Intelligent management method and system for vehicle locking downloading

Abstract

The invention provides an intelligent management method and system for vehicle locking downloading, after a vehicle receives a vehicle locking signal, a low-power-consumption downloading domain is activated, and power supply of a communication module, a safety chip, a storage controller and a battery management system BMS is reserved; collecting the state of charge (SOC) of the battery, the temperature of the battery and the accumulated cycle index, and calculating a sustainable downloading duration T value; calculating an expected downloadable data volume according to the T value and the total size of the upgrade package, and dividing the upgrade package into a priority section and a delay section; downloading the priority segment and the delay segment in sequence; and after the vehicle is started, verifying the integrity of the downloaded data and continuously transmitting the uncompleted content. The OTA upgrade can make full use of the locking parking time of the vehicle, and the upgrade efficiency is greatly improved.

Description

Technical Field

[0001] This invention relates to the field of intelligent connected vehicle technology, specifically to an intelligent management method and system for vehicle locking and downloading. Background Technology

[0002] With the development of intelligent connected vehicles, OTA upgrades have become an important way to iterate vehicle functions. However, there is a prominent technical challenge in the existing technology: when the vehicle is turned off and locked, the entire vehicle enters a dormant state, causing the OTA download to be interrupted immediately.

[0003] Specifically, in order to protect the battery, existing vehicles, after being locked by the user, will have most of their electrical equipment, including the communication module, powered off by the vehicle's control system, putting the vehicle into a deep sleep mode. While this design can prevent the battery from running out of power, it introduces the following problems.

[0004] Users must keep their vehicles powered on to complete the OTA download. For large upgrade packages (such as 5-10GB), this can take 1-2 hours or even longer, requiring users to wait in their vehicles or keep them powered on, severely impacting user experience. Downloads can only be performed while the user is driving or charging, missing a significant amount of available time spent with the vehicle locked and parked, resulting in long upgrade cycles and delays in deploying critical security upgrades. Furthermore, network resources are wasted: each vehicle restart requires re-establishing a connection and starting the download from scratch, failing to effectively utilize already downloaded data and causing a double waste of network resources and time. The requirement for active user cooperation and long waiting times leads to low actual upgrade rates, with many vehicles remaining on older software versions for extended periods.

[0005] Therefore, how to achieve continuous, intelligent, and secure OTA downloads while the vehicle is locked, while ensuring battery safety, has become an urgent technical problem to be solved. Summary of the Invention

[0006] This invention provides an intelligent management method and system for OTA downloads after vehicle locking, in order to solve the technical problems of OTA download interruption or excessive power consumption after vehicle locking in the prior art.

[0007] To achieve the above objectives, the present invention provides the following technical solutions.

[0008] In a first aspect, the present invention provides an intelligent management method for vehicle locking downloads, comprising the following steps: 1. A smart management method for vehicle locking download, characterized by the following steps: After receiving the vehicle lock signal, the low-power download domain is activated while maintaining power supply to the communication module, security chip, storage controller, and battery management system (BMS). Battery state of charge (SOC), battery temperature, and cumulative cycle count are collected to calculate the sustainable download duration T. Based on the T value and the total size of the upgrade package, the expected downloadable data volume is calculated to obtain the priority and delay segments of the upgrade package. The priority and delay segments are downloaded sequentially. After vehicle startup, the integrity of the downloaded data is verified, and any incomplete data is resumed.

[0009] Preferably, the step of activating the low-power download domain while maintaining power supply to the communication module, security chip, and storage controller includes: After receiving the vehicle lock signal, the vehicle's Body Control Module (BCM) shuts off the power supply to the air conditioner, headlights, and central control screen through hardware-level power isolation, while retaining power supply to the communication module, the security chip, the storage controller, and the BMS. The communication module uses a time-division multiplexing wake-up mechanism to intermittently receive upgrade data, which is then processed by the security chip, the storage controller, and the BMS.

[0010] Preferably, the expression for calculating the sustainable download duration T is: T = k1 × SOC × (1 - k2 × |T 当前 -T 最优 |)×(1-k3×cyclic decay coefficient); Where k1 is the maximum usable time under ideal conditions, k2 is the temperature correction factor, k3 is the cycle decay correction factor, and T 最优 For the optimal operating temperature of the battery, T 当前 This indicates the current battery temperature.

[0011] Preferably, the method further includes the following steps: the cloud calculates the expected downloadable data volume based on the T value and the total size of the upgrade package, and divides the upgrade package into a priority segment and a delay segment: The cloud platform calculates the expected downloadable data volume based on the T value and the preset average download speed. The cloud platform divides the upgrade package into the priority segment and the delay segment according to the expected downloadable data volume; The priority segment includes upgrade metadata, digital signature, differential upgrade engine and core control code, and the amount of data in the priority segment is dynamically adjusted according to the expected amount of downloadable data. The delay segment includes UI resource packs, voice packs, and log templates; The delayed segment is downloaded after the priority segment has been downloaded, so as to ensure that all data in the priority segment is downloaded first.

[0012] Preferably, the step of downloading the priority segment and the delay segment in sequence includes: The closed-loop control is repeatedly executed at intervals to reread the current battery parameters of the BMS and dynamically adjust the power of the communication module. The battery status is determined based on the current battery parameters, and the battery status is divided into normal status, warning status, and danger status: Normal state: The SOC is greater than the first SOC threshold and T2 ≤ T 当前 ≤T3 and the fluctuation of battery voltage is not greater than the voltage fluctuation threshold; Warning status: The SOC is within the range of the second SOC threshold to the first SOC threshold, or T1≤T 当前 <T2, or T3 < T 当前 ≤T4; Dangerous state: The SOC is lower than the second SOC threshold, T 当前 <T1 or T 当前 >T4, or the battery voltage suddenly drops beyond the voltage fluctuation threshold; When downloading the aforementioned priority segment: Under normal conditions, the communication module downloads at full power; In the warning state, the power of the communication module is reduced to continue downloading the priority segment; if the normal state is restored, the power is restored to full. In dangerous situations, immediately terminate the download, save the progress, and enter standby mode; When downloading the aforementioned delay segment: Under normal conditions, the communication module downloads at full power; In a warning or danger state, stop downloading the delayed segment and save the progress.

[0013] Preferably, the step of downloading the priority segment and the delay segment in sequence further includes: The downloaded data is then input into the security chip for encryption. The encrypted data generates a SHA-256 hash value as key verification information and stores it in an EEPROM with tamper-proof features; The encrypted main data is stored in a Flash memory with power-loss protection; The data in the EEPROM and Flash are associated through chained hashing, where the hash value of the subsequent data block contains the check value of the previous data block, forming a complete data chain.

[0014] Preferably, the steps of verifying the integrity of downloaded data and resuming the transmission of incomplete content after vehicle startup include: When the vehicle's ACC is powered on or a charging status is detected, the verification and transmission module reads the hash chain in the EEPROM and verifies the integrity of the downloaded data in the Flash according to the chain hash order. If all data blocks pass verification, request the incomplete content from the cloud and implement breakpoint resumption based on the HTTP Range header; If a data block with a mismatched hash value is found, only the corrupted data block is retransmitted, and the hash chain verification is performed again after the retransmission is completed.

[0015] Preferably, the digital signature is generated using the SM2 algorithm; The core control code includes ECU drivers; The upgrade metadata includes version information and a hardware compatibility list.

[0016] Preferably, the method for determining k1, k2, and k3 includes: k1 was determined by laboratory calibration, at a SOC of 100%, and at T 当前 equal to the T 最优 Furthermore, under the ideal condition where the cycle decay coefficient is 0, the longest usable test duration is achieved. By testing the available time at different temperature points and comparing it with k1 under the ideal state, k2 is determined. By testing the battery's usable time at different cycle counts and comparing it with k1 under the ideal condition, k3 is determined.

[0017] Secondly, the present invention also provides an intelligent management system for vehicle locking download, comprising: The Body Control Module (BCM) receives the vehicle locking signal and shuts off the power supply to the air conditioning, headlights, and central control screen through hardware-level power isolation, while retaining power supply to the communication module, security chip, storage controller, and battery management system (BMS) to activate the low-power download domain. The Battery Management System (BMS) is used to collect battery state of charge (SOC), battery temperature, and cumulative cycle count, and calculates these values ​​according to the formula T = k1 × SOC × (1 - k2 × |T|). 当前 -T 最优 The sustainable download duration T is calculated using |)×(1-k3×cyclic decay coefficient). Where k1 is the maximum usable time under ideal conditions, k2 is the temperature correction factor, k3 is the cycle decay correction factor, and T 最优 For the optimal operating temperature of the battery, T 当前 Indicates the current battery temperature; The cloud server is used to receive the T-value and total size of the upgrade package reported by the vehicle, calculate the expected downloadable data volume based on the T-value and the preset average download speed, and divide the upgrade package into priority segments and delay segments according to the expected downloadable data volume. The communication module uses a time-division multiplexing wake-up mechanism to intermittently receive upgrade data sent by the cloud server, which is used to download the priority segment and the delay segment in sequence; The dynamic adjustment module is used to repeatedly execute closed-loop control at intervals, reread the current battery parameters of the BMS and dynamically adjust the power of the communication module; it determines the battery status as normal, warning or dangerous based on the current battery parameters and adjusts the download strategy accordingly. A security chip is used to encrypt the downloaded data. The storage unit includes an EEPROM with tamper-proof features and a Flash with power-loss protection; the EEPROM is used to store the SHA-256 hash value generated by the encrypted data as key verification information; the Flash is used to store the encrypted main data; the data in the EEPROM and the Flash are associated through chained hashing, and the hash value of the subsequent data block contains the verification value of the previous data block, forming a complete data chain; The verification and resume module is used to read the hash chain in the EEPROM after the vehicle starts, and verify the integrity of the downloaded data in the Flash according to the chain hash order. If all data blocks pass the verification, the module requests the incomplete content from the cloud and implements breakpoint resume based on the HTTP Range header. If a data block with a mismatched hash value is found, only the corrupted data block is retransmitted.

[0018] Compared with the prior art, the present invention has at least the following beneficial effects: This invention solves the problem of immediate interruption of downloads when the vehicle is locked in existing technologies. Through hardware-level low-power download domain technology, it enables critical modules such as communication modules and security chips to maintain power supply even when the vehicle is locked, with a power consumption of only 5-8W, achieving continuous download capability even when the vehicle is locked. This fundamentally changes the limitation of existing technologies that require the vehicle to be powered on for downloads, allowing OTA upgrades to fully utilize vehicle parking time, such as 8-10 hours of overnight parking or 8-9 hours of daytime parking on weekdays, significantly improving upgrade efficiency. User experience and upgrade success rate are also improved.

[0019] This invention utilizes a ternary lithium battery health assessment model, integrating SOC, real-time temperature, and cycle degradation coefficients to dynamically calculate the sustainable download time T, thus achieving differentiated download strategies for batteries in different health states. Compared to existing technologies that employ fixed strategies or completely prohibit downloading while the vehicle is locked, this invention ensures battery safety, avoids over-discharge and abnormal temperature, and maximizes the use of available download time windows. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of the present invention, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this utility model. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0021] Figure 1 This is a schematic diagram of the method flow according to an embodiment of the present invention. Detailed Implementation

[0022] To make the objectives, technical solutions, and advantages of this utility model clearer, the embodiments of this utility model will be described in further detail below with reference to the accompanying drawings.

[0023] Example 1 like Figure 1 As shown, this embodiment of the invention provides an intelligent management method for vehicle locking downloads, including the following steps: Step 1: Activate the low-power download domain Upon receiving a vehicle lock signal, the system immediately activates a low-power download domain while maintaining power supply to the communication module, security chip, storage controller, and battery management system (BMS). Specifically, upon receiving the lock signal, the body control module (BCM) selectively shuts off power to non-essential devices such as the air conditioning, headlights, and central control screen using hardware-level power isolation technology, retaining power only for the communication module, security chip, storage controller, and BMS. This download domain employs a carefully designed power management strategy, strictly controlling standby power consumption within the 5-8W range, reducing power consumption by over 80% compared to the 30-50W power consumption of the traditional ACC power-on mode.

[0024] To further optimize power consumption, the communication module employs a time-division multiplexing wake-up mechanism, waking from sleep mode every 10 seconds to receive upgrade data. After receiving the data, it enters sleep mode again, allowing the security chip, storage controller, and BMS to process the upgrade data. This intermittent operation reduces the average power consumption of the communication module from 5W during continuous operation to approximately 1.5W, maximizing battery savings while maintaining download capabilities.

[0025] Step 2: Calculate the sustainable download duration The system assesses battery health by real-time acquisition of three core battery parameters through the BMS: current state of charge (SOC), average temperature of individual battery cells, and cumulative cycle count. Based on these parameters, the system dynamically calculates the sustainable download duration T using a pre-defined model. The calculation expression is as follows: T = k1 × SOC × (1 - k2 × |T 当前-T 最优 |)×(1-k3×cyclic decay coefficient); Where k1 is the maximum available time under ideal conditions, determined through laboratory calibration. Calibration conditions are: SOC 100%, T... 当前 equal to T 最优 The maximum usable time is obtained by testing the battery under ideal conditions where its optimal operating temperature and cycle degradation coefficient are 0. k2 is a temperature correction factor, determined by testing usable time at different temperatures (0℃, 10℃, 20℃, 30℃, and 40℃) and comparing it to the ideal k1 value, reflecting the impact of temperature deviation from the optimal value on usable time. k3 is a cycle degradation correction factor, determined by testing the battery's usable time at different cycle counts (100, 500, 1000, and 2000 cycles) and comparing it to the ideal k1 value, reflecting the impact of battery aging on usable time.

[0026] The cycle degradation coefficient is dynamically calculated based on the cumulative number of cycles, using the formula: Cycle degradation coefficient = Cumulative number of cycles × k3, with a value range of 0-1, where 0 represents brand new with no degradation and 1 represents complete failure. For example, when the coefficient is 0.8 after 1000 cycles, the T value decreases by 20%. The system also has a protection mechanism for special cases: when SOC ≤ 20%, the T value is forcibly set to 0 and downloading is prohibited to prevent over-discharge of the battery from affecting vehicle starting; when T current > 40℃ or T current < -10℃, the T value is also forcibly set to 0 and downloading is prohibited to prevent extreme temperatures from damaging the battery.

[0027] Step 3: Vehicle-Cloud Collaborative Tiered Download After calculating the T-value, the vehicle reports information such as the sustainable download duration T-value, the total size of the upgrade package, and the current network status to the cloud server via the 5G / 4G network. The cloud server then calculates the expected downloadable data volume based on the reported information, using the formula: Expected downloadable data volume = T-value × average download speed. In a 5G network environment, considering actual network fluctuations and protocol overhead, the actual download speed is approximately 30%-40% of the theoretical peak speed.

[0028] Based on the expected downloadable data volume, the cloud server intelligently divides the upgrade package into a priority segment and a delayed segment, which will not be elaborated upon in this embodiment. The priority segment includes upgrade metadata (including version information, hardware compatibility list, and upgrade order list), digital signature (generated using the national cryptographic SM2 algorithm), differential upgrade engine, and core control code (including ECU drivers, underlying firmware, critical business logic, etc.). This content directly affects the vehicle's safety and core functions, and therefore is transmitted with priority. The delayed segment includes non-core content such as UI resource packages, voice packages, and log templates. This content is downloaded after the priority segment is completed to ensure the priority and integrity of the core data.

[0029] The cloud server transmits priority segments via the operator's 5G slicing channel, keeping latency below 50ms to ensure that core content can be downloaded first. Delayed segments only mark download progress and automatically resume downloading when the vehicle starts again or enters charging mode, making full use of all available download time windows.

[0030] Step 4: Dynamic Power Consumption Adjustment Throughout the download process, the system's dynamic adjustment module continuously executes closed-loop control, rereading the current battery parameters from the BMS every 5 minutes and dynamically adjusting the communication module's power. Based on the current battery parameters, the system classifies the battery status into three levels and adopts corresponding download strategies.

[0031] The criteria for determining a normal state are: SOC greater than the first SOC threshold (e.g., 30%), and T2 ≤ T. 当前 The temperature is ≤T3 (e.g., T2=15℃, T3=35℃) and the battery voltage fluctuation does not exceed the voltage fluctuation threshold (e.g., ≤0.5V / minute). Under this condition, the communication module downloads at full power, making full use of the available download time window.

[0032] The criteria for determining a warning state are: SOC is within the range of the second SOC threshold to the first SOC threshold (e.g., 20%-30%), or T1≤T 当前 <T2 or T3 <T 当前 ≤T4 (e.g., T1=5℃, T4=45℃). When the system enters a warning state, if it is downloading a priority segment, the system will reduce the communication module power to 60%-80% (i.e., 1.2-1.6W) to continue downloading. If the battery status returns to normal, it will restore full power. If it is downloading a delay segment, the system will immediately stop downloading and save the current progress.

[0033] The criteria for determining a dangerous state are: SOC is below the second SOC threshold (e.g., 20%), T 当前 <T1 or T 当前 >T4 (e.g., below 5℃ or above 45℃), or the battery voltage suddenly drops beyond the voltage fluctuation threshold (e.g., >0.5V / minute). In this state, if the download priority segment is in progress, the system immediately terminates the download and saves the progress, entering a minimum power consumption standby state, maintaining power only for storage; if the download delay segment is in progress, the download is also immediately stopped and the progress is saved, ensuring that core content is completed first while protecting battery safety.

[0034] Step 5: Distributed Encrypted Storage Downloaded data undergoes a rigorous encryption and storage process to ensure its security and integrity. First, all downloaded data, whether priority or delay segments, is input into the security chip SE for AES-256 encryption. The encryption key is stored in a secure internal storage area of ​​the SE, inaccessible externally.

[0035] Next, the system generates a SHA-256 hash value for every 128MB of encrypted data as key verification information. For example, if the total size of the priority segment is 3.5GB, approximately 28 hash values ​​will be generated. These hash values ​​are stored in an tamper-proof EEPROM with a capacity of 128KB, which can store up to approximately 4000 hash values, corresponding to approximately 512GB of data.

[0036] The system employs a chained hash design to associate data in the EEPROM and Flash memory. Specifically, the hash value of the first data block is H1 = SHA-256 (data block 1), the hash value of the second data block is H2 = SHA-256 (data block 2‖H1), where ‖ represents a concatenation operation, the hash value of the third data block is H3 = SHA-256 (data block 3‖H2), and so on, forming a complete hash chain. The advantage of this design is that if any data block is tampered with, all subsequent hash value verifications will fail, thus quickly locating the corrupted location; simultaneously, the hash value Hn at the end of the hash chain can serve as an integrity fingerprint of the entire data packet for rapid verification.

[0037] Finally, the encrypted main data is stored in a 128GB Flash memory with power-loss protection, using the NVMe protocol and achieving read / write speeds of up to 3000MB / s to ensure rapid data storage. The Flash memory employs partition management, with each partition corresponding to an upgrade version, facilitating version management and rollback.

[0038] Step 6: Verify Resume Download from Breakpoint When the vehicle is started again (ACC power is on) or charging status is detected, the data transmission verification module immediately starts working. First, the module reads the stored hash chain H1, H2, H3, ..., Hn from the EEPROM, and then verifies the integrity of the data downloaded to Flash segment by segment according to the chain hash order.

[0039] The verification process is as follows: Read the first block of data from Flash, calculate its hash value H1' = SHA-256 (data block 1), compare H1' with H1 stored in EEPROM, if they are equal, the verification is successful, and continue to verify the next block; read the second block of data (128MB), calculate its hash value H2' = SHA-256 (data block 2‖H1), compare H2' with H2; and so on, until all downloaded data blocks are verified.

[0040] If all data blocks pass verification, the system requests the remaining content from the cloud server. The request includes an HTTP Range header, specifying the range of bytes to be downloaded. For example, if the entire 3.5GB priority segment and the 2.5GB delay segment have been downloaded, the request would be Range: bytes=6291456000-10737418239, corresponding to 6GB to 10GB of content. The cloud server returns the remaining data based on the Range header, and the vehicle continues downloading and storing it.

[0041] If a data block with a mismatched hash value is found, such as the 15th data block being corrupted, the system only retransmits the corrupted data block. The retransmission request also includes an HTTP Range header, specifying the byte range of the corrupted data block. For example, if the 15th data block corresponds to 1.8GB-1.9GB, the request would be Range: bytes=1932735283-2040109465. After retransmission, the system performs hash chain verification again to ensure data integrity.

[0042] Once all data blocks have been verified and the delay segment has been downloaded, the system begins the complete upgrade process: The SM2 algorithm is used to verify the digital signature of the upgrade package, ensuring it originates from a legitimate source and has not been tampered with; the secure SE chip is used to decrypt the encrypted upgrade package data; the differential upgrade engine parses the differential package, applying the binary differences between the new and old versions to the existing firmware; the upgraded firmware is flashed into the corresponding electronic control unit (ECU); finally, the vehicle system is restarted to verify the functionality of the upgraded system. If the upgrade fails, the system automatically rolls back to the previous version.

[0043] Example 2 This embodiment provides an intelligent management system for vehicle locking download, including: The Body Control Module (BCM) serves as the system's control center. It is responsible for receiving the vehicle lock signal and shutting off the power supply to the air conditioning, headlights, and central control screen through hardware-level power isolation technology. At the same time, it only retains power supply to the communication module, security chip, storage controller, and battery management system (BMS), thereby activating the low-power download domain.

[0044] The Battery Management System (BMS) is responsible for collecting key parameters such as the battery's State of Charge (SOC), battery temperature, and cumulative cycle count, and applying them according to the formula T = k1 × SOC × (1 - k2 × |T|). 当前 -T 最优 The sustainable download duration T is calculated using the formula: |)×(1-k3×cyclic decay coefficient); where k1 is the maximum usable duration under ideal conditions, k2 is the temperature correction coefficient, k3 is the cyclic decay correction coefficient, and T... 最优 For the optimal operating temperature of the battery, T 当前 Indicates the current battery temperature; The cloud server, acting as the data source and decision-making center, is responsible for receiving the T-value and total size of the upgrade package reported by the vehicle. Based on the T-value and the preset average download speed, it calculates the expected downloadable data volume and intelligently divides the upgrade package into priority and delay segments according to the expected downloadable data volume, ensuring that core content is transmitted first.

[0045] The communication module uses a time-division multiplexing wake-up mechanism to intermittently receive upgrade data sent by the cloud server, which is used to download priority segments and delay segments in sequence. This module effectively reduces power consumption through intermittent operation while ensuring the reliability of data transmission.

[0046] The dynamic adjustment module continuously executes closed-loop control, repeatedly reading the current battery parameters from the BMS at intervals and dynamically adjusting the communication module power. Based on the current battery parameters, this module determines the battery status as normal, warning, or dangerous, and adjusts the download strategy accordingly, ensuring both download efficiency and battery safety.

[0047] The security chip is specifically responsible for encrypting the downloaded data, using the AES-256 encryption algorithm to ensure the security of data transmission and storage, and to prevent data from being illegally tampered with or stolen.

[0048] The storage unit consists of two parts: an EEPROM with tamper-proof features and a Flash memory with power-loss protection. The EEPROM stores the SHA-256 hash value generated from the encrypted data as critical verification information, while the Flash memory stores the encrypted main data. The data in the EEPROM and Flash memory are linked through a chained hash mechanism, where the hash value of the subsequent data block contains the verification value of the previous data block, forming a complete data chain and providing reliable protection for data integrity verification.

[0049] After the vehicle starts, the verification and resume module reads the hash chain in the EEPROM and verifies the integrity of the downloaded data in the Flash memory segment by segment according to the chained hash order. If all data blocks pass verification, the module requests the incomplete content from the cloud and resumes the transmission based on the HTTP Range header; if a data block with a mismatched hash value is found, only the corrupted data block is retransmitted to avoid unnecessary data retransmission and improve upgrade efficiency.

[0050] Example 3: Complete Car Locking Download Process This embodiment describes in detail the entire process of OTA upgrade downloading when a vehicle is locked, through a complete application scenario, and demonstrates how the various modules work together to achieve intelligent management.

[0051] Step 1: Activate the low-power download domain When a user signals to lock the vehicle via remote key or keyless entry, the Body Control Module (BCM) immediately triggers a mode switch. Unlike traditional technologies where all electrical equipment is powered off and the vehicle enters deep sleep mode after locking, this system selectively shuts down power to non-essential devices through a hardware-level power management chip, while preserving power to critical download modules. The system shuts down power to the air conditioning system, lighting system (including headlights, taillights, and interior lights), central control screen and entertainment system, seat heating / ventilation system, etc., while preserving power to the 5G / 4G communication module, security chip (SE), NVMe storage controller, battery management system (BMS), and the BCM itself. The standby power consumption of the entire download domain is approximately 5-8W, which is more than 80% lower than the 30-50W power consumption of the traditional ACC power-on mode.

[0052] Step 2: Battery Health Assessment and T-Value Calculation After activating the low-power download domain, the BMS collects three core parameters in real time: the current SOC (e.g., 65%, accuracy ±1%), the current average temperature of the battery cell (e.g., 25°C, collected by multiple temperature sensors distributed in the battery pack), and the cumulative number of cycles (e.g., 500 times, recording the total number of charge and discharge cycles since the battery left the factory).

[0053] Assuming the system parameters are: k1 = 4 hours, which are calibrated in the laboratory at a SOC of 100% and T... 当前 equal to T 最优 The readings were taken under ideal conditions of 25℃ and a cycle degradation coefficient of 0; k2=0.02, indicating that for every 1℃ deviation from the optimal temperature, the usable time decreases by 2%; k3=0.0002, indicating the degree of battery aging; T 最优 =25℃. Under the current conditions, the cycle decay coefficient = 500 × 0.0002 = 0.1, the temperature correction term = 1 - 0.02 × |22 - 25| = 0.94, and the cycle decay correction term = 1 - 0.1 = 0.9. Therefore, T = 4 × 0.65 × 0.94 × 0.9 ≈ 2.19 hours, approximately 131 minutes. This T value will be reported to the cloud server for dynamically adjusting the download strategy.

[0054] Step 3: Vehicle-Cloud Collaborative Tiered Download The vehicle reports a T-value of 2.19 hours, a total upgrade package size of 10GB, and the current network status (5G network and signal strength) to the cloud server via the 5G / 4G network. The cloud server calculates the expected downloadable data volume as 2.19 hours × 3600 seconds / hour × 10MB / s ≈ 78840MB ≈ 77GB, assuming an average download speed of 10MB / s under the 5G network, without considering actual network fluctuations and protocol overhead.

[0055] Since the total size of the upgrade package is 10GB, which is less than the expected downloadable data size of 77GB, theoretically the entire download can be completed while the car is locked. However, considering factors such as actual network fluctuations and power consumption adjustments, the cloud server will still intelligently divide the upgrade package. The priority segment is approximately 3.5GB (accounting for 35%), including approximately 5MB of upgrade metadata (version information, hardware compatibility list, upgrade order list), approximately 2MB of digital signature (public key certificate generated using the national cryptographic SM2 algorithm, signature value, signature algorithm identifier), approximately 50MB of differential upgrade engine (used to parse differential packets and perform incremental updates), and approximately 3.4GB of core control code (ECU drivers, underlying firmware, key business logic, etc.). The latency segment is approximately 6.5GB (accounting for 65%), including approximately 4GB of UI resource package (icons, background images, animation effects, interface layout files for the central control screen), approximately 2GB of voice package (voice library, voice recognition model, multi-language support data for the voice assistant), and approximately 0.5GB of log templates (fault diagnosis log template, user behavior analysis template, performance monitoring template).

[0056] The cloud server transmits priority segments via the operator's 5G slicing channel, keeping latency below 50ms to ensure core content is completed first. Delayed segments only mark download progress and resume downloading the next time the vehicle starts or enters charging mode.

[0057] Step 4: Dynamic Power Consumption Adjustment Assuming the vehicle starts downloading at SOC=65%, T 当前 =22℃, under normal conditions, the communication module downloads at full power. After about 1 hour of downloading, the SOC drops to 28%, entering a warning state. At this time, if a priority segment is being downloaded, the system reduces the communication module power to 1.4W to continue downloading the priority segment; if the priority segment download has been completed and the delayed segment download has begun, the system immediately stops the delayed segment download and saves the current progress.

[0058] Thirty minutes later, the SOC dropped to 18%, entering a critical state. The system immediately terminated all download activities, saved the current progress, and entered a minimum power standby state, maintaining power only for storage to ensure that downloaded data was not lost and the battery was adequately protected.

[0059] Step 5: Distributed Encrypted Storage During the entire download process, all data is first input into the security chip SE for AES-256 encryption, and the encryption key is stored in a secure storage area inside the SE. One SHA-256 hash value is generated for every 128MB of encrypted data. If the total size of the priority segment is 3.5GB, approximately 28 hash values ​​are generated and stored in an EEPROM with tamper-proof features.

[0060] The system employs a chained hash design: H1 = SHA-256 (data block 1), H2 = SHA-256 (data block 2 || H1), H3 = SHA-256 (data block 3 || H2), and so on, forming a complete data chain. The encrypted main data is stored in Flash memory with power-loss protection.

[0061] Step 6: Resume interrupted download and verify integrity When the vehicle starts again (ACC power is on) or charging is detected, the data transmission verification module reads the hash chain from the EEPROM and verifies the integrity of the downloaded data in the Flash memory segment by segment according to the chained hash order. If all data blocks pass verification, the module requests the remaining content from the cloud server. The request includes an HTTP Range header, for example, Range: bytes=6291456000-10737418239, corresponding to 6GB to 10GB. If a data block with a mismatched hash value is found, such as the 15th data block being corrupted, only the corrupted data block is retransmitted, for example, requesting Range: bytes=1932735283-2040109465, corresponding to 1.8GB to 1.9GB. After retransmission, the hash chain verification is performed again.

[0062] Once all data blocks have been verified and the delay segment has been downloaded, the system begins the complete upgrade process: The SM2 algorithm is used to verify the digital signature of the upgrade package, ensuring it originates from a legitimate source and has not been tampered with; the secure SE chip is used to decrypt the encrypted upgrade package data; the differential upgrade engine parses the differential package, applying the binary differences between the new and old versions to the existing firmware; the upgraded firmware is flashed into the corresponding electronic control unit (ECU); the vehicle system is restarted to verify the functionality of the upgraded system. If the upgrade fails, the system automatically rolls back to the previous version, ensuring the vehicle remains operational.

[0063] Unless otherwise defined, the technical or scientific terms used herein shall have the ordinary meaning understood by one of ordinary skill in the art to which this utility belongs. The terms “first,” “second,” and similar terms used in this utility patent application specification and claims do not indicate any order, quantity, or importance, but are merely used to distinguish different components. Similarly, the terms “an” or “a” and similar terms do not indicate a quantity limitation, but rather indicate the presence of at least one. The terms “comprising” or “including” and similar terms mean that the elements or objects preceding “comprising” or “including” encompass the elements or objects listed following “comprising” or “including” and their equivalents, and do not exclude other elements or objects. The terms “connected” or “linked” and similar terms are not limited to physical or mechanical connections, but can include electrical connections, whether direct or indirect. “Above,” “below,” “left,” “right,” etc., are used only to indicate relative positional relationships; when the absolute position of the described objects changes, the relative positional relationship may also change accordingly.

[0064] The above description is only an optional embodiment of this utility model and is not intended to limit this utility model. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this utility model should be included within the protection scope of this utility model.

Claims

1. A smart management method for vehicle locking download, characterized in that: Includes the following steps: After receiving the vehicle lock signal, the low-power download domain is activated while maintaining power supply to the communication module, security chip, storage controller, and battery management system (BMS). Battery state of charge (SOC), battery temperature, and cumulative cycle count are collected to calculate the sustainable download duration T. Based on the T value and the total size of the upgrade package, the expected downloadable data volume is calculated to obtain the priority and delay segments of the upgrade package. The priority and delay segments are downloaded sequentially. After vehicle startup, the integrity of the downloaded data is verified, and any incomplete data is resumed.

2. The intelligent management method for vehicle locking download according to claim 1, characterized in that: The steps of activating the low-power download domain while maintaining power supply to the communication module, security chip, and storage controller include: After receiving the vehicle lock signal, the vehicle's Body Control Module (BCM) shuts off the power supply to the air conditioner, headlights, and central control screen through hardware-level power isolation, while retaining power supply to the communication module, the security chip, the storage controller, and the BMS. The communication module uses a time-division multiplexing wake-up mechanism to intermittently receive upgrade data, which is then processed by the security chip, the storage controller, and the BMS.

3. The intelligent management method for vehicle locking download according to claim 1, characterized in that: The expression for calculating the sustainable download duration T is: T = k1 × SOC × (1 - k2 × |T 当前 -T 最优 |)×(1-k3×cyclic decay coefficient); Where k1 is the maximum usable time under ideal conditions, k2 is the temperature correction factor, k3 is the cycle decay correction factor, and T 最优 For the optimal operating temperature of the battery, T 当前 This indicates the current battery temperature.

4. The intelligent management method for vehicle locking download according to claim 1, characterized in that: The method further includes the following steps: the cloud calculates the expected downloadable data volume based on the T value and the total size of the upgrade package, and divides the upgrade package into priority segments and delay segments: The cloud platform calculates the expected downloadable data volume based on the T value and the preset average download speed. The cloud platform divides the upgrade package into the priority segment and the delay segment according to the expected downloadable data volume; The priority segment includes upgrade metadata, digital signature, differential upgrade engine and core control code, and the amount of data in the priority segment is dynamically adjusted according to the expected amount of downloadable data. The delay segment includes UI resource packs, voice packs, and log templates; The delayed segment is downloaded after the priority segment has been downloaded, so as to ensure that all data in the priority segment is downloaded first.

5. The intelligent management method for vehicle locking download according to claim 1, characterized in that: The steps of downloading the priority segment and the delay segment in sequence include: The closed-loop control is repeatedly executed at intervals to reread the current battery parameters of the BMS and dynamically adjust the power of the communication module. The battery status is determined based on the current battery parameters, and the battery status is divided into normal status, warning status, and danger status: Normal state: The SOC is greater than the first SOC threshold and T2 ≤ T 当前 ≤T3 and the fluctuation of battery voltage is not greater than the voltage fluctuation threshold; Warning status: The SOC is within the range of the second SOC threshold to the first SOC threshold, or T1≤T 当前 <T2, or T3 < T 当前 ≤T4; Dangerous state: The SOC is lower than the second SOC threshold, T 当前 <T1 or T 当前 >T4, or the battery voltage suddenly drops beyond the voltage fluctuation threshold; When downloading the aforementioned priority segment: Under normal conditions, the communication module downloads at full power; In the warning state, the power of the communication module is reduced to continue downloading the priority segment; if the normal state is restored, the power is restored to full. In dangerous situations, immediately terminate the download, save the progress, and enter standby mode; When downloading the aforementioned delay segment: Under normal conditions, the communication module downloads at full power; In a warning or danger state, stop downloading the delayed segment and save the progress.

6. The intelligent management method for vehicle locking download according to claim 1, characterized in that: The step of downloading the priority segment and the delay segment sequentially further includes: The downloaded data is then input into the security chip for encryption. The encrypted data generates a SHA-256 hash value as key verification information and stores it in an EEPROM with tamper-proof features; The encrypted main data is stored in a Flash memory with power-loss protection; The data in the EEPROM and Flash are associated through chained hashing, where the hash value of the subsequent data block contains the check value of the previous data block, forming a complete data chain.

7. The intelligent management method for vehicle locking download according to claim 6, characterized in that: The steps for verifying the integrity of downloaded data and resuming the transfer of incomplete content after the vehicle starts include: When the vehicle's ACC is powered on or a charging status is detected, the verification and transmission module reads the hash chain in the EEPROM and verifies the integrity of the downloaded data in the Flash according to the chain hash order. If all data blocks pass verification, request the incomplete content from the cloud and implement breakpoint resumption based on the HTTP Range header; If a data block with a mismatched hash value is found, only the corrupted data block is retransmitted, and the hash chain verification is performed again after the retransmission is completed.

8. The intelligent management method for vehicle locking download according to claim 4, characterized in that: The digital signature is generated using the SM2 algorithm; The core control code includes ECU drivers; The upgrade metadata includes version information and a hardware compatibility list.

9. The intelligent management method for vehicle locking download according to claim 3, characterized in that: The methods for determining k1, k2, and k3 include: k1 was determined by laboratory calibration, at a SOC of 100%, and at T 当前 equal to the T 最优 Furthermore, under the ideal condition where the cycle decay coefficient is 0, the longest usable test duration is achieved. By testing the available time at different temperature points and comparing it with k1 under the ideal state, k2 is determined. By testing the battery's usable time at different cycle counts and comparing it with k1 under the ideal condition, k3 is determined.

10. A smart management system for vehicle locking download, characterized in that: include: The Body Control Module (BCM) receives the vehicle locking signal and shuts off the power supply to the air conditioning, headlights, and central control screen through hardware-level power isolation, while retaining power supply to the communication module, security chip, storage controller, and battery management system (BMS) to activate the low-power download domain. The Battery Management System (BMS) is used to collect battery state of charge (SOC), battery temperature, and cumulative cycle count, and calculates these values ​​according to the formula T = k1 × SOC × (1 - k2 × |T|). 当前 -T 最优 The sustainable download duration T is calculated using |)×(1-k3×cyclic decay coefficient). Where k1 is the maximum usable time under ideal conditions, k2 is the temperature correction factor, k3 is the cycle decay correction factor, and T 最优 For the optimal operating temperature of the battery, T 当前 Indicates the current battery temperature; The cloud server is used to receive the T-value and total size of the upgrade package reported by the vehicle, calculate the expected downloadable data volume based on the T-value and the preset average download speed, and divide the upgrade package into priority segments and delay segments according to the expected downloadable data volume. The communication module uses a time-division multiplexing wake-up mechanism to intermittently receive upgrade data sent by the cloud server, which is used to download the priority segment and the delay segment in sequence; The dynamic adjustment module is used to repeatedly execute closed-loop control at intervals, reread the current battery parameters of the BMS and dynamically adjust the power of the communication module; it determines the battery status as normal, warning or dangerous based on the current battery parameters and adjusts the download strategy accordingly. A security chip is used to encrypt the downloaded data. The storage unit includes an EEPROM with tamper-proof features and a Flash with power-loss protection; the EEPROM is used to store the SHA-256 hash value generated by the encrypted data as key verification information; the Flash is used to store the encrypted main data; the data in the EEPROM and the Flash are associated through chained hashing, and the hash value of the subsequent data block contains the verification value of the previous data block, forming a complete data chain; The verification and resume module is used to read the hash chain in the EEPROM after the vehicle starts, and verify the integrity of the downloaded data in the Flash according to the chain hash order. If all data blocks pass the verification, the module requests the incomplete content from the cloud and implements breakpoint resume based on the HTTP Range header. If a data block with a mismatched hash value is found, only the corrupted data block is retransmitted.

Images