and default to carrier or channel output to meet the needs of high-frequency passengers for convenient use.

[0148] Off-vehicle mode recovery module: When a friend or family member leaves the vehicle, the module activates passenger seat pressure detection, image scanning, and door detection. If all three signals are met, the system is deemed to have left the vehicle. The results are transmitted to the control unit, historical information display and default carrier or channel are restored, and the protection mode is terminated. This ensures that the system automatically recovers after the person leaves the vehicle, balancing privacy and convenience.

[0149] It will be understood by those skilled in the art that, unless otherwise defined, all terms used herein (including technical and scientific terms) have the same meaning as commonly understood by one of ordinary skill in the art to which this invention pertains. It should also be understood that terms such as those defined in general dictionaries should be understood to have the meaning consistent with their meaning in the context of the prior art, and should not be interpreted in an idealized or overly formal sense unless specifically defined.

[0150] For the sake of simplicity, the method embodiments are described as a series of actions. However, those skilled in the art should understand that the embodiments of the present invention are not limited to the described order of actions, because according to the embodiments of the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily essential to the embodiments of the present invention.

[0151] As can be seen from the above description of the embodiments, those skilled in the art can clearly understand that this application can be implemented by means of software plus necessary general-purpose hardware platforms. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product can be stored in a storage medium, such as ROM / RAM, magnetic disk, optical disk, etc., and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute the methods described in various embodiments or some parts of the embodiments of this application.

[0152] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, and not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features; and these modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A vehicle-mounted privacy protection method based on occupant frequency identification, characterized in that, Includes the following steps: S1. When the occupant riding trigger condition or the vehicle system power-on signal is detected, the vehicle sensing component is activated to collect the occupant's identity association information. S2. Identify the passenger's identity based on the aforementioned identity association information; If this is the first time taking the ride, create a unique identifier and initialize the ride frequency record; If the identity has been stored, retrieve the historical travel frequency records; S3. Obtain the user's preset privacy trigger frequency threshold, compare the passenger's current riding frequency with the threshold, and determine whether the passenger is a high-frequency or low-frequency passenger based on the result; S4. If the passenger is a low-frequency occupant, trigger the vehicle privacy protection mode and perform privacy protection operations; the operations include at least hiding vehicle historical sensitive information and adjusting the display carrier and output channel of vehicle real-time interactive information. S5. If the passenger is a high-frequency passenger, maintain the normal vehicle operation mode, do not trigger the privacy protection mode, allow access to vehicle historical sensitive information, and display and output real-time interactive information in the default way. S6. When a low-frequency occupant leaves the vehicle in privacy protection mode, terminate the mode and restore the default display carrier and output channel for normal display of vehicle historical sensitive information and real-time interactive information.

2. The in-vehicle privacy protection method based on occupant frequency identification according to claim 1, characterized in that, The activation of the on-board sensing component includes the following steps: Determine the type of the occupant seating trigger condition, which includes a door opening signal or a seat pressure detection signal; The system retrieves the pre-stored hardware configuration information from the vehicle system and selects the corresponding sensing component to start based on the hardware configuration information: if the vehicle system is equipped with an image acquisition component, then the image acquisition component is started; if the vehicle system is not equipped with an image acquisition component, then the wireless communication recognition component is started. After startup, the sensing components perform a self-test to check whether their signal transmission and data acquisition functions are normal. If the self-test is abnormal, a component abnormality warning signal is sent to the vehicle system. If the self-test is normal, the process proceeds to the step of collecting the occupant's identity association information.

3. The in-vehicle privacy protection method based on occupant frequency identification according to claim 2, characterized in that, The process of collecting the passenger's identity information includes the following steps: If the activated sensing component is an image acquisition component, control the image acquisition component to aim at the occupant, adjust the acquisition parameters according to the in-vehicle environment, and then acquire the occupant's facial feature image. Then check whether the acquired facial feature image contains the complete key facial area. If it is incomplete, re-acquire the image. If the sensing component activated is a wireless communication identification component, control the wireless communication identification component to scan the surrounding mobile devices, filter out the mobile devices associated with the occupants and obtain the wireless identification information of the devices, and then check whether the obtained wireless identification information is in complete format. If it is incomplete, rescan and obtain it. The collected facial feature images or wireless identification information are temporarily cached as the identity association information, and the collection timestamp of the identity association information is marked.

4. The in-vehicle privacy protection method based on occupant frequency identification according to claim 1, characterized in that, The process of identifying the passenger based on the identity association information includes the following steps: Confirm the type of the identity-associated information, which includes one of facial feature images and wireless identification information; The system retrieves a pre-stored database of known occupant information from the vehicle system. This database contains associated information corresponding to occupants with stored identities, and the associated information corresponding to the stored identities is of the same type as the identity-related information. If the identity association information is a facial feature image, facial feature data is extracted from the facial feature image, and the extracted facial feature data is compared with the facial feature data of the known occupant information database that has already stored the identity of the occupant. If the identity association information is wireless identification information, the wireless identification information is compared with the wireless identification information of the known occupant information stored in the known occupant information database for character consistency. If the facial feature data comparison meets the preset matching conditions, or the wireless identification information comparison is completely consistent, then the passenger is determined to be the passenger whose identity has been stored; if not, then the passenger is determined to be the passenger who is taking the ride for the first time.

5. The in-vehicle privacy protection method based on occupant frequency identification according to claim 4, characterized in that, The process of retrieving historical ride frequency records includes the following steps: Based on the passenger's stored identity, retrieve the unique identifier corresponding to that passenger; The system retrieves a pre-stored passenger frequency database, which stores the association between the unique identifier of each passenger with a stored identity and the corresponding historical passenger frequency record. Use the retrieved unique identifier as the search condition to search the historical ride frequency records corresponding to the unique identifier in the ride frequency database; After retrieving the corresponding historical ride frequency record, extract the cumulative number of rides and the start and end times of each ride from the record; Check if the extracted cumulative number of rides and the start and end times of each ride are complete. If the information is incomplete, search the ride frequency database again. If the information is complete, transmit the historical ride frequency record to S3.

6. The in-vehicle privacy protection method based on occupant frequency identification according to claim 5, characterized in that, The process of comparing the passenger's current riding frequency with the threshold includes the following steps: S31. Based on the passenger's identity determination result, determine the passenger's current riding frequency; the identity determination result is either a passenger riding for the first time or a passenger whose identity has been stored. If it is a passenger riding for the first time, retrieve the value corresponding to the passenger's initial riding frequency record; if it is a passenger whose identity has been stored, retrieve the cumulative number of rides in the passenger's historical riding frequency record and add it to the current riding frequency. S32. Retrieve the user's preset privacy trigger frequency threshold; S33. Compare the current riding frequency of the passenger determined in S31 with the privacy trigger frequency threshold retrieved in S32; if the current riding frequency is less than or equal to the privacy trigger frequency threshold, the passenger is determined to be a low-frequency passenger; if the current riding frequency is greater than or equal to the privacy trigger frequency threshold, the passenger is determined to be a high-frequency passenger. S34. Retrieve the unique identification of the occupant and associate the unique identification with the comparison result, wherein the comparison result is a high-frequency occupant or a low-frequency occupant.

7. The in-vehicle privacy protection method based on occupant frequency identification according to claim 6, characterized in that, The triggering of the in-vehicle privacy protection mode includes the following steps: Based on the low-frequency occupant results, retrieve the unique identifier of the low-frequency occupant; Generate a trigger command, which includes the unique identifier, the mode activation command type, and the scope of privacy protection operations. The scope of privacy protection operations includes hiding in-vehicle historical sensitive information and adjusting the display carrier and output channel of in-vehicle real-time interactive information. The trigger command is sent to the privacy mode control unit of the vehicle system, which then distributes the trigger command to the information hiding unit and the interaction adjustment unit respectively. The privacy mode control unit receives instructions and confirmation signals from the information hiding unit and the interaction adjustment unit. The privacy mode control unit sends a start execution signal to the information hiding unit and the interaction adjustment unit to trigger the vehicle privacy protection mode.

8. The in-vehicle privacy protection method based on occupant frequency identification according to claim 7, characterized in that, The process of hiding sensitive vehicle history information includes the following steps: S41. The information hiding unit receives the start execution signal sent by the privacy mode control unit and confirms the types of vehicle history sensitive information to be hidden. The types of vehicle history sensitive information include the historical destination records of the navigation module, the historical playback records of the music module, and the historical command records of the voice assistant module. S42. The information hiding unit blocks the display entrances of vehicle history sensitive information of each module on the central control screen: hides the historical destination list entrance of the navigation module, the historical playlist entrance of the music module, and the historical command query entrance of the voice assistant module, and only retains the real-time display interface of the current operation. S43. If a low-frequency passenger initiates a new search operation in the vehicle privacy protection mode, the information hiding unit temporarily caches the data of this operation and does not include the data of this operation in the vehicle's historical sensitive information record. S44. After completing the operations in S42 and S43, the information hiding unit sends a hiding completion signal to the privacy mode control unit.

9. The in-vehicle privacy protection method based on occupant frequency identification according to claim 7, characterized in that, The detection of low-frequency occupant departure in privacy protection mode includes the following steps: S61. Retrieve the low-frequency occupant unique identifier and the seat position information of the occupant corresponding to the current vehicle privacy protection mode from the privacy mode control unit. S62. Based on the seat position information, activate the seat pressure detection component for the corresponding seat and the image acquisition component covering the seat area; S63. The seat pressure detection component monitors the pressure status of the corresponding seat. When the pressure value drops to a preset no-occupant threshold and remains there for a preset duration, a seat pressure disappearance signal is generated. S64. The image acquisition component performs a visual scan of the corresponding seat area. If no facial features matching the unique identifier of the low-frequency occupant are identified for a consecutive preset number of frames, a visual unidentified signal is generated. S65. Retrieve the signal from the vehicle door status detection unit. If the door on the side of the passenger seat sends a door opening signal, generate a door opening signal. S66. If a seat pressure loss signal, a visual non-recognition signal, and a door opening signal are obtained simultaneously, it is determined that the low-frequency occupant has left the vehicle. S67. If the current vehicle privacy protection mode corresponds to multiple low-frequency occupants, repeat S62 to S66. After confirming that all low-frequency occupants meet the exit judgment conditions, generate the exit judgment results of all low-frequency occupants. S68. Transmit the vehicle departure determination result to the privacy mode control unit.

10. A vehicle-mounted privacy protection system based on occupant frequency identification, applied to the vehicle-mounted privacy protection method based on occupant frequency identification as described in any one of claims 1-9, characterized in that, include: The sensing and acquisition module is used to activate the vehicle sensing component and collect the identity association information of the passenger when the occupant riding trigger condition or the vehicle system power-on signal is detected. The identity frequency management module is used to identify the occupant's identity based on the identity association information; If this is the first time taking the ride, create a unique identifier and initialize the ride frequency record; If the identity has been stored, retrieve the historical travel frequency records; The threshold comparison and determination module is used to obtain the user's preset privacy trigger frequency threshold, compare the passenger's current riding frequency with the threshold, and determine whether the passenger is a high-frequency or low-frequency passenger based on the result. The privacy mode execution module is used to trigger the vehicle privacy protection mode and perform privacy protection operations if the passenger is a low-frequency occupant; the operations include at least hiding vehicle historical sensitive information and adjusting the display carrier and output channel of vehicle real-time interactive information. The high-frequency normal mode module is used to maintain the normal vehicle operation mode if the passenger is a high-frequency occupant, without triggering the privacy protection mode, allowing access to the vehicle's historical sensitive information, and displaying and outputting real-time interactive information in the default manner. The vehicle departure mode recovery module is used to terminate the mode when it detects that a low-frequency occupant has left the vehicle in the privacy protection mode, and restore the default display carrier and output channel for the normal display of vehicle historical sensitive information and real-time interactive information.

Images