Vehicle OTA scheduling response method and device based on clock wheel and medium

Abstract

The invention provides a vehicle OTA scheduling response method and device based on a clock wheel and a medium, and belongs to the technical field of vehicles. The method comprises the steps that upgrading task scheduling with high time complexity is achieved through a set multi-layer clock wheel model, upgrading scheduling of different time granularities is achieved, and the processing efficiency of concurrent upgrading is improved; space-time decoupling of vehicle controller upgrading is achieved through a set multi-layer clock wheel model, downloading time slots of upgrading tasks are distributed based on set dependency constraints, and key system service conflicts are avoided; obtaining a current abnormal monitoring parameter through multi-source security monitoring, and adjusting a downloading time slot in real time through the current abnormal monitoring parameter to ensure that key upgrading is completed in a security window; according to the cascade sequence and the upgrade sequence of the clock wheel, each upgrade task is executed, the upgrade execution environment is monitored, the OTA upgrade efficiency, the safety and the user experience are improved, and the upgrade scheduling efficiency is improved on the premise of ensuring the safety.

Description

Technical Field

[0001] This application relates to the field of vehicle technology, and in particular to a vehicle OTA scheduling response method, device and medium based on a clock wheel. Background Technology

[0002] Current vehicle OTA (Over-The-Air) upgrade technologies mainly include differential upgrades, full upgrades, and partition upgrades. Traditional methods often use simple timers or priority queues for task management.

[0003] In existing technologies, current OTA systems generally use linear queues or simple priority scheduling, which cannot effectively handle the concurrent upgrade needs of large-scale ECUs and have high scheduling complexity. When a security threat is detected, the upgrade strategy cannot be dynamically adjusted, which poses a risk of upgrading during the attack window. Summary of the Invention

[0004] The main objective of this application is to propose a vehicle OTA scheduling response method, device, and medium based on a clock wheel, so as to solve one or more technical problems existing in the prior art, and at least provide a beneficial option or create conditions.

[0005] To achieve the above objectives, one aspect of this application proposes a vehicle OTA scheduling response method based on a clock wheel, the method comprising: The system obtains the dependency constraints between vehicle controllers, determines the upgrade order based on the dependency constraints, and assigns each upgrade task waiting to be downloaded to the corresponding download time slot in the multi-layer clock wheel model according to the upgrade order. The multi-layer clock wheel model includes four clock wheel levels, and each clock wheel level has multiple download time slots. Obtain the current anomaly monitoring parameters of the vehicle, and adjust the upgrade order and / or the download time slot of the corresponding upgrade task according to the current anomaly monitoring parameters; Based on the established multi-layer clock wheel model, the current clock wheel pointer position is obtained, and the corresponding upgrade task is executed according to the current clock wheel pointer position. Each upgrade task is executed according to the established clock wheel cascading order and the upgrade order. Monitor the upgrade execution environment of each upgrade task to obtain upgrade monitoring parameters, and obtain upgrade monitoring results based on the upgrade monitoring parameters.

[0006] In some embodiments, adjusting the upgrade order and / or the download time slot corresponding to the upgrade task based on the current anomaly monitoring parameters includes: Based on the current anomaly monitoring parameters, determine the current threat level, and based on the current threat level, determine the corresponding security response strategy. Based on the corresponding security response strategy, adjust the clock wheel parameters of the multi-layer clock wheel model, and determine the priority of each upgrade task according to the security type of each upgrade task. Adjust the upgrade order and / or the download time slots corresponding to the upgrade tasks according to the priority of each upgrade task.

[0007] In some embodiments, the step of assigning each upgrade task waiting to be downloaded to the corresponding download time slot in the multi-layer clock wheel model according to the upgrade order includes: The established dependency constraints are mapped to the hierarchical structure of the established multi-layer clock wheel model to obtain the upgrade order; Calculate the earliest start time and the latest start time of each vehicle controller, and determine the time window based on the earliest start time and the latest start time; Within the time window, each upgrade task is assigned to its corresponding download time slot according to the upgrade order, and the time window is updated.

[0008] In some embodiments, obtaining the upgrade monitoring result based on the upgrade monitoring parameters includes: Based on the upgrade process of the current upgrade task, the current upgrade execution environment is monitored in stages to obtain the current upgrade monitoring parameters; Based on the current upgrade monitoring parameters, determine the current upgrade anomaly level and execute the corresponding set anomaly response strategy; wherein, the upgrade monitoring result includes the upgrade anomaly level and the corresponding set anomaly response strategy.

[0009] In some embodiments, the step of executing the corresponding upgrade task according to the current clock wheel pointer position, and executing each upgrade task according to the set clock wheel cascading order and the upgrade order, includes: In response to a timer trigger command, the current clock wheel pointer position is obtained according to the timer trigger command; Based on the current clock wheel pointer position, detect whether there is a corresponding upgrade task in the download time slot corresponding to the current clock wheel pointer position; When it is determined that a corresponding upgrade task exists, the corresponding upgrade task is executed. According to the set clock wheel cascading order and the upgrade order, each clock wheel level is traversed and each upgrade task is executed.

[0010] In some embodiments, determining the current upgrade anomaly level based on the current upgrade monitoring parameters and executing the corresponding set anomaly response strategy includes: Based on the current upgrade monitoring parameters, the current upgrade anomaly level is determined to be a severe anomaly level; Based on the severity level of the anomaly, execute the anomaly response strategy corresponding to the severity level of the anomaly. According to the established anomaly response strategy corresponding to the severity level of the anomaly, the established automatic rollback operation is executed.

[0011] In some embodiments, the method further includes: Obtain the currently inserted upgrade task, and select the corresponding clock wheel level from the set multi-layer clock wheel model according to the upgrade parameters of the currently inserted upgrade task; Based on the upgrade parameters, the optimal download time slot is determined from the corresponding clock wheel level, and the currently inserted upgrade task is inserted into the optimal download time slot.

[0012] In some embodiments, the multi-layer clock wheel model includes: a millisecond wheel level for handling emergency security upgrade tasks, a second wheel level for handling real-time upgrade tasks, a minute wheel level for handling regular upgrade tasks, and an hour wheel level for handling large upgrade tasks.

[0013] To achieve the above objectives, another aspect of the embodiments of this application proposes a vehicle control device, including a memory, a processor, and a program stored in the memory and executable on the processor. When the program is executed by the processor, it implements the above-described clock wheel-based vehicle OTA scheduling response method.

[0014] To achieve the above objectives, another aspect of the embodiments of this application proposes a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described clock wheel-based vehicle OTA scheduling response method.

[0015] The embodiments of this application include at least the following beneficial effects: This application provides a vehicle OTA scheduling response method, device, and medium based on clock wheels. This scheme realizes the scheduling of upgrade tasks with high time complexity through a multi-layer clock wheel model, realizes upgrade scheduling at different time granularities, and improves the processing efficiency of concurrent upgrades; it achieves spatiotemporal decoupling of vehicle controller upgrades through the multi-layer clock wheel model, allocates download time slots for upgrade tasks based on the set dependency constraints, and avoids conflicts between critical system services; it obtains current anomaly monitoring parameters through multi-source security monitoring, and adjusts the download time slots in real time based on the current anomaly monitoring parameters to ensure that critical upgrades are completed within the security window; it executes each upgrade task according to the set clock wheel cascading order and upgrade order, monitors the upgrade execution environment, and improves OTA upgrade efficiency, security, and user experience. Under the premise of ensuring security, it improves upgrade scheduling efficiency, shortens the security threat response time to the millisecond level, and supports upgrade strategy adjustment. In practical applications, it achieves the optimal balance of performance, security, and intelligence. Attached Figure Description

[0016] Figure 1 This is a flowchart illustrating the vehicle OTA scheduling response method based on a clock wheel provided in an embodiment of this application; Figure 2 This is a schematic diagram illustrating the mapping of the dependency constraints provided in this application embodiment to the multi-layer clock wheel model. Figure 3 This is a schematic diagram of the framework of the vehicle OTA scheduling and response system based on the clock wheel provided in the embodiments of this application; Figure 4 This is a schematic diagram of the hardware structure framework of the vehicle control device provided in the embodiments of this application. Detailed Implementation

[0017] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of this application and are not intended to limit it. In the following description, when referring to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with those of this application; they are merely examples of apparatuses and methods consistent with some aspects of the embodiments of this application as detailed in the appended claims.

[0018] It is understood that the terms "first," "second," etc., used in this application may be used to describe various concepts herein, but unless otherwise specified, these concepts are not limited by these terms. These terms are only used to distinguish one concept from another. For example, without departing from the scope of embodiments of this application, Ethernet signaling information may also be referred to as interface signaling information, and similarly, interface signaling information may also be referred to as Ethernet signaling information. Depending on the context, the words "if" or "when" as used herein may be interpreted as "when," "in response to a determination," or "in the event of a determination."

[0019] As used in this application, the terms "at least one", "multiple", "each", "any", etc., "at least one" includes one, two or more, "multiple" includes two or more, "each" refers to each of the corresponding multiples, and "any" refers to any one of the multiples.

[0020] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of this application only and is not intended to limit this application.

[0021] Before providing a detailed description of the embodiments of this application, some of the nouns and terms involved in the embodiments of this application will be explained first. The nouns and terms involved in the embodiments of this application are subject to the following interpretations.

[0022] Over-the-Air (OTA) technology is a technology that enables remote management of mobile terminal devices and SIM card data through the air interface of mobile communication.

[0023] In the Time Wheel algorithm, a time slot refers to the multiple time periods or time units into which the time wheel is divided, with each slot representing a fixed time interval.

[0024] The vehicle controller (Electronic Control Unit) is a core component in modern automobiles used to control various electronic systems.

[0025] Battery Management System (BMS), Motor Controller (MCU), On-Board Charger (OBC), ESP (Electronic Stability Program), Electronic Parking Brake System (EPB), Anti-lock Braking System (ABS), Body Control Module (BCM), Advanced Driver Assistance System (ADAS).

[0026] In some embodiments of one aspect of the present invention Figure 1This is an optional flowchart of the vehicle OTA scheduling response method based on clock wheels provided in the embodiments of this application. Figure 1 The method may include, but is not limited to, steps S100 to S400.

[0027] Step S100: Obtain the set dependency constraints between vehicle controllers, determine the upgrade order according to the set dependency constraints, and assign each upgrade task waiting to be downloaded to the corresponding download time slot in the set multi-layer clock wheel model according to the upgrade order; wherein, the set multi-layer clock wheel model includes four clock wheel levels, and each clock wheel level has multiple download time slots.

[0028] Step S200: Obtain the current anomaly monitoring parameters of the vehicle, and adjust the upgrade order and / or the download time slot of the corresponding upgrade task according to the current anomaly monitoring parameters.

[0029] Step S300: Based on the set multi-layer clock wheel model, obtain the current clock wheel pointer position, execute the corresponding upgrade task according to the current clock wheel pointer position, and execute each upgrade task according to the set clock wheel cascading order and upgrade order.

[0030] Step S400: Monitor the upgrade execution environment of each upgrade task, obtain upgrade monitoring parameters, and obtain upgrade monitoring results based on the upgrade monitoring parameters.

[0031] Steps S100 to S400 as illustrated in this embodiment utilize a multi-layered clock wheel model to schedule upgrade tasks with high time complexity, enabling upgrade scheduling at different time granularities and improving the processing efficiency of concurrent upgrades. The multi-layered clock wheel model also achieves spatiotemporal decoupling of vehicle controller upgrades, allocating download time slots for upgrade tasks based on defined dependency constraints to avoid conflicts with critical system services. Multi-source security monitoring acquires current anomaly monitoring parameters, and the download time slots are adjusted in real-time based on these parameters to ensure critical upgrades are completed within a safe window. Each upgrade task is executed according to the cascading order and upgrade sequence of the clock wheels, monitoring the upgrade execution environment to improve OTA upgrade efficiency, security, and user experience. While ensuring security, upgrade scheduling efficiency is improved, and security threat response time is reduced to milliseconds. Simultaneously, upgrade strategy adjustments are supported, achieving an optimal balance of performance, security, and intelligence in practical applications.

[0032] In some embodiments of S100, the multi-layer clock wheel model adopts a four-layer clock wheel architecture, including: a millisecond wheel level for handling emergency and secure upgrade tasks, with a wheel size of 1000 slots, each slot representing 1 millisecond; a second wheel level for handling real-time upgrade tasks, with a wheel size of 60 slots, each slot representing 1 second; a minute wheel level for handling regular upgrade tasks, with a wheel size of 60 slots, each slot representing 1 minute; and an hour wheel level for handling large upgrade tasks, with a wheel size of 24 slots, each slot representing 1 hour. Therefore, the multi-layer clock wheel model includes four clock wheel levels, with multiple download time slots in each clock wheel level.

[0033] Obtain the static, dynamic, and upgrade dependencies between vehicle controllers. Construct a dependency graph of the vehicle controllers based on these dependencies. Perform topological sorting on the dependency graph to obtain the set dependency constraints.

[0034] Specifically, refer to Figure 2 Static dependencies are predefined based on the functions of vehicle controllers and the communication relationships between them. For example, the Body Controller (BCM) depends on the gateway, and the Advanced Driver Assistance System (ADAS) depends on the camera controller. Dynamic dependencies are identified through real-time communication traffic analysis and monitoring of Ethernet messages. Upgrade dependencies are obtained through a specific order of upgrades, for example, the gateway is upgraded first, followed by the connected vehicle controllers. A dependency graph is constructed using static, dynamic, and upgrade dependencies, represented as G=(V,E), where G is the dependency graph of vehicle controllers, V is the set of vehicle controllers (ECUs), E is the set of dependency edges, and each edge e(i,j) indicates that ECU_i must be upgraded before or after ECU_j, e(i,j) is the dependency edge from ECU_i to ECU_j, and i,j are the index numbers of the vehicle controllers (ECUs).

[0035] Based on the established dependency constraints, download time slots are allocated in the multi-layer clock wheel model. The dependency constraints are mapped to the hierarchical structure of the multi-layer clock wheel model to obtain a valid upgrade order, ensuring the upgrade order constraints are met. The earliest start time (EST) and latest start time (LST) of each vehicle controller (ECU) are calculated to determine the time window [EST, LST]. Within the time window [EST, LST], the appropriate time slot in the clock wheel is found based on the mapped upgrade order; that is, the corresponding download time slot in the multi-layer clock wheel model is allocated to the upgrade tasks waiting to be downloaded, and the time window of the dependent vehicle controller (ECU) is updated.

[0036] In some embodiments of S200, multiple threat monitoring data sources in the vehicle are monitored to obtain current anomaly monitoring parameters.

[0037] By analyzing current anomaly monitoring parameters, the current threat level is determined, and corresponding security response strategies are implemented. These strategies adjust the clock wheel parameters of the multi-layered clock wheel model, or adjust the upgrade sequence and / or the download time slots of corresponding upgrade tasks, enabling millisecond-level upgrade strategy switching after attack detection and ensuring critical upgrades are completed within the security window.

[0038] In some embodiments of S300, based on the established multi-layer clock wheel model, in response to the triggering of a timer, the millisecond wheel level pointer is pushed to obtain the current clock wheel pointer position, and the corresponding upgrade task is determined based on this current clock wheel pointer position.

[0039] Each upgrade task is executed one by one according to the set clock wheel cascading order and upgrade order.

[0040] In some embodiments of S400, the upgrade execution environment of the upgrade task is monitored to monitor the upgrade process and obtain upgrade monitoring parameters. These upgrade monitoring parameters include: upgrade accuracy deviation rate, network anomaly connection data, vehicle controller response time, and call anomaly pattern matching.

[0041] By upgrading the monitoring parameters, the upgraded monitoring results are determined to verify whether the upgrade task has been completed and to handle any abnormal results.

[0042] Reference Figure 2 In some embodiments of this invention, the allocation process of the corresponding download time slot in S100 specifically includes: S110, map the set dependency constraints to the hierarchical structure of the set multi-layer clock wheel model to obtain the upgrade order; S120, calculate the earliest start time and latest start time of each vehicle controller, and determine the time window based on the earliest start time and latest start time; S130, within the time window, assigns each upgrade task to the corresponding download time slot according to the upgrade order, and updates the time window.

[0043] In this embodiment, the static dependencies, dynamic dependencies, and upgrade dependencies between vehicle controllers are obtained. A dependency graph of the vehicle controllers is constructed using the static dependencies, dynamic dependencies, and upgrade dependencies. The dependency graph is then topologically sorted to obtain the set dependency constraints.

[0044] Reference Figure 2Static dependencies are predefined based on the functions of vehicle controllers and the communication relationships between them. For example, the Body Controller (BCM) depends on the gateway, and the Advanced Driver Assistance System (ADAS) depends on the camera controller. Dynamic dependencies are identified through real-time communication traffic analysis and monitoring of Ethernet messages. Upgrade dependencies are obtained through a specific order of upgrades, for example, the gateway is upgraded first, followed by the connected vehicle controllers. A dependency graph is constructed using static, dynamic, and upgrade dependencies, represented as G=(V,E), where G is the dependency graph of vehicle controllers, V is the set of vehicle controllers (ECUs), E is the set of dependency edges, and each edge e(i,j) indicates that ECU_i must be upgraded before or after ECU_j, e(i,j) is the dependency edge from ECU_i to ECU_j, and i,j are the index numbers of the vehicle controllers (ECUs).

[0045] Download time slots are allocated in the multi-level clock wheel model based on the established dependency constraints. The established dependency constraints are mapped to the hierarchical structure of the multi-level clock wheel model to obtain a valid upgrade order, ensuring the upgrade order constraint is met.

[0046] Calculate the earliest start time EST and latest start time LST for each vehicle controller (ECU) to determine the time window [EST, LST]. Within the time window [EST, LST], find the appropriate time slot in the clock wheel based on the upgrade order obtained by mapping. That is, allocate the corresponding download time slot in the multi-layer clock wheel model to each upgrade task waiting to be downloaded, and update the time window that depends on the vehicle controller (ECU).

[0047] The lower the dependency depth of the set dependency constraints, the higher the clock wheel level; that is, the clock wheel level is inversely proportional to the set dependency depth. For example, if the dependency depth of the gateway's dependency constraints is the lowest Level 0, then the corresponding clock wheel level is the hour wheel level. Furthermore, resource constraints and load balancing conditions can be considered based on the upgrade parameters in the upgrade task to allocate corresponding download time slots.

[0048] In one embodiment, the earliest start time EST is calculated using the following formula: The formula for calculating the latest start time (LST) is: Where i is the index number of the current vehicle controller (ECU), j is the index number of other vehicle controllers (ECUs) that are dependent on the current vehicle controller (ECU_i), duration(j) is the upgrade duration of the other vehicle controller (ECU_j), duration(i) is the upgrade duration of the current vehicle controller (ECU_i), (j,i)∈E: indicates that there is a dependency relationship between ECU_j and ECU_i, and (i,j)∈E: indicates that there is a dependency relationship between ECU_i and ECU_j.

[0049] In this embodiment, based on steps S110 to S130, the spatiotemporal decoupling of ECU upgrades is achieved through a hierarchical architecture of the multi-layer clock wheel model. Download time slots for upgrade tasks are automatically allocated based on the dependency graph and resource constraint model, avoiding conflicts in critical system services. The dependency graph of the vehicle controller is mapped to the hierarchical structure of the clock wheel, ensuring upgrade order constraints and achieving an organic combination of topology sorting and clock wheel scheduling.

[0050] In some embodiments of this invention, in S200, the adjustment process of the upgrade order and / or the download time slot of the corresponding upgrade task specifically includes: S210, Based on the current anomaly monitoring parameters, determine the current threat level, and based on the current threat level, determine the corresponding security response strategy; S220, according to the corresponding security response strategy, adjusts the clock wheel parameters of the multi-layer clock wheel model, and determines the priority of each upgrade task according to the security type of each upgrade task; S230 adjusts the upgrade order and / or the download time slots of the corresponding upgrade tasks according to the priority of each upgrade task.

[0051] In this embodiment, multiple threat monitoring data sources in the vehicle are monitored to obtain current anomaly monitoring parameters. These threat monitoring data sources include: CAN bus intrusion detection system output, network traffic anomaly detection, vehicle controller behavior anomaly monitoring, and external threat intelligence interfaces.

[0052] The current anomaly monitoring parameters include: output data of the CAN bus intrusion detection system, network traffic anomaly detection data, vehicle controller behavior anomaly monitoring data, and external threat intelligence interface data.

[0053] By using the current anomaly monitoring parameters, the current threat level is determined, and the corresponding security response strategy is then implemented.

[0054] Specifically, based on the current anomaly monitoring parameters and the established weighted fusion algorithm, scores are determined for the output data of the CAN bus intrusion detection system, network traffic anomaly detection data, vehicle controller behavior anomaly monitoring data, and external threat intelligence interface data, resulting in CAN anomaly score, network anomaly score, behavior anomaly score, and external threat score. The threat level is calculated using the following formula:

[0055] in, The weights are dynamically adjusted based on the vehicle model and scenario. Threat levels include: high threat level, medium threat level, and low threat level. The anomaly score is the output of the CAN bus intrusion detection system, with a value range of [0,1]. The network anomaly score is the score for network traffic anomaly detection, with a value range of [0,1]. The behavior anomaly score is the anomaly score for vehicle controller behavior monitoring, with a value range of [0,1]. The external threat score is the threat score provided by the external threat intelligence interface, with a value range of [0,1]. Threat level.

[0056] The clock wheel parameters of the multi-layer clock wheel model are adjusted according to the corresponding security response strategy.

[0057] By identifying the security type of each upgrade task, security-related and non-security-related upgrade tasks are determined, thereby prioritizing each upgrade task. This allows for adjustments to the upgrade order and / or the download time slots of corresponding upgrade tasks, enabling millisecond-level upgrade strategy switching after attack detection and ensuring that critical upgrades are completed within the security window.

[0058] Specifically, the corresponding security response strategy for high-threat levels is as follows: The priority of non-security-related upgrade tasks is lowered, while the priority of security-related upgrade tasks is increased. This adjustment adjusts the upgrade order and / or the download time slots for corresponding upgrade tasks. Specifically, all non-security-related upgrade tasks in the multi-layered clock wheel model are paused, and all emergency security upgrade tasks are moved to the millisecond wheel level, thus adjusting the upgrade order and / or the download time slots for corresponding upgrade tasks. The clock wheel speed of the multi-layered clock wheel model is increased to twice its normal speed, adjusting the clock wheel parameters and reallocating clock wheel slots according to security priorities to ensure that critical vehicle controller upgrades are completed within the security upgrade window.

[0059] The corresponding security response strategy for medium threat levels is as follows: Prioritize non-security-related upgrade tasks and prioritize security-related upgrade tasks. This means delaying non-critical upgrade tasks to the next security upgrade window and prioritizing security-related upgrade tasks, thereby adjusting the upgrade order and / or the download time slots for corresponding upgrade tasks. The next security upgrade window is predicted based on threat timing patterns and vehicle usage habits.

[0060] For low-threat levels, the corresponding security response strategy is as follows: the priority, upgrade order, and download time slot of each upgrade task remain unchanged, while the monitoring frequency is increased.

[0061] In this embodiment, based on S210 to S230, the clock wheel speed and download time slot allocation strategy are adjusted in real time according to the security threat level, and the real-time linkage between security monitoring and upgrade scheduling is achieved to realize millisecond-level threat response.

[0062] In some embodiments of this invention, in S300, the execution process of each upgrade task specifically includes: S310, in response to a timer trigger instruction, obtains the current clock wheel pointer position according to the timer trigger instruction; S320, based on the current clock wheel pointer position, detects whether there is a corresponding upgrade task in the download time slot corresponding to the current clock wheel pointer position; S330: When it is determined that there is a corresponding upgrade task, execute the corresponding upgrade task, and traverse each clock wheel level according to the set clock wheel cascading order and upgrade order to execute each upgrade task.

[0063] In this embodiment, in response to the timer trigger command of the timer, the millisecond wheel level pointer is pushed based on the set multi-layer clock wheel model to obtain the current clock wheel pointer position.

[0064] Based on the current clock wheel pointer position, determine the download time slot corresponding to the current clock wheel pointer position, and then determine whether there is a corresponding upgrade task in the current download time slot (current slot).

[0065] If the current download time slot is not empty, execute all corresponding upgrade tasks in the download time slot and check resource constraints and security status.

[0066] By determining the cascading and upgrading order of the clock wheels, the next upgrade task is identified. Each clock wheel level is traversed to complete the download of the upgrade tasks in the multi-level clock wheel model.

[0067] The cascading order of the clock wheels can be as follows: if the millisecond wheel level completes a round, the second wheel level pointer is advanced; if the second wheel level completes a round, the minute wheel level pointer is advanced; if the minute wheel level pointer completes a round, the hour wheel level pointer is advanced.

[0068] In some embodiments of this invention, in S400, the process of determining the upgrade monitoring result specifically includes... S410: Based on the current upgrade process, monitor the current upgrade execution environment in stages to obtain the current upgrade monitoring parameters; S420: Based on the current upgrade monitoring parameters, determine the current upgrade anomaly level and execute the corresponding set anomaly response strategy; wherein, the upgrade monitoring results include the upgrade anomaly level and the corresponding set anomaly response strategy. In this embodiment, security monitoring is performed on the upgrade process of the current upgrade task, and the current upgrade execution environment is monitored in stages to obtain upgrade monitoring parameters. These upgrade monitoring parameters include: upgrade accuracy deviation rate, abnormal network connection data, vehicle controller response time, and call anomaly pattern matching.

[0069] The phased monitoring of the upgrade execution environment includes: pre-upgrade testing, download process monitoring, pre-installation verification, installation process monitoring, and post-upgrade verification.

[0070] Based on the current upgrade monitoring parameters, the upgrade monitoring results for the current upgrade task are obtained. These results include the upgrade anomaly level and the corresponding anomaly response strategy. Specifically, the current upgrade anomaly level is determined using the current upgrade monitoring parameters, and the corresponding anomaly response strategy is executed based on that level.

[0071] The severity levels of anomalies are categorized as: severe anomaly, moderate anomaly, and minor anomaly.

[0072] In one embodiment, based on the severity level of the anomaly, a set anomaly response strategy corresponding to the severity level is determined. The set anomaly response strategy is to execute the set automatic rollback operation, that is, to stop all current upgrade tasks, remove the download time slots corresponding to all current upgrade tasks from the set multi-layer clock wheel model, reset the set dependency constraints, and generate an anomaly signal.

[0073] In one embodiment, based on the medium anomaly level, a corresponding anomaly response strategy is determined, which is: suspend the upgrade and wait for manual confirmation.

[0074] In one embodiment, based on the level of minor anomaly, a set anomaly response strategy corresponding to the level of minor anomaly is determined, and the set anomaly response strategy is: continue to upgrade but increase the monitoring frequency.

[0075] In some embodiments of this invention, the vehicle OTA scheduling response method further includes: S500: Obtain the currently inserted upgrade task, and select the corresponding clock wheel level from the set multi-layer clock wheel model according to the upgrade parameters of the currently inserted upgrade task. S510 determines the optimal download time slot from the corresponding clock wheel level based on the upgrade parameters and inserts the currently inserted upgrade task into the optimal download time slot.

[0076] In this embodiment, the scheduling response method also includes upgrading the task scheduling algorithm.

[0077] The system retrieves the currently inserted upgrade task and determines the corresponding clock wheel level based on its upgrade parameters. These upgrade parameters include: the unique identifier of the electronic control unit, the upgrade package size, priority, security level, and delay parameters.

[0078] By upgrading the parameters, the optimal download time slot in the corresponding clock wheel level is determined so that the upgrade task can be inserted.

[0079] In one embodiment, the estimated execution time of the upgrade task is calculated using the upgrade package size, current network bandwidth, and installation time. Specifically, the estimated upgrade task execution time = upgrade package size / current network bandwidth + installation time. The corresponding clock wheel level is determined based on the security level. The optimal download time slot for the currently inserted upgrade task is determined based on the current timestamp, latency parameters, and the total number of download time slots in the corresponding clock wheel level.

[0080] Specifically, .in, The index for the optimal download time slot. This is the current timestamp. This refers to the upgrade delay time in the delay parameters. This represents the total number of download time slots at the corresponding clock wheel level, i.e., the total number of slots in the clock wheel.

[0081] Based on the optimal download time slot, upgrade package size, and estimated upgrade task execution time, the currently inserted upgrade task is placed in the optimal download time slot. The optimal download time slot can also take into account any dependencies.

[0082] In some embodiments of this invention, the vehicle OTA scheduling response method further includes: The multidimensional state space parameters of the vehicle are obtained, and the clock wheel parameters in the multi-layer clock wheel model are optimized using the Q-Learning algorithm based on the multidimensional state space parameters.

[0083] In this embodiment, the multi-dimensional state space parameters include: vehicle state, network state, user behavior, and system load. Vehicle state includes: driving state, parking state, or charging state, engine load, and battery level. Network state includes: communication signal strength, wireless availability, network latency, and network bandwidth. User behavior includes: historical vehicle usage patterns, upgrade acceptance, and interruption tolerance. System load includes: CPU utilization, memory usage, storage space, and temperature status.

[0084] The upgrade timing optimization model is as follows: The state space S includes: vehicle status, network status, user behavior, system load, and threat level. The action space A includes: immediate upgrade, 1-hour delay, 6-hour delay, 24-hour delay, and pause upgrade. The reward function R is:

[0085] Q-Learning update formula:

[0086] Where S is the environmental state space observed by the agent; A is the action space that the agent can execute; R is the return value of the reward function; w1, w2, w3, w4 are the weight coefficients of each item in the reward function; Q(s, a) is the Q value of executing action a in state s, where s is the current state; a is the current action; s' is the next state after executing action a; and a' is the optional action in the next state s'. The learning rate controls the degree to which new information is adopted, and is usually set to 0.1; r is the immediate reward obtained after performing action a. is the discount factor, which controls the importance of future rewards, and is usually set to 0.9; max is the function to find the maximum value; ← is the assignment operator.

[0087] In this embodiment, multiple factors such as vehicle status, network quality, threat level, and user habits are integrated, and a reinforcement learning algorithm is used to dynamically optimize the clock wheel parameters in the multi-layer clock wheel model, thereby improving the upgrade success rate.

[0088] The following section provides a detailed introduction and explanation of the allocation of download time slots and the execution of each upgrade task in a specific large-scale ECU collaborative upgrade scheduling scenario: An electric vehicle requires a quarterly routine upgrade involving 15 ECUs, including those in the powertrain domain (BMS, MCU, OBC), chassis domain (EPS, ESC, ABS), body domain (BCM, door control, air conditioning), and intelligent driving domain (ADAS, cameras, radar). In this embodiment, the threat level is set to low threat level.

[0089] S100: Based on the set dependency constraints, determine the upgrade order, and according to the upgrade order, assign each upgrade task waiting to be downloaded to the corresponding download time slot in the set multi-layer clock wheel model; Reference Figure 2 Dependency analysis: Gateway ECU - [BMS, MCU, BCM] (Gateway must be upgraded first) BMS - OBC (Battery Management System affects charging control); ADAS - [Camera ECU, Radar ECU] (Intelligent driving master control depends on sensors); BCM - [Gate Control ECU, Air Conditioning ECU] (Body control affects subsystems).

[0090] The topology sorting yields the following dependency constraints: Level 0: Gateway ECU (no dependencies); Level 1: BMS, MCU, BCM, ADAS; Level 2: OBC, gate ECU, air conditioning ECU, camera ECU, radar ECU; Level 3: EPS, ESC, ABS (independent upgrades).

[0091] L4 hourly allocation (large upgrade package): slot[2]: gateway ECU (2 am, when the vehicle is parked); slot[3]: ADAS master controller (3 am, when computing resources are sufficient).

[0092] L3 minute round allocation (medium upgrade package): slot

[10] : BMS (10 minutes after gateway upgrade); slot

[15] : MCU (5 minutes after BMS upgrade); slot

[20] : BCM (20 minutes after gateway upgrade); slot

[25] : camera ECU (after ADAS upgrade); slot

[30] : radar ECU (after camera ECU upgrade).

[0093] L2 Second Wheel Allocation (Small Upgrade Package): slot

[30] : OBC (30 seconds after BMS upgrade); slot

[45] : Gate ECU (45 seconds after BCM upgrade); slot

[60] : Air Conditioning ECU (15 seconds after Gate ECU upgrade); slot

[15] : EPS (Independent upgrade, priority safety system); slot

[30] : ESC (15 seconds after EPS upgrade); slot

[45] : ABS (15 seconds after ESC upgrade).

[0094] S200: Obtain the current anomaly monitoring parameters of the vehicle, and adjust the upgrade order and / or the download time slot of the corresponding upgrade task based on the current anomaly monitoring parameters.

[0095] The threat level is set to low threat level. The priority, upgrade order, and download time slot of each upgrade task remain unchanged, but the monitoring frequency is increased.

[0096] S300, based on the set multi-layer clock wheel model, obtains the current clock wheel pointer position, executes the corresponding upgrade task according to the current clock wheel pointer position, and executes each upgrade task according to the set clock wheel cascading order and upgrade order.

[0097] Upgrade Execution Log: [02:00:00] Gateway ECU upgrade started, estimated time 30 minutes; [02:15:00] Gateway upgrade 50% complete, system running normally; [02:30:00] Gateway upgrade complete, 10-minute waiting period begins; [02:40:00] BMS upgrade starts, estimated 15 minutes, [02:55:00] BMS upgrade complete; MCU upgrade starts [03:00:00], ADAS main control upgrade starts in parallel [03:10:00], MCU upgrade complete; BMS→OBC dependency satisfied, [03:10:30] OBC upgrade starts, estimated 5 minutes, [03:15:30] OBC upgrade complete, power domain upgrade complete; [03:20:00] BCM upgrade starts, estimated 10 minutes, [03:25:00] ADAS upgrade complete; Camera ECU upgrade starts [03:30:00], BCM upgrade complete; Gate control ECU upgrade starts, [03:30:15] Start EPS upgrade (chassis domain independent upgrade begins), [03:35:00] Camera ECU upgrade complete, start radar ECU upgrade [03:45:15] EPS upgrade complete, start ESC upgrade, [04:00:00] All ECU upgrades complete.

[0098] S400 monitors the upgrade execution environment of each upgrade task, obtains upgrade monitoring parameters, and obtains upgrade monitoring results based on the upgrade monitoring parameters.

[0099] After all monitoring results have been upgraded, a comprehensive functional verification will be performed: ECU self-test pass rate: 100%; ECU communication latency: average 2.3ms (normal range); key function tests: power, braking, steering, and intelligent driving functions are all normal; total upgrade time: 2 hours, 30 minutes less than estimated; zero user-perceived interruptions, user satisfaction rating: 9.2 / 10.

[0100] Reference Figure 3 Another embodiment of this application also provides a vehicle OTA scheduling and response system based on a clock wheel, the system comprising: The threat perception module is used to acquire the vehicle's current anomaly detection parameters.

[0101] The current anomaly monitoring parameters include: output data of the CAN bus intrusion detection system, network traffic anomaly detection data, vehicle controller behavior anomaly monitoring data, and external threat intelligence interface data.

[0102] The scheduling decision module includes a dependency scheduling unit and a threat scheduling unit. The dependency scheduling unit acquires the dependency constraints between vehicle controllers, determines the upgrade order based on these constraints, and allocates the upgrade tasks awaiting download to the corresponding download time slots in the multi-layer clock wheel model according to the upgrade order. The threat scheduling unit adjusts the upgrade order and / or the download time slots of corresponding upgrade tasks based on current anomaly monitoring parameters.

[0103] The multi-layer clock wheel model includes four clock wheel levels, with multiple download time slots in each level. The scheduling module also includes an optimization scheduling unit and a resource load constraint unit.

[0104] The clock execution module is used to obtain the current clock wheel pointer position based on the set multi-layer clock wheel model, execute the corresponding upgrade task according to the current clock wheel pointer position, and execute each upgrade task according to the set clock wheel cascading order and upgrade order.

[0105] The upgrade monitoring module is used to monitor the upgrade execution environment of each upgrade task, obtain upgrade monitoring parameters, and obtain upgrade monitoring results based on the upgrade monitoring parameters.

[0106] The feedback control module is used to evaluate performance monitoring efficiency, optimize learning feedback strategies, and assess user experience satisfaction.

[0107] Another embodiment of this application provides a vehicle control device, which includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the aforementioned clock-based vehicle OTA scheduling response method. This vehicle control device can be any smart terminal, including tablet computers, in-vehicle computers, etc.

[0108] It is understood that the content of the above method embodiments is applicable to this device embodiment. The specific functions implemented by this device embodiment are the same as those of the above method embodiments, and the beneficial effects achieved are also the same as those achieved by the above method embodiments.

[0109] Please see Figure 4 , Figure 4 The hardware structure of a vehicle control device according to another embodiment is illustrated. The vehicle control device includes: The processor can be implemented using a general-purpose CPU (Central Processing Unit), microprocessor, application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to achieve the technical solutions provided in the embodiments of this application. The memory can be implemented in the form of read-only memory (ROM), static storage device, dynamic storage device, or random access memory (RAM). The memory can store the operating system and other applications. When the technical solutions provided in the embodiments of this specification are implemented through software or firmware, the relevant program code is stored in the memory and called by the processor to execute the clock wheel-based vehicle OTA scheduling response method of the embodiments of this application. Input / output interfaces are used to implement information input and output; The communication interface is used to enable communication and interaction between this device and other devices. Communication can be achieved through wired means (such as USB, Ethernet cable, etc.) or wireless means (such as mobile network, WIFI, Bluetooth, etc.). A bus is used to transfer information between various components of a device, such as processors, memory, input / output interfaces, and communication interfaces. The processor, memory, input / output interfaces, and communication interfaces communicate with each other within the device via a bus.

[0110] This invention also provides a vehicle, including the vehicle OTA scheduling response method based on the clock wheel described above.

[0111] The vehicle can be a private car, such as a sedan, SUV, MPV, or pickup truck. It can also be a commercial vehicle, such as a van, bus, small truck, or large semi-trailer. The vehicle must have an electric motor capable of outputting power or acting as a generator to store mechanical energy. When the vehicle is a new energy vehicle, it can be a hybrid or a pure electric vehicle.

[0112] Since the vehicle applies all the technical solutions of the above-described vehicle control device, it has at least all the beneficial effects brought about by the technical solutions of the above embodiments, which will not be repeated here.

[0113] Another embodiment of the present invention provides a computer-readable storage medium storing a computer program that, when executed by a processor, implements the above-described clock wheel-based vehicle OTA scheduling response method.

[0114] It is understood that the content of the above method embodiments is applicable to this storage medium embodiment. The specific functions implemented in this storage medium embodiment are the same as those in the above method embodiments, and the beneficial effects achieved are also the same as those achieved in the above method embodiments.

[0115] Memory, as a non-transitory computer-readable storage medium, can be used to store non-transitory software programs and non-transitory computer-executable programs. Furthermore, memory may include high-speed random access memory, and may also include non-transitory memory, such as at least one disk storage device, flash memory device, or other non-transitory solid-state storage device. In some embodiments, memory may optionally include memory remotely located relative to the processor, and these remote memories can be connected to the processor via a network. Examples of such networks include, but are not limited to, the Internet, intranets, local area networks, mobile communication networks, and combinations thereof.

[0116] The embodiments described in this application are for the purpose of more clearly illustrating the technical solutions of the embodiments of this application, and do not constitute a limitation on the technical solutions provided by the embodiments of this application. As those skilled in the art will know, with the evolution of technology and the emergence of new application scenarios, the technical solutions provided by the embodiments of this application are also applicable to similar technical problems.

[0117] Those skilled in the art will understand that the technical solutions shown in the figures do not constitute a limitation on the embodiments of this application, and may include more or fewer steps than shown, or combine certain steps, or different steps.

[0118] The device embodiments described above are merely illustrative. The units described as separate components may or may not be physically separate; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to achieve the purpose of this embodiment according to actual needs.

[0119] Those skilled in the art will understand that all or some of the steps in the methods disclosed above, as well as the functional modules / units in the systems and devices, can be implemented as software, firmware, hardware, or suitable combinations thereof.

[0120] The terms “first,” “second,” “third,” “fourth,” etc. (if present) in the specification and accompanying drawings of this application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that the embodiments of this application described herein can be implemented in orders other than those illustrated or described herein. Furthermore, the terms “comprising” and “having,” and any variations thereof, are intended to cover non-exclusive inclusion; for example, a process, method, system, product, or apparatus that comprises a series of steps or units is not necessarily limited to those steps or units explicitly listed, but may include other steps or units not explicitly listed or inherent to such processes, methods, products, or apparatus.

[0121] It should be understood that in this application, "at least one (item)" means one or more, and "more than" means two or more. "And / or" is used to describe the relationship between related objects, indicating that three relationships can exist. For example, "A and / or B" can represent three cases: only A exists, only B exists, and both A and B exist simultaneously, where A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects are in an "or" relationship. "At least one (item) of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one (item) of a, b, or c can represent: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, and c can be single or multiple.

[0122] The units described above as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0123] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0124] The preferred embodiments of the present application have been described above with reference to the accompanying drawings, but this does not limit the scope of the claims of the present application. Any modifications, equivalent substitutions, and improvements made by those skilled in the art without departing from the scope and substance of the embodiments of the present application shall be within the scope of the claims of the present application.

Claims

1. A vehicle OTA scheduling response method based on a clock wheel, characterized in that, The method includes: The system obtains the dependency constraints between vehicle controllers, determines the upgrade order based on the dependency constraints, and assigns each upgrade task waiting to be downloaded to the corresponding download time slot in the multi-layer clock wheel model according to the upgrade order. The multi-layer clock wheel model includes four clock wheel levels, and each clock wheel level has multiple download time slots. Obtain the current anomaly monitoring parameters of the vehicle, and adjust the upgrade order and / or the download time slot of the corresponding upgrade task according to the current anomaly monitoring parameters; Based on the established multi-layer clock wheel model, the current clock wheel pointer position is obtained, and the corresponding upgrade task is executed according to the current clock wheel pointer position. Each upgrade task is executed according to the established clock wheel cascading order and the upgrade order. Monitor the upgrade execution environment of each upgrade task to obtain upgrade monitoring parameters, and obtain upgrade monitoring results based on the upgrade monitoring parameters.

2. The vehicle OTA scheduling response method according to claim 1, characterized in that, The step of adjusting the upgrade order and / or the download time slot corresponding to the upgrade task based on the current anomaly monitoring parameters includes: Based on the current anomaly monitoring parameters, determine the current threat level, and based on the current threat level, determine the corresponding security response strategy. Based on the corresponding security response strategy, adjust the clock wheel parameters of the multi-layer clock wheel model, and determine the priority of each upgrade task according to the security type of each upgrade task. Adjust the upgrade order and / or the download time slots corresponding to the upgrade tasks according to the priority of each upgrade task.

3. The vehicle OTA scheduling response method according to claim 1, characterized in that, The step of allocating each upgrade task waiting to be downloaded to the corresponding download time slot in the multi-layer clock wheel model according to the upgrade order includes: The established dependency constraints are mapped to the hierarchical structure of the established multi-layer clock wheel model to obtain the upgrade order; Calculate the earliest start time and the latest start time of each vehicle controller, and determine the time window based on the earliest start time and the latest start time; Within the time window, each upgrade task is assigned to its corresponding download time slot according to the upgrade order, and the time window is updated.

4. The vehicle OTA scheduling response method according to claim 1, characterized in that, The step of obtaining the upgrade monitoring result based on the upgrade monitoring parameters includes: Based on the upgrade process of the current upgrade task, the current upgrade execution environment is monitored in stages to obtain the current upgrade monitoring parameters; Based on the current upgrade monitoring parameters, determine the current upgrade anomaly level and execute the corresponding set anomaly response strategy; wherein, the upgrade monitoring result includes the upgrade anomaly level and the corresponding set anomaly response strategy.

5. The vehicle OTA scheduling response method according to claim 1, characterized in that, The step of executing the corresponding upgrade task based on the current clock wheel pointer position, and executing each upgrade task according to the set clock wheel cascading order and the upgrade order, includes: In response to a timer trigger command, the current clock wheel pointer position is obtained according to the timer trigger command; Based on the current clock wheel pointer position, detect whether there is a corresponding upgrade task in the download time slot corresponding to the current clock wheel pointer position; When it is determined that a corresponding upgrade task exists, the corresponding upgrade task is executed. According to the set clock wheel cascading order and the upgrade order, each clock wheel level is traversed and each upgrade task is executed.

6. The vehicle OTA scheduling response method according to claim 4, characterized in that, The step of determining the current upgrade anomaly level based on the current upgrade monitoring parameters and executing the corresponding set anomaly response strategy includes: Based on the current upgrade monitoring parameters, the current upgrade anomaly level is determined to be a severe anomaly level; Based on the severity level of the anomaly, execute the anomaly response strategy corresponding to the severity level of the anomaly. According to the established anomaly response strategy corresponding to the severity level of the anomaly, the established automatic rollback operation is executed.

7. The vehicle OTA scheduling response method according to claim 1, characterized in that, The method further includes: Obtain the currently inserted upgrade task, and select the corresponding clock wheel level from the set multi-layer clock wheel model according to the upgrade parameters of the currently inserted upgrade task; Based on the upgrade parameters, the optimal download time slot is determined from the corresponding clock wheel level, and the currently inserted upgrade task is inserted into the optimal download time slot.

8. The vehicle OTA scheduling response method according to claim 2, characterized in that, The multi-layer clock wheel model includes: a millisecond wheel level for handling emergency security upgrade tasks, a second wheel level for handling real-time upgrade tasks, a minute wheel level for handling regular upgrade tasks, and an hour wheel level for handling large upgrade tasks.

9. A vehicle control device, characterized in that, It includes a memory, a processor, and a program stored in the memory and executable on the processor, wherein the program, when executed by the processor, implements the clock wheel-based vehicle OTA scheduling response method according to any one of claims 1 to 8.

10. A computer-readable storage medium storing a computer program, characterized in that, When the computer program is executed by the processor, it implements the vehicle OTA scheduling response method based on the clock wheel as described in any one of claims 1 to 8.

Images