Vehicle OTA upgrading method and system

Abstract

The invention provides a vehicle OTA upgrading method and system, and belongs to the technical field of vehicle intelligent upgrading. By designing a breakpoint continuous transmission mechanism, a power supply management strategy, multiple data verification and an error processing monitoring module, the problems that upgrading fails, vehicle functions cannot be normally used, upgrading efficiency is low and the like due to the fact that an existing OTA technology lacks a reliable power-off continuous transmission mechanism are solved. The method specifically comprises the steps of an upgrade initialization stage, a data transmission stage, a vehicle power failure and power supply recovery stage, upgrade completion and the like. The system comprises functional modules such as a multi-dimensional information marking module, a breakpoint recording module, a power management module, a data verification module, an error processing monitoring module and the like. According to the method and the device, the breakpoint position can be accurately positioned when the vehicle is accidentally interrupted in the OTA non-inductive upgrading process, residual data are automatically and continuously transmitted from the interrupted position of the last time when the upgrading condition is recovered, and the upgrading efficiency is improved on the basis of ensuring the integrity and the stability of OTA upgrading.

Description

Technical Field

[0001] This invention relates to the field of vehicle intelligent upgrade technology, specifically to a vehicle OTA upgrade method and system. Background Technology

[0002] Against the backdrop of rapid development in automotive intelligence and connectivity, OTA (Over-The-Air) technology, with its remote software update capabilities, significantly improves the convenience and timeliness of vehicle software upgrades, reducing overall lifecycle maintenance costs. Among these advancements, seamless upgrade technology breaks through traditional models, supporting OTA upgrades while the vehicle is continuously transmitting CAN application messages and operating normally, greatly optimizing the user experience and becoming a key technology direction for intelligent vehicles.

[0003] However, the complexity of real-world vehicle usage scenarios poses a significant challenge to OTA (Over-The-Air) seamless upgrades. Unexpected situations such as the owner locking the vehicle and leaving, or emergency stops, often cause unexpected interruptions to the upgrade process. After the vehicle is powered off, the OTA main control unit and the upgraded controller enter sleep mode, preventing the written and verified data from being completed, making it difficult to pinpoint the breakpoint when power is restored. Existing OTA technologies generally lack reliable power-off resume mechanisms, leading to a series of problems: upgrade data loss causes upgrade failures, affecting normal vehicle functionality; forced activation of unverified programs can easily cause logical errors and even damage controller hardware; repeated failed upgrades also consume network and storage resources, reducing system efficiency.

[0004] As the complexity of intelligent vehicle functions increases, the number of onboard controllers and the amount of software code surge. Traditional upgrade technologies are no longer sufficient to meet the needs of intelligent vehicle upgrades. There is an urgent need to develop OTA upgrade methods with efficient power-off resume mechanisms to ensure the integrity and reliability of upgrade tasks in complex scenarios and promote the further development of intelligent vehicle technologies. Summary of the Invention

[0005] To address the aforementioned problems in the existing technology, this invention provides a vehicle OTA upgrade method and system that ensures that if the OTA seamless upgrade is unexpectedly interrupted and the vehicle loses power, the upgrade can be safely and efficiently resumed when the vehicle is powered back on, thus guaranteeing the integrity and stability of the upgrade process.

[0006] To achieve the above objectives, the technical solution adopted by the present invention is as follows:

[0007] In a first aspect, the present invention provides a vehicle OTA upgrade method, which, in response to an upgrade command, obtains an OTA upgrade package and, in a seamless upgrade mode, performs the following specific operation process:

[0008] The multi-dimensional information tagging module acquires and records the vehicle's real-time driving status information and the operating parameters of each domain system;

[0009] During the initialization phase, the breakpoint recording module performs a comprehensive initialization configuration of the storage medium, the communication protocol module loads the adaptive extension protocol, and the power management module performs a comprehensive detection and pre-configuration of the backup power supply.

[0010] During the data transmission phase, the OTA master control unit sends upgrade data packets based on the network adaptive algorithm, the breakpoint recording module records data transmission breakpoint information in real time and accurately, the data verification module uses a multi-verification mechanism to verify the transmitted data in real time, and the power management module continuously monitors the vehicle's power status.

[0011] When the vehicle experiences a power outage, the backup power supply is activated instantly, and all functional modules safely save their current state and enter intelligent sleep mode.

[0012] The moment the vehicle's power is restored, the power management module wakes up all functional modules, accurately resumes data transmission based on breakpoint information, and intelligently retransmits erroneous data blocks when data verification fails.

[0013] After the upgrade is completed, the status feedback module sends an upgrade completion notification to the vehicle's central control system and other related systems, and each functional module returns to its initial standby state.

[0014] Secondly, the present invention provides a vehicle OTA upgrade system, comprising:

[0015] The multi-dimensional information tagging module is used to acquire and record the vehicle's driving status information and the operating parameters of each domain system, and to analyze and determine upgrade requirements.

[0016] The breakpoint recording module is used to initialize the memory during the initialization phase and record breakpoint information in real time during the data transmission phase.

[0017] The communication protocol module is used to load extended protocols and dynamically adjust protocol parameters.

[0018] The power management module is used to check the backup power supply, monitor the power status, and start the backup power supply when the main power supply fails.

[0019] The data verification module is used to perform real-time verification of transmitted data.

[0020] The error handling and monitoring module is used to monitor various errors during the upgrade process in real time and take appropriate measures.

[0021] The status feedback module is used to push upgrade progress, key node prompts and other information in real time, and send upgrade results, upgrade comparison and operation guidance information to users after the upgrade is completed.

[0022] The vehicle OTA upgrade method and system provided by this invention have the following beneficial effects:

[0023] 1. This vehicle OTA upgrade method introduces a breakpoint resume mechanism and power management strategy, which enables the vehicle to accurately locate the breakpoint when the OTA seamless upgrade process is unexpectedly interrupted. When the upgrade conditions are restored, it automatically resumes the transmission of the remaining data from the last interruption point. At the same time, with the help of multiple data verification and error handling monitoring modules, data loss and duplicate transmission are effectively avoided. While ensuring the integrity and stability of the OTA upgrade, the upgrade efficiency is also greatly improved.

[0024] 2. This vehicle OTA upgrade system has a status feedback function, which pushes information such as upgrade progress, estimated completion time and key node prompts to users in real time, so that users can know the entire upgrade process. When encountering complex upgrade problems, users can activate the remote assistance function, and professional engineers will provide remote technical support to optimize the user upgrade experience. Attached Figure Description

[0025] Figure 1 This is a flowchart illustrating the vehicle OTA upgrade method provided in an embodiment of the present invention;

[0026] Figure 2 This is a schematic diagram of the vehicle OTA upgrade system provided in an embodiment of the present invention. Detailed Implementation

[0027] To enable those skilled in the art to better understand the present invention, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Those skilled in the art will understand that the present application can also be implemented in other embodiments without these specific details. In the description of this application, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obstruct the description of this application with unnecessary details.

[0028] Those skilled in the art will understand that, without conflict, the features in the following embodiments and implementations can be combined with each other.

[0029] Please see Figure 1 This invention provides a vehicle OTA upgrade method, which specifically includes the following steps:

[0030] S1. Respond to the upgrade command, obtain the OTA upgrade package, and the multi-dimensional information marking module obtains and records real-time vehicle information.

[0031] When the vehicle is in an area with good network coverage, the owner receives an OTA upgrade prompt in the vehicle's infotainment system. After confirming the upgrade, the system generates an upgrade command and sends it to the vehicle's OTA master control unit. The OTA master control unit establishes a connection with the vehicle manufacturer's OTA server via the vehicle's communication module, verifies the vehicle's identity and upgrade permissions, and then downloads the corresponding OTA upgrade package from the server. After downloading, the OTA master control unit performs an integrity check on the upgrade package to ensure it has not been tampered with and is complete and error-free.

[0032] In this embodiment, the multi-dimensional information tagging module begins operation simultaneously with the activation of the seamless upgrade mode. This module acquires real-time vehicle driving status information via the vehicle's sensor network and communication bus, including vehicle speed, acceleration, steering wheel angle, brake pedal status, gear information, and operating parameters of various system domains, such as engine or motor speed, torque, and temperature in the powertrain domain; suspension system height and shock absorber damping in the chassis domain; and the opening and closing status of doors, windows, and sunroof in the body domain. This information is recorded in real-time in the vehicle's cache storage area for subsequent reference during the upgrade process, ensuring that the upgrade operation matches the vehicle's actual operating status.

[0033] S2. In the seamless upgrade initialization phase, the breakpoint recording module performs a comprehensive initialization configuration of the storage medium, the communication protocol module loads the adaptive extension protocol, and the power management module performs a comprehensive detection and pre-configuration of the backup power supply.

[0034] In this embodiment, the breakpoint recording module performs a comprehensive initialization configuration of the non-volatile storage medium used by the vehicle to store upgrade data. This includes checking the health status of the storage medium, identifying and marking areas that may contain bad blocks to avoid using these unreliable areas during data transmission and writing; initializing the file system of the storage medium, creating a directory structure and file index for storing upgrade data, and ensuring that data can be written and read in an orderly manner.

[0035] The communication protocol module loads an adaptive extension protocol based on the vehicle's current network environment and communication needs. For example, if the vehicle is currently in a 4G network environment and the network signal strength and stability fluctuate, the communication protocol module will automatically adjust protocol parameters, such as data transmission rate, retransmission mechanism, and error correction coding, to optimize data transmission performance and ensure that upgraded data packets can be transmitted stably and efficiently under complex network conditions.

[0036] Preferably, in another embodiment, the communication protocol module loading the adaptive extension protocol may include: first, interacting with the target controller by sending a protocol probe command, parsing the response data returned by the target controller, and identifying the communication protocol version supported by the target controller; based on the identified protocol version, dynamically loading the corresponding specific data frame structure, identifier encoding rules, and control command set from the protocol library to ensure the compatibility of the data transmission format; simultaneously, based on the vehicle's network architecture, the communication protocol module establishes a virtual communication channel in the in-vehicle communication network to isolate the upgrade data from the vehicle's normal business data, preventing the upgrade process from interfering with the normal operation of the vehicle and ensuring the security and stability of data transmission.

[0037] In this embodiment, the vehicle is equipped with a backup power supply. During the upgrade initialization phase, the power management module performs a comprehensive test on the backup power supply. This test includes parameters such as the backup power supply's power status, charging / discharging performance, and internal resistance, ensuring that the backup power supply can function normally when the vehicle's main power supply is interrupted. After the test, the power management module pre-configures the backup power supply, such as adjusting its output voltage and current, to match the power consumption requirements of the vehicle's various functional modules during power outages, hibernation, and wake-up. Preferably, when the power management module detects that the main power supply is about to be cut off, the backup power supply quickly starts, providing stable power to the OTA master controller, the upgraded controller, and the communication protocol module for at least 60 seconds, ensuring that each module has sufficient time to orderly save its working status information.

[0038] S3. During the seamless upgrade data transmission phase, the OTA main control unit sends upgrade data packets based on the network adaptive algorithm. The breakpoint recording module records data transmission breakpoint information in real time and accurately. The data verification module uses a multi-verification mechanism to verify the transmitted data in real time. The power management module continuously monitors the vehicle's power status.

[0039] In this embodiment, during the data transmission phase, the OTA master control unit dynamically adjusts the upgrade data packet sending strategy using a network adaptive algorithm based on the network status information fed back by the communication protocol module. For example, when the network signal is good and bandwidth is sufficient, the OTA master control unit increases the data transmission rate to speed up the upgrade process; if the network signal is weak or congestion occurs, the OTA master control unit reduces the transmission rate and increases the number of data packet retransmissions and error correction redundancy to ensure the accuracy of data transmission. Preferably, the OTA master control unit can adopt a block transmission method, dividing the OTA upgrade packet into multiple data blocks according to certain packet division rules and sending them to the controller being upgraded.

[0040] During data transmission, the breakpoint recording module records breakpoint information in real time at a high frequency, including key information such as the size of the transmitted data, the sequence number of the data packet, and the current upgrade progress, and stores this information in the initialized memory. Preferably, in another embodiment, the breakpoint recording module performs real-time and accurate recording based on data frames. The breakpoint position is updated once every 10 data frames are successfully transmitted, and the breakpoint information, such as the cumulative number of transmitted data frames, the position offset of the data frame in the entire upgrade data sequence, and the corresponding data frame content summary, is stored in a non-volatile memory area shared by the OTA master controller and the upgraded controller using a dual-write mechanism.

[0041] Upon receiving each upgrade data block, the data verification module immediately employs a multi-factor verification mechanism to verify the integrity and accuracy of the data block. In this embodiment, a dual verification mechanism combining CRC check and hash check is used. Preferably, each data frame is first subjected to CRC check, and then a hash check is performed on every 100 data frames forming a data block. If an error is found during the verification of a data block, the data verification module will further perform CRC check on each of the 100 data frames within that data block. Once an erroneous data frame is identified, an error report is immediately sent to the OTA master control unit, requesting a retransmission of the data packet. Simultaneously, the data verification module also caches and organizes the successfully verified data for secondary verification and integration before subsequent writing to the controller storage medium.

[0042] Meanwhile, during data transmission, the power management module monitors the voltage, current, and other parameters of the vehicle's main power supply, as well as the power level and connection status of the backup power supply in real time. Once an abnormal drop in the main power supply voltage or signs of power interruption are detected, the power management module immediately initiates the backup power switching process, ensuring that all vehicle functional modules switch to backup power supply in a very short time, preventing data loss or equipment damage due to main power failure. During backup power supply, the power management module continuously monitors the backup power supply's power consumption. When the power level falls below a certain threshold, it promptly sends a notification to the vehicle's alarm system, reminding the owner to check the vehicle's power system as soon as possible.

[0043] S4. When the vehicle loses power, the backup power supply is activated instantly, and each functional module safely saves its current state and enters intelligent sleep mode.

[0044] When the main power supply is interrupted during vehicle upgrades due to unforeseen circumstances (such as the owner suddenly locking the door and leaving the vehicle, or an emergency power outage caused by a collision), the power management module immediately triggers the backup power activation circuit upon detecting a sudden drop in the main power voltage, connecting the backup power supply to the vehicle's power network. Simultaneously, the power management module sends a power outage notification signal to each functional module. Upon receiving the notification, each functional module immediately performs a state saving operation, storing its current operating state, breakpoint information, and other relevant data in non-volatile memory, and then enters intelligent sleep mode. In intelligent sleep mode, the power consumption of each functional module is minimized, maintaining only the necessary wake-up detection circuitry to await the wake-up operation after the vehicle's power supply is restored.

[0045] S5. The moment the vehicle's power supply is restored, the power management module wakes up all functional modules, accurately resumes data transmission based on breakpoint information, and intelligently retransmits erroneous data blocks when data verification fails.

[0046] When the vehicle's power is restored, the power management module first detects the power restoration signal and immediately sends wake-up commands to all functional modules. In this embodiment, after being woken up, the data verification module first reads the previously recorded breakpoint information, including the breakpoint location stored in non-volatile memory, the checksum of the transmitted data, etc. Then, based on this breakpoint information, it re-verifies the transmitted data, employing the same dual verification mechanism as the data transmission phase to ensure data integrity and consistency. If the data verification passes, it immediately establishes communication with the OTA master control unit, confirms the start point of the resume transmission, and sends a resume transmission ready signal to it, thereby continuing to transmit the remaining upgrade data; if the data verification fails, the data verification module accurately locates the position of the erroneous data frame, requests the OTA master control to retransmit the data block from that position, and repeats the data verification process after power restoration until the data verification passes, then continues to transmit the remaining upgrade data.

[0047] During data transmission, the error handling monitoring module monitors communication errors in real time, such as data transmission errors and communication link failures. Upon detecting an error, it immediately takes appropriate measures, such as requesting the OTA master control to retransmit the erroneous data block or repairing the communication link, to ensure the continuity and reliability of data transmission. Preferably, in another implementation, when the error handling monitoring module detects a communication error during transmission, it first retransmits the erroneous data frame. If three consecutive retries fail, the module automatically switches to a backup communication channel for data transmission. If transmission still fails, the data transmission rate is reduced, and the transmission is attempted again. If five retries using different strategies still fail, the transmission operation is paused, a detailed error report is sent to the vehicle's central control unit, and feedback is simultaneously sent to a remote server for remote diagnosis and handling by technicians.

[0048] Preferably, during the retransmission process, the communication protocol module automatically adjusts the parameters and strategies of the communication protocol based on the current communication environment and network conditions, such as adjusting the data transmission rate, in order to improve the efficiency and stability of data transmission and accelerate the upgrade process.

[0049] S6. After the upgrade is completed, the status feedback module sends an upgrade completion notification to the vehicle's central control system and other related systems, and each functional module is restored to its initial standby state.

[0050] The upgrade process is complete once all upgrade data blocks have been successfully transmitted, verified, and written to the storage medium of the upgraded controller. The status feedback module sends an upgrade completion notification to the vehicle's central control system and other relevant systems, including upgrade results, upgrade time, post-upgrade operation instructions, and precautions. Simultaneously, all functional modules return to their initial standby state; the breakpoint recording module clears previously recorded breakpoint information; the communication protocol module restores its default protocol configuration and closes the virtual communication channel; and the OTA master control unit sends a command to the file management system to delete all temporary upgrade files on the storage medium, freeing up storage space.

[0051] Please see Figure 2 The present invention also provides a vehicle OTA upgrade system, including a driving status monitoring module, a multi-dimensional information marking module, a breakpoint recording module, a communication protocol module, a power management module, and other functional modules. These modules work together in the above method embodiments to complete the upgrade, as detailed below:

[0052] The multi-dimensional information labeling module 10 continuously acquires dynamic information such as vehicle speed, direction, acceleration and deceleration in real time by connecting to vehicle sensors and communication networks. It also collects system operating parameters from various domains, such as the power domain and body domain, and comprehensively judges the vehicle's driving status and whether it meets the upgrade conditions to analyze and determine upgrade requirements.

[0053] Breakpoint recording module 20: During the upgrade initialization phase, this module initializes and configures the storage medium, including scanning the health status and allocating storage space; during the data transmission phase, it records the transmission information of each data block in real time and stores the breakpoint information in non-volatile memory according to the preset recording rules.

[0054] In another implementation, the module can employ a redundancy backup mechanism to record breakpoint information in multiple different storage locations or storage media, preventing breakpoint information loss and improving the reliability of breakpoint recording.

[0055] Communication Protocol Module 30: This module is used to load extended protocols and dynamically adjust protocol parameters. It selects and loads extended protocols suitable for the current vehicle network environment and upgrade task requirements from the protocol library, monitors changes in the communication environment in real time, such as network bandwidth, signal strength, communication latency, and other parameters, and automatically adjusts the parameters and strategies of the communication protocol based on these changes, such as adjusting the data transmission rate and selecting a more suitable communication channel.

[0056] Power Management Module 40: This module monitors the power status, including the main power supply and the backup power supply. When the main power supply is abnormal, this module immediately activates the backup power supply and sends a power outage signal to other functional modules to prepare for hibernation mode. Simultaneously, the power management module is also responsible for waking up each module in a specific order and timing when power is restored, ensuring the system can smoothly return to normal operation.

[0057] Data verification module 50: This module performs real-time verification of transmitted data. In this embodiment, the module employs a dual verification mechanism to ensure the integrity and accuracy of the data from different dimensions. Simultaneously, this module controls the start, stop, and data flow of the verification process, and feeds back the verification results to the OTA main control unit and the error handling monitoring module.

[0058] Error handling monitoring module 60: This module is used to monitor various errors in the upgrade process in real time and take handling measures, including data transmission errors and communication failures. Once an error is detected, corresponding handling measures will be taken according to the error type and severity.

[0059] Status Feedback Module 70: This module is used to collect and integrate information such as upgrade progress, breakpoint location, data verification results, communication status, and power status in real time and provide feedback to the user. Preferably, this module can push upgrade progress bars, estimated remaining time, key node prompts, and other information in real time through channels such as the vehicle's central control screen and mobile software. After the upgrade is completed, it will provide a detailed list of upgrade results, a comparison of the old and new versions, and a list of function changes, comprehensively informing the user.

[0060] In another implementation, the vehicle OTA upgrade system can be designed with a remote assistance module. This module connects to a remote server via a secure communication tunnel in case of upgrade anomalies or complex upgrade problems, allowing authorized professional engineers to monitor and remotely adjust parameters in real time, ensuring a smooth upgrade. Simultaneously, it fully records all operations performed during the remote assistance process, generating detailed log files.

[0061] Other technical features of this vehicle OTA upgrade system are the same as those disclosed in the above-described vehicle OTA upgrade method embodiments, and will not be repeated here.

[0062] It should be noted that the above are only preferred embodiments of the present invention; it should be noted that for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A vehicle OTA upgrade method, in response to an upgrade command, obtaining an OTA upgrade package, characterized in that, The seamless upgrade mode includes the following steps: The multi-dimensional information tagging module acquires and records the vehicle's real-time driving status information and the operating parameters of each domain system; During the initialization phase, the breakpoint recording module performs a comprehensive initialization configuration of the storage medium, the communication protocol module loads the adaptive extension protocol, and the power management module performs a comprehensive detection and pre-configuration of the backup power supply. During the data transmission phase, the OTA master control unit sends upgrade data packets based on the network adaptive algorithm, the breakpoint recording module records data transmission breakpoint information in real time and accurately, the data verification module uses a multi-verification mechanism to verify the transmitted data in real time, and the power management module continuously monitors the vehicle's power status. When the vehicle experiences a power outage, the backup power supply is activated instantly, and all functional modules safely save their current state and enter intelligent sleep mode. The moment the vehicle's power is restored, the power management module wakes up all functional modules, accurately resumes data transmission based on breakpoint information, and intelligently retransmits erroneous data blocks when data verification fails. After the upgrade is completed, the status feedback module sends an upgrade completion notification to the vehicle's central control system and related systems, and each functional module is restored to its initial standby state.

2. The vehicle OTA upgrade method according to claim 1, characterized in that, In the initialization phase, the communication protocol module loads the adaptive extension protocol, including: Identify the communication protocol versions supported by the target controller; Dynamically load the corresponding protocol parameters and instruction sets according to the protocol version; Establish a virtual communication channel to isolate upgrade data from normal business data.

3. The vehicle OTA upgrade method according to claim 1, characterized in that, The backup power source is a supercapacitor. The power management module detects the backup power source by: detecting the remaining power of the backup power source; detecting the switching response time between the backup power source and the main power source; and detecting the output voltage stability of the backup power source.

4. The vehicle OTA upgrade method according to claim 1, characterized in that, During the data transmission phase, the breakpoint recording module records data in real time and accurately, using data frames as the basic unit. The breakpoint position is updated once every fixed number of data frames transmitted, and the breakpoint information is stored in the OTA main controller and non-volatile memory area using a dual-write mechanism.

5. A vehicle OTA upgrade method according to claim 1, characterized in that, The multi-verification mechanism includes CRC verification and hash verification, and the verification is performed once every preset time interval.

6. A vehicle OTA upgrade method according to claim 1, characterized in that, After the vehicle's power is restored, the following operations are performed: The power management module wakes up each module and restores it from sleep state to working state; The data verification module reads the stored breakpoint information and re-verifies the transmitted data. If the data verification passes, the remaining upgrade data is transmitted from the breakpoint. The error handling monitoring module monitors errors during transmission in real time. If a data verification error occurs, the error handling monitoring module will be activated immediately and an intelligent retransmission strategy will be adopted.

7. A vehicle OTA upgrade method according to claim 1, characterized in that, Also includes: When an interruption is detected during the upgrade process, the status feedback module obtains the interruption information and generates an interruption reminder command according to preset rules; Under the preset conditions of continued transmission, the data to be upgraded is determined based on the interruption information, and the upgrade task is continued from the point of the last interruption. The preset conditions for continued transmission include network connection stability reaching a preset standard, vehicle power status being stable within a preset voltage and current range, and the integrity verification of the transmitted data passing.

8. A vehicle OTA upgrade method according to claim 1, characterized in that, After the upgrade is completed, perform the following operations: The status feedback module sends notification information including: an upgrade completion animation and operation instructions, upgrade time, and verification results; Delete temporary upgrade files and reclaim storage space; Close the virtual communication channel to release network resources; Reset the breakpoint recording module to clear historical breakpoint information.

9. A vehicle OTA upgrade system, characterized in that, include: The multi-dimensional information tagging module is used to acquire and record the vehicle's driving status information and the operating parameters of each domain system, and to analyze and determine upgrade requirements. The breakpoint recording module is used to initialize the memory during the initialization phase and record breakpoint information in real time during the data transmission phase. The communication protocol module is used to load extended protocols and dynamically adjust protocol parameters. The power management module is used to check the backup power supply, monitor the power status, and start the backup power supply when the main power supply fails. The data verification module is used to perform real-time verification of transmitted data. The error handling and monitoring module is used to monitor various errors during the upgrade process in real time and take appropriate measures. The status feedback module is used to push upgrade progress and key node prompts in real time, and send upgrade results, upgrade comparisons and operation guidance information to users after the upgrade is completed.

10. A vehicle OTA upgrade system according to claim 9, characterized in that, It also includes a remote assistance module, which connects to a remote server via a secure communication tunnel in case of upgrade anomalies, authorizes remote engineers to adjust upgrade parameters in real time, and fully records the operation behavior during the remote assistance process, generating detailed log files.

Images