CN113254030B - Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency - Google Patents

Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency Download PDF

Info

Publication number
CN113254030B
CN113254030B CN202110398364.XA CN202110398364A CN113254030B CN 113254030 B CN113254030 B CN 113254030B CN 202110398364 A CN202110398364 A CN 202110398364A CN 113254030 B CN113254030 B CN 113254030B
Authority
CN
China
Prior art keywords
emergency
refreshing
vehicle
upper computer
refresh
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
CN202110398364.XA
Other languages
Chinese (zh)
Other versions
CN113254030A (en
Inventor
林铭源
彭琴
蒋巍泉
张腾飞
黄志辉
刘佳熙
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
United Automotive Electronic Systems Co Ltd
Original Assignee
United Automotive Electronic Systems Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by United Automotive Electronic Systems Co Ltd filed Critical United Automotive Electronic Systems Co Ltd
Priority to CN202110398364.XA priority Critical patent/CN113254030B/en
Publication of CN113254030A publication Critical patent/CN113254030A/en
Application granted granted Critical
Publication of CN113254030B publication Critical patent/CN113254030B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • G06F8/61Installation
    • G06F8/63Image based installation; Cloning; Build to order
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00Arrangements for software engineering
    • G06F8/60Software deployment
    • G06F8/65Updates
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/4401Bootstrapping
    • G06F9/4403Processor initialisation
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00Arrangements for program control, e.g. control units
    • G06F9/06Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44Arrangements for executing specific programs
    • G06F9/4401Bootstrapping
    • G06F9/4416Network booting; Remote initial program loading [RIPL]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/01Protocols
    • H04L67/12Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00Network arrangements or protocols for supporting network services or applications
    • H04L67/34Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Stored Programmes (AREA)

Abstract

The application discloses a vehicle-mounted microprocessor software emergency refreshing method, device, storage medium and system, and relates to the technical field of vehicles. Loading boot-loader programs to complete software and hardware initialization operation of the vehicle-mounted microprocessor; when the emergency refreshing condition is met, establishing network connection with an upper computer; an emergency refreshing system is stored in the upper computer; downloading an emergency refreshing system from an upper computer end by running a boot-loader program; starting an emergency refreshing system, and refreshing vehicle-mounted microprocessor software by running the emergency refreshing system; the problem that emergency refreshing fails due to the problem of the Recovery partition when emergency refreshing is realized in the Recovery partition mode at present is solved; the emergency refreshing method has the advantages of improving the emergency refreshing reliability and reducing the replacement cost caused by the refreshing failure.

Description

Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency
Technical Field
The application relates to the technical field of vehicles, in particular to a vehicle-mounted microprocessor software emergency refreshing method, device, storage medium and system.
Background
With the development of technology, the development of intelligent internet-connected automobiles is rapid, and the on-board Ethernet is gradually applied to an automobile bus to meet the high-speed communication requirement between microprocessors in the automobile. Based on the technology of the on-board ethernet, most of the mainstream automobiles in the market support to complete the update of the microprocessor software inside the automobile through the Over-the-Air (OTA) function.
In the actual use process, because of some software problems, when the microprocessor end software for executing the OTA function is damaged or cannot be started, the system software cannot be repaired through the OTA function, so that the system software of the microprocessor end needs to be repaired by emergency refreshing.
At present, the method for refreshing the emergency mainly comprises the steps of brushing a Recovery partition in a microprocessor in advance, and starting a standby system of the Recovery partition to finish refreshing and repairing the original system software when the system software at the microprocessor side has a problem. However, when adopting the Recovery partition mode, the standby system integrates a complex brushing function, and if the standby system has a software problem, the repair of the system software still cannot be completed.
Disclosure of Invention
In order to solve the problems in the related art, the application provides a vehicle-mounted microprocessor software emergency refreshing method, a device, a storage medium and a system. The technical scheme is as follows:
in a first aspect, an embodiment of the present application provides a method for emergency refreshing software of a vehicle-mounted microprocessor, where the method includes:
loading boot-loader programs to complete software and hardware initialization operation of the vehicle-mounted microprocessor;
when the emergency refreshing condition is met, establishing network connection with an upper computer; an emergency refreshing system is stored in the upper computer;
downloading an emergency refreshing system from an upper computer end by running a boot-loader program;
and starting an emergency refreshing system, and refreshing the vehicle-mounted microprocessor software by running the emergency refreshing system.
Software and hardware initialization operation of the vehicle-mounted microprocessor is completed by loading boot-loader programs; when the emergency refreshing condition is met, establishing network connection with an upper computer, downloading an emergency refreshing system from the upper computer end by running a boot-loader program, starting the emergency refreshing system, and refreshing vehicle-mounted microprocessor software by running the emergency refreshing system; the vehicle networking is connected with the upper computer, and the emergency refreshing system is dynamically downloaded from the upper computer, so that the problem that the emergency refreshing fails due to the problem of the Recovery partition when the emergency refreshing is realized in the Recovery partition mode at present is solved; the emergency refreshing method has the advantages of improving the emergency refreshing reliability and reducing the replacement cost caused by the refreshing failure.
Optionally, after the vehicle-mounted microprocessor software is refreshed by running the emergency refreshing system, the method further comprises:
reading the vehicle-mounted microprocessor software written by the emergency refreshing system, and carrying out integrity check on the vehicle-mounted microprocessor software written by the emergency refreshing system;
and uploading a refreshing result to the upper computer, wherein the refreshing result comprises a refreshing state and a refreshing process log.
Optionally, after the vehicle-mounted microprocessor software is refreshed by running the emergency refreshing system, the method further comprises:
reading the vehicle-mounted microprocessor software written by the emergency refreshing system, and carrying out integrity check on the vehicle-mounted microprocessor software written by the emergency refreshing system;
the refresh result is visually displayed on the vehicle.
Optionally, the emergency refresh condition is that a trigger signal for triggering the emergency refresh is received.
Optionally, the emergency refresh condition is that the OTA function activation wait time is greater than a predetermined time.
Optionally, the method further comprises:
and restarting the vehicle-mounted microprocessor after the software of the vehicle-mounted microprocessor is successfully written by the emergency refreshing system, and deleting the emergency refreshing system.
Optionally, establishing a network connection with the upper computer, including:
and establishing network connection with the upper computer according to the preset MAC address.
Optionally, establishing a network connection with the upper computer, including:
sending an ARP request message to an upper computer;
receiving an ARP response message sent by an upper computer, wherein the ARP response message comprises the MAC address of the upper computer;
and establishing network connection with the upper computer according to the MAC address of the upper computer.
Optionally, before the emergency refreshing system is downloaded from the upper computer end by running the boot-loader program, the method further comprises:
downloading authentication data from an upper computer terminal according to a preset communication protocol by running a boot-loader program;
verifying the authentication data by running a boot-loader program;
and after the authentication data is successfully checked, executing the step of downloading the emergency refreshing system from the upper computer end by running the boot-loader program.
Optionally, after the emergency refreshing system is downloaded from the upper computer end, the method further comprises:
performing signature verification on the emergency refreshing system by running a boot-loader program;
and after the verification of the emergency refreshing system is successful, executing the step of starting the emergency refreshing system and refreshing the vehicle-mounted microprocessor software by operating the emergency refreshing system.
In a second aspect, an embodiment of the present application provides an on-vehicle microprocessor software emergency refreshing device, including:
the program running module is used for loading boot-loader programs to complete software and hardware initialization operation of the vehicle-mounted microprocessor;
the communication module is used for establishing network connection with the upper computer when the emergency refreshing condition is met; an emergency refreshing system is stored in the upper computer;
the program running module is also used for downloading the emergency refreshing system from the upper computer end by running a boot-loader program;
and the refreshing module is used for starting the emergency refreshing system and refreshing the vehicle-mounted microprocessor software by running the emergency refreshing system.
Optionally, the refreshing module is further used for reading the vehicle-mounted microprocessor software refreshed by the emergency refreshing system and performing integrity check on the vehicle-mounted microprocessor software refreshed by the emergency refreshing system;
and the communication module is also used for uploading a refreshing result to the upper computer, wherein the refreshing result comprises a refreshing state and a refreshing process log.
Optionally, the refreshing module is further used for reading the vehicle-mounted microprocessor software refreshed by the emergency refreshing system and performing integrity check on the vehicle-mounted microprocessor software refreshed by the emergency refreshing system;
the refresh result is visually displayed on the vehicle.
Optionally, the emergency refresh condition is that a trigger signal for triggering the emergency refresh is received.
Optionally, the emergency refresh condition is that the OTA function activation wait time is greater than a predetermined time.
Optionally, the program running module is further configured to restart the vehicle-mounted microprocessor after the software of the vehicle-mounted microprocessor is successfully written by the emergency refreshing system, and delete the emergency refreshing system.
Optionally, the communication module is configured to establish network connection with the upper computer according to a preset MAC address.
Optionally, the communication module is used for sending an ARP request message to the upper computer;
receiving an ARP response message sent by an upper computer, wherein the ARP response message comprises the MAC address of the upper computer;
and establishing network connection with the upper computer according to the MAC address of the upper computer.
Optionally, the program running module is further configured to download authentication data from the upper computer end according to a predetermined communication protocol by running a boot loader program; verifying the authentication data by running a boot-loader program; and after the authentication data is successfully checked, executing the step of downloading the emergency refreshing system from the upper computer end by running the boot-loader program.
Optionally, the program running module is further used for checking the signature on the emergency refreshing system by running a boot-loader program; and after the verification of the emergency refreshing system is successful, executing the step of starting the emergency refreshing system and refreshing the vehicle-mounted microprocessor software by operating the emergency refreshing system.
In a third aspect, an embodiment of the present application provides an on-vehicle microprocessor software emergency refreshing device, where the device includes a processor and a memory, and the memory stores a program, and the program is loaded and executed by the processor to implement the on-vehicle microprocessor software emergency refreshing method as shown in the first aspect.
In a fourth aspect, an embodiment of the present application provides a computer storage medium, where a program is stored, where the program is used to implement the on-vehicle microprocessor software emergency refreshing method according to the first aspect when executed by a processor.
In a fifth aspect, an embodiment of the present application provides a system for emergency refreshing of software of an on-board microprocessor, where the system includes an upper computer and a vehicle;
the vehicle comprises a processor and a memory in which a program is stored which is loaded and executed by the processor to implement the on-board microprocessor software emergency refresh method as described in the first aspect above.
Drawings
In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings that are needed in the description of the embodiments or the prior art will be briefly described below, and it is obvious that the drawings in the following description are some embodiments of the present application, and other drawings may be obtained according to these drawings without inventive effort for a person skilled in the art.
FIG. 1 is a schematic diagram of a system for on-board microprocessor software emergency refreshing provided in an embodiment of the present application;
FIG. 2 is a flow chart of a method for on-board microprocessor software emergency refreshing according to an embodiment of the present application;
FIG. 3 is a flow chart of an on-board microprocessor software emergency refreshing method according to another embodiment of the present application
FIG. 4 is a block diagram of an on-board microprocessor software emergency refreshing apparatus according to one embodiment of the present application
Fig. 5 is a block diagram of an electronic device provided in one embodiment of the present application.
Detailed Description
The following description of the embodiments of the present application will be made apparent and complete in conjunction with the accompanying drawings, in which embodiments described are some, but not all, of the embodiments of the present application. All other embodiments, which can be made by one of ordinary skill in the art based on the embodiments herein without making any inventive effort, are intended to be within the scope of the present application.
In the description of the present application, it should be noted that the directions or positional relationships indicated by the terms "center", "upper", "lower", "left", "right", "vertical", "horizontal", "inner", "outer", etc. are based on the directions or positional relationships shown in the drawings, are merely for convenience of description of the present application and to simplify the description, and do not indicate or imply that the devices or elements referred to must have a specific orientation, be configured and operated in a specific orientation, and thus should not be construed as limiting the present application. Furthermore, the terms "first," "second," and "third" are used for descriptive purposes only and are not to be construed as indicating or implying relative importance.
In the description of the present application, it should be noted that, unless explicitly specified and limited otherwise, the terms "mounted," "connected," and "connected" are to be construed broadly, and may be either fixedly connected, detachably connected, or integrally connected, for example; can be mechanically or electrically connected; the two components can be directly connected or indirectly connected through an intermediate medium, or can be communicated inside the two components, or can be connected wirelessly or in a wired way. The specific meaning of the terms in this application will be understood by those of ordinary skill in the art in a specific context.
In addition, the technical features described below in the different embodiments of the present application may be combined with each other as long as they do not collide with each other.
Referring to fig. 1, a schematic diagram of a system for on-board microprocessor software emergency refreshing according to an embodiment of the present application is shown, where the system includes an upper computer 110 and a vehicle 120.
The host computer 110 and the vehicle 120 are connected via a network. The number of vehicles 120 is determined according to actual situations, and the host computer 110 may be connected with a plurality of vehicles 120 at the same time. The number of vehicles 120 in fig. 1 is merely illustrative, and embodiments of the present application are not limited in this regard.
The vehicle 120 is provided with a processor and a memory, the memory stores a program, and the processor is configured to execute the program stored in the memory to implement the on-board microprocessor software emergency refreshing method.
The vehicle 120 may include a plurality of processors, a plurality of controllers, and a plurality of memories, where the processors and the controllers are connected by a CAN (Controller Area Network ) bus, so as to implement high-speed communication of the controllers in the vehicle.
Referring to fig. 2, a schematic diagram of an on-board microprocessor software emergency refreshing method according to an embodiment of the present application is shown, and the method is applicable to the vehicle 120 in fig. 1, and includes the following steps:
step 201, loading boot-loader program to complete software and hardware initialization operation of the vehicle-mounted microprocessor.
When the OTA function is executed to update the controller software or the microprocessor software in the vehicle, the boot-loader program is loaded to complete the software and hardware initialization operation of the vehicle-mounted microprocessor.
Optionally, the boot-loader program is a u-boot program.
And 202, when the emergency refreshing condition is met, establishing network connection with an upper computer.
The upper computer is stored with an emergency refreshing system.
When the microprocessor software for executing the OTA function is damaged or cannot be started, the microprocessor software needs to be subjected to emergency refreshing.
When the vehicle-mounted system meets the emergency refreshing condition, the vehicle-mounted microprocessor is controlled to establish network connection with the upper computer.
Optionally, the on-board microprocessor is controlled to establish network connection with the upper computer by running a boot-loader program.
And 203, downloading the emergency refreshing system from the upper computer end by running a boot-loader program.
After the network connection is established between the vehicle-mounted microprocessor and the upper computer, the vehicle-mounted microprocessor downloads the emergency refreshing system from the upper computer end by running a boot-loader program, and stores the downloaded emergency refreshing system into the memory.
And step 204, starting an emergency refreshing system, and refreshing the vehicle-mounted controller software by running the emergency refreshing system.
And after the emergency refreshing system finishes downloading, starting and entering the emergency refreshing system, and automatically refreshing the vehicle-mounted controller software.
In summary, according to the vehicle-on-microprocessor emergency refreshing method provided by the embodiment of the application, software and hardware initialization operation of the vehicle-mounted microprocessor is completed by loading the boot-loader program; when the emergency refreshing condition is met, establishing network connection with an upper computer, downloading an emergency refreshing system from the upper computer end by running a boot-loader program, starting the emergency refreshing system, and refreshing vehicle-mounted microprocessor software by running the emergency refreshing system; the vehicle networking is connected with the upper computer, and the emergency refreshing system is dynamically downloaded from the upper computer, so that the problem that the emergency refreshing fails due to the problem of the Recovery partition when the emergency refreshing is realized in the Recovery partition mode at present is solved; the emergency refreshing method has the advantages of improving the emergency refreshing reliability and reducing the replacement cost caused by the refreshing failure.
Referring now to FIG. 3, another embodiment of the present application provides a flowchart of a method for emergency refreshing of software of an on-board microprocessor, the method being suitable for use in the system of FIG. 1, the method comprising the steps of:
step 301, a microprocessor in the vehicle loads a boot-loader program to complete software and hardware initialization operation of the vehicle-mounted microprocessor.
When the OTA function is executed to update the controller software or the microprocessor software in the vehicle, the boot-loader program is loaded to complete the software and hardware initialization operation of the vehicle-mounted microprocessor.
And step 302, when the emergency refreshing condition is met, a microprocessor in the vehicle runs a boot-loader program to send an ARP request message to an upper computer.
If the controller end software or the microprocessor software for executing the OTA function is damaged or fails, the OTA function cannot be executed to repair the software. When the vehicle-mounted system meets the emergency refreshing condition, a boot-loader program is operated to establish network connection with the upper computer.
The ARP (Address Resolution Protocol ) request message sent by the vehicle includes a MAC (Media Access Control ) address and an IP (Internet Protocol, internet protocol) address corresponding to the vehicle, and an IP address of the host computer.
Optionally, the emergency refresh condition is that the OTA function activation wait time is greater than a predetermined time. The preset time is preset according to actual conditions.
Optionally, the emergency refresh condition is that a trigger signal for triggering the emergency refresh is received.
In the vehicle, the microprocessor is also connected with other hardware devices such as a controller and peripheral equipment, when the OTA function cannot be executed, the other hardware devices connected with the microprocessor send trigger signals to the microprocessor, and when the microprocessor receives the trigger signals, the emergency refreshing function is started.
In one example, the type of trigger signal used to trigger the emergency refresh is a GPIO (General Purpose I/O Ports) signal or an SPI (Serial Peripheral interface ) signal.
Step 303, the upper computer receives the ARP request message sent by the vehicle, and sends an ARP reply message to the vehicle.
The ARP response message comprises an IP address and an MAC address corresponding to the vehicle and an MAC address of the upper computer.
And 304, receiving an ARP response message sent by the upper computer by a microprocessor in the vehicle.
In step 305, the microprocessor in the vehicle establishes a network connection with the upper computer according to the MAC address of the upper computer.
And 306, the microprocessor in the vehicle downloads authentication data from the upper computer end according to a preset communication protocol by running a boot-loader program.
Alternatively, the predetermined communication protocol is TFTP (Trivial File Transfer Protocol, simple file transfer) protocol or FTP (File Transfer Protocol, file transfer) protocol or HTTP (Hypertext Transfer Protoco, hypertext transfer) protocol.
Optionally, the size of the authentication data is fixed, for example, the size of the authentication data is 512Byte.
Taking a predetermined communication protocol as a TFTP protocol as an example, running a boot-loader program, and downloading authentication data from a TFTP server (server) of an upper computer through the TFTP protocol.
Step 307, the microprocessor in the vehicle performs signature verification on the authentication data by running a boot-loader program.
After the authentication data is downloaded successfully, the authentication data is checked and signed by running a boot-loader program.
Optionally, the verification method of the authentication data is a public key verification signature or a CMAC verification signature or an HMAC verification signature.
The host computer signs the authentication data before the microprocessor of the vehicle downloads the authentication data from the host computer.
After the verification of the authentication data is successful, the emergency refreshing system is downloaded from the upper computer end, namely, step 308 is executed; when the verification of the authentication data fails, the upper computer is not trusted, and the starting of the existing operating system in the microcontroller is attempted, that is, step 309 is executed.
And 308, the microprocessor in the vehicle downloads the emergency refreshing system from the upper computer end by running a boot-loader program.
If the emergency refreshing system is successfully downloaded, the emergency refreshing system is verified, namely, step 310 is executed, or after the emergency refreshing system is successfully downloaded, step 310 is not executed, the emergency refreshing system is directly started, and the vehicle-mounted microprocessor software is refreshed through the emergency refreshing system, namely, step 311 is executed.
If the emergency refresh system has failed to be downloaded, an attempt is made to boot an operating system already present in the microcontroller, step 309 is performed.
In step 309, the microprocessor in the vehicle attempts to boot an operating system already present in the microcontroller.
In step 310, the microprocessor in the vehicle performs signature verification on the emergency refreshing system by running a boot-loader program.
Optionally, the signature verification mode of the emergency refreshing system is a public key verification signature or a CMAC verification signature or an HMAC verification signature.
Before the microprocessor of the vehicle downloads the emergency refreshing system from the upper computer, the upper computer signs the emergency refreshing system.
If the signature verification of the emergency refreshing system is successful, the emergency refreshing system is started, and the vehicle-mounted microprocessor software is refreshed by running the emergency refreshing system, namely, step 311 is executed.
If the verification of the emergency refresh system fails, it is indicated that the downloaded emergency refresh system is not trusted, and an attempt is made to start the existing operating system in the microcontroller, i.e. step 309 is performed.
In step 311, the microprocessor in the vehicle starts the emergency refreshing system and the vehicle-mounted microprocessor software is refreshed by running the emergency refreshing system.
Optionally, the software, data and configuration files used in the vehicle-mounted microprocessor are refreshed by running the emergency refreshing system.
Optionally, the emergency refreshing system is operated to brush all or part of software, all or part of data, all or part of configuration files in the vehicle-mounted microprocessor.
In step 312, the on-board microprocessor in the vehicle reads the on-board microprocessor software written by the emergency refreshing system by running the emergency refreshing system, and performs integrity check on the microprocessor software written by the emergency refreshing system.
In step 313, the onboard microprocessor in the vehicle uploads the refresh result to the host computer.
The refresh result includes a refresh state and a refresh process log. The refresh state is refresh success or refresh failure.
Optionally, the upper computer receives the refreshing result sent by the vehicle and stores the refreshing result in a preset directory.
Step 314, after the software of the vehicle-mounted microprocessor is successfully written by the emergency refreshing system, restarting the vehicle-mounted microprocessor, and deleting the emergency refreshing system.
And restarting the vehicle-mounted microprocessor after the vehicle-mounted microprocessor software is successfully refreshed by the emergency refreshing system, entering the refreshed vehicle-mounted system, and deleting the emergency refreshing system stored in the memory.
Before the vehicle downloads the emergency refreshing system from the upper computer end or after the vehicle downloads the emergency refreshing system, if the emergency refreshing system needs to be repaired or updated, repairing or updating the emergency refreshing system in the upper computer; when the vehicle downloads the emergency refreshing system from the upper computer end again, the emergency refreshing system provided by the upper computer end is a repaired or updated emergency refreshing system.
In an alternative embodiment based on the embodiment shown in fig. 3, after the integrity check is performed on the on-board microprocessor software that is refreshed by the emergency refresh system, the refresh result may not be uploaded to the host computer, but the refresh result is displayed on the vehicle, and the operator may learn the refresh result of the emergency refresh in the vehicle, that is, step 313 is replaced with step 313a:
step 313a, visually displaying the refresh result on the vehicle.
Such as: displaying the refreshing result on a central control screen in the vehicle; or, controlling the LED lamps in the vehicle to display the refreshing result in a flickering mode in a preset mode; or, controlling the lamp of the vehicle to be turned on in a preset mode to display the refreshing result.
In an alternative embodiment based on the embodiment shown in fig. 3, before the emergency refresh system is downloaded from the host computer, the authentication data may not be downloaded to verify the reliability of the host computer, i.e. steps 306 to 307 described above are not performed, and step 308 is performed directly after step 305.
In an alternative embodiment based on the embodiment shown in fig. 3, the signature may not be verified for the emergency refresh system after the emergency refresh system is downloaded, i.e. step 308 is performed, step 310 is not performed, but step 311 is performed directly.
In an alternative embodiment of the embodiment shown in fig. 3, when the emergency refresh condition is met, the microcontroller in the vehicle establishes a network connection with the host computer by replacing the above steps 302 to 305 with step 302 a:
in step 302a, a network connection is established with the upper computer according to a preset MAC address.
The method comprises the steps that the MAC address of the upper computer is configured in the vehicle in advance, and when the emergency refreshing function is started, the microcontroller of the vehicle establishes network connection with the upper computer according to the preset MAC address.
In the vehicle-mounted microprocessor software emergency refreshing method provided by the embodiment of the application, the emergency refreshing system does not need to input a Recovery partition in advance, so that the storage space occupied by the system is reduced, meanwhile, related contents of the emergency refreshing system do not need to be refreshed in a factory production line, the production time on the production line is reduced, and the production efficiency is improved. In addition, because the emergency refreshing system is stored in the upper computer, when the emergency refreshing system needs to be repaired or updated, the emergency refreshing system is only required to be updated in the upper computer, and the emergency refreshing system is dynamically downloaded when the vehicle needs to be subjected to emergency refreshing, the risk of failure in refreshing caused by the occurrence of problems of the emergency refreshing system can be reduced, the reliability of emergency refreshing is improved, and the replacement cost caused by the failure in emergency refreshing is reduced.
Fig. 4 is a block diagram of an on-board microprocessor software emergency refreshing device provided in one embodiment of the present application. The device at least comprises the following modules: program running module 410, communication module 420, and flush module 430.
The program running module 410 is used for loading boot-loader programs to complete the software and hardware initialization operation of the vehicle-mounted microprocessor;
the communication module 420 is configured to establish a network connection with the upper computer when the emergency refresh condition is satisfied; an emergency refreshing system is stored in the upper computer;
the program running module 410 is further configured to download the emergency refreshing system from the host computer end by running a boot-loader program;
the flush module 430 is configured to start the emergency refresh system, and flush the vehicle-mounted microprocessor software by running the emergency refresh system.
Optionally, the flashing module 430 is further configured to read the vehicle-mounted microprocessor software that is flashed by the emergency refreshing system, and perform integrity check on the vehicle-mounted microprocessor software that is flashed by the emergency refreshing system;
the communication module 420 is further configured to upload a refresh result to the host computer, where the refresh result includes a refresh state and a refresh process log.
Optionally, the flashing module 430 is further configured to read the vehicle-mounted microprocessor software that is flashed by the emergency refreshing system, and perform integrity check on the vehicle-mounted microprocessor software that is flashed by the emergency refreshing system;
the refresh result is visually displayed on the vehicle.
Optionally, the emergency refresh condition is that a trigger signal for triggering the emergency refresh is received.
Optionally, the emergency refresh condition is that the OTA function activation wait time is greater than a predetermined time.
Optionally, the program running module 410 is further configured to restart the on-vehicle microprocessor after the on-vehicle microprocessor software is successfully written by the emergency refreshing system, and delete the emergency refreshing system.
Optionally, the communication module 420 is configured to establish a network connection with the upper computer according to a preset MAC address.
Optionally, the communication module 420 is configured to send an ARP request message to the upper computer;
receiving an ARP response message sent by an upper computer, wherein the ARP response message comprises the MAC address of the upper computer;
and establishing network connection with the upper computer according to the MAC address of the upper computer.
Optionally, the program running module 410 is further configured to download authentication data from the host computer according to a predetermined communication protocol by running a boot loader program; verifying the authentication data by running a boot-loader program; and after the authentication data is successfully checked, executing the step of downloading the emergency refreshing system from the upper computer end by running the boot-loader program.
Optionally, the program running module 410 is further configured to perform signature verification on the emergency refreshing system by running a boot loader program; and after the verification of the emergency refreshing system is successful, executing the step of starting the emergency refreshing system and refreshing the vehicle-mounted microprocessor software by operating the emergency refreshing system.
For relevant details reference is made to the method embodiments described above.
It should be noted that: when the vehicle-mounted microprocessor software emergency refreshing device provided in the above embodiment performs vehicle-mounted microprocessor software emergency refreshing, only the division of the above functional modules is used for illustration, and in practical application, the above functional allocation can be completed by different functional modules according to needs, that is, the internal structure of the vehicle-mounted microprocessor software emergency refreshing device is divided into different functional modules so as to complete all or part of the functions described above. In addition, the vehicle-mounted microprocessor software emergency refreshing device provided in the above embodiment and the vehicle-mounted microprocessor software emergency refreshing method embodiment belong to the same concept, and detailed implementation processes of the vehicle-mounted microprocessor software emergency refreshing device are shown in the method embodiment, and are not repeated here.
FIG. 5 is a block diagram of an electronic device provided in one embodiment of the present application, which may include the on-board microcontroller software emergency refresh apparatus provided in FIG. 4; the electronic device may be referred to as a user device, a desktop terminal, a control terminal, etc., which is not limited in this embodiment. The electronic device comprises at least a processor 501 and a memory 502.
The processor 501 may include one or more processing cores, such as: 4 core processors, 8 core processors, etc. The processor 501 may be implemented in at least one hardware form of DSP (Digital Signal Processing ), FPGA (Field-Programmable Gate Array, field programmable gate array), PLA (Programmable Logic Array ). The processor 501 may also include a main processor and a coprocessor, the main processor being a processor for processing data in an awake state, also referred to as a CPU (Central Processing Unit ); a coprocessor is a low-power processor for processing data in a standby state. In some embodiments, the processor 501 may integrate a GPU (Graphics Processing Unit, image processor) for rendering and drawing of content required to be displayed by the display screen. In some embodiments, the processor 501 may also include an AI (Artificial Intelligence ) processor for processing computing operations related to machine learning.
Memory 502 may include one or more computer-readable storage media, which may be non-transitory. Memory 502 may also include high-speed random access memory, as well as non-volatile memory, such as one or more magnetic disk storage devices, flash memory storage devices. In some embodiments, a non-transitory computer readable storage medium in memory 502 is used to store at least one instruction for execution by processor 501 to implement the in-vehicle microprocessor software emergency refresh method provided by the method embodiments herein.
In some embodiments, the electronic device may further optionally include: a peripheral interface and at least one peripheral. The processor 501, memory 502, and peripheral interfaces may be connected by buses or signal lines. The individual peripheral devices may be connected to the peripheral device interface via buses, signal lines or circuit boards. Illustratively, peripheral devices include, but are not limited to: radio frequency circuitry, touch display screens, audio circuitry, and power supplies, among others.
Of course, the electronic device may also include fewer or more components, as the present embodiment is not limited in this regard.
Optionally, the application further provides a computer readable storage medium, and a program is stored in the computer readable storage medium, and the program is loaded and executed by a processor to implement the vehicle-mounted microprocessor software emergency refreshing method of the method embodiment.
Optionally, the application further provides a computer product, which includes a computer readable storage medium, where a program is stored, and the program is loaded and executed by a processor to implement the on-vehicle microprocessor software emergency refreshing method of the above method embodiment.
It is apparent that the above examples are given by way of illustration only and are not limiting of the embodiments. Other variations or modifications of the above teachings will be apparent to those of ordinary skill in the art. It is not necessary here nor is it exhaustive of all embodiments. While nevertheless, obvious variations or modifications may be made to the embodiments described herein without departing from the scope of the invention.

Claims (21)

1. An emergency refreshing method for software of a vehicle-mounted microprocessor, which is characterized by comprising the following steps:
loading boot-loader programs to complete software and hardware initialization operation of the vehicle-mounted microprocessor, wherein a Recovery partition of the vehicle-mounted microprocessor is not stored with an emergency refreshing system;
when the preset emergency refreshing condition is met, establishing network connection with an upper computer; the upper computer is stored with an emergency refreshing system;
downloading the emergency refreshing system from the upper computer by running the boot-loader program;
starting the emergency refreshing system downloaded from the upper computer, and refreshing vehicle-mounted microprocessor software by running the emergency refreshing system;
and restarting the vehicle-mounted microprocessor after the vehicle-mounted microprocessor software is successfully written by the emergency refreshing system, and deleting the emergency refreshing system.
2. The method of claim 1, wherein after said flushing the on-board microprocessor software by running the emergency refresh system, the method further comprises:
reading the vehicle-mounted microprocessor software written by the emergency refreshing system, and carrying out integrity check on the vehicle-mounted microprocessor software written by the emergency refreshing system;
and uploading a refreshing result to the upper computer, wherein the refreshing result comprises a refreshing state and a refreshing process log.
3. The method of claim 1, wherein after said flushing the on-board microprocessor software by running the emergency refresh system, the method further comprises:
reading the vehicle-mounted microprocessor software written by the emergency refreshing system, and carrying out integrity check on the vehicle-mounted microprocessor software written by the emergency refreshing system;
the refresh result is visually displayed on the vehicle.
4. A method according to any one of claims 1 to 3, wherein the emergency refresh condition is the receipt of a trigger signal for triggering an emergency refresh.
5. A method according to any one of claims 1 to 3, wherein the emergency refresh condition is that the OTA function activation latency is greater than a predetermined time.
6. The method of claim 1, wherein the establishing a network connection with the host computer comprises:
and establishing network connection with the upper computer according to the preset MAC address.
7. The method of claim 1, wherein the establishing a network connection with the host computer comprises:
sending an ARP request message to the upper computer;
receiving an ARP response message sent by the upper computer, wherein the ARP response message comprises the MAC address of the upper computer;
and establishing network connection with the upper computer according to the MAC address of the upper computer.
8. The method of claim 1, wherein before the emergency refresh system is downloaded from the host computer side by running the boot loader program, the method further comprises:
downloading authentication data from the upper computer terminal according to a preset communication protocol by running the boot-loader program;
verifying the authentication data by running the boot-loader program;
and after the authentication data is successfully checked, executing the step of downloading the emergency refreshing system from the upper computer end by running the boot-loader program.
9. The method of claim 1, wherein after the downloading of the emergency refresh system from the host computer side, the method further comprises:
executing the boot-loader program to check the label of the emergency refreshing system;
and after the verification of the emergency refreshing system is successful, executing the step of starting the emergency refreshing system and refreshing the vehicle-mounted microprocessor software by operating the emergency refreshing system.
10. An on-board microprocessor software emergency refreshing device, comprising:
the program running module is used for loading boot-loader programs to complete software and hardware initialization operation of the vehicle-mounted microprocessor, and a Recovery partition of the vehicle-mounted microprocessor is not stored with an emergency refreshing system;
the communication module is used for establishing network connection with the upper computer when the emergency refreshing condition is met; the upper computer is stored with an emergency refreshing system;
the program running module is further used for downloading the emergency refreshing system from the upper computer end by running the boot-loader program;
the refreshing module is used for starting the emergency refreshing system and refreshing vehicle-mounted microprocessor software by running the emergency refreshing system;
and the program running module is also used for restarting the vehicle-mounted microprocessor and deleting the emergency refreshing system after the vehicle-mounted microprocessor software is successfully refreshed by the emergency refreshing system.
11. The apparatus of claim 10, wherein the flashing module is further configured to read the vehicle-mounted microprocessor software that is flashed by the emergency refresh system and perform an integrity check on the vehicle-mounted microprocessor software that is flashed by the emergency refresh system;
the communication module is further configured to upload a refresh result to the upper computer, where the refresh result includes a refresh state and a refresh process log.
12. The apparatus of claim 10, wherein the flashing module is further configured to read the vehicle-mounted microprocessor software that is flashed by the emergency refresh system and perform an integrity check on the vehicle-mounted microprocessor software that is flashed by the emergency refresh system;
the refresh result is visually displayed on the vehicle.
13. The apparatus of any of claims 10 to 12, wherein the emergency refresh condition is receipt of a trigger signal for triggering an emergency refresh.
14. The apparatus according to any of claims 10 to 12, wherein the emergency refresh condition is that an OTA function activation latency is greater than a predetermined time.
15. The apparatus of claim 10, wherein the communication module is configured to establish a network connection with the host computer according to a preset MAC address.
16. The apparatus of claim 10, wherein the communication module is configured to send an ARP request message to the host computer;
receiving an ARP response message sent by the upper computer, wherein the ARP response message comprises the MAC address of the upper computer;
and establishing network connection with the upper computer according to the MAC address of the upper computer.
17. The apparatus of claim 10, wherein the program running module is further configured to download authentication data from the host computer side according to a predetermined communication protocol by running the boot-loader program; verifying the authentication data by running the boot-loader program; and after the authentication data is successfully checked, executing the step of downloading the emergency refreshing system from the upper computer end by running the boot-loader program.
18. The apparatus of claim 10, wherein the program execution module is further configured to check the emergency refresh system by executing the boot-loader program; and after the verification of the emergency refreshing system is successful, executing the step of starting the emergency refreshing system and refreshing the vehicle-mounted microprocessor software by operating the emergency refreshing system.
19. An in-vehicle microprocessor software emergency refreshing device, characterized in that the device comprises a processor and a memory, wherein a program is stored in the memory, and the program is loaded and executed by the processor to realize the in-vehicle microprocessor software emergency refreshing method according to any one of claims 1 to 9.
20. A computer storage medium, wherein a program is stored in the storage medium, which program, when executed by a processor, is adapted to carry out the on-board microprocessor software emergency refresh method according to any one of claims 1 to 9.
21. A system for emergency refreshing of software of a vehicle-mounted microprocessor, which is characterized by comprising an upper computer and a vehicle;
the vehicle comprises a processor and a memory, wherein the memory stores a program which is loaded and executed by the processor to realize the on-board microprocessor software emergency refreshing method according to any one of claims 1 to 9.
CN202110398364.XA 2021-04-09 2021-04-09 Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency Active CN113254030B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN202110398364.XA CN113254030B (en) 2021-04-09 2021-04-09 Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN202110398364.XA CN113254030B (en) 2021-04-09 2021-04-09 Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency

Publications (2)

Publication Number Publication Date
CN113254030A CN113254030A (en) 2021-08-13
CN113254030B true CN113254030B (en) 2024-04-16

Family

ID=77220677

Family Applications (1)

Application Number Title Priority Date Filing Date
CN202110398364.XA Active CN113254030B (en) 2021-04-09 2021-04-09 Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency

Country Status (1)

Country Link
CN (1) CN113254030B (en)

Citations (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8924952B1 (en) * 2012-06-27 2014-12-30 Amazon Technologies, Inc. Updating software utilizing multiple partitions
CN105446835A (en) * 2015-12-24 2016-03-30 小米科技有限责任公司 Method and device for repairing system file
CN105955846A (en) * 2016-04-29 2016-09-21 乐视控股(北京)有限公司 Method and system for carrying out recovery after upgrade failure of mobile terminal on basis of network
CN106708543A (en) * 2015-07-22 2017-05-24 Tcl集团股份有限公司 OTA upgrading method and apparatus for operation system
CN106774255A (en) * 2016-12-16 2017-05-31 福建省汽车工业集团云度新能源汽车股份有限公司 A kind of remote reflash method and system based on VIN verifications
CN107105345A (en) * 2017-02-17 2017-08-29 青岛海信宽带多媒体技术有限公司 A kind of set top box upgrading method and set top box
CN107168818A (en) * 2017-03-30 2017-09-15 努比亚技术有限公司 Terminal and brush machine failure recovery method
CN109240720A (en) * 2018-08-23 2019-01-18 福州瑞芯微电子股份有限公司 A kind of firmware upgrade method of Android system and a kind of storage equipment
CN109542480A (en) * 2018-11-16 2019-03-29 深圳市邻友通科技发展有限公司 The operating system update method, apparatus and medium of nail print apparatus
CN109753299A (en) * 2019-01-16 2019-05-14 Oppo广东移动通信有限公司 A kind of method for upgrading system, device and computer storage medium
CN110162269A (en) * 2018-02-14 2019-08-23 三星电子株式会社 Storage system and solid state drive
CN110597542A (en) * 2019-09-17 2019-12-20 Oppo(重庆)智能科技有限公司 Automatic OTA (over the air) software upgrading method and device and electronic equipment
CN110716735A (en) * 2019-10-11 2020-01-21 东莞市小精灵教育软件有限公司 System upgrading method and device, intelligent terminal and computer readable storage medium
CN110837381A (en) * 2019-09-25 2020-02-25 深圳市火乐科技发展有限公司 Software upgrading method and device for projection equipment
CN111930407A (en) * 2020-10-19 2020-11-13 广州汽车集团股份有限公司 Vehicle ECU software upgrading method and system, vehicle TBOX microcontroller and SOC terminal

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AU2010221411B2 (en) * 2009-03-03 2013-11-07 Airbiquity Inc. In-vehicle system (IVS) control of emergency data communications

Patent Citations (15)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8924952B1 (en) * 2012-06-27 2014-12-30 Amazon Technologies, Inc. Updating software utilizing multiple partitions
CN106708543A (en) * 2015-07-22 2017-05-24 Tcl集团股份有限公司 OTA upgrading method and apparatus for operation system
CN105446835A (en) * 2015-12-24 2016-03-30 小米科技有限责任公司 Method and device for repairing system file
CN105955846A (en) * 2016-04-29 2016-09-21 乐视控股(北京)有限公司 Method and system for carrying out recovery after upgrade failure of mobile terminal on basis of network
CN106774255A (en) * 2016-12-16 2017-05-31 福建省汽车工业集团云度新能源汽车股份有限公司 A kind of remote reflash method and system based on VIN verifications
CN107105345A (en) * 2017-02-17 2017-08-29 青岛海信宽带多媒体技术有限公司 A kind of set top box upgrading method and set top box
CN107168818A (en) * 2017-03-30 2017-09-15 努比亚技术有限公司 Terminal and brush machine failure recovery method
CN110162269A (en) * 2018-02-14 2019-08-23 三星电子株式会社 Storage system and solid state drive
CN109240720A (en) * 2018-08-23 2019-01-18 福州瑞芯微电子股份有限公司 A kind of firmware upgrade method of Android system and a kind of storage equipment
CN109542480A (en) * 2018-11-16 2019-03-29 深圳市邻友通科技发展有限公司 The operating system update method, apparatus and medium of nail print apparatus
CN109753299A (en) * 2019-01-16 2019-05-14 Oppo广东移动通信有限公司 A kind of method for upgrading system, device and computer storage medium
CN110597542A (en) * 2019-09-17 2019-12-20 Oppo(重庆)智能科技有限公司 Automatic OTA (over the air) software upgrading method and device and electronic equipment
CN110837381A (en) * 2019-09-25 2020-02-25 深圳市火乐科技发展有限公司 Software upgrading method and device for projection equipment
CN110716735A (en) * 2019-10-11 2020-01-21 东莞市小精灵教育软件有限公司 System upgrading method and device, intelligent terminal and computer readable storage medium
CN111930407A (en) * 2020-10-19 2020-11-13 广州汽车集团股份有限公司 Vehicle ECU software upgrading method and system, vehicle TBOX microcontroller and SOC terminal

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
基于CCP协议的车载控制器软件刷新系统设计;杨胜兵;万宏伟;薛冰;范文涛;季鑫;;自动化与仪表(第07期);全文 *

Also Published As

Publication number Publication date
CN113254030A (en) 2021-08-13

Similar Documents

Publication Publication Date Title
CN107729757B (en) Software authentication before software update
CN111032438B (en) Control apparatus, control method, and computer program
CN110908682B (en) Firmware upgrading method and system for vehicle controller, vehicle and storage medium
CN112698854A (en) Vehicle multi-controller flashing device
US20240069906A1 (en) Server, software update system, distribution method, and non-transitory storage medium
CN113094072A (en) Vehicle upgrading method and device, electronic device and storage medium
CN108121560A (en) Difference bag upgrade method, device, terminal and computer readable storage medium
CN113238774A (en) Vehicle-mounted greeting animation updating method and device, vehicle-mounted terminal and storage medium
CN113608763A (en) Vehicle-mounted OTA upgrading method, device, equipment and operation machine
CN113254030B (en) Method, device, storage medium and system for refreshing software of vehicle-mounted microprocessor in emergency
KR102109125B1 (en) Method for managing state of ECU in vehicle based on automotive open system architecture
WO2020189281A1 (en) Electronic control device and method for setting control data
CN113050960A (en) OTA (over the air) upgrading method and device, vehicle-mounted terminal and storage medium
CN114780114A (en) Firmware upgrading method, system, vehicle and storage medium
JP2022187646A (en) Ota master, system, method, program, and vehicle
CN113791800A (en) Automatic parking control module remote upgrading method and system and automobile
CN113553079A (en) Upgrading method and device for Internet of things equipment, electronic equipment and storage medium
US20220405083A1 (en) Ota master, system, method, non-transitory storage medium, and vehicle
CN113434163B (en) Online calibration method, system, device and medium suitable for electronic control unit
US20220405080A1 (en) Ota master, system, method, non-transitory storage medium, and vehicle
US11954480B2 (en) Center, OTA master, system, method, non-transitory storage medium, and vehicle
CN114115955B (en) Method, system, terminal and storage medium for upgrading FPGA firmware of server resource box
CN116909609B (en) Software upgrading method and device of vehicle-mounted intelligent equipment and vehicle-mounted intelligent equipment
CN115686561A (en) Vehicle upgrading method and device and vehicle
US20220391193A1 (en) Ota master, system, method, non-transitory storage medium, and vehicle

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant