WO2024008104A1 - 远程升级方法及系统 - Google Patents

远程升级方法及系统 Download PDF

Info

Publication number
WO2024008104A1
WO2024008104A1 PCT/CN2023/105787 CN2023105787W WO2024008104A1 WO 2024008104 A1 WO2024008104 A1 WO 2024008104A1 CN 2023105787 W CN2023105787 W CN 2023105787W WO 2024008104 A1 WO2024008104 A1 WO 2024008104A1
Authority
WO
WIPO (PCT)
Prior art keywords
controller
ota
software package
controllers
task
Prior art date
Application number
PCT/CN2023/105787
Other languages
English (en)
French (fr)
Inventor
刘闯
李长龙
柳旭
范玲玲
王腾
马骉
刘禹池
Original Assignee
中国第一汽车股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中国第一汽车股份有限公司 filed Critical 中国第一汽车股份有限公司
Publication of WO2024008104A1 publication Critical patent/WO2024008104A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/08—Configuration management of networks or network elements
    • H04L41/0803—Configuration setting
    • H04L41/0813—Configuration setting characterised by the conditions triggering a change of settings
    • H04L41/082—Configuration setting characterised by the conditions triggering a change of settings the condition being updates or upgrades of network functionality
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates

Definitions

  • embodiments of the present application provide a remote upgrade method, including:
  • the OTA task master controller in the vehicle obtains multiple controllers to be flashed from the server; the multiple controllers to be flashed include at least a network controller and a function controller;
  • the content distribution network system generates a corresponding software package according to the plurality of controllers to be flashed, and sends the uniform resource locator URL corresponding to the software package to the OTA task main controller;
  • the OTA task main controller in the vehicle is set to obtain multiple controllers to be flashed from the server; the multiple controllers are Each controller to be flashed includes at least a network controller and a function controller;
  • the content distribution network system is configured to generate a corresponding software package according to the plurality of controllers to be flashed, and send the uniform resource locator URL corresponding to the software package to the OTA task main controller;
  • the OTA task main controller is configured to distribute the URL corresponding to the software package of each network controller to each network controller and trigger each network controller to download the software package respectively;
  • the OTA task master controller is also configured to transmit the decryption verification certificate to each network controller, so that each network controller decrypts, verifies and stores the software package.
  • Figure 2 is a schematic diagram of a transmission path of a remote upgrade method provided by an embodiment of the present application
  • Figure 4 is a schematic diagram of a transmission path of another remote upgrade method provided by an embodiment of the present application.
  • Figure 5 is a schematic diagram of the preparation process before flashing provided by the embodiment of the present application.
  • Figure 6 is a schematic diagram of the restart process after flashing provided by the embodiment of the present application.
  • Figure 7 is a schematic flow chart of another remote upgrade method provided by an embodiment of the present application.
  • Figure 8 is a schematic structural diagram of a remote upgrade system provided by an embodiment of the present application.
  • embodiments of the present application provide a remote upgrade method and system.
  • Figure 1 is a schematic flowchart of the remote upgrade method provided by the embodiment of the present application. The steps include:
  • Step S101 The OTA task master controller in the vehicle obtains multiple controllers to be flashed from the server; the controllers to be flashed include at least a network controller and a function controller.
  • FIG. 2 is a schematic diagram of a transmission path of a remote upgrade method provided by an embodiment of the present application.
  • the remote upgrade method includes cloud equipment and vehicles, where the cloud equipment includes OTA
  • the vehicle can be provided with a unified Internet port, such as V-BOX, etc.
  • V-BOX unified Internet port
  • This embodiment uses V-BOX as an example for illustration.
  • the vehicle is equipped with a task master for executing OTA, that is, the OTA task master controller.
  • the OTA task master controller can be set in the vehicle dynamic controller (VDC). This embodiment is not limited to this. .
  • the OTA task master controller in the connected car interacts with the server to obtain the controller that needs software upgrade, which is called the controller to be flashed in this embodiment.
  • the controller to be flashed is divided into a network controller and a function controller according to the rules of being able to connect to the Internet and not being able to connect to the Internet.
  • the network controller can directly access data from the cloud through V-BOX, while the function controller needs to obtain cloud data through the OTA task master controller.
  • the OTA task master controller in the vehicle determines the current controller to be flashed, it interacts with the content distribution network system.
  • the content distribution network system generates software for each controller to be flashed based on the controller to be flashed. package, and send the URL corresponding to the software package to the OTA task main controller.
  • Step S103 The OTA task master controller distributes the URL corresponding to the software package of each network controller to each network controller and triggers each network controller to download the software package respectively.
  • the OTA task master controller can assign the URL corresponding to its software package to the respective network controllers, and can trigger each network controller to download the software package through the network port.
  • This embodiment does not The OTA task master controller needs to download the software package in sequence and then send it to each controller to be flashed.
  • a network controller with network functions can download its own software package independently only through the URL. The download partitions of the software package are executed in parallel, thereby effectively utilizing the bandwidth, which can speed up the overall download speed of the software package, improve the efficiency of remote upgrade, and improve the user upgrade experience.
  • each controller can send a download completion message to the OTA task master controller.
  • the OTA task master controller will transmit the decryption verification certificate to each network controller, so that each network controller can Decrypt and verify the signature of the installation package and store it, then wait for the installation instructions.
  • the network controller can run a script to flash its own upgraded software package.
  • the OTA task master controller in the vehicle obtains multiple controllers to be flashed from the server; the controllers to be flashed include at least a network controller and a function controller; the content distribution network system generates a controller based on the controller to be flashed. corresponding software package, and sends the uniform resource locator URL corresponding to the software package to the OTA task main controller; the OTA task main controller distributes the URL corresponding to the software package of each network controller to each network controller and triggers each network The controller downloads the software package respectively; the OTA task master controller transmits the decryption verification certificate to each network controller, so that each network controller can decrypt, verify and store the software package.
  • each network controller downloads it separately, without the need for the OTA task master controller to download and distribute it uniformly, which improves the efficiency of downloading the software package, thereby increasing the upgrade speed of the ECU and even the entire task.
  • the OTA task main controller distributes the URL corresponding to the software package of each network controller to each network controller and triggers each network controller to download the software package respectively, including: the OTA task main controller will The URL corresponding to the software package of each network controller is assigned to the corresponding network controller; the OTA task master controller controls the network controller to download its software package; and downloads the function controller's software package according to the URL corresponding to the function controller's software package.
  • the above-mentioned controller to be flashed also includes a function controller.
  • the OTA task master controller directly assigns the URL corresponding to the network controller's software package to the corresponding network controller, and controls the network controller to directly download the software package.
  • the function controller cannot download its own software package, so the OTA task master controller parses the URL corresponding to the function controller's software package and helps download the function controller's software package.
  • the OTA task main controller and each network controller download software packages simultaneously, effectively saving time, and the software packages of the network controllers can also be directly downloaded to the target controller at the same time, without the need for OTA tasks.
  • the main controller downloads and then transmits it to each target controller again, because when the OTA task main controller needs to download multiple software packages for the controller to be refreshed, the excessive software package download and in-car transmission time will lag behind the entire task. speed. Utilize the Internet access function of each network controller to download simultaneously in different areas, thereby effectively utilizing bandwidth and improving flash writing efficiency.
  • the remote upgrade method may further include: the OTA task master controller decrypts, verifies and stores the software package of the function controller.
  • the OTA task master controller decrypts, verifies and stores the software package of the functional controller.
  • FIG. 3 is a schematic flow chart of another remote upgrade method provided by an embodiment of the present application. The steps include:
  • Step S202 The content distribution network system generates a corresponding software package according to the controller to be flashed, and sends the uniform resource locator URL corresponding to the software package to the OTA task main controller.
  • Step S203 The OTA task master controller distributes the URL corresponding to the software package of each network controller to each network controller and triggers each network controller to download the software package respectively.
  • Step S204 The OTA task master controller transmits the decryption verification certificate to each network controller, so that each network controller decrypts, verifies and stores the software package.
  • Step S205 After the OTA task main controller receives the installation request instruction, the OTA task main controller controls each network controller to flash the corresponding software package.
  • the OTA task master controller may accept the installation request instruction, and the OTA task master controller controls each network controller to flash the corresponding software package.
  • Step S206 The OTA task master controller classifies the function controllers and controls the function controllers of different classifications to execute the flashing process of the software package in parallel.
  • the OTA task master controller decomposes tasks, identifies controllers with parallel flashing conditions, and makes preparations before flashing.
  • the execution steps follow the Unified Diagnostic Services (UDS) flashing specification in ISO14229.
  • UDS Unified Diagnostic Services
  • function controllers they may exist in different domain controllers or different Ethernet nodes, resulting in the OTA task master controller needing to classify the function controllers, and functional controllers of different categories execute software flashing in parallel.
  • functional controllers with different Controller Area Network (CAN) buses can run scripts in parallel on their respective buses to flash software packages.
  • CAN Controller Area Network
  • the high performance of the OTA task main controller is used to call multiple flashing processes at the same time to upgrade multiple controllers at the same time, making full use of the Ethernet performance and improve user experience.
  • the OTA task main controller classifies the function controllers and controls the function controllers of different categories to execute the flashing process of the software package in parallel, which may include: function control for different domain controllers or different Ethernet nodes.
  • the controller calls different flashing sequences; for the function controllers of different bus nodes under the same domain controller, different flashing sequences are called; the function controllers that control the same bus node perform script flashing of the software package in sequence until the bus All software packages of the node's function controller have been flashed.
  • FIG. 4 A schematic diagram of a transmission path of another remote upgrade method provided by an embodiment of the present application.
  • corresponding flashing sequences are called simultaneously for ECUs or different Ethernet nodes under different domain controllers (Primary Domain Controllers, PDCs), and IP-based diagnostic protocols (Diagnostic communication) are used through different Ethernet channels.
  • PDCs Primary Domain Controllers
  • IP-based diagnostic protocols Diagnostic communication
  • DOIP Internet Protocol
  • the corresponding flash sequence is called at the same time, and the data is sent to the PDC using the DOIP protocol through an Ethernet channel, and the PDC performs DOIP
  • DOIP Internet Protocol
  • the bus running script continues to execute the "parallel flash queue”. If there are other devices on the CAN bus where the controller is located, When the ECU is to be upgraded, the OTA master node calls the next flash sequence, and the new controller joins the "parallel flash queue”.
  • the remote upgrade method may also include: after all controllers to be flashed feedback software packages are flashed, the OTA task master controller 300 controls the vehicle to enter the normal communication mode. When all flash scripts are run until the final programming consistency check is completed, the vehicle's flash environment is reset and enters normal communication mode.
  • the in-vehicle OTA task main controller before the in-vehicle OTA task main controller obtains multiple controllers to be flashed from the server, it may also include: after receiving the software package upgrade instruction, the OTA task main controller controls the vehicle to exit the normal communication mode. and establish network connections to servers and content delivery network systems.
  • Figure 5 is a schematic diagram of the preparation process before flashing provided by the embodiment of the present application
  • Figure 6 is a schematic diagram of the restart process after flashing provided by the embodiment of the present application.
  • the OTA task main controller needs to upgrade the software packages of at least some controllers, the OTA task main controller controls the VDC to exit the normal communication mode. That is, as shown in Figure 5, after entering the extended session, the Diagnostic Trouble Code is disabled.
  • the network controller includes: an infotainment controller; the function controller includes: a door controller, a seat controller, a battery controller, a power steering controller, and a radar.
  • infotainment controller network controller
  • door controller door controller
  • seat controller component controller
  • battery controller energy CAN
  • power steering controller chlorassis CAN
  • radar Ethernet node software upgrade is taken as an example to describe partition download and parallel flash logic, as shown in Figure 7.
  • Figure 7 is a schematic flow chart of another remote upgrade method provided by an embodiment of the present application. Proceed as follows:
  • Step S301 The in-vehicle OTA task master controller interacts with the server, confirms 6 controllers to be upgraded, and generates two software package sets according to the rules, namely the infotainment controller upgrade package and the remaining 5 software upgrade packages.
  • the OTA task master controller The server gets the URL.
  • Step S302 The OTA task main controller sends the infotainment controller upgrade package URL to the infotainment controller through the in-car Ethernet and triggers the infotainment controller to download the upgrade package; the OTA task main controller parses the remaining 5 software upgrade package URLs, Download.
  • the OTA task master controller After the download of the software upgrade package in steps S303 and 5 is completed, the OTA task master controller decrypts and verifies the signature and then saves it; the OTA task master controller waits for the infotainment controller to complete the download of the upgrade package, then sends the decryption verification certificate, and the infotainment controller The software package is decrypted and stored after signature verification.
  • This execution step follows the UDS flashing specification in ISO14229.
  • door controller (comfort CAN) and the seat controller (comfort CAN) belong to the same CAN bus, they belong to a refresh queue, and the door controller and seat controller are refreshed in sequence.
  • Step S307 After all controller feedback upgrades are completed, reset the vehicle's flash environment and enter the normal communication mode.
  • FIG. 8 is a schematic structural diagram of a remote upgrade system provided by an embodiment of the present application. As shown in Figure 8, it includes: a server 81, a content distribution network system 82 and an OTA task master controller 83 in the vehicle; the server 81 and the content distribution system The network system 82 is connected to the OTA task master controller 83 and other network controllers through the vehicle-side V-BOX;
  • the in-vehicle OTA task master controller 83 is used to obtain multiple controllers to be flashed from the server 81; the controllers to be flashed include at least a network controller and a function controller;
  • the content distribution network system 82 is used to generate the corresponding software package according to the controller to be flashed, and send the uniform resource locator URL corresponding to the software package to the OTA task main controller 83;
  • the OTA task master controller 83 is used to distribute the URL corresponding to the software package of each network controller to each network controller and trigger each network controller to download the software package respectively;
  • the OTA task master controller 83 is also used to transmit the decryption verification certificate to each network controller, so that each network controller can decrypt, verify and store the software package.
  • the OTA task master controller in the vehicle obtains multiple controllers to be flashed from the server; the controllers to be flashed include at least a network controller and a function controller; the content distribution network system generates a controller based on the controller to be flashed. corresponding software package, and sends the uniform resource locator URL corresponding to the software package to the OTA task main controller; the OTA task main controller distributes the URL corresponding to the software package of each network controller to each network controller and triggers each network The controller downloads the software package respectively; the OTA task master controller transmits the decryption verification certificate to each network controller, so that each network controller can decrypt, verify and store the software package.
  • each network controller When this application downloads the ECU software package, each network controller performs the download in partitions, without the need for the OTA task master controller to download and distribute it uniformly, which improves the efficiency of software package downloading and thereby increases the upgrade speed of the ECU and even the entire task.
  • the OTA task main controller is also used to control each network controller to flash the corresponding software package after receiving the installation request instruction; the OTA task main controller is also used to classify functional controllers and control different Classified function controllers execute the flashing process of software packages in parallel.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Stored Programmes (AREA)

Abstract

一种远程升级方法及系统。方法包括：车辆内OTA任务主控制器由服务器获取多个待刷写控制器；所述待刷写控制器至少包括网络控制器和功能控制器(S101)；内容分发网络系统根据所述待刷写控制器生成对应的软件包，并将所述软件包对应的统一资源定位符URL发送至所述OTA任务主控制器(S102)；所述OTA任务主控制器将各所述网络控制器的软件包对应的所述URL分配至各网络控制器并触发各网络控制器分别进行软件包下载(S103)；所述OTA任务主控制器将解密校验证书传输至各所述网络控制器，以使各所述网络控制器对所述软件包进行解密验签并存储(S104)。

Description

远程升级方法及系统
本申请要求在2022年07月06日提交中国专利局、申请号为202210796891.0的中国专利申请的优先权，以上申请的全部内容通过引用结合在本申请中。
技术领域
本申请涉及汽车远程控制技术领域，例如涉及一种远程升级方法及系统。
背景技术
软件升级功能应用于车辆研发、试制、生产、售后阶段，是装车后控制器升级的唯一方式。随着汽车步入智能化、网联化的新常态，软件升级从线下本地刷写逐渐发展为空中下载(Over-the-Air，OTA)技术。空中下载技术OTA是通过移动通信的空中接口实现对移动终端设备及用户身份识别卡(Subscriber Identity Module，SIM)数据进行远程管理的技术。经过公网多年的应用与发展，已十分成熟，网络运营商通过OTA技术实现SIM卡远程管理，还能提供移动化的新业务下载功能。在汽车中体现为平台向汽车的电子控制单元(Electronic Control Unit，ECU)下载并更新汽车智能系统。
发明内容
本申请实施例提供了一种远程升级方法及系统。
第一方面，本申请实施例提供了一种远程升级方法，包括：
车辆内OTA任务主控制器由服务器获取多个待刷写控制器；所述多个待刷写控制器至少包括网络控制器和功能控制器；
内容分发网络系统根据所述多个待刷写控制器生成对应的软件包，并将所述软件包对应的统一资源定位符URL发送至所述OTA任务主控制器；
所述OTA任务主控制器将每个所述网络控制器的软件包对应的所述URL分配至每个网络控制器并触发每个网络控制器分别进行软件包下载；
所述OTA任务主控制器将解密校验证书传输至每个所述网络控制器，以使每个所述网络控制器对所述软件包进行解密验签并存储。
第二方面，本申请实施例提供了一种远程升级系统，包括：服务器、内容分发网络系统和车辆内的OTA任务主控制器；所述服务器和所述内容分发网络系统分别通过车端V-BOX与所述OTA任务主控制器及其他网络控制器连接；
车辆内OTA任务主控制器设置为由服务器获取多个待刷写控制器；所述多 个待刷写控制器至少包括网络控制器和功能控制器；
内容分发网络系统设置为根据所述多个待刷写控制器生成对应的软件包，并将所述软件包对应的统一资源定位符URL发送至所述OTA任务主控制器；
所述OTA任务主控制器设置为将每个所述网络控制器的软件包对应的所述URL分配至每个网络控制器并触发每个网络控制器分别进行软件包下载；
所述OTA任务主控制器还设置为将解密校验证书传输至每个所述网络控制器，以使每个所述网络控制器对所述软件包进行解密验签并存储。
附图说明
图1为本申请实施例提供的远程升级方法的流程示意图；
图2为本申请实施例提供的一种远程升级方法的传输路径示意图；
图3为本申请实施例提供的另一种远程升级方法的流程示意图；
图4为本申请实施例提供的另一种远程升级方法的传输路径示意图；
图5为本申请实施例提供的刷写前准备流程示意图；
图6为本申请实施例提供的刷写后重启流程示意图；
图7为本申请实施例提供的另一种远程升级方法的流程示意图；
图8为本申请实施例提供的一种远程升级系统的结构示意图。
具体实施方式
真正影响OTA速度的因素主要分为两个：软件下载传输能力和刷写ECU效率。其中软件下载传输现在多为主控制器统一下载所有软件，下载完成后再进行车内传输。当需要升级整车多个ECU时，且个别ECU软件包较大时，这种升级方式会滞后整个任务的升级速度，尤其对于实时性要求较高的OTA远程刷写场景。
考虑到上述情况，本申请实施例提供了一种远程升级方法及系统。
下面结合附图和实施例对本申请作进一步的详细说明。可以理解的是，此处所描述的实施例仅仅用于解释本申请，而非对本申请的限定。另外还需要说明的是，为了便于描述，附图中仅示出了与本申请相关的部分而非全部结构。
本申请实施例提供了一种远程升级方法，如图1所示，图1为本申请实施例提供的远程升级方法的流程示意图，步骤包括：
步骤S101、车辆内OTA任务主控制器由服务器获取多个待刷写控制器；待刷写控制器至少包括网络控制器和功能控制器。
如图2所示，图2为本申请实施例提供的一种远程升级方法的传输路径示意图，在本实施例中的远程升级方法中，包括云端设备和车辆，其中，云端设备包括用于OTA的服务器100和内容分发网络系统(Content Delivery Network，CDN)200，服务器能够与车辆之间进行指令和信息的交互，内容分发网络系统CDN能够进行软件包的下载。车辆可设置统一上网端口，例如，V-BOX等，本实施例以V-BOX为例进行示意。车辆内设置有用于执行OTA的任务主控，也即，OTA任务主控制器，OTA任务主控制器可以设置于整车控制器(Vehicle Dynamics Control，VDC)中，本实施例对此不进行限定。车辆中其他具备联网功能的控制器与统一上网端口V-BOX可以通过以太网等连接。例如，自动驾驶控制器(Highly Automated Driving，HAD)和智能座舱域控制单元(Cockpit Space Center，CSC)均可以通过V-BOX从云端接入数据。
车联内的OTA任务主控制器与服务器之间交互，获取需要进行软件升级的控制器，本实施例称之为待刷写控制器。需要注意的是，本实施例根据可以联网和不能联网的规则将待刷写控制器分为网络控制器和功能控制器。其中，网络控制器可以直接通过V-BOX从云端接入数据，功能控制器则需要通过OTA任务主控制器获取云端数据。
步骤S102、内容分发网络系统根据待刷写控制器生成对应的软件包，并将软件包对应的统一资源定位符(Uniform Resource Locator，URL)发送至OTA任务主控制器。
继续参考图2，当车辆内OTA任务主控制器确定了当前待刷写控制器之后，与内容分发网络系统交互，内容分发网络系统根据待刷写控制器生成每个待刷写控制器的软件包，并将软件包对应的URL发送至OTA任务主控制器。
步骤S103、OTA任务主控制器将各网络控制器的软件包对应的URL分配至各网络控制器并触发各网络控制器分别进行软件包下载。
对于有联网功能的网络控制器，OTA任务主控制器可将其软件包对应的URL分配至各自网络控制器，并能够触发各个网络控制器通过网络端口分别进行软件包下载，则本实施例不需要由OTA任务主控制器依次下载软件包后，再发送至各个待刷写控制器，具有网络功能的网络控制器仅通过URL可单独进行自身软件包的下载。软件包的下载分区并行执行，从而有效利用带宽，能够从整体上加快了软件包的下载速度，提高了远程升级的效率，提升用户升级体验。
步骤S104、OTA任务主控制器将解密校验证书传输至各网络控制器，以使各网络控制器对软件包进行解密验签并存储。
各个网络控制器将其软件包下载完成后，各控制器可以发出下载完毕信息至OTA任务主控制器，OTA任务主控制器将解密校验证书传输至各网络控制器，使得各个网络控制器能够对安装包进行解密验签并存储，之后等待安装指令即可。当各个网络控制器接收到OTA任务主控制器发送的软件包的安装指令，网络控制器可运行脚本对自身升级的软件包进行刷写。
本申请实施例中，车辆内OTA任务主控制器由服务器获取多个待刷写控制器；待刷写控制器至少包括网络控制器和功能控制器；内容分发网络系统根据待刷写控制器生成对应的软件包，并将软件包对应的统一资源定位符URL发送至OTA任务主控制器；OTA任务主控制器将各网络控制器的软件包对应的URL分配至各网络控制器并触发各网络控制器分别进行软件包下载；OTA任务主控制器将解密校验证书传输至各网络控制器，以使各网络控制器对软件包进行解密验签并存储。本申请在下载ECU软件包时，各网络控制器分别进行下载，不需要OTA任务主控制器统一下载并分发，提高了软件包下载效率，进而提高ECU乃至整个任务的升级速度。
以上是本申请的一类实施例，下面将结合本申请实施例中的附图，对本申请实施例进行清楚、完整地描述。基于本申请中的实施例，本领域普通技术人员在没有做出创造性劳动前提下，所获得的所有其他实施例，都属于本申请保护的范围。
在上述实施例的基础上，OTA任务主控制器将各网络控制器的软件包对应的URL分配至各网络控制器并触发各网络控制器分别进行软件包下载，包括：OTA任务主控制器将各网络控制器的软件包对应的URL分配至对应网络控制器；OTA任务主控制器控制网络控制器下载其软件包；并根据功能控制器的软件包对应的URL下载功能控制器的软件包。
上述待刷写控制器除了网络控制器，还包括功能控制器。对于网络控制器，OTA任务主控制器直接将网络控制器的软件包对应的URL单独分配至对应网络控制器，并控制网络控制器直接下载软件包。但是功能控制器无法进行自身软件包的下载，则OTA任务主控制器对功能控制器的软件包对应的URL进行解析，并帮助下载功能控制器的软件包。则本实施例中，OTA任务主控制器与各个网络控制器分别同时进行软件包的下载，有效节省时间，并且网络控制器的软件包还可以分别同时直接下载到目标控制器，不需要OTA任务主控制器下载后再次传输至各个目标控制器，因为当OTA任务主控制器需要下载多个待刷新控制器的软件包时，过大的软件包下载以及车内传输的时间，会滞后整个任务 的速度。利用各网络控制器自身的上网功能，分区域同时下载，从而有效利用带宽，提高刷写效率。
在一实施例中，远程升级方法还可以包括：OTA任务主控制器对功能控制器的软件包进行解密验签并存储。此外，当各个网络控制器对各自软件包进行解密验签并存储时，OTA任务主控制器对功能控制器的软件包进行解密验签并存储。
真正影响OTA速度的因素包括：软件包下载传输能力和刷写ECU效率。上述仅对软件包下载进行分区下载，并未对刷写ECU效率进行详述，如图3所示，图3为本申请实施例提供的另一种远程升级方法的流程示意图，步骤包括：
步骤S201、车辆内OTA任务主控制器由服务器获取多个待刷写控制器；待刷写控制器至少包括网络控制器和功能控制器。
步骤S202、内容分发网络系统根据待刷写控制器生成对应的软件包，并将软件包对应的统一资源定位符URL发送至OTA任务主控制器。
步骤S203、OTA任务主控制器将各网络控制器的软件包对应的URL分配至各网络控制器并触发各网络控制器分别进行软件包下载。
步骤S204、OTA任务主控制器将解密校验证书传输至各网络控制器，以使各网络控制器对软件包进行解密验签并存储。
步骤S205、OTA任务主控制器接收到安装请求指令后，OTA任务主控制器控制各网络控制器刷写对应软件包。
当软件包下载完成并完成解密验签并保存的操作后，OTA任务主控制器可能接受安装请求指令，OTA任务主控制器控制各个网络控制器刷写对应软件包。
步骤S206、OTA任务主控制器对功能控制器分类，并控制不同分类的功能控制器并行执行软件包的刷写进程。
OTA任务主控制器进行任务分解，识别具备并行刷写条件的控制器，做刷写前准备，执行步骤遵循于ISO14229中的统一诊断服务(Unified Diagnostic Services，UDS)刷写规范。对于功能控制器，其可能存在于不同的域控制器或者存在于不同的以太网节点，导致OTA任务主控制器需要对功能控制器分类，不同类别的功能控制器并行执行软件的刷写。例如，不同控制器局域网络(Controller Area Network，CAN)总线的功能控制器，可由各自的总线并行进行脚本运行，对软件包进行刷写。本实施例当需要升级不同CAN总线或者以太网节点的功能控制器时，利用OTA任务主控制器的高性能，同时调用多个刷写进程，进行多个控制器同时升级，充分利用了以太网的性能，提升用户体验。
在一实施例中，OTA任务主控制器对功能控制器分类，并控制不同分类的功能控制器并行执行软件包的刷写进程，可以包括：对于不同域控制器或不同以太网节点的功能控制器调用不同的刷写序列；对于同一域控制器下的不同总线节点的功能控制器，调用不同的刷写序列；控制同一总线节点的功能控制器依次进行软件包的脚本刷写，直至该总线节点的功能控制器的软件包全部刷写完成。
刷写待刷写控制器ECU的过程中，对于不同CAN/CAN FD(CAN with Flexible Data Rate)总线上的控制器与以太网节点采用并行刷写的方法，如图4所示，图4为本申请实施例提供的另一种远程升级方法的传输路径示意图。并行刷写时，对于不同域控制器(Primary Domain Controller，PDC)下的ECU或不同以太网节点，同时调用相应的刷写序列，通过不同的以太网通道，使用基于IP的诊断协议(Diagnostic communication over Internet Protocol，DOIP)协议进行数据发送；对于同一PDC下不同CAN/CAN FD节点的ECU，同时调用相应的刷写序列，通过一条以太网通道，使用DOIP协议将数据发送给PDC，PDC进行DOIP转CAN/CAN FD服务后分发至不同CAN/CAN FD上的相应ECU；当某个ECU刷写完成，该总线运行脚本继续执行“并行刷写队列”，如果该控制器所在CAN总线上存在其他待升级ECU，OTA主控节点进行下一个刷写序列的调用，新控制器加入“并行刷写队列”。
在一实施例中，远程升级方法还可以包括：当所有待刷写控制器反馈软件包刷写完成后，OTA任务主控制器300控制车辆进入正常通讯模式。当所有的刷写脚本运行到最终的编程一致性检查完成后，复位车辆的刷写环境进入正常通讯模式。
在一实施例中，车内OTA任务主控制器由服务器获取多个待刷写控制器之前，还可以包括：当接收到软件包升级指令后，OTA任务主控制器控制车辆退出正常通讯模式，并建立与服务器和内容分发网络系统的网络连接。如图5和图6所示，图5为本申请实施例提供的刷写前准备流程示意图，图6为本申请实施例提供的刷写后重启流程示意图。当OTA任务主控制器需要升级至少部分控制器的软件包时，OTA任务主控制器控制VDC退出正常通讯模式，也即，如图5所示，进入扩展会话之后，禁止故障代码(Diagnostic Trouble Code，DTC)记录，之后禁止can总线通讯，之后可进入远程升级过程。而当刷写完成所有的待刷写控制器，如图6所示，则进入扩展会话，之后依次使能CAN通讯，使能故障码记录。
在一实施例中，网络控制器包括：信息娱乐控制器；功能控制器包括：车门控制器、座椅控制器、电池控制器、转向助力控制器和雷达。在上述实施例的基础上，以一些事例进行解释说明。以6个ECU：信息娱乐控制器(网络控制器)、车门控制器(舒适CAN)、座椅控制器(舒适CAN)、电池控制器(能源CAN)、转向助力控制器(底盘CAN)、雷达(以太网节点)软件升级为例，描述分区下载、并行刷写逻辑，如图7所示，图7为本申请实施例提供的另一种远程升级方法的流程示意图。步骤如下：
步骤S301、车内OTA任务主控制器与服务器交互，确认待升级控制器6个，根据规则生成两个软件包集，分别是信息娱乐控制器升级包及剩余5软件升级包，OTA任务主控制器获取URL。
步骤S302、OTA任务主控制器将信息娱乐控制器升级包URL通过车内以太网发送至信息娱乐控制器并触发信息娱乐控制器下载升级包；OTA任务主控制器解析剩余5软件升级包URL，进行下载。
步骤S303、5软件升级包下载完成后，OTA任务主控制器进行解密验签后保存；OTA任务主控制器等待信息娱乐控制器下载升级包完成后，发送解密验签证书，信息娱乐控制器对软件包解密验签后存储。
步骤S304、OTA任务主控制器收到安装请求后，通过以太网触发信息娱乐控制器自升级，对5软件包进行任务分解，识别具备并行刷写条件的控制器，做刷写前准备。
该执行步骤遵循于ISO14229中的UDS刷写规范。
步骤S305、OTA任务主控制器将车门控制器、电池控制器、转向助力控制器和雷达分为4个刷写进程同时执行。
因为车门控制器(舒适CAN)、电池控制器(能源CAN)、转向助力控制器(底盘CAN)、雷达(以太网节点)满足不同CAN总线上的ECU与以太网节点条件，所以OTA任务主控制器同时执行对应的4个刷写进程。
步骤S306、当车门控制器刷写完成，脚本继续执行其他“并行刷写队列”，同时OTA任务主控制器进行座椅控制器刷写序列的调用，座椅控制器加入“并行刷写队列”。
车门控制器(舒适CAN)与座椅控制器(舒适CAN)同属一个CAN总线，则其属于一个刷写队列，车门控制器与座椅控制器依次刷写。
步骤S307、当所有的控制器反馈升级完成后，复位车辆的刷写环境进入正常通讯模式。
上述以示例的形式，更加清楚的输出了本申请的分区下载和并行刷写的远程升级过程，均有效提高下载和刷写速度，节省时间，提升用户体验，远程升级效率进一步提高。
基于同一构思，本申请实施例提供一种远程升级系统。图8为本申请实施例提供的一种远程升级系统的结构示意图，如图8所示，包括：服务器81、内容分发网络系统82和车辆内的OTA任务主控制器83；服务器81和内容分发网络系统82均通过车端V-BOX与OTA任务主控制器83及其他网络控制器连接；
车辆内OTA任务主控制器83用于由服务器81、获取多个待刷写控制器；待刷写控制器至少包括网络控制器和功能控制器；
内容分发网络系统82用于根据待刷写控制器生成对应的软件包，并将软件包对应的统一资源定位符URL发送至OTA任务主控制器83；
OTA任务主控制器83用于将各网络控制器的软件包对应的URL分配至各网络控制器并触发各网络控制器分别进行软件包下载；
OTA任务主控制器83还用于将解密校验证书传输至各网络控制器，以使各网络控制器对软件包进行解密验签并存储。
本申请实施例中，车辆内OTA任务主控制器由服务器获取多个待刷写控制器；待刷写控制器至少包括网络控制器和功能控制器；内容分发网络系统根据待刷写控制器生成对应的软件包，并将软件包对应的统一资源定位符URL发送至OTA任务主控制器；OTA任务主控制器将各网络控制器的软件包对应的URL分配至各网络控制器并触发各网络控制器分别进行软件包下载；OTA任务主控制器将解密校验证书传输至各网络控制器，以使各网络控制器对软件包进行解密验签并存储。本申请在下载ECU软件包时，各网络控制器分区进行下载，不需要OTA任务主控制器统一下载并分发，提高了软件包下载效率，进而提高ECU乃至整个任务的升级速度。
在一实施例中，OTA任务主控制器还用于在接收到安装请求指令后，控制各网络控制器刷写对应软件包；OTA任务主控制器还用于对功能控制器分类，并控制不同分类的功能控制器并行执行软件包的刷写进程。
本领域技术人员会理解，本申请不限于这里的特定实施例，对本领域技术人员来说能够进行各种明显的变化、重新调整和替代而不会脱离本申请的保护范围。因此，虽然通过以上实施例对本申请进行了较为详细的说明，但是本申请不仅仅限于以上实施例，在不脱离本发明构思的情况下，还可以包括更多其他等效实施例，而本申请的范围由所附的权利要求范围决定。

Claims (10)

  1. 一种远程升级方法，包括：
    车辆内空中下载OTA任务主控制器由服务器获取多个待刷写控制器；所述多个待刷写控制器至少包括网络控制器和功能控制器；
    内容分发网络系统根据所述多个待刷写控制器生成对应的软件包，并将所述软件包对应的统一资源定位符URL发送至所述OTA任务主控制器；
    所述OTA任务主控制器将每个所述网络控制器的软件包对应的所述URL分配至每个网络控制器并触发每个网络控制器分别进行软件包下载；
    所述OTA任务主控制器将解密校验证书传输至每个所述网络控制器，以使每个所述网络控制器对所述软件包进行解密验签并存储。
  2. 根据权利要求1所述的远程升级方法，其中，所述OTA任务主控制器将每个所述网络控制器的软件包对应的所述URL分配至每个网络控制器并触发每个网络控制器分别进行软件包下载，包括：
    所述OTA任务主控制器将每个所述网络控制器的软件包对应的所述URL分配至对应网络控制器；
    所述OTA任务主控制器控制所述网络控制器下载对应的软件包；并根据所述功能控制器的软件包对应的URL下载所述功能控制器的软件包。
  3. 根据权利要求2所述的远程升级方法，还包括：所述OTA任务主控制器对所述功能控制器的软件包进行解密验签并存储。
  4. 根据权利要求1所述的远程升级方法，还包括：
    所述OTA任务主控制器接收到安装请求指令后，所述OTA任务主控制器控制所述每个网络控制器刷写对应所述软件包；
    所述OTA任务主控制器对所述功能控制器分类，并控制不同分类的所述功能控制器并行执行所述软件包的刷写进程。
  5. 根据权利要求4所述的远程升级方法，其中，所述OTA任务主控制器对所述功能控制器分类，并控制不同分类的所述功能控制器并行执行所述软件包的刷写进程，包括：
    对于不同域控制器或不同以太网节点的所述功能控制器调用不同的刷写序列；
    对于同一域控制器下的不同总线节点的所述功能控制器，调用不同的刷写序列；
    控制同一总线节点的所述功能控制器依次进行软件包的脚本刷写，直至所述总线节点的所述功能控制器的软件包全部刷写完成。
  6. 根据权利要求4所述的远程升级方法，还包括：
    当所有所述待刷写控制器反馈所述软件包刷写完成后，所述OTA任务主控制器控制车辆进入正常通讯模式。
  7. 根据权利要求1所述的远程升级方法，车辆内OTA任务主控制器由服务器获取多个待刷写控制器之前，还包括：
    当接收到软件包升级指令后，所述OTA任务主控制器控制车辆退出正常通讯模式，并建立与服务器和内容分发网络系统的网络连接。
  8. 根据权利要求1所述的远程升级方法，其中，所述网络控制器包括：信息娱乐控制器；
    所述功能控制器包括：车门控制器、座椅控制器、电池控制器、转向助力控制器和雷达。
  9. 一种远程升级系统，包括：服务器、内容分发网络系统和车辆内的OTA任务主控制器；所述服务器和所述内容分发网络系统分别通过车端V-BOX与所述OTA任务主控制器及其他网络控制器连接；
    车辆内OTA任务主控制器设置为由服务器获取多个待刷写控制器；所述多个待刷写控制器至少包括网络控制器和功能控制器；
    内容分发网络系统设置为根据所述多个待刷写控制器生成对应的软件包，并将所述软件包对应的统一资源定位符URL发送至所述OTA任务主控制器；
    所述OTA任务主控制器设置为将每个所述网络控制器的软件包对应的所述URL分配至每个网络控制器并触发每个网络控制器分别进行软件包下载；
    所述OTA任务主控制器还设置为将解密校验证书传输至每个所述网络控制器，以使每个所述网络控制器对所述软件包进行解密验签并存储。
  10. 根据权利要求9所述的远程升级系统，其中，所述OTA任务主控制器还设置为在接收到安装请求指令后，控制所述每个网络控制器刷写对应所述软件包；
    所述OTA任务主控制器还设置为对所述功能控制器分类，并控制不同分类的所述功能控制器并行执行所述软件包的刷写进程。
PCT/CN2023/105787 2022-07-06 2023-07-05 远程升级方法及系统 WO2024008104A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202210796891.0A CN115225492A (zh) 2022-07-06 2022-07-06 一种远程升级方法及系统
CN202210796891.0 2022-07-06

Publications (1)

Publication Number Publication Date
WO2024008104A1 true WO2024008104A1 (zh) 2024-01-11

Family

ID=83609155

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/105787 WO2024008104A1 (zh) 2022-07-06 2023-07-05 远程升级方法及系统

Country Status (2)

Country Link
CN (1) CN115225492A (zh)
WO (1) WO2024008104A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN115225492A (zh) * 2022-07-06 2022-10-21 中国第一汽车股份有限公司 一种远程升级方法及系统
CN116010934B (zh) * 2023-01-06 2023-12-12 小米汽车科技有限公司 域控制器进程通讯方法、装置、车辆及存储介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN112052017A (zh) * 2020-08-21 2020-12-08 东风汽车集团有限公司 汽车can控制器ota升级系统及方法
WO2021008184A1 (zh) * 2019-07-18 2021-01-21 南京依维柯汽车有限公司 新能源汽车上的fota固件远程升级系统及其升级方法
CN113094062A (zh) * 2019-12-23 2021-07-09 华为技术有限公司 升级方法及装置
WO2022061843A1 (zh) * 2020-09-27 2022-03-31 华为技术有限公司 一种车辆升级方法及装置
CN115225492A (zh) * 2022-07-06 2022-10-21 中国第一汽车股份有限公司 一种远程升级方法及系统

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114327543A (zh) * 2021-12-16 2022-04-12 奇瑞新能源汽车股份有限公司 车载控制器的在线升级方法、装置、车辆及存储介质

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2021008184A1 (zh) * 2019-07-18 2021-01-21 南京依维柯汽车有限公司 新能源汽车上的fota固件远程升级系统及其升级方法
CN113094062A (zh) * 2019-12-23 2021-07-09 华为技术有限公司 升级方法及装置
CN112052017A (zh) * 2020-08-21 2020-12-08 东风汽车集团有限公司 汽车can控制器ota升级系统及方法
WO2022061843A1 (zh) * 2020-09-27 2022-03-31 华为技术有限公司 一种车辆升级方法及装置
CN115225492A (zh) * 2022-07-06 2022-10-21 中国第一汽车股份有限公司 一种远程升级方法及系统

Also Published As

Publication number Publication date
CN115225492A (zh) 2022-10-21

Similar Documents

Publication Publication Date Title
WO2024008104A1 (zh) 远程升级方法及系统
US20230289174A1 (en) Vehicle upgrade method and apparatus
CN111385191B (zh) 车载互联网关、车辆ota升级系统和方法、计算机存储介质
CN113037603B (zh) 一种远程控制方法、装置和车辆
EP3759588B1 (en) Method and apparatus for updating devices in a remote network
US20220276856A1 (en) Software upgrading method, apparatus, and system
CN113094062A (zh) 升级方法及装置
CN114553873A (zh) 基于soa的车云协同控制系统、方法及可读存储介质
WO2024007987A1 (zh) 数字钥匙系统的车端固件升级方法、装置、设备及介质
CN112673609B (zh) 一种数据传输系统、数据传输方法，智能车以及装置
WO2023274327A1 (zh) 数据传输方法、数据传输装置、数据传输设备及终端
CN113810270A (zh) 一种实现车载控制器局域网soa化的方法及装置
WO2024078634A1 (zh) 服务管理方法、系统、装置、电子设备及存储介质
CN112887401B (zh) 一种基于多个操作系统的网络访问方法及车机系统
CN116827854A (zh) 一种基于冗余信息反馈的车载通信系统及方法
CN114374714A (zh) 集中式汽车电子电气架构搭建方法、拓扑结构及存储介质
CN113377393B (zh) 一种车载系统主节点的诊断刷新系统及方法
Adam et al. Cyber organic systems network-a new network architecture for future vehicles
WO2024016251A1 (zh) 一种日志上报方法及装置
Broux et al. Communication patterns in automotive systems
CN116506840A (zh) 车辆ota升级方法、系统、电子设备及存储介质
Huang Application Scenarios of AUTOSAR Classic Platform and Adaptive Platform
CN115811465A (zh) 网络配置方法、代理组件、控制器、电子设备和存储介质
CN117270911A (zh) 一种升级维持方法、装置、电子设备及存储介质
CN117435220A (zh) 基于编程模式的ota升级方法、装置、电子设备及存储介质

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23834871

Country of ref document: EP

Kind code of ref document: A1