Software upgrading method and device, computer equipment and storage medium

Through multi-level safety operating condition judgment of the on-board terminal and the vehicle controller, the software upgrade problem caused by inaccurate vehicle status information is solved, the accuracy and safety of the upgrade are improved, and the user experience is enhanced.

CN120704713APending Publication Date: 2025-09-26WEICHAI POWER CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202510894445.7
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-06-30
Publication Date
2025-09-26

AI Technical Summary

Technical Problem

In the prior art, inaccurate vehicle status information affects the accuracy and safety of software upgrades, especially in complex electromagnetic environments or when a control unit fails, resulting in software upgrade failure.

Method used

Through multi-level safety operating condition judgment, the on-board terminal and the vehicle controller jointly judge the vehicle status, including the first safety operating condition and the second safety operating condition, to ensure that the vehicle meets multiple conditions before the software upgrade and reduce omissions in a single judgment link.

Benefits of technology

It improves the accuracy and security of software upgrades, avoids upgrade failures caused by vehicle status not meeting requirements, and enhances the user operating experience.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN120704713A_ABST
    Figure CN120704713A_ABST
Patent Text Reader

Abstract

The invention provides a software upgrading method and device, computer equipment and a storage medium, and the software upgrading method comprises the steps: responding to a software upgrading request, and judging whether the vehicle state of a current vehicle meets a first safety working condition requirement or not; when the current vehicle state meets the first safety working condition requirement, prompt information of software upgrading confirmation is sent to the display terminal; when a software upgrading confirmation instruction from the display terminal is received, the software upgrading confirmation instruction is forwarded to the vehicle control unit, so that the vehicle control unit responds to the software upgrading confirmation instruction, and whether the vehicle state of the current vehicle meets the second safety working condition requirement or not is judged again; the second safety condition is different from the first safety condition requirement; and in response to an upgrade permission instruction of the vehicle control unit, downloading the software upgrade package to upgrade the software. According to the embodiment of the invention, the state information of the vehicle can be accurately obtained, so that the accuracy and safety of software upgrading are ensured.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of vehicle control technology, and in particular to a software upgrading method, apparatus, computer equipment and storage medium. Background Art

[0002] With the continuous development of automotive technology, vehicles are becoming increasingly intelligent and connected. Over-the-air (OTA) software updates have become a crucial tool for vehicle maintenance and feature updates. In existing technologies, vehicle software updates primarily rely on a control unit connected to the vehicle's CAN bus or other communication interfaces to obtain real-time vehicle status information, such as ignition status and gear position, to determine whether the vehicle is in a suitable state for a software update.

[0003] However, in practical applications, relying solely on CAN bus signals or connected control units to obtain vehicle status information presents numerous problems. For one thing, CAN bus signals are susceptible to interference, especially in complex electromagnetic environments, such as when a vehicle is traveling near high-voltage power lines, passing near large electronic equipment, or experiencing malfunctions in the vehicle's own electronic equipment. This interference can cause the acquired vehicle status information to be erroneous or unstable, thus affecting accurate judgment of the vehicle's status. Furthermore, the control units connected to the CAN bus may themselves experience malfunctions, such as hardware failures, software vulnerabilities, or communication failures. These failures can also result in inaccurate vehicle status information, impacting the accuracy and security of software upgrades. Summary of the Invention

[0004] In view of this, the present application proposes a software upgrade method, apparatus, computer equipment and storage medium to solve the problem in the related art that inaccurate vehicle status information affects software upgrades.

[0005] A first embodiment of the present application provides a software upgrade method, which is applied to a vehicle-mounted terminal. The method includes:

[0006] In response to the software upgrade request, determining whether a current vehicle state of the vehicle satisfies a first safety operating condition requirement;

[0007] When the current vehicle state meets the first safety operating condition requirement, sending a prompt message for software upgrade confirmation to the display terminal;

[0008] When receiving a software upgrade confirmation instruction from the display terminal, forwarding the software upgrade confirmation instruction to the vehicle controller, so that the vehicle controller responds to the software upgrade confirmation instruction and again determines whether the vehicle state of the current vehicle meets a second safety operating condition requirement; the second safety operating condition is different from the first safety operating condition requirement;

[0009] In response to the upgrade permission instruction of the vehicle controller, a software upgrade package is downloaded to perform software upgrade.

[0010] The embodiments of the present application utilize multi-level safety operating condition assessments to make vehicle status assessments more accurate and comprehensive, effectively avoiding safety hazards caused by omissions in a single assessment step. Furthermore, through multi-level safety operating condition assessments and accurate acquisition of vehicle status information, the vehicle is ensured to be in the appropriate state throughout the software upgrade process. This avoids upgrade failures due to unsatisfactory vehicle status, such as when performing an upgrade while the vehicle is in motion or when a critical system malfunctions, thereby improving the accuracy and safety of software upgrades.

[0011] In the embodiment of the present application, determining whether the current vehicle state meets the first safety operating condition requirement includes:

[0012] If at least one of the following multiple first state requirements is not satisfied, determining that the vehicle state of the current vehicle does not satisfy the first safety operating condition requirement; if all of the multiple first state requirements are satisfied, determining that the vehicle state of the current vehicle satisfies the first safety operating condition requirement;

[0013] The multiple first status requirements include: whether the vehicle has completed the low-voltage power-on operation, whether the vehicle handbrake is in the pulled-up state, whether the vehicle gear is in the neutral state or the parked state, and whether the vehicle speed is zero for several consecutive seconds.

[0014] In an embodiment of the present application, the display terminal is a user terminal device or an instrument display device of the current vehicle.

[0015] In an embodiment of the present application, sending a prompt message for software upgrade confirmation to the display terminal includes:

[0016] When the display terminal is the user terminal device, sending the software upgrade confirmation prompt information to the cloud server, so that the cloud server forwards the software upgrade confirmation prompt information to the user terminal device;

[0017] When the display terminal is the instrument display device, the prompt information of the software upgrade confirmation is sent to the instrument display device through a serial communication protocol.

[0018] An embodiment of a second aspect of the present application provides a software upgrade method, which is applied to a vehicle controller; the method includes:

[0019] In response to the software upgrade confirmation instruction, determining whether the vehicle state of the current vehicle meets the second safety operating condition requirement; the software upgrade confirmation instruction is sent by the display terminal to the vehicle controller via the onboard terminal in response to the upgrade confirmation operation; the upgrade confirmation operation is an operation performed by the user on the display terminal after the display terminal receives the prompt information of software upgrade confirmation; the prompt information of software upgrade confirmation is sent by the onboard terminal to the display terminal in response to the software upgrade request when it determines that the vehicle state of the current vehicle meets the first safety operating condition requirement;

[0020] When the vehicle state of the current vehicle meets the second safety operating condition requirement, an upgrade permission instruction is sent to the vehicle-mounted terminal, so that the vehicle-mounted terminal responds to the upgrade permission instruction and downloads the software upgrade package to perform software upgrade.

[0021] In the embodiment of the present application, determining whether the current vehicle state meets the second safety operating condition requirement includes:

[0022] If at least one of the following multiple second state requirements is not satisfied, determining that the vehicle state of the current vehicle does not satisfy the second safety operating condition requirement; if all of the multiple second state requirements are satisfied, determining that the vehicle state of the current vehicle satisfies the second safety operating condition requirement;

[0023] The multiple second status requirements include: whether the vehicle has completed the low-voltage power-on operation, whether the vehicle handbrake is in the pulled-up state, whether the vehicle gear is in neutral or parked state, whether the vehicle speed is zero for several consecutive seconds, the remaining battery power is greater than the preset power and the vehicle is in a non-charging state.

[0024] An embodiment of a third aspect of the present application provides a software upgrade device, which is applied to a vehicle-mounted terminal; the device includes:

[0025] a first safety operating condition determination module, configured to determine, in response to a software upgrade request, whether a current vehicle state of the vehicle satisfies a first safety operating condition requirement;

[0026] a prompt information sending module, configured to send a prompt information of software upgrade confirmation to the display terminal when the current vehicle state meets the first safety operating condition requirement;

[0027] a software upgrade confirmation instruction forwarding module, configured to, upon receiving the software upgrade confirmation instruction from the display terminal, forward the software upgrade confirmation instruction to the vehicle controller, so that the vehicle controller, in response to the software upgrade confirmation instruction, again determines whether the vehicle state of the current vehicle satisfies a second safety operating condition requirement; the second safety operating condition being different from the first safety operating condition requirement;

[0028] The software upgrade module is used to download a software upgrade package to perform software upgrade in response to the upgrade permission instruction of the vehicle controller.

[0029] A fourth aspect of the present application provides a software upgrade device, which is applied to a vehicle controller; the device includes:

[0030] a second safety operating condition determination module, configured to determine, in response to a software upgrade confirmation instruction, whether the vehicle state of the current vehicle satisfies a second safety operating condition requirement; the software upgrade confirmation instruction is sent by the display terminal to the vehicle controller via the onboard terminal in response to an upgrade confirmation operation; the upgrade confirmation operation is an operation performed by a user at the display terminal after the display terminal receives a prompt message indicating a software upgrade confirmation; the software upgrade confirmation prompt message is sent by the onboard terminal to the display terminal in response to a software upgrade request upon determining that the vehicle state of the current vehicle satisfies the first safety operating condition requirement;

[0031] The upgrade permission instruction sending module is used to send an upgrade permission instruction to the vehicle terminal when the vehicle state of the current vehicle meets the second safety working condition requirement, so that the vehicle terminal responds to the upgrade permission instruction and downloads the software upgrade package for software upgrade.

[0032] An embodiment of the fifth aspect of the present application provides a computer device, which includes a memory and a processor, wherein the memory and the processor are communicatively connected to each other, computer instructions are stored in the memory, and the processor executes the software upgrade method described in the first aspect above by executing the computer instructions.

[0033] An embodiment of the sixth aspect of the present application provides a computer-readable storage medium, on which computer instructions are stored, and the computer instructions are used to enable a computer to execute the software upgrade method described in the first aspect above.

[0034] Additional aspects and advantages of the present application will be given in part in the description below and in part will become apparent from the description below or learned through practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0035] Various other advantages and benefits will become apparent to those skilled in the art upon reading the detailed description of the preferred embodiment below. The accompanying drawings are for illustration purposes only and are not to be considered as limiting the present application. Throughout the accompanying drawings, the same reference numerals are used to denote the same components.

[0036] In the attached figure:

[0037] Figure 1A flowchart of a software upgrade method provided by an embodiment of the present application is shown;

[0038] Figure 2 A schematic diagram showing the connection of various components for software upgrade provided by an embodiment of the present application is shown;

[0039] Figure 3 A flowchart of another software upgrade method provided by an embodiment of the present application is shown;

[0040] Figure 4 A schematic structural diagram of a software upgrade device provided in one embodiment of the present application is shown;

[0041] Figure 5 A schematic diagram of the structure of a computer device provided in one embodiment of the present application is shown;

[0042] Figure 6 A schematic diagram of a storage medium provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0043] The following describes exemplary embodiments of the present application in more detail with reference to the accompanying drawings. Although exemplary embodiments of the present application are shown in the accompanying drawings, it should be understood that the present application can be implemented in various forms and should not be limited by the embodiments described herein. Instead, these embodiments are provided to enable a more thorough understanding of the present application and to fully convey the scope of the present application to those skilled in the art.

[0044] It should be noted that, unless otherwise specified, the technical or scientific terms used in this application should have the common meanings understood by those skilled in the art to which this application belongs.

[0045] The following describes the technical scenarios involved in the embodiments of this application.

[0046] OTA (Over-The-Air) is a remote wireless upgrade technology used in automobiles. It is one of the core technologies for automotive software updates, upgrading vehicle systems and functions via the internet. It mainly includes two types: SOTA (Software Over The Air) and FOTA (Firmware Over The Air). The former is similar to updating an app on a mobile phone, while the latter is equivalent to upgrading the smartphone system.

[0047] TBOX: A telematics box (TBOX) is a smart device installed in a vehicle, primarily used to enable communication and data transmission between the vehicle and external networks. Its main functions include remote monitoring and diagnosis, over-the-air (OTA) updates, vehicle positioning and tracking, and data collection and storage.

[0048] VCU: The vehicle control unit (VCU) is the core control unit of an electric or hybrid vehicle. It coordinates and manages the operation of various vehicle subsystems to ensure efficient and safe operation. It serves as the vehicle's "brain," collecting real-time sensor data, processing driving commands, and sending instructions to other controllers (such as the motor controller and battery management system) to implement functions such as power distribution, energy management, and fault diagnosis.

[0049] BMS: Battery Management System is an important control unit in new energy vehicles, mainly used to monitor and manage the status of the battery to ensure that the battery works under safe and efficient conditions.

[0050] MCU: Microcontroller Unit is an important control unit in new energy vehicles, mainly used to control the engine, transmission, braking system, instrument panel, etc.

[0051] SOC (State of Charge) is a key parameter in the battery management system (BMS), used to monitor the remaining battery charge and help users understand the vehicle's range.

[0052] According to an embodiment of the present application, an embodiment of a software upgrade method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0053] Example 1:

[0054] In this embodiment, a software upgrade method is provided, which can be used for a vehicle-mounted terminal (TBOX, Telematics Box). Figure 1 is a flowchart of a software upgrade method according to an embodiment of the present application, such as Figure 1 As shown, the process includes the following steps:

[0055] Step S101 , in response to a software upgrade request, determining whether the current vehicle state meets a first safety operating condition requirement.

[0056] Specifically, the software upgrade request can be understood as an OTA upgrade request. OTA (Over-The-Air) is a remote wireless upgrade technology used in automobiles to upgrade vehicle systems and functions via the internet. Vehicle status includes but is not limited to vehicle speed, gear status, and parking brake status.

[0057] More specifically, the software upgrade request is sent by the cloud server to the vehicle terminal of the current vehicle.

[0058] In some specific embodiments, the above step S101 includes step S1011:

[0059] Step S1011: If at least one of the following multiple first state requirements is not satisfied, then determining that the vehicle state of the current vehicle does not satisfy the first safety operating condition requirement; if all of the multiple first state requirements are satisfied, then determining that the vehicle state of the current vehicle satisfies the first safety operating condition requirement;

[0060] Among them, the multiple first status requirements include: whether the vehicle has completed the low-voltage power-on operation, whether the vehicle handbrake is in the pulled-up state, whether the vehicle gear is in neutral or parked state, and whether the vehicle speed is zero for several consecutive seconds (for example, the vehicle speed is 0 km / h for 5 seconds).

[0061] Step S102: When the current vehicle state meets the first safety operating condition requirement, a prompt message for software upgrade confirmation is sent to the display terminal.

[0062] Specifically, when the on-board terminal determines that the current vehicle status meets the first safety operating condition requirement, the vehicle terminal will send a software upgrade confirmation prompt message to the display terminal, so that the user / driver can perform a software upgrade confirmation operation (such as allowing the upgrade operation or rejecting the upgrade operation) on the display terminal according to the prompt message; when the display terminal receives the upgrade permission operation, it will send a software upgrade confirmation instruction to the on-board terminal; on the contrary, if the display terminal receives the upgrade rejection operation, the subsequent process will be stopped.

[0063] In some specific embodiments, the display terminal is a user terminal device or an instrument display device of the current vehicle.

[0064] In some specific embodiments, the above step S102 includes steps S1021 and S1022:

[0065] Step S1021: When the display terminal is the user terminal device, the software upgrade confirmation prompt information is sent to the cloud server, so that the cloud server forwards the software upgrade confirmation prompt information to the user terminal device, for example Figure 2 shown.

[0066] Specifically, the display terminal is the corresponding application in the user terminal device, that is, the APP terminal.

[0067] Step S1022: When the display terminal is the instrument display device, the prompt information of the software upgrade confirmation is sent to the instrument display device via the serial communication protocol, for example Figure 2 shown.

[0068] Specifically, the serial communication protocol includes but is not limited to the CAN bus.

[0069] Step S103, when receiving the software upgrade confirmation instruction from the display terminal, forwarding the software upgrade confirmation instruction to the vehicle controller, so that the vehicle controller responds to the software upgrade confirmation instruction and again determines whether the vehicle status of the current vehicle meets the second safety operating condition requirement.

[0070] Specifically, after receiving the software upgrade confirmation instruction from the display terminal, the on-board terminal will forward its software upgrade confirmation instruction to the vehicle controller (VCU, Vehicle Control Unit, VCU). After receiving the software upgrade confirmation instruction, the vehicle controller will again detect the vehicle status of the current vehicle to determine whether the vehicle status meets the second safety operating condition requirement; the second safety operating condition is different from the first safety operating condition requirement; when the vehicle status meets the second safety operating condition requirement, the vehicle controller will send an upgrade permission instruction to the on-board terminal; on the contrary, if the vehicle status does not meet the second safety operating condition requirement, the subsequent software upgrade process will not be executed, and the prompt information of the upgrade failure will be fed back to the user terminal device or the instrument display device of the current vehicle.

[0071] Step S104 , in response to the upgrade permission instruction from the vehicle controller, download the software upgrade package to perform software upgrade.

[0072] Specifically, the vehicle terminal downloads the software upgrade package from the cloud server; the vehicle terminal verifies the integrity of the software upgrade package (for example, using hash verification methods) to ensure that the downloaded upgrade package has not been tampered with or damaged; after passing the verification, the vehicle terminal begins to install the software upgrade package. During the installation process, various systems of the vehicle (such as the powertrain, chassis system, and body electronic system) are updated according to the instructions in the upgrade package.

[0073] In the embodiment of the present application, multiple judgments on the vehicle safety upgrade working conditions are made by the vehicle terminal TBOX and the vehicle controller VCU, reducing the reliance on a single judgment path and enhancing the security and stability of the OTA process. Preferably, by performing a precondition judgment on the user's confirmation of the upgrade operation, if the vehicle conditions are not met, the user does not need to confirm the upgrade operation, rather than being informed that the upgrade conditions are not met after confirming the upgrade operation, thereby improving the user's operating experience.

[0074] Example 2

[0075] Corresponding to the implementation of the above software upgrade method, the embodiment of the present application also provides a software upgrade method that can be used for the vehicle control unit (VCU) of the vehicle, such as Figure 3 As shown: The method includes:

[0076] Step S201: In response to a software upgrade confirmation instruction, determine whether the current vehicle state meets a second safety operating condition requirement.

[0077] Specifically, the software upgrade confirmation instruction is sent by the display terminal to the vehicle controller via the vehicle terminal in response to the upgrade confirmation operation;

[0078] More specifically, the upgrade confirmation operation is an operation performed by the user on the display terminal after the display terminal receives the prompt information of the software upgrade confirmation; the prompt information of the software upgrade confirmation is sent to the display terminal by the vehicle-mounted terminal in response to the software upgrade request when it is determined that the vehicle status of the current vehicle meets the first safety operating condition requirement.

[0079] Step S202: When the current vehicle state meets the second safety operating condition requirement, an upgrade permission instruction is sent to the vehicle-mounted terminal, so that the vehicle-mounted terminal responds to the upgrade permission instruction and downloads the software upgrade package to perform software upgrade.

[0080] In the above steps S201-S202, the vehicle terminal responds to the software upgrade request from the cloud server and determines whether the current vehicle state meets the first safety operating condition requirement. When the current vehicle state meets the first safety operating condition requirement, a prompt message for software upgrade confirmation is sent to the display terminal. The user / driver performs a software upgrade confirmation operation (e.g., allows the upgrade operation or rejects the upgrade operation) on the display terminal according to the prompt message. When the display terminal receives the software upgrade permission operation, it sends a software upgrade confirmation instruction to the vehicle terminal. On the contrary, if the display terminal receives the software upgrade rejection operation, the subsequent process is stopped.

[0081] After receiving the software upgrade confirmation instruction from the display terminal, the on-board terminal will forward its software upgrade confirmation instruction to the vehicle controller (VCU). After receiving the software upgrade confirmation instruction, the vehicle controller will again detect the vehicle status of the current vehicle to determine whether the vehicle status meets the second safety operating condition requirement; the second safety operating condition is different from the first safety operating condition requirement; when the vehicle status meets the second safety operating condition requirement, the vehicle controller will send an upgrade permission instruction to the on-board terminal; on the contrary, if the vehicle status does not meet the second safety operating condition requirement, the subsequent software upgrade process will not be executed, and the prompt information of the upgrade failure will be fed back to the user terminal device or the instrument display device of the current vehicle; after receiving the upgrade permission instruction, the on-board terminal will download the software upgrade package from the cloud server for software upgrade.

[0082] In some specific embodiments, the above step S201 includes step S2011:

[0083] Step S2011: If at least one of the following multiple second state requirements is not satisfied, determining that the vehicle state of the current vehicle does not satisfy the second safety operating condition requirement; if all of the multiple second state requirements are satisfied, determining that the vehicle state of the current vehicle satisfies the second safety operating condition requirement;

[0084] Among them, the multiple second status requirements include: whether the vehicle has completed the low-voltage power-on operation, whether the vehicle handbrake is in the pulled-up state, whether the vehicle gear is in neutral or parked state, whether the vehicle speed is zero for several consecutive seconds, the remaining battery power is greater than the preset power and the vehicle is in a non-charging state.

[0085] In the embodiment of the present application, multiple judgments on the vehicle safety upgrade working conditions are made by the vehicle terminal TBOX and the vehicle controller VCU, reducing the reliance on a single judgment path and enhancing the security and stability of the OTA process. Preferably, by performing a precondition judgment on the user's confirmation of the upgrade operation, if the vehicle conditions are not met, the user does not need to confirm the upgrade operation, rather than being informed that the upgrade conditions are not met after confirming the upgrade operation, thereby improving the user's operating experience.

[0086] Example 3:

[0087] Corresponding to the implementation of the above software upgrade method, the embodiment of the present application further provides a software upgrade device for executing the software upgrade method described in the above embodiment 1. Figure 4 As shown, the software upgrading device includes:

[0088] a first safety operating condition determination module, configured to determine, in response to a software upgrade request, whether a current vehicle state of the vehicle satisfies a first safety operating condition requirement;

[0089] a prompt information sending module, configured to send a prompt information of software upgrade confirmation to the display terminal when the current vehicle state meets the first safety operating condition requirement;

[0090] a software upgrade confirmation instruction forwarding module, configured to, upon receiving the software upgrade confirmation instruction from the display terminal, forward the software upgrade confirmation instruction to the vehicle controller, so that the vehicle controller, in response to the software upgrade confirmation instruction, again determines whether the vehicle state of the current vehicle satisfies a second safety operating condition requirement; the second safety operating condition being different from the first safety operating condition requirement;

[0091] The software upgrade module is used to download a software upgrade package to perform software upgrade in response to the upgrade permission instruction of the vehicle controller.

[0092] Optionally, the first safety operating condition judgment module is also used to: if at least one of the following multiple first state requirements is not met, determine that the vehicle state of the current vehicle does not meet the first safety operating condition requirement; if all of the multiple first state requirements are met, determine that the vehicle state of the current vehicle meets the first safety operating condition requirement; the multiple first state requirements include: whether the vehicle has completed the low-voltage power-on operation, whether the vehicle handbrake is in the pulled-up state, whether the vehicle gear is in the neutral state or the parked state, and whether the vehicle speed is zero for several consecutive seconds.

[0093] Optionally, the display terminal is a user terminal device or an instrument display device of the current vehicle.

[0094] Optionally, the prompt information sending module is also used to send the prompt information of the software upgrade confirmation to the cloud server when the display terminal is the user terminal device, so that the cloud server forwards the prompt information of the software upgrade confirmation to the user terminal device; when the display terminal is the instrument display device, the prompt information of the software upgrade confirmation is sent to the instrument display device through the serial communication protocol.

[0095] Example 4:

[0096] Corresponding to the implementation of the above software upgrade method, the embodiment of the present application further provides a software upgrade device for executing the software upgrade method described in the above embodiment 2. The software upgrade device includes:

[0097] a second safety operating condition determination module, configured to determine, in response to a software upgrade confirmation instruction, whether the vehicle state of the current vehicle satisfies a second safety operating condition requirement; the software upgrade confirmation instruction is sent by the display terminal to the vehicle controller via the onboard terminal in response to an upgrade confirmation operation; the upgrade confirmation operation is an operation performed by a user at the display terminal after the display terminal receives a prompt message indicating a software upgrade confirmation; the software upgrade confirmation prompt message is sent by the onboard terminal to the display terminal in response to a software upgrade request upon determining that the vehicle state of the current vehicle satisfies the first safety operating condition requirement;

[0098] The upgrade permission instruction sending module is used to send an upgrade permission instruction to the vehicle terminal when the vehicle state of the current vehicle meets the second safety working condition requirement, so that the vehicle terminal responds to the upgrade permission instruction and downloads the software upgrade package for software upgrade.

[0099] The software upgrade device provided in the above-mentioned embodiment of the present application and the software upgrade method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.

[0100] The present application also provides a computer device to perform the above software upgrade method. Figure 5 , which shows a schematic diagram of a computer device provided by some embodiments of the present application. Figure 5 As shown, the computer device 5 includes: a processor 500, a memory 501, a bus 502 and a communication interface 503, and the processor 500, the communication interface 503 and the memory 501 are connected via the bus 502; the memory 501 stores a computer program that can be run on the processor 500, and when the processor 500 runs the computer program, it executes the software upgrade method provided in any of the aforementioned embodiments of the present application.

[0101] The memory 501 may include high-speed random access memory (RAM) and may also include non-volatile memory, such as at least one disk storage. The system network element and at least one other network element are connected via at least one communication interface 503 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0102] The bus 502 may be an ISA bus, a PCI bus, or an EISA bus. The bus may be divided into an address bus, a data bus, a control bus, etc. The memory 501 is used to store programs. The processor 500 executes the programs upon receiving execution instructions. The software upgrade method disclosed in any of the aforementioned embodiments may be applied to the processor 500 or implemented by the processor 500.

[0103] The processor 500 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method can be completed by hardware integrated logic circuits in the processor 500 or by software instructions. The above processor 500 may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it may also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), an off-the-shelf field programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, or discrete hardware components. It can implement or execute the various methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor. The steps of the method disclosed in conjunction with the embodiments of this application can be directly implemented and executed by a hardware decoding processor, or by a combination of hardware and software modules in the decoding processor. The software module can be located in a storage medium mature in the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, registers, etc. The storage medium is located in the memory 501 , and the processor 500 reads the information in the memory 501 and completes the steps of the above method in combination with its hardware.

[0104] The computer device provided in the embodiment of the present application and the software upgrade method provided in the embodiment of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by them.

[0105] The present application also provides a computer-readable storage medium corresponding to the software upgrade method provided in the above embodiment. Figure 6 The computer-readable storage medium shown is a CD 30 on which a computer program (ie, a program product) is stored. When the computer program is run by a processor, the software upgrade method provided by any of the aforementioned embodiments will be executed.

[0106] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.

[0107] The computer-readable storage medium provided in the above-mentioned embodiments of the present application and the software upgrade method provided in the embodiments of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.

[0108] It should be noted that:

[0109] In the description provided herein, a large number of specific details are described. However, it is understood that the embodiments of the present application can be practiced without these specific details. In some instances, well-known structures and technologies are not shown in detail so as not to obscure the understanding of this description.

[0110] Similarly, it should be understood that in order to streamline the present application and aid in understanding one or more of the various inventive aspects, in the above description of the exemplary embodiments of the present application, various features of the present application are sometimes grouped together into a single embodiment, figure, or description thereof. However, this disclosed method should not be interpreted as reflecting the following schematic diagram: the claimed application requires more features than the features expressly recited in each claim. Rather, as reflected in the claims below, inventive aspects lie in less than all the features of the individual embodiments disclosed above. Therefore, the claims following the detailed description are hereby expressly incorporated into the detailed description, with each claim itself serving as a separate embodiment of the present application.

[0111] Furthermore, those skilled in the art will appreciate that although some embodiments described herein include certain features included in other embodiments but not other features, combinations of features from different embodiments are intended to be within the scope of this application and to form different embodiments. For example, in the claims below, any of the claimed embodiments may be used in any combination.

[0112] The above description is merely a preferred embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of the present application. Therefore, the scope of protection of the present application should be based on the scope of protection of the claims.

Claims

1. A software upgrade method, characterized in that: The method is applied to a vehicle-mounted terminal; the method includes: In response to the software upgrade request, determining whether a current vehicle state of the vehicle satisfies a first safety operating condition requirement; When the current vehicle state meets the first safety operating condition requirement, sending a prompt message for software upgrade confirmation to the display terminal; When receiving a software upgrade confirmation instruction from the display terminal, forwarding the software upgrade confirmation instruction to the vehicle controller, so that the vehicle controller responds to the software upgrade confirmation instruction and again determines whether the vehicle state of the current vehicle meets a second safety operating condition requirement; the second safety operating condition is different from the first safety operating condition requirement; In response to the upgrade permission instruction of the vehicle controller, a software upgrade package is downloaded to perform software upgrade.

2. The method according to claim 1, characterized in that Determining whether the current vehicle state meets the first safety operating condition requirement includes: If at least one of the following multiple first state requirements is not satisfied, determining that the vehicle state of the current vehicle does not satisfy the first safety operating condition requirement; if all of the multiple first state requirements are satisfied, determining that the vehicle state of the current vehicle satisfies the first safety operating condition requirement; The multiple first status requirements include: whether the vehicle has completed the low-voltage power-on operation, whether the vehicle handbrake is in the pulled-up state, whether the vehicle gear is in the neutral state or the parked state, and whether the vehicle speed is zero for several consecutive seconds.

3. The method according to claim 1 or 2, characterized in that The display terminal is a user terminal device or an instrument display device of the current vehicle.

4. The method according to claim 3, characterized in that Send software upgrade confirmation prompt information to the display terminal, including: When the display terminal is the user terminal device, sending the software upgrade confirmation prompt information to the cloud server, so that the cloud server forwards the software upgrade confirmation prompt information to the user terminal device; When the display terminal is the instrument display device, the prompt information of the software upgrade confirmation is sent to the instrument display device through a serial communication protocol.

5. A software upgrade method, characterized in that: The method is applied to a vehicle controller; the method comprises: In response to the software upgrade confirmation instruction, determining whether the vehicle state of the current vehicle meets the second safety operating condition requirement; the software upgrade confirmation instruction is sent by the display terminal to the vehicle controller via the onboard terminal in response to the upgrade confirmation operation; the upgrade confirmation operation is an operation performed by the user on the display terminal after the display terminal receives the prompt information of software upgrade confirmation; the prompt information of software upgrade confirmation is sent by the onboard terminal to the display terminal in response to the software upgrade request when it determines that the vehicle state of the current vehicle meets the first safety operating condition requirement; When the vehicle state of the current vehicle meets the second safety operating condition requirement, an upgrade permission instruction is sent to the vehicle-mounted terminal, so that the vehicle-mounted terminal responds to the upgrade permission instruction and downloads the software upgrade package to perform software upgrade.

6. The method according to claim 5, characterized in that Determining whether the current vehicle state meets the second safety operating condition requirement includes: If at least one of the following multiple second state requirements is not satisfied, determining that the vehicle state of the current vehicle does not satisfy the second safety operating condition requirement; if all of the multiple second state requirements are satisfied, determining that the vehicle state of the current vehicle satisfies the second safety operating condition requirement; The multiple second status requirements include: whether the vehicle has completed the low-voltage power-on operation, whether the vehicle handbrake is in the pulled-up state, whether the vehicle gear is in neutral or parked state, whether the vehicle speed is zero for several consecutive seconds, the remaining battery power is greater than the preset power and the vehicle is in a non-charging state.

7. A software upgrade device, characterized in that: The device is applied to a vehicle-mounted terminal; the device includes: a first safety operating condition determination module, configured to determine, in response to a software upgrade request, whether a current vehicle state of the vehicle satisfies a first safety operating condition requirement; a prompt information sending module, configured to send a prompt information of software upgrade confirmation to the display terminal when the current vehicle state meets the first safety operating condition requirement; a software upgrade confirmation instruction forwarding module, configured to, upon receiving the software upgrade confirmation instruction from the display terminal, forward the software upgrade confirmation instruction to the vehicle controller, so that the vehicle controller, in response to the software upgrade confirmation instruction, again determines whether the vehicle state of the current vehicle satisfies a second safety operating condition requirement; the second safety operating condition being different from the first safety operating condition requirement; The software upgrade module is used to download a software upgrade package to perform software upgrade in response to the upgrade permission instruction of the vehicle controller.

8. A software upgrade device, characterized in that: The device is applied to a vehicle controller; the device comprises: a second safety operating condition determination module, configured to determine, in response to a software upgrade confirmation instruction, whether the vehicle state of the current vehicle satisfies a second safety operating condition requirement; the software upgrade confirmation instruction is sent by the display terminal to the vehicle controller via the onboard terminal in response to an upgrade confirmation operation; the upgrade confirmation operation is an operation performed by a user at the display terminal after the display terminal receives a prompt message indicating a software upgrade confirmation; the software upgrade confirmation prompt message is sent by the onboard terminal to the display terminal in response to a software upgrade request upon determining that the vehicle state of the current vehicle satisfies the first safety operating condition requirement; The upgrade permission instruction sending module is used to send an upgrade permission instruction to the vehicle terminal when the vehicle state of the current vehicle meets the second safety working condition requirement, so that the vehicle terminal responds to the upgrade permission instruction and downloads the software upgrade package for software upgrade.

9. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the software upgrade method according to any one of claims 1 to 6 by executing the computer instructions.

10. A computer-readable storage medium, characterized in that The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the software upgrading method according to any one of claims 1 to 6.