Vehicle over-the-air upgrading method, device and equipment, storage medium and product

By controlling the vehicle to enter the safe mode and lowering high voltage in the vehicle air download upgrade system, and combining the type judgment of the preset upgrade environment classification table, safe upgrade of components under high voltage state is achieved, solving the problem of the inability to perform air download upgrades in the existing technology while ensuring vehicle safety.

CN120066546APending Publication Date: 2025-05-30ANHUI WEIDU HLDG CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510135330.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-02-07
Publication Date
2025-05-30

AI Technical Summary

Technical Problem

The existing vehicle aerial download upgrade method cannot perform aerial download upgrades on components that are only enabled under high pressure when ensuring vehicle safety.

Method used

By controlling the vehicle to enter safety mode, and the power domain controller controls the battery pack and all-in-one domain controller, the type of components to be upgraded is determined based on the preset upgrade environment classification table. If the type is a high-voltage upgrade environment class, the upgrade will be carried out in the high-voltage state.

Benefits of technology

Ensure that the vehicle is in a safe state during the parts upgrade process, and the safe upgrade of components that can only be enabled in high-voltage states is achieved, solving the problem that the vehicle safety cannot be guaranteed in the existing methods.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120066546A_ABST
    Figure CN120066546A_ABST
Patent Text Reader

Abstract

The invention discloses a vehicle over-the-air upgrading method, device and equipment, a storage medium and a product. The method is applied to an over-the-air upgrading system of a vehicle and comprises the following steps: responding to an upgrading operation of at least one to-be-upgraded part triggered by a user on a vehicle-mounted display; the vehicle is controlled to enter a safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower high voltage; based on a preset upgrading environment classification table, the type of at least one to-be-upgraded part is determined, the preset upgrading environment classification table comprises the address of a preset part and the type of the preset part, and the type of the preset part comprises a high-voltage upgrading environment type; and if the type of the at least one to-be-upgraded part is the high-voltage upgrading environment type, upgrading the at least one to-be-upgraded part after the power domain controller controls the battery pack and the all-in-one controller to be subjected to high voltage. And when the vehicle is in a safe state, parts which can be enabled only in a high-voltage state can be upgraded.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] Embodiments of the present invention relate to the field of automobile technology, and in particular to a vehicle over-the-air download upgrade method, device, equipment, storage medium and product. Background Art

[0002] Over-The-Air (OTA) is an advanced automotive technology that allows automakers to update the software of vehicle components through wireless communication networks, with many advantages such as fast and batch updates. The process of over-the-air updates may include vehicle verification, software and hardware version verification, application (APP) erasure, software download, installation, and upgrade status feedback.

[0003] Ensuring the stability and safety of the vehicle during the upgrade process is of utmost importance. Stability means that the vehicle status is in line with expectations and the upgrade process of over-the-air download and upgrade can be successfully completed; safety means that there will be no situation that endangers the safety of people and objects during the vehicle over-the-air download and upgrade process. To achieve stability and safety, the vehicle needs to have many strategies for precise control and real-time status monitoring, which involves the design of the entire vehicle system and the reasonable planning of software upgrade strategies.

[0004] Stability and safety are mainly analyzed and implemented around the high voltage and control strategy of the whole vehicle. For pure electric vehicles, their power source is the high-voltage battery pack. The closure of the main negative relay of the battery pack means that the high-voltage circuit of the whole vehicle is closed. At this time, the vehicle has the prerequisite for movement, which may cause unexpected driving, etc. Therefore, the existing vehicle over-the-air download and upgrade methods usually cut off the high voltage before upgrading. However, if the high voltage is completely cut off, it is impossible to perform over-the-air download and upgrade on components that are only enabled under high voltage while ensuring vehicle safety. Summary of the invention

[0005] The present invention provides a vehicle over-the-air download upgrade method, device, equipment, storage medium and product to solve the problem that the existing vehicle over-the-air download upgrade method cannot perform over-the-air download upgrades on components that are only enabled under high-voltage conditions while ensuring vehicle safety.

[0006] According to one aspect of the present invention, a vehicle over-the-air upgrade method is provided, which is applied to an over-the-air upgrade system of a vehicle, and the method comprises:

[0007] In response to an upgrade operation of at least one component to be upgraded triggered by a user on the vehicle display;

[0008] Control the vehicle to enter safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage;

[0009] Determine the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes an address of a preset component and a type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class;

[0010] If the type of the at least one component to be upgraded is the high-voltage upgrade environment type, after the battery pack and the all-in-one controller are controlled to be high voltage by the power domain controller, the at least one component to be upgraded is upgraded.

[0011] According to another aspect of the present invention, a vehicle over-the-air download upgrade device is provided, which is applied to the vehicle over-the-air download upgrade system, and the device comprises:

[0012] An operation response module, used to respond to an upgrade operation of at least one component to be upgraded triggered by a user on the vehicle display;

[0013] Safety control module, used to control the vehicle to enter safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage;

[0014] A type determination module, configured to determine the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes an address of a preset component and a type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class;

[0015] The first component upgrade module is used to upgrade the at least one component to be upgraded after controlling the battery pack and the all-in-one controller to be high voltage through the power domain controller if the type of the at least one component to be upgraded is the high voltage upgrade environment type.

[0016] According to another aspect of the present invention, an electronic device is provided, the electronic device comprising:

[0017] at least one processor; and

[0018] a memory communicatively connected to the at least one processor; wherein,

[0019] The memory stores a computer program that can be executed by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can execute the vehicle over-the-air download upgrade method described in any embodiment of the present invention.

[0020] According to another aspect of the present invention, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a processor to implement the vehicle over-the-air upgrade method described in any embodiment of the present invention when executed.

[0021] According to another aspect of the present invention, a computer program product is provided. The computer program product includes a computer program. When the computer program is executed by a processor, the vehicle over-the-air download upgrade method described in any embodiment of the present invention is implemented.

[0022] A vehicle over-the-air upgrade method provided in an embodiment of the present invention is applied to an over-the-air upgrade system of a vehicle, the method comprising: responding to an upgrade operation of at least one component to be upgraded triggered by a user on a vehicle-mounted display; controlling the vehicle to enter a safe mode, and controlling the battery pack and the all-in-one domain controller to lower the high voltage by the power domain controller; determining the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes the address of the preset component and the type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class; if the type of the at least one component to be upgraded is all the high-voltage upgrade environment class, after the battery pack and the all-in-one controller are controlled to raise the high voltage by the power domain controller, the at least one component to be upgraded is upgraded. Through the above technical scheme, before upgrading the components to be upgraded, the vehicle is controlled to enter the safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage, which effectively ensures that the vehicle is in a safe state during the component upgrading process. Furthermore, when it is determined according to the preset upgrade environment classification table that the types of components to be upgraded are all high-voltage upgrade environment types, after the power domain controller controls the battery pack and the all-in-one controller to increase the high voltage, at least one component to be upgraded is upgraded, thereby realizing the upgrade of components that can only be enabled under high-voltage conditions, and solving the problem that the existing vehicle over-the-air upgrade method cannot perform over-the-air download upgrades on controllers that are only enabled under high-voltage conditions while ensuring vehicle safety.

[0023] It should be understood that the contents described in this section are not intended to identify the key or important features of the embodiments of the present invention, nor are they intended to limit the scope of the present invention. Other features of the present invention will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0025] Figure 1 is a flow chart of a vehicle over-the-air download upgrade method provided by Embodiment 1 of the present invention;

[0026] Figure 2 It is a schematic structural diagram of a vehicle over-the-air (OTA) upgrade device provided in Embodiment 2 of the present invention;

[0027] Figure 3 It is a schematic structural diagram of an electronic device provided in Embodiment 3 of the present invention. Detailed implementation manners

[0028] In order to enable those skilled in the art to better understand the solution of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0029] It should be noted that the terms "first", "second", etc. in the specification and claims of the present invention and the above-mentioned drawings are used to distinguish similar objects, and do not have to be used to describe a specific order or sequence. It should be understood that such data can be interchanged under appropriate circumstances so that the embodiments of the present invention described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0030] Embodiment 1

[0031] Figure 1 It is a flowchart of a vehicle over-the-air (OTA) upgrade method provided in Embodiment 1 of the present invention. This embodiment is applicable to the situation of performing OTA upgrade on a vehicle. This method can be executed by a vehicle OTA upgrade device, which can be implemented in the form of hardware and / or software. The device can be configured in the OTA upgrade system of the vehicle, and the OTA upgrade system of the vehicle can be integrated in an electronic device, and the electronic device can be a vehicle. As Figure 1 shown, the method includes:

[0032] S110. Respond to the upgrade operation of at least one component to be upgraded triggered by the user on the in-vehicle display.

[0033] In this embodiment, the vehicle display can be understood as a display device installed inside the vehicle, which is used to display various information of the vehicle and provide a user interaction interface. For example, the vehicle display can display speed, power consumption, navigation and entertainment systems, etc. The parts to be upgraded can be understood as the parts in the vehicle that need to be upgraded in software or firmware. These parts usually include controllers (such as motor controllers and vehicle controllers, etc.), vehicle infotainment systems, instrument panels, and high-voltage battery management systems. The upgrade operation can be understood as an operation triggered by the user through the vehicle display to update or upgrade the software or firmware of the parts to be upgraded.

[0034] S120, control the vehicle to enter safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage.

[0035] In this embodiment, the power domain controller is an intelligent powertrain management unit, which is responsible for the centralized control and management of the vehicle's power system, including core components such as batteries, electronic controls and motors. The safety mode is used to ensure the safety of the vehicle during the upgrade of components. In safety mode, only necessary power-on and power-off operations and safety functions are allowed, such as unlocking and locking the vehicle, turning on / off the double flash, and opening / closing the doors, while functions directly related to driving are completely shielded, including but not limited to the shut-off operation of insulated gate bipolar transistors, the execution of shift commands, and the control of torque and speed. The battery pack can be understood as the power source of the vehicle, which is composed of multiple battery cells and is used to provide the electrical energy required by the vehicle. The all-in-one domain controller can be understood as a highly integrated electronic control unit that integrates multiple functional modules into one controller.

[0036] Specifically, a request to enter the safety mode is sent to the power domain controller, body domain controller, etc., the vehicle is controlled to enter the safety mode, and confirmation information that the safety mode has been entered is received; after receiving the confirmation information, a high-voltage lowering instruction is sent to the power domain controller. After receiving the high-voltage lowering instruction, the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage, and returns the high-voltage status information of the battery pack and the all-in-one domain controller.

[0037] It is worth noting that the various requests or instructions sent by the over-the-air download upgrade system involved in the embodiments of the present invention are performed through routine control service instructions (service code is 0x31) in the unified diagnostic service USD.

[0038] S130. Determine the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes an address of a preset component and a type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class.

[0039] In this embodiment, the preset upgrade environment classification table can be understood as a predefined table for determining the type of components to be upgraded. The preset upgrade environment classification table includes the address of the preset components and the type of the preset components. Among them, the preset components are the definitions of the components in the preset upgrade environment classification table. The address of the preset components can be understood as the unique identification of the components in the vehicle. Exemplarily, the preset components are power domain control, and its address is 0x0101. The types of preset components include high-voltage upgrade environment classes, wherein the high-voltage upgrade environment class indicates that components of this type need to be upgraded under high voltage.

[0040] Specifically, after receiving the high-voltage status information of the battery pack and the all-in-one domain controller, the address of each component to be upgraded is determined; for each component to be upgraded, the corresponding type is searched from the preset upgrade environment classification table according to the address of the current component to be upgraded. For example, the address of the current component to be upgraded is 0x0101, and in the preset upgrade environment classification table, the type corresponding to the address is "high-voltage upgrade environment class", so the type of the current component to be upgraded is determined to be "high-voltage upgrade environment class".

[0041] S140: If the type of the at least one component to be upgraded is the high-voltage upgrade environment type, after the battery pack and the all-in-one controller are controlled to be high voltage by the power domain controller, the at least one component to be upgraded is upgraded.

[0042] Specifically, since the components of the high-voltage upgrade environment need to be upgraded under high voltage, if at least one of the components to be upgraded is of the high-voltage upgrade environment type, it is necessary to control the high voltage of the battery pack and the all-in-one controller through the power domain controller, and then use the upgrade package of each component to be upgraded to upgrade each component to be upgraded. Among them, the upgrade package is stored in the over-the-air download upgrade system. In this way, the upgrade operation of the components that are only enabled under high voltage is realized.

[0043] A vehicle over-the-air upgrade method provided in a first embodiment of the present invention is applied to an over-the-air upgrade system of a vehicle, the method comprising: responding to an upgrade operation of at least one component to be upgraded triggered by a user on a vehicle-mounted display; controlling the vehicle to enter a safe mode, and controlling the battery pack and the all-in-one domain controller to lower the high voltage by the power domain controller; determining the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes the address of the preset component and the type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class; if the type of the at least one component to be upgraded is all of the high-voltage upgrade environment class, after the battery pack and the all-in-one controller are controlled to raise the high voltage by the power domain controller, the at least one component to be upgraded is upgraded. Through the above technical scheme, before upgrading the components to be upgraded, the vehicle is controlled to enter the safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage, which effectively ensures that the vehicle is in a safe state during the component upgrading process. Furthermore, when it is determined according to the preset upgrade environment classification table that the types of components to be upgraded are all high-voltage upgrade environment types, after the power domain controller controls the battery pack and the all-in-one controller to increase the high voltage, at least one component to be upgraded is upgraded, thereby realizing the upgrade of components that can only be enabled under high-voltage conditions, and solving the problem that the existing vehicle over-the-air upgrade method cannot perform over-the-air download upgrades on controllers that are only enabled under high-voltage conditions while ensuring vehicle safety.

[0044] In some embodiments, the type of preset components also includes a low-voltage upgrade environment class; after determining the type of the at least one component to be upgraded based on the preset upgrade environment classification table, it also includes: if the type of the at least one component to be upgraded includes the high-voltage upgrade environment class and the low-voltage upgrade environment class, after controlling the high voltage of the battery pack and the all-in-one controller through the power domain controller, the components to be upgraded in the high-voltage upgrade environment class are upgraded; after the upgrade of the components to be upgraded in the high-voltage upgrade environment class is completed, the power domain controller controls the high voltage of the battery pack and the all-in-one controller, and upgrades the components to be upgraded in the low-voltage upgrade environment class.

[0045] In this embodiment, the low-pressure upgrade environment class indicates that components of this type need to be upgraded in a low-pressure state.

[0046] The basis for designing the preset upgrade environment classification table is: according to whether the components are directly related to the high-voltage operation and driving of the whole vehicle, the vehicle controller is divided into a low-voltage upgrade environment category (i.e. related to high voltage and driving) and a high-voltage upgrade environment category (i.e. not related to high voltage and driving).

[0047] For example, since the power domain controller and its downstream components (such as the motor controller, battery controller, and all-in-one controller) directly control the high-voltage operation and driving of the vehicle, in order to ensure safety, the power domain controller can only be upgraded under low-voltage conditions; while other domain controllers (such as the body domain controller, cockpit domain controller, and intelligent driving domain controller) and their downstream nodes have a low correlation with high voltage and a large number, they can be upgraded after the vehicle is installed with high voltage to ensure that the low-voltage battery has sufficient power during the upgrade process. Assuming that the address of the power domain controller is 0x1000, the addresses of the body domain controller, cockpit domain controller, and intelligent driving domain controller are 0x0101, 0x0110, and 0x0111, respectively, the preset upgrade environment classification table can be expressed as follows:

[0048] Default upgrade environment classification table

[0049] Address of the preset component Type of the preset component 0x0101 High-voltage upgrade environment category 0x0110 High-voltage upgrade environment category 0x0111 High-voltage upgrade environment category 0x1000 Low-voltage upgrade environment category

[0050] Specifically, if the type of at least one component to be upgraded includes a high-voltage upgrade environment type and a low-voltage upgrade environment type, the power domain controller is first used to control the high voltage on the battery pack and the all-in-one controller, and then the upgrade package of the component to be upgraded in the high-voltage upgrade environment type is used to perform an upgrade operation on the corresponding component to be upgraded; after the upgrade operation of the component to be upgraded in the high-voltage upgrade environment type is completed, the power domain controller is used to control the high voltage on the battery pack and the all-in-one controller, and at this time, the low-voltage battery is used for power supply, and the upgrade package of the component to be upgraded in the low-voltage upgrade environment type is used to perform an upgrade operation on the corresponding component to be upgraded.

[0051] First, upgrade the parts to be upgraded in the high-voltage upgrade environment, and then upgrade the parts to be upgraded in the low-voltage upgrade environment. The purpose is to replenish the low-voltage battery power to a certain extent during the upgrade of the parts to be upgraded in the high-voltage upgrade environment, so that it has more sufficient power during the upgrade of the parts to be upgraded in the low-voltage upgrade environment. It effectively realizes the safe and stable upgrade of the two types of parts while ensuring the safety of the vehicle.

[0052] In some embodiments, after determining the type of the at least one component to be upgraded based on a preset upgrade environment classification table, the method further includes: if the type of the at least one component to be upgraded is the low-voltage upgrade environment type, upgrading the at least one component to be upgraded. The above technical solution simplifies the upgrade process and improves the upgrade efficiency, ensuring that the components in the low-voltage environment can be upgraded safely and efficiently, thereby enhancing the overall performance and reliability of the vehicle.

[0053] Specifically, if at least one component to be upgraded is of the low-voltage upgrade environment type, since the battery pack and the all-in-one controller have been controlled to lower the high voltage through the power domain controller, at this time, the power supply is provided by a low-voltage battery. Therefore, the upgrade package of each component to be upgraded can be used directly to upgrade the corresponding component to be upgraded.

[0054] In some embodiments, before responding to an upgrade operation of at least one component to be upgraded triggered by a user on the vehicle-mounted display, it also includes: receiving upgrade information of each component to be upgraded sent by an over-the-air upgrade platform, wherein the upgrade information is sent by the over-the-air upgrade platform when the vehicle meets preset upgrade conditions, and the preset upgrade conditions include that the difference between the actual battery state of charge of the low-voltage battery in the vehicle and the battery state of charge of the low-voltage battery required for upgrading all components to be upgraded is greater than a safety threshold; when the vehicle is powered on but not driving, an upgrade interaction interface is presented on the vehicle-mounted display according to the upgrade information of the component to be upgraded, wherein the upgrade interaction interface includes at least the component to be upgraded and a download now button and / or an install now button corresponding to the component to be upgraded.

[0055] In this embodiment, the over-the-air upgrade platform can be understood as a system deployed in a remote server for pushing upgrade information to the over-the-air upgrade system of the vehicle. The remote server can also be a cloud. The safety threshold can be understood as a pre-set threshold. The preset upgrade condition is a pre-set condition for determining whether to send the upgrade information.

[0056] Specifically, when it is necessary to upgrade the components in the vehicle, the over-the-air upgrade platform will obtain vehicle data, including but not limited to the vehicle model and the actual battery state of charge (SOC) of the low-voltage battery in the vehicle, and then calculate the difference between the actual battery state of charge of the low-voltage battery and the battery state of charge of all the components to be upgraded. When the difference is greater than the safety threshold, it is determined that the preset upgrade conditions are met, and the upgrade information of each component to be upgraded is sent to the over-the-air upgrade system of the vehicle that meets the preset upgrade conditions. Threshold evaluation is performed in combination with the actual battery state of charge of the low-voltage battery, which effectively avoids the risk of upgrade out of control and ensures the stability of the upgrade process.

[0057] After receiving the upgrade information of each component to be upgraded sent by the over-the-air upgrade platform, when the vehicle is in a powered-on but non-driving state, that is, when the vehicle is in the ON gear, the upgrade information is pushed to the cockpit domain controller. After receiving the upgrade information, the cockpit domain controller presents an upgrade interaction interface on the in-vehicle display to prompt the user to make an upgrade selection. At this time, the upgrade interaction interface at least includes the components to be upgraded and the immediate download button and / or the immediate installation button corresponding to the components to be upgraded.

[0058] Exemplarily, after presenting the upgrade interaction interface on the in-vehicle display and being in the download status response stage, three buttons will be displayed on the upgrade interaction interface, namely "Immediate Download", "Do Not Download for Now", and "Exit". If the user clicks "Immediate Download", the vehicle will start downloading the upgrade package; if the user clicks "Do Not Download for Now", the vehicle will not download immediately and may be prompted again later; if the user clicks "Exit", this upgrade prompt ends. When the upgrade package is downloaded, at this time, being in the upgrade status response stage, four buttons will be displayed on the upgrade interaction interface, namely "Immediate Installation", "Scheduled Installation", "Do Not Install for Now", and "Exit". If the user clicks "Immediate Installation", the vehicle enters the upgrade state. If the user clicks "Scheduled Installation", a suitable time can be set, and the vehicle will automatically perform the installation at that time. If the user clicks "Do Not Install for Now", this installation prompt is closed, the vehicle remains unchanged, and may be reminded again later. If the user clicks "Exit", then this installation prompt ends. Throughout the process, as long as the user does not select "Immediate Download" or "Immediate Installation", the vehicle will maintain its current operating mode, and the original functions and performance will not be affected, and it will continue to operate in the state before the upgrade.

[0059] In some embodiments, the state of charge of the required low-voltage battery is determined based on the total time for one upgrade required for upgrading all components to be upgraded, the total upgrade interruption time, and the total current. Through the above technical solutions, the smooth progress of the upgrade process can be ensured, the reliability of the upgrade can be improved, and the use and management of the low-voltage battery can be optimized.

[0060] In this embodiment, the total time for one upgrade can be understood as the total time required to complete the upgrade of all components to be upgraded without any interruption, and this time includes all necessary steps and times such as the preparation stage, the actual upgrade operation stage, and the verification and testing stage. The total upgrade interruption time can be understood as the total time required for secondary remedial upgrades due to upgrade failures caused by various reasons during the upgrade process of each component. The total current can be understood as the total current required when all components to be upgraded work simultaneously during the upgrade process.

[0061] Specifically, add the total one-time upgrade time required for upgrading all parts to be upgraded and the total upgrade interruption time to obtain the total upgrade time. Multiply the total upgrade time by the total current to obtain the required power. Calculate the percentage of the required power in the rated capacity of the low-voltage battery to determine the battery state of the required low-voltage battery.

[0062] The current over-the-air (OTA) upgrade method is limited by the capacity of the low-voltage battery of the battery electric vehicle and the current state of charge (SOC) of the low-voltage battery. When the upgrade time of the controller that needs to be upgraded is long, or the upgrade is interrupted accidentally and needs to be upgraded again, etc., it will consume a large amount of power of the low-voltage battery, resulting in failures such as the parts to be upgraded cannot be upgraded normally and the whole vehicle cannot be started again. However, in this application, the upgrade information will only be sent when the current SOC of the low-voltage battery meets the preset upgrade conditions. At the same time, the preset upgrade conditions fully consider the time used for the upgrade, effectively avoiding the situations such as the parts to be upgraded cannot be upgraded normally and the whole vehicle cannot be started again due to consuming a large amount of power of the low-voltage battery.

[0063] In some embodiments, the safety mode includes that the motor controller does not receive the enable signal and the preset functions in the body controller are disabled.

[0064] In this embodiment, the preset functions are pre-set and are used to determine the functions that need to be disabled in the safety mode.

[0065] Specifically, the safety mode includes that the motor controller does not accept the enable signal. At this time, the motor is not driven to operate to ensure that the vehicle is upgraded in a non-driving state. At the same time, the preset functions of the body controller are disabled, including but not limited to the drive control system, the driving management system, the gear control system, the air pump DCAC control, the drive system thermal management, the cooling compressor, and the air-conditioning PTC relay control. Through the above technical solutions, the safety and stability of the vehicle during the upgrade process are ensured.

[0066] Optionally, after all parts to be upgraded are upgraded, control the vehicle to exit the safety mode, and the whole vehicle returns to the drivable state.

[0067] Embodiment 2

[0068] Figure 2 It is a schematic structural diagram of a vehicle over-the-air upgrade device provided by Embodiment 2 of the present invention. This device is applied to the vehicle over-the-air upgrade system, as Figure 2 shown. This device includes:

[0069] An operation response module 21, configured to respond to an upgrade operation of at least one part to be upgraded triggered by a user on an in-vehicle display;

[0070] The safety control module 22 is used to control the vehicle to enter the safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage;

[0071] A type determination module 23, configured to determine the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes an address of a preset component and a type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class;

[0072] The first component upgrade module 24 is used to upgrade the at least one component to be upgraded after controlling the battery pack and the all-in-one controller to be high voltage through the power domain controller if the type of the at least one component to be upgraded is the high voltage upgrade environment type.

[0073] The technical solution provided in the second embodiment of the present invention controls the vehicle to enter a safety mode before upgrading the components to be upgraded, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage, which effectively ensures that the vehicle is in a safe state during the component upgrading process. Furthermore, when it is determined according to the preset upgrade environment classification table that the types of components to be upgraded are all high-voltage upgrade environment types, after the power domain controller controls the battery pack and the all-in-one controller to increase the high voltage, at least one component to be upgraded is upgraded, thereby realizing the upgrade of components that can only be enabled under high-voltage conditions, and solving the problem that the existing vehicle over-the-air upgrade method cannot perform over-the-air download upgrades on controllers that are only enabled under high-voltage conditions while ensuring vehicle safety.

[0074] Optionally, the type of preset components also includes a low-voltage upgrade environment type;

[0075] Optionally, the vehicle air download upgrade device also includes:

[0076] The second component upgrade module is used for upgrading the components to be upgraded in the high-voltage upgrade environment class after the power domain controller controls the battery pack and the all-in-one controller to increase the high voltage if the type of the at least one component to be upgraded includes the high-voltage upgrade environment class and the low-voltage upgrade environment class. After the upgrade of the components to be upgraded in the high-voltage upgrade environment class is completed, the power domain controller controls the battery pack and the all-in-one controller to reduce the high voltage, and upgrades the components to be upgraded in the low-voltage upgrade environment class.

[0077] Optionally, the vehicle air download upgrade device also includes:

[0078] The third component upgrade module is used to upgrade the at least one component to be upgraded if the type of the at least one component to be upgraded is the low-voltage upgrade environment type.

[0079] Optionally, the vehicle over-the-air download and upgrade device further includes:

[0080] An information receiving module, configured to receive upgrade information of each component to be upgraded sent by the over-the-air download and upgrade platform, where the upgrade information is sent by the over-the-air download and upgrade platform when the vehicle meets a preset upgrade condition, and the preset upgrade condition includes that the difference between the actual state of charge of the medium and low voltage battery in the vehicle and the state of charge of the low voltage battery required for upgrading all components to be upgraded is greater than a safety threshold;

[0081] An interface presentation module, configured to present an upgrade interaction interface on the in-vehicle display according to the upgrade information of the component to be upgraded when the vehicle is in an energized but non-driving state, where the upgrade interaction interface at least includes the component to be upgraded and an immediate download button and / or an immediate installation button corresponding to the component to be upgraded.

[0082] Optionally, the state of charge of the required low voltage battery is determined based on the total time of one upgrade required for upgrading all components to be upgraded, the total interruption time of the upgrade, and the total current.

[0083] Optionally, the safety mode includes that the motor controller does not receive an enable signal and a preset function in the body controller is disabled.

[0084] The vehicle over-the-air download and upgrade device provided by the embodiments of the present invention can execute the vehicle over-the-air download and upgrade method provided by any embodiment of the present invention, and has corresponding functional modules and beneficial effects for executing the method.

[0085] Embodiment III

[0086] Figure 3 FIG. is a schematic structural diagram of an electronic device provided by Embodiment III of the present invention. The electronic device is intended to represent various forms of digital computers, such as, a laptop computer, a desktop computer, a workbench, a personal digital assistant, a server, a blade server, a mainframe computer, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as, a personal digital processor, a cellular phone, a smart phone, a wearable device (such as a helmet, glasses, a watch, etc.) and other similar computing devices. The components shown herein, their connections and relationships, and their functions are only examples and are not intended to limit the implementation of the present invention described herein and / or claimed.

[0087] Such as Figure 3As shown, the electronic device 10 includes at least one processor 11 and a memory communicatively connected to the at least one processor 11, such as a read-only memory (ROM) 12, a random access memory (RAM) 13, etc. The memory stores a computer program executable by the at least one processor. The processor 11 can perform various appropriate actions and processes according to the computer program stored in the read-only memory (ROM) 12 or the computer program loaded from the storage unit 18 into the random access memory (RAM) 13. In the RAM 13, various programs and data required for the operation of the electronic device 10 can also be stored. The processor 11, the ROM 12, and the RAM 13 are connected to each other via a bus 14. An input / output (I / O) interface 15 is also connected to the bus 14.

[0088] Multiple components in the electronic device 10 are connected to the I / O interface 15, including: an input unit 16, such as a keyboard, a mouse, etc.; an output unit 17, such as various types of displays, speakers, etc.; a storage unit 18, such as a disk, an optical disc, etc.; and a communication unit 19, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 19 allows the electronic device 10 to exchange information / data with other devices via a computer network such as the Internet and / or various telecommunication networks.

[0089] The processor 11 can be various general-purpose and / or special-purpose processing components with processing and computing capabilities. Some examples of the processor 11 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various processors running machine learning model algorithms, a digital signal processor (DSP), and any appropriate processor, controller, microcontroller, etc. The processor 11 executes the various methods and processes described above, such as the vehicle over-the-air (OTA) update method.

[0090] In some embodiments, the vehicle OTA update method can be implemented as a computer program tangibly embodied in a computer-readable storage medium, such as the storage unit 18. In some embodiments, part or all of the computer program can be loaded and / or installed onto the electronic device 10 via the ROM 12 and / or the communication unit 19. When the computer program is loaded into the RAM 13 and executed by the processor 11, one or more steps of the vehicle OTA update method described above can be executed. Alternatively, in other embodiments, the processor 11 can be configured to execute the vehicle OTA update method by any other appropriate means (e.g., by means of firmware).

[0091] The various embodiments of the systems and techniques described above in this specification can be implemented in digital electronic circuitry, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems-on-chip (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various embodiments can include: being implemented in one or more computer programs that are executable and / or interpretable on a programmable system including at least one programmable processor, which can be a special-purpose or general-purpose programmable processor that receives data and instructions from, and transmits data and instructions to, a storage system, at least one input device, and at least one output device.

[0092] The computer programs for implementing the methods of the present invention can be written in any combination of one or more programming languages. These computer programs can be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, such that the computer programs, when executed by the processor, cause the functions / operations specified in the flowchart and / or block diagram to be implemented. The computer programs can be executed entirely on the machine, partly on the machine, as a stand-alone software package partly on the machine and partly on a remote machine or entirely on the remote machine or server.

[0093] In the context of the present invention, a computer-readable storage medium can be a tangible medium that can contain, or store a computer program for use by or in connection with an instruction execution system, apparatus, or device. The computer-readable storage medium can include, but is not limited to, electronic, magnetic, optical, electromagnetic, infrared, or semiconductor systems, apparatus, or devices, or any suitable combination of the foregoing. Alternatively, the computer-readable storage medium can be a machine-readable signal medium. More specific examples of the machine-readable storage medium would include an electrical connection based on one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0094] To provide interaction with a user, the systems and techniques described herein can be implemented on an electronic device having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and a pointing device (e.g., a mouse or a trackball) through which the user can provide input to the electronic device. Other kinds of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0095] The systems and techniques described herein can be implemented in a computing system including backend components (e.g., as a data server), or a computing system including middleware components (e.g., an application server), or a computing system including frontend components (e.g., a user computer having a graphical user interface or a web browser through which the user can interact with an implementation of the systems and techniques described herein), or a computing system including any combination of such backend components, middleware components, or frontend components. The components of the system can be interconnected to each other by digital data communication in any form or medium (e.g., a communication network). Examples of communication networks include: local area network (LAN), wide area network (WAN), blockchain network, and the Internet.

[0096] The computing system can include a client and a server. The client and the server are generally far from each other and usually interact through a communication network. The client-server relationship is created by computer programs running on the respective computers and having a client-server relationship with each other. The server can be a cloud server, also known as a cloud computing server or a cloud host, which is a host product in the cloud computing service system and solves the defects of difficult management and weak business scalability existing in traditional physical hosts and VPS services.

[0097] It should be understood that the various forms of processes shown above can be used, with steps reordered, added, or deleted. For example, the steps recited in the present invention can be executed in parallel, sequentially, or in a different order, as long as the desired results of the technical solution of the present invention can be achieved, and no limitation is imposed herein.

[0098] The above specific embodiments do not constitute a limitation on the protection scope of the present invention. Those skilled in the art should understand that various modifications, combinations, sub-combinations, and substitutions can be made according to design requirements and other factors. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention shall be included within the protection scope of the present invention.

[0099] An embodiment of the present invention further provides a computer program product, including a computer program and / or instructions, and the computer program, when executed by a processor, implements the vehicle over-the-air download and upgrade method provided in any embodiment of the present application.

[0100] In the process of implementing the computer program product, computer program code for performing the operations of the present invention can be written in one or more programming languages or combinations thereof. The programming languages include object-oriented programming languages such as Java, Smalltalk, C++, and also include conventional procedural programming languages such as the "C" language or similar programming languages. The program code can be executed entirely on the user's computer, partially on the user's computer, executed as an independent software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer can be connected to the user's computer through any type of network - including a local area network (LAN) or a wide area network (WAN) - or can be connected to an external computer (for example, by using an Internet service provider to connect through the Internet).

[0101] Note that the above is only a preferred embodiment of the present invention and the applied technical principles. Those skilled in the art will understand that the present invention is not limited to the specific embodiments here, and various obvious changes, re-adjustments, and substitutions can be made by those skilled in the art without departing from the protection scope of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments. Without departing from the concept of the present invention, more other equivalent embodiments can be included, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A vehicle over-the-air download upgrade method, characterized in that: In an over-the-air download upgrade system for a vehicle, the method comprises: In response to an upgrade operation of at least one component to be upgraded triggered by a user on the vehicle display; Control the vehicle to enter safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage; Determine the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes an address of a preset component and a type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class; If the type of the at least one component to be upgraded is the high-voltage upgrade environment type, after the battery pack and the all-in-one controller are controlled to be high voltage by the power domain controller, the at least one component to be upgraded is upgraded.

2. The method according to claim 1, characterized in that The types of preset components also include low-voltage upgrade environment types; After determining the type of the at least one component to be upgraded based on the preset upgrade environment classification table, the method further includes: If the type of the at least one component to be upgraded includes the high-voltage upgrade environment class and the low-voltage upgrade environment class, after the power domain controller controls the battery pack and the all-in-one controller to increase the high voltage, the components to be upgraded in the high-voltage upgrade environment class are upgraded. After the upgrade of the components to be upgraded in the high-voltage upgrade environment class is completed, the power domain controller controls the battery pack and the all-in-one controller to decrease the high voltage, and the components to be upgraded in the low-voltage upgrade environment class are upgraded.

3. The method according to claim 2, characterized in that After determining the type of the at least one component to be upgraded based on the preset upgrade environment classification table, the method further includes: If the type of the at least one component to be upgraded is the low-voltage upgrade environment type, the at least one component to be upgraded is upgraded.

4. The method according to claim 3, characterized in that Before responding to the upgrade operation of at least one component to be upgraded triggered by the user on the vehicle display, the method further includes: Receiving upgrade information of each component to be upgraded sent by an over-the-air upgrade platform, wherein the upgrade information is sent by the over-the-air upgrade platform when the vehicle meets a preset upgrade condition, and the preset upgrade condition includes that the difference between an actual battery state of charge of a low-voltage battery in the vehicle and a battery state of charge of the low-voltage battery required for upgrading all components to be upgraded is greater than a safety threshold; When the vehicle is powered on but not driving, an upgrade interaction interface is presented on the vehicle display according to the upgrade information of the component to be upgraded, wherein the upgrade interaction interface includes at least the component to be upgraded and a download now button and / or an install now button corresponding to the component to be upgraded.

5. The method according to claim 4, characterized in that The required battery state of charge of the low-voltage battery is determined based on the total upgrade time required for all components to be upgraded, the total upgrade interruption time, and the total current.

6. The method according to claim 1, characterized in that The safe mode includes the motor controller not receiving an enable signal and preset functions in the body controller being disabled.

7. A vehicle over-the-air download upgrade device, characterized in that: In an over-the-air download upgrade system for a vehicle, the device comprises: An operation response module, used to respond to an upgrade operation of at least one component to be upgraded triggered by a user on the vehicle display; Safety control module, used to control the vehicle to enter safety mode, and the power domain controller controls the battery pack and the all-in-one domain controller to lower the high voltage; A type determination module, configured to determine the type of the at least one component to be upgraded based on a preset upgrade environment classification table, wherein the preset upgrade environment classification table includes an address of a preset component and a type of the preset component, wherein the type of the preset component includes a high-voltage upgrade environment class; The first component upgrade module is used to upgrade the at least one component to be upgraded after controlling the battery pack and the all-in-one controller to be high voltage through the power domain controller if the type of the at least one component to be upgraded is the high voltage upgrade environment type.

8. An electronic device, characterized in that: The electronic device comprises: at least one processor; and a memory communicatively connected to the at least one processor; wherein, The memory stores a computer program executable by the at least one processor, and the computer program is executed by the at least one processor so that the at least one processor can perform the vehicle over-the-air download upgrade method as described in any one of claims 1-6.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the vehicle over-the-air download upgrade method as described in any one of claims 1-6 is implemented.

10. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the vehicle over-the-air download upgrade method according to any one of claims 1 to 6 is implemented.