WO2023103552A1 - 一种ecu远程升级方法与系统 - Google Patents

一种ecu远程升级方法与系统 Download PDF

Info

Publication number
WO2023103552A1
WO2023103552A1 PCT/CN2022/122605 CN2022122605W WO2023103552A1 WO 2023103552 A1 WO2023103552 A1 WO 2023103552A1 CN 2022122605 W CN2022122605 W CN 2022122605W WO 2023103552 A1 WO2023103552 A1 WO 2023103552A1
Authority
WO
WIPO (PCT)
Prior art keywords
upgrade
vehicle
power supply
supply mode
ecu
Prior art date
Application number
PCT/CN2022/122605
Other languages
English (en)
French (fr)
Inventor
林雨婷
杨毅
张俊磊
付梦佳
尹文杰
Original Assignee
广州汽车集团股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 广州汽车集团股份有限公司 filed Critical 广州汽车集团股份有限公司
Publication of WO2023103552A1 publication Critical patent/WO2023103552A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates

Definitions

  • the invention relates to the technical field of ECU upgrading, in particular to an ECU remote upgrading method and system.
  • OTA provides an online upgrade method. Like a mobile phone system upgrade, you can click upgrade on the interface to complete the vehicle system upgrade. Compared with the traditional offline 4S shop after-sales software upgrade method, the OTA remote upgrade method can realize software Rapid iteration, upgrades, cost savings, and improved user experience can largely avoid the risk of vehicle recalls due to software, but the role of OTA remote upgrades is ordinary car owners rather than professional after-sales engineers, so OTA remote upgrades are reliable. Safety and security need to be guaranteed in order to guarantee user experience.
  • the first power supply mode is determined by the power supply.
  • the battery is powered by the positive pole.
  • the ECU function is only enabled when the vehicle is in the ON gear, and in the case of the vehicle’s OFF gear, the ECU cannot activate the function;
  • the second power mode is powered by both the positive pole of the power battery and the normal power of the battery. , the functions of the ECU in the second power supply mode are kept enabled in both ON and OFF gears of the vehicle.
  • the OTA remote upgrade process requires the upgraded ECU and related nodes to maintain power supply.
  • the existing OTA remote upgrade technology uses the vehicle-side control technology and the vehicle-mounted interactive form to perform OTA remote upgrades in OFF gear. Before the official upgrade, strict upgrade conditions are checked. Make sure that the vehicle is powered off in OFF gear, and the upgrade process is maintained in the vehicle OFF gear state, and the OTA upgrade is completed with the support of the vehicle battery power supply. The user only needs to remove the electric lock and leave the car under the interactive prompt of the car and machine, and complete the preparations before the upgrade, and then leave the car and wait until the upgrade is completed.
  • the above-mentioned existing OTA remote upgrade technology only supports the ECU of the above-mentioned second power mode to upgrade in OFF mode, while the ECU of the above-mentioned first power mode cannot be remotely upgraded through OTA at present, and needs to be recalled offline through a 4S store. Offline software updates are performed with the support of after-sales engineers and professional equipment.
  • the purpose of the present invention is to propose a method and system for remote ECU upgrade to solve the technical problem that the ECU in the first power supply mode cannot be remotely upgraded through OTA, and to broaden the scope of application of OTA remote upgrade technology in ECU upgrade.
  • an embodiment of the present invention proposes a method for remotely upgrading an ECU, comprising the following steps:
  • the power supply mode includes the first power supply mode and the second power supply mode
  • the first power supply mode is that the power battery supplies power to the ECU, and the ECU is only activated when the vehicle is ON
  • the second power supply mode is that both the power battery and the storage battery can supply power to the ECU, and the ECU is in the vehicle ON It can be enabled in both gear and OFF gear
  • the power supply mode of the target ECU to be upgraded is the first power supply mode, and the current gear position of the vehicle is OFF, a power-on request is sent to the vehicle to enable the vehicle gear to be ON. If the vehicle gear is ON, The upgrade process of the target ECU will be started if the ON file is successful, and the upgrade process of the target ECU will be exited if the ON file of the vehicle fails;
  • the power supply mode of the target ECU to be upgraded is the second power supply mode, and the current gear of the vehicle is OFF, start the upgrade process of the target ECU;
  • the method also includes the steps of:
  • the power supply mode of the target ECU to be upgraded is the first power supply mode
  • a charging signal is sent to the vehicle controller, so that when the target ECU upgrade process is executed, the vehicle The controller maintains the charge on the battery.
  • the method also includes the steps of:
  • the target ECU performs software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; if the software rollback fails, the upgrade fails, and the relevant functions of the target ECU become invalid;
  • the upgrade result includes: the upgrade is successful, or the upgrade fails and the software rollback succeeds, or the upgrade fails And the software rollback fails.
  • the method also includes the steps of:
  • the power supply mode of the target ECU to be upgraded is the first power supply mode
  • the current gear position of the vehicle controller is obtained, and if the current gear position of the vehicle controller is ON, then Sending a power-off request to the vehicle controller, so that the vehicle controller is powered off.
  • the vehicle state information includes: ACC gear position, car lock and defense state, vehicle speed, battery power, battery voltage and vehicle ignition state;
  • the preset upgrade pre-conditions include: the ACC gear is in the OFF gear, the lock and defense state is Yes, the vehicle speed is 0, the battery power is in the preset power range, the battery voltage is in the preset voltage range, and the vehicle is in the ignition state for flameout.
  • the method also includes the steps of:
  • Embodiments of the present invention also propose a remote ECU upgrade system, including:
  • An upgrade trigger unit configured to acquire vehicle state information in response to receiving an upgrade instruction input by a user, and determine whether the vehicle state information satisfies a preset upgrade pre-condition
  • An identification unit configured to identify the power supply mode of the target ECU to be upgraded if the vehicle state information satisfies the preset upgrade pre-conditions, and identify the current gear position of the vehicle; wherein the power supply mode includes the first power supply mode and the second power supply mode, the first power supply mode is that the power battery supplies power to the ECU, and the ECU is only enabled in the ON gear of the vehicle; the second power supply mode is that both the power battery and the storage battery can supply power to the ECU, and ECU can be activated in both ON and OFF gears of the vehicle;
  • the upgrade unit is used to start the upgrade process of the target ECU when the power supply mode of the target ECU to be upgraded is the first power supply mode and the current gear position of the vehicle is ON; when the power supply mode of the target ECU to be upgraded is the first Power mode, and when the current gear of the vehicle is OFF, a power-on request is sent to the vehicle to enable the vehicle to be in the ON gear. If the vehicle’s gear is successfully turned ON, the upgrade process of the target ECU will be started.
  • the system also includes:
  • the charging control unit is configured to send a charging signal to the vehicle controller before starting the upgrading process of the target ECU when the power supply mode of the target ECU to be upgraded is the first power supply mode, so that when the target ECU upgrading process is executed, , the vehicle controller keeps charging the battery.
  • the upgrading unit is also used for:
  • the target ECU performs software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; if the software rollback fails, the upgrade fails, and the relevant functions of the target ECU become invalid;
  • the upgrade result includes: the upgrade is successful, or the upgrade fails and the software rollback succeeds, or the upgrade fails And the software rollback fails.
  • the upgrading unit is also used for:
  • the power supply mode of the target ECU to be upgraded is the first power supply mode
  • the current gear position of the vehicle controller is obtained, and if the current gear position of the vehicle controller is ON, then Sending a power-off request to the vehicle controller, so that the vehicle controller is powered off.
  • Aiming at the OTA remote upgrade problem of the ECU in the first power mode check the strict upgrade conditions to ensure the appropriate upgrade scenario and vehicle environment, and automatically switch the upgrade environment of ECUs in different power modes by actively judging the ECU power mode. Configuration, support compatibility with ECUs in multiple power modes. Under the same environmental conditions of the whole vehicle, ECU remote refresh can be completed, and based on the same set of upgrade interactive control process, the remote upgrade process of self-adaptive ECU power mode without user perception , to solve the above-mentioned technical problem that the ECU of the first power supply mode cannot be remotely upgraded through OTA, and to broaden the scope of application of OTA remote upgrade technology in ECU upgrade.
  • FIG. 1 is a schematic flowchart of a method for remotely upgrading an ECU in an embodiment of the present invention.
  • Fig. 2 is a schematic frame diagram of an ECU remote upgrade system in an embodiment of the present invention.
  • an embodiment of the present invention proposes a method for remote upgrading of an ECU, which is a solution for OTA remote upgrading of ECUs compatible with and supporting different power supply modes.
  • the method flow of this embodiment can be executed by T-box,
  • the method of the present embodiment comprises the steps:
  • Step S10 in response to receiving an upgrade command input by the user, obtain vehicle status information, and determine whether the vehicle status information satisfies a preset upgrade pre-condition;
  • the user operates the OTA remote upgrade of the ECU on the vehicle-machine interaction interface, and clicks to enter the upgrade process of the target ECU according to the upgrade guide. upgrade process;
  • Step S20 if the vehicle state information satisfies the preset upgrade pre-conditions, identify the power supply mode of the target ECU to be upgraded, and identify the current gear position of the vehicle; wherein, the power supply mode includes the first power supply mode and The second power supply mode, the first power supply mode is that the power battery supplies power to the ECU, and the ECU is only enabled in the ON gear of the vehicle; the second power supply mode is that both the power battery and the storage battery can supply power to the ECU, and the ECU is on It can be activated in both ON and OFF gears of the whole vehicle;
  • the upgrade pre-condition check is to check the status of the upgrade condition signal. If the upgrade condition check is met, the upgrade process will continue. If not, the upgrade process will be exited.
  • the upgrade check conditions can be flexibly configured according to the ECU upgrade requirements; for example, The vehicle status information meets the preset preconditions for the upgrade, please refer to Table 1 below;
  • Step S301 when the power supply mode of the target ECU to be upgraded is the first power supply mode, and the current gear of the vehicle is ON, start the upgrade process of the target ECU;
  • Step S302 when the power supply mode of the target ECU to be upgraded is the first power supply mode, and the current gear of the vehicle is OFF, send a power-on request to the vehicle so that the vehicle gear is ON, if the vehicle gear is If the ON position of the bit is successful, the upgrade process of the target ECU will be started. If the ON position of the vehicle fails, the upgrade process of the target ECU will be exited;
  • the T-BOX of the vehicle interacts with the IBCM of the vehicle, and sends a power-on command message to the IBCM. If the power-on is successful, the upgrade process can continue. If the power-on is unsuccessful, refresh cannot be performed, and the return does not meet the power-on requirements The results are sent to the vehicle-machine interface to be displayed to the user;
  • Step S303 when the power supply mode of the target ECU to be upgraded is the second power supply mode, and the current gear of the vehicle is OFF, start the upgrade process of the target ECU;
  • Step S304 when the power supply mode of the target ECU to be upgraded is the second power supply mode, and the current gear of the vehicle is ON, exit the upgrade process of the target ECU;
  • the above steps S301-S304 are parallel steps. Different upgrade decisions are made in different scenarios.
  • the ECU in the first power mode needs to be in the ON gear of the whole vehicle to enable the diagnostic refresh function, and the ECU in the second power mode needs to be in the OFF gear of the whole vehicle.
  • the diagnostic refresh function is enabled.
  • the steps S301 and S302 both specifically include:
  • a signal is sent to the controller VCU to control the VCU to charge the battery during the upgrade process, avoiding the risk of battery power feeding after the upgrade is completed. , resulting in the failure of the vehicle to be powered on normally;
  • the upgrade detection condition is set through the background - detect the battery power value, and pass before the upgrade. Detect the upgrade conditions of the vehicle, and the upgrade can only be started after the test is passed. In order to avoid the power feeding situation, it is often easy to set the detection power threshold too high, which leads to a decrease in the actual market upgrade completion rate. However, in this embodiment, it is set to control the VCU to charge the battery during the upgrade process, which can reduce the setting of the power threshold and avoid the situation that the actual market upgrade completion rate is reduced due to the setting of the detected power threshold being too high.
  • the steps S301-S304 specifically include the following (1)-(3):
  • the target ECU performs a software rollback; if the software rollback is successful, although the upgrade fails, and the relevant functions of the target ECU are valid, the use of the vehicle will not be affected; if the software rollback fails, not only The upgrade fails, and the relevant functions of the target ECU are invalid, which needs to be solved after the user sells it back;
  • an upgrade failure retry mechanism is added in this embodiment to ensure reasonable retries in the upgrade failure scenario and reduce a certain upgrade failure rate; and software rollback is performed to ensure that the ECU is upgraded in the event of an upgrade failure. Guaranteed return to normal working condition;
  • the upgrade result includes: upgrade success, or upgrade failure and software rollback success, Or the upgrade fails and the software rollback fails.
  • the steps S301 and S302 both specifically include:
  • the current gear position of the vehicle controller is obtained, and if the current gear position of the vehicle controller is ON, a power-off request is sent to the vehicle controller, so that the The vehicle controller is powered off;
  • TBOX interacts with IBCM, and sends a power-off command message to IBCM. If the power-off is successful, the upgrade process ends, and the vehicle environment is restored; After the upgrade process ends, a log of waiting for power-off timeout is generated and saved.
  • the steps S301-S304 all specifically include:
  • the PEPS function is disabled as follows:
  • the prohibition of the PEPS function and all CAN application message communication in this embodiment ensures that during the upgrade process, the interference of other messages on the vehicle bus is prioritized for diagnostic refresh to improve the success rate.
  • the embodiment of the present invention also proposes a kind of ECU remote upgrading system, and it can be installed in the T-Box of vehicle, and the system of this embodiment corresponds to the method of above-mentioned embodiment, and the system of this embodiment includes multiple A functional unit, the multiple functional units may be used to perform corresponding multiple steps of the method of the above embodiment, and the multiple functional units specifically include:
  • the upgrade triggering unit 1 is configured to acquire vehicle state information in response to receiving an upgrade instruction input by a user, and determine whether the vehicle state information satisfies a preset upgrade pre-condition;
  • the identification unit 2 is used to identify the power supply mode of the target ECU to be upgraded if the vehicle state information meets the preset upgrade preconditions, and identify the current gear position of the vehicle; wherein the power supply mode includes the first The power supply mode and the second power supply mode, the first power supply mode is that the power battery supplies power to the ECU, and the ECU is only enabled in the ON gear of the vehicle; the second power supply mode is that both the power battery and the storage battery can supply power to the ECU, And the ECU can be activated in both ON and OFF gears of the vehicle;
  • the upgrading unit 3 is used to start the upgrading process of the target ECU when the power supply mode of the target ECU to be upgraded is the first power supply mode, and the current gear position of the vehicle is ON; when the power supply mode of the target ECU to be upgraded is the first 1. Power supply mode, and when the current gear of the vehicle is OFF, send a power-on request to the vehicle to switch the vehicle gear to ON. If the vehicle gear is successfully turned ON, the upgrade process of the target ECU will be started.
  • the system further includes:
  • the charging control unit 4 is configured to send a charging signal to the vehicle controller before starting the upgrading process of the target ECU when the power supply mode of the target ECU to be upgraded is the first power supply mode, so that the target ECU is upgraded During the process, the vehicle controller keeps charging the battery.
  • the upgrade unit 3 is also used for:
  • the target ECU performs software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; if the software rollback fails, the upgrade fails, and the relevant functions of the target ECU become invalid;
  • the upgrade result includes: the upgrade is successful, or the upgrade fails and the software rollback succeeds, or the upgrade fails And the software rollback fails.
  • the upgrade unit 3 is also used for:
  • the power supply mode of the target ECU to be upgraded is the first power supply mode
  • the current gear position of the vehicle controller is obtained, and if the current gear position of the vehicle controller is ON, then Sending a power-off request to the vehicle controller, so that the vehicle controller is powered off.
  • the system further includes:
  • the function prohibiting unit 5 is configured to prohibit the communication of the PEPS function and all CAN application messages before starting the upgrade process of the target ECU.
  • the system of the above-mentioned embodiment corresponds to the method of the above-mentioned embodiment, therefore, the unspecified parts of the system of the above-mentioned embodiment can be obtained by referring to the content of the method of the above-mentioned embodiment, that is, the specific steps recorded in the method of the above-mentioned embodiment
  • the content can be understood as the functions that can be realized by the system of the above embodiment, and will not be repeated here.
  • the ECU remote upgrade system in the above embodiment is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium.
  • Aiming at the OTA remote upgrade problem of the ECU in the first power mode check the strict upgrade conditions to ensure the appropriate upgrade scenario and vehicle environment, and automatically switch the upgrade environment of ECUs in different power modes by actively judging the ECU power mode. Configuration, support compatibility with ECUs in multiple power modes. Under the same environmental conditions of the whole vehicle, ECU remote refresh can be completed, and based on the same set of upgrade interactive control process, the remote upgrade process of self-adaptive ECU power mode without user perception , to solve the above-mentioned technical problem that the ECU of the first power supply mode cannot be remotely upgraded through OTA, and to broaden the scope of application of OTA remote upgrade technology in ECU upgrade.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Control Of Transmission Device (AREA)
  • Stored Programmes (AREA)

Abstract

一种ECU远程升级方法与系统，响应于接收到用户输入的升级指令，获取车辆状态信息，若所述车辆状态信息满足预设的升级前置条件，则识别待升级的目标ECU的电源模式，并识别整车的当前档位；当电源模式为第一电源模式，且整车为ON档时，启动升级流程；当电源模式为第一电源模式，且整车为OFF档时，向整车发送上电请求以使整车档位上ON档，若整车档位上ON档成功，则启动升级流程，若整车上ON档失败，则退出升级流程；当电源模式为第二电源模式，且整车为OFF档时，启动升级流程；当电源模式为第二电源模式，且整车为ON档时，退出升级流程。本方法能够拓宽OTA远程升级技术在ECU升级方面的适用范围。

Description

一种ECU远程升级方法与系统
本申请要求于2021年12月06日提交中国专利局，申请号为202111481046.6，发明名称为“一种ECU远程升级方法与系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及ECU升级技术领域，具体涉及一种ECU远程升级方法与系统。
背景技术
随着汽车智能网联的发展，车联网处于越来越重要的地位，汽车的ECU如IVI、TBOX、ADAS以及新能源ECU相比传统车辆，软件更新迭代越来越多，以为用户提供更好的用户体验。OTA提供一种在线升级的方式，可以像手机系统升级一样，在界面上点击升级完成车辆系统升级，相对于传统线下4S店售后升级软件的方式而言，通过OTA远程升级的方式可以实现软件快速迭代、升级、节约成本、提升用户体验，在很大程度上可以避免因软件召回车辆的风险，但是OTA远程升级执行的角色是普通车主用户而非专业的售后工程师，因此OTA远程升级的可靠性、安全性都需要得到保证，才能保证用户体验。
越来越多的整车ECU提出远程升级的迫切需求，其中ECU存在多种电源模式，如基于ECU供电源来源不一样，可提出主要类型ECU的两种电源模式，第一种电源模式由动力电池正极供电，第一种电源模式下的ECU功能仅为车辆ON档下启用，而在车辆OFF档情况下，ECU无法启用功能；第二种电源模式由动力电池正极与蓄电池常电均能供电，第二种电源模式下的ECU的功能在车辆ON档、OFF档下均保持启用。
而OTA远程升级过程需要被升级ECU及相关节点保持供电，现有OTA远程升级技术通过车端控制技术以及车载交互形式，进行OFF档下OTA远程升级，在正式升级前通过检查严格的升级条件来确保车辆下电OFF档，升级过程均维持在车辆OFF档状态下，通过车辆蓄电池供电支持下完成OTA升级。而用户仅需在车机交互提示下进行下电锁车离车，完成升级前准备，即可离车等待，直至升级完成。
而上述现有OTA远程升级技术仅支持上述第二种电源模式的ECU进行OFF档升级，而上述第一种电源模式的ECU目前无法通过OTA远程升级，需要通过4S店线下召回，在专业的售后工程师和专业设备支持下进行线下的软件更新。
发明内容
本发明的目的在于提出一种ECU远程升级方法与系统，以解决上述第一种电源模式的ECU无法通过OTA远程升级的技术问题，拓宽OTA远程升级技术在ECU升级方面的适用范围。
为实现上述目的，本发明的实施例提出一种ECU远程升级方法，包括如下步骤：
响应于接收到用户输入的升级指令，获取车辆状态信息，判断所述车辆状态信息是否满足预设的升级前置条件；
若所述车辆状态信息满足预设的升级前置条件，则识别待升级的目标ECU的电源模式，并识别整车的当前档位；其中，所述电源模式包括第一电源模式和第二电源模式，所述第一电源模式为由动力电池向ECU供电，且ECU仅在整车ON档下启用；所述第二电源模式为动力电池与蓄电池均能向ECU供电，且ECU在整车ON档和OFF档下均能启用；
当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为ON档时，启动目标ECU的升级流程；
当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为OFF档时，向整车发送上电请求以使整车档位上ON档，若整车档位上ON档成功，则启动目标ECU的升级流程，若整车上ON档失败，则退出目标ECU的升级流程；
当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为OFF档时，启动目标ECU的升级流程；
当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为ON档时，退出目标ECU的升级流程。
优选地，所述方法还包括如下步骤：
当待升级的目标ECU的电源模式为第一电源模式时，在启动目标ECU的升级流程之前，向所述整车控制器发送充电信号，以使得在执行目标ECU升级流程时，所述整车控制器对蓄电池维持充电。
优选地，所述方法还包括如下步骤：
在执行ECU升级流程时，若升级失败，自动发起重试升级；
若重试升级失败，目标ECU进行软件回滚；若软件回滚成功，则升级失败，且目标ECU的相关功能有效；若软件回滚失败，则升级失败，且目标ECU的相关功能失效；
生成升级结果，通过车机交互界面显示所述升级结果，并将所述升级结果上报给OTA后台服务器；其中，所述升级结果包括：升级成功、或升级失败且软件回滚成功、或升级失败且软件回滚失败。
优选地，所述方法还包括如下步骤：
当待升级的目标ECU的电源模式为第一电源模式时，在生成升级结果之后，获取所述整车控制器的当前档位，若所述整车控制器的当前档位为ON档，则向所述整车控制器发送下电请求，以使得所述整车控制器下电。
优选地，所述车辆状态信息包括：ACC档位、锁车设防状态、车速、蓄电池电量、电池电压和车辆点火状态；
所述预设的升级前置条件包括：ACC档位为OFF档，锁车设防状态为是，车速为0，蓄电池电量处于预设电量范围，电池电压处于预设电压范围，以及，车辆点火状态为熄火。
优选地，所述方法还包括如下步骤：
在启动目标ECU的升级流程之前，禁止PEPS功能和所有CAN应用报文通信。
本发明的实施例还提出一种ECU远程升级系统，包括：
升级触发单元，用于响应于接收到用户输入的升级指令，获取车辆状态信息，判断所述车辆状态信息是否满足预设的升级前置条件；
识别单元，用于若所述车辆状态信息满足预设的升级前置条件，则识别待升级的目标ECU的电源模式，并识别整车的当前档位；其中，所述电源模式包括第一电源模式和第二电源模式，所述第一电源模式为由动力电池向ECU供电，且ECU仅在整车ON档下启用；所述第二电源模式为动力电池与蓄电池均能向ECU供电，且ECU在整车ON档和OFF档下均能启用；
升级单元，用于当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为ON档时，启动目标ECU的升级流程；当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为OFF档时，向整车发送上电请求以使整车档位上ON档，若整车档位上ON档成功，则启动目标ECU的升级流程，若整车上ON档失败，则退出目标ECU的升级流程；当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为OFF档时，启动目标ECU的升级流程；以及，当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为ON档时，退出目标ECU的升级流程。
优选地，所述系统还包括：
充电控制单元，用于当待升级的目标ECU的电源模式为第一电源模式时，在启动目标ECU的升级流程之前，向所述整车控制器发送充电信号，以使得在执行目标ECU升级流程时，所述整车控制器对蓄电池维持充电。
优选地，所述升级单元，还用于：
在执行ECU升级流程时，若升级失败，自动发起重试升级；
若重试升级失败，目标ECU进行软件回滚；若软件回滚成功，则升级失败，且目标ECU的相关功能有效；若软件回滚失败，则升级失败，且目标ECU的相关功能失效；
生成升级结果，通过车机交互界面显示所述升级结果，并将所述升级结果上报给OTA后台服务器；其中，所述升级结果包括：升级成功、或升级失败且软件回滚成功、或升级失败且软件回滚失败。
优选地，所述升级单元，还用于：
当待升级的目标ECU的电源模式为第一电源模式时，在生成升级结果之后，获取所述整车控制器的当前档位，若所述整车控制器的当前档位为ON档，则向所述整车控制器发送下电请求，以使得所述整车控制器下电。
本发明的实施例至少具有以下有益效果：
针对上述第一电源模式的ECU的OTA远程升级问题，通过检查严格的升级条件来保证合 适的升级场景和车辆环境，通过主动判断ECU电源模式，自动切换不同电源模式下的ECU的升级环境基础的配置，支持兼容多种电源模式下的ECU能够在同一整车环境条件下，完成ECU远程刷新，并基于同一套升级交互控制流程下进行，在用户无感知下自适应ECU电源模式的远程升级流程，解决了上述第一种电源模式的ECU无法通过OTA远程升级的技术问题，拓宽OTA远程升级技术在ECU升级方面的适用范围。
本发明的实施例的其它特征和优点将在随后的说明书中阐述。
附图说明
为了更清楚地说明本发明实施例或现有技术中的技术方案，下面将对实施例或现有技术描述中所需要使用的附图作简单地介绍，显而易见地，下面描述中的附图仅仅是本发明的一些实施例，对于本领域普通技术人员来讲，在不付出创造性劳动的前提下，还可以根据这些附图获得其他的附图。
图1为本发明实施例中一种ECU远程升级方法的流程示意图。
图2为本发明实施例中一种ECU远程升级系统的框架示意图。
具体实施方式
以下将参考附图详细说明本公开的各种示例性实施例、特征和方面。另外，为了更好的说明本发明，在下文的具体实施例中给出了众多的具体细节。本领域技术人员应当理解，没有某些具体细节，本发明同样可以实施。在一些实例中，对于本领域技术人员熟知的手段未作详细描述，以便于凸显本发明的主旨。
参阅图1，本发明的实施例提出一种ECU远程升级方法，其为一种能够兼容支持不同电源模式的ECU进行OTA远程升级解决方案，本实施例的方法流程可以由T-box来执行，本实施例的方法包括如下步骤：
步骤S10、响应于接收到用户输入的升级指令，获取车辆状态信息，判断所述车辆状态信息是否满足预设的升级前置条件；
具体而言，用户在车机交互界面操作ECU的OTA远程升级，根据升级指引进行点击进入目标ECU的升级流程，车机系统将用户操作转化为升级开始的指令输入给TBOX，从而触发目标ECU的升级流程；
步骤S20、若所述车辆状态信息满足预设的升级前置条件，则识别待升级的目标ECU的电源模式，并识别整车的当前档位；其中，所述电源模式包括第一电源模式和第二电源模式，所述第一电源模式为由动力电池向ECU供电，且ECU仅在整车ON档下启用；所述第二电源模式为动力电池与蓄电池均能向ECU供电，且ECU在整车ON档和OFF档下均能启用；
具体而言，升级前置条件检查即检查升级条件信号状态，若满足升级条件检查则继续升级流程，若不满足则退出升级流程，升级检查条件可根据ECU升级需求进行灵活配置；举例 而言，车辆状态信息满足预设的升级前置条件的检查可以参阅下面表1；
表1-车辆升级条件检查
序号 升级条件 满足条件 是否必检
1 ACC档位 OFF档 是
2 锁车设防状态 锁车设防 是
3 车速 为0 是
4 蓄电池电量 可OTA后台配置 是
5 电池电压 可OTA后台配置 若车辆无蓄电池电量信号时必选
6 手刹状态 手刹拉紧 可选
7 车辆点火状态 熄火/Not Ready 是
8 高压电充电状态 未充电 是(仅新能源车辆)
9 整车高压电状态 非高压状态 是(仅新能源车辆)
10 车辆档位 P档 可选
11 主驾安全带状态 未系 可选
如上表1所示，表1中列举了11种车辆状态信息，其中部分状态信息的检查为可选，或者需要根据车辆的动力类型进行确定，例如是否为新能源车辆。
步骤S301、当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为ON档时，启动目标ECU的升级流程；
步骤S302、当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为OFF档时，向整车发送上电请求以使整车档位上ON档，若整车档位上ON档成功，则启动目标ECU的升级流程，若整车上ON档失败，则退出目标ECU的升级流程；
具体而言，由车辆T-BOX与车辆IBCM交互，给IBCM发出上电指令报文，若上电成功升级流程才能继续往下走，上电不成功，不可进行刷新，返回不满足上电要求结果至车机交互界面以显示给用户；
步骤S303、当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为OFF档时，启动目标ECU的升级流程；
步骤S304、当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为ON档时，退出目标ECU的升级流程；
上述步骤S301-S304为并列步骤，在不同场景进入不同的升级决策，第一电源模式的ECU需在整车ON档下才能启用诊断刷新功能，第二电源模式的ECU则需要整车OFF档下才启用诊断刷新功能。
具体在本实施例中，所述步骤S301和步骤S302均具体包括：
在启动目标ECU的升级流程之前，向所述整车控制器发送充电信号，以使得在执行目标ECU升级流程时，所述整车控制器对蓄电池维持充电；
具体而言，本实施例在整车控制器ON档升级过程中，增加发送信号至控制器VCU，实现在升级过程中控制VCU对蓄电池进行充电，避免升级完成后可能会存在蓄电池馈电的风险，进而造成车辆无法正常上电启用；
需说明的是，现有OTA远程升级在实际市场应用下，为避免市场车辆在完成OTA远程升级后出现蓄电池馈电的情况，通过后台设定升级检测条件-检测蓄电池电量值，在升级前通过检测车辆的升级条件，检测通过后才可开始升级。为规避馈电情况，往往容易出现设定检测电量阈值过高，从而导致实际市场升级完成率降低。而本实施例中，设置了在升级过程中控制VCU对蓄电池进行充电，能够降低电量阈值的设定，避免设定检测电量阈值过高，从而导致实际市场升级完成率降低的情况。
具体在本实施例中，所述步骤S301-S304均具体包括以下(1)-(3)：
(1)在执行ECU升级流程时，若升级失败，自动发起重试升级；
(2)若重试升级失败，目标ECU进行软件回滚；若软件回滚成功，则虽然升级失败，且目标ECU的相关功能有效，不影响车辆整车使用；若软件回滚失败，则不仅升级失败，且目标ECU的相关功能失效，需要用户回售后解决；
需说明的是，本实施例中增加升级失败重试机制，以保证升级失败场景下进行合理重试，降低一定的升级失败率；并且进行软件回滚，保证了在升级失败情况下，升级ECU可保证恢复至正常工作的状态；
(3)生成升级结果，通过车机交互界面显示所述升级结果，并将所述升级结果上报给OTA后台服务器；其中，所述升级结果包括：升级成功、或升级失败且软件回滚成功、或升级失败且软件回滚失败。
具体在本实施例中，所述步骤S301和步骤S302均具体包括：
在生成升级结果之后，获取所述整车控制器的当前档位，若所述整车控制器的当前档位为ON档，则向所述整车控制器发送下电请求，以使得所述整车控制器下电；
具体而言，由TBOX与IBCM交互，给IBCM发出下电指令报文，若下电成功、升级流程结束，恢复整车环境；若下电失败，按等下电超时的预设方式处理，例如升级流程结束，生成等下电超时的日志并保存。
具体在本实施例中，所述步骤S301-S304均具体包括：
在启动目标ECU的升级流程之前，禁止PEPS功能和所有CAN应用报文通信。
举例而言，PEPS功能的禁用方式如下：
1.1)通过10 03诊断服务将PEPS进入扩展模式；
1.2)通过10 02诊断服务将PEPS进入boot模式；
1.3)通过3E 80服务，将PEPS维持在boot模式；
举例而言，所有CAN应用报文通信的禁用方式如下：
2.1)通过10 03诊断服务将所有CAN ECU进入扩展模式；
2.2)通过28 03 01诊断服务禁止所有CAN应用报文；
2.3)通过3E 80诊断服务，维持所有CAN保持禁应用报文通信；
需说明的是，本实施例中PEPS功能和所有CAN应用报文通信的禁止，保证了升级过程中，整车总线上其他报文的干扰，优先进行诊断刷新，以提高成功率。
参阅图2，本发明的实施例还提出一种ECU远程升级系统，其可以安装于车辆的T-Box中，本实施例的系统与上述实施例的方法对应，本实施例的系统包括多个功能单元，该多个功能单元可以用于执行上述实施例的方法的对应多个步骤，该多个功能单元具体包括：
升级触发单元1，用于响应于接收到用户输入的升级指令，获取车辆状态信息，判断所述车辆状态信息是否满足预设的升级前置条件；
识别单元2，用于若所述车辆状态信息满足预设的升级前置条件，则识别待升级的目标ECU的电源模式，并识别整车的当前档位；其中，所述电源模式包括第一电源模式和第二电源模式，所述第一电源模式为由动力电池向ECU供电，且ECU仅在整车ON档下启用；所述第二电源模式为动力电池与蓄电池均能向ECU供电，且ECU在整车ON档和OFF档下均能启用；
升级单元3，用于当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为ON档时，启动目标ECU的升级流程；当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为OFF档时，向整车发送上电请求以使整车档位上ON档，若整车档位上ON档成功，则启动目标ECU的升级流程，若整车上ON档失败，则退出目标ECU的升级流程；当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为OFF档时，启动目标ECU的升级流程；以及，当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为ON档时，退出目标ECU的升级流程。
具体在本实施例中，所述系统还包括：
充电控制单元4，用于当待升级的目标ECU的电源模式为第一电源模式时，在启动目标ECU的升级流程之前，向所述整车控制器发送充电信号，以使得在执行目标ECU升级流程时，所述整车控制器对蓄电池维持充电。
具体在本实施例中，所述升级单元3，还用于：
在执行ECU升级流程时，若升级失败，自动发起重试升级；
若重试升级失败，目标ECU进行软件回滚；若软件回滚成功，则升级失败，且目标ECU的相关功能有效；若软件回滚失败，则升级失败，且目标ECU的相关功能失效；
生成升级结果，通过车机交互界面显示所述升级结果，并将所述升级结果上报给OTA后台服务器；其中，所述升级结果包括：升级成功、或升级失败且软件回滚成功、或升级失败且软件回滚失败。
具体在本实施例中，所述升级单元3，还用于：
当待升级的目标ECU的电源模式为第一电源模式时，在生成升级结果之后，获取所述整车控制器的当前档位，若所述整车控制器的当前档位为ON档，则向所述整车控制器发送下电 请求，以使得所述整车控制器下电。
具体在本实施例中，所述系统还包括：
功能禁止单元5，用于在启动目标ECU的升级流程之前，禁止PEPS功能和所有CAN应用报文通信。
以上所描述的实施例的系统仅仅是示意性的，其中所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部模块来实现实施例的系统的方案的目的。
需说明的是，上述实施例的系统与上述实施例的方法对应，因此，上述实施例的系统未详述部分可以参阅上述实施例的方法的内容得到，即上述实施例的方法记载的具体步骤内容可以理解为上述实施例的系统所能够实现的功能，此处不再赘述。
并且，上述实施例ECU远程升级系统若以软件功能单元的形式实现并作为独立的产品销售或使用时，可以存储在一个计算机可读取存储介质中。
本发明的各实施例具有以下优点：
针对上述第一电源模式的ECU的OTA远程升级问题，通过检查严格的升级条件来保证合适的升级场景和车辆环境，通过主动判断ECU电源模式，自动切换不同电源模式下的ECU的升级环境基础的配置，支持兼容多种电源模式下的ECU能够在同一整车环境条件下，完成ECU远程刷新，并基于同一套升级交互控制流程下进行，在用户无感知下自适应ECU电源模式的远程升级流程，解决了上述第一种电源模式的ECU无法通过OTA远程升级的技术问题，拓宽OTA远程升级技术在ECU升级方面的适用范围。
以上已经描述了本发明的各实施例，上述说明是示例性的，并非穷尽性的，并且也不限于所披露的各实施例。在不偏离所说明的各实施例的范围和精神的情况下，对于本技术领域的普通技术人员来说许多修改和变更都是显而易见的。本文中所用术语的选择，旨在最好地解释各实施例的原理、实际应用或对市场中的技术改进，或者使本技术领域的其它普通技术人员能理解本文披露的各实施例。

Claims (10)

  1. 一种ECU远程升级方法，其特征在于，包括如下步骤：
    响应于接收到用户输入的升级指令，获取车辆状态信息，判断所述车辆状态信息是否满足预设的升级前置条件；
    若所述车辆状态信息满足预设的升级前置条件，则识别待升级的目标ECU的电源模式，并识别整车的当前档位；其中，所述电源模式包括第一电源模式和第二电源模式，所述第一电源模式为由动力电池向ECU供电，且ECU仅在整车ON档下启用；所述第二电源模式为动力电池与蓄电池均能向ECU供电，且ECU在整车ON档和OFF档下均能启用；
    当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为ON档时，启动目标ECU的升级流程；
    当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为OFF档时，向整车发送上电请求以使整车档位上ON档，若整车档位上ON档成功，则启动目标ECU的升级流程，若整车上ON档失败，则退出目标ECU的升级流程；
    当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为OFF档时，启动目标ECU的升级流程；
    当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为ON档时，退出目标ECU的升级流程。
  2. 根据权利要求1所述的ECU远程升级方法，其特征在于，所述方法还包括如下步骤：
    当待升级的目标ECU的电源模式为第一电源模式时，在启动目标ECU的升级流程之前，向所述整车控制器发送充电信号，以使得在执行目标ECU升级流程时，所述整车控制器对蓄电池维持充电。
  3. 根据权利要求2所述的ECU远程升级方法，其特征在于，所述方法还包括如下步骤：
    在执行ECU升级流程时，若升级失败，自动发起重试升级；
    若重试升级失败，目标ECU进行软件回滚；若软件回滚成功，则升级失败，且目标ECU的相关功能有效；若软件回滚失败，则升级失败，且目标ECU的相关功能失效；
    生成升级结果，通过车机交互界面显示所述升级结果，并将所述升级结果上报给OTA后台服务器；其中，所述升级结果包括：升级成功、或升级失败且软件回滚成功、或升级失败且软件回滚失败。
  4. 根据权利要求3所述的ECU远程升级方法，其特征在于，所述方法还包括如下步骤：
    当待升级的目标ECU的电源模式为第一电源模式时，在生成升级结果之后，获取所述整车控制器的当前档位，若所述整车控制器的当前档位为ON档，则向所述整车控制器发送下电请求，以使得所述整车控制器下电。
  5. 根据权利要求1-4中的任一项所述的ECU远程升级方法，其特征在于，所述车辆状态 信息包括：ACC档位、锁车设防状态、车速、蓄电池电量、电池电压和车辆点火状态；
    所述预设的升级前置条件包括：ACC档位为OFF档，锁车设防状态为是，车速为0，蓄电池电量处于预设电量范围，电池电压处于预设电压范围，以及，车辆点火状态为熄火。
  6. 根据权利要求1-4中的任一项所述的ECU远程升级方法，其特征在于，所述方法还包括如下步骤：
    在启动目标ECU的升级流程之前，禁止PEPS功能和所有CAN应用报文通信。
  7. 一种ECU远程升级系统，其特征在于，包括：
    升级触发单元，用于响应于接收到用户输入的升级指令，获取车辆状态信息，判断所述车辆状态信息是否满足预设的升级前置条件；
    识别单元，用于若所述车辆状态信息满足预设的升级前置条件，则识别待升级的目标ECU的电源模式，并识别整车的当前档位；其中，所述电源模式包括第一电源模式和第二电源模式，所述第一电源模式为由动力电池向ECU供电，且ECU仅在整车ON档下启用；所述第二电源模式为动力电池与蓄电池均能向ECU供电，且ECU在整车ON档和OFF档下均能启用；
    升级单元，用于当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为ON档时，启动目标ECU的升级流程；当待升级的目标ECU的电源模式为第一电源模式，且整车当前档位为OFF档时，向整车发送上电请求以使整车档位上ON档，若整车档位上ON档成功，则启动目标ECU的升级流程，若整车上ON档失败，则退出目标ECU的升级流程；当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为OFF档时，启动目标ECU的升级流程；以及，当待升级的目标ECU的电源模式为第二电源模式，且整车当前档位为ON档时，退出目标ECU的升级流程。
  8. 根据权利要求7所述的ECU远程升级系统，其特征在于，所述系统还包括：
    充电控制单元，用于当待升级的目标ECU的电源模式为第一电源模式时，在启动目标ECU的升级流程之前，向所述整车控制器发送充电信号，以使得在执行目标ECU升级流程时，所述整车控制器对蓄电池维持充电。
  9. 根据权利要求8所述的ECU远程升级系统，其特征在于，所述升级单元，还用于：
    在执行ECU升级流程时，若升级失败，自动发起重试升级；
    若重试升级失败，目标ECU进行软件回滚；若软件回滚成功，则升级失败，且目标ECU的相关功能有效；若软件回滚失败，则升级失败，且目标ECU的相关功能失效；
    生成升级结果，通过车机交互界面显示所述升级结果，并将所述升级结果上报给OTA后台服务器；其中，所述升级结果包括：升级成功、或升级失败且软件回滚成功、或升级失败且软件回滚失败。
  10. 根据权利要求9所述的ECU远程升级系统，其特征在于，所述升级单元，还用于：
    当待升级的目标ECU的电源模式为第一电源模式时，在生成升级结果之后，获取所述整车控制器的当前档位，若所述整车控制器的当前档位为ON档，则向所述整车控制器发送下电 请求，以使得所述整车控制器下电。
PCT/CN2022/122605 2021-12-06 2022-09-29 一种ecu远程升级方法与系统 WO2023103552A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202111481046.6A CN116225477A (zh) 2021-12-06 2021-12-06 一种ecu远程升级方法与系统
CN202111481046.6 2021-12-06

Publications (1)

Publication Number Publication Date
WO2023103552A1 true WO2023103552A1 (zh) 2023-06-15

Family

ID=86589765

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/122605 WO2023103552A1 (zh) 2021-12-06 2022-09-29 一种ecu远程升级方法与系统

Country Status (2)

Country Link
CN (1) CN116225477A (zh)
WO (1) WO2023103552A1 (zh)

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20140146718A (ko) * 2013-06-17 2014-12-29 한국산업기술대학교산학협력단 보안기능을 갖는 ｅｃｕ 업그레이드시스템 및 그 방법
WO2021008184A1 (zh) * 2019-07-18 2021-01-21 南京依维柯汽车有限公司 新能源汽车上的fota固件远程升级系统及其升级方法
CN112328282A (zh) * 2020-11-10 2021-02-05 深圳创维汽车智能有限公司 一种车载中控系统远程升级方法、设备、装置及介质
CN113391830A (zh) * 2021-05-26 2021-09-14 上汽通用五菱汽车股份有限公司 一种汽车ecu远程刷新方法，汽车及可读存储介质
CN113411285A (zh) * 2020-03-16 2021-09-17 广州汽车集团股份有限公司 车辆ecu远程升级方法、t-box、网关、系统及存储介质
CN113497819A (zh) * 2020-04-02 2021-10-12 广州汽车集团股份有限公司 一种远程升级安全保障方法、系统及车载Tbox设备

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20140146718A (ko) * 2013-06-17 2014-12-29 한국산업기술대학교산학협력단 보안기능을 갖는 ｅｃｕ 업그레이드시스템 및 그 방법
WO2021008184A1 (zh) * 2019-07-18 2021-01-21 南京依维柯汽车有限公司 新能源汽车上的fota固件远程升级系统及其升级方法
CN113411285A (zh) * 2020-03-16 2021-09-17 广州汽车集团股份有限公司 车辆ecu远程升级方法、t-box、网关、系统及存储介质
CN113497819A (zh) * 2020-04-02 2021-10-12 广州汽车集团股份有限公司 一种远程升级安全保障方法、系统及车载Tbox设备
CN112328282A (zh) * 2020-11-10 2021-02-05 深圳创维汽车智能有限公司 一种车载中控系统远程升级方法、设备、装置及介质
CN113391830A (zh) * 2021-05-26 2021-09-14 上汽通用五菱汽车股份有限公司 一种汽车ecu远程刷新方法，汽车及可读存储介质

Also Published As

Publication number Publication date
CN116225477A (zh) 2023-06-06

Similar Documents

Publication Publication Date Title
US20230012366A1 (en) Error-resilient over-the-air software updates for vehicles
US8655541B2 (en) Vehicle upgrade system and method thereof
CN111061499B (zh) 一种基于文件系统的ecu更新方法及系统
CN102591676B (zh) 车载机的在线更新方法
WO2016158547A1 (ja) プログラム書換装置及びプログラム書換方法
CN112104736B (zh) 一种基于ota的多ecu升级方法
CN111782234A (zh) 一种车载软件的刷写方法、控制装置、中央处理器及汽车
CN110442363B (zh) 一种车辆ecu升级控制方法
CN113497819A (zh) 一种远程升级安全保障方法、系统及车载Tbox设备
JP2016060407A (ja) 車両制御プログラム書換システム及び車両制御プログラム書換方法
CN111722860A (zh) 基于有穷状态机的ota升级方法和装置
CN113626056A (zh) 车辆远程升级方法、装置、电子设备、车载终端及存储介质
CN105599706B (zh) 一种智能车载信息娱乐系统的待机管理方法及系统
JP2016188022A (ja) プログラム書換装置及びプログラム書換方法
US9569404B2 (en) In-vehicle controller and non-transitory tangible computer readable medium
JP2016188017A (ja) プログラム書換装置及びプログラム書換方法
CN112188417A (zh) 一种ota车辆升级执行条件动态配置的方法
WO2023103552A1 (zh) 一种ecu远程升级方法与系统
JP7291216B2 (ja) バッテリー交換中のオートレベリングの防止
CN111061255B (zh) 一种电动车的控制方法及设备
CN113630437A (zh) 车辆的控制单元升级方法、装置及车辆
CN115277413B (zh) 车辆控制器的升级方法、装置、车辆及存储介质
US20240001871A1 (en) Electronic control unit, vehicle control system, and vehicle control method
US20240086174A1 (en) Vehicular electronic control device and update program
US20160373913A1 (en) Automatic vehicle updating via wireless device

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22902977

Country of ref document: EP

Kind code of ref document: A1