Control method, device and equipment for remote upgrade of vehicle and medium

Abstract

The invention provides a vehicle remote upgrade control method, device and equipment and a medium, and the control method comprises the steps: receiving a remote upgrade package, and calculating the total upgrade duration based on the remote upgrade package; obtaining the current electric quantity of the storage battery, and calculating the power supply duration of the storage battery based on the current electric quantity; judging whether an upgrading condition is met or not based on the total upgrading duration, the power supply duration and the state of the high-voltage battery; when the upgrading condition is met, executing a flash upgrading operation: transmitting the first upgrading sub-package to the corresponding non-Ethernet controller for flash upgrading; and after all the non-Ethernet controllers finish flashing and upgrading, controlling the high-voltage battery to charge the storage battery, and transmitting the second upgrading sub-package to the corresponding Ethernet controller for flashing and upgrading. By means of the control method, device and equipment for vehicle remote upgrading and the medium, the technical problem of storage battery feed caused by vehicle remote upgrading is solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the field of vehicles, in particular to a vehicle remote upgrade control method, device, equipment and medium. BACKGROUND

[0002] With the development of automobile electrification and intelligence, the number of vehicle controllers increases and the complexity of functions improves. Remote upgrade (FOTA) has become an important indicator of intelligent electric vehicles. The existing FOTA process is usually completed in a low-voltage state of the vehicle and highly depends on the power supply capability of the low-voltage storage battery.

[0003] The traditional scheme lacks management of low-voltage energy, and the upgrade process completely depends on the storage battery power. The following limitations exist: the energy supply cannot be actively managed during the upgrade process, the high-voltage and low-voltage cooperative mechanism is not considered, and only the static capacity of the storage battery is relied on to support the whole upgrade. The storage battery feeding may cause upgrade failure or vehicle breakdown, and the user experience and vehicle safety are difficult to guarantee. Therefore, there is room for improvement. SUMMARY

[0004] The present application provides a vehicle remote upgrade control method, device, equipment and medium to solve the technical problem of storage battery feeding caused by vehicle remote upgrade.

[0005] The present application provides a vehicle remote upgrade control method applied to a vehicle, wherein the vehicle includes an Ethernet controller, a non-Ethernet controller, a high-voltage battery, a direct-current voltage converter, and a storage battery. The high-voltage battery charges the storage battery through the direct-current voltage converter, and the storage battery supplies power to the Ethernet controller and the non-Ethernet controller. The control method includes: receiving a remote upgrade package, calculating the total upgrade time based on the remote upgrade package; the remote upgrade package includes a first upgrade subpackage and a second upgrade subpackage; obtaining the current power of the storage battery and calculating the power supply time of the storage battery based on the current power; judging whether the upgrade condition is met based on the total upgrade time, the power supply time, and the state of the high-voltage battery; when the upgrade condition is met, performing a flash upgrade operation: transmitting the first upgrade subpackage to the corresponding non-Ethernet controller for flash upgrade; after all the non-Ethernet controllers complete the flash upgrade, controlling the high-voltage battery to charge the storage battery and transmitting the second upgrade subpackage to the corresponding Ethernet controller for flash upgrade.

[0006] In an embodiment of the present application, judging whether the upgrade condition is met based on the total upgrade time, the power supply time, and the state of the high-voltage battery includes: determining whether the total upgrade duration, the power supply duration and the state of the high-voltage battery satisfy an upgrade condition based on a preset upgrade duration threshold value: When the total upgrade duration is less than the upgrade duration threshold value, it is determined whether the total upgrade duration, the power supply duration and the state of the high-voltage battery satisfy an upgrade condition; Otherwise, the upgrade condition is not satisfied, and the remote upgrade is stopped.

[0007] In an embodiment of the present application, the determination of whether the total upgrade duration, the power supply duration and the state of the high-voltage battery satisfy an upgrade condition comprises: determining whether the total upgrade duration and the power supply duration satisfy an upgrade condition; When the total upgrade duration is greater than the power supply duration, the battery power is abnormal, the upgrade condition is not satisfied, and the remote upgrade is stopped; When the total upgrade duration is less than or equal to the power supply duration, it is determined whether the upgrade condition is satisfied according to the state of the high-voltage battery.

[0008] In an embodiment of the present application, the control method further comprises: when the battery power is abnormal, controlling the high-voltage battery to charge the battery; The power of the battery is monitored in real time, and the real-time power supply duration of the battery is calculated; When the real-time power supply duration is greater than or equal to the total upgrade duration, it is determined whether the upgrade condition is satisfied according to the state of the high-voltage battery.

[0009] In an embodiment of the present application, the determination of whether the upgrade condition is satisfied according to the state of the high-voltage battery comprises: The state of the high-voltage battery is acquired in real time; When the high-voltage battery is in a charging state, the high-voltage battery is controlled to exit the charging state, and after exiting the charging state, the DC voltage converter is tested, and when the test is passed, the upgrade condition is satisfied; When the high-voltage battery is in a non-charging state, the DC voltage converter is tested, and when the test is passed, the upgrade condition is satisfied.

[0010] In an embodiment of the present application, the transmission of the first upgrade sub-packet to the corresponding non-Ethernet controller for flash upgrade comprises: The first upgrade sub-packet is transmitted to the corresponding non-Ethernet controller for flash upgrade, and the upgrade state of the non-Ethernet controller is acquired in real time; When the upgrade states of all non-Ethernet controllers are complete upgrade, all non-Ethernet controllers are controlled to restart, and the restart states of all non-Ethernet controllers are acquired in real time; After the restart of all non-Ethernet controllers is completed, it is determined that the flash upgrade of all non-Ethernet controllers is completed.

[0011] In an embodiment of the present application, after the upgrade of all non-Ethernet controllers is completed, the high-voltage battery is controlled to charge the storage battery, and the second upgrade sub-packet is transmitted to the corresponding Ethernet controller for upgrade. After the upgrade of all non-Ethernet controllers is completed, the high-voltage battery is controlled to charge the storage battery through the DC voltage converter. During the charging of the storage battery, the second upgrade sub-packet is transmitted to the corresponding Ethernet controller for upgrade. The upgrade state of the Ethernet controller is monitored in real time. After the upgrade of all Ethernet controllers is completed, the high-voltage battery is controlled to stop charging the storage battery through the DC voltage converter.

[0012] The present application also provides a control device for remote upgrade of a vehicle, which applies the control method for remote upgrade of a vehicle. The receiving processing module is configured to receive a remote upgrade packet, and calculate a total upgrade duration based on the remote upgrade packet; the remote upgrade packet comprises a first upgrade sub-packet and a second upgrade sub-packet. The acquisition processing module is configured to acquire a current power of the storage battery, and calculate a power supply duration of the storage battery based on the current power. The condition judging module is configured to judge whether an upgrade condition is met based on the total upgrade duration, the power supply duration, and the state of the high-voltage battery. The upgrade control module is configured to perform an upgrade operation when the upgrade condition is met: transmit the first upgrade sub-packet to the corresponding non-Ethernet controller for upgrade; after the upgrade of all non-Ethernet controllers is completed, control the high-voltage battery to charge the storage battery, and transmit the second upgrade sub-packet to the corresponding Ethernet controller for upgrade.

[0013] The present application also provides an electronic device, which comprises a memory, a processor, and a computer program stored in the memory and executable on the processor; when the processor executes the computer program, the steps of the control method for remote upgrade of a vehicle are implemented.

[0014] The present application also provides a computer readable storage medium, which stores a computer program; when the computer program is executed by a processor, the steps of the control method for remote upgrade of a vehicle are implemented.

[0015] The beneficial effects of the present application: by introducing the synergistic mechanism of high-voltage battery and DC voltage converter for charging the battery, the continuity of energy supply is ensured when upgrading the Ethernet controller which takes a long time and needs a large amount of power, and the risk of upgrade failure or vehicle breakdown caused by battery power supply is fundamentally prevented. By calculating the total upgrade time and the power supply time of the battery before upgrading, and making intelligent judgment based on the state of the high-voltage battery, the actual installation time is strictly controlled within the available time of the battery, avoiding the damage of vehicle high-voltage system components caused by low-voltage abnormal power failure during the upgrading process. BRIEF DESCRIPTION OF DRAWINGS

[0016] The drawings incorporated into the specification and forming a part thereof, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the application. It is to be expressly understood, however, that the drawings are included herein for illustrative purposes only and do not represent a limitation of the application. Upon careful consideration of the following detailed description of certain embodiments of the application, one skilled in the art can readily devise other ways and means of practicing the application without departing from the scope of the application as set forth in the claims.

[0017] In the drawings: Figure 1 The flow chart of the control method of vehicle remote upgrade provided by an embodiment of the present application; Figure 2 The schematic diagram of the vehicle provided in an embodiment of the present application; Figure 3 The schematic diagram of the control device of vehicle remote upgrade provided in an embodiment of the present application; Figure 4 The schematic diagram of the electronic device provided in an embodiment of the present application.

[0018] The reference signs are as follows: 10, battery sensor; 20, Ethernet controller; 30, FOTA main controller; 40, non-Ethernet controller; 50, high-voltage battery; 60, DC voltage converter; 70, battery; 100, receiving processing module; 200, acquisition processing module; 300, condition judgment module; 400, upgrade control module; 500, electronic device; 510, memory; 520, processor. DETAILED DESCRIPTION

[0019] The following specific examples illustrate the implementation of the present invention. Those skilled in the art can easily understand other advantages and effects of the present invention from the content disclosed in this specification. The present invention can also be implemented or applied through other different specific embodiments. Various details in this specification can also be modified or changed based on different viewpoints and applications without departing from the spirit of the present invention. In the absence of conflict, the following embodiments and features in the embodiments can be combined with each other.

[0020] It should be noted that the illustrations provided in the following embodiments are only schematic representations of the basic concept of the present invention. The drawings only show the components related to the present invention and are not drawn according to the actual number, shape and size of the components in the actual implementation. In the actual implementation, the form, quantity and proportion of each component can be arbitrarily changed, and the layout of the components may also be more complex.

[0021] In the following description, numerous details are explored to provide a more thorough explanation of embodiments of the invention. However, it will be apparent to those skilled in the art that embodiments of the invention may be practiced without these specific details. In other embodiments, well-known structures and devices are shown in block diagram form rather than in detail to avoid obscuring embodiments of the invention.

[0022] Please see Figure 1 and Figure 2 This invention discloses a control method for remote vehicle upgrades. The control method can be applied to a vehicle, which may include an Ethernet controller 20, a non-Ethernet controller 40, a high-voltage battery 50, a DC-DC converter 60, and a storage battery 70. The high-voltage battery 50 can charge the storage battery 70 through the DC-DC converter 60. The storage battery 70 can supply power to the Ethernet controller 20 and the non-Ethernet controller 40. The control method can perform flashing upgrades on the vehicle's Ethernet controller 20 and non-Ethernet controller 40. The control method may include the following steps: Step S10: Receive a remote upgrade package and calculate the total upgrade time based on the remote upgrade package; the remote upgrade package includes a first upgrade sub-package and a second upgrade sub-package.

[0023] Please see Figure 2 In some embodiments, during the initial stage of the vehicle remote upgrade process, the FOTA master controller 30, responsible for coordinating the entire upgrade process, can establish a secure data connection with the cloud server via an in-vehicle wireless communication module (such as a 4G / 5G module) or through a user device such as a smartphone, and receive a complete remote upgrade package issued by the cloud server. The remote upgrade package refers to an encrypted and compressed data set containing all the necessary data for software updates of multiple controllers within the vehicle.

[0024] In some embodiments, the remote upgrade package can be composed of multiple independent upgrade sub-packages, each of which is specially designed for a specific controller inside the vehicle, containing the firmware image file, verification information and related flashing instruction sequence required for the controller. The types of upgrade sub-packages in the remote upgrade package can be divided into first upgrade sub-packages and second upgrade sub-packages, the first upgrade sub-packages can correspond to the non-Ethernet controller 40, and the second upgrade sub-packages can correspond to the Ethernet controller 20.

[0025] In some embodiments, after successfully receiving and completely verifying the remote upgrade package, the FOTA master controller 30 immediately starts the calculation process of the total upgrade time. The calculation process is based on the detailed analysis of each upgrade sub-package in the remote upgrade package. The FOTA master controller 30 reads the metadata information of each upgrade sub-package one by one, which can be pre-packaged in the sub-package header of the upgrade sub-package by the cloud server, recording the estimated time required for flashing the upgrade sub-package to its corresponding controller. The FOTA master controller 30 adds up the estimated flashing time of the upgrade sub-package of all identified controllers, while also fully considering the necessary network transmission time, preparation time for each controller to enter the flashing mode, verification time, and buffer time reserved for possible waiting and retry mechanism, and finally calculates the total upgrade time required to complete the entire remote upgrade task.

[0026] In some embodiments, the control method can further include the following steps: step S20, obtaining the current power of the battery, and calculating the power supply time of the battery based on the current power.

[0027] Please refer to Figure 2 In some embodiments, after the total upgrade time is calculated, the FOTA master controller 30 can monitor and evaluate the state of the battery 70. The FOTA master controller 30 obtains the latest real-time state data of the battery 70 through the battery sensor 10 monitoring the battery state through the CAN bus, LIN bus or private hard-wire communication inside the vehicle. The battery sensor 10 can feed back the raw parameters such as battery voltage, current and temperature collected by it to the FOTA master controller 30. The FOTA master controller 30 combines the built-in battery management algorithm to calculate the most accurate battery state of charge value (SOC), i.e. the current power.

[0028] In some embodiments, after successfully obtaining the value representing the current SOC of the battery, the FOTA master controller 30 does not directly use the percentage value, but uses it as a core input parameter to start a pre-set power supply duration estimation model. The power supply duration estimation model takes into account the rated capacity of the battery, the current SOH, the historical charge and discharge characteristic curve, and the real-time load current estimation value provided by the battery sensor 10, and calculates the time that the battery power can last from the current value to a set safety threshold (e.g., the minimum power threshold that guarantees that the key controllers of the vehicle do not lose power) under the assumption that the battery is continuously discharged at the current static power consumption or the average power consumption during the predicted upgrade. The calculated time is the power supply duration of the battery 70. The power supply duration represents the upper limit of the time that the battery 70 can independently support the normal operation of the entire vehicle low-voltage system without any additional charging under the current state.

[0029] In some embodiments, the control method can further include the following step: step S30, determining whether the upgrade condition is met based on the total upgrade duration, the power supply duration, and the state of the high-voltage battery.

[0030] In some embodiments, when step S30 is performed, specifically, step S30 can include the following steps: determining the total upgrade duration based on the pre-set upgrade duration threshold: when the total upgrade duration is less than the upgrade duration threshold, determining whether the upgrade condition is met based on the total upgrade duration, the power supply duration, and the state of the high-voltage battery; otherwise, the upgrade condition is not met, and the remote upgrade is stopped.

[0031] In some embodiments, after obtaining the total upgrade duration and the power supply duration of the battery 70, the FOTA master controller 30 first compares the calculated total upgrade duration with a pre-stored upgrade duration threshold in the system, which is a safety value set according to a large number of experiments and experience, and is used to identify abnormal remote upgrade packages. For example, the upgrade duration threshold can be set to 2 / 3 / 4h, etc.

[0032] In some embodiments, if it is determined that the total upgrade duration is greater than or equal to the upgrade duration threshold, it indicates that the received remote upgrade package may be abnormal, and the required upgrade time exceeds a reasonable range, and continuing the upgrade may have a very high risk. At this time, the FOTA master controller 30 generates a remote upgrade package abnormal information indicating that the abnormal reason is the estimated long upgrade time, and feeds back to the cloud server or the vehicle human-machine interaction interface through the vehicle network, and at the same time terminates the upgrade process, so as to avoid various unpredictable faults that may be caused.

[0033] In some embodiments, if the total upgrade duration is less than the upgrade duration threshold, it indicates that the remote upgrade package is basically normal in the time dimension, and the FOTA master controller 30 can determine whether the upgrade condition is met based on the total upgrade duration, the power supply duration and the state of the high-voltage battery.

[0034] In some embodiments, when the FOTA master controller 30 determines whether the upgrade condition is met based on the total upgrade duration, the power supply duration and the state of the high-voltage battery, the step can include: determining the total upgrade duration and the power supply duration: When the total upgrade duration is greater than the power supply duration, the battery power is abnormal, the upgrade condition is not met, and the remote upgrade is stopped. When the total upgrade duration is less than or equal to the power supply duration, it is determined whether the upgrade condition is met according to the state of the high-voltage battery.

[0035] In some embodiments, if it is found that the total upgrade duration is greater than the power supply duration of the battery, it indicates that in the current state, the remaining power of the battery 70 is insufficient to support the completion of the entire upgrade process, and if the upgrade is forced, it is very likely that the low-voltage system of the vehicle will fail due to battery power loss before the upgrade is completed, resulting in upgrade failure and even vehicle controller disorder. At this time, the FOTA master controller 30 generates a battery power shortage information, points out that the current power cannot meet the upgrade requirement, and feeds it back through the same way, and at the same time, the upgrade process is suspended, which fundamentally eliminates the risk of upgrade failure caused by battery power supply.

[0036] In some embodiments, when the battery power is abnormal, the control method can further include the following steps: controlling the high-voltage battery to charge the battery; real-time monitoring the power of the battery and calculating the real-time power supply duration of the battery; When the real-time power supply duration is greater than or equal to the total upgrade duration, it is determined whether the upgrade condition is met according to the state of the high-voltage battery.

[0037] In some embodiments, when the battery power is abnormal, the FOTA master controller 30 does not immediately terminate the upgrade, but actively initiates remedial measures, controls the DC voltage converter 60 to enter the working state through the vehicle network and the non-Ethernet controller 40, and controls the high-voltage battery 50 to start charging the battery 70 through the DC voltage converter 60.

[0038] In some embodiments, while the charging process is ongoing, the FOTA master controller 30 periodically reacquires the battery power level from the battery sensor 10 at a certain frequency, and dynamically recalculates the real-time power supply duration of the battery 70 based on the latest battery power level, and continuously monitors the change of the real-time power supply duration. This real-time calculation and comparison process is continuously looped until the dynamically calculated real-time power supply duration of the battery 70 is greater than or equal to the total upgrade duration, which indicates that the battery power has been replenished to a safe level sufficient to complete the upgrade, and the FOTA master controller 30 can determine whether the upgrade condition is met according to the state of the high-voltage battery.

[0039] In some embodiments, when the FOTA master controller 30 performs the step of determining whether the upgrade condition is met according to the state of the high-voltage battery, the step can include: real-time acquiring the state of the high-voltage battery; when the high-voltage battery is in a charging state, controlling the high-voltage battery to exit the charging state, and after exiting the charging state, testing the DC voltage converter, and when the test is passed, the upgrade condition is met; when the high-voltage battery is in a non-charging state, testing the DC voltage converter, and when the test is passed, the upgrade condition is met.

[0040] In some embodiments, before performing the flash upgrade operation, to ensure that the state of the high-voltage system meets the requirements for safe upgrade, the FOTA master controller 30 first detects the current working state of the high-voltage battery 50 through the vehicle network, the non-Ethernet controller 40, specifically judges whether the high-voltage battery 50 is in a working mode of charging the vehicle, for example, in a state of connecting an external charging pile for AC charging or DC charging.

[0041] In some embodiments, if it is detected that the high-voltage battery 50 is in a charging state, the FOTA master controller 30 will immediately control the high-voltage battery 50 to exit the current charging mode through the vehicle network, the non-Ethernet controller 40.

[0042] In some embodiments, if the high-voltage battery 50 has successfully exited the charging state within a preset time, it indicates that it has entered a stable state of non-charging. Subsequently, the FOTA master controller 30 initiates a test process of the DC voltage converter 60, acquires the working state, output voltage and current, and other feedback signals of the DC voltage converter 60 through the related controller to verify that its function is normal, and only when the test is passed and it is confirmed that the DC voltage converter 60 can work normally, the subsequent flash upgrade operation is finally allowed to be performed.

[0043] In some embodiments, if the high-voltage battery 50 fails to exit the charging state within a preset time, it is determined that there is a fault, at which time the FOTA master controller 30 generates high-voltage battery fault information indicating that the fault reason is the inability to exit the charging state, and feeds back this information to the cloud server or the vehicle-mounted human-computer interaction interface, while terminating the entire upgrade process to prevent possible damage to the equipment caused by upgrading in an abnormal high-voltage state.

[0044] In some embodiments, when the FOTA master controller 30 performs a test on the DC voltage converter and the test passes, the step of meeting the upgrade condition can include: controlling the DC voltage converter to enter a working state; obtaining an output voltage of the DC voltage converter after the DC voltage converter enters the working state; determining whether the output voltage is within a preset valid voltage range; when the output voltage is within the preset valid voltage range, it is determined that the test passes, and the upgrade condition is met; when the output voltage is not within the preset valid voltage range, it is determined that the test fails, and the upgrade condition is not met.

[0045] In some embodiments, to verify whether the DC voltage converter 60 can normally work before remote upgrading to ensure the safety of energy supply, the FOTA master controller 30 can start a DC voltage converter 60 test process. The FOTA master controller 30 controls the DC voltage converter 60 to enter a working state through the vehicle internal network, thereby simulating the working state of charging the battery in the subsequent actual upgrading process.

[0046] In some embodiments, during the entire preset time test of the DC voltage converter 60 entering the working state, the FOTA master controller 30 continuously collects and obtains the output voltage actually output by the DC voltage converter 60 through the non-Ethernet controller 40.

[0047] In some embodiments, the FOTA master controller 30 compares and determines the obtained output voltage with a preset valid voltage range, which is defined according to the standard working voltage of the entire vehicle low-voltage electrical system and the allowable fluctuation tolerance. If all the collected output voltages are stably within the preset valid voltage range, it indicates that the DC voltage converter 60 is in good working condition and has normal performance output, and the FOTA master controller 30 thus determines that this functional test passes.

[0048] In some embodiments, if any of the collected output voltages during this period exceeds the preset valid voltage range, whether higher than the upper limit or lower than the lower limit, indicating that the DC voltage converter 60 has the risk of output abnormality or functional failure, the FOTA master controller 30 determines that this test fails. Once the test fails, the FOTA master controller 30 immediately generates a detailed voltage conversion failure information indicating the faulty device and abnormal phenomenon, and feeds back to the cloud server or the vehicle-mounted human-computer interaction interface through the vehicle-mounted network, and at the same time terminates all subsequent upgrade processes to ensure safety.

[0049] In some embodiments, by detecting the state of the high-voltage battery 50 and testing the DC voltage converter 60, software flashing can be avoided when the high-voltage battery 50 is in a non-stable charging condition, and the key energy conversion device DC voltage converter 60 is ensured to work normally, thereby greatly reducing the potential risks that the upgrade process may bring to the high-voltage system, and ensuring the reliability of the upgrade and the safety of the vehicle.

[0050] In some embodiments, the control method can further include the following steps: step S40, when the upgrade condition is met, performing the flashing upgrade operation: transmitting the first upgrade sub-package to the corresponding non-Ethernet controller for flashing upgrade; after all non-Ethernet controllers complete flashing upgrade, controlling the high-voltage battery to charge the storage battery, and transmitting the second upgrade sub-package to the corresponding Ethernet controller for flashing upgrade.

[0051] In some embodiments, when performing the step of transmitting the first upgrade sub-package to the corresponding non-Ethernet controller for flashing upgrade, the step can include: transmitting the first upgrade sub-package to the corresponding non-Ethernet controller for flashing upgrade, and acquiring the upgrade state of the non-Ethernet controller in real time; when the upgrade state of all non-Ethernet controllers is complete upgrade, controlling all non-Ethernet controllers to restart, and acquiring the restart state of all non-Ethernet controllers in real time; after all non-Ethernet controllers complete restarting, determining that all non-Ethernet controllers complete flashing upgrade.

[0052] In some embodiments, the non-Ethernet controller 40 refers to flashing through CAN bus, Lin bus, non-Ethernet bus, for example: door module controller, air conditioner controller, vehicle lamp controller, etc.

[0053] The Ethernet controller 20 refers to flashing through Ethernet bus, for example: entertainment system controller, vehicle body domain controller, intelligent driving domain controller, etc.

[0054] In some embodiments, the non-Ethernet controller 40 refers to a control unit that communicates through a traditional vehicle bus and completes software flashing, whose communication physical layer and data link layer mainly rely on CAN bus, Lin bus or other non-Ethernet type bus protocol. The non-Ethernet controller 40 can be responsible for implementing the basic functions and drive control of the vehicle, and the size of its software upgrade package is relatively small. The non-Ethernet controller 40 can include a door module controller responsible for controlling the vehicle door lock, window lifting and rearview mirror adjustment, an air conditioner controller responsible for managing the air conditioner compressor, air door motor, air blower and temperature sensor, and a vehicle light controller responsible for managing the opening and closing of high beam, low beam, daytime running light, turn signal and fog light.

[0055] In some embodiments, the FOTA master controller 30 first transmits the first upgrade sub-package that is strictly corresponding to the target non-Ethernet controller and has been pre-analyzed and verified, into the flash memory inside the non-Ethernet controller, through the corresponding non-Ethernet bus, such as CAN bus or Lin bus, according to the predetermined upgrade sequence, continuously and stably.

[0056] In some embodiments, during the whole data transmission process, the FOTA master controller 30 maintains close communication handshake with the non-Ethernet controller 40, and monitors and obtains the feedback of the flashing upgrade status in real time, which includes but is not limited to data receiving progress, verification result, erasing and programming status, etc., to ensure that the transmission and writing of each data package are accurate. This process is carried out sequentially for each controller, ensuring stable bus load until all non-Ethernet controllers 40 that need to be upgraded successfully receive and complete the flashing of their corresponding upgrade sub-packages.

[0057] In some embodiments, when it is monitored that the flashing upgrade status of all non-Ethernet controllers 40 is feedback as complete upgrade, the FOTA master controller 30 does not immediately end the process, but starts a synchronous restart phase. The FOTA master controller 30 controls all non-Ethernet controllers 40 that have just completed flashing to restart through the non-Ethernet bus, so that the internal processor of the non-Ethernet controller 40 is reset and reloads the new version of software program just flashed in, thereby ensuring that the new software can be completely initialized and put into operation, and finally completing the switching and updating of the whole software version.

[0058] In some embodiments, the FOTA master controller 30 continuously monitors and receives the restart status from each non-Ethernet controller 40 to confirm that each non-Ethernet controller 40 has successfully completed the hardware reset and reloaded the new version of software. When all non-Ethernet controllers 40 have completed the restart, it is determined that the upgrade of all non-Ethernet controllers 40 is completed. If there are some non-Ethernet controllers 40 that have not completed the restart within a preset time period, it is determined that the upgrade of these non-Ethernet controllers 40 has failed. At this time, the upgrade operation can be performed again on these non-Ethernet controllers 40 for a preset number of times until these non-Ethernet controllers 40 can be restarted normally, or the upgrade process is terminated.

[0059] In some embodiments, after the step of performing the upgrade of all non-Ethernet controllers 40 is completed, the step of controlling the high-voltage battery to charge the storage battery and transmitting the second upgrade sub-package to the corresponding Ethernet controller for upgrade can include: After the upgrade of all non-Ethernet controllers 40 is completed, the high-voltage battery is controlled to charge the storage battery through the DC voltage converter; During the charging of the storage battery, the second upgrade sub-package is transmitted to the corresponding Ethernet controller for upgrade; The upgrade status of the Ethernet controller is monitored in real time; After the upgrade of all Ethernet controllers is completed, the high-voltage battery is controlled to stop charging the storage battery through the DC voltage converter.

[0060] In some embodiments, the Ethernet controller 20 refers to a control unit that has a high-speed Ethernet communication interface and performs software upgrade operation through an Ethernet bus. The Ethernet controller 20 undertakes complex functions that require high-speed data interaction and massive data processing capability, and the size of the software upgrade package of the Ethernet controller 20 is usually very large. The Ethernet controller 20 can include an information entertainment system controller integrated with a central control display screen, an audio amplifier, a radio tuner, a navigation module, and a vehicle application, a body domain controller that is the core hub of the vehicle electronic and electrical architecture, integrates and manages multiple traditional ECU functions, and an intelligent driving domain controller that is responsible for processing sensor data such as cameras, radars, and lidar and executing advanced auxiliary driving algorithms.

[0061] In some embodiments, after confirming that all non-Ethernet controllers 40 have completed the restart, the FOTA master controller 30 can control the DC voltage converter 60 to enter the working state through the non-Ethernet controller 40, so as to control the high-voltage battery 50 to start working, and the high-voltage electric energy is converted into appropriate low-voltage electricity through the DC voltage converter 60, and the charging of the storage battery 70 is continued. This step is to provide sufficient and stable energy guarantee for the subsequent time-consuming Ethernet controller 20 upgrade, so as to prevent the failure caused by the depletion of the storage battery during the upgrade process.

[0062] In some embodiments, during the process that the DC voltage converter 60 is successfully started and the high-voltage battery 50 starts charging the storage battery 70, the FOTA master controller 30 starts to perform the flashing task of the Ethernet controller 20 in parallel. The FOTA master controller 30 efficiently and respectively transmits a plurality of second upgrade sub-packets prepared in advance and corresponding to each target Ethernet controller 20 to the corresponding Ethernet controller 20 through the high-speed Ethernet bus. The Ethernet controller 20 can be responsible for complex functions such as infotainment and advanced driving assistance, and the software package volume is large, and the transmission time is long.

[0063] In some embodiments, during the whole data transmission and flashing process, the FOTA master controller 30 keeps real-time communication with each Ethernet controller 20, and continuously monitors and collects the flashing upgrade states fed back by them. These state information includes data packet receiving progress, checksum verification result, flash programming state, etc., to ensure that the upgrade process of each controller is accurately and reliably pushed forward.

[0064] In some embodiments, when the FOTA master controller 30 confirms that all Ethernet controllers 20 have successfully completed the flashing upgrade through monitoring, the end work of the process is started. The FOTA master controller 30 controls the DC voltage converter 60 to exit the working state through the non-Ethernet controller 40, and controls the high-voltage battery 50 to stop charging the storage battery 70, so that the high-voltage system of the vehicle gradually exits the special working condition for providing energy for upgrading and returns to the normal state. In this way, the software update of all controllers is safely and efficiently completed, and the vehicle always maintains sufficient power during the whole process.

[0065] In some embodiments, for the non-Ethernet controller 40, the upgrade process is arranged first and is uniformly restarted after the upgrade to ensure the stability and consistency of the vehicle basic function controller. For the Ethernet controller 20 with a large software package, the upgrade process is arranged after all non-Ethernet controllers 40 successfully restart and recover functions, and the high-voltage battery charges the storage battery through the voltage converter during the upgrade period, to ensure the continuous and sufficient power supply, thereby effectively avoiding the risk of depletion of the storage battery due to long upgrade time, and ensuring the reliability of the upgrade.

[0066] It can be seen that, in the above scheme, by introducing the cooperative mechanism of high-voltage battery and DC voltage converter for charging the battery, the continuity of energy supply is ensured when upgrading the Ethernet controller with long upgrade time and large power demand, and the risk of upgrade failure or vehicle breakdown caused by battery power supply is fundamentally prevented. By calculating the total upgrade time and the power supply time of the battery before upgrading, and intelligently judging based on the state of the high-voltage battery, the actual installation time is strictly controlled within the available time of the battery, avoiding damage to vehicle high-voltage system components caused by low-voltage abnormal power failure during upgrading.

[0067] Referring to Figure 3 The application further discloses a control device for vehicle remote upgrading, and the control method can be applied to the control device. The control device can include a receiving processing module 100, a collection processing module 200, a condition judging module 300, and an upgrade control module 400.

[0068] In some embodiments, the receiving processing module 100 can be used to receive a remote upgrade package, and calculate a total upgrade time based on the remote upgrade package; the remote upgrade package includes a first upgrade sub-package and a second upgrade sub-package.

[0069] In some embodiments, the collection processing module 200 can be used to obtain a current power of the battery, and calculate a power supply time of the battery based on the current power.

[0070] In some embodiments, the condition judging module 300 can be used to judge whether an upgrade condition is met based on the total upgrade time, the power supply time, and a state of the high-voltage battery.

[0071] In some embodiments, the upgrade control module 400 can be used to perform a flashing upgrade operation when the upgrade condition is met: transmitting the first upgrade sub-package to a corresponding non-Ethernet controller for flashing upgrade; and after the flashing upgrade of all non-Ethernet controllers is completed, controlling the high-voltage battery to charge the battery, and transmitting the second upgrade sub-package to a corresponding Ethernet controller for flashing upgrade.

[0072] The specific limitations of the control device can be referred to the limitations of the control method in the above, which will not be repeated here. Each module in the control device can be realized by software, hardware, and a combination thereof, in whole or in part. Each module can be embedded in or independent of the memory in the electronic device in hardware form, or can be stored in the memory in the electronic device in software form, so as to be called and executed by the memory to perform the operations corresponding to each module.

[0073] Referring to Figure 4In some embodiments, the electronic device 500 can include a memory 510, a processor 520, and a bus, and can further include a computer program, such as the program of the control method for vehicle remote upgrading, stored in the memory 510 and executable on the processor 520.

[0074] In some embodiments, the memory 510 includes at least one type of readable storage medium, including a flash memory, a mobile hard disk, a multimedia card, a card-type memory (for example, an SD or DX memory, etc.), a magnetic memory, a magnetic disk, an optical disk, etc. The memory 510 can be an internal storage unit of the electronic device 500 in some embodiments, such as a mobile hard disk of the electronic device 500. The memory 510 can also be an external storage device of the electronic device 500 in other embodiments, such as a plug-in mobile hard disk, a smart media card (SMC), a secure digital (SD) card, a flash card, etc. equipped on the electronic device 500. Further, the memory 510 can include both an internal storage unit and an external storage device of the electronic device 500. The memory 510 can be used not only to store application software and various data installed on the electronic device 500, such as the code of the control method for vehicle remote upgrading, but also to temporarily store data that has been output or will be output.

[0075] In some embodiments, the processor 520 can be composed of an integrated circuit, such as a single packaged integrated circuit or a plurality of packaged integrated circuits with the same or different functions, including one or more central processing units (CPUs), microprocessors, digital processing chips, graphics processors, and combinations of various control chips, etc. The processor 520 is the control unit of the electronic device 500, which connects all components of the electronic device 500 through various interfaces and lines, executes or runs programs or modules stored in the memory 510 (such as the program of the control method for vehicle remote upgrading), and calls data stored in the memory 510 to perform various functions and process data of the electronic device 500.

[0076] In some embodiments, the processor 520 executes an operating system of the electronic device 500 and various installed application programs. The processor 520 executes the application programs to implement the steps in the control method for vehicle remote upgrading described above.

[0077] In some embodiments, the computer program can be segmented into one or more modules, one or more modules are stored in the memory 510 and executed by the processor 520 to complete the present application. One or more modules can be a series of computer program instruction segments capable of completing a specific function, which are used to describe the execution process of the computer program in the electronic device 500. For example, the computer program can be segmented into a receiving processing module 100, a collection processing module 200, a condition judging module 300, an upgrade control module 400, etc.

[0078] The above embodiments only illustrate the principles and effects of the present application, and are not intended to limit the present application. Any person skilled in the art can modify or change the above embodiments without departing from the spirit and scope of the present application. Therefore, all equivalent modifications or changes made by those skilled in the art without departing from the spirit and technical ideas disclosed by the present application should be covered by the claims of the present application.

Claims

1. A control method of vehicle remote upgrading, characterized by, The application is applied to a vehicle, the vehicle comprising an Ethernet controller, a non-Ethernet controller, a high-voltage battery, a direct-current voltage converter, and a storage battery, the high-voltage battery charging the storage battery through the direct-current voltage converter, and the storage battery supplying power to the Ethernet controller and the non-Ethernet controller; the control method comprising: receiving a remote upgrade package, calculating a total upgrade duration based on the remote upgrade package; the remote upgrade package comprising a first upgrade sub-package and a second upgrade sub-package; obtaining a current power of the storage battery and calculating a power supply duration of the storage battery based on the current power; judging whether an upgrade condition is met based on the total upgrade duration, the power supply duration, and a state of the high-voltage battery; when the upgrade condition is met, performing a flashing upgrade operation: transmitting the first upgrade sub-package to a corresponding non-Ethernet controller for flashing upgrade; after all non-Ethernet controllers complete the flashing upgrade, controlling the high-voltage battery to charge the storage battery and transmitting the second upgrade sub-package to a corresponding Ethernet controller for flashing upgrade.

2. The control method for vehicle remote upgrade according to claim 1, wherein The judgment of whether the upgrade condition is met based on the total upgrade duration, the power supply duration, and the state of the high-voltage battery comprises: judging the total upgrade duration based on a preset upgrade duration threshold: when the total upgrade duration is less than the upgrade duration threshold, judging whether the upgrade condition is met based on the total upgrade duration, the power supply duration, and the state of the high-voltage battery; otherwise, the upgrade condition is not met, and the remote upgrade is stopped.

3. The control method for vehicle remote upgrade according to claim 2, wherein The judgment of whether the upgrade condition is met based on the total upgrade duration, the power supply duration, and the state of the high-voltage battery comprises: judging the total upgrade duration and the power supply duration: when the total upgrade duration is greater than the power supply duration, the power of the storage battery is abnormal, the upgrade condition is not met, and the remote upgrade is stopped; when the total upgrade duration is less than or equal to the power supply duration, judging whether the upgrade condition is met according to the state of the high-voltage battery.

4. The control method for vehicle remote upgrade according to claim 3, wherein The control method further comprises: when the power of the storage battery is abnormal, controlling the high-voltage battery to charge the storage battery; real-time monitoring the power of the storage battery and calculating a real-time power supply duration of the storage battery; when the real-time power supply duration is greater than or equal to the total upgrade duration, judging whether the upgrade condition is met according to the state of the high-voltage battery.

5. The control method for vehicle remote upgrade according to claim 3, wherein The judgment of whether the upgrade condition is met according to the state of the high-voltage battery comprises: real-time obtaining the state of the high-voltage battery; when the high-voltage battery is in a charging state, controlling the high-voltage battery to exit the charging state, testing the direct-current voltage converter after the high-voltage battery exits the charging state, and when the test is passed, the upgrade condition is met; when the high-voltage battery is in a non-charging state, testing the direct-current voltage converter, and when the test is passed, the upgrade condition is met.

6. The control method for vehicle remote upgrade according to claim 1, wherein The transmission of the first upgrade sub-package to the corresponding non-Ethernet controller for flashing upgrade comprises: transmitting the first upgrade sub-package to the corresponding non-Ethernet controller for flashing upgrade and real-time obtaining an upgrade state of the non-Ethernet controller; When all the non-Ethernet controllers are in the upgrade state of complete upgrade, the non-Ethernet controllers are controlled to restart, and the restart states of all the non-Ethernet controllers are acquired in real time; When all the non-Ethernet controllers are restarted, it is determined that the upgrade of all the non-Ethernet controllers is completed.

7. The control method for vehicle remote upgrade according to claim 1, wherein The control of the high-voltage battery to charge the storage battery after the upgrade of all the non-Ethernet controllers is completed, and the transmission of the second upgrade sub-packet to the corresponding Ethernet controller for upgrade. The control of the high-voltage battery to charge the storage battery through the DC voltage converter after the upgrade of all the non-Ethernet controllers is completed; During the charging of the storage battery, the second upgrade sub-packet is transmitted to the corresponding Ethernet controller for upgrade. The upgrade state of the Ethernet controller is monitored in real time. The control of the high-voltage battery to stop charging the storage battery after the upgrade of all the Ethernet controllers is completed.

8. A control device for vehicle remote upgrade, characterized by, The control device comprises: a receiving processing module configured to receive a remote upgrade package, and calculate a total upgrade duration based on the remote upgrade package; the remote upgrade package comprises a first upgrade sub-packet and a second upgrade sub-packet; a collection processing module configured to acquire a current power of the storage battery, and calculate a power supply duration of the storage battery based on the current power; a condition judging module configured to judge whether an upgrade condition is met based on the total upgrade duration, the power supply duration, and a state of the high-voltage battery; an upgrade control module configured to perform a flash upgrade operation when the upgrade condition is met: transmit the first upgrade sub-packet to the corresponding non-Ethernet controller for flash upgrade; and control the high-voltage battery to charge the storage battery after the upgrade of all the non-Ethernet controllers is completed, and transmit the second upgrade sub-packet to the corresponding Ethernet controller for flash upgrade.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, The processor executes the computer program to implement the steps of the control method of vehicle remote upgrade according to any one of claims 1-7.

10. A computer-readable storage medium storing a computer program, the computer-readable storage medium comprising: The computer program is executed by the processor to implement the steps of the control method of vehicle remote upgrade according to any one of claims 1-7.

Images