Vehicle data upgrading method, vehicle data upgrading device, vehicle and storage medium

Abstract

The invention provides a vehicle data upgrading method, a vehicle data upgrading device, a vehicle and a storage medium, the method is applied to the field of vehicle control, and the method comprises the following steps: acquiring a data packet of the vehicle and the installation time of the data packet; wherein the data packet comprises an upgrading data packet; detecting whether a user exists in the vehicle or not when the installation time arrives; if no user exists in the vehicle, sending a silence instruction to a gateway in the vehicle; wherein the silence instruction is used for controlling the gateway to enter a silence state; and when the gateway is in the silent state, sending an upgrade data packet to a target electronic control unit of the vehicle through the gateway, so that the target electronic control unit is upgraded based on the upgrade data packet. The method can ensure that the data upgrading process in the vehicle is completed smoothly.

Description

Technical Field

[0001] The present application relates to the automotive field, and more specifically, to a vehicle data upgrading method, a vehicle data upgrading device, a vehicle and a storage medium in the field of vehicle control technology. Background Art

[0002] With the continuous development of intelligent technology, software OTA upgrades are becoming more and more common and frequent in the automotive field. However, many automobile OEMs have only implemented basic software upgrade functions and have not fully considered the safety protection measures during the software upgrade process, resulting in greater safety risks when vehicles are undergoing OTA upgrades.

[0003] If safety protection measures are not taken during the OTA upgrade process, it may affect the normal operation of the vehicle and may also endanger driving safety.

[0004] Therefore, how to ensure the smooth completion of the data upgrade process in the vehicle is the current problem that needs to be solved. Summary of the invention

[0005] The present application provides a vehicle data upgrade method and a vehicle data upgrade device. The method can ensure that the data upgrade process in the vehicle is successfully completed by ensuring that there is no user in the vehicle during the vehicle data upgrade process and sending a silent command to the gateway.

[0006] In a first aspect, a vehicle data updating method is provided, the method comprising:

[0007] Obtain the vehicle's data packet and the installation time of the data packet; wherein the data packet includes an upgrade data packet; when the installation time arrives, detect whether there is a user in the vehicle; if there is no user in the vehicle, send a silent command to the gateway in the vehicle; wherein the silent command is used to control the gateway to enter a silent state; when the gateway is in the silent state, send an upgrade data packet to a target electronic control unit of the vehicle through the gateway, so that the target electronic control unit is upgraded based on the upgrade data packet.

[0008] In an embodiment of the present application, by obtaining the vehicle's data packet and its corresponding installation time, when the installation time is reached, it is detected whether there is a user in the vehicle. If no user exists, a silent command is sent to the gateway in the vehicle to control the gateway to enter a silent state; by ensuring that there is no user in the vehicle during the upgrade, it can be ensured that the vehicle's automatic upgrade process will not be subject to human interference; by ensuring that the vehicle enters silent mode during the upgrade, it can be ensured that the stability and security of data transmission can be ensured; in the above manner, it can be ensured that the upgrade process of data in the vehicle is completed smoothly.

[0009] In combination with the first aspect, in some possible implementations, the present invention further includes:

[0010] Detecting a current load rate of a target network segment in a gateway; wherein the target network segment is a network segment used to transmit data packets; sending a silent command to a gateway in a vehicle, including: if the current load rate of the target network segment is greater than a preset load rate, sending a silent command to the gateway.

[0011] In an embodiment of the present application, by detecting the current load rate of the target network segment in the gateway, the possible transmission pressure of the target network segment during the upgrade process can be evaluated; if it is detected that the current load rate of the target network segment is greater than the preset load rate, a silent instruction is sent to the gateway to reasonably allocate network resources to avoid overload during the upgrade process, which may cause data transmission failure, thereby ensuring the smooth progress of the upgrade process.

[0012] In combination with the first aspect and the above implementations, in some possible implementations, the present invention further includes:

[0013] After detecting that the target electronic control unit upgrade is completed, a first instruction is sent to the gateway to make the gateway exit the silent state; and / or a second instruction is sent to the gateway to make the gateway control the target electronic control unit to clear the fault code generated during the upgrade process.

[0014] In an embodiment of the present application, after detecting that the target electronic control unit has completed the upgrade, an instruction is sent to the gateway to control the gateway to exit the silent state, thereby ensuring that normal communication of the vehicle is restored after the upgrade is completed; after the upgrade is completed, an instruction is sent to control the target electronic control unit to clear the fault code generated during the upgrade process, so that the abnormal or error records generated during the upgrade process can be cleared in time, thereby improving the reliability of the vehicle.

[0015] In combination with the first aspect and the above implementation, in some possible implementations, the vehicle data packet is a data packet obtained from a server, and further includes:

[0016] Perform a first check on the data packet; if the data packet passes the first check, send a signature verification mark to the server; wherein the signature verification mark is used to indicate that the data packet has passed the first check.

[0017] In an embodiment of the present application, a first check is performed on the data packet downloaded from the server to ensure the legitimacy of the data packet downloaded by the vehicle; after the first check, a verification mark is sent to the server to prevent unauthorized or erroneous data packets from being downloaded and installed; by verifying the downloaded data packet and feeding back the verification result to the server, the security of the upgrade can be improved.

[0018] In combination with the first aspect and the above implementations, in some possible implementations, sending an upgrade data packet to a target electronic control unit of a vehicle through a gateway includes:

[0019] Transmit a data packet to a gateway so that the gateway performs a first check and a second check on the data packet; if the data packet passes the first check and the second check, parse the data packet through the gateway to obtain an upgrade data packet; and send the upgrade data packet to a target electronic control unit of the vehicle through the gateway.

[0020] In an embodiment of the present application, after the data packet is transmitted to the gateway, a first check is performed on the data packet to ensure the legitimacy of the source of the data packet; a second check is performed on the data packet to further verify the validity of the data packet; only after passing the first check and the second check will the data packet be parsed and the upgrade data packet be obtained; the upgrade data packet is transmitted to the target electronic control unit. The above process ensures the legitimacy of the source of the upgrade data packet and the validity of the data during the transmission process, thereby ensuring a smooth upgrade.

[0021] In combination with the first aspect and the above implementations, in some possible implementations, the present invention further includes:

[0022] The target user information of the vehicle is obtained; after detecting that the target electronic control unit has been upgraded, a second prompt message is sent to the target user; wherein the second prompt message includes the upgraded version number and the upgraded function information.

[0023] In an embodiment of the present application, the information of the target user of the vehicle is obtained, and after detecting that the upgrade is complete, a prompt message is automatically sent to the target user to inform the user of the upgrade status, ensuring that the user obtains the upgrade content in a timely manner, helping the user understand the changes in the vehicle functions, and improving the user experience.

[0024] In combination with the first aspect and the above implementations, in some possible implementations, the present invention further includes:

[0025] When the installation time is reached, if there is a user in the vehicle, the installation time is updated based on a preset duration or the user's operation to obtain an updated installation time; when the updated installation time is reached, it is detected whether there is a user in the vehicle.

[0026] In an embodiment of the present application, when the installation time is reached, if there is a user in the vehicle, the installation time is updated based on the preset duration or the user's operation, and when the installation time is reached again, it is re-detected whether there is a user in the vehicle; when the installation time is reached, if there is a user in the vehicle, the installation time is updated to avoid the presence of users in the vehicle during the upgrade, thereby ensuring the smooth upgrade of data in the vehicle.

[0027] In a second aspect, a vehicle data upgrading device is provided, the device comprising:

[0028] An acquisition module, used to acquire a vehicle data packet and an installation time of the data packet; wherein the data packet includes an upgrade data packet;

[0029] The processing module is used to detect whether there is a user in the vehicle when the installation time arrives; if there is no user in the vehicle, send a silent command to the gateway in the vehicle; wherein the silent command is used to control the gateway to enter a silent state; when the gateway is in the silent state, send an upgrade data packet to a target electronic control unit of the vehicle through the gateway, so that the target electronic control unit is upgraded based on the upgrade data packet.

[0030] It should be understood that the expansion, limitation, explanation and description of the relevant contents in the above-mentioned first aspect also apply to the same contents in the second aspect.

[0031] In a third aspect, a vehicle is provided, comprising a memory and a processor; the memory is used to store executable program code, and the processor is used to call and run the executable program code from the memory, so that the vehicle executes the vehicle data upgrade method in the above-mentioned first aspect or any possible implementation method of the first aspect.

[0032] In a fourth aspect, a computer program product is provided, which includes: a computer program code, which, when executed on a computer, enables the computer to execute the vehicle data upgrade method in the first aspect or any possible implementation of the first aspect.

[0033] In a fifth aspect, a computer-readable storage medium is provided, which stores a computer program code. When the computer program code runs on a computer, the computer executes the vehicle data upgrade method in the above-mentioned first aspect or any possible implementation of the first aspect. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] Figure 1 is a schematic flow chart of a vehicle data upgrading method provided in an embodiment of the present application;

[0035] Figure 2 is a schematic flow chart of another vehicle data upgrading method provided in an embodiment of the present application;

[0036] Figure 3 is a schematic flow chart of another vehicle data upgrading method provided in an embodiment of the present application;

[0037] Figure 4 It is a structural schematic diagram of a vehicle data upgrading device provided in an embodiment of the present application;

[0038] Figure 5 It is a structural schematic diagram of a vehicle provided in an embodiment of the present application. DETAILED DESCRIPTION

[0039] The technical solution in the present application will be described clearly and in detail below in conjunction with the accompanying drawings. In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B: "and / or" in the text is only a description of the association relationship of associated objects, indicating that there can be three relationships, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In addition, in the description of the embodiments of the present application, "multiple" means two or more than two.

[0040] In the following, the terms "first" and "second" are used for descriptive purposes only and are not to be understood as suggesting or implying relative importance or implicitly indicating the number of technical features indicated. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features.

[0041] With the continuous development of intelligent technology, software upgrades through Over The Air Technology (OTA) have become more and more common and frequent in the automotive field. Various vehicle systems, such as engine control, driver assistance systems, and infotainment systems, rely on regular software updates to optimize performance, fix vulnerabilities, and provide new features to users. However, many automobile OEMs currently only implement basic software upgrade functions, and do not fully consider safety protection measures during software upgrades. OTA upgrades often involve the coordination of multiple electronic control units (ECUs) and the transmission of large amounts of data. If safety is not fully guaranteed during the upgrade process, it may lead to upgrade failure or system abnormalities, which in turn affects the overall stability of the vehicle, and may interfere with the normal operation of the vehicle and affect the user experience. Therefore, how to ensure the smooth completion of the data upgrade process in the vehicle is a problem that needs to be solved at present. The smooth upgrade of data in the vehicle is to ensure the smooth upgrade of the software in the vehicle.

[0042] In view of this, the present application provides a vehicle data upgrade method, a vehicle data upgrade device, a vehicle and a storage medium. The method can obtain the vehicle's data packet and its corresponding installation time, and when the installation time arrives, detect whether there is a user in the vehicle. If there is no user, a silent command is sent to the gateway in the vehicle to control the gateway to enter a silent state; by ensuring that there is no user in the vehicle during the upgrade, it can be ensured that the vehicle's automatic upgrade process will not be subject to human interference; by ensuring that the vehicle enters silent mode during the upgrade, it can be ensured that the stability and security of data transmission can be ensured; in the above manner, it can be ensured that the data upgrade process in the vehicle is completed smoothly.

[0043] Combine the following Figure 1A vehicle data upgrading method provided in an embodiment of the present application is described in detail.

[0044] Figure 1 FIG. 1 is a schematic flow chart of a vehicle data upgrade method provided in an embodiment of the present application. Figure 1 As shown, the method 100 includes S110 to S140, and S110 to S140 are described in detail below.

[0045] For example, Figure 1 The vehicle data upgrade method 100 shown may be executed by the vehicle; or, by a head unit (HUT) in the vehicle; or, by a processor in the vehicle; or, by a chip in a processor mounted in the vehicle.

[0046] S110: Obtain a vehicle data packet and the installation time of the data packet.

[0047] Among them, the data packet includes an upgrade data packet for updating the ECU in the vehicle; for example, the data packet can be a firmware update package, a software patch package or a function enhancement package, specifically including driver software, control algorithms, communication protocols or applications, etc.; in addition, the format of the data packet can be common firmware formats such as .bin, .hex, .srec, or an encrypted custom format to ensure the security and integrity of the upgrade data; the data packet may also include relevant verification information, such as signature information and verification code, to verify the integrity and legitimacy of the data during the upgrade process.

[0048] In an embodiment of the present application, a data packet for upgrading a vehicle system and a time for installing the data packet are obtained.

[0049] Exemplarily, the HUT in the vehicle establishes a network connection with a firmware over-the-air (FOTA) server through the on-board wireless LAN (Wireless Fidelity, WIFI) module. After the HUT is connected to the FOTA server, it automatically uploads the vehicle's current system information, such as software version, hardware configuration, etc. The FOTA server will configure the upgrade strategy and send the upgrade task to the HUT. After receiving the upgrade task, the HUT downloads the data package to the local via WIFI and obtains the installation time for installing the data package.

[0050] Exemplarily, the installation time of the data package may be the default upgrade time configured when the vehicle leaves the vehicle; for example, 1 a.m. to 6 a.m.; or, the supplier may upload the data package to the FOTA server, and the server may push an upgrade notification to the user, and the user may manually set the installation time; or, it may be an installation time selected based on an intelligent analysis of the user's driving habits, the vehicle parking location, and the parking time; or, in the event of an important version upgrade or an emergency security patch, the first available time period after the next time the vehicle enters a stationary state may be automatically set as the installation time.

[0051] Optionally, the HUT can dynamically adjust the download bandwidth according to the real-time network status to ensure that the download process does not affect the communication of other key systems, and the download process is not affected by other communication processes, resulting in download failure.

[0052] In one implementation, the method further includes:

[0053] Perform a first check on the data packet; if the data packet passes the first check, send a signature verification mark to the server; wherein the signature verification mark is used to indicate that the data packet has passed the first check.

[0054] Among them, the first verification is the signature verification, which verifies the digital signature of the data packet through the public key stored in the vehicle to ensure that the source of the data packet is legal and the content is complete.

[0055] In an embodiment of the present application, a signature verification is performed on the acquired data packet. If the signature verification passes, a signature verification flag is generated and fed back to the server.

[0056] Exemplarily, after receiving a data packet, the HUT performs a signature check on the data packet and uses a pre-stored public key to verify the digital signature of the data packet to ensure that the source of the data packet is legitimate and has not been tampered with. If the check passes, the HUT generates a signature verification mark and feeds the mark back to the FOTA server via WIFI to inform the server of the verification result.

[0057] Exemplarily, after the data packet passes the signature verification, the HUT generates a prompt message, prompts the user to install through the central control screen or mobile phone application, informs the user of precautions during installation, and prompts the user to select an installation time.

[0058] Optionally, during each OTA upgrade, after the signature verification, the HUT generates a new signature verification mark and feeds it back to the server. The server records the signature verification mark and allows the vehicle to continue the upgrade; if the signature verification fails, the server can terminate the upgrade task.

[0059] In the above scheme, a first verification is performed on the data packet downloaded from the server to ensure the legitimacy of the data packet downloaded by the vehicle; after the first verification, a verification mark is sent to the server to prevent unauthorized or erroneous data packets from being downloaded and installed; by verifying the downloaded data packet and feeding back the verification result to the server, the security of the upgrade can be improved.

[0060] S120: When the installation time arrives, detect whether there is a user in the vehicle.

[0061] Exemplarily, a clock module is configured in the vehicle, and when it is detected that the installation time has arrived, the occupant monitoring system (OMS) configured in the vehicle detects whether there is a user in the vehicle; alternatively, the pressure sensor configured in the seat and the infrared sensor configured in the cabin can be used to detect whether there is a user in the vehicle.

[0062] In one implementation, the method further includes:

[0063] When the installation time is reached, if there is a user in the vehicle, the installation time is updated based on a preset duration or the user's operation to obtain an updated installation time; when the updated installation time is reached, it is detected whether there is a user in the vehicle.

[0064] In an embodiment of the present application, when the installation time arrives, if the presence of a user is detected in the vehicle, the installation time is updated according to the preset installation waiting time of the vehicle or according to the user's operation; when the installation time arrives again, it is detected whether there is a user in the vehicle.

[0065] Exemplarily, when the installation time arrives, if the presence of a user is detected in the vehicle, the installation time is postponed one hour based on the preset installation waiting time. After one hour, the vehicle is checked again to see if there is a user. If not, the next step of upgrade installation is performed. If so, the installation time is postponed another hour.

[0066] Exemplarily, when the installation time arrives, if it is detected that there is a user in the vehicle, the user is prompted and the user manually selects the installation time. When the installation time selected by the user arrives again, it is detected whether there is a user in the vehicle.

[0067] In the above scheme, when the installation time is reached, if there is a user in the vehicle, the installation time is updated based on the preset duration or the user's operation, and when the installation time is reached again, it is re-checked whether there is a user in the vehicle; when the installation time is reached, if there is a user in the vehicle, the installation time is updated to avoid the presence of users in the vehicle during the upgrade, thereby ensuring the smooth upgrade of data in the vehicle.

[0068] S130: If there is no user in the vehicle, send a silent command to the gateway in the vehicle.

[0069] Among them, the gateway refers to the network hub in the vehicle, which is responsible for data exchange between various domain controllers and ECUs, and is connected to the controller area network segment (CAN), Ethernet segment and other network segments; the silent instruction is used to control the gateway to enter the silent state.

[0070] In an embodiment of the present application, upon detecting that there is no user in the vehicle, the HUT sends a silent instruction to the gateway.

[0071] Exemplarily, OMS detects whether there is a user in the vehicle. If not, HUT sends a silent command to the gateway, and the gateway sends a silent command to the CAN network segment to switch non-essential ECUs in the vehicle to silent mode, such as the entertainment control unit, seat control unit, and air-conditioning control unit, and shut down non-essential network communications.

[0072] Optionally, the silence instruction includes the type of modules that need to be silenced (such as non-critical electronic control units and non-essential network communication modules). After receiving the silence instruction, the gateway controls the modules that need to be silenced to enter the silence mode. In an embodiment of the present application, the gateway entering the silent state includes putting the non-essential network communication modules into the silent state.

[0073] In one implementation, the method further includes:

[0074] Detecting the current load rate of the target network segment in the gateway; sending a silent command to the gateway in the vehicle, including: if the current load rate of the target network segment is greater than a preset load rate, sending a silent command to the gateway.

[0075] The target network segment is the network segment used to transmit data packets.

[0076] In an embodiment of the present application, the current load rate of the target network segment in the gateway is detected, and if the current load rate is greater than the preset load rate, a silent instruction is sent to the gateway.

[0077] Exemplarily, the HUT detects the load rate of the target network segment. For example, the target network segment is an Ethernet communication module. If it is detected that the current load rate of the Ethernet communication module is greater than the preset load rate, the HUT sends a silent command to the gateway to control the communication tasks of non-critical networks to be shut down, thereby reducing the network load to ensure that data transmission during the OTA upgrade process can be carried out in a stable network environment.

[0078] Optionally, the HUT can estimate the possible network occupancy in the future based on the current load rate, the size of the upgrade package, and the bandwidth upper limit of different communication modules of the vehicle; compare the estimated load rate with the preset load rate, and if the estimated load rate is greater than the preset load rate, send a silent command to the gateway to control the communication tasks of non-critical networks to be closed.

[0079] Optionally, HUT can monitor the network segment load related to OTA upgrade in real time. During the data packet transmission process, HUT monitors the current load rate of the Ethernet communication module related to OTA upgrade in real time. If it is detected that the current load rate of the Ethernet communication module is greater than the preset load rate, HUT sends a silent command to the gateway to control the communication tasks of non-critical networks to be shut down.

[0080] In another implementation, when the HUT detects that the load rate of the upgrade network segment is less than the preset load rate, there is no need to send a silent command to the gateway. At this time, the vehicle's OTA upgrade does not need to enter silent mode, and an upgrade data packet is sent to the target ECU through the gateway to enable the target ECU to be upgraded.

[0081] It should be noted that the preset load rate can be set according to the network bandwidth of the vehicle and the size of the data packet. For example, it can be set to 80% of the maximum bandwidth. The preset load rate can be dynamically adjusted according to the current network bandwidth. The preset load rate can be set differently by professional and technical personnel in this field according to specific circumstances. This is only an illustrative explanation without specific limitation.

[0082] In the above scheme, by detecting the current load rate of the target network segment in the gateway, the possible transmission pressure of the target network segment during the upgrade process can be evaluated; if it is detected that the current load rate of the target network segment is greater than the preset load rate, a silent command is sent to the gateway to reasonably allocate network resources to avoid overload during the upgrade process, which may cause data transmission failure, thereby ensuring the smooth progress of the upgrade process.

[0083] S140: When the gateway is in a silent state, an upgrade data packet is sent to a target electronic control unit of the vehicle through the gateway, so that the target electronic control unit is upgraded based on the upgrade data packet.

[0084] In an embodiment of the present application, when the gateway is in a silent state, the HUT sends a data packet to the gateway, and after receiving the data packet, the gateway sends the upgrade data packet to the target ECU to upgrade the target ECU.

[0085] Optionally, after receiving the data packet, the gateway parses the data packet, parses the data packet into upgrade data, and sends the upgrade data to the target ECU, so that the target ECU is upgraded.

[0086] In one implementation, the method includes:

[0087] Transmit a data packet to a gateway so that the gateway performs a first check and a second check on the data packet; if the data packet passes the first check and the second check, parse the data packet through the gateway to obtain an upgrade data packet; and send the upgrade data packet to a target electronic control unit of the vehicle through the gateway.

[0088] Among them, the first check is the signature check; the second check is the accumulation check, which is used to compare whether the values ​​generated after the bytes of the data at the sending end and the receiving end are consistent, so as to detect whether an error occurs during the data transmission process.

[0089] In an embodiment of the present application, the HUT transmits a data packet to the gateway. After receiving the data packet, the gateway performs a signature check on the data packet. After passing the signature check, the gateway performs a cumulative check on the practical file data in the data packet. If the signature check and the cumulative check are passed, the data packet is parsed to obtain the ECU flashing process in the practical file, and the target ECU is software flashed according to the flashing process.

[0090] Exemplarily, after receiving a data packet, the gateway compares the signature of the data packet with the public key preset by the server for verification. If the verification is consistent, it indicates that the source of the data packet is credible; all bytes in the utility file in the data packet are accumulated and calculated, and compared with the checksum preset in the utility file. If the verification result is consistent, it indicates that the data packet has not been damaged during transmission; after the signature check and cumulative check are passed, the gateway parses the utility file content in the data packet to obtain the version number of the target ECU, the flashing process, the operation instructions, and the data blocks that need to be flashed; the gateway first sends an instruction to the target ECU to control it to enter the flashing mode, and then transmits the new control algorithm code block and configuration parameters to the target ECU according to the flashing process; during this period, the gateway monitors the flashing status in real time to ensure that each data block is successfully written.

[0091] Optionally, after the data packet passes the signature verification of the gateway, the HUT generates a verification mark, which can be a hash value generated by an encryption algorithm or other form of unique identifier, which can be used for future verification. The server records the verification mark and associates it with the current software version of the vehicle.

[0092] In the above scheme, after the data packet is transmitted to the gateway, the data packet is subjected to a first check to ensure the legitimacy of the source of the data packet; the data packet is subjected to a second check to further verify the validity of the data packet; only after passing the first check and the second check will the data packet be parsed and the upgrade data packet be obtained; the upgrade data packet is transmitted to the target electronic control unit. The above process ensures the legitimacy of the source of the upgrade data packet and the validity of the data during the transmission process, thereby ensuring a smooth upgrade.

[0093] In one implementation, the method further includes:

[0094] After detecting that the target electronic control unit upgrade is completed, a first instruction is sent to the gateway to make the gateway exit the silent state; and / or a second instruction is sent to the gateway to make the gateway control the target electronic control unit to clear the fault code generated during the upgrade process.

[0095] Among them, the first instruction is an instruction to exit the silent mode, that is, an instruction to control the entire vehicle to resume normal communication, such as the 1081 instruction; the second instruction is an instruction to clear the fault code, such as the 14FFF instruction.

[0096] In an embodiment of the present application, after detecting that the target ECU upgrade is completed, the HUT sends the first instruction and / or the second instruction to the gateway.

[0097] Exemplarily, during the upgrade process, the gateway will monitor the flashing status of the target ECU in real time. When all data blocks are successfully written and the flashing process is completed, the gateway will confirm that the upgrade of the target ECU is successful; the HUT will detect the signal of successful flashing through the network channel, send an instruction to the gateway to control it to exit the silent state, and control the gateway to send an instruction to exit the silent state to all network segments to restore the normal functions of all communication modules; the HUT sends an instruction to clear the fault code to the gateway. After receiving the instruction, the gateway clears the fault code generated during the upgrade process of the target ECU.

[0098] In the above scheme, after detecting that the target electronic control unit has completed the upgrade, an instruction is sent to the gateway to control the gateway to exit the silent state, ensuring that the normal communication of the vehicle is restored after the upgrade is completed; after the upgrade is completed, an instruction is sent to control the target electronic control unit to clear the fault code generated during the upgrade process, which can timely clean up the abnormal or error records generated during the upgrade process, thereby improving the reliability of the vehicle.

[0099] In one implementation, the method further includes:

[0100] Acquire information of a target user of the vehicle; after detecting that the upgrade of the target electronic control unit is completed, send a second prompt message to the target user;

[0101] The second prompt information includes the upgraded version number and upgraded function information.

[0102] In an embodiment of the present application, the HUT obtains information of a target user in the vehicle, and after detecting that the target ECU upgrade is completed, sends a prompt message indicating the upgrade is completed to the target user.

[0103] Exemplarily, there is a database of user information in the vehicle, which obtains relevant information of the target user, such as the user's mobile phone number or email address. After detecting that the target ECU upgrade is completed, a prompt message is generated to inform the user that the vehicle upgrade is complete and the upgraded functions.

[0104] Exemplarily, after the ECU completes the flashing and sends a success status signal to the gateway, the on-board telematics box (TBOX) receives the flashing completion status signal sent by the gateway, and the TBOX establishes communication with the user's mobile phone application or other preset mobile terminal through the on-board cellular network, and generates a notification message containing upgrade success information, which may include software version number, upgrade time, new functions after upgrade and other content, and then the TBOX sends the notification message to the user's mobile terminal.

[0105] In the above scheme, the information of the target user of the vehicle is obtained, and after the upgrade is detected, a prompt message is automatically sent to the target user to remind the user of the upgrade status, ensuring that the user obtains the upgrade content in time, helping the user understand the changes in the vehicle functions, and improving the user experience.

[0106] In the above embodiment, by obtaining the vehicle's data packet and its corresponding installation time, when the installation time is reached, it is detected whether there is a user in the vehicle. If there is no user, a silent command is sent to the gateway in the vehicle to control the gateway to enter a silent state; by ensuring that there is no user in the vehicle during the upgrade, it can be ensured that the vehicle's automatic upgrade process will not be subject to human interference; by ensuring that the vehicle enters silent mode during the upgrade, it can be ensured that the stability and security of data transmission can be ensured; in the above manner, it can be ensured that the upgrade process of data in the vehicle is completed smoothly.

[0107] Combine the following Figure 2 Another vehicle data upgrading method provided in an embodiment of the present application is illustrated by way of example.

[0108] Figure 2 FIG. 1 is a schematic flow chart of another vehicle data upgrade method provided in an embodiment of the present application. Figure 2 As shown, the method 200 includes S201 to S213, and S201 to S213 are described in detail below.

[0109] S201, obtaining a vehicle data packet.

[0110] Exemplarily, the HUT establishes a network connection with the FOTA server through the on-board WIFI module. After connecting to the FOTA server, the HUT uploads the vehicle's current system information, such as software version, hardware configuration, etc. The FOTA server will configure the upgrade strategy and send the upgrade task to the HUT. After receiving the upgrade task, the HUT downloads the data packet to the local via WIFI, for example, stores it in a temporary cache area, and waits for user confirmation or installation time.

[0111] Optionally, the implementation of S201 can refer to Figure 1 The relevant description of the implementation method in S110 will not be repeated here.

[0112] S202: Perform signature verification on the data packet.

[0113] Exemplarily, after receiving a data packet, the HUT performs signature verification on the data packet and uses a pre-stored public key to verify the digital signature of the data packet to ensure that the source of the data packet is legitimate and has not been tampered with.

[0114] Optionally, the implementation of S202 can refer to Figure 1 The relevant description of the implementation method in S110 will not be repeated here.

[0115] S203: Obtain installation time.

[0116] Exemplarily, after the data packet is verified, an upgrade strategy is formulated based on information such as the current driving status, the preset silent period, and the user's driving habits, and a prompt interface pops up to prompt the user to select a suitable installation time; the user can operate through the vehicle display or mobile phone application; the user can select the installation time recommended by the system, for example, the HUT may default to the time period from 2 am to 6 am for upgrading; or, the user can choose to manually set the installation time; after the installation time is determined, the installation time is stored in the HCU or TCU.

[0117] Optionally, the implementation of S203 can refer to Figure 1 The relevant description of the implementation method in S110 will not be repeated here.

[0118] S204: When it is determined that the installation time has arrived, check whether there is a user in the vehicle; if so, execute S206; if not, execute S205.

[0119] If the installation time is reached, check whether there is a user in the vehicle. If there is a user, the upgrade process may be disturbed when there is a user in the vehicle, and the installation time is updated. See S206 for the specific implementation method; if there is no user, further check the current load rate. See S205 for the specific implementation method.

[0120] S205: Update installation time.

[0121] For example, when the presence of a user is detected in the vehicle, the HUT will suspend the original upgrade plan and pop up a prompt interface to remind the user that the vehicle needs to be updated and remind the user to enter a new installation time through the central control screen; after receiving the user's input, the HUT will update the installation time and store it; if the user does not make a choice within the specified time, the HUT can set a new installation time based on the user's driving habits.

[0122] Optionally, the implementation of S205 can refer to Figure 1 The relevant description of the implementation method in S120 will not be repeated here.

[0123] S206, determine whether the current load rate of the target network segment is greater than the preset load rate; if so, execute S207; if not, execute S208.

[0124] The target network segment refers to a network segment load related to OTA upgrade, for example, a network segment used to transmit data packets from the HUT to the gateway.

[0125] If the current load rate of the target network segment is greater than the preset load rate, it means that the current available bandwidth may not support the vehicle to smoothly transmit data packets, and it is necessary to suspend non-essential communication tasks and send a silent command to the gateway. The specific implementation method is shown in S207; if the current load rate of the target network segment is less than or equal to the preset load rate, it means that the current available bandwidth supports the vehicle to smoothly transmit data packets and transmit data packets to the gateway. The specific implementation method is shown in S208.

[0126] S207: Send a silent instruction to the gateway.

[0127] Exemplarily, when the HUT detects that the current load rate of the target network segment is too high, it sends a silence command to the gateway through the internal communication network (such as a CAN segment or Ethernet). The silence command includes the type of module that needs to be silenced (such as non-critical electronic control units and non-essential network communication modules). After receiving the silence command, the gateway controls the module that needs to be silenced to enter silence mode.

[0128] Optionally, the implementation of S207 can refer to Figure 1 The relevant description of the implementation method in S130 will not be repeated here.

[0129] S208: Transmit the data packet to the gateway.

[0130] Exemplarily, after the gateway controls the non-essential network communication modules to enter a silent state, the HUT transmits a data packet to the gateway through an internal communication network (such as Ethernet).

[0131] Optionally, the implementation of S208 can refer to Figure 1 The relevant description of the implementation method in S130 will not be repeated here.

[0132] S209: The gateway performs signature verification and cumulative verification on the data packet.

[0133] Exemplarily, after the gateway receives the data packet transmitted by the HUT, it verifies the signature of the data packet and compares the signature of the data packet with the public key preset by the server for verification. If the verification is consistent, it indicates that the source of the data packet is credible; all bytes in the utility file in the data packet are accumulated and compared with the checksum preset in the utility file. If the verification result is consistent, it indicates that the data packet has not been damaged during transmission.

[0134] Optionally, if any of the signature check and / or cumulative check fails, the control gateway stops processing the data packet and sends an error report to the HUT. The HUT re-requests transmission of the data packet based on the error report, or re-downloads the data packet from the FOTA server.

[0135] Optionally, the implementation of S209 can refer to Figure 1 The relevant description of the implementation method in S140 will not be repeated here.

[0136] S210: The gateway parses the data packet and transmits the upgrade data packet to the ECU.

[0137] Exemplarily, after the data packet passes the signature verification, the utility file in the data packet is parsed, and after the ECU version number is parsed out, it is compared with the current ECU version of the vehicle to determine whether an upgrade is required; after determining that an upgrade is required, the ECU is flashed according to the flashing process in the usage file.

[0138] Optionally, the utility file in the data packet includes the version number of the ECU. After parsing the version number of the ECU, the gateway compares it with the current ECU version of the vehicle to determine whether an upgrade is required. After determining that an upgrade is required, the ECU is flashed according to the flashing process in the usage file.

[0139] Optionally, the implementation of S210 can refer to Figure 1 The relevant description of the implementation method in S140 will not be repeated here.

[0140] S211. The gateway flashes the ECU according to the upgrade data package.

[0141] Exemplarily, after the gateway completes the parsing of the data packet, it performs a flash operation on the ECU according to the upgrade data packet in the data packet; first, the gateway sends a command to enter the flash mode to the target ECU through a communication link such as a CAN segment or Ethernet. After receiving the command, the target ECU will shut down the normal working mode and enter a safe flash mode to prepare to receive and write new firmware or control programs; then, the gateway gradually transmits the block upgrade data packets to the ECU according to the flash process in the upgrade data packet. Before each transmission, the gateway performs cumulative verification on the data blocks to be transmitted to ensure that no errors occur in the data blocks during the transmission process. After receiving each data block, the ECU will temporarily store it in its memory, and the gateway will update its progress after each data block is successfully received; after all data blocks are transmitted, the gateway sends a confirmation command to the ECU that the flash is completed, instructing the ECU to start writing the received upgrade data packet from the temporary storage area to its internal non-volatile memory (such as flash memory). This writing process ensures that the new firmware or control logic is permanently stored, and the upgraded software can still work normally even if the vehicle is restarted.

[0142] Optionally, the implementation of S211 can refer to Figure 1 The relevant description of the implementation method in S140 will not be repeated here.

[0143] S212: After the flashing is completed, an instruction to exit the silent mode and a fault clearing instruction are sent to the gateway.

[0144] For example, after the ECU successfully completes the flash and restarts, the ECU will send a status report of the flash completion to the gateway; after the gateway receives the status report, first, the gateway will send a command to exit the silent mode to other modules in the system, notifying non-critical network modules (such as entertainment systems or some sensors) that were previously set to silent mode due to the flash task to resume normal communication activities, so as to ensure that the vehicle restores the normal working state of all systems after the flash is completed; the gateway will also send a fault code clearing command to the ECU according to the flashing strategy of the vehicle system; this command is used to clear any temporary fault codes or error flags that may be generated by the ECU during the flashing process; such fault codes are usually caused by mode switching or short interruptions during the flashing period. Although they do not represent actual problems, they will affect normal operation or display error warnings. Therefore, by sending a fault clearing command, the gateway ensures that the ECU can run again in a fault-free state after the upgrade.

[0145] Optionally, after the flash operation is completed, the ECU will perform an internal integrity check to ensure that all data is written correctly; if the check passes, the ECU will restart and enter normal working mode with the new software. The gateway monitors the entire flash process to ensure that the ECU successfully completes the restart and resumes normal function. If any step fails, the gateway can trigger a retry mechanism or roll back to the old version of the software to ensure the stability of the vehicle.

[0146] Optionally, the implementation of S212 can refer to Figure 1 The relevant description of the implementation method in S140 will not be repeated here.

[0147] S213: Obtain user information and send upgrade information to the user.

[0148] For example, when the ECU is successfully flashed, the gateway will first obtain user information in order to notify the upgrade result; the gateway obtains the user's contact information or account information through the vehicle's internal information system (such as the in-vehicle entertainment system, navigation system, etc.), usually including the user's mobile phone number, email address or the vehicle's associated mobile application account; then, the gateway sends the upgrade result to the designated user device through the vehicle communication module (such as cellular network or WIFI), including detailed information such as the upgraded version of the ECU, the upgrade time, and whether the flashing is successfully completed. This information will be sent to the user's mobile app or email through a secure network connection; for example, if the vehicle is equipped with a mobile app, the user will receive a push notification within a few minutes after the flashing is completed, prompting "Your vehicle software upgrade has been successfully completed, the current version is v2.1, and the vehicle function has returned to normal." This not only allows users to understand the progress of the upgrade in real time, but also ensures that they are fully aware that the system is up to date when using the vehicle.

[0149] Optionally, if a problem occurs during the flashing process, the gateway can also send a notification with a fault code or a reminder suggesting that the user send the vehicle to a repair center, ensuring that the user can take appropriate follow-up actions.

[0150] In the above embodiment, by ensuring that there are no users in the vehicle during the upgrade, it can be ensured that the automatic upgrade process of the vehicle will not be interfered with by human beings; by ensuring that the vehicle enters silent mode during the upgrade, the stability and security of data transmission can be ensured; in the above manner, it can be ensured that the upgrade process of data in the vehicle is completed smoothly.

[0151] Combine the following Figure 3 A schematic flowchart of another vehicle data upgrading method provided in an embodiment of the present application is illustrated by way of example.

[0152] Figure 3: is a schematic flow chart of another vehicle data upgrade method provided by an embodiment of the present application; it is assumed that there is no user in the vehicle at the time of installation, and the current load rate of the network segment related to the upgrade is greater than the preset load rate. Figure 3 As shown, the method 300 includes S301 to S314, and S301 to S314 are described in detail below.

[0153] Among them, the server 10 refers to a FOTA server connected to the vehicle; the HUT20 refers to a host unit in the vehicle; the gateway 30 refers to a network communication management module in the vehicle; and the ECU40 refers to an electronic control unit in the vehicle.

[0154] S301. The server creates a software version, configures an upgrade strategy, and issues an upgrade task based on the data package provided by the ECU supplier.

[0155] Optionally, the implementation of S301 can refer to Figure 2 The relevant description of the implementation method in S201 will not be repeated here.

[0156] S302, connect to the server via the vehicle-mounted WIFI module, check for updates, and download data packages to the local computer.

[0157] Optionally, the implementation of S302 can refer to Figure 2 The relevant description of the implementation method in S201 will not be repeated here.

[0158] S303: HUT performs signature verification on the data packet.

[0159] Optionally, the implementation of S303 can refer to Figure 2 The relevant description of the implementation method in S202 will not be repeated here.

[0160] S304: HUT obtains installation time.

[0161] Optionally, the implementation of S304 can refer to Figure 2 The relevant description of the implementation method in S203 will not be repeated here.

[0162] S305. The HUT detects the load rate of the upgraded network segment.

[0163] Optionally, the implementation of S305 can refer to Figure 1 The relevant description of the implementation method in S206 will not be repeated here.

[0164] S306: The HUT sends a silent instruction to the gateway.

[0165] Optionally, the implementation of S306 can refer to Figure 1The relevant description of the implementation method in S207 will not be repeated here.

[0166] S307: The HUT transmits a data packet to the gateway.

[0167] Optionally, the implementation of S307 can refer to Figure 1 The relevant description of the implementation method in S208 will not be repeated here.

[0168] S308: The gateway performs signature verification and cumulative verification on the data packet.

[0169] Optionally, the implementation of S308 can refer to Figure 1 The relevant description of the implementation method in S209 will not be repeated here.

[0170] S309: The gateway parses the data packet.

[0171] Optionally, the implementation of S309 can refer to Figure 1 The relevant description of the implementation method in S210 will not be repeated here.

[0172] S310: The gateway flashes the electronic control unit according to the upgrade data package.

[0173] Optionally, the implementation of S310 can refer to Figure 1 The relevant description of the implementation method in S211 will not be repeated here.

[0174] S311. ECU sends a flashing completion status signal to the gateway.

[0175] Exemplarily, after the target ECU completes the flashing process, it detects the end of the flashing task through internal software logic, and verifies the flashing data stored internally to confirm whether the flashing is successful. After the flashing is completed, the ECU generates a flashing completion status signal. The signal may include the following information: the flashing result, the flashing version number and the flashing timestamp, any potential error code or abnormal information, etc. The ECU transmits the flashing completion status signal to the gateway through the vehicle communication network (such as CAN bus or Ethernet). The format of the signal complies with the specifications of the vehicle communication protocol to ensure that the information is accurate during the transmission process.

[0176] S312: The gateway sends a flashing completion status signal to the HUT.

[0177] For example, after receiving the flash completion status signal from the ECU, the gateway parses the signal to confirm the integrity and success of the flash. After confirming the integrity and success of the flash, the gateway generates a status signal containing the flash result. The status signal includes the success or failure information of the flash, the flash data version number, and related timestamps. The gateway sends the flash completion status signal to the HUT through the vehicle communication network. The HUT receives the signal through the CAN network segment or Ethernet interface. The signal content may include: whether the flash is successful, the specific version number of the flash, the flash time, and whether there are any abnormalities during the flash.

[0178] S313: The HUT sends the first instruction and / or the second instruction to the gateway.

[0179] Optionally, the implementation of S313 can refer to Figure 2 The relevant description of the implementation method in S212 will not be repeated here.

[0180] S314: The gateway sends a command to the ECU to control the ECU to clear the fault code.

[0181] Optionally, the implementation of S314 can refer to Figure 2 The relevant description of the implementation method in S212 will not be repeated here.

[0182] In the above embodiment, by ensuring that there are no users in the vehicle during the upgrade, it can be ensured that the automatic upgrade process of the vehicle will not be interfered with by human beings; by ensuring that the vehicle enters silent mode during the upgrade, the stability and security of data transmission can be ensured; in the above manner, it can be ensured that the upgrade process of data in the vehicle is completed smoothly.

[0183] Combination of the above Figures 1 to 3 A vehicle data upgrade method provided by an embodiment of the present application is described in detail; Figure 4 and Figure 5 The device embodiments of the present application are described in detail. It should be understood that the device in the embodiments of the present application can execute the various methods of the aforementioned embodiments of the present application, that is, the specific working processes of the following various products can refer to the corresponding processes in the aforementioned method embodiments.

[0184] Figure 4 4 is a schematic diagram of a vehicle data upgrade device provided in an embodiment of the present application, wherein the device 400 includes an acquisition module 410 and a processing module 420 .

[0185] Among them, it is used to obtain the vehicle's data packet and the installation time of the data packet; wherein the data packet includes an upgrade data packet; the processing module 420 is used to detect whether there is a user in the vehicle when the installation time arrives; if there is no user in the vehicle, send a silent command to the gateway in the vehicle; wherein the silent command is used to control the gateway to enter a silent state; when the gateway is in a silent state, an upgrade data packet is sent to the target electronic control unit of the vehicle through the gateway, so that the target electronic control unit is upgraded based on the upgrade data packet.

[0186] Optionally, as an embodiment, the processing module 420 is further configured to:

[0187] Detecting a current load rate of a target network segment in a gateway; wherein the target network segment is a network segment used to transmit data packets; sending a silent command to a gateway in a vehicle, including: if the current load rate of the target network segment is greater than a preset load rate, sending a silent command to the gateway.

[0188] Optionally, as an embodiment, the processing module 420 is further configured to:

[0189] After detecting that the target electronic control unit upgrade is completed, a first instruction is sent to the gateway to make the gateway exit the silent state; and / or a second instruction is sent to the gateway to make the gateway control the target electronic control unit to clear the fault code generated during the upgrade process.

[0190] Optionally, as an embodiment, the processing module 420 is further configured to:

[0191] Perform a first check on the data packet; if the data packet passes the first check, send a signature verification mark to the server; wherein the signature verification mark is used to indicate that the data packet has passed the first check.

[0192] Optionally, as an embodiment, the processing module 420 is specifically configured to:

[0193] Transmit a data packet to a gateway so that the gateway performs a first check and a second check on the data packet; if the data packet passes the first check and the second check, parse the data packet through the gateway to obtain an upgrade data packet; and send the upgrade data packet to a target electronic control unit of the vehicle through the gateway.

[0194] Optionally, as an embodiment, the processing module 420 is further configured to:

[0195] The target user information of the vehicle is obtained; after detecting that the target electronic control unit has been upgraded, a second prompt message is sent to the target user; wherein the second prompt message includes the upgraded version number and the upgraded function information.

[0196] Optionally, as an embodiment, the processing module 420 is further configured to:

[0197] When the installation time is reached, if there is a user in the vehicle, the installation time is updated based on a preset duration or the user's operation to obtain an updated installation time; when the updated installation time is reached, it is detected whether there is a user in the vehicle.

[0198] It should be noted that the vehicle data upgrade device 500 is implemented in the form of a functional unit. The term "module" here can be implemented in the form of software and / or hardware, and is not specifically limited to this.

[0199] For example, a "module" may be a software program, a hardware circuit, or a combination of the two that implements the above functions. The hardware circuit may include an application-specific integrated circuit (ASIC), an electronic circuit, a processor (such as a shared processor, a dedicated processor, or a group processor, etc.) and a memory for executing one or more software or firmware programs, a combined logic circuit, and / or other suitable components that support the described functions.

[0200] Therefore, the units of each example described in the embodiments of the present application can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present application.

[0201] Figure 5 It is a structural schematic diagram of a vehicle provided in an embodiment of the present application.

[0202] Exemplarily, vehicle 500 includes: a processor 510 , a memory 520 , and executable program code 530 .

[0203] Exemplarily, the vehicle 500 includes one or more processors 510, which can support the vehicle 500 to implement the vehicle generation method in the method embodiment. The processor 510 can be a general-purpose processor or a special-purpose processor. For example, the processor 510 can be a central processing unit (CPU), a digital signal processor (DSP), an application-specific integrated circuit, a field programmable gate array (FPGA), or other programmable logic devices, such as discrete gates, transistor logic devices, or discrete hardware components.

[0204] Exemplarily, the processor 510 may be used to control the vehicle 500, execute software programs, and process data of the software programs. The vehicle 500 may also include a communication unit to implement input (reception) and output (transmission) of signals.

[0205] Exemplarily, the vehicle 500 may include one or more memories 520 on which executable program code 530 is stored. The executable program code 530 can be executed by the processor 510 to generate instructions, so that the processor 510 executes the generation method described in the above method embodiment according to the instructions.

[0206] Optionally, data may be stored in the memory 520. Optionally, the processor 510 may read data stored in the memory 520, which may be stored at the same storage address as the executable program code 530, or may be stored at a different storage address from the executable program code 530.

[0207] Exemplarily, the processor 510 and the memory 520 may be provided separately or integrated together, for example, integrated on a system on chip (System On Chip, SOC) of the terminal device.

[0208] Exemplarily, the memory 520 can be used to store relevant programs of the vehicle generation method provided in the embodiment of the present application, and the processor 520 can be used to call the executable program code 530 stored in the memory 520 when controlling the vehicle to execute the vehicle data upgrade method of the embodiment of the present application.

[0209] The present application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the vehicle data upgrade method of any of the aforementioned embodiments.

[0210] Among them, computer-readable storage media may include but are not limited to any type of disk, including floppy disks, optical disks, digital versatile disks (Digital Video Disc, DVD), compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), microdrives and magneto-optical disks, read-only memory (Read-Only Memory, ROM), random access memory (Random Access Memory, RAM), erasable programmable read-only memory (Erasable Programmable Read-Only Memory, EPROM), electrically erasable programmable read only memory (Electrically Erasable Programmable read only memory, EEPROM), dynamic random access memory (Dynamic Random Access Memory, DRAM), video random access memory (Video Random Access Memory, VRAM), flash memory devices, magnetic cards or optical cards, nanosystems (including molecular memory ICs), or any type of medium or device suitable for storing instructions and / or data.

[0211] The present application also provides a computer program product. When the computer program product is run on a computer, the computer is enabled to execute the above-mentioned related steps to implement a vehicle data upgrade method in the above-mentioned embodiment.

[0212] In addition, the electronic device provided in the embodiments of the present application may specifically be a chip, a component or a module, and the electronic device may include a connected processor and a memory; wherein the memory is used to store instructions, and when the electronic device is running, the processor may call and execute instructions so that the chip executes a vehicle data upgrade method in the above-mentioned embodiments.

[0213] Among them, the vehicle, computer-readable storage medium, computer program product or chip provided in this application are all used to execute the corresponding vehicle data upgrade method provided above. Therefore, the beneficial effects that can be achieved can refer to the beneficial effects in the corresponding vehicle data upgrade method provided above, and will not be repeated here.

[0214] Through the description of the above implementation methods, technical personnel in the relevant field can understand that for the convenience and simplicity of description, only the division of the above-mentioned functional modules is used as an example. In actual applications, the above-mentioned functions can be assigned to different functional modules as needed, that is, the internal structure of the device can be divided into different functional modules to complete all or part of the functions described above.

[0215] In the embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic, for example, the division of modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another device, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0216] The above contents are only specific implementation methods of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A vehicle data upgrade method, characterized in that: The method comprises: Acquire a data packet of the vehicle and the installation time of the data packet; wherein the data packet includes an upgrade data packet; When the installation time is reached, detecting whether there is a user in the vehicle; If the user does not exist in the vehicle, sending a silent command to the gateway in the vehicle; wherein the silent command is used to control the gateway to enter a silent state; When the gateway is in the silent state, the upgrade data packet is sent to the target electronic control unit of the vehicle through the gateway, so that the target electronic control unit is upgraded based on the upgrade data packet.

2. The method according to claim 1, characterized in that: Also includes: Detecting a current load rate of a target network segment in the gateway; wherein the target network segment is a network segment used to transmit the data packet; The sending a silent instruction to the gateway in the vehicle includes: If the current load rate of the target network segment is greater than a preset load rate, the silent instruction is sent to the gateway.

3. The method according to claim 2, characterized in that Also includes: After detecting that the target electronic control unit has been upgraded, sending a first instruction to the gateway to make the gateway exit the silent state; and / or, A second instruction is sent to the gateway so that the gateway controls the target electronic control element to clear the fault code generated during the upgrade process.

4. The method according to claim 1, characterized in that: The vehicle data packet is a data packet obtained from the server, and also includes: Performing a first check on the data packet; If the data packet passes the first verification, a signature verification mark is sent to the server; wherein the signature verification mark is used to indicate that the data packet has passed the first verification.

5. The method according to claim 1, characterized in that The step of sending the upgrade data packet to a target electronic control unit of the vehicle through the gateway includes: Transmitting the data packet to the gateway so that the gateway performs a first check and a second check on the data packet; If the data packet passes the first check and the second check, the data packet is parsed by the gateway to obtain the upgrade data packet; The upgrade data packet is sent to a target electronic control unit of the vehicle through the gateway.

6. The method according to any one of claims 1 to 5, characterized in that: Also includes: Acquiring information of a target user of the vehicle; After detecting that the target electronic control unit has been upgraded, a second prompt message is sent to the target user; wherein the second prompt message includes an upgraded version number and upgraded function information.

7. The method according to any one of claims 1 to 5, characterized in that: Also includes: When the installation time is reached, if the user is in the vehicle, updating the installation time based on a preset duration or an operation of the user to obtain an updated installation time; When the updated installation time is reached, detecting whether the user is present in the vehicle.

8. A vehicle data upgrading device, characterized in that: The device comprises: An acquisition module, used to acquire a data packet of a vehicle and an installation time of the data packet; wherein the data packet includes an upgrade data packet; A processing module is used to detect whether there is a user in the vehicle when the installation time is reached; if the user does not exist in the vehicle, send a silent command to the gateway in the vehicle; wherein the silent command is used to control the gateway to enter a silent state; when the gateway is in the silent state, send the upgrade data packet to the target electronic control unit of the vehicle through the gateway, so that the target electronic control unit is upgraded based on the upgrade data packet.

9. A vehicle, characterized in that: The vehicle comprises: A memory for storing executable program codes; A processor, configured to call and run the executable program code from the memory, so that the vehicle executes the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed, the method according to any one of claims 1 to 7 is implemented.

Images