Settlement verification method and system, server, vehicle, device, medium, and product

By sending a mileage write task with configuration words to the vehicle and verifying it, the problem of low reliability of vehicle mileage settlement is solved, and the accuracy and security of mileage settlement during the car rental process are achieved.

WO2026026702A1PCT designated stage Publication Date: 2026-02-05ZHEJIANG GEELY HLDG GRP CO LTD +1
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
PCT/CN2025/110822
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2024-07-31
Filing Date
2025-07-28
Publication Date
2026-02-05

AI Technical Summary

Technical Problem

In existing technologies, the reliability of vehicle mileage settlement is low, and it cannot effectively prevent malicious entry of mileage information, resulting in inaccurate settlement results.

Method used

The server sends a mileage write task to the vehicle, which includes a first configuration word and a second configuration word. The vehicle performs mileage settlement based on these configuration words and the remaining mileage stored locally, and verifies the settlement result through the first configuration word to ensure that the mileage settlement result does not exceed the remaining mileage in the state of no purchase.

Benefits of technology

This improves the reliability of mileage settlement during the car rental process, prevents malicious mileage swiping, and ensures the accuracy and security of settlement results.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN2025110822_05022026_PF_FP_ABST
    Figure CN2025110822_05022026_PF_FP_ABST
Patent Text Reader

Abstract

The present application provides a settlement verification method and system, a server, a vehicle, a device, a medium, and a product. The method comprises: a server sends, to a vehicle, a mileage refreshing task comprising a first configuration word and a second configuration word, so that the vehicle performs mileage settlement on the basis of the first configuration word, the second configuration word, and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result on the basis of the first configuration word. In the solution of the present application, the server issues, to the vehicle, a configuration word indicating a mileage purchase state and mileage data to be settled, and when in a non-purchased state, the vehicle verifies the first settlement result by means of the remaining mileage, thereby improving the reliability of mileage settlement during vehicle rental.
Need to check novelty before this filing date? Find Prior Art

Description

Settlement verification method, server, vehicle, system, device, medium and product

[0001] The present application claims priority to the Chinese patent application No. 202411044220.4, filed on July 31, 2024, and entitled "Settlement verification method, server, vehicle, system, device, medium and product", the content of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0002] Embodiments of the present application relate to, but are not limited to, the vehicle technical field, and in particular to a settlement verification method, server, vehicle, system, device, medium and product. BACKGROUND

[0003] Automobile rental service providers provide various types of vehicles to meet the needs of different customers. In the automobile rental market, the settlement method is usually divided into two types: mileage settlement based on the mileage of the user using the vehicle, time settlement based on the time of the user using the vehicle, or package settlement combining the above two. SUMMARY

[0004] The present application provides a settlement verification method, server, vehicle, system, device, medium and product to improve the reliability of mileage settlement in the car rental process.

[0005] In one aspect, the present application provides a settlement verification method applied to a server; the method comprises: sending a mileage flashing task including a first configuration word and a second configuration word to a vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word; wherein the first configuration word represents the mileage purchase state, and the second configuration word represents the first mileage data to be settled; wherein the verification includes: when the first configuration word represents that the mileage is not purchased, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed; if the mileage corresponding to the first settlement result is greater than the remaining mileage, it is determined that the verification is not passed.

[0006] In one possible implementation, the sending of the mileage flashing task including the first configuration word and the second configuration word to the vehicle comprises: sending the mileage flashing task to the BGM of the vehicle, so that the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle, and the VCU of the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0007] In a possible implementation, the method further includes: receiving the first settlement result sent by the vehicle; and performing consistency verification on the first settlement result and the second settlement result stored locally, and determining that the vehicle mileage settlement verification fails if the consistency verification fails.

[0008] In a possible implementation, the method further includes: if the vehicle mileage settlement verification fails, sending the mileage flashing task including the first configuration word and the second configuration word to the vehicle again.

[0009] In another aspect, the application provides a settlement verification method applied to a vehicle, including: receiving a mileage flashing task sent by a server, the mileage flashing task including a first configuration word and a second configuration word; wherein the first configuration word represents a mileage purchase state, and the second configuration word represents first mileage data to be settled; performing mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result; and performing verification on the first settlement result according to the first configuration word; the verification includes: when the first configuration word represents no purchase, if mileage corresponding to the first settlement result is not greater than the remaining mileage, determining that the verification passes, otherwise, determining that the verification fails.

[0010] In a possible implementation, before performing the mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage, the method further includes: matching the first configuration word and the second configuration word; the matching includes: if the mileage purchase state is no purchase and the first mileage data is greater than zero, or if the mileage purchase state is already purchased and the first mileage data is not greater than zero, the vehicle does not perform the settlement, and determines that the vehicle mileage settlement verification fails; and performing the mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage includes: if the mileage purchase state is no purchase and the first mileage data is not greater than zero, or if the mileage purchase state is already purchased and the first mileage data is greater than zero, the vehicle performs the mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0011] In a possible implementation, the vehicle includes a BGM and a VCU; and receiving the mileage flashing task sent by the server includes: the BGM of the vehicle receiving the mileage flashing task sent by the server, and broadcasting the first configuration word and the second configuration word to the VCU of the vehicle; and the VCU of the vehicle performing the mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0012] In a possible implementation, after receiving the mileage writing task sent by the server, the BGM of the vehicle further comprises: matching the first configuration word and the second configuration word; the matching comprises: if the mileage purchase state is not purchased and the first mileage data is greater than zero, or if the mileage purchase state is purchased and the first mileage data is not greater than zero, the BGM does not execute the step of broadcasting the first configuration word and the second configuration word, and determines that the vehicle mileage settlement verification fails this time; the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle, comprising: if the mileage purchase state is not purchased and the first mileage data is not greater than zero, or if the mileage purchase state is purchased and the first mileage data is greater than zero, the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle.

[0013] In a possible implementation, the vehicle further comprises a DHU; the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle, comprising: the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle and the DHU of the vehicle; after the VCU of the vehicle performs the mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage, the VCU of the vehicle further comprises: the VCU of the vehicle sends the first settlement result obtained by the VCU of the vehicle performing the mileage settlement according to the first configuration word and the second configuration word to the DHU of the vehicle.

[0014] In a possible implementation, the method further comprises: after receiving the first configuration word and the second configuration word broadcasted by the BGM of the vehicle, if the first settlement result sent by the VCU of the vehicle is not received within a predetermined time, the DHU of the vehicle determines that the vehicle mileage settlement verification fails this time.

[0015] In a possible implementation, the method further comprises: the DHU of the vehicle sends the first settlement result to the server, so that the server performs consistency verification according to the first settlement result and the locally stored second settlement result, and determines that the vehicle mileage settlement verification fails this time if the consistency verification fails.

[0016] In a possible implementation, the method further comprises: if the number of times of vehicle mileage settlement verification failure reaches a preset value, the vehicle performs at least one of the following vehicle restriction controls: speed limit control, vehicle-mounted additional function restriction.

[0017] In another aspect, the present application provides a server, the server being configured to: send, to a vehicle, a mileage writing task including a first configuration word and a second configuration word, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word; wherein the first configuration word represents a mileage purchase state, and the second configuration word represents first mileage data to be settled; and wherein the verification includes: when the first configuration word represents no purchase, if mileage corresponding to the first settlement result is not greater than the remaining mileage, determining that the verification is passed, otherwise, determining that the verification is failed.

[0018] In another aspect, the present application provides a vehicle, the vehicle being configured to: receive a mileage writing task sent by a server, the mileage writing task including a first configuration word and a second configuration word; wherein the first configuration word represents a mileage purchase state, and the second configuration word represents first mileage data to be settled; perform mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result; and verify the first settlement result according to the first configuration word; and wherein the verification includes: when the first configuration word represents no purchase, if mileage corresponding to the first settlement result is not greater than the remaining mileage, determining that the verification is passed, otherwise, determining that the verification is failed.

[0019] In another aspect, the present application provides a settlement verification system, including the vehicle and the server as described above.

[0020] In another aspect, the present application provides an electronic device, including: a processor, and a memory connected to the processor in communication; the memory stores computer execution instructions; and the processor executes the computer execution instructions stored in the memory to implement the method as described above.

[0021] In another aspect, the present application provides a computer readable storage medium, the computer readable storage medium storing computer execution instructions, the computer execution instructions being configured to implement the method as described above when executed by a processor.

[0022] In another aspect, the present application provides a computer program product, including a computer program, the computer program being configured to implement the method as described above when executed by a processor.

[0023] The settlement verification method, server, vehicle, system, device, medium and product provided by the application, the method comprises: the server sends a mileage flashing task comprising a first configuration word and a second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the application, the server issues a configuration word representing the mileage purchase state and the mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the non-purchase state, which can improve the reliability of mileage settlement in the car rental process. BRIEF DESCRIPTION OF DRAWINGS

[0024] The drawings incorporated into the specification and forming part of the specification, show embodiments consistent with the application, and together with the specification, serve to explain the principles of the application.

[0025] Fig. 1 shows a flowchart of the settlement verification method;

[0026] Fig. 2 shows a flowchart of the settlement verification method;

[0027] Fig. 3 shows a flowchart of the settlement verification method;

[0028] Fig. 4 shows a flowchart of the settlement verification method;

[0029] Fig. 5 shows a flowchart of the settlement verification method;

[0030] Fig. 6 shows a flowchart of the settlement verification method;

[0031] Fig. 7 shows a structural diagram of the settlement verification system;

[0032] Fig. 8 shows a structural diagram of the settlement verification system;

[0033] Fig. 9 shows a structural diagram of the electronic device.

[0034] BRIEF DESCRIPTION OF DRAWINGS: server: 01, vehicle: 02, BGM: 11, VCU: 12, DHU: 13.

[0035] Through the above drawings, the specific embodiments of the application have been shown, and will be described in more detail in the following. These drawings and written descriptions are not intended to limit the scope of the concept of the application by any means, but to illustrate the concept of the application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0036] The exemplary embodiments will be described in detail herein with reference to the attached drawings. The following description is made with reference to the accompanying drawings in which like reference numerals refer to like elements, unless the context of use indicates otherwise. The following description of exemplary embodiments is not representative of all embodiments consistent with the present application. Rather, it is merely an example of apparatus and methods consistent with some aspects of the present application as detailed in the appended claims.

[0037] It should be noted that the brief explanation of the terms in the present application is only for the convenience of understanding the following description of the embodiments, and is not intended to limit the embodiments of the present application. Unless otherwise specified, these terms should be understood in accordance with their ordinary and customary meanings. The terms "include" and "have" and any variations thereof in the specification and claims of the present application and the above-described drawings are intended to cover but not exclusively include, for example, a product or device that includes a series of components is not necessarily limited to those components clearly listed, but can include other components that are not clearly listed or inherent to such products or devices. The term "module" used in the present application refers to any known or later developed hardware, software, firmware, artificial intelligence, fuzzy logic, or a combination of hardware or / and software code capable of performing a function related to the element.

[0038] First, the terms related to the present application are explained:

[0039] OTA: Over-The-Air (OTA) for Over-the-Air technology or Over-the-Air upgrade technology; OTA in the automotive field refers to a technology for remotely updating vehicle software and systems through a wireless network, which is usually composed of three parts: vehicle end, cloud server and communication network;

[0040] VCU: Vehicle Control Unit (VCU);

[0041] BGM: Body Gateway domain Module (BGM);

[0042] DHU: Digital Cockpit Head Unit (DHU).

[0043] In actual application, after a user rents a vehicle and purchases mileage through the mileage mall, the mileage mall sends a performance to the OTA service, so that the server sends a mileage flashing task including mileage information to the vehicle, and the VCU in the vehicle can perform settlement of the remaining mileage according to the purchased mileage information and the traveled mileage. In addition, the vehicle can also display the mileage related information of the vehicle to the user through the on-board large screen. In an optional manner, the vehicle cannot verify the issued mileage information when performing the mileage settlement, resulting in low reliability of the settlement result.

[0044] The settlement verification method, server, vehicle, system, device, medium and product provided in the application, the method comprises: the server sends a mileage flashing task including a first configuration word and a second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the application, the server issues configuration words representing the mileage purchase state and the mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the non-purchase state, which can improve the reliability of the mileage settlement in the rental process.

[0045] The technical scheme of the application and the technical scheme of the application will be described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. In the description of the application, unless otherwise explicitly specified and limited, each term should be understood in a broad sense within the art. The embodiments of the application will be described below with reference to the accompanying drawings.

[0046] Embodiment one

[0047] A flowchart of a settlement verification method of the embodiment is exemplarily shown in FIG. 1. The method is applied to a server. As shown in FIG. 1, the method comprises:

[0048] Step 101, a mileage flashing task including a first configuration word and a second configuration word is sent to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word; wherein the first configuration word represents the mileage purchase state, and the second configuration word represents the first mileage data to be settled; wherein the verification includes: when the first configuration word represents non-purchase, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, it is determined that the verification is not passed.

[0049] In actual application, the server can realize the related functions in the form of a digital cabinet, an OTA service or a cloud service store. Specifically, the related functions of the server can be realized by installing a computer program in the server, such as an application software, or can be realized as a medium storing the related computer program, such as a U disk, a cloud disk, etc.

[0050] In this example, the mileage writing task can be generated by the server periodically or by the user through the mobile terminal or the vehicle terminal to instruct the server to generate, so as to refresh the current remaining mileage of the vehicle. It should be noted that the driving mileage and the corresponding remaining mileage of the vehicle are constantly changing during driving. By limiting the generation of the mileage writing task after each driving cycle, this situation can be avoided. Alternatively, the driving cycle can be determined according to the adjacent power-on time and power-off time of the vehicle. For example, the power-on time of the vehicle can be taken as the start time of the driving cycle, and the power-off time adjacent to the power-on time of the vehicle can be taken as the end time of the driving cycle. The power-on time of the vehicle can be the starting time of the vehicle or the time when the battery starts to supply power, and the power-off time of the vehicle can be the time when the vehicle is turned off or the time when the battery stops supplying power. Alternatively, the driving cycle can be determined according to the use mode of the vehicle. For example, the time when the vehicle enters the driving mode can be taken as the start time of the driving cycle, and the time when the vehicle ends the driving mode can be taken as the end time of the driving cycle. The time when the vehicle enters the driving mode can be the time when the vehicle is in the forward gear (D) or the reverse gear (R), and the time when the vehicle ends the driving mode can be the time when the vehicle is in the parking gear (P).

[0051] Alternatively, the server can send the mileage writing task including the first configuration word and the second configuration word to the vehicle through a vehicle-mounted communication module such as V2X technology (Vehicle-to-Everything, V2X) or TSP technology (Telematics Service Provider, remote information service provider). Correspondingly, the related functions of the vehicle terminal can be separated, such as the writing task receiving module can be a vehicle-mounted gateway, and the related functions of the mileage settlement can be a mileage calculation module; or the related functions of the vehicle terminal can be integrated on one module, such as the writing task receiving and mileage calculation are both vehicle controllers or body controllers.

[0052] Optionally, the first configuration word can be set to different values to represent the purchased state and the non-purchased state respectively, such as using 1 to represent the purchased state and using 0 to represent the non-purchased state; or setting the presence of the first configuration word in the mileage writing task to represent the purchased state, and the absence of the first configuration word to represent the non-purchased state. On the other hand, the second configuration word can be a mileage number with a value of zero generated by the server for refreshing the current remaining mileage, or a mileage number with a value not equal to zero purchased by the user for refreshing the current remaining mileage. Optionally, before the vehicle performs mileage settlement, the vehicle matches the mileage writing tasks corresponding to the first configuration word and the second configuration word, to ensure that the mileage writing tasks corresponding to the first configuration word and the second configuration word are the same mileage writing task. In actual application, the first configuration word and the second configuration word can be respectively labeled with the corresponding mileage writing task, so as to be judged according to the label in the matching process. In an example, after receiving the mileage writing task, the vehicle adds the mileage data in the second configuration word and the locally stored remaining mileage, and takes the purchase state corresponding to the first configuration word and the addition result of the mileage as the first settlement result. The vehicle checks the first settlement result according to the first configuration word; the checking includes: when the first configuration word represents the non-purchased state, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the checking is passed, otherwise, the checking is not passed. The scheme of the present example checks the first settlement result based on the purchase state corresponding to the first configuration word, which can avoid the case that the mileage in the first settlement result is increased without the user purchasing the mileage, that is, it can prevent malicious writing into the vehicle in the vehicle mileage settlement process.

[0053] In the settlement checking method provided by the present example, the server sends the mileage writing task including the first configuration word and the second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain the first settlement result, and checks the first settlement result according to the first configuration word. The scheme of the present application sends the configuration word representing the mileage purchase state and the mileage data to be settled to the vehicle, and checks the first settlement result by the remaining mileage when the vehicle is in the non-purchased state, which can improve the reliability of the mileage settlement in the car rental process.

[0054] As another example, the mileage writing task including the first configuration word and the second configuration word is sent to the vehicle, including:

[0055] The mileage writing task is sent to the BGM of the vehicle, so that the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle, and the VCU of the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0056] In this example, the function of receiving the mileage writing task at the vehicle end is integrated at the BGM, and the data transmission by the server through the gateway can improve the stability of data transmission. On the other hand, the function of mileage settlement is integrated at the VCU end, which can take advantage of the importance of VCU in integrating and coordinating various subsystems of the vehicle, such as the motor, transmission, battery management system (BMS), braking system and steering system, to prevent the mileage settlement module from being maliciously destroyed. If the VCU is maliciously destroyed, the vehicle may also be down. Alternatively, after receiving the mileage writing task, the BGM can decrypt and decode the mileage writing task, and send the decoded first configuration word and second configuration word to the VCU to reduce the functional load of the VCU.

[0057] In one example, the BGM supports wireless communication standards such as 4G / 5G, Wi-Fi, Bluetooth, etc., is responsible for receiving mileage writing tasks from the server, and transmits the first configuration word and the second configuration word in the mileage writing task to the internal system of the vehicle. Taking the server as an example of OTA service, the OTA transmission protocol between BGM and server is designed, including data format, encryption method, etc., which can ensure the security and reliability of the data transmission of the configuration word. In practical application, the BGM can be installed in the body control module (BCM). In this example, the BGM sends data in the form of broadcast; specifically, the broadcast method can be data transmission to all modules communicating with the BGM without specific target, or the broadcast method is data transmission to the VCU with specific target. The BGM broadcasts the first configuration word and the second configuration word to the VCU through data broadcast, which can save bandwidth and resources and improve the real-time performance of data transmission. Optionally, the BGM can also broadcast the first configuration word and the second configuration word to the vehicle entertainment system, so that the vehicle entertainment system can prompt the customer about the purchase status or mileage refreshing progress through the vehicle large screen or audio, etc. The scheme of this example can reduce the communication load of the VCU by receiving the mileage writing task from the server through the BGM, and improve the security and reliability of the transmission of the first configuration word and the second configuration word.

[0058] As another example, the settlement verification method further comprises: receiving the first settlement result sent by the vehicle; and performing consistency verification on the first settlement result and the second settlement result stored locally, and determining that the vehicle mileage settlement verification fails if the first settlement result and the second settlement result are inconsistent.

[0059] In actual application, the vehicle can send the first settlement result to the server through TSP technology (Telematics Service Provider) or vehicle-mounted communication equipment. It should be noted that after each driving cycle, i.e. after each driving, the vehicle synchronizes the remaining mileage of the vehicle to the server through the same data path, so as to facilitate the settlement of the server and the vehicle at the same time next time. In actual application, the server can perform consistency check on the first settlement result and the second settlement result through the cloud or distributed computing under the server. Taking the cloud as an example, in this mileage writing task, the cloud directly performs mileage settlement according to the mileage writing task sent by the server, obtains and stores the second settlement result. After receiving the first settlement result, the cloud performs consistency check on the first settlement result and the second settlement result stored in the cloud. If they are inconsistent, it is determined that the vehicle mileage settlement check fails. The scheme of the present example provides two mileage settlement schemes, in which the vehicle side corresponds to the first mileage settlement result, and the server side corresponds to the second mileage settlement result. The first mileage data to be settled in the mileage calculation under the server directly comes from the server itself, which can improve the stability of the second mileage settlement result. By performing consistency check on the first mileage settlement result and the second mileage settlement result, the robustness and security of the mileage settlement can be improved.

[0060] As another example, the settlement check method further comprises: if the vehicle mileage settlement check fails, sending the mileage writing task including the first configuration word and the second configuration word to the vehicle again.

[0061] In actual application, some occasional faults such as network problems and network management faults may exist, resulting in failure of mileage settlement. As an example, if the vehicle mileage settlement check fails, the step of returning to the server to send the vehicle a mileage writing task including the first configuration word and the second configuration word is executed. Wherein, when the server sends the mileage writing task for the second time or the multiple times, it should be judged whether the mileage data of the first mileage settlement result before sending the mileage writing task is written into the vehicle; if not, it means that the error mileage settlement data has not been written into the vehicle, and the server can directly execute the step of resending the mileage writing task; if yes, it means that the error mileage settlement data has been written into the VCU, and the second configuration word used when the server executes the step of sending the mileage writing task is used to correct the error mileage. For example, when the mileage writing task is sent for the first time, the user purchases 100km mileage but the actual second configuration word corresponds to only 50km mileage, and the 50km mileage corresponds to the first settlement result which has been written into the vehicle as the remaining mileage after settlement; when the mileage task is sent for the second time, 50km mileage is additionally sent. The scheme of the example can improve the success rate of mileage calculation and help to eliminate the cause of the last mileage settlement when the vehicle mileage settlement check fails.

[0062] The settlement check method provided by the example includes: the server sends a mileage writing task including a first configuration word and a second configuration word to the vehicle, so that the vehicle executes mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and checks the first settlement result according to the first configuration word. The scheme of the application can improve the reliability of mileage settlement in the process of renting a vehicle by issuing configuration words representing the mileage purchase state and the mileage data to be settled by the server, and checking the first settlement result by the vehicle in the non-purchase state.

[0063] The embodiment also provides a settlement check method. As another example, a flowchart of a settlement check method is exemplarily shown in FIG. 2. The method is applied to a vehicle. As shown in FIG. 2, the method includes:

[0064] Step 201, receiving a mileage writing task sent by a server, the mileage writing task including a first configuration word and a second configuration word; wherein the first configuration word represents a mileage purchase state, and the second configuration word represents first mileage data to be settled;

[0065] In step 202, the mileage settlement is performed according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and the first settlement result is verified according to the first configuration word. The verification includes: when the first configuration word represents that the mileage is not purchased, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, it is determined that the verification is not passed.

[0066] In practical applications, the server can realize the related functions in the form of a digital cabinet, an OTA service or a cloud service mall. Specifically, the related functions of the server can be realized by installing a computer program in the server, such as an application software, or can be realized as a medium storing the related computer program, such as a U disk, a cloud disk, etc.

[0067] In this example, the mileage writing task can be generated by the server periodically or instructed by the user through the mobile terminal or the vehicle terminal to generate the server to refresh the current remaining mileage of the vehicle. It should be noted that the driving mileage and the corresponding remaining mileage of the vehicle are constantly changing during driving. By limiting the mileage writing task to be generated after each driving cycle, this situation can be avoided. Alternatively, the driving cycle can be determined according to the adjacent power-on time and power-off time of the vehicle. For example, the power-on time of the vehicle can be taken as the start time of the current driving cycle, and the power-off time adjacent to the power-on time of the vehicle can be taken as the end time of the current driving cycle. Wherein, the power-on time of the vehicle can be the starting time of the vehicle or the time when the battery starts to supply power, and the power-off time of the vehicle can be the time when the vehicle is turned off or the time when the battery stops supplying power. Alternatively, the driving cycle can be determined according to the use mode of the vehicle. For example, the time when the vehicle enters the driving mode (driving mode) can be taken as the start time of the current driving cycle, and the time when the vehicle ends the driving mode can be taken as the end time of the current driving cycle. Wherein, the time when the vehicle enters the driving mode can be the time when the vehicle is in the forward gear (D) or the reverse gear (R), and the time when the vehicle ends the driving mode can be the time when the vehicle is in the parking gear (P).

[0068] Optionally, the server can send the mileage writing task including the first configuration word and the second configuration word to the vehicle through a vehicle-mounted communication module such as V2X technology (Vehicle-to-Everything, V2X) or TSP technology (Telematics Service Provider, remote information service provider). Correspondingly, the related functions of the vehicle side can be separated, such as the writing task receiving module can be a vehicle gateway, and the related functions of the mileage settlement can be a mileage calculation module; or the related functions of the vehicle side are integrated on one module, such as the writing task receiving and mileage calculation are both vehicle controllers or body controllers. In actual application, the related functions of the mileage settlement of the vehicle controller can be realized by installing a calculation program or a related computer program entity device such as a chip on the existing vehicle controller of the vehicle.

[0069] Optionally, the first configuration word can be set to different values to represent the purchased state and the non-purchased state, such as using 1 to represent the purchased state and using 0 to represent the non-purchased state; or the first configuration word in the mileage writing task represents the purchased state, and the absence of the first configuration word represents the non-purchased state. On the other hand, the second configuration word can be a mileage number with a value of zero generated by the server to refresh the current remaining mileage, or a mileage number with a value not equal to zero purchased by the user to refresh the current remaining mileage. Optionally, the vehicle matches the mileage writing tasks corresponding to the first configuration word and the second configuration word before performing the mileage settlement, to ensure that the mileage writing tasks corresponding to the first configuration word and the second configuration word are the same mileage writing task. In actual application, the first configuration word and the second configuration word can be labeled with corresponding mileage writing task labels to facilitate judgment during the matching process. In one example, after receiving the mileage writing task, the vehicle adds the mileage data in the second configuration word to the locally stored remaining mileage, and takes the purchase state corresponding to the first configuration word and the addition result as the first settlement result. The vehicle verifies the first settlement result according to the first configuration word; the verification includes: when the first configuration word represents non-purchase, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, the verification is not passed. The scheme of the present example verifies the first settlement result based on the purchase state corresponding to the first configuration word, which can avoid the situation that the mileage in the first settlement result is increased without the user purchasing the mileage, that is, it can prevent malicious writing into the vehicle during the vehicle mileage settlement process.

[0070] The settlement verification method provided in the example includes that the server sends a mileage writing task including the first configuration word and the second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the application, the server issues the configuration word representing the mileage purchase state and the mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the un-purchased state, which can improve the reliability of the mileage settlement in the rental process.

[0071] In actual application, data transmission errors or data tampering may occur during the sending process of the mileage writing task, therefore, the vehicle verifies the validity of the data in the mileage writing task before performing mileage settlement. FIG. 3 shows a flowchart of a settlement verification method. As another example, before performing mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage in step 202, the method further includes:

[0072] Step 301, matching the first configuration word and the second configuration word; the matching includes: if the mileage purchase state is un-purchased and the first mileage data is greater than zero, or if the mileage purchase state is purchased and the first mileage data is not greater than zero, the vehicle does not perform settlement, and determines that the vehicle mileage settlement verification fails this time;

[0073] Step 202, performing mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage includes:

[0074] Step 302, if the mileage purchase state is un-purchased and the first mileage data is not greater than zero, or if the mileage purchase state is purchased and the first mileage data is greater than zero, the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0075] In the example, if the first configuration word and the second configuration word do not match successfully, it indicates that the purchase state and the mileage data are inconsistent, for example, the purchase state is un-purchased and the first mileage data is greater than zero, or if the mileage purchase state is purchased and the first mileage data is not greater than zero, the vehicle does not perform settlement. Optionally, if the first configuration word or the second configuration word has problems such as incomplete data, format error or expired data, it indicates that the first configuration word or the second configuration word is abnormal, and the vehicle also does not perform settlement. Only in the case that the mileage purchase state is un-purchased and the first mileage data is not greater than zero, or if the mileage purchase state is purchased and the first mileage data is greater than zero, the vehicle performs settlement. The scheme of the example can avoid the situation that any configuration word is tampered to cause settlement abnormality by matching the first configuration word or the second configuration word, thereby improving the reliability of the vehicle performing mileage settlement.

[0076] Considering the performance load of the vehicle, the functions related to the communication with the server and the functions related to the mileage settlement can be integrated on different modules. As an example, the vehicle comprises a BGM and a VCU. A flowchart of a settlement verification method is exemplarily shown in FIG. 4. As shown in FIG. 4, in step 201, the BGM of the vehicle receives the mileage writing task sent by the server, comprising:

[0077] Step 401, the BGM of the vehicle receives the mileage writing task sent by the server, and broadcasts the first configuration word and the second configuration word to the VCU of the vehicle;

[0078] Step 402, the VCU of the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0079] In the present example, the function of receiving the mileage writing task at the vehicle end is integrated at the BGM, and the data transmission by the server through the gateway can improve the stability of data transmission. On the other hand, the function of mileage settlement is integrated at the VCU end, which can take advantage of the importance of the VCU in integrating and coordinating various subsystems of the vehicle, such as the motor, the transmission, the battery management system (BMS), the braking system and the steering system, to prevent the mileage settlement module from being maliciously destroyed. If the VCU is maliciously destroyed, the vehicle may also be down. Alternatively, after receiving the mileage writing task, the BGM can perform data decryption and decoding on the mileage writing task, and send the decoded first configuration word and second configuration word to the VCU, so as to reduce the functional load of the VCU.

[0080] In one example, the BGM supports a wireless communication standard (such as 4G / 5G, Wi-Fi, Bluetooth, etc.), is responsible for receiving the mileage flashing task from the server, and transmits the first configuration word and the second configuration word in the mileage flashing task to the vehicle internal system. Taking the server as an OTA service for example, the OTA transmission protocol between the BGM and the server is designed, including data format, encryption method, etc., which can ensure the security and reliability of the configuration word data transmission. In actual application, the BGM can be installed in the body control module (BCM). In this example, the BGM sends data in the form of broadcast; specifically, the broadcast mode can be data sending to all modules in communication with the BGM without specific target, or the broadcast mode is data sending to the VCU with specific target. The BGM broadcasts the first configuration word and the second configuration word to the VCU through data broadcast, which can save bandwidth and resources and improve the real-time performance of data transmission. Optionally, the BGM can also broadcast the first configuration word and the second configuration word to the vehicle entertainment system, so that the vehicle entertainment system can prompt the customer about the purchase status or the mileage refreshing progress through the vehicle large screen or audio, etc. The scheme of this example can reduce the communication load of the VCU by receiving the mileage flashing task from the server through the BGM, and improve the security and reliability of the transmission of the first configuration word and the second configuration word.

[0081] As another example, a flowchart of a settlement verification method is exemplarily shown in FIG. 5. As shown in FIG. 5, after the BGM of the vehicle receives the mileage flashing task sent by the server in step 401, the following steps are further included:

[0082] Step 501, the BGM of the vehicle matches the first configuration word and the second configuration word; the matching includes: if the mileage purchase status is not purchased and the first mileage data is greater than zero, or if the mileage purchase status is purchased and the first mileage data is not greater than zero, the BGM does not perform the step of broadcasting the first configuration word and the second configuration word, and determines that the vehicle mileage settlement verification fails this time;

[0083] Step 401, the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle, including:

[0084] Step 502, if the mileage purchase status is not purchased and the first mileage data is not greater than zero, or if the mileage purchase status is purchased and the first mileage data is greater than zero, the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle.

[0085] It should be noted that the first configuration word and the second configuration word can be matched by the BGM and / or the VCU in the same mileage settlement process. In the example, if the first configuration word and the second configuration word are not matched successfully, it indicates that the purchase state and the mileage data are inconsistent, for example, the purchase state is not purchased and the first mileage data is greater than zero, or the mileage purchase state is purchased and the first mileage data is not greater than zero, and the BGM does not perform the step of broadcasting the first configuration word and the second configuration word. Alternatively, if the first configuration word or the second configuration word has problems such as incomplete data, format error or expired data, it indicates that the first configuration word or the second configuration word is abnormal, and the BGM also does not perform the step of broadcasting the first configuration word and the second configuration word. Only in the case that the mileage purchase state is not purchased and the first mileage data is not greater than zero, or the mileage purchase state is purchased and the first mileage data is greater than zero, the BGM performs the step of broadcasting the first configuration word and the second configuration word. In the scheme of the example, by matching the first configuration word or the second configuration word, the case that any configuration word is tampered to cause settlement abnormality can be avoided, thereby improving the reliability of performing mileage settlement.

[0086] As another example, a flowchart of a settlement verification method is exemplarily shown in FIG. 6. As shown in FIG. 6, the vehicle further comprises a DHU. In step 401, the BGM broadcasts the first configuration word and the second configuration word to the VCU, comprising:

[0087] In step 601, the BGM of the vehicle broadcasts the first configuration word and the second configuration word to the VCU of the vehicle and the DHU of the vehicle.

[0088] In step 402, after the VCU of the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage, the VCU of the vehicle further comprises:

[0089] In step 602, the VCU of the vehicle sends the first settlement result obtained by the VCU of the vehicle performing mileage settlement according to the first configuration word and the second configuration word to the DHU of the vehicle.

[0090] For example, after receiving the first configuration word and the second configuration word, the DHU parses the first configuration word and the second configuration word to obtain the current purchase state and the corresponding mileage, and prompts the user of the purchase state and the mileage data. Optionally, the DHU can push the prompt to the user's mobile phone through the vehicle-mounted communication module, or prompt the user through the vehicle-mounted screen or audio. Optionally, for the case where the user has not purchased and the mileage is zero, the prompt can be "The vehicle is about to perform the mileage refreshing process"; for the case where the user has purchased and the mileage is greater than zero, the prompt can be "You have purchased mileage, and the vehicle is about to perform the mileage refreshing process". In this example, after receiving the first settlement result sent by the VCU, the DHU can perform a mileage settlement locally or push it to the cloud to avoid the first settlement result of the VCU in this mileage settlement being maliciously tampered with. Specifically, when the VCU does not perform mileage settlement, the DHU synchronously stores the current remaining mileage in the VCU in real time to achieve the above effect. In the scheme of this example, the DHU as a backup mileage settlement module of the VCU can obtain the first configuration word and the second configuration word broadcast by the DHU, and can also perform a settlement to verify the first settlement result, thereby improving the reliability of the mileage settlement.

[0091] As another example, the settlement verification method further includes:

[0092] After receiving the first configuration word and the second configuration word broadcast by the BGM of the vehicle, if the DHU of the vehicle does not receive the first settlement result sent by the VCU of the vehicle within a predetermined time, it is determined that the vehicle mileage settlement verification fails this time.

[0093] In this example, since the DHU has received the broadcast of the BGM, it indicates that the broadcast function of the BGM is normal. In actual application, after receiving the first configuration word and the second configuration word broadcast by the BGM, if the DHU does not receive the first settlement result sent by the VCU within a predetermined time, it indicates that the VCU does not perform mileage settlement. This may be caused by software execution error or hardware damage of the VCU. Specifically, the predetermined time can be calibrated by an engineer in the test stage of the vehicle, for example, according to the time required by the VCU from the broadcast of the BGM to the settlement, and adding a buffer time to the time as the predetermined time. In the scheme of this example, the time when the DHU receives the broadcast of the BGM can be used to calculate the settlement time of the VCU, which can avoid settlement abnormalities caused by software execution error or hardware damage of the VCU, thereby improving the reliability of the mileage settlement.

[0094] As an example, the settlement verification method further includes: the DHU of the vehicle sends the first settlement result to the server, so that the server performs consistency verification according to the first settlement result and the locally stored second settlement result, and if the consistency verification fails, it is determined that the vehicle mileage settlement verification fails this time.

[0095] In actual application, the DHU can send the first settlement result to the server through TSP technology (Telematics Service Provider) or a vehicle-mounted communication device. It should be noted that after each driving cycle ends, i.e., after each driving ends, the DHU synchronizes the remaining mileage of the vehicle settled by the VCU to the server through the same data path, so as to facilitate the settlement of the server and the VCU at the same time next time. In actual application, the server can perform consistency check on the first settlement result and the second settlement result through the cloud or distributed computing manner thereof. Taking the cloud as an example, in this mileage writing task, the cloud directly performs mileage settlement according to the mileage writing task sent by the server, obtains and stores the second settlement result. After receiving the first settlement result, the cloud performs consistency check on the first settlement result and the second settlement result stored in the cloud, and if they are inconsistent, it is determined that this time of vehicle mileage settlement check fails. The scheme of the present example provides two mileage settlement schemes, in which the VCU end corresponds to the first mileage settlement result, and the DHU and the server end correspond to the second mileage settlement result; the first mileage to be settled in the mileage calculation of the server directly comes from the server itself, which can improve the stability of the second mileage settlement result, and by performing consistency check on the first mileage settlement result and the second mileage settlement result, the robustness and safety of the mileage settlement can be improved.

[0096] In actual application, when the mileage settlement check fails, a corresponding mileage settlement exception handling strategy can be set. As another example, the settlement check method further includes:

[0097] If the number of times of vehicle mileage settlement check failure reaches a preset value, the vehicle performs at least one of the following vehicle restriction controls: speed limit control, vehicle-mounted additional function restriction.

[0098] The preset value in the present example can be 2 or 3. As an example, the speed limit control can control the speed according to the remaining power of the vehicle, for example, the more the remaining power of the vehicle, the lower the threshold of the speed limit control; on the other hand, the vehicle-mounted additional function restriction can include: power limitation of the air conditioner, brightness limitation of the vehicle-mounted large screen, entertainment function limitation of the vehicle, and wireless network limitation of the user, etc. The scheme of the present example provides a processing strategy after the mileage check fails, which can realize the effects of self-processing of the mileage calculation exception and notifying the user of the existence of mileage settlement exception, etc.

[0099] The settlement verification method provided in the example includes that the server sends a mileage flashing task including a first configuration word and a second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the application, the server issues a configuration word representing the mileage purchase state and the mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the non-purchase state, which can improve the reliability of the mileage settlement in the car rental process.

[0100] Embodiment two

[0101] The embodiment provides a server 01, which is used for:

[0102] The server 01 sends a mileage flashing task including a first configuration word and a second configuration word to the vehicle 02, so that the vehicle 02 performs mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The first configuration word represents the mileage purchase state, and the second configuration word represents the first mileage data to be settled. The verification includes: when the first configuration word represents non-purchase, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, it is determined that the verification is not passed.

[0103] In practical application, the server 01 can realize related functions in the form of a digital cabinet, an OTA service or a cloud service mall. Specifically, the related functions of the server 01 can be realized by installing a computer program in the server 01, for example, application software, etc.; or it can also be realized as a medium storing a related computer program, for example, a U disk, a cloud disk, etc.

[0104] In the example, the mileage flashing task can be generated periodically by the server 01, or instructed by the user through a mobile terminal or a vehicle terminal to generate the server 01 to refresh the current remaining mileage of the vehicle 02. It should be noted that the driving mileage and the corresponding remaining mileage of the vehicle 02 are constantly changing during driving. By limiting the mileage flashing task to be generated after each driving cycle, this situation can be avoided. Alternatively, the driving cycle can be confirmed according to the adjacent power-on time and power-off time of the vehicle 02.

[0105] Optionally, the server 01 can send the mileage writing task including the first configuration word and the second configuration word to the vehicle 02 through a vehicle-mounted communication module such as V2X technology (Vehicle-to-Everything, V2X) or TSP technology (Telematics Service Provider, remote information service provider). Correspondingly, the related functions of the vehicle side can be separated, such as the writing task receiving module can be a vehicle-mounted gateway, and the related functions of the mileage settlement can be a mileage calculation module; or the related functions of the vehicle side are integrated on one module, such as the writing task receiving and the mileage calculation are both vehicle controllers or body controllers.

[0106] Optionally, the first configuration word can be set to different values to represent the purchased state and the non-purchased state, such as using 1 to represent the purchased state and using 0 to represent the non-purchased state; or the presence of the first configuration word in the mileage writing task represents the purchased state, and the absence of the first configuration word represents the non-purchased state. On the other hand, the second configuration word can be a mileage number with a value of zero generated by the server 01 to refresh the current remaining mileage, or a mileage number with a value not equal to zero purchased by the user to refresh the current remaining mileage. Optionally, the vehicle 02 matches the mileage writing tasks corresponding to the first configuration word and the second configuration word before performing the mileage settlement, to ensure that the mileage writing tasks corresponding to the first configuration word and the second configuration word are the same mileage writing task. In actual application, the first configuration word and the second configuration word can be respectively labeled with the corresponding mileage writing task label to facilitate judgment during the matching process. In one example, after receiving the mileage writing task, the vehicle 02 adds the mileage data in the second configuration word to the locally stored remaining mileage, and takes the purchase state corresponding to the first configuration word and the addition result as the first settlement result. The vehicle 02 verifies the first settlement result according to the first configuration word; the verification includes: when the first configuration word represents non-purchase, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, the verification is not passed. The scheme of the present example is based on the purchase state corresponding to the first configuration word to verify the first settlement result, which can avoid the situation that the mileage in the first settlement result is increased without the user purchasing the mileage, that is, it can prevent malicious writing to the vehicle during the vehicle mileage settlement process.

[0107] The settlement verification method provided in the example includes: a server sends a mileage flashing task including a first configuration word and a second configuration word to a vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the application, the server issues configuration words representing mileage purchase state and mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the non-purchase state, which can improve the reliability of mileage settlement in the rental process.

[0108] In one example, the server 01 is specifically configured to: send a mileage flashing task to the BGM 11 of the vehicle 02, so that the BGM 11 of the vehicle 02 broadcasts the first configuration word and the second configuration word to the VCU 12 of the vehicle 02, and the VCU 12 of the vehicle 02 performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0109] In the example, the function of receiving the mileage flashing task at the vehicle 02 end is integrated at the BGM 11, and the server 01 transmits data through the gateway to improve the stability of data transmission. On the other hand, the function of mileage settlement is integrated at the VCU 12 end, which can take advantage of the importance of the VCU 12 responsible for integrating and coordinating various subsystems of the vehicle 02, such as electric motor, transmission, battery management system (BMS), braking system and steering system, to prevent the mileage settlement module from being maliciously destroyed. If the VCU 12 is maliciously destroyed, the vehicle may also be down. Alternatively, after receiving the mileage flashing task, the BGM 11 can perform data decryption and decoding on the mileage flashing task, and send the decoded first configuration word and second configuration word to the VCU 12, so as to reduce the functional load of the VCU 12.

[0110] In one example, the BGM 11 supports a wireless communication standard (such as 4G / 5G, Wi-Fi, Bluetooth, etc.), is responsible for receiving the mileage flashing task from the server 01, and transmitting the first configuration word and the second configuration word in the mileage flashing task to the internal system of the vehicle 02. Taking the server 01 as an example of an OTA service, the OTA transmission protocol between the BGM 11 and the server 01 is designed, including data format, encryption method, etc., which can ensure the security and reliability of the configuration word data transmission. In practical application, the BGM 11 can be installed in the body control module (BCM). In this example, the BGM 11 sends data in the form of broadcast; specifically, the broadcast method can be to send data to all modules in communication with the BGM 11 without a specific target, or the broadcast method is to send data to the VCU 12 with a specified target. The BGM 11 broadcasts the first configuration word and the second configuration word to the VCU 12 through data broadcast, which can save bandwidth and resources and improve the real-time performance of data transmission. Optionally, the BGM 11 can also broadcast the first configuration word and the second configuration word to the vehicle entertainment system, so that the vehicle entertainment system can prompt the customer about the purchase status or the mileage refreshing progress through the vehicle large screen or the audio system, etc. The scheme of this example can reduce the communication load of the VCU 12 by receiving the mileage flashing task of the server 01 through the BGM 11, and improve the security and reliability of the transmission of the first configuration word and the second configuration word.

[0111] In one example, the server 01 is further configured to receive the first settlement result sent by the vehicle 02, and perform consistency check on the first settlement result and the second settlement result stored locally. If the first settlement result and the second settlement result are inconsistent, it is determined that the mileage settlement check of this time does not pass.

[0112] In actual application, the vehicle 02 can send the first settlement result to the server 01 through a TSP technology (Telematics Service Provider) or a vehicle-mounted communication device. It should be noted that after each driving cycle, i.e., after each driving, the vehicle 02 synchronizes the remaining mileage of the vehicle to the server 01 through the same data path, so as to facilitate the settlement of the server 01 and the vehicle 02 at the same time next time. In actual application, the server 01 can perform consistency check on the first settlement result and the second settlement result through a cloud or a distributed computing manner thereof. Taking the cloud as an example, in the present mileage writing task, the cloud directly performs mileage settlement according to the mileage writing task sent by the server 01, obtains and stores the second settlement result. After receiving the first settlement result, the cloud performs consistency check on the first settlement result and the second settlement result stored in the cloud, and if the consistency check fails, it is determined that the present vehicle mileage settlement check fails. The scheme of the present example provides two mileage settlement schemes, in which the vehicle end corresponds to the first mileage settlement result, and the server 01 end corresponds to the second mileage settlement result; the first mileage to be settled in the mileage calculation of the server 01 directly comes from the server 01 itself, which can improve the stability of the second mileage settlement result, and the consistency check on the first mileage settlement result and the second mileage settlement result can improve the robustness and security of the mileage settlement.

[0113] In one example, the server 01 is further configured to: if the vehicle mileage settlement check fails, send the mileage writing task including the first configuration word and the second configuration word to the vehicle 02 again.

[0114] In actual application, there can be some occasional faults such as network problems, network management faults, etc., which can cause the mileage settlement to fail. As an example, if the vehicle mileage settlement check fails, the step of sending the mileage writing task including the first configuration word and the second configuration word to the vehicle 02 by the server 01 is executed again. When the server 01 sends the mileage writing task for the second time or for multiple times, it should be determined whether the mileage data of the first mileage settlement result before sending the mileage writing task has been written into the vehicle 02; if not, it means that the erroneous mileage settlement data has not been written into the vehicle 02, and the server 01 can directly execute the step of resending the mileage writing task; if yes, it means that the erroneous mileage settlement data has been written into the VCU 12, and the second configuration word used by the server 01 when executing the step of sending the mileage writing task is used to correct the erroneous mileage. The scheme of the present example can improve the success rate of mileage calculation and help to eliminate the cause of the last mileage settlement when the vehicle mileage settlement check fails.

[0115] The server provided in the example comprises: the server sends a mileage writing task comprising a first configuration word and a second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the application, the server issues a configuration word representing the mileage purchase state and the mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the non-purchase state, which can improve the reliability of mileage settlement in the rental process.

[0116] The embodiment also provides a vehicle 02, which is configured to: receive a mileage writing task sent by a server 01, the mileage writing task comprising a first configuration word and a second configuration word; wherein the first configuration word represents a mileage purchase state, and the second configuration word represents first mileage data to be settled; perform mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result; and verify the first settlement result according to the first configuration word; the verification comprises: when the first configuration word represents non-purchase, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, it is determined that the verification is not passed.

[0117] In actual application, the server 01 can realize related functions in the form of a digital cabinet, an OTA service or a cloud service store. Specifically, the related functions of the server 01 can be realized by installing a computer program in the server 01, for example, application software, etc.; or can also be realized as a medium storing a related computer program, for example, a U disk, a cloud disk, etc.

[0118] In the example, the mileage writing task can be generated by the server 01 periodically or by the user through a mobile terminal or a vehicle terminal to instruct the server 01 to generate, so as to refresh the current remaining mileage of the vehicle 02. It should be noted that the driving mileage and the corresponding remaining mileage of the vehicle 02 are constantly changing during driving. By limiting the mileage writing task to be generated after each driving cycle, this situation can be avoided. Optionally, the driving cycle can be confirmed according to the adjacent power-on time and power-off time of the vehicle 02.

[0119] Optionally, the server 01 can send the mileage writing task including the first configuration word and the second configuration word to the vehicle 02 through a vehicle-mounted communication module such as V2X technology (Vehicle-to-Everything, V2X) or TSP technology (Telematics Service Provider, remote information service provider). Correspondingly, the related functions of the vehicle side can be separated, such as the writing task receiving module can be a vehicle gateway, and the related functions of the mileage settlement can be a mileage calculation module; or the related functions of the vehicle side are integrated on one module, such as the writing task receiving and mileage calculation are both vehicle controllers or body controllers. In actual application, the related functions of the mileage settlement of the vehicle controller can be realized by installing a calculation program or a related computer program entity device such as a chip on the existing vehicle controller of the vehicle 02.

[0120] Optionally, the first configuration word can be set to different values to represent the purchased state and the non-purchased state respectively. On the other hand, the second configuration word can be a mileage number with a value of zero generated by the server 01 for refreshing the current remaining mileage, or a mileage number with a value not equal to zero purchased by the user for refreshing the current remaining mileage. Optionally, the vehicle 02 matches the mileage writing tasks corresponding to the first configuration word and the second configuration word before performing the mileage settlement, to ensure that the mileage writing tasks corresponding to the first configuration word and the second configuration word are the same mileage writing task. In actual application, the first configuration word and the second configuration word can be labeled with corresponding mileage writing task labels, so as to be judged according to the labels in the matching process. In one example, after receiving the mileage writing task, the vehicle 02 adds the mileage data in the second configuration word and the locally stored remaining mileage, and takes the purchase state corresponding to the first configuration word and the mileage addition result as the first settlement result. The vehicle 02 verifies the first settlement result according to the first configuration word; the verification includes: when the first configuration word represents non-purchase, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, the verification is not passed. The scheme of the present example verifies the first settlement result based on the purchase state corresponding to the first configuration word, which can avoid the situation that the mileage in the first settlement result is increased without the user purchasing the mileage, that is, it can prevent malicious writing into the vehicle in the vehicle mileage settlement process.

[0121] The vehicle provided in the example includes: the server sends a mileage flashing task including a first configuration word and a second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the application, the server issues a configuration word representing the mileage purchase state and the mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the un-purchased state, which can improve the reliability of the mileage settlement in the rental process.

[0122] In one example, the vehicle 02 is further configured to: match the first configuration word and the second configuration word; the matching includes: if the mileage purchase state is un-purchased and the first mileage data is greater than zero, or if the mileage purchase state is purchased and the first mileage data is not greater than zero, the vehicle 02 does not perform settlement, and determines that the vehicle mileage settlement verification fails this time;

[0123] The vehicle 02 is specifically configured to: if the mileage purchase state is un-purchased and the first mileage data is not greater than zero, or if the mileage purchase state is purchased and the first mileage data is greater than zero, the vehicle 02 performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0124] In the example, if the first configuration word and the second configuration word do not match successfully, it indicates that the purchase state and the mileage data are inconsistent, such as the purchase state being un-purchased and the first mileage data being greater than zero, or the mileage purchase state being purchased and the first mileage data being not greater than zero. The vehicle 02 does not perform settlement. Optionally, if the first configuration word or the second configuration word has problems such as incomplete data, format error or data expiration, it indicates that the first configuration word or the second configuration word is abnormal, and the vehicle 02 also does not perform settlement. Only in the case that the mileage purchase state is un-purchased and the first mileage data is not greater than zero, or the mileage purchase state is purchased and the first mileage data is greater than zero, the vehicle 02 performs settlement. The scheme of the example can avoid the case that any configuration word is tampered to cause settlement abnormality by matching the first configuration word or the second configuration word, thereby improving the reliability of the vehicle 02 performing mileage settlement.

[0125] In one example, the vehicle 02 includes a BGM 11 and a VCU 12. The BGM 11 of the vehicle 02 is specifically configured to: receive the mileage flashing task sent by the server 01, and broadcast the first configuration word and the second configuration word to the VCU 12 of the vehicle 02; the VCU 12 of the vehicle 02 is specifically configured to: perform mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage.

[0126] In this example, the function of the vehicle end mileage brush writing task is integrated at BGM11, and the server 01 transmits data through the gateway to improve the stability of data transmission. On the other hand, the function of mileage settlement is integrated at the VCU 12 end, which can take advantage of the importance of VCU 12 responsible for integrating and coordinating various subsystems of the vehicle, such as the motor, transmission, battery management system (BMS), braking system and steering system, to prevent the mileage settlement module from being maliciously destroyed. If the VCU 12 is maliciously destroyed, the vehicle may also be down. Alternatively, after receiving the mileage brush writing task, BGM11 can decrypt and decode the mileage brush writing task, and send the decoded first configuration word and second configuration word to VCU 12 to reduce the functional load of VCU 12.

[0127] In one example, BGM11 supports wireless communication standards (such as 4G / 5G, Wi-Fi, Bluetooth, etc.), responsible for receiving mileage brush writing tasks from server 01, and transmitting the first configuration word and the second configuration word in the mileage brush writing task to the vehicle internal system. In this example, BGM11 sends data in the form of broadcast; specifically, this broadcast method can be data transmission to all modules communicating with BGM11 without specific target, or the broadcast method is data transmission to VCU 12 with specific target. BGM11 broadcasts the first configuration word and the second configuration word to VCU 12 through data broadcast, which can save bandwidth and resources and improve the real-time performance of data transmission. Alternatively, BGM11 can also broadcast the first configuration word and the second configuration word to the vehicle entertainment system, so that the vehicle entertainment system can prompt the customer about the purchase status or mileage refresh progress through the vehicle large screen or audio, etc. The scheme of this example can reduce the communication load of VCU 12 by receiving the mileage brush writing task of server 01 through BGM11, and improve the security and reliability of the transmission of the first configuration word and the second configuration word.

[0128] In one example, the BGM11 of the vehicle 02 is further used for: matching the first configuration word and the second configuration word; the matching includes: if the mileage purchase status is not purchased and the first mileage data is greater than zero, or if the mileage purchase status is purchased and the first mileage data is not greater than zero, the BGM11 does not execute the step of broadcasting the first configuration word and the second configuration word, and determines that the vehicle mileage settlement verification fails this time; the BGM11 of the vehicle 02 is specifically used for: if the mileage purchase status is not purchased and the first mileage data is not greater than zero, or if the mileage purchase status is purchased and the first mileage data is greater than zero, the BGM11 of the vehicle 02 broadcasts the first configuration word and the second configuration word to the VCU 12 of the vehicle 02.

[0129] It should be noted that the first configuration word and the second configuration word can be matched by the BGM 11 and / or the VCU 12 in the same mileage settlement process. In the example, if the first configuration word and the second configuration word do not match, it indicates that the purchase state and the mileage data are inconsistent, such as the purchase state being not purchased and the first mileage data being greater than zero, or the mileage purchase state being purchased and the first mileage data being not greater than zero, the BGM 11 does not perform the step of broadcasting the first configuration word and the second configuration word. Alternatively, if the first configuration word or the second configuration word has problems such as incomplete data, format error or data expiration, it indicates that the first configuration word or the second configuration word data is abnormal, and the BGM 11 also does not perform the step of broadcasting the first configuration word and the second configuration word. Only in the case of the mileage purchase state being not purchased and the first mileage data being not greater than zero, or the mileage purchase state being purchased and the first mileage data being greater than zero, the BGM 11 performs the step of broadcasting the first configuration word and the second configuration word. The scheme of the example can avoid the case that any configuration word is tampered to cause settlement abnormality, thereby improving the reliability of the mileage settlement.

[0130] In one example, the vehicle 02 further includes a DHU 13. The BGM 11 of the vehicle 02 is specifically configured to broadcast the first configuration word and the second configuration word to the VCU 12 of the vehicle 02 and the DHU 13 of the vehicle 02. The VCU 12 of the vehicle 02 is further configured to send the first settlement result obtained by the VCU 12 of the vehicle 02 according to the first configuration word and the second configuration word to the DHU 13 of the vehicle 02.

[0131] Illustratively, after receiving the first configuration word and the second configuration word, the DHU 13 parses the first configuration word and the second configuration word to obtain the current purchase state and the corresponding mileage, and prompts the user with the purchase state and the mileage data. Alternatively, the DHU 13 can push the prompt to the user's mobile phone through the vehicle communication module, or prompt the user through the vehicle screen or audio. In the example, after receiving the first settlement result sent by the VCU 12, the DHU 13 can perform a mileage settlement locally or push it to the cloud to avoid the first settlement result of the VCU 12 in the current mileage settlement being tampered maliciously. Specifically, the DHU 13 synchronously stores the current remaining mileage in the VCU 12 in real time when the VCU 12 does not perform mileage settlement, to achieve the above effect. The scheme of the example, the DHU 13 as a backup mileage settlement module of the VCU 12, can obtain the first configuration word and the second configuration word broadcast by the DHU 13, and can also perform a settlement to verify the first settlement result, thereby improving the reliability of the mileage settlement.

[0132] In one example, the DHU 13 of the vehicle 02 is further configured to: after receiving the first configuration word and the second configuration word broadcast by the BGM 11 of the vehicle 02, if the first settlement result sent by the VCU 12 of the vehicle 02 is not received within a predetermined time, determining that the vehicle mileage settlement verification fails this time.

[0133] In the example, since the DHU 13 has received the broadcast of the BGM 11, it indicates that the broadcast function of the BGM 11 is normal. In actual application, after receiving the first configuration word and the second configuration word broadcast by the BGM 11, if the first settlement result sent by the VCU 12 is not received within a predetermined time, it indicates that the VCU 12 does not perform mileage settlement. This may be caused by software execution error or hardware damage of the VCU 12. Specifically, the predetermined time can be calibrated by engineers during the test phase of the vehicle, for example, according to the time required by the VCU 12 to settle after the broadcast of the BGM 11 in multiple mileage settlement processes, and adding a buffer time to the time as the predetermined time. The scheme of the example can calculate the settlement time of the VCU 12 through the time when the DHU 13 receives the broadcast of the BGM 11, which can avoid settlement abnormalities caused by software execution errors or hardware damage, thereby improving the reliability of mileage settlement.

[0134] In one example, the DHU 13 of the vehicle 02 is further configured to: send the first settlement result to the server 01, so that the server 01 performs consistency verification according to the first settlement result and the locally stored second settlement result, and if the consistency verification fails, determining that the vehicle mileage settlement verification fails this time.

[0135] In actual application, the DHU 13 can send the first settlement result to the server 01 through TSP technology (Telematics Service Provider) or vehicle-mounted communication equipment. It should be noted that after each driving cycle ends, i.e., after each driving ends, the DHU 13 will synchronize the remaining mileage of the vehicle settled by the VCU 12 to the server 01 through the same data path, so as to facilitate the settlement of the server 01 and the VCU 12 at the same time in the next time. In actual application, the server 01 can perform consistency verification on the first settlement result and the second settlement result through the cloud or distributed computing under the server 01. The scheme of the example provides two mileage settlement schemes, in which the VCU 12 corresponds to the first mileage settlement result, and the DHU 13 and the server 01 correspond to the second mileage settlement result; the first mileage to be settled in the mileage calculation under the server 01 directly comes from the server 01 itself, which can improve the stability of the second mileage settlement result, and through the consistency verification on the first mileage settlement result and the second mileage settlement result, the robustness and safety of the mileage settlement can be improved.

[0136] In one example, the vehicle 02 is further configured to: if the number of times of the vehicle mileage settlement verification failure reaches a preset value, the vehicle 02 performs at least one of the following vehicle restriction controls: speed limit control, vehicle additional function restriction.

[0137] The preset value in this example can be 2 or 3. As an example, the speed limit control can control the speed according to the remaining power of the vehicle 02, for example, the more the remaining power of the vehicle 02, the lower the threshold of the speed limit control; on the other hand, the vehicle additional function restriction can include: power limit of the air conditioner, brightness limit of the vehicle large screen, entertainment function limit of the vehicle 02, and wireless network limit of the user, etc. The scheme of this example provides a processing strategy after the mileage verification fails, which can realize the effects of self-processing of abnormal mileage calculation and notifying the user of the existence of mileage settlement abnormality.

[0138] The vehicle provided in this example: the server sends a mileage flashing task including a first configuration word and a second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and checks the first settlement result according to the first configuration word. The scheme of the present application, the server issues configuration words representing mileage purchase state and mileage data to be settled to the vehicle, and the vehicle checks the first settlement result by the remaining mileage in the non-purchase state, which can improve the reliability of mileage settlement in the rental process.

[0139] Embodiment three

[0140] The structure schematic diagram of the settlement verification system provided by the embodiments of the present application is exemplarily shown in FIG. 7. On the basis of any embodiment, the system includes: a server 01 and a vehicle 02; wherein,

[0141] The server 01 sends a mileage flashing task including a first configuration word and a second configuration word to the vehicle 02; wherein, the first configuration word represents the mileage purchase state, and the second configuration word represents the first mileage data to be settled;

[0142] The vehicle 02 performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and checks the first settlement result according to the first configuration word; wherein, the checking includes: when the first configuration word represents non-purchase, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, it is determined that the verification is failed.

[0143] In practical applications, the server 01 can be implemented in the form of a digital cabinet, an OTA service, or a cloud service store to realize the related functions. Specifically, the related functions of the server 01 can be realized by installing a computer program in the server 01, for example, an application software, etc., or can be realized as a medium storing the related computer program, for example, a U disk, a cloud disk, etc.

[0144] In this example, the mileage writing task can be generated by the server 01 periodically or by the user through the mobile terminal or the vehicle terminal to instruct the server 01 to generate, so as to refresh the current remaining mileage of the vehicle 02. It should be noted that the driving mileage and the corresponding remaining mileage of the vehicle 02 are constantly changing during driving. By limiting the generation of the mileage writing task after each driving cycle, this situation can be avoided. Alternatively, the driving cycle can be confirmed according to the adjacent power-on time and power-off time of the vehicle 02.

[0145] Alternatively, the server 01 can send the mileage writing task including the first configuration word and the second configuration word to the vehicle 02 through a vehicle-mounted communication module such as a V2X technology (Vehicle-to-Everything, V2X) or a TSP technology (Telematics Service Provider, remote information service provider). Correspondingly, the related functions of the vehicle terminal can be separated, for example, the writing task receiving module can be a vehicle-mounted gateway, and the related functions of the mileage settlement can be a mileage calculation module; or the related functions of the vehicle terminal are integrated on one module, for example, the writing task receiving and mileage calculation are both vehicle controllers or body controllers. In practical applications, the related functions of the mileage settlement of the vehicle controller can be realized by installing a computer program or a related computer program entity device such as a chip on the existing vehicle controller of the vehicle 02.

[0146] Optionally, the first configuration word can be set to different values to represent the purchased state and the non-purchased state respectively. On the other hand, the second configuration word can be a mileage number with a value of zero generated by the server 01 for refreshing the current remaining mileage, or a mileage number with a value not equal to zero purchased by the user for refreshing the current remaining mileage. Optionally, the vehicle 02 matches the mileage refreshing tasks corresponding to the first configuration word and the second configuration word before mileage settlement, to ensure that the mileage refreshing tasks corresponding to the first configuration word and the second configuration word are the same. In an example, after receiving the mileage refreshing task, the vehicle 02 adds the mileage data in the second configuration word and the locally stored remaining mileage, and takes the purchased state corresponding to the first configuration word and the addition result as the first settlement result. The vehicle 02 verifies the first settlement result according to the first configuration word; the verification includes: when the first configuration word represents the non-purchased state, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, it is determined that the verification is passed, otherwise, the verification is not passed. The scheme of the present example verifies the first settlement result based on the purchased state corresponding to the first configuration word, which can avoid the case that the mileage in the first settlement result is increased without the user purchasing the mileage, that is, malicious refreshing of the vehicle in the vehicle mileage settlement process can be prevented.

[0147] The settlement verification system provided by the present example includes: the server sends a mileage refreshing task including a first configuration word and a second configuration word to the vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of the present application sends configuration words representing the mileage purchase state and the mileage data to be settled to the vehicle by the server, and verifies the first settlement result by the remaining mileage when the vehicle is in the non-purchased state, which can improve the reliability of the mileage settlement in the rental process.

[0148] The structure schematic diagram of the settlement verification system provided by the present application is exemplarily shown in FIG. 8, wherein the vehicle 02 includes: a BGM 11, a VCU 12 and a DHU 13. In the present example, the server 01 sends a mileage refreshing task to the BGM 11 of the vehicle 02;

[0149] The BGM 11 of the vehicle 02 receives the mileage writing task sent by the server 01, and then matches the first configuration word and the second configuration word. The matching includes: if the mileage purchase state is not purchased and the first mileage data is greater than zero, or if the mileage purchase state is purchased and the first mileage data is not greater than zero, the BGM 11 does not execute the step of broadcasting the first configuration word and the second configuration word, and determines that the vehicle mileage settlement verification fails this time; if the mileage purchase state is not purchased and the first mileage data is not greater than zero, or if the mileage purchase state is purchased and the first mileage data is greater than zero, the BGM 11 of the vehicle 02 broadcasts the first configuration word and the second configuration word to the VCU 12 of the vehicle 02 and the DHU 13 of the vehicle 02.

[0150] The VCU 12 of the vehicle 02 receives the first configuration word and the second configuration word broadcasted by the BGM 11 of the vehicle 02, and then matches the first configuration word and the second configuration word. The matching includes: if the mileage purchase state is not purchased and the first mileage data is greater than zero, or if the mileage purchase state is purchased and the first mileage data is not greater than zero, the VCU 12 does not execute the step of mileage settlement, and determines that the vehicle mileage settlement verification fails this time; if the mileage purchase state is not purchased and the first mileage data is not greater than zero, or if the mileage purchase state is purchased and the first mileage data is greater than zero, the VCU 12 performs mileage settlement according to the first configuration word, the second configuration word and the locally stored remaining mileage; the VCU 12 of the vehicle 02 sends the first settlement result obtained by performing mileage settlement according to the first configuration word and the second configuration word to the DHU 13 of the vehicle 02; wherein the VCU 12 of the vehicle 02 obtains the settlement verification result through the communication link of the settlement verification system, and if the number of times of vehicle mileage settlement verification failure reaches a preset value, the vehicle 02 performs at least one of the following vehicle restriction controls: speed limit control, vehicle-mounted additional function restriction.

[0151] The DHU 13 of the vehicle 02 receives the first configuration word and the second configuration word broadcasted by the BGM 11 of the vehicle 02, and if the first settlement result sent by the VCU 12 of the vehicle 02 is not received within a predetermined time, it is determined that the vehicle mileage settlement verification fails this time; if the first settlement result sent by the VCU 12 of the vehicle 02 is received, the DHU 13 of the vehicle 02 sends the first settlement result to the server 01;

[0152] The server 01 performs consistency verification according to the first settlement result and the locally stored second settlement result, and if they are inconsistent, it is determined that the vehicle mileage settlement verification fails this time; wherein the server 01 obtains the settlement verification result through the communication link of the settlement verification system, and if the vehicle mileage settlement verification fails, the server 01 sends the mileage writing task including the first configuration word and the second configuration word to the vehicle 02 again.

[0153] In this example, the BGM 11 of the vehicle 02 can match the first configuration word and the second configuration word in the mileage writing task sent by the server 01; the VCU 12 of the vehicle 02 can match the first configuration word and the second configuration word broadcast by the BGM 11 of the vehicle 02, and perform settlement; the DHU 13 can determine that the function of the VCU 12 related to mileage settlement fails if the first settlement result is not received, and forward the first settlement result to the server 01 end for mileage settlement if the first settlement result is received. The scheme of this example performs multi-channel inspection on the configuration word in the mileage writing task, and multi-end comparison on the settlement result in the same writing task, which can improve the reliability of mileage settlement.

[0154] The settlement verification system provided in this example includes: a server sends a mileage writing task including a first configuration word and a second configuration word to a vehicle, so that the vehicle performs mileage settlement according to the first configuration word, the second configuration word and locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result according to the first configuration word. The scheme of this application, the server issues configuration words representing mileage purchase status and mileage data to be settled to the vehicle, and the vehicle verifies the first settlement result by the remaining mileage in the non-purchase state, which can improve the reliability of mileage settlement in the rental process.

[0155] Embodiment Four

[0156] FIG. 9 is a structural schematic diagram of an electronic device provided in an embodiment of the application, which includes:

[0157] The electronic device further includes a memory 292, and can further include a communication interface 293 and a bus 294. The processor 291, the memory 292, and the communication interface 293 can communicate with each other through the bus 294. The communication interface 293 can be used for information transmission. The processor 291 can invoke the logical instructions in the memory 292 to execute the method of the above examples. In addition, the logical instructions in the memory 292 described above can be implemented in the form of a software functional unit and sold or used as an independent product, which can be stored in a computer readable storage medium. The memory 292 as a computer readable storage medium can be used to store software programs, computer executable programs, such as program instructions / modules corresponding to the method in the embodiments of the application. The processor 291 executes the functions and data processing by running the software programs, instructions and modules stored in the memory 292, that is, implements the method in the above method examples.

[0158] The memory 292 can include a program storage area and a data storage area, where the program storage area can store an operating system, application programs required by at least one function; the data storage area can store data created according to the use of the terminal device, etc. In addition, the memory 292 can include a high-speed random access memory, and can also include a nonvolatile memory.

[0159] The embodiments of the present application further provide a computer readable storage medium, and the computer readable storage medium stores computer execution instructions. The computer execution instructions are executed by a processor to implement the method in any of the embodiments.

[0160] The embodiments of the present application further provide a computer program product, and the computer program product includes a computer program. The computer program is executed by a processor to implement the method in any of the embodiments.

[0161] Other embodiments of the application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. It is intended that the specification and examples be considered as exemplary only, with the true scope and spirit of the application being indicated by the following claims.

[0162] It should be understood that the application is not limited to the precise construction that has been described above and shown in the accompanying drawings, and that various modifications and changes can be made by those skilled in the art without departing from the scope of the application. The scope of the application is limited only by the appended claims.

Claims

1. A settlement verification method, applied to a server; the method includes: A mileage write task including a first configuration word and a second configuration word is sent to the vehicle so that the vehicle performs mileage settlement based on the first configuration word, the second configuration word and the remaining mileage stored locally to obtain a first settlement result, and verifies the first settlement result based on the first configuration word; wherein, the first configuration word represents the mileage purchase status, and the second configuration word represents the first mileage data to be settled; The verification includes: when the first configuration character indicates that no purchase has been made, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, the verification is deemed to have passed; if the mileage corresponding to the first settlement result is greater than the remaining mileage, the verification is deemed to have failed.

2. The method according to claim 1, wherein, Sending the mileage rewriting task to the vehicle, including a first configuration word and a second configuration word, includes: The mileage write task is sent to the vehicle's BGM, so that the vehicle's BGM broadcasts the first configuration word and the second configuration word to the vehicle's VCU, and the vehicle's VCU performs mileage calculation based on the first configuration word, the second configuration word and the locally stored remaining mileage.

3. The method according to any one of claims 1 to 2, wherein, The method further includes: Receive the first settlement result sent by the vehicle; The consistency of the first settlement result and the second settlement result stored locally is checked. If they are inconsistent, the vehicle mileage settlement check is deemed to have failed.

4. The method according to any one of claims 1 to 3, wherein, The method further includes: If the vehicle mileage settlement verification fails, a mileage write task including the first configuration word and the second configuration word will be sent to the vehicle again.

5. A settlement verification method, applied to vehicles; the method includes: Receive a mileage writing task sent by the server, the mileage writing task including a first configuration word and a second configuration word; The first configuration word represents the mileage purchase status, and the second configuration word represents the first mileage data to be settled; The first settlement result is obtained by performing mileage calculation based on the first configuration word, the second configuration word, and the remaining mileage stored locally; In addition, the first settlement result is verified according to the first configuration word; the verification includes: when the first configuration word indicates that no purchase has been made, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, the verification is determined to be successful; otherwise, the verification is determined to be unsuccessful.

6. The method according to claim 5, wherein, Before performing mileage calculation based on the first configuration word, the second configuration word, and the remaining mileage stored locally, the method further includes: The first configuration word and the second configuration word are matched; the matching includes: if the mileage purchase status is not purchased and the first mileage data is greater than zero, or if the mileage purchase status is purchased and the first mileage data is not greater than zero, then the vehicle will not perform settlement, and the vehicle mileage settlement verification will be determined to be unsuccessful. The vehicle performs mileage settlement based on the first configuration word, the second configuration word, and the remaining mileage stored locally, including: if the mileage purchase status is "not purchased" and the first mileage data is not greater than zero, or if the mileage purchase status is "purchased" and the first mileage data is greater than zero, the vehicle performs mileage settlement based on the first configuration word, the second configuration word, and the remaining mileage stored locally.

7. The method according to any one of claims 5 to 6, wherein, The vehicle includes a BGM and a VCU; the mileage rewriting task sent by the receiving server includes: The vehicle's BGM receives the mileage flashing task sent by the server and broadcasts the first configuration word and the second configuration word to the vehicle's VCU; The vehicle's VCU performs mileage calculation based on the first configuration word, the second configuration word, and the remaining mileage stored locally.

8. The method according to claim 7, wherein, After the vehicle's BGM receiving server sends the mileage rewriting task, it also includes: The vehicle's BGM matches the first configuration word and the second configuration word; the matching includes: if the mileage purchase status is not purchased and the first mileage data is greater than zero, or if the mileage purchase status is purchased and the first mileage data is not greater than zero, then the BGM does not perform the step of broadcasting the first configuration word and the second configuration word, and determines that the vehicle mileage settlement verification fails. The vehicle's BGM broadcasts the first configuration word and the second configuration word to the vehicle's VCU, including: if the mileage purchase status is not purchased and the first mileage data is not greater than zero, or if the mileage purchase status is purchased and the first mileage data is greater than zero, then the vehicle's BGM broadcasts the first configuration word and the second configuration word to the vehicle's VCU.

9. The method according to claim 7, wherein, The vehicle also includes a DHU; the vehicle's BGM broadcasts the first configuration word and the second configuration word to the vehicle's VCU, including: The vehicle's BGM broadcasts the first configuration word and the second configuration word to the vehicle's VCU and the vehicle's DHU; After the vehicle's VCU performs mileage calculation based on the first configuration word, the second configuration word, and the locally stored remaining mileage, it also includes: The vehicle's VCU sends the first settlement result obtained by the vehicle's DHU based on the first configuration word and the second configuration word when the vehicle's VCU performs mileage settlement.

10. The method according to claim 9, wherein, The method further includes: If the vehicle's DHU does not receive the first settlement result from the vehicle's VCU within a predetermined time after receiving the first configuration word and the second configuration word broadcast by the vehicle's BGM, it determines that the vehicle mileage settlement verification fails.

11. The method according to claim 10, wherein, The method further includes: The vehicle's DHU sends the first settlement result to the server, so that the server can perform a consistency check between the first settlement result and the locally stored second settlement result. If they are inconsistent, the vehicle mileage settlement check is deemed to have failed.

12. The method according to any one of claims 5 to 11, wherein, The method further includes: If the number of times the vehicle mileage settlement verification fails reaches a preset value, the vehicle will implement at least one of the following vehicle restriction controls: speed limit control and on-board additional function restriction.

13. A server, the server being configured to: A mileage write task, including a first configuration word and a second configuration word, is sent to the vehicle so that the vehicle performs mileage settlement based on the first configuration word, the second configuration word, and the locally stored remaining mileage to obtain a first settlement result, and verifies the first settlement result based on the first configuration word; wherein, The first configuration word represents the mileage purchase status, and the second configuration word represents the first mileage data to be settled; The verification includes: when the first configuration character indicates that no purchase has been made, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, the verification is deemed to have passed; otherwise, the verification is deemed to have failed.

14. A vehicle, wherein the vehicle is configured as follows: The system receives a mileage write task sent by the server. The mileage write task includes a first configuration word and a second configuration word. The first configuration word represents the mileage purchase status, and the second configuration word represents the first mileage data to be settled. The first settlement result is obtained by performing mileage calculation based on the first configuration word, the second configuration word, and the remaining mileage stored locally; In addition, the first settlement result is verified according to the first configuration word; the verification includes: when the first configuration word indicates that no purchase has been made, if the mileage corresponding to the first settlement result is not greater than the remaining mileage, the verification is determined to be successful; otherwise, the verification is determined to be unsuccessful.

15. A settlement verification system, comprising the vehicle and server as described in claims 13 and 14.

16. An electronic device comprising: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; the processor executes the computer-executable instructions stored in the memory to implement the method as claimed in any one of claims 1 to 4 or claims 5 to 12.

17. A computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the method as claimed in any one of claims 1 to 4 or 5 to 12.

18. A computer program product comprising a computer program that, when executed by a processor, implements the method as claimed in any one of claims 1 to 4 or 5 to 12.

Citation Information

Patent Citations

  • Vehicle control method, controller, cloud server and vehicle

    CN108418886A

  • Vehicle speed limit control method and device, vehicle and storage medium

    CN118404997A

  • Man-machine interaction method, device and equipment and vehicle

    CN118409693A

  • Settlement verification method, server, vehicle, system, equipment, medium and product

    CN118886993A

  • Vehicle Mileage Verification System and Method

    US20190035173A1