Vehicle central domain controller software upgrading method and system based on flashing diagnostic instrument

Through the method based on the flash write diagnostic device, using Ethernet and RPC communication technology, efficient software upgrades for multi-CPU and multi-memory type central domain controllers are achieved, solving the problem of slow upgrade speed and inability to adapt to complex architectures in the existing technology.

CN119544494AActive Publication Date: 2025-02-28ZHIZI AUTOMOTIVE TECHNOLOGY CO LTD

Patent Information

Application Number
CN202411606853.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-11-12
Publication Date
2025-02-28
Estimated Expiration
2044-11-12

AI Technical Summary

Technical Problem

In the prior art, the software upgrade speed of the central domain controller is slow, and it is impossible to effectively upgrade software to multiple CPU modules and central domain controllers of multiple memory types.

Method used

Using a flash write diagnostic method, the central domain controller is connected to the Ethernet, and RPC communication and UDP connection are used to realize the software upgrade of the MCU, MPU and communication SoC.

Benefits of technology

It significantly improves the speed of software upgrades. It only takes about 10S to transmit compressed files of 10MB size, and ensures the stability and reliability of the upgrade process through backup and rollback algorithms.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119544494A_ABST
    Figure CN119544494A_ABST
Patent Text Reader

Abstract

The invention provides a vehicle central domain controller software upgrading method and system based on a flash diagnostic instrument. The method comprises the following steps that the flash diagnostic instrument is connected to a Switch through an Ethernet ETH network cable; establishing UDP (User Datagram Protocol) connection with the MPU; initiating an identity verification request to the MPU; verifying whether the identity of the flash diagnostic instrument is legal; initiating a file transmission request to the MPU, and sending the controller flash program compressed file to the MPU; receiving and storing the compressed file; sending the file verification value; the MPU receives the file verification value and calculates the file verification value; the MPU compares whether the verification values of the two files are consistent or not; initiating an installation request to the MPU; the MPU decompresses the compressed file and analyzes the file content; judging whether the decompressed file content is legal or not; the MPU downloads the MCU flash program file to the Nor Flash, downloads the communication SoC flash program file to the internal memory of the communication SoC, writes the MPU flash program file to the eMMC, and respectively performs flash updating; sending an installation result to the flashing diagnostic apparatus; and the flash diagnostic instrument resets the central domain controller.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention belongs to the technical field of controller flashing, and in particular relates to a vehicle central domain controller software upgrade method and system based on a flashing diagnostic instrument. Background Art

[0002] The current new energy commercial vehicle field has gradually evolved towards an Ethernet-based domain control architecture, which usually includes a central domain controller, a cockpit domain controller, and an autonomous driving domain controller.

[0003] For the central domain controller, it runs operating systems such as Linux and RTOS, contains various types of CPUs such as MCU and MPU, and different types of memory such as Nor Flash and eMMC, and the application software package starts at 10MB. Different controllers have different hardware and functions, and the control software they carry also has its own advantages.

[0004] In the prior art, controller software upgrades are usually done by flashing via CAN. However, the existing CAN flashing methods have the following disadvantages: (1) The flashing speed is slow. In actual production lines, it takes about 2 minutes to flash a 1MB application file, while it takes 20 minutes to flash a 10MB software package, which is unacceptable for vehicles that are about to roll off the production line and enter the warehouse; (2) Generally, for controllers with a single MCU, the application software package is generally within 1MB, which cannot effectively perform software upgrades on central domain controllers with multiple CPU modules and multiple memory types. Summary of the invention

[0005] In order to solve the above-mentioned deficiencies of the prior art, the object of the present invention is to provide a vehicle central domain controller software upgrade method and system based on a flashing diagnostic instrument.

[0006] To achieve the above object, the present invention adopts the following technical solutions:

[0007] <Option 1>

[0008] The present invention provides a vehicle central domain controller software upgrade method based on a flash diagnostic instrument, which has the following characteristics: the central domain controller includes a main control SoC, a communication SoC, a Switch, a Nor Flash and an eMMC, the main control SoC includes an MCU and an MPU connected by an internal RPC communication mode, the MPU is respectively connected to the communication SoC and the Switch by an Ethernet ETH communication mode, the communication SoC has an internal memory for storing a program of the communication SoC, the Nor Flash is connected to the MCU for storing a program of the MCU, the eMMC is connected to the MPU for storing a program of the MPU, and the method includes the following steps:

[0009] Step S1, the flash diagnostic instrument is connected to the Switch via an Ethernet ETH cable;

[0010] Step S2, the flash diagnostic instrument establishes a UDP connection with the MPU;

[0011] Step S3, the flash diagnostic instrument initiates an identity verification request to the MPU;

[0012] Step S4, the MPU verifies whether the identity of the flash diagnostic instrument is legal, if so, executes step S5;

[0013] Step S5, the flash diagnostic instrument initiates a file transfer request to the MPU, and sends the controller flash program compressed file including the MCU flash program file, the MPU flash program file, and the communication SoC flash program file to the MPU;

[0014] Step S6, the MPU receives and stores the controller flash program compressed file;

[0015] Step S7, the flash diagnostic instrument sends the file check value to the MPU;

[0016] Step S8, the MPU receives the file check value as a preset file check value, and calculates the file check value according to the received controller flash program compression file as the current file check value;

[0017] Step S9, the MPU compares the current file check value with the preset file check value to see if they are consistent. If they are consistent, execute step S10;

[0018] Step S10, the flash diagnostic instrument initiates an installation request to the MPU;

[0019] Step S11, the MPU decompresses the controller software upgrade compressed file and parses the file content;

[0020] Step S12, the MPU determines whether the decompressed file content is legal based on the built-in flash file list, and if legal, executes step S13;

[0021] Step S13, the MPU downloads the MCU flash program file to Nor Flash through RPC, downloads the communication SoC flash program file to the internal memory of the communication SoC through Ethernet ETH, writes the MPU flash program file to the eMMC, and performs flash updates respectively;

[0022] Step S14, the MPU sends the installation result to the flash diagnostic instrument;

[0023] Step S15, if the installation is successful, the diagnostic instrument is flashed to reset the central domain controller.

[0024] The vehicle central domain controller software upgrade method based on the flash diagnostic instrument provided by the present invention may also have the following characteristics: wherein, in step S13, the flash update of the MCU specifically includes the following sub-steps:

[0025] Step S13-1-1, the MPU calls the flashing service of the MCU through RPC;

[0026] Step S13-1-2, the MPU sends the MCU flashing program file to the MCU via RPC;

[0027] Step S13-1-3, the MCU erases the data of the inactive partition of the Nor Flash, and writes the program file to be flashed into the inactive partition;

[0028] Step S13-1-4, the MCU sets the currently running partition to be inactive, and sets the partition where the new program is written to be active;

[0029] Step S13-1-5, the MCU is reset, the activated partition is started, and the new program is run.

[0030] The vehicle central domain controller software upgrade method based on the flash diagnostic instrument provided by the present invention may also have the following characteristics: wherein, in step S13, the flash update of the MPU specifically includes the following sub-steps:

[0031] Step S13-2-1, the MPU erases the data of the inactive partition of the eMMC, and writes the program file to be flashed into the inactive partition;

[0032] Step S13-2-2, the MPU sets the currently running partition to be inactive, and sets the partition where the new program is written to be active;

[0033] Step S13-2-3, reset the MPU, start the activated partition, and run the new program.

[0034] The vehicle central domain controller software upgrade method based on the flash diagnostic instrument provided by the present invention may also have the following characteristics: wherein, in step S13, the flash update of the communication SoC specifically includes the following sub-steps:

[0035] Step S13-3-1, the MPU initiates UDP communication to the communication SoC, and sends the communication SoC flashing program file to the communication SoC;

[0036] Step S13-3-2, the MPU sends an update instruction to the communication SoC;

[0037] Step S13-3-3, the communication SoC backs up the currently running program and overwrites the running program with the new program;

[0038] Step S13-3-4, the communication SoC is reset and a new program is run.

[0039] The vehicle central domain controller software upgrade method based on the flashing diagnostic instrument provided in the present invention may also have the following characteristics: wherein the MCU is connected to the vehicle's CAN bus and is responsible for receiving the CAN messages of the entire vehicle.

[0040] The vehicle central domain controller software upgrade method based on the flashing diagnostic instrument provided in the present invention may also have the following characteristics: wherein, the communication SoC has a 4G network for providing Internet access capability for the central domain controller.

[0041] <Option 2>

[0042] The present invention also provides a computer-readable storage medium, which stores a computer program and has the following characteristics: when the computer program is executed by a processor, the steps of the vehicle central domain controller software upgrade method based on flashing a diagnostic instrument of <Solution 1> are implemented.

[0043] <Scheme 3>

[0044] The present invention also provides a vehicle central domain controller software upgrade system based on a flashing diagnostic instrument, having the following characteristics: the system is used to execute the steps of the vehicle central domain controller software upgrade method based on a flashing diagnostic instrument of <Solution 1>.

[0045] Compared with the prior art, the vehicle central domain controller software upgrade method based on the flashing diagnostic instrument provided by the present invention, on the one hand, realizes the flashing of a central domain controller containing multiple CPUs and multiple storage types, filling the gap in the domain controller flashing method of this architecture in the industry; on the other hand, the file transmission of the entire flashing process is all based on Ethernet. The rate of the traditional CAN bus is generally 500Kbit / s, and the speed of automotive Ethernet is 200 times that of the CAN bus, which can reach a transmission speed of 100Mbit / s. According to actual tests, it only takes about 10S to transmit a compressed file of 10MB in size based on the method of the present invention, which greatly improves the rate of vehicle offline software flashing.

[0046] Furthermore, since the program of each controller will be backed up, even if an accident occurs during flashing, the program of the domain controller can automatically switch to the original program through the rollback algorithm and continue running. The vehicle will not be unable to go offline due to the accidental flashing, which avoids the problem that the traditional ECU has no backup and cannot roll back to the original program to continue running if a problem is found after the new program is flashed. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] Figure 1is a structural block diagram of a central domain controller in an embodiment of the present invention;

[0048] Figure 2 It is an action flow chart of a central domain controller software upgrade method based on a flash diagnostic instrument in an embodiment of the present invention;

[0049] Figure 3 This is an action flow chart of MCU flash update in an embodiment of the present invention;

[0050] Figure 4 is an action flow chart of MPU flash update in an embodiment of the present invention; and

[0051] Figure 5 It is an action flow chart of flash update of the communication SoC in an embodiment of the present invention. DETAILED DESCRIPTION

[0052] The concept, specific structure and technical effects of the present invention will be further described below in conjunction with the accompanying drawings to fully understand the purpose, characteristics and effects of the present invention.

[0053] <Example>

[0054] Figure 1 It is a structural block diagram of a central domain controller in an embodiment of the present invention.

[0055] like Figure 1 As shown, in this embodiment, the central domain controller for the vehicle includes a main control SoC, a communication SoC, a Switch, a Nor Flash and an eMMC.

[0056] The main control SoC contains MCU and MPU, which are connected through internal RPC communication.

[0057] The MPU is connected to the communication SoC and Switch respectively via Ethernet ETH communication.

[0058] The MCU is connected to the vehicle's CAN bus and is responsible for receiving the vehicle's CAN messages.

[0059] The communication SoC has an internal memory for storing the program of the communication SoC. In this embodiment, the communication SoC has a 4G network for providing Internet access capability for the central domain controller.

[0060] Switch can connect to the flash diagnostic instrument via Ethernet ETH communication.

[0061] Nor Flash is connected to the MCU and is used to store the program of the MCU.

[0062] The eMMC is connected to the MPU and is used to store the program of the MPU.

[0063] Figure 2 It is an action flow chart of a central domain controller software upgrade method based on a flash diagnostic instrument in an embodiment of the present invention; Figure 3 This is an action flow chart of MCU flash update in an embodiment of the present invention; Figure 4 is an action flow chart of MPU flash update in an embodiment of the present invention; Figure 5 It is an action flow chart of flash update of the communication SoC in an embodiment of the present invention.

[0064] like Figure 2 As shown, the present embodiment provides a vehicle central domain controller software upgrade method based on a flash diagnostic instrument, which is used to upgrade the central domain controller software when the vehicle is offline. The vehicle central domain controller software upgrade method based on a flash diagnostic instrument includes the following steps S1 to S15.

[0065] Step S1, the flash diagnostic instrument is connected to the Switch via an Ethernet ETH cable.

[0066] Step S2, the flash diagnostic instrument establishes a UDP connection with the MPU.

[0067] Step S3, the flashing diagnostic instrument initiates an identity verification request to the MPU.

[0068] Step S4, the MPU verifies whether the identity of the flash diagnostic instrument is legal. If so, execute step S5; otherwise, enter the end state.

[0069] Step S5, the flashing diagnostic instrument initiates a file transfer request to the MPU, and sends the controller flashing program compressed file to the MPU.

[0070] Specifically, the controller flash program compressed file includes an MCU flash program file, an MPU flash program file, and a communication SoC flash program file.

[0071] Step S6, the MPU receives and stores the controller flash program compressed file.

[0072] Step S7, the flash diagnostic instrument sends the file verification value to the MPU.

[0073] Step S8, the MPU receives the file verification value as a preset file verification value, and calculates the file verification value according to the received controller flash program compression file as the current file verification value.

[0074] Step S9, the MPU compares the current file check value with the preset file check value to see if they are consistent. If they are consistent, execute step S10; otherwise, enter the end state.

[0075] Step S10, the flashing diagnostic instrument initiates an installation request to the MPU.

[0076] Step S11, the MPU decompresses the controller software upgrade compressed file and parses the file content.

[0077] Step S12, the MPU determines whether the decompressed file content is legal based on the built-in flash file list. If it is legal, execute step S13; otherwise, enter the end state.

[0078] Step S13, the MPU downloads the MCU flash program file to Nor Flash through RPC, downloads the communication SoC flash program file to the internal memory of the communication SoC through Ethernet ETH, writes the MPU flash program file to the eMMC, and flashes and updates them respectively.

[0079] Specifically, Figure 3 As shown in the figure, the flash update of MCU includes the following sub-steps:

[0080] Step S13-1-1, the MPU calls the flashing service of the MCU through RPC.

[0081] Step S13-1-2, the MPU sends the MCU flashing program file to the MCU via RPC.

[0082] Step S13-1-3, the MCU erases the data of the inactive partition of the Nor Flash, and writes the program file to be flashed into the inactive partition.

[0083] Step S13-1-4, the MCU sets the currently running partition to be inactive, and sets the partition where the new program is written to be active.

[0084] Step S13-1-5, the MCU is reset, the activated partition is started, and the new program is run.

[0085] like Figure 4 As shown, the flash update of the MPU specifically includes the following sub-steps:

[0086] Step S13-2-1, the MPU erases the data of the inactive partition of the eMMC, and writes the program file to be flashed into the inactive partition.

[0087] Step S13-2-2, the MPU sets the currently running partition to be inactive and sets the partition where the new program is written to be active.

[0088] Step S13-2-3, reset the MPU, start the activated partition, and run the new program.

[0089] like Figure 5 As shown, for the flash update of the communication SoC, the following sub-steps are specifically included:

[0090] Step S13-3-1, the MPU initiates UDP communication to the communication SoC and sends the communication SoC flashing program file to the communication SoC.

[0091] Step S13-3-2, the MPU sends an update instruction to the communication SoC.

[0092] Step S13-3-3, the communication SoC backs up the currently running program and overwrites the running program with the new program.

[0093] Step S13-3-4, the communication SoC is reset and a new program is run.

[0094] Step S14, the MPU sends the installation result to the flash diagnostic instrument.

[0095] Step S15, if the installation is successful, the diagnostic instrument is flashed to reset the central domain controller.

[0096] An embodiment of the present invention also provides a vehicle central domain controller software upgrade system based on a flashing diagnostic instrument, which is used to execute the steps of the vehicle central domain controller software upgrade method based on a flashing diagnostic instrument as described above.

[0097] An embodiment of the present invention further provides a storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the vehicle central domain controller software upgrade method based on a flashing diagnostic instrument as described above.

[0098] The storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk.

[0099] The above-mentioned embodiments are preferred examples of the present invention and are not intended to limit the protection scope of the present invention.

Claims

1. A vehicle central domain controller software upgrade method based on a flash diagnostic instrument, characterized in that: The central domain controller includes the main control SoC, communication SoC, Switch, Nor Flash and eMMC. The master control SoC includes an MCU and an MPU connected via an internal RPC communication method. The MPU is connected to the communication SoC and the Switch respectively via Ethernet ETH communication. The communication SoC has an internal memory for storing a program of the communication SoC. The NorFlash is connected to the MCU and is used to store the program of the MCU. The eMMC is connected to the MPU and is used to store the program of the MPU. The method comprises the following steps: Step S1, the flash diagnostic instrument is connected to the Switch via an Ethernet ETH cable; Step S2, the flash diagnostic instrument establishes a UDP connection with the MPU; Step S3, the flash diagnostic instrument initiates an identity verification request to the MPU; Step S4, the MPU verifies whether the identity of the flash diagnostic instrument is legal, if so, executes step S5; Step S5, the flash diagnostic instrument initiates a file transfer request to the MPU, and sends the controller flash program compressed file including the MCU flash program file, the MPU flash program file and the communication SoC flash program file to the MPU; Step S6, the MPU receives and stores the controller flash program compressed file; Step S7, the flash diagnostic instrument sends a file check value to the MPU; Step S8, the MPU receives the file check value as a preset file check value, and calculates a file check value according to the received controller flash program compressed file as a current file check value; Step S9, the MPU compares the current file check value with the preset file check value to see if they are consistent, if they are consistent, executing step S10; Step S10, the flash diagnostic instrument initiates an installation request to the MPU; Step S11, the MPU decompresses the controller software upgrade compressed file and parses the file content; Step S12, the MPU determines whether the decompressed file content is legal based on the built-in flash file list, and if legal, executes step S13; Step S13, the MPU downloads the MCU flash program file to Nor Flash through RPC, downloads the communication SoC flash program file to the internal memory of the communication SoC through Ethernet ETH, writes the MPU flash program file to the eMMC, and performs flash updates respectively; Step S14, the MPU sends the installation result to the flash diagnostic instrument; Step S15: If the installation is successful, the flash diagnostic instrument resets the central domain controller.

2. The vehicle central domain controller software upgrade method based on flashing diagnostic instrument according to claim 1 is characterized in that: in, In the step S13, the flash update of the MCU specifically includes the following sub-steps: Step S13-1-1, the MPU calls the flashing service of the MCU through RPC; Step S13-1-2, the MPU sends the MCU flashing program file to the MCU via RPC; Step S13-1-3, the MCU erases the data of the inactive partition of the Nor Flash, and writes the program file to be flashed into the inactive partition; Step S13-1-4, the MCU sets the currently running partition to be inactive, and sets the partition where the new program is written to be active; Step S13-1-5, the MCU is reset, the activated partition is started, and the new program is run.

3. The vehicle central domain controller software upgrade method based on flashing diagnostic instrument according to claim 1 is characterized in that: in, In step S13, the flash update of the MPU specifically includes the following sub-steps: Step S13-2-1, the MPU erases the data of the inactive partition of the eMMC, and writes the program file to be flashed into the inactive partition; Step S13-2-2, the MPU sets the currently running partition to be inactive, and sets the partition where the new program is written to be active; Step S13-2-3, the MPU is reset, the activated partition is started, and the new program is run.

4. The vehicle central domain controller software upgrade method based on flashing diagnostic instrument according to claim 1 is characterized in that: in, In the step S13, the flash update of the communication SoC specifically includes the following sub-steps: Step S13-3-1, the MPU initiates UDP communication to the communication SoC, and sends the communication SoC flashing program file to the communication SoC; Step S13-3-2, the MPU sends an update instruction to the communication SoC; Step S13-3-3, the communication SoC backs up the currently running program and overwrites the running program with the new program; Step S13-3-4, the communication SoC is reset and a new program is run.

5. The vehicle central domain controller software upgrade method based on flashing diagnostic instrument according to claim 1 is characterized in that: in, The MCU is connected to the CAN bus of the vehicle and is responsible for receiving CAN messages of the entire vehicle.

6. The vehicle central domain controller software upgrade method based on flashing diagnostic instrument according to claim 1 is characterized in that: in, The communication SoC has a 4G network, which is used to provide Internet access capabilities for the central domain controller.

7. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by the processor, the steps of the vehicle central domain controller software upgrade method based on the flashing diagnostic instrument as described in any one of claims 1 to 6 are implemented.

8. A vehicle central domain controller software upgrade system based on a flash diagnostic instrument, characterized in that: The system is used to execute the steps of the vehicle central domain controller software upgrade method based on flashing diagnostic instrument as described in any one of claims 1-6.

Citation Information

Patent Citations

  • Vehicle-mounted internet gateway, vehicle OTA upgrading system and method and computer storage medium

    CN111385191A

  • CAN bus signal analysis method, device and system based on multi-core SoC

    CN115225424A

  • Diagnostic flashing system, method and device in automobile OTA upgrading process and medium

    CN116866172A

  • System and method for management of software updates at a vehicle computing system

    US20150301821A1

  • Software upgrade method and apparatus for vehicle-mounted controller, and device and storage medium

    WO2023241458A1

Cited By

  • Diagnosis agent assembly and diagnosis control method of vehicle

    CN120652962A