CN113497819A - Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment - Google Patents
Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment Download PDFInfo
- Publication number
- CN113497819A CN113497819A CN202010255186.0A CN202010255186A CN113497819A CN 113497819 A CN113497819 A CN 113497819A CN 202010255186 A CN202010255186 A CN 202010255186A CN 113497819 A CN113497819 A CN 113497819A
- Authority
- CN
- China
- Prior art keywords
- vehicle
- upgrade
- upgrading
- controlling
- unit
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/50—Network services
- H04L67/60—Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources
Abstract
The invention discloses a remote upgrade safety guarantee method, which is applied to vehicle-mounted Tbox equipment and comprises the following steps: step S11, after receiving the upgrade request from the OTA server, responding to the user operation to trigger the upgrade flow; step S12, when the current vehicle is checked to meet the upgrade condition, forbidding the vehicle one-key starting system and forbidding the application message communication function of all CAN buses of the vehicle; step S13, according to the upgrade package from OTA server, upgrade the ECU software of the vehicle; step S14, determining whether the current upgrade is successful, and feeding back and reporting the upgrade result; and step S15, restoring the use environment of the vehicle after the upgrade is successful. The invention also discloses a corresponding system and vehicle-mounted Tbox equipment. The invention can improve the vehicle using safety, the upgrading success rate and the reliability of the common user when the vehicle ECU software is upgraded.
Description
Technical Field
The invention relates to the technical field of remote upgrading of vehicle electronic control unit software, in particular to a remote upgrading safety guarantee method and system and vehicle-mounted Tbox equipment.
Background
Software upgrade of an Electronic Control Unit (ECU) of a conventional vehicle is generally performed in a 4S shop after a vehicle manufacturer releases a new software version, and the vehicle is upgraded. Specifically, according to the current diagnostic refresh specification, most of the current ECU controllers are embedded chips and have no a/B firmware, when the ECU is upgraded and refreshed, a program in the ECU needs to be erased first, and then a new program file is written, the message transmission of the CAN bus is very interfered by the environment, so that the message loss in the refresh and upgrade process CAN be caused, the bus is influenced by some factors, the load is raised, and the refresh and upgrade fails. The ECU controller will not work due to the failure of writing the new program file, thereby affecting the use of the vehicle functions.
The software is upgraded by the traditional after-sale mode, and the problem of software recall of the vehicle is difficult to solve; in addition, a large amount of manpower and financial resources are consumed; and the requirements of fast iteration of the Internet of vehicles and improvement of user experience in the era of intelligent networking cannot be met.
The OTA (Over the air, OTA) remote upgrading mode can realize rapid software iteration and upgrading, save cost and improve user experience, and can avoid the risk of vehicle recall due to software to a great extent, but the OTA remote upgrading also faces some challenges.
Disclosure of Invention
The technical problem to be solved by the invention is to provide a remote upgrade security guarantee method, a remote upgrade security guarantee system and a vehicle-mounted Tbox device, which can improve the vehicle using safety, upgrade success rate and reliability of a common user when vehicle ECU software is upgraded.
The technical scheme adopted by the invention is that a remote upgrade safety guarantee method is provided and applied to vehicle-mounted Tbox equipment, and the method comprises the following steps:
step S11, after receiving the upgrade request from the OTA server, responding to the user operation to trigger the upgrade flow;
step S12, when the current vehicle is checked to meet the upgrade condition, forbidding a vehicle one-key starting system and forbidding the application message communication functions of all CAN buses of the vehicle;
step S13, according to the upgrade package from OTA server, carrying out upgrade operation to ECU software of the vehicle;
step S14, determining whether the current upgrade is successful, feeding back the upgrade result to the man-machine interaction interface of the vehicle, and reporting to the OTA server;
and step S15, after the upgrading is successful, recovering the use environment of the vehicle, and recovering the application message communication functions of the vehicle one-touch starting system and the CAN bus.
Wherein the step S12 further includes:
whether the current vehicle meets the upgrading condition is checked, and specifically at least one of an ACC gear, a vehicle locking and fortifying state, a vehicle speed, a storage battery electric quantity, a battery voltage, a hand brake state, a vehicle ignition state, a high-voltage charging state, a whole vehicle high-voltage charging state, a vehicle gear and a main driving safety belt state is checked.
Wherein, the step S12 specifically includes:
disabling a vehicle one-touch enabled system by: controlling a vehicle one-touch starting system to enter an extension mode; controlling a vehicle one-touch starting system to enter a boot mode; controlling the vehicle one-touch starting system to maintain in a boot mode;
disabling application message communication functions of all CAN buses of the vehicle by: controlling all ECUs to enter an expansion mode; controlling all CAN buses to forbid application message communication; and maintaining all CAN buses to keep forbidding application message communication.
Wherein the step S12 further includes: and when the current vehicle does not meet the upgrading conditions, ending the upgrading process.
Wherein the step S14 further includes:
feeding back the upgrading result to a human-computer interaction interface of the vehicle;
after determining that the current upgrading fails, controlling to continue the upgrading operation of ECU software of the vehicle for at least one time;
after the upgrade finally fails, controlling the vehicle ECU software to automatically roll back and restore to the version before upgrade;
and reporting the final result of the upgrade to the OTA server.
As another aspect of the present invention, there is also provided a remote upgrade security system applied to a vehicle Tbox device, including:
the upgrading triggering unit is used for responding to user operation to trigger an upgrading process after receiving an upgrading request from the OTA server;
the upgrading preparation unit is used for forbidding a vehicle one-key starting system and forbidding application message communication functions of all CAN buses of the vehicle when the current vehicle is checked to meet the upgrading condition;
the upgrading processing unit is used for upgrading ECU software of the vehicle according to an upgrading packet from the OTA server;
the upgrading result feedback unit is used for determining whether the current upgrading is successful, feeding the upgrading result back to a human-computer interaction interface of the vehicle and reporting the upgrading result to the OTA server;
and the driving function recovery unit is used for recovering the service environment of the vehicle and recovering the application message communication functions of the one-touch starting system of the vehicle and the CAN bus after the upgrading is successful.
Wherein the upgrade provisioning unit further comprises:
and the upgrade condition checking unit is used for checking whether the current vehicle meets the upgrade condition, and specifically comprises at least one of checking an ACC gear, a vehicle locking and fortifying state, a vehicle speed, the electric quantity of a storage battery, the voltage of the battery, a hand brake state, a vehicle ignition state, a high-voltage charging state, a whole vehicle high-voltage electric state, a vehicle gear and a main driving safety belt state.
Wherein the upgrade provisioning unit further comprises:
a one-touch-enabled disabling unit for disabling the vehicle one-touch-enabled system by: controlling a vehicle one-touch starting system to enter an extension mode; controlling a vehicle one-touch starting system to enter a boot mode; controlling the vehicle one-touch starting system to maintain in a boot mode;
a CAN application message communication disabling unit for disabling the application message communication functions of all CAN buses of the vehicle by: controlling all ECUs to enter an expansion mode; controlling all CAN buses to forbid application message communication; and maintaining all CAN buses to keep forbidding application message communication.
Wherein the upgrade provisioning unit further comprises:
and the upgrade ending unit is used for ending the upgrade process when the upgrade condition checking unit checks that the current vehicle does not meet the upgrade condition.
Wherein, the upgrade result feedback unit further includes:
the interface display unit is used for feeding back the upgrading result to a human-computer interaction interface of the vehicle;
the repeated upgrading processing unit is used for controlling the upgrading processing unit to continue upgrading the ECU software of the vehicle at least once after the current upgrading is determined to fail;
the version recovery unit is used for controlling the vehicle ECU software to automatically roll back and recover to the version before upgrading after the upgrading finally fails;
and the reporting unit is used for reporting the final result of the upgrade to the OTA server.
Correspondingly, the invention also provides a vehicle-mounted Tbox device which comprises the remote upgrading safety guarantee system.
The embodiment of the invention has the following beneficial effects:
the embodiment of the invention provides a remote upgrade safety guarantee method, a remote upgrade safety guarantee system and a vehicle-mounted Tbox device, which can improve the vehicle using safety, upgrade success rate and reliability of a vehicle user when vehicle ECU software is upgraded, and improve the use experience of the vehicle user;
in the remote upgrading process provided by the invention, by detecting whether the vehicle meets the upgrading condition, forbidding a vehicle one-touch starting system before upgrading and forbidding the application message communication functions of all CAN buses of the vehicle, a proper OTA upgrading scene (a scene of an unmanned vehicle) CAN be created, and meanwhile, the safety and the success rate of the upgrading process CAN be ensured;
in addition, in the embodiment of the invention, after the first upgrade fails, the operation of retrying the upgrade is carried out, and the software rollback can be realized after the final upgrade fails, so that the success rate of OTA upgrade and the vehicle function can be further ensured.
Drawings
In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present invention, and it is within the scope of the present invention for those skilled in the art to obtain other drawings based on the drawings without inventive exercise.
Fig. 1 is a schematic main flow diagram of an embodiment of a remote upgrade security method provided in the present invention;
FIG. 2 is a schematic structural diagram of an embodiment of a remote upgrade security system provided in the present invention;
FIG. 3 is a schematic diagram of the upgrade preparation unit of FIG. 2;
fig. 4 is a schematic structural diagram of an upgrade result feedback unit in fig. 2.
Detailed Description
In order to make the objects, technical solutions and advantages of the present invention more apparent, the present invention will be described in further detail with reference to the accompanying drawings.
Fig. 1 shows a main flow diagram of an embodiment of a remote upgrade security method provided by the present invention. In this embodiment, the method is applied to a vehicle Tbox device, and includes the following steps:
step S11, after receiving the upgrade request from OTA server, responding to user operation to trigger the upgrade flow; specifically, the OTA server will issue the upgrade package and the upgrade request to the vehicle Tbox device of each vehicle when the ECU software is updated. After receiving the upgrading request, the vehicle-mounted Tbox equipment displays the upgrading request on a human-computer interaction operation interface of the vehicle, and if a user clicks upgrading on the human-computer interaction operation interface, the clicking action of the user is converted into an upgrading starting instruction and is transmitted to the Tbox, so that the upgrading starting process is triggered;
step S12, when the current vehicle is checked to meet the upgrade condition, forbidding a vehicle one-key starting system and forbidding the application message communication functions of all CAN buses of the vehicle;
in this step, it is required to check whether the current vehicle meets the upgrade condition, specifically including checking at least one of an ACC gear, a vehicle locking and fortifying state, a vehicle speed, a battery power, a battery voltage, a handbrake state, a vehicle ignition state, a high-voltage charging state, a whole vehicle high-voltage state, a vehicle gear and a main driving safety belt state. It is understood that the upgrade check condition may be dynamically configured among the above conditions according to specific situations, and in particular, may be flexibly configured according to different upgraded ECU objects.
For example, in one specific example, the upgrade condition check may be performed according to table 1 below:
table 1: vehicle upgrade condition checking
If the vehicle meets the upgrade execution condition, starting the upgrade process, and if the vehicle does not meet the upgrade execution condition, quitting the upgrade;
after the function of a vehicle one-touch START system (PEPS) is forbidden, the vehicle cannot be switched ON/OFF by a START button and cannot be ignited to START the vehicle, so that the vehicle can be upgraded under a proper use scene (a scene of an unmanned vehicle); specifically, in one example, the PEPS functionality may be disabled by: firstly, the PEPS is controlled to enter an extended mode through a diagnosis service (such as 1003 instruction); then, the PEPS is controlled to enter the boot mode through a diagnosis service (such as a 1002 instruction); finally, the PEPS is controlled to be maintained in the boot mode by the diagnostic service (such as a 3E 80 instruction);
the CAN bus of all paths is forbidden to apply the message communication function, so that the bus load CAN be ensured to be at a lower level in the updating and refreshing process, the possible bus message interference is eliminated, and the success rate of updating and updating is ensured; specifically, in one example, all CAN application messaging may be disabled by: firstly, all ECUs are controlled to enter an expansion mode through a diagnosis service (such as 1003 instruction); secondly, controlling all CAN buses to forbid application message communication through a diagnosis service (such as 280301 instruction); finally, all CAN buses are maintained with disabled application messaging by the diagnostic service (e.g., 3E 80 instructions).
Step S13, according to the upgrade package from OTA server, carrying out upgrade operation to ECU software of the vehicle;
step S14, determining whether the current upgrade is successful, feeding back the upgrade result to the man-machine interaction interface of the vehicle, and reporting to the OTA server;
in a specific example, the step S14 further includes:
step S140, feeding back the upgrade result (success or failure) to a human-computer interaction interface of the vehicle;
step S141, after determining that the current upgrade fails, controlling to continue the upgrade operation of ECU software of the vehicle for at least one time;
step S142, after the upgrade finally fails, controlling the vehicle ECU software to automatically roll back and restore to the version before upgrade; it can be understood that, in an actual example, if the software rollback is successful, the upgrade is reported to be failed, but the software rollback is successful, so that the normal use of the vehicle is not influenced; if the software rollback still fails, the upgrading fails, the functions of the vehicle and the ECU fail, and the functions need to be solved after the user returns the vehicle;
and step S143, reporting the final result (success or failure) of the upgrade to the OTA server, and actively contacting the vehicle owner to perform corresponding processing when the background operator at the OTA server monitors the event.
It is understood that if the result of the upgrade is successful, the intermediate steps S141 and S142 may be omitted.
And step S15, after the upgrading is successful, recovering the use environment of the vehicle, and recovering the application message communication functions of the vehicle one-touch starting system and the CAN bus.
As shown in fig. 2, which is a schematic structural diagram illustrating an embodiment of a remote upgrade security system provided by the present invention, and shown in fig. 3 to fig. 4, in this embodiment, the remote upgrade security system 1 is applied to a vehicle-mounted Tbox device, and includes:
the upgrading triggering unit 11 is used for responding to user operation to trigger an upgrading process after receiving an upgrading request from the OTA server;
the upgrade preparation unit 12 is configured to disable a vehicle one-touch start system and disable application message communication functions of all CAN buses of a vehicle when it is detected that a current vehicle meets an upgrade condition;
the upgrading processing unit 13 is used for upgrading the ECU software of the vehicle according to the upgrading packet from the OTA server;
the upgrade result feedback unit 14 is used for determining whether the current upgrade is successful, feeding the upgrade result back to a human-computer interaction interface of the vehicle, and reporting the upgrade result to the OTA server;
and the driving function recovery unit 15 is configured to recover the service environment of the vehicle and recover the application message communication functions of the vehicle one-touch start system and the CAN bus after the upgrade is successful.
More specifically, in one example, the upgrade provisioning unit 12 further includes:
the upgrade condition checking unit 120 is configured to check whether the current vehicle meets an upgrade condition, specifically including checking at least one of an ACC gear, a vehicle locking defense state, a vehicle speed, a battery level, a battery voltage, a handbrake state, a vehicle ignition state, a high-voltage charging state, a vehicle high-voltage state, a vehicle gear, and a main driving safety belt state;
an upgrade ending unit 121, configured to end the upgrade process when the upgrade condition checking unit checks that the current vehicle does not meet the upgrade condition;
a one-touch-enabled disabling unit 122 for disabling the vehicle one-touch-enabled system by: controlling a vehicle one-touch starting system to enter an extension mode; controlling a vehicle one-touch starting system to enter a boot mode; controlling the vehicle one-touch starting system to maintain in a boot mode;
a CAN application message communication disabling unit 123, configured to disable application message communication functions of all CAN buses of the vehicle by: controlling all ECUs to enter an expansion mode; controlling all CAN buses to forbid application message communication; and maintaining all CAN buses to keep forbidding application message communication.
More specifically, in an example, the upgrade result feedback unit 14 further includes:
the interface display unit 140 is used for feeding back the upgrade result to a human-computer interaction interface of the vehicle;
the repeated upgrading processing unit 141 is used for controlling the upgrading processing unit to continue upgrading the ECU software of the vehicle at least once after determining that the current upgrading fails;
the version recovery unit 142 is used for controlling the vehicle ECU software to automatically roll back and recover to the version before upgrading after the upgrading finally fails;
and the reporting unit 143 is configured to report the final result of the current upgrade to the OTA server.
For more details, reference may be made to the preceding description of fig. 1, which is not detailed here.
Based on the same inventive concept, an embodiment of the present invention further provides a vehicle Tbox device, and a remote upgrade security system described in fig. 2 to 3 in the above system embodiment.
The embodiment of the invention has the following beneficial effects:
the embodiment of the invention provides a remote upgrade safety guarantee method, a remote upgrade safety guarantee system and a vehicle-mounted Tbox device, which can improve the vehicle using safety, upgrade success rate and reliability of a vehicle user when vehicle ECU software is upgraded, and improve the use experience of the vehicle user;
in the remote upgrading process provided by the invention, by detecting whether the vehicle meets the upgrading condition, forbidding a vehicle one-touch starting system before upgrading and forbidding the application message communication functions of all CAN buses of the vehicle, a proper OTA upgrading scene (a scene of an unmanned vehicle) CAN be created, and meanwhile, the safety and the success rate of the upgrading process CAN be ensured;
in addition, in the embodiment of the invention, after the first upgrade fails, the operation of retrying the upgrade is carried out, and the software rollback can be realized after the final upgrade fails, so that the success rate of OTA upgrade and the vehicle function can be further ensured.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While the invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not to be limited to the disclosed embodiment, but on the contrary, is intended to cover various modifications and equivalent arrangements included within the spirit and scope of the appended claims.
Claims (11)
1. A remote upgrade security guarantee method is applied to vehicle-mounted Tbox equipment and is characterized by comprising the following steps:
step S11, after receiving the upgrade request from the OTA server, responding to the user operation to trigger the upgrade flow;
step S12, when the current vehicle is checked to meet the upgrade condition, forbidding a vehicle one-key starting system and forbidding the application message communication functions of all CAN buses of the vehicle;
step S13, according to the upgrade package from OTA server, carrying out upgrade operation to ECU software of the vehicle;
step S14, determining whether the current upgrade is successful, feeding back the upgrade result to the man-machine interaction interface of the vehicle, and reporting to the OTA server;
and step S15, after the upgrading is successful, recovering the use environment of the vehicle, and recovering the application message communication functions of the vehicle one-touch starting system and the CAN bus.
2. The method of claim 1, wherein the step S12 further comprises:
whether the current vehicle meets the upgrading condition is checked, and specifically at least one of an ACC gear, a vehicle locking and fortifying state, a vehicle speed, a storage battery electric quantity, a battery voltage, a hand brake state, a vehicle ignition state, a high-voltage charging state, a whole vehicle high-voltage charging state, a vehicle gear and a main driving safety belt state is checked.
3. The method according to claim 2, wherein the step S12 specifically includes:
disabling a vehicle one-touch enabled system by: controlling a vehicle one-touch starting system to enter an extension mode; controlling a vehicle one-touch starting system to enter a boot mode; controlling the vehicle one-touch starting system to maintain in a boot mode;
disabling application message communication functions of all CAN buses of the vehicle by: controlling all ECUs to enter an expansion mode; controlling all CAN buses to forbid application message communication; and maintaining all CAN buses to keep forbidding application message communication.
4. The method of claim 3, wherein the step S12 further comprises: and when the current vehicle does not meet the upgrading conditions, ending the upgrading process.
5. The method according to any one of claims 1 to 4, wherein the step S14 further comprises:
feeding back the upgrading result to a human-computer interaction interface of the vehicle;
after determining that the current upgrading fails, controlling to continue the upgrading operation of ECU software of the vehicle for at least one time;
after the upgrade finally fails, controlling the vehicle ECU software to automatically roll back and restore to the version before upgrade;
and reporting the final result of the upgrade to the OTA server.
6. The utility model provides a long-range upgrading safety guarantee system, is applied to in-vehicle Tbox equipment, its characterized in that includes:
the upgrading triggering unit is used for responding to user operation to trigger an upgrading process after receiving an upgrading request from the OTA server;
the upgrading preparation unit is used for forbidding a vehicle one-key starting system and forbidding application message communication functions of all CAN buses of the vehicle when the current vehicle is checked to meet the upgrading condition;
the upgrading processing unit is used for upgrading ECU software of the vehicle according to an upgrading packet from the OTA server;
the upgrading result feedback unit is used for determining whether the current upgrading is successful, feeding the upgrading result back to a human-computer interaction interface of the vehicle and reporting the upgrading result to the OTA server;
and the driving function recovery unit is used for recovering the service environment of the vehicle and recovering the application message communication functions of the one-touch starting system of the vehicle and the CAN bus after the upgrading is successful.
7. The system of claim 6, wherein the upgrade provisioning unit further comprises:
and the upgrade condition checking unit is used for checking whether the current vehicle meets the upgrade condition, and specifically comprises at least one of checking an ACC gear, a vehicle locking and fortifying state, a vehicle speed, the electric quantity of a storage battery, the voltage of the battery, a hand brake state, a vehicle ignition state, a high-voltage charging state, a whole vehicle high-voltage electric state, a vehicle gear and a main driving safety belt state.
8. The system of claim 7, wherein the upgrade provisioning unit further comprises:
a one-touch-enabled disabling unit for disabling the vehicle one-touch-enabled system by: controlling a vehicle one-touch starting system to enter an extension mode; controlling a vehicle one-touch starting system to enter a boot mode; controlling the vehicle one-touch starting system to maintain in a boot mode;
a CAN application message communication disabling unit for disabling the application message communication functions of all CAN buses of the vehicle by: controlling all ECUs to enter an expansion mode; controlling all CAN buses to forbid application message communication; and maintaining all CAN buses to keep forbidding application message communication.
9. The system of claim 8, wherein the upgrade provisioning unit further comprises:
and the upgrade ending unit is used for ending the upgrade process when the upgrade condition checking unit checks that the current vehicle does not meet the upgrade condition.
10. The system of any one of claims 6 to 9, wherein the upgrade result feedback unit further comprises:
the interface display unit is used for feeding back the upgrading result to a human-computer interaction interface of the vehicle;
the repeated upgrading processing unit is used for controlling the upgrading processing unit to continue upgrading the ECU software of the vehicle at least once after the current upgrading is determined to fail;
the version recovery unit is used for controlling the vehicle ECU software to automatically roll back and recover to the version before upgrading after the upgrading finally fails;
and the reporting unit is used for reporting the final result of the upgrade to the OTA server.
11. An onboard Tbox device, characterized in that it comprises a remote upgrade security assurance system according to any one of claims 6 to 10.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010255186.0A CN113497819A (en) | 2020-04-02 | 2020-04-02 | Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202010255186.0A CN113497819A (en) | 2020-04-02 | 2020-04-02 | Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113497819A true CN113497819A (en) | 2021-10-12 |
Family
ID=77994420
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202010255186.0A Pending CN113497819A (en) | 2020-04-02 | 2020-04-02 | Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113497819A (en) |
Cited By (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113997887A (en) * | 2021-11-24 | 2022-02-01 | 一汽奔腾轿车有限公司 | Vehicle state checking system and method before OTA (over the air) upgrading |
| CN114185297A (en) * | 2022-02-14 | 2022-03-15 | 蔚来汽车科技(安徽)有限公司 | Control method and device for vehicle-mounted software upgrading |
| CN115220750A (en) * | 2021-11-25 | 2022-10-21 | 广州汽车集团股份有限公司 | Automobile OTA (over the air) upgrading method, front-row host and system |
| CN115442233A (en) * | 2022-08-09 | 2022-12-06 | 北京罗克维尔斯科技有限公司 | ECU upgrading method and device, electronic equipment, storage medium and vehicle |
| CN116056045A (en) * | 2023-03-31 | 2023-05-02 | 江铃汽车股份有限公司 | AB point customer parking remote upgrading method and system |
| WO2023103552A1 (en) * | 2021-12-06 | 2023-06-15 | 广州汽车集团股份有限公司 | Ecu remote upgrading method and system |
| CN116707819A (en) * | 2023-06-01 | 2023-09-05 | 红石阳光（北京）科技股份有限公司 | Construction method of vehicle OTA upgrading security mechanism |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080027602A1 (en) * | 2006-05-30 | 2008-01-31 | Yeap Tet H | System and method for deterring theft of vehicles and other products having integral computer means |
| CN110134412A (en) * | 2019-03-25 | 2019-08-16 | 北京车和家信息技术有限公司 | Oftware updating method, device, vehicle and computer readable storage medium |
| CN110171429A (en) * | 2018-02-19 | 2019-08-27 | 通用汽车环球科技运作有限责任公司 | The automatic transmission and installation of radio upgrade in vehicle |
| CN110300406A (en) * | 2019-06-26 | 2019-10-01 | 上海擎感智能科技有限公司 | Vehicle online upgrading method and system, storage medium and car-mounted terminal based on OTA |
| CN110474961A (en) * | 2019-07-14 | 2019-11-19 | 江苏开沃汽车有限公司 | Pure electricity passenger car is based on CAN bus and realizes multi-channel long OTA upgrade method |
| WO2020032193A1 (en) * | 2018-08-10 | 2020-02-13 | 株式会社デンソー | Vehicular electronic control system, program update notification control method, and program update notification control program |
| CN110888662A (en) * | 2019-08-09 | 2020-03-17 | 中国第一汽车股份有限公司 | Vehicle remote silent upgrading method and device, vehicle and storage medium |
-
2020
- 2020-04-02 CN CN202010255186.0A patent/CN113497819A/en active Pending
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20080027602A1 (en) * | 2006-05-30 | 2008-01-31 | Yeap Tet H | System and method for deterring theft of vehicles and other products having integral computer means |
| CN110171429A (en) * | 2018-02-19 | 2019-08-27 | 通用汽车环球科技运作有限责任公司 | The automatic transmission and installation of radio upgrade in vehicle |
| WO2020032193A1 (en) * | 2018-08-10 | 2020-02-13 | 株式会社デンソー | Vehicular electronic control system, program update notification control method, and program update notification control program |
| CN110134412A (en) * | 2019-03-25 | 2019-08-16 | 北京车和家信息技术有限公司 | Oftware updating method, device, vehicle and computer readable storage medium |
| CN110300406A (en) * | 2019-06-26 | 2019-10-01 | 上海擎感智能科技有限公司 | Vehicle online upgrading method and system, storage medium and car-mounted terminal based on OTA |
| CN110474961A (en) * | 2019-07-14 | 2019-11-19 | 江苏开沃汽车有限公司 | Pure electricity passenger car is based on CAN bus and realizes multi-channel long OTA upgrade method |
| CN110888662A (en) * | 2019-08-09 | 2020-03-17 | 中国第一汽车股份有限公司 | Vehicle remote silent upgrading method and device, vehicle and storage medium |
Non-Patent Citations (1)
| Title |
|---|
| 张成雨;杨朝阳;单志文;: "基于CAN总线的车载应用Bootloader设计", 湖北汽车工业学院学报, no. 04 * |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN113997887A (en) * | 2021-11-24 | 2022-02-01 | 一汽奔腾轿车有限公司 | Vehicle state checking system and method before OTA (over the air) upgrading |
| CN115220750A (en) * | 2021-11-25 | 2022-10-21 | 广州汽车集团股份有限公司 | Automobile OTA (over the air) upgrading method, front-row host and system |
| CN115220750B (en) * | 2021-11-25 | 2024-03-15 | 广州汽车集团股份有限公司 | Automobile OTA upgrading method, front-row host and system |
| WO2023103552A1 (en) * | 2021-12-06 | 2023-06-15 | 广州汽车集团股份有限公司 | Ecu remote upgrading method and system |
| CN114185297A (en) * | 2022-02-14 | 2022-03-15 | 蔚来汽车科技(安徽)有限公司 | Control method and device for vehicle-mounted software upgrading |
| CN115442233A (en) * | 2022-08-09 | 2022-12-06 | 北京罗克维尔斯科技有限公司 | ECU upgrading method and device, electronic equipment, storage medium and vehicle |
| CN116056045A (en) * | 2023-03-31 | 2023-05-02 | 江铃汽车股份有限公司 | AB point customer parking remote upgrading method and system |
| CN116707819A (en) * | 2023-06-01 | 2023-09-05 | 红石阳光（北京）科技股份有限公司 | Construction method of vehicle OTA upgrading security mechanism |
| CN116707819B (en) * | 2023-06-01 | 2024-03-15 | 红石阳光（北京）科技股份有限公司 | Construction method of vehicle OTA upgrading security mechanism |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN113497819A (en) | Remote upgrade security guarantee method and system and vehicle-mounted Tbox equipment | |
| CN111399884A (en) | Vehicle component upgrading method and device and electronic equipment | |
| US8452465B1 (en) | Systems and methods for ECU task reconfiguration | |
| US20230011677A1 (en) | Autonomous driving control system and control method and device | |
| US8655541B2 (en) | Vehicle upgrade system and method thereof | |
| CN109673009B (en) | Method and device for upgrading VCU software in air | |
| CN110347412B (en) | Electronic control unit firmware upgrade management method, device, equipment and storage medium | |
| CN111061499A (en) | ECU updating method and system based on file system | |
| CN111722860B (en) | OTA upgrading method and device based on finite state machine | |
| US9238465B1 (en) | Road emergency activation | |
| CN111782234A (en) | Vehicle-mounted software flashing method, control device, central processing unit and automobile | |
| CN108008964B (en) | Vehicle-mounted network system, management method of vehicle-mounted software and vehicle | |
| CN113626056A (en) | Vehicle remote upgrading method and device, electronic equipment, vehicle-mounted terminal and storage medium | |
| JP7291216B2 (en) | Prevent auto-leveling during battery change | |
| CN112817631A (en) | Vehicle-mounted controller upgrading method, device, equipment and storage medium | |
| WO2023241458A1 (en) | Software upgrade method and apparatus for vehicle-mounted controller, and device and storage medium | |
| CN113050960A (en) | OTA (over the air) upgrading method and device, vehicle-mounted terminal and storage medium | |
| CN112051826B (en) | Automobile fault detection method and system | |
| CN116257270A (en) | Vehicle, upgrading method and device of vehicle | |
| CN111505977B (en) | Function auxiliary debugging method, device, system and medium | |
| CN114363385A (en) | Method, system, equipment and storage medium for cloud updating of automobile end software | |
| CN112799370B (en) | Control device, and vehicle-mounted system software restoration method and system | |
| CN117148824B (en) | Fault recovery method and device, electronic equipment, storage medium and vehicle | |
| CN114030439B (en) | Configuration method and device of air bag controller and computer storage medium | |
| CN116909609B (en) | Software upgrading method and device of vehicle-mounted intelligent equipment and vehicle-mounted intelligent equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |