A OTA remote vehicle fault recovery method and system

Abstract

The present application provides an OTA remote vehicle fault recovery method and system, wherein the method includes: the OTA cloud platform obtains the task execution information and vehicle data monitoring information of the first vehicle through the on-board intelligent terminal; obtains a predetermined judgment condition; determines the first fault location state according to the predetermined judgment condition and the vehicle data monitoring information; the OTA cloud platform obtains a first fault recovery script according to the first fault location state; the on-board intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform. The technical problems in the prior art that the on-board intelligent terminal flashing control software has low fault judgment accuracy, poor timeliness and flexibility in handling complex working conditions, and the flashing control software may also have abnormal operation, which in turn leads to abnormal vehicle flashing status and affects the user's vehicle use are solved.

Description

Technical Field

[0001] The present application relates to the field of artificial intelligence, and specifically to an OTA remote vehicle fault recovery method and system. Background Art

[0002] Over-the-Air Technology (OTA) is a technology for remotely managing SIM card data and applications through the air interface of mobile communications (GSM or CDMA). The application of OTA technology enables mobile communications to not only provide voice and data services, but also provide new business downloads. OTA can be divided into two parts: Firmware Over The Air (FOTA) and Software Over The Air (SOTA). FOTA focuses on the firmware upgrade of the terminal, which means downloading a complete firmware image to the car or patching the existing firmware. SOTA tends to upgrade application software, and generally appears as an "increment" of iterative updates. Car manufacturers only need to send the parts that need to be modified, which is more like what we usually call a "patch."

[0003] Automotive OTA is a remote wireless upgrade technology for automobiles, which can give automobiles the potential for continuous evolution. The stability and reliability of vehicle upgrades are very important for automotive OTA. During the flashing process, vehicles may sometimes experience flashing anomalies due to various reasons, including flashing process out of control, flashing process deadlock, and flashing errors causing controller and vehicle abnormalities. The current fault handling strategies are all executed in the flashing controller of the on-board intelligent terminal, which is difficult to cope with complex working conditions, and many abnormal vehicle conditions cannot be handled.

[0004] However, the existing technology has technical problems such as low accuracy in fault diagnosis of the on-board intelligent terminal flashing control software, poor timeliness and flexibility in handling complex working conditions, and abnormal operation of the flashing control software, which in turn leads to abnormal vehicle flashing status and affects the user's use of the vehicle. Summary of the invention

[0005] The present application provides an OTA remote vehicle fault recovery method and system to solve the technical problems in the prior art, such as low accuracy in fault identification of the on-board intelligent terminal flashing control software, poor timeliness and flexibility in handling complex working conditions, and abnormal operation of the flashing control software, which in turn leads to abnormal vehicle flashing status and affects the user's use of the vehicle.

[0006] In order to solve the above technical problems, an embodiment of the present application provides an OTA remote vehicle fault recovery method, characterized in that the method is applied to an OTA remote vehicle fault recovery system, the system including an OTA cloud platform and an in-vehicle intelligent terminal, including:

[0007] The OTA cloud platform obtains the task execution information and vehicle data monitoring information of the first vehicle through the on-board intelligent terminal;

[0008] Obtaining predetermined discrimination conditions;

[0009] Determining a first fault location state according to the predetermined judgment condition and the vehicle data monitoring information;

[0010] The OTA cloud platform obtains a first fault recovery script according to the first fault location status;

[0011] The on-board intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform.

[0012] Specifically, the method as described above is characterized in that the vehicle-mounted intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform, including:

[0013] The in-vehicle intelligent terminal terminates the first flashing task of the first vehicle according to the first fault recovery script sent by the OTA cloud platform;

[0014] Deleting residual information of the task execution information of the first vehicle, and restoring the configuration state before the first flashing task;

[0015] Remotely restore the vehicle status of the first vehicle.

[0016] Specifically, the method as described above is characterized in that determining the first fault location state according to the predetermined judgment condition and the vehicle data monitoring information includes:

[0017] Determining whether the task execution information satisfies the predetermined judgment condition;

[0018] If the task execution information satisfies the predetermined judgment condition, it is determined that the first vehicle has a fault, and a first fault location state is determined in combination with the vehicle data monitoring information.

[0019] Specifically, the method as described above is characterized in that the task execution information of the first vehicle includes progress information, error information, and flashing module status information of each controller in the flashing process.

[0020] Furthermore, the method as described above is characterized in that the determining whether the task execution information satisfies the predetermined determination condition comprises:

[0021] Determine whether one or more predetermined fault conditions occur in the task execution information, wherein the one or more predetermined fault conditions are predetermined fault conditions specified in the predetermined judgment condition.

[0022] Preferably, the method as described above is characterized in that the predetermined fault condition includes:

[0023] The predetermined judgment condition includes: the progress of the task execution information still stops after exceeding the first predetermined time threshold and the vehicle-mounted intelligent terminal does not perform a retry, termination or rollback operation;

[0024] No flashing status information is fed back after exceeding a second predetermined time threshold;

[0025] The in-vehicle intelligent terminal feeds back controller error information but the local controller rollback recovery fails.

[0026] Another embodiment of the present application further provides an OTA remote fault recovery system, characterized in that the system includes:

[0027] OTA cloud platform, the OTA cloud platform includes a data monitoring module and a cloud remote control module, wherein:

[0028] A data monitoring module, the data monitoring module is used to obtain vehicle data monitoring information and task execution information of the first vehicle;

[0029] A cloud remote control module, the cloud remote control module is used to obtain a predetermined judgment condition, determine a first fault location state according to the predetermined judgment condition and the vehicle data monitoring information, and obtain a first fault recovery script according to the first fault location state;

[0030] An on-board intelligent terminal, the on-board intelligent terminal is communicatively connected to the OTA cloud platform, and performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform.

[0031] Specifically, the system as described above is characterized in that the vehicle-mounted intelligent terminal includes a flashing main control module and a monitoring module, wherein: the flashing main control module includes:

[0032] A flashing task management submodule, wherein the flashing task management submodule is used to receive the first fault recovery script sent by the OTA cloud platform;

[0033] a flash control management submodule, the flash control management submodule being used to terminate the first flash task of the first vehicle according to the first fault recovery script sent by the OTA cloud platform;

[0034] The monitoring module comprises:

[0035] A state monitoring submodule, the state monitoring submodule is used to periodically read and send the vehicle data monitoring information to the data monitoring module;

[0036] A fault control submodule is used to delete the residual information of the task execution information of the first vehicle, restore the configuration state before the first flash task, and perform remote vehicle state recovery on the first vehicle.

[0037] Yet another embodiment of the present application provides a computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the OTA remote vehicle fault recovery method as described above are implemented.

[0038] One or more technical solutions provided in this application have at least the following technical effects or advantages:

[0039] 1. Due to the adoption of the OTA cloud platform to obtain the task execution information and vehicle data monitoring information of the first vehicle through the on-board intelligent terminal; the first fault location status is intelligently determined according to the preset predetermined judgment conditions and the vehicle data monitoring information; the OTA cloud platform determines the first fault recovery script according to the first fault location status; the on-board intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform. This application provides an OTA remote vehicle fault recovery method and system, which achieves the technical effect of accurately diagnosing faults in the cloud and generating remote fault recovery strategies when faults occur during vehicle OTA upgrades. The remote fault recovery strategies can improve the flexibility in coping with complex working conditions, and restore the vehicle status in a timely manner remotely, thereby improving the user experience.

[0040] 2. Due to the method of setting up a vehicle monitoring module, the technical effect of monitoring the flashing process of the on-board intelligent terminal, monitoring the working status of the vehicle operation controller, and controlling the flashing process according to cloud instructions is achieved. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] Figure 1 This is one of the flow charts of an OTA remote vehicle fault recovery method according to an embodiment of the present application;

[0042] Figure 2This is a second flow chart of an OTA remote vehicle fault recovery method according to an embodiment of the present application;

[0043] Figure 3 This is a flowchart of a method for OTA remote vehicle fault recovery according to an embodiment of the present application;

[0044] Figure 4 This is a fourth flow chart of an OTA remote vehicle fault recovery method according to an embodiment of the present application;

[0045] Figure 5 This is a structural diagram of an OTA remote vehicle fault recovery system according to an embodiment of the present application.

[0046] [Description of Reference Numerals]

[0047] 1. OTA cloud platform 1; 11. Data monitoring module; 12. Cloud remote control module; 2. Vehicle-mounted intelligent terminal 2; 21. Flashing main control module; 22. Monitoring module; 211. Flashing task management submodule 211; 212. Flashing control management submodule; 221. Status monitoring submodule; 222. Fault control submodule. DETAILED DESCRIPTION

[0048] In order to make the technical problems, technical solutions and advantages to be solved by the application clearer, the following will be described in detail in conjunction with the accompanying drawings and specific embodiments. In the following description, specific details such as specific configurations and components are provided only to help fully understand the embodiments of the application. Therefore, it should be clear to those skilled in the art that various changes and modifications can be made to the embodiments described herein without departing from the scope and spirit of the application. In addition, for clarity and brevity, the description of known functions and structures has been omitted.

[0049] It should be understood that the references to "one embodiment" or "an embodiment" throughout the specification mean that the specific features, structures, or characteristics associated with the embodiment are included in at least one embodiment of the present application. Therefore, the references to "in one embodiment" or "in an embodiment" appearing throughout the specification do not necessarily refer to the same embodiment. In addition, these specific features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0050] In the various embodiments of the present application, it should be understood that the size of the serial numbers of the following processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0051] It should be understood that the term "and / or" in this article is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0052] In the embodiments provided in the present application, it should be understood that "B corresponding to A" means that B is associated with A, and B can be determined according to A. However, it should also be understood that determining B according to A does not mean determining B only according to A, and B can also be determined according to A and / or other information.

[0053] The overall idea of ​​the technical solution provided by the present application is as follows: The present application provides an OTA remote vehicle fault recovery method, the method comprising: the OTA cloud platform obtains the task execution information and vehicle data monitoring information of the first vehicle through the on-board intelligent terminal; intelligently determines the first fault location status according to the preset predetermined judgment conditions and the vehicle data monitoring information; the OTA cloud platform determines the first fault recovery script according to the first fault location status; the on-board intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform.

[0054] After introducing the basic principles of the present application, various non-limiting implementation methods of the present application will be specifically described below in conjunction with the drawings in the specification.

[0055] Embodiment 1

[0056] like Figure 1 As shown, an embodiment of the present application provides an OTA remote vehicle fault recovery method, wherein the method is applied to an OTA remote vehicle fault recovery system, the system including an OTA cloud platform and an in-vehicle intelligent terminal, including:

[0057] Step S100: the OTA cloud platform obtains the task execution information and vehicle data monitoring information of the first vehicle through the vehicle-mounted intelligent terminal;

[0058] Furthermore, the task execution information of the first vehicle includes progress information, error information, and flashing module status information of each controller in the flashing process.

[0059] Specifically, automotive OTA is a remote wireless upgrade technology for automobiles. The OTA cloud platform is a cloud management platform with various functions such as cloud upgrade management, upgrade package management, upgrade tasks, upgrade strategies and log management. The OTA cloud platform establishes a secure connection with the on-board intelligent terminal through the Internet to obtain the task execution information and vehicle data monitoring information of the first vehicle. Among them, the first vehicle is any vehicle that can be upgraded by OTA. Furthermore, the task execution information includes the progress information, error information, and flash module status information of each controller in the flash process. The vehicle data monitoring information includes but is not limited to the operating status information of each controller of the first vehicle.

[0060] Step S200: obtaining a predetermined discrimination condition;

[0061] Specifically, the predetermined judgment conditions are used to judge whether a fault occurs during the OTA upgrade process, and to make fault judgments. The predetermined judgment conditions include but are not limited to the progress of each controller being stopped for a long time and the flash control module of the vehicle-mounted intelligent terminal not taking any retry, termination or rollback measures, the flash module not feeding back the flash status information for a long time, and the vehicle-mounted intelligent terminal feeding back the controller error information but the local controller rollback recovery fails. Setting the predetermined judgment conditions can make timely and accurate judgments on the flash status.

[0062] Step S300: determining a first fault location state according to the predetermined judgment condition and the vehicle data monitoring information;

[0063] Specifically, when the predetermined judgment conditions are met, the fault is judged and located in combination with the vehicle data monitoring information obtained by the OTA cloud platform to determine the first fault location state. There are several possible states for the first fault location state. One is that the flashing module of the vehicle-mounted intelligent terminal is abnormal and the flashing module execution status information cannot be received for a long time. The second is that an error occurs during the execution of the flashing task but the system cannot exit, and the system is deadlocked. The third is that the controller flashing task fails to execute midway and is not rolled back successfully; the fourth is that the flashing task causes the controller to work abnormally.

[0064] Step S400: the OTA cloud platform obtains a first fault recovery script according to the first fault location status;

[0065] Specifically, a fault recovery script is prepared for several possible states of the first fault location state to obtain a first fault recovery script. The first fault recovery script includes but is not limited to forcibly terminating the on-board smart terminal flashing task, clearing task residual information, restoring the controller configuration state, secondary flashing, restoring the vehicle working state, and resetting and restarting the vehicle. This fault recovery script is sent to the fault control module of the on-board smart terminal through the data communication interface between the cloud and the on-board smart terminal. In the event of a fault during the vehicle OTA upgrade, fault diagnosis is performed in the cloud and a remote fault recovery strategy is generated. The remote fault recovery strategy can improve the flexibility of coping with complex working conditions and achieve the technical effect of restoring the vehicle status remotely.

[0066] Step S500: The in-vehicle intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform.

[0067] Specifically, the on-board intelligent terminal receives the first fault recovery script sent by the OTA cloud platform, executes the first fault recovery script, performs control operations on the on-board intelligent terminal according to the control script sent from the cloud, and restores the vehicle status after the control action is completed. The first fault recovery script includes but is not limited to forced termination of the on-board intelligent terminal flashing task, clearing task residual information, restoring controller configuration status, secondary flashing, restoring vehicle working status, and resetting and restarting the vehicle. The control operations on the vehicle side according to the first fault recovery script include but are not limited to forced termination of the flashing control module operation, deleting the flashing task data; communicating with the in-vehicle controller to delete the residual information of the current task, and restoring the configuration status before flashing; restarting the flashing module to re-flash the faulty controller separately, and then restoring the vehicle status. By executing the first fault recovery script, the vehicle can be restored to the running state remotely to complete the recovery of the vehicle status.

[0068] In summary, this application provides an OTA remote vehicle fault recovery method and system to solve the existing technical problems that the vehicle-mounted intelligent terminal flash control software has low accuracy in fault identification, poor timeliness and flexibility in handling complex working conditions, and abnormal operation of the flash control software, which in turn leads to abnormal vehicle flash status and affects the user's vehicle use. In the event of a fault during the vehicle OTA upgrade, accurate fault diagnosis is performed in the cloud, and a remote fault recovery strategy is generated. The remote fault recovery strategy can improve the flexibility in dealing with complex working conditions, and the vehicle status can be restored in a timely manner remotely, thereby improving the user's sense of use.

[0069] Further, such as Figure 2As shown, the in-vehicle intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform. Step S500 of the embodiment of the present application also includes:

[0070] Step S510: the in-vehicle intelligent terminal terminates the first flashing task of the first vehicle according to the first fault recovery script sent by the OTA cloud platform;

[0071] Step S520: deleting the residual information of the task execution information of the first vehicle, and restoring the configuration state before the first flashing task;

[0072] Step S530: remotely restore the vehicle status of the first vehicle.

[0073] Specifically, the first fault recovery script includes forcibly terminating the flashing task of the vehicle-mounted intelligent terminal, clearing the residual information of the task, restoring the configuration state of the controller, secondary flashing, restoring the working state of the vehicle, and resetting and restarting the vehicle. The vehicle-mounted intelligent terminal executes the first fault recovery script and performs the control operation of the vehicle end according to the control script sent from the cloud. First, it forcibly terminates the operation of the flashing control module and deletes the flashing task data stored in the control module; second, it communicates with the in-vehicle controller through the CAN bus, deletes the residual information of the current task, and restores the configuration state before executing the first flashing task, including clearing the flashing flag, restoring the fault diagnosis state, etc.; third, restarting the flashing module to re-flash the faulty controller separately. After the above control actions are executed, the vehicle status is restored. If the vehicle is in high and low voltage mode, the high and low voltage guidance is turned off. If the first vehicle is in the ON power state, the first vehicle is guided to turn on the power to avoid the vehicle power feeding caused by the long-term power-on of the whole vehicle. By executing the first fault recovery script, the vehicle can perform remote status recovery.

[0074] Further, the first fault location state is determined according to the predetermined judgment condition and the vehicle data monitoring information, such as Figure 3 As shown, step S300 of the embodiment of the present application includes:

[0075] Step S310: determining whether the task execution information satisfies the predetermined judgment condition;

[0076] Step S320: If the task execution information satisfies the predetermined judgment condition, it is determined that the first vehicle has a fault, and a first fault location state is determined in combination with the vehicle data monitoring information.

[0077] Furthermore, the step S310 of determining whether the task execution information satisfies the predetermined determination condition further includes:

[0078] Step S311: Determine whether one or more predetermined fault conditions occur in the task execution information, wherein the one or more predetermined fault conditions are predetermined fault conditions specified in the predetermined judgment condition.

[0079] Specifically, the predetermined judgment condition is used to judge whether a fault occurs in the vehicle during the OTA upgrade process. It is judged whether the task execution information meets the predetermined judgment condition. If it does, it means that the first vehicle has a fault. At this time, the fault judgment and positioning are performed in combination with the vehicle data monitoring information obtained from the cloud to determine the first fault location status. Furthermore, in the task execution information judgment process, it is necessary to judge whether one or more predetermined faults occur, wherein the predetermined faults are all fault conditions pre-set in the predetermined judgment condition. If one or more predetermined faults occur, one or more faults will be judged and located, and batch judgment and positioning of multiple faults can be achieved, thereby improving the efficiency of fault judgment and positioning.

[0080] Further, such as Figure 4 As shown, step S311 of the embodiment of the present application also includes:

[0081] Step S3111: The predetermined judgment condition includes: the progress of the task execution information remains stopped after exceeding the first predetermined time threshold and the in-vehicle intelligent terminal does not perform a retry, termination or rollback operation;

[0082] Step S3112: after exceeding the second predetermined time threshold, no flashing status information is fed back;

[0083] Step S3113: The vehicle-mounted intelligent terminal feeds back controller error information but the local controller rollback recovery fails.

[0084] Specifically, the predetermined judgment conditions include a variety of predetermined faults. More specifically, the predetermined judgment conditions include: First, the progress of the task execution information still stops after exceeding the first predetermined time threshold and the on-board intelligent terminal does not perform a retry, termination or rollback operation, wherein the first predetermined time threshold is pre-set. Second, after exceeding the first predetermined time threshold, it also exceeds the second predetermined time threshold. At this time, the on-board intelligent terminal does not feedback the flashing status information, the on-board intelligent terminal feedbacks the controller error information, and the local controller fails to roll back and recover. In other words, the local controller fails to restore the previous version. The vehicle fault can be judged based on whether the above situation occurs. By setting the predetermined time threshold, the timeliness of fault judgment is improved.

[0085] In summary, the OTA remote vehicle fault recovery method provided by the embodiment of the present application has the following technical effects:

[0086] 1. Due to the adoption of the OTA cloud platform to obtain the task execution information and vehicle data monitoring information of the first vehicle through the on-board intelligent terminal; the first fault location status is intelligently determined according to the preset predetermined judgment conditions and the vehicle data monitoring information; the OTA cloud platform determines the first fault recovery script according to the first fault location status; the on-board intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform. This application provides an OTA remote vehicle fault recovery method and system, which achieves the technical effect of accurately diagnosing faults in the cloud and generating remote fault recovery strategies when faults occur during vehicle OTA upgrades. The remote fault recovery strategies can improve the flexibility in coping with complex working conditions, and restore the vehicle status in a timely manner remotely, thereby improving the user experience.

[0087] 2. Due to the method of setting up a vehicle monitoring module, the technical effect of monitoring the flashing process of the on-board intelligent terminal, monitoring the working status of the vehicle operation controller, and controlling the flashing process according to cloud instructions is achieved.

[0088] Embodiment 2

[0089] Based on the same inventive concept as the OTA remote vehicle fault recovery method in the aforementioned embodiment, Figure 5 As shown, an embodiment of the present application provides an OTA remote vehicle fault recovery system, wherein the system includes:

[0090] OTA cloud platform 1, the OTA cloud platform 1 includes a data monitoring module 11 and a cloud remote control module 12, wherein:

[0091] A data monitoring module 11, wherein the data monitoring module 11 is used to obtain vehicle data monitoring information and task execution information of the first vehicle;

[0092] A cloud remote control module 12, the cloud remote control module 12 is used to obtain a predetermined judgment condition, determine a first fault location state according to the predetermined judgment condition and the vehicle data monitoring information, and obtain a first fault recovery script according to the first fault location state;

[0093] The in-vehicle intelligent terminal 2 is communicatively connected to the OTA cloud platform 1 , and performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform 1 .

[0094] Specifically, the OTA remote vehicle fault recovery system includes the OTA cloud platform 1 and the vehicle-mounted intelligent terminal 2. The OTA cloud platform 1 includes a data monitoring module 11 and a cloud remote control module 12. The data monitoring module 11 is used to collect the operating status of the vehicle ECU, assist in the judgment and processing of the vehicle status, and obtain the vehicle data monitoring information and task execution information of the first vehicle. The vehicle data monitoring information includes the operating status of the vehicle ECU, and the task execution information includes the progress information, error information, and flash module status information of each controller in the flashing process. The vehicle ECU is the vehicle electronic control unit (Electronic Control Unit, ECU), and the ECU is equivalent to the vehicle's main control computer.

[0095] The cloud remote control module 12 is mainly responsible for formulating the recovery strategy and sending it to the vehicle-mounted intelligent terminal 2 through the CAN bus for execution. After obtaining the predetermined discrimination condition, the cloud remote control module 12 determines the first fault location state according to the predetermined discrimination condition and the vehicle data monitoring information, formulates a recovery strategy according to the first fault location state, obtains the first fault recovery script, and sends it to the vehicle-mounted intelligent terminal 2 through the CAN bus for execution. The vehicle-mounted intelligent terminal 2 is connected to the OTA cloud platform 1 in communication, and performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform 1.

[0096] Furthermore, the vehicle-mounted intelligent terminal 2 includes a flashing main control module 21 and a monitoring module 22, wherein:

[0097] The flash main control module 21 includes:

[0098] A flashing task management submodule 211, wherein the flashing task management submodule 211 is used to receive the first fault recovery script sent by the OTA cloud platform 1;

[0099] A flash control management submodule 212, the flash control management submodule 212 is used to terminate the first flash task of the first vehicle according to the first fault recovery script sent by the OTA cloud platform 1;

[0100] The monitoring module 22 includes:

[0101] A state monitoring submodule 221, the state monitoring submodule 221 is used to periodically read and send the vehicle data monitoring information to the data monitoring module 11;

[0102] The fault control submodule 222 is used to delete the residual information of the task execution information of the first vehicle, restore the configuration state before the first flash task, and perform remote vehicle state recovery on the first vehicle.

[0103] Specifically, the on-board intelligent terminal 2 includes the flashing main control module 21 and the monitoring module 22, and the flashing main control module 21 includes a flashing task management submodule 211 and a flashing control management submodule 212. The flashing task management submodule 211 is responsible for receiving the first fault recovery script sent by the OTA cloud platform 1. The first fault recovery script includes forced termination of the on-board intelligent terminal flashing task, clearing task residual information, restoring controller configuration status, secondary flashing, restoring vehicle working status, and resetting and restarting the vehicle. The flashing control management submodule 212 is used to terminate the first flashing task of the first vehicle according to the first fault recovery script sent by the OTA cloud platform 1, and the flashing control management submodule 212 sends flashing instructions and flashing data to each controller in the vehicle through the data bus to control the start, stop and data update of the flashing in the vehicle.

[0104] The monitoring module 22 includes the status monitoring submodule 221 and the fault control submodule 222. The status monitoring submodule 221 is used to periodically read the vehicle data monitoring information and the status information of the flash main control module 21, and send the vehicle data monitoring information to the data monitoring module 11 of the OTA cloud platform 1. The vehicle data monitoring information includes but is not limited to the operating status information of each vehicle controller.

[0105] When a flashing failure occurs, the fault control submodule 222 receives the command sent from the cloud to perform a recovery operation on the vehicle-mounted intelligent terminal. The fault control submodule 222 is used to delete the residual information of the task execution information of the first vehicle, and restore the configuration state before the first flashing task, and perform remote vehicle state recovery on the first vehicle. The vehicle monitoring module can monitor the flashing process of the vehicle-mounted intelligent terminal and the working state of the vehicle operation controller, so as to control the flashing process according to the cloud command.

[0106] Yet another embodiment of the present application provides a computer-readable storage medium, characterized in that a computer program is stored on the computer-readable storage medium, and when the computer program is executed by a processor, the steps of the OTA remote vehicle fault recovery method as described above are implemented.

[0107] In addition, the present application may repeat reference numerals and / or letters in different examples. This repetition is for the purpose of simplicity and clarity, and does not in itself indicate the relationship between the various embodiments and / or settings discussed.

[0108] It should also be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusions.

[0109] The above is a preferred embodiment of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles described in the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. An OTA remote vehicle fault recovery method, characterized in that: The method is applied to an over-the-air download technology OTA remote vehicle fault recovery system, which includes an OTA cloud platform and an on-vehicle intelligent terminal, including: The OTA cloud platform obtains the task execution information and vehicle data monitoring information of the first vehicle through the on-board intelligent terminal; Obtaining predetermined discrimination conditions; Determining a first fault location state according to the predetermined judgment condition and the vehicle data monitoring information; The OTA cloud platform obtains a first fault recovery script according to the first fault location status; The in-vehicle intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform; The determining of the first fault location state according to the predetermined determination condition and the vehicle data monitoring information includes: Determining whether the task execution information satisfies the predetermined judgment condition; If the task execution information satisfies the predetermined judgment condition, it is determined that the first vehicle has a fault, and a first fault location state is determined in combination with the vehicle data monitoring information; The determining whether the task execution information satisfies the predetermined determination condition includes: Determining whether one or more predetermined fault conditions occur in the task execution information, wherein the one or more predetermined fault conditions are predetermined fault conditions specified in the predetermined judgment condition; The predetermined fault conditions include: The progress of the task execution information still stops after exceeding the first predetermined time threshold and the in-vehicle intelligent terminal does not perform a retry, termination or rollback operation; No flashing status information is fed back after exceeding a second predetermined time threshold; The in-vehicle intelligent terminal feeds back controller error information but the local controller rollback recovery fails.

2. The method according to claim 1, characterized in that The in-vehicle intelligent terminal performs fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform, including: The in-vehicle intelligent terminal terminates the first flashing task of the first vehicle according to the first fault recovery script sent by the OTA cloud platform; Deleting residual information of the task execution information of the first vehicle, and restoring the configuration state before the first flashing task; Remotely restore the vehicle status of the first vehicle.

3. The method according to claim 1, characterized in that The task execution information of the first vehicle includes progress information, error information, and flashing module status information of each controller in the flashing process.

4. An OTA remote fault recovery system, characterized in that: The system comprises: OTA cloud platform, the OTA cloud platform includes a data monitoring module and a cloud remote control module, wherein: A data monitoring module, the data monitoring module is used to obtain vehicle data monitoring information and task execution information of the first vehicle; A cloud remote control module, the cloud remote control module is used to obtain a predetermined judgment condition, determine a first fault location state according to the predetermined judgment condition and the vehicle data monitoring information, and obtain a first fault recovery script according to the first fault location state; an in-vehicle intelligent terminal, the in-vehicle intelligent terminal being in communication connection with the OTA cloud platform and performing fault recovery on the first vehicle according to the first fault recovery script sent by the OTA cloud platform; The cloud remote control module determines the first fault location state according to the predetermined judgment condition and the vehicle data monitoring information, including: Determining whether the task execution information satisfies the predetermined judgment condition; If the task execution information satisfies the predetermined judgment condition, it is determined that the first vehicle has a fault, and a first fault location state is determined in combination with the vehicle data monitoring information; The determining whether the task execution information satisfies the predetermined determination condition includes: Determining whether one or more predetermined fault conditions occur in the task execution information, wherein the one or more predetermined fault conditions are predetermined fault conditions specified in the predetermined judgment condition; The predetermined fault conditions include: The progress of the task execution information still stops after exceeding the first predetermined time threshold and the in-vehicle intelligent terminal does not perform a retry, termination or rollback operation; No flashing status information is fed back after exceeding a second predetermined time threshold; The in-vehicle intelligent terminal feeds back controller error information but the local controller rollback recovery fails.

5. The system according to claim 4, characterized in that The vehicle-mounted intelligent terminal includes a flashing main control module and a monitoring module, wherein: the flashing main control module includes: A flashing task management submodule, wherein the flashing task management submodule is used to receive the first fault recovery script sent by the OTA cloud platform; a flash control management submodule, the flash control management submodule being used to terminate the first flash task of the first vehicle according to the first fault recovery script sent by the OTA cloud platform; The monitoring module comprises: A state monitoring submodule, the state monitoring submodule is used to periodically read and send the vehicle data monitoring information to the data monitoring module; A fault control submodule is used to delete the residual information of the task execution information of the first vehicle, restore the configuration state before the first flash task, and perform remote vehicle state recovery on the first vehicle.

6. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the OTA remote vehicle fault recovery method according to any one of claims 1 to 3 are implemented.

Images