CN108664256A - Firmware updating method and device of system and battery management system - Google Patents
Firmware updating method and device of system and battery management system Download PDFInfo
- Publication number
- CN108664256A CN108664256A CN201710192164.2A CN201710192164A CN108664256A CN 108664256 A CN108664256 A CN 108664256A CN 201710192164 A CN201710192164 A CN 201710192164A CN 108664256 A CN108664256 A CN 108664256A
- Authority
- CN
- China
- Prior art keywords
- update
- program
- system application
- update program
- segment
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
- B60L50/00—Electric propulsion with power supplied within the vehicle
- B60L50/50—Electric propulsion with power supplied within the vehicle using propulsion power supplied by batteries or fuel cells
- B60L50/60—Electric propulsion with power supplied within the vehicle using propulsion power supplied by batteries or fuel cells using power supplied by batteries
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
-
- B—PERFORMING OPERATIONS; TRANSPORTING
- B60—VEHICLES IN GENERAL
- B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
- B60L58/00—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles
- B60L58/10—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles for monitoring or controlling batteries
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/445—Program loading or initiating
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
- Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
- Y02T10/00—Road transport of goods or passengers
- Y02T10/60—Other road transportation technologies with climate change mitigation effect
- Y02T10/70—Energy storage systems for electromobility, e.g. batteries
Abstract
The invention discloses a firmware updating method and device of a system and a battery management system. The method can comprise the following steps: executing the update guide segment, and identifying the validity of the system update program segment, wherein the content stored in the update guide segment cannot be rewritten during program operation; the system updating program segment is judged to be effective, and when a system application program updating instruction is received, the system application program of the corresponding system application program segment is updated through the system updating program of the corresponding system updating program segment; and when a system updating program updating instruction is received, the effectiveness of the system application program section is identified through the updating guide section, the system application program section is judged to be effective, and the system updating program is updated through the system application program. The firmware updating method of the system disclosed by the invention can improve the reliability of firmware updating of the system and simplify the updating process.
Description
Technical field
The invention belongs to a kind of field of computer technology more particularly to firmware update of system, device and cell tubes
Reason system.
Background technology
BootLoader is the one section of bootstrap run before the operation of embedded system application program, mainly by answering
With programming (English：In Application Programming, abbreviation：IAP) technology is realized, is responsible for electronic equipment program more
Newly, BootLoader once malfunctions, either self problem or user's problem, is easy to cause equipment and becomes " brick ".
Especially in vehicle electric field, such as batteries of electric automobile, do not upgraded by the way of IAP, is needed to battery
Management system could carry out system upgrade after unpacking, and face huge difficult and cost.It is carried out in a manner of IAP in the prior art
When upgrading, if the case where only level system more new procedures (BOOT), itself upgrading of BOOT can not be completed.If taken
Upgrade code is moved to random access memory (English：Random access memory, abridge RAM) in upgrading, then depositing
In upgrading power down or other abnormal conditions, Boot damages can not work there is a situation where after.At some by the way of two-stage BOOT
It can solve the above problems but program execution is comparatively laborious, substantially increase the complexity of system.
Invention content
An embodiment of the present invention provides a kind of firmware update of system, device and battery management systems, can carry
Simplify more new technological process while the newer reliability of the firmware of high system.
May include the following steps in a first aspect, providing a kind of firmware update of system：
Execute update boot segment, and the validity of identifying system update program segment, wherein stored in update boot segment interior
Holding can not be written in program operation；
System update program segment is judged as effectively, when receiving system application more new command, passing through correspondence system
Update the system application of the system update program update correspondence system application program section of program segment；
System update program segment be judged as in vain, execute original system application program and send system update program upgrading carry
Show message, when receiving system update program more new command, by updating the effective of boot segment identifying system application program section
Property, system application section is judged as effectively, updates system update program by system application.
Second aspect provides a kind of firmware updating device of system, may include：Recognition unit, system update program
Updating unit and system application updating unit.
The recognition unit can be used for executing update boot segment, and identifying system updates the validity of program segment, wherein update
The content stored in boot segment can not be written in program operation.
The system update program updating unit can be used for system update program segment and be judged as effectively, when the system of receiving is answered
When with program more new command, the system update program that program segment is updated by correspondence system updates correspondence system application program section
System application.
The system application updating unit can be used for system update program segment and be judged as in vain, executing original system and answering
With program and sends system update program upgrade tip message and pass through update when receiving system update program more new command
The validity of boot segment identifying system application program section, system application section are judged as effectively, more by system application
New system more new procedures.
The third aspect provides a kind of battery management system, can be adapted for electric vehicle, may include above-mentioned system
Firmware updating device.
Firmware update, device and the battery management system of the system provided according to embodiments of the present invention, pass through update
Boot segment, identifying system update the validity of program segment and system application section, while ensureing to update and be stored in boot segment
Content can not be written in program operation, realize that system application and system update program can be each other by more new commands
Other side is updated, but itself program cannot be rewritten.The update mode of this equity mutual exclusion, it is ensured that the firmware of system
Renewal process is particularly suitable for the renewal process of the battery management system of electric vehicle, system application and system update
At least one party is available reliable in program, while eliminating the program update mode of two-stage BOOT, simplifies more new technological process.
Description of the drawings
In order to illustrate the technical solution of the embodiments of the present invention more clearly, will make below to required in the embodiment of the present invention
Attached drawing is briefly described, it should be apparent that, drawings described below is only some embodiments of the present invention, for
For those of ordinary skill in the art, without creative efforts, other are can also be obtained according to these attached drawings
Attached drawing.
Fig. 1 is a kind of schematic flow chart of the firmware update of the system of embodiment of the present invention；
Fig. 2 is the schematic flow chart of the firmware update of the system of another embodiment of the present invention；
Fig. 3 is the schematic flow chart of the firmware update of the system of another embodiment of the present invention；
Fig. 4 is a kind of schematic block diagram of the electric system of embodiment of the present invention；
Fig. 5 is a kind of signal of the firmware update suitable for electric system shown in Fig. 4 of embodiment of the present invention
Property flow chart；
Fig. 6 is update boot segment, system update program segment and the system application section of a kind of embodiment of the present invention
Illustrative data structure；
Fig. 7 is a kind of schematic block diagram of the firmware updating device of the system of embodiment of the present invention；
Fig. 8 is the schematic block diagram of the firmware updating device of the system of another embodiment of the present invention；
Fig. 9 is a kind of schematic block diagram of the battery management system of embodiment of the embodiment of the present invention；
Figure 10 is the schematic knot that a kind of computing device of the firmware updating device of the system of embodiment of the present invention is realized
Structure block diagram.
Specific implementation mode
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is
A part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art
The every other embodiment obtained without creative efforts, shall fall within the protection scope of the present invention.
It should be noted that in the absence of conflict, the features in the embodiments and the embodiments of the present application can phase
Mutually combination.The application is described in detail below with reference to the accompanying drawings and in conjunction with the embodiments.
Fig. 1 is a kind of schematic flow chart of the firmware update of the system of embodiment of the present invention.
As shown in Figure 1, the firmware update of the system can be used for the firmware update of controller in electrical system, such as
It can be applied to the firmware or other vehicle electronic control unit (English of cell management system of electric automobile：Electronic
Control Unit；Abridge ECU) update.
In some instances, the firmware update of the system may include：
S110 executes update boot segment, and the validity of identifying system update program segment, wherein deposited in update boot segment
The content of storage can not be written in program operation.
It is understood that in update boot segment the content that stores can not be written in program operation may be used it is a variety of
Mode is realized.Such as update boot segment is lockked using flash memory lock so that the content stored in above-mentioned update boot segment can not
Changed in program operation.
S120, system update program segment are judged as effectively, when receiving system application more new command, passing through correspondence
The system application of the system update program update correspondence system application program section of system update program segment.
For example, system update program segment is BOOT sections, then the content that stored in BOOT sections can be identified.When true
After fixed above-mentioned BOOT section effective, the corresponding system of BOOT sections of corresponding system update program updating system application program sections can be passed through
System application program.
S130, system update program segment are judged as in vain, executing original system application program and sending system update program
Upgrade tip message, when receiving system update program more new command, by updating boot segment identifying system application program section
Validity, system application section be judged as effectively, pass through system application update system update program.
For example, system update program segment is BOOT sections, then the content that stored in BOOT sections can be identified.When true
, can be with direct-execution system application program after fixed above-mentioned BOOT sections is invalid, and system update journey is generated by system application
Sequence upgrade tip message updates system update program with prompt.When receiving system update program more new command, pass through system
Application program update system update program.
It, can be by updating boot segment according to the firmware update of the system of above-described embodiment, identifying system updates journey
The validity of sequence section and system application section, at the same ensure to update in boot segment the content that stores can not in program operation quilt
It rewrites, realizes that system application and system update program can be updated other side each other by more new command, but not
Itself program can be rewritten.The update mode of this equity mutual exclusion, it is ensured that the firmware update process of system is particularly suitable for
At least one party is available in the renewal process of the battery management system of electric vehicle, system application and system update program can
It leans on, while eliminating the program update mode of two-stage BOOT, simplify more new technological process.
According to some embodiments, above-mentioned S110 may include：Pass through the identification information of system update program segment, identifying system
Update the validity of program segment.Wherein, rising in system update program segment can be arranged in the identification information of system update program segment
The end addresses of beginning address and system update program segment.The identification information of system update program segment may include system update program
The check information of section, the password of system update program version number and system update program.
In some instances, above-mentioned S130 can also include：Pass through the identification information of system application section, identifying system
The validity of application program section.Wherein, the identification information of system application section is arranged in the starting point of system application section
The end addresses of location and system application section.The identification information of system application section includes the verification of system application section
Information, system application version number and system application password.
In some instances, the identification information of system application section and the identification information of system update program segment can be with
The identification information that validity of system application section and system update program segment can be identified including other.
Can be during system upgrade, when abnormal conditions occur by the above method, the erasing of original program and new journey
The case where update of sequence is not fully finished can be effectively recognized, and effectively prevent the write-in of the program of mistake.
Fig. 2 is the schematic flow chart of the firmware update of the system of another embodiment of the present invention.Such as Fig. 2 institutes
Show, the firmware update of the system can also include the following steps：
S210, it is effective in system update program segment, if not receiving system application more more than the predetermined time
New command, the validity of identifying system application program section.
In some instances, which can be set as 300ms.So when system update program segment is confirmed as effectively
Afterwards, system update program starts timing, is more than 300ms when the stand-by period, continues the validity of identifying system application program section.
In some examples, above system application program section can be APP sections.
S220, when system application section is judged as effective, executive system utilities.
In some instances, if system does not receive system application more new command, journey in the given time
Sequence can be from system update programming jump to system application.For example, the original APP of firmware of the system of execution, ensures electrical system
The normal operation of system.
S230 does not execute action until receiving system application more when system application section is judged as invalid
New command.
In some instances, APP sections when being identified as invalid, then program cannot be from system update programming jump to system
Application program, but action is not executed until receiving system application more new command, then invalid APP is carried out more
Newly.
In the prior art, setting is drawn since internal bus (CAN) volume production is likely to have, so internal Electrical System
The upgrading of system node is needed through external CAN.During upgrading to internal electric system node, due to general logical
Agreement is believed, for example, ISO14229 unifies diagnostic service (English：Unified Diagnostic Services, abbreviation：UDS) it is
Response is needed, and response cannot be had by broadcasting, the inside CAN for otherwise connecting multiple internal electric system nodes can conflict, and lead
Cause the firmware update of existing system that can not upgrade similar internal electric system node by UDS protocol broadcasts.
Based on the above issues, the embodiment of the present invention proposes that a kind of firmware update of system, Fig. 3 are the another of the present invention
The schematic flow chart of the firmware update of the system of kind embodiment.As shown in figure 3, the firmware update of the system includes
Except embodiment as shown in Figure 1 or 2, can also include：
S310 is received and is sent response message after external system update instruction, wherein system update, which instructs, includes
System update program more new command and/or system application more new command.
In some instances, it is that can be connected by a master control system node in electric system on external CAN physical layer
It connects, then can be using the master control system node as bridge.Such as when host computer issues internal electric system node address
After data packet appears on external CAN, the master control system node as bridge may not need processing directly forward the data to it is interior
On portion CAN.So from the inside electric system node in user's angle, internal CAN just as being connected on external CAN.And
In above-mentioned example, the retransmission process of the master control system node as bridge is relatively easy.Such as, it can be determined that in host computer is issued
Then the destination address of the data packet of portion's electric system node address copies data packet to internal CAN and sends buffering area.
S320 generates and sends system update broadcast message, wherein system update broadcast message instruction is without response.
In some instances, during by UDS broadcast communications, the bridge joint of essence not instead of data link layer is answered
It is communicated with battery master control system node with layer.After battery master control system node provides response, broadcast message is then internally sent.
For example, this broadcast message can use UDS network layer ISO15765, directly forward content, can also custom protocol, only
Ensure to indicate recipient without response in the content of forwarding.
In some instances, master control system node disappears from external system update instruction directly feedback response receiving
Then breath generates and sends system update and broadcasts the message and gives other inside electric system nodes, and indicate other above-mentioned internal electricity
Device system node is receiving above system update broadcast message without response.
In some instances, which can be after feeding back response information, one by one to other inside Electrical Systems
System node is updated the inquiry of situation, and inquiry feedback result is returned to external node.It is solved by S310 and S320 logical
The problem of crossing external CAN upgradings inside electric system node.
Fig. 4 is a kind of schematic block diagram of the electric system of embodiment of the present invention.As shown in figure 4, the Electrical System
System may include battery management system 401；It is connect by the external bus CAN1 charging stations communicated with battery management system 401
Mouth 408；Vehicular charger 406, the debugging measurement interface communicated with battery management system 401 by external bus CAN2
407 and entire car controller 409；The electric machine controller 410 communicated with battery management system 401.Battery management system 401 can
To include that battery master control system 402, battery pack system 403, high-voltage safety system 404 and current sensor system 405 etc. are internal
Electric system node, wherein battery master control system 402, battery pack system 403, high-voltage safety system 404 and current sensor system
It is communicated by internal bus CAN3 between system 405.
Fig. 5 is a kind of signal of the firmware update suitable for electric system shown in Fig. 4 of embodiment of the present invention
Property flow chart.As shown in figure 5, the firmware update of the system can also include：
S510 is received and is sent response message after external system update instruction, wherein system update instruction can be with
Including system update program more new command and/or system application more new command, the recipient of external system update instruction
With the sender of response message.
S520 generates and sends system update broadcast message, wherein the generation of system update broadcast message and sender are
Battery master control system node, the recipient that system update broadcasts the message may include：Battery pack system node, high-voltage safety system
Node and current sensor system node.
In some instances, in electric vehicle field, because being logical in vehicle CAN (for example, CAN1 and CAN2) physical layer
The battery master control system node connection of battery management system is crossed, then can be using 402 node of battery master control system as net
Bridge.For example, when host computer send more new command to battery management system inside electric system (for example, battery pack system 403,
High-voltage safety system 404 and current sensor system 405).In the data packet for including above-mentioned internal electric system address of node
After appearing on external CAN, 402 node of battery master control system may not need processing and directly forward the data to internal CAN, such as
On CAN3.So from 403 node of internal battery system, 404 node of high-voltage safety system and the electricity in user's angle, CAN3
405 node of flow sensor system is just as being connected on external CAN.And in above-mentioned example, the battery master control system as bridge
The retransmission process of node is relatively easy, judges the destination address of data packet, and then copying data packet to internal CAN sends buffering
Area.
Fig. 6 is update boot segment, system update program segment and the system application section of a kind of embodiment of the present invention
Illustrative data structure.As shown in fig. 6, the first row of initial address Start address is to the third line (0x0000_0000-
0x0000_C000) address area is set as BOOT sections.The fourth line of initial address Start address is to the 16th row
The address area (0x0001_0000-0x00016_C000) is set as APP sections.The first row of initial address Start address
The address area (0x0000_0000-0x000_7FFF), which can be used as, updates boot segment StartUP, APP sections and BOOT for identification
The validity of the program of section storage.For example, reseting vector address 0x0000_0000 stores StartUP.
In some instances, the MAIN functions of BOOT can be placed on the addresses 0x0000_8000, by (0x0000_8000-
0x0000_8100) check information of address area, BOOT version numbers and password are placed on initial address part and the knot of this sector address
Tail address part.In some instances, the address area (0x0000_C000-0x0000_FFFF) can be used as reserved address not do
Processing.
In some instances, the interrupt vector table of APP can be remapped to address 0x0001_0000, by (0x0001_
0000-0x0001_0100) check information of address area, APP version numbers and password, the initial address part of this sector address and
End addresses part.
In some instances, after Program reset, BOOT sections of StartUP is executed, StartUP identifies BOOT sections of principal function
MAIN.For example, being identified by, redirect and execute BOOT, otherwise redirects and execute APP.
In some instances, can be with if waiting for 300ms not receive UDS link orders in BOOT, and APP sections are identified as having
Effect can redirect and execute APP, otherwise wait for upgrade command to upgrade APP always.
In some instances, it is invalid to be identified as when BOOT sections, then APP can generate upgrade tip message, prompts upgrading
BOOT。
Since the address area (0x0000_0000-0x0000_7FFF) is set as update boot segment, and wherein store interior
Holding can not be written in program operation, so passing through application programming (English：In Application Programming, contracting
It writes：IAP) mode can not rewrite forever, can only be modified after unpacking to electric system by ISP, JTAG modes.And
The address area (0x0000_8000-0x0000_BFFF) can be upgraded by APP and be rewritten, but BOOT oneself cannot change；
The address area (0x000C_0000-0x0015_FFFF), can be rewritten by BOOT, but APP oneself cannot change.This mutual exclusion
Design ensures that APP and BOOT are updated each other by UDS programmings, but cannot rewrite oneself so that certain among APP and BOOT
There are one be effective.
Above in conjunction with Fig. 1 to Fig. 6, firmware update according to the system in the embodiment of the present invention is described in detail, under
Firmware updating device according to the system in the embodiment of the present invention and battery management system will be described in detail in conjunction with Fig. 7 to Figure 10 in face.
Fig. 7 is a kind of schematic block diagram of the firmware updating device of the system of embodiment of the present invention.Such as Fig. 7 institutes
Show, the firmware updating device 700 of system may include：Recognition unit 710, system update program updating unit 720 and system are answered
With program updating unit 730.
Recognition unit 710 can be used for executing update boot segment, and the validity of identifying system update program segment, wherein
The content stored in update boot segment can not be written in program operation.
System update program updating unit 720 can be used for system update program segment and be judged as effectively, when receiving system
When application program update instructs, the system update program that program segment is updated by correspondence system updates correspondence system application program section
System application.
System application updating unit 730 can be used for system update program segment and be judged as in vain, executing original system
Application program simultaneously sends system update program upgrade tip message, when receiving system update program more new command, by more
The validity of new boot segment identifying system application program section, system application section are judged as effectively, passing through system application
Update system update program.
Firmware updating device 700 according to the system in the embodiment of the present invention can correspond to according to the system in the embodiment of the present invention
Firmware update in executive agent, and the aforesaid operations of each unit in the firmware updating device 700 of system and/
Or function is respectively in order to realize the corresponding flow of each method in Fig. 1, for sake of simplicity, details are not described herein.
It, can be by updating boot segment according to the firmware updating device of the system of above-described embodiment, identifying system updates journey
The validity of sequence section and system application section, at the same ensure to update in boot segment the content that stores can not in program operation quilt
It rewrites, realizes that system application and system update program can be updated other side each other by more new command, but not
Itself program can be rewritten.The update mode of this equity mutual exclusion, it is ensured that the firmware of system is particularly suitable for electric vehicle
Battery management system firmware update during, at least one party is available reliable in system application and system update program,
The program update mode for eliminating two-stage BOOT simultaneously, simplifies more new technological process.
In some instances, recognition unit 710 can be also used for：Pass through the check information of system update program segment, identification
The validity of system update program segment, wherein rising in system update program segment is arranged in the check information of system update program segment
The check information of the end addresses of beginning address and system update program segment, system update program segment includes system update program version
Number and system update program password.
Pass through the check information of system application section, the validity of identifying system application program section, wherein system application
The end addresses in the initial address and system application section of system application section, system is arranged in the check information of program segment
The check information of application program section includes the password of system application version number and system application.
In some instances, system update program updating unit 720 can be also used for：It is if not received more than the predetermined time
Application program update of uniting instructs, the validity of identifying system application program section；When system application section is effective, system is executed
Application program；When system application section is invalid, action is not executed until receiving system application more new command.
Fig. 8 is the schematic block diagram of the firmware updating device of the system of another embodiment of the present invention.Such as Fig. 8 institutes
Show, the firmware updating device 800 of the system may include：Recognition unit 810, system update program updating unit 820, system
Application program update unit 830 and communication unit 840.
Recognition unit 810 can be used for executing update boot segment, and identifying system updates program segment and system application section
Validity, wherein the content that stores can not be written in program operation in update boot segment.
If it is effective that system update program updating unit 820 can be used for system update program segment, when receiving system application
When program more new command, pass through the corresponding system of the corresponding system update program updating system application program section of system update program segment
System application program.
If it is invalid that system application updating unit 830 can be used for system update program segment, executive system utilities
And system update program upgrade tip message is sent, when receiving system update program more new command, pass through system application journey
Sequence updates system update program.
Communication unit 840 is used to receive sends response message after external system update instruction, and system update refers to
Order includes system update program more new command and/or system application more new command；System update broadcast is generated and sent to disappear
Breath, wherein system update broadcast message instruction is without response.
In some instances, communication unit 840 can be also used for battery master control system node, wherein in such situation
Under, communication unit 840 can be used for：
So that battery master control system node is received and send response message after external system update instruction, wherein is
More new command of uniting includes system update program more new command and/or system application more new command；
Battery master control system node is set to generate and send system update broadcast message, wherein system update broadcast message refers to
Show recipient without response, the recipient of system update broadcast message includes：Battery pack system node, high-voltage safety system section
Point and current sensor system node.
Fig. 9 is a kind of schematic block diagram of the battery management system of embodiment of the present invention.As shown in figure 9, the electricity
Pond manages system 900, can be adapted for electric vehicle, may include the firmware updating device 700 of above-mentioned system.
It, can be by updating boot segment according to the battery management system 900 of above-described embodiment, identifying system updates program segment
With the validity of system application section, while ensureing to update the content that stores in boot segment and can not be changed in program operation
It writes, realizes that system application and system update program can be updated other side each other by more new command, but cannot
Rewrite itself program.The update mode of this equity mutual exclusion, it is ensured that electric system is particularly suitable for the electricity of electric vehicle
Pond manages in the renewal process of system, and at least one party is available reliable in system application and system update program, saves simultaneously
The program update mode of two-stage BOOT, simplifies more new technological process.
Figure 10 is the schematic knot that a kind of computing device of the firmware updating device of the system of embodiment of the present invention is realized
Structure block diagram.As shown in Figure 10, in conjunction at least one of the firmware updating device of the firmware update and system of above-mentioned system
Dividing can be realized by computing device 1000, including processor 1003, memory 1004 and bus 1010.
In some instances, which can also include input equipment 1001, input port 1002, output end
Mouth 1005 and output equipment 1006.Wherein, input port 1002, processor 1003, memory 1004 and output port
1005 by being connected with each other, and input equipment 1001 and output equipment 1006 pass through input port 1002 and output port 1005 respectively
It connect with bus 1010, and then is connect with the other assemblies of computing device 1000.
The purpose of the present invention can also be realized by running a program or batch processing on any computing device.
The computing device can be well known fexible unit.Therefore, the purpose of the present invention can also include to realize only by providing
The program product of the program code of the method or device is realized.That is, such program product also constitutes this hair
It is bright, and the storage medium for being stored with such program product also constitutes the present invention.Obviously, the storage medium can be any
Well known storage medium or any storage medium that developed in the future.
Claims (11)
1. a kind of firmware update of system, which is characterized in that the method includes the following steps：
Execute update boot segment, and the validity of identifying system update program segment, wherein stored in the update boot segment interior
Holding can not be written in program operation；
The system update program segment is judged as effectively, when receiving system application more new command, described in correspondence
The system application of the system update program update correspondence system application program section of system update program segment；
The system update program segment be judged as in vain, execute original system application program and send system update program upgrading carry
Show message, when receiving system update program more new command, the system application is identified by the update boot segment
The validity of section, the system application section are judged as effectively, update the system update by the system application
Program.
2. the firmware update of system according to claim 1, which is characterized in that the method further includes the following steps：
By the identification information of system update program segment, the validity of the system update program segment is identified,
Wherein, the identification information of the system update program segment is arranged in the initial address of the system update program segment and described
The identification information of the end addresses of system update program segment, the system update program segment includes the verification of system update program segment
The password of information, system update program version number and system update program；
By the identification information of system application section, the validity of the system application section is identified,
Wherein, the identification information of the system application section is arranged in the initial address of the system application section and described
The identification information of the end addresses of system application section, the system application section includes the verification of system application section
Information, system application version number and system application password.
3. the firmware update of system according to claim 1 or claim 2, which is characterized in that the method further includes following step
Suddenly：
The system update program segment is judged as effectively, if not receiving system application more new command more than the predetermined time, knows
The validity of the not described system application section；
Wherein, when the system application section is judged as effective, the system application is executed；
When the system application section is judged as invalid, action is not executed until receiving the system application update
Instruction.
4. the firmware update of system according to claim 1, which is characterized in that the method further includes the following steps：
It receives and sends response message after external system update instruction, wherein the system update instruction includes described
System update program more new command and/or the system application more new command；
Generate and send system update broadcast message, wherein the system update broadcast message instruction is without response.
5. the firmware update of system according to claim 4, which is characterized in that the system update instruction of the outside
Recipient, the generation of the sender of the response message and system update broadcast message and sender are battery master control system
Node；
The recipient of system update broadcast message includes：Battery pack system node, high-voltage safety system node and electric current pass
Sensor system node.
6. a kind of firmware updating device of system, which is characterized in that including：
Recognition unit, for executing update boot segment, and the validity of identifying system update program segment, wherein the update is drawn
Leading the content stored in section can not be written in program operation；
System update program updating unit is judged as effectively for the system update program segment, when receiving system application journey
When sequence more new command, correspondence system application program section is updated by the system update program of the correspondence system update program segment
System application；
System application updating unit is judged as in vain, executing original system application journey for the system update program segment
Sequence simultaneously sends system update program upgrade tip message and passes through the update when receiving system update program more new command
Boot segment identifies that the validity of the system application section, the system application section are judged as effectively, passing through the system
System update program described in system application program update.
7. the firmware updating device of system according to claim 6, which is characterized in that the recognition unit is additionally operable to：
By the check information of system update program segment, the validity of the system update program segment is identified, wherein wherein, institute
Initial address and the system update journey in the system update program segment is arranged in the identification information for stating system update program segment
The check information of the end addresses of sequence section, the system update program segment includes system update program version number and system update journey
The password of sequence；
By the check information of system application section, the validity of the system application section is identified,
Wherein, the identification information of the system application section is arranged in the initial address of the system application section and described
The end addresses of system application section, the check information of the system application section include system application version number and
The password of system application.
8. the firmware updating device of the system described according to claim 6 or 7, which is characterized in that the system update program is more
New unit is additionally operable to：
The system update program segment is judged as effectively, if not receiving system application more new command more than the predetermined time, knows
The validity of the not described system application section；Wherein,
When the system application section is judged as effective, the system application is executed；
When the system application section is judged as invalid, action is not executed until receiving the system application update
Instruction.
9. the firmware updating device of system according to claim 6, which is characterized in that further include communication unit, be used for：
It receives and sends response message after external system update instruction, wherein the system update instruction includes described
System update program more new command and/or the system application more new command；
Generate and send system update broadcast message, wherein the system update broadcast message instruction is without response.
10. the firmware updating device of system according to claim 9, which is characterized in that the communication unit is used for battery
Master control system node, wherein the communication unit is used for：
So that battery master control system node is received and send response message after external system update instruction, wherein the system
More new command of uniting includes the system update program more new command and/or the system application more new command；
Battery master control system node is set to generate and send system update broadcast message, wherein the system update broadcast message refers to
Show recipient without response, the recipient of the system update broadcast message includes：Battery pack system node, high-voltage safety system
System node and current sensor system node.
11. a kind of battery management system is suitable for electric vehicle, which is characterized in that including any one of claim 6 to 10 institute
The firmware updating device for the system stated.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710192164.2A CN108664256A (en) | 2017-03-28 | 2017-03-28 | Firmware updating method and device of system and battery management system |
| PCT/CN2017/093299 WO2018176692A1 (en) | 2017-03-28 | 2017-07-18 | System firmware updating method, device and battery management system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710192164.2A CN108664256A (en) | 2017-03-28 | 2017-03-28 | Firmware updating method and device of system and battery management system |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN108664256A true CN108664256A (en) | 2018-10-16 |
Family
ID=63674054
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710192164.2A Pending CN108664256A (en) | 2017-03-28 | 2017-03-28 | Firmware updating method and device of system and battery management system |
Country Status (2)
| Country | Link |
|---|---|
| CN (1) | CN108664256A (en) |
| WO (1) | WO2018176692A1 (en) |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110618825A (en) * | 2019-08-02 | 2019-12-27 | 惠州市德赛西威汽车电子股份有限公司 | Self-updating method for Boot Loader of car machine |
| CN113064400A (en) * | 2021-03-15 | 2021-07-02 | 奇瑞新能源汽车股份有限公司 | Test refreshing method and device for vehicle controller |
| CN113127043A (en) * | 2021-03-19 | 2021-07-16 | 力高(山东)新能源技术有限公司 | Method for upgrading BootLoader on line by using single chip microcomputer APP |
Families Citing this family (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110688136B (en) * | 2019-09-25 | 2023-12-22 | 北京经纬恒润科技股份有限公司 | Application program updating method and device |
| CN111552493A (en) * | 2020-04-24 | 2020-08-18 | 苏州华芯微电子股份有限公司 | Software updating method for burglar alarm, burglar alarm and self-refreshing equipment |
| CN112925545A (en) * | 2021-03-01 | 2021-06-08 | 青岛海信移动通信技术股份有限公司 | Mobile terminal and application updating method thereof |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20130043453A (en) * | 2011-10-20 | 2013-04-30 | 현대모비스 주식회사 | Lin network multi-channel bootloader apparatus and loading method thereof |
| CN104572180A (en) * | 2014-12-19 | 2015-04-29 | 沈阳东软医疗系统有限公司 | Firmware updating method of embedded equipment and embedded system |
| CN104765632A (en) * | 2015-04-15 | 2015-07-08 | 南京汽车集团有限公司 | BootLoader management method |
| CN105573797A (en) * | 2015-12-18 | 2016-05-11 | 广州市中海达测绘仪器有限公司 | Reversible off-line upgrade method and device for embedded system |
| CN205899529U (en) * | 2016-06-30 | 2017-01-18 | 武汉英泰斯特电子技术有限公司 | Long -range renewal device of vehicle ECU |
Family Cites Families (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20110320794A1 (en) * | 2010-06-28 | 2011-12-29 | Chung-Jen Yang | Flash System And Method For Updating The Flash System |
| US8627141B2 (en) * | 2011-02-14 | 2014-01-07 | Dell Products L.P. | System and method for auto-failover and version matching of bootloader in an access controller |
| CN103995712B (en) * | 2014-04-16 | 2018-05-04 | 潍柴动力股份有限公司 | A kind of bootloader devices automatically updated and update method |
| CN105677388A (en) * | 2015-12-31 | 2016-06-15 | 清华大学苏州汽车研究院（吴江） | Firmware updating method for motor controller of electric vehicle |
| CN106303709B (en) * | 2016-08-01 | 2019-04-16 | 深圳市创维软件有限公司 | A kind of set-top box and its application program updating method, system |
-
2017
- 2017-03-28 CN CN201710192164.2A patent/CN108664256A/en active Pending
- 2017-07-18 WO PCT/CN2017/093299 patent/WO2018176692A1/en active Application Filing
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| KR20130043453A (en) * | 2011-10-20 | 2013-04-30 | 현대모비스 주식회사 | Lin network multi-channel bootloader apparatus and loading method thereof |
| CN104572180A (en) * | 2014-12-19 | 2015-04-29 | 沈阳东软医疗系统有限公司 | Firmware updating method of embedded equipment and embedded system |
| CN104765632A (en) * | 2015-04-15 | 2015-07-08 | 南京汽车集团有限公司 | BootLoader management method |
| CN105573797A (en) * | 2015-12-18 | 2016-05-11 | 广州市中海达测绘仪器有限公司 | Reversible off-line upgrade method and device for embedded system |
| CN205899529U (en) * | 2016-06-30 | 2017-01-18 | 武汉英泰斯特电子技术有限公司 | Long -range renewal device of vehicle ECU |
Cited By (3)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110618825A (en) * | 2019-08-02 | 2019-12-27 | 惠州市德赛西威汽车电子股份有限公司 | Self-updating method for Boot Loader of car machine |
| CN113064400A (en) * | 2021-03-15 | 2021-07-02 | 奇瑞新能源汽车股份有限公司 | Test refreshing method and device for vehicle controller |
| CN113127043A (en) * | 2021-03-19 | 2021-07-16 | 力高(山东)新能源技术有限公司 | Method for upgrading BootLoader on line by using single chip microcomputer APP |
Also Published As
| Publication number | Publication date |
|---|---|
| WO2018176692A1 (en) | 2018-10-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108664256A (en) | Firmware updating method and device of system and battery management system | |
| CN110347414A (en) | Firmware update, device, equipment and computer readable storage medium | |
| CN108509215B (en) | System software replacing method and device, terminal equipment and storage medium | |
| WO2010017775A1 (en) | Controller area network (can) bus based control method for refreshing codes of vehicle’s electronic controller | |
| EP3920020A1 (en) | Electronic control device and program update method | |
| CN111813428A (en) | Method and device for upgrading terminal firmware, electronic equipment and storage medium | |
| CN112612490A (en) | Vehicle upgrading method, vehicle and storage medium | |
| CN113377384A (en) | Program burning method and device, vehicle-mounted terminal and medium | |
| CN103010039A (en) | Boot loading method of battery management systems | |
| CN108121553B (en) | Method and device for updating application program | |
| WO2023241458A1 (en) | Software upgrade method and apparatus for vehicle-mounted controller, and device and storage medium | |
| WO2023198056A1 (en) | Firmware update method for embedded device, and embedded device | |
| WO2017190482A1 (en) | Data storage method for electronic control system of vehicle, and electronic control system | |
| CN116610340A (en) | Update method and device of vehicle software, vehicle and storage medium | |
| CN111917588A (en) | Edge device management method, device, edge gateway device and storage medium | |
| CN107515757A (en) | Software program upgrade method and system, terminal | |
| CN116501357A (en) | Online upgrade method of singlechip | |
| CN116541047A (en) | Firmware upgrading method, device, computer equipment and computer readable storage medium | |
| WO2022160816A1 (en) | Data processing method and related device | |
| CN113093694B (en) | Vehicle-mounted electronic control unit data flashing method and system based on UDS | |
| CN112925546B (en) | Multistage verification method and system for preventing vehicle-mounted ECU from refreshing errors | |
| CN114064077A (en) | Automobile ECU cloud software upgrading method based on TC397 microcontroller address mapping | |
| Ji et al. | Implementation and research of bootloader for automobile ECU remote incremental update | |
| CN114546455A (en) | MCU software upgrading method and device for double partitions | |
| CN114281374A (en) | Remote flash method and system for vehicle electronic control unit and storage medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20181016 |
|
| RJ01 | Rejection of invention patent application after publication |