Equipment upgrading method and vehicle upgrading system

Abstract

The invention provides an equipment upgrading method and a vehicle upgrading system, a cloud service platform generates a first target upgrading instruction for target vehicle-mounted equipment and issues the first target upgrading instruction to a system-on-chip, and the system-on-chip responds to the target upgrading instruction, downloads target upgrading data corresponding to the target vehicle-mounted equipment from the cloud service platform, and upgrades the target upgrading data to the target vehicle-mounted equipment. And a second target upgrading instruction is generated, the second target upgrading instruction is sent to the main controller, and the main controller responds to the second target upgrading instruction and upgrades the target vehicle-mounted equipment. Through the online upgrading technology, the problem that offline upgrading of the vehicle-mounted equipment is inconvenient is solved, the upgrading and maintenance efficiency is improved, and meanwhile the user satisfaction degree is improved.

Description

Technical Field

[0001] The present application relates to the technical field of vehicle-mounted equipment upgrade, and in particular to an equipment upgrade method and a vehicle upgrade system. Background Art

[0002] The existing way to upgrade vehicle-mounted equipment is mostly through offline upgrades. If it is during the car manufacturing stage, the serial port is usually used to upgrade the vehicle-mounted equipment. However, as the vehicle is mass-produced, the serial port will be closed. The user needs to drive the vehicle to an after-sales service store to bring out the upgrade serial port of the vehicle-mounted equipment, thereby upgrading the vehicle display.

[0003] However, such an upgrade process brings great inconvenience to users and after-sales engineers. It not only reduces upgrade efficiency and user satisfaction, but also increases maintenance costs. Summary of the invention

[0004] In view of this, the purpose of this application is to at least provide a device upgrade method and a vehicle upgrade system, which, through online upgrade technology, solves the problem of inconvenient offline upgrade of vehicle-mounted equipment, improves upgrade and maintenance efficiency, and improves user satisfaction.

[0005] This application mainly includes the following aspects:

[0006] In a first aspect, an embodiment of the present application provides a device upgrade method, which is applied to a vehicle upgrade system, wherein the vehicle upgrade system includes a cloud service platform, a system-level chip on a vehicle to be upgraded, a main controller, and a target vehicle-mounted device, wherein the method includes: the cloud service platform generates a first target upgrade instruction for the target vehicle-mounted device and sends it to the system-level chip; the system-level chip responds to the target upgrade instruction, downloads target upgrade data corresponding to the target vehicle-mounted device from the cloud service platform, and generates a second target upgrade instruction, and sends the second target upgrade instruction to the main controller; the main controller responds to the second target upgrade instruction to upgrade the target vehicle-mounted device.

[0007] In a possible implementation, the cloud service platform generates a first target upgrade instruction and sends the first target upgrade instruction to the system-level chip in the following manner: in response to a target upgrade package release instruction for a target vehicle-mounted device, generates a first target upgrade instruction for the target vehicle-mounted device, the first target upgrade instruction carries an upgrade version corresponding to the target vehicle-mounted device; determines whether the vehicle to be upgraded is in a stationary state and whether the vehicle power is turned on; if the vehicle to be upgraded is in a stationary state and the vehicle power is turned on, sends the first target upgrade instruction to the system-level chip.

[0008] In one possible implementation, the system-level chip sends the second target upgrade instruction to the main controller in the following manner: parsing the target upgrade instruction to obtain the upgrade version corresponding to the target vehicle-mounted device; performing an upgrade version verification operation according to the upgrade version corresponding to the target vehicle-mounted device and the current application version, and determining the upgrade version verification result; if the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is consistent with the current application version, then a version consistency prompt message is generated, and the version consistency prompt message is fed back to the cloud service platform to end the upgrade process for the target vehicle-mounted device; if the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is inconsistent with the current application version, then the target upgrade data corresponding to the target vehicle-mounted device is downloaded from the cloud service platform and saved to the first designated location; performing anti-tampering verification on the downloaded target upgrade data, if the anti-tampering verification passes, then generating a second target upgrade instruction, and sending the second target upgrade instruction to the main controller; if the anti-tampering verification fails, then generating anti-tampering verification failure information and feeding it back to the cloud service platform to end the upgrade process for the target vehicle-mounted device.

[0009] In a possible implementation, the main controller further executes: in response to a second target upgrade instruction, saving the target upgrade data to a second designated location; performing tamper-proof verification on the target upgrade data, and if the tamper-proof verification passes, performing an upgrade version verification operation to determine the upgrade version verification result; if the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is consistent with the current application version, then generating version consistency prompt information, and feeding back the version consistency prompt information to the shrinking cloud service platform to end the upgrade process for the target vehicle-mounted device; if the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is inconsistent with the current application version, then changing the upgrade status corresponding to the target vehicle-mounted device to a pre-upgrade status to trigger the upgrade process for the target vehicle-mounted device; if the tamper-proof verification fails, then generating tamper-proof verification failure information and feeding back to the payment service platform to end the upgrade process for the target vehicle-mounted device.

[0010] In one possible implementation, the anti-tampering verification includes: parsing the target upgrade data to obtain a target upgrade package and its corresponding first verification code; determining whether the target upgrade package is an upgrade package corresponding to the target vehicle-mounted device, and if the target upgrade package is an upgrade package corresponding to the target vehicle-mounted device, generating a second verification code corresponding to the target upgrade package using an information digest algorithm; comparing the first verification code and the second verification code, and if the first verification code and the second verification code are consistent, determining that the anti-tampering verification has passed; if the first verification code and the second verification code are inconsistent, determining that the anti-tampering verification has failed.

[0011] In one possible implementation, the main controller completes the upgrade of the target vehicle-mounted device in the following manner: querying the upgrade status corresponding to the target vehicle-mounted device; if the upgrade status is a pre-upgrade status, erasing the application storage area of ​​the target vehicle-mounted device; parsing the target upgrade data, and burning the target upgrade program indicated by the target upgrade package corresponding to the target vehicle-mounted device to the application storage area of ​​the target vehicle-mounted device line by line until the target upgrade program is burned, thereby completing the upgrade of the target vehicle-mounted device.

[0012] In a possible implementation, before completing the upgrade of the target vehicle-mounted device, the method also includes: after the target upgrade program is burned, the main controller generates a data verification instruction and sends the data verification instruction to the target vehicle-mounted device; the target vehicle-mounted device responds to the data verification instruction to verify whether the target upgrade program indicated by the target upgrade package is consistent with the burning program; if the target vehicle-mounted device determines that the target upgrade program indicated by the target upgrade package is consistent with the burning program, it determines that the upgrade status corresponding to the target vehicle-mounted device is an upgrade completion status and synchronously changes it to the main controller; the main controller queries the upgrade status corresponding to the target vehicle-mounted device, and completes the upgrade of the target vehicle-mounted device according to the upgrade status.

[0013] In a possible implementation, the main controller further executes: if the upgrade status is the upgrade completion status, the upgrade of the target vehicle-mounted device is completed, and the upgrade status corresponding to the target vehicle-mounted device is erased; if the upgrade status is the pre-upgrade status, the upgrade of the target vehicle-mounted device is restarted.

[0014] In a possible implementation, the cloud service platform communicates with the system-on-chip via the Hypertext Transfer Protocol, the system-on-chip communicates with the main controller via the SPI communication method; and the main controller communicates with the target vehicle-mounted device via the I2C communication method.

[0015] In the second aspect, an embodiment of the present application also provides a vehicle upgrade system, which includes a cloud service platform, a system-level chip on a vehicle to be upgraded, a main controller and a target vehicle-mounted device, wherein the cloud service platform generates a first target upgrade instruction for the target vehicle-mounted device and sends it to the system-level chip; the system-level chip responds to the target upgrade instruction, downloads target upgrade data corresponding to the target vehicle-mounted device from the cloud service platform, and generates a second target upgrade instruction, and sends the second target upgrade instruction to the main controller; the main controller responds to the second target upgrade instruction to upgrade the target vehicle-mounted device.

[0016] The embodiment of the present application provides a device upgrade method and a vehicle upgrade system. The cloud service platform generates a first target upgrade instruction for a target vehicle-mounted device and sends it to a system-level chip. The system-level chip responds to the target upgrade instruction, downloads the target upgrade data corresponding to the target vehicle-mounted device from the cloud service platform, and generates a second target upgrade instruction. The second target upgrade instruction is sent to the main controller, and the main controller responds to the second target upgrade instruction to upgrade the target vehicle-mounted device. Through the online upgrade technology, the problem of inconvenient offline upgrade of vehicle-mounted devices is solved, the upgrade and maintenance efficiency is improved, and user satisfaction is improved.

[0017] In order to make the above-mentioned objects, features and advantages of the present application more obvious and easy to understand, preferred embodiments are specifically cited below and described in detail with reference to the attached drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0019] Figure 1 An interactive schematic diagram of a device upgrade method provided in an embodiment of the present application is shown;

[0020] Figure 2 A schematic diagram showing a communication method of a vehicle upgrade system provided in an embodiment of the present application is shown;

[0021] Figure 3 A flowchart of a system-on-chip for upgrading a target device provided by an embodiment of the present application is shown;

[0022] Figure 4 A workflow diagram of a main controller upgrading a target device provided by an embodiment of the present application is shown. DETAILED DESCRIPTION

[0023] To make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. It should be understood that the drawings in the present application only serve the purpose of explanation and description and are not used to limit the scope of protection of the present application. In addition, it should be understood that the schematic drawings are not drawn in real proportion. The flowchart used in this application shows the operations implemented according to some embodiments of the present application. It should be understood that the operations of the flowchart can be implemented out of sequence, and the steps without logical context can be reversed in order or implemented simultaneously. In addition, those skilled in the art, under the guidance of the content of the present application, can add one or more other operations to the flowchart, or remove one or more operations from the flowchart.

[0024] In addition, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those skilled in the art without making creative work belong to the scope of protection of the present application.

[0025] The existing way to upgrade vehicle-mounted equipment is mostly through offline upgrades. If it is in the car manufacturing stage, the serial port is usually used to upgrade the vehicle-mounted equipment. However, with the mass production of vehicles, the serial port will be closed. Users need to drive the vehicle to an automobile after-sales service store to bring out the upgrade serial port of the vehicle-mounted equipment, thereby upgrading the vehicle display. However, such an upgrade process brings great inconvenience to users and after-sales engineers, which not only reduces the upgrade efficiency and user satisfaction, but also increases the maintenance cost.

[0026] Based on this, the embodiments of the present application provide a device upgrade method and a vehicle upgrade system, which solve the problem of inconvenient offline upgrade of vehicle-mounted equipment through online upgrade technology, improve the upgrade and maintenance efficiency, and improve user satisfaction, as follows:

[0027] See also Figure 1 , Figure 1 FIG. 1 shows an interactive schematic diagram of a device upgrade method provided by an embodiment of the present application. Figure 1As shown, the method provided in the embodiment of the present application is applied to a vehicle upgrade system, which includes a cloud service platform 1, a system-on-chip SOC (System on Chip) on a vehicle to be upgraded, a main controller MCU and a target vehicle-mounted device 2, wherein the system-on-chip SOC is integrated with an OTA (Over-the-Air) application service, and the present application includes the following steps:

[0028] S100: The cloud service platform generates a first target upgrade instruction for a target vehicle-mounted device.

[0029] S110. The cloud service platform sends the first target upgrade instruction to the system-level chip.

[0030] S120 . The system-level chip responds to the target upgrade instruction and downloads target upgrade data corresponding to the target vehicle-mounted device from the cloud service platform.

[0031] S130: The system-on-chip generates a second target upgrade instruction.

[0032] S140: The system-on-chip sends the second target upgrade instruction to the main controller.

[0033] S150: The main controller upgrades the target vehicle-mounted device in response to the second target upgrade instruction.

[0034] For specific implementation, see Figure 2 , Figure 2 FIG. 1 is a schematic diagram showing a communication method of a vehicle upgrade system provided by an embodiment of the present application. Figure 2 As shown, in the vehicle upgrade system, the cloud service platform 1 communicates with the system-on-chip SOC through HTTP (Hypertext Transfer Protocol), the system-on-chip SOC communicates with the main controller MCU through SPI communication, and the main controller MCU communicates with the target vehicle-mounted device 2 through I2C communication. In this application, the target vehicle-mounted device 2 is a part of the vehicle that requires regular software or firmware upgrades, such as a vehicle-mounted display screen, and no specific restrictions are made here.

[0035] In a preferred embodiment, the cloud service platform generates a first target upgrade instruction and sends the first target upgrade instruction to the system-level chip in the following manner:

[0036] In response to a target upgrade package release instruction for a target vehicle-mounted device, a first target upgrade instruction for the target vehicle-mounted device is generated. The first target upgrade instruction carries an upgrade version and an upgrade object corresponding to the target vehicle-mounted device, and determines whether the vehicle to be upgraded is in a stationary state and whether the vehicle power is turned on. If the vehicle to be upgraded is in a stationary state and the vehicle power is turned on, the first target upgrade instruction is sent to the system-level chip.

[0037] In one example, the backend operation and maintenance personnel may publish and upload upgrade packages corresponding to different vehicle-mounted devices on the cloud service platform 1 from time to time. For each vehicle-mounted device, after detecting that a new version upgrade package corresponding to the vehicle-mounted device has been uploaded, the cloud service platform 1 generates a first target upgrade instruction for the vehicle-mounted device, and at the same time obtains the driving status and power supply status corresponding to the vehicle to be upgraded from the system-level chip SOC of the vehicle to be upgraded. If the vehicle to be upgraded is in a stationary state and the vehicle power is turned on, the first target upgrade instruction corresponding to the vehicle-mounted device is sent to the system-level chip SOC; if the vehicle to be upgraded is in a non-stationary state or the vehicle power is turned off, the upgrade process of the vehicle-mounted device is suspended until the vehicle to be upgraded is in a stationary state and the vehicle power is turned on.

[0038] See also Figure 3 , Figure 3 FIG. 1 shows a workflow diagram of a system-level chip provided in an embodiment of the present application for upgrading a target device. Figure 3 As shown, the system-on-chip SOC performs:

[0039] S200: Parse the target upgrade instruction to obtain the upgrade version corresponding to the target vehicle-mounted device.

[0040] S210: Perform an upgrade version verification operation according to the upgrade version corresponding to the target vehicle-mounted device and the current application version, and determine the upgrade version verification result.

[0041] S220: If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is consistent with the current application version, a version consistency prompt message is generated.

[0042] S230: Feedback the version consistency prompt information to the cloud service platform to end the upgrade process for the target vehicle-mounted device.

[0043] S240: If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is inconsistent with the current application version, the target upgrade data corresponding to the target vehicle-mounted device is downloaded from the cloud service platform and saved to the first designated location.

[0044] S250: Perform tamper-proof verification on the downloaded target upgrade data.

[0045] S260: If the anti-tampering verification passes, a second target upgrade instruction is generated and sent to the main controller.

[0046] S270: If the anti-tampering verification fails, anti-tampering verification failure information is generated and fed back to the cloud service platform to end the upgrade process for the target vehicle-mounted device.

[0047] In step S200 to step S270, after receiving the first target upgrade instruction, the system-level chip executes:

[0048] Parse the target upgrade instruction, determine the target upgrade object and the upgrade version corresponding to the target upgrade object, take the target upgrade object as the vehicle display as an example, obtain the current application version of the vehicle display, compare the current application version of the vehicle display with the upgrade version indicated by the target upgrade instruction, determine the upgrade version verification result, the upgrade version corresponding to the vehicle display is consistent with the current application version, indicating that the current application version of the vehicle display is the latest version, and then generate version consistency prompt information corresponding to the vehicle display to the cloud service platform to end the upgrade of the vehicle display. If the upgrade version corresponding to the vehicle display is inconsistent with the current application version, determine to upgrade the vehicle display and download the corresponding target upgrade data of the vehicle display from the cloud service platform and save it to the first designated location, and generate the corresponding first path information at the same time.

[0049] After the system-level chip completes the download of the target upgrade data corresponding to the vehicle display screen, it executes: parsing the target upgrade data corresponding to the vehicle display screen, and performing anti-tampering verification based on the parsing result. The anti-tampering verification can be an MD5 consistency check. If the anti-tampering verification passes, a second target upgrade instruction is generated. The second target instruction carries the upgrade object and the upgrade version. The second target upgrade instruction is sent to the main controller. If the anti-tampering verification fails, the anti-tampering verification failure information is generated and fed back to the cloud service platform to end the upgrade process for the vehicle display screen.

[0050] In another preferred embodiment, the tamper proof verification includes:

[0051] Parse the target upgrade data, obtain the target upgrade package corresponding to the upgrade object and its corresponding first verification code, determine whether the target upgrade package is the upgrade package corresponding to the target vehicle-mounted device, if the target upgrade package is the upgrade package corresponding to the target vehicle-mounted device, use the information digest algorithm to generate the second verification code corresponding to the target upgrade package, compare the first verification code and the second verification code, if the first verification code and the second verification code are consistent, determine that the anti-tampering verification has passed, if the first verification code and the second verification code are inconsistent, determine that the anti-tampering verification has failed.

[0052] Specifically, the anti-tampering verification applies the verification method provided by the existing technology to prevent information from being tampered with. No specific restrictions are made here. For example, taking MD5 consistency check as an example, the verification code is the MD5 value. Specifically, after parsing the target upgrade data, the MD5 algorithm is used to calculate the second MD5 value corresponding to the target upgrade package, and the first MD5 value in the target upgrade data is compared with the second MD5 value. If the comparison results are consistent, it is determined that the anti-tampering verification has passed. If the comparison results are inconsistent, it is determined that the anti-tampering verification has failed.

[0053] See also Figure 4 , Figure 4 FIG. 1 shows a workflow diagram of a main controller upgrading a target device provided by an embodiment of the present application. Figure 4 As shown, the main controller MCU executes:

[0054] S300: In response to a second target upgrade instruction, save the target upgrade data to a second designated location.

[0055] S310: Perform tamper-proof verification on the target upgrade data.

[0056] S320: If the anti-tampering verification passes, perform an upgrade version verification operation to determine the upgrade version verification result.

[0057] S330: If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is consistent with the current application version, a version consistency prompt message is generated.

[0058] S340: Feedback the version consistency prompt information to the shrinking cloud service platform to end the upgrade process for the target vehicle-mounted device.

[0059] S350: If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is inconsistent with the current application version, the upgrade state corresponding to the target vehicle-mounted device is changed to a pre-upgrade state to trigger an upgrade process for the target vehicle-mounted device.

[0060] S360: If the anti-tampering verification fails, an anti-tampering verification failure message is generated and fed back to the payment service platform to end the upgrade process for the target vehicle-mounted device.

[0061] In steps S300 to S360, taking the upgrade of the vehicle display screen as an example, for the main controller MCU, after receiving the second target upgrade instruction, the second target upgrade instruction is parsed, and the upgrade object and its corresponding upgrade version are obtained, and the target upgrade data corresponding to the vehicle display screen is extracted from the first designated location and saved to the second designated location corresponding to the main controller MCU. Then, the target upgrade data is parsed, and the target upgrade data is again tamper-proof authenticated. The tamper-proof authentication process is the same as the tamper-proof authentication process performed in the system-level chip, which will not be repeated here.

[0062] After the anti-tampering authentication is passed, the upgrade version verification operation is performed. The specific operation process of the upgrade version verification operation is the same as that of the system-level chip, which will not be repeated here. Inside the main controller MCU, in response to the second target upgrade instruction, the upgrade process for the vehicle display will be triggered only after the anti-tampering authentication and the upgrade version verification are passed. Before triggering the upgrade process for the vehicle display, it is necessary to change the upgrade status corresponding to the vehicle display to the pre-upgrade status. Specifically, the upgrade status corresponding to the vehicle display is changed to the pre-upgrade status, that is, the Bootloader status corresponding to the vehicle display is changed to the pre-upgrade status Ready. The Bootloader status indicates whether the upgrade can be performed.

[0063] In a preferred embodiment, the main controller completes the upgrade of the target vehicle-mounted device in the following manner:

[0064] Query the upgrade status corresponding to the target vehicle-mounted device. If the upgrade status is a pre-upgrade status, erase the application storage area of ​​the target vehicle-mounted device, parse the target upgrade data, and burn the target upgrade program indicated by the target upgrade package corresponding to the target vehicle-mounted device into the application storage area of ​​the target vehicle-mounted device line by line until the target upgrade program is burned and the upgrade of the target vehicle-mounted device is completed.

[0065] Specifically, taking the target vehicle-mounted device as a vehicle-mounted display screen as an example, after triggering the upgrade of the vehicle-mounted display screen, the main controller MCU first queries the Bootloader status corresponding to the vehicle-mounted display screen. If the Bootloader status corresponding to the vehicle-mounted display screen is the ready upgrade status Ready, it starts to erase the application storage area corresponding to the vehicle-mounted display screen. The purpose of erasing the APP area is to clear the current application of the vehicle-mounted display screen and provide space for the new version of the application.

[0066] After the application storage area is erased, the main controller MCU starts to burn the target upgrade program line by line into the space provided by the application until the target upgrade program is burned.

[0067] In another preferred embodiment, the method provided by the present application further includes:

[0068] After the target upgrade program is burned, the main controller MCU generates a data verification instruction and sends the data verification instruction to the target vehicle-mounted device. The target vehicle-mounted device 4 responds to the data verification instruction to verify whether the target upgrade program indicated by the target upgrade package is consistent with the burning program. If the target vehicle-mounted device 4 determines that the target upgrade program indicated by the target upgrade package is consistent with the burning program, it determines that the upgrade status corresponding to the target vehicle-mounted device is the upgrade completion status and synchronously changes it to the main controller MCU. The main controller queries the upgrade status corresponding to the target vehicle-mounted device and completes the upgrade of the target vehicle-mounted device according to the upgrade status.

[0069] Specifically, after receiving the data verification instruction, the vehicle display screen verifies whether the target upgrade program indicated by the target upgrade package is consistent with the burning program. If the target upgrade program indicated by the target upgrade package is consistent with the burning program, the Bootloader status corresponding to the vehicle display screen is set to the upgrade completion status Complete, and is synchronously updated to the main controller MCU. If the target upgrade program indicated by the target upgrade package is inconsistent with the burning program, the Bootloader status corresponding to the vehicle display screen is set to the ready upgrade status Ready, and is synchronized to the controller MCU.

[0070] For the main controller, also execute:

[0071] If the upgrade status is the upgrade completion status, the upgrade of the target vehicle device is completed and the upgrade status corresponding to the target vehicle device is erased. If the upgrade status is the pre-upgrade status, the upgrade of the target vehicle device is restarted.

[0072] The benefits of this application are:

[0073] 1. Users do not need to drive their vehicles to 4S stores to upgrade their on-board equipment, which solves the problem of inconvenience in upgrading and improves user satisfaction.

[0074] 2. Improve the low efficiency problem caused by the existing technology of upgrading vehicle-mounted equipment using serial ports.

[0075] 3. Provides a convenient display screen upgrade method, which is convenient for vehicle users and engineering personnel.

[0076] 4. In the vehicle upgrade system of the present application, the system-level chip and the main controller all provide a verification process for the upgrade instructions, including verification of the upgrade version and anti-tampering authentication, which further ensures the security and accuracy of the upgrade of the target vehicle-mounted equipment.

[0077] Those skilled in the art can clearly understand that, for the convenience and simplicity of description, the specific working process of the system and device described above can refer to the corresponding process in the aforementioned method embodiment, and will not be repeated here. In the several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other ways. The device embodiments described above are merely schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some communication interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0078] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0079] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0080] If the function is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a non-volatile computer-readable storage medium that is executable by a processor. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), disk or optical disk, etc., various media that can store program codes.

[0081] The above are only specific implementations of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A device upgrading method, characterized in that: Applied to a vehicle upgrade system, the vehicle upgrade system includes a cloud service platform, a system-level chip on a vehicle to be upgraded, a main controller and a target vehicle-mounted device, Wherein, the method comprises: The cloud service platform generates a first target upgrade instruction for the target vehicle-mounted device and sends it to the system-level chip; The system-level chip responds to the target upgrade instruction, downloads the target upgrade data corresponding to the target vehicle-mounted device from the cloud service platform, generates a second target upgrade instruction, and sends the second target upgrade instruction to the main controller; The main controller upgrades the target vehicle-mounted device in response to the second target upgrade instruction.

2. The method according to claim 1, characterized in that: The cloud service platform generates the first target upgrade instruction and sends the first target upgrade instruction to the system-level chip in the following manner: In response to a target upgrade package publishing instruction for a target vehicle-mounted device, generating a first target upgrade instruction for the target vehicle-mounted device, wherein the first target upgrade instruction carries an upgrade version corresponding to the target vehicle-mounted device; Determine respectively whether the vehicle to be upgraded is in a stationary state and whether the vehicle power supply is turned on; If the vehicle to be upgraded is in a stationary state and the vehicle power supply is turned on, the first target upgrade instruction is sent to the system-level chip.

3. The method according to claim 1, characterized in that The system-level chip sends the second target upgrade instruction to the main controller in the following manner: Parsing the target upgrade instruction to obtain an upgrade version corresponding to the target vehicle-mounted device; According to the upgrade version corresponding to the target vehicle-mounted device and the current application version, perform an upgrade version verification operation to determine the upgrade version verification result; If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is consistent with the current application version, version consistency prompt information is generated, and the version consistency prompt information is fed back to the cloud service platform to end the upgrade process for the target vehicle-mounted device; If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is inconsistent with the current application version, downloading the target upgrade data corresponding to the target vehicle-mounted device from the cloud service platform and saving it to the first designated location; Performing tamper-proof verification on the downloaded target upgrade data, and if the tamper-proof verification passes, generating a second target upgrade instruction, and sending the second target upgrade instruction to the main controller; If the anti-tampering verification fails, anti-tampering verification failure information is generated and fed back to the cloud service platform to end the upgrade process for the target vehicle-mounted device.

4. The method according to claim 1, characterized in that: The main controller also executes: In response to the second target upgrade instruction, saving the target upgrade data to a second designated location; Performing tamper-proof verification on the target upgrade data, and if the tamper-proof verification passes, performing an upgrade version verification operation to determine an upgrade version verification result; If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is consistent with the current application version, a version consistency prompt message is generated, and the version consistency prompt message is fed back to the shrinking cloud service platform to end the upgrade process for the target vehicle-mounted device; If the upgrade version verification result indicates that the upgrade version corresponding to the target vehicle-mounted device is inconsistent with the current application version, the upgrade state corresponding to the target vehicle-mounted device is changed to a pre-upgrade state to trigger an upgrade process for the target vehicle-mounted device; If the anti-tampering verification fails, anti-tampering verification failure information is generated and fed back to the cloud service platform to end the upgrade process for the target vehicle-mounted device.

5. The method according to any one of claims 3-4, characterized in that: The tamper-proof verification includes: Parsing the target upgrade data to obtain a target upgrade package and a first verification code corresponding thereto; Determine whether the target upgrade package is an upgrade package corresponding to the target vehicle-mounted device, and if the target upgrade package is an upgrade package corresponding to the target vehicle-mounted device, generate a second verification code corresponding to the target upgrade package by using an information digest algorithm; Comparing the first verification code with the second verification code, and if the first verification code is consistent with the second verification code, determining that the anti-tampering verification has passed; If the first verification code and the second verification code are inconsistent, it is determined that the anti-tampering verification has failed.

6. The method according to claim 4, characterized in that The main controller completes the upgrade of the target vehicle-mounted device in the following manner: Querying the upgrade status corresponding to the target vehicle-mounted device; If the upgrade state is a pre-upgrade state, erasing the application storage area of ​​the target vehicle-mounted device; The target upgrade data is parsed, and the target upgrade program indicated by the target upgrade package corresponding to the target vehicle-mounted device is burned line by line into the application storage area of ​​the target vehicle-mounted device until the target upgrade program is burned, thereby completing the upgrade of the target vehicle-mounted device.

7. The method according to claim 6, characterized in that Before completing the upgrade of the target vehicle-mounted device, the method further includes: After the target upgrade program is burned, the main controller generates a data verification instruction and sends the data verification instruction to the target vehicle-mounted device; The target vehicle-mounted device responds to the data verification instruction to verify whether the target upgrade program indicated by the target upgrade package is consistent with the burning program; If the target vehicle-mounted device determines that the target upgrade program indicated by the target upgrade package is consistent with the burning program, the upgrade state corresponding to the target vehicle-mounted device is determined to be an upgrade completion state and is synchronously changed to the main controller; The main controller queries the upgrade status corresponding to the target vehicle-mounted device, and completes the upgrade of the target vehicle-mounted device according to the upgrade status.

8. The method according to claim 7, characterized in that The main controller further executes: If the upgrade status is the upgrade completion status, the upgrade of the target vehicle-mounted device is completed, and the upgrade status corresponding to the target vehicle-mounted device is erased; If the upgrade state is the pre-upgrade state, the upgrade of the target vehicle-mounted device is restarted.

9. The method according to claim 1, characterized in that: The cloud service platform communicates with the system-on-chip via a hypertext transfer protocol. The system-on-chip communicates with the main controller via SPI communication; The main controller communicates with the target vehicle-mounted device via I2C communication.

10. A vehicle upgrade system, characterized in that: The vehicle upgrade system includes a cloud service platform, a system-level chip on the vehicle to be upgraded, a main controller and a target vehicle-mounted device. The cloud service platform generates a first target upgrade instruction for the target vehicle-mounted device and sends it to the system-level chip; The system-level chip responds to the target upgrade instruction, downloads the target upgrade data corresponding to the target vehicle-mounted device from the cloud service platform, generates a second target upgrade instruction, and sends the second target upgrade instruction to the main controller; The main controller upgrades the target vehicle-mounted device in response to the second target upgrade instruction.

Images