Method and device for preventing small storage battery from feeding in OTA upgrading process, vehicle and equipment

Abstract

The invention provides a method and device for preventing a small storage battery from feeding in an OTA upgrading process, a vehicle and equipment. The problem that the small storage battery is fed in the OTA upgrading process due to abnormal restart of TBOX is solved. The method for preventing the small storage battery from feeding in the OTA upgrading process comprises the steps that after an OTA upgrading instruction is received, low-voltage loading is conducted on a whole vehicle, and a low-voltage controller of the whole vehicle is flashed; if it is recognized that the low-voltage type controller completes flashing, a power type controller of the whole vehicle is controlled to remove communication type faults; and if it is recognized that the power type controller of the whole vehicle completes communication type fault clearing within the preset duration, high-voltage power-on of the whole vehicle is carried out, and a high-voltage type controller of the whole vehicle is flashed.

Description

Technical Field

[0001] The present invention belongs to the field of automobile controller upgrade, and specifically relates to a method, a device, a vehicle and equipment for preventing a small battery from feeding power during an OTA upgrade process. Background Art

[0002] At present, almost all vehicle manufacturers have the ability to perform OTA (Over-the-Air upgrade) upgrades on the controllers on the vehicle. The conventional media involved in OTA upgrades include cloud platforms, TSP (Telematics Service Provider, remote communication service system), TBOX (Telematics Box, in-vehicle infotainment system), and controllers to be upgraded. In order to ensure that all vehicle controllers are upgraded in one task and control battery power consumption, the controllers to be upgraded on the vehicle are generally divided into high-voltage controllers and low-voltage controllers. High-voltage controllers need to be flashed under high voltage on the vehicle, while low-voltage controllers only need to be flashed under low voltage on the vehicle.

[0003] In the prior art, in order to ensure that the TBOX controller does not fail to function under abnormal circumstances, a variety of restart conditions are usually set; when flashing a low-voltage controller, an abnormal TBOX restart occurs after the application program of a low-voltage controller is erased. Since the TBOX cannot periodically send diagnostic online instructions to each controller to be upgraded during the restart process (during the OTA upgrade process, the diagnostic online instructions are responsible for informing each controller to be upgraded that the entire vehicle is currently in a flashing state, and each controller to be upgraded should remain in a non-fault state), each controller to be upgraded will generate an ECU frame loss fault (the ECU frame loss fault is a communication fault), and ultimately the entire vehicle will be unable to execute the high-voltage function due to the ECU frame loss fault issued by each controller to be upgraded, resulting in the entire OTA upgrade of the vehicle being completed in a low-voltage state, triggering battery power feeding, and the entire vehicle cannot start normally. Summary of the invention

[0004] The present invention provides a method, a device, a vehicle and equipment for preventing a small battery from feeding power during an OTA upgrade process, so as to solve the problem that a small battery feeds power during an OTA upgrade process caused by an abnormal restart of a TBOX.

[0005] The technical solution of the present invention is: On the one hand, the present application provides a method for preventing a small battery from feeding power during an OTA upgrade process, including: After receiving the OTA upgrade command, first perform low voltage on the vehicle and flash the low voltage controller of the vehicle; If it is identified that the low-voltage controller has completed the flashing, the power controller of the whole vehicle is controlled to clear the communication fault; If it is identified that the power controller of the whole vehicle completes the clearing of communication faults within the preset time, the high voltage of the whole vehicle is powered on and the high voltage controller of the whole vehicle is flashed.

[0006] Preferably, the power controller of the whole vehicle includes a whole vehicle controller. If it is recognized that the low voltage controller has completed the flashing, the step of controlling the power controller of the whole vehicle to clear the communication fault includes: Control the vehicle controller to clear the frame loss fault of each power controller caused by abnormal restart of TBOX during OTA upgrade.

[0007] Preferably, the method further comprises: If it is identified that the power controller of the whole vehicle has not completed the clearing of the communication fault within the preset time, repeatedly controlling the power controller of the whole vehicle to clear the communication fault; If it is identified that the power controller of the vehicle has not completed the clearing of communication faults after a preset number of cycles, the OTA upgrade is exited.

[0008] Preferably, the method further comprises: If it is identified that the power controller of the vehicle has not completed the clearing of communication faults within the preset time, the user is requested to confirm whether to continue the upgrade; After receiving the exit upgrade instruction sent by the user, exit the OTA upgrade.

[0009] Preferably, the OTA upgrade instruction is sent remotely by the user through a mobile terminal or by the user through an OTA upgrade button mounted on the vehicle.

[0010] On the other hand, the present application also provides a device for preventing a small battery from feeding power during an OTA upgrade process, comprising: The low-voltage controller flashing module is used to flash the low-voltage controller of the vehicle after receiving the OTA upgrade command. A communication fault clearing control module is used to control the power controller of the vehicle to clear the communication fault if it is recognized that the low-voltage controller has completed the flashing; The high-voltage controller flashing module is used to power on the high voltage of the whole vehicle and flash the high-voltage controller of the whole vehicle if it is identified that the power controller of the whole vehicle has completed the clearing of communication faults within a preset time.

[0011] Preferably, the power controller of the whole vehicle includes a whole vehicle controller, and the communication fault clearing control module is specifically used for: Control the vehicle controller to clear the frame loss fault of each power controller caused by abnormal restart of TBOX during OTA upgrade.

[0012] Preferably, the device further comprises: A communication fault clearing cycle module is used to repeatedly control the power controller of the whole vehicle to clear the communication fault if it is identified that the power controller of the whole vehicle has not completed the communication fault clearing within a preset time period; The exit module is used to exit the OTA upgrade if it is identified that the power controller of the whole vehicle has not completed the communication fault clearing after a preset number of cycles; or to request the user to confirm whether to continue the upgrade, and exit the OTA upgrade after receiving the exit upgrade instruction issued by the user.

[0013] Preferably, the OTA upgrade instruction is sent remotely by the user through a mobile terminal or by the user through an OTA upgrade button mounted on the vehicle.

[0014] On the other hand, the present application also provides a vehicle, including the above-mentioned device for preventing a small battery from feeding power during an OTA upgrade process.

[0015] On the other hand, the present application also provides a control device, including a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method for preventing a small battery from being powered on during an OTA upgrade as described above.

[0016] The beneficial effects of the present invention are: After the low-voltage controller of the whole vehicle is flashed under the low-voltage state of the whole vehicle, the communication faults are cleared through the power controller to ensure that the whole vehicle is on high voltage and complete the OTA upgrade of the high-voltage controller. The OTA upgrade of the whole vehicle will not be completed in the low-voltage state throughout the process to avoid causing battery power feeding. Specifically, when TBOX restarts abnormally during the OTA upgrade process, the power controller will generate a communication fault of ECU frame loss. The whole vehicle controller can clear the ECU frame loss fault generated by each power controller after the low-voltage controller is upgraded, ensuring that the whole vehicle in the OTA upgrade can successfully go to high voltage after the TBOX restarts abnormally, and complete the OTA upgrade of the high-voltage controller. This solution can improve the robustness of the OTA upgrade function of the whole vehicle, ensure that the power state of the whole vehicle is switched to the high-voltage state as expected, thereby safely completing the OTA upgrade of the whole vehicle controller, and avoiding the problem of the whole vehicle failing to start normally due to the abnormal restart of TBOX during the OTA upgrade. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 This is a flow chart of a method for preventing a small battery from feeding power during an OTA upgrade process in Embodiment 1 of the present application; Figure 2 A detailed flowchart of a method for preventing a small battery from feeding power during an OTA upgrade process in Embodiment 2 of the present application; Figure 3 A detailed flowchart of a method for preventing a small battery from feeding power during an OTA upgrade process in Embodiment 3 of the present application; Figure 4 This is a structural block diagram of the device for preventing a small battery from supplying power during an OTA upgrade process in the fourth embodiment of the present application. DETAILED DESCRIPTION

[0018] The exemplary embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0019] Reference Figure 1 , Embodiment 1 of the present application provides a method for preventing a small battery from feeding power during an OTA upgrade process, the method comprising: S1, after receiving the OTA upgrade command, first perform low voltage on the vehicle and flash the low voltage controller of the vehicle; S2: If it is recognized that the low-voltage controller has completed the flashing, the power controller of the vehicle is controlled to clear the communication fault; S3: If it is identified that the power controller of the whole vehicle completes the clearing of communication faults within the preset time, the high voltage of the whole vehicle is powered on and the high voltage controller of the whole vehicle is flashed.

[0020] In the first embodiment of the present application, the high-voltage controller and the low-voltage controller of the whole vehicle are distinguished according to the working voltage required by the corresponding controller; the power controller of the whole vehicle is divided according to the function of the controller. The division of the above three types of controllers is well known to those skilled in the art.

[0021] After the low-voltage controller of the vehicle is flashed under the low-voltage state of the vehicle, the communication fault is cleared through the power controller to ensure that the vehicle is high-voltage and the OTA upgrade of the high-voltage controller is completed. The OTA upgrade of the vehicle will not be completed in the low-voltage state throughout the process to avoid battery power feeding. This solution can improve the robustness of the OTA upgrade function of the vehicle, ensure that the power state of the vehicle is switched to the high-voltage state as expected, thereby safely completing the OTA upgrade of the controller of the whole vehicle, and avoiding the problem of the vehicle failing to start normally due to abnormal restart of TBOX during the OTA upgrade process.

[0022] In the first embodiment of the present application, the OTA upgrade command is remotely issued by the user through a mobile terminal or issued by the user through the OTA upgrade button installed on the vehicle. When the user remotely issues the OTA upgrade command through a mobile terminal, it is only necessary to register the vehicle information and owner information of the mobile terminal to the cloud platform in advance, and then the command can be remotely issued through the relevant application on the mobile terminal, thereby realizing the remote upgrade of the vehicle. When the user issues the OTA upgrade command through the OTA upgrade button installed on the vehicle, the user is required to manually trigger the function after parking. The above two functions can be installed on vehicles with relevant configurations according to the specific vehicle model configuration.

[0023] In the first embodiment of the present application, the power controller of the whole vehicle includes the whole vehicle controller. If it is recognized that the low-voltage controller has completed the flashing, the step S2 of controlling the power controller of the whole vehicle to clear the communication fault specifically includes: Control the vehicle controller to clear the frame loss fault of each power controller caused by abnormal restart of TBOX during OTA upgrade.

[0024] Specifically, when TBOX restarts abnormally during the OTA upgrade process, the power controllers may generate ECU frame loss, a communication fault. Using the control logic of step S2 of this application, the vehicle controller can actively detect whether each power controller has an ECU frame loss fault after the low-voltage controller is upgraded, and then actively clear the frame loss faults generated by all power controllers, ensuring that the vehicle in the OTA upgrade can successfully go to high voltage after the TBOX restarts abnormally, thereby completing the OTA upgrade of the high-voltage controller.

[0025] The above method of embodiment 1 of the present application can, through the vehicle controller, clear the ECU frame loss fault of each power controller caused by abnormal restart of TBOX after the low-voltage controller completes the OTA upgrade, thereby avoiding the situation where the whole vehicle cannot be upgraded to high voltage due to the fault. The high-voltage controller of the whole vehicle can be upgraded OTA under high voltage without consuming the power of the small battery.

[0026] Reference Figure 2 , Embodiment 2 of the present application provides a method for preventing a small battery from feeding power during an OTA upgrade process, the method comprising: S1, after receiving the OTA upgrade command, first perform low voltage on the vehicle and flash the low voltage controller of the vehicle; S2: If it is recognized that the low-voltage controller has completed the flashing, the power controller of the vehicle is controlled to clear the communication fault; S3, if it is identified that the power controller of the whole vehicle completes the clearing of the communication fault within the preset time, the whole vehicle is powered on at high voltage and the high voltage controller of the whole vehicle is flashed; S4, if it is identified that the power controller of the whole vehicle has not completed the clearing of the communication fault within a preset time period, repeatedly controlling the power controller of the whole vehicle to clear the communication fault.

[0027] S5: If it is identified that the power controller of the vehicle has not completed the clearing of communication faults after a preset number of cycles, the OTA upgrade is exited.

[0028] Based on the above-mentioned embodiment 1, the second embodiment of the present application adds the content of how to avoid feeding power to the small battery in the scenario where the power controller cannot complete the communication fault. In step S4 and step S5, when the power controller fails to clear the communication fault within the preset time, it indicates that the communication fault of the power controller is caused by the controller itself rather than the abnormal restart of TBOX during the OTA upgrade process. In this scenario, by limiting the number of cycles for clearing the communication fault of the power controller, when the power controller still cannot clear the communication fault after exceeding the preset number of cycles, the OTA upgrade is exited to avoid OTA upgrade of the high-voltage controller in the low-voltage state of the whole vehicle, resulting in feeding power to the small battery.

[0029] Reference Figure 3 , Embodiment 3 of the present application provides a method for preventing a small battery from feeding power during an OTA upgrade process, the method comprising: S1, after receiving the OTA upgrade command, first perform low voltage on the vehicle and flash the low voltage controller of the vehicle; S2: If it is recognized that the low-voltage controller has completed the flashing, the power controller of the vehicle is controlled to clear the communication fault; S3, if it is identified that the power controller of the whole vehicle completes the clearing of the communication fault within the preset time, the whole vehicle is powered on at high voltage and the high voltage controller of the whole vehicle is flashed; S6, if it is identified that the power controller of the vehicle has not completed the clearing of the communication fault within the preset time, requesting the user to confirm whether to continue the upgrade; S7, after receiving the exit upgrade instruction sent by the user, exit the OTA upgrade.

[0030] In the third embodiment of the present application, compared with the second embodiment, a method is provided in which the user actively chooses whether to interrupt the OTA upgrade in the scenario where the power controller cannot complete the communication failure, thereby improving the user experience. When the user issues the OTA upgrade instruction remotely, the request in step S6 can be popped up to the user through the mobile terminal; when the user issues the OTA upgrade instruction through the vehicle, the request in step S6 can be popped up to the user through the vehicle's speakers, on-board display screen, etc.

[0031] Reference Figure 4The fourth embodiment of the present application further provides a device for preventing a small battery from feeding power during an OTA upgrade process, including: The low-voltage controller flashing module 101 is used to first perform low voltage on the whole vehicle and flash the low-voltage controller of the whole vehicle after receiving the OTA upgrade instruction; The communication fault clearing control module 102 is used to control the power controller of the whole vehicle to clear the communication fault if it is recognized that the low-voltage controller has completed the flashing; The high-voltage controller flashing module 103 is used to power on the high voltage of the whole vehicle and flash the high-voltage controller of the whole vehicle if it is identified that the power controller of the whole vehicle completes the clearing of communication faults within a preset time.

[0032] The device for preventing the small battery from feeding power during the OTA upgrade process of the fourth embodiment of the present invention, after the low-voltage controller of the whole vehicle is flashed under the low-voltage state of the whole vehicle, clears the communication fault through the power controller to ensure that the whole vehicle is high-voltage and completes the OTA upgrade of the high-voltage controller. The OTA upgrade of the whole vehicle will not be completed in the low-voltage state throughout the process, avoiding the battery feeding. This solution can improve the robustness of the OTA upgrade function of the whole vehicle, ensure that the power state of the whole vehicle is switched to the high-voltage state as expected, thereby safely completing the OTA upgrade of the whole vehicle controller, and avoiding the problem that the whole vehicle cannot start normally due to abnormal restart of TBOX during the OTA upgrade process.

[0033] Preferably, the power controller of the vehicle includes a vehicle controller, and the communication fault clearing control module 102 is specifically used for: Control the vehicle controller to clear the frame loss fault of each power controller caused by abnormal restart of TBOX during OTA upgrade.

[0034] Preferably, refer to Figure 4 , the device further comprises: The communication fault clearing cycle module 104 is used to repeatedly control the power controller of the whole vehicle to clear the communication fault if it is identified that the power controller of the whole vehicle has not completed the communication fault clearing within a preset time period; The exit module 105 is used to exit the OTA upgrade if it is identified that the power controller of the whole vehicle has not completed the communication fault clearing after a preset number of cycles; or to request the user to confirm whether to continue the upgrade, and exit the OTA upgrade after receiving the exit upgrade instruction issued by the user.

[0035] Preferably, the OTA upgrade instruction is sent remotely by the user through a mobile terminal or by the user through an OTA upgrade button mounted on the vehicle.

[0036] On the other hand, the present application also provides a vehicle, including the above-mentioned device for preventing a small battery from feeding power during an OTA upgrade process.

[0037] On the other hand, the present application also provides a control device, including a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method for preventing a small battery from being powered on during an OTA upgrade as described above.

[0038] It should be noted that the various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0039] Although the preferred embodiments of the present invention have been described, those skilled in the art may make other changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0040] It should also be noted that, in this article, the orientation or position relationship indicated by the terms "center", "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside", etc. is based on the orientation or position relationship shown in the drawings, which is for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation of the present invention. In addition, relational terms such as "first" and "second" are used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply that there is any such actual relationship or order between these entities or operations, nor can they be understood as indicating or implying relative importance. Moreover, the terms "include", "comprise" or any other variant thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements does not include those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such a process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "including one..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0041] The technical solution provided by the present invention is described in detail above. The principle and implementation mode of the present invention are described in this article using specific examples. The description of the above embodiments is only used to help understand the present invention, and the content of this specification should not be understood as limiting the present invention. At the same time, for those skilled in the art, according to the present invention, there will be different forms of changes in the specific implementation mode and application scope. It is not necessary and impossible to list all the implementation modes here, and the obvious changes or modifications derived therefrom are still within the protection scope of the present invention.

Claims

1. A method for preventing a small battery from feeding power during an OTA upgrade, characterized in that: include: After receiving the OTA upgrade command, first perform low voltage on the vehicle and flash the low voltage controller of the vehicle; If it is identified that the low-voltage controller has completed the flashing, the power controller of the whole vehicle is controlled to clear the communication fault; If it is identified that the power controller of the whole vehicle completes the clearing of communication faults within the preset time, the high voltage of the whole vehicle is powered on and the high voltage controller of the whole vehicle is flashed.

2. The method for preventing a small battery from feeding power during an OTA upgrade according to claim 1, characterized in that: The power controller of the whole vehicle includes the whole vehicle controller. If it is recognized that the low voltage controller has completed the flashing, the steps of controlling the power controller of the whole vehicle to clear the communication fault include: Control the vehicle controller to clear the frame loss fault of each power controller caused by abnormal restart of TBOX during OTA upgrade.

3. The method for preventing a small battery from feeding power during an OTA upgrade according to claim 1, characterized in that: The method further comprises: If it is identified that the power controller of the whole vehicle has not completed the clearing of the communication fault within the preset time, repeatedly controlling the power controller of the whole vehicle to clear the communication fault; If it is identified that the power controller of the vehicle has not completed the clearing of communication faults after a preset number of cycles, the OTA upgrade is exited.

4. The method for preventing a small battery from feeding power during an OTA upgrade according to claim 1, characterized in that: The method further comprises: If it is identified that the power controller of the vehicle has not completed the clearing of communication faults within the preset time, the user is requested to confirm whether to continue the upgrade; After receiving the exit upgrade instruction sent by the user, exit the OTA upgrade.

5. The method for preventing a small battery from feeding power during an OTA upgrade according to claim 1, characterized in that: The OTA upgrade command is sent remotely by the user through a mobile terminal or by the user through an OTA upgrade button installed on the vehicle.

6. A device to prevent a small battery from feeding power during an OTA upgrade, characterized in that: include: The low-voltage controller flashing module is used to flash the low-voltage controller of the vehicle after receiving the OTA upgrade command. A communication fault clearing control module is used to control the power controller of the vehicle to clear the communication fault if it is recognized that the low-voltage controller has completed the flashing; The high-voltage controller flashing module is used to power on the high voltage of the whole vehicle and flash the high-voltage controller of the whole vehicle if it is identified that the power controller of the whole vehicle has completed the clearing of communication faults within a preset time.

7. The device for preventing a small battery from feeding power during an OTA upgrade according to claim 6, characterized in that: The device also includes: A communication fault clearing cycle module is used to repeatedly control the power controller of the whole vehicle to clear the communication fault if it is identified that the power controller of the whole vehicle has not completed the communication fault clearing within a preset time period; The exit module is used to exit the OTA upgrade if it is identified that the power controller of the whole vehicle has not completed the communication fault clearing after a preset number of cycles; or to request the user to confirm whether to continue the upgrade, and exit the OTA upgrade after receiving the exit upgrade instruction issued by the user.

8. The device for preventing a small battery from feeding power during an OTA upgrade according to claim 6, characterized in that: The OTA upgrade command is sent remotely by the user through a mobile terminal or by the user through an OTA upgrade button installed on the vehicle.

9. A vehicle, characterized in that: The invention comprises a device for preventing a small battery from being fed with power during an OTA upgrade process as described in any one of claims 6 to 8.

10. A control device, characterized in that: The method comprises a processor, a memory, and a program or instruction stored in the memory and executable on the processor, wherein the program or instruction, when executed by the processor, implements the steps of the method for preventing a small battery from being powered on during an OTA upgrade as described in any one of claims 1 to 5.

Images