Remote upgrade method, device, electronic equipment and storage medium

Abstract

The present application provides a remote upgrade method, device, electronic device and storage medium, which are applied to the upgrade management module in the remote upgrade system. By using the remote upgrade interaction method between subsystems in the remote upgrade system installed on the autonomous driving controller, a high degree of integration across different autonomous driving subsystems is achieved, which greatly improves the accuracy and fault tolerance of remote upgrade operations. By designing a dual-partition memory layout for the memory in the high-performance computing subsystem, the remote upgrade system can write the new upgrade version data packet to the slave partition during the upgrade process while keeping the master partition unchanged. When an upgrade failure occurs in the subsystem during the upgrade process, the remote upgrade system can automatically recover to the previous stable version based on the initial version data packet in the master partition, thereby ensuring the robustness of the system and effectively avoiding the risk of system crash due to unsuccessful upgrade.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of automobile application technology, and in particular to a remote upgrade method, device, electronic device and storage medium. Background Art

[0002] At present, with the vigorous development of artificial intelligence technology, autonomous driving technology has gradually begun to be applied to the automotive field. The on-board autonomous driving domain controller is an intelligent computing platform that integrates all autonomous driving functions, and can realize autonomous driving functions such as perception data processing, driving path planning, and transmission of vehicle control signals. The autonomous driving domain controller not only needs to have high computing power, but also needs to ensure the safety of functional operation. Therefore, the current mainstream autonomous driving domain controller is usually a complex distributed system composed of multiple processors, and each processor in the system is responsible for realizing part of the system functions.

[0003] In order to continuously improve and optimize the functions of intelligent connected vehicles and realize the rapid update of on-board software, the vehicle remote upgrade technology (Over-the-Air) realizes the remote upgrade of vehicle terminal firmware, data and applications through the mobile communication network.

[0004] However, in the related art, due to the complexity of the on-board autonomous driving domain controller system, the current remote upgrade method for the autonomous driving system has the problems of slow upgrade and low success rate. Summary of the invention

[0005] The embodiments of the present application provide a remote upgrade method, device, system, electronic device and computer-readable storage medium to solve the problem in the related art that different algorithms developed in different receiving terminals are different, resulting in the inability to ensure the consistency of the final presented data.

[0006] In a first aspect, an embodiment of the present application provides a remote upgrade method, which is applied to an upgrade management module in a remote upgrade system, wherein the remote upgrade system is mounted on an autonomous driving controller, wherein the remote upgrade system includes a safety control subsystem and a high-performance computing subsystem, wherein the autonomous driving controller includes an external network transceiver, an internal communication bus, and a memory, wherein the high-performance computing subsystem includes a first application layer and a first boot layer, wherein the first application layer includes an upgrade management module, and wherein the method includes:

[0007] Obtain upgrade instructions sent by the cloud through an external network transceiver;

[0008] Determining that the high-performance computing subsystem and the safety control subsystem are in an upgrade-ready state according to the upgrade instruction, and sending an upgrade-ready instruction to the cloud, so that the cloud sends an upgrade version data packet to the upgrade management module according to the upgrade-ready instruction;

[0009] Flashing the slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store the initial version data packet corresponding to the high-performance computing subsystem and the initial version data packet corresponding to the security control subsystem;

[0010] When it is detected that the slave partition of the high-performance computing subsystem is in a flashing completion state, an upgrade completion instruction is sent to the security control subsystem, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition, and upgrades the security control subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition.

[0011] Optionally, the first application layer includes a first state management module and a power management module, the security control subsystem includes a second application layer, the second application layer includes a second state management module, and determining that the high-performance computing subsystem and the security control subsystem are in an upgrade-ready state according to the upgrade instruction includes:

[0012] Sending a preparation upgrade request to the first state management module according to the upgrade instruction, so that the first state management module sets the corresponding running state of the high performance computing subsystem to the upgrade state according to the preparation upgrade request, and sending a state switching instruction to the second state management module;

[0013] And, sending a prepare upgrade request to the first power management module according to the upgrade instruction, so that the first power management module shuts down the target system component according to the prepare upgrade request, and sends an upgrade state switching instruction to the second power management module through the internal communication bus.

[0014] Optionally, before the step of sending an upgrade completion instruction to the safety control subsystem, the method includes:

[0015] When it is detected that the slave partition of the high-performance computing subsystem is in a flash completion state, a target startup instruction is sent to the first boot layer, and the target startup instruction is used to control the first boot layer to restart the first application layer in the high-performance computing subsystem according to the upgraded version data packet in the slave partition when the high-performance computing subsystem is in a restart state.

[0016] Optionally, after the step of sending an upgrade completion instruction to the security control subsystem when detecting that the slave partition of the high-performance computing subsystem is in a flashing completion state, the method includes:

[0017] Receive the security control subsystem version number information sent by the security control subsystem;

[0018] Determine whether the security control subsystem version number information matches the pre-acquired high performance computing subsystem version number information;

[0019] If so, the upgrade success information is returned to the security control subsystem.

[0020] Optionally, the security control subsystem includes a second application layer and a second boot layer. After the step of determining whether the version number information of the security control subsystem matches the pre-acquired version number information of the high-performance computing subsystem, the method includes:

[0021] If not, an upgrade failure message is returned to the security control subsystem, so that the second boot layer in the security control subsystem re-pulls the upgraded version data packet in the slave partition from the memory according to the upgrade failure message to flash the second application layer. If the number of flashing times reaches a preset number, an upgrade failure message is sent to the high-performance computing subsystem, and the second application layer is rolled back to the initial version corresponding to the initial version data packet corresponding to the security control subsystem in the main partition;

[0022] The upgrade failure information is sent to the first boot layer, so that the first boot layer switches the first application layer startup partition to the main partition.

[0023] Optionally, the upgraded version data packet includes at least one of high-performance computing subsystem upgrade data, safety control subsystem upgrade data and sensor upgrade data.

[0024] Optionally, the high-performance computing subsystem includes a first sensor upgrade module, a first data transceiver module and a diagnostic module, the safety control subsystem includes a second sensor upgrade module and a second data transceiver module, and the automatic driving controller includes a sensor. After the step of determining whether the version number information of the safety control subsystem matches the pre-acquired version number information of the high-performance computing subsystem, the method includes:

[0025] If yes, return the upgrade success information to the security control subsystem, so that the first sensor upgrade module and the second sensor upgrade module respectively read the sensor upgrade data in the upgrade version data packet of the slave partition in the memory, and send the sensor upgrade data to at least one sensor corresponding to the remote upgrade system through the first data transceiver module and the second data transceiver module;

[0026] When the safety control subsystem receives the upgrade completion instruction of the sensor, receiving the sensor upgrade success information sent by the second sensor upgrade module;

[0027] When it is detected that all the sensors are in the upgrade completion state, a sensor upgrade success instruction is sent to the diagnosis module.

[0028] In a second aspect, an embodiment of the present application provides a remote upgrade device, the device comprising:

[0029] An acquisition module, used to acquire the upgrade instruction sent by the cloud through an external network transceiver;

[0030] A determination module, configured to determine that the high performance computing subsystem and the safety control subsystem are in an upgrade ready state according to the upgrade instruction, and send an upgrade ready instruction to the cloud, so that the cloud sends an upgrade version data packet to the upgrade management module according to the upgrade ready instruction;

[0031] A flashing module, used to flash the slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store the initial version data packet corresponding to the high-performance computing subsystem and the initial version data packet corresponding to the security control subsystem;

[0032] An upgrade module is used to send an upgrade completion instruction to the security control subsystem when it is detected that the slave partition of the high-performance computing subsystem is in a flash completion state, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition, and upgrades the security control subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition.

[0033] Optionally, the first application layer includes a first state management module and a power management module, the safety control subsystem includes a second application layer, the second application layer includes a second state management module, and the determination module includes:

[0034] A first determining submodule is configured to send a prepare-upgrade request to the first state management module according to the upgrade instruction, so that the first state management module sets the operation state corresponding to the high-performance computing subsystem to the upgrade state according to the prepare-upgrade request, and sends a state switching instruction to the second state management module;

[0035] And, sending a prepare upgrade request to the first power management module according to the upgrade instruction, so that the first power management module shuts down the target system component according to the prepare upgrade request, and sends an upgrade state switching instruction to the second power management module through the internal communication bus.

[0036] Optionally, the device further comprises:

[0037] A sending module is used to send a target startup instruction to the first boot layer when it is detected that the slave partition of the high-performance computing subsystem is in a flash completion state. The target startup instruction is used to control the first boot layer to restart the first application layer in the high-performance computing subsystem according to the upgraded version data packet in the slave partition when the high-performance computing subsystem is in a restart state.

[0038] Optionally, the device further comprises:

[0039] A receiving module, used for receiving the security control subsystem version number information sent by the security control subsystem;

[0040] A judgment module, used to judge whether the version number information of the security control subsystem matches the pre-acquired version number information of the high-performance computing subsystem;

[0041] The first judgment result module is used to return upgrade success information to the safety control subsystem if yes.

[0042] Optionally, the security control subsystem includes a second application layer and a second boot layer, and the device further includes:

[0043] A second judgment result module is used for returning upgrade failure information to the security control subsystem if no, so that the second boot layer in the security control subsystem re-pulls the upgraded version data packet in the slave partition from the memory according to the upgrade failure information to flash the second application layer, and if the number of flashing times reaches a preset number, sends upgrade failure information to the high-performance computing subsystem, and rolls back the second application layer to the initial version corresponding to the initial version data packet corresponding to the security control subsystem in the main partition;

[0044] The startup module is used to send the upgrade failure information to the first boot layer so that the first boot layer switches the first application layer startup partition to the main partition.

[0045] Optionally, the high-performance computing subsystem includes a first sensor upgrade module, a first data transceiver module, and a diagnosis module, the safety control subsystem includes a second sensor upgrade module and a second data transceiver module, the automatic driving controller includes a sensor, and the device further includes:

[0046] A first sensor module, configured to return upgrade success information to the safety control subsystem if yes, so that the first sensor upgrade module and the second sensor upgrade module respectively read the sensor upgrade data in the upgrade version data packet of the slave partition in the memory, and send the sensor upgrade data to at least one sensor corresponding to the remote upgrade system through the first data transceiver module and the second data transceiver module;

[0047] A second sensor module, configured to receive sensor upgrade success information sent by the second sensor upgrade module when the safety control subsystem receives an upgrade completion instruction of the sensor;

[0048] The third sensor module is used to send a sensor upgrade success instruction to the diagnosis module when it is detected that all the sensors are in an upgrade completion state.

[0049] In a third aspect, an embodiment of the present application further provides an electronic device, comprising: a processor; and a memory for storing instructions executable by the processor, wherein the processor is configured to execute the instructions to implement any of the remote upgrade methods described above.

[0050] In a fourth aspect, an embodiment of the present application further provides a computer-readable storage medium, which, when instructions in the computer-readable storage medium are executed by a processor of an electronic device, enables the electronic device to execute any of the remote upgrade methods described above.

[0051] In a fifth aspect, an embodiment of the present application further provides a vehicle, comprising the remote upgrade device as described above.

[0052] In an embodiment of the present application, an upgrade management module is applied to a remote upgrade system, the remote upgrade system is mounted on an autonomous driving controller, the remote upgrade system includes a safety control subsystem and a high-performance computing subsystem, the autonomous driving controller includes an external network transceiver, an internal communication bus and a memory, the high-performance computing subsystem includes a first application layer and a first boot layer, the first application layer includes an upgrade management module, and the method includes: obtaining an upgrade instruction sent by the cloud through an external network transceiver; determining that the high-performance computing subsystem and the safety control subsystem are in an upgrade-ready state according to the upgrade instruction, and sending an upgrade-ready instruction to the cloud, so that the cloud sends an upgrade to the upgrade management module according to the upgrade-ready instruction. an upgraded version data packet; flashing a slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store an initial version data packet corresponding to the high-performance computing subsystem and an initial version data packet corresponding to the security control subsystem; when it is detected that the slave partition of the high-performance computing subsystem is in a flashing completion state, sending an upgrade completion instruction to the security control subsystem, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition, and upgrading the security control subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition. That is, the embodiment of the present application achieves a high degree of integration across different autonomous driving subsystems through a remote upgrade interaction method between subsystems in a remote upgrade system carried on an autonomous driving controller, greatly improving the accuracy and fault tolerance of remote upgrade operations, including a safety control subsystem and a high-performance computing subsystem. By designing a dual-partition memory layout for the memory in the high-performance computing subsystem, the remote upgrade system can write a new upgrade version data packet to a slave partition, i.e., a secondary partition, while keeping the primary partition unchanged during the upgrade process. When an upgrade failure occurs in a subsystem during the upgrade process, the remote upgrade system can automatically restore to a previous stable version based on the initial version data packet in the primary partition, thereby ensuring the robustness of the system and effectively avoiding the risk of system crash due to an unsuccessful upgrade.

[0053] The above description is only an overview of the technical solution of the present application. In order to more clearly understand the technical means of the present application, it can be implemented in accordance with the contents of the specification. In order to make the above and other purposes, features and advantages of the present application more obvious and easy to understand, the specific implementation methods of the present application are listed below. BRIEF DESCRIPTION OF THE DRAWINGS

[0054] Various other advantages and benefits will become apparent to those of ordinary skill in the art by reading the detailed description of the preferred embodiments below. The accompanying drawings are only for the purpose of illustrating the preferred embodiments and are not to be considered as limiting the present application. Also, the same reference symbols are used throughout the accompanying drawings to represent the same components. In the accompanying drawings:

[0055] Figure 1 It is a flowchart of the steps of a remote upgrade method provided in an embodiment of the present application;

[0056] Figure 2 is a flowchart of another remote upgrade method provided by an embodiment of the present application;

[0057] Figure 3 It is a logic block diagram of a remote upgrade device provided by the present application;

[0058] Figure 4 is a structural diagram of an electronic device provided in an embodiment of the present application;

[0059] Figure 5 is a schematic diagram of an automatic driving controller provided in an embodiment of the present application;

[0060] Figure 6 This is a schematic diagram of a remote upgrade system provided by an embodiment of the present application;

[0061] Figure 7 This is a schematic diagram of a remote upgrade process provided in an embodiment of the present application. DETAILED DESCRIPTION

[0062] The exemplary embodiments of the present application will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments set forth herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0063] It should be noted that in the embodiments of the present application, Figure 5 As shown, the autonomous driving controller in this application can be a distributed autonomous driving domain controller device including a processor, a sensor, a memory, an internal communication bus and an external network transceiver module, etc. The device composition is as follows Figure 5 shown.

[0064] The processor includes a plurality of different types of chips, such as a central processing unit (CPU), a graphics processing unit (GPU), a microprocessor (MPU), a microcontroller (MCU), a system-on-chip (SOC), etc., and requires at least one processor to provide high computing power support and one processor to provide security control functions;

[0065] The sensor refers to general sensing equipment, such as cameras, millimeter-wave radars, laser radars, etc.;

[0066] The memory includes two types: volatile memory and non-volatile memory. The volatile memory includes static random access memory, dynamic random access memory, synchronous dynamic random access memory, etc. The non-volatile memory includes read-only memory, flash memory NAND Flash and Nor Flash, etc.

[0067] This method will use the above-mentioned multiple memories; the internal communication bus includes a serial peripheral interface bus (SPI), an asynchronous serial receiver and transmitter (UART), an integrated circuit bus (I2C), etc.

[0068] Further, for distributed autonomous driving domain controller devices, refer to Figure 6 , the present application also provides a remote upgrade system for the device, which is mainly composed of a high-performance computing subsystem and a safety control subsystem.

[0069] The high-performance computing subsystem is divided into a first application layer and a first boot layer. The first application layer uses a dual partition method to store different versions of the system in a fixed address of the non-volatile memory NAND Flash. The first application layer is mainly responsible for the following modules in the system upgrade method: upgrade management module, diagnosis module, power management module 1, status management module 1, data transceiver module 1, sensor upgrade module 1; the first boot layer mainly realizes data surface flashing and the first application layer selection and entry boot function.

[0070] The safety control subsystem is also divided into the second application layer and the second boot layer. The second boot layer is mainly used to guide entry into the second application layer and update and upgrade the second application layer. The second application layer mainly implements functions such as self-driving system upgrade status switching, controlling the power on and off of the high-performance computing subsystem, and sensor upgrades. The main implementation modules are: power management module 2, status management module 2, data transceiver module 2, and sensor upgrade module 2.

[0071] It should be noted that, in order to facilitate understanding by technical personnel in this field, the above-mentioned power management module 1 is the first power management module, the state management module 1 is the first state management module, the data transceiver module 1 is the first data transceiver module, and the sensor upgrade module 1 is the first sensor upgrade module.

[0072] The power management module 2 is the second power management module, the state management module 2 is the second state management module, the data transceiver module 2 is the second data transceiver module, and the sensor upgrade module 2 is the second sensor upgrade module.

[0073] Figure 1 is a flowchart of a remote upgrade method provided by an embodiment of the present application, such as Figure 1 As shown, an upgrade management module is applied to a remote upgrade system, the remote upgrade system is mounted on an autonomous driving controller, the remote upgrade system includes a safety control subsystem and a high-performance computing subsystem, the autonomous driving controller includes an external network transceiver, an internal communication bus and a memory, the high-performance computing subsystem includes a first application layer and a first boot layer, the first application layer includes an upgrade management module, and the method may include:

[0074] Step 101, obtaining an upgrade instruction sent by the cloud through an external network transceiver;

[0075] It should be noted that, in the embodiment of the present application, in the upgrade preparation stage, the upgrade management module obtains the upgrade instructions transmitted from the cloud through an external network transceiver.

[0076] Step 102, determining that the high performance computing subsystem and the safety control subsystem are in an upgrade ready state according to the upgrade instruction, and sending an upgrade ready instruction to the cloud, so that the cloud sends an upgrade version data packet to the upgrade management module according to the upgrade ready instruction;

[0077] Further, the first application layer includes a first state management module and a power management module, the safety control subsystem includes a second application layer, the second application layer includes a second state management module, and determining that the high-performance computing subsystem and the safety control subsystem are in an upgrade-ready state according to the upgrade instruction includes:

[0078] Sending a preparation upgrade request to the first state management module according to the upgrade instruction, so that the first state management module sets the corresponding running state of the high performance computing subsystem to the upgrade state according to the preparation upgrade request, and sending a state switching instruction to the second state management module;

[0079] And, sending a prepare upgrade request to the first power management module according to the upgrade instruction, so that the first power management module shuts down the target system component according to the prepare upgrade request, and sends an upgrade state switching instruction to the second power management module through the internal communication bus.

[0080] It should be noted that in the embodiment of the present application, the upgrade management module sends a request to prepare for upgrade to the status management module 1 and the power management module 1 in the subsystem, and at the same time replies to the cloud that the upgrade is ready;

[0081] After receiving the preparation upgrade request, the state management module 1 switches the operation state of the high-performance computing subsystem to the upgrade state, and sends a state switching instruction to the state management module 2 of the security control subsystem;

[0082] After receiving the upgrade instruction sent by the upgrade management module, the power management module 1 shuts down system components irrelevant to the system upgrade function, and sends an upgrade state switching instruction to the power management module 2 of the safety control subsystem through the internal communication bus.

[0083] It should be noted that the security control subsystem in the present invention can be used to manage the power supply and power off process of the high-performance computing subsystem. The above process of determining that the high-performance computing subsystem and the security control subsystem are in a ready state for upgrade is actually a security control mechanism that manages the power supply and power off process of the high-performance computing subsystem. It can ensure that when performing remote software upgrades, the relevant hardware components can perform necessary startup and shutdown operations in a safe power environment, thereby reducing the risk of hardware failure that may occur during the upgrade process.

[0084] After the cloud receives the reply from the upgrade management module that the upgrade is ready, it sends an upgrade version data packet to the upgrade management module. The upgrade version data packet is the data required for the upgrade. The upgrade version data packet includes three parts, namely, high-performance computing subsystem upgrade data, safety control subsystem upgrade data and sensor upgrade data. Since each subsystem corresponds to a sensor part in an autonomous driving controller, in addition to upgrading the subsystem, the sensor also needs to be upgraded. The sensor upgrade part refers to the subsequent discussion and will not be repeated here.

[0085] Step 103: flashing the slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store the initial version data packet corresponding to the high-performance computing subsystem and the initial version data packet corresponding to the safety control subsystem;

[0086] It should be noted that in the embodiment of the present application, after the upgrade version data packet is obtained, it means that the preliminary upgrade preparation phase is over and the upgrade process phase begins, which is mainly performed through interaction between subsystems and the upgrade version data packet.

[0087] During the upgrade process, the upgrade management module receives the upgrade data from the cloud and saves it to a fixed memory address of the storage device, and then starts to flash another partition of the high-performance computing subsystem.

[0088] Reference Figure 7It can be seen that the storage area in the high-performance computing subsystem is divided into system A area and system B area, as well as the area where the upgraded version data packet is located. Therefore, it can be known that in this application, after receiving the upgraded version data packet, the upgraded data in the upgraded version data packet is first saved to a fixed memory address of the memory, and then the initial version data packet in the high-performance computing subsystem, that is, another partition outside the current version system is flashed according to the upgraded data in the upgraded version data packet. After the flashing is completed, when it is restarted again, the high-performance computing subsystem corresponds to the latest version. Therefore, the high-performance computing subsystem needs to be restarted in step 104, and before restarting, it also includes a step, refer to the subsequent discussion.

[0089] Specifically, the primary partition may store the initial version data package corresponding to the high performance computing subsystem and the initial version data package corresponding to the security control subsystem. Therefore, the secondary partition is the place where the flashing is required. For example, Figure 7 In the example, the currently booted system is area A, so the system data of area B is flashed.

[0090] Furthermore, before sending the upgrade completion instruction to the safety control subsystem in step 104, the following steps are included:

[0091] When it is detected that the slave partition of the high-performance computing subsystem is in a flash completion state, a target startup instruction is sent to the first boot layer, and the target startup instruction is used to control the first boot layer to restart the first application layer in the high-performance computing subsystem according to the upgraded version data packet in the slave partition when the high-performance computing subsystem is in a restart state.

[0092] It should be noted that in the embodiment of the present application, following the above step 203, after completing the data flashing in zone B, the upgrade management module sends an instruction to the boot layer of the system (high-performance computing subsystem) where the upgrade management module is located to pull up the application layer system from zone B next time, and at the same time sends an upgrade completion instruction to the security control subsystem through the data transceiver module 1.

[0093] Step 104, when it is detected that the slave partition of the high-performance computing subsystem is in a flashing completion state, sends an upgrade completion instruction to the security control subsystem, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition, and upgrades the security control subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition.

[0094] Therefore, following the above discussion, in step 104, after the security control subsystem receives the upgrade completion instruction sent by the high-performance computing subsystem, it restarts the high-performance computing subsystem through the power management module 2. It should be noted that at this time, the version corresponding to the first application layer in the high-performance computing subsystem after startup is the latest version corresponding to the upgraded version data packet.

[0095] Then the state management module 2 notifies the boot layer of the safety control subsystem to enter the upgrade mode and restart.

[0096] The upgrade and restart process of the security control subsystem includes: when the security control subsystem is restarted, the second boot layer reads that the security control subsystem is in an upgraded state, and starts to pull the upgrade data of the security control subsystem in the memory (the upgrade version data packet mentioned in the previous section includes three parts, so the corresponding upgrade data at this time is the security control subsystem upgrade data) to flash the initial data in the second application layer. This is the flash upgrade process.

[0097] In an embodiment of the present application, an upgrade management module is applied to a remote upgrade system, the remote upgrade system is mounted on an autonomous driving controller, the remote upgrade system includes a safety control subsystem and a high-performance computing subsystem, the autonomous driving controller includes an external network transceiver, an internal communication bus and a memory, the high-performance computing subsystem includes a first application layer and a first boot layer, the first application layer includes an upgrade management module, and the method includes: obtaining an upgrade instruction sent by the cloud through an external network transceiver; determining that the high-performance computing subsystem and the safety control subsystem are in an upgrade-ready state according to the upgrade instruction, and sending an upgrade-ready instruction to the cloud, so that the cloud sends an upgrade to the upgrade management module according to the upgrade-ready instruction. an upgraded version data packet; flashing a slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store an initial version data packet corresponding to the high-performance computing subsystem and an initial version data packet corresponding to the security control subsystem; when it is detected that the slave partition of the high-performance computing subsystem is in a flashing completion state, sending an upgrade completion instruction to the security control subsystem, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition, and upgrading the security control subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition. That is, the embodiment of the present application achieves a high degree of integration across different autonomous driving subsystems through a remote upgrade interaction method between subsystems in a remote upgrade system carried on an autonomous driving controller, greatly improving the accuracy and fault tolerance of remote upgrade operations, including a safety control subsystem and a high-performance computing subsystem. By designing a dual-partition memory layout for the memory in the high-performance computing subsystem, the remote upgrade system can write a new upgrade version data packet to a slave partition, i.e., a secondary partition, while keeping the primary partition unchanged during the upgrade process. When an upgrade failure occurs in a subsystem during the upgrade process, the remote upgrade system can automatically restore to a previous stable version based on the initial version data packet in the primary partition, thereby ensuring the robustness of the system and effectively avoiding the risk of system crash due to an unsuccessful upgrade.

[0098] Figure 2 is a flowchart of a remote upgrade method provided by an embodiment of the present application, such as Figure 2 As shown, the method includes:

[0099] Step 201, obtaining an upgrade instruction sent by the cloud through an external network transceiver;

[0100] Step 202, determining that the high performance computing subsystem and the safety control subsystem are in an upgrade ready state according to the upgrade instruction, and sending an upgrade ready instruction to the cloud, so that the cloud sends an upgrade version data packet to the upgrade management module according to the upgrade ready instruction;

[0101] Step 203: flashing the slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store the initial version data packet corresponding to the high-performance computing subsystem and the initial version data packet corresponding to the safety control subsystem;

[0102] Step 204, when it is detected that the slave partition of the high-performance computing subsystem is in a flashing completion state, sends an upgrade completion instruction to the security control subsystem, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition, and upgrades the security control subsystem according to the upgrade completion instruction and the upgraded version data packet in the slave partition.

[0103] Step 205, receiving the security control subsystem version number information sent by the security control subsystem;

[0104] It should be noted that, as discussed in the previous section, the flash upgrade and restart process of the two subsystems, therefore, for the security control subsystem, after the flash is successful, the state of the second boot layer is reset to normal startup, and the successfully upgraded version number is transmitted to the high-performance computing subsystem through the internal communication bus.

[0105] For the high-performance computing subsystem, after completing the flashing of the partition data, the upgrade management module sends an instruction to the first boot layer of the high-performance computing subsystem to pull up the first application layer from the partition next time. Therefore, after the high-performance computing subsystem is restarted, it automatically switches to the upgraded version.

[0106] Step 206, determining whether the security control subsystem version number information matches the pre-acquired high performance computing subsystem version number information;

[0107] Therefore, the upgrade management module of the high performance computing subsystem compares the version number information transmitted by the security control subsystem with the version number information of the current system.

[0108] Step 207: If yes, then return the upgrade success information to the security control subsystem.

[0109] If the match is successful, it is considered that the two systems have been upgraded successfully and the upgrade success information is returned to the security control subsystem. After receiving the upgrade success information, the security control subsystem directly enters the second application layer through the second boot layer.

[0110] Further, the security control subsystem includes a second application layer and a second boot layer, and after step 206, further includes: if not, returning upgrade failure information to the security control subsystem, so that the second boot layer in the security control subsystem re-pulls the upgraded version data packet in the slave partition from the memory according to the upgrade failure information to flash the second application layer, and if the number of flashing reaches a preset number, sending upgrade failure information to the high-performance computing subsystem, and rolling back the second application layer to the initial version corresponding to the initial version data packet corresponding to the security control subsystem in the main partition;

[0111] The upgrade failure information is sent to the first boot layer, so that the first boot layer switches the first application layer startup partition to the main partition.

[0112] It should be noted that if during the upgrade of the security control subsystem, the versions of the two subsystems are inconsistent after the upgrade, the high-performance computing subsystem will send an upgrade failure message to the security control subsystem.

[0113] Specifically, if the security control subsystem receives information that the upgrade has failed, it will re-perform the flashing step. If the flashing upgrade operation still fails three times, it will return an upgrade failure message to the high-performance computing subsystem and roll back the application layer system to the previous version. After the upgrade management module in the first application layer of the high-performance computing subsystem receives the upgrade failure message from the security control subsystem, it will inform the high-performance computing subsystem boot layer to switch the application layer startup partition to the main partition again.

[0114] Further, the high performance computing subsystem includes a first sensor upgrade module, a first data transceiver module and a diagnostic module, the safety control subsystem includes a second sensor upgrade module and a second data transceiver module, and the automatic driving controller includes a sensor. After step 206, the method includes:

[0115] If yes, return the upgrade success information to the security control subsystem, so that the first sensor upgrade module and the second sensor upgrade module respectively read the sensor upgrade data in the upgrade version data packet of the slave partition in the memory, and send the sensor upgrade data to at least one sensor corresponding to the remote upgrade system through the first data transceiver module and the second data transceiver module;

[0116] When the safety control subsystem receives the upgrade completion instruction of the sensor, receiving the sensor upgrade success information sent by the second sensor upgrade module;

[0117] When it is detected that all the sensors are in the upgrade completion state, a sensor upgrade success instruction is sent to the diagnosis module.

[0118] It should be noted that, in the embodiment of the present application, the upgraded version data package includes at least one of the high-performance computing subsystem upgrade data, the safety control subsystem upgrade data and the sensor upgrade data. After the subsystem upgrade is completed, the sensor in the controller where the subsystem is located needs to be upgraded. This process involves the sensor upgrade module of each subsystem. Specifically, the upgrade steps are as follows:

[0119] Sensor upgrade module 1 and sensor upgrade module 2 read the sensor upgrade package data in the memory respectively, send upgrade instructions to the sensor modules connected to each subsystem through the internal communication bus through data transceiver modules 1 and 2, and start transmitting the upgrade data packet after waiting for the sensor module to reply that it is ready.

[0120] After the safety control subsystem receives the upgrade completion instruction of the corresponding sensor, the sensor upgrade module 2 transmits the upgrade success information to the upgrade management module of the high-performance computing subsystem. After confirming that all upgrades are completed, the upgrade management module transmits the upgrade success instruction to the diagnosis module.

[0121] The embodiment of the present application achieves a high degree of integration across different autonomous driving subsystems through a remote upgrade interaction method between subsystems in a remote upgrade system carried on an autonomous driving controller, greatly improving the accuracy and fault tolerance of remote upgrade operations, including a safety control subsystem and a high-performance computing subsystem. By designing a dual-partition memory layout for the memory in the high-performance computing subsystem, the remote upgrade system can write a new upgrade version data packet to a slave partition, i.e., a secondary partition, while keeping the primary partition unchanged during the upgrade process. When an upgrade failure occurs in a subsystem during the upgrade process, the remote upgrade system can automatically restore to a previous stable version based on the initial version data packet in the primary partition, thereby ensuring the robustness of the system and effectively avoiding the risk of system crash due to an unsuccessful upgrade.

[0122] In addition, refer to Figure 7 , Figure 7It is a schematic diagram of the remote upgrade process. It should be noted that in the embodiment of the present application, it is preferred that the storage area corresponding to the high-performance computing subsystem is partitioned due to the computing power characteristics of the high-performance computing subsystem. In practice, the subsystem where the partition is located is not limited, and the partition can be performed according to the characteristics of the subsystem chip. The high-performance computing subsystem in the present application may also be a subsystem corresponding to other autonomous driving controllers.

[0123] Corresponding to the method provided in the above-mentioned remote upgrade method embodiment of the present application, see Figure 3 , the present application also provides a remote upgrade device logic block diagram, in this embodiment, the device 300 includes:

[0124] The acquisition module 301 is used to acquire the upgrade instruction sent by the cloud through an external network transceiver;

[0125] The determination module 302 is used to determine that the high-performance computing subsystem and the safety control subsystem are in an upgrade-ready state according to the upgrade instruction, and send an upgrade-ready instruction to the cloud, so that the cloud sends an upgrade version data packet to the upgrade management module according to the upgrade-ready instruction;

[0126] A flashing module 303 is used to flash the slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store the initial version data packet corresponding to the high-performance computing subsystem and the initial version data packet corresponding to the security control subsystem;

[0127] The upgrade module 304 is used to send an upgrade completion instruction to the security control subsystem when it is detected that the slave partition of the high-performance computing subsystem is in a flash completion state, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition, and upgrades the security control subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition.

[0128] Optionally, the first application layer includes a first state management module and a power management module, the safety control subsystem includes a second application layer, the second application layer includes a second state management module, and the determination module includes:

[0129] A first determining submodule is configured to send a prepare-upgrade request to the first state management module according to the upgrade instruction, so that the first state management module sets the operation state corresponding to the high-performance computing subsystem to the upgrade state according to the prepare-upgrade request, and sends a state switching instruction to the second state management module;

[0130] And, sending a prepare upgrade request to the first power management module according to the upgrade instruction, so that the first power management module shuts down the target system component according to the prepare upgrade request, and sends an upgrade state switching instruction to the second power management module through the internal communication bus.

[0131] Optionally, the device further comprises:

[0132] A sending module is used to send a target startup instruction to the first boot layer when it is detected that the slave partition of the high-performance computing subsystem is in a flash completion state. The target startup instruction is used to control the first boot layer to restart the first application layer in the high-performance computing subsystem according to the upgraded version data packet in the slave partition when the high-performance computing subsystem is in a restart state.

[0133] Optionally, the device further comprises:

[0134] A receiving module, used for receiving the security control subsystem version number information sent by the security control subsystem;

[0135] A judgment module, used to judge whether the version number information of the security control subsystem matches the pre-acquired version number information of the high-performance computing subsystem;

[0136] The first judgment result module is used to return upgrade success information to the safety control subsystem if yes.

[0137] Optionally, the security control subsystem includes a second application layer and a second boot layer, and the device further includes:

[0138] A second judgment result module is used for returning upgrade failure information to the security control subsystem if no, so that the second boot layer in the security control subsystem re-pulls the upgraded version data packet in the slave partition from the memory according to the upgrade failure information to flash the second application layer, and if the number of flashing times reaches a preset number, sends upgrade failure information to the high-performance computing subsystem, and rolls back the second application layer to the initial version corresponding to the initial version data packet corresponding to the security control subsystem in the main partition;

[0139] The startup module is used to send the upgrade failure information to the first boot layer so that the first boot layer switches the first application layer startup partition to the main partition.

[0140] Optionally, the high-performance computing subsystem includes a first sensor upgrade module, a first data transceiver module, and a diagnosis module, the safety control subsystem includes a second sensor upgrade module and a second data transceiver module, the automatic driving controller includes a sensor, and the device further includes:

[0141] A first sensor module, configured to return upgrade success information to the safety control subsystem if yes, so that the first sensor upgrade module and the second sensor upgrade module respectively read the sensor upgrade data in the upgrade version data packet of the slave partition in the memory, and send the sensor upgrade data to at least one sensor corresponding to the remote upgrade system through the first data transceiver module and the second data transceiver module;

[0142] A second sensor module, configured to receive sensor upgrade success information sent by the second sensor upgrade module when the safety control subsystem receives an upgrade completion instruction of the sensor;

[0143] The third sensor module is used to send a sensor upgrade success instruction to the diagnosis module when it is detected that all the sensors are in an upgrade completion state.

[0144] In summary, the embodiment of the present application provides a remote upgrade device. The embodiment of the present application achieves a high degree of integration across different autonomous driving subsystems through a remote upgrade interaction method between subsystems in a remote upgrade system carried on an autonomous driving controller, greatly improving the accuracy and fault tolerance of remote upgrade operations, including a safety control subsystem and a high-performance computing subsystem. By designing a dual-partition memory layout for the memory in the high-performance computing subsystem, the remote upgrade system can write a new upgrade version data packet to a slave partition, i.e., a secondary partition, while keeping the primary partition unchanged during the upgrade process. When an upgrade failure occurs in a subsystem during the upgrade process, the remote upgrade system can automatically restore to a previous stable version based on the initial version data packet in the primary partition, thereby ensuring the robustness of the system and effectively avoiding the risk of system crash due to unsuccessful upgrade.

[0145] Figure 4 This is a structural diagram of an electronic device M00 provided in an embodiment of the present application. In the figure, the electronic device M00 includes a processor M01 and a memory M02. The memory M02 stores programs or instructions that can be run on the processor M01. When the program or instruction is executed by the processor M01, the various steps of the above-mentioned remote upgrade method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0146] In an embodiment of the present application, the memory M02 can be used to store software programs and various data. The memory M02 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory M02 may include a volatile memory or a non-volatile memory, or the memory x09 may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDRSDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous link dynamic random access memory (SLDRAM) and a direct memory bus random access memory (DRRAM). The memory M02 in the embodiment of the present application includes but is not limited to these and any other suitable types of memories.

[0147] The processor M01 may include one or more processing units; optionally, the processor M01 integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor M01.

[0148] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, each process of the above-mentioned remote upgrade method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0149] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0150] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned remote upgrade method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0151] It should be understood that the chip involved in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0152] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned remote upgrade method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0153] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0154] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the relevant technology, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0155] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A remote upgrade method, characterized in that: An upgrade management module applied to a remote upgrade system, the remote upgrade system being mounted on an autonomous driving controller, the remote upgrade system comprising a safety control subsystem and a high-performance computing subsystem, the autonomous driving controller comprising an external network transceiver, an internal communication bus and a memory, the high-performance computing subsystem comprising a first application layer and a first boot layer, the first application layer comprising an upgrade management module, the method comprising: Obtain upgrade instructions sent by the cloud through an external network transceiver; Determining that the high-performance computing subsystem and the safety control subsystem are in an upgrade-ready state according to the upgrade instruction, and sending an upgrade-ready instruction to the cloud, so that the cloud sends an upgrade version data packet to the upgrade management module according to the upgrade-ready instruction; Flashing the slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, the master partition is used to store the initial version data packet corresponding to the high-performance computing subsystem and the initial version data packet corresponding to the safety control subsystem, the slave partition is the partition to be flashed, and the upgraded version data packet includes the upgrade data of the high-performance computing subsystem, the upgrade data of the safety control subsystem and the sensor upgrade data; When detecting that the slave partition of the high-performance computing subsystem is in a flashing completion state, sending an upgrade completion instruction to the security control subsystem, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition, and upgrades the security control subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition; Receive the security control subsystem version number information sent by the security control subsystem; Determine whether the security control subsystem version number information matches the pre-acquired high performance computing subsystem version number information; If so, the upgrade success information is returned to the security control subsystem.

2. The method according to claim 1, characterized in that The first application layer includes a first state management module and a first power management module, the security control subsystem includes a second application layer, the second application layer includes a second state management module and a second power management module, and determining that the high-performance computing subsystem and the security control subsystem are in an upgrade-ready state according to the upgrade instruction includes: Sending a preparation upgrade request to the first state management module according to the upgrade instruction, so that the first state management module sets the corresponding running state of the high performance computing subsystem to the upgrade state according to the preparation upgrade request, and sending a state switching instruction to the second state management module; And, sending a prepare upgrade request to the first power management module according to the upgrade instruction, so that the first power management module shuts down the target system component according to the prepare upgrade request, and sends an upgrade state switching instruction to the second power management module through the internal communication bus.

3. The method according to claim 1, characterized in that: Before the step of sending an upgrade completion instruction to the safety control subsystem, the method includes: When it is detected that the slave partition of the high-performance computing subsystem is in a flash completion state, a target startup instruction is sent to the first boot layer, and the target startup instruction is used to control the first boot layer to restart the first application layer in the high-performance computing subsystem according to the upgraded version data packet in the slave partition when the high-performance computing subsystem is in a restart state.

4. The method according to claim 1, characterized in that: The security control subsystem includes a second application layer and a second boot layer. After the step of determining whether the version number information of the security control subsystem matches the pre-acquired version number information of the high-performance computing subsystem, the method includes: If not, an upgrade failure message is returned to the security control subsystem, so that the second boot layer in the security control subsystem re-pulls the upgraded version data packet in the slave partition from the memory according to the upgrade failure message to flash the second application layer. If the number of flashing times reaches a preset number, an upgrade failure message is sent to the high-performance computing subsystem, and the second application layer is rolled back to the initial version corresponding to the initial version data packet corresponding to the security control subsystem in the main partition; The upgrade failure information is sent to the first boot layer, so that the first boot layer switches the first application layer startup partition to the main partition.

5. The method according to claim 1, characterized in that The upgraded version data includes at least one of high performance computing subsystem upgrade data, safety control subsystem upgrade data and sensor upgrade data.

6. The method according to claim 5, characterized in that The high-performance computing subsystem includes a first sensor upgrade module, a first data transceiver module, and a diagnostic module, the safety control subsystem includes a second sensor upgrade module and a second data transceiver module, and the automatic driving controller includes a sensor. After the step of determining whether the version number information of the safety control subsystem matches the pre-acquired version number information of the high-performance computing subsystem, the method includes: If yes, return the upgrade success information to the security control subsystem, so that the first sensor upgrade module and the second sensor upgrade module respectively read the sensor upgrade data in the upgrade version data packet of the slave partition in the memory, and send the sensor upgrade data to at least one sensor corresponding to the remote upgrade system through the first data transceiver module and the second data transceiver module; When the safety control subsystem receives the upgrade completion instruction of the sensor, receiving the sensor upgrade success information sent by the second sensor upgrade module; When it is detected that all the sensors are in the upgrade completion state, a sensor upgrade success instruction is sent to the diagnosis module.

7. A remote upgrade device, characterized in that: An upgrade management module applied to a remote upgrade system, wherein the remote upgrade system is mounted on an autonomous driving controller, the remote upgrade system includes a safety control subsystem and a high-performance computing subsystem, the autonomous driving controller includes an external network transceiver, an internal communication bus and a memory, the high-performance computing subsystem includes a first application layer and a first boot layer, the first application layer includes an upgrade management module, and the device includes: An acquisition module, used to acquire the upgrade instruction sent by the cloud through an external network transceiver; A determination module, configured to determine that the high performance computing subsystem and the safety control subsystem are in an upgrade ready state according to the upgrade instruction, and send an upgrade ready instruction to the cloud, so that the cloud sends an upgrade version data packet to the upgrade management module according to the upgrade ready instruction; A flashing module, used to flash the slave partition of the high-performance computing subsystem according to the upgraded version data packet, wherein the memory corresponding to the high-performance computing subsystem includes a master partition and a slave partition, and the master partition is used to store the initial version data packet corresponding to the high-performance computing subsystem and the initial version data packet corresponding to the security control subsystem; An upgrade module, configured to, when detecting that the slave partition of the high-performance computing subsystem is in a flashing completion state, send an upgrade completion instruction to the security control subsystem, so that the security control subsystem restarts the high-performance computing subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition, and upgrades the security control subsystem according to the upgrade completion instruction and the upgrade version data packet in the slave partition; A receiving module, used for receiving the security control subsystem version number information sent by the security control subsystem; A judgment module, used to judge whether the version number information of the security control subsystem matches the pre-acquired version number information of the high-performance computing subsystem; The first judgment result module is used to return upgrade success information to the safety control subsystem if yes.

8. An electronic device, characterized in that: include: processor; a memory for storing instructions executable by the processor; The processor is configured to execute the instructions to implement the remote upgrade method according to any one of claims 1 to 6.

9. A storage medium, characterized in that: When the instructions in the storage medium are executed by a processor of an electronic device, the electronic device is enabled to execute the remote upgrade method according to any one of claims 1 to 6.

Images