Apparatus and method for controlling functions of a vehicle

Abstract

A control system (200) for controlling one or more functions of a vehicle (100), the control system comprising one or more processors (210) collectively configured to receive a communication signal 315, 325 indicative of an operability of a wireless interface 310, 320 of the vehicle. Receive one or both of a vehicle state signal 335 indicative of a state of the vehicle and an environment signal 345 indicative of an environment of the vehicle. Determine, in dependence on the communication signal indicating that the wireless interface is inoperable, and one or both of the vehicle state signal and the environment signal, that the vehicle is subject to unauthorised use, and output a control signal 355 to limit the one or more functions of the vehicle.

Description

TECHNICAL FIELD The present disclosure relates to an apparatus and method for controlling one or more functions of a vehicle. Aspects of the invention relate to a control system, to a system, to a vehicle, to a method and to computer software. BACKGROUND It is known that authorised use of vehicles is a significant issue. Unauthorised use can include theft of a vehicle i.e. removing a vehicle from its owner or keeper, removing parts from a vehicle, and, for example, transporting the vehicle so that the vehicle can be, for example, broken into parts or sold elsewhere, such as in another region or country. However detecting theft and / or locating a stolen vehicle can be problematic due to detection prevention measures employed. It is an aim of the present invention to address one or more of the disadvantages associated with the prior art. SUMMARY OF THE INVENTION Aspects and embodiments of the invention provide a control system, to a system, to a vehicle, to a method and to computer software as claimed in the appended claims. According to an aspect of the invention, there is provided a control system for controlling one or more functions of a vehicle, the control system comprising one or more processors collectively configured to receive an environment signal indicative of an environment of the vehicle, determine, in dependence on a communication signal indicating that a wireless interface is inoperable, and an environment signal, that the vehicle is subject to unauthorised use, and output, in dependence onthedetermination that the vehicle is subject to unauthorised use, a control signal to limit the one or more functions of the vehicle. Advantageously the control system is arranged to determine that the vehicle is subject to unauthorised use in dependence on attributes of its environment. Advantageously the control system may only utilise onboard sensors to measure the attributes of its environment to determine that the vehicle is subject to unauthorised use. Advantageously the determination that the vehicle is subject to unauthorised use may not utilise wireless signals, such that if a wireless interface is rendered inoperable, the control system is capable of determining the unauthorised use. The control system may be arranged to determine that the vehicle is subject to unauthorised use in dependence on a vehicle state signal indicative of a state of the vehicle. Advantageously the state of the vehicle may be used, at least in part, to determine the unauthorised use of the vehicle. According to another aspect of the invention, there is provided a control system for controlling one or more functions of a vehicle, the control system comprising one or more processors collectively configured to receive a communication signal indicative of an operability of a wireless interface of the vehicle, receive one or both of a vehicle state signal indicative of a state of the vehicle or an environment signal indicative of an environment of the vehicle, determine, in dependence on the communication signal indicating that the wireless interface is inoperable, and one or both of the vehicle state signal and the environment signal, that the vehicle is subject to unauthorised use, and output, in dependence on the determination that the vehicle is subject to unauthorised use, a control signal to limit the one or more functions of the vehicle. Advantageously the control system is arranged to determine that the vehicle is subject to unauthorised use in dependence on the vehicle state and attributes of its environment. Advantageously the control system may utilise onboard sensors to measure the attributes of its environment to determine that the vehicle is subject to unauthorised use. Advantageously the determination that the vehicle is subject to unauthorised use may not utilise wireless signals, such that if a wireless interface is rendered inoperable, the control system is capable of determining the unauthorised use. Advantageously, it can be determined in dependence on an operability of the wireless interface and one or both of the vehicle state and the environment of the vehicle that the vehicle is subject to unauthorised use, and if so, the one or more functions are consequently limited. The control system comprises one or more controllers collectively comprising at least one electronic processor having an electrical input for receiving an input signal; and at least one memory device electrically coupled to the at least one electronic processor and having instructions stored therein; and wherein the at least one electronic processor is configured to access the at least one memory device and execute the instructions thereon so as to receive a communication signal indicative of an operability of a wireless interface of the vehicle, receive one or both of a vehicle state signal indicative of a state of the vehicle or an environment signal indicative of an environment of the vehicle, determine, in dependence on the communication signal indicating that the wireless interface is inoperable, and one or both of the vehicle state signal and the environment signal, that the vehicle is subject to unauthorised use, and output, in dependence on the determination that the vehicle is subject to unauthorised use, a control signal to limit the one or more functions of the vehicle. The one or more functions may comprise a power state or engine starting function of the vehicle. Advantageously the power state or starting function is limited when the vehicle is subject to unauthorised use. The one or more functions may comprise a maximum speed of the vehicle. Advantageously the speed of the vehicle is limited when the vehicle is subject to unauthorised use. The one or more functions optionally comprise a driving function of the vehicle. Advantageously one or more functions associated with driving the vehicle are limited when subject to unauthorised use. The driving function is a function of the vehicle used in relation to driving the vehicle, such as a function enabling or supporting the driving of the vehicle. The one or more processors may be collectively configured to determine, in dependence on one or both of the vehicle state signal and the environment signal, that the vehicle is being transported or is located outside of a predetermined geographic area and determine that the vehicle is subject to unauthorised use in dependence on said determination. Advantageously the transportation of the vehicle or the vehicle being located in an unauthorised location can be determined. The predetermined geographic area may be user-defined. Advantageously the user is able to determine authorised locations forthe vehicle. An indication of the predetermined geographic area is optionally received from a user device. Advantageously the user can conveniently define the geographic area. The vehicle being transported optionally comprises the vehicle being transported by another vehicle or apparatus. Advantageously the one or more functions are limited when the vehicle is or has been moved or transported. The vehicle state signal is indicative of a current state of the vehicle or one or more historic states of the vehicle. The unauthorised use may be determined in dependence on the current state differing from the one or more historic states. Advantageously a prior history of the vehicle is used to determine the unauthorised use. The current state of the vehicle comprises one or more of a current mass of the vehicle, a current motion of the vehicle and a rotation of one or more wheels of the vehicle. Advantageously the unauthorised used may be determined in dependence on the mass of the vehicle or the current motion of the vehicle. Advantageously the rotation of the one or more wheels of the vehicle may indicate unauthorised use of the vehicle. The one or more historic states of the vehicle comprise one or more of an opening of one or more apertures of the vehicle, an indication of one or more attributes of journeys of the vehicle, an indication of one or more attributes of control inputs to the vehicle, a position of one or more seats of the vehicle, and one or more settings of an infotainment system of the vehicle. Advantageously a variety of types of state are considered. The one or more apertures of the vehicle comprise one or more of a window, a door or a luggage compartment, e.g. boot or trunk, opening. Advantageously a change in use of the vehicle conditions may be indicative of the unauthorised use of the vehicle. The communication signal comprises one or both of telecommunications data and geolocation data. Advantageously different types of communication signal are utilised. The geolocation data is for determining a geographic location of a receiver. The wireless interface comprises a telecommunications interface. Advantageously an operability of a telecommunications interface or geolocation receiver of the vehicle is indicative of unauthorised use of the vehicle. The environment signal optionally comprises image data indicative of an image of at least a portion of the environment of the vehicle. Advantageously visual indications may indicate unauthorised use of the vehicle. The image of the environment of the vehicle comprises an interior environment of the vehicle and / or an exterior environment of the vehicle. Advantageously one or both of the interior or exterior environment may be considered. The one or more processors may be arranged to determine, in dependence on the image data, one or more visual localisation identifiers in the image and to determine a location of the vehicle in dependence thereon. Advantageously the visual identifier may indicate the location of the vehicle. The one or more visual localisation identifiers may comprise one or both of road signs and road names. Advantageously a language or format of the road signs and road names may indicate the location of the vehicle. The environment signal optionally comprises an audio signal indicative of audio in the environment of the vehicle and the processor is arranged to determine a language of words in the audio. Advantageously audible indications may indicate unauthorised use of the vehicle. Advantageously a language of the words may indicate the location of the vehicle. The environment signal comprises at least one signal indicative of one or both of a temperature of the environment of the vehicle and an altitude of the vehicle. Advantageously the temperature and / or altitude of the vehicle may indicative the location of the vehicle. According to a further aspect of the invention, there is provided a system comprising the control system of any preceding claim a wireless interface for receiving wireless signals and outputting the communication signal in dependence thereon, and one or more controllers arranged to provide the one or more functions of the vehicle, wherein the one or more controllers are arranged to receive the control signal and to limit the one or more functions in dependence thereon. The wireless interface optionally comprises one or both of a telecommunication interface, and a receiver for wireless location signals. The wireless location signals are optionally GPS, Galileo, GLONASS or similar signals. According to an aspect of the invention, there is provided a vehicle comprising the system described above or the control system described above. According to yet another aspect of the invention, there is provided a method for controlling one or more functions of a vehicle, the method comprising receiving a communication signal indicative of an operability of a wireless interface of the vehicle, receiving one or both of a vehicle state signal indicative of a state of the vehicle or an environment signal indicative of an environment of the vehicle, determining, in dependence on the communication signal indicating that the wireless interface is inoperable, and one or both of the vehicle state signal and the environment signal, that the vehicle is subject to unauthorised use, and outputting, in dependence on the determination that the vehicle is subject to unauthorised use, a control signal to limit the one or more functions of the vehicle. According to a yet further aspect of the invention, there is provided a set of computer readable instructions which, when executed by a computer, are arranged to perform a method as described above. According to a yet still further aspect of the present invention, there is provided a control system for controlling one or more functions of a vehicle, the control system comprising one or more processors collectively configured to receive an environment signal indicative of one or more audiovisual or atmospheric attributes of an environment of the vehicle, determine, in dependence on the environment signal, that the vehicle is subject to unauthorised use, and output, in dependence on the determination that the vehicle is subject to unauthorised use, a control signal to limit the one or more functions of the vehicle. Advantageously, it can be determined in dependence on audiovisual or atmospheric attributes of an environment of the vehicle that the vehicle is subject to unauthorised use, and if so, one or more functions of the vehicle are consequently limited. The audiovisual attribute may comprise one or more of an audible and a visual attribute or feature of the environment. The atmospheric attribute may comprise an attribute of the atmosphere such as temperature or pressure e.g. air pressure. Within the scope of this application it is expressly intended that the various aspects, embodiments, examples and alternatives set out in the preceding paragraphs, in the claims and / or in the following description and drawings, and in particular the individual features thereof, may be taken independently or in any combination. That is, all embodiments and / or features of any embodiment can be combined in anyway and / or combination, unless such features are incompatible. The applicant reserves the right to change any originally filed claim or file any new claim accordingly, including the right to amend any originally filed claim to depend from and / or incorporate any feature of any other claim although not originally claimed in that manner. BRIEF DESCRIPTION OF THE DRAWINGS One or more embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings, in which: Figure 1 shows a vehicle according to an embodiment of the invention; Figure 2 shows a control system according to an embodiment of the invention; Figure 3 shows a system according to an embodiment of the invention; and Figure 4 shows a method according to an embodiment of the invention. DETAILED DESCRIPTION A vehicle 100 in accordance with an embodiment of the present invention is described herein with reference to the accompanying Figure 1. The vehicle 100 comprises a control system 100, as illustrated in Figure 2, for controlling one or more functions of the vehicle 100. The control system 200 comprises one processors 210 which are collectively configured to perform a method 400 according to an embodiment of the invention, as will be explained. The vehicle 100 is a wheeled i.e. land-going vehicle, although it will be appreciated that embodiments of the invention may be used in other types of vehicles such as watercraft and aircraft. The control system 200 as illustrated in Figure 2 comprises one controller 200, although it will be appreciated that this is merely illustrative. The illustrated control system 200 comprises processing means 210 and memory means 220. The processing means 210 may be one or more electronic processing device 210 which operably executes computer-readable instructions, herein after called a processor 210. The memory means 220 may be one or more memory device 220, herein after called a memory 220. The memory 220 is electrically coupled to the processor 210. The memory 220 is configured to store instructions, and the processor 210 is configured to access the memory 220 and execute the instructions stored thereon. The memory 220 may also store data for use in the method 400 as will be explained. The control system 200 comprises an input means 230 and an output means 240. The input means 230 may comprise an electrical input 230 of the control system 200. The output means 240 may comprise an electrical output 240 of the control system 200. The input 230 is arranged to receive an electrical signal 235 which may originate from one or more sensors or other control systems of the vehicle 100. The electrical signal 235 may be indicative of one or more of an operability of a wireless interface 310, 320 of the vehicle 100, a state of the vehicle 100 or one or more subsystems thereof, and an environment of the vehicle 100, as will be explained. The output 240 is arranged to output a control signal 245, 355 for controlling or limiting, such as inhibiting, one or more functions of the vehicle 100 as will be explained. The one or more functions of the vehicle 100 are limited when it is determined that the vehicle 100 is subject to unauthorised use. In some embodiments the input 230 and output 240 may be integrated into an I / O unit or interface of the control system 200. The I / O interface may be a network interface of the control system 200 for connecting the control system 200 to a network system or bus of the vehicle 100 such as a communications bus for receiving data from and communicating data to sensors, control systems or control units of the vehicle 100 as would be understood by the skilled person. Figure 3 illustrates a system 300 according to an embodiment of the invention comprising the control system 200 of Figure 2. The control system 200 is connected to other components of the system 300 via the input 230 and output 240 or I / O interface of the control system 200. The system 300 comprises wireless interfaces 310, 320 in the form of a telecommunications interface or unit 310 and a geolocation receiver 320. The telecommunications interface 310 is arranged to communicate data with a wireless data network according to one or more predetermined standards, e.g. WiFi (IEEE 802.X) or a cellular communications network e.g. LTE, 4G, 5G, 6G etc. Other communications standards will be appreciated by the skilled person. The telecommunications interface 310 is arranged to wirelessly communicate data e.g. send and receive data to / from the vehicle 100. A signal 315 provided from the telecommunications interface 310 to the control system 200 is indicative of an operability of the telecommunications interface 310. The signal 315 may be referred to as a telecommunications operability signal (TOS) 315. TheTOS315 may comprise an indication of data sent or received by the telecommunications interface 310, or may be a signal 315 output by the telecommunications interface 310 indicative of correct operation thereof e.g. a telecommunications status signal (TSS) 315. The geolocation receiver 320 is arranged to receive wireless geolocation or navigation signals such broadcast by a satellite system e.g. GPS, Galileo, GLONASS etc., from which a geographic location of the vehicle 100 may be determined. A signal 325 provided from the geolocation receiver 320 to the control system 200 is indicative of an operability of the geolocation receiver 320. The signal 325 may be referred to as a geolocation operability signal (GOS) 325. The GOS 325 may comprise an indication of geolocation data received by the geolocation receiver 320, or may be a signal 325 output by the geolocation receiver 320 indicative of correct operation thereof e.g. a geolocation status signal (GSS) 325. The system 300 comprises a vehicle monitor 330. The vehicle monitor 330 is arranged to monitor a state of one or more aspects of the vehicle 100 and to provide an indication thereof to the control system 200. The vehicle monitor may comprise one or more of, for example, a body control module (BCM), a tyre pressure monitoring system (TPMS), a suspension control system, wheel speed monitor, seat zone module, or other control or monitoring module or system of the vehicle 100. The vehicle monitor 330 is configured to, in use, provide a vehicle state signal 335 indicative of the state of the vehicle 100 or a sub-unit thereof as will be explained. The system 300 comprises an environment monitor 340 for monitoring one or more attributes of an environment of the vehicle 100. The environment monitor 340 is arranged to determine one or more attributes of the environment of the vehicle 100 and to output an environment signal 345 indicative thereof, as will be explained. One or more of the TOS / TSS 315, GOS / GSS 325, vehicle state signal 335 and the environment signal 345 form the input signal 235 discussed above in relation to Figure 2. The system 300 comprises a vehicle control unit 350 or vehicle controller 350 which is arranged to control one or more functions of the vehicle 100. The control system 200 is arranged to output the control signal 245, 355 to the vehicle controller 350 which, in dependence thereon, limits one or more functions of the vehicle 100 as will be explained. For example, the vehicle controller 350 may prevent the vehicle entering one or more power states or an engine of the vehicle starting in dependence on the control signal 245, 355. The vehicle monitor 330 provides the vehicle state signal 335 to the control system 200. As noted above, the vehicle monitor 330 may comprise one or more modules, units or sub-systems each arranged to provide an indication of a state of a respective portion or attribute of the vehicle 100 to the control system 200. Thus the vehicle state signal 335 may comprise a plurality of portions or sub-signals each indicative of the respective attribute or state of the vehicle 100. In some embodiments the vehicle monitor 330 may comprise the BCM of the vehicle 100 which is arranged to provide the vehicle state signal 335 to the control system 200 indicative of a state of one or more vehicle-body-related attributes of the vehicle, which may include one or more of a state of one or more apertures such as windows, doors, boot opening, trunk etc. of the vehicle e.g. open / closed, locks of the vehicle e.g. locked / unlocked, a position of one or more seats of the vehicle e.g. a distance of the driver’s seat of the vehicle from the steering wheel ordashboard, etc., as will be appreciated. In some embodiments the vehicle monitor 330 may comprise one or more modules or units related to the vehicle’s suspension position or movement and / or one or more modules or units related to the vehicle’s wheels e.g. rotation of one or more wheels. The vehicle’s suspension position is measured by one or more sensors e.g. associated with, for example, suspension dampers or suspension components e.g. suspension arms, and an indication of the suspension position and / or movement is provided, in some embodiments, from a suspension module as the vehicle state signal 335. In dependence on the position of the vehicle’s suspension, a mass of the vehicle 100 may be determined by the suspension module and an indication thereof provided to the control system 200 as part of the vehicle state signal 335. The vehicle s wheel position or movement, i.e. rotation, is measured by one or more sensors, such as a sensor arranged to measure the rotation of a toothed ring associated with a wheel, past a position of the sensor. An indication of the rotation of the wheel may thus form part of the vehicle state signal 335 provided to the control system 200. In dependence on the indication of the position of the vehicle’s suspension and the indication of the rotation of the vehicle’s wheels, it can be determined that the vehicle is being transported e.g. on a trailer, in a wagon, in a container etc., when the suspension position indicates movement of the vehicle body without rotation of the wheel(s) of the vehicle 100. Furthermore, in dependence on the indication of the position of the vehicle’s suspension, the mass of the vehicle 100 may be indicative of removal of one or more parts from the vehicle, such as removal of an exhaust system of the vehicle 100, when the mass of the vehicle 100 is reduced from a known or previous mass of the vehicle 100. A change in mass of the vehicle 100 by more than a predetermined amount or threshold mass may indicate removal of a component from the vehicle 100. In dependence on the position of one or more seats of the vehicle e.g. the position of the driver’s seat, an identification of the driver of the vehicle, or one or more passengers, may be at least inferred or determined. In some embodiments, the vehicle monitor 330 may comprise an entertainment or infotainment system of the vehicle 100 which is arranged to provide the control system 200 with identifying information associated with one or more radio stations receivable by the entertainment system of the vehicle 100. For example, the identifying information may indicate that ‘BBC Radio 4’ is receivable by the entertainment system of the vehicle 100. Using the identifying information a region, such as a country or smaller region e.g. Yorkshire, may be identified as a location of the vehicle 100. The environment monitor 340 comprises, or is associated with, one or more sensors for determining the one or more attributes of the environment of the vehicle 100. The determination may comprise measuring or sensing the one or more attributes of the environment of the vehicle 100 and outputting the environment signal 345 indicative thereof. The environment monitor 340 may be associated with one or more imaging devices or cameras for outputting image data which may form at least part of the environment signal 345. At least some of the imaging devices may be arranged to image an exterior environment of the vehicle 100 i.e. a region exterior to and proximal to the vehicle 100, and to output exterior image data corresponding thereto. In some embodiments, at least some of the imaging devices may be arranged to image an interior environment of the vehicle 100 and to output interior image data. The interior image data may be useful to capture images of occupants of the vehicle 100. In some embodiments, the environment monitor 340 is arranged to identify visual features in the image data and to output feature data indicative thereof to the control system 200. The visual features may comprise one or more visual localisation identifiers i.e. visual features which can be recognised from which a geographic location of the vehicle 100 may be determined. The visual localisation identifiers may comprise signage which may provide instructions or directions for vehicles, and location, road or place etc. name signs. Other signage may also be envisaged and recognised. The visual features may comprise faces of persons, where facial recognition can be performed on the faces in the image data in order to determine an identity of those persons. It may be determined that persons in the image data are not recognised i.e. are not previous or regular users of the vehicle 100. In some embodiments the environment monitor 340 may determine whether the vehicle 100 is covered or enclosed, for example by determining an absence oflighting (such as at a time of day when it would be expected to be light). As would be understood, in some theft scenarios, the vehicle 100 may be covered to hide the vehicle 100 or during transport of the vehicle 100, such as when the vehicle 100 is loaded into an enclosure e.g. a shipping container or similar. The environment monitor 340 may be associated with one or more audio devices e.g. microphones for each outputting an electrical audio signal indicative of audible sounds in the environment of the vehicle 100, where the audio signal may form at least part of the environment signal 345. In some embodiments the environment monitor 340 may perform speech recognition on the output audio signal(s) to determine words present in the received audible sounds. In such embodiments the environment monitor 340 may output language data indicative of the recognised words to the control system 200. The language data may be indicative of a language of the words e.g. English (UK), English (US), English (Australian), German, French etc. Differences between e.g. English (US) and English (Australian), for example, may be detected by words such as slang or abbreviations or an accent of speakers. The environment monitor 340 may be associated with one or more sensors, wherein the environment signal 345 comprises data indicative of an environmental attribute according to measurements of each of the one or more sensors. The sensors may comprise one or more of a temperature sensor and an altitude sensor (such as an air pressure sensor) indicative of an altitude of the vehicle’s location, which may provide an indication of the environment of the vehicle. Figure 4 illustrates a method 400 according to an embodiment of the invention. The method 400 is a method of controlling one or more functions ofthe vehicle 100 illustrated in Figure 1. In particular, the method 400 is a method of determining that the vehicle 100 is subject to unauthorised use and, in dependence thereon, controlling one or more functions ofthe vehicle. In particular, the one or more functions may be limited when then the vehicle 100 is determined to be subject to unauthorised use. The method 400 may be performed by the system 300 illustrated in Figure 3. The memory 220 may comprise computer-readable instructions which, when executed by the processor 210, cause the processor to perform the method 400 according to an embodiment ofthe invention. As will be explained, the method 400 infers when the vehicle 100 is subject to unauthorised use and, in dependence thereon, controls the one or more functions to restrict capability or operational functionality ofthe vehicle 100. The method may be performed when the vehicle 100 is entered into a specific mode of operation, such as what may be known as a guardian or high-security mode. Such modes may be activated via an associated electronic device e.g. mobile telephone or key fob associated with the vehicle 100. Prior to execution ofthe method 400, one or more geographic areas may be defined in some embodiments, such that each geographic area is predetermined. Data indicative ofthe one or more geographic areas may be stored in a data storage device such as the memory 220. Each geographic area is a geographic region or location at which the vehicle 100 is expected to reside or be left for a period of time. Thus each geographic area may represent an expected location for the vehicle 100. A geographic area may correspond to a home location for the vehicle, or a work location. Other locations may be envisaged. A geographic area may be defined by a user interacting with a user interface associated with the vehicle 100, such as either on a display device within the vehicle 100 or using an electronic device e.g. mobile phone, tablet etc, executing an application associated with the vehicle 100 e.g. an ‘app’ provided by the vehicle manufacturer. In this case, data indicative ofthe geographic area is received at the vehicle 100 from the electronic device. The geographic area may be defined by alphanumeric information provided by the user e.g. post code, ZIP code etc., or by name e.g. Gaydon, Yorkshire, or Wales or by drawing or identifying points on a geographic boundary ofthe region e.g. drawing on a displayed map to define each geographic area. The one or more geographic areas are used in some embodiments of the method 400 to determine whether the vehicle 100 is subject to unauthorised use, such as when the vehicle 100 is located outside of the one or more predetermined geographic areas as will be explained. The one or more geographic locations or areas may be referred to as permitted geographic locations or areas. In some embodiments, a data store comprising data indicative of one or more expected operating parameters ofthe vehicle 100 or its operating environment is provided. The data store may be stored in the memory 220, although any data storage location accessible to the processor 210 may be used such as stored at a remote server or in cloud-based storage. Storing data locally to the processor 210 may be advantageous as being accessible even in an event that the vehicle 100 is not able to wirelessly communicate data to access the data store. The data store may be a database or other data storage structure for storing the one or more expected operating parameters ofthe vehicle 100. The expected operating parameters may be used to compare against the current state ofthe vehicle 100 as indicated by the vehicle state signal 335 and the environment ofthe vehicle as indicated by the environment signal 345. Some operating parameters may be provided by a user or manufacturer ofthe vehicle 100 e.g. country of use e.g. United Kingdom, Thailand etc, road driving side e.g. right or left, local language etc. Other sources of data comprise, for example, historic measurements e.g. during previous use ofthe vehicle 100, a temperature ofthe vehicle’s environment may be periodically measured and data indicative of the environment temperature stored. The temperature measurements may be used to determine by analysis e.g. an average temperature, a standard deviation of temperature such that e.g. a 95% confidence ofthe environmental temperature determined. Other data stored may comprise one or more of an operating altitude ofthe vehicle, an operating environment language e.g. English (UK), French, English (US), an operating mass ofthe vehicle 100 etc. Other data may be stored indicative of previous or historic use associated with the vehicle 100 for assisting in a determination of unauthorised use ofthe vehicle 100. The method 400 comprises a block comprising receiving 410 a communication signal 315, 325 indicative of an operability of a wireless interface 310, 320 ofthe vehicle 100. It has been observed that often, when vehicles are subject to unauthorised use, the unauthorised user may prevent a communication capability ofthe vehicle 100. The communication capability may be the ability ofthe vehicle 100 to communicate data and / or to determine the vehicle’s location from received location signals. The wireless interface 310, 320 may comprise the telecommunications interface 310 of the vehicle 100 for wirelessly communicating data. As discussed above, the signal 315 provided from the telecommunications interface 310 to the control system 200, indicative of the operability of the telecommunications interface 310, may comprise one or both of the telecommunications operability signal (TOS) 315 or the telecommunications status signal (TSS) 315. The control system 200 may determine the operability of the telecommunications interface 310 in dependence thereon. As an example, where the vehicle 100 is interfered with to remove or destroy the vehicle’s ability to communicate data, such as by removal or making inoperable an antenna associated with the telecommunications interface 310 or by removal or making inoperable the interface 310 itself e.g. interfering with a power and / or data connection to the telecommunications interface 310. In this way, the vehicle’s ability to communicate data is reduced. Where the telecommunications interface 310 is still present i.e. operable but unable to communicate data, the TSS 315 may indicate the inability, or where the telecommunications interface 310 is not operable, or has been removed, the TOS 315 may indicate the lack of data communication to the control system 200. Therefore in block 410 the processor 210 is informed about the lack of data communication capability in block 410 of the method 400. The wireless interface 310, 320 may comprise the geolocation receiver 320 for receiving wireless geolocation or navigation signals to determine the geographic location of the vehicle 100. As discussed above, the signal 325 provided from the geolocation receiver 320 to the control system 200 may be the geolocation operability signal (GOS) 325 providing the indication of geolocation data received by the geolocation receiver 320, or may be the geolocation status signal (GSS) 325. In some circumstances, the unauthorised user may reduce or eliminate the ability of the geolocation receiver 320 to receive geolocation data, such as by shielding an antenna associated with the geolocation receiver 320 or damaging the antenna such that it cannot, or has reduced ability, to receive wireless signals providing the geolocation data. Thus the GOS 325 may indicate the lack of operability of the geolocation receiver 320. Similarly, where the geolocation receiver 320 is rendered at least partially inoperable or removed, the GSS 325 may indicate the inoperability to the control system 200. As can be appreciated, in block 410 the control system 200 is provided with an indication of an operability of one or more wireless interfaces 310, 320 of the vehicle 100, such as the one or more wireless interfaces 310, 320 being at least partially inoperable. The method 400 comprises a block comprising receiving 420 one or both of the vehicle state signal 335 indicative of a state of the vehicle 100 orthe environment signal 345 indicative of an environment ofthe vehicle 100. The vehicle state signal 335 is received at the control system 200. The vehicle state signal 335 is indicative of the state ofthe vehicle 100, such as one or more attributes ofthe vehicle’s state. The vehicle state signal 335 is output by the vehicle monitor 330 which, as discussed above, may comprise, for example, the body control module (BCM), the tyre pressure monitoring system (TPMS), the suspension control system, the wheel speed monitor, the seat zone module, or other control or monitoring module or system ofthe vehicle 100. The environment signal 345 is received at the control system 200. The environment signal 345 is indicative of one or more attributes of the environment of the vehicle 100. The environment signal 345 is output by the environment monitor 340 which, as discussed above, comprises or is associated with one or more sensors for determining the one or more attributes of the environment of the vehicle 100. Specific examples of the vehicle state signal 335 and environment signal 345 are discussed further below in connection with block 430. The method 400 comprises a block comprising determining 430 that the vehicle 100 is subject to unauthorised use. The determination is performed in block 430 in dependence on signals received in one or both of blocks 410 and 420. In some embodiments, the determination in block 430 is performed in dependence on the communication signal 315, 325 indicating that one or more wireless interface 310, 320 of the vehicle 100 is inoperable, and one or both of the vehicle state signal 335 and the environment signal 345. In block 430 the determination is made the vehicle 100 is subject to unauthorised use in dependence on the signals from onboard sensors or measurements i.e. without reference to externally received signals which allows the determination to be performed even when the vehicle 100 has been rendered unable to communicate. In block 430 the determination may comprise determining that the vehicle 100 is being moved transported, such as by another vehicle or apparatus e.g. crane, container etc, or is located outside of the one or more permitted geographic areas. Block 430 may comprise determining that at least one wireless interface 310, 320, or in some embodiments a plurality of wireless interfaces 310, 320 where there are more than one, is operable, the determination being made in dependence on the one or more communication signals received in block 410. Where each wireless interface 310, 320 continues to be operable, then it is determined in some embodiments that the vehicle 100 is likely not subject to unauthorised use. However, when the, or one or more of the, wireless interface(s) 310, 320 are at least partially inoperable, this may be indicative of the vehicle 100 being subject to unauthorised use. However, the inoperability of the at least one wireless interface 310, 320 may not, in some embodiments, alone be determinative of unauthorised use. In some embodiments, the communication signal being indicative of two or more wireless interfaces of a plurality of wireless interfaces 310, 320 may be required as an indication of the unauthorised use. Block 430 may comprise determining that the vehicle state signal 335 is indicative of unauthorised use of the vehicle 100. In some embodiments block 430 comprises comparing the current or recent vehicle state as indicated by the vehicle state signal 335 against historic or previous vehicle states as indicated by the stored data e.g. stored in the memory 220. In other words, a prior history of the vehicle 100 is used to determine whether the vehicle 100 is now subject to a new state. In some embodiments the vehicle state signal 335 is indicative of vehicle-body-related attributes of the vehicle, such as opening / closing of one or more apertures such as windows, doors, boot or luggage openings of the vehicle, such as trunk, e.g. open / closed, locks of the vehicle e.g. locked / unlocked, a position of one or more seats of the vehicle e.g. a distance of the driver’s seat of the vehicle from the steering wheel ordashboard, etc. Block 430 may comprise determining a recent, such as within a predetermined time period e.g. within 4 or 8 hours, or 1 day (although other time periods may be envisaged) pattern of door, window or boot / trunk openings of the vehicle, unlocking of the vehicle, a recent position of the driver’s seat, steering wheel or other moveable feature of the vehicle 100. Similarly, the vehicle state signal may indicate a recent pattern of use of the vehicle e.g. a recent average journey length, driving style (which may be indicated by a magnitude or frequency of driving inputtothe vehicle 100 e.g. hard braking, rapid steering input etc.). In some embodiments, the vehicle state signal 335 may indicate a recent source of in-vehicle entertainment e.g. music or radio station. One or more attributes of the recent vehicle state may be compared against the historic vehicle state’s attributes to determine changes in the pattern of use of the vehicle 100, such as the vehicle 100 recently being driven in a different style, recently with no passengers compared to historically with passenger (as indicated by door openings of the vehicle 100), a change in driver’s seat position (e.g. recently being driven with the driver’s seat a significant distance further away from the steering wheel than historically). Furthermore, the vehicle state signal 335 may be indicative of a current mass of the vehicle 100 being less, e.g. 100kg less, than a historic unladen mass of the vehicle, which may be indicative of one or more parts or systems of the vehicle 100 having been removed, such as an exhaust system of the vehicle. The vehicle state signal 335 may provide an indication of one or more of an opening of one or more apertures of the vehicle, an indication of one or more attributes of journeys of the vehicle e.g. journey length, start location and destination, an indication of one or more attributes of control inputs to the vehicle e.g. severity, magnitude, a position of one or more seats of the vehicle 100 e.g. a driver’s seat position when driving, and one or more settings of an infotainment system of the vehicle 100 e.g. volume, entertainment source etc. A machine learning model may be trained upon the historic data and receive as an input the vehicle state signal to determine if there has been a change in the pattern of use of the vehicle 100. Changes between the recent vehicle state and historic vehicle state may be indicative of unauthorised use of the vehicle 100. In some embodiments, block 430 comprises determining a current vehicle state as indicative of unauthorised use of the vehicle 100 in dependence on a plurality of received signals which lack correlation or are inconsistent. For example, the vehicle state signal 335 may be indicative of motion of the vehicle’s body (which may be measured as movement at or via the suspension of the vehicle 100) at a time when motion or rotation of the vehicle’s wheels is not measured. In such a situation it can be inferred that the vehicle 100 is being transported, such as on a wagon, truck or in a container as examples. Block 430 may comprise determining that the environment signal 345 is indicative of unauthorised use of the vehicle 100. The determination of unauthorised use is made in block 430 in some embodiments based on the vehicle’s environment or local environment as determined by on-board sensors of the vehicle 100. In some embodiments, block 430 comprises comparing one or more attributes of the current or recent environment of the vehicle 100, as indicated by the environment signal 345, against historic or previous attributes of the vehicle’s environment as indicated by the stored data e.g. stored in the memory 220. In some embodiments, block 430 comprises determining or inferring a current location of the vehicle 100 from one or more attributes of the environment signal 345 and comparing the determined location against the one or more permitted geographic locations or areas as indicated by data stored in the memory 220. If the vehicle 100 is located outside of the permitted geographic area(s) it may be determined that the vehicle 100 is subject to unauthorised use. In some embodiments, block 430 comprises determining a temperature of the environment of the vehicle 100. The temperature may be a current temperature or a temperature over a period of time e.g. average temperature, such as over the preceding period of time e.g. 1 day, 2 days etc. The determined temperature e.g. current temperature or recent temperature may be compared against one or more previous temperatures experienced by the vehicle 100 i.e. to determine if a difference of temperature exists between the current environment of the vehicle 100 and a regular, previous, environment, of the vehicle 100. If, for example, the vehicle 100 previously experienced temperatures of 10-20°C and the current temperature is, for example 29°C, then it may be determined in block 430 that the vehicle is located in a new environment, such as in different region or country. To avoid single erroneous measurements, the current temperature may be determined over a period of time which may reduce a risk of the vehicle 100 being parked in a location e.g. indoors with an unusual temperature environment causing an erroneous determination. In some embodiments, block 430 comprises determining an altitude e.g. height above sea level of the vehicle 100. The altitude may be a current altitude or an altitude of the vehicle 100 over a period of time e.g. average altitude, such as over the preceding period of time e.g. 1 day, 2 days etc. The determined altitude e.g. current altitude or recent altitude(s) or average altitude may be compared against one or more previous altitudes of the vehicle 100 i.e. to determine if a difference of altitude exists between the current altitude of the vehicle 100 and a regular, previous, altitude of the vehicle 100. If, for example, the vehicle 100 previously resided at an altitude of 45m and the current or recent altitude is, for example 334m, then it may be determined in block 430 that the vehicle is located in a new environment or location, such as in different region or country. To avoid single erroneous measurements, the current altitude may be determined over a period of time which may reduce a risk of the vehicle 100 being parked in a location causing an erroneous determination. The change in environmental conditions, such as temperature or altitude, may be required to be at least a predetermined respective threshold e.g. at least 10°C, for the determination of unauthorised use to be made in block 430. In some embodiments where the environment monitor 340 comprises one or more imaging devices or cameras arranged to output image data which may form at least part of the environment signal 345, one or more features in the image data may be identified which are indicative of the environment of the vehicle 100. A location of the vehicle 100 may be inferred from the one or more features providing visual identifiers of the vehicle’s location. The visual identifiers may be determined to indicate of unauthorised use of the vehicle 100. In some embodiments, the image data may be indicative of the vehicle 100 being enclosed or covered. For example, it may be determined from a light level of the image data that the vehicle 100 is enclosed or covered, such as located in a container or under a tarpaulin or similar flexible covering material. The image data may be cross-referenced with a time of day to determined when it would be expected to be light to determine the enclosure or covering. In such embodiments the image data is indicative of an image of at least a portion of the environment of the vehicle 100. The image data may be indicative of an exterior environment of the vehicle 100 in which one or more features are located. The one or more features may be associated with a driving environment of the vehicle 100, such as associated with roads e.g. a determination of a side of the road on which vehicles are driving, which may be performed by vehicle recognition and identifying carriageway or lane dividers / demarcation e.g. surface markings diving sides of the road. For example, if the vehicle 100 is regularly or previously driven on the left-hand side of the road, but is currently driven on the right-hand side, then a change of location or country can be inferred. In some embodiments, the visual identifiers in the image data may be textual or alphanumeric. The one or more visual localisation identifiers may comprise one or both of road signs and road names. For example, by using text recognition applied to the image data road direction or name signs may be identified or captured which provide an indication of the current location or nearby locations e.g. nearby towns or cities. For example, a sign may indicate a direction to ‘Barcelona’ in Spain, whereas previously identified signs indicate that the vehicle is normally located in France by providing names of French towns etc. When such a difference occurs, it may be determined in block 430 that the vehicle has changed location. In some embodiments, using image recognition, road signs in the image data may be identified. A language or format of the road signs may indicate the location of the vehicle 100. In some embodiments, where the location of the vehicle 100 determined from the image data is outside of the one or more permitted geographic areas, unauthorised use of the vehicle 100 may be determined. In some embodiments, the image of the environment of the vehicle 100 comprises an interior environment of the vehicle i.e. interior to the vehicle 100. In block 430, facial recognition may be used to identify faces or persons present in the image data (exterior or interior image data) accessing the vehicle 100 e.g. sitting in seats of the vehicle 100. If there is a change in users of the vehicle 100 the unauthorised use may be determined. In some embodiments, where the environment monitor 340 comprises one or more audio capture devices or microphones arranged to output audio data which may form at least part of the environment signal 345, one or more audible features in the audio data may be identified which are indicative of the environment of the vehicle 100. The audible features may provide audible indications of the location of the vehicle, such as location references, from which the location of the vehicle 100 may be determined. Where the location of the vehicle 100 determined from the data is outside of the one or more permitted geographic areas, unauthorised use of the vehicle 100 may be determined. In some embodiments, the audible features may comprise words which may be subject to language processing to identify a language of words in the audio. The language may indicate a country in which the vehicle 100 is located. The words may also provide locations references e.g. references to towns or cities from which the location of the vehicle 100 may be determined. In some embodiments, the vehicle state signal 335 is utilised in combination with the environment signal 345 to determine the unauthorised use. For example, where there is movement of the vehicle 100 and one or more cameras of the vehicle are determined to be covered then unauthorised use of the vehicle 100 may be determined. If it is determined in block 430 that the vehicle 100 is not subject to unauthorised use, the method follows path 432 to return to bock 410. For example, the determined location of the vehicle 100 may be within a permitted area as indicated by data stored in the memory 220. If, however, it is determined that the vehicle 100 is subject to unauthorised use, then the method 400 follows path 435 to move to block 440. For example, it may be determined in block 435 that the vehicle 100 is located outside of the one or more permitted areas, or the vehicle is enclosed and being moved, such as being in a container being transported on a wagon or truck. The method 400 comprises a block, reached via path 435, comprising outputting 440 a control signal 355 to limit the one or more functions of the vehicle 100. Thus the one or more functions of the vehicle 100 are limited in dependence on the determination that the vehicle 100 is subject to unauthorised use. The one or more functions may comprise a power state or engine starting function of the vehicle 100. For example, the control signal 355 may be used to prevent the vehicle entering a power state which provides traction power. The control signal 355 may be provided to a HV system of the vehicle 100 to inhibit power to one or more traction motors of the vehicle 100, such that the vehicle 100 cannot be driven. The control signal 355 may alternatively or additionally prevent starting of a combustion engine of the vehicle 100. In other embodiments, the control signal 355 may be used to inhibit or limit a function of the vehicle associated with driving i.e. a driving function of the vehicle 100. Whilst the vehicle 100 may, at least initially, be able to be driven when so inhibited or restricted, one or more functions may limit useability of the vehicle 100. For example, the one or more functions comprise a maximum speed of the vehicle 100 i.e. limiting the maximum speed to a relatively slow speed e.g. 30 or 50kmh1, although other speeds may be selected. Other functions or limitations may comprise a useable duration or time of the vehicle 100 e.g. the driving function of the vehicle may be limited to e.g. 5 or 10 minutes or 2, 3 or 5kmh-1 such that driving of the vehicle 100 is prevented after the duration or distance. The vehicle 100 may be caused to output an indication of the upcoming inhibition e.g. visually on a display screen within the vehicle 100, such that a user may park the vehicle 100 in advance of the inhibition. The driving function may comprise limiting the vehicle to a low-speed driving mode. The control signal 355 may inhibit any driving function of the vehicle 100 which renders the vehicle at least partly inoperable or limited in use. Advantageously, it can be determined in dependence on an operability of the wireless interface and one or both of the vehicle state and the environment of the vehicle that the vehicle is subject to unauthorised use, and if so, the one or more functions are consequently limited. It will be appreciated that various changes and modifications can be made to the present invention without departing from the scope of the present application.

Claims

1. A control system for controlling one or more functions of a vehicle, the control system comprising one or more processors collectively configured to:receive a communication signal indicative of an operability of a wireless interface of the vehicle;receive one or both of a vehicle state signal indicative of a state of the vehicle and an environment signal indicative of an environment of the vehicle;determine, in dependence on the communication signal indicating that the wireless interface is inoperable, and one or both of the vehicle state signal and the environment signal, that the vehicle is subject to unauthorised use; andoutput, in dependence on the determination that the vehicle is subject to unauthorised use, a control signal to limit the one or more functions of the vehicle.

2. The control system of claim 1, wherein the one or more processors are collectively configured to determine, in dependence on one or both of the vehicle state signal and the environment signal, that the vehicle is being transported or is located outside of a predetermined geographic area and determine that the vehicle is subject to unauthorised use in dependence on said determination.

3. The control system of claim 1 or 2, wherein the vehicle state signal is indicative of a current state of the vehicle or one or more historic states of the vehicle.

4. The control system of claim 3, wherein the current state of the vehicle comprises one or more of a current mass of the vehicle, a current motion of the vehicle and a rotation of one or more wheels of the vehicle.

5. The control system of claim 3 or 4, wherein the one or more historic states of the vehicle comprise one or more of:an opening of one or more apertures of the vehicle,an indication of one or more attributes of journeys of the vehicle,an indication of one or more attributes of control inputs to the vehicle, a position of one or more seats of the vehicle, andone or more settings of an infotainment system of the vehicle.

6. The control system of any preceding claim, wherein the communication signal comprises one or both of telecommunications data and geolocation data.

7. The control system of any preceding claim, wherein the environment signal comprises image data indicative of an image of at least a portion of the environment of the vehicle.

8. The control system of claim 7, wherein the one or more processors are arranged to determine, in dependence on the image data, one or more visual localisation identifiers in the image and to determine a location of the vehicle in dependence thereon.

9. The control system of any preceding claim, wherein the environment signal comprises an audio signal indicative of audio in the environment of the vehicle and the one or more processors are arranged to determine a language of words in the audio.

10. The control system of any preceding claim, wherein the environment signal comprises at least one signal indicative of one or both of a temperature of the environment of the vehicle and an altitude of the vehicle.

11. A system comprising:the control system of any preceding claim;a wireless interface for receiving wireless signals and outputting the communication signal in dependence thereon; andone or more controllers arranged to provide the one or more functions of the vehicle, wherein the one or more controllers are arranged to receive the control signal and to limit the one or more functions in dependence thereon.

12. The system of claim 11, wherein the wireless interface comprises one or both of a telecommunication interface; anda receiver for wireless location signals.

13. A vehicle comprising the system of claim 11 or 12 or the control system of any of claims 1 to 10.

14. A method for controlling one or more functions of a vehicle, the method comprising:receiving a communication signal indicative of an operability of a wireless interface of the vehicle;receiving one or both of a vehicle state signal indicative of a state of the vehicle and an environment signal indicative of an environment of the vehicle;determining, in dependence on the communication signal indicating that the wireless interface is inoperable, and one or both of the vehicle state signal and the environment signal, that the vehicle is subject to unauthorised use; andoutputting, in dependence on the determination that the vehicle is subject to unauthorised use, a control signal to limit the one or more functions of the vehicle.

15. Computer readable instructions which, when executed by a computer, are arranged to perform a method according to claim 14.

Images