Commercial vehicle OTA upgrade control method, device and equipment and storage medium
By receiving OTA upgrade commands from remote communication terminals in new energy commercial vehicles, controlling the vehicle status and switching between high and low voltage states, the problems of high CAN bus load and power failure risk during OTA upgrades in commercial vehicles are solved, thus improving the stability and success rate of the upgrade.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-12-18
- Publication Date
- 2026-04-03
AI Technical Summary
There are many brands of on-board controllers for new energy commercial vehicles. During the OTA upgrade process, the CAN bus of the whole vehicle has a high load and high power consumption. Furthermore, there is a risk of power failure when upgrading under high voltage conditions, which leads to a low upgrade success rate and the risk of the whole vehicle being paralyzed.
By receiving OTA upgrade commands from the remote communication terminal, the vehicle status is determined, and the vehicle enters a state where driving, shifting, and charging are prohibited. The vehicle's power distribution unit is then controlled to enter OTA mode, supplying power only to the controller to be upgraded, and switching between high and low voltage states to ensure a smooth upgrade. Version verification is then performed after the upgrade.
It effectively reduces CAN bus load and battery power consumption, improves the stability and success rate of OTA upgrades, avoids power failure risks, and ensures the safety and reliability of the upgrade process.
Smart Images

Figure CN121785630A_ABST
Abstract
Description
Technical Field
[0001] This invention relates to the field of vehicle OTA technology, and specifically to a method, device, equipment and storage medium for OTA upgrade control of commercial vehicles. Background Technology
[0002] In the current automotive industry, over-the-air (OTA) technology has become one of the key technologies for improving vehicle performance and user experience, while also significantly reducing after-sales maintenance costs and enhancing automakers' competitiveness in the market. However, for new energy commercial vehicles, the existing OTA upgrade methods face numerous challenges due to the large number of brands and the difficulty in managing the hardware and software of their onboard controllers.
[0003] Existing technologies propose a multi-mode OTA full-scale upgrade method and system, which selects an appropriate upgrade mode to complete the upgrade of the vehicle controller by judging the size of the upgrade package, the importance of the function of the on-board control unit to be upgraded, and the hardware storage resources. However, this solution still has many problems: On the one hand, there are many brands of on-board controllers for new energy commercial vehicles, and many controllers do not respond to the vehicle's silent commands. During the OTA upgrade process, they continue to send application messages on the CAN bus, resulting in a high CAN load on the vehicle, which seriously affects the success rate of controller flashing and the overall OTA time, and greatly increases the power consumption of the vehicle. On the other hand, many on-board controllers in commercial vehicles cannot be flashed under high-voltage conditions. During the vehicle OTA process, there is a risk of low-voltage battery depletion. If a large number of controllers are being upgraded, the vehicle OTA may be forcibly interrupted or even the entire vehicle may be paralyzed due to battery depletion. Summary of the Invention
[0004] To address the challenges of managing multiple brands of controllers in existing new energy commercial vehicles, and the resulting impact on the CAN bus load rate and battery power loss during the over-the-air (OTA) update process, this invention provides a method, device, equipment, and storage medium for OTA upgrade control of commercial vehicles. The technical solution is as follows:
[0005] According to a first aspect of the present invention, a method for controlling over-the-air (OTA) upgrades of commercial vehicles is provided, the method comprising:
[0006] Receive OTA upgrade instructions and upgrade software packages sent by a remote communication terminal, wherein the OTA upgrade instructions include a list of controllers to be upgraded;
[0007] Determine whether the target vehicle meets the prerequisites for OTA (Over-The-Air) updates;
[0008] If the conditions are met, the target vehicle is controlled to enter a state where driving, shifting, and charging are prohibited, and the vehicle's power distribution unit is controlled to enter OTA mode.
[0009] According to the list of controllers to be upgraded, the vehicle power distribution unit is controlled to supply power only to the controllers to be upgraded, and the target vehicle is controlled to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package;
[0010] After confirming that all upgrade tasks are completed, the system controls the vehicle's power distribution unit to cut off the power supply to the controller to be upgraded and exit OTA mode, and controls the target vehicle to power down.
[0011] The commercial vehicle OTA upgrade control method provided by this invention first receives an OTA upgrade command and upgrade software package from a remote communication terminal. The OTA upgrade command includes a list of controllers to be upgraded. Then, it determines whether the target vehicle meets the OTA preconditions. If so, it controls the target vehicle to enter a state where driving, shifting, and charging are prohibited, and controls the vehicle's power distribution unit to enter OTA mode. Next, according to the list of controllers to be upgraded, it controls the vehicle's power distribution unit to supply power only to the controllers to be upgraded, and controls the target vehicle to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package. Finally, after confirming that all upgrade tasks are completed, it controls the vehicle's power distribution unit to cut off the power supply to the controllers to be upgraded and exit OTA mode, and controls the target vehicle to power down. This method, through coordinated control by the vehicle domain controller, controls the vehicle to enter OTA mode after the conditions are met, and the vehicle's power distribution unit supplies power only to the controllers to be upgraded. This effectively prevents controllers that do not respond to silent commands from continuously sending messages on the CAN bus, improving the stability and success rate of OTA upgrades.
[0012] As a further aspect of the present invention: the step of controlling the target vehicle to switch between high and low voltage states according to a preset strategy specifically includes:
[0013] Control the target vehicle to switch to auxiliary drive high-pressure state so that the upgradeable controller in the high-pressure state of the controller to be upgraded can be upgraded.
[0014] After the upgradeable controller is flashed under the high-pressure state, the target vehicle is switched to a low-pressure state so that the controllers in the controllers to be upgraded that need to be upgraded under the low-pressure state can be upgraded.
[0015] The method of the present invention controls the vehicle to switch between auxiliary drive high-voltage and low-voltage states. The controller that can be upgraded is executed first in the high-voltage state, and then the controller that needs to be upgraded is executed in the low-voltage state. During the upgrade process, the high-voltage state can be used to replenish the battery, reducing the risk of power depletion caused by long-term upgrades in the low-voltage state.
[0016] As a further aspect of the present invention: the determination of whether the target vehicle meets the OTA prerequisites specifically includes:
[0017] The system detects whether the target vehicle's power supply is OFF, its charging status is non-charging, its gear is N, and its handbrake is engaged. If all of these conditions are met, the system is deemed to satisfy the requirements.
[0018] The method of this invention ensures that the vehicle is in a safe and suitable state for upgrading by checking multiple conditions such as power supply level, charging status, gear position, and handbrake, avoiding OTA execution in unsafe states such as driving or charging, thus improving the safety and reliability of the upgrade process.
[0019] As a further aspect of the present invention: when the list of controllers to be upgraded includes the vehicle body power distribution unit, the control will schedule the upgrade of the vehicle body power distribution unit after the upgrades of other controllers to be upgraded are completed.
[0020] The method of the present invention schedules the upgrade task of the vehicle body power distribution unit to be executed last, so as to avoid the power supply to other controllers due to abnormalities during the upgrade process, thus ensuring the power supply stability and task integrity of the entire OTA process.
[0021] As a further aspect of the present invention: after the vehicle body power distribution unit enters OTA mode, the method further includes:
[0022] The vehicle body electrical distribution unit is controlled to retain the function of the hazard warning lights.
[0023] The method of this invention retains the hazard warning light function in OTA mode, ensuring that the light can still provide warnings in case of emergencies during the upgrade process, thereby enhancing the safety of the upgrade process.
[0024] As a further aspect of the present invention: before controlling the vehicle body power distribution unit to cut off the power supply to the controller to be upgraded, the method further includes:
[0025] Perform version verification on the upgraded controller, and proceed with subsequent steps after the verification is successful.
[0026] The method of this invention verifies the version of the upgraded controller before performing the exit operation, ensuring that all controllers are upgraded correctly and avoiding system malfunctions due to upgrade failure or version errors, thereby improving the reliability and integrity of OTA upgrades.
[0027] According to a second aspect of the present invention, a commercial vehicle OTA upgrade control device is provided, comprising: a receiving module, a judging module, a first control module, a second control module, and a third control module;
[0028] The receiving module is used to receive OTA upgrade instructions and upgrade software packages sent by the remote communication terminal, wherein the OTA upgrade instructions include a list of controllers to be upgraded;
[0029] The judgment module is used to determine whether the target vehicle meets the OTA prerequisites;
[0030] The first control module is used to control the target vehicle to enter a state of prohibiting driving, prohibiting gear shifting, and prohibiting charging when the judgment result of the judgment module is satisfied, and to control the body power distribution unit to enter OTA mode.
[0031] The second control module is used to control the vehicle power distribution unit to supply power only to the controllers to be upgraded according to the list of controllers to be upgraded, and to control the target vehicle to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package;
[0032] The third control module is used to control the vehicle power distribution unit to cut off the power supply to the controller to be upgraded and exit the OTA mode after confirming that all upgrade tasks have been completed, and to control the target vehicle to power down.
[0033] The commercial vehicle OTA upgrade control device provided by this invention includes: a receiving module, a judging module, a first control module, a second control module, and a third control module; the receiving module receives OTA upgrade instructions and upgrade software packages sent by a remote communication terminal, the OTA upgrade instructions including a list of controllers to be upgraded; the judging module judges whether the target vehicle meets the OTA prerequisites; when the judging module's judgment result is satisfactory, the first control module controls the target vehicle to enter a state of prohibiting driving, prohibiting gear shifting, and prohibiting charging, and controls the vehicle's power distribution unit to enter OTA mode; the second control module, according to the list of controllers to be upgraded, controls the vehicle's power distribution unit to supply power only to the controllers to be upgraded, and controls the target vehicle to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package; the third control module, after confirming that all upgrade tasks are completed, controls the vehicle's power distribution unit to cut off the power supply to the controllers to be upgraded and exit OTA mode, and controls the target vehicle to power down. The device of this invention is coordinated and controlled by the vehicle domain controller. When the conditions are met, the vehicle is controlled to enter OTA mode, and the body power distribution unit supplies power only to the controller to be upgraded. During the upgrade process, the power supply of unnecessary controllers can be cut off, which effectively reduces the CAN bus load and battery power consumption, and improves the stability and success rate of OTA upgrade.
[0034] As a further aspect of the present invention: the judgment module is specifically used to detect whether the power supply of the target vehicle is OFF, whether the charging state is non-charging, whether the vehicle gear is N, and whether the handbrake is engaged. If all of these conditions are met, the system is deemed to satisfy the requirements.
[0035] The device of this invention ensures that the vehicle is in a safe and suitable state for upgrading by checking multiple conditions such as power level, charging status, gear position, and handbrake, avoiding OTA execution in unsafe states such as driving or charging, thus improving the safety and reliability of the upgrade process.
[0036] According to a third aspect of the present invention, a commercial vehicle OTA upgrade control device is provided, the commercial vehicle OTA upgrade control device comprising a processor and a memory, the memory storing at least one computer instruction, the instruction being loaded and executed by the processor to perform the steps performed in the commercial vehicle OTA upgrade control method described above.
[0037] According to a fourth aspect of the present invention, a computer-readable storage medium is provided, the storage medium storing at least one computer instruction, the instruction being loaded and executed by a processor to perform the steps performed in the commercial vehicle OTA upgrade control method described in any of the preceding claims.
[0038] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and are not intended to limit the invention. Attached Figure Description
[0039] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.
[0040] Figure 1 This is a system architecture diagram corresponding to the commercial vehicle OTA upgrade control method provided in the embodiments of the present invention;
[0041] Figure 2 This is a flowchart of the commercial vehicle OTA upgrade control method provided in the embodiments of the present invention;
[0042] Figure 3 This is a flowchart of the commercial vehicle OTA upgrade control method provided in the embodiments of the present invention;
[0043] Figure 4 This is a structural diagram of the commercial vehicle OTA upgrade control device provided in an embodiment of the present invention. Detailed Implementation
[0044] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention.
[0045] The present invention provides a method for controlling OTA upgrades for commercial vehicles. Figure 1 The diagram illustrates an exemplary system architecture for applying the method described in this invention. This architecture includes a remote communication terminal, a vehicle domain controller, a body power distribution unit, and a controller to be upgraded. Figure 2 , Figure 3 The flowchart of the commercial vehicle OTA upgrade control method of the present invention includes the following steps:
[0046] Step 101: Receive the OTA upgrade command and upgrade software package sent by the remote communication terminal;
[0047] In this embodiment, the remote communication terminal is the OTA master control node. The remote communication terminal sends OTA instructions to the vehicle domain controller and downloads the upgrade software package. The OTA upgrade instructions include a list of controllers to be upgraded.
[0048] Step 102: Determine whether the target vehicle meets the prerequisites for OTA (Over-The-Air) updates;
[0049] In one embodiment, determining whether the target vehicle meets the prerequisites for OTA (Over-The-Air) updates specifically includes:
[0050] The system checks whether the target vehicle's power supply is OFF, its charging status is not charging, its gear is in N (neutral), and its handbrake is engaged. If all of these conditions are met, the system is deemed to satisfy the requirements.
[0051] The method of this invention ensures that the vehicle is in a safe and suitable state for upgrading by checking multiple conditions such as power supply level, charging status, gear position, and handbrake, avoiding OTA execution in unsafe states such as driving or charging, thus improving the safety and reliability of the upgrade process.
[0052] Step 103: If satisfied, control the target vehicle to enter a state where driving, shifting, and charging are prohibited, and control the vehicle's power distribution unit to enter OTA mode.
[0053] In this embodiment, after the vehicle domain controller determines that the preconditions for vehicle OTA are met, according to the current OTA task, the vehicle domain controller first controls the vehicle state to prohibit driving, prohibit shifting, prohibit charging, etc., and then controls the body power distribution unit to enter OTA mode. At this time, the body power distribution unit is in OTA mode.
[0054] In one embodiment, after controlling the vehicle's power distribution unit to enter OTA mode, the above method further includes:
[0055] The vehicle's electrical distribution unit is controlled to retain the function of the hazard warning lights.
[0056] In this embodiment, the vehicle's power distribution unit can be controlled to continuously supply power to the hazard warning lights so that the hazard warning lights retain their warning function.
[0057] The method of this invention retains the hazard warning light function in OTA mode, ensuring that the light can still provide warnings in case of emergencies during the upgrade process, thereby enhancing the safety of the upgrade process.
[0058] Step 104: According to the list of controllers to be upgraded, control the vehicle body power distribution unit to supply power only to the controllers to be upgraded, and control the target vehicle to switch between high and low voltage states according to the preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package.
[0059] In this embodiment, the vehicle domain controller controls the body power distribution unit to enter OTA mode and sends different power-on signals to the body power distribution unit for different controllers to be upgraded according to each different OTA task. When the body power distribution unit receives the relevant signals, it supplies power to the controller to be upgraded and wakes it up. After completing the action, it sends a successful entry signal back to the vehicle domain controller. After determining the vehicle mode, the vehicle domain controller sends the OTA mode entry status back to the OTA master control node. The vehicle domain controller then sends the upgrade software package to the controller to be upgraded, so that the controller to be upgraded can perform flashing and installation.
[0060] In one embodiment, controlling the target vehicle to switch between high and low voltage states according to a preset strategy specifically includes:
[0061] Control the target vehicle to switch to auxiliary drive high-voltage state so that the upgradeable controller in the high-voltage state of the controller to be upgraded can be upgraded.
[0062] After the upgradeable controller is flashed under high voltage, the target vehicle is switched to low voltage so that the controllers that need to be upgraded under low voltage can be upgraded.
[0063] Specifically, after the vehicle enters OTA mode, to avoid battery depletion due to prolonged upgrades, the upgrade task under high voltage is executed first. The OTA master control node notifies the vehicle domain controller to switch to the auxiliary drive high voltage state, and after the controllers that can be upgraded under high voltage state are successfully flashed and installed, the OTA master control node notifies the vehicle domain controller to switch to the low voltage state, and after the controllers that require low voltage state to be upgraded are successfully upgraded.
[0064] The method of the present invention controls the vehicle to switch between auxiliary drive high-voltage and low-voltage states. The controller that can be upgraded is executed first in the high-voltage state, and then the controller that needs to be upgraded is executed in the low-voltage state. During the upgrade process, the high-voltage state can be used to replenish the battery, reducing the risk of power depletion caused by long-term upgrades in the low-voltage state.
[0065] In one embodiment, when the list of controllers to be upgraded includes a body power distribution unit, the control schedules the upgrade of the body power distribution unit after the upgrades of other controllers to be upgraded are completed.
[0066] It should be noted that if the current upgrade task includes the vehicle body power distribution unit, then the vehicle body power distribution unit should be upgraded last. That is, the upgrade of the vehicle body power distribution unit should be placed at the end of the entire upgrade task to prevent abnormalities in the vehicle body power distribution unit from affecting the power supply of other controllers.
[0067] The method of the present invention schedules the upgrade task of the vehicle body power distribution unit to be executed last, so as to avoid the power supply to other controllers due to abnormalities during the upgrade process, thus ensuring the power supply stability and task integrity of the entire OTA process.
[0068] Step 105: After confirming that all upgrade tasks are completed, control the vehicle's power distribution unit to cut off the power supply to the controller to be upgraded and exit OTA mode, and control the target vehicle to power off.
[0069] In this embodiment, after all upgrade tasks are completed, the OTA master node notifies the vehicle domain controller to exit OTA mode. The vehicle domain controller then notifies the vehicle power distribution unit to promptly cut off the power supply to the controller to be upgraded and exit OTA mode. Finally, the OTA upgrade is exited, and the vehicle is powered off.
[0070] In one embodiment, before the control body power distribution unit cuts off the power supply to the controller to be upgraded, the method further includes:
[0071] Perform version verification on the upgraded controller, and proceed with subsequent steps after the verification is successful.
[0072] The method of this invention verifies the version of the upgraded controller before performing the exit operation, ensuring that all controllers are upgraded correctly and avoiding system malfunctions due to upgrade failure or version errors, thereby improving the reliability and integrity of OTA upgrades.
[0073] The commercial vehicle OTA upgrade control method provided in this invention first receives an OTA upgrade command and upgrade software package from a remote communication terminal. The OTA upgrade command includes a list of controllers to be upgraded. Then, it determines whether the target vehicle meets the OTA prerequisites. If so, it controls the target vehicle to enter a state where driving, shifting, and charging are prohibited, and controls the vehicle's power distribution unit to enter OTA mode. Next, according to the list of controllers to be upgraded, it controls the vehicle's power distribution unit to supply power only to the controllers to be upgraded, and controls the target vehicle to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package. Finally, after confirming that all upgrade tasks are completed, it controls the vehicle's power distribution unit to cut off the power supply to the controllers to be upgraded and exit OTA mode, and controls the target vehicle to power down. This method, through coordinated control by the vehicle domain controller, controls the vehicle to enter OTA mode after the conditions are met, and the vehicle's power distribution unit supplies power only to the controllers to be upgraded. This allows for the disconnection of power to unnecessary controllers during the upgrade process, effectively reducing CAN bus load and battery power consumption, and improving the stability and success rate of OTA upgrades.
[0074] Based on the above Figure 2 The commercial vehicle OTA upgrade control method described in the corresponding embodiments is described below as an embodiment of the present invention, which can be used to execute the method embodiments of the present invention.
[0075] The commercial vehicle OTA upgrade control device provided in this embodiment of the invention, such as Figure 4 As shown, the device includes: a receiving module 201, a judging module 202, a first control module 203, a second control module 204, and a third control module 205;
[0076] The receiving module 201 is used to receive OTA upgrade instructions and upgrade software packages sent by the remote communication terminal. The OTA upgrade instructions include a list of controllers to be upgraded.
[0077] The judgment module 202 is used to determine whether the target vehicle meets the OTA prerequisites;
[0078] The first control module 203 is used to control the target vehicle to enter a state of prohibiting driving, prohibiting gear shifting and prohibiting charging when the judgment result of the judgment module 202 is satisfied, and to control the body power distribution unit to enter OTA mode.
[0079] The second control module 204 is used to control the vehicle power distribution unit to supply power only to the controllers to be upgraded according to the list of controllers to be upgraded, and to control the target vehicle to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package.
[0080] The third control module 205 is used to control the vehicle body power distribution unit to cut off the power supply to the controller to be upgraded and exit the OTA mode after confirming that all upgrade tasks have been completed, and to control the target vehicle to power down.
[0081] The commercial vehicle OTA upgrade control device provided in this embodiment of the invention includes: a receiving module 201, a judging module 202, a first control module 203, a second control module 204, and a third control module 205; the receiving module 201 receives OTA upgrade instructions and upgrade software packages sent by a remote communication terminal, the OTA upgrade instructions including a list of controllers to be upgraded; the judging module 202 judges whether the target vehicle meets the OTA prerequisites; when the judging module 202 judges that the conditions are met, the first control module 203 controls the target vehicle to enter a state of prohibiting driving, prohibiting gear shifting, and prohibiting charging, and controls the vehicle body power distribution unit to enter OTA mode; the second control module 204, according to the list of controllers to be upgraded, controls the vehicle body power distribution unit to supply power only to the controllers to be upgraded, and controls the target vehicle to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package; the third control module 205, after confirming that all upgrade tasks are completed, controls the vehicle body power distribution unit to cut off the power supply to the controllers to be upgraded and exit OTA mode, and controls the target vehicle to power off. The device of this invention is coordinated and controlled by the vehicle domain controller. When the conditions are met, the vehicle is controlled to enter OTA mode, and the body power distribution unit supplies power only to the controller to be upgraded. During the upgrade process, the power supply of unnecessary controllers can be cut off, which effectively reduces the CAN bus load and battery power consumption, and improves the stability and success rate of OTA upgrade.
[0082] In one embodiment, the determination module 202 is specifically used to detect whether the power supply of the target vehicle is OFF, whether the charging state is non-charging, whether the vehicle gear is N, and whether the handbrake is engaged. If all of these conditions are met, the vehicle is deemed to be satisfied.
[0083] The device of this invention ensures that the vehicle is in a safe and suitable state for upgrading by checking multiple conditions such as power level, charging status, gear position, and handbrake, avoiding OTA execution in unsafe states such as driving or charging, thus improving the safety and reliability of the upgrade process.
[0084] Based on the above Figure 2 In another embodiment of the present invention, a commercial vehicle OTA upgrade control device is provided, comprising a processor and a memory. The memory stores at least one computer instruction, which is loaded and executed by the processor to achieve the above-described OTA upgrade control method for commercial vehicles. Figure 2 The corresponding embodiment describes the OTA upgrade control method for commercial vehicles.
[0085] Based on the above Figure 2 In addition to the commercial vehicle OTA upgrade control method described in the corresponding embodiments, this invention also provides a computer-readable storage medium. For example, a non-transitory computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a CD-ROM, magnetic tape, floppy disk, or optical data storage system. This storage medium stores at least one computer instruction for executing the above-described... Figure 2 The OTA upgrade control method for commercial vehicles described in the corresponding embodiments will not be repeated here.
[0086] Other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the disclosure herein. This application is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of the invention are indicated by the claims.
[0087] It should be understood that the present invention is not limited to the precise structure described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of the invention is limited only by the appended claims.
Claims
1. A method for controlling OTA upgrades in commercial vehicles, applied to a vehicle domain controller, characterized in that, The method includes: Receive OTA upgrade instructions and upgrade software packages sent by a remote communication terminal, wherein the OTA upgrade instructions include a list of controllers to be upgraded; Determine whether the target vehicle meets the prerequisites for OTA (Over-The-Air) updates; If the conditions are met, the target vehicle is controlled to enter a state where driving, shifting, and charging are prohibited, and the vehicle's power distribution unit is controlled to enter OTA mode. According to the list of controllers to be upgraded, the vehicle power distribution unit is controlled to supply power only to the controllers to be upgraded, and the target vehicle is controlled to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package; After confirming that all upgrade tasks are completed, the system controls the vehicle's power distribution unit to cut off the power supply to the controller to be upgraded and exit OTA mode, and controls the target vehicle to power down.
2. The commercial vehicle OTA upgrade control method according to claim 1, characterized in that, The step of controlling the target vehicle to switch between high and low voltage states according to a preset strategy specifically includes: Control the target vehicle to switch to auxiliary drive high-pressure state so that the upgradeable controller in the high-pressure state of the controller to be upgraded can be upgraded. After the upgradeable controller is flashed under the high-pressure state, the target vehicle is switched to a low-pressure state so that the controllers in the controllers to be upgraded that need to be upgraded under the low-pressure state can be upgraded.
3. The commercial vehicle OTA upgrade control method according to claim 1, characterized in that, The determination of whether the target vehicle meets the OTA prerequisites specifically includes: The system detects whether the target vehicle's power supply is OFF, its charging status is non-charging, its gear is N, and its handbrake is engaged. If all of these conditions are met, the system is deemed to satisfy the requirements.
4. The commercial vehicle OTA upgrade control method according to claim 1, characterized in that, When the list of controllers to be upgraded includes the vehicle body power distribution unit, the control will schedule the upgrade of the vehicle body power distribution unit after the upgrades of the other controllers to be upgraded are completed.
5. The commercial vehicle OTA upgrade control method according to claim 1, characterized in that, After the vehicle body power distribution unit enters OTA mode, the method further includes: The vehicle body electrical distribution unit is controlled to retain the function of the hazard warning lights.
6. The commercial vehicle OTA upgrade control method according to claim 1, characterized in that, Before controlling the vehicle body power distribution unit to cut off power to the controller to be upgraded, the method further includes: Perform version verification on the upgraded controller, and proceed with subsequent steps after the verification is successful.
7. A commercial vehicle OTA upgrade control device, characterized in that, include: The system comprises a receiving module, a judging module, a first control module, a second control module, and a third control module. The receiving module is used to receive OTA upgrade instructions and upgrade software packages sent by the remote communication terminal, wherein the OTA upgrade instructions include a list of controllers to be upgraded; The judgment module is used to determine whether the target vehicle meets the OTA prerequisites; The first control module is used to control the target vehicle to enter a state of prohibiting driving, prohibiting gear shifting, and prohibiting charging when the judgment result of the judgment module is satisfied, and to control the body power distribution unit to enter OTA mode. The second control module is used to control the vehicle power distribution unit to supply power only to the controllers to be upgraded according to the list of controllers to be upgraded, and to control the target vehicle to switch between high and low voltage states according to a preset strategy, so that the controllers to be upgraded can complete the upgrade based on the upgrade software package; The third control module is used to control the vehicle power distribution unit to cut off the power supply to the controller to be upgraded and exit the OTA mode after confirming that all upgrade tasks have been completed, and to control the target vehicle to power down.
8. The commercial vehicle OTA upgrade control device according to claim 7, characterized in that, The judgment module is specifically used to detect whether the power supply of the target vehicle is OFF, whether the charging status is non-charging, whether the vehicle gear is in N gear, and whether the handbrake is engaged. If all of these are true, the condition is satisfied.
9. A commercial vehicle OTA upgrade control device, characterized in that, The commercial vehicle OTA upgrade control device includes a processor and a memory, wherein the memory stores at least one computer instruction, which is loaded and executed by the processor to perform the steps in the commercial vehicle OTA upgrade control method according to any one of claims 1 to 6.
10. A computer-readable storage medium, characterized in that, The storage medium stores at least one computer instruction, which is loaded and executed by a processor to perform the steps in the commercial vehicle OTA upgrade control method according to any one of claims 1 to 6.