IP Library Granted Patent US 12,469,342
Granted Patent B2
US 12,469,342 · App. 18/298,974 · Granted Nov 11, 2025

Systems and methods for securing private user data based on GPS

Inventors: Jason Carlton (Waterford, MI); Priyank Shah (West Bloomfield, MI); Hafiz Malik (West Bloomfield, MI)
Assignee: Ford Global Technologies, LLC
G07C5/085B60W40/08G07C5/0816B60W2540/043
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,469,342
App. No.
18/298,974
Granted
Nov 11, 2025
Kind
B2
Abstract

Methods and systems are provided for deleting a user profile and pairing data stored in memory of an in-vehicle computing system to maintain user privacy and data security. In one method, the method includes deleting at least one user profile and corresponding pairing data upon receiving a deletion request, wherein the in-vehicle computing system is configured to operate in a rental mode or a non-rental mode, and wherein a pre-set trigger varies according to the rental mode or the non-rental mode. In another method, the method includes deleting at least one user profile and corresponding pairing data based on one or more of a pre-determined location and a status of an ignition of the vehicle in a rental mode and deleting the at least one user profile and the corresponding pairing data based on a prompt displayed to a user in a non-rental mode.

Claims (37)

1 . A method for an in-vehicle computing system of a vehicle, comprising:

deleting at least one user profile and corresponding pairing data upon receiving a deletion request;

wherein the in-vehicle computing system is configured to operate in a rental mode or a non-rental mode, the rental mode comprising a first sub-mode and a second sub-mode, wherein when the in-vehicle computing system is operating in the first sub-mode, the deletion request is received in response to the vehicle being located within a pre-determined location determined prior to vehicle operation by a user of the vehicle for a pre-determined amount of time, and when the in-vehicle computing system is operating in the second sub-mode, the deletion request is received in response to the vehicle being located within the pre-determined location and a vehicle ignition being switched off.

2 . The method of claim 1 , wherein the at least one user profile and corresponding pairing data comprises user data stored in the in-vehicle computing system that compromises sensitive information that cannot be accessed by an unauthorized user without compromising user privacy, the unauthorized user being a different user than an authorized user associated with the at least one user profile and corresponding pairing data.

3 . The method of claim 1 , wherein the in-vehicle computing system is an infotainment system.

4 . The method of claim 1 , wherein the rental mode comprises the user operating the vehicle temporarily and returning the vehicle to the pre-determined location, and the non-rental mode comprises one of the user operating the vehicle permanently or the user being a passenger in the vehicle.

5 . The method of claim 4 , wherein the non-rental mode comprises a permanent pairing mode and a temporary pairing mode, and wherein the in-vehicle computing system is operated in the permanent pairing mode when the user is operating the vehicle permanently, and wherein the in-vehicle computing system is operated in the temporary pairing mode when the user is traveling in the vehicle temporarily and not operating the vehicle.

6 . The method of claim 5 , wherein the deletion request is received in the temporary pairing mode in response to the user selecting a user-defined trigger and the user-defined trigger being activated.

7 . A method for managing user data for an in-vehicle computing system of a vehicle comprising:

responsive to operation of the in-vehicle computing system in a rental mode, deleting at least one user profile and corresponding pairing data based on a first deletion request generated as a result of one of the vehicle being located within a pre-determined location for a pre-determined amount of time while operating in a first sub-mode of the rental mode, and the vehicle being located within the pre-determined location and a vehicle ignition being switched off while operating in a second sub-mode of the rental mode; and

responsive to operation of the in-vehicle computing system in a non-rental mode, deleting the at least one user profile and the corresponding pairing data based on a second deletion request received from a user.

8 . The method of claim 7 , further comprising determining a current vehicle location based on location data obtained via a mobile computing device paired and synchronized to the in-vehicle computing system or via a GPS of the in-vehicle computing system, and wherein the vehicle is determined, based on comparison of current vehicle location to the pre-determined location, to be located within the pre-determined location when the current vehicle location is within a distance threshold of the pre-determined location.

9 . The method of claim 7 , wherein deleting the at least one user profile and corresponding pairing data based on the second deletion request received from the user further comprises deleting the at least one user profile and corresponding pairing data in response to a first prompt being displayed to the user and the user selecting an option to delete a specific user profile and corresponding pairing data.

10 . The method of claim 9 , wherein deleting the at least one user profile and corresponding pairing data based on the vehicle being located within the pre-determined location and the vehicle ignition being switched off while operating in the second sub-mode of the rental mode further comprises displaying a second prompt to the user, and receiving the first deletion request from the user in response to the second prompt.

11 . The method of claim 10 , wherein the user is prompted to delete the at least one user profile and corresponding pairing data in response to the in-vehicle computing system receiving an alert indicating that an ignition switch is switched off.

12 . The method of claim 7 , wherein deleting the at least one user profile and the corresponding pairing data based on the second deletion request from the user further comprises deleting the at least one user profile and corresponding pairing data in response to one of:

the user manually initiating the second deletion request for a particular user profile during a permanent pairing mode of the non-rental mode in response to a third prompt displayed to the user; or

a user-defined trigger being activated, wherein the user-defined trigger is set via a fourth prompt displayed to the user during operation of the in-vehicle computing system in a temporary pairing mode of the non-rental mode.

13 . The method of claim 7 , further comprising deleting the at least one user profile and corresponding pairing data in response to a default pre-determined trigger being activated, the default pre-determined trigger being a pre-determined amount of time, whether the in-vehicle computing system is operating in the rental mode or the non-rental mode.

14 . A vehicle system, comprising:

an infotainment system comprising at least one memory and at least one processor, wherein computer readable instructions stored in the at least one memory and executed by the at least one processor cause the processor to:

delete at least one user profile and corresponding pairing data stored in the at least one memory in response to a vehicle being located within a pre-determined location for a pre-determined amount of time when the infotainment system is operating a rental mode;

delete the at least one user profile and the corresponding pairing data in response to user input when the infotainment system is operating in a non-rental mode; and

delete the at least one user profile and corresponding pairing data, whether the infotainment system is operating in the rental mode or the non-rental mode, in response to a default pre-determined trigger, the default pre-determined trigger being the pre-determined amount of time.

15 . The system of claim 14 , further comprising:

a navigation subsystem comprising GPS, wherein the at least one processor executes further instructions stored in the at least one memory that cause the processor to determine a current vehicle location via the navigation subsystem via GPS and compare the current vehicle location to one of a pre-determined trigger or a user-defined trigger, the pre-determined trigger including the pre-determined location and the user-defined trigger including a user-defined location; and

an ignition switch communicatively coupled to the infotainment system to detect a change in a position of the ignition switch and a vehicle ignition being switched off in response to the change in the position of the ignition switch,

wherein the at least one processor executes further instructions stored in the at least one memory that cause the processor to delete the at least one user profile and pairing data in response to the vehicle being located within the pre-determined location and receiving an alert indicating that the ignition switch is being switched off during the rental mode of the infotainment system or during a temporary pairing sub-mode of the non-rental mode wherein the user-defined trigger is the vehicle ignition being switched off.

16 . The system of claim 14 , wherein the infotainment system is communicatively coupled to an external device via pairing and synchronizing, and wherein the external device is a mobile computing device or a Bluetooth device.

17 . The system of claim 16 , wherein the external device is configured to obtain location data, and wherein the at least one processor executes further instructions stored in the at least one memory that cause the processor to determine a current vehicle location based on location data obtained via the external device.

18 . The system of claim 14 , further comprising:

a user interface communicatively coupled to the infotainment system, the user interface operating as a user input device and display device,

wherein the at least one processor executes further instructions stored in the at least one memory that cause the processor to:

enable a system administrator to configure the infotainment system to operate in the rental mode or non-rental mode;

during operation in the non-rental mode, display a first prompt to a user via the user interface to set an operation mode of the infotainment system to one of a permanent pairing sub-mode and temporary pairing sub-mode of the non-rental mode;

delete at least one user profile and corresponding profile in response to receiving a deletion request manually initiated by the user during operation in the permanent pairing sub-mode; and

display a second prompt to the user via the user interface to set a pre-defined user trigger during the temporary pairing sub-mode of the non-rental mode, and receive user input in response to the second prompt.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 22, 2023
From: MALIK, HAFIZ
To: FORD GLOBAL TECHNOLOGIES, LLC
Reel/Frame 063721/0548 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 11, 2023
From: CARLTON, JASON; SHAH, PRIYANK
To: FORD GLOBAL TECHNOLOGIES, LLC
Reel/Frame 063293/0001 →
Continuity (1)
Related Publication 20240346863A1 · Oct 17, 2024
References Cited (20)
US 9340155B2 · Pisz et al. · 2016 [cited by applicant]
US 9891907B2 · Searle et al. · 2018 [cited by applicant]
US 10111272B1 · Withers et al. · 2018 [cited by applicant]
US 10303653B2 · Martin et al. · 2019 [cited by applicant]
US 10620391B2 · Hikosaka · 2020 [cited by applicant]
US 11113415B1 · Amico · 2021 [cited by applicant]
US 20030033175A1 · Ogura · 2003 [cited by examiner]
US 20140240089A1 · Chang · 2014 [cited by examiner]
US 20160364812A1 · Cao · 2016 [cited by applicant]
US 20190059123A1 · Withers · 2019 [cited by examiner]
US 20190202399A1 · Troia · 2019 [cited by examiner]
US 20190291719A1 · Tiziani · 2019 [cited by examiner]
US 20190316921A1 · Osawa · 2019 [cited by examiner]
US 20200074492A1 · Scholl et al. · 2020 [cited by applicant]
US 20210297520A1 · Takada · 2021 [cited by examiner]
US 20220289216A1 · Kamiyamaguchi · 2022 [cited by examiner]
US 20240021031A1 · Schmidt · 2024 [cited by examiner]
JP 2010145330A · 2010 [cited by examiner]
KR 20220056717A · 2022 [cited by examiner]
English translation of JP2010145330A, retrieved from Espacenet on Mar. 20, 2025 (Year: 2025). [cited by examiner]