Upgrading method and upgrading device of vehicle-mounted software, storage medium, electronic device and computer program product

By establishing a physical communication connection between the upgrade device and the target vehicle, obtaining and reading controller information to determine the software upgrade package and process, information leakage and data security issues in on-board software upgrades are solved, and a safer and more reliable upgrade process is achieved.

CN119829080APending Publication Date: 2025-04-15SHANGHAI RUIPU ENERGY CO LTD +1
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202411763646.5
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2024-12-02
Publication Date
2025-04-15

AI Technical Summary

Technical Problem

Suppliers can upgrade the in-vehicle software by developing general software licenses to service stations, which can easily cause information leakage and data security issues.

Method used

By establishing a physical communication connection with the target vehicle in the upgrade device, controller information of the controller corresponding to the components in the target vehicle is obtained, and corresponding software upgrade packages and upgrade processes are read in the upgrade device. The upgrade device is off-grid, and the software upgrade package and upgrade process are only allowed to be read by the upgrade device.

Benefits of technology

Improve data security, prevent information leakage and data security issues, and ensure that the on-board software upgrade process is safer and more reliable.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119829080A_ABST
    Figure CN119829080A_ABST
Patent Text Reader

Abstract

The invention discloses a vehicle-mounted software upgrading method and device, a storage medium, an electronic device and a computer program product.The method comprises the steps that under the condition that the upgrading device detects that physical communication connection is established with a target vehicle, controller information of a controller corresponding to a component in the target vehicle is obtained, under the condition that the upgrading device is connected with a target vehicle, the upgrading device is in an off-network state; according to the controller information, a corresponding software upgrade package and upgrade process are read in the upgrade device, and the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device; and sending the software upgrade package to the controller based on the upgrade process. By adopting the technical scheme, the problems of information leakage and data security which are easily caused when a supplier develops general software to authorize the service station to upgrade the vehicle-mounted software are solved.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of vehicle-mounted software upgrades, and more specifically, to a vehicle-mounted software upgrade method, upgrade device, storage medium, electronic device, and computer program product. Background Art

[0002] With the advent of the wave of electric and intelligent vehicles, software-defined cars are gradually accepted by most people. However, as the degree of intelligence of vehicles increases, the complexity of software increases, and the development cycle becomes shorter and shorter. In many cases, the software has defects and performs unexpected actions under specific working conditions, so the software of the vehicle controller needs to be upgraded. Some leading car companies have already implemented Over-the-Air Technology (OTA), which allows vehicles to be automatically upgraded without going to service stations, as long as there is a network. However, many traditional car companies have not yet completed the development of OTA for the entire vehicle, and need to go to 4S stores or service stations for software upgrades. More often, car companies do not even develop diagnostic instruments for corresponding models, and suppliers need to provide diagnostic tools to update the program. In this case, the after-sales operating costs of suppliers are high. The traditional way is that suppliers develop a set of general software, run on terminal devices, and authorize the software to service stations, but in this case, the software is often uncontrolled, and service stations may further distribute the software or even reverse engineer the software, causing information leakage or data security issues.

[0003] Regarding related technologies, suppliers develop general software and license it to service stations to upgrade vehicle-mounted software, which can easily lead to information leakage and data security problems. No effective solution has been proposed yet.

[0004] Therefore, it is necessary to improve the related technology to overcome the above-mentioned defects in the related technology. Summary of the invention

[0005] The embodiments of the present application provide a method for upgrading vehicle-mounted software, an upgrading device, a storage medium, an electronic device, and a computer program product, so as to at least solve the problem that suppliers develop general software and license it to service stations to upgrade vehicle-mounted software, which is prone to information leakage and data security.

[0006] According to one embodiment of the present application, a method for upgrading vehicle-mounted software is provided, comprising: when the upgrading device detects that a physical communication connection has been established with a target vehicle, obtaining controller information of a controller corresponding to a component in the target vehicle, wherein when the upgrading device is connected to the target vehicle, the upgrading device is in an off-grid state; reading a corresponding software upgrade package and an upgrade process in the upgrading device according to the controller information, wherein the software upgrade package and the upgrade process in the upgrading device are only allowed to be read by the upgrading device; and sending the software upgrade package to the controller based on the upgrade process.

[0007] In an exemplary embodiment, obtaining controller information of a controller corresponding to a component in the target vehicle includes: obtaining controller information of a controller corresponding to a component in the target vehicle through a communication connection between a first interface and a second interface; wherein the first interface is set in the upgrade device, and the second interface is set in the target vehicle, and the first interface and the second interface are used to realize a physical communication connection between the upgrade device and the target vehicle, and the target vehicle supplies power to the upgrade device through the first interface and the second interface.

[0008] In an exemplary embodiment, reading the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information includes: obtaining the software upgrade package and upgrade process corresponding to the controller information in a data storage area of ​​the upgrade device; wherein the data storage area stores software upgrade packages and upgrade processes corresponding to different controller information, and the data in the data storage area is only allowed to be read by the upgrade device.

[0009] In an exemplary embodiment, the method further includes: when the upgrade device is in a designated network, sending a target identification code to a server via the designated network; when the server verifies that the target identification code is successful, downloading a software upgrade package and an upgrade process with a designated identifier from the server via the designated network, wherein the designated identifier is used to indicate that the software upgrade package and the upgrade process are allowed to be downloaded by the upgrade device with the target identification code; and storing the downloaded software upgrade package and the upgrade process in the data storage area.

[0010] In an exemplary embodiment, sending the software upgrade package to the controller based on the upgrade process includes: obtaining a decoding key from a data storage area of ​​the upgrade device, or determining a decoding key based on controller information of the controller based on preset rules, wherein the data in the data storage area is only allowed to be read by the upgrade device; using the decoding key to decode the upgrade process and the software upgrade package, and sending the decoded software upgrade package to the controller based on the decoded upgrade process.

[0011] In an exemplary embodiment, the method further includes: when it is monitored that the upgrade device is being debugged or an external device is detected reading data in the upgrade device, controlling the upgrade device to shut down or enter a safe mode, wherein when the upgrade device enters the safe mode, the upgrade device is not allowed to exchange data with an external device.

[0012] In an exemplary embodiment, after reading the corresponding software upgrade package and the upgrade process in the upgrade device according to the controller information, the method also includes: displaying the software upgrade package and the relevant information of the upgrade process on the display of the upgrade device; sending the software upgrade package to the controller based on the upgrade process, including: when a certain instruction is obtained through the interactive component of the upgrade device, sending the software upgrade package to the controller based on the upgrade process.

[0013] According to one embodiment of the present application, an upgrade device is also provided, including: an embedded chip, for obtaining controller information of a controller corresponding to a component in the target vehicle when it is detected that the upgrade device has established a physical communication connection with the target vehicle; reading the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information; sending the software upgrade package to the controller based on the upgrade process, wherein the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device, and when the upgrade device is connected to the target vehicle, the upgrade device is in an off-grid state.

[0014] According to another embodiment of the present application, a computer-readable storage medium is provided, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above method embodiments when run.

[0015] According to another embodiment of the present application, an electronic device is provided, including a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0016] According to another embodiment of the present application, a computer program product is provided, including a computer program, and when the computer program is executed by a processor, the steps of the method described in each embodiment of the present application are implemented.

[0017] In this application, a physical communication connection is established with a target vehicle through an off-grid upgrade device, and then the controller information of the controller corresponding to the component in the target vehicle is obtained through the upgrade device, so as to determine the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information, and send the software upgrade package to the controller based on the upgrade process. Since the upgrade device is off-grid, and the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device, the security of the data is improved, and the problem of information leakage and data security is solved when suppliers develop general software and authorize service stations to upgrade vehicle-mounted software. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The exemplary embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0019] Figure 1 It is a hardware structure block diagram of an upgrading device of a vehicle-mounted software upgrading method according to an embodiment of the present application;

[0020] Figure 2 is a flow chart of a method for upgrading vehicle software according to an embodiment of the present application;

[0021] Figure 3 is a structural block diagram of an upgrading device according to an embodiment of the present application;

[0022] Figure 4 It is a structural block diagram of another upgrading device according to an embodiment of the present application. DETAILED DESCRIPTION

[0023] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0024] It should be noted that the terms and "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0025] The method embodiments provided in the embodiments of the present application can be executed in an upgrade device or a similar computing device. Taking running on an upgrade device as an example, Figure 1 1 is a hardware structure block diagram of an upgrade device of a vehicle software upgrade method according to an embodiment of the present application. Figure 1 As shown, the upgrade device may include one or more ( Figure 1 Only one is shown in the figure) processor 102 (processor 102 may include but is not limited to a microprocessor (Microprocessor Unit, referred to as MPU) or a programmable logic device (Programmable logic device, referred to as PLD)) and a memory 104 for storing data. In an exemplary embodiment, the above-mentioned upgrading device may also include a transmission device 106 and an input / output device 108 for communication functions. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above-mentioned upgrading device. Figure 1 More or fewer components as shown, or with Figure 1 Equivalent functions or comparisons shown Figure 1 A different configuration with more features is shown.

[0026] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the vehicle software upgrade method in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, which is equivalent to implementing the above method. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories can be connected to the upgrade device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0027] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the upgrade device. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0028] In this embodiment, a vehicle-mounted software upgrade method is provided, which is applied to an upgrade device (that is, the execution subject of the vehicle-mounted software upgrade method of this embodiment is the upgrade device). Figure 2 : is a flow chart of a method for upgrading vehicle software according to an embodiment of the present application, and the process includes the following steps:

[0029] Step S202: when the upgrade device detects that a physical communication connection has been established with a target vehicle, acquiring controller information of a controller corresponding to a component in the target vehicle, wherein when the upgrade device is connected to the target vehicle, the upgrade device is in an off-grid state;

[0030] Optionally, the components in the target vehicle include, but are not limited to: air conditioning, engine, battery, etc. The controller is a vehicle electronic control unit (ECU).

[0031] Optionally, the controller information includes: part number of the controller (eg, model number or serial number), version information of software installed on the controller, etc. The upgrade device can read the part number and version information of the controller by identifying the identification code of the corresponding controller.

[0032] It should be noted that each controller in the vehicle has its own unique part number, which helps ensure that the update program is applied to the correct hardware. The part number may be defined by the manufacturer and contains information about the controller type, function and applicable model. By reading the part number, the upgrade device can determine which specific model of controller it is connected to, and thus select the correct software program for update.

[0033] Version information refers to the software version number currently installed on the controller. This includes the major version number, minor version number, and revision number, which are used to identify different versions of the software and its update history. Version information is crucial to determining whether a software upgrade is required. By comparing the version information on the controller with the latest version information stored internally, the upgrade device can determine whether the software on the controller needs to be updated and which specific version of the software is required.

[0034] In an exemplary embodiment, the above-mentioned acquisition of controller information of the controller corresponding to the component in the target vehicle is achieved in the following manner: acquiring controller information of the controller corresponding to the component in the target vehicle through a communication connection between a first interface and a second interface; wherein, the first interface is set in the upgrade device, and the second interface is set in the target vehicle, and the first interface and the second interface are used to realize the physical communication connection between the upgrade device detection and the target vehicle, and the target vehicle powers the upgrade device through the first interface and the second interface.

[0035] Optionally, the first interface and the second interface may be an On-Board Diagnostics (OBD) interface, which is a standardized interface that allows external devices to communicate with the electronic control system of a vehicle, and generally refers to an OBD-II interface, which is the second generation standard of the OBD system and is widely used in vehicles produced after 1996. Through the OBD interface, a technician or a car owner can use a diagnostic tool to read the vehicle's fault codes, monitor real-time data streams, perform specific diagnostic tests, and in some cases, perform software updates or configuration changes to the vehicle's electronic control unit (ECU).

[0036] Optionally, after the first interface on the upgrade device is connected to the second interface of the target vehicle, the target vehicle can simultaneously charge the battery inside the upgrade device. The first interface and the upgrade device body are detachable, which is convenient for replacing interfaces of different models.

[0037] It should be noted that the upgrade device establishes a communication connection with the second interface of the target vehicle through the first interface, automatically obtains the controller information (such as part number, software version number, etc.) of the controller corresponding to each component in the vehicle, simplifies the upgrade operation of the on-site service personnel, and reduces the difficulty and error rate of the operation. On-site personnel do not need to manually input or query the controller information. They only need to connect the upgrade device to the vehicle to automatically identify and start the upgrade process, which improves the efficiency and convenience of software upgrades. In addition, the target vehicle powers the upgrade device through the connection between the first interface and the second interface, which not only ensures the power demand of the upgrade device when performing the upgrade operation, but also allows the upgrade device to be charged from the vehicle when not in use, extending its service life and increasing portability. In addition, since the power supply of the upgrade device comes directly from the vehicle, the carrying and connection of the external power supply is reduced, simplifying the operation process.

[0038] Step S204: reading the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information, wherein the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device;

[0039] In an exemplary embodiment, the above-mentioned step S204 can be implemented in the following manner: obtaining the software upgrade package and the upgrade process corresponding to the controller information in the data storage area of ​​the upgrade device; wherein the data storage area stores software upgrade packages and upgrade processes corresponding to different controller information, and the data in the data storage area is only allowed to be read by the upgrade device.

[0040] Optionally, the upgrade device has a memory inside, and the data storage area is a trusted area in the memory, usually a "secure area" or "trusted area" in the memory. In embedded systems and computer memory management, a trusted area (Trusted Zone) or a secure area (Secure Area) refers to a part of the memory, the data and programs in this part have a higher security level, and only specific, authenticated components or operations are allowed to access. Storing the software upgrade package and the upgrade process in the data storage area can prevent unauthorized access, protect data from malicious tampering and reverse engineering, and ensure the security of the upgrade process and the integrity of the data. When the upgrade device interacts with the on-board controller, the data in the trusted area will only be read and used after the identity and authority of the upgrade device are correctly verified. This security mechanism is a key component for implementing a secure offline upgrade process, which can effectively prevent data leakage and illegal operations.

[0041] In an exemplary embodiment, the method further includes: when the upgrade device is in a designated network, sending a target identification code to a server via the designated network; when the server verifies that the target identification code is successful, downloading a software upgrade package and an upgrade process with a designated identifier from the server via the designated network, wherein the designated identifier is used to indicate that the software upgrade package and the upgrade process are allowed to be downloaded by the upgrade device with the target identification code; and storing the downloaded software upgrade package and the upgrade process in the data storage area.

[0042] It should be noted that the upgrade device delivered to the service station or 4S store has a unique target identification code, which is used for unique identification of authority and identity management in the server, that is, the server can determine the upgrade package or process that the upgrade device can obtain through this target identification code.

[0043] Optionally, when the target identification codes provided by the upgrade device are different, the software upgrade packages with designated identifiers in the server and the upgrade processes are also different.

[0044] Optionally, before the upgrade device is connected to the vehicle diagnostic port (i.e., the second interface mentioned above), it is necessary to download the latest programs and corresponding upgrade processes of all authorized projects from the server through the network to the upgrade device; the upgrade device can be connected to the Internet, which is achieved through a built-in wireless network module (such as a Wi-Fi or cellular data module), ensuring that the upgrade device can also access external resources. Optionally, in order to ensure the data security of the upgrade device, the upgrade device can only download the software upgrade package and upgrade process with a specified identifier from the server when it is in a designated network (such as a specific Wi-Fi network or cellular network operator) and has a target identification code, avoiding software updates in unsafe or unreliable networks and reducing the risk of data being intercepted or tampered with.

[0045] It should be noted that the upgrade device verifies the legality and applicability of the software upgrade package by verifying the specified identifier to avoid downloading erroneous or unauthorized software upgrade packages.

[0046] It should be noted that before downloading, the upgrade device needs to perform two-way identity authentication with the server to ensure the legitimacy of the server and check the authorization status of the software upgrade package through the designated identifier provided by the server.

[0047] Optionally, the upgrade package and the upgrade process downloaded from the server are encrypted using a key.

[0048] Optionally, the software upgrade includes a new version of the software to be upgraded and possible patches, as well as an instruction set for replacing or updating existing software.

[0049] Optionally, the upgrade process details the steps and processes for applying the software upgrade package to a specific controller, including but not limited to initializing the ECU, verifying the software package, decrypting, transmitting, installing, restarting and verifying, etc.

[0050] It should be noted that in this embodiment, the security of the software upgrade package download process is ensured by specifying the network connection and specifying the identification verification, preventing unauthorized access and data leakage; the software upgrade package and the upgrade process are stored locally, so that the upgrade device can perform software upgrades without a network connection, thereby enhancing the flexibility and practicality of the operation.

[0051] In an exemplary embodiment, after the above step S204, the method further includes: displaying the software upgrade package and relevant information of the upgrade process on a display of the upgrade device.

[0052] It should be noted that displaying relevant information on the display of the upgrade device enables the operator to clearly understand the software version that needs to be upgraded, the update content and the specific upgrade steps. This increases the transparency of the operation, ensures that the operator is clear about the purpose and process of the upgrade, and reduces operational errors caused by misunderstanding or insufficient information.

[0053] It should be noted that the relevant information displayed may include the name, version number, size, applicable controller type, etc. of the software package, as well as each step in the upgrade process. This helps operators confirm the accuracy of all information before performing the upgrade and avoid upgrade failures due to incorrect or incomplete information.

[0054] Optionally, during the upgrade process, the upgrade progress and status can be displayed in real time on the monitor. If there are any abnormal situations, such as download failure, verification error or transmission interruption, the operator can immediately obtain the error information from the screen, which is convenient for quickly locating the problem and performing troubleshooting and repair.

[0055] Step S206: Sending the software upgrade package to the controller based on the upgrade process. In an exemplary embodiment, the step S206 includes: in the case where a determination instruction is obtained through the interactive component of the upgrade device, sending the software upgrade package to the controller based on the upgrade process.

[0056] Optionally, when the display has an interactive function, the interactive component is the above-mentioned display.

[0057] It should be noted that through the operator's confirmed instructions, the upgrade device can clearly know when to start the upgrade process, avoiding unauthorized or accidental upgrade operations and ensuring the precise control and execution of software updates. In addition, before performing the upgrade, the operator can confirm through the interactive component whether the vehicle status is suitable for the upgrade, such as whether the vehicle is in safe mode and whether other non-essential systems have been shut down. This step helps prevent upgrades under inappropriate conditions and reduces operational risks.

[0058] In an exemplary embodiment, the above-mentioned step S206 can be implemented in the following manner: obtaining a decoding key from the data storage area of ​​the upgrade device, or determining a decoding key based on the controller information of the controller based on preset rules, wherein the data in the data storage area is only allowed to be read by the upgrade device; using the decoding key to decode the upgrade process and the software upgrade package, and sending the decoded software upgrade package to the controller based on the decoded upgrade process.

[0059] Optionally, the decoding key in the data storage area is a key downloaded by the upgrade device when downloading the corresponding software upgrade package and upgrade process in the server.

[0060] Optionally, the preset rules may be a series of algorithms or logical judgments pre-set in the software of the upgrade device, which are used to generate or select corresponding decoding keys under different controller information. These rules may be determined based on a combination of information such as the controller model, hardware version, software version, production date, serial number, etc.

[0061] Optionally, the preset rules include but are not limited to a key generation algorithm or selecting a decoding key.

[0062] Key generation algorithm: This algorithm generates a unique decoding key based on specific parameters in the controller information, such as part number, version number, etc. For example, the key generation algorithm can use a hash function combined with the serial number of the controller to generate a key.

[0063] Select the decoding key: The upgrade device has multiple preset keys stored inside, each key corresponds to a specific set of controller information. When the upgrade device reads the controller information of the target controller, it will match the preset key list with this information to select the correct decoding key.

[0064] It should be noted that, in this embodiment, the decoding key is stored in the data storage area of ​​the upgrade device, and the data in the storage area is only allowed to be read by the upgrade device, thereby increasing the security of the data. This means that even if the upgrade device is lost or stolen, the decoding key stored therein is difficult to be accessed by unauthorized parties, thereby reducing the risk of the software upgrade package being decoded and used without authorization.

[0065] In addition, the decoding key is determined based on preset rules and controller information. This mechanism increases the difficulty of cracking the key, while also preventing the upgrade package from being tampered with during transmission, ensuring the integrity of the software upgrade.

[0066] In the above steps S202-S206, a physical communication connection is established between the off-grid upgrade device and the target vehicle, and the controller information of the controller corresponding to the component in the target vehicle is obtained through the upgrade device, so as to determine the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information, and send the software upgrade package to the controller based on the upgrade process. Since the upgrade device is off-grid, and the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device, the security of the data is improved, and the problem of information leakage and data security is solved when the supplier develops general software and authorizes it to the service station to upgrade the vehicle software.

[0067] In an exemplary embodiment, the method further includes: when it is monitored that the upgrade device is being debugged or an external device is detected reading data in the upgrade device, controlling the upgrade device to shut down or enter a safe mode, wherein when the upgrade device enters the safe mode, the upgrade device is not allowed to exchange data with an external device.

[0068] Optionally, the debugging interface and the status monitoring interface of the upgrade device are shielded and do not allow external access, thereby ensuring the security of data stored inside the upgrade device.

[0069] It should be noted that in this embodiment, when the upgrade device detects a potential security threat, the upgrade device can automatically shut down or enter a safe mode and stop exchanging data with external devices, thereby effectively avoiding the leakage of internal sensitive information and upgrade data, reducing security risks caused by information leakage, and effectively ensuring the integrity of the data in the upgrade device.

[0070] Optionally, the upgrade device not only detects whether the controller is in normal mode before upgrading, but also has the ability to monitor the controller status in real time. During the upgrade process, if the controller status is detected to be abnormal (such as suddenly entering standby mode or debugging mode), the upgrade operation is automatically suspended and the safe mode is entered to prevent upgrade failure or data damage caused by abnormal status.

[0071] Optionally, before the official upgrade, the upgrade device can first perform a "rehearsal" upgrade to simulate the upgrade process and check compatibility and safety. If the rehearsal finds potential problems, such as incompatibility with existing software, the upgrade will be automatically stopped and the operation and maintenance personnel will be prompted. At the same time, the device provides a rollback mechanism. If any problems are found during or after the upgrade, the controller can be automatically or manually restored to the state before the upgrade to ensure the normal operation of the vehicle.

[0072] Optionally, the upgrade device can also require operation and maintenance personnel to authenticate their identities, using biometrics (such as fingerprints, facial recognition), electronic signatures, or dynamic verification codes to ensure that only authorized personnel can operate the upgrade device, further protecting the security of data and vehicles.

[0073] In an exemplary embodiment, obtaining controller information of controllers corresponding to components in the target vehicle includes: obtaining N controller information of N controllers corresponding to N components in the target vehicle;

[0074] Optionally, when N controller information is obtained, corresponding N software upgrade packages and upgrade processes are determined in the upgrade device according to the N controller information, and the i-th software upgrade package is sent to the corresponding controller according to the i-th upgrade process.

[0075] It should be noted that in order to better understand the upgrade device and the working logic of the upgrade device in the embodiment of the present application, the following is a specific description:

[0076] Optionally, Figure 3 The structure diagram of an upgrade device is shown, and the upgrade device includes: an embedded chip, a memory, a display, an interactive component and an OBD interface. The working principle of the upgrade device is as follows:

[0077] (1) The embedded chip downloads all authorized encrypted programs and corresponding processes from the server to the internal memory through the network, and performs source and validity verification after downloading;

[0078] (2) The embedded chip is connected to the OBD interface of the target vehicle through the OBD interface of the upgrade device, and the OBD interface is used to power the upgrade device and charge the battery inside the upgrade device.

[0079] (3) The embedded chip reads the part number and version information of the controller through the OBD interface, and checks whether there is a corresponding software upgrade package and upgrade process in the internal memory based on the part number and version information. If so, it will be automatically upgraded; if not, it will not be flashed;

[0080] (4) When the corresponding software upgrade package and upgrade process exist in the internal memory, the embedded chip displays the relevant information of the software upgrade package and the upgrade process on the display;

[0081] (5) When a certain instruction is obtained through the interactive component, the embedded chip decrypts the software upgrade package and the upgrade process, and sends the software upgrade package to the controller through the OBD interface while decrypting. After the transmission is completed, the decrypted data is cleared.

[0082] (6) If the upgrade fails, it will automatically restart. During the upgrade process, the progress will be displayed in real time on the display. When the upgrade is complete, it will prompt completion.

[0083] It should be noted that there is basic software running on the embedded chip, which monitors its own status in real time. If it finds that it is being debugged or monitored, it will directly enter the safe mode or shut itself down.

[0084] Through the description of the above implementation methods, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), and includes a number of instructions for a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods of each embodiment of the present application.

[0085] In the present embodiment, an upgrading device is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware of a predetermined function. Although the equipment described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware is also possible and conceived.

[0086] Figure 4 : is a structural block diagram of another upgrading device in an embodiment of the present application, the device comprising:

[0087] The embedded chip 402 is used to obtain the controller information of the controller corresponding to the component in the target vehicle when it is detected that the upgrade device has established a physical communication connection with the target vehicle; read the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information; and send the software upgrade package to the controller based on the upgrade process, wherein the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device, and when the upgrade device is connected to the target vehicle, the upgrade device is in an off-grid state.

[0088] The above device establishes a physical communication connection with the target vehicle through an off-grid upgrade device, and then obtains the controller information of the controller corresponding to the component in the target vehicle through the upgrade device, so as to determine the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information, and send the software upgrade package to the controller based on the upgrade process. Since the upgrade device is off-grid, and the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device, the security of the data is improved, and the problem of information leakage and data security is solved when the supplier develops general software and authorizes it to the service station to upgrade the vehicle software.

[0089] In an exemplary embodiment, the upgrade device also includes: a first interface for connecting to a second interface of a target vehicle, wherein the first interface and the second interface are used to implement the physical communication connection between the upgrade device and the target vehicle, and the target vehicle powers the upgrade device through the first interface and the second interface; an embedded chip 402, which is also used to obtain controller information of a controller corresponding to a component in the target vehicle through a communication connection between the first interface and the second interface.

[0090] In an exemplary embodiment, the upgrade device also includes: a memory for storing software upgrade packages and upgrade processes corresponding to different controller information; the data in the memory is only allowed to be read by the upgrade device; the embedded chip 402 is also used to obtain the software upgrade package and upgrade process corresponding to the controller information in the memory.

[0091] In an exemplary embodiment, the embedded chip 402 is also used to send a target identification code to a server through a designated network when the upgrade device is in the designated network; download a software upgrade package and an upgrade process with a designated identifier from the server through the designated network when the server verifies that the target identification code passes, wherein the designated identifier is used to indicate that the software upgrade package and the upgrade process are allowed to be downloaded by the upgrade device with the target identification code; and store the downloaded software upgrade package and the upgrade process in the memory.

[0092] In an exemplary embodiment, the embedded chip 402 is also used to obtain a decoding key from the memory of the upgrade device, or determine a decoding key based on the controller information of the controller based on preset rules; use the decoding key to decode the upgrade process and the software upgrade package, and send the decoded software upgrade package to the controller based on the decoded upgrade process.

[0093] In an exemplary embodiment, the embedded chip 402 is also used to control the upgrade device to shut down or enter a safe mode when it is monitored that the upgrade device is being debugged or an external device is detected reading data in the upgrade device, wherein when the upgrade device enters the safe mode, the upgrade device is not allowed to exchange data with external devices.

[0094] In an exemplary embodiment, the upgrade device also includes: a display and an interactive component; an embedded chip 402, which is also used to read the corresponding software upgrade package and the upgrade process in the upgrade device according to the controller information, and then display the software upgrade package and the related information of the upgrade process on the display of the upgrade device; when a certain instruction is obtained through the interactive component, the software upgrade package is sent to the controller based on the upgrade process.

[0095] An embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored, wherein the computer program is configured to execute the steps of any of the above method embodiments when run.

[0096] In an exemplary embodiment, the computer-readable storage medium may include, but is not limited to, various media that can store computer programs, such as a USB flash drive, a read-only memory (ROM), a random access memory (RAM), a mobile hard disk, a magnetic disk or an optical disk.

[0097] An embodiment of the present application further provides a computer program product, including a computer program, which implements the steps of the method described in each embodiment of the present application when executed by a processor.

[0098] An embodiment of the present application further provides an electronic device, including a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to run the computer program to execute the steps in any one of the above method embodiments.

[0099] In an exemplary embodiment, the electronic device may further include a transmission device and an input / output device, wherein the transmission device is connected to the processor, and the input / output device is connected to the processor.

[0100] For specific examples in this embodiment, reference may be made to the examples described in the above embodiments and exemplary implementation modes, and this embodiment will not be described in detail herein.

[0101] Obviously, those skilled in the art should understand that the above modules or steps of the present application can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order from that herein, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present application is not limited to any specific combination of hardware and software.

[0102] The above description is only the preferred embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the principles of the present application shall be included in the protection scope of the present application.

Claims

1. A method for upgrading vehicle software, characterized in that: Applicable to upgrade devices, including: When the upgrade device detects that a physical communication connection has been established with a target vehicle, acquiring controller information of a controller corresponding to a component in the target vehicle, wherein when the upgrade device is connected to the target vehicle, the upgrade device is in an off-grid state; Reading the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information, wherein the software upgrade package and upgrade process in the upgrade device are only allowed to be read by the upgrade device; The software upgrade package is sent to the controller based on the upgrade process.

2. The method according to claim 1, characterized in that Obtaining controller information of a controller corresponding to a component in the target vehicle, including: Acquire controller information of a controller corresponding to a component in the target vehicle through a communication connection between the first interface and the second interface; Among them, the first interface is set in the upgrading device, and the second interface is set in the target vehicle. The first interface and the second interface are used to realize the physical communication connection between the upgrading device and the target vehicle, and the target vehicle supplies power to the upgrading device through the first interface and the second interface.

3. The method according to claim 1, characterized in that Reading the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information includes: Acquire a software upgrade package and an upgrade process corresponding to the controller information in a data storage area of ​​the upgrade device; The data storage area stores software upgrade packages and upgrade processes corresponding to different controller information, and the data in the data storage area is only allowed to be read by the upgrade device.

4. The method according to claim 3, characterized in that: The method further comprises: When the upgrade device is in a designated network, sending a target identification code to a server via the designated network; If the server verifies that the target identification code is passed, downloading a software upgrade package and an upgrade process with a specified identifier from the server through the specified network, wherein the specified identifier is used to indicate that the software upgrade package and the upgrade process are allowed to be downloaded by the upgrade device with the target identification code; The downloaded software upgrade package and upgrade process are stored in the data storage area.

5. The method according to claim 1, characterized in that Sending the software upgrade package to the controller based on the upgrade process includes: Acquire a decoding key from a data storage area of ​​the upgrade device, or determine a decoding key according to controller information of the controller based on a preset rule, wherein the data in the data storage area is only allowed to be read by the upgrade device; The upgrade process and the software upgrade package are decoded using the decoding key, and the decoded software upgrade package is sent to the controller based on the decoded upgrade process.

6. The method according to claim 1, characterized in that The method further comprises: When it is monitored that the upgrade device is debugged or an external device is detected to read data in the upgrade device, the upgrade device is controlled to shut down or enter a safe mode, wherein when the upgrade device enters the safe mode, the upgrade device is not allowed to exchange data with the external device.

7. The method according to claim 1, characterized in that After reading the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information, the method further includes: Displaying the software upgrade package and relevant information of the upgrade process on a display of the upgrade device; Sending the software upgrade package to the controller based on the upgrade process includes: in a case where a determination instruction is obtained through an interactive component of the upgrade device, sending the software upgrade package to the controller based on the upgrade process.

8. An upgrading device, characterized in that: include: An embedded chip, used for acquiring controller information of a controller corresponding to a component in the target vehicle when it is detected that the upgrade device has established a physical communication connection with the target vehicle; Reading the corresponding software upgrade package and upgrade process in the upgrade device according to the controller information; The software upgrade package is sent to the controller based on the upgrade process, wherein the software upgrade package and the upgrade process in the upgrade device are only allowed to be read by the upgrade device, and when the upgrade device is connected to the target vehicle, the upgrade device is in an off-grid state.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein the program executes the steps of the method described in any one of claims 1 to 7 when executed.

10. An electronic device comprising a memory and a processor, characterized in that: A computer program is stored in the memory, and the processor is configured to execute the steps of the method described in any one of claims 1 to 7 through the computer program.

11. A computer program product, comprising a computer program, characterized in that When the computer program is executed by a processor, the steps of the method described in any one of claims 1 to 7 are implemented.