Remote control vehicle safety protection method, device and equipment and storage medium

Abstract

The application discloses a remote control vehicle safety protection method and device, equipment and storage medium, relates to the vehicle remote control technical field, and includes: receiving the remote control instruction and the first check data sent by the vehicle-mounted remote communication terminal, wherein the first check data is generated by the vehicle-mounted remote communication terminal according to a preset algorithm and a random number; the first check data is verified according to the preset algorithm and the random number, and a first verification result is obtained; when detecting that the vehicle is powered on, the identity identification sent by the vehicle-mounted remote communication terminal is received, and the identity identification is compared with the pre-stored identity identification, and a second verification result is obtained; in the case that the first verification result indicates that the verification is passed and the second verification result indicates that the comparison is consistent, it is determined that the lock operation corresponding to the remote control instruction is executed, the double verification mechanism of the power-on identity verification and the platform instruction two-way algorithm verification is prevented, and the remote lock is prevented from being maliciously broken.

Description

Technical Field

[0001] This invention relates to the field of vehicle remote control technology, and in particular to a remote vehicle control safety protection method, device, equipment and storage medium. Background Technology

[0002] With the rapid development of auto finance leasing and ride-sharing businesses, the demand for remote vehicle control is becoming increasingly urgent. Car owners and financial institutions need reliable remote vehicle control methods to prevent vehicles from being maliciously abused or stolen.

[0003] Existing remote vehicle locking technologies typically limit vehicle speed by issuing commands from the platform, lacking an effective identity verification mechanism, which poses a risk of misoperation. Furthermore, the locking restrictions can be easily bypassed by replacing the onboard remote communication terminal, the vehicle controller, or rewriting the program, resulting in insufficient security protection.

[0004] The above content is only used to help understand the technical solution of the present invention and does not represent an admission that the above content is prior art. Summary of the Invention

[0005] The main objective of this invention is to provide a remote vehicle control security protection method, device, equipment, and storage medium, aiming to solve the technical problem of how to prevent the remote removal of vehicle locking restrictions by replacing hardware or using illegal commands.

[0006] To achieve the above objectives, the present invention provides a remote vehicle control security protection method, which includes the following steps:

[0007] The system receives remote control commands and first verification data sent by an in-vehicle remote communication terminal, wherein the first verification data is generated by the in-vehicle remote communication terminal according to a preset algorithm and random numbers; The first verification data is verified according to the preset algorithm and the random number to obtain a first verification result; When the vehicle is detected to be powered on, the system receives the identity identifier sent by the vehicle-mounted remote communication terminal and compares the identity identifier with the pre-stored identity identifier to obtain a second verification result. If the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent, then the vehicle locking operation corresponding to the remote control command is executed.

[0008] In one embodiment, the step of verifying the first verification data according to the preset algorithm and the random number to obtain a first verification result includes: The second verification data is calculated based on the preset algorithm and the random number. The first verification data and the second verification data are compared to obtain the first comparison result; When the first comparison result is consistent, a first verification result is generated and the first verification result and feedback data are sent to the vehicle-mounted remote communication terminal to receive the confirmation command sent by the vehicle-mounted remote communication terminal and complete the two-way verification.

[0009] In one embodiment, the step of receiving an identity identifier sent by the vehicle-mounted remote communication terminal when the vehicle is detected to be powered on, and comparing the identity identifier with a pre-stored identity identifier to obtain a second verification result includes: Upon first detection of vehicle power-on, the system receives and stores the initial identity identifier sent by the vehicle-mounted remote communication terminal as a pre-stored identity identifier. When the vehicle is detected to be repeatedly powered on, the current identity identifier sent by the vehicle-mounted remote communication terminal is received; The current identity identifier is compared with the pre-stored identity identifier to obtain a second comparison result; When the second comparison result is consistent, a second verification result that is consistent with the comparison is generated; If the second comparison result is inconsistent, a second verification result with inconsistent comparison is generated.

[0010] In one embodiment, the step of determining to execute the vehicle locking operation corresponding to the remote control command when the first verification result indicates that the verification passed and the second verification result indicates that the comparison is consistent includes: The target vehicle locking level is determined according to the remote control command, wherein the target vehicle locking level includes a first level, a second level, and a third level; When the target vehicle locking level is the first level, a disable command is sent to the air conditioning system and the entertainment system to make the air conditioning system and the entertainment system stop working. When the target vehicle locking level is the second level, a speed limiting and torque limiting command is sent to the drive motor controller so that the drive motor controller limits the vehicle's power output. When the target vehicle locking level is the third level, a power-off command is sent to the high-voltage power distribution system to cause the high-voltage power distribution system to cut off the high-voltage power supply.

[0011] In one embodiment, the step of sending a speed-limiting and torque-limiting command to the drive motor controller when the target vehicle locking level is the second level, so that the drive motor controller limits the vehicle's power output, includes: Receive current vehicle speed data and current throttle opening data sent by the drive motor controller; Determine whether the current vehicle speed data is less than a preset low-speed safety threshold and whether the current throttle opening data is less than a preset throttle opening threshold to obtain a first determination result; When the first determination result is that the current vehicle speed data is less than the preset low-speed safety threshold and the current throttle opening data is less than the preset throttle opening threshold, the speed limiting and torque limiting command is generated, wherein the speed limiting and torque limiting command includes a preset maximum vehicle speed threshold and a preset maximum torque percentage threshold. The speed and torque limiting command is sent to the drive motor controller, so that the drive motor controller limits the vehicle's maximum speed to the preset maximum speed threshold and limits the output torque to the preset maximum torque percentage threshold according to the speed and torque limiting command.

[0012] In one embodiment, the step of sending a power-down command to the high-voltage power distribution system when the target vehicle locking level is the third level, so as to cause the high-voltage power distribution system to cut off the high-voltage power supply, includes: Receive the current gear position status and current parking status sent by the high-voltage power distribution system; Determine whether the current gear position is a preset neutral position or whether the current parking position is a preset parking active position to obtain a second determination result; When the second determination result is that the current gear state is the preset neutral state or the current parking state is the preset parking active state, the power-down command is generated, wherein the power-down command includes a current power-down command or a permanent power-down command; The power-off command is sent to the high-voltage power distribution system so that the high-voltage power distribution system performs a high-voltage power-off operation and prohibits the reconnection of high voltage when the power-off command is the permanent power-off command.

[0013] In one embodiment, the method further includes: When the first verification result indicates that the verification failed or the second verification result indicates that the comparison is inconsistent, it is determined to execute a preset safety restriction strategy, wherein the preset safety restriction strategy includes limiting the maximum speed of the vehicle to a preset speed limit threshold. Send a prompt command to the instrument system to cause the instrument system to display safety restriction information.

[0014] Furthermore, to achieve the above objectives, the present invention also proposes a remote vehicle control safety protection device, the device comprising: The instruction receiving module is used to receive remote control instructions and first verification data sent by the vehicle-mounted remote communication terminal, wherein the first verification data is generated by the vehicle-mounted remote communication terminal according to a preset algorithm and random numbers; The data verification module is used to verify the first verification data according to the preset algorithm and the random number to obtain a first verification result; The identity verification module is used to receive the identity identifier sent by the vehicle remote communication terminal when the vehicle is detected to be powered on, and compare the identity identifier with the pre-stored identity identifier to obtain a second verification result; The vehicle locking determination module is used to determine to execute the vehicle locking operation corresponding to the remote control command when the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent.

[0015] Furthermore, to achieve the above objectives, the present invention also proposes a remote vehicle control safety protection device, the device comprising: a memory, a processor, and a remote vehicle control safety protection program stored in the memory and executable on the processor, the remote vehicle control safety protection program being configured to implement the steps of the remote vehicle control safety protection method described above.

[0016] In addition, to achieve the above objectives, the present invention also proposes a storage medium storing a remote vehicle control security protection program, wherein when the remote vehicle control security protection program is executed by a processor, it implements the steps of the remote vehicle control security protection method described above.

[0017] In addition, to achieve the above objectives, this application also provides a computer program product, which includes a computer program that, when executed by a processor, implements the steps of the remote vehicle control security protection method described above.

[0018] One or more technical solutions proposed in this application have at least the following technical effects: This system employs a unique power-on verification method to progressively control the replacement of anti-tamper locks, preventing malicious breaches of restrictions on economic and financial vehicles. Specifically, it stores an identity identifier upon initial power-on and compares it subsequently to prevent the system from being breached by replacing the onboard remote communication terminal or the vehicle controller. A unique verification method is used to verify the software flashing platform, identifying and prohibiting the flashing of programs without locking functionality, thus preventing the system from being breached through program rewriting. Multiple, multi-system verifications prevent the system from being breached by replacing simple, inexpensive controllers, increasing processing costs. Verification and binding are performed not only on the vehicle controller and onboard remote communication terminal, but also on the locking configuration written into the battery management system, motor controller, and other three-electric systems. Replacing any of these systems will result in verification failure and vehicle locking. Multiple locking function settings are employed, independently configurable according to different user needs, broadening the applicability and operating conditions. These include three locking functions: Level 1 disables the air conditioning and entertainment system; Level 2 limits speed and torque; and Level 3 executes a power-off. These functions can be set independently or in combination, and are executed after verification by both parties to prevent false triggering, ensuring greater safety and reliability. Attached Figure Description

[0019] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0020] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, for those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 This is a flowchart illustrating an embodiment of the remote vehicle control security protection method of this application. Figure 2 This is a flowchart illustrating Embodiment 2 of the remote vehicle control safety protection method of this application. Figure 3 This is a schematic diagram of the module structure of the remote vehicle control safety protection device according to an embodiment of this application; Figure 4 This is a schematic diagram of the equipment structure of the hardware operating environment involved in the remote vehicle control security protection method in this application embodiment.

[0022] The purpose, features, and advantages of this application will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0023] It should be understood that the specific embodiments described herein are merely illustrative of the technical solutions of this application and are not intended to limit this application.

[0024] To better understand the technical solution of this application, a detailed description will be provided below in conjunction with the accompanying drawings and specific implementation methods.

[0025] It should be noted that the executing entity in this embodiment can be a computing service device with data processing, network communication, and program execution functions, such as a tablet computer, personal computer, or mobile phone, or an electronic device or remote vehicle safety protection device capable of performing the above functions. The following description uses a remote vehicle safety protection device as an example to illustrate this embodiment and the subsequent embodiments.

[0026] Based on this, the embodiments of this application provide a remote vehicle control security protection method, referring to... Figure 1 , Figure 1 This is a flowchart illustrating the first embodiment of the remote vehicle control safety protection method of this application.

[0027] In this embodiment, the remote vehicle control safety protection method includes steps S10 to S40: Step S10: Receive remote control commands and first verification data sent by the vehicle-mounted remote communication terminal, wherein the first verification data is generated by the vehicle-mounted remote communication terminal according to a preset algorithm and random numbers; In this implementation, the binding between the controller and the vehicle-mounted remote communication terminal is achieved through power-on verification. Upon initial power-on, the vehicle-mounted remote communication terminal sends an identity identifier to the controller for storage. Subsequent power-on verifications require verifying the identity identifier. If the controller or vehicle-mounted remote communication terminal is replaced, resulting in inconsistent identity identification, the vehicle will be locked, preventing the issue of the lock being broken by replacing the controller. The controller and the platform (i.e., the vehicle-mounted remote communication terminal) use the same calculation and verification method, generating a random number and obtaining a result value through a strategy formula. The platform sends a command along with the random number and result value to the controller. After successful verification, the controller also sends a feedback command status along with the random number and result value to the platform. The platform verifies this and then sends a feedback status back to the controller. Once both parties have verified successfully, the controller performs the locking operation, and the unlocking process is the same. Power-on verification and platform command verification are performed. If verification fails, three verifications are performed. If all verifications fail, vehicle locking restrictions are applied, following a default speed limit strategy, i.e., a preset speed limit threshold.

[0028] It should be noted that the vehicle-mounted remote communication terminal is a communication device installed in a vehicle, namely a Telematics Box, used to realize wireless data interaction between the vehicle and a remote platform. It has the function of receiving platform commands and forwarding commands to various controllers in the vehicle. Remote control commands are instructions issued by the remote platform to restrict vehicle operations, including specific operational requirements such as speed limiting, torque limiting, or power-off. The first verification data is verification data generated by the vehicle-mounted remote communication terminal based on a preset algorithm and random numbers, used to verify the legitimacy of the command source. The preset algorithm is a pre-agreed mathematical calculation method used to generate and verify the verification data, ensuring that both communicating parties use the same calculation rules. The random number is a randomly generated value used to generate different verification results for each verification, preventing the verification data from being intercepted and reused.

[0029] Step S20: Verify the first verification data according to the preset algorithm and random number to obtain the first verification result; Understandably, the vehicle controller uses the same preset algorithm and random numbers as the onboard remote communication terminal to independently calculate and verify the first verification data, thereby obtaining the first verification result. This verification process is used to confirm whether the remote control command comes from a legitimate onboard remote communication terminal, preventing the execution of illegal commands.

[0030] In one feasible implementation, step S20 includes steps A11 to A13: Step A11: Calculate the second verification data according to the preset algorithm and random numbers; Understandably, the vehicle controller calculates and generates the second verification data based on a preset algorithm and random numbers.

[0031] It should be noted that the second verification data is verification data independently calculated by the vehicle controller based on a preset algorithm and random numbers, and is used to compare with the first verification data.

[0032] Step A12: Compare the first verification data and the second verification data to obtain the first comparison result; Understandably, the received first verification data is compared with the second verification data generated locally to obtain the first comparison result.

[0033] It should be noted that the first comparison result is the conclusion after comparing the first verification data with the second verification data, and is used to indicate whether the two are consistent.

[0034] Step A13: When the first comparison result is consistent, generate the first verification result that has passed the verification, and send the first verification result and feedback data to the vehicle remote communication terminal to receive the confirmation command sent by the vehicle remote communication terminal and complete the two-way verification.

[0035] Understandably, when the first comparison result is consistent, a first verification result that has passed verification is generated, and the result and feedback data are sent to the vehicle-mounted remote communication terminal.

[0036] It should be noted that the feedback data is generated by the vehicle controller based on a preset algorithm and a new random number, and is used by the vehicle-mounted remote communication terminal to perform reverse verification of the vehicle controller.

[0037] Understandably, the vehicle controller completes the two-way verification process after receiving the confirmation command sent by the on-board remote communication terminal.

[0038] The beneficial effect of this step is that it ensures the legitimate identities of both parties in the communication through a two-way verification mechanism, preventing one party from forging an identity for illegal control.

[0039] It should be noted that the identification identifier is coded information used to uniquely identify the vehicle remote communication terminal or the vehicle controller. In this embodiment, the identifier is sent by the vehicle remote communication terminal to the vehicle controller for storage and binding when the vehicle is powered on for the first time.

[0040] Step S30: When the vehicle is detected to be powered on, the system receives the identity identifier sent by the vehicle remote communication terminal and compares it with the pre-stored identity identifier to obtain the second verification result. Understandably, when the vehicle controller detects a vehicle power-on signal, it receives an identification identifier sent by the onboard remote communication terminal and compares this identifier with a pre-stored identifier to obtain a second verification result. This process is used to detect whether the onboard remote communication terminal has been replaced.

[0041] It should be noted that the initial identity identifier is the identity code sent by the vehicle's onboard remote communication terminal when the vehicle is first powered on, and it is stored in the vehicle controller as a reference value for subsequent comparisons.

[0042] In one feasible implementation, step S30 includes steps A21 to A25: Step A21: Upon first detection of vehicle power-on, receive and store the initial identity identifier sent by the vehicle remote communication terminal as a pre-stored identity identifier; Understandably, when the vehicle is first detected to be powered on, the vehicle controller receives and stores the initial identity identifier sent by the on-board remote communication terminal as a pre-stored identity identifier.

[0043] It should be noted that the current identity identifier is an identity code sent in real time by the vehicle's onboard remote communication terminal when the vehicle is powered on subsequently.

[0044] Step A22: When the vehicle is detected to be repeatedly powered on, receive the current identity identifier sent by the vehicle remote communication terminal; Understandably, when the vehicle is detected to be repeatedly powered on, the current identity identifier sent by the vehicle-mounted remote communication terminal is received.

[0045] Step A23: Compare the current identity identifier with the pre-stored identity identifier to obtain the second comparison result; Understandably, the current identity identifier is compared with the pre-stored identity identifier to obtain the second comparison result.

[0046] It should be noted that the second comparison result is the conclusion after comparing the current identity with the pre-stored identity, and is used to indicate whether the two are consistent.

[0047] Step A24: If the second comparison result is consistent, generate a second verification result that is consistent with the comparison. Understandably, when the second alignment result is consistent, a second verification result that is consistent with the alignment is generated.

[0048] Step A25: If the second comparison result is inconsistent, generate a second verification result that is inconsistent with the comparison.

[0049] Understandably, when the second alignment result is inconsistent, a second verification result with inconsistent alignment is generated.

[0050] The beneficial effect of this step is that by binding and comparing identity identifiers, it prevents the vehicle locking restrictions from being bypassed by replacing the vehicle's remote communication terminal.

[0051] In this implementation, the controller and the platform's vehicle-mounted remote communication terminal are bound one-to-one. Replacing the vehicle-mounted remote communication terminal or controller will result in verification failure, leading to vehicle locking, speed limiting, or even prohibition of high-voltage access, thus resolving the issue of unlocking the vehicle by replacing the controller. To prevent vehicle locking from being bypassed by flashing the vehicle or replacing the old controller (i.e., without the program or with the old program), the system identifies whether the vehicle locking function is already enabled. When flashing the program, the host computer sends the software version and software information. The software must have the vehicle locking function configured before flashing is allowed; otherwise, flashing is not permitted, thus resolving the issue of unlocking the vehicle by flashing the program. To prevent vehicle locking from being bypassed by replacing cheaper components such as the vehicle-mounted remote communication terminal and vehicle control system, the vehicle locking configuration must be written and verified on the platform, including the vehicle-mounted remote communication terminal, vehicle controller, and the battery, motor, and motor control unit of the three electric components. Only when the verification passes will the vehicle locking not be triggered. Replacing a single controller will cause verification failure and vehicle locking, and replacing the three electric components is costly, thus resolving the issue of unlocking the vehicle by replacing a small controller.

[0052] Step S40: If the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent, determine to execute the vehicle locking operation corresponding to the remote control command.

[0053] Understandably, the vehicle controller comprehensively evaluates both the first and second verification results. Only if the first verification result indicates successful verification and the second verification result indicates a match will the controller execute the vehicle locking operation corresponding to the remote control command. This step ensures that the vehicle locking operation can only be executed under the dual conditions of a legitimate command source and unaltered hardware.

[0054] The beneficial effect of this step is that it improves the security of remote vehicle locking by using the logic and relationship of dual verification conditions, and prevents illegal operations caused by the bypassing of single verification.

[0055] It should be noted that the preset safety restriction policy is a default safety protection measure that is automatically triggered when verification fails, used to restrict the vehicle's operating status. It should also be noted that the preset speed limit threshold is a pre-set maximum speed limit.

[0056] In one possible implementation, after step S50, steps A31-A32 are also included: Step A31: When the first verification result indicates that the verification failed or the second verification result indicates that the comparison is inconsistent, determine to execute the preset safety restriction strategy, wherein the preset safety restriction strategy includes limiting the maximum speed of the vehicle to a preset speed limit threshold. Understandably, when the first verification result indicates that the verification failed or the second verification result indicates that the comparison is inconsistent, the vehicle controller will determine to execute the preset safety limit strategy, that is, limit the maximum speed of the vehicle to the preset speed limit threshold.

[0057] Step A32: Send a prompt command to the instrument system to make the instrument system display safety restriction information.

[0058] Understandably, a prompt command is sent to the instrument panel to display safety restriction information, informing the driver that the vehicle is in a safety restriction state.

[0059] The beneficial effect of this step is that it automatically triggers security protection when verification fails. Through speed limits and prompts, it restricts vehicle use and informs users to contact the platform for processing, thus preventing the vehicle from being used illegally.

[0060] In this specific implementation, the platform sends instructions to the vehicle-mounted remote communication terminal, which then directly sends a message request to the vehicle controller. After completing the verification, the vehicle controller executes the platform's required functional measures, including locking the vehicle and limiting the speed or powering it off.

[0061] Based on different methods, the platform's handling measures can be divided into three categories. The first category does not affect driving but only restricts the driving experience, including the inability to use air conditioning and entertainment features, primarily serving as a warning to the user. The second category limits speed, torque, or prohibits the use of power take-off (PTO) devices, affecting vehicle driving and PTO functionality. It requests speed and torque limits, restricting speed from zero to the maximum speed, and limiting torque from zero to a 100% percentage of maximum torque. It can also restrict energy recovery, preventing the generation of regenerative braking and auxiliary braking. PTOs can be powered off, stopping operation or limiting PTO power, aiming to warn the user of driving restrictions. The third category requests power-off, prohibiting user use. This is because steering, braking, or DC-DC converter charging the battery involves driving safety, preventing accidents caused by driving without steering or braking or with a depleted battery. The speed limit or power-off function also covers this restriction. These three categories are controlled separately, set according to the platform user's needs. For example, speed and torque limits may allow air conditioning or PTO operation, while high-voltage operation may be prohibited but air conditioning and PTO operation are permitted. This means the high-voltage circuit and main drive circuit are independent, and their power-on does not affect each other, allowing for individual settings or parallel restrictions. The power-off request can be made in two ways: either the current power-off will keep the vehicle in a high-voltage state and will not allow the vehicle to be recharged after the power-off, or the permanent power-off will keep the vehicle in a high-voltage state and will not allow the vehicle to be recharged after the power-off, and the user will be warned that the vehicle cannot be used.

[0062] The vehicle locking process must identify the vehicle's status and driving behavior to prevent direct power loss and potential accidents. For example, the first type of restriction can be executed directly without affecting driving. The second type of restriction requires the vehicle speed to drop below a preset low-speed safety limit, or immediate execution upon detecting neutral or the handbrake. The third type is more serious, requiring immediate locking and stopping. Upon triggering this type of locking, a prompt will be given, and the system will first identify if the driver's accelerator is not above 80% or the slope exceeds a certain limit to prevent insufficient power and getting stuck halfway up a slope. The scenario will then be limited to a calibrated opening. On flat roads or downhill slopes, the brakes can be used to avoid accidents. The system will then gradually reduce torque and maximum speed, and immediately execute power-off once the speed drops below the preset low-speed safety limit or neutral or the handbrake is detected.

[0063] After the vehicle locking policy is implemented, the instrument panel should first notify the vehicle user of the restrictions and remind them to pay attention to driving. Then, after a certain interval, the restrictions will begin according to the scenario calibration settings, and the user should be prompted to contact the platform or the dealer / OEM as soon as possible for processing.

[0064] This embodiment provides a remote vehicle control security protection method. Through a dual verification mechanism of power-on identity verification and platform command bidirectional algorithm verification, it achieves collaborative protection against hardware replacement and verification of command legitimacy. Upon the vehicle's first power-on, the vehicle controller stores the initial identity identifier sent by the onboard remote communication terminal, establishing a hardware binding relationship. Subsequent power-ons perform identity identifier comparison, effectively preventing the vehicle locking restriction from being bypassed by replacing the onboard remote communication terminal or the vehicle controller. Simultaneously, verification data is generated using a preset algorithm and random numbers for bidirectional verification, ensuring that remote control commands originate from a legitimate platform and preventing the execution of unauthorized commands. Remote vehicle locking is only performed when both verifications pass. Failure of either verification triggers a preset security restriction policy, limiting the vehicle's maximum speed to a preset speed limit threshold and sending a prompt to the instrument panel displaying the security restriction information. This both restricts vehicle use and prompts the user to contact the platform for assistance. This technical solution significantly improves the security protection capabilities of remote vehicle control through multiple verification mechanisms, avoiding the risk of bypassing a single verification and ensuring asset security in vehicle financial leasing and shared mobility scenarios.

[0065] Based on the first embodiment of this application, in the second embodiment of this application, the content that is the same as or similar to that in the first embodiment described above can be referred to the above description, and will not be repeated hereafter. Based on this, please refer to... Figure 2 Step S40 includes steps S401 to S404: Step S401: Determine the target vehicle locking level according to the remote control command, wherein the target vehicle locking level includes the first level, the second level, and the third level; It should be noted that the target vehicle locking level is a classification of the degree of vehicle restriction determined by remote control commands, including three levels: Level 1, Level 2, and Level 3, each corresponding to different restriction measures.

[0066] Understandably, the vehicle controller parses the content of the remote control command and determines the target vehicle locking level based on the level identifier in the command. This target vehicle locking level is used to indicate the specific type of restriction operation to be performed subsequently.

[0067] Step S402: When the target vehicle locking level is the first level, send a disable command to the air conditioning system and the entertainment system to make the air conditioning system and the entertainment system stop working; Understandably, when the target vehicle lock level is the first level, the vehicle controller sends a disable command to the air conditioning and entertainment systems. This disable command instructs the air conditioning to stop cooling or heating, and the entertainment system to stop audio playback or video display, thereby stopping the air conditioning and entertainment systems from working. This achieves a warning effect that does not affect vehicle operation but only reduces the driving experience.

[0068] Step S403: When the target vehicle locking level is the second level, a speed limiting and torque limiting command is sent to the drive motor controller so that the drive motor controller limits the vehicle's power output. Understandably, when the target vehicle locking level is the second level, the vehicle controller sends a speed and torque limiting command to the drive motor controller. This command instructs the drive motor controller to limit the vehicle's power output capability, thereby reducing the vehicle's driving performance and achieving the effect of warning and restricting driving.

[0069] In one feasible implementation, step S403 further includes steps A41 to A44: Step A41: Receive the current vehicle speed data and current throttle opening data sent by the drive motor controller; Understandably, the vehicle controller receives current vehicle speed data and current throttle opening data sent by the drive motor controller. The current vehicle speed data indicates the real-time driving speed of the vehicle, and the current throttle opening data indicates the depth of the driver pressing the accelerator pedal.

[0070] It should be noted that the preset low-speed safety threshold is a pre-set upper limit of vehicle speed, used to determine whether the vehicle is in a low-speed safety state.

[0071] It should be noted that the preset throttle opening threshold is a pre-set upper limit value of the throttle pedal depth ratio, used to determine whether the driver is in a low throttle opening state.

[0072] Step A42: Determine whether the current vehicle speed data is less than the preset low-speed safety threshold and whether the current throttle opening data is less than the preset throttle opening threshold, and obtain the first judgment result; Understandably, the vehicle controller determines whether the current vehicle speed data is less than a preset low-speed safety threshold and whether the current throttle opening data is less than a preset throttle opening threshold, thereby obtaining a first judgment result. This first judgment result is used to indicate whether the vehicle is in a low-speed, low-throttle safe operating condition.

[0073] Step A43: When the first judgment result is that the current vehicle speed data is less than the preset low speed safety threshold and the current throttle opening data is less than the preset throttle opening threshold, a speed limit and torque limit command is generated. The speed limit and torque limit command includes a preset maximum vehicle speed threshold and a preset maximum torque percentage threshold. Understandably, when the first judgment result is that the current vehicle speed data is less than the preset low-speed safety threshold and the current throttle opening data is less than the preset throttle opening threshold, a speed limit and torque limit command is generated.

[0074] It should be noted that the preset maximum speed threshold is a pre-set upper limit value for vehicle speed, used to limit the maximum speed of a vehicle.

[0075] It should be noted that the preset maximum torque percentage threshold is a pre-set upper limit value of the output torque ratio of the drive motor, expressed as a percentage, used to limit the maximum output torque of the drive motor.

[0076] Understandably, the speed and torque limiting command includes two parameters: a preset maximum vehicle speed threshold and a preset maximum torque percentage threshold. These parameters are used to instruct the drive motor controller to limit the vehicle's maximum speed to the preset maximum vehicle speed threshold and to limit the drive motor's output torque to the preset maximum torque percentage threshold.

[0077] Step A44: Send the speed and torque limiting command to the drive motor controller so that the drive motor controller limits the vehicle's maximum speed to a preset maximum speed threshold and the output torque to a preset maximum torque percentage threshold according to the speed and torque limiting command.

[0078] Understandably, the vehicle controller sends speed and torque limiting commands to the drive motor controller. The drive motor controller then limits the vehicle's maximum speed based on the preset maximum speed threshold in the command and limits the drive motor's output torque based on the preset maximum torque percentage threshold.

[0079] The beneficial effect of this step is that by implementing speed and torque limiting only under safe operating conditions, it avoids the safety risks caused by suddenly limiting power when the vehicle is traveling at high speed or with a large throttle opening, and achieves a smooth transition in the limiting effect.

[0080] Step S404: When the target vehicle locking level is level 3, a power-off command is sent to the high-voltage power distribution system to cause the high-voltage power distribution system to cut off the high-voltage power supply.

[0081] Understandably, when the target vehicle lock level is level three, the vehicle controller sends a power-off command to the high-voltage power distribution system. This power-off command instructs the high-voltage power distribution system to cut off the high-voltage power supply, thereby causing the vehicle to lose its high-voltage electric drive capability and achieving a strict restriction effect that prohibits users from using the vehicle.

[0082] In one feasible implementation, step S404 further includes steps A51 to A54: Step A51: Receive the current gear position status and current parking status sent by the high-voltage power distribution system; Understandably, the vehicle controller receives the current gear position and current parking status from the high-voltage power distribution system. The current gear position indicates the gear currently in which the transmission is in, and the current parking status indicates whether the parking brake is active.

[0083] It should be noted that the preset neutral state is a specific state in which the transmission gear is in neutral, and in this state the vehicle's power transmission system is disconnected from the drive wheels.

[0084] It should be noted that the preset parking activation state is a specific state in which the parking brake device has been activated and is effectively braking, and the vehicle is in a stationary and fixed state in this state.

[0085] Step A52: Determine whether the current gear status is the preset neutral status or whether the current parking status is the preset parking active status, and obtain the second determination result; Understandably, the vehicle controller determines whether the current gear position is the preset neutral position or whether the current parking position is the preset parking active position, thereby obtaining a second judgment result. This second judgment result is used to indicate whether the vehicle is in a stationary state where it can be safely powered off.

[0086] It should be noted that this power-down command is a temporary power-down command, instructing the high-voltage power distribution to perform a high-voltage power-down operation, and allowing the high-voltage to be restored after the power-down.

[0087] It should be noted that the permanent power-off command is a long-term power-off command that instructs the high-voltage power distribution to perform a high-voltage power-off operation and prohibits the re-energization of high voltage until the platform issues an unlocking command.

[0088] Step A53: When the second judgment result is that the current gear state is the preset neutral state or the current parking state is the preset parking active state, a power-down command is generated, wherein the power-down command includes the current power-down command or the permanent power-down command; Understandably, when the second judgment result is that the current gear status is the preset neutral state or the current parking status is the preset parking active state, a power-down command is generated. This power-down command includes one of two types: a current power-down command or a permanent power-down command, which is determined according to the power-down type identifier in the remote control command.

[0089] Step A54: Send a power-off command to the high-voltage power distribution system so that the high-voltage power distribution system can perform a high-voltage power-off operation and prohibit the re-energization of high voltage when the power-off command is a permanent power-off command.

[0090] Understandably, the vehicle controller sends a power-down command to the high-voltage power distribution system. The high-voltage power distribution system then performs a high-voltage power-down operation to cut off the high-voltage power supply and prohibits the reconnection of high voltage when the power-down command is a permanent power-down command.

[0091] The benefit of this step is that by performing the power-off operation only when the vehicle is stationary and safe, it avoids safety accidents caused by sudden power outages while the vehicle is moving or climbing, thus ensuring the safety of the driver and the vehicle.

[0092] This embodiment provides a remote vehicle control safety protection method. Through a three-level locking system, it achieves differentiated remote vehicle control strategies to meet the safety management needs of different scenarios. The first level disables the air conditioning and entertainment systems, warning the user without affecting vehicle operation; suitable for minor violations or reminder scenarios. The second level limits vehicle power output by limiting speed and torque; suitable for scenarios requiring restricted driving but allowing limited use. This restriction is only enforced when the vehicle speed is below a preset low-speed safety threshold and the throttle opening is below a preset throttle opening threshold, avoiding safety risks caused by sudden torque limiting at high speeds or with high throttle. The third level cuts off high-voltage power via a power-down command; suitable for serious violations or reversing scenarios. This power-down is only enforced when the gear is in a preset neutral state or the parking state is in a preset parking active state, avoiding safety accidents such as steering and braking failure caused by sudden power loss during driving. This technical solution, through hierarchical control and condition judgment, achieves both flexible remote control capabilities and ensures vehicle safety, improving the practicality and reliability of remote vehicle control.

[0093] It should be noted that the above examples are only for understanding this application and do not constitute a limitation on the remote vehicle control security protection method of this application. Any simple modifications based on this technical concept are within the protection scope of this application.

[0094] This application also provides a remote vehicle control safety protection device; please refer to... Figure 3 The remote vehicle control safety protection device includes: The instruction receiving module 10 is used to receive remote control instructions and first verification data sent by the vehicle-mounted remote communication terminal, wherein the first verification data is generated by the vehicle-mounted remote communication terminal according to a preset algorithm and random numbers; Data verification module 20 is used to verify the first verification data according to a preset algorithm and a random number, and obtain the first verification result; The identity verification module 30 is used to receive the identity identifier sent by the vehicle remote communication terminal when the vehicle is detected to be powered on, and compare the identity identifier with the pre-stored identity identifier to obtain a second verification result; The vehicle locking determination module 40 is used to determine the vehicle locking operation corresponding to the remote control command when the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent.

[0095] The remote vehicle control security device provided in this application, employing the remote vehicle control security method described in the above embodiments, can solve the technical problem of preventing the remote removal of vehicle locking restrictions by replacing hardware or using illegal commands. Compared with the prior art, the beneficial effects of the remote vehicle control security device provided in this application are the same as those of the remote vehicle control security method provided in the above embodiments, and other technical features in the remote vehicle control security device are the same as those disclosed in the methods of the above embodiments, and will not be repeated here.

[0096] In one embodiment, the data verification module 20 is further configured to calculate second verification data based on a preset algorithm and a random number; The first verification data and the second verification data are compared to obtain the first comparison result; When the first comparison result is consistent, a first verification result is generated and the first verification result and feedback data are sent to the vehicle remote communication terminal to receive the confirmation command sent by the vehicle remote communication terminal and complete the two-way verification.

[0097] In one embodiment, the identity verification module 30 is further configured to receive and store the initial identity identifier sent by the vehicle remote communication terminal as a pre-stored identity identifier when the vehicle is first detected to be powered on. When the vehicle is detected to be repeatedly powered on, the current identity identifier sent by the vehicle remote communication terminal is received. The current identity identifier is compared with the pre-stored identity identifier to obtain the second comparison result; If the second comparison result is consistent, a second verification result that is consistent with the comparison is generated; If the second comparison result is inconsistent, a second verification result with inconsistent comparison is generated.

[0098] In one embodiment, the vehicle locking determination module 40 is further configured to determine a target vehicle locking level according to a remote control command, wherein the target vehicle locking level includes a first level, a second level, and a third level; When the target vehicle locking level is Level 1, send a disable command to the air conditioning system and entertainment system to make them stop working; When the target vehicle locking level is the second level, a speed limiting and torque limiting command is sent to the drive motor controller so that the drive motor controller limits the vehicle's power output. When the target vehicle locking level is level three, a power-off command is sent to the high-voltage power distribution system to cause the high-voltage power distribution system to cut off the high-voltage power supply.

[0099] In one embodiment, the vehicle locking determination module 40 is also used to receive current vehicle speed data and current throttle opening data sent by the drive motor controller; Determine whether the current vehicle speed data is less than the preset low-speed safety threshold and whether the current throttle opening data is less than the preset throttle opening threshold to obtain the first judgment result; When the first judgment result is that the current vehicle speed data is less than the preset low speed safety threshold and the current throttle opening data is less than the preset throttle opening threshold, a speed limit and torque limit command is generated. The speed limit and torque limit command includes a preset maximum vehicle speed threshold and a preset maximum torque percentage threshold. The speed and torque limiting command is sent to the drive motor controller so that the drive motor controller can limit the vehicle's maximum speed to a preset maximum speed threshold and limit the output torque to a preset maximum torque percentage threshold according to the speed and torque limiting command.

[0100] In one embodiment, the vehicle locking determination module 40 is also used to receive the current gear status and the current parking status sent by the high-voltage power distribution system; Determine whether the current gear status is the preset neutral status or the current parking status is the preset parking active status, and obtain the second determination result; When the second judgment result is that the current gear status is the preset neutral status or the current parking status is the preset parking active status, a power-down command is generated, wherein the power-down command includes the current power-down command or the permanent power-down command; The power-off command is sent to the high-voltage power distribution system so that the high-voltage power distribution system can perform a high-voltage power-off operation and prohibit the re-energization of high voltage when the power-off command is a permanent power-off command.

[0101] In one embodiment, the vehicle locking determination module 40 is further configured to determine to execute a preset safety restriction strategy when the first verification result indicates that the verification failed or the second verification result indicates that the comparison is inconsistent, wherein the preset safety restriction strategy includes limiting the maximum vehicle speed to a preset speed limit threshold. Send a prompt command to the instrumentation system to display safety restriction information.

[0102] This application provides a remote vehicle control safety protection device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the remote vehicle control safety protection method in the above embodiment 1.

[0103] The following is for reference. Figure 4 The diagram illustrates a structure suitable for implementing the remote vehicle security protection device in the embodiments of this application. The remote vehicle security protection device in the embodiments of this application may include, but is not limited to, mobile terminals such as mobile phones, laptops, digital radio receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Description), PMPs (Portable Media Players), in-vehicle terminals (e.g., in-vehicle navigation terminals), and fixed terminals such as digital TVs and desktop computers. Figure 4 The remote vehicle control safety protection device shown is merely an example and should not impose any limitations on the functionality and scope of use of the embodiments of this application.

[0104] like Figure 4As shown, the remote vehicle safety protection device may include a processing unit 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes according to a program stored in ROM (Read Only Memory) 1002 or a program loaded from storage device 1003 into RAM (Random Access Memory) 1004. RAM 1004 also stores various programs and data required for the operation of the remote vehicle safety protection device. The processing unit 1001, ROM 1002, and RAM 1004 are interconnected via bus 1005. Input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to I / O interface 1006: input devices 1007 including, for example, touch screens, touchpads, keyboards, mice, image sensors, microphones, accelerometers, gyroscopes, etc.; output devices 1008 including, for example, liquid crystal displays (LCDs), speakers, vibrators, etc.; storage devices 1003 including, for example, magnetic tapes, hard disks, etc.; and communication devices 1009. Communication device 1009 allows the remote vehicle security device to communicate wirelessly or wiredly with other devices to exchange data. Although the figures show remote vehicle security devices with various systems, it should be understood that implementation or possession of all the systems shown is not required. More or fewer systems may be implemented alternatively.

[0105] Specifically, according to the embodiments disclosed in this application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, embodiments disclosed in this application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network via a communication device, or installed from storage device 1003, or installed from ROM 1002. When the computer program is executed by processing device 1001, it performs the functions defined in the methods of the embodiments disclosed in this application.

[0106] The remote vehicle security protection device provided in this application, employing the remote vehicle security protection method described in the above embodiments, can solve the technical problem of how to prevent the remote removal of vehicle locking restrictions by replacing hardware or using illegal commands. Compared with the prior art, the beneficial effects of the remote vehicle security protection device provided in this application are the same as those of the remote vehicle security protection method provided in the above embodiments, and other technical features of this remote vehicle security protection device are the same as those disclosed in the previous embodiment method, and will not be repeated here.

[0107] It should be understood that the various parts disclosed in this application can be implemented using hardware, software, firmware, or a combination thereof. In the description of the above embodiments, specific features, structures, materials, or characteristics can be combined in any suitable manner in one or more embodiments or examples.

[0108] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

[0109] This application provides a computer-readable storage medium having computer-readable program instructions (i.e., a computer program) stored thereon, which are used to execute the remote vehicle control security protection method in the above embodiments.

[0110] The computer-readable storage medium provided in this application may be, for example, a USB flash drive, but is not limited to, electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: electrical connections having one or more wires, portable computer disks, hard disks, RAM (Random Access Memory), ROM (Read Only Memory), EPROM (Erasable Programmable Read Only Memory or Flash Memory), optical fibers, CD-ROM (CD-Read Only Memory), optical storage devices, magnetic storage devices, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in conjunction with an instruction execution system, system, or device. The program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination thereof.

[0111] The aforementioned computer-readable storage medium may be included in the remote vehicle safety protection device; or it may exist independently and not be assembled into the remote vehicle safety protection device.

[0112] The aforementioned computer-readable storage medium carries one or more programs. When these programs are executed by the remote vehicle security protection device, the remote vehicle security protection device causes the device to: receive a remote control command and first verification data sent by an in-vehicle remote communication terminal, wherein the first verification data is generated by the in-vehicle remote communication terminal according to a preset algorithm and a random number; verify the first verification data according to the preset algorithm and the random number to obtain a first verification result; when the vehicle is detected to be powered on, receive an identity identifier sent by the in-vehicle remote communication terminal and compare the identity identifier with a pre-stored identity identifier to obtain a second verification result; and, if the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent, determine to execute the vehicle locking operation corresponding to the remote control command.

[0113] Computer program code for performing the operations of this application can be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, and C++, as well as conventional procedural programming languages ​​such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, as a standalone software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In cases involving remote computers, the remote computer can be connected to the user's computer via any type of network—including LAN (Local Area Network) or WAN (Wide Area Network)—or can be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0114] The flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of systems, methods, and computer program products according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code containing one or more executable instructions for implementing a specified logical function. It should also be noted that in some alternative implementations, the functions indicated in the blocks may occur in a different order than those indicated in the drawings. For example, two consecutively indicated blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or operation, or using a combination of dedicated hardware and computer instructions.

[0115] The modules described in the embodiments of this application can be implemented in software or hardware. The names of the modules do not necessarily limit the functionality of the unit itself.

[0116] The readable storage medium provided in this application is a computer-readable storage medium that stores computer-readable program instructions (i.e., a computer program) for executing the aforementioned remote vehicle control security protection method. This solves the technical problem of preventing remote bypassing of vehicle locking restrictions by replacing hardware or using illegal instructions. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as those of the remote vehicle control security protection method provided in the above embodiments, and will not be repeated here.

[0117] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the remote vehicle control security protection method described above.

[0118] The computer program product provided in this application solves the technical problem of how to prevent remote bypassing of vehicle locking restrictions by replacing hardware or using illegal commands. Compared with the prior art, the beneficial effects of the computer program product provided in this application are the same as those of the remote vehicle control security protection method provided in the above embodiments, and will not be repeated here.

[0119] The above description is only a part of the embodiments of this application and does not limit the patent scope of this application. All equivalent structural transformations made under the technical concept of this application and using the contents of the specification and drawings of this application, or direct / indirect applications in other related technical fields, are included in the patent protection scope of this application.

Claims

1. A remote vehicle control safety protection method, characterized in that, The method includes: The system receives remote control commands and first verification data sent by an in-vehicle remote communication terminal, wherein the first verification data is generated by the in-vehicle remote communication terminal according to a preset algorithm and random numbers; The first verification data is verified according to the preset algorithm and the random number to obtain a first verification result; When the vehicle is detected to be powered on, the system receives the identity identifier sent by the vehicle-mounted remote communication terminal and compares the identity identifier with the pre-stored identity identifier to obtain a second verification result. If the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent, then the vehicle locking operation corresponding to the remote control command is executed.

2. The method as described in claim 1, characterized in that, The step of verifying the first verification data according to the preset algorithm and the random number to obtain the first verification result includes: The second verification data is calculated based on the preset algorithm and the random number. The first verification data and the second verification data are compared to obtain the first comparison result; When the first comparison result is consistent, a first verification result is generated and the first verification result and feedback data are sent to the vehicle-mounted remote communication terminal to receive the confirmation command sent by the vehicle-mounted remote communication terminal and complete the two-way verification.

3. The method as described in claim 1, characterized in that, The step of receiving an identity identifier sent by the vehicle-mounted remote communication terminal when the vehicle is detected to be powered on, and comparing the identity identifier with a pre-stored identity identifier to obtain a second verification result includes: Upon first detection of vehicle power-on, the system receives and stores the initial identity identifier sent by the vehicle-mounted remote communication terminal as a pre-stored identity identifier. When the vehicle is detected to be repeatedly powered on, the current identity identifier sent by the vehicle-mounted remote communication terminal is received; The current identity identifier is compared with the pre-stored identity identifier to obtain a second comparison result; When the second comparison result is consistent, a second verification result that is consistent with the comparison is generated; If the second comparison result is inconsistent, a second verification result with inconsistent comparison is generated.

4. The method as described in claim 1, characterized in that, The step of determining to execute the vehicle locking operation corresponding to the remote control command when the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent includes: The target vehicle locking level is determined according to the remote control command, wherein the target vehicle locking level includes a first level, a second level, and a third level; When the target vehicle locking level is the first level, a disable command is sent to the air conditioning system and the entertainment system to make the air conditioning system and the entertainment system stop working. When the target vehicle locking level is the second level, a speed limiting and torque limiting command is sent to the drive motor controller so that the drive motor controller limits the vehicle's power output. When the target vehicle locking level is the third level, a power-off command is sent to the high-voltage power distribution system to cause the high-voltage power distribution system to cut off the high-voltage power supply.

5. The method as described in claim 4, characterized in that, The step of sending a speed limiting and torque limiting command to the drive motor controller when the target vehicle locking level is the second level, so that the drive motor controller limits the vehicle's power output, includes: Receive current vehicle speed data and current throttle opening data sent by the drive motor controller; Determine whether the current vehicle speed data is less than a preset low-speed safety threshold and whether the current throttle opening data is less than a preset throttle opening threshold to obtain a first determination result; When the first determination result is that the current vehicle speed data is less than the preset low-speed safety threshold and the current throttle opening data is less than the preset throttle opening threshold, the speed limiting and torque limiting command is generated, wherein the speed limiting and torque limiting command includes a preset maximum vehicle speed threshold and a preset maximum torque percentage threshold. The speed and torque limiting command is sent to the drive motor controller, so that the drive motor controller limits the vehicle's maximum speed to the preset maximum speed threshold and limits the output torque to the preset maximum torque percentage threshold according to the speed and torque limiting command.

6. The method as described in claim 4, characterized in that, The step of sending a power-off command to the high-voltage power distribution system when the target vehicle locking level is the third level, so that the high-voltage power distribution system cuts off the high-voltage power supply, includes: Receive the current gear position status and current parking status sent by the high-voltage power distribution system; Determine whether the current gear position is a preset neutral position or whether the current parking position is a preset parking active position to obtain a second determination result; When the second determination result is that the current gear state is the preset neutral state or the current parking state is the preset parking active state, the power-down command is generated, wherein the power-down command includes a current power-down command or a permanent power-down command; The power-off command is sent to the high-voltage power distribution system so that the high-voltage power distribution system performs a high-voltage power-off operation and prohibits the reconnection of high voltage when the power-off command is the permanent power-off command.

7. The method as described in claim 1, characterized in that, The method further includes: When the first verification result indicates that the verification failed or the second verification result indicates that the comparison is inconsistent, it is determined to execute a preset safety restriction strategy, wherein the preset safety restriction strategy includes limiting the maximum speed of the vehicle to a preset speed limit threshold. Send a prompt command to the instrument system to cause the instrument system to display safety restriction information.

8. A remote vehicle control safety protection device, characterized in that, The device includes: The instruction receiving module is used to receive remote control instructions and first verification data sent by the vehicle-mounted remote communication terminal, wherein the first verification data is generated by the vehicle-mounted remote communication terminal according to a preset algorithm and random numbers; The data verification module is used to verify the first verification data according to the preset algorithm and the random number to obtain a first verification result; The identity verification module is used to receive the identity identifier sent by the vehicle remote communication terminal when the vehicle is detected to be powered on, and compare the identity identifier with the pre-stored identity identifier to obtain a second verification result; The vehicle locking determination module is used to determine to execute the vehicle locking operation corresponding to the remote control command when the first verification result indicates that the verification is successful and the second verification result indicates that the comparison is consistent.

9. A remote vehicle control safety protection device, characterized in that, The device includes: a memory, a processor, and a remote vehicle security protection program stored in the memory and executable on the processor, the remote vehicle security protection program being configured to implement the steps of the remote vehicle security protection method as described in any one of claims 1 to 7.

10. A storage medium, characterized in that, The storage medium stores a remote vehicle control security protection program, which, when executed by a processor, implements the steps of the remote vehicle control security protection method as described in any one of claims 1 to 7.

Images