CN110995724A - Remote upgrading method for whole vehicle controller of new energy bus - Google Patents
Remote upgrading method for whole vehicle controller of new energy bus Download PDFInfo
- Publication number
- CN110995724A CN110995724A CN201911267178.1A CN201911267178A CN110995724A CN 110995724 A CN110995724 A CN 110995724A CN 201911267178 A CN201911267178 A CN 201911267178A CN 110995724 A CN110995724 A CN 110995724A
- Authority
- CN
- China
- Prior art keywords
- vehicle
- remote
- vehicle controller
- upgrade
- control unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/02—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L67/025—Protocols based on web technology, e.g. hypertext transfer protocol [HTTP] for remote control or remote monitoring of applications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F11/00—Error detection; Error correction; Monitoring
- G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
- G06F11/08—Error detection or correction by redundancy in data representation, e.g. by using checking codes
- G06F11/10—Adding special bits or symbols to the coded information, e.g. parity check, casting out 9's or 11's
- G06F11/1004—Adding special bits or symbols to the coded information, e.g. parity check, casting out 9's or 11's to protect a block of data words, e.g. CRC or checksum
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/70—Software maintenance or management
- G06F8/71—Version control; Configuration management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/12—Applying verification of the received information
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/06—Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
Abstract
A remote upgrading method for a vehicle controller of a new energy bus comprises the following steps: the vehicle-mounted terminal receives an upgrade package sent by the background server and periodically sends a remote upgrade request instruction to the vehicle control unit; after the vehicle controller judges that the vehicle state meets the remote upgrading condition, the vehicle controller makes a remote upgrading response; the vehicle control unit starts a remote upgrading mode, remote upgrading safety verification is carried out, and remote upgrading operation is started after verification is confirmed; and the vehicle control unit downloads the upgrade package to a transition area, then updates codes on an application program interrupt vector address and a reset address on the premise that a CPU is not undervoltage, copies the upgrade package codes to a target address, and finally restarts the vehicle control unit to execute a new version of the vehicle program. The invention realizes efficient, safe and stable remote upgrade and has the advantages of simple operation, high accuracy, high success rate, high safety performance and the like.
Description
Technical Field
The invention relates to the technical field of new energy vehicles, in particular to a remote upgrading method for a vehicle controller of a new energy bus.
Background
A Vehicle Control Unit (VCU) of a new energy bus is a core component of a vehicle control system and is a core control device for controlling starting, running, advancing and retreating, speed and stopping of a motor and other electronic devices. At present, the new energy bus industry belongs to a customer customization mode, basically, the programs of the whole vehicle controllers of each batch of orders are different, after the vehicles are delivered to customers, the customers often put forward various special requirements, and a host factory is required to optimize a whole vehicle control strategy by updating the programs of the whole vehicle controllers. In addition, the vehicle often encounters a situation that the whole vehicle controller has a bug and needs to update the program, so that functions are often improved or newly added by a method of continuously upgrading software in the use process of the whole vehicle controller.
The traditional vehicle controller upgrading method is online upgrading, generally, after-sales personnel are required to carry a notebook computer and a writing tool to a user site to update programs one by one, or the user is required to drive a vehicle to a service station to operate, the online upgrading mode is complex in operation and low in efficiency, the vehicle controller cannot be upgraded timely, and the vehicle controller has certain hysteresis.
With the continuous development of the car networking technology, the upgrading mode of the vehicle controller has gradually evolved into a remote upgrading mode, but most of the existing remote upgrading modes have the following problems: firstly, because the upgrading program is unreasonable in design, remote upgrading cannot be carried out in a safe area in an isolated mode generally, and if upgrading fails due to accidents, the phenomenon that the whole vehicle controller cannot be used normally is caused; secondly, the upgrade package is easily attacked and tampered maliciously in the sending process, so that a remote upgrade mode has great potential safety hazard.
Therefore, a remote upgrading method for the whole vehicle controller of the new energy bus is provided.
Disclosure of Invention
The invention provides a remote upgrading method for a whole vehicle controller of a new energy bus, and mainly aims to solve the problems.
The invention adopts the following technical scheme:
a remote upgrading method for a vehicle controller of a new energy bus comprises the following steps:
s1, the vehicle-mounted terminal receives the upgrade package sent by the background server and periodically sends a remote upgrade request instruction to the vehicle control unit;
s2, the vehicle controller judges whether the vehicle state meets the remote upgrade condition, if yes, the vehicle controller makes a remote upgrade response, and the vehicle controller executes the step S3; if not, no response is made, and the current whole vehicle program is continuously executed;
s3, starting a remote upgrading mode of the vehicle controller, carrying out remote upgrading safety verification, and executing the step S4 if the verification is passed; if the verification is not passed, restarting and executing the step S2;
s4, the vehicle control unit downloads the upgrade package to a transition area, then updates codes on an application program interrupt vector address and a reset address on the premise that the CPU is not undervoltage, copies the upgrade package codes to a target address, and finally restarts the vehicle control unit to execute a new version of the vehicle program.
Further, the method also comprises the following steps: s5, the vehicle-mounted terminal judges whether the remote upgrade of the vehicle controller is successful, if the remote upgrade is failed, the vehicle-mounted terminal continues to send a remote upgrade request instruction after 1 minute to start the next remote upgrade; and if the remote upgrade fails for 3 times or the remote upgrade succeeds, deleting the upgrade package.
Further, in step S1, the vehicle-mounted terminal needs to perform integrity check on the received upgrade package, and only when the complete upgrade package is received, the vehicle-mounted terminal sends a remote upgrade request instruction.
Further, in step S1, the remote upgrade condition includes: (1) the current vehicle speed is 0; (2) the vehicle is in a low high pressure state; (3) the vehicle is not in a charging state.
Further, in step S2, if the vehicle control unit does not respond to the remote upgrade request instruction of the vehicle-mounted terminal, the vehicle-mounted terminal continuously transmits the remote upgrade request instruction at a transmission cycle of 20S until the vehicle control unit responds.
Further, in step S3, the remote upgrade security verification includes verification of the system login password and the VCU dynamic feature code.
Further, in step S4, the upgrade package is transmitted in such a manner that the vehicle-mounted terminal continuously transmits 40 frames of messages each time; and the vehicle control unit puts the received 40 frames of messages into a buffer area, checks the messages, feeds back a check result to the vehicle-mounted terminal, and writes the 40 frames of messages into a transition area if the check is correct.
Furthermore, if the vehicle control unit judges that the received 40-frame message is in error check, the vehicle control unit immediately requests the vehicle-mounted terminal to resend the message; if the vehicle-mounted terminal waits for 3 seconds without receiving the feedback information after sending the 40 frames of messages, the 40 frames of messages are sent again; and if the vehicle controller is still wrong after repeatedly checking for 3 times or the vehicle-mounted terminal does not receive the feedback information after repeatedly sending for 3 times, exiting the remote upgrading mode, and returning to execute the current vehicle program by the vehicle controller.
Further, in step S4, if the CPU is undervoltage, the vehicle controller exits the remote upgrade mode and returns to execute the current vehicle program.
Further, in step S4, if the vehicle controller detects that the driver is keyed, the vehicle controller immediately exits the remote upgrade mode and returns to execute the current vehicle program.
Compared with the prior art, the invention has the beneficial effects that:
1. the invention provides a remote upgrading method for a whole vehicle controller of a new energy bus, which is characterized in that in the upgrading process, an upgrading packet is downloaded and stored in a transition area, and codes are copied to a target address from the transition area after the upgrading packet is transmitted, so that the problem that the whole vehicle controller has no program due to the fact that remote upgrading fails is avoided. And before copying the upgrade package code, the CPU voltage is judged, and only on the premise that the CPU is not undervoltage, the application program interrupt vector address is erased and the reset address is written, so that the problem of interrupt vector loss caused by sudden power failure of the vehicle controller in the program flashing process is avoided. Therefore, the remote upgrading method and the remote upgrading device solve the problem that the remote upgrading program design of the conventional vehicle controller is unreasonable, and can realize remote upgrading on the basis of ensuring the normal use of the vehicle controller.
2. The invention needs to judge the vehicle state before remote upgrade and carry out related safety verification to ensure the stability and safety of the remote upgrade process.
3. When the vehicle control unit is upgraded remotely, a transmission mode that the vehicle-mounted terminal continuously sends 40 frames of messages and the vehicle control unit feeds back a transmission result once is adopted, and the transmission mode can reduce the bus load rate and improve the program transmission speed.
4. After receiving the upgrade package, the vehicle-mounted terminal and the vehicle control unit can verify the upgrade package, so that the accuracy and integrity of program transmission are ensured, and the success rate of remote upgrade is improved.
5. When the vehicle controller is upgraded remotely, if the remote upgrade fails or a driver needs to start the vehicle immediately and the like, the vehicle controller can return to execute the current vehicle program immediately, and the vehicle operation cannot be influenced.
6. If the remote upgrade fails for 3 times, the vehicle-mounted terminal deletes the upgrade package in the memory, so that the situation that the vehicle-mounted terminal continuously sends a remote upgrade request instruction to the vehicle controller to cause FLASH damage of the vehicle controller is avoided.
In conclusion, the invention provides the remote upgrading method for the whole vehicle controller of the new energy bus, which overcomes the problems of unreasonable program design, poor safety performance and the like in the conventional remote upgrading method, can realize efficient, safe and stable remote upgrading, and has the advantages of simplicity in operation, high accuracy, high success rate, high safety performance and the like.
Drawings
Fig. 1 is a control flow chart of remote upgrade of a vehicle-mounted terminal to a whole vehicle controller in the invention.
Fig. 2 is a schematic flow diagram of remote upgrading of the vehicle control unit according to the present invention.
Detailed Description
The following describes embodiments of the present invention with reference to the drawings. Numerous details are set forth below in order to provide a thorough understanding of the present invention, but it will be apparent to those skilled in the art that the present invention may be practiced without these details.
A remote upgrading method for a vehicle controller of a new energy bus comprises the following steps:
and S1, the vehicle-mounted terminal receives the upgrade package sent by the background server and periodically sends a remote upgrade request instruction to the vehicle control unit. And the host factory develops a new version of the whole vehicle controller program according to the customization requirements of the client or the application development requirements of the whole vehicle controller, and sends the upgrade package of the new version of the whole vehicle controller program to the vehicle-mounted terminal of the specified client through the background server. The mode can meet the customized requirements of customers, accords with the operation management mode of the new energy passenger car, and can fully ensure the safety of remote upgrading. After downloading the upgrade package, the vehicle-mounted terminal periodically sends a remote upgrade request instruction to the vehicle controller to remind the vehicle controller to upgrade.
S2, the vehicle controller judges whether the vehicle state meets the remote upgrade condition, if yes, the vehicle controller makes a remote upgrade response, and the vehicle controller executes the step S3; and if not, no response is made, and the current whole vehicle program is continuously executed. By judging the vehicle state, the stability and the safety of the remote upgrading process can be fully ensured, and the efficiency and the success rate of remote upgrading are improved.
S3, starting a remote upgrading mode of the vehicle controller, carrying out remote upgrading safety verification, and executing the step S4 if the verification is passed; if the verification is not passed, the system is restarted and step S2 is executed. The remote upgrading security verification can effectively prevent hacker intrusion, thereby improving the security of the vehicle.
S4, the vehicle control unit downloads the upgrade package to a transition area, then updates codes on an application program interrupt vector address and a reset address on the premise that the CPU is not undervoltage, copies the upgrade package codes to a target address, and finally restarts the vehicle control unit to execute a new version of the vehicle program. When the whole vehicle controller is upgraded remotely, the upgrade package is downloaded and stored in the transition area, the codes are copied to the target address from the transition area after the upgrade package is transmitted, and therefore the problem that the whole vehicle controller has no program due to failure of remote upgrade is avoided. And before copying the upgrade package code, the CPU voltage is judged, and only on the premise that the CPU is not undervoltage, the application program interrupt vector address is erased and the reset address is written, so that the problem of reset vector loss caused by sudden power failure of the whole vehicle controller in the program flashing process can be avoided.
S5, the vehicle-mounted terminal judges whether the remote upgrade of the vehicle controller is successful, if the remote upgrade is failed, the vehicle-mounted terminal continues to send a remote upgrade request instruction after 1 minute to start the next remote upgrade; and if the remote upgrading fails for 3 times or the remote upgrading succeeds, deleting the upgrading packet, so that the situation that the vehicle-mounted terminal continuously carries out remote upgrading on the whole vehicle controller to cause FLASH damage of the whole vehicle controller is avoided.
Specifically, in step S1, the vehicle-mounted terminal needs to perform integrity check on the received upgrade package, and only when the complete upgrade package is received, a remote upgrade request instruction is sent, so as to improve the accuracy and success rate of remote upgrade.
Specifically, in step S1, the remote upgrade condition includes: (1) the current vehicle speed is 0; (2) the vehicle is in a low high pressure state; (3) the vehicle is not in a charging state. The vehicle can be upgraded only when the vehicle is in a complete parking state, so that the influence on the normal operation of the vehicle is avoided, and the stability and smoothness of a system in the upgrading process can be ensured.
Specifically, in step S2, if the vehicle control unit does not respond to the remote upgrade request command from the vehicle-mounted terminal, the vehicle-mounted terminal continuously transmits the remote upgrade request command at a transmission cycle of 20S until the vehicle control unit responds, so that the vehicle control unit can be updated and upgraded timely, and the problem of hysteresis in the conventional online upgrade method can be overcome.
Specifically, in step S3, the remote upgrade security verification includes verification of the system login password and the VCU dynamic feature code, so that hacker intrusion can be prevented, and malicious attack and tampering on the upgrade package can be avoided, thereby improving the security of the vehicle.
Specifically, in step S4, the upgrade package is transmitted in such a manner that the vehicle-mounted terminal continuously transmits 40 frames of messages each time, the vehicle control unit puts the received 40 frames of messages into the buffer area, checks the messages, feeds the check result back to the vehicle-mounted terminal, and writes the 40 frames of messages into the transition area if the check is correct. The transmission mode can reduce the bus load rate and improve the program transmission speed. In addition, the vehicle control unit checks and filters the 40 frames of messages, and the 40 frames of messages are written into the transition area only after the messages are checked correctly, so that the messages used for remote upgrading can be ensured to be received only, the accuracy of program transmission is ensured, and the success rate of remote upgrading is improved.
More specifically, if the vehicle control unit judges that the received 40-frame message is in error check, the vehicle control unit immediately requests the vehicle-mounted terminal to resend the message; if the vehicle-mounted terminal waits for 3 seconds without receiving the feedback information after sending the 40 frames of messages, the 40 frames of messages are sent again; and if the vehicle controller is still wrong after repeatedly checking for 3 times or the vehicle-mounted terminal does not receive the feedback information after repeatedly sending for 3 times, exiting the remote upgrading mode, and returning to execute the current vehicle program by the vehicle controller. Therefore, the transmission rate of the program can be fully ensured, and the integrity and the accuracy of program transmission are ensured.
Specifically, in step S4, if the CPU is under-voltage, the vehicle controller exits the remote upgrade mode and returns to execute the current vehicle program, so that a situation of power failure of the vehicle when the reset vector is written can be avoided, because the program of the vehicle controller cannot be started due to failure of the reset vector.
Specifically, in step S4, if the vehicle controller detects that the driver is keyed, the vehicle controller immediately exits the remote upgrade mode and returns to execute the current vehicle program. The driver turns a key to indicate that the vehicle needs to be started immediately, and at the moment, if the vehicle controller is continuously upgraded, the normal use of the whole vehicle controller is influenced, the driving of the driver is delayed, so that the driver needs to exit the upgrading mode immediately, and the vehicle operation is prevented from being influenced.
Referring to fig. 1 and 2, in order to more clearly illustrate the remote upgrading method of the vehicle control unit, the following describes the work flow in detail:
referring to fig. 1, firstly, a control flow of the vehicle-mounted terminal for remotely upgrading the whole vehicle controller is described:
step 101: and starting.
Step 102: and a technician in the host factory uploads the upgrade package of the vehicle control unit through the background server and issues the upgrade package to the corresponding vehicle-mounted terminal.
Step 103: and the vehicle-mounted terminal downloads the upgrade package and verifies the integrity of the upgrade package.
Step 104: and if the vehicle-mounted terminal verifies the complete upgrade package, executing the step 105, otherwise, executing the step 109.
Step 105: and the vehicle-mounted terminal sends a remote upgrading request instruction to the vehicle control unit through the CAN bus.
Step 106: and the vehicle-mounted terminal detects whether a response instruction of starting the remote upgrade of the vehicle control unit is received in real time, if so, step 107 is executed, otherwise, the vehicle-mounted terminal periodically sends a remote upgrade request instruction at a time interval of 20 s.
Step 107: the vehicle control unit starts the remote upgrade mode, and fig. 2 details the upgrade process.
Step 108: the vehicle-mounted terminal judges whether the remote upgrading of the vehicle controller is successful, if the remote upgrading is successful, step 109 is executed, if the remote upgrading is failed, the vehicle-mounted terminal continues to execute step 105 after 1 minute interval to start the next remote upgrading, and if the remote upgrading is failed for 3 times, the vehicle-mounted terminal deletes the upgrading packet so as to avoid that the vehicle-mounted terminal continuously sends a remote upgrading request instruction to the vehicle controller, thereby preventing FLASH damage of the vehicle controller.
Step 109: and (6) ending.
Referring to fig. 2, a remote upgrade process inside the vehicle controller is described as follows:
step 201: and restarting the vehicle control unit (powering on or resetting software).
Step 202: and setting a reset vector address to enable the whole vehicle controller program to enter a main function of Bootloader.
Step 203: and judging the state of a code copying Flag bit (Copy _ Flag), if the Copy _ Flag is equal to 1, indicating that a complete upgrade package exists in the transition area, executing the step 204 at this moment, and otherwise, executing the step 205.
Step 204: and erasing the code of the target address, copying the upgrade package code of the transition area to the target address, and after the code copying is finished, setting a code copying zone bit (Copy _ Flag) to be 0 and setting a Bootloader zone bit (Boot _ Flag) to be 1.
Step 205: and judging the state of a Bootloader Flag bit (Boot _ Flag), executing the step 206 if the Boot _ Flag is equal to 1, and executing the step 209 if the Boot _ Flag is not equal to 1.
Step 206: and jumping to the initial address of the current whole vehicle program from the main function of the Bootloader to execute the current whole vehicle program.
Step 207: when the vehicle control unit executes the current vehicle program, if a remote upgrade request instruction sent by the vehicle-mounted terminal is received and the vehicle is in a parking state (the vehicle speed is 0, the vehicle is at a low voltage and is not charged), executing step 208, otherwise, returning to continue executing step 206.
Step 208: and resetting a Bootloader Flag bit (Boot _ Flag), resetting the software of the program, and jumping to a Bootloader program initial address from the current whole vehicle program so as to execute the step 201.
Step 209: and the vehicle control unit judges whether a system login password sent by the vehicle-mounted terminal is received, if so, the step 210 is executed, otherwise, the step 209 is continuously executed.
Step 210: and the vehicle control unit judges whether the system login password is correct or not, if so, the step 211 is executed, otherwise, the step 212 is executed.
Step 211: it is determined whether the VCU dynamic feature code is correct, if so, step 213 is performed, otherwise, step 212 is performed.
Step 212: the vehicle control unit performs the operation of the step under the following three conditions: (1) the system login password is wrong; (2) VCU dynamic signature code errors; (3) the CPU is under-voltage. When any of the situations occurs, the remote upgrade of the vehicle controller fails, at this time, the Bootloader Flag bit (Boot _ Flag) needs to be set to 1, and then the vehicle controller restart operation in step 201 is executed, so that the vehicle controller backs up to execute the current vehicle program.
Step 213: and erasing the FLASH in the transition area so as to store the upgrade package sent by the vehicle-mounted terminal into the FLASH address in the transition area.
Step 214: and the vehicle control unit stores the 40 frames of messages received from the vehicle-mounted terminal into a buffer area.
Step 215: after the vehicle control unit receives the 40 frames of messages sent by the vehicle-mounted terminal, the 40 frames of messages are verified, if the verification is correct, the step 217 is executed, otherwise, the step 216 is executed.
Step 216: and after the vehicle control unit judges that the received 40-frame message is wrong, the vehicle control unit immediately requests the vehicle-mounted terminal to resend the 40-frame message, if the vehicle control unit judges that the message is wrong after resending for 3 times, the vehicle control unit needs to set a Bootloader Flag bit (Boot _ Flag) to 1, and then the vehicle control unit returns to execute the current vehicle control program.
Step 217: and the vehicle control unit writes the received 40-frame message into a transition area FLASH.
Step 218: and the vehicle controller judges whether the transmission of the vehicle program is finished, if so, step 219 is executed, otherwise, step 214 is executed.
Step 219: the finished vehicle controller sets a code copying Flag bit (Copy _ Flag) to 1 to indicate that a complete upgrade package is received on the FLASH in the transition area.
Step 220: and judging whether the CPU of the whole vehicle controller is under-voltage or not. If the CPU is undervoltage, step 212 is performed, otherwise step 221 is performed. The purpose of this step is to avoid a situation of vehicle power failure when a reset vector is written, because failure of the reset vector can cause the whole vehicle controller program to be unable to start.
Step 221: the application interrupt vector address is erased and a reset address is written.
Step 222: and erasing the application program target address FLASH so as to copy the upgrade package code of the transition area to the target address FLASH.
Step 223: and executing the whole vehicle program of the new version.
The above description is only an embodiment of the present invention, but the design concept of the present invention is not limited thereto, and any insubstantial modifications made by using the design concept should fall within the scope of infringing the present invention.
Claims (10)
1. A remote upgrading method for a vehicle controller of a new energy bus is characterized by comprising the following steps: the method comprises the following steps:
s1, the vehicle-mounted terminal receives the upgrade package sent by the background server and periodically sends a remote upgrade request instruction to the vehicle control unit;
s2, the vehicle controller judges whether the vehicle state meets the remote upgrade condition, if yes, the vehicle controller makes a remote upgrade response, and the vehicle controller executes the step S3; if not, no response is made, and the current whole vehicle program is continuously executed;
s3, starting a remote upgrading mode of the vehicle controller, carrying out remote upgrading safety verification, and executing the step S4 if the verification is passed; if the verification is not passed, restarting and executing the step S2;
s4, the vehicle control unit downloads the upgrade package to a transition area, then updates codes on an application program interrupt vector address and a reset address on the premise that the CPU is not undervoltage, copies the upgrade package codes to a target address, and finally restarts the vehicle control unit to execute a new version of the vehicle program.
2. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: also comprises the following steps: s5, the vehicle-mounted terminal judges whether the remote upgrade of the vehicle controller is successful, if the remote upgrade is failed, the vehicle-mounted terminal continues to send a remote upgrade request instruction after 1 minute to start the next remote upgrade; and if the remote upgrade fails for 3 times or the remote upgrade succeeds, deleting the upgrade package.
3. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: in step S1, the vehicle-mounted terminal needs to perform integrity check on the received upgrade package, and only when the complete upgrade package is received, a remote upgrade request instruction is issued.
4. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: in step S2, the remote upgrade condition includes: (1) the current vehicle speed is 0; (2) the vehicle is in a low high pressure state; (3) the vehicle is not in a charging state.
5. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: in step S2, if the vehicle control unit does not respond to the remote upgrade request command of the vehicle-mounted terminal, the vehicle-mounted terminal continuously transmits the remote upgrade request command at a transmission cycle of 20S until the vehicle control unit responds.
6. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: in step S3, the remote upgrade security verification includes verification of the system login password and the VCU dynamic feature code.
7. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: in step S4, the upgrade package is transmitted in such a manner that the vehicle-mounted terminal continuously transmits 40 frames of messages each time; and the vehicle control unit puts the received 40 frames of messages into a buffer area, checks the messages, feeds back a check result to the vehicle-mounted terminal, and writes the 40 frames of messages into a transition area if the check is correct.
8. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 7, characterized in that: if the vehicle control unit judges that the received 40-frame message is checked wrongly, the vehicle control unit immediately requests the vehicle-mounted terminal to resend the message; if the vehicle-mounted terminal waits for 3 seconds without receiving the feedback information after sending the 40 frames of messages, the 40 frames of messages are sent again; and if the vehicle controller is still wrong after repeatedly checking for 3 times or the vehicle-mounted terminal does not receive the feedback information after repeatedly sending for 3 times, exiting the remote upgrading mode, and returning to execute the current vehicle program by the vehicle controller.
9. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: in step S4, if the CPU is undervoltage, the vehicle controller exits the remote upgrade mode and returns to execute the current vehicle program.
10. The remote upgrading method of the whole vehicle controller of the new energy bus as claimed in claim 1, characterized in that: in step S4, if the vehicle controller detects that the driver is keyed, the vehicle controller immediately exits the remote upgrade mode and returns to execute the current vehicle program.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911267178.1A CN110995724A (en) | 2019-12-11 | 2019-12-11 | Remote upgrading method for whole vehicle controller of new energy bus |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201911267178.1A CN110995724A (en) | 2019-12-11 | 2019-12-11 | Remote upgrading method for whole vehicle controller of new energy bus |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN110995724A true CN110995724A (en) | 2020-04-10 |
Family
ID=70092471
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201911267178.1A Pending CN110995724A (en) | 2019-12-11 | 2019-12-11 | Remote upgrading method for whole vehicle controller of new energy bus |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN110995724A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113472884A (en) * | 2021-06-30 | 2021-10-01 | 潍柴动力股份有限公司 | OTA (over the air) upgrading method and device |
| CN113630437A (en) * | 2021-06-25 | 2021-11-09 | 际络科技(上海)有限公司 | Vehicle control unit upgrading method and device and vehicle |
| CN115857996A (en) * | 2023-03-02 | 2023-03-28 | 中国重汽集团济南动力有限公司 | System and method for remote program flashing, calibration and diagnosis for vehicle |
| CN116449810A (en) * | 2023-06-20 | 2023-07-18 | 一汽解放汽车有限公司 | Fault detection method and device, electronic equipment and storage medium |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106569847A (en) * | 2016-10-14 | 2017-04-19 | 数源科技股份有限公司 | Method for realizing IAP remote upgrade through vehicle-mounted system based on mobile network |
| CN108279919A (en) * | 2018-01-22 | 2018-07-13 | 成都雅骏新能源汽车科技股份有限公司 | A kind of New-energy electric vehicle remotely updating program method |
| CN108334356A (en) * | 2017-09-21 | 2018-07-27 | 安徽江淮汽车集团股份有限公司 | A kind of remotely updating program method and system |
| US20190187976A1 (en) * | 2017-12-20 | 2019-06-20 | Hyundai Motor Company | Method for updating software for vehicle and the vehicle using of the same |
| CN110489143A (en) * | 2019-07-18 | 2019-11-22 | 南京依维柯汽车有限公司 | FOTA firmware remote update system and its method on new-energy automobile |
-
2019
- 2019-12-11 CN CN201911267178.1A patent/CN110995724A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106569847A (en) * | 2016-10-14 | 2017-04-19 | 数源科技股份有限公司 | Method for realizing IAP remote upgrade through vehicle-mounted system based on mobile network |
| CN108334356A (en) * | 2017-09-21 | 2018-07-27 | 安徽江淮汽车集团股份有限公司 | A kind of remotely updating program method and system |
| US20190187976A1 (en) * | 2017-12-20 | 2019-06-20 | Hyundai Motor Company | Method for updating software for vehicle and the vehicle using of the same |
| CN108279919A (en) * | 2018-01-22 | 2018-07-13 | 成都雅骏新能源汽车科技股份有限公司 | A kind of New-energy electric vehicle remotely updating program method |
| CN110489143A (en) * | 2019-07-18 | 2019-11-22 | 南京依维柯汽车有限公司 | FOTA firmware remote update system and its method on new-energy automobile |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113630437A (en) * | 2021-06-25 | 2021-11-09 | 际络科技(上海)有限公司 | Vehicle control unit upgrading method and device and vehicle |
| CN113472884A (en) * | 2021-06-30 | 2021-10-01 | 潍柴动力股份有限公司 | OTA (over the air) upgrading method and device |
| CN115857996A (en) * | 2023-03-02 | 2023-03-28 | 中国重汽集团济南动力有限公司 | System and method for remote program flashing, calibration and diagnosis for vehicle |
| CN116449810A (en) * | 2023-06-20 | 2023-07-18 | 一汽解放汽车有限公司 | Fault detection method and device, electronic equipment and storage medium |
| CN116449810B (en) * | 2023-06-20 | 2023-08-29 | 一汽解放汽车有限公司 | Fault detection method and device, electronic equipment and storage medium |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN110995724A (en) | Remote upgrading method for whole vehicle controller of new energy bus | |
| CN106569847B (en) | Method for vehicle-mounted system to realize IAP remote upgrade based on mobile network | |
| CN108279919B (en) | Remote program upgrading method for new energy electric vehicle | |
| US8655541B2 (en) | Vehicle upgrade system and method thereof | |
| CN104102518B (en) | double-CPU system and program upgrading method thereof | |
| CN111399884A (en) | Vehicle component upgrading method and device and electronic equipment | |
| CN109189445B (en) | Method for upgrading program of equipment of Internet of things | |
| CN106227572A (en) | A kind of frequency converter control system programme upgrade method | |
| CN104899065A (en) | Method and system for batch online recovery and software online upgrading | |
| CN103761122A (en) | Chip firmware updating method and system | |
| CN110442363B (en) | Vehicle ECU upgrading control method | |
| CN103677946A (en) | Method and system for updating elevator device control programs | |
| CN103761112A (en) | Vehicle-mounted multimedia device and control method thereof | |
| CN113497819A (en) | Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment | |
| CN112181452A (en) | Method for updating software of motor controller of electric vehicle | |
| CN106406962A (en) | Wind power generation controller failed remote upgrade recovery method based on ARM | |
| CN113626056A (en) | Vehicle remote upgrading method and device, electronic equipment, vehicle-mounted terminal and storage medium | |
| CN112612498A (en) | Embedded equipment upgrading method and embedded equipment | |
| CN111090443A (en) | Method, equipment and storage medium for guaranteeing safe upgrade of linux system | |
| CN115982710A (en) | OTA (over the air) security upgrading method based on Ethernet | |
| CN114546455A (en) | MCU software upgrading method and device for double partitions | |
| CN108415721B (en) | Node equipment program upgrading method and related device | |
| CN112148328A (en) | Program rollback method and system during remote upgrading of target element | |
| CN113238927A (en) | Vehicle function safety testing method and device, electronic equipment and medium | |
| CN111061255A (en) | Control method and device of electric vehicle |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20200410 |
|
| RJ01 | Rejection of invention patent application after publication |