The invention relates to a shared car that limits its driving authority based on a user historical record. The shared car consists at least of a first authentication module and an authority limit module. The shared car also includes a second authentication module that is set independently from the first authentication module and capable of remote connection with a historical record database through a communication interface of the shared car. The second authentication module sends, based on user identity information obtained by the first authentication module, a query request to the historical record database, the access of which is provided remotely by at least one independent third party, to acquire historical data related to the past of a user as a second risk assessment parameter of the user using the shared car, and sends the second risk assessment parameter together with the user identity information to the authority limit module integrated in the shared car. The authority limit module assesses a driving risk level of the user based on the second risk assessment parameter and the user identity information, and determines a driving authority range of the user during the use of the shared car based on the driving risk level.