A method and system for remote upgrading of an ECU

Abstract

The application relates to an ECU remote upgrading method and system, which comprises the following steps: in response to receiving a user input upgrading instruction, acquiring vehicle state information, judging whether the vehicle state information meets preset pre-upgrading conditions; if the vehicle state information meets the preset pre-upgrading conditions, identifying the power supply mode of a target ECU to be upgraded and identifying the power supply mode of the whole vehicle; when the power supply mode is a first power supply mode and the whole vehicle is in an ON gear, starting an upgrading process; when the power supply mode is the first power supply mode and the whole vehicle is in an OFF gear, sending a power-on request to the whole vehicle to make the whole vehicle gear up to the ON gear, if the whole vehicle gear up to the ON gear succeeds, starting the upgrading process, if the whole vehicle gear up to the ON gear fails, exiting the upgrading process; when the power supply mode is a second power supply mode and the whole vehicle is in the OFF gear, starting the upgrading process; and when the power supply mode is the second power supply mode and the whole vehicle is in the ON gear, exiting the upgrading process. The application can widen the application range of OTA remote upgrading technology in ECU upgrading.

Description

Technical Field

[0001] The present invention relates to the technical field of ECU upgrade, and in particular to an ECU remote upgrade method and system. Background Art

[0002] With the development of intelligent connected vehicles, the Internet of Vehicles (IoV) is becoming increasingly important. Compared to traditional vehicles, automotive ECUs such as IVI, TBOX, ADAS, and new energy ECUs are experiencing more and more software updates and iterations to provide a better user experience. OTA (Over-the-Air) provides an online upgrade method that allows users to upgrade vehicle systems by clicking on the interface, just like upgrading a mobile phone system. Compared to traditional offline 4S dealership after-sales software upgrades, OTA remote upgrades enable rapid software iteration and upgrades, saving costs and improving the user experience. This can largely avoid the risk of vehicle recalls due to software. However, OTA remote upgrades are performed by ordinary car owners, not professional after-sales engineers. Therefore, the reliability and security of OTA remote upgrades must be guaranteed to ensure a good user experience.

[0003] More and more vehicle ECUs are urgently in need of remote upgrades. ECUs have multiple power supply modes. For example, based on different ECU power supply sources, two power supply modes can be proposed for the main types of ECUs. The first power supply mode is powered by the positive electrode of the power battery. The ECU function in the first power supply mode is only enabled when the vehicle is in the ON gear. When the vehicle is in the OFF gear, the ECU cannot enable the function. The second power supply mode is powered by both the positive electrode of the power battery and the normal power of the battery. The ECU function in the second power supply mode remains enabled in both the ON and OFF gears of the vehicle.

[0004] The OTA remote upgrade process requires the ECU being upgraded and related nodes to maintain power. Existing OTA remote upgrade technology utilizes vehicle-side control technology and in-vehicle interaction to perform OTA remote upgrades in the OFF position. Before the official upgrade, strict upgrade conditions are checked to ensure the vehicle is in the OFF position. The upgrade process remains in the OFF position, and the OTA upgrade is completed with the support of the vehicle battery. Users only need to unlock the vehicle and exit the vehicle when prompted by the vehicle-computer interaction to complete the upgrade preparations. They can then exit the vehicle and wait until the upgrade is complete.

[0005] The existing OTA remote upgrade technology only supports OFF-speed upgrades for ECUs in the second power mode. ECUs in the first power mode cannot currently be upgraded via OTA remote upgrades and require offline recalls at 4S stores, requiring offline software updates with the support of professional after-sales engineers and equipment. Summary of the Invention

[0006] The purpose of the present invention is to propose an ECU remote upgrade method and system to solve the technical problem that the ECU in the first power mode mentioned above cannot be remotely upgraded via OTA, and to broaden the scope of application of OTA remote upgrade technology in ECU upgrades.

[0007] To achieve the above objectives, an embodiment of the present invention provides an ECU remote upgrade method, comprising the following steps:

[0008] In response to receiving an upgrade instruction input by a user, obtaining vehicle status information, and determining whether the vehicle status information meets a preset upgrade precondition;

[0009] If the vehicle status information satisfies the preset upgrade preconditions, the power mode of the target ECU to be upgraded is identified, and the current gear position of the vehicle is identified; wherein the power mode includes a first power mode and a second power mode, wherein the first power mode is that the power battery supplies power to the ECU, and the ECU is only enabled when the vehicle is in the ON gear; and the second power mode is that both the power battery and the storage battery can supply power to the ECU, and the ECU is enabled in both the ON gear and the OFF gear of the vehicle;

[0010] When the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the vehicle is ON, the upgrade process of the target ECU is started;

[0011] When the power mode of the target ECU to be upgraded is the first power mode and the current gear of the vehicle is OFF, a power-on request is sent to the vehicle to shift the gear of the vehicle to ON. If the vehicle shifts to ON successfully, the upgrade process of the target ECU is started. If the vehicle shifts to ON failed, the upgrade process of the target ECU is exited.

[0012] When the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is OFF, the upgrade process of the target ECU is started;

[0013] When the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is ON, the upgrade process of the target ECU is exited.

[0014] Preferably, the method further comprises the steps of:

[0015] When the power mode of the target ECU to be upgraded is the first power mode, before starting the upgrade process of the target ECU, a charging signal is sent to the vehicle controller so that the vehicle controller maintains charging the battery when executing the target ECU upgrade process.

[0016] Preferably, the method further comprises the steps of:

[0017] When executing the ECU upgrade process, if the upgrade fails, it will automatically initiate a retry upgrade;

[0018] If the retry upgrade fails, the target ECU performs a software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; if the software rollback fails, the upgrade fails, and the relevant functions of the target ECU are invalid;

[0019] Generate an upgrade result, display the upgrade result through the vehicle-machine interactive interface, and report the upgrade result to the OTA background server; wherein, the upgrade result includes: upgrade success, or upgrade failure and software rollback success, or upgrade failure and software rollback failure.

[0020] Preferably, the method further comprises the steps of:

[0021] When the power mode of the target ECU to be upgraded is the first power mode, after generating the upgrade result, the current gear position of the vehicle controller is obtained. If the current gear position of the vehicle controller is ON, a power-off request is sent to the vehicle controller to power off the vehicle controller.

[0022] Preferably, the vehicle status information includes: ACC gear position, vehicle lock and arming status, vehicle speed, battery power, battery voltage and vehicle ignition status;

[0023] The preset upgrade preconditions include: the ACC gear is OFF, the vehicle lock arming state is yes, the vehicle speed is 0, the battery power is within a preset power range, the battery voltage is within a preset voltage range, and the vehicle ignition state is off.

[0024] Preferably, the method further comprises the steps of:

[0025] Before starting the upgrade process of the target ECU, disable the PEPS function and all CAN application message communications.

[0026] An embodiment of the present invention further provides an ECU remote upgrade system, comprising:

[0027] an upgrade triggering unit, configured to, in response to receiving an upgrade instruction input by a user, obtain vehicle status information and determine whether the vehicle status information satisfies a preset upgrade precondition;

[0028] an identification unit, configured to identify a power mode of a target ECU to be upgraded and a current gear position of the vehicle if the vehicle status information satisfies a preset upgrade precondition; wherein the power mode includes a first power mode and a second power mode, wherein the first power mode is one in which the power battery supplies power to the ECU, and the ECU is enabled only when the vehicle is in the ON gear; and wherein the second power mode is one in which both the power battery and the storage battery supply power to the ECU, and the ECU is enabled in both the ON gear and the OFF gear of the vehicle;

[0029] The upgrade unit is used to start the upgrade process of the target ECU when the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the whole vehicle is the ON gear; when the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the whole vehicle is the OFF gear, send a power-on request to the whole vehicle to shift the gear of the whole vehicle to the ON gear, if the gear of the whole vehicle is successfully shifted to the ON gear, start the upgrade process of the target ECU, if the gear of the whole vehicle fails to be shifted to the ON gear, exit the upgrade process of the target ECU; when the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the whole vehicle is the OFF gear, start the upgrade process of the target ECU; and when the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the whole vehicle is the ON gear, exit the upgrade process of the target ECU.

[0030] Preferably, the system further comprises:

[0031] A charging control unit is used to send a charging signal to the vehicle controller before starting the upgrade process of the target ECU when the power mode of the target ECU to be upgraded is the first power mode, so that the vehicle controller maintains charging the battery when executing the target ECU upgrade process.

[0032] Preferably, the upgrading unit is further used for:

[0033] When executing the ECU upgrade process, if the upgrade fails, it will automatically initiate a retry upgrade;

[0034] If the retry upgrade fails, the target ECU performs a software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; if the software rollback fails, the upgrade fails, and the relevant functions of the target ECU are invalid;

[0035] Generate an upgrade result, display the upgrade result through the vehicle-machine interactive interface, and report the upgrade result to the OTA background server; wherein, the upgrade result includes: upgrade success, or upgrade failure and software rollback success, or upgrade failure and software rollback failure.

[0036] Preferably, the upgrading unit is further used for:

[0037] When the power mode of the target ECU to be upgraded is the first power mode, after generating the upgrade result, the current gear position of the vehicle controller is obtained. If the current gear position of the vehicle controller is ON, a power-off request is sent to the vehicle controller to power off the vehicle controller.

[0038] The embodiments of the present invention have at least the following beneficial effects:

[0039] In response to the OTA remote upgrade problem of ECU in the first power mode mentioned above, strict upgrade conditions are checked to ensure the appropriate upgrade scenario and vehicle environment. By actively judging the ECU power mode, the basic configuration of the upgrade environment of the ECU in different power modes is automatically switched. It supports ECUs compatible with multiple power modes and can complete ECU remote refresh under the same vehicle environment conditions. It is based on the same set of upgrade interaction control processes and the remote upgrade process of the adaptive ECU power mode without user perception. This solves the technical problem that the ECU in the first power mode mentioned above cannot be remotely upgraded through OTA, and broadens the scope of application of OTA remote upgrade technology in ECU upgrades.

[0040] Other features and advantages of embodiments of the present invention will be set forth in the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0041] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0042] Figure 1 The figure is a flow chart of a method for remotely upgrading an ECU according to an embodiment of the present invention.

[0043] Figure 2 Schematic diagram of the framework of an ECU remote upgrade system in an embodiment of the present invention. DETAILED DESCRIPTION

[0044] Various exemplary embodiments, features, and aspects of the present disclosure will be described in detail below with reference to the accompanying drawings. In addition, numerous specific details are provided in the following specific examples to better illustrate the present invention. Those skilled in the art will appreciate that the present invention can be practiced without certain specific details. In some instances, means well known to those skilled in the art are not described in detail in order to highlight the main points of the present invention.

[0045] See Figure 1An embodiment of the present invention provides an ECU remote upgrade method, which is a solution for OTA remote upgrades that is compatible with ECUs that support different power modes. The method process of this embodiment can be executed by a T-box. The method of this embodiment includes the following steps:

[0046] Step S10: in response to receiving the upgrade instruction input by the user, obtaining vehicle status information, and determining whether the vehicle status information meets the preset upgrade preconditions;

[0047] Specifically, the user operates the OTA remote upgrade of the ECU on the vehicle computer interactive interface, clicks according to the upgrade instructions to enter the upgrade process of the target ECU, and the vehicle computer system converts the user operation into an upgrade start instruction input to TBOX, thereby triggering the upgrade process of the target ECU;

[0048] Step S20: If the vehicle status information satisfies the preset upgrade preconditions, the power mode of the target ECU to be upgraded is identified, and the current gear position of the vehicle is identified; wherein the power mode includes a first power mode and a second power mode, wherein the first power mode is that the power battery supplies power to the ECU, and the ECU is enabled only when the vehicle is in the ON gear; and the second power mode is that both the power battery and the storage battery can supply power to the ECU, and the ECU is enabled in both the ON gear and the OFF gear of the vehicle;

[0049] Specifically, the upgrade precondition check is to check the upgrade condition signal status. If the upgrade condition check is met, the upgrade process continues; if not, the upgrade process exits. The upgrade check conditions can be flexibly configured according to the ECU upgrade requirements. For example, the check of whether the vehicle status information meets the preset upgrade preconditions can be referred to in Table 1 below.

[0050] Table 1 - Vehicle Upgrade Condition Check

[0051] Serial number Upgrade conditions Meet the conditions Is inspection mandatory? 1 ACC gear OFF yes 2 Locked car armed state Lock the car and defend it yes 3 Speed 0 yes 4 Battery charge OTA background configuration is available yes 5 Battery voltage OTA background configuration is available Required if the vehicle has no battery charge signal 6 Parking brake status Handbrake tightened Optional 7 Vehicle ignition status Stall / Not Ready yes 8 High voltage charging status Not charging Yes (new energy vehicles only) 9 Vehicle high voltage status Non-high pressure state Yes (new energy vehicles only) 10 Vehicle gear P gear Optional 11 Driver's seat belt status Not tied Optional

[0052] As shown in Table 1 above, Table 1 lists 11 types of vehicle status information, of which the checking of some status information is optional or needs to be determined based on the power type of the vehicle, such as whether it is a new energy vehicle.

[0053] Step S301: When the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the vehicle is the ON gear, the upgrade process of the target ECU is started;

[0054] Step S302: When the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the vehicle is OFF, a power-on request is sent to the vehicle to shift the gear position of the vehicle to ON. If the vehicle shifts to ON successfully, the upgrade process of the target ECU is started. If the vehicle shifts to ON failed, the upgrade process of the target ECU is exited.

[0055] Specifically, the vehicle T-BOX interacts with the vehicle IBCM and sends a power-on command message to the IBCM. If the power-on is successful, the upgrade process can continue. If the power-on is unsuccessful, the refresh cannot be performed and the result of not meeting the power-on requirements is returned to the vehicle-machine interaction interface for display to the user;

[0056] Step S303: When the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is OFF, the upgrade process of the target ECU is started;

[0057] Step S304: When the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is ON, exit the upgrade process of the target ECU;

[0058] The above steps S301-S304 are parallel steps, and different upgrade decisions are made in different scenarios. The ECU in the first power mode needs to be in the vehicle ON gear to enable the diagnostic refresh function, and the ECU in the second power mode needs to be in the vehicle OFF gear to enable the diagnostic refresh function.

[0059] Specifically in this embodiment, step S301 and step S302 both specifically include:

[0060] Before starting the upgrade process of the target ECU, sending a charging signal to the vehicle controller so that the vehicle controller maintains charging the battery when executing the target ECU upgrade process;

[0061] Specifically, during the vehicle controller ON gear upgrade process, this embodiment adds a signal to the controller VCU to control the VCU to charge the battery during the upgrade process, avoiding the risk of battery power feeding after the upgrade is completed, which may cause the vehicle to be unable to power on normally;

[0062] It should be noted that in actual market applications, existing OTA remote upgrades, in order to avoid battery power-feeding in market vehicles after completing the OTA remote upgrade, set the upgrade detection condition in the background - detecting the battery power value. Before the upgrade, the vehicle's upgrade conditions are tested, and the upgrade can only begin after the test passes. To avoid power-feeding, it is often easy to set the detection power threshold too high, resulting in a lower completion rate for the actual market upgrade. In this embodiment, it is set to control the VCU to charge the battery during the upgrade process, which can lower the setting of the power threshold and avoid setting the detection power threshold too high, which leads to a lower completion rate for the actual market upgrade.

[0063] Specifically in this embodiment, steps S301-S304 include the following (1)-(3):

[0064] (1) When executing the ECU upgrade process, if the upgrade fails, it will automatically initiate a retry upgrade;

[0065] (2) If the retry upgrade fails, the target ECU will perform a software rollback. If the software rollback is successful, the upgrade will fail, but the relevant functions of the target ECU will be valid, and the vehicle will not be affected. If the software rollback fails, not only will the upgrade fail, but the relevant functions of the target ECU will also become invalid, and the user will need to return to the after-sales service for resolution.

[0066] It should be noted that in this embodiment, a retry mechanism for upgrade failure is added to ensure reasonable retry in the event of upgrade failure, thereby reducing the upgrade failure rate to a certain extent; and software rollback is performed to ensure that in the event of upgrade failure, the upgraded ECU can be restored to a normal working state;

[0067] (3) Generate an upgrade result, display the upgrade result through the vehicle-computer interaction interface, and report the upgrade result to the OTA background server; wherein, the upgrade result includes: upgrade success, or upgrade failure and software rollback success, or upgrade failure and software rollback failure.

[0068] Specifically in this embodiment, step S301 and step S302 both specifically include:

[0069] After generating the upgrade result, obtaining the current gear position of the vehicle controller, and if the current gear position of the vehicle controller is ON, sending a power-off request to the vehicle controller to power off the vehicle controller;

[0070] Specifically, TBOX interacts with IBCM and sends a power-off command message to IBCM. If the power-off is successful and the upgrade process is completed, the vehicle environment is restored. If the power-off fails, it is handled according to the preset method of waiting for power-off timeout, for example, the upgrade process ends, and a log of waiting for power-off timeout is generated and saved.

[0071] Specifically in the embodiment, the steps S301-S304 each specifically comprises:

[0072] Before starting the upgrade process of the target ECU, the PEPS function and all CAN application message communication are prohibited.

[0073] For example, the disabling mode of the PEPS function is as follows:

[0074] 1.1) Enter the PEPS into the extended mode through the 10 03 diagnostic service;

[0075] 1.2) Enter the PEPS into the boot mode through the 10 02 diagnostic service;

[0076] 1.3) Maintain the PEPS in the boot mode through the 3E 80 service;

[0077] For example, the disabling mode of all CAN application message communication is as follows:

[0078] 2.1) Enter all CAN ECUs into the extended mode through the 10 03 diagnostic service;

[0079] 2.2) Prohibit all CAN application messages through the 28 03 01 diagnostic service;

[0080] 2.3) Maintain all CAN in the disabled application message communication through the 3E 80 diagnostic service;

[0081] It should be noted that the prohibition of the PEPS function and all CAN application message communication in the embodiment ensures that, during the upgrade process, other messages on the vehicle bus are preferentially diagnosed and refreshed to improve the success rate.

[0082] Referring to Figure 2 The embodiment of the application also provides an ECU remote upgrade system which can be installed in a T-Box of a vehicle, the system of the embodiment corresponds to the method of the above embodiment, and the system of the embodiment comprises a plurality of functional units which can be used to execute a plurality of steps of the method of the above embodiment, and the plurality of functional units specifically comprises:

[0083] An upgrade triggering unit 1 is configured to, in response to receiving an upgrade instruction input by a user, acquire vehicle state information and determine whether the vehicle state information meets preset pre-upgrade conditions.

[0084] Identification unit 2 is configured to identify the power mode of the target ECU to be upgraded and the current gear position of the vehicle if the vehicle status information satisfies a preset upgrade precondition; wherein the power mode includes a first power mode and a second power mode, wherein the first power mode is that the power battery supplies power to the ECU, and the ECU is enabled only when the vehicle is in the ON gear; and wherein the second power mode is that both the power battery and the storage battery supply power to the ECU, and the ECU is enabled in both the ON gear and the OFF gear of the vehicle;

[0085] The upgrade unit 3 is used to start the upgrade process of the target ECU when the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the vehicle is ON; when the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the vehicle is OFF, send a power-on request to the vehicle to shift the gear of the vehicle to ON, if the gear of the vehicle is successfully shifted to ON, start the upgrade process of the target ECU, if the gear of the vehicle fails to be shifted to ON, exit the upgrade process of the target ECU; when the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is OFF, start the upgrade process of the target ECU; and, when the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is ON, exit the upgrade process of the target ECU.

[0086] Specifically in this embodiment, the system further includes:

[0087] The charging control unit 4 is used to send a charging signal to the vehicle controller before starting the upgrade process of the target ECU when the power mode of the target ECU to be upgraded is the first power mode, so that the vehicle controller maintains charging the battery when executing the target ECU upgrade process.

[0088] Specifically in this embodiment, the upgrading unit 3 is further configured to:

[0089] When executing the ECU upgrade process, if the upgrade fails, it will automatically initiate a retry upgrade;

[0090] If the retry upgrade fails, the target ECU performs a software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; if the software rollback fails, the upgrade fails, and the relevant functions of the target ECU are invalid;

[0091] Generate an upgrade result, display the upgrade result through the vehicle-machine interactive interface, and report the upgrade result to the OTA background server; wherein, the upgrade result includes: upgrade success, or upgrade failure and software rollback success, or upgrade failure and software rollback failure.

[0092] Specifically in this embodiment, the upgrading unit 3 is further configured to:

[0093] When the power mode of the target ECU to be upgraded is the first power mode, after generating the upgrade result, the current gear position of the vehicle controller is obtained. If the current gear position of the vehicle controller is ON, a power-off request is sent to the vehicle controller to power off the vehicle controller.

[0094] Specifically in this embodiment, the system further includes:

[0095] The function prohibition unit 5 is used to prohibit the PEPS function and all CAN application message communications before starting the upgrade process of the target ECU.

[0096] The systems of the embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate, and the components shown as units may or may not be physical units, i.e., they may be located in one place or distributed across multiple network units. Some or all of the modules may be selected based on actual needs to achieve the objectives of the system solutions of the embodiments.

[0097] It should be noted that the system of the above embodiment corresponds to the method of the above embodiment. Therefore, the undescribed part of the system of the above embodiment can be obtained by referring to the content of the method of the above embodiment. That is, the specific steps recorded in the method of the above embodiment can be understood as the functions that can be achieved by the system of the above embodiment, and will not be repeated here.

[0098] Furthermore, if the ECU remote upgrade system of the above embodiment is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium.

[0099] The embodiments of the present invention have the following advantages:

[0100] In response to the OTA remote upgrade problem of ECU in the first power mode mentioned above, strict upgrade conditions are checked to ensure the appropriate upgrade scenario and vehicle environment. By actively judging the ECU power mode, the basic configuration of the upgrade environment of the ECU in different power modes is automatically switched. It supports ECUs compatible with multiple power modes and can complete ECU remote refresh under the same vehicle environment conditions. It is based on the same set of upgrade interaction control processes and the remote upgrade process of the adaptive ECU power mode without user perception. This solves the technical problem that the ECU in the first power mode mentioned above cannot be remotely upgraded through OTA, and broadens the scope of application of OTA remote upgrade technology in ECU upgrades.

[0101] While various embodiments of the present invention have been described above, the above descriptions are intended to be illustrative, non-exhaustive, and not limited to the disclosed embodiments. Many modifications and variations will be apparent to those skilled in the art without departing from the scope and spirit of the described embodiments. The terminology used herein is selected to best explain the principles of the embodiments, their practical applications, or technological improvements in the marketplace, or to enable others skilled in the art to understand the embodiments disclosed herein.

Claims

1. A method for remotely upgrading an ECU, characterized in that: The steps include: In response to receiving an upgrade instruction input by a user, obtaining vehicle status information, and determining whether the vehicle status information meets a preset upgrade precondition; If the vehicle status information satisfies the preset upgrade preconditions, the power mode of the target ECU to be upgraded is identified, and the current gear position of the vehicle is identified; wherein the power mode includes a first power mode and a second power mode, wherein the first power mode is that the power battery supplies power to the ECU, and the ECU is only enabled when the vehicle is in the ON gear; and the second power mode is that both the power battery and the storage battery can supply power to the ECU, and the ECU is enabled in both the ON gear and the OFF gear of the vehicle; When the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the vehicle is ON, the upgrade process of the target ECU is started; When the power mode of the target ECU to be upgraded is the first power mode and the current gear of the vehicle is OFF, a power-on request is sent to the vehicle to shift the gear of the vehicle to ON. If the vehicle shifts to ON successfully, the upgrade process of the target ECU is started. If the vehicle shifts to ON failed, the upgrade process of the target ECU is exited. When the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is OFF, the upgrade process of the target ECU is started; When the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the vehicle is ON, the upgrade process of the target ECU is exited.

2. The ECU remote upgrade method according to claim 1, characterized in that: The method further comprises the steps of: When the power mode of the target ECU to be upgraded is the first power mode, before starting the upgrade process of the target ECU, a charging signal is sent to the vehicle controller so that the vehicle controller maintains charging the battery when executing the target ECU upgrade process.

3. The ECU remote upgrade method according to claim 2, characterized in that: The method further comprises the steps of: When executing the ECU upgrade process, if the upgrade fails, it will automatically initiate a retry upgrade; If the retry upgrade fails, the target ECU performs a software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; If the software rollback fails, the upgrade fails and the relevant functions of the target ECU become invalid; Generate an upgrade result, display the upgrade result through the vehicle-machine interactive interface, and report the upgrade result to the OTA background server; wherein, the upgrade result includes: upgrade success, or upgrade failure and software rollback success, or upgrade failure and software rollback failure.

4. The ECU remote upgrade method according to claim 3, characterized in that: The method further comprises the steps of: When the power mode of the target ECU to be upgraded is the first power mode, after generating the upgrade result, the current gear position of the vehicle controller is obtained. If the current gear position of the vehicle controller is ON, a power-off request is sent to the vehicle controller to power off the vehicle controller.

5. The ECU remote upgrade method according to any one of claims 1 to 4, characterized in that: The vehicle status information includes: ACC gear position, vehicle lock and arming status, vehicle speed, battery power, battery voltage and vehicle ignition status; The preset upgrade preconditions include: the ACC gear is OFF, the vehicle lock arming state is yes, the vehicle speed is 0, the battery power is within a preset power range, the battery voltage is within a preset voltage range, and the vehicle ignition state is off.

6. The ECU remote upgrade method according to any one of claims 1 to 4, characterized in that: The method further comprises the steps of: Before starting the upgrade process of the target ECU, disable the PEPS function and all CAN application message communications.

7. An ECU remote upgrade system, characterized in that: include: an upgrade triggering unit, configured to, in response to receiving an upgrade instruction input by a user, obtain vehicle status information and determine whether the vehicle status information satisfies a preset upgrade precondition; an identification unit, configured to identify a power mode of a target ECU to be upgraded and a current gear position of the vehicle if the vehicle status information satisfies a preset upgrade precondition; wherein the power mode includes a first power mode and a second power mode, wherein the first power mode is one in which the power battery supplies power to the ECU, and the ECU is enabled only when the vehicle is in the ON gear; and wherein the second power mode is one in which both the power battery and the storage battery supply power to the ECU, and the ECU is enabled in both the ON gear and the OFF gear of the vehicle; The upgrade unit is used to start the upgrade process of the target ECU when the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the whole vehicle is the ON gear; when the power mode of the target ECU to be upgraded is the first power mode and the current gear position of the whole vehicle is the OFF gear, send a power-on request to the whole vehicle to shift the gear of the whole vehicle to the ON gear, if the gear of the whole vehicle is successfully shifted to the ON gear, start the upgrade process of the target ECU, if the gear of the whole vehicle fails to be shifted to the ON gear, exit the upgrade process of the target ECU; when the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the whole vehicle is the OFF gear, start the upgrade process of the target ECU; and when the power mode of the target ECU to be upgraded is the second power mode and the current gear position of the whole vehicle is the ON gear, exit the upgrade process of the target ECU.

8. The ECU remote upgrade system according to claim 7, characterized in that: The system further comprises: The charging control unit is used to send a charging signal to the vehicle controller before starting the upgrade process of the target ECU when the power mode of the target ECU to be upgraded is the first power mode, so that the vehicle controller maintains charging the battery when executing the target ECU upgrade process.

9. The ECU remote upgrade system according to claim 8, characterized in that: The upgrading unit is further configured to: When executing the ECU upgrade process, if the upgrade fails, it will automatically initiate a retry upgrade; If the retry upgrade fails, the target ECU performs a software rollback; if the software rollback succeeds, the upgrade fails, and the relevant functions of the target ECU are valid; If the software rollback fails, the upgrade fails and the relevant functions of the target ECU become invalid; Generate an upgrade result, display the upgrade result through the vehicle-machine interactive interface, and report the upgrade result to the OTA background server; wherein, the upgrade result includes: upgrade success, or upgrade failure and software rollback success, or upgrade failure and software rollback failure.

10. The ECU remote upgrade system according to claim 9, characterized in that: The upgrading unit is further configured to: When the power mode of the target ECU to be upgraded is the first power mode, after generating the upgrade result, the current gear position of the vehicle controller is obtained. If the current gear position of the vehicle controller is ON, a power-off request is sent to the vehicle controller to power off the vehicle controller.

Images