Vehicle OTA upgrade channel switching method, device and equipment and storage medium

Abstract

The invention discloses a vehicle OTA upgrading channel switching method and device, equipment and a storage medium, and the method comprises the steps: collecting the information of communication channels currently available for a to-be-upgraded vehicle in real time after an OTA upgrading task is received, carrying out the comprehensive evaluation of the safety and reliability of each available communication channel, and obtaining a comprehensive score; before OTA upgrading of the to-be-upgraded vehicle, a channel corresponding to the highest score with the score value larger than a first preset threshold value is selected from the comprehensive scores to serve as an initial upgrading channel, and change of the score value of the initial upgrading channel is continuously monitored in the upgrading process; when it is detected that the score value of the initial upgrading channel is continuously lower than a second preset threshold value, the current transmission task is paused, the initial upgrading channel is switched to an alternative channel with the highest comprehensive score, a re-authentication process is executed, the OTA upgrading task continues to be completed through a breakpoint continuous transmission mechanism, and the first preset threshold value is larger than the second preset threshold value. And the OTA upgrading success rate and safety can be obviously improved.

Description

Technical Field

[0001] This invention relates to the field of OTA upgrade technology for intelligent connected vehicles, and in particular to a method, apparatus, device, and storage medium for switching OTA upgrade channels for vehicles. Background Technology

[0002] As intelligent connected vehicles become increasingly complex, over-the-air (OTA) upgrades have become a key means of improving user experience, fixing vulnerabilities, and distributing new features.

[0003] However, current OTA transmission paths are usually fixed to a certain communication channel (such as cellular network). When the network quality fluctuates or encounters security risks such as man-in-the-middle attacks or transmission hijacking, the system lacks a response mechanism, which can easily lead to upgrade interruption, failure, or even system abnormality.

[0004] Existing technologies often focus on single indicators such as network bandwidth in channel evaluation, lacking comprehensive consideration and failing to fully reflect the true performance of the channel. At the same time, when the channel quality deteriorates during the upgrade process, existing systems often lack scientific dynamic switching mechanisms and safe rollback strategies, resulting in the need to restart the entire upgrade process after the upgrade is interrupted. This not only wastes network resources but may also leave the vehicle in an unsafe intermediate state. Summary of the Invention

[0005] The main objective of this invention is to provide a method, apparatus, device, and storage medium for switching channels during vehicle OTA upgrades, aiming to solve the technical problems of high upgrade failure rate, high security risk, and waste of network resources caused by the single communication channel selection mechanism, lack of multi-dimensional security and reliability assessment, and imperfect dynamic switching strategy in the OTA upgrade process of intelligent connected vehicles in the prior art.

[0006] In a first aspect, the present invention provides a method for switching vehicle OTA upgrade channels, the method comprising the following steps: Upon receiving an OTA upgrade task, the system collects real-time information on the currently available communication channels of the vehicle to be upgraded, conducts a comprehensive evaluation of the security and reliability of each available communication channel, and obtains a comprehensive score. Before the vehicle to be upgraded undergoes an OTA upgrade, the channel corresponding to the highest score with a score value greater than a first preset threshold is selected from the comprehensive score as the initial upgrade channel, and the score value change of the initial upgrade channel is continuously monitored during the upgrade process. When the score of the initial upgrade channel is detected to be continuously lower than the second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the alternative channel with the highest comprehensive score, the re-authentication process is executed, and the breakpoint resume mechanism is used to continue to complete the OTA upgrade task, wherein the first preset threshold is greater than the second preset threshold.

[0007] Optionally, upon receiving an OTA upgrade task, the system collects real-time information on currently available communication channels for the vehicle to be upgraded, performs a comprehensive evaluation of the security and reliability of each available communication channel, and obtains a comprehensive score, including: Upon receiving an OTA upgrade task, information on the currently available communication channels of the vehicle to be upgraded is collected in real time. The network quality of each available communication channel is evaluated based on the communication channel information to obtain a network quality score; The security capabilities of each available communication channel are evaluated based on the communication channel information to obtain a security capability score; The historical reliability of each available communication channel is evaluated based on the communication channel information to obtain a historical reliability score; A comprehensive score is determined based on the network quality score, the security capability score, and the historical reliability score.

[0008] Optionally, the step of evaluating the network quality of each available communication channel based on the communication channel information to obtain a network quality score includes: Obtain the network latency, average bandwidth, and packet loss rate corresponding to each available communication channel from the communication channel information; The network quality of each available communication channel is evaluated based on the normalized network latency, average bandwidth, and packet loss rate, and the network quality score is calculated using the following formula:

[0009] in, To score network quality, For delay weighting coefficients, Due to network latency, This is the bandwidth weighting coefficient. For average bandwidth, This is the packet loss rate weighting coefficient. For packet loss rate, This indicates normalization processing.

[0010] Optionally, the step of evaluating the security capabilities of each available communication channel based on the communication channel information to obtain a security capability score includes: Obtain the TLS protocol security level, key length security level, certificate status, and two-way authentication capability corresponding to each available communication channel from the communication channel information; The security capability score is calculated based on the TLS protocol security level, the key length security level, the certificate status, and the two-way authentication capability using the following formula:

[0011] in, To score safety capabilities, This is the TLS protocol level weighting coefficient. For the TLS protocol security level, This is the key length level weighting coefficient. For key length security level, For certificate status weighting coefficients, Certificate status. This is the weighting coefficient for two-way authentication capability. This is for two-way authentication capability.

[0012] Optionally, the step of evaluating the historical reliability of each available communication channel based on the communication channel information to obtain a historical reliability score includes: The number of transmission failures, handshake failures, network interruptions, security attack events, and total attempts for each available communication channel are obtained from the communication channel information. The anomaly rate is calculated using the following formula based on the number of transmission failures, the number of handshake failures, the number of network interruptions, the number of security attack events, and the total number of attempts:

[0013] in, For the anomaly rate, For transmission failure weighting coefficients, The number of transmission failures. This is the weighting coefficient for handshake failure. This represents the number of failed handshakes. This is the network interruption weighting coefficient. For the number of network outages, This is a weighting coefficient for security attack events. To count security attack incidents, This represents the total number of attempts. The historical reliability score is calculated based on the anomaly rate using the following formula:

[0014] in, Score historical reliability. is the base of the natural logarithm. To punish the amplification factor, This represents the anomaly rate.

[0015] Optionally, determining the comprehensive score based on the network quality score, the security capability score, and the historical reliability score includes: A comprehensive score is obtained by calculating the network quality score, the security capability score, and the historical reliability score using the following formula:

[0016] in, For comprehensive scoring, This is the network quality weighting coefficient. To score network quality, For safety capability weighting coefficients, To score safety capabilities, Historical reliability weighting coefficient, Score historical reliability.

[0017] Optionally, when the score value of the initial upgrade channel is detected to be continuously lower than the second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the alternative channel with the highest comprehensive score, a re-authentication process is executed, and the OTA upgrade task is continued using a breakpoint resume mechanism. The first preset threshold is greater than the second preset threshold, including: When the score value of the initial upgrade channel is detected to be lower than the second preset threshold for a preset number of consecutive preset times, the current transmission task is paused and the current transmission status information is saved to a non-volatile memory, wherein the first preset threshold is greater than the second preset threshold. Select the candidate channel with the highest overall score from all available communication channels as the target upgrade channel, and switch the initial upgrade channel to the target upgrade channel; After the channel switch is completed, the session key is renegotiated, the server identity is authenticated, and the integrity of the upgrade package is verified. The OTA upgrade task is continued through the target upgrade channel using the breakpoint resume mechanism. Only the incomplete upgrade data part is requested and downloaded. The data integrity is verified by comparing the hash value of the corresponding data block of the source server and the vehicle to be upgraded. At the same time, the transmission progress status information is updated.

[0018] Secondly, to achieve the above objectives, the present invention also proposes a vehicle OTA upgrade channel switching device, the vehicle OTA upgrade channel switching device comprising: The comprehensive evaluation module is used to collect information on the currently available communication channels of the vehicle to be upgraded in real time after receiving the OTA upgrade task, and to conduct a comprehensive evaluation of the security and reliability of each available communication channel to obtain a comprehensive score. The initial upgrade monitoring module is used to select the channel corresponding to the highest score with a score value greater than a first preset threshold from the comprehensive score before the OTA upgrade of the vehicle to be upgraded, and to continuously monitor the score value change of the initial upgrade channel during the upgrade process. The channel switching module is used to pause the current transmission task when the score value of the initial upgrade channel is continuously lower than the second preset threshold, switch the initial upgrade channel to the alternative channel with the highest comprehensive score, execute the re-authentication process, and continue to complete the OTA upgrade task using the breakpoint resume mechanism, wherein the first preset threshold is greater than the second preset threshold.

[0019] Thirdly, to achieve the above objectives, the present invention also proposes a vehicle OTA upgrade channel switching device, the vehicle OTA upgrade channel switching device comprising: a memory, a processor, and a vehicle OTA upgrade channel switching program stored in the memory and executable on the processor, the vehicle OTA upgrade channel switching program being configured to implement the steps of the vehicle OTA upgrade channel switching method described above.

[0020] Fourthly, to achieve the above objectives, the present invention also proposes a storage medium storing a vehicle OTA upgrade channel switching program, wherein when the vehicle OTA upgrade channel switching program is executed by a processor, it implements the steps of the vehicle OTA upgrade channel switching method described above.

[0021] The vehicle OTA upgrade channel switching method proposed in this invention involves, upon receiving an OTA upgrade task, real-time collection of currently available communication channel information for the vehicle to be upgraded, and a comprehensive evaluation of the security and reliability of each available communication channel to obtain a comprehensive score. Before the OTA upgrade of the vehicle to be upgraded, the channel corresponding to the highest score above a first preset threshold is selected as the initial upgrade channel, and the score change of the initial upgrade channel is continuously monitored during the upgrade process. When the score of the initial upgrade channel is detected to be continuously lower than a second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the candidate channel with the highest comprehensive score, a re-authentication process is executed, and the interrupted transmission mechanism is used to continue the upgrade process. The OTA upgrade task, wherein the first preset threshold is greater than the second preset threshold, enables dynamic intelligent selection and seamless switching of communication channels during the OTA upgrade process of intelligent connected vehicles. This significantly improves the success rate and security of OTA upgrades, avoids channel selection bias caused by relying on a single network indicator in traditional solutions, effectively prevents frequent switching problems caused by fluctuations in channel scores around the threshold, and ensures timely switching to the optimal alternative channel when channel quality deteriorates. This not only guarantees the security of the channel switching process but also avoids duplicate data transmission, saves network traffic consumption, and greatly improves user experience and system reliability. It is particularly suitable for complex and ever-changing in-vehicle network environments, improving the speed and efficiency of vehicle OTA upgrade channel switching. Attached Figure Description

[0022] Figure 1 This is a schematic diagram of the device structure of the hardware operating environment involved in the embodiments of the present invention; Figure 2 This is a flowchart illustrating the first embodiment of the vehicle OTA upgrade channel switching method of the present invention; Figure 3 This is a flowchart illustrating the second embodiment of the vehicle OTA upgrade channel switching method of the present invention; Figure 4 This is a flowchart illustrating the third embodiment of the vehicle OTA upgrade channel switching method of the present invention; Figure 5 This is a schematic diagram of multi-channel status acquisition and scoring in the vehicle OTA upgrade channel switching method of the present invention; Figure 6 This is a functional block diagram of the first embodiment of the vehicle OTA upgrade channel switching device of the present invention.

[0023] The realization of the objective, functional features and advantages of the present invention will be further explained in conjunction with the embodiments and with reference to the accompanying drawings. Detailed Implementation

[0024] It should be understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

[0025] The solution of this invention mainly involves: upon receiving an OTA upgrade task, collecting real-time information on currently available communication channels of the vehicle to be upgraded, comprehensively evaluating the security and reliability of each available communication channel to obtain a comprehensive score; before the OTA upgrade of the vehicle to be upgraded, selecting the channel with the highest score value greater than a first preset threshold from the comprehensive score as the initial upgrade channel, and continuously monitoring the score value change of the initial upgrade channel during the upgrade process; when the score value of the initial upgrade channel is detected to be continuously lower than a second preset threshold, pausing the current transmission task, switching the initial upgrade channel to the alternative channel with the highest comprehensive score, executing a re-authentication process, and using a breakpoint resume mechanism to continue completing the OTA upgrade task, wherein the first preset threshold is greater than the second preset threshold, enabling OTA upgrades for intelligent connected vehicles. The dynamic intelligent selection and seamless switching of communication channels during the process significantly improves the success rate and security of OTA upgrades. It avoids the channel selection bias caused by relying on a single network indicator in traditional solutions, effectively prevents frequent switching problems caused by fluctuations in channel scores around thresholds, and ensures timely switching to the optimal alternative channel when channel quality deteriorates. This not only guarantees the security of the channel switching process but also avoids duplicate data transmission, saves network traffic consumption, and greatly improves user experience and system reliability. It is particularly suitable for complex and ever-changing in-vehicle network environments, improving the speed and efficiency of vehicle OTA upgrade channel switching. It solves the technical problems of high upgrade failure rate, high security risks, and waste of network resources caused by the single communication channel selection mechanism, lack of multi-dimensional security and reliability assessment, and imperfect dynamic switching strategy in the existing technology of intelligent connected vehicle OTA upgrades.

[0026] Reference Figure 1 , Figure 1 This is a schematic diagram of the device structure of the hardware operating environment involved in the embodiments of the present invention.

[0027] like Figure 1As shown, the device may include: a processor 1001, such as a CPU; a communication bus 1002; a user interface 1003; a network interface 1004; and a memory 1005. The communication bus 1002 is used to enable communication between these components. The user interface 1003 may include a display screen or an input unit such as a keyboard; optionally, the user interface 1003 may also include a standard wired interface or a wireless interface. The network interface 1004 may optionally include a standard wired interface or a wireless interface (such as a Wi-Fi interface). The memory 1005 may be high-speed RAM or non-volatile memory, such as a disk drive. Optionally, the memory 1005 may also be a storage device independent of the aforementioned processor 1001.

[0028] Those skilled in the art will understand that Figure 1 The device structure shown does not constitute a limitation on the device and may include more or fewer components than shown, or combine certain components, or have different component arrangements.

[0029] like Figure 1 As shown, the memory 1005, which serves as a storage medium, may include an operating device, a network communication module, a user interface module, and a vehicle OTA upgrade channel switching program.

[0030] The device of this invention calls the vehicle OTA upgrade channel switching program stored in the memory 1005 through the processor 1001 and performs the following operations: Upon receiving an OTA upgrade task, the system collects real-time information on the currently available communication channels of the vehicle to be upgraded, conducts a comprehensive evaluation of the security and reliability of each available communication channel, and obtains a comprehensive score. Before the vehicle to be upgraded undergoes an OTA upgrade, the channel corresponding to the highest score with a score value greater than a first preset threshold is selected from the comprehensive score as the initial upgrade channel, and the score value change of the initial upgrade channel is continuously monitored during the upgrade process. When the score of the initial upgrade channel is detected to be continuously lower than the second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the alternative channel with the highest comprehensive score, the re-authentication process is executed, and the breakpoint resume mechanism is used to continue to complete the OTA upgrade task, wherein the first preset threshold is greater than the second preset threshold.

[0031] The device of the present invention, through processor 1001 calling the vehicle OTA upgrade channel switching program stored in memory 1005, also performs the following operations: Upon receiving an OTA upgrade task, information on the currently available communication channels of the vehicle to be upgraded is collected in real time. The network quality of each available communication channel is evaluated based on the communication channel information to obtain a network quality score; The security capabilities of each available communication channel are evaluated based on the communication channel information to obtain a security capability score; The historical reliability of each available communication channel is evaluated based on the communication channel information to obtain a historical reliability score; A comprehensive score is determined based on the network quality score, the security capability score, and the historical reliability score.

[0032] The device of the present invention, through processor 1001 calling the vehicle OTA upgrade channel switching program stored in memory 1005, also performs the following operations: Obtain the network latency, average bandwidth, and packet loss rate corresponding to each available communication channel from the communication channel information; The network quality of each available communication channel is evaluated based on the normalized network latency, average bandwidth, and packet loss rate, and the network quality score is calculated using the following formula:

[0033] in, To score network quality, For delay weighting coefficients, Due to network latency, This is the bandwidth weighting coefficient. For average bandwidth, This is the packet loss rate weighting coefficient. For packet loss rate, This indicates normalization processing.

[0034] The device of the present invention, through processor 1001 calling the vehicle OTA upgrade channel switching program stored in memory 1005, also performs the following operations: Obtain the TLS protocol security level, key length security level, certificate status, and two-way authentication capability corresponding to each available communication channel from the communication channel information; The security capability score is calculated based on the TLS protocol security level, the key length security level, the certificate status, and the two-way authentication capability using the following formula:

[0035] in, To score safety capabilities, This is the TLS protocol level weighting coefficient. For the TLS protocol security level, This is the key length level weighting coefficient. For key length security level, For certificate status weighting coefficients, Certificate status. This is the weighting coefficient for two-way authentication capability. This is for two-way authentication capability.

[0036] The device of the present invention, through processor 1001 calling the vehicle OTA upgrade channel switching program stored in memory 1005, also performs the following operations: The number of transmission failures, handshake failures, network interruptions, security attack events, and total attempts for each available communication channel are obtained from the communication channel information. The anomaly rate is calculated using the following formula based on the number of transmission failures, the number of handshake failures, the number of network interruptions, the number of security attack events, and the total number of attempts:

[0037] in, For the anomaly rate, For transmission failure weighting coefficients, The number of transmission failures. This is the weighting coefficient for handshake failure. This represents the number of failed handshakes. This is the network interruption weighting coefficient. For the number of network outages, This is a weighting coefficient for security attack events. To count security attack incidents, This represents the total number of attempts. The historical reliability score is calculated based on the anomaly rate using the following formula:

[0038] in, Score historical reliability. is the base of the natural logarithm. To punish the amplification factor, This represents the anomaly rate.

[0039] The device of the present invention, through processor 1001 calling the vehicle OTA upgrade channel switching program stored in memory 1005, also performs the following operations: A comprehensive score is obtained by calculating the network quality score, the security capability score, and the historical reliability score using the following formula:

[0040] in, For comprehensive scoring, This is the network quality weighting coefficient. To score network quality, For safety capability weighting coefficients, To score safety capabilities, Historical reliability weighting coefficient, Score historical reliability.

[0041] The device of the present invention, through processor 1001 calling the vehicle OTA upgrade channel switching program stored in memory 1005, also performs the following operations: When the score value of the initial upgrade channel is detected to be lower than the second preset threshold for a preset number of consecutive preset times, the current transmission task is paused and the current transmission status information is saved to a non-volatile memory, wherein the first preset threshold is greater than the second preset threshold. Select the candidate channel with the highest overall score from all available communication channels as the target upgrade channel, and switch the initial upgrade channel to the target upgrade channel; After the channel switch is completed, the session key is renegotiated, the server identity is authenticated, and the integrity of the upgrade package is verified. The OTA upgrade task is continued through the target upgrade channel using the breakpoint resume mechanism. Only the incomplete upgrade data part is requested and downloaded. The data integrity is verified by comparing the hash value of the corresponding data block of the source server and the vehicle to be upgraded. At the same time, the transmission progress status information is updated.

[0042] This embodiment employs the above-described scheme. Upon receiving an OTA upgrade task, it collects real-time information on the currently available communication channels of the vehicle to be upgraded, comprehensively evaluates the security and reliability of each available communication channel, and obtains a comprehensive score. Before the OTA upgrade of the vehicle to be upgraded, it selects the channel with the highest score above a first preset threshold from the comprehensive scores as the initial upgrade channel, and continuously monitors the score changes of the initial upgrade channel during the upgrade process. If the score of the initial upgrade channel is detected to be continuously lower than a second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the backup channel with the highest comprehensive score, a re-authentication process is executed, and the OTA upgrade is continued using a breakpoint resume mechanism. This system, where the first preset threshold is greater than the second preset threshold, enables dynamic intelligent selection and seamless switching of communication channels during OTA upgrades of intelligent connected vehicles. This significantly improves the success rate and security of OTA upgrades, avoids channel selection bias caused by relying solely on a single network indicator in traditional solutions, effectively prevents frequent switching issues caused by fluctuations in channel scores around the threshold, and ensures timely switching to the optimal alternative channel when channel quality deteriorates. This not only guarantees the security of channel switching but also avoids redundant data transmission, saves network traffic consumption, and greatly improves user experience and system reliability. It is particularly suitable for complex and ever-changing in-vehicle network environments, improving the speed and efficiency of vehicle OTA upgrade channel switching.

[0043] Based on the above hardware structure, an embodiment of the vehicle OTA upgrade channel switching method of the present invention is proposed.

[0044] Reference Figure 2 , Figure 2 This is a flowchart illustrating the first embodiment of the vehicle OTA upgrade channel switching method of the present invention.

[0045] In the first embodiment, the vehicle OTA upgrade channel switching method includes the following steps: Step S10: After receiving the OTA upgrade task, collect the information on the currently available communication channels of the vehicle to be upgraded in real time, conduct a comprehensive evaluation of the security and reliability of each available communication channel, and obtain a comprehensive score.

[0046] It should be noted that after receiving an OTA upgrade task, the system can collect information on the currently available communication channels of the vehicle to be upgraded in real time, thereby conducting a comprehensive evaluation of the security and reliability of each available communication channel and obtaining a comprehensive score. This scoring mechanism enables the system to objectively compare the applicability of different communication channels, providing a scientific basis for selecting the optimal upgrade channel in the future.

[0047] Step S20: Before the OTA upgrade of the vehicle to be upgraded, select the channel corresponding to the highest score with a score value greater than the first preset threshold from the comprehensive score as the initial upgrade channel, and continuously monitor the change of the score value of the initial upgrade channel during the upgrade process.

[0048] It should be understood that before the vehicle officially starts the software upgrade, the channel corresponding to the highest score value greater than the first preset threshold is selected from the comprehensive score as the initial upgrade channel. During the upgrade process, the comprehensive score value of the current initial upgrade channel is continuously collected and recalculated, and its quality change trend is monitored in real time to provide timely and accurate data support for possible channel switching in the future.

[0049] Step S30: When the score value of the initial upgrade channel is detected to be continuously lower than the second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the alternative channel with the highest comprehensive score, the re-authentication process is executed, and the breakpoint resume mechanism is used to continue to complete the OTA upgrade task, wherein the first preset threshold is greater than the second preset threshold.

[0050] Understandably, when the score of the initial upgrade channel is detected to be continuously lower than the second preset threshold, the current transmission task is paused, and the initial upgrade channel can be switched to the alternative channel with the highest comprehensive score. Then, the re-authentication process is executed, and the breakpoint resume mechanism is used to continue to complete the OTA upgrade task. Here, the first preset threshold is greater than the second preset threshold, which effectively avoids frequent switching caused by the fluctuation of the channel score around the threshold. At the same time, it ensures that the quality of the channel after switching meets the basic requirements. This dual-threshold monitoring mechanism significantly improves the stability and success rate of OTA upgrades.

[0051] This embodiment employs the above-described scheme. Upon receiving an OTA upgrade task, it collects real-time information on the currently available communication channels of the vehicle to be upgraded, comprehensively evaluates the security and reliability of each available communication channel, and obtains a comprehensive score. Before the OTA upgrade of the vehicle to be upgraded, it selects the channel with the highest score above a first preset threshold from the comprehensive scores as the initial upgrade channel, and continuously monitors the score changes of the initial upgrade channel during the upgrade process. If the score of the initial upgrade channel is detected to be continuously lower than a second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the backup channel with the highest comprehensive score, a re-authentication process is executed, and the OTA upgrade is continued using a breakpoint resume mechanism. This system, where the first preset threshold is greater than the second preset threshold, enables dynamic intelligent selection and seamless switching of communication channels during OTA upgrades of intelligent connected vehicles. This significantly improves the success rate and security of OTA upgrades, avoids channel selection bias caused by relying solely on a single network indicator in traditional solutions, effectively prevents frequent switching issues caused by fluctuations in channel scores around the threshold, and ensures timely switching to the optimal alternative channel when channel quality deteriorates. This not only guarantees the security of channel switching but also avoids redundant data transmission, saves network traffic consumption, and greatly improves user experience and system reliability. It is particularly suitable for complex and ever-changing in-vehicle network environments, improving the speed and efficiency of vehicle OTA upgrade channel switching.

[0052] Furthermore, Figure 3 This is a flowchart illustrating the second embodiment of the vehicle OTA upgrade channel switching method of the present invention, as shown below. Figure 3 As shown, based on the first embodiment, a second embodiment of the vehicle OTA upgrade channel switching method of the present invention is proposed. In this embodiment, step S10 specifically includes the following steps: Step S11: After receiving the OTA upgrade task, collect the information on the currently available communication channels of the vehicle to be upgraded in real time.

[0053] It should be noted that upon receiving an OTA upgrade task, the system can collect information on the currently available communication channels of the vehicle to be upgraded in real time.

[0054] In its implementation, when the vehicle's Electronic Control Unit (ECU) receives an OTA software upgrade command from the cloud server, the vehicle communication management module immediately activates the channel detection function. Through vehicle communication interfaces, such as the Telematics Box (T-Box), it scans and identifies all available communication connections in the current environment in real time, including cellular networks (4G / 5G), Wi-Fi hotspots, and Vehicle-to-Everything (V2X) communication channels. Simultaneously, the system collects key technical parameters for each identified communication channel, such as network latency, signal strength, bandwidth utilization, encryption protocol version, and certificate validity status. This real-time data collection process is typically completed within 500 milliseconds, ensuring that the acquired channel information accurately reflects the true state of the vehicle's current network environment. This provides a timely and accurate data foundation for subsequent channel evaluation and selection, effectively avoiding channel selection errors caused by using outdated network information. Step S12: Evaluate the network quality of each available communication channel based on the communication channel information to obtain a network quality score.

[0055] Understandably, based on real-time collected communication channel information, the network quality of each available communication channel can be evaluated to obtain a network quality score. As an important component of the comprehensive channel evaluation, this network quality score objectively reflects the network transmission performance of each communication channel, providing a quantitative basis for subsequent channel selection and switching decisions, and effectively avoiding the evaluation bias problem caused by traditional methods that rely solely on a single network indicator.

[0056] Furthermore, step S12 specifically includes the following steps: Obtain the network latency, average bandwidth, and packet loss rate corresponding to each available communication channel from the communication channel information; The network quality of each available communication channel is evaluated based on the normalized network latency, average bandwidth, and packet loss rate, and the network quality score is calculated using the following formula:

[0057] in, To score network quality, For delay weighting coefficients, Due to network latency, This is the bandwidth weighting coefficient. For average bandwidth, This is the packet loss rate weighting coefficient. For packet loss rate, This indicates normalization processing.

[0058] Understandably, the system precisely extracts key network performance parameters for each available channel from real-time collected communication channel information, including network latency (L), average bandwidth (B), and packet loss rate (P). To eliminate differences in the dimensions of different indicators and ensure consistency in the scoring logic, the system uses reciprocal conversion for latency and packet loss rate (i.e., 1 / L and 1 / P). This is because smaller network latency and packet loss rate indicate better quality, while larger reciprocals indicate better quality, which matches the logic that a larger score is better. Subsequently, the system maps each indicator to the [0, 1] standard interval using the normalization function, making indicators of different magnitudes comparable. Finally, a weighted summation formula is used to calculate the network quality score, where the weight coefficients w1, w2, and w3 are dynamically adjusted according to the vehicle's operating status and satisfy w1 + w2 + w3 = 1. For example, when the vehicle is traveling at high speed, the latency weight w1 is increased, and when it is stationary charging, the bandwidth weight w2 is increased. This multi-dimensional and dynamically adjustable network quality evaluation mechanism can more accurately reflect the true performance of communication channels in different scenarios.

[0059] Step S13: Evaluate the security capabilities of each available communication channel based on the communication channel information to obtain a security capability score.

[0060] It should be understood that the security capabilities of each available communication channel are evaluated based on the communication channel information to obtain a security capability score. This security capability score, as a core component of the comprehensive channel evaluation, objectively quantifies the security protection level of each communication channel.

[0061] Furthermore, step S13 specifically includes the following steps: Obtain the TLS protocol security level, key length security level, certificate status, and two-way authentication capability corresponding to each available communication channel from the communication channel information; The security capability score is calculated based on the TLS protocol security level, the key length security level, the certificate status, and the two-way authentication capability using the following formula:

[0062] in, To score safety capabilities, This is the TLS protocol level weighting coefficient. For the TLS protocol security level, This is the key length level weighting coefficient. For key length security level, For certificate status weighting coefficients, Certificate status. This is the weighting coefficient for two-way authentication capability. This is for two-way authentication capability.

[0063] It should be noted that four key security parameters are precisely extracted from the real-time acquired communication channel information, including the TLS protocol security level (TLS maps different versions of the protocol to security level values, such as TLS 1.0=1, TLS 2.0=1, TLS 3.0=1, TLS 4.0=1, TLS 5.0=1, TLS 6.0=1, TLS 7.0=1, TLS 8.0=1, TLS 9.0=1, TLS 1.0=1, TLS 1.0=1, TLS 1.0=1, TLS 9 ... The system incorporates several security measures, including: 1.3=4; key length security level (KL, quantified by encryption strength, e.g., 128 bits = 1, 256 bits = 3); certificate status (CS, binary representation, valid = 1, invalid = 0); and two-way authentication capability (BA, binary representation, supported = 1, not supported = 0). A weighted calculation formula is then used to derive the security capability score, where each weight coefficient (s1, s2, s3, s4) is dynamically adjusted based on the vehicle's current security requirements, and their sum is 1. For example, the TLS protocol weight (s1) is increased in high-risk areas, while the weights are evenly distributed in normal scenarios. This multi-dimensional security assessment method breaks through the limitations of traditional OTA systems that only focus on network connectivity. By using security capability as a core consideration for channel selection, it effectively identifies and avoids insecure channels using weak encryption protocols, expired certificates, or those that do not support two-way authentication. This significantly reduces security risks such as man-in-the-middle attacks and data leaks during OTA upgrades, providing intelligent connected vehicles with communication security guarantees that meet automotive functional safety standards.

[0064] Step S14: Evaluate the historical reliability of each available communication channel based on the communication channel information to obtain a historical reliability score.

[0065] Understandably, the historical reliability of each available communication channel is evaluated based on the communication channel information to obtain a historical reliability score. This historical reliability scoring mechanism effectively captures the actual network characteristic that "a small number of anomalies have little impact on reliability, but the impact increases rapidly after an increase in anomalies," avoiding the evaluation distortion problem caused by linear scoring. This enables the system to prioritize communication channels with stable historical performance, significantly reducing the OTA upgrade failure rate caused by channel instability.

[0066] Furthermore, step S14 specifically includes the following steps: It should be understood that the number of transmission failures, handshake failures, network interruptions, security attack events, and total attempts for each available communication channel are obtained from the communication channel information. The anomaly rate is calculated using the following formula based on the number of transmission failures, the number of handshake failures, the number of network interruptions, the number of security attack events, and the total number of attempts:

[0067] in, For the anomaly rate, For transmission failure weighting coefficients, The number of transmission failures. This is the weighting coefficient for handshake failure. This represents the number of failed handshakes. This is the network interruption weighting coefficient. For the number of network outages, This is a weighting coefficient for security attack events. To count security attack incidents, This represents the total number of attempts. The historical reliability score is calculated based on the anomaly rate using the following formula:

[0068] in, Score historical reliability. is the base of the natural logarithm. To punish the amplification factor, This represents the anomaly rate.

[0069] It should be noted that key historical performance data for each available communication channel is extracted from the vehicle's historical communication database, including transmission failure count (TF), handshake failure count (HF), network interruption count (NI), security attack event count (AE), and total number of attempts (TA). Subsequently, the anomaly rate is calculated using a weighted formula, where weight coefficients w1-w4 are set differently based on the impact of anomaly type on OTA upgrades (e.g., the weight w4 for security attack events is usually set to the highest, as it poses the greatest threat to upgrade security). The number of each type of anomaly is then standardized as a proportion relative to the total number of attempts. Finally, an exponential decay function is used to convert the anomaly rate into a historical reliability score. The penalty amplification factor k (usually 2.5, but other values ​​can be used; this embodiment does not impose restrictions) ensures that when the anomaly rate is 0, the reliability score is 1 (fully reliable). As the anomaly rate increases, the reliability score decreases non-linearly, effectively avoiding the underestimation of historically high-performing channels. This allows the system to prioritize communication channels with high historical stability for OTA upgrades, reducing the upgrade failure rate caused by channel instability and significantly improving the reliability and user experience of remote upgrades for intelligent connected vehicles.

[0070] Step S15: Determine a comprehensive score based on the network quality score, the security capability score, and the historical reliability score.

[0071] It should be understood that the comprehensive score is determined based on the network quality score, the security capability score, and the historical reliability score to ensure that the comprehensive score accurately reflects the importance of each dimension in the current scenario.

[0072] Furthermore, step S15 specifically includes the following steps: A comprehensive score is obtained by calculating the network quality score, the security capability score, and the historical reliability score using the following formula:

[0073] in, For comprehensive scoring, This is the network quality weighting coefficient. To score network quality, For safety capability weighting coefficients, To score safety capabilities, Historical reliability weighting coefficient, Score historical reliability.

[0074] Understandably, a comprehensive score is calculated using a formula by weighted fusion of three key dimensions: network quality score (Q), safety capability score (S), and historical reliability score (R). The weighting coefficients α, β, and γ are dynamically adjusted based on the vehicle's real-time operating conditions, satisfying α + β + γ = 1. Specifically, when the vehicle is traveling at high speed, the system automatically increases the network quality weight α to ensure real-time data transmission; when the vehicle is parked in an unsafe area, the safety capability weight β is increased; and in stable environments with abundant historical data, the historical reliability weight γ is appropriately increased. This dynamic weight adjustment mechanism is implemented using a Bayesian linear regression model. The model input includes characteristic parameters such as vehicle speed, geographical location, and network environment complexity, ensuring that the comprehensive score accurately reflects the importance of each dimension in the current scenario. Compared to traditional fixed-weight scoring methods, this comprehensive scoring mechanism can adapt to different driving scenarios and network environments, making channel selection decisions more scientific and reasonable, improving the success rate of OTA upgrades, and reducing safety risks caused by communication problems. It provides intelligent connected vehicles with an optimal communication channel selection scheme that balances performance, safety, and stability.

[0075] In this embodiment, the above-described scheme is used to collect information on the currently available communication channels of the vehicle to be upgraded in real time after receiving the OTA upgrade task, and to evaluate the network quality of each available communication channel based on the communication channel information to obtain a network quality score. The security capabilities of each available communication channel are evaluated based on the communication channel information to obtain a security capability score. The historical reliability of each available communication channel is also evaluated based on the communication channel information to obtain a historical reliability score. A comprehensive score is determined based on the network quality score, the security capability score, and the historical reliability score. This system can adaptively adjust the weights of each dimension according to different driving scenarios, improving the accuracy of OTA upgrade channel selection, increasing the overall upgrade success rate, and reducing data retransmissions caused by channel switching. This significantly saves network resource consumption and upgrade time, providing comprehensive protection for the safe and reliable OTA upgrades of intelligent connected vehicles in complex and ever-changing network environments.

[0076] Furthermore, Figure 4 This is a flowchart illustrating the third embodiment of the vehicle OTA upgrade channel switching method of the present invention, as shown below. Figure 4 As shown, based on the first embodiment, a third embodiment of the vehicle OTA upgrade channel switching method of the present invention is proposed. In this embodiment, step S30 specifically includes the following steps: Step S31: When the score value of the initial upgrade channel is detected to be lower than the second preset threshold for a preset number of consecutive times, the current transmission task is paused and the current transmission status information is saved to a non-volatile memory, wherein the first preset threshold is greater than the second preset threshold.

[0077] It should be noted that when the channel monitoring subsystem detects that the comprehensive score of the initial upgrade channel is lower than the second preset threshold for a preset number of consecutive times (usually 3 times with a 1-second interval, but other values ​​can also be set, and this embodiment does not limit this), it determines that the channel has been in an unreliable state for a period of time, rather than a momentary network fluctuation. At this time, the current data transmission task is immediately suspended to prevent data corruption or security risks caused by continued transmission on a low-quality channel. At the same time, key transmission status information (including the checksum of received data blocks, transmission progress pointer, session key, and encryption context) is saved to non-volatile memory (e.g., NAND Flash) to ensure that the transmission status can be accurately restored even after the vehicle is powered off and restarted, avoiding repeated transmission from the beginning. It is particularly noteworthy that the design of the first preset threshold (e.g., T1=0.7) being strictly greater than the second preset threshold (e.g., T2=0.5) effectively avoids frequent switching caused by channel score fluctuations around a single threshold, reduces the false switching rate caused by network fluctuations, and improves the overall success rate of OTA upgrades, significantly improving the remote upgrade experience of intelligent connected vehicles in complex and ever-changing network environments.

[0078] Step S32: Select the candidate channel with the highest comprehensive score from all available communication channels as the target upgrade channel, and switch the initial upgrade channel to the target upgrade channel.

[0079] Understandably, when the quality of the initial upgrade channel is detected to be continuously deteriorating and needs to be switched, the channel management module will comprehensively scan and evaluate all available communication connections in the current environment, rather than limiting itself to channels with scores higher than the first preset threshold. This is because in extreme network environments, there may not be any channels that fully meet the initial selection criteria. In this case, selecting the relatively optimal channel is more reasonable than interrupting the upgrade. The system sorts all channels based on a comprehensive score calculated in real time, ensuring that a relatively reliable communication path can be found even when the overall network conditions are poor. During the channel switching process, not only is the physical connection switched, but the communication parameter configuration is also updated synchronously, the transmission rate strategy is adjusted, and appropriate resource priorities are allocated to the new channel.

[0080] Step S33: After completing the channel switch, perform session key renegotiation, server authentication, and upgrade package integrity verification. Utilize the breakpoint resume mechanism to continue the OTA upgrade task through the target upgrade channel, requesting and downloading only the incomplete upgrade data portion. Verify data integrity by comparing the hash values ​​of the corresponding data blocks of the source server and the vehicle to be upgraded, and update the transmission progress status information simultaneously.

[0081] It should be understood that after the communication channel switch is completed, a strict security verification process can be executed. This involves renegotiating the session key with the cloud server to generate a new temporary session key to ensure the security of the new channel. Subsequently, the server's identity is rigorously authenticated to prevent man-in-the-middle attacks. Simultaneously, the upgrade package undergoes digital signature verification to confirm its credible origin and tamper-proof content. After successful security verification, a breakpoint resumption mechanism is activated. By comparing the locally stored transmission status information with the server-side records, only the incomplete upgrade data portion is requested and downloaded, avoiding repeated transmissions from the beginning and significantly saving network resource consumption. During data transmission, the hash value of each data block can be calculated and compared with the hash value provided by the source server to ensure the integrity and consistency of the transmitted data. Finally, the transmission progress status information is updated in real time, including the index of received data blocks, verification results, and session parameters, providing an accurate status reference for possible subsequent channel switches. This reduces the amount of data retransmission during OTA upgrades and channel switching, shortens upgrade time, and reduces security risks caused by channel switching, significantly improving the success rate and security of OTA upgrades for intelligent connected vehicles in complex network environments.

[0082] In its implementation, this technical solution includes the following key modules: 1) Multi-channel status acquisition module Real-time acquisition of information on currently available communication channels for the vehicle, including but not limited to: a) Channel type: Cellular, Wi-Fi, V2X; b) Communication parameters: RSSI, latency, packet loss rate, bandwidth; c) Security parameters: encryption mechanism, authentication method, certificate validity, etc.

[0083] 2) Security and Trustworthiness Scoring Module The goal of this module is to comprehensively score the security and reliability of each communication channel currently available to the vehicle, and generate a numerical metric, Score, to support the channel selection and switching strategy during OTA upgrades.

[0084] a) Structure of the scoring model The system calculates three sub-scoring metrics for each available channel: [1] Network Quality Rating Q (Quality) The current transmission capacity and stability of a channel are measured by the multi-channel acquisition module. • Delay (RTT) → L.

[0085] • Packet loss rate (Loss) → P.

[0086] • Average bandwidth (BW) → B.

[0087] Q=w1×normalize(1 / L)+w2×normalize(B)+w3×normalize(1 / P) Where normalize() represents the normalization function; w1+w2+w3=1.

[0088] [2] Security capability score S (Security) This reflects the level of protection the channel provides for data confidentiality and identity trustworthiness: • Encryption protocol strength (e.g., TLS 1.3 is superior to TLS 1.2).

[0089] • Use symmetric / asymmetric encryption methods.

[0090] • Key length (e.g., AES-256 > AES-128).

[0091] • Does it support two-way authentication?

[0092] • Certificate validity status (timestamp, whether it has been revoked, trusted CA chain).

[0093] A weighted scoring mechanism is used, with scores ranging from 0 to 1.

[0094] S = s1 × TLS level + s2 × key length level + s3 × certificate status + s4 × whether two-way authentication is required.

[0095] [3] Historical reliability score R (Reliability) During OTA upgrades, channel-related anomalies are broken down by type, statistically analyzed separately, and assigned weights: As shown in Table 1 below: Table 1. Example Table of OTA Upgrade Anomaly Types and Recommendation Weights:

[0096] Construct "Comprehensive Abnormal Influence Factor A" A=(w1×E_txfail+w2×E_handshake+w3×E_interrupt+w4×E_attack) / Total_attempts •Total_attempts represents the total number of OTA attempts used for this channel; • w1~w4 are the weights for the anomaly type, satisfying ∑w=1 or approximately 1 (the specific weights are adjustable). • The higher the value of A, the less reliable the channel is.

[0097] Construct an R-score model (historical reliability score).

[0098] R = exp(-k × A) • A is the outlier weighted value, which is usually around [0, 0.5]. • k controls the “steepness” of the R score decrease, and is essentially a penalty amplification factor; the larger the value, the heavier the penalty (even small anomalies will lower R); the smaller the value, the gentler the penalty (even high anomalies “look okay”); k=3~5 is the penalty range used in most systems.

[0099] b) Dynamic weighting mechanism To adapt to the differences in network performance and safety requirements under different vehicle operating conditions, an adaptive weight adjustment mechanism is introduced, using Bayesian linear regression.

[0100] Input features: • Vehicle operating speed (km / h).

[0101] • Whether it is in a static or charging state (binary).

[0102] • Current network disturbance intensity (e.g., RSSI volatility, switching frequency).

[0103] • Geographic location (optional, mapped to network congestion probability).

[0104] Output target: Estimate the weighting parameters α, β, γ applicable to the current operating conditions: • α: Network quality (Q) weight.

[0105] •β: Security capability (S) weight.

[0106] •γ: Historical reliability (R) weight.

[0107] As shown in Table 2 below: Table 2. Example of changes in operating condition weights:

[0108] Model execution frequency: • Sliding window period: the most recent 5-10 ratings in history; • Weight update frequency: Update every 30 seconds or whenever the network state changes drastically.

[0109] The final overall credibility score for each channel is calculated using the following formula: Score = α × Q + β × S + γ × R • The higher the Score value, the more suitable the current channel is for OTA upgrades; • Before or during the upgrade, the channel switching module will refer to this score in real time to make optimization or switching decisions.

[0110] In specific implementations, such as Figure 5 As shown, Figure 5 This is a schematic diagram of multi-channel status acquisition and scoring in the vehicle OTA upgrade channel switching method of the present invention. See [link / reference] Figure 5 First, the system acquires the technical parameters of the vehicle's currently available cellular network, Wi-Fi, and V2X communication channels in real time through a multi-channel status acquisition module. Then, the calculation engine generates scores for three core dimensions: network quality score Q (a weighted calculation based on latency, packet loss rate, and bandwidth), security capability score S (comprehensive authentication mechanism, encryption strength, and certificate status), and historical reliability score R (calculated based on historical successful transmission rate, failure rate, and security attack event rate). Specifically, the system's built-in Bayesian linear regression model continuously receives operational condition perception data (including vehicle speed, network environment disturbance intensity, and vehicle status information), dynamically updating the optimal weight parameters α, β, and γ every 30 seconds, enabling the comprehensive score formula Score = αQ + βS + γR to adapt to different driving scenarios. Finally, the channel selection and switching control decision module, based on the real-time calculated comprehensive score, performs initial channel selection, quality monitoring, and smooth switching operations when necessary, ensuring an optimal balance between security and reliability during the OTA upgrade process. This architecture effectively solves the channel selection bias problem caused by fixed-weight evaluation in traditional OTA upgrades, improving the upgrade success rate.

[0111] 3) OTA upgrade scheduling and switching module Based on the channel scores provided by the scoring module, this module executes channel selection, switching, and data transmission strategies.

[0112] a) Upgrade channel scheduling logic • Before starting the OTA task, select the highest-scoring channel from the currently available channels with a score > T1 (T1 is the safety lower limit); • If all channel scores fail to meet the requirements, the process can be delayed or the user can be prompted for manual confirmation.

[0113] b) Dynamic switching mechanism • During the upgrade process, the current channel status will be continuously monitored; • If the current channel score is below T2 (switching threshold) for three consecutive times or an interruption is detected, then: pause the current transmission task; o Switch to the alternative channel; o Trigger re-authentication and breakpoint resume mechanism; The download task will be restarted automatically.

[0114] c) Resumable download mechanism • Supports recording transmission progress based on OTA packet fragment or block structure; • After switching, only the incomplete part is downloaded, avoiding repeated transmission and improving efficiency.

[0115] 4) Re-authentication module after channel switching To prevent man-in-the-middle attacks or session leaks after switching channels, the system performs a complete session security initialization process after switching channels: a) Session key renegotiation • Perform the complete handshake process within a TLS or DTLS channel; • Establish a new session key, and invalidate the original channel session key; • Upgrading the server requires support for multi-channel session switching strategies.

[0116] b) Server-side authentication • Use the CA authentication chain to verify the validity of the server-side certificate; • Supports domain name consistency checks and OCSP real-time revocation checks.

[0117] c) Upgrade package integrity verification • The hash value of previously downloaded blocks is re-verified after each channel switch; • Automatic re-download is triggered upon verification failure to prevent man-in-the-middle attacks or tampering.

[0118] 5) Anomaly detection and rollback module To cope with extreme network environments or security incidents, the system provides the following anomaly management capabilities: a) Minimum Credibility Score Protection Mechanism • If the scores for multiple consecutive rounds are all below the set threshold T_min, the upgrade task will be automatically terminated; • Generate a complete error report and submit it through the OEM's backend platform.

[0119] b) Upgrade failure rollback mechanism • Record a snapshot of the firmware before the current upgrade (can be combined with A / B redundancy partitioning mechanism); • If the upgrade fails, you can switch back to the old version; • Alternatively, users may be prompted to visit an authorized service center for a manual upgrade.

[0120] As shown in Table 3 below: Table 3. Example table of the relationship between TI, T2, and T_min of each module:

[0121] To prevent frequent switching and ensure upgrade continuity, the standard setting is T1>T2>T_min. At the beginning, a "good enough" channel is selected (T1 is the threshold). During the upgrade process, even if the score drops slightly, fluctuations are tolerated as long as it does not fall below T2. Once the score fails to meet the standard for three consecutive times (below T2), it indicates that the channel is "continuously deteriorating," and a switch is triggered. The upgrade stops when all channels are below T_min.

[0122] It should be noted that the beneficial effects of this embodiment compared with the prior art are reflected in the following aspects: 1. Application Scenarios: In high-density urban areas: Wi-Fi signal is unstable; the channel can be automatically switched to cellular upon switching. In tunnel / mountainous / weak network environments: automatically switch to the best available network; Multi-ECU parallel upgrade scenario: Improve overall bandwidth utilization and anti-interference capability; For vehicles that support V2X communication, V2X upgrades can be used in specific scenarios (such as roadside units, RSUs) to reduce operator costs.

[0123] 2. Technological advantages: Security: Mitigating the risks of weak networks and attacks, and improving the integrity of the upgrade process; Stability: Channel interruption will not cause the overall upgrade to fail, ensuring continuity; High efficiency: Dynamically allocates the best channel to save bandwidth resources; Scalable: An OTA framework adapted to Service-Oriented Architecture (SOA) and centralized computing platforms.

[0124] It can achieve the following objectives: Dynamically sense the available communication channels (cellular, Wi-Fi, V2X, etc.) of the vehicle. Real-time assessment of the security and reliability of each channel; Supports automatic channel switching and re-authentication during OTA data transmission; Avoid performing upgrades on weak networks or high-risk channels to improve upgrade success rate and system security.

[0125] This embodiment employs the above-described scheme. When the score of the initial upgrade channel is detected to be lower than a second preset threshold for a consecutive preset number of times, the current transmission task is paused, and the current transmission status information is saved to non-volatile memory, wherein the first preset threshold is greater than the second preset threshold. The candidate channel with the highest comprehensive score is selected from all available communication channels as the target upgrade channel, and the initial upgrade channel is switched to the target upgrade channel. After the channel switch is completed, session key renegotiation, server authentication, and upgrade package integrity verification are performed. The OTA upgrade task is continued through the target upgrade channel using a breakpoint resume mechanism, requesting and downloading only the incomplete upgrade data portion. The upgrade data is then compared with the source server data of the vehicle to be upgraded. The system verifies data integrity using the hash value of data blocks and updates transmission progress status information. It enables dynamic intelligent selection and seamless switching of communication channels during OTA upgrades for intelligent connected vehicles, significantly improving the success rate and security of OTA upgrades. This avoids channel selection bias caused by relying on a single network indicator, as is common in traditional solutions. It effectively prevents frequent switching issues caused by channel score fluctuations around thresholds, while ensuring timely switching to the optimal alternative channel when channel quality deteriorates. This not only guarantees security during channel switching but also avoids redundant data transmission, saves network traffic, and greatly improves user experience and system reliability. It is particularly suitable for complex and ever-changing in-vehicle network environments, improving the speed and efficiency of vehicle OTA upgrade channel switching.

[0126] Accordingly, the present invention further provides a vehicle OTA upgrade channel switching device.

[0127] Reference Figure 6 , Figure 6 This is a functional block diagram of the first embodiment of the vehicle OTA upgrade channel switching device of the present invention.

[0128] In a first embodiment of the vehicle OTA upgrade channel switching device of the present invention, the vehicle OTA upgrade channel switching device includes: The comprehensive evaluation module 10 is used to collect information on the currently available communication channels of the vehicle to be upgraded in real time after receiving the OTA upgrade task, and to conduct a comprehensive evaluation of the security and reliability of each available communication channel to obtain a comprehensive score.

[0129] The initial upgrade monitoring module 20 is used to select the channel corresponding to the highest score with a score value greater than a first preset threshold from the comprehensive score before the OTA upgrade of the vehicle to be upgraded, and to continuously monitor the change of the score value of the initial upgrade channel during the upgrade process.

[0130] The channel switching module 30 is used to pause the current transmission task when the score value of the initial upgrade channel is continuously lower than the second preset threshold, switch the initial upgrade channel to the alternative channel with the highest comprehensive score, execute the re-authentication process, and continue to complete the OTA upgrade task using the breakpoint resume mechanism, wherein the first preset threshold is greater than the second preset threshold.

[0131] The steps for implementing each functional module of the vehicle OTA upgrade channel switching device can be referred to in the various embodiments of the vehicle OTA upgrade channel switching method of the present invention, and will not be repeated here.

[0132] Furthermore, this embodiment of the invention also proposes a storage medium storing a vehicle OTA upgrade channel switching program. When the vehicle OTA upgrade channel switching program is executed by a processor, it implements the operations described in the vehicle OTA upgrade channel switching method embodiment above.

[0133] Those skilled in the art will understand that all or part of the steps in the methods described above can be implemented by a program instructing related hardware. The program is stored in a storage medium and includes several instructions to cause a device (which may be a microcontroller, chip, etc.) or processor to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium is a computer-readable storage medium, including: USB flash drive, mobile hard drive, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk, and other media that can store program code.

[0134] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0135] The sequence numbers of the above embodiments of the present invention are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0136] The above are merely preferred embodiments of the present invention and do not limit the scope of the patent. Any equivalent structural or procedural transformations made based on the description and drawings of the present invention, or direct or indirect applications in other related technical fields, are similarly included within the scope of patent protection of the present invention.

Claims

1. A method for switching vehicle OTA upgrade channels, characterized in that, The method for switching vehicle OTA upgrade channels includes: Upon receiving an OTA upgrade task, the system collects real-time information on the currently available communication channels of the vehicle to be upgraded, conducts a comprehensive evaluation of the security and reliability of each available communication channel, and obtains a comprehensive score. Before the vehicle to be upgraded undergoes an OTA upgrade, the channel corresponding to the highest score with a score value greater than a first preset threshold is selected from the comprehensive score as the initial upgrade channel, and the score value change of the initial upgrade channel is continuously monitored during the upgrade process. When the score of the initial upgrade channel is detected to be continuously lower than the second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the alternative channel with the highest comprehensive score, the re-authentication process is executed, and the breakpoint resume mechanism is used to continue to complete the OTA upgrade task, wherein the first preset threshold is greater than the second preset threshold.

2. The vehicle OTA upgrade channel switching method as described in claim 1, characterized in that, Upon receiving an OTA upgrade task, the system collects real-time information on currently available communication channels for the vehicle to be upgraded, performs a comprehensive evaluation of the security and reliability of each available communication channel, and obtains a comprehensive score, including: Upon receiving an OTA upgrade task, information on the currently available communication channels of the vehicle to be upgraded is collected in real time. The network quality of each available communication channel is evaluated based on the communication channel information to obtain a network quality score; The security capabilities of each available communication channel are evaluated based on the communication channel information to obtain a security capability score; The historical reliability of each available communication channel is evaluated based on the communication channel information to obtain a historical reliability score; A comprehensive score is determined based on the network quality score, the security capability score, and the historical reliability score.

3. The vehicle OTA upgrade channel switching method as described in claim 2, characterized in that, The step of evaluating the network quality of each available communication channel based on the communication channel information to obtain a network quality score includes: Obtain the network latency, average bandwidth, and packet loss rate corresponding to each available communication channel from the communication channel information; The network quality of each available communication channel is evaluated based on the normalized network latency, average bandwidth, and packet loss rate, and the network quality score is calculated using the following formula: in, To score network quality, For delay weighting coefficients, Due to network latency, This is the bandwidth weighting coefficient. For average bandwidth, This is the packet loss rate weighting coefficient. For packet loss rate, This indicates normalization processing.

4. The vehicle OTA upgrade channel switching method as described in claim 2, characterized in that, The evaluation of the security capabilities of each available communication channel based on the communication channel information to obtain a security capability score includes: Obtain the TLS protocol security level, key length security level, certificate status, and two-way authentication capability corresponding to each available communication channel from the communication channel information; The security capability score is calculated based on the TLS protocol security level, the key length security level, the certificate status, and the two-way authentication capability using the following formula: in, To score safety capabilities, This is the TLS protocol level weighting coefficient. For the TLS protocol security level, This is the key length level weighting coefficient. For key length security level, For certificate status weighting coefficients, Certificate status. This is the weighting coefficient for two-way authentication capability. This is for two-way authentication capability.

5. The vehicle OTA upgrade channel switching method as described in claim 2, characterized in that, The step of evaluating the historical reliability of each available communication channel based on the communication channel information to obtain a historical reliability score includes: The number of transmission failures, handshake failures, network interruptions, security attack events, and total attempts for each available communication channel are obtained from the communication channel information. The anomaly rate is calculated using the following formula based on the number of transmission failures, the number of handshake failures, the number of network interruptions, the number of security attack events, and the total number of attempts: in, For the anomaly rate, For transmission failure weighting coefficients, The number of transmission failures. This is the weighting coefficient for handshake failure. This represents the number of failed handshakes. This is the network interruption weighting coefficient. For the number of network outages, This is a weighting coefficient for security attack events. To count security attack incidents, This represents the total number of attempts. The historical reliability score is calculated based on the anomaly rate using the following formula: in, Score historical reliability. is the base of the natural logarithm. To punish the amplification factor, This represents the anomaly rate.

6. The vehicle OTA upgrade channel switching method as described in claim 2, characterized in that, The determination of the comprehensive score based on the network quality score, the security capability score, and the historical reliability score includes: A comprehensive score is obtained by calculating the network quality score, the security capability score, and the historical reliability score using the following formula: in, For comprehensive scoring, This is the network quality weighting coefficient. To score network quality, For safety capability weighting coefficients, To score safety capabilities, Historical reliability weighting coefficient, Score historical reliability.

7. The vehicle OTA upgrade channel switching method as described in claim 1, characterized in that, When the score of the initial upgrade channel is detected to be continuously lower than the second preset threshold, the current transmission task is paused, the initial upgrade channel is switched to the alternative channel with the highest comprehensive score, a re-authentication process is executed, and the OTA upgrade task is continued using a breakpoint resume mechanism. The first preset threshold is greater than the second preset threshold, including: When the score value of the initial upgrade channel is detected to be lower than the second preset threshold for a preset number of consecutive preset times, the current transmission task is paused and the current transmission status information is saved to a non-volatile memory, wherein the first preset threshold is greater than the second preset threshold. Select the candidate channel with the highest overall score from all available communication channels as the target upgrade channel, and switch the initial upgrade channel to the target upgrade channel; After the channel switch is completed, the session key is renegotiated, the server identity is authenticated, and the integrity of the upgrade package is verified. The OTA upgrade task is continued through the target upgrade channel using the breakpoint resume mechanism. Only the incomplete upgrade data part is requested and downloaded. The data integrity is verified by comparing the hash value of the corresponding data block of the source server and the vehicle to be upgraded. At the same time, the transmission progress status information is updated.

8. A vehicle OTA upgrade channel switching device, characterized in that, The vehicle OTA upgrade channel switching device includes: The comprehensive evaluation module is used to collect information on the currently available communication channels of the vehicle to be upgraded in real time after receiving the OTA upgrade task, and to conduct a comprehensive evaluation of the security and reliability of each available communication channel to obtain a comprehensive score. The initial upgrade monitoring module is used to select the channel corresponding to the highest score with a score value greater than a first preset threshold from the comprehensive score before the OTA upgrade of the vehicle to be upgraded, and to continuously monitor the score value change of the initial upgrade channel during the upgrade process. The channel switching module is used to pause the current transmission task when the score value of the initial upgrade channel is continuously lower than the second preset threshold, switch the initial upgrade channel to the alternative channel with the highest comprehensive score, execute the re-authentication process, and continue to complete the OTA upgrade task using the breakpoint resume mechanism, wherein the first preset threshold is greater than the second preset threshold.

9. A vehicle OTA upgrade channel switching device, characterized in that, The vehicle OTA upgrade channel switching device includes: a memory, a processor, and a vehicle OTA upgrade channel switching program stored in the memory and executable on the processor, wherein the vehicle OTA upgrade channel switching program is configured to implement the steps of the vehicle OTA upgrade channel switching method as described in any one of claims 1 to 7.

10. A storage medium, characterized in that, The storage medium stores a vehicle OTA upgrade channel switching program, which, when executed by a processor, implements the steps of the vehicle OTA upgrade channel switching method as described in any one of claims 1 to 7.

Images