Vehicle power on / off control method, device, processor and electronic device

Abstract

The application discloses a vehicle power-on and power-off control method and device, a processor and an electronic device. The method comprises the following steps: in response to the vehicle receiving a request instruction from the cloud, verifying the request instruction to obtain a first verification result, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation; in response to the first verification result indicating that the request instruction passes the verification, determining a target communication channel from a plurality of communication channels between the vehicle and the cloud; in response to receiving a control instruction from the cloud through the target communication channel, verifying the control instruction to obtain a second verification result; and after the second verification result indicates that the control instruction passes the verification, in response to receiving a wake-up instruction from the cloud, controlling the vehicle to perform the power-on operation or the power-off operation. The application solves the technical problem of low safety of vehicle power-on and power-off control.

Description

Technical Field

[0001] This application relates to the field of vehicles, and more specifically, to a method, apparatus, processor, and electronic device for controlling the power on and off of a vehicle. Background Technology

[0002] Currently, the industry has proposed various methods for remotely controlling vehicle power on / off. For example, a back-end operating platform receives a power-on or power-off command. The platform then establishes a connection with an in-vehicle telematics box (T-Box) via a network. The T-Box reports basic vehicle information, such as whether the vehicle is currently powered on or off, and its speed. Subsequently, the platform directly determines the validity of the power-on or power-off command based on this information, and if so, generates and issues the command.

[0003] However, such power-on / off control methods have defects such as unintelligent judgment and unreliable communication, resulting in technical problems such as low safety of vehicle power-on / off control.

[0004] There is currently no effective solution to the technical problem of low safety in the power-on and power-off control of the aforementioned vehicles. Summary of the Invention

[0005] This application provides a method, apparatus, processor, and electronic device for controlling the power on / off of a vehicle, in order to at least solve the technical problem of low safety in the power on / off control of a vehicle.

[0006] According to one aspect of the embodiments of this application, a method for controlling the power-on / off operation of a vehicle is provided. The method includes: in response to the vehicle receiving a request instruction from the cloud, verifying the request instruction to obtain a first verification result, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation; in response to the first verification result indicating that the request instruction has been verified, determining a target communication channel from multiple communication channels between the vehicle and the cloud, wherein the response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels; in response to receiving a control instruction from the cloud through the target communication channel, verifying the control instruction to obtain a second verification result, wherein the control instruction is generated based on the vehicle's state information and environmental information, and the control instruction is a power-on instruction or a power-off instruction for the vehicle, the state information is used to indicate the vehicle's operating state in the operating environment, and the environmental information is used to indicate the state of the operating environment; after the second verification result indicates that the control instruction has been verified, in response to receiving a wake-up instruction from the cloud, controlling the vehicle to perform a power-on operation or a power-off operation.

[0007] Optionally, in response to the first verification result indicating that the request instruction has been verified, the target communication channel is determined from multiple communication channels between the vehicle and the cloud, including: in response to the first verification result indicating that the request instruction has been verified, determining the response priority of the primary communication channel among the multiple communication channels; and determining the target communication channel from the multiple communication channels based on the response priority of the primary communication channel.

[0008] Optionally, based on the response priority of the main communication channel, a target communication channel is determined from multiple communication channels, including: determining the main communication channel as the target communication channel from multiple communication channels if the response priority of the main communication channel is greater than or equal to a priority threshold; and changing the target communication channel from the main communication channel to the communication channel corresponding to the target response priority from multiple communication channels if the response priority of the main communication channel is less than the priority threshold, wherein the target response priority is greater than or equal to the priority threshold.

[0009] Optionally, in response to receiving a control command from the cloud via the target communication channel, verifying the control command to obtain a second verification result includes: in response to receiving the control command via the target communication channel, generating reference content by combining the content indicated by the request command and the vehicle's identification information, wherein the identification information is used to identify the vehicle; comparing the content indicated by the control command and the reference content to obtain a comparison result; and verifying the control command based on the comparison result to obtain a second verification result.

[0010] Optionally, based on the comparison result, the control command is verified to obtain a second verification result, including: in response to the comparison result indicating that the content indicated by the control command is the same as the reference content, the control command is verified to obtain a second verification result indicating that the control command verification is successful; in response to the comparison result indicating that the content indicated by the control command is different from the reference content, the control command is verified to obtain a second verification result indicating that the control command verification fails.

[0011] Optionally, after the second verification result indicates that the control command has been verified, in response to receiving a wake-up command from the cloud, the vehicle is controlled to perform a power-on or power-off operation, including: after the second verification result indicates that the control command has been verified, in response to receiving the wake-up command, the control command is converted to obtain a conversion message; in response to the vehicle's monitoring device detecting the conversion message, the vehicle's relay is used to control the vehicle to perform a power-on or power-off operation.

[0012] According to one aspect of the embodiments of this application, a vehicle power-on / off control device is provided. The device may include: a first verification unit, configured to verify a request instruction received by the vehicle from the cloud and obtain a first verification result, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation; a determining unit, configured to determine a target communication channel from multiple communication channels between the vehicle and the cloud in response to the first verification result indicating that the request instruction has been verified, wherein the response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels; a second verification unit, configured to verify a control instruction received from the cloud through the target communication channel and obtain a second verification result, wherein the control instruction is generated based on the vehicle's status information and environmental information, and the control instruction is a power-on instruction or a power-off instruction for the vehicle, the status information being used to indicate the vehicle's operating status in the operating environment, and the environmental information being used to indicate the status of the operating environment; and a control unit, configured to control the vehicle to perform a power-on operation or a power-off operation in response to receiving a wake-up instruction from the cloud after the second verification result indicates that the control instruction has been verified.

[0013] According to another aspect of the embodiments of this application, a method for controlling the power-on / off of a vehicle is also provided. The method includes: sending a request instruction to the vehicle, wherein the request instruction requests the vehicle to perform a power-on operation or a power-off operation; sending a control instruction generated based on the vehicle's state information and environmental information to the vehicle through a target communication channel, wherein the target communication channel is determined from multiple communication channels between the vehicle and the cloud in response to a first verification result indicating that the request instruction has been verified, and the response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels; the state information indicates the vehicle's operating state in the operating environment, the environmental information indicates the state of the operating environment, and the control instruction is a power-on instruction or a power-off instruction for the vehicle; and generating a wake-up instruction after a second verification result indicating that the control instruction has been verified, wherein the wake-up instruction wakes the vehicle to perform the power-on or power-off operation.

[0014] According to another aspect of the embodiments of this application, a vehicle power-on / off control device is provided. The device may include: a sending unit, configured to send a request instruction to the vehicle, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation; a first generating unit, configured to send a control instruction generated based on the vehicle's status information and environmental information to the vehicle through a target communication channel, wherein the target communication channel is determined from multiple communication channels between the vehicle and the cloud in response to a first verification result obtained by verifying the request instruction, indicating that the request instruction has been verified successfully, and the response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels, the status information is used to indicate the operating status of the vehicle in the operating environment, the environmental information is used to indicate the status of the operating environment, and the control instruction is a power-on instruction or a power-off instruction for the vehicle; and a second generating unit, configured to generate a wake-up instruction after a second verification result obtained by verifying the control instruction indicates that the control instruction has been verified successfully, wherein the wake-up instruction is used to wake up the vehicle to perform a power-on operation or a power-off operation.

[0015] According to another aspect of the embodiments of this application, a processor is also provided. The processor is used to run a program, wherein the program is executed by the processor to perform the methods described in the embodiments of this application.

[0016] According to another aspect of the embodiments of this application, an electronic device is also provided, including: a memory storing an executable program; and a processor for running the program, wherein the program executes the methods in the embodiments of this application when it runs.

[0017] According to another aspect of the embodiments of this application, a computer-readable storage medium is also provided. This computer-readable storage medium includes a stored program, wherein, when the program is executed, it controls the device where the computer-readable storage medium is located to perform the methods of the embodiments of this application.

[0018] According to another aspect of the embodiments of this application, a computer program product is also provided, the computer program product including a computer program, wherein the computer program implements the method in the embodiments of this application when executed by a processor.

[0019] According to another aspect of the embodiments of this application, a computer program product is also provided, including a non-volatile computer-readable storage medium for storing a computer program, which, when executed by a processor, implements the method in the embodiments of this application.

[0020] According to another aspect of the embodiments of this application, a computer program is also provided, which, when executed by a processor, implements the methods of the embodiments of this application.

[0021] In this embodiment, in response to the vehicle receiving a request command from the cloud, the request command is verified to obtain a first verification result. In response to the first verification result indicating that the request command has passed verification, a target communication channel is determined from multiple communication channels between the vehicle and the cloud. In response to receiving a control command from the cloud through the target communication channel, the control command is verified to obtain a second verification result. After the second verification result indicates that the control command has passed verification, in response to receiving a wake-up command from the cloud, the vehicle is controlled to perform a power-on or power-off operation. Because this embodiment determines the target communication channel from multiple communication channels between the vehicle and the cloud when the request command has passed verification, and after the control command received through the target communication channel has passed verification, if a wake-up command is received from the cloud, the vehicle is controlled to perform a power-on or power-off operation. Since the control command is received through the target communication channel, and the response priority of the target communication channel is higher than the response priority of other communication channels among the multiple communication channels, the reliability of the control command is guaranteed, thus solving the technical problem of low security in vehicle power-on / off control and achieving the technical effect of improving the security of vehicle power-on / off control. Attached Figure Description

[0022] The accompanying drawings, which are included to provide a further understanding of this application and form part of this application, illustrate exemplary embodiments and are used to explain this application, but do not constitute an undue limitation of this application. In the drawings:

[0023] Figure 1 This is a flowchart of a vehicle power-on / off control method according to an embodiment of this application;

[0024] Figure 2 This is a flowchart of another vehicle power-on / off control method according to an embodiment of this application;

[0025] Figure 3 This is a schematic diagram of a vehicle remote power-on / off control system with security verification according to an embodiment of this application;

[0026] Figure 4 This is a flowchart of a remote power-on / off control method for a vehicle with security verification according to an embodiment of this application;

[0027] Figure 5 This is a schematic diagram of a vehicle power-on / off control device according to an embodiment of this application;

[0028] Figure 6 This is a schematic diagram of another vehicle power-on / off control device according to an embodiment of this application;

[0029] Figure 7This is a schematic diagram of an electronic device according to an embodiment of this application. Detailed Implementation

[0030] To enable those skilled in the art to better understand the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present application, and not all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present application.

[0031] It should be noted that the terms "first," "second," etc., in the specification, claims, and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0032] According to an embodiment of this application, an embodiment of a vehicle power-on / off control method is provided. It should be noted that the steps shown in the flowchart in the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions. Furthermore, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be executed in a different order than that shown here.

[0033] It should be noted that all information (including but not limited to status information and environmental information) and data involved in this application are information and data authorized by the user or fully authorized by all parties. Furthermore, the collection, use and processing of such data must comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation portals are provided for users to choose to authorize or refuse.

[0034] Figure 1 This is a flowchart of a vehicle power-on / off control method according to an embodiment of this application, such as... Figure 2 As shown, the method may include the following steps.

[0035] Step S101: In response to the vehicle receiving a request instruction from the cloud, the request instruction is verified to obtain the first verification result.

[0036] In the technical solution provided by step S101 of this application, the request instruction can be used to request the vehicle to perform a power-on or power-off operation. For example, the request instruction may include: a digital certificate in the cloud and a verification code generated by the cloud using a private key. The request instruction may also be referred to as a connection request in the following text.

[0037] In this embodiment, the vehicle can be an intelligent connected vehicle with remote power-on / off functionality. For example, the vehicle can receive any command from the cloud via a T-Box.

[0038] In this embodiment, the aforementioned cloud can be used for remote management, operation, or dispatching of vehicles. For example, the cloud can be a cloud platform, and the cloud platform can be deployed on a cloud server.

[0039] In this embodiment, in response to the vehicle receiving a request instruction from the cloud, the request instruction is verified to obtain a first verification result. Optionally, this embodiment performs real-time detection on whether the vehicle has received the request instruction through the T-Box. If a request instruction is detected to have been received through the T-Box, the request instruction is authenticated to obtain a first verification result, thereby achieving the purpose of determining whether the request instruction has been successfully verified.

[0040] Optionally, the digital certificate and verification code are extracted from the received request instruction. The verification code is then verified using the cloud public key stored in the vehicle's security chip; that is, the verification code is decrypted and compared using the cloud public key. If the decrypted verification code matches the digital certificate, the first verification result indicates that the request instruction has been verified successfully. If the decrypted verification code does not match the digital certificate, the first verification result indicates that the request instruction has failed to be verified, and the system continues to monitor in real time whether the vehicle has received the next request instruction via the T-Box.

[0041] Step S102: In response to the first verification result indicating that the request command has been verified, the target communication channel is determined from the multiple communication channels between the vehicle and the cloud.

[0042] In the technical solution provided by step S202 of this application, since the communication indicators of the target communication channel are superior to those of the other communication channels among the multiple communication channels, the response priority of the target communication channel is higher than that of the other communication channels among the multiple communication channels. For example, the communication indicators can be reflected by at least one of the following communication quality parameters: signal strength, network latency, and packet loss rate.

[0043] In this embodiment, the aforementioned multiple communication channels can be used to transmit control commands from the cloud. For example, the aforementioned multiple communication channels may include the following communication lines: 4th-Generation Mobile Technology (4G) lines and 5th-Generation Mobile Technology (5G) lines. If the multiple communication channels include: 4G lines, 5G lines, and wireless lines, and the signal strength of the 5G line is higher than the signal strength of the 4G line and the wireless line respectively, and the network latency and packet loss rate of the 5G line are lower than the network latency and packet loss rate of the 4G line and the wireless line respectively, then the target communication channel is the 5G line, and the response priority of the 5G line is higher than the response priority of the 4G line and the wireless line respectively. This is only an example and is not a specific limitation.

[0044] In this embodiment, after obtaining the first verification result, in response to the first verification result indicating that the request command has been verified, a target communication channel is determined from multiple communication channels between the vehicle and the cloud. Optionally, in this embodiment, if the first verification result indicates that the request command has been verified, the response priority of each of the multiple communication channels is determined, resulting in multiple response priorities. Based on the above multiple response priorities, the target communication channel can be selected from the multiple communication channels, thereby achieving the purpose of determining the target communication channel from multiple communication channels between the vehicle and the cloud.

[0045] Optionally, the response priorities of each of the multiple communication channels can be determined separately, resulting in multiple response priorities. For example, if the first verification result indicates that the request command has been verified successfully, the communication metrics of each of the multiple communication channels in the communication dimension can be determined separately, resulting in multiple communication metrics. Based on the multiple communication metrics, the response priorities of each of the multiple communication channels can be determined separately, resulting in multiple response priorities.

[0046] Step S103: In response to receiving a control command from the cloud through the target communication channel, the control command is verified to obtain a second verification result.

[0047] In the technical solution provided by step S103 of this application, the control command can be generated based on the vehicle's status information and environmental information, and the control command can be a power-on command or a power-off command for the vehicle.

[0048] In this embodiment, the aforementioned state information can be used to represent the vehicle's operating state in the operating environment. This state information can include: the vehicle's basic state, critical system state, safety chain state, and external connection state. For example, the basic state can include: whether the current power is ON, ACC, or OFF, and the vehicle speed; the critical system state can include: whether important controllers such as the vehicle controller, battery management system, and motor controller are communicating normally, and whether these controllers have reported any serious internal faults of level 3 or higher; the safety chain state can include: whether the vehicle's powertrain, steering system, braking system, and other safety-related subsystems are in a "ready" or "fault-free" state; and the external connection state can include: whether the vehicle's charging gun is still plugged into the charging pile, and whether the engine hood is tightly closed.

[0049] In this embodiment, the aforementioned environmental information can be used to represent the state of the operating environment. This environmental information may include: the relationship between the operating environment and risk areas, and whether the vehicle's position maintains a safe distance from surrounding dynamic obstacles. For example, risk areas may include: intersections, zebra crossings, pedestrian crossings, sharp bends, steep slopes, tunnel entrances / exits, blind spots for large vehicles (e.g., the sides and rear of trucks and buses), construction areas, flooded road sections, fire or explosion risk areas, railway crossings, airport runways, port operation areas, and other special areas. These risk areas may also be referred to as high-risk areas in the following text.

[0050] In this embodiment, after determining the target communication channel, in response to receiving a control command from the cloud through the target communication channel, the control command is verified to obtain a second verification result. Optionally, this embodiment performs real-time detection on whether the vehicle receives a control command from the cloud through the target communication channel. If it is detected that the vehicle has received a control command through the target communication channel, the content of the control command is verified to obtain a second verification result, thereby achieving the purpose of determining whether the control command has been verified successfully.

[0051] Optionally, if it is detected that the vehicle has received a control command through the target communication channel, the content indicated by the control command is compared. If the content indicated by the control command is the same as the content indicated by the request command and the vehicle's identification information, the second verification result obtained from verifying the control command indicates that the control command verification has passed. If the content indicated by the control command is different from the content indicated by the request command and the vehicle's identification information, the second verification result obtained from verifying the control command indicates that the control command verification has failed.

[0052] Step S104: After the second verification result indicates that the control command has been verified, in response to receiving a wake-up command from the cloud, the vehicle is controlled to perform a power-on or power-off operation.

[0053] In the technical solution provided by step S104 of this application, the wake-up command can be used to wake up the vehicle to perform a power-on or power-off operation. For example, the wake-up command can be a function wake-up signal received through a target communication channel.

[0054] In this embodiment, after the second verification result indicates that the control command verification is successful, the vehicle is controlled to perform a power-on or power-off operation in response to receiving a wake-up command from the cloud. Optionally, if the control command verification is successful, the vehicle's reception of a wake-up command from the cloud via the target communication channel is detected in real time. If a wake-up command received by the vehicle via the target communication channel is detected, the vehicle is controlled to perform a power-on or power-off operation according to the type of wake-up command, thereby achieving the purpose of controlling the vehicle to perform a power-on or power-off operation in response to a wake-up command.

[0055] Optionally, depending on the type of wake-up command, the vehicle may be controlled to perform a power-on or power-off operation. For example, if the type of the wake-up command is a wake-up power-on command, the vehicle may be controlled to perform a power-on operation in response to the power-on command; if the type of the wake-up command is a wake-up power-off command, the vehicle may be controlled to perform a power-off operation in response to the power-off command.

[0056] In steps S101 to S104 of this application, in response to the vehicle receiving a request instruction from the cloud, the request instruction is verified to obtain a first verification result; in response to the first verification result indicating that the request instruction has been verified, a target communication channel is determined from multiple communication channels between the vehicle and the cloud; in response to receiving a control instruction from the cloud through the target communication channel, the control instruction is verified to obtain a second verification result; after the second verification result indicates that the control instruction has been verified, in response to receiving a wake-up instruction from the cloud, the vehicle is controlled to perform a power-on operation or a power-off operation. In this embodiment, when the request command is verified, a target communication channel is determined from multiple communication channels between the vehicle and the cloud. After the control command received through the target communication channel is verified, if a wake-up command is received from the cloud, the vehicle is controlled to perform a power-on or power-off operation. Since the control command is received through the target communication channel, and the response priority of the target communication channel is higher than the response priority of other communication channels among the multiple communication channels, the reliability of the control command can be guaranteed. This solves the technical problem of low security in vehicle power-on / off control and achieves the technical effect of improving the security of vehicle power-on / off control.

[0057] The method described in this embodiment will be further described below.

[0058] As an optional embodiment, step S102, in response to the first verification result indicating that the request instruction has been verified, determines the target communication channel from multiple communication channels between the vehicle and the cloud, including: in response to the first verification result indicating that the request instruction has been verified, determining the response priority of the main communication channel among the multiple communication channels; and determining the target communication channel from the multiple communication channels based on the response priority of the main communication channel.

[0059] In this embodiment, the main communication channel can be used to maintain data transmission between the vehicle and the cloud. For example, the main communication channel can be any of the following: a 4G line, a 5G line, and a wireless line. This is only an example and is not a specific limitation.

[0060] In this embodiment, after obtaining the first verification result, in response to the first verification result indicating that the request command has been verified, the response priority of the main communication channel among multiple communication channels is determined.

[0061] Optionally, in this embodiment, if the first verification result indicates that the request command has passed verification, communication metrics for each of the multiple communication channels in the communication dimension are determined, resulting in multiple communication metrics. From these multiple communication metrics, the communication metrics for the main communication channel in the communication dimension are determined. Based on the communication metrics for the main communication channel in the communication dimension, the response priority of the main communication channel can be determined.

[0062] For example, if the signal strength of the main communication channel is level 3, the network latency of the main communication channel is 0.001 seconds (s), and the packet loss rate of the main communication channel is 0.001%, then the response priority of the main communication channel is level 3, meaning that the response priority of the main communication channel is the highest among the response priorities of multiple communication channels. If the signal strength of the main communication channel is level 2, the network latency of the main communication channel is 5 seconds, and the packet loss rate of the main communication channel is 5%, then the response priority of the main communication channel is level 2. This is only an example and not a specific limitation.

[0063] In this embodiment, after the first verification result indicates that the request command has been verified and the response priority of the main communication channel among multiple communication channels is determined, the target communication channel can be selected from multiple communication channels by combining the response priority of the main communication channel and the priority threshold. This achieves the purpose of determining the target communication channel from multiple communication channels between the vehicle and the cloud, thereby realizing the technical effect of improving the reliability of the target communication channel.

[0064] The following section further describes the steps of determining the target communication channel from multiple communication channels based on the response priority of the main communication channel in this embodiment.

[0065] As an optional implementation, a target communication channel is determined from multiple communication channels based on the response priority of the main communication channel, including: determining the main communication channel as the target communication channel from multiple communication channels in response to a response priority of the main communication channel being greater than or equal to a priority threshold; and changing the target communication channel from the main communication channel to the communication channel corresponding to the target response priority from multiple communication channels in response to a response priority of the main communication channel being less than the priority threshold.

[0066] In this embodiment, the aforementioned priority threshold can be used to determine whether the primary communication channel should be identified as the target communication channel. For example, the aforementioned priority threshold can be level 3.

[0067] In this embodiment, the target response priority can be the response priority of a communication channel other than the main communication channel whose response priority is greater than or equal to a priority threshold. That is, the target response priority is greater than or equal to the priority threshold.

[0068] In this embodiment, after the first verification result indicates that the request command has been verified and the response priority of the main communication channel among multiple communication channels is determined, the response priority of the main communication channel is compared with a priority threshold. If the response priority of the main communication channel is greater than or equal to the priority threshold, the main communication channel is selected as the target communication channel from among the multiple communication channels. This achieves the purpose of determining the main communication channel as the target communication channel from among multiple communication channels between the vehicle and the cloud, thereby realizing the technical effect of improving the reliability of the target communication channel.

[0069] For example, if the primary communication channel is a wireless line, the signal strength, network latency, and packet loss rate of the wireless line are determined. If the signal strength of the wireless line is higher than that of the 4G and 5G lines respectively, and the network latency and packet loss rate of the wireless line are lower than those of the 4G and 5G lines respectively, then the response priority of the primary communication channel is level 3. The response priority of the primary communication channel at level 3 is compared with a priority threshold. If the response priority of the primary communication channel at level 3 equals the priority threshold, then the primary communication channel is selected as the target communication channel from among multiple communication channels; that is, the wireless line is selected as the target communication channel.

[0070] In this embodiment, after the first verification result indicates that the request command has been verified and the response priority of the main communication channel among multiple communication channels is determined, the response priority of the main communication channel is compared with a priority threshold. If the response priority of the main communication channel is less than the priority threshold, the target communication channel is changed from the main communication channel to the communication channel corresponding to the target response priority. This achieves the purpose of changing the target communication channel from multiple communication channels between the vehicle and the cloud, thereby improving the reliability of the target communication channel.

[0071] For example, if the primary communication channel is a wireless line, the signal strength, network latency, and packet loss rate of the wireless line are determined. If the signal strength of the wireless line is lower than that of the 4G and 5G lines respectively, and the network latency and packet loss rate of the wireless line are higher than those of the 4G and 5G lines respectively, then the response priority of the primary communication channel is level 1. The response priority of the level 1 primary communication channel is compared with a priority threshold. If the response priority of the level 1 primary communication channel is lower than the priority threshold, then from among the multiple communication channels, the target communication channel is changed from the primary communication channel to the communication channel corresponding to the target response priority of level 3, that is, the target communication channel is changed from the wireless line to the 5G line corresponding to the target response priority of level 3.

[0072] The following section further describes the steps of the above-described embodiment of responding to a control command received from the cloud through a target communication channel, verifying the control command, and obtaining a second verification result.

[0073] As an optional embodiment, step S103, in response to receiving a control command from the cloud through the target communication channel, verifies the control command to obtain a second verification result, including: in response to receiving the control command through the target communication channel, generating reference content by combining the content indicated by the request command and the vehicle's identification information; comparing the content indicated by the control command and the reference content to obtain a comparison result; and verifying the control command based on the comparison result to obtain a second verification result.

[0074] In this embodiment, the content indicated by the above request instruction may include: encrypted content and the vehicle's serial number.

[0075] In this embodiment, the identification information can be used to identify a vehicle. For example, the identification information can be a Vehicle Identifier Number (VIN).

[0076] In this embodiment, after determining the target communication channel, in response to receiving a control command through the target communication channel, the content indicated by the request command and the vehicle's identification information are generated as reference content. Then, the content indicated by the control command and the reference content are compared to obtain the comparison result.

[0077] Optionally, this embodiment performs real-time detection on whether the vehicle receives control commands from the cloud through the target communication channel. If it is detected that the vehicle has received control commands through the target communication channel, the request command and the control command are parsed to obtain the content indicated by the request command and the content indicated by the control command, respectively. The parsed content indicated by the request command and the vehicle's VIN code are recalculated to obtain reference content, that is, to obtain the summary to be compared. The content indicated by the control command and the above summary are compared to obtain the comparison result, thereby achieving the purpose of determining whether the content indicated by the control command and the reference content are the same.

[0078] In this embodiment, after comparing the content indicated by the control command with the reference content to obtain the comparison result, the control command is verified based on the comparison result to obtain a second verification result. Optionally, if the control command is a power-on command, the power-on command is verified based on the comparison result between the power-on command and the reference content, thereby achieving the purpose of determining whether the power-on command has passed verification, and thus realizing the technical effect of improving the verification accuracy of the power-on command.

[0079] Optionally, if the control command in this embodiment is a power-down command, the power-down command is verified based on the comparison result between the power-down command and the reference content. This achieves the purpose of determining whether the power-down command has passed verification, thereby realizing the technical effect of improving the verification accuracy of the power-down command.

[0080] The following section further describes the steps of verifying the control command based on the comparison results to obtain the second verification result in this embodiment.

[0081] As an optional embodiment, based on the comparison result, the control command is verified to obtain a second verification result, including: in response to the comparison result indicating that the content indicated by the control command is the same as the reference content, the control command is verified to obtain a second verification result indicating that the control command verification is successful; in response to the comparison result indicating that the content indicated by the control command is different from the reference content, the control command is verified to obtain a second verification result indicating that the control command verification fails.

[0082] In this embodiment, after comparing the content indicated by the control command with the reference content and obtaining the comparison result, in response to the comparison result indicating that the content indicated by the control command and the reference content are the same, the control command is verified and a second verification result is obtained, indicating that the control command has been verified.

[0083] Optionally, if the comparison result indicates that the content indicated by the power-on command is the same as the reference content, the power-on command is verified, and a second verification result is obtained, indicating that the power-on command has passed verification. This achieves the purpose of confirming that the power-on command has passed verification, thereby realizing the technical effect of improving the verification accuracy of the power-on command.

[0084] Optionally, if the comparison result indicates that the content indicated by the power-down command is the same as the reference content, the power-down command is verified, and a second verification result is obtained, indicating that the power-down command has been verified. This achieves the purpose of confirming that the power-down command has been verified, thereby realizing the technical effect of improving the verification accuracy of the power-down command.

[0085] For example, after the T-Box receives the execution command, it immediately performs a verification process that is the reverse of the generation process: it recalculates the digest of the received encrypted content and serial number, along with the vehicle VIN code and current time known to the T-Box. Then, it compares this digest with the received execution command. If the digest matches the received execution command, it means that the content of the execution command was transmitted without any loss or tampering, and therefore, the power-on command verification passes.

[0086] In this embodiment, after comparing the content indicated by the control command with the reference content and obtaining the comparison result, in response to the comparison result indicating that the content indicated by the control command and the reference content are different, the control command is verified and a second verification result is obtained indicating that the control command verification failed.

[0087] Optionally, if the comparison result indicates that the content indicated by the power-on command is different from the reference content, the power-on command is verified, and a second verification result is obtained indicating that the power-on command verification has failed. This achieves the purpose of determining that the power-on command verification has failed, thereby realizing the technical effect of improving the verification accuracy of the power-on command.

[0088] Optionally, if the comparison result indicates that the content indicated by the power-down command is different from the reference content, the power-down command is verified, and a second verification result is obtained indicating that the power-down command verification has failed. This achieves the purpose of determining that the power-down command verification has failed, thereby realizing the technical effect of improving the verification accuracy of the power-down command.

[0089] For example, after the T-Box receives the execution command, it immediately performs verification in reverse order of the generation process: it recalculates the digest from the received encrypted content and serial number, along with the vehicle VIN and current time known to the T-Box. Then, it compares this digest with the received execution command. If the digest does not match the received execution command, the execution command is immediately discarded, and a "verification failure" message is sent to the cloud platform. The T-Box then retrieves the serial number of the last successfully executed command from the secure storage area. For example, it compares whether the current serial number is greater than the previous serial number. If the current serial number is greater than the previous serial number, the comparison passes; if the current serial number is less than or equal to the previous serial number, it indicates that this is an outdated execution command, and the execution command is immediately discarded, with a "execution command expired" or "suspected replay attack" message reported.

[0090] The following description further details the steps of controlling the vehicle to perform a power-on or power-off operation in response to receiving a wake-up command from the cloud after the second verification result indicates that the control command has been verified as passed.

[0091] As an optional embodiment, step S104, after the second verification result indicates that the control command has been verified, in response to receiving a wake-up command from the cloud, controls the vehicle to perform a power-on or power-off operation, including: after the second verification result indicates that the control command has been verified, in response to receiving a wake-up command, converting the control command to obtain a conversion message; in response to the vehicle's monitoring device detecting the conversion message, controlling the vehicle to perform a power-on or power-off operation through the vehicle's relay.

[0092] In this embodiment, the aforementioned conversion message can be used to represent a message that can be transmitted on a Controller Area Network (CAN) bus. For example, the aforementioned conversion message can be a CAN bus message, which may include: a CAN bus power-on message and a CAN bus power-off message.

[0093] In this embodiment, the aforementioned monitoring device can be used to continuously monitor transition messages. For example, the monitoring device can be a vehicle domain controller.

[0094] In this embodiment, after the second verification result indicates that the control command has been verified, in response to receiving the wake-up command, the control command is converted to obtain a conversion message.

[0095] Optionally, if the control command verification passes, the system performs real-time detection to determine whether the vehicle has received a wake-up command from the cloud via the target communication channel. If a wake-up command received by the vehicle via the target communication channel is detected, and the wake-up command is a wake-up power-on command, the power-on command is translated to obtain a power-on message. Alternatively, if the wake-up command is a wake-up power-off command, the power-off command is translated to obtain a power-off message. The translated message can include both a power-on message and a power-off message. For example, the power-on command could be a high-level command such as "execute power-on operation," the power-off command could be a high-level command such as "execute power-off operation," the power-on message could be a CAN bus power-on message, and the power-off message could be a CAN bus power-off message.

[0096] For example, after the execution command passes triple verification, the T-Box translates the high-level command "execute power-on operation" into a series of precise CAN bus power-on messages based on a preset communication matrix table adapted to the vehicle platform. Alternatively, it translates the high-level command "execute power-off operation" into a series of precise CAN bus power-off messages.

[0097] In this embodiment, after receiving the conversion message, in response to the vehicle's monitoring device detecting the conversion message, the vehicle's relay controls the vehicle to perform a power-on or power-off operation.

[0098] Optionally, the monitoring device continuously detects whether it detects a power-on message. If a power-on message is detected, the vehicle is powered on via a relay. Alternatively, the monitoring device continuously detects whether it detects a power-off message. If a power-off message is detected, the vehicle is powered off via a relay. This achieves the goal of controlling the vehicle to perform power-on or power-off operations in response to a wake-up command, thereby improving the safety of the vehicle's power-on and power-off control.

[0099] For example, the body domain controller continuously monitors the CAN bus. When the body domain controller recognizes a series of compliant CAN bus power-on messages, it immediately begins the power-on operation. This includes actions such as: the control relays engaging, the instrument panel and central control screen illuminating, all electronic modules performing self-tests, and the high-voltage contactor closing with a "beep" sound if no fault is detected, thus completing the vehicle power-on. Alternatively, when the body domain controller recognizes a series of compliant CAN bus power-off messages, it immediately begins the power-off operation. This includes actions such as: the control relays disengaging, the instrument panel and central control screen turning off, all electronic modules ceasing self-tests, and the high-voltage contactor disengaging if no fault is detected, thus completing the vehicle power-off.

[0100] In this embodiment, if the request command is verified, a target communication channel is determined from multiple communication channels between the vehicle and the cloud. After the control command received through the target communication channel is verified, if a wake-up command is received from the cloud, the vehicle is controlled to perform a power-on or power-off operation. Since the control command is received through the target communication channel, and the response priority of the target communication channel is higher than the response priority of other communication channels among the multiple communication channels, the reliability of the control command can be guaranteed, thereby solving the technical problem of low security in vehicle power-on / off control and achieving the technical effect of improving the security of vehicle power-on / off control.

[0101] According to an embodiment of this application, an embodiment of a method for controlling the power on / off of a vehicle is also provided.

[0102] Figure 2 This is a flowchart of another vehicle power-on / off control method according to an embodiment of this application, such as... Figure 2 As shown, the method may include the following steps.

[0103] Step S201: Send a request command to the vehicle.

[0104] In the technical solution provided by step S201 of this application, the request instruction can be used to request the vehicle to perform a power-on or power-off operation. For example, the request instruction may include: a digital certificate in the cloud and a verification code generated by the cloud using a private key. The request instruction may also be referred to as a connection request in the following text.

[0105] In this embodiment, a request command is sent from the cloud to the vehicle's T-Box.

[0106] Step S202: Send control commands generated based on vehicle status information and environmental information to the vehicle through the target communication channel.

[0107] In the technical solution provided in step S202 of this application, the target communication channel is determined from multiple communication channels between the vehicle and the cloud in response to a first verification result indicating that the request command has been verified. Since the communication metrics of the target communication channel are superior to those of the other communication channels in the communication dimension, the response priority of the target communication channel is higher than that of the other communication channels. For example, the communication metrics can be reflected by at least one of the following communication quality parameters: signal strength, network latency, and packet loss rate.

[0108] In this embodiment, the aforementioned state information can be used to represent the vehicle's operating state in the operating environment. This state information can include: the vehicle's basic state, critical system state, safety chain state, and external connection state. For example, the basic state can include: whether the current power is ON, ACC, or OFF, and the vehicle speed; the critical system state can include: whether important controllers such as the vehicle controller, battery management system, and motor controller are communicating normally, and whether these controllers have reported any serious internal faults of level 3 or higher; the safety chain state can include: whether the vehicle's powertrain, steering system, braking system, and other safety-related subsystems are in a "ready" or "fault-free" state; and the external connection state can include: whether the vehicle's charging gun is still plugged into the charging pile, and whether the engine hood is tightly closed.

[0109] In this embodiment, the aforementioned environmental information can be used to represent the state of the operating environment. This environmental information may include: the relationship between the operating environment and risk areas, and whether the vehicle's position maintains a safe distance from surrounding dynamic obstacles. For example, risk areas may include: intersections, zebra crossings, pedestrian crossings, sharp bends, steep slopes, tunnel entrances / exits, blind spots for large vehicles (e.g., the sides and rear of trucks and buses), construction areas, flooded road sections, fire or explosion risk areas, railway crossings, airport runways, port operation areas, and other special areas. These risk areas may also be referred to as high-risk areas in the following text.

[0110] In this embodiment, the control command can be generated based on the vehicle's status information and environmental information, and the control command can be a power-on command or a power-off command for the vehicle.

[0111] In this embodiment, after sending a request command to the vehicle, a control command generated based on the vehicle's status information and environmental information is sent to the vehicle via the target communication channel. Optionally, this embodiment combines the status information and environmental information to generate a power-on command or a power-off command. By sending the power-on command or power-off command to the vehicle via the target communication channel, the purpose of sending the generated control command to the vehicle via the target communication channel is achieved.

[0112] Step S203: After the second verification result obtained from verifying the control command indicates that the control command has been verified, a wake-up command is generated.

[0113] In the technical solution provided by step S203 of this application, the wake-up command can be used to wake up the vehicle to perform a power-on or power-off operation. For example, the wake-up command can be a function wake-up signal received through a target communication channel.

[0114] In this embodiment, after the second verification result obtained from verifying the control command indicates that the control command has passed verification, a wake-up command is generated. Optionally, after determining that the control command is valid, the cloud platform sends a generated function wake-up signal to the T-Box. The function wake-up signal is used to prompt the T-Box: Please start the remote power-on / off program module to prepare to receive and execute important commands. This is equivalent to sending an enable signal to the T-Box, thereby achieving the purpose of waking up the vehicle.

[0115] In steps S201 to S203 of this application, a request command is sent to the vehicle; a control command generated based on the vehicle's status information and environmental information is sent to the vehicle through a target communication channel; and a wake-up command is generated after a second verification result indicating that the control command has been verified. Since this embodiment determines the target communication channel from among multiple communication channels between the vehicle and the cloud when the request command has been verified, and if a wake-up command from the cloud is received after the control command received through the target communication channel has been verified, the vehicle is controlled to perform a power-on or power-off operation. Because the control command is received through the target communication channel, and the response priority of the target communication channel is higher than the response priority of other communication channels among the multiple communication channels, the reliability of the control command is guaranteed, thus solving the technical problem of low security in vehicle power-on / off control and achieving the technical effect of improving the security of vehicle power-on / off control.

[0116] The technical solutions of the embodiments of this application will be illustrated below with reference to preferred embodiments.

[0117] Currently, the industry has proposed various methods for remotely controlling vehicle power on / off. For example, a back-end operating platform receives a power-on or power-off command. The platform establishes a connection with a T-Box via a network. The T-Box reports basic vehicle information, such as whether the vehicle is currently powered on or off, and its speed. Then, based on this basic information, the platform determines if the power-on or power-off command is appropriate, and generates and issues the command accordingly.

[0118] However, such power-on / off control methods have defects such as unintelligent judgment and unreliable communication, resulting in technical problems such as low safety of vehicle power-on / off control.

[0119] To address the aforementioned technical problems, this application proposes a vehicle power-on / off control method. Upon successful verification of a request command, a target communication channel is determined from multiple communication channels between the vehicle and the cloud. After successful verification of a control command received through the target communication channel, if a wake-up command is received from the cloud, the vehicle is controlled to perform a power-on or power-off operation. Since the control command is received through the target communication channel, and the response priority of the target communication channel is higher than the response priority of other communication channels, the reliability of the control command is guaranteed. This solves the technical problem of low security in vehicle power-on / off control, thereby improving the technical effect of enhancing the security of vehicle power-on / off control.

[0120] In this embodiment, by using a vehicle remote power-on / off control system with security verification, and executing a vehicle remote power-on / off control method with security verification, the vehicle can be remotely controlled to perform power-on or power-off operations. For example, Figure 3 This is a schematic diagram of a vehicle remote power-on / off control system with security verification according to an embodiment of this application, as shown below. Figure 3 As shown, the system may include: T-Box301 and cloud platform302.

[0121] In this embodiment, the T-Box 301 can be used to perform the following steps: receive a connection request from the cloud platform 302, verify the verification code in the connection request, test the communication line between the T-Box and the cloud platform, report the vehicle's status information, and trigger the vehicle's relay to control the vehicle to perform power-on or power-off operations.

[0122] In this embodiment, the cloud platform 302 can be used to establish a secure and encrypted communication signal with the T-Box. That is, the cloud platform sends a connection request to the T-Box of the target vehicle. This connection request may include the cloud platform's own digital certificate and a verification code generated using its private key. After obtaining detailed vehicle status information reported by the T-Box, the cloud platform 302 can intelligently and comprehensively analyze the data, combining it with multi-dimensional data such as the vehicle's real-time location, movement trends, and environmental risks, to determine whether it is appropriate to execute a remote power-on or power-off command. The cloud platform 302 can also be used to activate the T-Box's remote power-on / off function, generating an execution command with triple protection.

[0123] In this embodiment, by executing a vehicle remote power-on / off control method with security verification, the vehicle can be remotely controlled to perform power-on or power-off operations. For example, Figure 4 This is a flowchart of a remote vehicle power-on / off control method with security verification according to an embodiment of this application, such as... Figure 4As shown, the method may include the following steps.

[0124] Step S401: Send remote commands to the cloud platform.

[0125] For example, if a user needs to remotely start the vehicle at 8:00 AM sharp, they can select the vehicle on the dispatch interface and click the "Remote Power On" button. This click triggers the cloud platform to instantly generate a "Remote Power On" task containing the target vehicle's unique identifier. This unique identifier could be the vehicle identification number (VIN), or vehicle identification number.

[0126] After issuing remote instructions to the cloud platform, step S402 is executed, and the cloud platform initiates a secure connection request to the T-Box.

[0127] In this embodiment, the cloud platform establishes a secure and encrypted communication signal with each vehicle's T-Box, thereby improving communication security. The cloud platform sends a connection request to the target vehicle's T-Box.

[0128] After the cloud platform initiates a secure connection request to the T-Box, step S403 is executed, where the T-Box verifies the identity of the cloud platform.

[0129] In this embodiment, the T-Box, which is in a dormant state but still waiting, will immediately wake up upon receiving the connection request and perform authentication. It uses the cloud platform's public key, which is pre-stored in the security chip, to verify the verification code in the request. If the verification code is successfully verified, it indicates that the request comes from a trusted cloud platform and has not been tampered with. This is the first step in two-way authentication, ensuring that the vehicle is not controlled by a fake "platform".

[0130] After the T-Box verifies the identity of the cloud platform, step S404 is executed to establish a connection and detect network quality.

[0131] In this embodiment, after successful authentication, an encrypted communication line is established between the T-Box and the cloud platform. During communication, the T-Box measures the communication quality of this line in real time, such as signal strength, network latency, and packet loss rate, and continuously reports the communication quality of this line to the cloud platform.

[0132] After establishing a connection and probing network quality, step S405 is executed, where the cloud platform determines whether a channel switch is necessary.

[0133] In this embodiment, the cloud platform continuously monitors this "communication quality" report. If the quality of the 4G or 5G main channel is found to be below a preset threshold—for example, if latency suddenly becomes very high or significant packet loss occurs—the cloud platform will immediately make a decision to change the communication line.

[0134] After the cloud platform determines whether a channel switch is needed, step S406 is executed to automatically switch the primary channel to the backup channel.

[0135] In this embodiment, the cloud platform automatically switches subsequent communication traffic to the backup channel without interruption. For example, the cloud platform can communicate with other networked devices on the vehicle, acting as a "relay station" to transmit instructions to the T-Box on the same vehicle. Because other networked devices may have better performance due to component design or be connected to different operator networks, communication is likely to remain intact. This "seamless switchover" process is completely transparent to the remote dispatcher, who only needs to wait for the final result without needing to know what is happening on the underlying network.

[0136] After automatically switching the main lane to the backup lane, step S407 is executed, and the T-Box reports the vehicle status information.

[0137] In this embodiment, after a secure and reliable "call" is established, the cloud platform does not immediately issue instructions. Instead, it first summarizes and analyzes the vehicle status information and internal diagnostic information of the entire vehicle. The T-Box immediately collects and reports a detailed and real-time vehicle status information through an encrypted channel. This vehicle status information may include: the vehicle's basic status, critical system status, safety chain status, and external connection status. The basic status may include: whether the battery is currently in ON, Acc, or OFF position, and the vehicle speed. The critical system status may include: whether important controllers such as the vehicle controller, battery management system, and motor controller are communicating normally, and whether these controllers have reported any serious internal faults of level 3 or higher. The safety chain status may include: whether the vehicle's power system, steering system, braking system, and other safety-related subsystems are in a "ready" or "fault-free" state. The external connection status may include: whether the vehicle's charging gun is still plugged into the charging pile, and whether the engine hood is tightly closed.

[0138] After the T-Box reports the vehicle status information, step S408 is executed, and the cloud platform performs a comprehensive assessment of the "instruction validity".

[0139] In this embodiment, after obtaining detailed vehicle status information reported by the T-Box, the cloud platform combines multi-dimensional data such as real-time vehicle location, movement trends, and environmental risks to perform intelligent comprehensive analysis and determine whether it is appropriate to execute a remote power-on or power-off command. The specific judgment method is as follows.

[0140] Method 1: Validate the power-on command. That is, if the control command is a power-on command, the following conditions must be met simultaneously for the power-on command to be considered valid: Basic state verification condition: The vehicle is currently in an OFF or AC power state (i.e., not a high-voltage power-on state); Critical system health verification condition: Critical controllers such as the vehicle controller, battery management system, and motor controller have no serious faults of level three or above; External connection safety verification condition: The charging gun is not connected, and the engine hood, charging port cover, etc., are closed; Vehicle location and environmental risk assessment condition: The vehicle is not currently in the following high-risk areas: intersections, zebra crossings, pedestrian crossings, sharp bends, steep slopes, tunnel entrances / exits, or blind spots of large vehicles (e.g., the sides and rear of trucks and buses). In special areas such as construction zones, flooded road sections, fire or explosion risk areas, railway crossings, airport runways, and port operation areas, the vehicle's position must maintain a safe distance from surrounding dynamic obstacles (e.g., pedestrians, non-motorized vehicles) (this can be determined using maps or intelligent driving information). Vehicle speed and movement trend verification conditions: vehicle speed = 0 km / h, vehicle gear in Park (P) or Neutral (N) and electronic parking brake engaged, and signals from wheel speed sensors and accelerometers indicating no slipping or rolling movement. User intent and dispatch rationality verification conditions: if the vehicle is in a "temporary parking" state (e.g., waiting at a traffic light, temporarily yielding), the power-on command is delayed to avoid accidental wake-up; if the vehicle has executed a power-off command within 5 minutes, the power-on command requires secondary confirmation.

[0141] Method Two: The validity of the power-down command is assessed. If the control command is a power-down command, the following conditions must be met simultaneously for the command to be considered valid: Basic State Verification Conditions: The vehicle is currently in the ON position or under high-voltage power. Vehicle Speed ​​and Motion State Verification Conditions: Vehicle speed = 0 km / h, vehicle gear is in P position, wheel speed sensor and GPS speed signals are both zero. Critical System Safety Verification Conditions: The battery management system allows high-voltage power to be applied, and there are no ongoing critical operations such as high-voltage insulation testing or battery equalization. Location and Environmental Risk Verification Conditions: The vehicle is not in the following dangerous parking locations: blind spots for large vehicles, intersections, zebra crossings, sharp bends, steep slopes, railway crossings, construction zones, flooded areas, fire risk areas, and highway emergency lanes (unless designated parking spots). If the vehicle is parked in any of these areas, the system should refuse to power down and display a message stating, "The current parking location poses a safety risk; it is recommended to move the vehicle." "Power off only after reaching a safe area" Dynamic risk perception conditions: If there are rapidly approaching dynamic targets (e.g., bicycles, pedestrians, vehicles) around the vehicle, power off should be delayed, and warning lights and sensors should remain operational. If the vehicle is in "temporary parking" mode (e.g., pick-up point, loading / unloading area), the power-off command must wait until the task is completed before execution. Task and scheduling consistency verification conditions: If the vehicle is currently performing an autonomous driving task (e.g., pick-up, cleaning, delivery), the power-off command must be executed only after the task is completed or the vehicle enters a safe parking state. If the system detects that the driver or dispatcher issues multiple power-off commands in a short period of time, a safety lock mechanism should be triggered to prevent misoperation.

[0142] Optionally, the handling mechanism after an instruction is rejected is as follows: If any of the above conditions are not met, the cloud platform immediately determines the instruction as "failed" and performs the following operations: Record the reason for failure, such as "vehicle speed is not 0", "vehicle is at an intersection", "charging gun not unplugged", etc., and return a clear prompt: Return the reason for failure and suggested operations to the dispatcher or user terminal, such as "please move the vehicle to a safe area and try again". Trigger the safety log: Record the time of instruction initiation, vehicle status, location information and reason for failure in the safety log, and use the above safety log for subsequent auditing and system optimization.

[0143] Optionally, the enhancement mechanisms may include the following: Vehicle-side final review mechanism: After the cloud completes the initial screening, the "predicted validity" instruction is sent to the vehicle, which then uses local high-precision sensors (e.g., cameras, radar) to conduct a final environmental risk assessment. Power-on / off is only performed after confirmation that everything is correct; Dynamic whitelist / blacklist area mechanism: The system can learn commonly used safe parking areas and establish a "power-off whitelist map," automatically blocking power-off instructions for high-risk areas; Vehicle-to-Everything (V2X) collaborative judgment mechanism: By combining roadside unit information, dynamic information such as traffic lights at the intersection ahead, construction zones, and accident zones is obtained to assist in decision-making.

[0144] Optionally, if the power-on or power-off command is valid, the function is activated and a final hardening command is issued.

[0145] After a comprehensive assessment of the "instruction validity" on the cloud platform, step S409 is executed to activate the remote power-on / off function of the T-Box.

[0146] In this embodiment, after determining that the instruction is valid, the cloud platform sends a function wake-up signal to the T-Box. This function wake-up signal prompts the T-Box to start the remote power-on / off program module and prepare to receive and execute important instructions. This is equivalent to sending an enable signal to the T-Box.

[0147] After activating the remote power-on / off function of the T-Box, step S410 is executed, and the T-Box responds to "ready".

[0148] In this embodiment, after receiving the function wake-up signal, the T-Box initializes the relevant hardware interfaces, such as the communication interface with the vehicle's CAN bus and starts the timer. After initializing the relevant hardware interfaces and starting the timer, it replies to the cloud platform with a "feedback message enabled" message.

[0149] After the T-Box is ready to respond, step S411 is executed, and the cloud platform generates an execution instruction with triple protection.

[0150] In this embodiment, after receiving the T-Box's ready signal, the cloud platform begins to generate execution instructions. These execution instructions are essentially data packets, but they are encapsulated with "triple protection."

[0151] For example, the aforementioned triple protection is a triple confidentiality operation. The first layer of confidentiality involves encrypting the core content of the instruction. Specifically, the action code for "performing a power-on operation" is encrypted using the symmetric key agreed upon in this session, thus ensuring the data security of the action code. The second layer of confidentiality involves the cloud platform appending a monotonically increasing and unpredictable instruction sequence number to the instruction. This sequence number is generated by a specific algorithm, making it difficult to guess the pattern. The third layer of confidentiality involves the cloud platform packaging the encrypted content and the sequence number to form the final execution instruction, which is then sent to the T-Box.

[0152] After the cloud platform generates an execution instruction with triple protection, in step S412, the T-Box performs triple verification on the execution instruction.

[0153] In this embodiment, after the T-Box receives the execution command, it immediately performs a verification process that is the reverse of the generation process: it recalculates the digest using the encrypted content and serial number it received, along with the vehicle VIN code and current time known to the T-Box. Then, it compares this digest with the received execution command. If they match, it means the content of the execution command was transmitted without loss of quality and has not been tampered with. If they do not match, the execution command is immediately discarded, and a "verification failure" message is sent to the cloud platform. The T-Box then retrieves the serial number of the last successfully executed command from the secure storage area. For example, it compares whether the current serial number is greater than the previous serial number. If the current serial number is greater than the previous serial number, the comparison passes. If the current serial number is less than or equal to the previous serial number, it indicates that this is an outdated execution command, and the execution command is immediately discarded, with a report of "execution command expired" or "suspected replay attack."

[0154] After the T-Box performs triple verification on the execution instruction, step S413 is executed, where the T-Box translates and forwards the execution instruction.

[0155] In this embodiment, after the execution command passes triple verification, the T-Box translates the high-level command "execute power-on operation" into a series of precise CAN bus messages based on a preset communication matrix table adapted to the vehicle platform. For example, it sends messages containing specific data on the CAN bus to the Vehicle Dynamics Control (VDC) or Vehicle Control Unit (VCU) with a specific identifier (IDentification), and these messages are unique within the vehicle. For example, the messages could be remote requests to switch from the OFF position to the ON position, and then to high-voltage power-on.

[0156] After the T-Box translates and forwards the execution command, step S414 is executed, whereby the VDC or VCU controls the vehicle to perform a power-on or power-off operation.

[0157] In this embodiment, the vehicle domain controller continuously monitors the CAN bus. Once the vehicle domain controller recognizes this series of compliant CAN bus messages, it immediately begins the power-on / off process. For example, the control relays are activated, the instrument panel and central control screen are illuminated, all electronic modules perform self-tests, and the high-voltage contactor closes and beeps when there are no faults, thus completing the vehicle power-on process.

[0158] After the vehicle is powered on or off by the VDC or VCU, step S415 is executed to report a successful power-on or power-off operation, or step S416 is executed to report a failed power-on or power-off operation.

[0159] In this embodiment, the T-Box monitors vehicle status changes fed back on the CAN bus to determine whether the VDC / VCU has successfully completed its operation. The T-Box starts a watchdog timer: if it detects a "power-on successful" or "power-off successful" status message within a set time (e.g., 5 seconds), the T-Box reports a "successful execution" report to the cloud platform. If no success message is received within the timeout period, or if a fault message indicating execution failure is received, the T-Box reports a "failed execution" report along with the reason. After receiving the report, the cloud platform highlights "success" or issues an alarm "failure" on the scheduling interface, thus concluding the remote vehicle power-on / off process.

[0160] For example, a vehicle in the park that was not used for pick-up and drop-off was in a dormant state after completing its task the previous day and was parked in a designated parking space. At 6:30 this morning, the dispatcher prepared to remotely wake the vehicle for the morning shift and clicked the "Remote Power On" button on the dispatch interface. At this time, a cleaning staff member pushing a tool cart was rapidly walking towards the vehicle from about 8 meters to the right front, and was expected to enter the vehicle's side blind spot in about 3 seconds. The vehicle power-on process in this scenario would execute the following operations: the cloud platform would generate a remote power-on command, wake up the T-Box via dual-channel communication, and report the vehicle's basic status, such as OFF, P gear, or no faults. Simultaneously, the vehicle's perception system, powered by a low-power sensing module (e.g., a camera or millimeter-wave radar), would continuously monitor the surrounding environment. If the basic conditions for powering on are met, and the vehicle speed and motion trend verification conditions are met, but the dynamic risk perception conditions are not met, for example, if the system detects a dynamic target (pedestrian + utility vehicle) approaching the vehicle at a speed of about 1.5 m / s based on the perception data reported by the vehicle, and the estimated collision time is less than 5 seconds and the relative distance is less than 10 meters, according to the preset safety strategy, if power is immediately applied at this time, the vehicle may suddenly turn on its lights and start the high-voltage system, which may easily frighten the pedestrian or cause the pedestrian to fall while trying to avoid the vehicle. Therefore, it is determined that the current timing is not suitable for immediate power-on and the execution should be delayed.

[0161] Next, the cloud platform does not reject the command but enters a waiting security window state. The vehicle remote power-on / off control system with security verification notifies the dispatcher through the dispatch interface: the power-on command has been received, but a pedestrian and a utility vehicle are approaching nearby. It will automatically execute the command after the pedestrian moves away. The vehicle continuously monitors the trajectory of the pedestrian and the utility vehicle. About 6 seconds later, the pedestrian pushes the cart past the side of the vehicle and moves to a distance of 15 meters. The system confirms that the dynamic risk has been eliminated, controls the vehicle to automatically execute the power-on process, the vehicle is successfully woken up, and the dispatch interface finally displays "Power-on successful (execution delayed by 6 seconds)".

[0162] In this embodiment, if the request command is verified, a target communication channel is determined from multiple communication channels between the vehicle and the cloud. After the control command received through the target communication channel is verified, if a wake-up command is received from the cloud, the vehicle is controlled to perform a power-on or power-off operation. Since the control command is received through the target communication channel, and the response priority of the target communication channel is higher than the response priority of other communication channels among the multiple communication channels, the reliability of the control command can be guaranteed, thereby solving the technical problem of low security in vehicle power-on / off control and achieving the technical effect of improving the security of vehicle power-on / off control.

[0163] According to an embodiment of this application, a vehicle power-on / off control device is also provided. It should be noted that this vehicle power-on / off control device can be used to execute a vehicle power-on / off control method as described in the embodiments.

[0164] Figure 5 This is a schematic diagram of a vehicle power-on / off control device according to an embodiment of this application. Figure 5 As shown, the vehicle's power control device 500 may include: a first verification unit 501, a determination unit 502, a second verification unit 503, and a control unit 504.

[0165] The first verification unit 501 is used to verify the request instruction received by the vehicle from the cloud in response to the vehicle receiving the request instruction and obtain the first verification result. The request instruction is used to request the vehicle to perform a power-on operation or a power-off operation.

[0166] The determining unit 502 is used to determine the target communication channel from multiple communication channels between the vehicle and the cloud in response to the first verification result indicating that the request instruction has been verified. The target communication channel has a higher response priority than other communication channels among the multiple communication channels.

[0167] The second verification unit 503 is used to verify the control command received from the cloud through the target communication channel and obtain a second verification result. The control command is generated based on the vehicle's status information and environmental information, and the control command is a power-on command or power-off command for the vehicle. The status information is used to indicate the vehicle's operating status in the operating environment, and the environmental information is used to indicate the status of the operating environment.

[0168] The control unit 504 is used to control the vehicle to perform a power-on operation or a power-off operation in response to receiving a wake-up command from the cloud after the second verification result indicates that the control command has been verified.

[0169] Optionally, the determining unit 502 may include: a first determining module, configured to determine the response priority of the main communication channel among multiple communication channels in response to the first verification result indicating that the request instruction has been verified; and a second determining module, configured to determine the target communication channel from among the multiple communication channels based on the response priority of the main communication channel.

[0170] Optionally, the second determining module may include: a determining submodule, used to determine the main communication channel as the target communication channel from multiple communication channels in response to the main communication channel's response priority being greater than or equal to a priority threshold; and a changing submodule, used to change the target communication channel from the main communication channel to the communication channel corresponding to the target response priority from multiple communication channels in response to the main communication channel's response priority being less than a priority threshold, wherein the target response priority is greater than or equal to the priority threshold.

[0171] Optionally, the second verification unit 503 may include: a generation module, configured to, in response to receiving a control command through a target communication channel, generate reference content by combining the content indicated by the request command and the vehicle's identification information, wherein the identification information is used to identify the vehicle; a comparison module, configured to compare the content indicated by the control command and the reference content to obtain a comparison result; and a verification module, configured to verify the control command based on the comparison result to obtain a second verification result.

[0172] Optionally, the verification module may include: a first verification submodule, used to verify the control command in response to a comparison result indicating that the content indicated by the control command is the same as the reference content, and obtain a second verification result indicating that the control command verification is successful; and a second verification submodule, used to verify the control command in response to a comparison result indicating that the content indicated by the control command is different from the reference content, and obtain a second verification result indicating that the control command verification is unsuccessful.

[0173] Optionally, the control unit 504 may include: a conversion module, configured to convert the control command to obtain a conversion message in response to receiving a wake-up command after the second verification result indicates that the control command has been verified; and a control module, configured to control the vehicle to perform a power-on or power-off operation via the vehicle's relays in response to the vehicle's monitoring device detecting the conversion message.

[0174] In this embodiment, a vehicle power-on / off control device is provided. The device may include: a first verification unit, configured to verify a request command received by the vehicle from the cloud and obtain a first verification result, wherein the request command requests the vehicle to perform a power-on or power-off operation; a determination unit, configured to determine a target communication channel from multiple communication channels between the vehicle and the cloud, wherein the target communication channel has a higher response priority than other communication channels among the multiple communication channels; and a second verification unit, configured to verify the control command received from the cloud through the target communication channel. The system performs verification to obtain a second verification result. The control command is generated based on the vehicle's status information and environmental information, and is a power-on or power-off command for the vehicle. The status information indicates the vehicle's operating status in the operating environment, and the environmental information indicates the status of the operating environment. The control unit, after the second verification result indicates that the control command has been verified, responds to the wake-up command received from the cloud and controls the vehicle to perform a power-on or power-off operation. This achieves the goal of ensuring the reliability of the control command, thereby solving the technical problem of low safety in vehicle power-on and power-off control, and thus achieving the technical effect of improving the safety of vehicle power-on and power-off control.

[0175] According to an embodiment of this application, another vehicle power-on / off control device is also provided. It should be noted that this vehicle power-on / off control device can be used to execute another vehicle power-on / off control method described in the embodiments.

[0176] Figure 6 This is a schematic diagram of another vehicle power-on / off control device according to an embodiment of this application. Figure 6 As shown, the vehicle's power control device 600 may include: a sending unit 601, a first generating unit 602, and a second generating unit 603.

[0177] The sending unit 601 is used to send a request instruction to the vehicle, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation.

[0178] The first generation unit 602 is used to send control commands generated based on the vehicle's status information and environmental information to the vehicle through a target communication channel. The target communication channel is determined from multiple communication channels between the vehicle and the cloud in response to a first verification result indicating that the request command has been verified. The response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels. The status information is used to indicate the vehicle's operating status in the operating environment, and the environmental information is used to indicate the status of the operating environment. The control command is a power-on command or a power-off command for the vehicle.

[0179] The second generation unit 603 is used to generate a wake-up command after the second verification result obtained from verifying the control command indicates that the control command has been verified. The wake-up command is used to wake up the vehicle to perform a power-on operation or a power-off operation.

[0180] In this embodiment, a vehicle power-on / off control device is provided. The device may include: a sending unit for sending a request command to the vehicle, wherein the request command requests the vehicle to perform a power-on or power-off operation; a first generation unit for sending a control command generated based on the vehicle's status information and environmental information to the vehicle via a target communication channel, wherein the target communication channel is determined from multiple communication channels between the vehicle and the cloud in response to a first verification result indicating that the request command has been verified, and the target communication channel has a higher response priority than other communication channels besides the target communication channel; the status information indicates the vehicle's operating status in the operating environment, the environmental information indicates the state of the operating environment, and the control command is a power-on or power-off command for the vehicle; and a second generation unit for generating a wake-up command after a second verification result indicating that the control command has been verified, wherein the wake-up command wakes the vehicle to perform the power-on or power-off operation. This achieves the goal of ensuring the reliability of the control command, thereby solving the technical problem of low security in vehicle power-on / off control and thus achieving the technical effect of improving the security of vehicle power-on / off control.

[0181] According to an embodiment of this application, a processor is also provided for running a program, wherein the program is executed by the processor to perform the methods described in the embodiment.

[0182] According to an embodiment of this application, an electronic device is also provided. Figure 7 This is a schematic diagram of an electronic device according to an embodiment of this application, such as... Figure 7 As shown, the electronic device 700 may include a memory 710 and a processor 720, wherein the memory 710 is used to store an executable program; and the processor 720 is used to run the program stored in the memory 710, wherein the program executes the methods in various embodiments of this application when it runs.

[0183] In this application, "multiple" refers to two or more.

[0184] In this application, unless otherwise expressly defined, the terms "installation," "connection," and "linking" should be interpreted broadly. For example, they can refer to a fixed connection, a detachable connection, or an integral connection; they can refer to a mechanical connection or an electrical connection; they can refer to a direct connection or an indirect connection through an intermediate medium; and they can refer to the internal connection between two components. Those skilled in the art can understand the specific meaning of the above terms in this application based on the specific circumstances.

[0185] The terms “first,” “second,” “third,” “fourth,” etc., in this application (if present) are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence.

[0186] In this application, the term "and / or" is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. Additionally, in this application, the character " / " generally indicates that the preceding and following related objects have an "or" relationship.

[0187] According to another aspect of the embodiments of this application, a computer-readable storage medium is also provided. This computer-readable storage medium includes a stored program, wherein, when the program is executed, it controls the device on which the computer-readable storage medium is located to perform the method described in the embodiments.

[0188] Computer-readable storage media, also known as computer storage media, may include data signals propagated in baseband or as part of a carrier wave, carrying readable program code. These propagated data signals may take various forms, including but not limited to electromagnetic signals, optical signals, or any suitable combination thereof. Computer-readable storage media can transmit, propagate, or transfer programs for use by or in conjunction with an instruction execution system, apparatus, or device.

[0189] The program code contained in a computer-readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical fiber, radio frequency, or any suitable combination thereof.

[0190] According to an embodiment of this application, a computer program product is also provided, which includes a computer program, wherein the computer program, when executed by a processor, implements the method in the embodiment.

[0191] According to an embodiment of this application, a computer program product is also provided, including a non-volatile computer-readable storage medium for storing a computer program, which, when executed by a processor, implements the method described in the embodiment.

[0192] According to an embodiment of this application, a computer program is also provided, which, when executed by a processor, implements the method described in the embodiment.

[0193] According to an embodiment of this application, a vehicle is also provided, including the electronic equipment described in the embodiment of this application.

[0194] In the above embodiments of this application, the descriptions of each embodiment have different focuses. For parts not described in detail in a certain embodiment, please refer to the relevant descriptions of other embodiments.

[0195] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. The device embodiments described above are merely illustrative; for example, the division of units can be a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the displayed or discussed mutual couplings, direct couplings, or communication connections may be through some interfaces; indirect couplings or communication connections between units or modules may be electrical or other forms.

[0196] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0197] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0198] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to related technologies, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as a USB flash drive, read-only memory (ROM), random access memory (RAM), portable hard drive, magnetic disk, or optical disk.

[0199] The above are merely preferred embodiments of this application. It should be noted that those skilled in the art can make various improvements and modifications without departing from the principles of this application, and these improvements and modifications should also be considered within the scope of protection of this application.

Claims

1. A method for controlling the power on / off of a vehicle, characterized in that, include: In response to the vehicle receiving a request instruction from the cloud, the request instruction is verified to obtain a first verification result, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation; In response to the first verification result indicating that the request instruction has been verified, a target communication channel is determined from multiple communication channels between the vehicle and the cloud, wherein the response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels. In response to receiving a control command from the cloud through the target communication channel, the control command is verified to obtain a second verification result. The control command is generated based on the vehicle's status information and environmental information, and the control command is a power-on command or power-off command for the vehicle. The status information is used to indicate the vehicle's operating status in the operating environment, and the environmental information is used to indicate the status of the operating environment. After the second verification result indicates that the control command has been verified, in response to receiving a wake-up command from the cloud, the vehicle is controlled to perform the power-on operation or the power-off operation.

2. The method according to claim 1, characterized in that, In response to the first verification result indicating that the request instruction has been verified, the target communication channel is determined from multiple communication channels between the vehicle and the cloud, including: In response to the first verification result indicating that the request instruction has been verified, the response priority of the main communication channel among the multiple communication channels is determined; Based on the response priority of the main communication channel, the target communication channel is determined from among the multiple communication channels.

3. The method according to claim 2, characterized in that, Based on the response priority of the main communication channel, the target communication channel is determined from among the multiple communication channels, including: In response to the main communication channel having a response priority greater than or equal to a priority threshold, the main communication channel is determined as the target communication channel from among the multiple communication channels. In response to a response priority of the main communication channel being less than the priority threshold, the target communication channel is changed from the main communication channel to the communication channel corresponding to the target response priority from among the multiple communication channels, wherein the target response priority is greater than or equal to the priority threshold.

4. The method according to claim 1, characterized in that, In response to receiving a control command from the cloud via the target communication channel, the control command is verified to obtain a second verification result, including: In response to receiving the control command from the target communication channel, the content indicated by the request command and the vehicle's identification information are generated as reference content, wherein the identification information is used to identify the vehicle; The content indicated by the control command is compared with the reference content to obtain the comparison result; Based on the comparison results, the control command is verified to obtain the second verification result.

5. The method according to claim 4, characterized in that, Based on the comparison results, the control command is verified to obtain the second verification result, including: In response to the comparison result indicating that the content indicated by the control command is the same as the reference content, the control command is verified, and the second verification result indicates that the control command has passed the verification. In response to the comparison result indicating that the content indicated by the control command is different from the reference content, the control command is verified, and the second verification result indicates that the control command verification failed.

6. The method according to any one of claims 1 to 5, characterized in that, After the second verification result indicates that the control command has been verified, in response to receiving a wake-up command from the cloud, the vehicle is controlled to perform the power-on operation or the power-off operation, including: After the second verification result indicates that the control command has been verified, in response to receiving the wake-up command, the control command is converted to obtain a conversion message; In response to the vehicle's monitoring device detecting the switching message, the vehicle's relay controls the vehicle to perform the power-on operation or the power-off operation.

7. A method for controlling the power on / off of a vehicle, characterized in that, include: Send a request instruction to the vehicle, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation; Control commands generated based on the vehicle's status information and environmental information are sent to the vehicle through a target communication channel. The target communication channel is determined from multiple communication channels between the vehicle and the cloud in response to a first verification result indicating that the request command has been verified. The response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels. The status information is used to indicate the operating status of the vehicle in the operating environment, and the environmental information is used to indicate the status of the operating environment. The control commands are power-on or power-off commands for the vehicle. After verifying the control command and obtaining a second verification result indicating that the control command has been verified, a wake-up command is generated, wherein the wake-up command is used to wake up the vehicle to perform the power-on operation or the power-off operation.

8. A vehicle power-on / off control device, characterized in that, include: The first verification unit is configured to verify the request instruction received by the vehicle from the cloud in response to the vehicle receiving the request instruction and obtain a first verification result, wherein the request instruction is used to request the vehicle to perform a power-on operation or a power-off operation. A determining unit is configured to, in response to the first verification result indicating that the request instruction has been verified, determine a target communication channel from multiple communication channels between the vehicle and the cloud, wherein the response priority of the target communication channel is higher than that of other communication channels among the multiple communication channels. The second verification unit is configured to verify the control command received from the cloud through the target communication channel and obtain a second verification result. The control command is generated based on the vehicle's status information and environmental information, and the control command is a power-on command or power-off command for the vehicle. The status information is used to indicate the vehicle's operating status in the operating environment, and the environmental information is used to indicate the status of the operating environment. The control unit is configured to, in response to receiving a wake-up command from the cloud, control the vehicle to perform the power-on operation or the power-off operation after the second verification result indicates that the control command has been verified successfully.

9. A processor, characterized in that, The processor is used to run a program, wherein the program is executed by the processor to perform the method according to any one of claims 1 to 7.

10. An electronic device, characterized in that, include: Memory, which stores executable programs; A processor for running the program, wherein the program, when running, performs the method according to any one of claims 1 to 7.

Images