Upgrading control method and device for vehicle screen, electronic equipment and vehicle

Abstract

The invention provides an upgrade control method and device for a vehicle screen, electronic equipment and a vehicle. A corresponding target host direct control screen can be determined according to a diagnosis identification code of an unpacked legal upgrade package; and according to the operation parameters and / or the current screen temperature of the target host direct control screen, determining whether a security upgrading condition is satisfied, and according to the legal upgrading package, carrying out independent software upgrading on the target host direct control screen satisfying the security upgrading condition. The security of the upgrade package is ensured through signature encryption, different legal upgrade packages can accurately correspond to the corresponding target host direct control screens through diagnosis identification codes and part numbers, and the respective target host direct control screens are separately upgraded. Before upgrading is executed, whether the safe upgrading condition is met or not needs to be determined according to the running parameters and / or the current screen temperature of the direct control screen of the target host, and it is guaranteed that running of the host is not affected in the upgrading process, and running of software cannot be stopped due to too high working temperature.

Description

Technical Field

[0001] The present application relates to the field of vehicle technology, and in particular to a method and device for controlling an upgrade of a vehicle screen, an electronic device, and a vehicle. Background Art

[0002] As the vehicle industry is increasingly moving towards electrification, networking, and intelligence, electronic control units (ECUs) are widely used in vehicles. In order to reduce the high costs and negative market impacts of recalling vehicles for function optimization, function addition or reduction, and repairs, remote upgrade technology has emerged. Among them, the vehicle host HUT, as the main control node for the over-the-air software upgrade (Firmware Over-The-Air, FOTA) of the vehicle's mobile terminal, is responsible for distributing upgrade packages to the ECUs of other Ethernet nodes, but it ignores the improvement of the security and accuracy of the host's own upgrades, resulting in black screens, freezes, or freezes during the upgrade process, resulting in a brief loss of control over the vehicle, causing safety hazards. Summary of the invention

[0003] In view of this, the purpose of the present application is to propose a vehicle screen upgrade control method, device, electronic device and vehicle, which are used to safely and accurately complete the self-upgrade of the host direct-control screen.

[0004] Based on the above purpose, the present application provides a vehicle screen upgrade control method, including:

[0005] Obtain a signed encrypted upgrade package, and unpack the signed encrypted upgrade package according to a locally deployed root certificate to obtain at least one legitimate upgrade package;

[0006] Determine the target host direct control screen to be upgraded among the multiple screens corresponding to each of the legal upgrade packages according to the diagnostic identification code of the legal upgrade package, and perform consistency check on the target host direct control screen according to the component number of the legal upgrade package;

[0007] In response to the consistency check passing, it is determined whether the safety upgrade conditions are met based on the vehicle's operating parameters and / or the current screen temperature of the target host direct-controlled screen, and a separate software upgrade is performed on the target host direct-controlled screen among the multiple screens that meets the safety upgrade conditions based on the legal upgrade package.

[0008] Based on the same inventive concept, the present disclosure also provides an upgrade control device for a vehicle screen, comprising:

[0009] The upgrade unpacking module is configured to: obtain a signed encrypted upgrade package, unpack the signed encrypted upgrade package according to a locally deployed root certificate, and obtain at least one legal upgrade package;

[0010] The upgrade verification module is configured to: determine the target host direct control screen to be upgraded corresponding to each of the legal upgrade packages according to the diagnostic identification code of the legal upgrade package, and perform consistency verification on the target host direct control screen according to the component number of the legal upgrade package;

[0011] The upgrade security module is configured to: in response to passing the consistency check, determine whether the security upgrade conditions are met based on the operating parameters and / or the current screen temperature of the target host direct-controlled screen, and perform a separate software upgrade on the target host direct-controlled screen that meets the security upgrade conditions based on the legal upgrade package.

[0012] Based on the same inventive concept, the present disclosure also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable by the processor, wherein the processor implements the method as described above when executing the computer program.

[0013] Based on the same inventive concept, the present disclosure also provides a vehicle, comprising an upgraded control device or electronic device for the vehicle screen as described above.

[0014] From the above description, it can be seen that the upgrade control method, device, electronic device and vehicle of the vehicle screen provided by the present application can, after obtaining the signature encrypted upgrade package, unpack the signature encrypted upgrade package according to the root certificate deployed locally to obtain at least one legal upgrade package; determine the target host direct control screen to be upgraded among the multiple screens corresponding to each legal upgrade package according to the diagnostic identification code of the legal upgrade package, and perform consistency check on the target host direct control screen according to the part number of the legal upgrade package; in response to the consistency check passing, determine whether the safety upgrade conditions are met according to the operating parameters of the vehicle and / or the current screen temperature of the target host direct control screen, and perform a separate software upgrade on the target host direct control screen that meets the safety upgrade conditions among the multiple screens according to the legal upgrade package. The security of the upgrade package is guaranteed by signature encryption, and the diagnostic identification code and part number are used to ensure that different legal upgrade packages can accurately correspond to the corresponding target host direct control screen, and the separate upgrades of the respective target host direct control screens are performed separately. Before executing the upgrade, it is necessary to determine whether the safe upgrade conditions are met based on the operating parameters and / or the current screen temperature of the target host's direct-control screen to ensure that the upgrade process will not affect the operation of the host and will not cause the software to stop running due to excessive operating temperature, thereby ensuring safety and making the screen upgrade successful in one go. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions in the present application or related technologies, the drawings required for use in the embodiments or related technical descriptions are briefly introduced below. Obviously, the drawings described below are only embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0016] Figure 1 This is a flow chart of a method for controlling an upgrade of a vehicle screen according to an embodiment of the present application;

[0017] Figure 2 A flowchart of unpacking a signature encrypted upgrade package according to an embodiment of the present application;

[0018] Figure 3 A flowchart for determining a target host direct control screen according to an embodiment of the present application;

[0019] Figure 4 This is a flow chart of performing consistency check on the target host direct control screen according to an embodiment of the present application;

[0020] Figure 5 A flowchart for determining whether a security upgrade condition is met in an embodiment of the present application;

[0021] Figure 6 This is a schematic diagram of the structure of the upgrade control device of the vehicle screen according to the embodiment of the present application;

[0022] Figure 7 It is a schematic diagram of the structure of an electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to make the objectives, technical solutions and advantages of the present application more clearly understood, the present application is further described in detail below in combination with specific embodiments and with reference to the accompanying drawings.

[0024] It should be noted that, unless otherwise defined, the technical terms or scientific terms used in the embodiments of the present application should be the usual meanings understood by people with ordinary skills in the field to which the present application belongs. The "first", "second" and similar words used in the embodiments of the present application do not represent any order, quantity or importance, but are only used to distinguish different components. "Including" or "comprising" and similar words mean that the elements or objects appearing in front of the word cover the elements or objects listed after the word and their equivalents, without excluding other elements or objects. "Connect" or "connected" and similar words are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. "Up", "down", "left", "right" and the like are only used to indicate relative positional relationships. When the absolute position of the described object changes, the relative positional relationship may also change accordingly.

[0025] It should be understood herein that any number of elements in the drawings is for illustration rather than limitation, and any naming is only for distinction rather than having any limiting meaning.

[0026] Based on the description of the above background technology, the related technology also has the following situations:

[0027] In the related technology, the vehicle host is responsible for distributing upgrade packages to the ECUs of other Ethernet nodes to achieve the upgrade of other ECUs. However, screens such as the instrument screen, central control display screen, ceiling screen, and co-pilot screen do not have their own independent controllers. The software of screens such as the instrument screen, central control display screen, ceiling screen, and co-pilot screen are all deployed in the host. The screens that are directly controlled by the host and do not have independent controllers are determined to be host direct-controlled screens. Therefore, the upgrade of host direct-controlled screens such as the instrument screen, central control display screen, ceiling screen, and co-pilot screen is equivalent to the self-upgrade of the host system itself. However, during the upgrade of the host system, other operations are generally prohibited to avoid conflicts between the upgrade process and the control process, resulting in a black screen, freeze or freeze on the host. The faulty host naturally cannot execute the corresponding control instructions, resulting in the upgrade failure and the control instructions cannot be executed.

[0028] The upgrade control process in the related art takes into account the upgrade of other controllers, but ignores the improvement of the security and accuracy of the host itself, which leads to black screen, freeze or freeze during the upgrade process, resulting in a short period of vacancy in vehicle control and causing safety hazards. In order to ensure that the upgrade process does not affect the normal operation of the host, a more accurate and secure software upgrade control strategy is needed.

[0029] The upgrade control method, device, electronic device and vehicle of the vehicle screen provided by the embodiment of the present application can unpack the signed encrypted upgrade package according to the root certificate deployed locally after obtaining the signed encrypted upgrade package to obtain at least one legal upgrade package; determine the target host direct control screen to be upgraded corresponding to each legal upgrade package according to the diagnostic identification code of the legal upgrade package, and perform consistency check on the target host direct control screen according to the part number of the legal upgrade package; in response to the consistency check passing, determine whether the safety upgrade conditions are met according to the operating parameters and / or the current screen temperature of the target host direct control screen, and perform a separate software upgrade on the target host direct control screen that meets the safety upgrade conditions according to the legal upgrade package. The security of the upgrade package is guaranteed by signature encryption, and the diagnostic identification code and part number are used to ensure that different legal upgrade packages can accurately correspond to the corresponding target host direct control screen, and the separate upgrades of the respective target host direct control screens are performed separately. Before executing the upgrade, it is necessary to determine whether the safety upgrade conditions are met according to the operating parameters and / or the current screen temperature of the target host direct control screen, to ensure that the upgrade process will not affect the operation of the host and will not cause the software to stop running due to excessively high operating temperature, and to ensure safety while making the screen upgrade a one-time success.

[0030] The following describes in detail the vehicle screen upgrade control method provided by the embodiment of the present application in conjunction with the accompanying drawings.

[0031] In some embodiments, Figure 1 As shown, a vehicle screen upgrade control method includes steps 101 to 103.

[0032] Step 101: Obtain a signed encrypted upgrade package, unpack the signed encrypted upgrade package according to a locally deployed root certificate, and obtain at least one legal upgrade package.

[0033] In the specific implementation, it should be noted that the upgrade control method of the vehicle screen provided in the embodiment of the present application is an online upgrade control method. Offline upgrade requires the vehicle to be driven to a specific location and a wired upgrade device is used to connect to the host for upgrade control, which limits the upgrade location and wastes user time. Therefore, when performing an online upgrade, a signed encrypted upgrade package can be obtained from the cloud platform.

[0034] The cloud platform will synchronize the root certificate with the vehicle host in advance to ensure the implementation of the encryption and decryption process. Each host direct control screen upgrade package is a smaller data package (such as DC (Desktop Central) package). Different from the encryption of data packages used for other ECU upgrades, the cloud platform will sign and encrypt the host direct control screen upgrade data packages one by one according to the root certificate.

[0035] Exemplarily, the cloud platform performs hash calculation on the upgrade data packet according to the hash algorithm and the root certificate to obtain a summary of the upgrade data packet, which is the digital signature of the upgrade data packet, and then encrypts the plaintext of the upgrade data packet to obtain encrypted ciphertext, and merges the encrypted ciphertext and the digital signature to obtain a single upgrade package for the host direct control screen. The different single upgrade packages and the remaining upgrade packages for other ECU upgrades are packaged and integrated to obtain a large signed encrypted upgrade package (such as a DP package). After receiving the upgrade request sent by the vehicle host, the signed encrypted upgrade package will be sent to the vehicle host.

[0036] After receiving the signature encrypted upgrade package, the vehicle host needs to unpack the packaged signature encrypted upgrade package, that is, split and verify the signature encrypted upgrade package. First, split the multiple upgrade packages packaged together to obtain at least one single upgrade package and at least one upgrade package for other ECU upgrades. The other ECU upgrade packages can be distributed to the corresponding ECUs, while the single upgrade package is used to upgrade the host itself, and is used to upgrade the software of the host direct control screens such as the instrument screen, central control display screen, ceiling screen, and co-pilot screen.

[0037] The process of verifying and decrypting the single upgrade package is as follows: the vehicle host decrypts the digital signature according to the root certificate to obtain the corresponding decryption signature, which is used to verify that the single upgrade package is sent by the specified legal cloud platform; then, the encrypted ciphertext in the multiple single upgrade packages is decrypted to obtain the corresponding upgrade data package, and finally, the upgrade data package is hashed using the same hash calculation method to obtain the corresponding verification signature, which is used to verify whether the upgrade data package has been tampered with. If the decryption signature is consistent with the verification signature, it means that the single upgrade package comes from a legal cloud platform that complies with regulations, and there is no tampering during the transmission process, which can ensure that the upgrade data package after unpacking is a legal upgrade package, then the single upgrade package is a legal upgrade package.

[0038] If the decryption signature is inconsistent with the verification signature, there are two possibilities. One is that the encrypted ciphertext of the signature encryption upgrade package was maliciously tampered with during the transmission process, and the tampered encrypted ciphertext changed. The tampered encrypted ciphertext was calculated using the same hash algorithm as the cloud, and the resulting summary would be inconsistent with the correct verification signature, resulting in inconsistency between the decryption signature and the verification signature. The other possibility is that the sender of the signature encryption upgrade package is a malicious cloud platform that does not comply with regulations, which may result in the inability to decrypt the digital signature, or cause the decryption signature after decryption to change, resulting in inconsistency between the decryption signature and the verification signature.

[0039] Therefore, signing, encrypting and unpacking according to the root certificate can ensure that the obtained signed encrypted upgrade package comes from a legitimate channel and that the signed encrypted upgrade package has not been tampered with during transmission, thereby ensuring the legitimacy and integrity of the legitimate upgrade package.

[0040] Step 102: Determine the target host direct control screen to be upgraded among the multiple screens corresponding to each legitimate upgrade package according to the diagnostic identification code of the legitimate upgrade package, and perform consistency check on the target host direct control screen according to the component number of the legitimate upgrade package.

[0041] In specific implementation, the upgrades of the host direct control screens such as the instrument screen, central control display screen, ceiling screen, and co-pilot screen are independent of each other, so it is necessary to determine the corresponding target host direct control screen for each legal upgrade package, and then each target host direct control screen performs a separate software upgrade according to the corresponding legal upgrade package. Among them, the host direct control screen and the upgrade package are matched through the diagnostic identification code. The upgrade package comes with the corresponding diagnostic identification code, and the diagnostic identification code of each screen is the screen identification code. The screen identification code and the diagnostic identification code are matched consistently to achieve the matching of the host direct control screen and the legal upgrade package, and the target host direct control screen to be upgraded corresponding to each legal upgrade package is obtained. Among them, the diagnostic identification code is used to identify a specific screen and serves as the unique identity mark of the identified screen. For example, the diagnostic identification code of the instrument screen can be AAAAA, the diagnostic identification code of the ceiling screen can be BBBBB, and the diagnostic identification code of the central control screen can be CCCCC.

[0042] After determining the target host direct control screen, in order to ensure the accuracy of the matching process, the matching results need to be verified. Each component in the host has its own part number, so each host direct control screen corresponds to a screen part number, and the legal upgrade package includes the part number corresponding to the screen to be upgraded. If the part number is the same as the screen part number of the corresponding target host direct control screen, it means that there is no problem in matching the legal upgrade package and the host direct control screen, and the consistency check has passed. Among them, the part number is the identity of the part, which is used to determine the identity information of the corresponding part. For example, the part number corresponding to the instrument screen can be aaaaa, the part number corresponding to the ceiling screen can be bbbbb, and the part number corresponding to the central control screen can be ccccc.

[0043] If the part number in the illegal upgrade package is inconsistent with the screen part number of the target host direct control screen, it means that the upgrade package matches incorrectly and it is determined that it has not passed the consistency check. At this time, the upgrade of the target host direct control screen with the matching error can be terminated separately to ensure that all host direct control screens will not be unable to upgrade due to the error of a single legal upgrade package, improve the efficiency of the host self-upgrade, reduce the degree of damage to the overall function caused by faults during the upgrade process, and upgrade different host direct control screens separately to improve the upgrade efficiency and safety.

[0044] Step 103: In response to the consistency check passing, determine whether the safety upgrade conditions are met based on the vehicle's operating parameters and / or the current screen temperature of the target host direct-control screen, and perform a separate software upgrade on the target host direct-control screen that meets the safety upgrade conditions among multiple screens based on the legitimate upgrade package.

[0045] In specific implementation, after the consistency check is passed, first of all, it is necessary to determine whether the vehicle allows the host to be self-upgraded at this time, and the current operating status of the vehicle needs to be determined based on the operating parameters, because when performing self-upgrade, the host needs to be kept in a working state, that is, it is necessary to ensure that the host is always powered on and the power is sufficient to support the host to complete the software upgrade of all host direct control screens. During the upgrade process, some functions of the host direct control screens such as the instrument screen, central control display screen, ceiling screen, and co-pilot screen are temporarily unavailable, so at this time, it is necessary to ensure that the vehicle is in a safe static state to prevent the vehicle from losing control and slipping.

[0046] After determining that the vehicle allows the host to self-upgrade at this time based on the operating parameters, it is necessary to further determine whether the screen itself can perform the upgrade function, because the external environment and vehicle operation will cause the temperature of the host direct-control screen to change, and different host direct-control screens have different operating temperature ranges. If the current screen temperature exceeds the corresponding operating temperature range, it will cause the target host direct-control screen to be unable to perform complete functions, or cause the target host direct-control screen to freeze, black screen or freeze. At this time, unknown errors may occur during system upgrades, such as information loss, upgrade failure and other risks. Therefore, the target host direct-control screen does not have the ability to perform upgrade operations at this time, and it is determined that the safety upgrade conditions are not met, and the upgrade operation is prohibited.

[0047] If the current screen temperature is within the corresponding operating temperature range, it means that the target vehicle host can execute the corresponding upgrade process well, determine that the safety upgrade conditions are met, and perform a separate software upgrade on the host direct-controlled screen that meets the safety upgrade conditions based on the legal upgrade package to ensure the accuracy and safety of the upgrade process, ensuring safety while making the screen upgrade successful in one go.

[0048] If the operating parameters determine that self-upgrade is not allowed, it is determined that the safety upgrade conditions are not met; if the current screen temperature determines that the host cannot complete the upgrade function, it is determined that the safety upgrade conditions are not met; if the operating parameters determine that self-upgrade is not allowed, and the current screen temperature determines that the host cannot complete the upgrade function, it is determined that the safety upgrade conditions are not met; if the operating parameters determine that self-upgrade is allowed, and the current screen temperature determines that the host can complete the upgrade function, it is determined that the safety upgrade conditions are met.

[0049] The vehicle screen upgrade control method provided in the embodiment of the present application can ensure the security of the upgrade package through signature encryption, and ensure that different legal upgrade packages can accurately correspond to the corresponding target host direct control screen through diagnostic identification codes and part numbers, and perform separate upgrades of the respective target host direct control screens. Before executing the upgrade, it is necessary to determine whether the safety upgrade conditions are met based on the operating parameters and / or the current screen temperature of the target host direct control screen, to ensure that the upgrade process will not affect the operation of the host and will not cause the software to stop running due to excessive operating temperature, so as to ensure safety while making the screen upgrade successful at one time.

[0050] In some embodiments, Figure 2 As shown, the signed encrypted upgrade package is unpacked according to the locally deployed root certificate to obtain at least one legal upgrade package, including steps 201 and 202.

[0051] Step 201: Split at least one single upgrade package from the signed and encrypted upgrade package.

[0052] During the specific implementation, the signature encrypted upgrade package includes a single upgrade package for the host self-upgrade and other upgrade packages for other ECU upgrades, so these upgrade packages need to be split out from the signature encrypted upgrade package, and the other upgrade packages for other ECU upgrades are distributed to the corresponding ECUs, and the split single upgrade package is retained locally. Among them, the instrument screen, central control display screen, ceiling screen, and co-pilot screen have different functions, so different single upgrade packages are used for upgrade respectively. Therefore, at least one single upgrade package will be obtained after splitting.

[0053] Step 202: The single upgrade package is signature-verified and decrypted according to the root certificate, and the single upgrade package that passes the signature-verification and decryption is determined as a legitimate upgrade package, and the single upgrade package that fails the signature-verification and decryption is determined as an illegal upgrade package.

[0054] In specific implementation, taking a single upgrade package corresponding to the central control display screen as an example, the signature verification and decryption process of a single upgrade package is as follows:

[0055] First, the vehicle host decrypts the digital signature according to the root certificate to obtain the corresponding decryption signature corresponding to the central control display screen (for example, a cloud platform specifically used for upgrade services, the decryption signature can be represented by code 001; it can also be a cloud platform for comprehensive services, the decryption signature can be represented by code 002). The decryption signature is used to verify that the single upgrade package is sent by the specified legitimate cloud platform.

[0056] Then, the encrypted ciphertext in the multiple single upgrade packages is decrypted to obtain the upgrade data package of the central control display screen. The upgrade data package is hashed using the same hash calculation method as the cloud platform to obtain the corresponding verification signature (for example, 001). The verification signature is used to verify whether the upgrade data package has been tampered with.

[0057] Finally, the legitimacy of the single upgrade package of the central control display screen is determined by comparing the decryption signature and the verification signature. Taking the example of obtaining a signature encrypted upgrade package from a cloud platform dedicated to upgrade services, the correct decryption signature and verification signature are both 001.

[0058] If the decryption signature is consistent with the verification signature and both are 001, it means that the single upgrade package comes from a legal cloud platform that complies with regulations and has not been tampered with during transmission. It can be guaranteed that the upgrade data package after unpacking is a legal upgrade package. In this case, the single upgrade package is a legal upgrade package.

[0059] If the decryption signature is 005, it means that the obtained signed encrypted upgrade package does not come from the cloud platform specifically used for upgrade services, and the sender of the signed encrypted upgrade package is a malicious cloud platform that does not comply with regulations. This may result in the inability to decrypt the digital signature, or cause the decryption signature after decryption to change, resulting in inconsistency between the decryption signature and the verification signature. The single upgrade package after splitting is naturally illegal, and it is determined that it has not passed the signature verification and decryption. The corresponding single upgrade package is an illegal upgrade package.

[0060] If the decryption signature is 001, it means that the obtained signature encrypted upgrade package comes from a cloud platform specifically used for upgrade services. If the verification signature is 003 at this time, it means that the upgrade data package has been tampered with and the upgrade of the central control display screen cannot be achieved. It is determined that the signature verification and decryption have not passed, and the corresponding single upgrade package is an illegal upgrade package.

[0061] Therefore, signing, encrypting and unpacking according to the root certificate can ensure that the obtained signed encrypted upgrade package comes from a legitimate channel and that the signed encrypted upgrade package has not been tampered with during transmission, thereby ensuring the legitimacy and integrity of the legitimate upgrade package.

[0062] In some embodiments, Figure 3 As shown, determining the target host direct control screen to be upgraded among multiple screens corresponding to each legitimate upgrade package according to the diagnostic identification code of the legitimate upgrade package includes steps 301 and 302.

[0063] Step 301: Determine the screen identification code of each screen.

[0064] In specific implementation, the upgrades of the instrument screen, central control display screen, ceiling screen, co-pilot screen and other host direct control screens are independent of each other, so it is necessary to determine the corresponding target host direct control screen for each legal upgrade package, and then each target host direct control screen performs a separate software upgrade according to the corresponding legal upgrade package. Among them, the host direct control screen and the upgrade package are matched through the diagnostic identification code, so it is necessary to first determine the screen identification code of each screen, for example, the screen identification code of the instrument screen is 11111, the screen identification code of the central control display screen is 11112, the screen identification code of the ceiling screen is 11113, and the screen identification code of the co-pilot screen is 11114.

[0065] Step 302: Determine a target screen identification code that is consistent with the diagnosis identification code, and determine the screen corresponding to the target screen identification code as the target host direct control screen.

[0066] In specific implementation, if there are 4 legal upgrade packages, and the diagnostic identification code of the first legal upgrade package is 11111, the diagnostic identification code of the second legal upgrade package is 11112, the diagnostic identification code of the third legal upgrade package is 11113, and the diagnostic identification code of the fourth legal upgrade package is 11114, then matching is performed based on the consistency of the diagnostic identification code and the screen identification code, and the instrument screen matches the first legal upgrade package; the central control display screen matches the second legal upgrade package; the ceiling screen matches the third legal upgrade package; and the co-pilot screen matches the fourth legal upgrade package. Then the instrument screen is the target host direct control screen of the first legal upgrade package; the central control display screen is the target host direct control screen of the second legal upgrade package; the ceiling screen is the target host direct control screen of the third legal upgrade package; and the co-pilot screen is the target host direct control screen of the fourth legal upgrade package.

[0067] By matching the screen identification code and the diagnostic identification code, the host direct control screen and the legal upgrade package are matched, providing a basis for separate upgrades of different host direct control screens.

[0068] In some embodiments, Figure 4 As shown, a consistency check is performed on the target host direct control screen according to the component number of the legal upgrade package, including steps 401 to 403.

[0069] Step 401: Determine the screen component number of the target host direct control screen.

[0070] During the specific implementation, after determining the target host direct-control screen, in order to ensure the accuracy of the matching process, the matching result needs to be verified. Each component in the host has its own part number, and each host direct-control screen corresponds to a screen part number. For example, the screen part number of the instrument screen is 00001, the screen part number of the central control display screen is 00002, the screen part number of the ceiling screen is 00003, and the screen part number of the co-pilot screen is 00004.

[0071] Step 402: In response to the screen component number being consistent with the component number, determining that the consistency check has passed.

[0072] During specific implementation, if the part number of the first legal upgrade package is 00001, the part number of the second legal upgrade package is 00002, the part number of the third legal upgrade package is 00003, and the part number of the fourth legal upgrade package is 00004, then it is determined that the screen part number is consistent with the part number, and the consistency check passes, and the upgrade is allowed according to the legal upgrade package.

[0073] Step 403: In response to the screen component number being inconsistent with the component number, determining that the consistency check has not passed.

[0074] During specific implementation, if the part number of the first legal upgrade package is not 00001, the part number of the second legal upgrade package is not 00002, the part number of the third legal upgrade package is not 00003 and / or the part number of the fourth legal upgrade package is not 00004, it is determined that the screen part number is inconsistent with the part number, it is determined that the consistency check has not passed, and the upgrade of the target host direct-controlled screen that has not passed the check according to the legal upgrade package is not allowed.

[0075] If the consistency check fails, it means that the upgrade package matches incorrectly. At this time, the upgrade of the target host direct-control screen with the matching error can be terminated separately to ensure that all host direct-control screens will not be unable to upgrade due to the matching error of a single legal upgrade package, thereby improving the efficiency of the host self-upgrade and reducing the degree of damage to the overall upgrade process caused by matching failures during the upgrade process. Separate upgrades between direct-control screens of different hosts improve upgrade efficiency and security.

[0076] In some embodiments, Figure 5 As shown, whether the safety upgrade condition is met is determined according to the operating parameters and / or the current screen temperature of the target host direct-controlled screen, including steps 501 to 505.

[0077] Step 501: Determine whether the upgrade prerequisites for the target host to directly control the screen are met according to the operating parameters.

[0078] In specific implementation, after the consistency check is passed, first, it is necessary to determine whether the vehicle allows the host to be self-upgraded at this time, and the current operating status of the vehicle needs to be determined based on the operating parameters.

[0079] In some embodiments, step 501 includes:

[0080] Step 5011: In response to the power mode in the operating parameters being the on mode, determining that the pre-mode condition is satisfied.

[0081] During specific implementation, upgrading the vehicle host requires ensuring that the vehicle can power the vehicle host to ensure that the vehicle host can operate. Therefore, when the power mode in the operating parameters is the on mode, it is determined that the pre-mode conditions are met, and when the power mode is the off mode, it is determined that the pre-mode conditions are not met.

[0082] Step 5012: In response to the battery power in the operating parameter being greater than or equal to a preset first power threshold, it is determined that the pre-battery condition is met.

[0083] During specific implementation, when the vehicle host upgrades the target host direct control screen, the upgrade process may last for a period of time. It is necessary to ensure that the vehicle host is always in the turned-on state before the upgrade is completed. The battery needs to have sufficient power to maintain the operation of the host. Therefore, when the battery power in the operating parameters is greater than or equal to the preset first power threshold, it is determined that the battery power is sufficient to maintain the long-term operation of the vehicle host to ensure the smooth progress of the upgrade process and determine that the pre-battery conditions are met.

[0084] When the battery power is less than the preset first power threshold, it is determined that the battery power is insufficient and may not be able to maintain the operation of the vehicle host for a long time, making it difficult to ensure the smooth progress of the upgrade process, and determining that the pre-battery conditions are not met.

[0085] Step 5013: In response to the power battery power in the operating parameter being greater than or equal to a preset second power threshold, it is determined that the front power battery condition is met.

[0086] In specific implementation, although it can be determined that the battery has sufficient power when the pre-battery condition is met, as the battery's service life increases, the battery's storage capacity decreases, resulting in a falsely high battery value at this time. Exemplarily, for the same battery, 50% of the power when it is new may be equivalent to 60% of the power of the battery after many years of use. However, the first power threshold is always unchanged. If the first power threshold is 60%, the battery power of the battery after many years of use is 66%, and its equivalent true value is 55%. At this time, it will cause a misjudgment of the pre-battery condition, so it is necessary to ensure that the battery power can be replenished, so the power battery needs to have a certain amount of power to charge the battery when the battery power is lower than the safe power. However, the power battery also needs to take into account the driving of the vehicle, so the power battery power in the operating parameters needs to be greater than or equal to the preset second power threshold (for example, 20%), to ensure that there is enough power to drive the vehicle, and to have the ability to charge the battery to ensure the smooth progress of the upgrade process, then it is determined that the pre-battery condition is met.

[0087] If the power battery power is less than the preset second power threshold, in order to ensure that the power battery has sufficient power to drive the vehicle, additional power consumption is prohibited. At this time, power supply to the battery will be prohibited. Therefore, there is a risk of misjudgment of the battery power at this time, and it is determined that the front power battery conditions are not met.

[0088] Step 5014: In response to the current vehicle speed in the operating parameter being a zero value, determining that the preceding vehicle speed condition is satisfied.

[0089] In specific implementation, because the host direct control screen is upgraded, some functions of the vehicle host may be unavailable, so it is necessary to avoid the risk of loss of control and the vehicle needs to remain relatively still, that is, when the current vehicle speed in the operating parameters is zero, it is determined that the pre-vehicle speed condition is met. If the current vehicle speed is not zero, it means that the vehicle is in motion. At this time, upgrading will cause some functions of the vehicle host to fail, which may cause the vehicle to lose control and cause a traffic accident. Therefore, when the current vehicle speed is not zero, it is determined that the pre-vehicle speed condition is not met.

[0090] Step 5015: In response to the current gear in the operating parameters being the parking gear or the neutral gear, determining that the forward gear condition is satisfied.

[0091] In specific implementation, in order to avoid control command errors during the upgrade process, it is necessary to ensure that the vehicle is in neutral or parking gear. When in parking gear and neutral gear, the vehicle is in a relatively safe state, and the motor will not drive the vehicle to move, so as to avoid the driving command being issued to the motor immediately after the upgrade is completed (the command may be temporarily suspended during the upgrade process), causing the vehicle to suddenly jump out and cause risks. Therefore, when the current gear in the operating parameters is parking gear or neutral gear, it is determined that the pre-gear condition is met. When the current gear in the operating parameters is a gear other than parking gear or neutral gear, it is determined that the pre-gear condition is not met.

[0092] Step 5016: In response to the handbrake state in the operating parameters being a pulled-up state or a clamped state, it is determined that the front handbrake condition is met.

[0093] In the specific implementation, in order to avoid the vehicle from slipping, it is necessary to further ensure that the static state of the vehicle will not be easily changed, so the handbrake needs to be pulled up or clamped to keep the vehicle still, to ensure that the vehicle remains still during the upgrade of the vehicle host, and to ensure the safety of the upgrade process. Therefore, when the handbrake state in the operating parameters is in the pulled up state or clamped state (the names of the handbrakes for different models of vehicles may be different), it is determined that the front handbrake conditions are met. When the handbrake state in the operating parameters is in the lowered state or released state, it is determined that the front handbrake conditions are not met.

[0094] Step 5017: In response to the high and low voltage states in the operating parameters being a high voltage state or a low voltage state, determining that the pre-power-on condition is satisfied.

[0095] In specific implementation, the power mode is turned on to ensure that the battery can be discharged successfully, but it is necessary to ensure that the vehicle host has been connected to the power supply and to determine the voltage state of the vehicle. If the high and low voltage states in the operating parameters are high voltage or low voltage, it means that the vehicle host and other controllers in the vehicle have been powered on and can execute the corresponding functions, and it is determined that the pre-power-on conditions are met. If there is no voltage in the operating parameters, it means that the vehicle host and other controllers in the vehicle have not been powered on, and it is determined that the pre-power-on conditions are not met.

[0096] Step 5018: In response to simultaneously satisfying the pre-mode condition, the pre-battery bar, the pre-power battery condition, the pre-vehicle speed condition, the pre-gear condition, the pre-handbrake condition and the pre-power-on condition, it is determined that the upgrade pre-conditions are satisfied.

[0097] During the specific implementation, if the pre-mode condition, pre-battery bar, pre-power battery condition, pre-vehicle speed condition, pre-gear condition, pre-handbrake condition and pre-power-on condition are met at the same time, it means that the vehicle allows the vehicle host to be upgraded and the vehicle host has the ability to complete self-upgrade. It is determined that the pre-conditions for the upgrade are met and the host direct-control screen can be upgraded.

[0098] Step 5019: In response to the presence of unsatisfied conditions in the pre-mode condition, the pre-battery bar, the pre-power battery condition, the pre-vehicle speed condition, the pre-gear condition, the pre-handbrake condition and the pre-power-on condition, it is determined that the upgrade pre-conditions are not met.

[0099] During the specific implementation, if any one of the pre-mode condition, pre-battery bar, pre-power battery condition, pre-vehicle speed condition, pre-gear condition, pre-handbrake condition and pre-power-on condition is not met, it means that the upgrade may bring certain safety risks. For safety reasons, it is determined that the upgrade pre-conditions are not met and the upgrade of the pager screen is not allowed.

[0100] Step 502: In response to not meeting the pre-upgrade condition, determining that the safety upgrade condition is not met, a vehicle status change prompt is issued.

[0101] During specific implementation, if the pre-upgrade conditions are not met, it means that the vehicle determines that upgrading the host direct-control screen will bring safety risks, and the upgrade is not allowed regardless of the current screen temperature. Therefore, it is determined that the safety upgrade conditions are not met at this time, and a prompt to change the vehicle status is given based on the unmet pre-upgrade conditions to prompt the user to adjust the vehicle status to meet the pre-upgrade conditions to ensure that the host can be self-upgraded safely.

[0102] Step 503: In response to satisfying the pre-upgrade condition, determine whether there is a risk of upgrade failure according to the current screen temperature.

[0103] In specific implementation, if the pre-upgrade conditions are met, it means that there will be no safety risks in the upgrade process, and the vehicle host is allowed to upgrade the host direct control screen. However, it is necessary to continue to determine whether the host direct control screen itself has the ability to be upgraded. The judgment process is as follows:

[0104] In some embodiments, determining whether there is a risk of upgrade failure according to the current screen temperature includes:

[0105] Step 5031: Determine the operating temperature range of the target host direct-controlled screen.

[0106] In specific implementation, after determining that the vehicle allows the host to self-upgrade at this time according to the operating parameters, it is necessary to further determine whether the screen itself can perform the upgrade function, because the external environment and vehicle operation will cause the temperature of the host direct control screen to change, and different host direct control screens have different operating temperature ranges. If the current screen temperature exceeds the range of the corresponding operating temperature range, it will cause the target host direct control screen to be unable to perform complete functions, or cause the target host direct control screen to freeze, black screen or freeze, etc. At this time, the system upgrade may be in the wrong position, such as information loss, upgrade failure, etc. Exemplarily, the operating temperature range can be (-40, 85).

[0107] Step 5032: Determine a safe temperature range according to the working temperature range and a preset safe temperature difference, and determine an upper boundary temperature and a lower boundary temperature of the safe temperature range.

[0108] In specific implementation, since the current screen temperature will not stabilize at a temperature value, it is necessary to make certain adjustments to the working temperature range to avoid the current screen temperature from repeatedly changing inside and outside the working temperature range, so it is necessary to narrow the working temperature range to obtain a safe temperature range. For example, if the working temperature range is (-40, 85) and the preset safety temperature difference is 5°C, the upper boundary temperature of 85°C and the lower boundary temperature of -40°C are narrowed inward, that is, the upper boundary temperature is reduced by 5°C and the lower boundary temperature is increased by 5°C, and the safe temperature range is (-35, 80). The upper boundary temperature of the safe temperature range is 80°C and the lower boundary temperature is -35°C.

[0109] Step 5033: In response to the current screen temperature being greater than or equal to the upper boundary temperature, or the current screen temperature being less than or equal to the lower boundary temperature, it is determined that there is a risk of upgrade failure.

[0110] In specific implementation, if the current screen temperature is greater than or equal to the upper boundary temperature, it means that the current screen temperature is too high and the upgrade function cannot be executed, and it is determined that there is a risk of upgrade failure. If the current screen temperature is less than or equal to the lower boundary temperature, it means that the current screen temperature is too low and the upgrade function cannot be executed, and it is determined that there is a risk of upgrade failure.

[0111] Step 5034: In response to the current screen temperature being less than the upper boundary temperature and greater than the lower boundary temperature, it is determined that there is no upgrade risk.

[0112] In specific implementation, if the current screen temperature is less than the upper boundary temperature and greater than the lower boundary temperature, it means that the target host direct-controlled screen is at a suitable working temperature, and the corresponding upgrade function can be executed to determine that there is no upgrade risk.

[0113] Step 504: In response to the risk of upgrade failure, it is determined that the safety upgrade conditions are not met, and a screen temperature adjustment prompt is issued.

[0114] In specific implementation, if there is a risk of upgrade failure, it means that the target host direct control screen does not have the ability to perform the upgrade operation at this time, and it is determined that the safe upgrade conditions are not met, and the upgrade operation is prohibited. At the same time, the screen temperature adjustment prompt is given so that the user can adjust the screen temperature to a safe temperature range according to the prompt.

[0115] Step 505: In response to there being no risk of upgrade failure, determining that a safe upgrade condition is met.

[0116] During specific implementation, if the current screen temperature exists within the corresponding operating temperature range, it means that the target vehicle host can execute the corresponding upgrade process well, determine that the safety upgrade conditions are met, and perform a separate software upgrade on the host direct-controlled screen that meets the safety upgrade conditions according to the legal upgrade package to ensure the accuracy and safety of the upgrade process, and ensure safety while making the screen upgrade successful in one go.

[0117] Among them, since the current screen temperature is changing, if there is a risk of upgrade failure at the beginning, the judgment result will be changed when the current screen temperature is within the safe temperature range to determine that there is no risk of upgrade failure. However, if the temperature changes again at this time, in order to avoid repeated changes in the judgment result, it is necessary to change the judgment result to the existence of an upgrade failure risk when the current screen temperature exceeds the working temperature range. That is, the safe temperature range is used as the judgment condition for obtaining the absence of upgrade failure risk, or the switching condition for switching to the absence of upgrade failure risk, and the working temperature range is used as the switching condition for switching to the existence of upgrade failure risk.

[0118] It should be noted that the method of the embodiment of the present application can be performed by a single device, such as a computer or server. The method of this embodiment can also be applied to a distributed scenario and completed by multiple devices cooperating with each other. In the case of such a distributed scenario, one of the multiple devices can only perform one or more steps in the method of the embodiment of the present application, and the multiple devices will interact with each other to complete the described method.

[0119] It should be noted that the above describes some embodiments of the present application. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the above embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0120] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present application also provides an upgrade control device for a vehicle screen.

[0121] refer to Figure 6 , the upgrade control device of the vehicle screen comprises:

[0122] The upgrade unpacking module 10 is configured to: obtain a signed encrypted upgrade package, unpack the signed encrypted upgrade package according to a root certificate deployed locally, and obtain at least one legal upgrade package;

[0123] The upgrade verification module 20 is configured to: determine the target host direct control screen to be upgraded corresponding to each legal upgrade package according to the diagnostic identification code of the legal upgrade package, and perform consistency verification on the target host direct control screen according to the component number of the legal upgrade package;

[0124] The upgrade security module 30 is configured to: in response to passing the consistency check, determine whether the security upgrade conditions are met based on the operating parameters and / or the current screen temperature of the target host direct-controlled screen, and perform a separate software upgrade on the target host direct-controlled screen that meets the security upgrade conditions based on the legal upgrade package.

[0125] For the convenience of description, the above device is described in terms of functions divided into various modules. Of course, when implementing the present application, the functions of each module can be implemented in the same or multiple software and / or hardware.

[0126] The device of the above embodiment is used to implement the upgrade control method of the corresponding vehicle screen in any of the above embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0127] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments, the present application also provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the vehicle screen upgrade control method described in any of the above embodiments is implemented.

[0128] Figure 7 A more specific schematic diagram of the hardware structure of an electronic device provided in this embodiment is shown, and the device may include: a processor 1010, a memory 1020, an input / output interface 1030, a communication interface 1040, and a bus 1050. The processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040 are connected to each other through the bus 1050 in the device.

[0129] The processor 1010 can be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of this specification.

[0130] The memory 1020 may be implemented in the form of ROM (Read Only Memory), RAM (Random Access Memory), static storage device, dynamic storage device, etc. The memory 1020 may store an operating system and other application programs. When the technical solutions provided in the embodiments of this specification are implemented by software or firmware, the relevant program codes are stored in the memory 1020 and are called and executed by the processor 1010.

[0131] The input / output interface 1030 is used to connect the input / output module to realize information input and output. The input / output module can be configured in the device as a component (not shown in the figure), or it can be externally connected to the device to provide corresponding functions. The input device may include a keyboard, a mouse, a touch screen, a microphone, various sensors, etc., and the output device may include a display, a speaker, a vibrator, an indicator light, etc.

[0132] The communication interface 1040 is used to connect a communication module (not shown) to realize communication interaction between the device and other devices. The communication module can realize communication through a wired mode (such as USB, network cable, etc.) or a wireless mode (such as mobile network, WIFI, Bluetooth, etc.).

[0133] The bus 1050 includes a path that transmits information between the various components of the device (eg, the processor 1010, the memory 1020, the input / output interface 1030, and the communication interface 1040).

[0134] It should be noted that, although the above device only shows the processor 1010, the memory 1020, the input / output interface 1030, the communication interface 1040 and the bus 1050, in the specific implementation process, the device may also include other components necessary for normal operation. In addition, it can be understood by those skilled in the art that the above device may also only include the components necessary for implementing the embodiments of the present specification, and does not necessarily include all the components shown in the figure.

[0135] The electronic device of the above-mentioned embodiment is used to implement the upgrade control method of the corresponding vehicle screen in any of the above-mentioned embodiments, and has the beneficial effects of the corresponding method embodiment, which will not be repeated here.

[0136] Based on the same inventive concept, corresponding to any of the above-mentioned embodiment methods, the present application also provides a non-transitory computer-readable storage medium, wherein the non-transitory computer-readable storage medium stores computer instructions, and the computer instructions are used to enable the computer to execute the vehicle screen upgrade control method described in any of the above embodiments.

[0137] The computer-readable medium of this embodiment includes permanent and non-permanent, removable and non-removable media, and information storage can be implemented by any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, read-only compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0138] The computer instructions stored in the storage medium of the above embodiment are used to enable the computer to execute the vehicle screen upgrade control method described in any of the above embodiments, and have the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0139] Based on the same inventive concept, corresponding to any of the above-mentioned embodiments and methods, the present application also provides a vehicle, including an upgrade control device for the electronic device or vehicle screen of the above-mentioned embodiment, and the upgrade control method for the vehicle screen described in any of the above embodiments is executed through the upgrade control device for the electronic device or vehicle screen of the above-mentioned embodiment, and has the beneficial effects of the corresponding method embodiments, which will not be repeated here.

[0140] It is understandable that before using the technical solutions of each embodiment of the present disclosure, the type, scope of use, usage scenarios, etc. of the personal information involved will be informed to the user in an appropriate manner, and the user's authorization will be obtained.

[0141] For example, in response to receiving an active request from a user, a prompt message is sent to the user to clearly remind the user that the operation requested to be performed will require obtaining and using the user's personal information. Thus, the user can independently choose whether to provide personal information to software or hardware such as an electronic device, application, server, or storage medium that performs the operation of the technical solution of the present disclosure according to the prompt message.

[0142] As an optional but non-limiting implementation, in response to receiving the user's active request, the prompt information may be sent to the user in the form of a pop-up window, in which the prompt information may be presented in text form. In addition, the pop-up window may also carry a selection control for the user to choose "agree" or "disagree" to provide personal information to the electronic device.

[0143] It is understandable that the above notification and the process of obtaining user authorization are merely illustrative and do not constitute a limitation on the implementation of the present disclosure. Other methods that meet relevant laws and regulations may also be applied to the implementation of the present disclosure.

[0144] A person skilled in the art should understand that the discussion of any of the above embodiments is merely illustrative and is not intended to imply that the scope of the present application is limited to these examples. In line with the concept of the present application, the technical features in the above embodiments or different embodiments may be combined, the steps may be implemented in any order, and there are many other variations of the different aspects of the embodiments of the present application as described above, which are not provided in detail for the sake of simplicity.

[0145] In addition, to simplify the description and discussion, and in order not to make the embodiments of the present application difficult to understand, the known power supply / ground connection with the integrated circuit (IC) chip and other components may or may not be shown in the provided drawings. In addition, the device can be shown in the form of a block diagram to avoid making the embodiments of the present application difficult to understand, and this also takes into account the fact that the details of the implementation of these block diagram devices are highly dependent on the platform to be implemented in the embodiments of the present application (that is, these details should be fully within the scope of understanding of those skilled in the art). In the case of elaborating specific details (e.g., circuits) to describe exemplary embodiments of the present application, it is obvious to those skilled in the art that the embodiments of the present application can be implemented without these specific details or when these specific details are changed. Therefore, these descriptions should be considered to be illustrative rather than restrictive.

[0146] Although the present application has been described in conjunction with specific embodiments of the present application, many replacements, modifications and variations of these embodiments will be apparent to those skilled in the art from the foregoing description. For example, other memory architectures (e.g., dynamic RAM (DRAM)) may use the embodiments discussed.

[0147] The embodiments of the present application are intended to cover all such substitutions, modifications and variations that fall within the broad scope of the present application. Therefore, any omissions, modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the embodiments of the present application should be included in the protection scope of the present application.

Claims

1. A vehicle screen upgrade control method, characterized in that: include: Obtain a signed encrypted upgrade package, and unpack the signed encrypted upgrade package according to a locally deployed root certificate to obtain at least one legitimate upgrade package; Determine the target host direct control screen to be upgraded among the multiple screens corresponding to each of the legal upgrade packages according to the diagnostic identification code of the legal upgrade package, and perform consistency check on the target host direct control screen according to the component number of the legal upgrade package; In response to the consistency check passing, it is determined whether the safety upgrade conditions are met based on the vehicle's operating parameters and / or the current screen temperature of the target host direct-controlled screen, and a separate software upgrade is performed on the target host direct-controlled screen among the multiple screens that meets the safety upgrade conditions based on the legal upgrade package.

2. The vehicle screen upgrade control method according to claim 1, characterized in that: The step of unpacking the signed encrypted upgrade package according to the locally deployed root certificate to obtain at least one legal upgrade package includes: Splitting at least one single upgrade package from the signed and encrypted upgrade package; The single upgrade package is signature-verified and decrypted according to the root certificate, the single upgrade package that passes the signature-verification and decryption is determined as the legal upgrade package, and the single upgrade package that fails the signature-verification and decryption is determined as an illegal upgrade package.

3. The vehicle screen upgrade control method according to claim 1, characterized in that: The step of determining the target host direct control screen to be upgraded among the multiple screens corresponding to each of the legal upgrade packages according to the diagnostic identification code of the legal upgrade package comprises: Determine the screen identification code for each screen; A target screen identification code that is consistent with the diagnosis identification code is determined, and a screen corresponding to the target screen identification code is determined as the target host direct control screen.

4. The vehicle screen upgrade control method according to claim 1, characterized in that: The performing consistency check on the target host direct control screen according to the component number of the legal upgrade package includes: Determine the screen component number of the target host direct control screen; In response to the screen component number being consistent with the component number, determining that the consistency check has passed; In response to the screen component number being inconsistent with the component number, it is determined that the consistency check has failed.

5. The vehicle screen upgrade control method according to claim 1, characterized in that: The determining whether the security upgrade condition is met according to the operating parameter and / or the current screen temperature of the target host direct-controlled screen includes: Determining whether the upgrade preconditions of the target host directly controlling the screen are met according to the operating parameters; In response to not meeting the pre-upgrade condition, determining that the safety upgrade condition is not met, and providing a vehicle status change prompt; In response to satisfying the pre-upgrade condition, determining whether there is a risk of upgrade failure according to the current screen temperature; In response to the risk of upgrade failure, determining that the safety upgrade conditions are not met, and providing a screen temperature adjustment prompt; In response to there being no risk of upgrade failure, it is determined that a safe upgrade condition is met.

6. The vehicle screen upgrade control method according to claim 5, characterized in that: The determining, according to the operating parameters, whether the upgrade preconditions of the target host directly controlling the screen are met includes: In response to the power mode in the operating parameters being the on mode, determining that a pre-mode condition is satisfied; In response to the battery power in the operating parameter being greater than or equal to a preset first power threshold, determining that the pre-battery condition is met; In response to the power battery power in the operating parameter being greater than or equal to a preset second power threshold, determining that the front power battery condition is met; In response to the current vehicle speed in the operating parameter being a zero value, determining that a preceding vehicle speed condition is satisfied; In response to the current gear in the operating parameter being a parking gear or a neutral gear, determining that a forward gear condition is satisfied; In response to the handbrake state in the operating parameter being a pulled-up state or a clamped state, determining that a front handbrake condition is satisfied; In response to the high and low voltage states in the operating parameters being a high voltage state or a low voltage state, determining that a pre-power-on condition is satisfied; In response to simultaneously satisfying the pre-mode condition, the pre-battery bar, the pre-power battery condition, the pre-vehicle speed condition, the pre-gear condition, the pre-handbrake condition, and the pre-power-on condition, determining that the upgrade pre-condition is satisfied; In response to the presence of unsatisfied conditions among the pre-mode condition, the pre-battery bar, the pre-power battery condition, the pre-vehicle speed condition, the pre-gear condition, the pre-handbrake condition and the pre-power-on condition, it is determined that the upgrade pre-condition is not satisfied.

7. The vehicle screen upgrade control method according to claim 5, characterized in that: The determining whether there is an upgrade failure risk according to the current screen temperature includes: Determine the operating temperature range of the target host direct-controlled screen, Determine a safe temperature range according to the working temperature range and a preset safe temperature difference, and determine an upper boundary temperature and a lower boundary temperature of the safe temperature range; In response to the current screen temperature being greater than or equal to the upper boundary temperature, or the current screen temperature being less than or equal to the lower boundary temperature, determining that there is an upgrade failure risk; In response to the current screen temperature being less than the upper boundary temperature and greater than the lower boundary temperature, it is determined that there is no upgrade risk.

8. A vehicle screen upgrade control device, characterized in that: include: The upgrade unpacking module is configured to: obtain a signed encrypted upgrade package, unpack the signed encrypted upgrade package according to a locally deployed root certificate, and obtain at least one legal upgrade package; The upgrade verification module is configured to: determine the target host direct control screen to be upgraded among the multiple screens corresponding to each of the legal upgrade packages according to the diagnostic identification code of the legal upgrade package, and perform consistency verification on the target host direct control screen according to the component number of the legal upgrade package; The upgrade safety module is configured to: in response to passing the consistency check, determine whether the safety upgrade conditions are met based on the vehicle's operating parameters and / or the current screen temperature of the target host direct-controlled screen, and perform a separate software upgrade on the target host direct-controlled screen that meets the safety upgrade conditions among the multiple screens based on the legal upgrade package.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that: When the processor executes the program, the method according to any one of claims 1 to 7 is implemented.

10. A vehicle, characterized in that: An upgraded control device comprising the vehicle screen as claimed in claim 8 or an electronic device as claimed in claim 9.

Images