After Gaohe's "indecent photos in the car were leaked", it was clarified to the ideal, who will protect the data security of my smart car camera?
This article is from Nandu Bay Finance Society.
采写 | 南都·湾财社记者 陈镜安
Edit | Huang Lu
Video | Ye Haocheng
Recently, an indecent image of the car once again pushed Gaohe Automobile, which was in financial difficulties, to the forefront of public opinion, and was accused of "leaking photos taken by the camera in the car".
Although Gaohe Automobile quickly responded, insisting that the local images of the camera could not be remotely retrieved from the technical and legal aspects of the backend of the vehicle, and ensuring that there was no official acquisition or leakage of relevant images, the incident still quickly aroused strong public concerns about the personal data and privacy security of new energy vehicles in the era of Internet of Vehicles.
Coincidentally, on the morning of the 15th, @理想汽车法务部 posted on Weibo that he had received a report from a user that he had seen someone in the WeChat group spreading pornographic pictures taken by the so-called Li Auto's in-car camera. Li Auto solemnly stated: "Of the more than 700,000 Li Auto we have delivered, none of the in-car sensors in any car have the ability to remotely view and store pictures, audio, and video. ”
Some experts told the reporter of Nandu Bay Finance Society that at present, in high-end models, the setting of in-car cameras has gradually become a trend. New power car companies such as Cialis
AITO Automotive (Wenjie series),
NIO,
Xpeng Motors,
Leapmotor,
High-end models of brands such as ZEEKR are generally equipped with in-car cameras, and the function is mainly to monitor driver fatigue.
In view of the fact that images are an important carrier of privacy information, whether there is a risk of image data leakage in the in-car camera has become the focus of public attention.
Is it possible to turn off the camera in the car?
To protect privacy?
Recently, an indecent image taken in the interior of the car of Gaohe Automobile has been circulated among car owners and social media, and Gaohe Automobile has been accused of "leaking photos taken by the camera in the car".
On April 10, Gaohe Automobile publicly stated that Gaohe could not access the camera images, so please do not spread rumors, spread or mislead the public, and said that the official letter had been issued and the police were being filed.
This is not the first time Gao He has responded. On April 9, Gaohe Automobile has stated that the company will never have the behavior of Gaohe official to obtain or leak relevant images, and the background of Gaohe Automobile cannot remotely retrieve the local images of the camera from the technical and legal perspectives.
Also on April 10, the official official account of Xiaomi Auto released "Xiaomi SU7 Answers Questions from Netizens", which also answered the in-car camera and privacy questions that netizens are concerned about.
On April 10th, Xiaomi SU7 answered questions from netizens (episode 13), the picture is from Weibo
Xiaomi Auto notes that the Xiaomi SU7 has a camera between the steering wheel and the instrument panel to detect the driver's status. When the driver is detected to close his eyes, turn his head, yawn, use his mobile phone to make and make calls, and other fatigue or distracted behaviors, the system will remind the driver to pay attention to safe driving through voice broadcast, pop-up window on the central control screen, etc. However, the system only makes behavior judgments and reminders locally in the vehicle, and the image data will not be recorded or transmitted externally, fully protecting the privacy and security of users. In addition, the camera can be switched off directly via the in-vehicle system.
On the morning of April 15, the legal department of Li Auto posted on Weibo that it had received a report from a user that it had seen someone in a WeChat group spreading pornographic images taken by the so-called Li Auto's in-car camera.
In this regard, on the morning of the 15th, Li Auto made a solemn statement:
"Of the more than 700,000 Li cars we have delivered, none of them have the ability to remotely view and store pictures, audio, and video with in-car sensors.
We put privacy at the top of our priority and even the dashcam only allows the owner to store it locally and does not record sound.
Li Auto respects and protects the privacy and security of users, and all data processing behaviors comply with the relevant requirements of national laws and regulations.
”
The screenshot is from the Internet, and @Li Auto's legal department responds
Behind the series of incidents, consumers and car owners are more concerned about issues such as the disclosure of personal privacy by in-car cameras. Zhang Xiaorong, president of the Deep Science and Technology Research Institute, told the reporter of Nandu Bay Finance Society that the current in-car cameras can be divided into driver monitoring system (DMS), occupant monitoring system (OMS), human-computer interaction, entertainment and social functions, and safety monitoring and other functions according to their functions.
The operation of the equipment generates data, so where does the data from the footage captured by these in-car cameras and calculations go?
person
Guo Tao, an expert in industrial intelligence, pointed out to the reporter of Nandu Bay Finance Society that generally speaking, the images captured by the camera in the car are usually transmitted to the internal processing system of the vehicle for real-time analysis and processing. Some of the data may be uploaded to a cloud server for more in-depth analysis and storage. Individual data may be shared with third-party partners, such as map service providers or insurance companies.
Some brands have cameras in their cars.
All of them are called data in-vehicle processing
"In the high-end models of some well-known brands, the installation of in-car cameras is gradually becoming an industry trend," said industry observer Hong Shibin in an interview.
Through consulting the customer service staff of major brands, some car owners and offline visits, the reporter of Nandu Bay Finance Society learned that new power car companies such as Cialis AITO Automobile (Wenjie series), Weilai Automobile, Xiaopeng Motors, Li Auto, Leapmotor and Zeekr Automobile are generally equipped with in-car cameras in their high-end models, and their main function is to monitor the fatigue state of the driver.
Taking AITO's M9 as an example, the car is equipped with three cameras, one is located in the cockpit and is specially used to monitor the driver's status, one is installed in the rearview mirror and has the function of shooting and video, and the other is located in the rear reading light position for rear passenger identification.
Dual cameras in the interior of the NIO car
NIO's ET7 is equipped with two cameras, one in front of the steering wheel and one in the rearview mirror, with the former being mainly used for driver status monitoring.
Xpeng's latest MPV models, the Xpeng X9 and the new P5, are equipped with only one camera, which is designed to monitor the driver's fatigue status.
Li Auto is slightly different, after the upgrade of the 2024 L-series, except for the L7 and L8 Air versions, the cabin sensors of all L9 series and the rest of the L7 and L8 versions all use RGB (color) + IR (infrared) vision modules, that is, a color imaging camera and an infrared perception camera. According to offline store sales, IR cameras are used for human-computer interaction and driver fatigue monitoring, while RGB cameras are entertainment and auxiliary IR cameras to capture interactive actions more accurately.
The mid-to-high-spec versions of the C11 and C10 are equipped with a facial recognition camera. ZEEKR 001 also has only one in-car camera, which is located in front of the steering wheel and is specially used to monitor the driver's status.
However, through the introduction of the customer service staff of the above-mentioned new power brands and the "privacy policy" of each brand, the reporter of Nandu Bay Finance Society learned that the image data captured by the in-car camera of these models will not be uploaded to the cloud in most cases, and the data processing will only be completed on the car side. Some operating parameters and data conclusions may be recorded and uploaded to the enterprise cloud for purposes such as refining algorithms.
For example, after the M9 in-car camera captures the image, the data will be stored inside the car and will not be uploaded to the cloud, but it can be exported through mobile storage tools such as a USB flash drive. "Data that involves personal privacy will definitely not come to the company. The customer service staff said.
According to NIO's Privacy Policy, the processing of the cockpit video by the driver fatigue monitoring function is all completed in the car, and the cockpit video will not be uploaded to the NIO cloud or saved in the car. The camera in the rearview mirror is an entertainment function, which can be used to take photos and videos in the car, and the image data will be stored in the local photo album and can also be exported using a USB flash drive. These images can also be uploaded to the NIO App cloud on their own.
NIO staff shows off its privacy policy for in-car cameras
Xpeng Motors' customer service staff said that the driver fatigue monitoring function will not be turned on in manual driving mode, but will only be enabled in intelligent assisted driving mode, and no images will be collected when enabled, and data will not be stored or uploaded to the cloud. According to the Privacy Policy, the data captured by the driver monitoring camera is processed on the vehicle side and will not be transmitted outside the vehicle.
Xpeng In-Car Camera Privacy Policy
The ideal sales staff said that the RGB camera has no monitoring function, and the images generated by entertainment shooting are stored in the car machine, and the original picture cannot be saved for the time being, and the cartoon image can only be formed through intelligent AI. According to the brand's customer service staff, the IR perception camera will not produce images.
The customer service staff of Leapmotor said that the personal data such as the face recognized by the in-car camera will only be stored in the vehicle's memory chip, and the in-car camera and voice operate independently and cannot be correlated, and neither has real-time recording and monitoring functions.
The customer service staff of ZEEKR Auto said that the camera in the car only has a monitoring function and will not shoot video, and the relevant data is temporarily stored locally in the vehicle and automatically cleared after the user locks the car and turns off the power.
The data security of new energy vehicles attracts attention,
Experts called for greater management and technological innovation
Zhang Ruifeng, Secretary-General of the New Energy Vehicle Industry Technology Innovation Alliance of the Greater Bay Area of Guangdong Province, recently revealed to a reporter from Nandu Bay Finance Society that consumers are currently highly concerned about the security of personal privacy data in the field of new energy vehicles. In particular, consumers are concerned that sensitive personal information such as identity certificates and physiological identifiers, as well as important personal information such as basic information, driving behavior, and vehicle positioning, may be leaked.
In fact, in October 2021, the Cyberspace Administration of China, the National Development and Reform Commission, the Ministry of Industry and Information Technology and other departments jointly issued the Several Provisions on the Security Management of Automotive Data (Trial), which clearly stipulates that automotive data processors should adhere to the "in-vehicle processing principle" when processing data to avoid unnecessary data leakage.
According to the reporter of Nandu Bay Finance Society, at present, all automobile brands generally follow this principle, give priority to processing data in the car, and emphasize the relative independence of car data and the privacy needs of users in sales words.
However, there are still some brands that may upload non-image data to the cloud. For example, NIO revealed in its Privacy Policy that although it does not extract and analyze biometrics, it analyzes facial images to determine the level of driving fatigue and may upload relevant data to the cloud for accident investigation and algorithm improvement.
Zhang Xiaorong, president of the Deepin Science and Technology Research Institute, pointed out that if the data is not encrypted or hacked during transmission and storage, it will face the risk of being intercepted or tampered with. At the same time, security vulnerabilities in car companies' cloud servers may also lead to user data leakage. In addition, although some brands such as ZEEKR 001 and Xpeng X9 have taken data cleaning or no storage measures, most brands still store their in-car camera data locally, and there is also a risk of data leakage if the storage device security measures are insufficient.
In order to ensure data security, Zhang Xiaorong suggested strengthening the encryption technology for data transmission and storage, and establishing a sound data security management system. At the same time, car companies should provide a clear privacy policy and user agreement before collecting user data, and allow users to turn off the in-car camera function or use physical occlusion to protect privacy.
Ideal L7 Ultra RGB+IR vision module in the car, the camera has a cover
The reporter of Nandu Bay Finance Society found that the in-car system of each model provides privacy setting options to turn off the in-car camera, and some brands such as Ideal and BYD (including sub-brands such as Denza and Equation Leopard) also use physical covers to prevent image generation from the source. Zhang Yue, chairman of Aoyu International, said that the use of physical cover can effectively prevent data collection and privacy leakage.
In addition, Zhang Ruifeng emphasized that in the era of Internet of Vehicles, data security is not only about individuals, but also affects the stability of urban transportation systems. Studies have shown that hacking of some self-driving cars could paralyze urban transportation systems. Therefore, governments, consumers, industry companies, and technology innovators need to work together to strengthen data security management and technological innovation to ensure the compliant use of smart car data and information security.
The government should give full play to the functional role of the data bureau, plan the construction of the data base for smart cars, and set up "crash test" standards for data security. Consumers should pay attention to the protection of sensitive personal data and develop automatic identification technology to prevent leakage. Industry companies should standardize data processing behaviors to ensure that data is used in compliance with regulations.
At the same time, in terms of technological innovation, it is necessary to accelerate the research on key technologies of intelligent vehicle information security and build a complete emergency response platform to deal with potential information security risks and threats.
Related Reports:
：
Bay financial investment to see
Do you have any suggestions or opinions on the in-car camera of the smart car,