Vehicle OTA upgrading method, system and device, vehicle and medium

Abstract

The embodiment of the invention provides an OTA upgrading method, system and device for a vehicle, the vehicle and a medium, and the method comprises the steps: receiving and judging whether an upgrading task is a silent task and meets a preset downloading condition through a vehicle-mounted remote information processing control unit, and avoiding blind awakening or invalid downloading; when the condition is met, the upgrade package is automatically downloaded, and the intelligent cockpit domain controller is awakened, so that on-demand activation is realized, and unnecessary power consumption is reduced; then, the intelligent cockpit domain controller performs security verification on the upgrade package and then performs upgrade, so that the security and integrity of the upgrade package are guaranteed; according to the process, intelligence and condition self-adaption of upgrading triggering are achieved, a cooperation mechanism between the vehicle-mounted remote information processing control unit and the domain controller is optimized, energy consumption of the whole vehicle is remarkably reduced, and efficiency, safety and user experience of OTA upgrading are improved.

Description

Technical Field

[0001] This invention relates to the field of vehicle technology, and in particular to an OTA (Over-The-Air) upgrade method, system, device, vehicle, and medium for vehicles. Background Technology

[0002] With the development of intelligent connected new energy vehicle technology, OTA technology has become a core means for automakers to iterate vehicle functions and fix software defects. However, in the existing technology, the traditional OTA download solution has problems such as insufficient intelligent process triggering, low coordination efficiency of various service units, and insufficient optimization of vehicle energy consumption. Summary of the Invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide a vehicle OTA upgrade method, system, apparatus, vehicle, and medium that overcomes or at least partially solves the above problems.

[0004] In a first aspect, embodiments of the present invention provide an OTA (Over-The-Air) upgrade method for a vehicle, applied to a vehicle including an intelligent cockpit domain controller and an in-vehicle telematics control unit; the method includes: The vehicle-mounted telematics control unit obtains the upgrade task sent by the wireless download platform. If the upgrade task is a silent task and the upgrade task meets the download conditions, the upgrade package is obtained from the wireless download platform, and the intelligent cockpit domain controller is woken up. After the upgrade package is verified and approved, the intelligent cockpit domain controller performs the upgrade according to the upgrade package.

[0005] Optionally, the intelligent cockpit domain controller includes a human-machine interface, a vehicle control unit, and a domain controller, and the method further includes: When the upgrade package download fails, the vehicle control unit determines the reason for the failure and sends it to the wireless download platform and the human-machine interface, and then terminates the current download process. In response to a re-download command input through the human-computer interaction interface, the download operation is resumed via the domain controller.

[0006] Optionally, it also includes: The download progress of the upgrade package is obtained through the domain controller, and the download progress is sent to the wireless download platform and the human-computer interaction interface for display on the human-computer interaction interface.

[0007] Optionally, it also includes: If the upgrade task is not a silent task, the vehicle telematics control unit determines whether the upgrade task is an automatic upgrade task; if the upgrade task is not an automatic upgrade task, the vehicle telematics control unit pushes an update notification to the human-machine interface. In response to user commands input through the human-computer interaction interface, the upgrade task is executed through the domain controller.

[0008] Optionally, it also includes: When the upgrade task is interrupted, the interruption location of the upgrade task is obtained through the vehicle control unit; When preset conditions are met, the domain controller performs a resume function for the upgrade task based on the interruption location of the upgrade task.

[0009] Optionally, the download conditions include at least one of the following: the vehicle is in P gear, the electronic parking brake system is in a clamped state, the state of charge of the power battery is not lower than a first set threshold, the battery charge is not lower than a second set threshold, the fuel filler cap is closed, the on-board diagnostic system has no diagnostic request, and the charging gun is not connected or not charging.

[0010] Secondly, the present invention also discloses an OTA upgrade system for vehicles, the system comprising: A wireless download platform is used to determine upgrade tasks; The vehicle-mounted telematics processing control unit is connected to the wireless download platform and is used to obtain the upgrade package from the wireless download platform when the upgrade task is a silent task and the upgrade task meets the download conditions. The central controller, connected to the vehicle-mounted telematics control unit, is used to perform an upgrade based on the upgrade package after the upgrade package has been verified.

[0011] Thirdly, the present invention also discloses an OTA upgrade device for a vehicle, applied to a vehicle including an intelligent cockpit domain controller and an in-vehicle telematics control unit; the device includes: The wake-up module is used to obtain the upgrade task sent by the wireless download platform through the vehicle remote information processing control unit. If the upgrade task is a silent task and the upgrade task meets the download conditions, the module obtains the upgrade package from the wireless download platform and wakes up the intelligent cockpit domain controller. The upgrade module is used to perform an upgrade based on the upgrade package after the smart cockpit domain controller has verified the upgrade package.

[0012] Fourthly, the present invention also discloses a vehicle, including a processor, a memory, and a program or instructions stored in the memory and executable on the processor, wherein the program or instructions, when executed by the processor, implement the steps of the OTA upgrade method for the vehicle as described above.

[0013] Fifthly, the present invention also discloses a readable storage medium storing a program or instructions that, when executed by a processor, implement the steps of the above-described vehicle OTA upgrade method.

[0014] The embodiments of the present invention have the following advantages: This invention discloses a method, system, device, equipment, and medium for over-the-air (OTA) upgrades of vehicles. The invention receives and determines whether an upgrade task is a silent task and meets download conditions through an onboard telematics control unit (OTU), avoiding blind wake-ups or invalid downloads. When conditions are met, the upgrade package is automatically downloaded, and the intelligent cockpit domain controller is activated on demand, reducing unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package before executing the upgrade, ensuring the security and integrity of the upgrade package. This process not only achieves intelligent upgrade triggering and conditional adaptation but also optimizes the collaboration mechanism between the OTU and the domain controller, significantly reducing overall vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades. Attached Figure Description

[0015] To more clearly illustrate the technical solutions of the embodiments of the present invention, the accompanying drawings used in the description of the embodiments of the present invention will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without any creative effort.

[0016] Figure 1 This is a flowchart of the steps of an OTA upgrade method for a vehicle provided in an embodiment of the present invention; Figure 2 This is a flowchart illustrating an OTA upgrade method for a vehicle provided in an embodiment of the present invention; Figure 3 This is a schematic diagram of an OTA upgrade system for a vehicle provided in an embodiment of the present invention; Figure 4 This is a schematic diagram of another vehicle OTA upgrade system provided in an embodiment of the present invention; Figure 5 This is a structural block diagram of an OTA upgrade device for a vehicle provided in an embodiment of the present invention. Detailed Implementation

[0017] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some, not all, of the embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] The terms "first," "second," etc., used in the specification and claims of this invention are used to distinguish similar objects and are not used to describe a specific order or sequence. It should be understood that such data can be interchanged where appropriate so that embodiments of the invention can be implemented in orders other than those illustrated or described herein. Furthermore, in the specification and claims, "and / or" indicates at least one of the connected objects, and the character " / " generally indicates that the preceding and following objects are in an "or" relationship.

[0019] One of the core concepts of this invention is that the vehicle-mounted telematics control unit can receive and determine whether the upgrade task is a silent task and meets preset download conditions, avoiding blind wake-up or invalid downloads. When the conditions are met, the upgrade package is automatically downloaded, and the intelligent cockpit domain controller is woken up to achieve on-demand activation and reduce unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package and executes the upgrade, ensuring the security and integrity of the upgrade package. This process not only realizes intelligent upgrade triggering and conditional adaptation, but also optimizes the coordination mechanism between the vehicle-mounted telematics control unit and the domain controller, significantly reducing vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades.

[0020] Reference Figure 1 This diagram illustrates a flowchart of an OTA (Over-The-Air) upgrade method for a vehicle according to an embodiment of the present invention. The method is applied to a vehicle, which includes a smart cockpit domain controller and an in-vehicle telematics control unit. The method may include the following steps: Step 101: Obtain the upgrade task sent by the wireless download platform through the vehicle telematics control unit. If the upgrade task is a silent task and the upgrade task meets the download conditions, obtain the upgrade package from the wireless download platform and wake up the intelligent cockpit domain controller.

[0021] In this embodiment of the invention, the vehicle-mounted telematics control unit serves as the communication hub between the vehicle and the wireless download platform. It continuously maintains data interaction with the wireless download platform to obtain the issued upgrade tasks in real time, ensuring that no critical upgrade instructions are missed.

[0022] The wireless download platform can wake up the vehicle telematics control unit and send the upgrade task to the vehicle telematics control unit.

[0023] After acquiring the upgrade task, the task type and execution conditions can be dually determined. On the one hand, it can be identified whether the upgrade task is a silent task, that is, an upgrade type that can be automatically executed in the background without user confirmation, ensuring the seamlessness of the upgrade process. On the other hand, it can be verified whether the task meets the download conditions. These conditions usually include the vehicle's current network status being stable, sufficient remaining battery power, being in a safe operating condition such as not driving, and sufficient storage space to store the upgrade package. This avoids upgrade failures caused by incompatible environment or vehicle status from the source. When both determinations are passed, the vehicle telematics control unit can actively pull the corresponding upgrade package from the wireless download platform and send a wake-up command to the intelligent cockpit domain controller, switching it from low power or sleep mode to working mode, thus preparing the hardware for subsequent upgrade package verification and installation.

[0024] Step 102: After the upgrade package is verified by the intelligent cockpit domain controller, the upgrade is performed according to the upgrade package.

[0025] In this embodiment of the invention, after being awakened by the vehicle-mounted telematics control unit, the intelligent cockpit domain controller can receive the downloaded upgrade package and then initiate a verification process. The verification content typically includes key dimensions such as the integrity, legality, and compatibility of the upgrade package. Integrity is used to confirm that the files are not missing or damaged; legality is used to verify the signature information of the package to prevent malicious tampering or illegal upgrade package implantation; and compatibility is used to confirm that the upgrade package matches the current hardware configuration system version of the vehicle to avoid compatibility issues. Through multiple verifications, a security defense is built to eliminate the risk of vehicle system failures and functional abnormalities caused by abnormal upgrade packages.

[0026] Once the upgrade package passes verification, the intelligent cockpit domain controller will initiate the corresponding upgrade operation according to the program instructions, configuration files, and other content in the upgrade package. This includes replacing programs, updating parameters, and iterating functions for vehicle-related system modules. The entire upgrade process proceeds in an orderly manner under the precise control of the intelligent cockpit domain controller, ensuring the standardization and accuracy of the upgrade operation.

[0027] This invention discloses an OTA upgrade method for vehicles. The method involves the onboard telematics control unit (OTU) receiving and determining whether the upgrade task is a silent task and meets preset download conditions, avoiding blind wake-ups or invalid downloads. When the conditions are met, the upgrade package is automatically downloaded, and the intelligent cockpit domain controller is activated on demand, reducing unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package before executing the upgrade, ensuring the security and integrity of the upgrade package. This process not only achieves intelligent upgrade triggering and conditional adaptation but also optimizes the collaboration mechanism between the OTU and the domain controller, significantly reducing overall vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades.

[0028] In one embodiment of the present invention, the intelligent cockpit domain controller includes a human-machine interface, a vehicle control unit, and a domain controller. The method further includes: when the upgrade package download fails, determining the reason for the failure through the vehicle control unit and sending it to the wireless download platform and the human-machine interface, and ending the current download process; and resuming the download operation through the domain controller in response to a re-download command input through the human-machine interface.

[0029] In this embodiment of the invention, when the upgrade package download fails, the vehicle control unit in the intelligent cockpit domain controller can analyze and determine the specific reasons for the download failure. These reasons may include network connection interruption, wireless download platform response timeout, insufficient storage space, data corruption during upgrade package transmission, etc.

[0030] After identifying the cause of failure, the vehicle control unit can push the determined cause of failure to the wireless download platform, so that the platform can record fault information, troubleshoot its own service problems, or adjust subsequent push strategies. It can also synchronize the cause of failure to the human-machine interface, so as to inform the user of the download failure and the specific reason in an intuitive way, ensuring the user's right to know the upgrade status. After completing the information push, the vehicle control unit can terminate the current download process to avoid invalid resource occupation or repeated failed attempts, and free up system resources for subsequent operations.

[0031] When a user inputs a re-download command through the human-machine interface, the command can be transmitted to the domain controller in real time, triggering the domain controller to start the download recovery mechanism. The domain controller can first perform targeted preprocessing based on the failure reasons previously pushed by the vehicle control unit. If the failure reason is a network problem, it can prioritize checking and attempting to repair the network connection; if it is insufficient storage space, it will prompt the user to clean up space or automatically release redundant resources; if it is a platform response problem, it can re-establish the communication link with the wireless download platform. After the preprocessing is completed, the domain controller can re-initiate the upgrade package download request, obtain the upgrade package from the wireless download platform, and continue the previous upgrade process logic to ensure that the download operation is restored in an orderly manner after the potential problems are repaired, until the upgrade package is successfully downloaded and enters the subsequent verification stage.

[0032] For example, while a user is driving, the onboard telematics control unit receives a silent upgrade task and begins downloading the upgrade package. If the vehicle enters a tunnel at this time, causing a network signal interruption and the upgrade package download to fail, the vehicle control unit can quickly determine that the failure is due to a network connection interruption and synchronize this information to the wireless download platform and the in-vehicle human-machine interface. The central control screen will display a prompt that the upgrade package download failed due to a network interruption and ask you to try again later. At the same time, it will terminate the current download to avoid wasting resources. When the user exits the tunnel, they will see the prompt on the central control screen and issue a command by clicking the re-download button. After receiving the command, the domain controller will first check that the network has been restored, then reconnect to the wireless download platform and continue downloading the upgrade package. This ensures that the upgrade task is successfully resumed with user intervention, guaranteeing the fault tolerance of the upgrade and allowing the user to keep track of the upgrade status through human-machine interaction.

[0033] This invention constructs a complete closed loop for exception handling by determining the cause of upgrade package download failure in the vehicle control unit, bidirectional push and process termination, and targeted recovery when the domain controller responds to the re-download command. This not only improves the fault tolerance of OTA upgrades and ensures that the upgrade process can be interrupted in an orderly manner and clearly reported when problems are encountered, but also balances the user's right to know and upgrade efficiency through human-computer interaction and platform collaboration, while avoiding the occupation of system resources by invalid operations, ultimately ensuring the stability, controllability and user experience of vehicle OTA upgrades.

[0034] In one embodiment of the present invention, the method further includes: obtaining the download progress of the upgrade package through a domain controller, and sending the download progress to a wireless download platform and a human-computer interaction interface for display on the human-computer interaction interface.

[0035] In this embodiment of the invention, the domain controller can continuously track the download status of the upgrade package, and obtain key information such as the amount of data downloaded, the total amount of data, and the download rate in real time through interaction with the download process. Based on this data, the current download progress is calculated and usually presented as a percentage to ensure the intuitiveness and accuracy of the progress information.

[0036] After obtaining the download progress, the domain controller can push the real-time progress data to the wireless download platform, enabling the platform to monitor the download status on the vehicle side in real time. This facilitates the platform's monitoring and statistics of the overall upgrade task, or adjustment of the push strategy when necessary. At the same time, the download progress is synchronized to the human-machine interface, which displays it in real time through dynamic progress bars, percentage numbers, or text prompts, allowing users to intuitively understand the download progress of the upgrade package and clearly grasp the current stage of the upgrade.

[0037] Throughout the process, the domain controller will continuously update and synchronize information based on the download progress until the upgrade package download is complete, ensuring timely and accurate transmission of download progress information between the platform and the user.

[0038] For example, when the vehicle is stationary, the in-vehicle system initiates a silent upgrade download process. At this time, the domain controller begins to track the download progress of the upgrade package in real time. Assuming the total size of the upgrade package is 500MB, when 100MB has been downloaded, the domain controller calculates the progress as 20% and immediately synchronizes this progress to the wireless download platform. The platform backend can see that the vehicle's current download progress is 20%, and at the same time, the human-machine interface of the in-vehicle central control screen displays "Upgrade package downloading: 20%" and the corresponding progress bar. As the download continues, the domain controller will synchronously update the platform data and interface display every 5% update in the progress. When the download reaches 300MB, the interface displays "Upgrade package downloading: 60%". The user can clearly know through the central control screen that the download is more than halfway complete, without the need for frequent operations or guessing the progress.

[0039] This invention acquires and synchronizes the upgrade package download progress in real time through a domain controller, achieving bidirectional transparency of the download status between the wireless download platform and the vehicle's human-machine interface. At the same time, the dynamic synchronization mechanism of progress information ensures the timeliness and accuracy of the data, avoiding problems caused by information lag or deviation. Overall, it enhances the transparency, controllability, and user experience of the vehicle OTA upgrade process, and further improves the completeness and refinement of the upgrade process.

[0040] In one embodiment of the present invention, the method further includes: if the upgrade task is not a silent task, determining whether the upgrade task is an automatic upgrade task through the vehicle telematics control unit; if the upgrade task is not an automatic upgrade task, pushing an update notification to the human-machine interface through the vehicle telematics control unit; and executing the upgrade task through the domain controller in response to the user command input through the human-machine interface.

[0041] In this embodiment of the invention, when the upgrade task is not a silent task, the vehicle telematics control unit can further determine the task type and identify whether the task is an automatic upgrade task. Automatic upgrade tasks usually refer to upgrade types that can be automatically executed when preset conditions are met without user confirmation, while non-automatic upgrade tasks require explicit user authorization before they can proceed.

[0042] The vehicle-mounted telematics control unit can distinguish the types of upgrade tasks by parsing the identification information in the upgrade task. This judgment step is a key node connecting different upgrade processes, ensuring that the task enters the corresponding processing path according to preset rules, and avoiding confusion between automatic upgrade and user-intervention upgrade processes.

[0043] If the upgrade task is determined not to be an automatic upgrade task, the vehicle telematics control unit can proactively push an update notification to the human-machine interface. The notification content usually includes information such as the name of the upgrade task, its importance, estimated time, new features or fixes after the upgrade, etc., presented in a concise form to help users quickly understand the core information of the upgrade.

[0044] When a user inputs a command through the human-computer interaction interface, the command is transmitted to the domain controller. The domain controller then performs the corresponding operation based on the user's command: if it is "upgrade immediately", the upgrade package download, verification, and installation process is initiated; if it is "upgrade later", the task is temporarily suspended and the user's selection is recorded. The task will be restarted when the user triggers it again or when the agreed conditions are met. The entire process is driven by the user's command, ensuring that the execution of non-automatic upgrade tasks is completely under the user's control.

[0045] For example, if a vehicle receives an upgrade task involving the optimization of the smart cockpit interaction logic, and it is determined that the task is neither a silent task nor an automatic upgrade task, the in-vehicle telematics control unit can push a notification to the human-machine interface on the central control screen: "Smart cockpit interaction optimization upgrade detected, estimated to take 15 minutes. After the upgrade, the voice command recognition speed will be improved. Do you want to upgrade immediately?" After seeing the notification, if the user is currently driving, they can select "upgrade later," and the domain controller will temporarily store the task; if the vehicle is stationary, the user can click "upgrade immediately," and the domain controller will start downloading the upgrade package. After verification, the upgrade will be completed. Throughout the process, the user always has the initiative in the upgrade, which avoids unnecessary upgrades from interfering with the driving process and ensures that the user can optimize the vehicle's functions at the appropriate time.

[0046] This invention achieves precise separation of automatic and non-automatic upgrades by determining the task type of the in-vehicle telematics control unit, avoiding redundant disturbances to users caused by tasks that do not require user intervention; through notification push and user command response via the human-machine interface, the upgrade control is returned to the user, which not only ensures the user's right to know and make decisions about vehicle upgrades, but also allows the user to flexibly choose the upgrade time according to their own usage scenarios, reducing the impact of upgrades on the user experience.

[0047] In one embodiment of the present invention, the method further includes: when the upgrade task is interrupted, obtaining the interruption location of the upgrade task through the vehicle control unit; and when a preset condition is met, resuming the upgrade task from the interruption location through the domain controller.

[0048] In this embodiment of the invention, when the upgrade task is interrupted, the vehicle control unit can accurately locate the specific location of the interruption by monitoring the execution status of the upgrade process in real time. This includes the download progress of the upgrade package, such as the proportion of downloaded data to the total capacity; the specific verification items in the verification process, such as integrity verification and legality verification; and the system modules or program fragments involved in the installation process. This process relies on the status marking and log recording of each stage of the upgrade task. The vehicle control unit can extract key parameters at the time of the interruption from the system log, such as timestamps, task process identifiers, and completed operation nodes, and comprehensively determine the specific stage and progress of the interruption. This ensures that the obtained interruption location information is accurate and traceable, providing a clear starting point for subsequent breakpoint resumption.

[0049] After obtaining the interruption location of the upgrade task, the domain controller can continuously monitor whether the preset resumption conditions are met. These conditions typically include the vehicle network connection being restored to stability, the vehicle being in a safe state such as not driving, sufficient remaining battery power to support subsequent upgrade operations, and storage space not being occupied or being released to a sufficient capacity. When all preset conditions are met, the domain controller can initiate the breakpoint resumption mechanism based on the interruption location information provided by the vehicle control unit: if the interruption occurs during the download phase, the domain controller can continue to request the remaining data from the wireless download platform from the already downloaded progress node, avoiding duplicate downloads of completed parts; if the interruption occurs during the verification or installation phase, the domain controller can skip the completed verification items or installation steps and directly start executing subsequent operations from the interruption node. The entire resumption process strictly follows the task logic before the interruption, ensuring the continuity and integrity of the upgrade process until the task is finally completed.

[0050] For example, a user starts a vehicle system upgrade task in a parking lot. When the upgrade package is 70% downloaded, the user needs to drive away temporarily. After the vehicle is started, the system determines that it is not advisable to continue the upgrade while driving, and the upgrade task is automatically interrupted. At this time, the vehicle control unit can record the interruption position as 70% of the download stage and save the relevant logs. When the user drives back to the parking lot and turns off the engine, the vehicle network reconnects stably and the battery is sufficient, meeting the preset conditions for resuming the download. The domain controller will then automatically respond and continue downloading the remaining 30% of the upgrade package from the 70% progress, instead of downloading the entire package again. If the upgrade is interrupted during the installation stage due to insufficient battery, the domain controller can also continue from the last interrupted installation step after the user charges the battery to meet the conditions, without having to repeat the completed installation operation, which greatly saves time and resources.

[0051] This invention avoids the waste of resources from re-executing the upgrade task from scratch by accurately capturing the upgrade interruption location through the vehicle control unit and the breakpoint resume mechanism of the domain controller when the conditions are met, which significantly improves the upgrade efficiency. Especially when the upgrade package is large or the network environment is unstable, it can save a lot of download time and traffic consumption.

[0052] In one embodiment of the present invention, the download conditions include at least one of the following: the vehicle is in P gear, the electronic parking brake system is in a clamped state, the state of charge of the power battery is not lower than a first set threshold, the battery charge is not lower than a second set threshold, the fuel filler cap is closed, the on-board diagnostic system has no diagnostic request, and the charging gun is not connected or not charging.

[0053] In this embodiment of the invention, when the download conditions include the vehicle being in P gear, the electronic parking brake system being clamped, the state of charge of the power battery not being lower than a first set threshold, the battery charge not being lower than a second set threshold, the fuel filler cap being closed, the on-board diagnostic system having no diagnostic request, and the charging gun being not connected or not charging, in a vehicle OTA upgrade scenario, such as when a user is preparing to upgrade the vehicle system, the on-board system will verify the download conditions one by one: if any of the following conditions are met, the upgrade download process will not start: the vehicle is not in P gear, the electronic parking brake system is not clamped, the state of charge of the power battery is lower than the first set threshold, the battery charge is lower than the second set threshold, the fuel filler cap is not closed, the on-board diagnostic system has a diagnostic request, or the charging gun is connected and charging; only when the following conditions are met, such as the vehicle being in P gear to ensure parking safety, the electronic parking brake system being clamped to prevent the vehicle from moving, the power battery and the battery having sufficient charge to ensure power stability during the upgrade process, the fuel filler cap being closed to avoid interference with the fuel system, the on-board diagnostic system having no diagnostic request to ensure normal system status, and the charging gun being not connected or not charging to ensure that charging operations do not conflict, will the upgrade package be allowed to download.

[0054] By rigorously verifying these download conditions, the risk of unexpected movement or power interruption due to issues such as gear shift, braking, or battery level is ensured during the upgrade process, thus improving the success rate and stability of OTA upgrades.

[0055] like Figure 2 The diagram illustrates a flowchart of an OTA upgrade method for a vehicle according to an embodiment of the present invention. The OTA platform can wake up the in-vehicle telematics control unit (TBOX) and push the upgrade task to the TBOX. When the TBOX determines that the upgrade task is a silent task and meets the download conditions, it obtains the upgrade package from the wireless download platform and wakes up the intelligent cockpit domain controller (CDC). The CDC can obtain the download progress, failure reason, and interruption location during the download process, and then send the download progress, failure reason, and interruption location to the OTA platform and the human-machine interface (HMI) for user viewing.

[0056] This invention discloses an OTA upgrade method for vehicles. The method involves the onboard telematics control unit (OTU) receiving and determining whether the upgrade task is a silent task and meets preset download conditions, avoiding blind wake-ups or invalid downloads. When the conditions are met, the upgrade package is automatically downloaded, and the intelligent cockpit domain controller is activated on demand, reducing unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package before executing the upgrade, ensuring the security and integrity of the upgrade package. This process not only achieves intelligent upgrade triggering and conditional adaptation but also optimizes the collaboration mechanism between the OTU and the domain controller, significantly reducing overall vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades.

[0057] It should be noted that, for the sake of simplicity, the method embodiments are all described as a series of actions. However, those skilled in the art should understand that the embodiments of the present invention are not limited to the described order of actions, because according to the embodiments of the present invention, some steps can be performed in other orders or simultaneously. Furthermore, those skilled in the art should also understand that the embodiments described in the specification are preferred embodiments, and the actions involved are not necessarily essential to the embodiments of the present invention.

[0058] like Figure 3 The diagram illustrates a structural block diagram of an OTA (Over-The-Air) upgrade system 20 for a vehicle according to an embodiment of the present invention. The system includes components capable of: Wireless download platform 201 is used to determine upgrade tasks; The vehicle-mounted telematics processing control unit 202 is connected to the wireless download platform and is used to obtain the upgrade package from the wireless download platform when the upgrade task is a silent task and the upgrade task meets the download conditions. The central controller 203 is connected to the vehicle-mounted telematics control unit and is used to perform an upgrade according to the upgrade package after the upgrade package has been verified.

[0059] like Figure 4 This diagram illustrates another vehicle OTA upgrade system provided by an embodiment of the present invention, which may include: The wireless download platform is the initiator of upgrade tasks. It can communicate with the vehicle's TBOX via 4G / 5G networks and also supports remote interaction via a mobile app, allowing it to receive command information sent by the mobile app user.

[0060] TBOX (Vehicle Telematics Control Unit): It is the hub between the vehicle and the external network. It connects to the VIU1, VIU2, and VIU3 modules via ETH (Ethernet) and is responsible for receiving and distributing upgrade tasks from the OTA server.

[0061] The VIU series (Vehicle Interface Unit) serves as a communication bridge between modules. VIU1 connects to VDC (Vehicle Dynamics Controller), VIU2 connects to MDC (Motion Domain Controller), and VIU3 acts as a communication node between TBOX and CDC.

[0062] CDC (Intelligent Cockpit Domain Controller): Includes VCU (Vehicle Control Unit), DCU (Domain Control Unit), and HMI (Human Machine Interface). It is the core control unit on the intelligent cockpit side, responsible for handling user interaction and upgrade logic.

[0063] For example, the OTA platform sends the upgrade task to the TBOX via 4G / 5G. The TBOX then forwards it to the VUC module of the CDC via the VIU3, completing the path of "OTA platform → TBOX → VIU3 → CDC (VCU)" and notifying the vehicle that there is an upgrade task.

[0064] Upgrade package download: The software upgrade package is distributed by the OTA platform and stored in TBOX.

[0065] Progress synchronization: The download progress is pushed from the VCU module of CDC to the HMI module of CDC and displayed on the in-vehicle human-machine interface, allowing users to intuitively understand the download status.

[0066] This architecture, through the layered collaboration of TBOX, VIU series and CDC, enables cross-domain transmission of upgrade tasks, centralized storage of upgrade packages and user-side transparency of progress. Meanwhile, VIU1 and VIU2 respectively connect to VDC and MDC, reserving expansion interfaces for potential upgrades in the power domain and motion domain, demonstrating the modular communication and functional expansion capabilities of the vehicle multi-domain controller in OTA upgrade scenarios.

[0067] This invention discloses an OTA upgrade system for vehicles. The system receives and determines whether an upgrade task is a silent task and meets preset download conditions through the onboard telematics control unit, avoiding blind wake-ups or invalid downloads. When the conditions are met, the system automatically downloads the upgrade package and wakes up the intelligent cockpit domain controller, enabling on-demand activation and reducing unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package before executing the upgrade, ensuring the security and integrity of the upgrade package. This process not only achieves intelligent upgrade triggering and conditional adaptation but also optimizes the collaboration mechanism between the onboard telematics control unit and the domain controller, significantly reducing overall vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades.

[0068] This invention discloses an OTA upgrade system for vehicles. The system receives and determines whether an upgrade task is a silent task and meets preset download conditions through the onboard telematics control unit, avoiding blind wake-ups or invalid downloads. When the conditions are met, the system automatically downloads the upgrade package and wakes up the intelligent cockpit domain controller, enabling on-demand activation and reducing unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package before executing the upgrade, ensuring the security and integrity of the upgrade package. This process not only achieves intelligent upgrade triggering and conditional adaptation but also optimizes the collaboration mechanism between the onboard telematics control unit and the domain controller, significantly reducing overall vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades.

[0069] like Figure 4 This diagram illustrates a structural block diagram of an OTA (Over-The-Air) upgrade device for a vehicle according to an embodiment of the present invention. The device is applied to a vehicle, which includes a smart cockpit domain controller and an in-vehicle telematics control unit. The device may include: The wake-up module 301 is used to obtain the upgrade task sent by the wireless download platform through the vehicle telematics control unit. If the upgrade task is a silent task and the upgrade task meets the download conditions, the upgrade package is obtained from the wireless download platform and the intelligent cockpit domain controller is woken up. Upgrade module 302 is used to perform an upgrade based on the upgrade package after the upgrade package has been verified by the intelligent cockpit domain controller.

[0070] This invention discloses an OTA upgrade device for vehicles. The device receives and determines whether an upgrade task is a silent task and meets preset download conditions through the in-vehicle telematics control unit, avoiding blind wake-up or invalid downloads. When the conditions are met, the device automatically downloads the upgrade package and wakes up the intelligent cockpit domain controller, enabling on-demand activation and reducing unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package before executing the upgrade, ensuring the security and integrity of the upgrade package. This process not only achieves intelligent upgrade triggering and conditional adaptation but also optimizes the collaboration mechanism between the in-vehicle telematics control unit and the domain controller, significantly reducing overall vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades.

[0071] In one embodiment of the present invention, the intelligent cockpit domain controller includes a human-machine interface, a vehicle control unit, and a domain controller, and further includes: The push module is used to determine the reason for the push failure through the vehicle control unit when the upgrade package download fails, and then send it to the wireless download platform and human-machine interface to end the current download process. The first response module is used to respond to a re-download command input through the human-computer interaction interface and resume the download operation through the domain controller.

[0072] In one embodiment of the present invention, it further includes: The sending module is used to obtain the download progress of the upgrade package through the domain controller and send the download progress to the wireless download platform and the human-machine interface for display.

[0073] In one embodiment of the present invention, it further includes: The judgment module is used to determine whether the upgrade task is an automatic upgrade task through the vehicle telematics control unit if the upgrade task is not a silent task; if the upgrade task is not an automatic upgrade task, the module pushes an update notification to the human-machine interface through the vehicle telematics control unit. The second response module is used to respond to user commands input through the human-computer interaction interface and execute upgrade tasks through the domain controller.

[0074] In one embodiment of the present invention, it further includes: The acquisition module is used to obtain the interruption location of the upgrade task through the vehicle control unit when the upgrade task is interrupted. The resume module is used to resume the upgrade task from its interrupted position by the domain controller when preset conditions are met.

[0075] In one embodiment of the present invention, the download conditions include at least one of the following: the vehicle is in P gear, the electronic parking brake system is in a clamped state, the state of charge of the power battery is not lower than a first set threshold, the battery charge is not lower than a second set threshold, the fuel filler cap is closed, the on-board diagnostic system has no diagnostic request, and the charging gun is not connected or not charging.

[0076] This invention discloses an OTA upgrade device for vehicles. The device receives and determines whether an upgrade task is a silent task and meets preset download conditions through the in-vehicle telematics control unit, avoiding blind wake-up or invalid downloads. When the conditions are met, the device automatically downloads the upgrade package and wakes up the intelligent cockpit domain controller, enabling on-demand activation and reducing unnecessary power consumption. Subsequently, the intelligent cockpit domain controller performs security verification on the upgrade package before executing the upgrade, ensuring the security and integrity of the upgrade package. This process not only achieves intelligent upgrade triggering and conditional adaptation but also optimizes the collaboration mechanism between the in-vehicle telematics control unit and the domain controller, significantly reducing overall vehicle energy consumption and improving the efficiency, security, and user experience of OTA upgrades.

[0077] This invention also provides a vehicle, including a processor, a memory, and a program or instructions stored in the memory and executable on the processor. When the program or instructions are executed by the processor, they implement the various processes of the above-described vehicle OTA upgrade method embodiments and achieve the same technical effects. To avoid repetition, they will not be described again here.

[0078] It should be noted that the vehicles in the embodiments of the present invention include the mobile vehicles and non-mobile vehicles described above.

[0079] This invention also provides a readable storage medium storing a program or instructions. When the program or instructions are executed by a processor, they implement the various processes of the above-described vehicle OTA upgrade method embodiments and achieve the same technical effects. To avoid repetition, they will not be described again here.

[0080] The processor mentioned above is the processor in the vehicle described in the above embodiments. The readable storage medium includes computer-readable storage media, such as computer read-only memory (ROM), random access memory (RAM), magnetic disk, or optical disk.

[0081] The various embodiments in this specification are described in a progressive manner, with each embodiment focusing on the differences from other embodiments. The same or similar parts between the various embodiments can be referred to each other.

[0082] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, apparatus, or computer program products. Therefore, embodiments of the present invention can take the form of entirely hardware embodiments, entirely software embodiments, or embodiments combining software and hardware aspects. Furthermore, embodiments of the present invention can take the form of computer program products implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0083] Embodiments of the present invention are described with reference to flowchart illustrations and / or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, as well as combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing terminal device to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal device, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0084] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing terminal device to operate in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0085] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal equipment, causing a series of operational steps to be performed on the computer or other programmable terminal equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable terminal equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0086] Although preferred embodiments of the present invention have been described, those skilled in the art, upon learning the basic inventive concept, can make other changes and modifications to these embodiments. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments as well as all changes and modifications falling within the scope of the embodiments of the present invention.

[0087] Finally, it should be noted that in this document, relational terms such as "first" and "second" are used only to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or terminal device that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or terminal device. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or terminal device that includes said element.

[0088] The above provides a detailed description of the OTA upgrade method, system, device, vehicle, and medium for vehicles provided by the present invention. Specific examples have been used to illustrate the principles and implementation methods of the present invention. The descriptions of the above embodiments are only for the purpose of helping to understand the method and core ideas of the present invention. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of the present invention. Therefore, the content of this specification should not be construed as a limitation of the present invention.

Claims

1. A method for OTA upgrade of a vehicle, characterized in that, The application is applied to a vehicle, the vehicle comprising an intelligent cockpit domain controller and a vehicle telematics control unit; the method comprising: obtaining an upgrade task sent by a wireless download platform through the vehicle telematics control unit, obtaining an upgrade package from the wireless download platform if the upgrade task is a silent task and the upgrade task meets a download condition, and waking up the intelligent cockpit domain controller; upgrading according to the upgrade package through the intelligent cockpit domain controller after the upgrade package is verified.

2. The OTA upgrade method of a vehicle according to claim 1, wherein, The intelligent cockpit domain controller comprises a human-computer interaction interface, a vehicle control unit and a domain controller, and the method further comprises: when the upgrade package fails to be downloaded, determining a push failure reason to the wireless download platform and the human-computer interaction interface through the vehicle control unit, and ending a current download process; in response to a re-download instruction input by the human-computer interaction interface, resuming a download operation through the domain controller.

3. The method of OTA upgrade of a vehicle according to claim 2, wherein, Further comprising: obtaining a download progress of the upgrade package through the domain controller, sending the download progress to the wireless download platform and the human-computer interaction interface, and displaying the download progress on the human-computer interaction interface.

4. The method of OTA upgrade of a vehicle according to claim 2, wherein, Further comprising: if the upgrade task is not a silent task, determining whether the upgrade task is an automatic upgrade task through the vehicle telematics control unit; if the upgrade task is not an automatic upgrade task, pushing an update notification to the human-computer interaction interface through the vehicle telematics control unit; in response to a user instruction input by the human-computer interaction interface, executing the upgrade task through the domain controller.

5. The method for OTA upgrade of a vehicle according to claim 1, wherein, Further comprising: when the upgrade task is interrupted, obtaining an interruption position of the upgrade task through the vehicle control unit; when a preset condition is met, resuming the upgrade task according to the interruption position of the upgrade task through the domain controller.

6. The method for OTA upgrade of a vehicle according to claim 1, wherein, The download condition comprises at least one of the following: the vehicle is in a P gear, an electronic parking brake system is in a clamping state, a power battery state of charge is not lower than a first set threshold, a storage battery capacity is not lower than a second set threshold, a fuel filler cap is closed, a vehicle diagnostic system has no diagnostic request, a charging gun is not connected or not charging.

7. An OTA upgrade system of a vehicle, characterized by, The system comprises: a wireless download platform configured to determine an upgrade task; a vehicle telematics control unit connected to the wireless download platform, configured to obtain an upgrade package from the wireless download platform if the upgrade task is a silent task and the upgrade task meets a download condition; a central controller connected to the vehicle telematics control unit, configured to upgrade according to the upgrade package after the upgrade package is verified.

8. An OTA upgrade apparatus of a vehicle, characterized by comprising: The application is applied to a vehicle, the vehicle comprising an intelligent cockpit domain controller and a vehicle telematics control unit; the device comprising: a wake-up module configured to obtain an upgrade task sent by a wireless download platform through the vehicle telematics control unit, obtain an upgrade package from the wireless download platform if the upgrade task is a silent task and the upgrade task meets a download condition, and wake up the intelligent cockpit domain controller; An upgrading module configured to upgrade according to the upgrade package through the intelligent cockpit domain controller after the upgrade package is verified to be correct.

9. A vehicle characterized by comprising: Comprise: A processor, a memory, and a computer program stored on the memory and capable of running on the processor, the computer program being executed by the processor to implement the steps of the OTA upgrading method of the vehicle according to any one of claims 1-6.

10. A computer-readable storage medium, characterized in that, A computer program is stored on the computer readable storage medium, and the computer program is executed by the processor to implement the steps of the OTA upgrading method of the vehicle according to any one of claims 1-6.

Images