Processing method and device and carrying tool

Abstract

The embodiment of the invention provides a processing method and device and a carrying tool, the method can be applied to the field of intelligent vehicles, and the method comprises the steps that the upgrading sequence of multiple components and information of a strong matching relation component set in the OTA upgrading process are acquired, and the multiple components comprise a first component; when upgrading of the first component fails, at least part of the to-be-upgraded components is upgraded according to the upgrading sequence and information of the strong matching relation component set, and / or part of the successfully upgraded components is rolled back, and the upgrading sequence of the to-be-upgraded components is later than the upgrading sequence of the first component; the upgrading sequence of the successfully upgraded components is earlier than the upgrading sequence of the first component. Through the method, the OTA upgrading efficiency can be improved, and unnecessary rollback operation is reduced.

Description

Technical Field

[0001] The present invention relates to the field of intelligent vehicles, and more specifically, to a processing method, a device and a vehicle. Background Art

[0002] As smart cars are widely used in daily life, users expect smart cars and related devices to bring a more comfortable smart experience. In this context, over the air (OTA) technology has gradually become an indispensable basic function of smart cars. Vehicle OTA can refer to pushing software packages from the cloud to the vehicle side and completing software installation and / or updates on the vehicle side. Through over the air technology, new functions can be added to the vehicle, or existing functions of the vehicle can be optimized, which greatly enriches the user's smart experience.

[0003] Since each smart car may include dozens or even hundreds of electronic control units (ECUs), some ECUs may fail to upgrade during the OTA upgrade process. When some ECUs fail to upgrade, the current processing strategy is that the vehicle can trigger a rollback of the entire vehicle, that is, if any component fails, the vehicle will flash the successfully upgraded components back to the version before the upgrade. However, through this processing method, on the one hand, the rollback process may have the risk of failure, resulting in a decrease in the upgrade success rate of the OTA upgrade task; on the other hand, the vehicle may perform unnecessary rollback operations, resulting in a long overall time-consuming and complex OTA upgrade. Summary of the invention

[0004] The embodiments of the present application provide a processing method, an apparatus, and a vehicle that can improve the efficiency of OTA upgrades and reduce unnecessary rollback operations.

[0005] In a first aspect, a processing method is provided, the method comprising: obtaining an upgrade order of multiple components and information on a set of strongly matching components during an OTA upgrade using over-the-air download technology, the multiple components including a first component; when the upgrade of the first component fails, upgrading at least some of the components to be upgraded according to the upgrade order and information on the set of strongly matching components, and / or rolling back some of the components that have been successfully upgraded, the upgrade order of the components to be upgraded being later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded being earlier than the upgrade order of the first component.

[0006] Optionally, the strong matching relationship component set includes: one or more of: a minimum human-driven component set, a key unlocking and locking component set, a self-driving component set and a cockpit domain component set.

[0007] Optionally, the information of the strong matching relationship set may be sent by the server to the vehicle, or may be stored in the vehicle.

[0008] In an embodiment of the present application, during the OTA upgrade process, if it is found that the upgrade of the first component has failed, the carrier can upgrade at least some of the components to be upgraded according to the upgrade order of the components and the information of the set of components with strong matching relationships, and / or roll back some of the upgraded components. In this way, when the upgrade of the first component fails, the carrier does not need to skip the upgrade process of the component to be upgraded, nor does it need to refresh all the components that have been successfully upgraded back to the version before the upgrade. This processing method can improve the efficiency of OTA upgrades and reduce unnecessary rollback operations.

[0009] In combination with the first aspect, in certain implementations of the first aspect, the first component is not a component in the set of strongly matching components, and when the upgrade of the first component fails, at least some of the components to be upgraded are upgraded according to the upgrade order and information of the set of strongly matching components, and / or some of the components that have been successfully upgraded are rolled back, including: when the upgrade of the first component fails and the first component is not the last component to be upgraded among the multiple components, all of the components to be upgraded are upgraded according to the upgrade order.

[0010] In the embodiment of the present application, during the OTA upgrade process, if the first component does not belong to the component set of the strong matching relationship and is not the last component to be upgraded, the vehicle can upgrade all the components to be upgraded in the upgrade order. In this way, when the upgrade of the first component fails, the vehicle does not need to skip or interrupt the upgrade process of the component to be upgraded, ensuring that the OTA upgrade process will not be affected by the failure of a single component.

[0011] In combination with the first aspect, in certain implementations of the first aspect, the first component is a component in the strong matching component set, and when the upgrade of the first component fails, at least some of the components to be upgraded are upgraded according to the upgrade order and information of the strong matching component set, and / or some of the components that have been successfully upgraded are rolled back, including: when the upgrade of the first component fails and the successfully upgraded components include components in the strong matching component set, according to the upgrade order, the components to be upgraded that are not in the strong matching component set are upgraded, and the components that have been successfully upgraded that are in the strong matching component set are rolled back.

[0012] In the embodiment of the present application, during the OTA upgrade process, if the first component is a component in the set of components with strong matching relationships, and the upgrade of the first component fails, the vehicle can only roll back the components in the set of components with strong matching relationships among the successfully upgraded components, instead of rolling back all upgraded components. This targeted rollback strategy can make the rollback operation more precise, narrow the scope of rollback, and thus save time and resources for OTA upgrades. In addition, the vehicle can also continue to upgrade the components that are not in the set of components with strong matching relationships among the components to be upgraded, instead of skipping the upgrade process of the components to be upgraded, which can improve the efficiency of OTA upgrades.

[0013] In combination with the first aspect, in some implementations of the first aspect, the strong matching relationship component set is a driving-related component set.

[0014] In combination with the first aspect, in some implementations of the first aspect, the method further includes: prompting a user that a failure occurs during the OTA upgrade process.

[0015] Optionally, the vehicle may issue an error prompt message on the display screen to indicate a failure in the OTA upgrade process, or the vehicle may remind the user of an upgrade failure by lighting up a corresponding abnormal status indicator light on the dashboard, or the vehicle may issue a sound alarm or prompt tone to indicate a failure in the OTA upgrade process.

[0016] Optionally, the carrier can also generate detailed reports or log records that contain specific information about the upgrade failure, thereby helping users or technical support personnel to further analyze and resolve the OTA upgrade failure issue.

[0017] In combination with the first aspect, in some implementations of the first aspect, the method further includes: not deleting the downloaded software package corresponding to the component that failed to upgrade.

[0018] In an embodiment of the present application, when the upgrade of the first component fails, the downloaded software package corresponding to the failed upgrade component may not be deleted. In this way, after the user restarts the OTA upgrade process, time and resources for OTA upgrade can be saved.

[0019] In combination with the first aspect, in some implementations of the first aspect, the method further includes: prompting the user to restart the OTA upgrade process.

[0020] In combination with the first aspect, in some implementations of the first aspect, before rolling back some of the successfully upgraded components based on the upgrade sequence and information of the set of strongly matching components, the method further includes: rolling back the first component.

[0021] In combination with the first aspect, in certain implementations of the first aspect, obtaining the upgrade order of multiple components and information on a set of components with strong supporting relationships during an OTA upgrade using over-the-air download technology includes: receiving OTA upgrade information sent by a server, the OTA upgrade information including: the upgrade order of the multiple components and information on the set of components with strong supporting relationships.

[0022] Optionally, the OTA upgrade information may also include information that a precise rollback switch is turned on. The vehicle may roll back some of the successfully upgraded components based on the information that the precise rollback switch is turned on, the upgrade sequence of multiple components, and information about a set of strongly matching components.

[0023] Alternatively, in the above implementation, if the OTA upgrade information received by the vehicle includes information that the precise rollback switch is turned off, the vehicle rolls back all upgraded components based on the information.

[0024] In the embodiment of the present application, the carrier can roll back specific components among the successfully upgraded components based on the instructions in the OTA upgrade information, without rolling back all upgraded components. This precise rollback method can reduce the scope of the rollback operation, reduce the risk of rollback failure, and help improve the efficiency and stability of the OTA upgrade process.

[0025] In a second aspect, a processing method is provided, which includes: determining the upgrade order of multiple components and information of a set of components with strong supporting relationships during an OTA upgrade process; sending OTA upgrade information to a vehicle, wherein the OTA upgrade information includes: the upgrade order of the multiple components and information of the set of components with strong supporting relationships.

[0026] According to a third aspect, a processing method is provided, the method comprising: receiving OTA upgrade failure information sent by a carrier, the OTA upgrade failure information being used to indicate that a first component fails during the OTA upgrade process; sending a processing strategy to the carrier according to an upgrade order of multiple components and information of a set of strongly matching components, the processing strategy being used to instruct the carrier to upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded, the multiple components including the first component, the upgrade order of the components to be upgraded being later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded being earlier than the upgrade order of the first component.

[0027] In the embodiment of the present application, during the OTA upgrade failure, the server configures the processing strategy, and the vehicle only needs to execute the processing strategy without additional calculations and judgments, thereby avoiding unnecessary energy consumption. Compared with a large number of calculations and decisions on the vehicle side, the processing strategy provided by the server can effectively reduce energy consumption and extend the battery life of the vehicle.

[0028] In combination with the third aspect, in certain implementations of the third aspect, when the first component is not a component in the strong matching relationship component set and the first component is not the last component to be upgraded among the multiple components, the processing strategy is used to instruct the vehicle to upgrade all of the components to be upgraded.

[0029] In combination with the third aspect, in certain implementations of the third aspect, when the first component is a component in the strong matching relationship component set, the processing strategy is used to instruct the vehicle to upgrade the components to be upgraded that are not in the strong matching relationship component set, and to roll back the components in the successfully upgraded components that are in the strong matching relationship component set.

[0030] In a fourth aspect, a processing method is provided, the method comprising: sending OTA upgrade failure information to a server, the OTA upgrade failure information being used to indicate that a first component failed during the OTA upgrade process; receiving a processing strategy sent by the server, the processing strategy being used to instruct the vehicle to upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded, the multiple components including the first component, the upgrade order of the components to be upgraded being later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded being earlier than the upgrade order of the first component; according to the processing strategy, upgrading at least some of the components to be upgraded, and / or rolling back some of the components that have been successfully upgraded.

[0031] In the embodiment of the present application, during the OTA upgrade failure, the server configures the processing strategy, and the vehicle only needs to execute the processing strategy without additional calculations and judgments, thereby avoiding unnecessary energy consumption. Compared with a large number of calculations and decisions on the vehicle side, the processing strategy provided by the server can effectively reduce energy consumption and extend the battery life of the vehicle.

[0032] In combination with the fourth aspect, in certain implementations of the fourth aspect, when the first component is not a component in the set of strongly matched components, and the first component is not the last component to be upgraded among the multiple components, the processing strategy is used to instruct the vehicle to upgrade all of the components to be upgraded; according to the processing strategy, at least some of the components to be upgraded are upgraded, and / or some of the components that have been successfully upgraded are rolled back, including: according to the processing strategy, all of the components to be upgraded are upgraded

[0033] In combination with the fourth aspect, in certain implementations of the fourth aspect, when the first component is a component in the strong matching relationship component set, the processing strategy is used to instruct the vehicle to upgrade the components in the to-be-upgraded components that are not in the strong matching relationship component set, and to roll back the components in the successfully upgraded components that are in the strong matching relationship component set; upgrading at least some of the components to be upgraded and / or rolling back some of the successfully upgraded components according to the processing strategy includes: upgrading the components in the to-be-upgraded components that are not in the strong matching relationship component set, and rolling back the components in the successfully upgraded components that are in the strong matching relationship component set.

[0034] In a fifth aspect, a processing device is provided, comprising: an acquisition unit, used to acquire information on the upgrade order of multiple components and a set of strongly matching components during an OTA upgrade using the over-the-air download technology, wherein the multiple components include a first component; a processing unit, used to upgrade at least some of the components to be upgraded and / or roll back some of the components that have been successfully upgraded according to the upgrade order and the information on the set of strongly matching components when the upgrade of the first component fails, wherein the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded is earlier than the upgrade order of the first component.

[0035] In combination with the fifth aspect, in certain implementations of the fifth aspect, the first component is not a component in a set of strongly matching components; the processing unit is specifically used to upgrade all of the components to be upgraded according to the upgrade order when the upgrade of the first component fails and the first component is not the last component to be upgraded among the multiple components.

[0036] In combination with the fifth aspect, in certain implementations of the fifth aspect, the first component is a component in a set of strongly matching components; the processing unit is specifically used to upgrade the components that are not in the set of strongly matching components among the components to be upgraded according to the upgrade order when the upgrade of the first component fails and the successfully upgraded components include components in the set of strongly matching components, and to roll back the components that are in the set of strongly matching components among the successfully upgraded components.

[0037] In combination with the fifth aspect, in certain implementations of the fifth aspect, the set of strongly matching components is a set of driving-related components.

[0038] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is further used to prompt the user that a failure has occurred during the OTA upgrade process.

[0039] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is further configured not to delete the downloaded software package corresponding to the component that failed to upgrade.

[0040] In combination with the fifth aspect, in certain implementations of the fifth aspect, the processing unit is further used to prompt the user to restart the OTA upgrade process.

[0041] In combination with the fifth aspect, in some implementations of the fifth aspect, the processing unit is further used to roll back the first component.

[0042] In combination with the fifth aspect, in certain implementations of the fifth aspect, the device also includes: a transceiver unit; the transceiver unit is used to receive OTA upgrade information sent by the server, and the OTA upgrade information includes: the upgrade order of the multiple components and information on the set of strongly matching components.

[0043] In a sixth aspect, a processing device is provided, which includes: a transceiver unit; the transceiver unit is used to receive OTA upgrade information sent by a server, and the OTA upgrade information includes: the upgrade order of the multiple components and the information of the set of strongly matching components.

[0044] In the seventh aspect, a processing device is provided, which includes: a transceiver unit, used to receive OTA upgrade failure information sent by a carrier, and the OTA upgrade failure information is used to indicate that a first component failed during the OTA upgrade process; a processing unit, used to send a processing strategy to the carrier according to the upgrade order of multiple components and information of a set of strongly matching components, and the processing strategy is used to instruct the carrier to upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded, the multiple components include the first component, the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the successfully upgraded components is earlier than the upgrade order of the first component.

[0045] In combination with the seventh aspect, in certain implementations of the seventh aspect, when the first component is not a component in the strong matching relationship component set and the first component is not the last component to be upgraded among the multiple components, the processing strategy is used to instruct the vehicle to upgrade all of the components to be upgraded.

[0046] In combination with the seventh aspect, in certain implementations of the seventh aspect, when the first component is a component in the strong matching relationship component set, the processing strategy is used to instruct the vehicle to upgrade the components to be upgraded that are not in the strong matching relationship component set, and to roll back the components in the successfully upgraded components that are in the strong matching relationship component set.

[0047] In an eighth aspect, a processing device is provided, which includes: a transceiver unit, used to: send OTA upgrade failure information to a server, wherein the OTA upgrade failure information is used to indicate that a first component failed during the OTA upgrade process; receive a processing strategy sent by the server, wherein the processing strategy is used to instruct the vehicle to upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded, wherein the multiple components include the first component, the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded is earlier than the upgrade order of the first component; a processing unit, used to upgrade at least some of the components to be upgraded according to the processing strategy, and / or to roll back some of the components that have been successfully upgraded.

[0048] In combination with the eighth aspect, in certain implementations of the eighth aspect, when the first component is not a component in the strong matching relationship component set and the first component is not the last component to be upgraded among the multiple components, the processing strategy is used to instruct the vehicle to upgrade all the components to be upgraded; the processing unit is specifically used to upgrade all the components to be upgraded according to the processing strategy.

[0049] In combination with the eighth aspect, in certain implementations of the eighth aspect, when the first component is a component in the strong matching relationship component set, the processing strategy is used to instruct the vehicle to upgrade the components in the to-be-upgraded components that are not in the strong matching relationship component set, and to roll back the components in the successfully upgraded components that are in the strong matching relationship component set; the processing unit is specifically used to upgrade the components in the to-be-upgraded components that are not in the strong matching relationship component set, and to roll back the components in the successfully upgraded components that are in the strong matching relationship component set.

[0050] In a ninth aspect, a processing device is provided, comprising: at least one processor and a memory, wherein the at least one processor is coupled to the memory and is used to read and execute instructions in the memory, so that the device implements the method in any one of the implementation modes of the first to fourth aspects above.

[0051] In a tenth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a program code, and when the computer program code runs on a computer, the computer executes a method in any one of the implementation modes of the first to fourth aspects above.

[0052] In an eleventh aspect, a chip is provided, the chip comprising a circuit, the circuit being used to execute the method in any one of the implementations of the first to fourth aspects above.

[0053] In a twelfth aspect, a computer program product is provided, which includes a computer program. When the computer program is run, the computer executes the method in any one of the implementation modes of the first to fourth aspects above.

[0054] In a thirteenth aspect, a vehicle is provided, comprising: a processing device in any one of the implementations of the fifth or eighth aspects above.

[0055] In a fourteenth aspect, a server is provided, comprising: a processing device in any one of the implementation methods of the sixth or seventh aspect above. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] Figure 1is a functional schematic diagram of a vehicle provided in an embodiment of the present application;

[0057] Figure 2 This is the system architecture to which the processing method provided in the embodiment of the present application is applicable;

[0058] Figure 3 is a schematic flow chart of a processing method provided in an embodiment of the present application;

[0059] Figure 4 is a schematic flow chart of another processing method provided in an embodiment of the present application;

[0060] Figure 5 This is a schematic diagram of a component upgrade sequence configuration provided by an embodiment of the present application;

[0061] Figure 6 This is another schematic diagram of component upgrade sequence configuration provided by an embodiment of the present application;

[0062] Figure 7 It is a schematic diagram of a scenario to which the processing method provided in the embodiment of the present application is applicable;

[0063] Figure 8 It is a processing device provided in an embodiment of the present application;

[0064] Fig. 9 It is another processing device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0065] In the description of the embodiments of the present application, unless otherwise specified, " / " means or, for example, A / B can mean A or B; "and / or" in this article is only a description of the association relationship of associated objects, indicating that there can be three relationships, for example, A and / or B can mean: A exists alone, A and B exist at the same time, and B exists alone. In the present application, "at least one" means one or more, and "multiple" means two or more. "At least one of the following items" or similar expressions refers to any combination of these items, including any combination of single items or plural items. For example, at least one of a, b, or c can mean: a, b, c, ab, ac, bc, or abc, where a, b, c can be single or multiple.

[0066] The prefixes such as "first" and "second" used in the embodiments of the present application are only used to distinguish different description objects, and have no limiting effect on the position, order, priority, quantity or content of the described objects. The use of prefixes such as ordinal numbers used to distinguish description objects in the embodiments of the present application does not constitute a limitation on the described objects. For the statement of the described objects, please refer to the description in the context of the claims or embodiments, and the use of such prefixes should not constitute an unnecessary limitation.

[0067] The technical solutions in the embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0068] Figure 1 is a functional schematic diagram of a vehicle 100 provided in an embodiment of the present application. It should be understood that Figure 1 And the related descriptions are merely examples and do not limit the vehicles in the embodiments of the present application.

[0069] The vehicle 100 may include a variety of subsystems, such as a sensing system 120 and a computing platform 130. Optionally, the vehicle 100 may include more or fewer subsystems, and each subsystem may include one or more components. In addition, each subsystem and component of the vehicle 100 may be interconnected by wire or wirelessly.

[0070] The perception system 120 may include several sensors for sensing information about the environment around the vehicle 100. For example, the perception system 120 may include a positioning system, which may be a global positioning system (GPS), a Beidou system, or other positioning systems. The perception system 120 may include one or more of an inertial measurement unit (IMU), a laser radar, a millimeter wave radar, an ultrasonic radar, and a camera.

[0071] Some or all functions of the vehicle 100 may be controlled by a computing platform 130. The computing platform 130 may include processors 131 to 13n (n is a positive integer). The processor is a circuit with signal processing capability. In one implementation, the processor may be a circuit with instruction reading and execution capability, such as a central processing unit (CPU), a microprocessor, a graphics processing unit (GPU) (which may be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, the processor may implement certain functions through the logical relationship of a hardware circuit, and the logical relationship of the hardware circuit may be fixed or reconfigurable, such as a hardware circuit implemented by an application-specific integrated circuit (ASIC) or a programmable logic device (PLD), such as an FPGA. In a reconfigurable hardware circuit, the process of the processor loading a configuration document to implement the hardware circuit configuration may be understood as the process of the processor loading instructions to implement the functions of some or all of the above units. In addition, the processor may also be a hardware circuit designed for artificial intelligence, which may be understood as an ASIC, such as a neural network processing unit (NPU), a tensor processing unit (TPU), a deep learning processing unit (DPU), etc. In addition, the computing platform 130 may also include a memory, the memory is used to store instructions, and some or all of the processors 131 to 13n may call the instructions in the memory to implement corresponding functions.

[0072] The computing platform 130 can control the functions of the vehicle 100 based on input received from various subsystems (e.g., the perception system 120). For example, the computing platform 130 can control the vehicle to perform an OTA upgrade based on input received from the perception system 120. In some embodiments, the computing platform 130 can be used to provide control over many aspects of the vehicle 100 and its subsystems.

[0073] The display device 140 can be used to display the OTA upgrade progress. When a failure occurs during the OTA upgrade process, the display device can be used to remind the user.

[0074] Optionally, the above components are only examples. In actual applications, the components in the above modules may be added or deleted according to actual needs. Figure 1 It should not be understood as limiting the embodiments of the present application.

[0075] The vehicle 100 in the present application may include: road vehicles, water vehicles, air vehicles, industrial equipment, agricultural equipment, or entertainment equipment, etc. For example, the vehicle 100 may be a vehicle, which is a vehicle in a broad sense, and may be a vehicle (such as a commercial vehicle, a passenger car, a motorcycle, a flying car, a train, etc.), an industrial vehicle (such as a forklift, a trailer, a tractor, etc.), an engineering vehicle (such as an excavator, a bulldozer, a crane, etc.), agricultural equipment (such as a lawn mower, a harvester, etc.), amusement equipment, a toy vehicle, etc. The embodiment of the present application does not specifically limit the type of vehicle. For another example, the vehicle 100 may be a vehicle such as an airplane or a ship.

[0076] The following takes the vehicle 100 as an example to illustrate the technical problems to be solved by the present application and the technical solutions adopted.

[0077] As smart cars are widely used in daily life, users expect smart cars and related devices to bring a more comfortable smart experience. In this context, OTA has gradually become an indispensable basic function of smart cars. Whole vehicle OTA can refer to pushing software packages from the cloud to the vehicle side and completing software installation and / or updates on the vehicle side. Through over-the-air download technology, new functions can be added to the vehicle, or existing functions of the vehicle can be optimized, greatly enriching the user's smart experience.

[0078] Since each smart car may include dozens or even hundreds of electronic control units (ECUs), some ECUs may fail to upgrade during the OTA upgrade process. When some ECUs fail to upgrade, the current processing strategy is that the vehicle can trigger a rollback of the entire vehicle, that is, if any component fails, the vehicle will flash the successfully upgraded components back to the previous version. However, with this processing method, the rollback process may have the risk of failure, resulting in a decrease in the upgrade success rate of the OTA upgrade task; on the other hand, the vehicle may perform unnecessary rollback operations, resulting in a long overall time-consuming and complex OTA upgrade.

[0079] The embodiments of the present application provide a processing method, an apparatus, and a vehicle that can improve the efficiency of OTA upgrades and reduce unnecessary rollback operations.

[0080] Figure 2 This is the system architecture to which the processing method provided in the embodiment of the present application is applicable.

[0081] like Figure 2As shown, the architecture 200 may include: a server, a mobile phone, an OTA master control deployment module, and a controller area network (CAN) gateway.

[0082] Among them, the server may include: a cloud configuration module, which may support at least one of the following: configuration of the upgrade sequence of all ECUs of the whole vehicle, configuration of the rollback or precise rollback strategy of the whole vehicle, configuration of one or more sets of strongly matched components, and communication between the server and the vehicle's OTA main control module through a mobile communication network (e.g., 2G / 3G / 4G / 5G). The mobile phone and the server may also communicate through a mobile communication network. For example, the server may obtain the progress and upgrade result information of the OTA upgrade from the OTA main control module, and push the above information to the mobile phone through the mobile communication network. The user may use the mobile phone to check the progress and results of the vehicle OTA upgrade at any time.

[0083] The OTA master control deployment module may include: an OTA master control module, a component installation management module and a CAN / unified diagnostic service (UDS) module.

[0084] Among them, the OTA main control module may include: a rollback policy configuration module and a main process control scheduling module. The rollback policy configuration module can communicate with the OTA server to request downloading and saving the rollback policy configuration; and the rollback policy configuration module can interact with the main process control scheduling module to provide rollback policy access. The main process control scheduling module can schedule the OTA process according to the upgrade component list and upgrade sequence configuration issued by the server; the main process control scheduling module can also be responsible for the implementation of precise rollback rules; when the OTA upgrade fails, the main process control scheduling module can request the rollback policy configuration module to query the strong matching relationship component set and perform subsequent upgrade actions according to the precise rollback rules. For example, if the main process control scheduling module determines that the component that failed to upgrade is in the first component set, the main process control scheduling module can skip the remaining unupgraded components in the set and roll back the successfully upgraded components in the set. On the contrary, the main process control scheduling module can continue to control the component upgrade according to the OTA upgrade order. The component installation management module can be used to coordinate the upgrade of multiple components on the vehicle and analyze the abnormal impact of component upgrades. The CAN / unified diagnostic service (UDS) communication module can be used to communicate with the CAN gateway. The CAN gateway can be a core component in the vehicle's electronic and electrical architecture. It can serve as an interactive hub for vehicle data. The OTA master deployment module can control related components (for example, ECU) through the CAN gateway. 1 To ECU n ) upgrade.

[0085] Optionally, the first component set may be a strong matching component relationship set.

[0086] In an embodiment of the present application, the server can be deployed on an electronic device with communication and storage functions, or it can be deployed on a virtual machine in the cloud.

[0087] Figure 3 It is a schematic flow chart of a processing method provided in an embodiment of the present application. Method 300 may include steps S301 to S304.

[0088] S301, the server determines the upgrade order of multiple components and the information of the set of strongly matching components during the OTA upgrade process.

[0089] S302, the server sends OTA upgrade information to the vehicle.

[0090] Among them, the OTA upgrade information may include the upgrade order of multiple components and the information of a set of components with strong matching relationships.

[0091] Optionally, the strong matching relationship component set may include: one or more of: a minimum human-driven component set, a key unlocking and locking component set, a self-driving component set, and a cockpit domain component set. Among them, the minimum human-driven component set can be understood as a minimum range of component sets required for a driver to drive a vehicle; the self-driving component set can be understood as a component set required for a vehicle to perform automatic driving.

[0092] Optionally, the strong matching relationship component set is a driving-related component set.

[0093] Optionally, the OTA upgrade information may also include: status information of the precise rollback switch, that is, when the precise rollback switch is turned on, the vehicle can execute the precise rollback strategy when the component upgrade fails; when the precise rollback switch is turned off, the vehicle can execute the whole vehicle rollback strategy when the component upgrade fails.

[0094] S303, the vehicle obtains the upgrade sequence of multiple components and the information of the set of components with strong matching relationships during the OTA upgrade process.

[0095] wherein the plurality of components include a first component;

[0096] Optionally, step S301 and step S302 may not be performed in method 300. In this case, the vehicle may be configured with the upgrade sequence of multiple components and the information of the set of components with strong matching relationships.

[0097] S304, when the upgrade of the first component fails, the carrier upgrades at least some of the components to be upgraded according to the upgrade sequence and the information of the set of components with strong matching relationships, and / or rolls back some of the components that have been successfully upgraded.

[0098] The upgrade sequence of the components to be upgraded is later than the upgrade sequence of the first components, and the upgrade sequence of the components that have been successfully upgraded is earlier than the upgrade sequence of the first components.

[0099] Optionally, before step S304, method 300 further includes: rolling back the first component.

[0100] Alternatively, if in step S302, the precise rollback switch in the OTA upgrade information is turned off, then in step S304, the vehicle may stop upgrading the components to be upgraded, and / or roll back all components among the components that have been successfully upgraded.

[0101] In an embodiment of the present application, during the OTA upgrade process, if it is found that the upgrade of the first component has failed, the carrier can upgrade at least some of the components to be upgraded according to the upgrade order of the components and the information of the set of components with strong matching relationships, and / or roll back some of the upgraded components. In this way, when the upgrade of the first component fails, the carrier does not need to skip the upgrade process of the component to be upgraded, nor does it need to refresh all the components that have been successfully upgraded back to the version before the upgrade. This processing method can improve the efficiency of OTA upgrades and reduce unnecessary rollback operations.

[0102] In step S304, the vehicle may select different component upgrade and / or component rollback strategies by determining whether the first component belongs to a set of components with a strong matching relationship.

[0103] In one embodiment, when the vehicle determines that the first component is not a component in the set of components with a strong matching relationship, and when the upgrade of the first component fails and the first component is not the last component to be upgraded among multiple components, the vehicle can upgrade all components to be upgraded according to the upgrade sequence. In this way, when the upgrade of the first component fails, the vehicle does not need to skip or interrupt the upgrade process of the component to be upgraded, ensuring that the OTA upgrade process will not be affected by the failure of a single component.

[0104] In one embodiment, when the vehicle determines that the first component is a component in a set of strongly matching components, and the upgrade of the first component fails and the successfully upgraded components include components in the set of strongly matching components, the vehicle can upgrade the components that are not in the set of strongly matching components among the components to be upgraded according to the upgrade order, and roll back the components that are in the set of strongly matching components among the successfully upgraded components. This targeted rollback strategy can make the rollback operation more precise and reduce the scope of the rollback, thereby saving time and resources for OTA upgrades. In addition, the vehicle can continue to upgrade the components that are not in the set of strongly matching components among the components to be upgraded, instead of skipping the upgrade process of the components to be upgraded, which can improve the efficiency of OTA upgrades.

[0105] After step S304, the carrier may also prompt the user that a failure occurred during the OTA upgrade process.

[0106] Optionally, the vehicle may issue an error prompt message on the display screen to indicate a failure in the OTA upgrade process, or the vehicle may prompt the user of an upgrade failure by lighting up a corresponding abnormal status indicator light on the dashboard, or the vehicle may issue a sound alarm or prompt tone to indicate a failure in the OTA upgrade process.

[0107] Optionally, the carrier may also generate detailed reports or log records that may include specific information about the upgrade failure, thereby helping users or technical support personnel to further analyze and resolve the OTA upgrade failure.

[0108] After step S304, the carrier may not delete the downloaded software packages corresponding to the failed upgrade components. In this way, after the user restarts the OTA upgrade process, the time and resources for OTA upgrade can be saved.

[0109] After step S304, the carrier may also prompt the user to restart the OTA upgrade process.

[0110] In one embodiment, in step S302, the OTA upgrade information sent by the server to the vehicle may only include the upgrade sequence of multiple components. In this case, step S303 may be replaced by: the vehicle obtains the upgrade sequence of multiple components and upgrades them according to the upgrade sequence of multiple components. Step S304 may be replaced by: when the vehicle finds that the upgrade of the first component fails, the vehicle may send OTA upgrade failure information to the server, and the OTA upgrade failure information is used to indicate that the first component has failed.

[0111] After receiving the OTA upgrade failure information, the server can send a processing strategy to the vehicle based on the upgrade order of multiple components and the information of the set of components with strong matching relationships. The processing strategy is used to instruct the vehicle to upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded. After receiving the processing strategy, the vehicle can upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded. In this way, in the process of OTA upgrade failure, the server configures the processing strategy, and the vehicle only needs to execute the processing strategy without additional calculations and judgments, thereby avoiding unnecessary energy consumption. Compared with performing a large number of calculations and decisions on the vehicle side, the processing strategy provided by the server can effectively reduce energy consumption and extend the battery life of the vehicle.

[0112] Optionally, when the first component is not a component in a set of components with a strong matching relationship, and the first component is not the last component to be upgraded among multiple components, the above processing strategy can be used to instruct the vehicle to upgrade all components to be upgraded.

[0113] Optionally, when the first component is a component in a strong matching component set, the above processing strategy can be used to instruct the carrier to upgrade the components to be upgraded that are not in the strong matching component set, and to roll back the components in the strong matching component set that have been successfully upgraded.

[0114] It should be understood that in the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between the various embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form new embodiments according to their internal logical relationships.

[0115] Figure 4 It is a schematic flow chart of another processing method provided by an embodiment of the present application. Method 400 may be a specific description of steps S301 to S304 in method 300. The method 400 is introduced below by taking a vehicle as an example.

[0116] S401, cloud configuration of all ECU lists of the vehicle.

[0117] Here, the cloud may refer to the server in architecture 200 and method 300 .

[0118] For example, the list of all ECUs in the vehicle may include: 1 To ECU n , where n is a positive integer.

[0119] S402, the cloud configures the upgrade sequence of all ECUs in the vehicle.

[0120] Optionally, the cloud can configure the serial upgrade order of ECUs, for example, the ECU list includes ECU 1 To ECU 10 , the cloud can follow Figure 4 The upgrade order of these 10 ECUs is configured as shown in (a).

[0121] Optionally, the cloud can configure the parallel upgrade order of ECUs, for example, the ECU list includes ECU 1 To ECU 10 , the cloud can follow Figure 4 The upgrade order of these 10 ECUs is configured as shown in (b) in the figure, that is, ECU 1 and ECU 4 ,ECU 2 and ECU 5 ,ECU 3 and ECU 7 Upgrades can be performed simultaneously.

[0122] S403, cloud-based configuration of a collection of components with strong supporting relationships for the entire vehicle.

[0123] Exemplarily, one or more strong matching relationship component sets can be defined from the ECU list, for example, a minimum human-driven component set, a key unlocking and locking component set, a self-driving component set, and a cockpit domain component set, etc. Components that meet the above set classifications can be classified into one or more of the above sets, and components that do not meet the above set classifications can be classified into weak matching relationship component sets.

[0124] For example, the ECU list includes ECU 1 To ECU 10 , where ECU 1 To ECU 3 It is the unlocking and locking related components, ECU 4 and ECU 5 It is a cockpit domain related component, ECU 7 To ECU 10 It is a component that does not meet any of the strong matching relationship component set classifications. Therefore, the ECU 1 To ECU 3 Divide into key unlock and lock component set, and ECU 4 and ECU 5 Divide into cockpit domain component collection, and divide component ECU 7 To ECU 10 Classify into weak matching relationship component combination.

[0125] Optionally, when a component spans multiple sets of components with strong matching relationships, the multiple sets of components with strong matching relationships may be merged into one set.

[0126] For example, the ECU list includes ECU 1 To ECU 5 , where ECU 1 To ECU 3 It is the unlocking and locking related components, ECU 3 To ECU 5 It is a cockpit domain related component, ECU 3 It belongs to both the key unlocking and locking component set and the cockpit domain component set. Therefore, the key unlocking and locking component set and the cockpit domain component set can be merged into one set.

[0127] For example, when defining a set of strongly matching components from the ECU list, it can be classified from several perspectives such as driving safety, whether the vehicle can be used normally, and whether the basic functions of the vehicle are normal. The specific classification examples can be shown in Table 1 below.

[0128] Table 1

[0129]

[0130]

[0131] S404, creating a software version in the cloud.

[0132] For example, the ECU list includes ECU 1 ,ECU 2 ,ECU 3 ,ECU 6 ,ECU 7 ,ECU 8 ,ECU 10 , the new version of the vehicle upgrade is V2.0, then the version numbers corresponding to each component can be shown in Table 2.

[0133] Table 2

[0134] part Version Number ECU1 V2.0 ECU2 V2.0 ECU3 V2.0 ECU6 V2.0 ECU7 V2.0 ECU8 V2.0 ECU10 V2.0

[0135] S405, the cloud configures the precise rollback strategy for this task.

[0136] Optionally, the cloud can form a final precise rollback strategy according to the set of strongly matching components divided in step S403.

[0137] Optionally, the cloud can adjust the set of strongly matching components based on the characteristics of this OTA upgrade task, and form a final precise rollback strategy based on the adjusted set of strongly matching components.

[0138] It should be understood that the above-mentioned precise rollback strategy may refer to a strategy of upgrading at least some of the components to be upgraded and / or rolling back some of the components that have been successfully upgraded in method 300 .

[0139] S406, the cloud pushes the relevant information of this task to the vehicle.

[0140] Optionally, the relevant information of this task may include at least one of the following: the upgrade sequence of the entire vehicle, a set of strongly matching components, a precise rollback switch, and new version information of the entire vehicle to be upgraded (for example, the information shown in Table 2).

[0141] The precise rollback switch can be indicated by the state information of the precise rollback switch in method 300, that is, when the precise rollback switch is turned on, the vehicle can execute the precise rollback strategy when the component upgrade fails, and when the precise rollback switch is turned off, the vehicle can execute the whole vehicle rollback strategy when the component upgrade fails. In addition, the specific form of the precise rollback switch can be adjusted by the operator according to actual needs.

[0142] S407, the vehicle side receives the relevant information of this upgrade task.

[0143] Exemplarily, when the relevant information of this task includes: a set of components with strong matching relationships, the vehicle may save the set of components with strong matching relationships in a rollback strategy configuration module.

[0144] S408, the vehicle side downloads the upgrade software package.

[0145] S409, the vehicle side starts to upgrade ECUs in sequence (starting from the first ECU in the list).

[0146] Specifically, when the vehicle starts to upgrade the ECU, the OTA main control module inside the vehicle can take a subset of the upgrade order of all ECUs in the vehicle according to the upgrade components sent from the cloud, and start upgrading the components one by one according to the new upgrade order subset.

[0147] For example, when a component upgrade fails, the OTA main control module can request the rollback strategy configuration module to query the set of strongly matched components and perform subsequent upgrade actions according to the precise rollback rules. That is, if the component that failed to upgrade belongs to the set of strongly matched components, the upgrade process of the remaining unupgraded components in the set can be skipped, and the components that have been successfully upgraded before can be rolled back. If the component that failed to upgrade belongs to the set of weakly matched components, the upgrade can continue in the upgrade order of the components.

[0148] For example, Figure 6As shown, the solid-line frame is the component in the strong matching relationship component set, and the component in the dotted-line frame can be the component in the weak matching relationship component set.

[0149] Scenario 1: If the ECU is being upgraded via OTA 1 Failure occurs due to ECU 1 ,ECU 2 ,ECU 3 and ECU 6 If they belong to the same set of components with strong matching relationship, then ECU can be skipped at this time 2 ,ECU 3 and ECU 6 The upgrade is in accordance with ECU 7 ,ECU 8 ,ECU 9 Upgrade components in order and roll back ECU 1 .

[0150] Scenario 2: If the ECU is being upgraded via OTA 3 If a failure occurs, you can continue to follow the ECU 7 ,ECU 8 ,ECU 9 Upgrade components in order, skip ECU 6 Upgrade, and follow the ECU 3 ,ECU 2 ,ECU 1 Roll back in order.

[0151] Scenario 3: If the ECU is being upgraded via OTA 7 Failure occurs due to ECU 7 ,ECU 8 , and ECU 9 If the components belong to the weak matching relationship set, you can continue to follow the ECU 8 ,ECU 9 Upgrade components in order, and finally upgrade the ECU 6 , and roll back the ECU 7 .

[0152] Scenario 4: If the ECU is being upgraded via OTA 6 If a failure occurs, you can follow the ECU 6 ,ECU 3 ,ECU 2 ,ECU 1 Roll back in order.

[0153] In the above four scenarios, if some components have not been upgraded to the latest version, the reported results of this upgrade task are all failures. However, the software packages that have been downloaded by the vehicle are not deleted and are still stored on the vehicle. In addition, the vehicle can remind the user that the upgrade task has failed and remind the user to start the upgrade process again. When the vehicle detects that the user has started the upgrade process again, the vehicle only needs to re-upgrade the components that failed to upgrade last time.

[0154] For the above four scenarios, the order of re-upgrading components is as follows:

[0155] Scenario 1: Follow the ECUs 1 ,ECU 2 ,ECU 3 ,ECU 6 order to upgrade.

[0156] Scenario 2: Follow the ECUs 1 ,ECU 2 ,ECU 3 ,ECU 6 order to upgrade.

[0157] Scenario 3: Only ECU upgrade required 7 .

[0158] Scenario 4: Follow the ECUs 1 ,ECU 2 ,ECU 3 ,ECU 6 order to upgrade.

[0159] S410, the vehicle side determines whether the current ECU upgrade is successful.

[0160] Among them, if the vehicle side determines that the OTA upgrade is successful, step S411 can be executed, otherwise, the vehicle side can execute step S413.

[0161] S411, the vehicle side determines whether all ECU upgrades are completed.

[0162] Among them, if the vehicle side determines that the OTA upgrade has been completed, step S412 can be executed, otherwise, the vehicle side can re-execute step S409.

[0163] S412, the upgrade is successful, and the vehicle prompts the user to experience the new version.

[0164] Optionally, the vehicle can remind the user that the OTA upgrade is successful by making a prompt sound, displaying a prompt message on the display screen, or by voice broadcast, and invite the user to experience the new version.

[0165] S413, the vehicle side determines whether to execute the precise rollback process.

[0166] If the vehicle determines that a precise rollback process needs to be executed, step S414 can be executed; otherwise, step S417 can be executed.

[0167] S414, the vehicle side determines the type of ECU that failed to upgrade.

[0168] If the vehicle determines that the component that fails to be upgraded is a component in the set of components with a strong matching relationship, the vehicle may execute step S415; otherwise, the vehicle may execute step S416.

[0169] S415, the vehicle side skips the components in the set that have not been upgraded.

[0170] S416, the vehicle side determines whether all ECU upgrades are completed.

[0171] Among them, if the vehicle determines that the OTA upgrade is completed, step S418 can be executed, otherwise, the vehicle can re-execute step S409.

[0172] S417: The vehicle side stops upgrading and executes the vehicle rollback process.

[0173] S418: During the process of executing the vehicle rollback, if a failure occurs, the vehicle side does not delete the upgrade package and reminds the user to perform the OTA upgrade again.

[0174] In an embodiment of the present application, when an OTA upgrade fails, the vehicle side can roll back some components according to the precise rollback rules configured in the cloud. In this way, there is no need to flash all successfully upgraded components back to the versions before the upgrade, which can improve the efficiency of the OTA upgrade and reduce unnecessary rollback operations.

[0175] Figure 7 It is a schematic diagram of a scenario to which the processing method provided in the embodiment of the present application is applicable. Method 300 and method 400 can be applicable to this scenario.

[0176] like Figure 7As shown in (a) of FIG. 1 , the central control screen of the vehicle displays: interface 700 and function bar 710. The interface 700 includes user account login information 701 (the current vehicle has not logged in to the account), Bluetooth function icon 702, Wi-Fi function icon 703, cellular network signal icon 704, in-vehicle map application search box 705, a card 706 that switches to display all applications installed in the vehicle, a card 707 that switches to display in-vehicle music applications, a display card 708 for the remaining battery power and remaining mileage of the vehicle, and a display card 709 for the vehicle's 370-degree (°) surround view function. Among them, the in-vehicle map application search box 705 may include a user-set home control 7051 and a go to company control 7052. The function bar 710 includes an icon 711 for switching to display the central control large screen desktop, a vehicle internal circulation icon 712, a driver's seat heating function icon 713, a driver's area air-conditioning temperature display icon 714, a passenger area air-conditioning temperature display icon 715, a passenger seat heating function icon 716 and a volume setting icon 717.

[0177] like Figure 7 The graphical user interface (GUI) shown in (b) of FIG. 7 includes a prompt box 718 for prompting the user whether the vehicle has met the OTA upgrade conditions and whether to enter the OTA upgrade process. When the vehicle detects that the driver clicks the entry control in the prompt box 718, the vehicle can perform an OTA upgrade. During the OTA upgrade process, if the vehicle detects that a component has failed, the vehicle can handle it according to the precise rollback rules and prompt the user that a failure has occurred during the OTA upgrade process.

[0178] For example, if the vehicle determines that the failed component belongs to a set of strongly matched components, the vehicle can skip the remaining unupgraded components in the set and roll back the upgraded components in the set. If the vehicle determines that the failed component does not belong to a set of strongly matched components, the vehicle can continue to upgrade in the upgrade order and roll back the failed component. During the rollback process, the vehicle's central control screen can display the following information: Figure 7 The GUI shown in (c) of FIG. 1 includes: prompt text 719 and voice assistant 720. The voice assistant 720 can prompt the user through voice and text: "The OTA upgrade process has failed, the vehicle is being rolled back, and the downloaded software package will continue to be retained."

[0179] After the rollback operation is completed, the vehicle's central control screen can display the following Figure 8The GUI shown in (d) in FIG. 1 includes a prompt box 721 for prompting the user that the rollback operation of the vehicle has been completed and whether to restart the OTA upgrade process. When the vehicle detects that the driver clicks the start control of the prompt box 721, the vehicle only needs to re-upgrade the components that failed to be upgraded last time.

[0180] In an embodiment of the present application, during the OTA upgrade process, if a component fails to upgrade, the vehicle does not need to skip the upgrade process of the component to be upgraded, nor does it need to flash all successfully upgraded components back to the version before the upgrade. This processing method can improve the efficiency of OTA upgrades and reduce unnecessary rollback operations.

[0181] It should be understood that Figure 7 (a) to Figure 7 The application scenario shown in (d) is merely an illustrative description and should not be construed as a limitation on the present application. The content of the prompts provided by the vehicle to the user may be determined based on the actual application of the processing method.

[0182] It should also be understood that in the various embodiments of the present application, unless otherwise specified or there is a logical conflict, the terms and / or descriptions between the various embodiments are consistent and can be referenced to each other, and the technical features in different embodiments can be combined to form new embodiments according to their internal logical relationships.

[0183] The embodiment of the present application also provides a device for implementing any of the above methods, and the device includes a unit for implementing each step performed by the vehicle 100 in any of the above methods.

[0184] Figure 8 8 is a schematic diagram of a processing device 800 provided in an embodiment of the present application. The device 800 may include an acquisition unit 810, a transceiver unit 820, and a processing unit 830. The acquisition unit 810 is used to acquire instructions and / or data, and the transceiver unit 820 is used to send and receive instructions and / or data. The acquisition unit 810 and the transceiver unit 820 may also be referred to as a communication interface or a communication unit. The processing unit 830 is used to perform data processing so that the device 800 implements the aforementioned processing method.

[0185] Optionally, the device 800 further includes a storage unit configured to implement a corresponding storage function and store corresponding instructions and / or data.

[0186] As a design, the device 800 can be used to execute the actions performed by the vehicles in the above embodiments.

[0187] The device 800 may include: an acquisition unit 810, used to obtain the upgrade order of multiple components and the information of a set of strongly matching components during the OTA upgrade process of the over-the-air download technology, the multiple components including the first component; a processing unit 830, used to upgrade at least some of the components to be upgraded and / or roll back some of the successfully upgraded components according to the upgrade order and the information of the set of strongly matching components when the upgrade of the first component fails, the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the successfully upgraded components is earlier than the upgrade order of the first component.

[0188] In one possible implementation, the first component is not a component in a set of strongly matching components; the processing unit 830 is specifically used to upgrade all components to be upgraded according to the upgrade order when the upgrade of the first component fails and the first component is not the last component to be upgraded among multiple components.

[0189] In one possible implementation, the first component is a component in a set of strongly matching components; the processing unit 830 is specifically used to upgrade the components that are not in the set of strongly matching components among the components to be upgraded according to the upgrade order when the upgrade of the first component fails and the components that have been successfully upgraded include components in the set of strongly matching components, and to roll back the components that are in the set of strongly matching components among the components that have been successfully upgraded.

[0190] In a possible implementation, the strong matching relationship component set is a driving-related component set.

[0191] In a possible implementation, the processing unit 830 is further configured to prompt the user that a failure has occurred during the OTA upgrade process.

[0192] In a possible implementation, the processing unit 830 is further configured not to delete the downloaded software package corresponding to the component that failed to upgrade.

[0193] In a possible implementation, the processing unit 830 is further configured to prompt the user to restart the OTA upgrade process.

[0194] In a possible implementation, the processing unit 830 is further configured to roll back the first component.

[0195] In one possible implementation, the device also includes: a transceiver unit 820; the transceiver unit 820 is used to receive OTA upgrade information sent by the server, and the OTA upgrade information includes: the upgrade order of multiple components and information on a set of strongly matching components.

[0196] The device 800 may include: a transceiver unit 820, used to: send OTA upgrade failure information to a server, the OTA upgrade failure information is used to indicate that a first component failed during the OTA upgrade process; receive a processing strategy sent by the server, the processing strategy is used to instruct the carrier to upgrade at least some of the components to be upgraded, and / or, to roll back some of the components that have been successfully upgraded, the multiple components include a first component, the upgrade order of the component to be upgraded is later than the upgrade order of the first component, and the upgrade order of the successfully upgraded component is earlier than the upgrade order of the first component; a processing unit 830, used to upgrade at least some of the components to be upgraded according to the processing strategy, and / or, to roll back some of the components that have been successfully upgraded.

[0197] In one possible implementation, when the first component is not a component in a set of strongly matching components and the first component is not the last component to be upgraded among multiple components, the processing strategy is used to instruct the vehicle to upgrade all components to be upgraded; the processing unit 830 is specifically used to upgrade all components to be upgraded according to the processing strategy.

[0198] In one possible implementation, when the first component is a component in a set of strongly matching components, the processing strategy is used to instruct the vehicle to upgrade the components that are not in the set of strongly matching components among the components to be upgraded, and to roll back the components that are in the set of strongly matching components among the components that have been successfully upgraded; the processing unit 830 is specifically used to upgrade the components that are not in the set of strongly matching components among the components to be upgraded, and to roll back the components that are in the set of strongly matching components among the components that have been successfully upgraded.

[0199] As a design, the device 800 can be used to execute the actions performed by the server in the above embodiments.

[0200] The device 800 includes: a transceiver unit 820; the transceiver unit 820 is used to receive OTA upgrade information sent by a server, and the OTA upgrade information includes: an upgrade sequence of multiple components and information on a set of components with strong matching relationships.

[0201] The device 800 includes: a transceiver unit 820, which is used to receive OTA upgrade failure information sent by a carrier, and the OTA upgrade failure information is used to indicate that a first component fails during the OTA upgrade process; a processing unit 830, which is used to send a processing strategy to the carrier according to the upgrade order of multiple components and information of a set of strongly matching components, and the processing strategy is used to instruct the carrier to upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded, the multiple components include a first component, the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded is earlier than the upgrade order of the first component.

[0202] In a possible implementation, when the first component is not a component in a set of strongly matched components and the first component is not the last component to be upgraded among multiple components, the processing strategy is used to instruct the vehicle to upgrade all components to be upgraded.

[0203] In one possible implementation, when the first component is a component in a strong matching component set, the processing strategy is used to instruct the vehicle to upgrade the components to be upgraded that are not in the strong matching component set, and to roll back the components in the strong matching component set that have been successfully upgraded.

[0204] Optionally, if the device 800 is located in the vehicle 100, the processing unit 830 may be Figure 1 The processor 131 is shown.

[0205] Fig. 9 is a schematic diagram of another processing device 900 provided in an embodiment of the present application, and the device 900 can be applied to Figure 1 In the vehicle 100.

[0206] The device 900 includes: a memory 910, a processor 920, and a communication interface 930. The memory 910, the processor 920, and the communication interface 930 are connected through an internal connection path, the memory 910 is used to store instructions, and the processor 920 is used to execute the instructions stored in the memory 910 to control the communication interface 930 to obtain information, or to enable the device 900 to implement the aforementioned processing method. Optionally, the memory 910 can be coupled to the processor 920 through an interface, or can be integrated with the processor 920.

[0207] It should be noted that the communication interface 930 uses a transceiver device such as, but not limited to, a transceiver. The communication interface 930 may also include an input / output interface.

[0208] The processor 920 stores one or more computer programs, which include instructions. When the instructions are executed by the processor 920, the processing device 900 executes the processing methods in the above embodiments.

[0209] In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor 920 or an instruction in the form of software. The method disclosed in conjunction with the embodiment of the present application can be directly embodied as a hardware processor for execution, or a combination of hardware and software modules in the processor for execution. The software module can be located in a mature storage medium in the art such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 910, and the processor 920 reads the information in the memory 910 and completes the steps of the above method in conjunction with its hardware. To avoid repetition, it is not described in detail here.

[0210] Optionally, Fig. 9 The communication interface 930 in the embodiment can realize Figure 8 The acquisition unit 810 or the transceiver unit 820, Fig. 9 The processor 920 in the embodiment can implement Figure 8 The processing unit 830 in.

[0211] Optionally, the device 800 or the device 900 may be a computing platform, and the computing platform may be a vehicle-mounted computing platform or a cloud computing platform.

[0212] Optionally, the device 800 or the device 900 may be located at Figure 1 In the vehicle 100.

[0213] Optionally, the device 800 or the device 900 may be Figure 1 A computing platform 130 in a vehicle.

[0214] The embodiment of the present application also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a program code, and when the computer program code is executed on a computer, the computer executes the above Figure 3 or Figure 4 Any of the methods in .

[0215] The present application also provides a computer program product, which includes a computer program. When the computer program is executed, the computer executes the above Figure 3 or Figure 4 Any method.

[0216] The present application also provides a chip, including: a circuit, the circuit is used to execute the above Figure 3 or Figure 4 Any of the methods in .

[0217] The present application also provides a vehicle, comprising: Figure 8 or Fig. 9 Any processing device.

[0218] The present application also provides a server, including Figure 8 or Fig. 9 Any processing device.

[0219] An embodiment of the present application also provides a processing system, including the aforementioned carrier and a server.

[0220] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0221] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0222] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0223] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0224] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0225] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in each embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk.

[0226] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A processing method, characterized in that: The method comprises: Acquire information on an upgrade order of multiple components and a set of components with strong matching relationships during an OTA upgrade of multiple components, wherein the multiple components include a first component; When the upgrade of the first component fails, at least some of the components to be upgraded are upgraded according to the upgrade order and the information of the set of strongly matching components, and / or some of the components that have been successfully upgraded are rolled back, the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded is earlier than the upgrade order of the first component.

2. The method according to claim 1, characterized in that The first component is not a component in the set of components with strong matching relationships, and when the first component fails to be upgraded, at least some of the components to be upgraded are upgraded according to the upgrade sequence and information of the set of components with strong matching relationships, and / or some of the components that have been successfully upgraded are rolled back, including: In the case that the first component fails to be upgraded and the first component is not the last component to be upgraded among the multiple components, all components among the components to be upgraded are upgraded according to the upgrade sequence.

3. The method according to claim 1, characterized in that The first component is a component in the set of components with strong matching relationships. When the first component fails to be upgraded, at least some of the components to be upgraded are upgraded according to the upgrade sequence and information of the set of components with strong matching relationships, and / or some of the components that have been successfully upgraded are rolled back, including: When the upgrade of the first component fails and the successfully upgraded components include components in the set of components with strong matching relationships, the components to be upgraded that are not in the set of components with strong matching relationships are upgraded according to the upgrade order, and the components in the successfully upgraded components that are in the set of components with strong matching relationships are rolled back.

4. The method according to any one of claims 1 to 3, characterized in that The strong matching relationship component set is a driving-related component set.

5. The method according to any one of claims 1 to 4, characterized in that: The method further includes prompting a user that a failure has occurred during the OTA upgrade process.

6. The method according to claim 5, characterized in that The method further includes: not deleting the downloaded software package corresponding to the component that failed to upgrade.

7. The method according to claim 5 or 6, characterized in that The method further comprises: The user is prompted to restart the OTA upgrade process.

8. The method according to any one of claims 1 to 7, characterized in that The method further comprises: The first component is rolled back.

9. The method according to any one of claims 1 to 8, characterized in that The acquisition of the upgrade sequence of multiple components and the information of the set of components with strong matching relationships during the OTA upgrade process of the over-the-air download technology includes: Receive OTA upgrade information sent by the server, wherein the OTA upgrade information includes: an upgrade sequence of the multiple components and information of the set of components with strong matching relationships.

10. A processing method, characterized in that: The method comprises: Determine the upgrade order of multiple components and the information of the set of strongly matched components during the OTA upgrade process; OTA upgrade information is sent to a vehicle, wherein the OTA upgrade information includes: an upgrade sequence of the plurality of components and information of the set of components with a strong matching relationship.

11. A processing method, characterized in that: The method comprises: Receiving OTA upgrade failure information sent by a carrier, wherein the OTA upgrade failure information is used to indicate that a first component fails during an OTA upgrade process; Based on the upgrade order of multiple components and information of a set of strongly matching components, a processing strategy is sent to the carrier, wherein the processing strategy is used to instruct the carrier to upgrade at least some of the components to be upgraded, and / or to roll back some of the components that have been successfully upgraded, the multiple components include the first component, the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded is earlier than the upgrade order of the first component.

12. The method according to claim 11, characterized in that When the first component is not a component in the strong matching component set and the first component is not the last component to be upgraded among the multiple components, the processing strategy is used to instruct the vehicle to upgrade all the components to be upgraded.

13. The method according to claim 11, characterized in that In the case where the first component is a component in the strong matching component set, the processing strategy is used to instruct the vehicle to upgrade the components to be upgraded that are not in the strong matching component set, and to roll back the components in the successfully upgraded components that are in the strong matching component set.

14. A processing device, characterized in that: The device comprises: An acquisition unit, configured to acquire information on an upgrade sequence of multiple components and a set of components with strong matching relationships during an OTA upgrade process of an over-the-air download technology, wherein the multiple components include a first component; A processing unit is used to upgrade at least some of the components to be upgraded and / or roll back some of the components that have been successfully upgraded when the upgrade of the first component fails, according to the upgrade order and information of the set of strongly matching components, and / or to roll back some of the components that have been successfully upgraded, wherein the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded is earlier than the upgrade order of the first component.

15. The device according to claim 14, characterized in that The first component is not a component in a strong matching relationship component set; The processing unit is specifically configured to upgrade all the components to be upgraded according to the upgrade sequence when the upgrade of the first component fails and the first component is not the last component to be upgraded among the multiple components.

16. The device according to claim 14, characterized in that The first component is a component in a strong matching relationship component set; The processing unit is specifically used to upgrade the components that are not in the set of strongly matching components among the components to be upgraded according to the upgrade order when the upgrade of the first component fails and the components that have been successfully upgraded include components in the set of strongly matching components, and to roll back the components that are in the set of strongly matching components among the components that have been successfully upgraded.

17. The device according to any one of claims 14 to 16, characterized in that The strong matching relationship component set is a driving-related component set.

18. The device according to any one of claims 14 to 17, characterized in that The processing unit is further used to prompt the user that a failure occurs during the OTA upgrade process.

19. The device according to claim 18, characterized in that The processing unit is further configured not to delete the downloaded software package corresponding to the component that failed to upgrade.

20. The device according to claim 18 or 19, characterized in that The processing unit is further used to prompt the user to restart the OTA upgrade process.

21. The device according to any one of claims 14 to 20, characterized in that The processing unit is further used to roll back the first component.

22. The device according to any one of claims 14 to 21, characterized in that The device also includes: a transceiver unit; The transceiver unit is used to receive OTA upgrade information sent by the server, and the OTA upgrade information includes: the upgrade sequence of the multiple components and the information of the set of components with strong matching relationship.

23. A processing device, characterized in that: The device comprises: A processing unit, used to determine the upgrade order of multiple components and information of a set of strongly matching components during an OTA upgrade process; The transceiver unit is used to send OTA upgrade information to the vehicle, wherein the OTA upgrade information includes: the upgrade sequence of the multiple components and the information of the set of components with strong matching relationship.

24. A processing device, characterized in that The device comprises: A transceiver unit, configured to receive OTA upgrade failure information sent by a vehicle, wherein the OTA upgrade failure information is used to indicate that a first component fails during an OTA upgrade process; A processing unit is used to send a processing strategy to the carrier according to the upgrade order of multiple components and information of a set of strongly matching components, wherein the processing strategy is used to instruct the carrier to upgrade at least some of the components to be upgraded and / or to roll back some of the components that have been successfully upgraded, wherein the multiple components include the first component, the upgrade order of the components to be upgraded is later than the upgrade order of the first component, and the upgrade order of the components that have been successfully upgraded is earlier than the upgrade order of the first component.

25. The device according to claim 24, characterized in that When the first component is not a component in the strong matching component set and the first component is not the last component to be upgraded among the multiple components, the processing strategy is used to instruct the vehicle to upgrade all the components to be upgraded.

26. The device according to claim 24, characterized in that In the case where the first component is a component in the strong matching component set, the processing strategy is used to instruct the vehicle to upgrade the components to be upgraded that are not in the strong matching component set, and to roll back the components in the successfully upgraded components that are in the strong matching component set.

27. A processing device, characterized in that include: A processor and a memory, wherein the processor is coupled to the memory and is configured to read and execute instructions in the memory to perform the method according to any one of claims 1 to 9.

28. A processing device, characterized in that include: A processor and a memory, wherein the processor is coupled to the memory and is configured to read and execute instructions in the memory to perform the method according to any one of claims 10 to 13.

29. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a program code, and when the computer program code is executed on a computer, the computer is caused to execute the method according to any one of claims 1 to 13.

30. A chip, characterized in that: include: A circuit for executing the method according to any one of claims 1 to 13.

31. A vehicle, characterized in that: include: A processing device as claimed in any one of claims 14 to 22.

32. A server, characterized in that: include: A processing device as claimed in any one of claims 23 to 26.

Images