A processing method, device and medium based on vehicle application function
By performing two verifications in the car, ensuring the matching of the vehicle and the software and the legitimacy of the controller, the information security issues when OTA downloads the software are solved and the risk of hackers is reduced.
Patent Information
- Application Number
- CN202211625380.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-12-16
- Publication Date
- 2025-09-02
- Estimated Expiration
- 2042-12-16
AI Technical Summary
In the prior art, when a car downloads software through OTA, there is a risk that the vehicle information security protection capability is weak and it is easily hacked.
By sending a download request for application functions to the cloud server, obtaining vehicle information and function information, and performing two verification processes, including verification of the current vehicle configuration code value and download information, as well as re-checking of the updated configuration code value and download information, we ensure the matching of the vehicle and the software and the legitimacy of the controller.
It improves the matching of the vehicle with the required download software, the legality of the in-car controller and the correctness of the software installation path, and reduces the risk of being hacked.
Smart Images

Figure CN115988503B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of vehicle function technology, and in particular to a processing method, device, and medium based on vehicle application functions. Background Art
[0002] The functional experience that cars bring to people is becoming increasingly rich, and the development of automobile technology requires an increasingly high speed of iteration of automobile functions.
[0003] In existing technology, when a car's features are upgraded, the corresponding software can be downloaded via Over-the-Air (OTA) technology and then installed directly on the vehicle. However, this direct installation method may lead to the risk of successful hacker attacks, resulting in relatively weak vehicle information security protection capabilities. Summary of the Invention
[0004] The present application provides a processing method, device and medium based on vehicle application functions, which are used to solve the problem that the vehicle information security protection capability is weak when the car downloads software in the existing technology, and there is a risk of the vehicle being attacked by hackers.
[0005] In a first aspect, the present application provides a method for processing vehicle-based application functions, comprising:
[0006] A download request for an application function is sent to a cloud server, where the application function download request includes the vehicle identifier and the identifier of the application function to be downloaded, so that the cloud server obtains the vehicle information corresponding to the vehicle identifier and the function information corresponding to the identifier of the application function to be downloaded according to the download request, and sends the vehicle information and the function information to the OTA server.
[0007] Obtain the inspection instruction issued by the OTA and carrying the vehicle information and the functional information, and according to the inspection instruction, obtain the current vehicle configuration code value and the first downloaded information corresponding value corresponding to the current vehicle configuration code value, and perform inspection processing according to the current vehicle configuration code value and the first downloaded information corresponding value to obtain a first verification result.
[0008] When the first verification result is a successful inspection, the functional information is downloaded and installed on the vehicle through the OTA software upgrade strategy, and the current vehicle configuration code value is upgraded to obtain an updated vehicle configuration code value and a second download information corresponding value corresponding to the updated vehicle configuration code value.
[0009] Verification processing is performed based on the updated vehicle configuration code value and the corresponding value of the second download information to obtain a second verification result, and when the second verification result is verification success, a download success response message is generated.
[0010] In a specific embodiment, obtaining, according to the inspection instruction, a current vehicle configuration code value and a first downloaded information corresponding value corresponding to the current vehicle configuration code value, and performing inspection processing according to the current vehicle configuration code value and the first downloaded information corresponding value to obtain a first verification result includes:
[0011] By triggering the body controller of the vehicle according to the inspection instruction, the current vehicle configuration code value corresponding to the body controller and the first downloaded information corresponding value corresponding to the current vehicle configuration code value are obtained, and the current vehicle configuration code value and the first downloaded information corresponding value are sent to other controllers except the body controller, so that each of the other controllers verifies the legitimacy of the vehicle information and the functional information, as well as the legitimacy of the controller according to the current vehicle configuration code value and the first downloaded information corresponding value.
[0012] When it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information according to the current vehicle configuration code value and the corresponding value of the first downloaded information, as well as the legitimacy of the controller, a first verification result of successful verification is generated.
[0013] In a specific embodiment, the upgrading process of the current vehicle configuration code value to obtain an updated vehicle configuration code value and a corresponding value of the second downloaded information corresponding to the updated vehicle configuration code value includes:
[0014] The vehicle body controller is triggered to perform an upgrade process on the current vehicle configuration code value to obtain an updated vehicle configuration code value and a corresponding value of the second downloaded information corresponding to the updated vehicle configuration code value.
[0015] Then, the verification process is performed according to the updated vehicle configuration code value and the corresponding value of the second download information to obtain a second verification result, and when the second verification result is verification success, a download success response message is generated, including:
[0016] Trigger the body controller to send the updated vehicle configuration code value and the corresponding value of the second downloaded information to other controllers, so that each of the other controllers verifies the legitimacy of the vehicle information and the functional information, as well as the legitimacy of the controller based on the updated vehicle configuration code value and the corresponding value of the second downloaded information.
[0017] When it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information based on the updated vehicle configuration code value and the corresponding value of the second downloaded information, as well as the legitimacy of the controller, a second verification result of successful verification is generated, and a response message of successful download is generated.
[0018] In a specific embodiment, it also includes:
[0019] When the first verification result or the second verification result is a verification failure, a notification message is generated to remind the vehicle that the function information is not supported, and the downloading and installation of the function information is terminated.
[0020] In a specific implementation, obtaining the inspection instruction carrying the vehicle information and the function information issued by the OTA includes:
[0021] The vehicle's communication box T-BOX triggers the vehicle's gateway controller to download the inspection instruction carrying the vehicle information and the function information from the T-BOX based on the inspection instruction carrying the vehicle information and the function information received from the OTA.
[0022] The gateway controller generates a wake-up signal to wake up the vehicle body controller, and transmits the inspection instruction carrying the vehicle information and the function information to the vehicle body controller via Ethernet.
[0023] In a second aspect, the present application provides a processing device based on a vehicle application function, comprising:
[0024] The communication box T-BOX is used to send a download request for an application function to a cloud server. The application function download request includes the vehicle identifier and the identifier of the application function to be downloaded, so that the cloud server obtains the vehicle information corresponding to the vehicle identifier and the function information corresponding to the identifier of the application function to be downloaded according to the download request, and sends the vehicle information and the function information to the OTA server.
[0025] The body controller is used to obtain the inspection instruction carrying the vehicle information and the function information issued by the OTA through the T-BOX, and obtain the current vehicle configuration code value and the first download information corresponding value corresponding to the current vehicle configuration code value according to the inspection instruction.
[0026] Another controller is used to perform verification processing according to the current vehicle configuration code value and the corresponding value of the first downloaded information to obtain a first verification result.
[0027] The body controller is also used to download and install the functional information on the automobile through an OTA software upgrade strategy when the first verification result is a successful inspection, and to upgrade the current vehicle configuration code value to obtain an updated vehicle configuration code value and a second download information corresponding value corresponding to the updated vehicle configuration code value.
[0028] The other controller is further configured to perform verification processing based on the updated vehicle configuration code value and the corresponding value of the second downloaded information to obtain a second verification result.
[0029] The vehicle body controller is further configured to generate a download success response message when the second inspection result is verification success.
[0030] In a specific embodiment, the body controller is specifically used to obtain the current vehicle configuration code value corresponding to the body controller and the first downloaded information corresponding value corresponding to the current vehicle configuration code value according to the inspection instruction, and send the current vehicle configuration code value and the first downloaded information corresponding value to other controllers other than the body controller.
[0031] Each of the other controllers is specifically configured to verify the legitimacy of the vehicle information and the functional information, as well as the legitimacy of the controller, based on the current vehicle configuration code value and the corresponding value of the first downloaded information.
[0032] The body controller is specifically used to generate a first verification result of successful inspection when it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information based on the current vehicle configuration code value and the corresponding value of the first downloaded information, as well as the legitimacy of the controller.
[0033] In a specific implementation, the vehicle body controller is specifically configured to perform an upgrade process on the current vehicle configuration code value to obtain an updated vehicle configuration code value and a second download information corresponding value corresponding to the updated vehicle configuration code value.
[0034] The updated vehicle configuration code value and the corresponding value of the second downloaded information are sent to the other controllers.
[0035] Each of the other controllers is specifically configured to verify the legitimacy of the vehicle information and the functional information, as well as the legitimacy of the controller, based on the updated vehicle configuration code value and the corresponding value of the second downloaded information.
[0036] The body controller is specifically used to generate a second verification result of successful verification and a response message of successful download when it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information based on the updated vehicle configuration code value and the corresponding value of the second downloaded information, as well as the legitimacy of the controller.
[0037] In a specific embodiment, the vehicle body controller is further configured to:
[0038] When the first verification result or the second verification result is a verification failure, a notification message is generated to remind the vehicle that the function information is not supported, and the downloading and installation of the function information is terminated.
[0039] In a specific embodiment, the vehicle body controller is specifically used to:
[0040] According to the received inspection instruction carrying the vehicle information and the function information issued by the OTA, the gateway controller of the vehicle is triggered to download the inspection instruction carrying the vehicle information and the function information from the T-BOX.
[0041] The gateway controller is used to generate a wake-up signal to wake up the body controller, and transmit the inspection instruction carrying the vehicle information and the function information to the body controller via Ethernet.
[0042] In a third aspect, the present application provides a vehicle, comprising: the processing method based on the vehicle application function described in the first aspect.
[0043] In a fourth aspect, the present application provides an electronic device, comprising:
[0044] Processor, memory, communication interface.
[0045] The memory is used to store executable instructions executable by the processor.
[0046] The processor is configured to execute the vehicle-based application function processing method as described in the first aspect by executing the executable instructions.
[0047] In a fifth aspect, the present application provides a vehicle-based application function processing system, comprising: a cloud server and a vehicle; wherein the vehicle comprises a vehicle-based application function processing device as described in the second aspect.
[0048] In a specific implementation, it also includes: a user terminal.
[0049] In a sixth aspect, the present application provides a computer-readable storage medium having a computer program stored thereon, wherein when the computer program is executed by a processor, the processing method for the vehicle-based application function described in the first aspect is implemented.
[0050] The present application provides a method, device and medium for processing application functions based on a vehicle, by sending a download request for the application function to a cloud server, the application function download request including the vehicle identification and the identification of the application function to be downloaded, so that the cloud server obtains the vehicle information corresponding to the vehicle identification and the function information corresponding to the identification of the application function to be downloaded according to the download request, and sends the vehicle information and the function information to an OTA server; obtains the inspection instruction carrying the vehicle information and the function information issued by the OTA, and obtains the current vehicle configuration code value and the first download code corresponding to the current vehicle configuration code value according to the inspection instruction. Information corresponding value, and verification processing is performed based on the current vehicle configuration code value and the first download information corresponding value to obtain a first verification result; when the first verification result is a successful verification, the functional information is downloaded and installed on the car through the OTA software upgrade strategy, and the current vehicle configuration code value is upgraded to obtain an updated vehicle configuration code value, and the second download information corresponding value corresponding to the updated vehicle configuration code value; verification processing is performed based on the updated vehicle configuration code value and the second download information corresponding value to obtain a second verification result, and when the second verification result is a successful verification, a download success response message is generated. Compared with the prior art of downloading software through OTA and then installing it directly on the vehicle side, this application performs two verifications based on the vehicle configuration code value before software download and its corresponding first download information corresponding value, and the updated vehicle configuration code value and its corresponding second download information corresponding value when the software download is completed, thereby ensuring the matching between the vehicle and the software to be downloaded, the legitimacy of the in-vehicle controller, and the legitimacy of the software to be downloaded. BRIEF DESCRIPTION OF THE DRAWINGS
[0051] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.
[0052] Figure 1 A flowchart of a first embodiment of a method for processing vehicle-based application functions provided by the present application;
[0053] Figure 2 This is a signaling diagram of Example 2 of a method for processing vehicle-based application functions provided by this application;
[0054] Figure 3 A schematic diagram of the purchasing process provided for this application;
[0055] Figure 4 A schematic diagram of a processing system for vehicle-based application functions provided in this application;
[0056] Figure 5 A schematic structural diagram of an embodiment of a processing device for vehicle-based application functions provided by the present application;
[0057] Figure 6 A schematic diagram of the structure of an electronic device provided in this application;
[0058] Figure 7 This is a structural diagram of an embodiment of a processing system for vehicle-based application functions provided by the present application.
[0059] The above drawings illustrate specific embodiments of the present application, which will be described in more detail below. These drawings and the textual description are not intended to limit the scope of the present application in any way, but rather to illustrate the concepts of the present application to those skilled in the art by reference to specific embodiments. DETAILED DESCRIPTION
[0060] To make the purpose, technical solutions, and advantages of the embodiments of the present application more clear, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments made by ordinary technicians in this field based on the inspiration of these embodiments fall within the scope of protection of this application.
[0061] The terms "first", "second", "third", "fourth", etc. (if any) in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the numbers used in this way are interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device that includes a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.
[0062] First, let’s explain the terms involved in this application:
[0063] Telematics BOX (T-BOX) is an in-vehicle communication device that connects to the backend TSP platform via the network. It allows users to obtain information such as the vehicle's operating status and synchronizes in-vehicle data with the backend system.
[0064] In the existing technology, after downloading the software through the OTA server, it is directly installed on the vehicle side, which poses the risk of the vehicle being attacked by hackers and makes it difficult to ensure the security of vehicle information. To solve the above problems, the concept of this application is to ensure that the vehicle can safely download software and ensure the legality of the software to be downloaded.
[0065] The technical solution of the present application is described in detail below through specific embodiments. It should be noted that the following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.
[0066] Figure 1 This is a flow chart of a first embodiment of a method for processing vehicle-based application functions provided by this application, as shown in FIG. Figure 1 As shown, this method can be applied in the scenario of vehicle downloading software. Specifically, the method includes the following steps:
[0067] Step S101: Send a download request for the application function to the cloud server, where the application function download request includes the vehicle identifier and the identifier of the application function to be downloaded, so that the cloud server obtains the vehicle information corresponding to the vehicle identifier and the function information corresponding to the identifier of the application function to be downloaded according to the download request, and sends the vehicle information and function information to the OTA server.
[0068] In this embodiment, the cloud server includes an OTA server and a telematics service provider (TSP). After the OTA receives the download request, the TSP activates the software function. The identification of the application function to be downloaded includes all vehicle configuration data (VCD) collected by the OTA server, and the vehicle information includes the vehicle identification number (VIN).
[0069] Step S102: Obtain the inspection instruction carrying vehicle information and function information issued by the OTA server, and according to the inspection instruction, obtain the current vehicle configuration code value and the first download information corresponding value corresponding to the current vehicle configuration code value, and perform inspection processing based on the current vehicle configuration code value and the first download information corresponding value to obtain a first verification result.
[0070] In this embodiment, the OTA server sends a verification instruction containing vehicle information and function information to the T-BOX controller. The T-BOX controller sends this instruction to the body controller through the gateway controller. The body controller generates a first download message corresponding value (BuyMessage Fxxx; abbreviated as: BMF) corresponding to the current vehicle configuration code value (Car Config; abbreviated as: CC) based on the current CC value, and sends the current CC value and the first BMF to other controllers in the car. Other controllers perform verification based on the current CC value and the first BMF.
[0071] Step S103: When the first verification result is successful, the function information is downloaded and installed on the car through the OTA server software upgrade strategy, and the current CC value is upgraded to obtain the updated CC value and the second download information corresponding value corresponding to the updated CC value.
[0072] In this embodiment, when the OTA server receives the first verification success, the body controller updates the CC value based on the downloaded software, obtains the updated CC value, and generates a second download information corresponding value corresponding to the updated CC value based on the updated CC value, where the second download information corresponding value is the second BMF.
[0073] If the OTA server receives a first verification result indicating a failure, it will re-notify the TSP to activate the purchased software function. If the verification cycle fails three times, the user will be notified of the function activation failure, which may be a notification message indicating that the vehicle does not support the software function.
[0074] Step S104: performing verification processing according to the updated CC value and the second BMF to obtain a second verification result, and generating a download success response message when the second verification result is verification success.
[0075] In this embodiment, the vehicle body controller sends the updated CC value and the second BMF to other controllers, and the other controllers perform secondary verification based on the updated CC value and the second BMF to ensure the correctness of the software installation path.
[0076] If the OTA server receives a second verification result indicating a verification failure, it will re-notify the TSP to activate the purchased software function. If the verification cycle fails three times, the user will be notified that the function activation failed or was abnormal.
[0077] In this embodiment, the T-BOX controller, vehicle gateway controller, and body controller are connected to the vehicle's CAN, Ethernet, and FlexRay networks, and information is exchanged with the vehicle through the microcontroller unit (MCU) inside each controller via CAN, Ethernet, FlexRay, and other transceivers.
[0078] In this embodiment, by constructing a two-time verification mechanism, other controllers verify the current CC value and the first BMF corresponding to the current CC value, as well as the updated CC value and the second BMF corresponding to the updated CC value. Compared with the prior art of directly installing the downloaded software, this application improves the guarantee of the matching between the vehicle and the required downloaded software, the legitimacy of the in-vehicle controller, the legitimacy of the required downloaded software, and the correctness of the software installation path.
[0079] Figure 2 This is a signaling diagram of a second embodiment of a processing method based on a vehicle application function provided by this application, such as Figure 2 As shown, the method includes the following steps:
[0080] Step S201: The terminal device sends a download request for the application function to the OTA server in the cloud server. The application function download request includes the vehicle identifier and the identifier of the application function to be downloaded, so that the OTA server in the cloud server obtains the vehicle information corresponding to the vehicle identifier and the function information corresponding to the identifier of the application function to be downloaded according to the download request, and sends the vehicle information and function information to the OTA server.
[0081] In this embodiment, the cloud server includes an OTA server.
[0082] Step S202: The OTA server sends a test instruction carrying vehicle information and function information to the T-BOX controller.
[0083] Step S203: The T-BOX controller triggers the vehicle's gateway controller.
[0084] Step S204: The gateway controller downloads the inspection instruction carrying the vehicle information and function information from the T-BOX controller, wakes up the body controller, and sends the inspection instruction carrying the vehicle information and function information to the body controller.
[0085] Step S205: The vehicle body controller obtains the current CC value and the first BMF corresponding to the current CC value according to the inspection instruction, and sends the current CC value and the first BMF to other controllers except the vehicle body controller.
[0086] Step S206: Each of the other controllers verifies the legitimacy of the vehicle and function information, as well as the legitimacy of the controller, based on the current CC value and the first BMF, and generates a first verification result indicating success. This first verification result is then sent to the OTA server via the T-BOX controller. If the first verification result indicates success, a first verification result indicating success is generated and step S207 is executed. If the first verification result indicates failure, the OTA server reissues a verification instruction containing the vehicle and function information via the T-BOX controller and the gateway controller to the body controller. The other controllers repeat the first verification. If the verification fails three times, step S210 is executed.
[0087] Step S207: The vehicle body controller downloads and installs the software function information and upgrades the current CC value to obtain an updated CC value and a second BMF corresponding to the updated CC value. The updated CC value and the second BMF corresponding to the updated CC value are sent to other controllers.
[0088] Step S208: Each of the other controllers verifies the legitimacy of the vehicle information and function information, as well as the legitimacy of the controller, based on the updated CC value and the second BMF, and sends the second verification result to the OTA server via the T-BOX controller. If the second verification result is a successful verification, a second verification result of successful verification is generated, and step S209 is executed. If the second verification result is a failed verification, the OTA server re-issues the inspection instruction carrying the vehicle information and function information via the T-BOX controller and the gateway controller to the body controller, and repeats the second verification. If the verification cycle fails three times, step S210 is executed.
[0089] Step S209: The OTA server generates a download success response message and sends the download success response message to the terminal device.
[0090] Step S210: The OTA server generates a notification message indicating that the vehicle does not support the software function information, and sends the notification message indicating that the vehicle does not support the software function information to the terminal device.
[0091] Specifically, such as Figure 3 The purchase process diagram provided in this application is shown. The user sends a request to purchase or subscribe to application functions, i.e., software, to the OTA server through the function mall based on the terminal device, and carries the vehicle information for downloading the application functions, wherein the terminal device can be a mobile phone or a car machine, and has a built-in virtual network device and a timer, and the user can set the waiting time for downloading. The OTA server collects vehicle configuration data, vehicle information, and waiting time for downloading, and sends the vehicle configuration data, vehicle information, and waiting time for downloading to the TSP; the TSP activates the function of the vehicle configuration data and wakes up the T-BOX controller; the T-BOX controller sends a wake-up signal to the gateway controller, and sends the vehicle configuration data, vehicle information, and waiting time for downloading to the gateway controller; the gateway controller sends a wake-up signal to the body controller, and the body controller sends status feedback to the gateway controller based on the current status. The gateway controller obtains the diagnostic instruction based on the status feedback and sends the diagnostic instruction to the body controller. When the body controller makes positive feedback, it performs a reset, and generates a new CC value and the first BMF corresponding to the current CC value based on the vehicle configuration data and vehicle information, and The current CC value and the first BMF are sent to other controllers except the body controller, so that each of the other controllers verifies the legitimacy of the vehicle information and function information, as well as the legitimacy of the controller, based on the current CC value and the first BMF. When the first verification result is successful, the function information is downloaded and installed, and the current CC value is upgraded to obtain an updated CC value and a second BMF corresponding to the updated CC value. The updated CC value and the second BMF are sent to the other controllers, so that each of the other controllers verifies the legitimacy of the vehicle information and function information, as well as the legitimacy of the controller, based on the updated CC value and the second BMF, and verifies the accuracy of the installation addresses of the other controllers. The body controller sends the two verification results to the gateway controller; the gateway controller feeds back the two verification results to the T-BOX controller; the T-BOX controller sends the verification results to the TSP, and the TSP sends the verification results to the OTA server. If the verification result is successful, a message indicating successful function activation is sent to the terminal device and the timer starts. The terminal device prompts the user that the function has been activated. If the verification result is failed, the OTA server re-sends the function activation instruction to the TSP based on the vehicle configuration data, vehicle information and waiting download time, and repeats the verification. If the cycle fails three times, a message indicating that function activation failed is sent to the terminal device, and the terminal device prompts the user that the function activation is abnormal.
[0092] In this embodiment, the T-BOX controller, vehicle gateway controller, and body controller are connected to the vehicle's CAN, Ethernet, and FlexRay networks, and information is exchanged with the vehicle through the microcontroller unit (MCU) inside each controller via CAN, Ethernet, FlexRay, and other transceivers.
[0093] In this embodiment, by constructing a two-time verification mechanism, other controllers verify the current CC value and the first BMF corresponding to the current CC value, as well as the updated CC value and the second BMF corresponding to the updated CC value. Compared with the prior art of directly installing the downloaded software, this application improves the guarantee of the matching between the vehicle and the required downloaded software, the legitimacy of the in-vehicle controller, the legitimacy of the required downloaded software, and the correctness of the software installation path.
[0094] Figure 4 A schematic diagram of a processing system based on vehicle application functions provided in this application, such as Figure 4As shown, the user logs in to the mall through the terminal device and sends a download request for the application function to the cloud server. The application function download request includes the vehicle identification and the identification of the application function to be downloaded. The terminal device can be a mobile phone or a car computer. The OTA server in the cloud server collects all vehicle configuration data and sends the vehicle information corresponding to the vehicle identification and the function information corresponding to the identification of the application function to be downloaded to the TSP. The TSP activates the application function, that is, the software, wakes up the T-BOX controller, and issues a test instruction carrying the vehicle information and function information; the T-BOX controller is connected to the gateway controller, the gateway controller is connected to the body controller and other controllers, and the T-BOX controller receives the test instruction carrying the vehicle information and function information After the verification instruction is sent, the verification instruction carrying the vehicle information and function information is sent to the gateway controller. The gateway controller sends the verification instruction carrying the vehicle information and function information to the body controller. The body controller obtains the current CC value and the first BMF corresponding to the current CC value. The body controller sends the current CC value and the first BMF to other controllers. The other controllers verify according to the current CC value and the first BMF to obtain a first verification result, and send the first verification result to the gateway controller. The gateway controller sends the first verification result to the T-BOX controller. The T-BOX controller sends the first verification result to the OTA server. If the first verification result is a failure, the vehicle information corresponding to the vehicle identifier and the application to be downloaded are sent to the OTA server. The function information corresponding to the function identifier is sent to the TSP, and the TSP activates the application function, i.e., the software, again. If the cycle fails three times, a notification message of function activation failure or exception is sent to the end user, specifically, a notification message that the vehicle does not support the software function information; if the first verification result is successful, the body controller downloads and installs the function information, and sends a download success message to the OTA server through the gateway controller and the T-BOX controller, upgrades the current CC value to obtain the updated CC value and the second BMF corresponding to the updated CC value, and sends the updated CC value and the second BMF to other controllers. The other controllers perform verification processing based on the updated CC value and the second BMF to obtain the second verification result. The second verification result is sent to the gateway controller, the gateway controller sends the second verification result to the T-BOX controller, the T-BOX controller sends the second verification result to the OTA server. If the second verification result is a failure, the vehicle information corresponding to the vehicle identifier and the function information corresponding to the identifier of the application function to be downloaded are sent to the TSP. The TSP activates the application function, i.e., the software, again. If it still fails after three cycles, a notification message of function activation failure or abnormality is sent to the terminal device, which may be a notification message that the vehicle does not support the software function information; if the second verification result is a success, a download success response message is generated and sent to the OTA server via the gateway controller T-BOX controller. The OTA server sends the download success response message to the terminal device.
[0095] Among them, the T-BOX controller, gateway controller, and body controller are connected to the vehicle's CAN, Ethernet, and FlexRay networks, and the MCU inside each controller exchanges information with the entire vehicle through CAN, Ethernet, FlexRay and other transceivers.
[0096] In this embodiment, by constructing a two-time verification mechanism, other controllers verify the current CC value and the first BMF corresponding to the current CC value, as well as the updated CC value and the second BMF corresponding to the updated CC value. Compared with the prior art of directly installing the downloaded software, this application improves the guarantee of the matching between the vehicle and the required downloaded software, the legitimacy of the in-vehicle controller, the legitimacy of the required downloaded software, and the correctness of the software installation path.
[0097] Figure 5 This is a structural diagram of an embodiment of a processing device based on vehicle application functions provided by the present application, such as Figure 5 As shown, the processing device 30 based on the vehicle application function includes: a communication box T-BOX31, a body controller 32 and other controllers 33. Specifically, the communication box T-BOX31 is used to send a download request for the application function to the cloud server. The application function download request includes the vehicle identifier and the identifier of the application function to be downloaded, so that the cloud server obtains the vehicle information corresponding to the vehicle identifier and the function information corresponding to the identifier of the application function to be downloaded according to the download request, and sends the vehicle information and function information to the OTA server; the body controller 32 is used to obtain the inspection instruction carrying the vehicle information and function information issued by the OTA server through T-BOX31, and obtain the current vehicle configuration code value and the first download information corresponding value corresponding to the current vehicle configuration code value according to the inspection instruction. The other controllers 33 are used to obtain the vehicle configuration code value and the first download information corresponding value corresponding to the current vehicle configuration code value according ... The vehicle configuration code value before and the corresponding value of the first download information are verified to obtain a first verification result; the body controller 32 is further used to download and install the functional information on the car through the OTA server software upgrade strategy when the first verification result is a successful verification, and to upgrade the current vehicle configuration code value to obtain an updated vehicle configuration code value and a second download information corresponding value corresponding to the updated vehicle configuration code value; the other controllers 33 are further used to perform verification according to the updated vehicle configuration code value and the corresponding value of the second download information to obtain a second verification result, and the body controller 32 is further used to generate a download success response message when the second verification result is a successful verification.
[0098] In this embodiment, the air conditioning controller can execute the above Figure 1The principles and technical effects of the method embodiments shown are similar and will not be described in detail here.
[0099] In a possible implementation scheme, the body controller 32 is specifically used to obtain the current vehicle configuration code value corresponding to the body controller and the first download information corresponding value corresponding to the current vehicle configuration code value according to the inspection instruction, and send the current vehicle configuration code value and the first download information corresponding value to other controllers 33 other than the body controller 32.
[0100] Each controller in the other controllers 33 is specifically used to verify the legitimacy of the vehicle information and function information, as well as the legitimacy of the controller according to the current vehicle configuration code value and the corresponding value of the first downloaded information.
[0101] The body controller 32 is specifically used to generate a first verification result of successful inspection when it is determined that the other controllers 33 have successfully verified the legitimacy of the vehicle information and function information according to the current vehicle configuration code value and the corresponding value of the first downloaded information, as well as the legitimacy of the controller.
[0102] In a possible implementation, the vehicle body controller 32 is specifically configured to perform an upgrade process on the current vehicle configuration code value to obtain an updated vehicle configuration code value and a corresponding value of the second downloaded information corresponding to the updated vehicle configuration code value.
[0103] The updated vehicle configuration code value and the corresponding value of the second downloaded information are sent to other controllers 33 .
[0104] Each controller in the other controllers 33 is specifically configured to verify the legitimacy of the vehicle information and function information, as well as the legitimacy of the controller, based on the updated vehicle configuration code value and the corresponding value of the second downloaded information.
[0105] The body controller 32 is specifically used to generate a second verification result of successful verification and a response message of successful download when it is determined that other controllers have successfully verified the legitimacy of vehicle information and function information based on the updated vehicle configuration code value and the corresponding value of the second downloaded information, as well as the legitimacy of the controller.
[0106] In one possible implementation, the vehicle body controller 32 is further configured to:
[0107] When the first verification result or the second verification result is a verification failure, a notification message is generated to remind the vehicle that the function information is not supported, and the downloading and installation of the function information is terminated.
[0108] In a possible implementation, the vehicle body controller 32 is specifically configured to:
[0109] According to the inspection instruction containing vehicle information and function information received from OTA, the gateway controller of the vehicle is triggered to download the inspection instruction containing vehicle information and function information from the T-BOX.
[0110] The gateway controller is used to generate a wake-up signal to wake up the body controller and transmit the inspection instruction carrying vehicle information and function information to the body controller via Ethernet.
[0111] The present application provides a vehicle, including the technical solution provided by any of the aforementioned embodiments.
[0112] Figure 6 A schematic diagram of the structure of an electronic device provided in this application, such as Figure 6 As shown, the electronic device 40 includes: a processor 41, a memory 42, and a communication interface 43; wherein the memory 42 is used to store executable instructions executable by the processor 41; the processor 41 is configured to execute the technical solution in any of the aforementioned method embodiments by executing the executable instructions.
[0113] Optionally, the memory 42 can be independent or integrated with the processor 41.
[0114] Optionally, when the memory 42 is a device independent of the processor 41 , the server 40 may further include: a bus for connecting the above devices.
[0115] The server is used to execute the technical solution in any of the aforementioned method embodiments, and its implementation principles and technical effects are similar and will not be repeated here.
[0116] Figure 7 This is a structural diagram of an embodiment of a processing system based on vehicle application functions provided by this application, such as Figure 7 As shown, the vehicle-based application function processing system 50 includes: a cloud server 51 and a vehicle 52; wherein the vehicle includes the vehicle-based application function processing device provided by any of the aforementioned embodiments.
[0117] In a possible implementation, the vehicle-based application function processing system 50 further includes: a user terminal.
[0118] An embodiment of the present application further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the technical solution provided by any of the aforementioned embodiments is implemented.
[0119] Those skilled in the art will appreciate that all or part of the steps in the above-described method embodiments can be implemented using hardware associated with program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments. The aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.
[0120] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present application.
Claims
1. A method for processing vehicle-based application functions, characterized in that: include: Sending a download request for the application function to a cloud server, the application function download request including a vehicle identifier and an identifier of the application function to be downloaded, so that the cloud server obtains, according to the download request, vehicle information corresponding to the vehicle identifier and function information corresponding to the identifier of the application function to be downloaded, and sends the vehicle information and function information to the OTA server; Obtaining a verification instruction issued by the OTA and carrying the vehicle information and the function information, obtaining, according to the verification instruction, a current vehicle configuration code value and a first downloaded information corresponding value corresponding to the current vehicle configuration code value, and performing verification processing based on the current vehicle configuration code value and the first downloaded information corresponding value to obtain a first verification result; When the first verification result is verification success, downloading and installing the function information on the vehicle through an OTA software upgrade strategy, and upgrading the current vehicle configuration code value to obtain an updated vehicle configuration code value and a corresponding value of the second downloaded information corresponding to the updated vehicle configuration code value; Verification processing is performed based on the updated vehicle configuration code value and the corresponding value of the second download information to obtain a second verification result, and when the second verification result is verification success, a download success response message is generated.
2. The method according to claim 1, characterized in that The step of obtaining, according to the inspection instruction, a current vehicle configuration code value and a first downloaded information corresponding value corresponding to the current vehicle configuration code value, and performing inspection processing according to the current vehicle configuration code value and the first downloaded information corresponding value to obtain a first verification result includes: triggering the vehicle body controller to obtain, according to the inspection instruction, a current vehicle configuration code value corresponding to the vehicle body controller and a first download information corresponding value corresponding to the current vehicle configuration code value, and sending the current vehicle configuration code value and the first download information corresponding value to other controllers other than the vehicle body controller, so that each of the other controllers verifies the legitimacy of the vehicle information and the function information, as well as the legitimacy of the controller, based on the current vehicle configuration code value and the first download information corresponding value; When it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information according to the current vehicle configuration code value and the corresponding value of the first downloaded information, as well as the legitimacy of the controller, a first verification result of successful verification is generated.
3. The method according to claim 1, characterized in that The upgrading process of the current vehicle configuration code value to obtain an updated vehicle configuration code value and a second download information corresponding value corresponding to the updated vehicle configuration code value includes: triggering the vehicle body controller to perform an upgrade process on the current vehicle configuration code value to obtain an updated vehicle configuration code value and a corresponding value of the second downloaded information corresponding to the updated vehicle configuration code value; Then, the verification process is performed according to the updated vehicle configuration code value and the corresponding value of the second download information to obtain a second verification result, and when the second verification result is verification success, a download success response message is generated, including: triggering the vehicle body controller to send the updated vehicle configuration code value and the corresponding value of the second downloaded information to other controllers, so that each of the other controllers verifies the legitimacy of the vehicle information and the function information, as well as the legitimacy of the controller, based on the updated vehicle configuration code value and the corresponding value of the second downloaded information; When it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information based on the updated vehicle configuration code value and the corresponding value of the second downloaded information, as well as the legitimacy of the controller, a second verification result of successful verification is generated, and a response message of successful download is generated.
4. The method according to claim 2 or 3, characterized in that Also includes: When the first verification result or the second verification result is a verification failure, a notification message is generated to remind the vehicle that the function information is not supported, and the downloading and installation of the function information is terminated.
5. The method according to any one of claims 1 to 3, characterized in that: The obtaining of the inspection instruction carrying the vehicle information and the function information issued by the OTA includes: The vehicle's communication box T-BOX triggers the vehicle's gateway controller to download the inspection instruction carrying the vehicle information and the function information from the T-BOX based on the inspection instruction carried by the vehicle information and the function information received from the OTA; The gateway controller generates a wake-up signal to wake up the body controller, and transmits the inspection instruction carrying the vehicle information and the function information to the body controller via Ethernet.
6. A processing device based on vehicle application functions, characterized in that: include: The communication box T-BOX is used to send a download request for an application function to a cloud server, where the application function download request includes a vehicle identifier and an identifier of the application function to be downloaded, so that the cloud server obtains vehicle information corresponding to the vehicle identifier and function information corresponding to the identifier of the application function to be downloaded according to the download request, and sends the vehicle information and function information to an OTA server; a body controller, configured to obtain, through the T-BOX, the inspection instruction carried by the vehicle information and the function information, issued by the OTA, and obtain, based on the inspection instruction, a current vehicle configuration code value and a corresponding value of the first downloaded information corresponding to the current vehicle configuration code value; Another controller is used to perform verification processing according to the current vehicle configuration code value and the corresponding value of the first downloaded information to obtain a first verification result; The body controller is further configured to, when the first verification result is verification success, download and install the function information on the vehicle through an OTA software upgrade strategy, and upgrade the current vehicle configuration code value to obtain an updated vehicle configuration code value and a corresponding value of the second downloaded information corresponding to the updated vehicle configuration code value; The other controller is further configured to perform verification processing based on the updated vehicle configuration code value and the corresponding value of the second downloaded information to obtain a second verification result; The vehicle body controller is further configured to generate a download success response message when the second verification result is a successful verification.
7. The device according to claim 6, characterized in that The body controller is specifically configured to obtain, according to the inspection instruction, a current vehicle configuration code value corresponding to the body controller and a first download information corresponding value corresponding to the current vehicle configuration code value, and send the current vehicle configuration code value and the first download information corresponding value to other controllers except the body controller; Each of the other controllers is specifically configured to verify the legitimacy of the vehicle information and the function information, as well as the legitimacy of the controller, based on the current vehicle configuration code value and the corresponding value of the first downloaded information; The body controller is specifically used to generate a first verification result of successful verification when it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information based on the current vehicle configuration code value and the corresponding value of the first downloaded information, as well as the legitimacy of the controller.
8. The device according to claim 6, characterized in that The vehicle body controller is specifically used to perform an upgrade process on the current vehicle configuration code value to obtain an updated vehicle configuration code value and a corresponding value of the second downloaded information corresponding to the updated vehicle configuration code value; sending the updated vehicle configuration code value and the corresponding value of the second downloaded information to the other controller; Each of the other controllers is specifically configured to verify the legitimacy of the vehicle information and the function information, as well as the legitimacy of the controller, based on the updated vehicle configuration code value and the corresponding value of the second downloaded information; The body controller is specifically used to generate a second verification result of successful verification and a response message of successful download when it is determined that the other controllers have successfully verified the legitimacy of the vehicle information and the functional information based on the updated vehicle configuration code value and the corresponding value of the second downloaded information, as well as the legitimacy of the controller.
9. The device according to claim 7 or 8, characterized in that The body controller is also used for: When the first verification result or the second verification result is a verification failure, a notification message is generated to remind the vehicle that the function information is not supported, and the downloading and installation of the function information is terminated.
10. The device according to any one of claims 6 to 8, characterized in that The vehicle body controller is specifically used for: triggering the gateway controller of the vehicle to download the inspection instruction carrying the vehicle information and the function information from the T-BOX according to the inspection instruction carried by the vehicle information and the function information sent by the OTA; The gateway controller is used to generate a wake-up signal to wake up the body controller, and transmit the inspection instruction carrying the vehicle information and the function information to the body controller via Ethernet.
11. A vehicle, characterized in that: include: A vehicle-based application function processing device according to any one of claims 6 to 10.
12. An electronic device, characterized in that: include: Processor, memory, communication interface; The memory is used to store executable instructions executable by the processor; The processor is configured to execute the vehicle-based application function processing method according to any one of claims 1 to 5 by executing the executable instructions.
13. A vehicle-based application function processing system, characterized in that: include: A cloud server and a vehicle; wherein the vehicle includes a processing device based on vehicle application functions as described in any one of claims 6 to 10.
14. The application function processing system according to claim 13, characterized in that: Also includes: user terminal.
15. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method for processing a vehicle-based application function according to any one of claims 1 to 5 is implemented.
Citation Information
Patent Citations
Device and method for updating vehicle controller firmware
CN110187904A
Remote upgrading method and device, computer equipment and storage medium
CN114915554A