Vehicle battery thermal runaway detection method and system during OTA upgrading

Abstract

The invention discloses a vehicle battery thermal runaway detection method and system during OTA upgrade, and the method comprises the steps: controlling all ECUs to shield fault codes and prohibit CAN communication when a target vehicle is subjected to OTA upgrade, and starting to download a software flashing data package from a server; at the moment, the server requests a battery management system of the target vehicle to carry out real-time power battery thermal runaway detection; the server reads a thermal runaway detection result detected by the battery management system, and quits the OTA upgrading mode with the target vehicle when determining that the target vehicle triggers a thermal runaway fault according to the thermal runaway detection result; and the target vehicle recovers CAN bus communication of the whole vehicle, and thermal runaway fault alarm information is output according to a thermal runaway trigger signal reported by the vehicle BMS through CAN bus communication. According to the method, in the OTA software flashing process, thermal runaway detection can be completed and the problem can be reported even if an OTA forbidding condition is encountered, so that the risk of the whole vehicle is effectively reduced.

Description

Technical Field

[0001] This application relates to the technical field of vehicle control, and particularly to a method and system for detecting thermal runaway of a vehicle battery during OTA upgrade. Background Art

[0002] OTA technology can remotely upgrade the software of mobile terminal devices such as vehicles through the mobile communication air interface, enabling the vehicle to receive the latest software without going to a 4S store, expanding functions, improving performance and user experience. However, there are a large number and variety of in-vehicle controllers, significant differences in software and hardware, a complex network and limited communication rate. When flashing a certain ECU during OTA, bandwidth needs to be vacated to ensure stable data transmission, and at this time, CAN network communication is prohibited. However, during the OTA software upgrade period, the thermal runaway failure of the battery cannot be detected in time, and in severe cases, the thermal diffusion of the power battery will cause a fire, posing a serious threat to people's property and life safety. Summary of the Invention

[0003] In view of the above problems, this application provides a method and system for detecting thermal runaway of a vehicle battery during OTA upgrade, which can solve the problem that the thermal runaway failure of the battery cannot be detected and alarmed in time during the OTA software upgrade period.

[0004] In a first aspect, this application provides a method for detecting thermal runaway of a vehicle battery during OTA upgrade, including:

[0005] When the target vehicle is performing OTA upgrade, control all ECUs to mask fault codes and prohibit all ECUs from CAN communication, and start downloading the software flashing data packet from the server;

[0006] During the process of the target vehicle downloading the software flashing data packet, the server requests the battery management system of the target vehicle to perform real-time thermal runaway detection of the power battery;

[0007] The server reads the thermal runaway detection result detected by the battery management system, and when it is determined according to the thermal runaway detection result that the target vehicle has triggered a thermal runaway failure, exits the OTA upgrade mode with the target vehicle;

[0008] The target vehicle resumes the vehicle CAN bus communication and outputs a thermal runaway failure alarm message according to the thermal runaway trigger signal reported by the vehicle BMS through the CAN bus communication.

[0009] In the above technical solution, this method can effectively monitor the thermal runaway of the vehicle battery during the OTA upgrade process of the vehicle, and when a thermal runaway failure is detected, it can promptly exit the OTA upgrade mode, resume vehicle communication and output a thermal runaway failure alarm message, thereby ensuring the safety of the vehicle and personnel.

[0010] In some embodiments, when the target vehicle performs OTA upgrade, all ECUs are controlled to shield fault codes and all ECUs are prohibited from CAN communication, including:

[0011] The target vehicle obtains vehicle status data; wherein, the vehicle status data at least includes vehicle gear position, vehicle speed, high-voltage on state, door state, and low-voltage battery voltage;

[0012] When the target vehicle detects that the OTA upgrade condition is met according to the vehicle status data, it reads the ECU part number and software version number to be flashed, as well as the part number to be upgraded and the software number to be upgraded in the software flash packet;

[0013] When the ECU part number and the software version number match the part number to be upgraded and the software number to be upgraded correspondingly, the target vehicle enables Diagnostic Trouble Code (DTC) service 85 to shield fault codes for all vehicle ECUs;

[0014] The target vehicle enables Diagnostic Trouble Code (DTC) service 28 to prohibit CAN communication for all vehicle ECUs.

[0015] In the above technical solution, this method can comprehensively evaluate the vehicle status before the vehicle performs OTA upgrade, ensure that the upgrade condition is met, and start the diagnostic service by precisely matching the ECU part number and software version number, effectively shielding fault codes and prohibiting CAN communication, thereby creating conditions for a safe and reliable OTA upgrade process.

[0016] In some embodiments, the method further includes:

[0017] When the server determines that the target vehicle has not triggered a thermal runaway fault according to the thermal runaway detection result, the server determines whether the target vehicle has completed downloading the software flash packet;

[0018] When it is determined that the target vehicle has not completed downloading the software flash packet, the server executes the step of reading the thermal runaway detection result detected by the battery management system.

[0019] In the above technical solution, this method can continuously monitor the battery thermal runaway state when it is determined that the target vehicle has not triggered a thermal runaway fault and has not completed downloading the software flash packet, and ensure real-time monitoring of potential safety risks during the download process by cyclically reading the thermal runaway detection result of the battery management system, thus ensuring the safety of the OTA upgrade process.

[0020] In some embodiments, the method further includes:

[0021] When it is determined that the target vehicle has completed downloading the software flashing data packet, the server stops reading the thermal runaway detection result;

[0022] The target vehicle obtains the downloaded software update package, and when the software update package passes the consistency check, performs corresponding update and installation operations according to the software update package.

[0023] In the above technical solution, the method can stop reading the thermal runaway detection result in a timely manner after the target vehicle completes the download of the software flashing data packet to save resources, and at the same time ensure that the downloaded software update package passes the consistency check before performing the update and installation operation, thereby ensuring the safety, reliability and effectiveness of the OTA upgrade process.

[0024] In some embodiments, the server reads the thermal runaway detection result detected by the battery management system, including:

[0025] The server reads the thermal runaway detection result detected by the battery management system through the diagnostic service 22 according to the first preset time period;

[0026] When the thermal runaway detection result is that thermal runaway is triggered, the server continues to read the thermal runaway detection result through the diagnostic service 22 according to the second preset time period;

[0027] When the thermal runaway detection results read continuously for a preset number of times are all that thermal runaway is triggered, the server determines that the target vehicle has triggered a thermal runaway fault and executes the operation of exiting the OTA upgrade mode for the target vehicle.

[0028] In the above technical solution, the method can read the thermal runaway detection result of the battery management system in stages and according to different time periods, and after continuously confirming the thermal runaway fault for multiple times, exit the OTA upgrade mode with the target vehicle in a timely manner, so as to achieve precise monitoring and rapid response to the vehicle battery thermal runaway fault and ensure the safety of the vehicle and personnel.

[0029] In some embodiments, the target vehicle outputs a thermal runaway fault alarm message according to the thermal runaway trigger signal reported by the vehicle BMS, including:

[0030] The target vehicle receives the thermal runaway trigger signal reported by the vehicle BMS;

[0031] The target vehicle outputs a thermal runaway fault alarm message through the vehicle combination instrument and sends a quality safety confirmation prompt message through the vehicle Tbox.

[0032] In the above technical solution, the method can, after receiving the thermal runaway trigger signal reported by the vehicle BMS, quickly and visually output the thermal runaway fault alarm information through the vehicle combination instrument, and at the same time use the vehicle Tbox to send the quality safety confirmation prompt information in a timely manner, so as to achieve a rapid response to the thermal runaway fault and multi-channel warning, effectively ensuring the safety of the vehicle and personnel.

[0033] In a second aspect, the present application provides a vehicle battery thermal runaway detection system during OTA upgrade. The vehicle battery thermal runaway detection system during OTA upgrade includes a target vehicle and a server, wherein,

[0034] The target vehicle is used to, during OTA upgrade, control all ECUs to mask fault codes and all ECUs to prohibit CAN communication, and start downloading the software flashing data packet from the server;

[0035] The server is used to, during the process of the target vehicle downloading the software flashing data packet, request the battery management system of the target vehicle to perform real-time power battery thermal runaway detection;

[0036] The server is further used to read the thermal runaway detection result detected by the battery management system, and when it is determined according to the thermal runaway detection result that the target vehicle has triggered a thermal runaway fault, exit the OTA upgrade mode with the target vehicle;

[0037] The target vehicle is further used to restore the vehicle CAN bus communication and output the thermal runaway fault alarm information according to the thermal runaway trigger signal reported by the vehicle BMS through the CAN bus communication.

[0038] In the above technical solution, the system can effectively monitor the thermal runaway situation of the vehicle battery during the OTA upgrade of the vehicle, and when a thermal runaway fault is detected, promptly exit the OTA upgrade mode, restore the vehicle communication and output the thermal runaway fault alarm information, thereby ensuring the safety of the vehicle and personnel.

[0039] In some embodiments, the target vehicle is specifically used to obtain vehicle status data; and when it is detected according to the vehicle status data that the OTA upgrade condition is met, read the ECU component number and software version number to be flashed and the component number to be upgraded and the software number to be upgraded in the software flashing data packet; when the ECU component number and the software version number match the component number to be upgraded and the software number to be upgraded correspondingly, enable the diagnostic 85 service to mask fault codes for all vehicle ECUs; and enable the diagnostic 28 service to prohibit CAN communication for all vehicle ECUs;

[0040] Wherein, the vehicle status data at least includes vehicle gear position, vehicle speed, high-voltage on state, door state, and low-voltage battery voltage.

[0041] In the above technical solution, the system can comprehensively evaluate the vehicle status before the vehicle undergoes OTA upgrade, ensure that the upgrade conditions are met, and start the diagnostic service by precisely matching the ECU part number and software version number, effectively shielding fault codes and prohibiting CAN communication, thereby creating conditions for a safe and reliable OTA upgrade process.

[0042] In some embodiments, the server is further configured to, when it is determined according to the thermal runaway detection result that the target vehicle has not triggered a thermal runaway fault, the server determines whether the target vehicle has completed downloading the software flashing data packet; when it is determined that the target vehicle has not completed downloading the software flashing data packet, the server performs the step of reading the thermal runaway detection result detected by the battery management system.

[0043] In the above technical solution, when it is determined that the target vehicle has not triggered a thermal runaway fault and has not completed downloading the software flashing data packet, the system can continuously monitor the battery thermal runaway state, and by cyclically reading the thermal runaway detection result of the battery management system, ensure real-time monitoring of potential safety risks during the download process, and guarantee the security of the OTA upgrade process.

[0044] In some embodiments, the server is further configured to stop reading the thermal runaway detection result when it is determined that the target vehicle has completed downloading the software flashing data packet;

[0045] The target vehicle is further configured to obtain the downloaded software update package, and when the software update package passes the consistency check, perform corresponding update and installation operations according to the software update package.

[0046] In the above technical solution, after the target vehicle completes downloading the software flashing data packet, the system can promptly stop reading the thermal runaway detection result to save resources, and at the same time ensure that the downloaded software update package passes the consistency check before performing the update and installation operation, thereby guaranteeing the security, reliability, and effectiveness of the OTA upgrade process.

[0047] In a third aspect, the present application provides an electronic device, which includes a memory and a processor. The memory is used to store a computer program, and the processor runs the computer program to enable the electronic device to execute any part of the method for detecting thermal runaway of a vehicle battery during OTA upgrade described in any item of the first aspect.

[0048] In a fourth aspect, the present application provides a readable storage medium, in which a computer program is stored. When the computer program is run by a processor, it executes any part of the method for detecting thermal runaway of a vehicle battery during OTA upgrade described in any item of the first aspect.

[0049] In a fifth aspect, the present application provides a computer program product, which includes a computer program. When the computer program is run by a processor, it executes any part of the method for detecting thermal runaway of a vehicle battery during OTA upgrade described in any item of the first aspect.

[0050] The beneficial effects of the present application are as follows: During the OTA software flashing process, it can effectively report thermal runaway faults, which are more effectively and easily implemented. Furthermore, thermal runaway detection and problem reporting can be completed even in the case of OTA muting, greatly reducing the risk of the entire vehicle. BRIEF DESCRIPTION OF THE DRAWINGS

[0051] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following will briefly introduce the drawings required to be used in the embodiments of the present application. It should be understood that the following drawings only show some embodiments of the present application, and therefore should not be regarded as limiting the scope. For those of ordinary skill in the art, without creative efforts, other related drawings can also be obtained based on these drawings.

[0052] Figure 1 It is a schematic flowchart of the method for detecting thermal runaway of a vehicle battery during OTA upgrade in some embodiments of the present application;

[0053] Figure 2 It is a schematic flowchart of the method for detecting thermal runaway of a vehicle battery during OTA upgrade in some embodiments of the present application;

[0054] Figure 3 It is a schematic diagram of the system architecture applied to the method for detecting thermal runaway of a vehicle battery during OTA upgrade in some embodiments of the present application;

[0055] Figure 4 It is a schematic diagram of the structure of the system for detecting thermal runaway of a vehicle battery during OTA upgrade in some embodiments of the present application;

[0056] Figure 5 It is a schematic diagram of the structure of an electronic device in some embodiments of the present application. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0057] The following will describe in detail the embodiments of the technical solutions of the present application with reference to the drawings. The following embodiments are only used to more clearly illustrate the technical solutions of the present application, so they are only examples and cannot be used to limit the protection scope of the present application.

[0058] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the technical field to which this application belongs; the terms used herein are for the purpose of describing specific embodiments only and are not intended to limit this application; the terms "including" and "having" and any variations thereof in the specification and claims of this application and the above drawings are intended to cover non-exclusive inclusion.

[0059] In the description of the embodiments of this application, technical terms such as "first" and "second" are only used to distinguish different objects and cannot be understood as indicating or implying relative importance or implicitly indicating the quantity, specific order or primary-secondary relationship of the indicated technical features. In the description of the embodiments of this application, the meaning of "a plurality" is two or more (including two). Similarly, "a plurality of groups" means two or more groups (including two groups), and "a plurality of pieces" means two or more pieces (including two pieces) unless otherwise specifically defined.

[0060] Referring to "embodiment" herein means that a specific feature, structure or characteristic described in connection with the embodiment may be included in at least one embodiment of this application. The phrase appearing in various positions in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art will explicitly and implicitly understand that the embodiments described herein may be combined with other embodiments.

[0061] In the description of the embodiments of this application, the term "and / or" is merely a description of the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B may represent: A exists alone, A and B exist simultaneously, and B exists alone. In addition, the character " / " herein generally represents an "or" relationship between the associated objects before and after.

[0062] Currently, thermal runaway of power batteries is a very dangerous fault failure. Once it occurs, the user needs to be reminded immediately to ensure personal safety. Therefore, it is necessary to report the fault successfully at any time and in any scenario. However, in OTA, software flashing will mute the CAN communication, so the thermal runaway fault of power batteries cannot be reported.

[0063] Specifically, due to the large number and variety of in-vehicle controllers, significant differences in software and hardware, complex network composition, and limited communication rate, when a certain ECU in the network is in the state of being flashed and programmed, in order to ensure stable data transmission and no errors in OTA, bandwidth needs to be vacated. Based on this, the existing method is to control other ECUs on the network to stop sending application CAN communication messages through service 28 in the UDS diagnostic protocol; and disable the fault recording function of all ECUs on the network through service 85 in the UDS diagnostic protocol.

[0064] However, under this precondition, although the communication bandwidth is given up, once a thermal runaway fault occurs in the power battery, even if the power battery detects the thermal runaway fault, it cannot report the fault to the relevant ECU through the CAN bus with communication prohibited (such as the combination instrument turning on the light and displaying warning words, and the Tbox automatically reporting to the background to contact the vehicle owner to confirm safety). That is to say, during OTA, if a thermal runaway fault happens to occur in the power battery by chance, the fault cannot be sent out, which results in insufficient response time for relevant personnel and manufacturers. In severe cases, the power battery will experience thermal diffusion and cause a fire, endangering people's property and life and health.

[0065] To solve the above technical problems, the embodiment of the present application provides a method for detecting thermal runaway of a vehicle battery during OTA upgrade. This method can, during the software flashing interval, read the thermal runaway DID status through Diagnostic Service 22 (avoiding relying on the reception of CAN communication signals) to determine whether thermal runaway is triggered. If triggered, OTA is terminated, and the thermal runaway fault is immediately uploaded to trigger the alarm strategy.

[0066] It can be seen that this method can be implemented effectively, truly, and easily, thus solving the problem of detecting and reporting thermal runaway under OTA muting and greatly reducing the risk of the whole vehicle.

[0067] As Figure 1 shown, some embodiments of the present application provide a method for detecting thermal runaway of a vehicle battery during OTA upgrade. The method for detecting thermal runaway of a vehicle battery during OTA upgrade includes:

[0068] S101. When the target vehicle is performing OTA upgrade, control all ECUs to mask fault codes and prohibit CAN communication for all ECUs, and start downloading the software flashing data packet from the server;

[0069] S102. During the process of the target vehicle downloading the software flashing data packet, the server requests the battery management system of the target vehicle to perform real-time thermal runaway detection of the power battery;

[0070] S103. The server reads the thermal runaway detection result detected by the battery management system, and when it is determined according to the thermal runaway detection result that the target vehicle has triggered a thermal runaway fault, exit the OTA upgrade mode with the target vehicle;

[0071] S104. The target vehicle resumes the vehicle CAN bus communication and outputs a thermal runaway fault alarm message according to the thermal runaway trigger signal reported by the vehicle BMS through the CAN bus communication.

[0072] In some embodiments, OTA (Over The Air) is a technology that enables remote software upgrades for mobile terminal devices through the air interface of mobile communication. This technology allows vehicles to receive the latest software status via a wireless network without having to visit a 4S store, enabling continuous function expansion, improved vehicle performance, and enhanced user experience.

[0073] In some embodiments, a software flashing data packet refers to an update packet in a specific format that an automobile manufacturer packages with new software.

[0074] In some embodiments, when the vehicle is in a suitable network environment (such as an area covered by 5G signals), the vehicle's communication module (Tbox) establishes a secure communication connection with the manufacturer's server (cloud platform), receives the software update packet, and the vehicle verifies and caches the received data.

[0075] In some embodiments, after the software installation is complete, the system provides feedback to the user to ensure that the user is aware of the upgrade progress.

[0076] Exemplarily, assuming that the software update object is the drive motor controller, the Tbox on the vehicle receives the software update packet data from the cloud server, stores it in the vehicle gateway, and the vehicle gateway transfers the software package to the drive motor controller through a diagnostic flashing instruction. Finally, the drive motor controller checks whether the new software package is correct, thus completing the entire OTA software flashing process.

[0077] In some embodiments, this method can effectively monitor the thermal runaway situation of the vehicle battery during the OTA upgrade process of the vehicle, and when a thermal runaway fault is detected, it promptly exits the OTA upgrade mode, restores vehicle communication, and outputs a thermal runaway fault alarm message, thereby ensuring the safety of the vehicle and personnel.

[0078] In some embodiments, to simultaneously meet the two requirements of muting CAN communication and other ECUs being able to receive the thermal runaway alarm status, this method is implemented using the UDS diagnostic service method. Since the diagnostic service uses the USD service with the same protocol as software flashing, it will not be muted. Therefore, after CAN communication is muted, the server can read the thermal runaway status through diagnostic service 22 (i.e., the method by which the server requests the battery management system of the target vehicle to perform real-time power battery thermal runaway detection).

[0079] In some embodiments, when the target vehicle is performing an OTA upgrade, it controls all ECUs to mask fault codes and all ECUs to prohibit CAN communication, including:

[0080] The target vehicle obtains vehicle status data; wherein, the vehicle status data at least includes vehicle gear position, vehicle speed, high-voltage on state, door state, and low-voltage battery voltage;

[0081] When the target vehicle detects that the OTA upgrade condition is met according to the vehicle status data, it reads the ECU part number and software version number to be flashed, as well as the part number to be upgraded and the software number to be upgraded in the software flash data packet;

[0082] When the ECU part number and software version number match the part number to be upgraded and the software number to be upgraded correspondingly, the target vehicle enables Diagnostic 85 service to mask fault codes for all vehicle ECUs;

[0083] The target vehicle enables Diagnostic 28 service to prohibit CAN communication for all vehicle ECUs.

[0084] In some embodiments, the ECUs in the vehicle generally perform software updates through a standardized upgrade process according to the unified diagnostic protocol specifications of USD (such as 85 service, 28 service, 22 service).

[0085] In some embodiments, the method may first request the ECU to enter the programming session mode through Service 10, perform secure access through Service 27, delete the original software through Service 31, then download software data through Services 34, 36, and 37, and finally verify the downloaded data.

[0086] Exemplarily, if in software update, diagnostic guidance messages and CAN communication instruction messages are sent on the bus together, it will surely increase the communication load rate on the bus, cause the generation of error frames on the bus, which will interfere with data transmission during software update, thus leading to the failure of the entire software update.

[0087] In some embodiments, before software flashing, the method needs to mute the CAN communication for all ECUs through Diagnostic 22 service. In this way, only diagnostic instructions are sent on the bus during software update, greatly reducing the communication load rate and effectively improving the software update success rate.

[0088] In some embodiments, after determining that the thermal runaway fault is triggered, the server immediately stops OTA and resumes CAN communication.

[0089] In these embodiments, the method can comprehensively evaluate the vehicle status before the vehicle performs OTA upgrade, ensure that the upgrade conditions are met, and start diagnostic services by precisely matching the ECU part number and software version number, effectively masking fault codes and prohibiting CAN communication, thus creating conditions for a safe and reliable OTA upgrade process.

[0090] In some embodiments, the method further includes:

[0091] When the server determines that the target vehicle has not triggered a thermal runaway fault based on the thermal runaway detection result, the server determines whether the target vehicle has completed downloading the software flashing data packet;

[0092] When it is determined that the target vehicle has not completed downloading the software flashing data packet, the server reads the thermal runaway detection result obtained by detecting the battery management system.

[0093] In these embodiments, the method can continuously monitor the battery thermal runaway state when it is determined that the target vehicle has not triggered a thermal runaway fault and has not completed downloading the software flashing data packet. By cyclically reading the thermal runaway detection result of the battery management system, it ensures real-time monitoring of potential safety risks during the download process and guarantees the security of the OTA upgrade process.

[0094] In some embodiments, the method further includes:

[0095] When it is determined that the target vehicle has completed downloading the software flashing data packet, the server stops reading the thermal runaway detection result;

[0096] The target vehicle obtains the downloaded software update package, and when the software update package passes the consistency check, it performs corresponding update and installation operations according to the software update package.

[0097] In some embodiments, the update package is downloaded and stored in the main control unit of the vehicle OTA software flashing machine (such as the vehicle gateway), and the flashing machine refreshes the software package for the target ECU. Among them, after the target ECU confirms that the update is correct, it activates the new software.

[0098] In these embodiments, the method can stop reading the thermal runaway detection result in a timely manner to save resources after the target vehicle completes downloading the software flashing data packet, and at the same time ensure that the downloaded software update package passes the consistency check before performing the update and installation operation, thereby guaranteeing the security, reliability and effectiveness of the OTA upgrade process.

[0099] In some embodiments, the server reads the thermal runaway detection result obtained by detecting the battery management system, including:

[0100] The server reads the thermal runaway detection result obtained by detecting the battery management system through the diagnostic service 22 according to the first preset time period;

[0101] When the thermal runaway detection result is that thermal runaway has been triggered, the server continues to read the thermal runaway detection result through the diagnostic service 22 according to the second preset time period;

[0102] When the thermal runaway detection results read continuously for a preset number of times are all that thermal runaway has been triggered, the server determines that the target vehicle has triggered a thermal runaway fault and executes exiting the OTA upgrade mode for the target vehicle.

[0103] In some embodiments, since data is transmitted through each frame of data and there is a time gap in each transmission. Therefore, while the entire software is refreshed after muting, this method utilizes this time gap to read the results of the BMS's detection of the thermal runaway fault status once every 10 s.

[0104] In some embodiments, if the judgment result is that thermal runaway is triggered, the reading method needs to be changed to quickly read three times at a period of 100 ms. If the results of all three readings are that thermal runaway is triggered, the server determines that the thermal runaway fault is triggered. Among them, the advantage of reading three times is to avoid false detection and affect the normal OTA process.

[0105] In these embodiments, this method can read the thermal runaway detection results of the battery management system in stages and according to different time periods, and after continuously confirming the triggering of the thermal runaway fault multiple times, promptly exit the OTA upgrade mode with the target vehicle, so as to achieve precise monitoring and rapid response to the thermal runaway fault of the vehicle battery and ensure the safety of the vehicle and personnel.

[0106] In some embodiments, the target vehicle outputs a thermal runaway fault alarm message according to the thermal runaway trigger signal reported by the vehicle BMS, including:

[0107] The target vehicle receives the thermal runaway trigger signal reported by the vehicle BMS;

[0108] The target vehicle outputs a thermal runaway fault alarm message through the vehicle combination instrument and sends a quality safety confirmation prompt message through the vehicle Tbox.

[0109] In some embodiments, the BMS can report the fault status to the required ECU through the CAN signal. For example, when the combination instrument receives the fault alarm, it makes an alarm text reminder and an alarm sound on the combination instrument; when the Tbox receives the fault alarm, it notifies the manufacturer's after-sales quality personnel through the background to immediately conduct a safety confirmation.

[0110] In these embodiments, this method can quickly and intuitively output a thermal runaway fault alarm message through the vehicle combination instrument after receiving the thermal runaway trigger signal reported by the vehicle BMS, and at the same time use the vehicle Tbox to promptly send a quality safety confirmation prompt message, so as to achieve a rapid response and multi-channel warning of the thermal runaway fault and effectively ensure the safety of the vehicle and personnel.

[0111] To make the purpose, technical solutions, and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below. In some embodiments, as Figure 2 shown, the method for detecting thermal runaway of a vehicle battery during OTA upgrade includes:

[0112] S00: Start.

[0113] S01: Detect whether the vehicle status meets the OTA condition. If so, execute step S02.

[0114] In some embodiments, the OTA condition may be conditions such as gear position, vehicle speed, high-voltage state, door state, low-voltage battery voltage, etc., which are used to ensure that the vehicle is in a safe state before OTA.

[0115] S02: The vehicle enters the OTA mode.

[0116] In some embodiments, if the method meets the conditions, the vehicle is ready to enter the OTA mode and prepare for software update.

[0117] S03: Read the part number and software version number of the ECU to be flashed.

[0118] In some embodiments, at this time, based on the ECU part number and software version number read and the part number and software number in the software package to be downloaded for comparison, it is ensured that the parts to be updated are correct and the software will not be updated incorrectly.

[0119] S04: Enter diagnostic service 85, and all ECUs mask fault codes.

[0120] In some embodiments, the OTA flasher requests to enter diagnostic service 85, all ECUs mask fault codes, and give a positive response after the ECU successfully enters.

[0121] S05: Enter diagnostic service 28, and all ECUs prohibit CAN communication.

[0122] In some embodiments, the OTA flasher requests to enter diagnostic service 28, all ECUs prohibit CAN communication, and give a positive response after the ECU successfully enters.

[0123] S06: Start downloading the software flash data packet.

[0124] In some embodiments, at this time, it is ready to enter the formal OTA stage and start software package data transfer.

[0125] S07: Determine whether the software package download is complete. If so, execute step S08; if not, execute step S10.

[0126] In some embodiments, the software package is transferred in blocks, each instruction transfers a part of the data, and finally combines into a complete software update package. Before the software package is completely transferred, step S07 will be looped. If the software package is completely received, it will jump to step S08.

[0127] S08: The downloaded software data packet is checked for consistency and is OK.

[0128] In some embodiments, at this time, a software data packet consistency check is performed to confirm the accuracy of the data.

[0129] S09: The software flashing is completed, and this process ends.

[0130] In some embodiments, this step is the completion of the installation of the new software update.

[0131] S10: Request the power battery to perform a thermal runaway detection.

[0132] In some embodiments, during the process of downloading and transmitting the software data packet, the server will simultaneously request the BMS to perform a thermal runaway detection on the power battery.

[0133] S11: Whether the power battery detects a thermal runaway fault. If so, execute step S12; if not, execute step S07.

[0134] In some embodiments, the server reads the result of the BMS's detection of the thermal runaway fault status every 10 s. Because the CAN communication is muted, it is necessary to read the result of the BMS's detection of the power battery thermal runaway through Diagnostic Service 22. If the judgment result is that the thermal runaway is not triggered, continue to jump to step S07 for cycling. If the judgment result is that the thermal runaway is triggered, the reading method needs to be changed, and it is read once every 100 ms. If the result of reading 3 times in a row is that the thermal runaway is triggered (the advantage of doing this is to avoid false detection and affect the OTA process), the server determines that there is a thermal runaway fault and jumps to step S12.

[0135] S12: The device urgently exits the OTA mode.

[0136] S13: The vehicle CAN bus communication and the fault code record are restored.

[0137] S14: The battery thermal runaway fault is successfully reported.

[0138] In some embodiments, after the CAN communication is restored, the BMS can normally send out a signal indicating the trigger of the thermal runaway and report it successfully.

[0139] S15: The combination instrument and the TBOX receive the fault alarm and reach a safe state.

[0140] In some embodiments, when the combination instrument receives the fault alarm, it makes an alarm text reminder and an alarm sound on the combination instrument; when the Tbox receives the fault alarm, it notifies the manufacturer's after-sales quality personnel through the background to immediately perform a safety confirmation.

[0141] In some embodiments, Figure 3 The system architecture diagram of the vehicle battery thermal runaway detection method applied during OTA upgrade is shown.

[0142] Figure 4 shows a schematic structural diagram of a vehicle battery thermal runaway detection system during OTA upgrade. It should be understood that this system corresponds to the method executed in Figure 1 and can execute the steps involved in the aforementioned method. For the specific functions and effects of this system, reference can be made to the description in the foregoing text. To avoid repetition, the detailed description is appropriately omitted here.

[0143] Among them, the vehicle battery thermal runaway detection system during OTA upgrade includes a target vehicle 300 and a server 400, where

[0144] The target vehicle 300 is used to control all ECUs to mask fault codes and prohibit all ECUs from communicating via CAN when performing OTA upgrade, and start downloading software flashing data packets from the server 400;

[0145] The server 400 is used to request the battery management system of the target vehicle 300 to perform real-time power battery thermal runaway detection during the process of the target vehicle 300 downloading software flashing data packets;

[0146] The server 400 is also used to read the thermal runaway detection result detected by the battery management system, and when it is determined according to the thermal runaway detection result that the target vehicle 300 has triggered a thermal runaway fault, exit the OTA upgrade mode with the target vehicle 300;

[0147] The target vehicle 300 is also used to restore the vehicle CAN bus communication and output a thermal runaway fault alarm message according to the thermal runaway trigger signal reported by the vehicle BMS via CAN bus communication.

[0148] In some embodiments, the target vehicle 300 is specifically used to obtain vehicle status data; and when it is detected according to the vehicle status data that the OTA upgrade condition is met, read the ECU part numbers and software version numbers to be flashed and the part numbers and software numbers to be upgraded in the software flashing data packets; when the ECU part numbers and software version numbers match the part numbers and software numbers to be upgraded, enable diagnostic service 85 to mask fault codes for all vehicle ECUs; and enable diagnostic service 28 to prohibit all vehicle ECUs from communicating via CAN;

[0149] Among them, the vehicle status data includes at least vehicle gear, vehicle speed, high-voltage state, door state, and low-voltage battery voltage.

[0150] In some embodiments, the server 400 is further configured to, when it is determined according to the thermal runaway detection result that the target vehicle 300 has not triggered a thermal runaway fault, determine whether the target vehicle 300 has completed downloading the software flashing data packet; when it is determined that the target vehicle 300 has not completed downloading the software flashing data packet, read the thermal runaway detection result detected by the battery management system.

[0151] In some embodiments, the server 400 is further configured to stop reading the thermal runaway detection result when it is determined that the target vehicle 300 has completed downloading the software flashing data packet;

[0152] The target vehicle 300 is further configured to obtain the downloaded software update package, and when the software update package passes the consistency check, perform corresponding update and installation operations according to the software update package.

[0153] In some embodiments, the server 400 is specifically configured to read the thermal runaway detection result detected by the battery management system through the diagnostic 22 service according to a first preset time period; when the thermal runaway detection result indicates that a thermal runaway has been triggered, continue to read the thermal runaway detection result through the diagnostic 22 service according to a second preset time period; when the thermal runaway detection results read continuously for a preset number of times all indicate that a thermal runaway has been triggered, determine that the target vehicle 300 has triggered a thermal runaway fault, and perform an operation to exit the OTA upgrade mode for the target vehicle 300.

[0154] In some embodiments, the target vehicle 300 is specifically configured to receive a thermal runaway trigger signal reported by the vehicle BMS; and output a thermal runaway fault alarm message through the vehicle combination meter and send a quality safety confirmation prompt message through the vehicle Tbox.

[0155] As Figure 5 shown, the present application provides an electronic device 500, which includes a processor 501 and a memory 502. The processor 501 and the memory 502 are interconnected and communicate with each other through a communication bus 503 and / or other forms of connection mechanisms (not marked). The memory 502 stores a computer program executable by the processor 501. When the computing device runs, the processor 501 executes the computer program to perform the methods in any of the foregoing optional implementation manners.

[0156] The present application provides a computer-readable storage medium, in which a computer program is stored. When the computer program is run by a processor, the methods in any of the foregoing optional implementation manners are executed.

[0157] Among them, the computer-readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0158] The present application provides a computer program product, which includes a computer program. When the computer program is run by a processor, it executes the method in any of the foregoing optional implementation manners.

[0159] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements on some or all of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application, and they should all be covered by the scope of the claims and the description of the present application. In particular, as long as there is no conflict, the technical features mentioned in each embodiment can be combined in any way. The present application is not limited to the specific embodiments disclosed in the text, but includes all technical solutions falling within the scope of the claims.

Claims

1. A method for detecting thermal runaway of a vehicle battery during OTA upgrade, characterized in that, Including: When the target vehicle performs OTA upgrade, control all ECUs to mask fault codes and prohibit all ECUs from CAN communication, and start downloading software flashing data packets from the server. During the process of the target vehicle downloading the software flashing data packet, the server requests the battery management system of the target vehicle to perform real-time power battery thermal runaway detection. The server reads the thermal runaway detection result detected by the battery management system, and when it is determined according to the thermal runaway detection result that the target vehicle has triggered a thermal runaway fault, exits the OTA upgrade mode with the target vehicle. The target vehicle resumes the vehicle CAN bus communication and outputs a thermal runaway fault alarm message according to the thermal runaway trigger signal reported by the vehicle BMS through the CAN bus communication.

2. The method for detecting thermal runaway of a vehicle battery during OTA upgrade according to claim 1, wherein When the target vehicle performs OTA upgrade, controlling all ECUs to mask fault codes and prohibit all ECUs from CAN communication includes: The target vehicle obtains vehicle status data; wherein, the vehicle status data at least includes vehicle gear, vehicle speed, high-voltage state, door state, and low-voltage battery voltage. When the target vehicle detects that the OTA upgrade condition is met according to the vehicle status data, reads the ECU part number and software version number to be flashed and the part number to be upgraded and the software number to be upgraded in the software flashing data packet. When the ECU part number and the software version number match the part number to be upgraded and the software number to be upgraded correspondingly, the target vehicle enables diagnostic service 85 to mask fault codes for all vehicle ECUs. The target vehicle enables diagnostic service 28 to prohibit CAN communication for all vehicle ECUs.

3. The method for detecting thermal runaway of a vehicle battery during OTA upgrade according to claim 1, wherein, The method further includes: When the server determines according to the thermal runaway detection result that the target vehicle has not triggered a thermal runaway fault, the server determines whether the target vehicle has completed downloading the software flashing data packet. When it is determined that the target vehicle has not completed downloading the software flashing data packet, the server executes the reading of the thermal runaway detection result detected by the battery management system.

4. The method for detecting thermal runaway of a vehicle battery during OTA upgrade according to claim 3, wherein, The method further includes: When it is determined that the target vehicle has completed downloading the software flashing data packet, the server stops reading the thermal runaway detection result. The target vehicle obtains the downloaded software update package, and when the software update package passes the consistency check, performs corresponding update installation operations according to the software update package.

5. The method for detecting thermal runaway of a vehicle battery during OTA upgrade according to claim 1, wherein, The server reads the thermal runaway detection result detected by the battery management system, including: The server reads the thermal runaway detection result detected by the battery management system through diagnostic service 22 according to the first preset time period. When the thermal runaway detection result is that thermal runaway has been triggered, the server continues to read the thermal runaway detection result through the diagnostic service 22 according to the second preset time period. When the thermal runaway detection results read continuously for a preset number of times are all that thermal runaway has been triggered, the server determines that the target vehicle has triggered a thermal runaway fault and executes the exiting of the OTA upgrade mode with the target vehicle.

6. The method for detecting thermal runaway of a vehicle battery during OTA upgrade according to claim 1, wherein, The target vehicle outputs a thermal runaway fault alarm message according to the thermal runaway trigger signal reported by the vehicle BMS, including: The target vehicle receives the thermal runaway trigger signal reported by the vehicle BMS; The target vehicle outputs a thermal runaway fault alarm message through the vehicle combination meter and sends a quality safety confirmation prompt message through the vehicle Tbox.

7. A vehicle battery thermal runaway detection system during OTA upgrade, characterized in that, During OTA upgrade, the vehicle battery thermal runaway detection system includes a target vehicle and a server, where The target vehicle is used to control all ECUs to mask fault codes and all ECUs to prohibit CAN communication during OTA upgrade, and start downloading a software flashing data packet from the server; The server is used to request the battery management system of the target vehicle to perform real-time power battery thermal runaway detection during the process of the target vehicle downloading the software flashing data packet; The server is also used to read the thermal runaway detection result detected by the battery management system, and when it is determined according to the thermal runaway detection result that the target vehicle has triggered a thermal runaway fault, exit the OTA upgrade mode with the target vehicle; The target vehicle is also used to restore the vehicle CAN bus communication, and output a thermal runaway fault alarm message according to the thermal runaway trigger signal reported by the vehicle BMS through the CAN bus communication.

8. The vehicle battery thermal runaway detection system during OTA upgrade according to claim 7, wherein, The target vehicle is specifically used to obtain vehicle status data; and when it is detected according to the vehicle status data that the OTA upgrade condition is met, read the ECU part number and software version number to be flashed and the part number and software number to be upgraded in the software flashing data packet; When the ECU part number and the software version number match the part number to be upgraded and the software number to be upgraded correspondingly, start Diagnostic 85 service to make all vehicle ECUs mask fault codes; And start Diagnostic 28 service to make all vehicle ECUs prohibit CAN communication; Wherein, the vehicle status data at least includes vehicle gear, vehicle speed, high-voltage state, door state, and low-voltage battery voltage.

9. The vehicle battery thermal runaway detection system during OTA upgrade according to claim 7, wherein, The server is also used to, when it is determined according to the thermal runaway detection result that the target vehicle has not triggered a thermal runaway fault, the server determines whether the target vehicle has completed downloading the software flashing data packet; when it is determined that the target vehicle has not completed downloading the software flashing data packet, perform the above-mentioned reading of the thermal runaway detection result detected by the battery management system.

10. The vehicle battery thermal runaway detection system during OTA upgrade according to claim 9, characterized in that, The server is also used to stop reading the thermal runaway detection result when it is determined that the target vehicle has completed downloading the software flashing data packet; The target vehicle is also used to obtain the downloaded software update package, and when the software update package passes the consistency check, perform corresponding update and installation operations according to the software update package.

Images