Vehicle over-the-air upgrading system, method and equipment and vehicle

Abstract

The embodiment of the invention discloses a vehicle over-the-air upgrading system, method and device and a vehicle, and the vehicle over-the-air upgrading system comprises a real-time machine, an upper computer and a vehicle control unit; the upper computer is used for configuring a model of an electronic system of the vehicle and sending the model to a real-time machine; the vehicle control unit is used for receiving the upgrading instruction sent by the cloud server and sending the upgrading instruction to the real-time machine; the model is operated in real time according to an upgrading instruction sent by the vehicle control unit, and a response result is returned to the vehicle control unit; and the vehicle control unit evaluates an upgrading result of the electronic system according to a response result returned in real time. According to the embodiment of the invention, the upper computer is used for configuring the model of the electronic system, the model is sent to the real time, the upgrading of the actual electronic system is simulated through the interaction of the vehicle control unit and the real time, and corresponding hardware resources do not need to be built for each upgrading module, so that the hardware resources are saved.

Description

Technical Field

[0001] The present application relates to the field of vehicle technology, and in particular to a vehicle over-the-air download upgrade system, method, device and vehicle. Background Art

[0002] With the development of intelligent and connected vehicles, Over The Air (OTA) technology has become a necessary technology for vehicle-mounted systems, which can remotely reinforce vehicle-mounted systems or iterate new functions.

[0003] OTA upgrades are currently mainly performed in actual hardware resources. For example, when controller A needs to be upgraded, the upgrade command can be sent to the vehicle controller through the cloud, and the vehicle controller sends it to controller A to upgrade controller A. This process requires the construction of hardware circuit boards corresponding to the vehicle controller and controller A.

[0004] However, since a large number of controllers are integrated in the vehicle, if each controller is to be upgraded, it is necessary to build a hardware circuit board corresponding to each controller, which consumes a lot of hardware resources. Summary of the invention

[0005] The embodiments of the present application provide a vehicle over-the-air download upgrade system, method, device and vehicle, which can save hardware resources while meeting the demand for vehicle upgrades.

[0006] In a first aspect, an embodiment of the present application provides a vehicle over-the-air download upgrade system, including a real-time machine, a host computer and a vehicle controller of the vehicle, wherein the real-time machine is connected to the host computer and the vehicle controller respectively;

[0007] The host computer is used to configure the model of the vehicle's electronic system and send the model to the real-time machine;

[0008] The vehicle controller is used to receive the upgrade instructions sent by the cloud server and send the upgrade instructions to the real-time machine;

[0009] The real-time machine runs the model according to the upgrade instruction sent by the vehicle controller, and returns the response result of the model to the upgrade instruction to the vehicle controller;

[0010] The vehicle controller is also used to evaluate the upgrade results of the electronic system based on the response results returned by the real-time machine.

[0011] In a second aspect, an embodiment of the present application provides a vehicle over-the-air download upgrade method, which is applied to the vehicle controller as described in the first aspect, and the method includes:

[0012] Receiving an upgrade instruction sent by a cloud server, and sending the upgrade instruction to a real-time machine, wherein the real-time machine includes a model of the electronic system of the vehicle pre-configured and sent by a host computer;

[0013] Receiving the response result of the model to the upgrade instruction returned by the real-time machine;

[0014] Based on the response results, evaluate the upgrade results of the electronic system.

[0015] In a third aspect, an embodiment of the present application provides an electronic device, comprising: a processor and a memory storing computer program instructions; when the processor executes the computer program instructions, the method described in the first aspect is implemented.

[0016] In a fourth aspect, an embodiment of the present application provides a storage medium having a program or instruction stored thereon, and when the program or instruction is executed by a controller, the method described in the second aspect is implemented.

[0017] In a fifth aspect, an embodiment of the present application provides a vehicle, the vehicle comprising a vehicle controller as described in the first aspect; or, an electronic device as described in the third aspect.

[0018] The vehicle over-the-air download upgrade system of the embodiment of the present application includes a real-time machine, a host computer and a vehicle controller of the vehicle, the real-time machine is connected to the host computer and the vehicle controller respectively; the host computer is used to configure the model of the electronic system of the vehicle, and send the model to the real-time machine; the vehicle controller is used to receive the upgrade instruction sent by the cloud server, and send the upgrade instruction to the real-time machine; the real-time machine runs the model according to the upgrade instruction sent by the vehicle controller, and returns the response result of the model to the upgrade instruction to the vehicle controller; the vehicle controller is also used to evaluate the upgrade result of the electronic system according to the response result returned by the real-time machine. That is, the embodiment of the present application uses the host computer to configure the model of the vehicle electronic system, and sends the model to the real-time machine, and simulates the upgrade of the actual electronic system through the interaction between the vehicle controller and the real-time machine, without the need to build corresponding hardware resources for each module of the electronic system, thus saving hardware resources. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 A structural diagram of a vehicle over-the-air download upgrade system provided in an embodiment of the present application;

[0020] Figure 2 A structural diagram of a vehicle over-the-air download upgrade system provided in an embodiment of the present application;

[0021] Figure 3 A structural diagram of a vehicle over-the-air download upgrade system provided in an embodiment of the present application;

[0022] Figure 4 A flow chart of a vehicle over-the-air download upgrade method provided in an embodiment of the present application;

[0023] Figure 5A schematic diagram of a vehicle over-the-air download upgrade process provided by an embodiment of the present application;

[0024] Figure 6 A structural diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0025] In order to more clearly understand the above-mentioned purposes, features and advantages of the present application, the scheme of the present application will be further described below. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0026] In the following description, many specific details are set forth to facilitate a full understanding of the present application, but the present application may also be implemented in other ways different from those described herein; obviously, the embodiments in the specification are only part of the embodiments of the present application, rather than all of the embodiments.

[0027] It should be noted that, in this article, relational terms such as "first" and "second" are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the term "comprises" or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0028] As mentioned above, when the relevant technology performs OTA upgrades on vehicles, it is mainly carried out in actual hardware resources. For example, when controller A needs to be upgraded, the hardware circuit board corresponding to controller A needs to be built. Since the vehicle contains a large number of controllers and sensors and other modules, the entire upgrade requires a lot of hardware resources.

[0029] To this end, the embodiments of the present application provide a vehicle over-the-air download upgrade system, method, device and vehicle, which can save hardware resources while meeting the demand for vehicle upgrades.

[0030] The vehicle over-the-air download upgrade system, method, device and vehicle provided in the embodiments of the present application are described below through specific embodiments.

[0031] Figure 1 A structural diagram of a vehicle over-the-air download upgrade system provided in an embodiment of the present application, such as Figure 1As shown, the vehicle over-the-air download upgrade system may include a real-time machine 100, a host computer 101 and a vehicle controller 102 of the vehicle, and the real-time machine 100 is connected to the host computer 101 and the vehicle controller 102 respectively;

[0032] The host computer 101 is used to configure the model of the electronic system of the vehicle and send the model to the real-time machine 100;

[0033] The vehicle controller 102 is used to receive the upgrade instruction sent by the cloud server and send the upgrade instruction to the real-time machine 100;

[0034] The real-time machine 100 runs the model according to the upgrade instruction sent by the vehicle controller 102, and returns the response result of the model to the upgrade instruction to the vehicle controller 102;

[0035] The vehicle controller 102 is also used to evaluate the upgrade result of the electronic system according to the response result returned by the real-time machine 100.

[0036] For example, Figure 1 As shown, the real-time machine 100 can be set on a hardware-in-the-loop (HIL) bench 10. The HIL bench 10 can be a cabinet for simulating vehicle OTA upgrades, which is mainly responsible for downloading upgrade packages and performing upgrade operations. The embodiment of the present application uses the HIL bench 10 to simulate the upgrade of vehicle OTA, which is convenient for testing the functions of the vehicle controller, so that the stability and reliability of the OTA upgrade can be guaranteed when performing actual OTA upgrades.

[0037] The HIL test bench 10 can be connected to the host computer 101 and the vehicle controller 102 through a bus, Ethernet or hard wire, and the bus here can include a controller area network (Controller Area Network, CAN) bus or a local interconnect network (Local Interconnect Network, LIN) bus, etc.

[0038] Exemplarily, the real-time machine 100 is also called a lower computer, which is used to realize the real-time operation of various protocol signals such as CAN signals, LIN signals, Ethernet signals and hard-wired signals, and can also realize the functions of programmable logic devices such as field programmable gate arrays (Field Programmable Gate Array, FPGA), complex programmable logic devices (Complex Programmable Logic Device, CPLD), etc.

[0039] By way of example, the real-time machine 100 may be a real-time processor of model NI-PXIe-8840Quad-Core-03249A32.

[0040] The host computer 101 may be a personal computer (PC) such as a laptop, desktop or tablet. The host computer 101 is used to configure a model of the electronic system of the vehicle, for example, models of other controllers and sensors on the vehicle except the vehicle controller may be configured as a slave node for OTA upgrade, and is used to simulate the functional logic of the slave node during the vehicle OTA upgrade process.

[0041] For example, the model of the electronic system can be built based on MATLAB-Simulink. After the model of the electronic system is configured, the model of the electronic system can be sent to the real-time machine 100 through the host computer 101, and the simulation operation process of the OTA upgrade is implemented in the real-time machine 100.

[0042] The embodiment of the present application builds a model of the electronic system in the host computer, so that when simulating OTA upgrades, there is no need to build corresponding hardware resources for each upgrade component, thus saving hardware resources.

[0043] The vehicle controller 102 is real hardware, that is, the real controller on the vehicle. As the main node of OTA upgrade, the vehicle controller 102 is mainly responsible for managing the upgrade process. For example, it can receive the upgrade instructions sent by the cloud server and send a request message to the real-time machine 100. The real-time machine 100 runs the corresponding model based on the received request message, obtains the response result (response message) of the corresponding model, and returns it to the vehicle controller 102. The vehicle controller 102 can determine whether the upgrade is normal according to the response result returned by the real-time machine 100, and then determine whether the upgrade is successful. In this way, the vehicle controller, the model of the electronic system, and the real-time machine form a closed loop, realizing the upgrade process of the simulated vehicle OTA.

[0044] The cloud server is used to send the upgrade instruction to the vehicle controller 102. When sending the upgrade instruction, the cloud server can also send the vehicle identification number, upgrade package, baseline version, OTA upgrade success judgment logic and rollback reset control strategy, etc., where the baseline version is the version corresponding to the upgrade instruction. Different vehicles can correspond to different upgrade packages. The judgment logic of OTA upgrade success can be implemented based on the standard specification of the International Organization for Standardization (ISO)-14229.

[0045] In some embodiments, the upgrade instruction may include multiple sub-upgrade instructions, and the multiple sub-upgrade instructions are sent in a preset order. The vehicle controller is specifically used to:

[0046] When the response results of each sub-upgrade instruction are positive responses, it is determined that the electronic system upgrade is successful;

[0047] In the case that the response result of the first sub-upgrade instruction returned by the real-time machine is a negative response, determining that the electronic system upgrade fails;

[0048] Among them, the first sub-upgrade instruction is the sub-upgrade instruction whose first response result returned by the real-time machine is a negative response. When the response result of the first sub-upgrade instruction returned by the real-time machine is a negative response, the vehicle controller stops sending sub-upgrade instructions after the first sub-upgrade instruction to the real-time machine.

[0049] The positive response here may be the response result corresponding to the successful execution of the corresponding sub-upgrade instruction. For example, for sub-upgrade instruction 1, response result 7101 represents a positive response, indicating that the upgrade is successful, and response result 7f31 represents a negative response, indicating that the upgrade fails. Different sub-upgrade instructions have different positive response identifiers, and different sub-upgrade instructions have different negative response identifiers.

[0050] For each sub-upgrade instruction, the response of the corresponding model to the corresponding sub-upgrade instruction can be determined based on the OTA upgrade success judgment strategy issued by the cloud server and the response result returned by the real-time machine 100.

[0051] Exemplarily, if the response results of each sub-upgrade instruction returned by the real-time machine 100 are all positive responses, it can be determined that the vehicle's OTA upgrade simulation is successful. As long as the real-time machine returns a negative response result, it can be determined that the vehicle's OTA upgrade simulation has failed.

[0052] For example, when the response result of the first sub-upgrade instruction returned by the real-time machine 100 is a negative response, it can be determined that the vehicle OTA upgrade has failed, wherein the first sub-upgrade instruction is the first sub-upgrade instruction returned by the real-time machine 100 with a negative response result. When the response result of the first sub-upgrade instruction returned by the real-time machine 100 is a negative response, the vehicle controller 102 stops sending sub-upgrade instructions after the first sub-upgrade instruction to the real-time machine 100.

[0053] For example, the upgrade instruction includes sub-upgrade instruction 1 and sub-upgrade instruction 2. For sub-upgrade instruction 1, the response result returned by the real-time machine 100 is a negative response, then the vehicle controller 102 no longer sends sub-upgrade instruction 2 to the real-time machine 100.

[0054] In addition to interacting with the real-time machine 100 to simulate the OTA upgrade process, the vehicle controller 102 can also test whether the function of a controller has changed before and after the upgrade when a controller successfully executes the upgrade command. Based on this, in some embodiments, the vehicle controller 102 is also used to:

[0055] When the upgrade result of the electronic system is successful, the function of the upgraded electronic system is compared with the function of the electronic system before the upgrade, and the impact of the over-the-air upgrade on the performance of the whole vehicle is evaluated to obtain an evaluation result.

[0056] Exemplarily, the vehicle controller 102 may include an on-board diagnostics (OBD) interface, through which the vehicle controller 102 can obtain the response result returned by the real-time machine 100, and compare the response result with the functional data before the OTA upgrade to evaluate the impact of the PTA upgrade on vehicle performance.

[0057] For example, for controller 1, if its negative charge number is 50% before OTA upgrade, and if the negative charge number becomes 10% after OTA upgrade, it can be determined that the performance of controller 1 has changed after OTA upgrade, which indicates that there is a certain risk in the upgrade. At this time, re-verification and finding the cause can be carried out to avoid functional failures and safety issues of the vehicle caused by the upgrade.

[0058] By comparing the functions of the vehicle before and after the upgrade, the embodiments of the present application can comprehensively and accurately test the stability and reliability of the vehicle OTA upgrade, thereby avoiding functional failures and safety issues caused by the upgrade.

[0059] In some embodiments, the real-time machine 100 is further used to send the received upgrade instruction and the response result output by the model to the upgrade instruction to the host computer 101;

[0060] The host computer 101 is also used to draw and display a schematic diagram of the vehicle upgrade stage according to the upgrade instruction sent by the real-time machine 100 and the corresponding response result.

[0061] Exemplarily, in addition to interacting with the vehicle controller 102, the real-time machine 100 also interacts with the host computer 101. Specifically, after obtaining the response result of a certain model to the upgrade instruction, the real-time machine 100 can not only return the response result to the vehicle controller 102, but also send it to the host computer 101. The host computer 101 draws a schematic diagram of the vehicle's upgrade stages based on the response result and the corresponding upgrade instruction, and displays it to the user, so that the user can easily understand the current upgrade stage of the vehicle and the upgrade results of each model.

[0062] In some embodiments, Figure 2 As shown, the system may further include a signal transceiver 103, and the signal transceiver 103 is connected to the host computer 101 and the real-time machine 100 respectively;

[0063] The signal transceiver 103 is used to convert the first digital signal output by the host computer 101 into a first analog signal and send it to the real-time machine 100 ; and convert the second analog signal output by the real-time machine 100 into a second digital signal and send it to the host computer 101 .

[0064] For example, Figure 2 As shown, the signal transceiver 103 can be arranged in the HIL bench 10. As a bottom software module, the signal transceiver 103 is used to convert digital signals and analog signals. For example, the first digital signal output by the host computer 101 can be converted into a first analog signal and sent to the real-time machine 100, and the second analog signal output by the real-time machine 100 can also be converted into a second digital signal and sent to the host computer 101.

[0065] Exemplarily, the signal transceiver 103 can convert the CAN signal, LIN signal or hard-wire signal output by the host computer 101 from a digital quantity to an analog quantity and send it to the real-time machine 100 for execution.

[0066] In addition to being used to realize the conversion between digital signals and analog signals, the signal transceiver 103 can also perform pulse width modulation (PWM) processing to meet the needs of OTA upgrades.

[0067] In actual application, the real-time machine 100 can send the response results of each model to the upgrade instruction to the vehicle controller 102 through the board card, and can also receive signals sent by the vehicle controller 102 through the board card, such as upgrade instructions, etc., that is, the vehicle controller 102 and the real-time machine 100 can realize signal transmission and interaction through the board card to simulate OTA upgrade.

[0068] Based on this, in some embodiments, such as Figure 3 As shown, the system may further include a first board 104 and a program-controlled power supply 105, wherein the first board 104 is connected to the vehicle controller 102, the program-controlled power supply 105 and the real-time machine 100, respectively, and the program-controlled power supply 105 is connected to the first board 104, the real-time machine 100 and the vehicle controller 102, respectively;

[0069] The first board 104 is used to realize signal transmission between the vehicle controller 102 and the real-time machine 100;

[0070] The program-controlled power supply 105 is used to simulate the power supply fluctuation of the vehicle battery and to supply power to the vehicle controller 102 , the first board 104 and the real-time machine 100 .

[0071] For example, Figure 3As shown, the first board 104 and the programmable power supply 105 can be arranged in the HIL bench 10. The first board 104 can include a data acquisition card, an input / output (I / O) hard-wire drive board, and a current power supply board. Among them, the data acquisition card can be used to collect various data of the vehicle controller 102 and the real-time machine 100, such as communication rate, communication success rate, etc. The I / O hard-wire drive board can be used to transmit vehicle speed signals, speed signals, fuel consumption signals, door signals, brake signals, light signals, etc. between the vehicle controller 102 and the real-time machine 100, to achieve OTA upgrades and test vehicle performance before and after the upgrade. The current power supply board can be used to power the vehicle controller 102, for example, the programmable power supply 105 can be connected to the current power supply board, and the vehicle controller 102 is powered by the current power supply board.

[0072] The programmable power supply 105 is used to simulate the battery on an actual vehicle. The range of the low-voltage power supply is generally 9-16V. In the embodiment of the present application, the programmable power supply 105 is separated from the first board 104 to simulate a larger voltage range and better linearity.

[0073] In some embodiments, Figure 3 As shown, the system may further include a load module 106, and the load module 106 is connected to the first board 104;

[0074] The load module 106 is used to simulate the load that changes according to preset parameters;

[0075] The vehicle controller 102 is also used to test the programmable power supply 105 and obtain test results when controlling the load module 106 to change according to preset parameters.

[0076] Exemplarily, the load module 106 of the embodiment of the present application can simulate a load whose parameters can be changed arbitrarily. When the vehicle controller 102 controls the load module 106 to change according to preset parameters, the power supply capacity of the programmable power supply 105 can be tested. For example, the power supply capacity of the programmable power supply 105 under normal load parameters and extreme load parameters can be tested.

[0077] The embodiment of the present application can process, analyze and summarize the data generated during the upgrade process through the vehicle controller, obtain relevant data on the stability of the OTA upgrade and the stability of vehicle functions before and after the OTA upgrade, and avoid functional failures and safety issues caused by the actual upgrade.

[0078] The vehicle over-the-air download upgrade system of the embodiment of the present application includes a real-time machine, a host computer and a vehicle controller of the vehicle, wherein the real-time machine is connected to the host computer and the vehicle controller respectively; the host computer is used to configure the model of the electronic system of the vehicle and send the model to the real-time machine; the vehicle controller is used to receive the upgrade instruction sent by the cloud server and send the upgrade instruction to the real-time machine; the real-time machine runs the model according to the upgrade instruction sent by the vehicle controller, and returns the response result of the model to the upgrade instruction to the vehicle controller; the vehicle controller is also used to evaluate the upgrade result of the electronic system according to the response result returned by the real-time machine. That is, the embodiment of the present application uses the host computer to configure the model of the vehicle electronic system, and sends the model to the real-time machine, and simulates the upgrade of the actual electronic system through the interaction between the vehicle controller and the real-time machine, without the need to build corresponding hardware resources for each module of the electronic system, thus saving hardware resources.

[0079] Based on the same inventive concept, the embodiment of the present application also provides a vehicle over-the-air download upgrade method, which can be applied to the vehicle controller in the above embodiment, such as Figure 4 As shown, the vehicle over-the-air download upgrade method may include the following steps:

[0080] S410, receiving an upgrade instruction sent by the cloud server, and sending the upgrade instruction to the real-time machine.

[0081] The real-time machine includes a model of the vehicle's electronic system that is pre-configured and sent by the host computer.

[0082] S420: Receive the response result of the model to the upgrade instruction returned by the real-time machine.

[0083] S430: Evaluate the upgrade result of the electronic system according to the response result.

[0084] The embodiment of the present application utilizes a host computer to configure a model of the vehicle electronic system and sends the model to a real-time machine. The upgrade of the actual electronic system is simulated through the interaction between the vehicle controller and the real-time machine. There is no need to build corresponding hardware resources for each module of the electronic system, thus saving hardware resources.

[0085] For example, after the vehicle controller receives the upgrade instruction sent by the cloud server, it can send it to the real-time machine in the form of a request message. After receiving the request message, the real-time machine runs the model, obtains a response message, and returns it to the vehicle controller, which evaluates the upgrade result of the vehicle and the performance of the vehicle before and after the upgrade based on the response message.

[0086] For example, the vehicle controller can use 64 request signal variables as the input of the slave node model, and the slave node model can finally output 8 variables to the vehicle controller, realizing the master-slave node signal interaction test of the stability and reliability of the vehicle OTA upgrade. In actual application, the number and corresponding relationship of input and output signal variables can be adjusted according to actual needs.

[0087] For example, Figure 5 As shown, after the vehicle controller receives the upgrade command sent by the cloud server, it can send the corresponding upgrade package to the real-time machine and convert it into 64 input request signals according to the bytes.

[0088] For example, in sequence, the vehicle controller will send 10 service session control request, 11 service electronic control unit reset control request, 27 service security access control request, 31 service routine control request, 22 service read data request, 2e service write data request, 34 service download control request, 36 service data transmission control request and 37 service exit transmission control request to the real-time machine respectively.

[0089] Among them, for the service session control request, 10 is the identifier corresponding to the request, and similarly, the following 11, 27, 31, etc. are also identifiers of corresponding requests.

[0090] For each request sent by the vehicle controller, the model can output a corresponding response, which is returned to the vehicle controller by the real-time machine. The vehicle controller can decide whether to continue sending subsequent requests based on the response returned by the real-time machine.

[0091] Exemplarily, the service session control request indicates that the vehicle controller requests to establish a connection with the real-time machine. If the response result returned by the real-time machine is 50 01, it indicates that the default session connection is established. If the response result returned by the real-time machine is 5002, it indicates that the programming session connection is established. If the response result returned by the real-time machine is 50 03, it indicates that the extended session connection is established. After the vehicle controller establishes a connection with the real-time machine, subsequent request signals can be sent.

[0092] The service electronic control unit reset control request indicates that the vehicle controller requests the real-time machine to start the program. If the response result returned by the real-time machine is 51 01, it means that the real-time machine has completed the startup. If the response result returned by the real-time machine is 7f11, it means that the real-time machine has failed to start.

[0093] The service security access control request indicates that the vehicle controller sends an encryption seed request. If the response result returned by the real-time machine is 67 01 and a random number, the vehicle controller verifies the encryption strategy of 67 01 and the random number. If the encryption correction is satisfied, the next request is sent. Otherwise, the encryption verification request is re-performed. Among them, 67 01 represents a positive response.

[0094] The service routine control request indicates that the vehicle controller needs to check whether the real-time machine meets the flashing conditions. If the response result returned by the real-time machine is 71 01, it means that the real-time machine meets the flashing conditions and subsequent upgrade operations can be performed. If the response result returned by the real-time machine is 7f 31, it means that the real-time machine does not meet the flashing conditions and subsequent upgrade operations cannot be performed temporarily. The condition settings need to be rechecked.

[0095] The service read data request indicates that the vehicle controller requests to read the upgrade package data. If the response result returned by the real-time machine is 62 01, it indicates that the response to the read data request is completed and data can be written next. If the response result returned by the real-time machine is 7f 22, it indicates a negative response and the real-time machine cannot write data and needs to re-request.

[0096] The 2e service write data request indicates that the vehicle controller requests to write the upgrade package data to the real-time machine. If the response result returned by the real-time machine is 6e, it indicates that the data write response is completed and the next step of downloading the upgrade package data can be carried out. If the response result returned by the real-time machine is 7f 2e, it indicates that the vehicle controller cannot write data to the real-time machine.

[0097] The service request download control request indicates that the vehicle controller requests the real-time machine to download the upgrade package data. If the response result returned by the real-time machine is 74, it means that the download request is successful and the upgrade package data can be downloaded. If the response result returned by the real-time machine is 7f 34, it means that the data download fails.

[0098] The service data transmission control request indicates that the vehicle controller requests to transmit the upgrade package data. If the response result returned by the real-time machine is 76 01, it means that the real-time machine is responding to the data transmission task. If the response result returned by the real-time machine is 7F36, it means that the data transmission has failed and the command needs to be requested again.

[0099] The service exit transmission control request indicates that the vehicle controller requests to exit data transmission. If the response result returned by the real-time machine is 77, it means exiting data transmission, the upgrade package data transmission is successful, and the upgrade task is completed.

[0100] The relationship between the identifiers of the response results corresponding to different requests and their meanings can be adjusted according to actual needs as long as they comply with standard specifications. The embodiments of the present application do not limit this.

[0101] The embodiment of the present application can simulate the functional logic of the slave nodes (nodes other than the master node) in the vehicle OTA upgrade through the model, and cooperate with the performance of the vehicle before and after the OTA upgrade to comprehensively and accurately test the stability and reliability of the vehicle OTA upgrade, thereby avoiding functional failures and safety issues caused by the upgrade.

[0102] In some embodiments, the upgrade instruction includes multiple sub-upgrade instructions, and the vehicle controller sends each sub-upgrade instruction to the real-time machine in a preset order; accordingly, the above S430 may include the following steps:

[0103] When the response results of each sub-upgrade instruction are positive responses, it is determined that the electronic system upgrade is successful;

[0104] In the case that the response result of the first sub-upgrade instruction returned by the real-time machine is a negative response, determining that the electronic system upgrade fails;

[0105] Among them, the first sub-upgrade instruction is the sub-upgrade instruction whose first response result returned by the real-time machine is a negative response. When the response result of the first sub-upgrade instruction returned by the real-time machine is a negative response, the vehicle controller stops sending sub-upgrade instructions after the first sub-upgrade instruction to the real-time machine.

[0106] In some embodiments, after S430, the method may further include the following steps:

[0107] When the upgrade result of the electronic system is successful, the function of the upgraded electronic system is compared with the function of the electronic system before the upgrade, and the impact of the over-the-air upgrade on the performance of the whole vehicle is evaluated to obtain an evaluation result.

[0108] For specific details, please refer to the above embodiments, which will not be repeated here for the sake of brevity.

[0109] Based on the same inventive concept, the present application embodiment also provides an electronic device. Figure 6 The electronic device provided in the embodiments of the present application is described in detail.

[0110] like Figure 6 As shown, the electronic device may include a controller 610 and a memory 620 for storing computer program instructions.

[0111] The controller 610 may include a central processing unit (CPU) or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0112] The memory 620 may include a large capacity memory for data or instructions. For example, but not limitation, the memory 620 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In one example, the memory 620 may include a removable or non-removable (or fixed) medium, or the memory 620 is a non-volatile solid-state memory. In one example, the memory 620 may be a read-only memory (ROM). In one example, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), an electrically rewritable ROM (EAROM) or a flash memory or a combination of two or more of these.

[0113] The controller 610 reads and executes the computer program instructions stored in the memory 620 to implement Figure 4-Figure 5 The method in the embodiment shown in the figure is achieved Figure 4-Figure 5 The corresponding technical effects achieved by executing the method in the illustrated embodiment are not described in detail here for the sake of brevity.

[0114] In one example, the electronic device may further include a communication interface 630 and a bus 640. Figure 6 As shown, the controller 610, the memory 620, and the communication interface 630 are connected via a bus 640 and communicate with each other.

[0115] The communication interface 630 is mainly used to implement communication between various modules, devices and / or equipment in the embodiments of the present application.

[0116] Bus 640 includes hardware, software or both, and each component of electronic device is coupled to each other.For example, but not limitation, bus 640 may include accelerated graphics port (Accelerated Graphics Port, AGP) or other graphics bus, enhanced industry standard architecture (Extended Industry Standard Architecture, EISA) bus, front side bus (Front Side Bus, FSB), hypertransmission (Hyper Transport, HT) interconnection, industry standard architecture (IndustryStandard Architecture, ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations. In appropriate cases, bus 640 may include one or more buses. Although the present application embodiment describes and shows a specific bus, the application considers any suitable bus or interconnection.

[0117] After receiving the upgrade instruction sent by the cloud server, the electronic device can execute the vehicle over-the-air download upgrade method in the embodiment of the present application, thereby realizing the combination of Figure 4-Figure 5 A vehicle over-the-air upgrade method is described.

[0118] Based on the same inventive concept, an embodiment of the present application further provides a storage medium on which a program or instruction is stored. When the program or instruction is executed by a controller, the vehicle over-the-air download upgrade method as described in the above embodiment is implemented.

[0119] Based on the same inventive concept, an embodiment of the present application also provides a vehicle, which includes a vehicle controller as described in the above embodiment; or, an electronic device as described in the above embodiment; or, a storage medium as described in the above embodiment.

[0120] It should be understood that the above specific embodiments of the present application are only used to illustrate or explain the principles of the present application, and do not constitute a limitation to the present application. Therefore, any modifications, equivalent substitutions, improvements, etc. made without departing from the spirit and scope of the present application should be included in the protection scope of the present application. In addition, the claims attached to the present application are intended to cover all changes and modifications that fall within the scope and boundaries of the attached claims, or the equivalent forms of such scope and boundaries.

[0121] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0122] The above reference is according to the method of the embodiment of the present application, the flow chart of the device (system) and the computer program product and / or the block diagram described various aspects of the present application.It should be understood that each square box in the flow chart and / or the block diagram and the combination of each square box in the flow chart and / or the block diagram can be realized by computer program instructions.These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the realization of the function / action specified in one or more square boxes of the flow chart and / or the block diagram.Such a processor can be but is not limited to a general-purpose processor, a special-purpose processor, a special application processor or a field programmable logic circuit.It can also be understood that each square box in the block diagram and / or the flow chart and the combination of the square boxes in the block diagram and / or the flow chart can also be realized by the dedicated hardware that performs the specified function or action, or can be realized by the combination of dedicated hardware and computer instructions.

[0123] The above is only a specific implementation of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A vehicle over-the-air download upgrade system, characterized in that: It includes a real-time machine, a host computer and a vehicle controller of the vehicle, wherein the real-time machine is connected to the host computer and the vehicle controller respectively; The host computer is used to configure a model of the electronic system of the vehicle and send the model to the real-time machine; The vehicle controller is used to receive the upgrade instruction sent by the cloud server, and send the upgrade instruction to the real-time machine; The real-time machine runs the model according to the upgrade instruction sent by the vehicle controller, and returns the response result of the model to the upgrade instruction to the vehicle controller; The vehicle controller is also used to evaluate the upgrade result of the electronic system according to the response result returned by the real-time machine.

2. The system according to claim 1, characterized in that The real-time machine is also used to send the received upgrade instruction and the response result output by the model to the upgrade instruction to the host computer; The host computer is also used to draw and display the upgrade stage diagram of the vehicle according to the upgrade instruction sent by the real-time machine and the corresponding response result.

3. The system according to claim 1, characterized in that The system further comprises a signal transceiver, wherein the signal transceiver is connected to the host computer and the real-time machine respectively; The signal transceiver is used to convert the first digital signal output by the host computer into a first analog signal and send it to the real-time machine; and convert the second analog signal output by the real-time machine into a second digital signal and send it to the host computer.

4. The system according to claim 3, characterized in that The system further comprises a first board and a program-controlled power supply, wherein the first board is respectively connected to the vehicle controller, the program-controlled power supply and the real-time machine, and the program-controlled power supply is respectively connected to the first board, the real-time machine and the vehicle controller; The first board is used to realize signal transmission between the vehicle controller and the real-time machine; The program-controlled power supply is used to simulate the power supply fluctuation of the vehicle-mounted battery and to supply power to the vehicle controller, the first board and the real-time machine.

5. The system according to claim 4, characterized in that The system further comprises a load module, wherein the load module is connected to the first board; The load module is used to simulate a load that changes according to preset parameters; The vehicle controller is also used to test the programmable power supply and obtain test results while controlling the load module to change according to preset parameters.

6. A vehicle over-the-air download upgrade method, characterized in that: Applied to the vehicle controller according to any one of claims 1 to 5, the method comprises: Receiving an upgrade instruction sent by a cloud server, and sending the upgrade instruction to a real-time machine, wherein the real-time machine includes a model of the electronic system of the vehicle pre-configured and sent by a host computer; receiving a response result of the model to the upgrade instruction returned by the real-time machine; According to the response result, an upgrade result of the electronic system is evaluated.

7. The method according to claim 6, characterized in that The upgrade instruction includes a plurality of sub-upgrade instructions, and the vehicle controller sends each of the sub-upgrade instructions to the real-time machine in a preset order; The step of evaluating the upgrade result of the electronic system according to the response result includes: When the response results of each of the sub-upgrade instructions are positive responses, determining that the electronic system upgrade is successful; In the case that the response result of the first sub-upgrade instruction returned by the real-time machine is a negative response, determining that the electronic system upgrade fails; Among them, the first sub-upgrade instruction is the sub-upgrade instruction whose first response result returned by the real-time machine is a negative response. When the response result of the first sub-upgrade instruction returned by the real-time machine is a negative response, the vehicle controller stops sending sub-upgrade instructions located after the first sub-upgrade instruction to the real-time machine.

8. The method according to claim 6, characterized in that The method further comprises: When the upgrade result of the electronic system is successful, the function of the upgraded electronic system is compared with the function of the electronic system before the upgrade, and the impact of the over-the-air upgrade on the performance of the whole vehicle is evaluated to obtain an evaluation result.

9. An electronic device, characterized in that: include: A controller and a memory storing computer program instructions; When the controller executes the computer program instructions, the method according to any one of claims 6 to 8 is implemented.

10. A vehicle, characterized in that: The vehicle comprises a vehicle controller as described in any one of claims 1-5; or, an electronic device as described in claim 9.

Images