OTA upgrading method and system based on UDS diagnosis and vehicle

Abstract

The invention discloses an OTA upgrading method and system based on UDS diagnosis and a vehicle, and the method comprises the steps: an OTA client sends an original diagnosis request message to each controller through a diagnosis protocol stack, and judges whether the response of each controller is in a to-be-upgraded state or not; the OTA client sends an OTA upgrading mode entering request to each to-be-upgraded controller, after agreement is obtained, the vehicle enters the OTA upgrading mode, and the electronic parking system is kept pulled up; the vehicle body domain controller keeps normal output of low-voltage electricity; and the OTA client sends the original diagnosis request message again, judges whether the response of each to-be-upgraded controller is in an upgrade completion state or not, and if yes, sends an OTA upgrade mode exit request to each upgraded controller and exits the OTA upgrade mode. According to the method, the controllers of the vehicle enter and exit the OTA upgrading mode in a request diagnosis mode, the influence caused by misoperation can be avoided in the upgrading process of the vehicle, necessary functions of the vehicle can be normally used in the upgrading process, and then normal running of the upgraded vehicle is ensured.

Description

Technical Field

[0001] The present invention belongs to the technical field of automobile OTA upgrade, and in particular relates to an OTA upgrade method, system and vehicle based on UDS diagnosis. Background Art

[0002] In the prior art, many vehicles have OTA functions, which can make the vehicle unable to start or move during the upgrade process. If the vehicle communication is interrupted due to human error during the upgrade process, such as powering off the vehicle or releasing the parking brake, the vehicle that failed the upgrade may not be able to start, and may even cause a safety accident.

[0003] Based on the above problems, technicians in this field have proposed improvements to the OTA upgrade of vehicles. During the OTA upgrade process, all controllers of the vehicle enter the programming session mode, that is, the BOOT state. When all controllers enter the BOOT state, the vehicle application messages will no longer be sent, the network load rate will be reduced, and all functions will be unavailable, which avoids the driver's misoperation and reduces the battery power consumption. However, the BOOT state is a very dangerous state for the controller, which may cause the vehicle to be unable to recover to the normal state, that is, the vehicle may not be able to recover to the normal state after maintaining the BOOT state for a long time, making the vehicle unable to drive normally.

[0004] A new OTA upgrade system is needed to solve the above technical problems. Summary of the invention

[0005] The purpose of the present invention is to provide an OTA upgrade method based on UDS diagnosis, which is used to solve the technical problems that all functions cannot be used during the vehicle upgrade process, the upgrade fails due to erroneous operations during the upgrade process, and the vehicle cannot drive normally after the upgrade is completed.

[0006] The present invention also aims to provide a system for implementing an OTA upgrade method based on UDS diagnosis.

[0007] Another object of the present invention is to provide a vehicle.

[0008] The technical solution of the present invention to solve the technical problem is: An OTA upgrade method based on UDS diagnosis includes the following steps: S1: The OTA client integrated in the entertainment domain controller sends an original diagnostic request message to each controller through the diagnostic protocol stack, and determines whether the response of each controller is in the state to be upgraded. If so, execute step S2; S2: The OTA client sends an OTA upgrade mode entry request to each controller to be upgraded. After approval, the vehicle enters the OTA upgrade mode. At this time, the electronic parking system remains activated; the body domain controller maintains normal low-voltage output. S3: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack to determine whether the response of each controller to be upgraded is in the upgrade completion state. If so, an OTA upgrade mode exit request is sent to each upgrade completion controller to exit the OTA upgrade mode. If not, continue to step 3.

[0009] Furthermore, the steps S1 and S2 are specifically as follows: S1.1: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack, and determines whether the response of each controller is in the state to be upgraded. If so, execute step S1.2; S1.2: The vehicle controller determines whether each controller is a high-voltage component. If so, execute step S2.1; if not, execute step S2.2; S2.1: The OTA client sends an OTA upgrade mode entry request to each high-voltage component controller. After approval, the vehicle enters the OTA upgrade mode. At this time, the vehicle controller keeps the high voltage down; the electronic parking system keeps the high voltage up; and the body domain controller keeps the low voltage output normally. S2.2: The OTA client sends an OTA upgrade mode entry request to each non-high-voltage component controller. After obtaining approval, the vehicle enters the OTA upgrade mode. At this time, the vehicle controller maintains the current state and responds to related operations; the electronic parking system remains pulled up; and the body domain controller maintains normal low-voltage power output.

[0010] Furthermore, the steps S2.1 and S2.2 also include: the entertainment domain controller detects the door status through the added main driver door lock hardline input and displays the upgrade progress on the display screen; the remote communication terminal maintains communication with the cloud.

[0011] A system for implementing an OTA upgrade method based on UDS diagnosis, comprising: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack, determines the response of each controller, and sends an OTA upgrade mode entry request or exit request to each controller; The vehicle controller, when the vehicle is in OTA upgrade mode, determines whether the upgrade controller is a high-voltage component. If so, the vehicle controller lowers the high voltage, shields all engine functions, and does not respond to any operation; if not, maintains the current state; Electronic parking system: When the vehicle is in OTA upgrade mode, the electronic parking system remains pulled up and does not respond to user operations; Body domain controller, when the vehicle is in OTA upgrade mode, the gateway controller does not forward the diagnosis of the vehicle automatic diagnostic system; the body control | intelligent entry and start system maintains normal low-voltage output; The OTA client is integrated into the entertainment domain controller in the form of an installation package, and the OTA client sends an original diagnosis request message to each controller through the body domain controller.

[0012] Furthermore, it also includes: an entertainment domain controller, an integrated OTA client, and an additional hard-wired input for the main driver's door lock; when the vehicle is in OTA upgrade mode, the main driver's door status is detected and the upgrade progress is displayed on the display screen; The remote communication terminal sends the OTA upgrade data to the cloud when the vehicle is in OTA upgrade mode.

[0013] Furthermore, the remote communication terminal also includes: remotely checking vehicle updates. If the vehicle is in a fortified state, the remote communication terminal wakes up the entire vehicle and requests the OTA client to connect to the OTA server.

[0014] A vehicle adopts an OTA upgrade system based on UDS diagnosis. The beneficial effects of the present invention are as follows: by integrating the OTA client into the entertainment domain controller, the OTA client has the ability to directly send original diagnostic request messages to each controller. The OTA client sends original diagnostic request messages to each controller through the diagnostic protocol stack, and determines whether the response of each controller is in the state to be upgraded; the OTA client sends an OTA upgrade mode entry request to each controller to be upgraded, and after obtaining consent, the vehicle enters the OTA upgrade mode, and the electronic parking system remains pulled up; the body domain controller maintains normal low-voltage power output; the OTA client sends original diagnostic request messages to each controller through the diagnostic protocol stack, and determines whether the response of each controller to be upgraded is in the upgrade completion state. If so, an OTA upgrade mode exit request is sent to each upgrade completion controller to exit the OTA upgrade mode. By means of diagnostic requests, each controller of the vehicle enters and exits the OTA upgrade mode, the vehicle can avoid the impact of misoperation during the upgrade process, and the necessary functions of the vehicle can be used normally during the upgrade process, thereby ensuring the normal driving of the vehicle after the upgrade. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Figure 1 is a flow chart of the upgrading method of the present invention; Figure 2 It is a schematic diagram of the logic circuit of the upgrading system of the present invention. DETAILED DESCRIPTION

[0016] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0017] Embodiment 1: like Figure 1 As shown, the present invention discloses an OTA upgrade method based on UDS diagnosis, comprising the following steps: S1.1: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack, and determines whether the response of each controller is in the state to be upgraded. If so, execute step S1.2; S1.2: The vehicle controller determines whether each controller is a high-voltage component. If so, execute step S2.1; if not, execute step S2.2; S2.1: The OTA client sends an OTA upgrade mode entry request to each high-voltage component controller. After obtaining consent, the vehicle enters the OTA upgrade mode. At this time, the entertainment domain controller detects the status of the main driving door, turns off the vehicle peripherals, and displays the upgrade progress on the display screen. The remote communication terminal sends the OTA upgrade data to the cloud. When remotely checking the vehicle update, it determines whether the vehicle is in the vehicle defense state. If so, the remote communication terminal wakes up the entire vehicle and requests the OTA client to connect to the OTA server. The vehicle controller keeps the high voltage down, shields all engine functions, and does not respond to any operation. The electronic parking system remains pulled up and does not respond to user operations. The gateway controller does not forward the diagnosis of the on-board automatic diagnostic system. The body control|intelligent entry and starting system maintains normal low-voltage power output and does not respond to any operation. The unlocking function is normal, and the windows and sunroof functions are available. Turn off high-power devices other than hazard warning lights and position lights, and accurately collect battery power through the electronic braking system. The air conditioning refrigeration system prohibits the air conditioning function. S2.2: The OTA client sends an OTA upgrade mode entry request to each non-high-voltage component controller. After obtaining consent, the vehicle enters the OTA upgrade mode. At this time, the entertainment domain controller detects the status of the main driving door, turns off the vehicle peripherals, and displays the upgrade progress on the display screen. The remote communication terminal sends the OTA upgrade data to the cloud. When checking the vehicle update remotely, it determines whether the vehicle is in the fortified state. If so, the remote communication terminal wakes up the entire vehicle and requests the OTA client to connect to the OTA server. For the vehicle controller, all engine functions can maintain the current state and respond to related operations. The electronic parking system remains pulled up and does not respond to user operations. The gateway controller does not forward the diagnosis of the on-board automatic diagnostic system. The body control|intelligent entry and starting system maintains normal low-voltage power output and does not respond to any operation. The unlocking function is normal, and the windows and sunroof functions are available. Turn off high-power devices other than hazard warning lights and position lights, and accurately collect battery power through the electronic braking system. The air conditioning refrigeration system prohibits the air conditioning function. S3: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack to determine whether the response of each controller to be upgraded is in the upgrade completion state. If so, an OTA upgrade mode exit request is sent to each upgrade completion controller to exit the OTA upgrade mode. If not, continue to step 3.

[0018] The vehicle enters OTA upgrade mode through protocol diagnosis, proposes a new OAT mode and entry and exit paths, and further refines the functional requirements of the OTA mode for each controller, enriching the user's application needs.

[0019] Embodiment 2: like Figure 2 As shown, a system for implementing an OTA upgrade method based on UDS diagnosis includes: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack, determines the response of each controller, and sends an OTA upgrade mode entry request or exit request to each controller; The vehicle controller VCU, when the vehicle is in OTA upgrade mode, determines whether the upgraded controller is a high-voltage component. If so, the vehicle controller reduces the high voltage, shields all engine functions, and does not respond to any operations; if not, maintains the current state; that is, when non-high-voltage components are upgraded, the battery can be charged.

[0020] The electronic parking system EPB, when the vehicle is in OTA upgrade mode, keeps the electronic parking system pulled up and does not respond to user operations; it can ensure the clamping of the brake disc, ensure parking safety, and avoid vehicle movement caused by driver's misoperation.

[0021] For the body domain controller CCM, when the vehicle is in OTA upgrade mode, the gateway controller GW does not forward the on-board automatic diagnostic system diagnosis; the body control | intelligent entry and starting system BCM / PEPS maintains normal low-voltage power output and does not respond to any operation; the unlocking function is normal, and the window and sunroof functions are available; the high-power devices other than the hazard warning lights and position lights are turned off, and the battery power is accurately collected through the electronic braking system EBS; the air conditioning and cooling system AC prohibits the air conditioning function when the vehicle is in OTA upgrade mode; among them, when the vehicle is in non-OTA upgrade mode, the gateway controller GW defaults to a higher priority for the on-board automatic diagnostic system OBD diagnostic forwarding; during the OTA upgrade information collection process, when the controller's on-board automatic diagnostic system OBD diagnostic request appears, the gateway controller GW interrupts the current OTA information collection and forwards the on-board automatic diagnostic system diagnosis.

[0022] The entertainment domain controller IVI integrates the OTA client and adds the hard-wire input of the main driver's door lock. When the vehicle is in OTA upgrade mode, the entertainment domain controller needs to detect the status of the main driver's door lock. When locked, the large screen goes out; when unlocked, the large screen lights up. When the vehicle is in OTA upgrade mode, the main driver's door status is detected, the vehicle peripherals are turned off, and the display screen displays the upgrade progress. Among them, the vehicle peripherals are generally: sound, Bluetooth, wifi, hotspot, USB, non-response to voice hard button trigger, non-response to visual services, telephone, etc. Download the upgrade software package of each controller and display the progress information in the upgrade center. When the vehicle is in OTA, the instrument large screen lights up the backlight and displays the upgrade reminder. Among them, the backlight can be set to: display the model logo brand image, do not respond to any alarm; and display: "Upgrading, do not operate the vehicle" reminder. The seat heating and seat ventilation switch status in the soft switch remains off.

[0023] The remote communication terminal TBOX sends the OTA upgrade data to the cloud when the vehicle is in OTA upgrade mode; remotely checks vehicle updates. If the vehicle is in a fortified state, the remote communication terminal wakes up the vehicle and requests the OTA client to connect to the OTA server. Before the TBOX itself is flashed, the vehicle emergency call system can be processed; connect to the mobile phone APP. Among them, the mobile phone app supports checking updates, downloading and installation confirmation, activation, and scheduled installation. The OTA client is integrated into the entertainment domain controller in the form of an installation package, so that the OTA client has the ability to directly send original diagnostic request messages to each controller. The OTA client sends original diagnostic request messages to each controller through the body domain controller.

[0024] Through the OTA upgrade system based on UDS diagnosis, upgrade interruptions and dangerous vehicle movement caused by misoperation can be avoided to the greatest extent possible, while ensuring the basic display, lighting, door and window operation functions, thereby ensuring that the vehicle can drive normally after the upgrade.

[0025] Embodiment 3: A vehicle adopts an OTA upgrade system based on UDS diagnosis.

[0026] Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in the field without making any creative work shall fall within the scope of protection of the present invention.

Claims

1. An OTA upgrade method based on UDS diagnosis, characterized in that: The following steps are involved: S1: The OTA client integrated in the entertainment domain controller sends an original diagnostic request message to each controller through the diagnostic protocol stack, and determines whether the response of each controller is in the state to be upgraded. If so, execute step S2; S2: The OTA client sends an OTA upgrade mode entry request to each controller to be upgraded. After approval, the vehicle enters the OTA upgrade mode. At this time, the electronic parking system remains activated; the body domain controller maintains normal low-voltage output. S3: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack to determine whether the response of each controller to be upgraded is in the upgrade completion state. If so, an OTA upgrade mode exit request is sent to each upgrade completion controller to exit the OTA upgrade mode. If not, continue to execute step S3.

2. The OTA upgrade method based on UDS diagnosis according to claim 1, characterized in that: The steps S1 and S2 are specifically: S1.1: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack, and determines whether the response of each controller is in the state to be upgraded. If so, execute step S1.2; S1.2: The vehicle controller determines whether each controller is a high-voltage component. If so, execute step S2.1; if not, execute step S2.2; S2.1: The OTA client sends an OTA upgrade mode entry request to each high-voltage component controller. After approval, the vehicle enters the OTA upgrade mode. At this time, the vehicle controller keeps the high voltage down; the electronic parking system keeps the high voltage up; and the body domain controller keeps the low voltage output normally. S2.2: The OTA client sends an OTA upgrade mode entry request to each non-high-voltage component controller. After approval, the vehicle enters the OTA upgrade mode. At this time, the vehicle controller maintains the current state and responds to related operations. The electronic parking system remains pulled up; the body domain controller maintains normal low-voltage electrical output.

3. The OTA upgrade method based on UDS diagnosis according to claim 1, characterized in that: The steps S2.1 and S2.2 also include: the entertainment domain controller detects the door status through the added main driver door lock hardline input and displays the upgrade progress on the display screen; the remote communication terminal maintains communication with the cloud.

4. A system for implementing the OTA upgrade method based on UDS diagnosis according to any one of claims 1 to 3, characterized in that: include: The OTA client sends an original diagnostic request message to each controller through the diagnostic protocol stack, determines the response of each controller, and sends an OTA upgrade mode entry request or exit request to each controller; The vehicle controller, when the vehicle is in OTA upgrade mode, determines whether the upgrade controller is a high-voltage component. If so, the vehicle controller lowers the high voltage, shields all engine functions, and does not respond to any operation; if not, maintains the current state; Electronic parking system: When the vehicle is in OTA upgrade mode, the electronic parking system remains pulled up and does not respond to user operations; Body domain controller, when the vehicle is in OTA upgrade mode, the gateway controller does not forward the diagnosis of the vehicle automatic diagnostic system; the body control | intelligent entry and start system maintains normal low-voltage output; The OTA client is integrated into the entertainment domain controller in the form of an installation package, and the OTA client sends an original diagnosis request message to each controller through the body domain controller.

5. The system for implementing the OTA upgrade method based on UDS diagnosis according to claim 4 is characterized in that: Also includes: Entertainment domain controller, integrated OTA client, added driver door lock hardline input; When the vehicle is in OTA upgrade mode, the main driving door status is detected and the display screen shows the upgrade progress; The remote communication terminal sends the OTA upgrade data to the cloud when the vehicle is in OTA upgrade mode.

6. The system for implementing the OTA upgrade method based on UDS diagnosis according to claim 5, characterized in that: The remote communication terminal also includes: remotely checking vehicle updates. If the vehicle is in a fortified state, the remote communication terminal wakes up the entire vehicle and requests the OTA client to connect to the OTA server.

7. A vehicle, characterized in that: An OTA upgrade system based on UDS diagnosis as described in any one of claims 4 to 6 is adopted.

Images