Upgrading method of vehicle controller and cabin area controller

Abstract

The invention provides an upgrading method of a vehicle controller and a cockpit area controller, and the method comprises the steps: an MCU module can output an enabling control signal to a power module in a running process, and controls a voltage stabilization module to output the enabling control signal to the power module in response to a received upgrading request sent by an SOC system, thereby achieving the upgrading of the vehicle controller. The power supply module supplies power to the SOC system based on the enabling control signal output by the MCU module or the voltage stabilization module so as to maintain the operation of the SOC system and enable the SOC system to determine the upgrading progress information of each controller, and the method can realize the purpose that the MCU module and the voltage stabilization module jointly control the enabling of the power supply module through the enabling control signal output by the MCU module or the voltage stabilization module, so that the upgrading progress information of each controller can be determined. Therefore, when the MCU module is reset, the power supply of the power supply module is not influenced, so that the SOC system can maintain a normal working state.

Description

Technical Field

[0001] The present application relates to the field of automobile technology, and in particular to a vehicle controller upgrade method and a cockpit domain controller. Background Art

[0002] With the continuous advancement of automobile intelligence, more and more ECUs (Electronic Control Units) are upgrading their software via OTA (Over-The-Air). During the upgrade of multiple ECUs, OTAMaster is needed to act as a diagnostic instrument and monitor the upgrade progress of each ECU.

[0003] Since OTAMaster needs to ensure that the upgrade progress of each ECU can be displayed on the display screen during the upgrade process, there are usually two ways to implement the traditional cockpit domain controller as OTAMaster: the first is to use the AB partition upgrade method. Although this method can monitor the upgrade progress of each ECU during the upgrade process and will not cause the cockpit domain controller to reset, it requires the main processor to have a large storage space, which will greatly increase the cost of the cockpit domain controller; the second is that the system uses two MCUs (Microcontroller Unit), in which the main MCU controls the power-on of the system peripherals and external communications, and the other auxiliary MCU simply controls the system's key power supply to ensure that the main MCU can still work normally when the OTA upgrade is reset.

[0004] However, both of the above two OTAMaster implementation methods will make the cost of the cockpit domain controller high. Summary of the invention

[0005] In view of the above-mentioned defects or deficiencies in the prior art, the present application aims to provide a method for upgrading a vehicle controller and a cockpit domain controller to solve the problem of high cost of using a cockpit domain controller in the prior art.

[0006] The embodiment of the present application provides a method for upgrading a vehicle controller, which is applied to a cockpit domain controller, wherein the cockpit domain controller includes an MCU module, a SOC system, a power module, and a voltage stabilization module. The method includes:

[0007] During operation, the MCU module outputs an enable control signal to the power module;

[0008] In response to receiving the upgrade request sent by the SOC system, the MCU module controls the voltage stabilization module to output an enable control signal to the power module;

[0009] The power module supplies power to the SOC system based on the enable control signal output by the MCU module or the voltage regulator module to keep the SOC system running, so that the SOC system determines the upgrade progress information of each controller in the vehicle.

[0010] Optionally, the voltage stabilization module includes a voltage maintaining submodule and a driving submodule, and the driving submodule includes a high-side driving circuit and a multi-channel parallel output circuit;

[0011] The MCU module controls the voltage stabilization module to output an enable control signal to the power module in response to receiving an upgrade request sent by the SOC system, including:

[0012] In response to the upgrade request, the MCU module controls the voltage maintaining submodule to output a high level signal to the high-side driving circuit;

[0013] Based on the high level signal, the high side driving circuit outputs an enable control signal to each sub-module in the power module through the multi-channel parallel output circuit.

[0014] Optionally, the voltage holding submodule includes a delay circuit, and the MCU module controls the voltage holding submodule to output a high-level signal to the high-side drive circuit, including:

[0015] The MCU module sends a first pulse width modulation signal to the delay circuit;

[0016] The delay circuit outputs a high level signal to the high-side driving circuit in response to the first pulse width modulation signal.

[0017] Optionally, the voltage holding submodule includes a self-locking circuit, and the MCU module controls the voltage holding submodule to output a high-level signal to the high-side drive circuit, including:

[0018] The MCU module sends a pin high request to the SOC system;

[0019] The SOC system generates a pin high signal in response to the pin high request and sends it to the self-locking circuit;

[0020] The self-locking circuit sets the preset pin to a high level in response to the pin pull-up signal, so that the preset pin outputs a high level signal to the high-side driving circuit.

[0021] Optionally, the method further includes:

[0022] The MCU module sends a second pulse width modulation signal to the delay circuit in response to receiving a restart request sent by the SOC system;

[0023] The delay circuit outputs a low level signal to the high side drive circuit in response to the second pulse width modulation signal, so that the high side drive circuit turns off the enable control signal;

[0024] The second pulse width modulation signal has a different frequency and duty cycle from the first pulse width modulation signal.

[0025] Optionally, the method further includes:

[0026] In response to receiving the restart request sent by the SOC system, the MCU module sends a pin pull-down request to the SOC system;

[0027] The SOC system generates a pin-low signal in response to the pin-low request and sends it to the self-locking circuit;

[0028] The self-locking circuit sets the preset pin to a low level in response to the pin pull-down signal, so that the preset pin outputs a low level signal to the high-side driving circuit, and the high-side driving circuit turns off the enable control signal based on the low level signal.

[0029] Optionally, the cockpit domain controller further includes an upgrade progress display module, the upgrade progress display module includes a serializer submodule and a display screen wake-up submodule, and the method further includes:

[0030] The SOC system sends a wake-up signal to the display screen wake-up submodule based on the upgrade request, so that the display screen wake-up submodule controls the vehicle computer screen to enter a working state based on the wake-up signal;

[0031] The SOC system generates display data according to the upgrade progress information of each controller, and sends the display data to the serializer submodule;

[0032] The serializer submodule converts the display data into serial data, and transmits the serial data to the vehicle screen for display.

[0033] Optionally, the cockpit domain controller further includes an upgrade communication module, the upgrade communication module includes an Ethernet submodule, and the method further includes:

[0034] The SOC system, in response to receiving the upgrade package data sent by the vehicle-mounted communication module or the central gateway of the vehicle through the Ethernet submodule, determines whether the component to be upgraded corresponding to the upgrade package data is the MCU module, or other controllers except the cockpit domain controller;

[0035] If so, the SOC system sends an upgrade request to the MCU module through the Ethernet submodule or the serial communication line.

[0036] Optionally, the upgraded communication module further includes a bus module, and the method further includes:

[0037] When the component to be upgraded is other controllers, the SOC system sends the upgrade package data to the component to be upgraded through the Ethernet sub-module, or the SOC system sends the upgrade package data to the MCU module through the Ethernet sub-module or the serial communication line, and the MCU module sends the upgrade package data to the component to be upgraded through the bus module.

[0038] The embodiment of the present application further provides a cockpit domain controller, the cockpit domain controller includes an MCU module, a SOC system, a power module and a voltage stabilization module, wherein;

[0039] The MCU module is used to output an enable control signal to the power module during operation, and in response to receiving an upgrade request sent by the SOC system, control the voltage regulator module to output an enable control signal to the power module;

[0040] The power module is used to supply power to the SOC system based on the enable control signal output by the MCU module or the voltage stabilization module to keep the SOC system running;

[0041] The SOC system is used to determine the upgrade progress information of each controller in the vehicle.

[0042] The present application also provides an electronic device, the electronic device comprising:

[0043] Processor and memory;

[0044] The processor is used to execute the steps of the vehicle controller upgrade method provided in any embodiment of the present application by calling the program or instruction stored in the memory.

[0045] An embodiment of the present application also provides a computer-readable storage medium, which stores a program or instruction, and the program or instruction enables a computer to execute the steps of the vehicle controller upgrade method provided in any embodiment of the present application.

[0046] In summary, the present application proposes a vehicle controller upgrade method, which is applied to a cockpit domain controller including an MCU module, a SOC system, a power module and a voltage regulator module, wherein the MCU module can output an enable control signal to the power module during operation, and in response to receiving an upgrade request sent by the SOC system, control the voltage regulator module to output an enable control signal to the power module, so that the power module supplies power to the SOC system based on the enable control signal output by the MCU module or the voltage regulator module to maintain the operation of the SOC system, so that the SOC system can determine the upgrade progress information of each controller. The method can control the enablement of the power module by the MCU module to supply power to the SOC system when the MCU module or other controllers are not upgraded. When the MCU module or other controllers are upgraded, since the MCU module may be reset, in order to maintain the power supply of the power module during the reset of the MCU module, the voltage regulator module controls the enablement of the power module to supply power to the SOC system, which can fully ensure that the power supply of the power module is not affected when the MCU module is reset, so that the SOC system can maintain a normal working state. BRIEF DESCRIPTION OF THE DRAWINGS

[0047] In order to more clearly illustrate the specific implementation methods of the present application or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0048] Figure 1 is a flow chart of a method for upgrading a vehicle controller provided in an embodiment of the present application;

[0049] Figure 2 It is a structural schematic diagram of a voltage stabilizing module provided in an embodiment of the present application;

[0050] Figure 3 It is a structural diagram of a cockpit domain controller provided in an embodiment of the present application;

[0051] Figure 4 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0052] The present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the relevant invention, rather than to limit the invention. It is also necessary to explain that, for ease of description, only the parts related to the invention are shown in the accompanying drawings.

[0053] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0054] As mentioned in the background technology, in response to the problems in the prior art, this application proposes a method for upgrading a vehicle controller, which can be applied to a cockpit domain controller. The cockpit domain controller provided in the embodiment of this application includes an MCU module, a SOC system, a power module, and a voltage stabilization module. Before introducing the method for upgrading a vehicle controller provided in the embodiment of this application in detail, each module in the cockpit domain controller is first described.

[0055] Among them, the SOC system can be understood as the minimum SOC (System on Chip) system, which is the core part of the cockpit domain controller, including at least the SOC module. In addition to the SOC module, it can also include a DDR (Double Data Rate) module and a UFS (Universal Flash Storage) module. In the relevant links of the controller upgrade, the SOC system can be used as the OTA upgrade master, mainly used to download upgrade packages and monitor the progress of vehicle upgrades. The SOC system needs to remain in working condition during the upgrade of the cockpit domain controller or other controllers to avoid a black screen restart during the upgrade process.

[0056] Among them, the power module can be the core power supply module in the entire cockpit domain controller, which is mainly used to power the SOC system. The power module may include multiple sub-modules, each of which supplies power to each module in the SOC system. Exemplarily, the power module includes a SOC power sub-module, a DDR power sub-module, and a UFS power sub-module. During the normal operation of the cockpit domain controller (i.e., providing services to users) and OTA upgrades, the power module needs to maintain a stable voltage output to ensure that the SOC system can work normally.

[0057] Among them, the MCU module is mainly used to realize the power on and off timing management, logic control, external communication and support OTA upgrade of the cockpit domain controller. In the embodiment of the present application, the MCU module can control the normal power supply of the SOC system by controlling the enablement of the power module. In the process of upgrading the MCU module in the cockpit domain controller, since the MCU module is upgraded by resetting into the Bootloader (boot loader) and then erasing the original software, the reset of the MCU module will cause it to be unable to continue to maintain the output voltage of the power module, which will cause the SOC system to fail to work normally and affect the monitoring and display of the upgrade progress. Therefore, a voltage stabilizing module can be set to maintain the output voltage of the power module during the reset of the MCU module.

[0058] Among them, the voltage regulator module is mainly used to maintain the output voltage of the power module during the reset of the MCU module, so as to ensure that the SOC system can still work normally during the upgrade process of each controller. The voltage regulator module can output a signal to the power module to ensure the output of the power module.

[0059] Figure 1 is a flow chart of a vehicle controller upgrade method provided by an embodiment of the present application. Figure 1 , the upgrading method of the vehicle controller specifically includes:

[0060] S110. During operation, the MCU module outputs an enable control signal to the power module.

[0061] Specifically, during operation, the MCU can output an enable control signal to the power module to control the enablement of each sub-module in the power module through the enable control signal, that is, activate the operation of each sub-module in the power module, so that each sub-module in the power module can output voltage to the corresponding module in the SOC system.

[0062] S120 , in response to receiving the upgrade request sent by the SOC system, the MCU module controls the voltage stabilization module to output an enable control signal to the power module.

[0063] The upgrade request may be a request to upgrade the MCU module or other controllers except the cockpit domain controller. Since the upgrade of the SOC system itself is usually implemented in an AB partitioning manner, the system will not be reset when the SOC system itself is upgraded. However, considering that the upgrade of the MCU module or other controllers may cause the MCU module to reset, in the embodiment of the present application, if the SOC system detects that the MCU module or other controller has been upgraded, an upgrade request may be sent to the MCU module.

[0064] In some implementations, the cockpit domain controller further includes an upgrade communication module, the upgrade communication module includes an Ethernet submodule, and the method provided in the embodiment of the present application further includes the following steps:

[0065] Step 11, the SOC system responds to receiving the upgrade package data sent by the vehicle's on-board communication module or central gateway through the Ethernet submodule, and determines whether the component to be upgraded corresponding to the upgrade package data is an MCU module, or other controllers except the cockpit domain controller;

[0066] Step 12: If yes, the SOC system sends an upgrade request to the MCU module via the Ethernet submodule or the serial communication line.

[0067] Specifically, in step 11, the SOC module in the SOC system can receive the upgrade package data sent from the vehicle's onboard communication module (Telematics Box, T-Box) or the central gateway through the Ethernet sub-module, and download and save the upgrade package data locally.

[0068] Furthermore, the SOC system can determine whether the component to be upgraded corresponding to the upgrade package data is an MCU module or other controller, that is, determine whether it is to upgrade itself, the MCU module or other controllers.

[0069] In step 12, if the SOC system determines that the MCU module or other controller needs to be upgraded, the SOC system can generate an upgrade request and send the upgrade request to the MCU module through the Ethernet submodule or the serial peripheral interface (SPI).

[0070] Through the above steps 11 and 12, when the SOC system determines that the MCU module is upgraded or other controllers are upgraded, the SOC system can be prevented from failing to work due to the reset of the MCU module, and an upgrade request can be sent to the MCU module so that the power module can subsequently be used to power the SOC system through the voltage regulator module.

[0071] In the embodiment of the present application, in addition to realizing upgrade monitoring, the SOC system can also realize upgrades for MCU modules or other controllers.

[0072] In some implementations, the upgraded communication module further includes a bus module, and the method provided in the embodiment of the present application further includes:

[0073] When the component to be upgraded is other controllers, the SOC system sends the upgrade package data to the component to be upgraded through the Ethernet sub-module, or the SOC system sends the upgrade package data to the MCU module through the Ethernet sub-module or the serial communication line, and the MCU module sends the upgrade package data to the component to be upgraded through the bus module.

[0074] The bus module may include a CAN (Controller Area Network) submodule and / or a FlexRay submodule.

[0075] Specifically, if it is necessary to upgrade other controllers, the SOC system can directly send the upgrade package data to the components to be upgraded through the Ethernet sub-module, thereby realizing the upgrade of other controllers.

[0076] Alternatively, the SOC system first sends the upgrade package data to the MCU module through the Ethernet submodule or SPI, and then the MCU module sends the upgrade package data to the component to be upgraded through the CAN submodule or FlexRay submodule to achieve upgrade for other controllers.

[0077] In the above implementation, considering that some controllers may not have Ethernet interfaces, two upgrade methods are set, one of which is that the SOC system directly upgrades other controllers, and the other is that the SOC system upgrades other controllers through the MCU module, which can avoid the situation where the upgrade fails due to the absence of one of the interfaces. In addition, if the component to be upgraded is an MCU module, the SOC system can send the upgrade package data to the MCU module through the Ethernet submodule or the serial communication line to achieve the upgrade of the MCU module.

[0078] In the embodiment of the present application, after the MCU module receives the upgrade request sent by the SOC system, the MCU module can control the voltage stabilizing module to output an enable control signal to the power module. Among them, the power supply of some circuits in the voltage stabilizing module is the system normal power, which can stably output the enable control signal to the power module.

[0079] In a specific implementation, the voltage stabilization module includes a voltage maintaining submodule and a driving submodule, and the driving submodule includes a high-side driving circuit and a multi-channel parallel output circuit;

[0080] In response to receiving the upgrade request sent by the SOC system, the MCU module controls the voltage regulator module to output an enable control signal to the power module, including the following steps:

[0081] Step 21, in response to the upgrade request, the MCU module controls the voltage holding submodule to output a high level signal to the high-side drive circuit;

[0082] Step 22: Based on the high-level signal, the high-side driving circuit outputs an enable control signal to each sub-module in the power module through a multi-channel parallel output circuit.

[0083] Among them, in step 21, after the MCU module receives the upgrade request sent by the SOC system, it can first control the voltage holding submodule to output a high-level signal to the high-side drive circuit.

[0084] Furthermore, in step 22, after receiving the high-level signal, the high-side drive circuit can output a voltage, and the voltage is divided into multiple outputs through a multi-way parallel output circuit, and acts on each sub-module in the power module respectively, so as to achieve the purpose of controlling the enabling of each sub-module in the power module, so that the enabling of the power module is controlled in parallel by the enabling control signal output by the multi-way parallel output circuit and the enabling control signal output by the MCU module, so that the output voltage of the power module can be stabilized when the MCU module is reset.

[0085] It should be noted that in the above step 21, the MCU module controls the voltage holding submodule to output a high-level signal to the high-side drive circuit. Specifically, the MCU module may directly control part of the circuit in the voltage holding submodule to output a high-level signal, or the MCU module may notify the SOC system and control part of the circuit in the voltage holding submodule to output a high-level signal via the SOC system.

[0086] With respect to the above step 21, in one example, the voltage holding submodule includes a delay circuit, and the MCU module controls the voltage holding submodule to output a high-level signal to the high-side drive circuit, including the following steps:

[0087] Step 211, the MCU module sends a first pulse width modulation signal to the delay circuit;

[0088] Step 212: The delay circuit outputs a high level signal to the high-side driving circuit in response to the first pulse width modulation signal.

[0089] Wherein, in step 211, upon receiving the upgrade request, the MCU module may immediately output a first pulse width modulation signal with a certain frequency and duty cycle to the delay circuit in the voltage holding submodule before resetting itself.

[0090] Further, in step 212, after the delay circuit recognizes the first pulse width modulation signal, it keeps outputting a high level signal to the high-side drive circuit. The delay circuit is powered by the system normal power, which is independent of the MCU module and the SOC system and is not affected by the reset of the MCU module. It will output a low level only when it receives another pulse width modulation signal with a specific frequency and duty cycle, otherwise it keeps outputting a high level signal after receiving the first pulse width modulation signal.

[0091] Through the above steps 211-212, when the MCU module receives an upgrade request, it can output a PWM (Pulse Width Modulation) signal to the delay circuit, so that the delay circuit can output a high-level signal to the high-side drive circuit, thereby causing the high-side drive circuit to output a voltage, which is divided into multiple enable control signal outputs through a multi-channel parallel output circuit.

[0092] With respect to the above step 21, in another example, the voltage holding submodule includes a self-locking circuit, and the MCU module controls the voltage holding submodule to output a high-level signal to the high-side drive circuit, including the following steps:

[0093] Step 213, the MCU module sends a pin high request to the SOC system;

[0094] Step 214, the SOC system generates a pin high signal in response to the pin high request and sends it to the self-locking circuit;

[0095] Step 215 , the self-locking circuit sets the preset pin to a high level in response to the pin pull-up signal, so that the preset pin outputs a high level signal to the high-side driving circuit.

[0096] Wherein, in step 213, upon receiving the upgrade request, the MCU module may immediately send a pin high request to the SOC module in the SOC system before resetting itself.

[0097] Furthermore, in step 214-step 215, after the SOC module in the SOC system receives the pin pull-up request, it can send a pin pull-up signal to the self-locking circuit in the voltage holding submodule, so that the self-locking circuit sets the preset pin (such as GPIO) to a high level to output a high level signal to the high-side drive circuit through the preset pin.

[0098] Through the above steps 213-215, when the MCU module receives an upgrade request, it can send a pin-pull-high request to the SOC system, requesting the SOC system to send a pin-pull-high signal to the self-locking circuit, so that the self-locking circuit can output a high-level signal to the high-side drive circuit, thereby causing the high-side drive circuit to output a voltage, which is divided into multiple enable control signal outputs through a multi-channel parallel output circuit.

[0099] like Figure 2 As shown, Figure 2 This is a schematic diagram of the structure of a voltage stabilizing module provided in an embodiment of the present application. The voltage stabilizing module includes a voltage holding submodule and a driving submodule. The voltage holding submodule includes a delay circuit and a self-locking circuit. The driving submodule includes a high-side driving circuit and a multi-channel IO parallel output circuit. The output of the voltage holding submodule is used as the input of the driving submodule, and finally controls the driving submodule to output a voltage signal (i.e., an energy control signal) to act on the power module.

[0100] Among them, the outputs of the self-locking circuit and the delay circuit can both act on the driving sub-module. When the high-side driving circuit in the driving sub-module receives any high-level signal, it will output a voltage. The voltage acts on each sub-module of the power module through the multi-channel IO parallel output circuit, so that the enable of each sub-module in the power module is controlled in parallel by the multi-channel IO parallel output circuit and the MCU module output signal, so as to achieve the purpose of maintaining the output of the power module when the MCU module is reset.

[0101] It should be noted that in the embodiment of the present application, the purpose of using the self-locking circuit and the delay circuit is to increase the reliability of the cockpit system. Considering the possibility of circuit failure, if one of the circuits fails, a high-level signal can be output to the high-side drive circuit through another circuit to fully ensure that the power supply of the power module is not affected when the MCU module is reset, so that the SOC system can maintain a normal working state. In addition, a multi-channel IO parallel output circuit is used to act on each sub-module of the power module, without the need for multiple circuits to control separately, which can reduce the IO resources of the SOC module and the MCU module and the cost of the cockpit system.

[0102] S130, the power module supplies power to the SOC system based on the enable control signal output by the MCU module or the voltage regulator module to keep the SOC system running, so that the SOC system determines the upgrade progress information of each controller in the vehicle.

[0103] Specifically, when the MCU module is not reset, the power module can activate each sub-module to supply power to each module in the SOC system according to the enable control signal sent by the MCU module, or, when the MCU module is reset, the power module can activate each sub-module to supply power to each module in the SOC system according to the enable control signal output by the voltage regulator module.

[0104] In the embodiment of the present application, during the operation of the SOC system, if there is an upgraded controller in the vehicle, the SOC system can not only be responsible for upgrading the controller, but also detect and display the upgrade progress information of each controller. Among them, each controller can send an upgrade completion signal to the SOC module in the SOC system after the upgrade is completed, and then the SOC system can obtain the upgrade progress information of each controller.

[0105] In a specific implementation, the cockpit domain controller further includes an upgrade progress display module, the upgrade progress display module includes a serializer submodule and a display screen wake-up submodule, and the method provided in the embodiment of the present application further includes the following steps:

[0106] Step 31: The SOC system sends a wake-up signal to the display screen wake-up submodule based on the upgrade request, so that the display screen wake-up submodule controls the vehicle's computer screen to enter a working state based on the wake-up signal;

[0107] Step 32, the SOC system generates display data according to the upgrade progress information of each controller, and sends the display data to the serializer submodule;

[0108] Step 33: The serializer submodule converts the display data into serial data, and transmits the serial data to the vehicle computer screen for display.

[0109] The serializer submodule may specifically be a Serializer submodule, which is used to convert parallel data into serial data.

[0110] Specifically, in step 31, the SOC module in the SOC system may first send a wake-up signal to the display screen wake-up submodule according to the upgrade request, so that the display screen wake-up submodule wakes up the vehicle screen and puts it into working state based on the wake-up signal.

[0111] Furthermore, in step 32-step 33, the SOC module in the SOC system can generate display data based on the upgrade progress information of each controller. For example, the display data can specifically describe the upgrade progress in the form of a percentage. The SOC module sends the display data to the serializer sub-module, and the serializer sub-module can convert it into serial data and send the serial data to the vehicle screen through the interface for display.

[0112] Of course, when the SOC module in the SOC system is upgrading itself, it can also send a wake-up signal to the display wake-up sub-module to wake up the vehicle screen, and display its own upgrade progress information on the vehicle screen through the serializer sub-module.

[0113] Through the above steps 31 to 33, when the SOC system upgrades the MCU module, or when other controllers are upgraded through the OTA communication sub-module, the upgrade progress can be displayed on the vehicle screen, helping users to understand the update status in real time, avoiding users from mistakenly thinking that the vehicle is faulty, and improving the user experience.

[0114] Considering that the power on and off of each module in the cockpit system has a certain timing, under normal use, such as when the upgrade is completed, the voltage regulator module can be canceled from outputting the enable control signal to the power module to avoid power-on timing disorder during subsequent normal operation of the cockpit.

[0115] In one example, the method provided in the embodiment of the present application further includes the following steps:

[0116] Step 41, the MCU module sends a second pulse width modulation signal to the delay circuit in response to receiving a restart request sent by the SOC system;

[0117] Step 42, the delay circuit outputs a low level signal to the high side drive circuit in response to the second pulse width modulation signal, so that the high side drive circuit turns off the enable control signal;

[0118] The frequency and duty cycle of the second pulse width modulation signal are different from those of the first pulse width modulation signal.

[0119] Specifically, the MCU module will send an upgrade completion signal to the SOC system when the upgrade is completed, and other controllers will also send upgrade completion signals to the SOC system when the upgrade is completed. The SOC module in the SOC system can determine whether the cockpit controller needs to be restarted based on the received upgrade completion signal.

[0120] For example, when the SOC module determines that all components to be upgraded have completed the upgrade, it can generate a restart request and send it to the MCU module before restarting, or when it determines that any component to be upgraded has completed the upgrade, it can generate a restart request and send it to the MCU module before restarting to exit the upgrade mode and enter the normal working mode.

[0121] In step 41, if the MCU module receives a restart request sent by the SOC system, it can generate a second pulse width modulation signal with a certain frequency and duty cycle, and send it to the delay circuit. Then in step 42, after the delay circuit recognizes the second pulse width modulation signal, it will output a flat signal to the high-side drive circuit. After receiving the low-level signal, the high-side drive circuit will immediately shut down the output voltage, that is, shut down the enable control signal. At this time, the enable of each sub-module in the power module is restored to the enable control signal output by the MCU module, that is, the voltage stabilization module is in the off state. Subsequently, the MCU module can control the cockpit controller to restart, and the cockpit system will be powered on according to the normal power-on and power-off timing and enter the normal working mode.

[0122] Through the above steps 41 and 42, after the upgrade of all or part of the controllers is completed, the delay circuit can be controlled by the MCU module to restore the enable of each sub-module in the power module to the individual control by the enable control signal output by the MCU module, so as to avoid affecting the normal power on and off timing of the subsequent cockpit system.

[0123] In another example, the method provided in the embodiment of the present application further includes the following steps:

[0124] Step 43, in response to receiving the restart request sent by the SOC system, the MCU module sends a pin pull-down request to the SOC system;

[0125] Step 44, the SOC system generates a pin-low signal in response to the pin-low request and sends it to the self-locking circuit;

[0126] Step 45 , the self-locking circuit sets the preset pin to a low level in response to the pin pull-down signal, so that the preset pin outputs a low level signal to the high-side driving circuit, and the high-side driving circuit turns off the enable control signal based on the low level signal.

[0127] Among them, in step 43, if the MCU module receives a restart request sent by the SOC system, it can generate a pin pull-down request and send it to the SOC module in the SOC system. Then in step 44, the SOC module generates a pin pull-down signal based on the pin pull-down request and sends it to the self-locking circuit.

[0128] Furthermore, in step 45, the self-locking circuit can set the preset pin (GPIO) to a low level after receiving the pin pull-down signal, so as to output a low level signal to the high-side drive circuit through the preset pin. After receiving the low level signal, the high-side drive circuit will immediately shut down the output voltage, that is, shut down the enable control signal. At this time, the enable of each sub-module in the power module is restored to the individual control of the enable control signal output by the MCU module, that is, the voltage stabilization module is in the off state.

[0129] Through the above steps 43 to 45, after all or part of the controllers are upgraded, the MCU module controls the self-locking circuit through the SOC system to restore the enable of each sub-module in the power module to the individual control by the enable control signal output by the MCU module, so as to avoid affecting the normal power on and off timing of the subsequent cockpit system.

[0130] It should be noted that if any circuit in the self-locking circuit and the delay circuit outputs a low-level signal, the high-side drive circuit can immediately shut down the output voltage, thereby avoiding the situation where one of the self-locking circuit and the delay circuit fails and cannot be restored to the normal power-on sequence, thereby ensuring the stability of the entire system.

[0131] The vehicle controller upgrade method provided in the embodiment of the present application is applied to a cockpit domain controller including an MCU module, a SOC system, a power module and a voltage stabilizing module, wherein the MCU module can output an enable control signal to the power module during operation, and in response to receiving an upgrade request sent by the SOC system, control the voltage stabilizing module to output an enable control signal to the power module, so that the power module supplies power to the SOC system based on the enable control signal output by the MCU module or the voltage stabilizing module to maintain the operation of the SOC system, so that the SOC system can determine the upgrade progress information of each controller. The method can control the enabling of the power module by the MCU module to supply power to the SOC system when the MCU module or other controllers are not upgraded. When the MCU module or other controllers are upgraded, since the MCU module may be reset, in order to maintain the power supply of the power module during the reset of the MCU module, the voltage stabilizing module controls the enabling of the power module to supply power to the SOC system. This can fully ensure that the power supply of the power module is not affected when the MCU module is reset, so that the SOC system can maintain normal working state.

[0132] The embodiment of the present application further provides a cockpit domain controller, which includes an MCU module, a SOC system, a power module, and a voltage regulator module, wherein:

[0133] The MCU module is used to output an enable control signal to the power module during operation, and in response to receiving an upgrade request sent by the SOC system, control the voltage regulator module to output the enable control signal to the power module;

[0134] A power module is used to supply power to the SOC system based on an enable control signal output by the MCU module or the voltage regulator module to keep the SOC system running;

[0135] The SOC system is used to determine the upgrade progress information of each controller in the vehicle.

[0136] On the basis of the above-mentioned embodiments, optionally, the voltage stabilizing module includes a voltage maintaining submodule and a driving submodule, the driving submodule includes a high-side driving circuit and a multi-channel parallel output circuit, and the MCU module is further used to respond to the upgrade request and control the voltage maintaining submodule to output a high-level signal to the high-side driving circuit; the high-side driving circuit is used to output an enable control signal to each submodule in the power supply module through the multi-channel parallel output circuit based on the high-level signal.

[0137] Based on the above embodiments, optionally, the voltage maintaining submodule includes a delay circuit, an MCU module, and is also used to send a first pulse width modulation signal to the delay circuit; the delay circuit is used to output a high-level signal to the high-side drive circuit in response to the first pulse width modulation signal.

[0138] On the basis of the above-mentioned embodiments, optionally, the voltage holding submodule includes a self-locking circuit, an MCU module, and is also used to send a pin pull-up request to the SOC system; the SOC system is also used to respond to the pin pull-up request, generate a pin pull-up signal and send it to the self-locking circuit; the self-locking circuit is used to respond to the pin pull-up signal and set the preset pin to a high level, so that the preset pin outputs a high level signal to the high-side drive circuit.

[0139] On the basis of the above embodiments, optionally, the MCU module is further used to send a second pulse width modulation signal to the delay circuit in response to receiving a restart request sent by the SOC system; the delay circuit is further used to output a low level signal to the high-side drive circuit in response to the second pulse width modulation signal, so that the high-side drive circuit turns off the enable control signal; wherein the frequency and duty cycle of the second pulse width modulation signal are different from those of the first pulse width modulation signal. .

[0140] On the basis of the above implementation modes, optionally, the MCU module is further configured to send a pin pull-down request to the SOC system in response to receiving a restart request sent by the SOC system;

[0141] The SOC system is further configured to generate a pin-lowing signal in response to the pin-lowing request and send it to the self-locking circuit;

[0142] The self-locking circuit is also used to set the preset pin to a low level in response to the pin pull-down signal, so that the preset pin outputs a low level signal to the high-side drive circuit, and the high-side drive circuit is also used to turn off the enable control signal based on the low level signal.

[0143] On the basis of the above-mentioned embodiments, optionally, the cockpit domain controller also includes an upgrade progress display module, and the upgrade progress display module includes a serializer sub-module and a display screen wake-up sub-module. The SOC system is also used to send a wake-up signal to the display screen wake-up sub-module based on the upgrade request, so that the display screen wake-up sub-module controls the vehicle's computer screen to enter a working state based on the wake-up signal; and generates display data according to the upgrade progress information of each controller, and sends the display data to the serializer sub-module; the serializer sub-module is used to convert the display data into serial data, and transmit the serial data to the vehicle screen for display.

[0144] On the basis of the above embodiments, optionally, the cockpit domain controller also includes an upgrade communication module, and the upgrade communication module includes an Ethernet sub-module. The SOC system is also used to respond to the upgrade package data sent by the vehicle-mounted communication module or central gateway of the vehicle through the Ethernet sub-module, and determine whether the component to be upgraded corresponding to the upgrade package data is the MCU module, or other controllers other than the cockpit domain controller; if so, send an upgrade request to the MCU module through the Ethernet sub-module or the serial communication line.

[0145] On the basis of the above-mentioned embodiments, optionally, the upgrade communication module also includes a bus module, and the SOC system is further used to send the upgrade package data to the component to be upgraded through the Ethernet sub-module when the component to be upgraded is other controllers, or to send the upgrade package data to the MCU module through the Ethernet sub-module or the serial communication line, and the MCU module is further used to send the upgrade package data to the component to be upgraded through the bus module.

[0146] The cockpit domain controller provided in the embodiment of the present application can execute the steps in the upgrade method of the vehicle controller provided in the method embodiment of the present application, and the execution steps and beneficial effects are no longer repeated here.

[0147] For example, Figure 3 This is a structural diagram of a cockpit domain controller provided by an embodiment of the present application, wherein the cockpit domain controller includes an MCU module, an OTA communication module, a voltage stabilization module, a power module, a SOC system, and an upgrade progress display module. The MCU module can communicate with the voltage stabilization module, the power module, the SOC system, and the OTA communication module respectively; the SOC system can communicate with the voltage stabilization module, the power module, the OTA communication module, and the upgrade progress display module respectively; the voltage stabilization module can communicate with the power module.

[0148] Specifically, the OTA communication module includes a bus (CAN / FlexRay) submodule and an Ethernet submodule. The voltage stabilization module includes a voltage maintenance submodule and a driver submodule. The power module includes a SOC power submodule, a DDR power submodule and a UFS power submodule. The SOC system includes a SOC module, a DDR module and a UFS module. The upgrade progress display module includes a serializer submodule and a display wake-up submodule.

[0149] It should be noted that Figure 3 The modules shown in the figure may be modules related to the OTA Master link in the cockpit domain controller. The cockpit domain controller may also include other modules, which is not limited in the embodiments of the present application.

[0150] Figure 4 Schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 4 As shown, the electronic device 400 includes one or more processors 401 and a memory 402 .

[0151] The processor 401 may be a central processing unit (CPU) or other forms of processing units having data processing capabilities and / or instruction execution capabilities, and may control other components in the electronic device 400 to perform desired functions.

[0152] The memory 402 may include one or more computer program products, which may include various forms of computer-readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory may include, for example, random access memory (RAM) and / or cache memory (cache), etc. The non-volatile memory may include, for example, read-only memory (ROM), hard disk, flash memory, etc. One or more computer program instructions may be stored on the computer-readable storage medium, and the processor 401 may run the program instructions to implement the upgrade method of the vehicle controller of any embodiment of the present application described above and / or other desired functions. Various contents such as initial external parameters, thresholds, etc. may also be stored in the computer-readable storage medium.

[0153] In one example, the electronic device 400 may further include: an input device 403 and an output device 404, which are interconnected via a bus system and / or other forms of connection mechanisms (not shown). The input device 403 may include, for example, a keyboard, a mouse, etc. The output device 404 may output various information to the outside, including early warning information, braking force, etc. The output device 404 may include, for example, a display, a speaker, a printer, a communication network and a remote output device connected thereto, etc.

[0154] Of course, to simplify, Figure 4 Only some of the components related to the present application in the electronic device 400 are shown, and components such as a bus, an input / output interface, etc. are omitted. In addition, according to specific application situations, the electronic device 400 may also include any other appropriate components.

[0155] In addition to the above-mentioned methods and devices, an embodiment of the present application may also be a computer program product, which includes computer program instructions, which, when executed by a processor, enable the processor to execute the steps of the vehicle controller upgrade method provided in any embodiment of the present application.

[0156] The computer program product may be written in any combination of one or more programming languages ​​to write program codes for performing the operations of the embodiments of the present application, including object-oriented programming languages, such as Java, C++, etc., and conventional procedural programming languages, such as "C" language or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as an independent software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server.

[0157] In addition, an embodiment of the present application may also be a computer-readable storage medium on which computer program instructions are stored. When the computer program instructions are executed by a processor, the processor executes the steps of the vehicle controller upgrade method provided in any embodiment of the present application.

[0158] The computer readable storage medium can adopt any combination of one or more readable media. The readable medium can be a readable signal medium or a readable storage medium. The readable storage medium can include, for example, but is not limited to, a system, device or device of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination of the above. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the above.

[0159] It should be noted that the terms used in this application are only for describing specific embodiments, rather than limiting the scope of this application. As shown in the specification and claims of this application, unless the context clearly indicates an exception, the words "one", "a", "a kind of" and / or "the" do not specifically refer to the singular, but may also include the plural. The terms "include", "comprise" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method or device. In the absence of further restrictions, the elements defined by the sentence "including one..." do not exclude the presence of other identical elements in the process, method or device including the elements.

[0160] It should also be noted that the terms "center", "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside", etc., indicating the orientation or position relationship, are based on the orientation or position relationship shown in the drawings, and are only for the convenience of describing the present application and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present application. Unless otherwise clearly specified and limited, the terms "installed", "connected", "connected", etc. should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be an indirect connection through an intermediate medium, or it can be a connection between the two elements. For those of ordinary skill in the art, the specific meanings of the above terms in this application can be understood according to specific circumstances.

[0161] This article uses specific examples to illustrate the principles and implementation methods of this application. The description of the above embodiments is only used to help understand the method and its core ideas of this application. The above is only the preferred implementation method of this application. It should be pointed out that due to the limitations of textual expression and the objective existence of infinite specific structures, ordinary technicians in this technical field can make several improvements, modifications or changes without departing from the principles of this application, and can also combine the above technical features in an appropriate manner; these improvements, modifications, changes or combinations, or the direct application of the concept and technical solution of the invention to other occasions without improvement, should be regarded as the scope of protection of this application.

Claims

1. A method for upgrading a vehicle controller, characterized in that: Applied to a cockpit domain controller, the cockpit domain controller includes an MCU module, a SOC system, a power module and a voltage stabilization module, and the method includes: During operation, the MCU module outputs an enable control signal to the power module; In response to receiving the upgrade request sent by the SOC system, the MCU module controls the voltage stabilization module to output an enable control signal to the power module; The power module supplies power to the SOC system based on the enable control signal output by the MCU module or the voltage regulator module to keep the SOC system running, so that the SOC system determines the upgrade progress information of each controller in the vehicle.

2. The method according to claim 1, characterized in that The voltage stabilization module includes a voltage maintaining submodule and a driving submodule, and the driving submodule includes a high-side driving circuit and a multi-channel parallel output circuit; The MCU module controls the voltage stabilization module to output an enable control signal to the power module in response to receiving an upgrade request sent by the SOC system, including: In response to the upgrade request, the MCU module controls the voltage maintaining submodule to output a high level signal to the high-side driving circuit; Based on the high level signal, the high side driving circuit outputs an enable control signal to each sub-module in the power module through the multi-channel parallel output circuit.

3. The method according to claim 2, characterized in that The voltage holding submodule includes a delay circuit, and the MCU module controls the voltage holding submodule to output a high level signal to the high-side drive circuit, including: The MCU module sends a first pulse width modulation signal to the delay circuit; The delay circuit outputs a high level signal to the high-side driving circuit in response to the first pulse width modulation signal.

4. The method according to claim 2, characterized in that: The voltage holding submodule includes a self-locking circuit, and the MCU module controls the voltage holding submodule to output a high-level signal to the high-side drive circuit, including: The MCU module sends a pin high request to the SOC system; The SOC system generates a pin high signal in response to the pin high request and sends it to the self-locking circuit; The self-locking circuit sets the preset pin to a high level in response to the pin pull-up signal, so that the preset pin outputs a high level signal to the high-side driving circuit.

5. The method according to claim 3, characterized in that: The method further comprises: The MCU module sends a second pulse width modulation signal to the delay circuit in response to receiving a restart request sent by the SOC system; The delay circuit outputs a low level signal to the high side drive circuit in response to the second pulse width modulation signal, so that the high side drive circuit turns off the enable control signal; The second pulse width modulation signal has a different frequency and duty cycle from the first pulse width modulation signal.

6. The method according to claim 4, characterized in that The method further comprises: In response to receiving the restart request sent by the SOC system, the MCU module sends a pin pull-down request to the SOC system; The SOC system generates a pin-low signal in response to the pin-low request and sends it to the self-locking circuit; The self-locking circuit sets the preset pin to a low level in response to the pin pull-down signal, so that the preset pin outputs a low level signal to the high-side driving circuit, and the high-side driving circuit turns off the enable control signal based on the low level signal.

7. The method according to claim 1, characterized in that The cockpit domain controller further includes an upgrade progress display module, the upgrade progress display module includes a serializer submodule and a display screen wake-up submodule, and the method further includes: The SOC system sends a wake-up signal to the display screen wake-up submodule based on the upgrade request, so that the display screen wake-up submodule controls the vehicle computer screen to enter a working state based on the wake-up signal; The SOC system generates display data according to the upgrade progress information of each controller, and sends the display data to the serializer submodule; The serializer submodule converts the display data into serial data, and transmits the serial data to the vehicle screen for display.

8. The method according to claim 1, characterized in that The cockpit domain controller further includes an upgrade communication module, the upgrade communication module includes an Ethernet submodule, and the method further includes: The SOC system, in response to receiving the upgrade package data sent by the vehicle-mounted communication module or the central gateway of the vehicle through the Ethernet submodule, determines whether the component to be upgraded corresponding to the upgrade package data is the MCU module, or other controllers except the cockpit domain controller; If so, the SOC system sends an upgrade request to the MCU module through the Ethernet submodule or the serial communication line.

9. The method according to claim 8, characterized in that The upgraded communication module further includes a bus module, and the method further includes: When the component to be upgraded is other controllers, the SOC system sends the upgrade package data to the component to be upgraded through the Ethernet sub-module, or the SOC system sends the upgrade package data to the MCU module through the Ethernet sub-module or the serial communication line, and the MCU module sends the upgrade package data to the component to be upgraded through the bus module.

10. A cockpit domain controller, characterized in that: The cockpit domain controller includes an MCU module, a SOC system, a power module and a voltage stabilization module, wherein; The MCU module is used to output an enable control signal to the power module during operation, and in response to receiving an upgrade request sent by the SOC system, control the voltage regulator module to output an enable control signal to the power module; The power supply module is used to supply power to the SOC system based on the enable control signal output by the MCU module or the voltage stabilization module to keep the SOC system running; The SOC system is used to determine the upgrade progress information of each controller in the vehicle.

Images