An integrated burning system for vehicle-mounted equipment

Abstract

The invention discloses an integrated burning system for vehicle-mounted equipment, and relates to the technical field of integrated burning of vehicle-mounted equipment; the system comprises an equipment information acquisition module, a burning production module, a burning parameter configuration module, a burning selection module and a control display module; the equipment information acquisition module is used for acquiring vehicle-mounted equipment information; the burning production module acquires the hardware model and equipment software version number of the vehicle-mounted equipment as well as the production date of the hardware and the applicable equipment software version update record through aging software; the burning parameter configuration module configures burning script parameters; the burning selection module checks the burning file content collected by the host computer; the control display module selects the burning program and the PCBA board model selection and displays; the invention performs high-level protection, combines the host computer control program and the relay, and avoids the risk of large current breakdown of the mainboard caused by the voltage-carrying pin; the system is adaptable to various chip types and has wide applicability.

Description

Technical Field

[0001] The invention relates to the technical field of integrated burning of vehicle-mounted equipment, in particular to an integrated burning system of vehicle-mounted equipment. Background Art

[0002] The existing on-board equipment burning scheme is generally: to burn the SOC or MCU of the on-board equipment through an offline downloader, an intermediate relay, and a USB harness. In this process, the version control of the burning is difficult, the success rate of the burning is low, the operation efficiency is low, and the upgrade space is small; there is a risk of burning errors in version control; the offline burning mode is slow; the relay is not set to control the high level on the test potential, and it is impossible to achieve the protection of connecting the pin first and then powering on; there are error handling issues, because it is still the encoder burning method, and the burning error information cannot be captured; the encoder burning method introduces the encoder as an intermediate hardware, which has its own circuits and underlying firmware, so there are voltage and timing problems in different projects, and the development cost is high. Summary of the invention

[0003] The purpose of the present invention is to solve the risk of burning errors in version control; the offline burning mode is slow; the relay is not set to control the high level of the test potential, and the protection of connecting the pin first and then powering on cannot be achieved; there are error handling issues, because it is still an encoder burning method, and the information of the burning error cannot be captured; the encoder burning method introduces an intermediate hardware, the encoder, which has its own circuits and underlying firmware, so there are voltage and timing problems in different projects, and the development cost is high, and an integrated burning system for vehicle-mounted equipment is proposed.

[0004] The object of the present invention can be achieved through the following technical solutions: An integrated burning system for vehicle-mounted equipment, including a burning parameter matching module and a burning selection module,

[0005] The programming parameter configuration module includes a power supply, a production network unit, a Windows industrial computer, a router, a Linux industrial computer, an RS485 normally open relay and a Jtag / DAP programmer;

[0006] The power supply is used to supply power to the entire burning system; the production network unit provides a network environment for the entire burning system to capture the latest firmware; the Windows industrial computer is connected to the MCU of the Jtag / DAP burning product via USB;

[0007] The router provides a network environment for Windows and Linux industrial computers, and allows the two to transmit data through the HTTP protocol in the same network segment; the Linux industrial computer connects the USB harness to the corresponding test point on the motherboard, and burns a specific firmware version to the SOC through the Ambarella burning program; the RS485 normally open relay controls the disconnection and closing of USB-5V-VCC, Jlink-3, 3V-VCC and the positive power supply of the product; the Jtag / DAP burner is an MCU burning tool;

[0008] The burning parameter configuration module is also used to configure the burning script parameters, specifically: when receiving the replacement command, determine the target device to be burned, assign the target chip model, manufacturer information, connection mode and supported communication protocol of the target device, which are respectively the core value, the connection value and the communication value and the network condition value, and substitute them into the computer model flow chart to output the optimal parameter value; obtain the existing optimal parameter value according to the existing configuration conditions; import the burning script program with the existing optimal parameter value and the latest firmware version to generate a burning file;

[0009] The burning and selecting module checks the contents of the burning files collected by the host computer to detect whether the code meets the specifications, code style, potential errors and security vulnerabilities.

[0010] As a preferred embodiment of the present invention, the specific steps of checking the contents of the burning file are as follows:

[0011] If the program code has specifications, code style, potential errors and security vulnerabilities, proceed to S01; otherwise, proceed to S02;

[0012] S01: Send the program code to the corresponding audit member, who will review, check and modify the code, and provide feedback on the modified program code, and then execute S02;

[0013] S02: Perform unit testing on the program code, first set up the unit testing environment, and record the execution results of each test case after the test; compare them to see if they meet the expected results; if they do not meet the expected results, proceed to S04; otherwise, proceed to S03;

[0014] S03: until all test cases pass, the test execution results, pass rate and failure reasons are counted; the test failure reasons are sent to the audit members, who repair the program code and receive the repaired program code, and then re-execute the unit test on the program code;

[0015] S04: Conduct integration testing, which includes system function, performance and usability testing; test results include qualified function, unqualified function, qualified performance, unqualified performance, qualified usability and unqualified usability; when all test results are qualified, proceed to S05; otherwise, send it to the audit members, who will analyze the specific reasons and make modifications to the program code, and provide feedback on the modified program code, and then repeat the test until all tests pass, and then count the test execution results, pass rate and failure reasons;

[0016] S05: Perform system test and performance test on program code; determine the performance index to be evaluated, and then determine the performance index that needs to be paid attention to after the nature and requirements of the burning system; formulate a test plan and set up a test environment; compare the test performance index with the preset performance index. If the test performance index is less than the preset performance index, collect test data and analyze performance data and send them to the audit member, who will analyze and modify the program code, and feedback the modified program code, and then repeat the test; otherwise, scan and detect whether handshake is performed through electrical signals or communication protocols, and judge whether it is online burning; when the burning mode is online burning, proceed to S06; otherwise, send it to the audit member, who will analyze and modify the program code, and feedback the modified program code, and then repeat the test until it is judged to be online burning;

[0017] S06: Scan the communication protocol to see if there is a specific communication protocol. If there is a specific communication protocol, check the data format, data size and data version of the online burning, and match them with the preset format template of the data verification device. When the online burning data format completely belongs to the preset format, the data verification device scans the data version number and compares it with the latest data version number in the database. If the data version number is the latest data version number, the inspection passes and the burning file package is sent to the control display module; otherwise, the audit member modifies the online burning file format and feeds back the modified online burning file format, and then rescans the data version until the inspection passes.

[0018] As a preferred embodiment of the present invention, it also includes a device information acquisition module, a burning and recording production module and a control and display module;

[0019] The device information acquisition module is used to acquire the information of the vehicle-mounted device;

[0020] The burning script generation module generates a burning script and a program to make a burning script by starting the APS software;

[0021] The control display module is used to receive the burning file package to select the burning program and PCBA board model; match them, and if the match is successful, display the burning progress and status on the display screen.

[0022] As a preferred embodiment of the present invention, the burning parameter configuration module is also used to store the burning file according to the setting of the FTP server path, find the shared path or root directory setting option in the setting of the FTP server software, and set the FTP server path to the directory for storing the firmware file; the final operation of supporting secure boot in the FTP server software is specifically:

[0023] Select a key generation tool to generate a key pair, first embed the public key into the executable file of the boot loader; make modifications in the source code of the boot loader and add the data of the public key to it; then use the private key to digitally sign the firmware to be signed; use the preset tools or commands to do this; implement the function of verifying the digital signature in the boot loader; verify the firmware, add code in the boot loader to verify the validity of the signature, and only start the firmware if the verification passes; after completing the modification of the boot loader, fully test the system to ensure that the boot loader correctly verifies the signature and the system starts normally when the signature is valid; finally, set the secure boot system to update regularly;

[0024] The burning parameter configuration module is also used to open the installation directory of the Jlink software installed on the computer and to open the installation directory of the SOC installation package on the computer.

[0025] As a preferred embodiment of the present invention, the burning parameter configuration module is also used to set user permissions, divide them according to different user roles and operation requirements, and set accounts and passwords. Each user role corresponds to an account and password, and different user role accounts correspond to different operation permissions.

[0026] As a preferred embodiment of the present invention, the specific process of the burning script generation module generating a burning script by starting the APS software and the program making the burning script is as follows:

[0027] Start APS software: Log in as a user, start the aging software and enter the main interface, obtain the hardware model and device software version number of the vehicle-mounted equipment in the main interface, as well as the production date of the hardware and the applicable device software version update record, and collect the production date and model of each device;

[0028] The production date is used as the corresponding value of the equipment, and the date value range is preset for statistical comparison to obtain the maximum value and the minimum value of the equipment. The absolute difference between the calculated values ​​is named as the set period difference value one; if the set period difference value one belongs to the preset date value range, the software version number of the control unit and the processor will be counted, and the equipment software version update record and historical version will be counted, and the update date of the existing version will be assigned as the update value corresponding to the update date; if the date difference value one does not belong to the preset date value range, the equipment will be replaced and a spare replacement command will be generated; the burning production module will mark the type of the equipment in the driving assistance system and then assign it to obtain the spare value; then all the spare values ​​are added to obtain the spare sum value; it is weightedly calculated with the corresponding preset equipment unit distinguishing factor to obtain the auxiliary driving value, and the auxiliary driving value is compared with the preset auxiliary driving value range. When the auxiliary driving value is within the preset auxiliary driving value range, the script generator generates a burning script and a program to make a burning script according to the corresponding equipment; otherwise, no script is made.

[0029] As a preferred embodiment of the present invention, the display module is used to receive the burning file package to select the burning program and the PCBA board model, and the specific process is:

[0030] Get the supported burning voltage of the product and the corresponding PCBA board model; match the PCBA board model with the PCBA board model supported by the burning file package. If the burning file package supports the PCBA board model, then select the burning voltage according to the supported burning voltage; select the applicable voltage and PCBA board model to apply to the burning file package and then connect; otherwise, select other burning file packages; then control the disconnection and closing of USB-5V-VCC, Jlink-3, 3V-VCC, and the positive power supply of the product by the relay; control the display module to control the relay to open the corresponding switch, burn the MCU or SOC program, and display the burning progress and status on the display screen.

[0031] The beneficial effects of the present invention are:

[0032] The present invention realizes the online burning function through the burning parameter configuration module; all burning packages capture the latest version of firmware through the intranet, compare whether the firmware version number is the latest, and start burning after confirming that the local firmware version is the latest; the firmware is dynamically updated on the server, and the version control is accurate; in addition, the present invention can also be integrated with the FTC functional test to achieve more comprehensive functional testing; the final operation supports safe BOOT to ensure the safety and reliability of the system.

[0033] The present invention controls the display module to perform high-level protection, combines the host computer control program and the relay, and fundamentally avoids the risk of large current breakdown of the mainboard caused by the voltage-carrying needle; the system can be adapted to a variety of chip types and has wide applicability.

[0034] The present invention realizes comprehensive inspection and analysis of the burning file through the burning selection module, including multiple links such as static inspection of the code, unit test, integration test and system test; through this process, the quality and stability of the burned program code are ensured, and the reliability and security of the system are improved; at the same time, through the scanning of the communication protocol and the inspection of the online burning, the integrity and correctness of the burning data are guaranteed; the implementation of this process helps to improve the efficiency and success rate of the burning process and reduce the risk of system problems. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] In order to facilitate understanding by those skilled in the art, the present invention is further described below with reference to the accompanying drawings.

[0036] Figure 1 It is a product structure block diagram of the present invention;

[0037] Figure 2 It is a block diagram of the product structure of the present invention;

[0038] Figure 3 It is a principle block diagram of the present invention;

[0039] Figure 4 is a flow chart of the present invention;

[0040] Figure 5 It is a preferred reference diagram of the present invention. DETAILED DESCRIPTION

[0041] The technical solution of the present invention will be clearly and completely described below in conjunction with the embodiments. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention. Example 1

[0042] See also Figure 1 - Figure 2 As shown, an integrated burning system for vehicle-mounted equipment includes a device information acquisition module, a burning production module, a burning parameter configuration module, a burning selection module and a control display module;

[0043] The programming parameter module includes 12V-DC power supply, production network unit, Windows industrial computer, router, Linux industrial computer, RS485 normally open relay and Jtag / DAP programmer; among them:

[0044] 1. 12V-DC power supply: to power the entire burning system;

[0045] 2. 0-36V adjustable DC regulated power supply: to power the product;

[0046] 3. Production network unit: provides a network environment for the entire burning system to capture the latest firmware;

[0047] 4. Windows industrial computer: connect Jtag / DAP to program the MCU of the product via USB;

[0048] 5. Router: Provides a network environment for Windows industrial computers and Linux industrial computers, and allows the two to transmit data through the HTTP protocol in the same network segment;

[0049] 6. Linux industrial computer: Connect the USB harness to the corresponding test point on the motherboard, and burn a specific firmware version to the SOC through the Ambarella burning program;

[0050] 7. RS485 normally open relay: controls the disconnection and closing of USB-5V-VCC, Jlink-3.3V-VCC, and the positive pole of the product power supply;

[0051] 8. Jtag / DAP burner: a common MCU burning tool, Jtag / DAP is connected to the computer USB;

[0052] See also Figure 2 As shown in the figure, normally open and normally closed relays are usually equipped with Xport and COM port, which can be used to detect level changes and forward the changes through RS485 protocol or other protocols: this can realize the monitoring of some inputs of tooling equipment: for example, if the operator presses the start switch, the program can monitor this action and automatically start burning the program;

[0053] The device information acquisition module is used to obtain the vehicle-mounted device information; including but not limited to the infotainment system, vehicle-mounted navigation system, driving assistance system, vehicle-mounted communication system, vehicle-mounted sensors and vehicle-mounted power supply system; among which, the infotainment system includes the vehicle-mounted audio system, vehicle-mounted video player, touch screen display, etc.; the vehicle-mounted navigation system includes the global positioning system (GPS) receiver, map database, navigation software, etc.; the driving assistance system includes reversing radar, reversing camera, blind spot monitoring system, automatic driving assistance system, etc.; the vehicle-mounted communication system includes Bluetooth connection, vehicle-mounted telephone system, vehicle-mounted wireless network (Wi-Fi), vehicle-mounted communication module; the vehicle-mounted sensors include acceleration sensors, gyroscopes, environmental sensors, etc.; the vehicle-mounted power supply system includes vehicle-mounted batteries, generators, charging systems, etc.;

[0054] The burning production module starts the APS software: logs in the user and starts the aging software and enters the main interface; the device information acquisition module obtains the hardware model and device software version number of the vehicle-mounted device in the main interface, as well as the production date of the hardware and the applicable device software version update record; for example: scans the driving assistance system in the vehicle-mounted device, the driving assistance system includes hardware such as cameras, radar sensors, laser radars, ultrasonic sensors, GPS receivers, control units and processors, etc.; collects the production date and model of each device;

[0055] The production date is used as the corresponding value of the equipment, and the date value range is preset. Statistical comparison is performed to obtain the maximum value and the minimum value of the equipment, and the absolute difference between the values ​​is calculated and marked as the set period difference one; if the set period difference one belongs to the preset date value range, the control unit and the processor will have built-in software version numbers, and the equipment software version update records and historical versions will be counted, and the existing version update date will be assigned to the update date corresponding to the update value; if the date difference one does not belong to the preset date value range, the equipment will be replaced and a replacement command will be generated; the burning production module will mark the type of equipment in the driving assistance system and then assign values, corresponding to backup value one, backup value two, backup value three, backup value four, and backup value five respectively. , backup value six and backup value seven, etc.; backup value one, backup value two, backup value three, backup value four, backup value five, backup value six and backup value seven are collectively referred to as backup values; then add up all the backup values ​​used to get the backup sum value; then weightedly calculate the backup sum value and the device unit differentiation factor preset by the driving assistance system to get the auxiliary driving value; then compare the auxiliary driving value with the preset auxiliary driving value range. When the auxiliary driving value is within the preset auxiliary driving value range, the script generator generates a burning script and a program to make a burning script according to the corresponding device; otherwise, no script is made; it should be noted that only the specific operation process of the driving assistance system is listed; the infotainment system, vehicle navigation system, vehicle communication system, vehicle sensor and vehicle power system are all for this operation process.

[0056] See also Figure 3As shown, the burning configuration module configures the burning script parameters, first receiving the replacement command generated by the burning production module; then, determining the target device to be burned, including but not limited to the target chip model and manufacturer information. The connection method also includes but is not limited to serial port connection, USB connection and Ethernet connection; then determine whether the burning device supports communication protocols, such as JTAG, SWD, SPI, I2C and CAN; according to the connection method, supported communication protocols and current network conditions, including network delay, bandwidth limitation and network interruption, etc.; then mark and assign values ​​to the acquired data, which are core value, link value, communication value and network condition value; among them, the core value includes core value one and core value two; the link value is assigned according to the connection stability, transmission efficiency and operation difficulty, which is link value one, link value two and link value three; the communication value is assigned according to the reliability, bandwidth utilization, flexibility, security and cost-effectiveness of the communication protocol, and the corresponding communication protocol is assigned to communication value one, communication value two, communication value three, communication value four and communication value five; finally, the network condition value is assigned according to the network delay, bandwidth limitation and network interruption, which is network condition value one, network condition value two and network condition value three;

[0057] See also Figure 4 As shown, by obtaining numerical values ​​for calculation, through the core value, the square value and the common value, and calculating the mean of the core value, the square value and the common value, the core value numerical value is substituted into the computer model, the center value point is fixed on the X-axis, and the center value point is made along the Y-axis with the core value size, the square value point is fixed on the X-axis, and the square value point is made along the Y-axis with the square value size to obtain the common value point, the common value point is fixed on the X-axis, and the common value point is made along the Y-axis with the common value size to obtain the common value point, the mean is perpendicular to the Y-axis, and the mean point is obtained by averaging the mean size on the Y-axis, and the mean point is perpendicular to the Y-axis and marked as the mean line, and the core value point is marked The core value points, the square value points and the common value points are connected, and then the core value points are perpendicular to the mean line to draw a line segment, and the common value points are perpendicular to the mean line to draw a line segment to obtain the optimal parameter diagram, and the shaded area in the diagram is calculated, and the shaded area is used as the optimal parameter value; then the existing optimal parameter value is obtained according to the existing conditions; the burning script generates a burning file through the existing optimal parameter value and the latest firmware version; it should be noted that Windows industrial computers and Linux industrial computers capture the latest firmware version through routers and production networks, and burn the latest firmware version into the product through USB and Jtag / DAP;

[0058] The burning configuration module stores the burning files according to the set FTP server path. Find the shared path or root directory setting option in the FTP server software settings, and set the FTP server path to the directory where the firmware files are stored. The final operations that support secure boot in the FTP server software are as follows:

[0059] Select a suitable key generation tool to generate a key pair; ensure that an encryption algorithm and key length of sufficient strength are selected; first embed the generated public key into the executable file of the boot loader; make modifications in the source code of the boot loader and add the data of the public key to it; secondly, digitally sign the firmware to be signed with the generated private key; use preset tools or commands to do this, depending on the type of firmware and the signature algorithm; implement the function of verifying the digital signature in the boot loader; program the algorithm and logic for verifying the firmware; add code to the boot loader to verify the validity of the signature and only allow the firmware to start if the verification passes; after completing the modification of the boot loader, conduct a comprehensive test of the system to ensure that the boot loader can correctly verify the signature and that the system can start normally when the signature is valid; finally, set the secure boot system to be updated regularly to ensure that the system and keys are updated regularly to deal with the risk of new security vulnerabilities or key leakage;

[0060] In the burn parameter configuration module, open the installation directory of the Jlink software on the computer and the installation directory of the SOC installation package on the computer;

[0061] The burning parameter configuration module sets user permissions and divides them according to different user roles and operation requirements; including but not limited to system administrators, operators, maintenance personnel and auditors; System administrators: have the highest authority over the vehicle-mounted equipment system and can modify and manage various functions and settings of the system; Operators: have daily operation permissions for vehicle-mounted equipment and can perform routine control and operation tasks, such as starting, stopping, setting parameters, etc.; Maintenance personnel: have the authority to repair and maintain vehicle-mounted equipment and can diagnose, maintain and repair equipment; Auditors: have the authority to audit and view the operation records and data of vehicle-mounted equipment and can review the operation logs and reports of the equipment; Set accounts and passwords, each user role corresponds to an account and password, and different user role accounts correspond to different operation permissions.

[0062] The burning and selection module verifies the contents of the burning files collected by the host computer through the data verification equipment; firstly, the program code is verified, and the program code is statically analyzed through the scanning and detection program to detect whether the code is standardized, the code style, potential errors and security loopholes; if the scanning and detection equipment analyzes that the program code is not standardized or has potential errors and security loopholes, S01 is performed; otherwise, S02 is performed;

[0063] S01: Send the program code to the corresponding audit member, who will review, check and modify the code, provide feedback on the modified program code, and then re-perform static code analysis;

[0064] S02: Unit test the program code, set up the unit test environment and then perform unit test, and record the execution result and output of each test case, where the test case is a different test method and steps; then compare the execution result to see if it meets the expected result; if the execution result does not meet the expected result, proceed to S04, otherwise, proceed to S03;

[0065] S03: until all test cases pass, the test execution results, pass rate and failure reasons are counted; the test failure reasons are sent to the audit members, who repair the program code and receive the repaired program code, and then re-execute the unit test on the program code;

[0066] S04: The program code is integrated tested, and the integration test includes the function, performance and usability test of the system; the test results include qualified function, unqualified function, qualified performance, unqualified performance, qualified usability and unqualified usability; when the test results are all qualified, S05 is carried out; otherwise, it is sent to the audit members, who analyze the specific reasons and modifications of the program code, and feedback the modified program code, and then repeat the test until all tests pass, and the test execution results, pass rate and failure reasons are counted;

[0067] S05: Conduct system test, conduct performance test on program code, determine performance index, first, determine the performance index to be evaluated, including response time, throughput, resource utilization, and then determine the performance index that needs to be paid attention to according to the nature and requirements of the burning system; then formulate a test plan and set up the test environment; compare the test performance index with the preset performance index, if the test performance index is less than the preset performance index, collect test data and analyze performance data and send them to the audit member, who will analyze and modify the program code, and feedback the modified program code, and then repeat the test; otherwise, perform a scanning program to scan the operation mode and communication protocol of the burning file, and scan and detect whether the handshake is performed through electrical signals or communication protocols to determine whether it is online burning; when the burning mode is online burning, perform S06; otherwise, send it to the audit member, who will analyze and modify the program code, and feedback the modified program code, and then repeat the test until it is determined to be online burning;

[0068] S06: Scan the communication protocol to see if there are SPI, I2C, UART, JTAG and other communication protocols. If there are SPI, I2C, UART, JTAG and other communication protocols, then check the data format, data size and data version of the online burning. Use the data inspection device to match the online collected information data format with the preset format template in the data inspection device. When the online collected information data format completely belongs to the preset format, the data inspection device counts the data size and outputs the data size value; the data inspection device scans the data version number and compares it with the latest data version number in the database. If the scanned data version number is the latest data version number, it passes the inspection, generates a burning signal, and sends the burning file package to the control display module. Otherwise, the audit member modifies the online burning file format and feeds back the modified online burning file format, and then rescans the data version until the inspection passes.

[0069] The control display module receives the burning file package to select the burning program and PCBA board model; obtains the supported burning voltage of the product and the model of the corresponding PCBA board; matches the PCBA board model with the PCBA board model supported by the burning file package. If the PCBA board model is supported by the burning file package, the burning voltage is selected according to the supported burning voltage; select the applicable voltage and PCBA board model to connect after the burning file package is applicable; otherwise, select other burning file packages; then the relay controls the disconnection and closing of USB-5V-VCC, Jlink-3, 3V-VCC, and the positive power supply of the product; the control display module controls the relay to open the corresponding switch, burn the MCU or SOC program, and display the burning progress and status on the display screen.

[0070] The preferred embodiments of the present invention disclosed above are only used to help explain the present invention. The preferred embodiments do not describe all the details in detail, nor do they limit the invention to only specific implementation methods. Obviously, many modifications and changes can be made according to the content of this specification. This specification selects and specifically describes these embodiments in order to better explain the principles and practical applications of the present invention, so that those skilled in the art can understand and use the present invention well. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. An integrated burning system for vehicle-mounted equipment, comprising an equipment information acquisition module, a burning production module, a control and display module, a burning parameter configuration module and a burning selection module, characterized in that: The programming parameter configuration module includes a power supply, a production network unit, a Windows industrial computer, a router, a Linux industrial computer, an RS485 normally open relay and a J-Link programmer; The 12V switching power supply is used to power the entire burning system, and there is also a 0-36V adjustable DC regulated power supply to power the product; the production network unit provides a network environment for the entire burning system to capture the latest firmware; the Windows industrial computer is connected to the MCU of the J-Link burner via USB; The router provides a network environment for Windows and Linux industrial computers, and allows the two to transmit data through the HTTP protocol in the same network segment; the Linux industrial computer connects the USB harness to the corresponding test point on the mainboard, and burns a specific firmware version to the SOC through the Ambarella burning program that supports HTTP service after secondary development; the RS485 normally open relay controls the disconnection and closing of USB-5V-VCC, J-Link-3.3V-VCC and the positive power supply of the product; the J-Link burner is an MCU burning tool, and the J-Link burner is connected to the 5V-VCC interface of the computer USB; The burning parameter configuration module is also used to configure the burning script parameters, specifically: when receiving the replacement command, determine the target device to be burned, assign the target chip model, manufacturer information, connection mode and supported communication protocol of the target device, which are respectively the core value, the connection value and the communication value and the network condition value, and substitute them into the computer model flow chart to output the optimal parameter value; obtain the existing optimal parameter value according to the existing configuration conditions; import the burning script program with the existing optimal parameter value and the latest firmware version to generate a burning file; It is also used to store the burned files according to the set FTP server path. Find the shared path or root directory setting option in the settings of the FTP server software, and set the FTP server path to the directory where the firmware files are stored. The final operation of supporting secure boot in the FTP server software: select the key generation tool to generate a key pair, and first embed the public key into the executable file of the boot loader; modify the source code of the boot loader and add the public key data to it; Then use the private key to digitally sign the firmware to be signed; use a preset tool or command to do this; implement the function of verifying the digital signature in the boot loader; verify the firmware, add code in the boot loader to verify the validity of the signature, and only start the firmware if the verification passes; after completing the modification of the boot loader, fully test the system to ensure that the boot loader correctly verifies the signature and the system starts normally when the signature is valid; Finally, the secure boot system settings are updated regularly; the burning parameter configuration module is also used to open the installation directory of the Jlink software installed on the computer and the installation directory of the SOC installation package on the computer; Set user permissions, divide them according to different user roles and operation requirements, and set accounts and passwords. Each user role corresponds to an account and password, and different user role accounts correspond to different operation permissions; The burning and selecting module verifies the contents of the burning files collected by the host computer; The device information acquisition module is used to acquire the information of the vehicle-mounted device; The burning production module generates a burning script and a program to produce a burning script by starting the APS software: Start the APS software: log in as a user and start the aging software and enter the main interface, obtain the hardware model and device software version number of the vehicle-mounted device in the main interface, as well as the production date of the hardware and the applicable device software version update record, and collect the production date and model of each device; The production date is used as the corresponding value of the equipment, and the date value interval is preset. A statistical comparison is performed to obtain the maximum value and the minimum value of the equipment, and the absolute difference between the calculated values ​​is named as the set period difference value 1; if the set period difference value 1 belongs to the preset date value interval, the control unit and the processor built-in software version number will be counted, and the equipment software version update record and historical version will be counted, and the existing version update date will be assigned as the update date corresponding value; if the date difference value 1 does not belong to the preset date value interval, the equipment will be replaced and a replacement command will be generated; The burning and production module marks the type of equipment in the driving assistance system and then assigns the value to obtain the reserve value; Then add up all the backup values ​​to get the backup sum value; Perform weighted calculation on it and the corresponding preset device unit distinguishing factor to obtain the auxiliary driving value, compare the auxiliary driving value with the preset auxiliary driving value interval, and when the auxiliary driving value is within the preset auxiliary driving value interval, the script generator generates a burning script and a program to produce a burning script according to the corresponding device; otherwise, no script production is performed; The control display module is used to receive the burning file package to select the burning program and PCBA board model: obtain the supported burning voltage and corresponding PCBA board model of the product; match the PCBA board model with the PCBA board model supported by the burning file package, if the PCBA board model belongs to the PCBA board model supported by the burning file package, then select the burning voltage according to the supported burning voltage; select the applicable voltage and PCBA board model applicable to the burning file package and then connect; otherwise, select other burning file packages; then control the disconnection and closing of USB-5V-VCC, J-Link-3.3V-VCC and the positive power supply of the product by the RS485 normally open relay; the control display module controls the relay to open the corresponding switch, burn the MCU or SOC program, and display the burning progress and status on the display screen.

2. The vehicle-mounted device integrated burning system according to claim 1, characterized in that: The specific steps to verify the contents of the burned file are as follows: If the program code has specifications, code style, potential errors and security vulnerabilities, proceed to S01; otherwise, proceed to S02; S01: Send the program code to the corresponding audit member, who will review, check and modify the code, and provide feedback on the modified program code, and then execute S02; S02: Perform unit testing on the program code, first set up the unit testing environment, and then record the execution results of each test case after testing; Compare them to see if they meet the expected results; If the expected result is not met, proceed to S04; otherwise, proceed to S03; S03: Until all test cases pass, the test execution results, pass rate and failure reasons are counted; The reason for the test failure is sent to the audit member, who repairs the program code and receives the repaired program code, and then re-executes the unit test on the program code; S04: Conduct integration testing, which includes system function, performance and usability testing; test results include qualified function, unqualified function, qualified performance, unqualified performance, qualified usability and unqualified usability; when all test results are qualified, proceed to S05; otherwise, send it to the audit members, who will analyze the specific reasons and make modifications to the program code, and provide feedback on the modified program code, and then repeat the test until all tests pass, and then count the test execution results, pass rate and failure reasons; S05: Perform system testing and performance testing on the program code; determine the performance indicators to be evaluated, and then determine the performance indicators that need to be paid attention to after determining the nature and requirements of the burning system; Develop a test plan and set up a test environment; Compare the test performance index with the preset performance index. If the test performance index is less than the preset performance index, collect the test data and analyze the performance data and send them to the audit members, who will analyze and modify the program code, and provide feedback on the modified program code before repeating the test. Otherwise, a scan is performed to detect whether a handshake is performed through an electrical signal or a communication protocol, and it is determined whether it is online burning; when the burning mode is online burning, S06 is performed; Otherwise, it is sent to the review members, who will analyze and modify the program code, and provide feedback on the modified program code, and then repeat the test until it is determined to be online burning; S06: Scan the communication protocol to see if there is a specific communication protocol. If there is a specific communication protocol, check the data format, data size and data version of the online burning, and match them with the preset format template of the data verification device. When the online burning data format completely belongs to the preset format, the data verification device scans the data version number and compares it with the latest data version number in the database. If the data version number is the latest data version number, the inspection passes and the burning file package is sent to the control display module; otherwise, the audit member modifies the online burning file format and feeds back the modified online burning file format, and then rescans the data version until the inspection passes.

Images