CN117389608A

CN117389608A - Vehicle OTA upgrading method and device

Info

Publication number: CN117389608A
Application number: CN202311345237.9A
Authority: CN
Inventors: 孙鹏飞; 李欢
Original assignee: Beijing Baidu Netcom Science and Technology Co Ltd
Current assignee: Beijing Baidu Netcom Science and Technology Co Ltd
Priority date: 2023-10-17
Filing date: 2023-10-17
Publication date: 2024-01-12

Abstract

The disclosure provides a vehicle OTA upgrading method and device, relates to the technical field of automobile electronics, in particular to the technical fields of automatic driving, new energy vehicles and the like, and can be applied to L3 and above automatic driving vehicles. One embodiment of the method comprises the following steps: receiving an over-the-air technology (OTA) upgrading request, wherein the OTA upgrading request comprises an Electronic Controller Unit (ECU) to be upgraded; and under the condition that the vehicle meets the OTA upgrading condition, waking up a system associated with the ECU to be upgraded so as to carry out OTA upgrading on the ECU to be upgraded. According to the embodiment, partition wakeup control is performed according to upgrading requirements, unnecessary energy consumption of the storage battery can be reduced, service life loss of the storage battery is reduced, and OTA upgrading is efficiently supported.

Description

Vehicle OTA upgrading method and device

Technical Field

The disclosure relates to the technical field of automobile electronics, in particular to the technical fields of unmanned and new energy automobiles and the like, and can be applied to automatic driving vehicles of L3 and above.

Background

With the development of the intellectualization and networking of new energy automobiles, the functions of OTA (Over The Air Technology, over-the-air technology) are increasingly widely applied in the field of new energy automobiles. In general, an OTA upgrade is required for a new energy automobile to implement functional iteration of the OTA. Especially unmanned operation vehicles, are influenced by operation properties, and the software upgrading of the vehicle can be efficiently supported through OTA. For the traditional OTA mode, the power supply is used in the same-up and same-down mode during automatic upgrading.

Disclosure of Invention

The embodiment of the disclosure provides a vehicle OTA upgrading method, device, equipment, storage medium and program product.

In a first aspect, an embodiment of the present disclosure provides a vehicle OTA upgrading method, including: receiving an over-the-air technology (OTA) upgrading request, wherein the OTA upgrading request comprises an Electronic Controller Unit (ECU) to be upgraded; and under the condition that the vehicle meets the OTA upgrading condition, waking up a system associated with the ECU to be upgraded so as to carry out OTA upgrading on the ECU to be upgraded.

In a second aspect, an embodiment of the present disclosure provides a vehicle OTA upgrading device, including: the receiving module is configured to receive an over-the-air technology (OTA) upgrade request, wherein the OTA upgrade request comprises an Electronic Controller Unit (ECU) to be upgraded; the first wake-up module is configured to wake up a system associated with the ECU to be upgraded under the condition that the vehicle meets the OTA upgrade condition so as to upgrade the ECU to be upgraded.

In a third aspect, an embodiment of the present disclosure proposes an electronic device, including: at least one processor; and a memory communicatively coupled to the at least one processor; wherein the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method as described in the first aspect.

In a fourth aspect, embodiments of the present disclosure provide a non-transitory computer-readable storage medium storing computer instructions for causing a computer to perform a method as described in the first aspect.

In a fifth aspect, embodiments of the present disclosure propose a computer program product comprising a computer program which, when executed by a processor, implements a method as described in the first aspect.

The vehicle OTA upgrading method provided by the embodiment of the disclosure can perform intelligent control on the power supply of the OTA upgrading scene. The partition wakeup control is carried out according to the upgrading requirement, so that unnecessary energy consumption of the storage battery can be reduced, the service life loss of the storage battery is reduced, and OTA upgrading is efficiently supported.

It should be understood that the description in this section is not intended to identify key or critical features of the embodiments of the disclosure, nor is it intended to be used to limit the scope of the disclosure. Other features of the present disclosure will become apparent from the following specification.

Drawings

Other features, objects and advantages of the present disclosure will become more apparent upon reading of the detailed description of non-limiting embodiments made with reference to the following drawings. The drawings are for a better understanding of the present solution and are not to be construed as limiting the present disclosure. Wherein:

FIG. 1 is a network topology diagram of a vehicular OTA upgrade;

FIG. 2 is a power distribution diagram of a vehicle OTA upgrade;

FIG. 3 is a flow chart of one embodiment of a vehicle OTA upgrade method according to the present disclosure;

fig. 4 is a flow chart of yet another embodiment of a vehicle OTA upgrade method according to the present disclosure;

fig. 5 is a schematic structural diagram of one embodiment of a vehicle OTA upgrade apparatus according to the present disclosure;

fig. 6 is a block diagram of an electronic device for implementing a vehicle OTA upgrade method of an embodiment of the present disclosure.

Detailed Description

Exemplary embodiments of the present disclosure are described below in conjunction with the accompanying drawings, which include various details of the embodiments of the present disclosure to facilitate understanding, and should be considered as merely exemplary. Accordingly, one of ordinary skill in the art will recognize that various changes and modifications of the embodiments described herein can be made without departing from the scope and spirit of the present disclosure. Also, descriptions of well-known functions and constructions are omitted in the following description for clarity and conciseness.

It should be noted that, without conflict, the embodiments of the present disclosure and features of the embodiments may be combined with each other. The present disclosure will be described in detail below with reference to the accompanying drawings in conjunction with embodiments.

Fig. 1 illustrates a network topology 100 for a vehicle OTA upgrade.

As shown in fig. 1, the network topology 100 may include a central processing unit 101, a Tbox (Telematics BOX) 102, an intelligent domain controller 103, a cabin domain controller 104, an EV bus 105, a Body bus 106, and a Brake bus.

The central processing unit 101 can arbitrate and manage the whole vehicle network, wake-up power supply and power supply of the ECU (Electronic Control Unit, electronic controller unit).

The Tbox 102 serves as a wireless gateway, and provides remote communication interfaces for the whole vehicle through functions of 4G remote wireless communication, GPS (Global Positioning System )) satellite positioning, acceleration sensing, CAN (Controller Area Network ) communication and the like, and provides services including driving data acquisition, driving track recording, vehicle fault monitoring, vehicle remote inquiry and control, driving behavior analysis, 4G wireless hot spot sharing and the like.

The intelligent driving domain controller 103 and the cabin domain controller 104 are connected to the central processing unit 101 through Ethernet (Ethernet). EV bus 105, body bus 106, and brain bus 107 are connected to central processing unit 101 via Canfd (CAN with Flexible Data rate, CAN with flexible rate). Wherein the ECU with strong correlation to the high-voltage system is on EV bus 105. The ECU's that are strongly related to the non-high voltage system are on the intelligent domain controller 103, the cabin domain controller 104, the Body bus 106, and the Brake bus 107.

Fig. 2 shows a power distribution diagram for a vehicle OTA upgrade.

The central processing unit includes a battery module 1 and a battery module 2, and can enable IGN (Ignition On) to the bus through the battery module 1 and the battery module 2.

The buses may include intelligent drive domains, cabin domains, EV buses, body buses, and Brake buses.

The controller A and the controller B belong to a Brake bus; the controller C and the controller D belong to Body bus; the vehicle controller, the battery management system, the electric drive system and the air conditioning system belong to EV bus.

The BMS (Battery Management System ) is connected to the main battery through DCDC-M (main direct current-direct current) and IBS-M (main battery sensor), and is connected to the redundant battery through DCDC-R (redundant direct current-direct current) and IBS-R (redundant battery sensor).

Fig. 3 illustrates a flow 300 of one embodiment of a vehicle OTA upgrade method according to the present disclosure. The vehicle OTA upgrading method comprises the following steps:

in step 301, an OTA upgrade request is received.

In this embodiment, the Tbox may send an OTA upgrade request to the central processing unit. The OTA upgrade request may include, among other things, the ECU to be upgraded.

In some embodiments, after receiving the OTA upgrade request, the central processing unit needs to first determine whether the vehicle satisfies the OTA upgrade condition. Under the condition that the OTA upgrading condition is met, continuing to execute the subsequent OTA upgrading step; and under the condition that the OTA upgrading condition is not met, ending OTA upgrading, thereby avoiding midway upgrading failure. Wherein, the OTA upgrade condition may include, but is not limited to, at least one of: the power battery power is not lower than a preset power battery power threshold (such as 20 Ah), the battery power is not lower than a second preset battery power threshold (such as 80 Ah), the vehicle speed is not higher than a preset vehicle speed threshold (such as 3 km/h), the gear is in a parking gear or neutral gear and the like.

Step 302, waking up a system associated with the ECU to be upgraded to perform OTA upgrade on the ECU to be upgraded when the vehicle meets the OTA upgrade condition.

In this embodiment, in the case that the vehicle satisfies the OTA upgrade condition, the central processing unit may wake up the system associated with the ECU to be upgraded, so as to perform OTA upgrade on the ECU to be upgraded. The awakened system is in a power-on state and can work normally. The system which is not awakened processes the dormant state, only consumes little electric quantity (milliamp level) and can support the standby state.

The system associated with the ECU to be upgraded may have some connection with the ECU to be upgraded, for example, a system to which the ECU to be upgraded belongs, a system on a bus to which the ECU to be upgraded belongs, a hard-wired system to which the ECU to be upgraded belongs, and the like.

Note that, when the ECU is awakened, a message needs to be sent through a bus to wake up, so that the whole system associated with the ECU is awakened. Other systems of the vehicle are not awakened any more, so that partition awakening control is realized according to upgrading requirements.

Fig. 4 illustrates a flow 400 of yet another embodiment of a vehicle OTA upgrade method according to the present disclosure. The vehicle OTA upgrading method comprises the following steps:

in step 401, an OTA upgrade request is received.

In some embodiments, after receiving the OTA upgrade request, the central processing unit needs to first determine whether the whole vehicle meets the OTA upgrade condition. Under the condition that the OTA upgrading condition is met, continuing to execute the subsequent OTA upgrading step; and ending the OTA upgrade under the condition that the OTA upgrade condition is not satisfied. Wherein, the OTA upgrade condition may include, but is not limited to, at least one of: the power battery power is not lower than a preset power battery power threshold (such as 20 Ah), the battery power is not lower than a second preset battery power threshold (such as 80 Ah), the vehicle speed is not higher than a preset vehicle speed threshold (such as 3 km/h), the gear is in a parking gear or neutral gear and the like.

Step 402, determines whether the ECU to be upgraded belongs to a system on an electric bus.

In this embodiment, the central processing unit may determine whether the ECU to be upgraded belongs to a system on the electric bus. If the to-be-upgraded ECU does not belong to the system on the electric bus, the to-be-upgraded ECU is not the ECU with strong correlation to the high-voltage system, high-voltage upgrading can be performed, and step 403 is executed; if the ECU to be upgraded belongs to the system on the electric bus, indicating that the ECU to be upgraded is a highly relevant ECU for the high voltage system, a low voltage boost stage may be performed, and step 410 is performed.

Step 403, sending an upper high voltage instruction to the whole vehicle controller.

In this embodiment, for a high voltage boost scenario, the central processor may send an upper high voltage command to the VCU (Vehicle control unit, vehicle controller). The VCU can pull up high voltage, and convert the high voltage of about 300V to 14V power by DCDC to power the vehicle.

Step 404, waking up the system on the bus to which the ECU to be upgraded belongs.

In this embodiment, the central processing unit may wake up the system on the bus to which the ECU to be upgraded belongs. The system on the bus to which the ECU to be upgraded belongs is enabled IGN by the power supply module 1 and the power supply module 2.

The system partition on each bus can be awakened through the power module of the central processing unit, so that different systems are isolated. The central processing unit recognizes the working mode and the requirement of the ECU to be upgraded, and independently controls the system IGN on each bus through the power module 1 and the power module 2, so that only the system on the bus with the requirement and the ECU with the requirement are awakened. When the bus fails, the power supply of the system to which the failure point belongs is cut off. It should be noted that, the switch of the power module may be extended according to actual requirements, for example, by controlling each switch on the power module, it may be possible to separately supply power to each ECU.

And step 405, performing high-voltage upgrade on the ECU to be upgraded.

In this embodiment, the central processing unit may perform high-voltage upgrade of the ECU to be upgraded. Among them, the upgrade performed in the case where the VCU pulls up the high voltage is called a high voltage upgrade.

In the high-pressure upgrading process, the central processing unit can also acquire an in-vehicle image acquired by the in-vehicle camera, and determine whether a person exists in the vehicle based on the in-vehicle image. If someone is in the vehicle, the air conditioning system can be awakened, so that user experience is improved.

Step 406, it is determined whether the high voltage boost stage was successful.

In this embodiment, the central processing unit may determine whether the high voltage boost stage was successful. If the high voltage boosting is successful, step 407 is performed; if the high voltage boost fails, step 408 is performed.

Generally, after the ECU is updated, the ECU update flag bit is updated according to the update condition. Thus, the central processing unit can determine whether the upgrade was successful based on the ECU upgrade flag bit.

Here, a maximum upgrade time (e.g. 25 minutes) is preset, and if the upgrade is completed within the maximum upgrade time, the upgrade is successful, and the ECU upgrade flag bit is modified to be successful; if the maximum upgrade time is exceeded and the upgrade is not completed, indicating that the upgrade fails, the ECU upgrade flag bit is modified to fail. Wherein the maximum upgrade time may be used to determine whether the upgrade failed. If the maximum upgrading time is exceeded and the upgrading is not completed, the upgrading is directly determined to be failed, and the upgrading is restarted, so that the situation that the automatic end cannot be realized when the upgrading is always in a certain round is prevented.

Step 407, reporting the successful message of high voltage upgrade, and putting the vehicle under high voltage to make the vehicle enter a sleep state.

In this embodiment, if the high-voltage upgrade is successful, the cpu may report a high-voltage upgrade success message and put the vehicle under high voltage so that the vehicle enters a sleep state.

And under the condition that the high-voltage upgrading is successful, stopping the high-voltage upgrading event, reporting a high-voltage upgrading success message to the cloud platform, and enabling the whole vehicle to go to high-voltage dormancy and be in a standby state.

Step 408, determining whether the number of high voltage upgrades reaches a preset upgrade number threshold.

In this embodiment, if the high voltage step-up is unsuccessful, the cpu may determine whether the number of high voltage step-up reaches a preset step-up threshold (e.g. 5). If the preset upgrade number threshold is not reached, the process returns to step 405, and if the preset upgrade number threshold is reached, step 409 is performed.

Typically, the high pressure upgrade is supported up to 5 times with a maximum upgrade time of no more than 25 minutes each.

Step 409, reporting the high voltage upgrade failure message, and putting the vehicle under high voltage to make the vehicle enter a sleep state.

In this embodiment, if the number of high-voltage upgrade steps reaches the preset upgrade step number threshold, and still the high-voltage upgrade steps fail, the central processing unit may report a high-voltage upgrade step failure message and put the vehicle under high voltage, so that the vehicle enters a sleep state.

And reporting a high-voltage step-up failure message to a cloud platform or a fault system under the condition of high-voltage step-up failure, and enabling the whole vehicle to go to high-voltage sleep and be in a standby state.

Step 410, a command for prohibiting high voltage from being applied is sent to the whole vehicle controller.

In this embodiment, for low voltage boost scenarios, the central processor may send a disable high voltage command to the VCU. The VCU is disabled from pulling up the high voltage power. At this time, the power is supplied to the vehicle by the battery. Wherein the battery can supply, for example, 12.8V.

Step 411, wake up the system corresponding to the ECU to be upgraded.

In this embodiment, the central processing unit may wake up the system corresponding to the ECU to be upgraded.

Typically, the central processing unit may determine whether the ECU to be upgraded belongs to a high pressure related system on the electric bus. If the to-be-upgraded ECU belongs to a non-high-voltage related system (such as an air conditioning system), the central processing unit can wake up the system to which the to-be-upgraded ECU belongs (such as the power module 2 only enables the air conditioning system IGN, and other ECUs maintain a dormant state); if the ECU to be upgraded belongs to a high-voltage related system on the electric bus, the central processing unit may wake up the system connected to the hard wire to which the ECU to be upgraded belongs (e.g. wake up the VCU, and the VCU wakes up the corresponding system or ECU according to the hard wire IGN to which the ECU to be upgraded belongs, and other ECUs maintain a sleep state). Wherein the hard wire is a wire connected to the ECU. Because the high-voltage related system needs more consumed electric quantity, only the system directly connected with the ECU through a hard wire is awakened, so that the electric quantity consumption is reduced as much as possible.

In this step, since the bus to which the ECU to be upgraded belongs is strongly related to the high-voltage system, the battery is used to support power supply. Through this step, IGN wake-up isolation can be performed for the ECU subsystem on the bus. Only the system or ECU with the need is IGN awakened.

Step 412, performing low-voltage upgrade on the ECU to be upgraded.

In this embodiment, the central processing unit may perform low-voltage boosting on the ECU to be upgraded. Among them, the upgrade performed with the battery power is called a low voltage upgrade.

Step 413, it is determined whether the low voltage boost stage was successful.

In this embodiment, the central processing unit may determine whether the low voltage boost stage was successful. If the low voltage boosting is successful, go to step 414; if the high voltage boost fails, step 415 is performed.

Step 414, report the low voltage upgrade success message.

In this embodiment, if the low-voltage upgrade is successful, the cpu may report a low-voltage upgrade success message.

For the case of successful low voltage upgrade, the low voltage upgrade event stops, reporting a low voltage upgrade success message to the cloud platform.

In step 415, it is determined whether the low voltage upgrade count has reached a preset upgrade count threshold.

In this embodiment, if the low voltage step-up is unsuccessful, the cpu may determine whether the number of low voltage step-up reaches a preset step-up threshold (e.g. 5). If the preset upgrade number threshold is not reached, the process returns to step 412, and if the preset upgrade number threshold is reached, step 416 is performed.

Typically, the low pressure boost stage is supported up to 5 times with a maximum upgrade time of no more than 25 minutes each.

In some embodiments, the central processing unit further needs to determine whether the remaining battery level is below a first preset battery level threshold. If the residual electric quantity of the storage battery is lower than the first preset storage battery electric quantity threshold value, the low-voltage upgrading cannot be supported, and a low-voltage upgrading failure message is reported, so that upgrading is finished, and midway upgrading failure is avoided. The first preset storage battery electric quantity threshold value is smaller than the second preset storage battery electric quantity threshold value.

Step 416, reporting a low voltage step-up failure message.

In this embodiment, if the low-voltage upgrade frequency reaches the preset upgrade frequency threshold, the low-voltage upgrade still fails, and the central processing unit may report a low-voltage upgrade failure message.

And reporting a low-voltage upgrade failure message to a cloud platform or a fault system for the case of low-voltage upgrade failure.

As can be seen from fig. 4, compared with the embodiment corresponding to fig. 3, in the vehicle OTA upgrading method in this embodiment, the central computing unit divides the upgrade power supply modes by the ECU attribute to be upgraded: high-voltage boost mode and low-voltage boost mode. In this way, most of the ECU of the whole vehicle is upgraded under the condition of high voltage, so that the loss of the storage battery is reduced. And the upgrade method has the advantages that the upgrade method supports multiple high-voltage upgrade and low-voltage upgrade, sets the upgrade frequency threshold, improves the upgrade success rate, and can avoid entering a dead cycle.

And the ECU is subjected to IGN or power supply isolation through the power supply module, and the ECU with the requirements only wakes up and supplies power is subjected to subsystem power supply control (judging whether the system is an air conditioning system) and hierarchical control (the whole vehicle controller independently controls the battery management system and the driving system to wake up), so that the energy consumption is reduced, the OTA upgrading efficiency is improved, and the service life loss of a storage battery is reduced. The ECU upgrading power supply condition is divided, so that the service life loss of the storage battery caused by the use of the electric quantity of the storage battery is avoided.

IGN power isolation is carried out on each system controller, so that OTA upgrading failure of other ECUs caused by single faults is avoided.

Through the power-division mode upgrading, the hierarchical control, the power isolation and the low battery processing of the storage battery, the OTA upgrading efficiency can be provided, the unnecessary energy consumption of the OTA mode is reduced, and the service life of the storage battery is reduced.

With further reference to fig. 5, as an implementation of the method shown in the foregoing figures, the present disclosure provides an embodiment of a vehicle OTA upgrade apparatus, where the apparatus embodiment corresponds to the method embodiment shown in fig. 3, and the apparatus may be specifically applied to various electronic devices.

As shown in fig. 5, the vehicle OTA upgrading device 500 of the present embodiment may include: a receiving module 501, a first wake-up module 502 and an upgrade module 503. Wherein, the receiving module 501 is configured to receive an over-the-air technology OTA upgrade request, where the OTA upgrade request includes an electronic controller unit ECU to be upgraded; the first wake module 502 is configured to wake up a system associated with the ECU to be upgraded to perform OTA upgrade on the ECU to be upgraded if the vehicle meets the OTA upgrade condition.

In this embodiment, in the vehicle OTA upgrading device 500: the specific processing of the receiving module 501 and the first wake-up module 502 and the technical effects thereof may refer to the relevant descriptions of steps 301 to 302 in the corresponding embodiment of fig. 3, and are not described herein again.

In some alternative implementations of the present embodiment, the first wake-up module 502 is further configured to: if the to-be-upgraded ECU does not belong to the system on the electric bus, sending an upper high-voltage instruction to the whole vehicle controller, and waking up the system on the bus to which the to-be-upgraded ECU belongs to so as to upgrade the to-be-upgraded ECU under high voltage.

In some alternative implementations of the present embodiment, the first wake-up module 502 is further configured to: if the to-be-upgraded ECU belongs to the system on the electric bus, sending a command for prohibiting high voltage from being up to the whole vehicle controller, and waking up the system corresponding to the to-be-upgraded ECU so as to perform low voltage upgrading on the to-be-upgraded ECU.

In some alternative implementations of the present embodiment, the first wake-up module 502 is further configured to: if the ECU to be upgraded belongs to a non-high-voltage related system on the electric bus, waking up a system to which the ECU to be upgraded belongs; if the ECU to be upgraded belongs to a high-voltage related system on the electric bus, waking up a system which is connected with a hard wire and to which the ECU to be upgraded belongs.

In some optional implementations of the present embodiment, the vehicle OTA upgrading device 500 further includes: the first reporting module is configured to report a high-voltage upgrade success message and put the vehicle under high voltage if the high-voltage upgrade is successful, so that the vehicle enters a dormant state; and the second reporting module is configured to re-upgrade the ECU to be upgraded until the high-voltage upgrade is successful if the high-voltage upgrade is unsuccessful, report the high-voltage upgrade success message and put the vehicle under high voltage so as to enable the vehicle to enter a dormant state, or report the high-voltage upgrade failure message and put the vehicle under high voltage when the number of high-voltage upgrade reaches a preset upgrade number threshold so as to enable the vehicle to enter the dormant state.

In some optional implementations of the present embodiment, the vehicle OTA upgrading device 500 further includes: the third reporting module is configured to report the low-voltage stage-up success message if the low-voltage stage-up is successful; and the fourth reporting module is configured to re-perform the low-voltage upgrading on the ECU to be upgraded if the low-voltage upgrading is unsuccessful until the low-voltage upgrading is successful, report the low-voltage upgrading success message or report the low-voltage upgrading failure message if the low-voltage upgrading frequency reaches a preset upgrading frequency threshold value.

In some optional implementations of the present embodiment, the vehicle OTA upgrading device 500 further includes: and the fifth reporting module is configured to report a low-voltage upgrading failure message if the residual electric quantity of the storage battery is lower than a first preset storage battery electric quantity threshold value in the low-voltage upgrading process.

In some optional implementations of the present embodiment, the vehicle OTA upgrading device 500 further includes: the acquisition module is configured to acquire an in-vehicle image in the high-pressure upgrading process; and a second wake-up module configured to wake up the air conditioning system if it is determined that a person is in the vehicle based on the in-vehicle image.

In some optional implementations of this embodiment, the OTA upgrade conditions include at least one of: the power battery power is not lower than a preset power battery power threshold, the battery power is not lower than a second preset battery power threshold, the vehicle speed is not higher than a preset vehicle speed threshold, the gear is in a parking gear or a neutral gear, and the second preset battery power threshold is higher than the first preset battery power threshold.

In the technical scheme of the disclosure, the acquisition, storage, application and the like of the related user personal information all conform to the regulations of related laws and regulations, and the public sequence is not violated.

According to embodiments of the present disclosure, the present disclosure also provides an electronic device, a readable storage medium and a computer program product.

Fig. 6 illustrates a schematic block diagram of an example electronic device 600 that may be used to implement embodiments of the present disclosure. Electronic devices are intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular telephones, smartphones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the disclosure described and/or claimed herein.

As shown in fig. 6, the apparatus 600 includes a computing unit 601 that can perform various appropriate actions and processes according to a computer program stored in a Read Only Memory (ROM) 602 or a computer program loaded from a storage unit 608 into a Random Access Memory (RAM) 603. In the RAM 603, various programs and data required for the operation of the device 600 may also be stored. The computing unit 601, ROM 602, and RAM 603 are connected to each other by a bus 604. An input/output (I/O) interface 605 is also connected to bus 604.

Various components in the device 600 are connected to the I/O interface 605, including: an input unit 606 such as a keyboard, mouse, etc.; an output unit 607 such as various types of displays, speakers, and the like; a storage unit 608, such as a magnetic disk, optical disk, or the like; and a communication unit 609 such as a network card, modem, wireless communication transceiver, etc. The communication unit 609 allows the device 600 to exchange information/data with other devices via a computer network, such as the internet, and/or various telecommunication networks.

The computing unit 601 may be a variety of general and/or special purpose processing components having processing and computing capabilities. Some examples of computing unit 601 include, but are not limited to, a Central Processing Unit (CPU), a Graphics Processing Unit (GPU), various specialized Artificial Intelligence (AI) computing chips, various computing units running machine learning model algorithms, a Digital Signal Processor (DSP), and any suitable processor, controller, microcontroller, etc. The computing unit 601 performs the various methods and processes described above, such as the vehicle OTA upgrade method. For example, in some embodiments, the vehicle OTA upgrade method may be implemented as a computer software program tangibly embodied on a machine-readable medium, such as storage unit 608. In some embodiments, part or all of the computer program may be loaded and/or installed onto the device 600 via the ROM 602 and/or the communication unit 609. When the computer program is loaded into RAM 603 and executed by computing unit 601, one or more steps of the vehicle OTA upgrade method described above may be performed. Alternatively, in other embodiments, the computing unit 601 may be configured to perform the vehicle OTA upgrade method by any other suitable means (e.g., by means of firmware).

Various implementations of the systems and techniques described here above may be implemented in digital electronic circuitry, integrated circuit systems, field Programmable Gate Arrays (FPGAs), application Specific Integrated Circuits (ASICs), application Specific Standard Products (ASSPs), systems On Chip (SOCs), load programmable logic devices (CPLDs), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs, the one or more computer programs may be executed and/or interpreted on a programmable system including at least one programmable processor, which may be a special purpose or general-purpose programmable processor, that may receive data and instructions from, and transmit data and instructions to, a storage system, at least one input device, and at least one output device.

Program code for carrying out methods of the present disclosure may be written in any combination of one or more programming languages. These program code may be provided to a processor or controller of a general purpose computer, special purpose computer, or other programmable data processing apparatus such that the program code, when executed by the processor or controller, causes the functions/operations specified in the flowchart and/or block diagram to be implemented. The program code may execute entirely on the machine, partly on the machine, as a stand-alone software package, partly on the machine and partly on a remote machine or entirely on the remote machine or server.

In the context of this disclosure, a machine-readable medium may be a tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. The machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of a machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

To provide for interaction with a user, the systems and techniques described here can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and pointing device (e.g., a mouse or trackball) by which a user can provide input to the computer. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic input, speech input, or tactile input.

The systems and techniques described here can be implemented in a computing system that includes a background component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such background, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), and the internet.

The computer system may include a client and a server. The client and server are typically remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other. The server may be a cloud server, a server of a distributed system, or a server incorporating a blockchain.

It should be appreciated that various forms of the flows shown above may be used to reorder, add, or delete steps. For example, the steps recited in the present disclosure may be performed in parallel, sequentially, or in a different order, provided that the desired results of the technical solutions provided by the present disclosure are achieved, and are not limited herein.

The above detailed description should not be taken as limiting the scope of the present disclosure. It will be apparent to those skilled in the art that various modifications, combinations, sub-combinations and alternatives are possible, depending on design requirements and other factors. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present disclosure are intended to be included within the scope of the present disclosure.

Claims

1. A vehicle OTA upgrade method comprising:

receiving an over-the-air technology (OTA) upgrading request, wherein the OTA upgrading request comprises an Electronic Controller Unit (ECU) to be upgraded;

and under the condition that the vehicle meets the OTA upgrading condition, waking up a system associated with the ECU to be upgraded so as to carry out OTA upgrading on the ECU to be upgraded.

2. The method of claim 1, wherein the waking up the system associated with the ECU to be upgraded to OTA upgrade the ECU to be upgraded comprises:

if the to-be-upgraded ECU does not belong to the system on the electric bus, sending an upper high-voltage instruction to the whole vehicle controller, and waking up the system on the bus to which the to-be-upgraded ECU belongs to, so as to

And carrying out high-voltage upgrading on the ECU to be upgraded.

3. The method of claim 1 or 2, wherein the waking up the system associated with the ECU to be upgraded to OTA upgrade the ECU to be upgraded comprises:

if the to-be-upgraded ECU belongs to the system on the electric bus, sending a command for prohibiting high voltage from being up to the whole vehicle controller, and waking up the system corresponding to the to-be-upgraded ECU to

And carrying out low-voltage upgrading on the ECU to be upgraded.

4. The method of claim 3, wherein the waking up the system corresponding to the ECU to be upgraded comprises:

if the ECU to be upgraded belongs to a non-high-voltage related system on the electric bus, waking up the system to which the ECU to be upgraded belongs;

and if the ECU to be upgraded belongs to a high-voltage related system on the electric bus, waking up a system which is connected with a hard wire and to which the ECU to be upgraded belongs.

5. The method of claim 2, wherein after the high-pressure upgrade of the ECU to be upgraded, further comprising:

if the high-voltage upgrading is successful, reporting a high-voltage upgrading success message, and pressing the vehicle to high voltage so as to enable the vehicle to enter a dormant state;

and if the high-voltage upgrade is unsuccessful, carrying out high-voltage upgrade on the ECU to be upgraded again until the high-voltage upgrade is successful, reporting a high-voltage upgrade success message, and carrying out high-voltage upgrade on the vehicle so as to enable the vehicle to enter a dormant state, or reporting a high-voltage upgrade failure message when the number of times of the high-voltage upgrade reaches a preset upgrade number threshold, and carrying out high-voltage upgrade on the vehicle so as to enable the vehicle to enter the dormant state.

6. The method of claim 3, wherein after said low-pressure upgrading said ECU to be upgraded, further comprising:

if the low-voltage stage-up is successful, reporting a low-voltage stage-up success message;

and if the low-voltage upgrading is unsuccessful, carrying out low-voltage upgrading on the ECU to be upgraded again until the low-voltage upgrading is successful, reporting a low-voltage upgrading success message, or reporting a low-voltage upgrading failure message when the low-voltage upgrading frequency reaches a preset upgrading frequency threshold value.

7. The method of claim 6, wherein the method further comprises:

and in the low-voltage stage-lifting process, if the residual electric quantity of the storage battery is lower than a first preset storage battery electric quantity threshold value, reporting a low-voltage stage-lifting failure message.

8. The method of claim 2, wherein the method further comprises:

in the high-pressure upgrading process, acquiring an in-vehicle image;

and if the person in the vehicle is determined based on the image in the vehicle, waking up the air conditioning system.

9. The method of any of claims 1-8, wherein the OTA upgrade condition comprises at least one of: the power battery power is not lower than a preset power battery power threshold, the battery power is not lower than a second preset battery power threshold, the vehicle speed is not greater than a preset vehicle speed threshold, the gear is in a parking gear or a neutral gear, and the second preset battery power threshold is greater than the first preset battery power threshold.

10. A vehicle OTA upgrade apparatus comprising:

the receiving module is configured to receive an over-the-air technology (OTA) upgrading request, wherein the OTA upgrading request comprises an Electronic Controller Unit (ECU) to be upgraded;

and the first wake-up module is configured to wake up a system associated with the ECU to be upgraded under the condition that the vehicle meets the OTA upgrade condition so as to carry out OTA upgrade on the ECU to be upgraded.

11. The apparatus of claim 10, wherein the first wake-up module is further configured to:

And carrying out high-voltage upgrading on the ECU to be upgraded.

12. The apparatus of claim 10 or 11, wherein the first wake-up module is further configured to:

if the to-be-upgraded ECU belongs to the system on the electric bus, sending a command for prohibiting high voltage from being applied to the whole vehicle controller, and

waking up a system corresponding to the ECU to be upgraded to

And carrying out low-voltage upgrading on the ECU to be upgraded.

13. The apparatus of claim 12, wherein the first wake-up module is further configured to:

14. The apparatus of claim 11, wherein the apparatus further comprises:

the first reporting module is configured to report a high-voltage upgrade success message if the high-voltage upgrade is successful, and to put the vehicle under high voltage so as to enable the vehicle to enter a dormant state;

and the second reporting module is configured to re-upgrade the ECU to be upgraded until the high-voltage upgrade is successful if the high-voltage upgrade is unsuccessful, report a high-voltage upgrade success message and put the vehicle under high voltage so as to enable the vehicle to enter a sleep state, or report a high-voltage upgrade failure message and put the vehicle under high voltage when the number of high-voltage upgrade reaches a preset upgrade number threshold so as to enable the vehicle to enter the sleep state.

15. The apparatus of claim 12, wherein the apparatus further comprises:

the third reporting module is configured to report the low-voltage stage-up success message if the low-voltage stage-up is successful;

and the fourth reporting module is configured to re-perform the low-voltage upgrading on the ECU to be upgraded if the low-voltage upgrading is unsuccessful until the low-voltage upgrading is successful, report the low-voltage upgrading success message, or report the low-voltage upgrading failure message when the low-voltage upgrading frequency reaches a preset upgrading frequency threshold value.

16. The apparatus of claim 15, wherein the apparatus further comprises:

and the fifth reporting module is configured to report a low-voltage upgrading failure message if the residual electric quantity of the storage battery is lower than a first preset storage battery electric quantity threshold value in the low-voltage upgrading process.

17. The apparatus of claim 11, wherein the apparatus further comprises:

the acquisition module is configured to acquire an in-vehicle image in the high-pressure upgrading process;

and the second awakening module is configured to awaken the air conditioning system if the person in the vehicle is determined based on the image in the vehicle.

18. The apparatus of any of claims 10-17, wherein the OTA upgrade condition comprises at least one of: the power battery power is not lower than a preset power battery power threshold, the battery power is not lower than a second preset battery power threshold, the vehicle speed is not greater than a preset vehicle speed threshold, the gear is in a parking gear or a neutral gear, and the second preset battery power threshold is greater than the first preset battery power threshold.

19. An electronic device, comprising:

at least one processor; and

a memory communicatively coupled to the at least one processor; wherein,

the memory stores instructions executable by the at least one processor to enable the at least one processor to perform the method of any one of claims 1-9.

20. A non-transitory computer readable storage medium storing computer instructions for causing the computer to perform the method of any one of claims 1-9.

21. A computer program product comprising a computer program which, when executed by a processor, implements the method according to any of claims 1-9.