Vehicle-mounted entertainment system upgrading method and system based on Flash CAN

Abstract

The invention belongs to the technical field of vehicle-mounted upgrading control, and particularly relates to a vehicle-mounted entertainment system upgrading method and system based on Flash CAN, the method comprises the steps of hardware preparation, firmware updating file obtaining and upgrading, the upgrading process comprises the steps that current vehicle-mounted entertainment system firmware is backed up, the downloaded firmware updating file is verified, the next step is continued if verification succeeds, and the next step is continued if verification succeeds; and if the verification fails, the firmware update file is downloaded again, a specified Flash storage area is erased, the upgrade management module requests and transmits a data packet of the firmware update file to the embedded control unit, and if the request or the transmission fails, the upgrade management module rolls back to an original system, and the steps of data receiving and verification, restarting and verification are carried out, and verifying whether the functions of the vehicle-mounted entertainment system are normal. According to the invention, the risk of upgrade failure is reduced, the upgrade efficiency is improved, the security of the system is enhanced, and the system abnormity caused by improper upgrade is effectively avoided.

Description

Technical Field

[0001] The invention belongs to the technical field of vehicle-mounted upgrade control, and in particular relates to a vehicle-mounted entertainment system upgrade method and system based on Flash CAN. Background Art

[0002] With the rapid development of automotive electronic technology, in-vehicle entertainment systems have become an important part of modern cars. These systems not only provide multimedia entertainment functions such as music and video, but also integrate diversified services such as navigation, vehicle information display, and in-vehicle communication. However, with the continuous expansion of system functions and the growing needs of users, the software upgrade of in-vehicle entertainment systems has become increasingly important.

[0003] Traditional in-vehicle entertainment system upgrade methods usually rely on physical media (such as CD, DVD or USB storage devices) for manual upgrades, which is not only cumbersome but also inefficient. With the popularization of Internet of Vehicles technology, remote online upgrades (OTA) have gradually become the mainstream way to upgrade in-vehicle entertainment systems. OTA technology allows vehicles to receive and install upgrade packages through wireless networks, thereby realizing remote updates and optimizations of in-vehicle entertainment systems.

[0004] However, in the process of implementing OTA upgrades, there are also a series of technical challenges. First, the storage media of the in-vehicle entertainment system (such as Nand Flash) has its own particularities, such as the existence of bad blocks, limited block erase times, and inability to directly overwrite, which increases the difficulty and complexity of system upgrades. Secondly, the in-vehicle entertainment system needs to communicate and coordinate with other control units of the vehicle to ensure the smooth progress of the upgrade process, which requires the upgrade method to be highly reliable and stable. In addition, with the continuous increase in the functions of the in-vehicle entertainment system, the size of the upgrade package has gradually increased, which puts higher requirements on network bandwidth and transmission speed.

[0005] In response to the above problems, the industry has been exploring more efficient, safe and reliable methods to upgrade in-vehicle entertainment systems. Summary of the invention

[0006] Purpose of the invention: The purpose of the present invention is to address the deficiencies in the prior art and to provide a method and system for upgrading an in-vehicle entertainment system based on Flash CAN, aiming to solve the problems of cumbersome operation and low efficiency of traditional upgrading methods, as well as the technical challenges faced during OTA upgrading.

[0007] Technical solution: The method for upgrading the in-vehicle entertainment system based on Flash CAN of the present invention comprises the following steps: S1, Hardware preparation steps: Make sure the embedded control unit supports the CAN bus interface, and configure the CAN controller, Flash controller and corresponding pins; S2, firmware update file acquisition step: acquiring a firmware update file that matches the vehicle model and the current system version; S3, the upgrade process steps include: S301, backup step: backing up the current in-vehicle entertainment system firmware; S302, verification step: verifying the downloaded firmware update file, if the verification succeeds, proceeding to the next step, if the verification fails, re-downloading the firmware update file; S303, erasing step: erasing the specified Flash storage area; S304, transmission step: the upgrade management module requests and transmits the data packet of the firmware update file to the embedded control unit, and if the request or transmission fails, rolls back to the original system; S305, data receiving and verification step: the embedded control unit receives the firmware update file data packet and verifies it. If the verification succeeds, it is written into the Flash. If the verification fails, an error count is performed. When the error count exceeds a preset threshold, the upgrade is terminated and the original system is restored. If the error count does not exceed the preset threshold, the upgrade management module resends the firmware update file data packet and re-verifies it. S306, restart and verification step: After completing data reception, restart the vehicle to verify whether the in-vehicle entertainment system functions normally.

[0008] To further improve the above technical solution, the backed-up current vehicle entertainment system firmware is stored in a preset independent area, which is physically or logically isolated from the target area for storing firmware update files, and the independent area is selected from an external storage device, cloud storage or backup server.

[0009] Furthermore, the preset independent area is protected by setting up an access control mechanism to prevent unauthorized access or modification; the backed-up in-vehicle entertainment system firmware is regularly verified and recovery drills are performed to be able to restore the original in-vehicle entertainment system firmware when the upgrade fails.

[0010] The above setup ensures a reliable, accessible, and secure environment for backup file storage. The setup requires developing a backup strategy, controlling access rights, regularly verifying backup files, and performing recovery drills so that the original firmware can be restored in case of an upgrade failure.

[0011] Furthermore, in the verification step, the firmware update file is verified by using one or more methods including a checksum, a hash value, and a digital signature; the checksum is used to verify the integrity of the firmware update file, the hash value is used to verify the uniqueness of the firmware update file and that it has not been tampered with, and the digital signature is used to verify the authenticity of the firmware update file.

[0012] Furthermore, the Flash memory adopts physical division or logical division to obtain the target storage area and other areas for storing firmware update file data packets; the physical division refers to dividing the Flash memory into target storage areas and other areas according to different partitions; the logical division means that in the logical management of the Flash storage, the addresses of the target storage area and other areas are different; in the erasing step, only the target storage area is erased to avoid affecting the data stored in other areas.

[0013] Furthermore, in the transmission step, the transmission format, transmission process, checksum and error handling mechanism of the data packet are defined through the Flash CAN communication protocol; the transmission format of the data packet includes a data packet header, a data body, a checksum and a data packet tail, wherein the data packet header includes a packet sequence number, a total number of packets and a data packet type, the data body contains firmware data, the checksum is used to verify data integrity, and the data packet tail marks the end of the data packet; the transmission process includes an initialization phase, data transmission, data reception and verification phase, writing to the Flash memory, and a completion phase, and each phase of the transmission process is controlled and managed by a state machine, and the state machine includes idle, transmission, reception and error handling states, and performs state transitions according to the current state and event trigger conditions.

[0014] Furthermore, the data packet is transmitted in segments, and each segmented data packet is received and verified by the embedded control unit. When receiving the data packet, the embedded control unit performs a firmware update file data packet integrity check and a sequence check to ensure the correctness and sequence of the data; after the check passes, the data is written to the target storage area of ​​the Flash, and if the check fails, the error handling mechanism is triggered.

[0015] Furthermore, the error handling mechanism includes: real-time monitoring of the transmission status of the data packet. Once a data packet transmission error or abnormality is found, the upgrade management module immediately stops the upgrade process, counts the errors of the verification failure and reminds to retry, and records the error log and status information.

[0016] These rules and mechanisms improve the reliability, efficiency, and stability of the upgrade process, ensuring that the data packets of the firmware update files can be accurately and completely transmitted to the embedded control unit.

[0017] Furthermore, the upgrade management module uses encryption technology to encrypt the firmware update file to ensure the security of the firmware data during downloading, transmission and storage. The encryption technology includes symmetric encryption and asymmetric encryption. During the transmission of the firmware update file, vehicle identity authentication is performed by verifying the vehicle's unique identifier to ensure that only verified vehicles can receive and apply the firmware update package.

[0018] The backup and rollback steps in the upgrade process include automatically backing up the original firmware. The system will store the backup file in a preset independent area, which is physically or logically isolated from the area used to store the new firmware. Through the Flash storage address division and access control strategy, the system can ensure that the backup data will not be accidentally written or overwritten during the upgrade process. At the same time, the control mechanism also includes protection of the storage area, such as setting a write protection bit to prevent unauthorized access or modification. To avoid conflicts with the new firmware data, if the upgrade fails, the original system can be restored from the backup.

[0019] The system for implementing the above-mentioned method for upgrading the in-vehicle entertainment system based on Flash CAN comprises: Embedded control unit, used to control the upgrade process of the in-vehicle entertainment system, supporting CAN bus interface; The upgrade management module is responsible for downloading, verifying, transmitting, writing, backing up, and rolling back firmware update files, and provides data transmission status monitoring and error handling; Flash memory, used to store firmware update files, backup data, and new and old firmware version data; Communication interface, connected to the vehicle's built-in communication network, supports downloading firmware update packages via Wi-Fi or mobile data network; CAN bus interface, the embedded control unit communicates with other control units of the vehicle through the CAN bus interface, receives upgrade instructions, and transmits relevant data during the upgrade process.

[0020] Beneficial effects: Compared with the prior art, the advantages of the present invention are: the present invention shows significant advantages in upgrading the in-vehicle entertainment system. First, it does not require the car owner to purchase additional external equipment and upgrade software, which greatly reduces the upgrade cost and enables more car owners to easily enjoy the convenience brought by the system upgrade. Secondly, the present invention can complete the upgrade operation through the in-vehicle entertainment system interface. The whole process is simple and clear, without cumbersome steps, which greatly improves the user experience. At the same time, by utilizing the high-speed and reliable data transmission characteristics of Flash CAN, the present invention reduces the risk of upgrade failure, which not only improves the upgrade efficiency, but also enhances the security of the system, and effectively avoids system anomalies caused by improper upgrades. Finally, car owners can receive and apply officially released upgrade packages at any time without waiting, which greatly shortens the upgrade cycle and enables car owners to enjoy the latest system functions and optimizations as soon as possible.

[0021] The present invention combines hardware configuration, CAN communication protocol customization, upgrade management module and program design, etc., to provide a comprehensive, flexible and efficient solution for upgrading the in-vehicle entertainment system, which is suitable for a variety of upgrade application scenarios. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Figure 1 It is a flow chart of the method of the present invention. DETAILED DESCRIPTION

[0023] The technical solution of the present invention is described in detail below with reference to the accompanying drawings, but the protection scope of the present invention is not limited to the embodiments.

[0024] Embodiment 1: The vehicle entertainment system upgrade system based on Flash CAN includes the following parts.

[0025] 1. Hardware preparation: Make sure that the embedded control unit (MCU) supports the CAN bus interface and has relevant hardware resources, including CAN controller, Flash controller and corresponding pin connections, and configure it accordingly according to the chip manual.

[0026] 2. Get the firmware update file: Download the latest in-vehicle entertainment system firmware update file from the official website of the car manufacturer or the designated upgrade service center. Make sure the downloaded file matches the car model, year and current in-vehicle entertainment system version.

[0027] 3. Upgrade process: ①Back up the current firmware: Before upgrading, use Flash CAN software or other tools to back up the current in-vehicle entertainment system firmware. The backup file should be saved in a safe location so that the original firmware can be restored in case of upgrade failure; ② The upgrade module verifies the upgrade package: To ensure the security and accuracy of the upgrade package, if the verification is successful, proceed to the next step; if the verification fails, re-download the upgrade package; ③ Erase the specified Flash area; ④ The upgrade management module starts to request and transmit the upgrade file data package. If the request and transmission fail, it will roll back to the original system. If successful, it will proceed to the next step; ⑤ MCU receives data and verifies it: if the verification is successful, the data is written into Flash; if the verification fails, the error count is performed. If it is greater than the set threshold, the upgrade process ends and the original system is restored; if it is not greater than the set threshold, the upgrade module resends the data for re-verification; ⑥Complete data reception, restart and run the new system: After the upgrade is complete, restart the vehicle and check whether the in-car entertainment system functions normally.

[0028] like Figure 1 As shown, the present invention provides a method for upgrading the in-vehicle entertainment system based on the above system, comprising the following steps: S1: Receive upgrade instructions: When an upgrade is required, the number of upgrade packages will be prompted on the in-vehicle entertainment system page, and the owner can then click "update now" to start the upgrade. The upgrade instructions are then received from other vehicle control units (such as the information center or remote control module) via the CAN bus. These instructions may be triggered by the owner through the vehicle information center, or sent by the remote control center through the remote control module. The upgrade instructions contain key information such as the version number and download address of the upgrade package, which are used to guide the upgrade management module for subsequent operations.

[0029] S2: Download the upgrade package: The upgrade management module connects to the server through the vehicle's built-in communication network (such as mobile data network or Wi-Fi) according to the download address in the upgrade instruction. After the server verifies the identity and authority of the in-vehicle entertainment system, it provides a download link for the upgrade package of the corresponding version. The upgrade management module downloads the upgrade package from the server and stores it in a temporary storage area for subsequent verification and writing operations.

[0030] S3: Verify the upgrade package: The upgrade management module performs integrity checks on the downloaded upgrade package. This usually includes checking and verifying the integrity of the file, the matching of the version number, and the signature of the file. If the check fails, the upgrade management module will stop the upgrade process and prompt the owner to try downloading again or contact the service center for support. If the check succeeds, the upgrade management module will transfer the upgrade package to the embedded control unit.

[0031] S4: Write to Flash memory: The embedded control unit writes the verified upgrade package to the target area specified by the Flash memory. During the process, the data packets are transmitted in blocks and written to the memory one by one, and the correctness and integrity of each data packet block are ensured. During the writing process, the original in-vehicle entertainment system firmware is backed up so that the system can be restored in case of upgrade failure or rollback. After the writing is completed, the upgrade management module updates the metadata of the Flash memory to reflect the new system software version and status.

[0032] S5: Restart and apply the upgrade: After the in-vehicle entertainment system restarts, the processor will read the new system software from the Flash memory and run it. This usually involves loading new system files, initializing new configuration parameters, and executing necessary startup procedures. During the restart process, the in-vehicle entertainment system will also perform a series of self-checks and initialization operations to ensure the correctness and stability of the new system software. After the restart is complete, the in-vehicle entertainment system will run the new system software version and provide updated functions and performance.

[0033] Flash CAN communication defines the communication process and state machine during the upgrade process to ensure the correct execution and sequence control of each step. The transmission format, transmission process, checksum and error handling mechanism of the data packet are defined through the Flash CAN communication protocol; the transmission format of the data packet includes the data packet header, data body, checksum and data packet tail, among which the data packet header includes the packet sequence number, the total number of packets and the data packet type, the data body contains the firmware data, the checksum is used to check the data integrity, and the data packet tail marks the end of the data packet; the transmission process includes the initialization phase, data transmission, data reception and verification phase, writing to the Flash memory, and completion phase. Each phase of the transmission process is controlled and managed by the state machine. The state machine includes idle, transmission, reception and error handling states, and the state transition is performed according to the current state and event trigger conditions.

[0034] The error handling mechanism means that during the upgrade process, the upgrade management module will monitor the data transmission status in real time, including data integrity, checksum, and transmission rate. Once a data transmission error or abnormality is found, the upgrade management module will immediately stop the upgrade process and prompt the owner to try again. This can avoid upgrade failures or system abnormalities caused by data transmission errors. The upgrade management module will also record error logs and status information for the owner or service center to use in subsequent analysis and troubleshooting.

[0035] Security is ensured by the use of encryption technology by the upgrade management module to protect the data security of the upgrade package. During the download and writing process, the upgrade package will be encrypted to prevent virus infection or data leakage. Encryption technology includes symmetric encryption and asymmetric encryption. Symmetric encryption is used to encrypt the data content of the upgrade package to ensure the confidentiality of the data during transmission and storage; asymmetric encryption is used to verify the signature and integrity of the upgrade package to ensure the authenticity and reliability of the data. In addition, the upgrade management module will also verify the identity of the vehicle to ensure that only vehicles that have passed the verification can receive and apply the upgrade package. This can be achieved through the vehicle identification number (VIN) or other unique identifier.

[0036] The backup and rollback mechanism means that during the upgrade process, the upgrade management module automatically backs up the original system software so that the system can be restored if the upgrade fails or a rollback is required. The backup data is usually stored in another area of ​​the Flash memory, separate from the new system software to avoid data conflicts and corruption. If the upgrade fails or the owner needs to roll back to the old version, the upgrade management module can restore the system using the backup data. This usually involves writing the backup data back to a designated area of ​​the Flash memory and restarting the in-vehicle entertainment system.

[0037] As described above, although the present invention has been shown and described with reference to specific preferred embodiments, it should not be construed as limiting the present invention itself. Various changes in form and details may be made without departing from the spirit and scope of the present invention as defined in the appended claims.

Claims

1. A method for upgrading an in-vehicle entertainment system based on Flash CAN, characterized in that: The steps include: S1, Hardware preparation steps: Make sure the embedded control unit supports the CAN bus interface, and configure the CAN controller, Flash controller and corresponding pins; S2, firmware update file acquisition step: acquiring a firmware update file that matches the vehicle model and the current system version; S3, the upgrade process steps include: S301, backup step: backing up the current in-vehicle entertainment system firmware; S302, verification step: verifying the downloaded firmware update file, if the verification succeeds, proceed to the next step, if the verification fails, re-download the firmware update file; S303, erasing step: erasing a designated target area in the Flash memory to store a firmware update file; S304, transmission step: the upgrade management module requests and transmits the data packet of the firmware update file to the embedded control unit, and if the request or transmission fails, rolls back to the original system; S305, data receiving and verification step: the embedded control unit receives the firmware update file data packet and verifies it. If the verification succeeds, it is written into the Flash storage area. If the verification fails, an error count is performed. When the error count exceeds a preset threshold, the upgrade is terminated and the original system is restored. If the error count does not exceed the preset threshold, the upgrade management module resends the firmware update file data packet and re-verifies it. S306, restart and verification step: restart the vehicle after completing data reception and verify whether the in-vehicle entertainment system functions normally.

2. The method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 1, characterized in that: In the backup step, the backed-up current in-vehicle entertainment system firmware is stored in a preset independent area, which is physically or logically isolated from the target area for storing firmware update files. The independent area selects an external storage device, cloud storage or backup server.

3. The method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 2, characterized in that: Protect preset independent areas by setting up access control mechanisms to prevent unauthorized access or modification; regularly verify the backed-up in-vehicle entertainment system firmware and perform recovery drills to be able to restore the original in-vehicle entertainment system firmware when the upgrade fails.

4. The method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 1, characterized in that: In the verification step, the firmware update file is verified by using one or more of a checksum, a hash value, and a digital signature; the checksum is used to verify the integrity of the firmware update file, the hash value is used to verify the uniqueness of the firmware update file and that it has not been tampered with, and the digital signature is used to verify the authenticity of the firmware update file.

5. According to the method for upgrading the in-vehicle entertainment system based on Flash CAN in claim 1, in the erasing step, the Flash memory adopts physical division or logical division to obtain the target storage area and other areas for storing firmware update file data packets; the physical division refers to dividing the Flash memory into the target storage area and other areas according to different partitions; the logical division means that in the logical management of the Flash storage, the addresses of the target storage area and other areas are different; in the erasing step, only the target storage area is erased to avoid affecting the data stored in other areas.

6. The method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 5, characterized in that: In the transmission step, the transmission format, transmission process, checksum and error handling mechanism of the data packet are defined through the Flash CAN communication protocol; the transmission format of the data packet includes a data packet header, a data body, a checksum and a data packet tail, wherein the data packet header includes a packet sequence number, a total number of packets and a data packet type, the data body contains firmware data, the checksum is used to check data integrity, and the data packet tail marks the end of the data packet; the transmission process includes an initialization phase, data transmission, data reception and verification phase, writing to the Flash memory, and a completion phase. Each phase of the transmission process is controlled and managed by a state machine, and the state machine includes idle, transmission, reception and error handling states, and performs state transitions according to the current state and event trigger conditions.

7. The method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 6, characterized in that: The data packet is transmitted in segments, and each segmented data packet is received and verified by the embedded control unit. When receiving the data packet, the embedded control unit performs a firmware update file data packet integrity check and a sequence check to ensure the correctness and sequence of the data; After the verification passes, the data is written to the target storage area of ​​the Flash. If the verification fails, the error handling mechanism is triggered.

8. The method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 7, characterized in that: The error handling mechanism includes: real-time monitoring of the transmission status of the data packet. Once a data packet transmission error or abnormality is found, the upgrade management module immediately stops the upgrade process, counts the errors of the verification failure and reminds to retry, and records the error log and status information.

9. The method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 1, characterized in that: The upgrade management module uses encryption technology to encrypt the firmware update file, and the encryption technology includes symmetric encryption and asymmetric encryption; during the transmission of the firmware update file, vehicle identity authentication is performed by verifying the vehicle's unique identifier to ensure that only verified vehicles can receive and apply the firmware update file data package.

10. A system for implementing the method for upgrading the in-vehicle entertainment system based on Flash CAN according to claim 1, characterized in that: include: Embedded control unit, used to control the upgrade process of the in-vehicle entertainment system, supporting CAN bus interface; The upgrade management module is responsible for downloading, verifying, transmitting, writing, backing up, and rolling back firmware update files, and provides data transmission status monitoring and error handling; Flash memory, used to store firmware update files, backup data, and new and old firmware version data; Communication interface, used to connect to the vehicle's built-in communication network and support downloading firmware update packages via Wi-Fi or mobile data network; CAN bus interface, the embedded control unit communicates with other control units of the vehicle through the CAN bus interface, receives upgrade instructions, and transmits relevant data during the upgrade process.

Images