OTA differential upgrade system for commercial vehicle

Abstract

This invention relates to the field of intelligent connected vehicle technology, specifically to an OTA differential upgrade system for commercial vehicles. The differential upgrade algorithm is deployed as a component on the OTA platform, and the restoration algorithm is deployed as a restoration component on the OTA object nodes. The OTA platform can store and retrieve detailed information about the OTA object (software version, part number, supplier code, etc.), and obtain the software package required for the OTA differential upgrade from the software management platform. A differential package is created on the OTA platform using the deployed differential components. The upgrade task is then sent to the OTA host by creating a new upgrade task on the OTA platform. The OTA host downloads the upgrade file from the obtained URL link by parsing the upgrade task. The OTA host writes the differential package to the OTA object according to the upgrade script. Finally, the restoration component deployed on the OTA object nodes restores the differential package and the OTA object's source version software package to the target upgrade package, reducing the overall upgrade time.

Description

Technical Field

[0001] This invention relates to the field of intelligent connected vehicle technology, and more specifically to an OTA differential upgrade system for commercial vehicles. Background Technology

[0002] OTA (Over-The-Air) update technology is a software update method that has matured with the development of the Internet and the Internet of Things. It is a method of updating software directly on the device through a network connection. OTA updates can improve the security of the update process and ensure the integrity and reliability of the software through technologies such as digital signatures and encrypted transmission. As users' requirements for software experience continue to increase, they expect to obtain the latest functions and timely fixes. OTA updates can meet users' needs for immediate updates and improve user experience. Heavy commercial vehicles are usually equipped with a large number of hardware and software systems, and currently, they still generally use the CAN network architecture. The transmission rate of the CAN bus is 500kb / s. The complexity and diversity of these systems make OTA updates more complicated. However, OTA differential upgrades only transmit the differences required for the upgrade during the upgrade process, reducing user waiting time and improving upgrade efficiency. This is of great significance for improving the upgrade experience for commercial vehicle users. Summary of the Invention

[0003] In view of the problems existing in the prior art, the purpose of this invention is to provide an OTA differential upgrade system for commercial vehicles.

[0004] The technical solution adopted by this invention to solve its technical problem is: an OTA differential upgrade system for commercial vehicles, comprising a software management platform, an OTA platform, an OTA host, and an OTA object. The software management platform and the OTA platform are interconnected, the OTA platform and the OTA host are interconnected, and the OTA host and the OTA object are interconnected. During the upgrade:

[0005] During the task creation phase, the OTA platform applies for a PKI certificate from the PKI system. After obtaining the ECU details from the OTA platform, it fills in the information required for the upgrade task and obtains the software package from the software management platform. If the software management platform does not have a corresponding differential software package, it obtains the source software package and the target software package and generates a differential software package. If the software management platform has a corresponding differential software package, it directly obtains, saves, and submits the new task.

[0006] During the task distribution phase, the OTA platform distributes the upgrade task, encrypts and compresses the differential software package and upgrade script, and sends the URL link to the OTA host.

[0007] During the task execution phase, the OTA host receives, downloads, and decompresses the upgrade script and differential software package. After decryption and signature verification, it executes the flashing according to the script, flashing the differential software package to the target ECU.

[0008] During the result upload phase, the ECU sends the upgrade result back to the OTA host. The OTA host encrypts and signs the result and reports it to the OTA platform. The OTA platform decrypts the result, verifies the signature, and displays it in the log.

[0009] Preferably, the software management platform is used to store ECU software packages, which include differential software packages, source software packages, and target software packages, and the software packages are uniquely identified by attributes.

[0010] Preferably, the OTA host is used to send information back to the OTA platform after receiving the OTA platform's request for detailed ECU information, execute the upgrade task after receiving the upgrade instruction, and send back the upgrade task result.

[0011] Preferably, the OTA platform includes a module for obtaining detailed ECU information, a module for requesting a PKI certificate, a module for creating a new upgrade task, a module for managing upgrade tasks, and a module for displaying logs. The module for obtaining detailed ECU information obtains the detailed information of the target ECU by sending a command to the OTA host to report the detailed ECU information. The module for requesting a PKI certificate sends a certificate request to the PKI system to apply for a certificate. The module for creating a new task creates a corresponding upgrade task for the ECU to be upgraded. The module for managing upgrade tasks sends the upgrade task to the OTA host. The module for displaying logs shows the upgrade progress and upgrade results.

[0012] Preferably, when the software management platform receives a request from the OTA platform to obtain a software package, it returns the software package download URL address to the OTA platform.

[0013] Preferably, the OTA host verifies and parses the certificate and executes the upgrade task. The OTA host and the OTA platform exchange certificates and verify each other. After successful verification, the OTA host parses and executes the upgrade task. When the OTA host receives the upgrade command, it downloads the differential software package from the OTA platform. After downloading, the OTA host determines the size of the differential software package. If the differential software package exceeds the OTA data packet transmission limit, it determines whether the OTA object is a network device. If it is a network device, the OTA host sends the upgrade command and upgrade link address to the OTA object, and the OTA object upgrades itself. If it is not a network device, the bootloader flashing of the ECU begins, and the upgrade result is fed back. If the verification fails, the session is disconnected and the interaction stops.

[0014] Preferably, the OTA object receives the flashing command and performs a restore operation. The OTA host sends a routine control diagnostic service request to the OTA object. The restore component inside the OTA object starts working and generates a target software package based on the source software package and the differential software package. During the execution of the restore component, the OTA host needs to continuously send online diagnostic device service requests to the OTA object and continuously report the restore progress to the OTA platform. If the restore is successful, the OTA object replies with a positive response to the OTA host. If the restore fails, it replies with a negative response. The OTA host responds to determine whether to continue the differential upgrade process. After the restore is completed, the upgrade process continues, and the upgrade result is fed back.

[0015] Preferably, the restoration action is performed when the OTA object receives a restoration control command sent by the OTA host, and then starts the restoration component to restore the source software package and the differential software package to the target software package, and verifies the source software package and the differential software package.

[0016] The present invention has the following beneficial effects:

[0017] 1) This invention integrates the differential algorithm into the OTA platform as a differential component. During the upgrade, a differential software package can be created through the differential component. A software package is uniquely identified by the package attributes. Differential software packages can be reused in the same upgrade situation, which improves the convenience of differential upgrade.

[0018] 2) This invention utilizes PKI technology and digital certificate authentication to ensure the security of data transmission between the OTA platform and the OTA host;

[0019] 3) This invention utilizes a managed service to manage the network device to download and upgrade software packages on its own. If the differential software package obtained by the OTA host is large, it determines whether the ECU to be upgraded is a network device. If so, the managed service can be enabled, and the ECU can download and upgrade software packages on its own.

[0020] 4) This invention sends a UDS diagnostic service request to the OTA object through the OTA host. The restoration component inside the OTA object starts working and generates a target software package based on the source software package and the differential software package. During the execution of the restoration component, the OTA host continuously sends online diagnostic service requests to the OTA object to ensure that the OTA object is in diagnostic upgrade mode. The OTA host can determine whether to continue the differential upgrade process based on the response (positive or negative). By utilizing the UDS standard service and diagnostic functions, it can be compatible with different ECUs. According to the efficient communication protocol and format defined by UDS, the restoration command can be faster and more reliable.

[0021] 5) This invention uses checksums to ensure that the software package is not damaged or tampered with during the restoration process, thus guaranteeing the stability and reliability of OTA differential upgrades. Attached Figure Description

[0022] Figure 1 This is a structural block diagram of the OTA differential upgrade system for commercial vehicles.

[0023] Figure 2 This is a data interaction diagram between the software management platform and the OTA platform.

[0024] Figure 3 This is a flowchart of creating a new task on the OTA platform.

[0025] Figure 4 This is a schematic diagram of data transmission between the OTA platform and the OTA host.

[0026] Figure 5 This is a flowchart of the OTA object obtaining the upgrade differential package hosting service.

[0027] Figure 6 This is a flowchart of the OTA host performing a differential upgrade task.

[0028] Figure 7 This is a schematic diagram of data transmission between the OTA host and the OTA object.

[0029] Figure 8 This is a flowchart that uses a checksum method to verify that the restored target version package is consistent with the target version package obtained during differential processing. Detailed Implementation

[0030] The technical solutions of the embodiments of the present invention will be described in further detail below with reference to the accompanying drawings. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative effort are within the scope of protection of the present invention.

[0031] An OTA differential upgrade system for commercial vehicles, such as Figure 1 As shown, it includes a software management platform, an OTA platform, an OTA host, and OTA objects.

[0032] The software management platform is used to store software packages. When the OTA platform obtains software packages from the software management platform, it sends the software package URL download address to the OTA platform. The software packages include differential software packages, source software packages, and target software packages. A software package is uniquely identified by attributes, including ECU type, ECU part number, supplier code, source software version, and target software version. Whether the software package is a differential software package is determined by whether the software package has a target software version.

[0033] The OTA platform is used to create upgrade tasks. After obtaining the PKI certificate, the OTA platform obtains the detailed information of the OTA object from the OTA host. After the OTA host is powered on by the T15 on the vehicle key, it receives the detailed information reported by the OTA object. The OTA platform obtains the package URL download address from the software management platform and downloads the package. If the software management platform does not have the differential package required for the upgrade, it uses the differential component deployed by the OTA platform to perform differential analysis on the downloaded source package and target package to generate a differential package, create an upgrade task, and issue it.

[0034] The OTA host is used to receive and parse the OTA upgrade tasks issued by the OTA platform, and control the entire upgrade process to complete the flashing of the differential software package through the received differential upgrade script;

[0035] The OTA object is used to receive upgrade requests from the OTA host and provide diagnostic responses.

[0036] The methods of storing software packages include establishing a software management platform to store software packages, and this invention does not limit this.

[0037] The OTA platform obtains the upgrade file from the software management platform by downloading the upgrade file through the received URL download address, and this invention does not impose any restrictions on this method.

[0038] The OTA object obtains the upgrade file from the OTA platform by downloading the upgrade file through the received URL download address, and this invention does not impose any restrictions on this.

[0039] like Figure 2 As shown, the software management platform provides the upgrade packages required for differential upgrades of the storage, and the OTA platform obtains the download address from the software management platform and downloads the packages.

[0040] like Figure 3 As shown, the process for creating a new task on the OTA platform includes:

[0041] (a1) Obtain a PKI certificate. The OTA platform generates a certificate request and sends the certificate request to the PKI system. The PKI system issues a digital certificate to the OTA platform.

[0042] (a2) Obtain detailed ECU information to determine the ECU source software version. The detailed information should include at least the ECU type, ECU part number, supplier code, hardware version, source software version, and software minor version.

[0043] (a3) Fill in the relevant information for the upgrade task (task name, task description, controller model, version number, upgrade type, upgrade script template);

[0044] (a4) If the software management platform does not have the differential software package required for the upgrade, the differential software package will be generated using the differential component. The software package obtained from the software management platform will be decompressed, and the differential software package will be obtained by selecting the source software package and the target software package for differential analysis. If there is one, it will be obtained directly. The obtained differential software package will be compressed, and the differential software package will be uniquely identified by its attributes. The differential software package attributes include ECU part number, ECU type, supplier code, source software version, source software minor version, target software version, and target software minor version.

[0045] (a5) Certificate verification: The OTA platform sends the platform certificate to the OTA host. The OTA host verifies the legality of the OTA platform certificate using the pre-set root certificate. If the verification passes, the OTA host certificate is sent to the OTA platform. If the verification fails, the session connection is closed. The OTA platform verifies the legality of the OTA host certificate using the pre-set root certificate. If the verification passes, the next data transmission is performed. If the verification fails, the session connection is closed.

[0046] (a6) The new task was successfully created and a differential upgrade script was generated. When the task was created, the differential upgrade script was automatically generated according to the differential upgrade script template selected for the task. The OTA host upgrade task should be executed according to the differential upgrade script.

[0047] The certificate obtained by the OTA platform of this invention is generated from the PKI system, and this invention does not limit this.

[0048] The present invention obtains ECU source version information by obtaining detailed ECU information, and the present invention does not limit this.

[0049] The detailed information of the ECU in this invention should include the ECU type, ECU part number, etc., but this invention does not impose any limitations on this.

[0050] The task-related information of this invention should include task name, task description, controller model, version number, upgrade type, and upgrade script template. This invention does not impose any restrictions on these.

[0051] This invention uniquely identifies differential software packages through attributes, including ECU part number, ECU type, supplier code, source software version, source software minor version, target software version, and target software minor version. This invention does not impose any limitations on these attributes.

[0052] like Figure 4 As shown, when the OTA host is powered on and connected to the OTA platform, and the vehicle-side voltage is sufficient, data transmission includes:

[0053] The OTA host reports ECU information to the OTA platform;

[0054] The OTA host and OTA platform exchange and verify certificates;

[0055] The OTA platform sends upgrade tasks to the OTA host and transmits upgrade files, including upgrade packages and upgrade scripts;

[0056] The OTA host reports the upgrade results to the OTA platform;

[0057] The OTA platform displays the upgrade results in the logs, including the upgrade process, upgrade results, and reasons for failure.

[0058] like Figure 5 As shown, when the OTA host receives an upgrade command, it downloads the differential software package from the OTA platform. After downloading, the OTA host determines the size of the upgrade package. If it exceeds the limit, it determines whether the OTA object is a network device. If the OTA object is a network device, the OTA host sends the upgrade command and the upgrade package link address to the OTA object, and the OTA object upgrades itself, completing the download and installation. If the OTA object is not a network device, the OTA host transmits the upgrade software package to the OTA object.

[0059] like Figure 6 As shown, the OTA host performs a differential upgrade task, which includes the following steps:

[0060] (b1) The OTA host verifies the certificate of the OTA platform. The OTA host verifies the validity of the OTA platform certificate through the preset root certificate. If the verification is successful, the OTA host certificate is sent to the OTA platform. If the verification fails, the session connection is disconnected. The OTA platform verifies the validity of the OTA host certificate through the preset root certificate. If the verification is successful, the next data transmission is performed. If the verification fails, the session connection is disconnected.

[0061] (b2) The OTA host downloads the upgrade package and upgrade script file, and then decompresses them;

[0062] (b3) The OTA host flashes the differential software package using the Bootloader according to the upgrade script.

[0063] like Figure 7 As shown, with both the OTA host and the OTA object powered on, data transmission includes:

[0064] The OTA host and the OTA object are connected via CAN communication.

[0065] The OTA object reports detailed ECU information to the OTA host when the vehicle key is powered on at T15.

[0066] The OTA host flashes the OTA host bootloader according to the upgrade command. The OTA host sends a routine control diagnostic service request to the OTA object. The restore component inside the OTA object starts working and generates the target package based on the source version package and the differential package. During the execution of the restore component, the OTA host needs to continuously send online diagnostic device service requests to the OTA object to ensure that the OTA object is in diagnostic upgrade mode and continuously report the restore progress to the OTA platform. If the restore is successful, the OTA object replies with a positive response to the OTA host. If the restore fails, it replies with a negative response. The OTA host can determine whether to continue the differential upgrade process based on the response (positive or negative).

[0067] like Figure 8 As shown, a checksum method is used to verify the consistency between the restored target version package and the target version package during differential upgrade. To ensure the stability and reliability of OTA differential upgrades, a checksum is used to ensure that the package is not corrupted or tampered with during the restoration process. The checksum is a fixed-length checksum value generated by processing the file using a special algorithm, including but not limited to MD5 and SHA-256. The steps are as follows:

[0068] (c1) The OTA platform calculates the checksum of the target version;

[0069] (c2) The OTA platform sends the differential software package and the target version checksum to the OTA host, and the OTA host transmits the differential software package and the target version checksum to the OTA object;

[0070] (c3) The OTA object executes the restoration algorithm, generates the restored software package, and calculates the checksum of the software package;

[0071] (c4) Compare the calculated checksum with the checksum issued by the OTA platform. If they match, continue the upgrade; otherwise, the upgrade ends.

[0072] After the upgrade is completed, the OTA object sends the upgrade result back to the OTA host.

[0073] The control conditions described in this invention include: power-on, powering on T15, etc., and this invention does not limit these conditions.

[0074] The checksum algorithms used in this invention include, but are not limited to, MD5, SHA-256, etc., and this invention does not limit them.

[0075] This invention obtains software packages from a software management platform through an OTA platform. The software packages are assigned attributes and are divided into differential software packages and source software packages. The software packages are distinguished by attributes, and the differential software packages are restored to the target software packages through a restoration algorithm. The differential algorithm is deployed in the cloud as a differential component, and the restoration algorithm is deployed inside the OTA object as a restoration component.

[0076] Since heavy commercial vehicles generally still use the CAN network architecture, with a CAN bus transmission rate of 500kb / s, when the differential packet exceeds the OTA data packet transmission limit, the managed service is started to determine whether the OTA object is a network device. If it is a network device, the OTA host sends the upgrade command and upgrade link address to the OTA object, which then upgrades itself and completes the download and installation.

[0077] The differential package is transmitted to the OTA object via OTA technology, and the restore component is started by script control within the OTA object. The OTA host needs to continuously send online diagnostic service requests to the OTA object. The OTA host can determine whether to continue the differential upgrade process based on the response (positive or negative). Utilizing UDS standard services and diagnostic functions, it can be compatible with different ECUs. According to the efficient communication protocol and format defined by UDS, the restore command can be faster and more reliable. Checksums are used to ensure that the software package is not damaged or tampered with during the restore process, ensuring the integrity and stability of the differential upgrade and shortening the upgrade time of the OTA object.

[0078] Definitions of abbreviations and key terms:

[0079] Over-the-Air (OTA) technology: A technology that enables remote management of mobile terminal devices and SIM card data through the air interface of mobile communication.

[0080] Controller Area Network (CAN): A serial communication network that effectively supports distributed and real-time control.

[0081] Electronic Control Unit (ECU): A microprocessor-based control system specifically designed to control various systems in a vehicle.

[0082] Differential Component: A functional component that integrates differential algorithms to obtain differential software packages by differentially processing the input source software package and the target software package.

[0083] Restore Component: A functional component that integrates a restore algorithm to restore the target package using the differential package and the source package.

[0084] Bootloader: A piece of code that runs when the ECU is powered on and initialized. It receives commands from the host computer via the CAN bus and writes data into the designated Flash segment of the ECU.

[0085] This invention is not limited to the above-described embodiments. Anyone should know that any structural changes made under the guidance of this invention, and any technical solutions that are the same as or similar to this invention, fall within the protection scope of this invention.

[0086] The technologies, shapes, and structures not described in detail in this invention are all known technologies.

Claims

1. An OTA differential upgrade system for commercial vehicles, characterized in that, This includes a software management platform, an OTA platform, an OTA host, and OTA objects. The software management platform and the OTA platform are interconnected, the OTA platform and the OTA host are interconnected, and the OTA host and the OTA objects are interconnected. During upgrades: During the task creation phase, the OTA platform applies for a PKI certificate from the PKI system. After obtaining the ECU details from the OTA platform, it fills in the information required for the upgrade task and obtains the software package from the software management platform. If the software management platform does not have a corresponding differential software package, it obtains the source software package and the target software package and generates a differential software package. If the software management platform has a corresponding differential software package, then directly obtain and save it, and submit the new task. During the task distribution phase, the OTA platform distributes the upgrade task, encrypts and compresses the differential software package and upgrade script, and sends the URL link to the OTA host. During the task execution phase, the OTA host receives, downloads, and decompresses the upgrade script and differential software package. After decryption and signature verification, it executes the flashing according to the script, flashing the differential software package to the target ECU. During the result upload phase, the ECU sends the upgrade result back to the OTA host. The OTA host encrypts and signs the result and reports it to the OTA platform. The OTA platform decrypts the result, verifies the signature, and displays it in the log.

2. The OTA differential upgrade system for commercial vehicles according to claim 1, characterized in that, The software management platform is used to store ECU software packages, which include differential software packages, source software packages, and target software packages, and the software packages are uniquely identified by attributes.

3. The OTA differential upgrade system for commercial vehicles according to claim 1, characterized in that, The OTA host is used to receive the ECU detailed information request instruction from the OTA platform and then send information back to the OTA platform. After receiving the upgrade instruction, it executes the upgrade task and sends back the upgrade task result.

4. The OTA differential upgrade system for commercial vehicles according to claim 1, characterized in that, The OTA platform includes a module for obtaining detailed ECU information, a module for requesting a PKI certificate, a module for creating a new upgrade task, a module for managing upgrade tasks, and a module for displaying logs. The module for obtaining detailed ECU information obtains the detailed information of the target ECU by sending a command to the OTA host to report the detailed ECU information. The module for requesting a PKI certificate sends a certificate request to the PKI system to apply for a certificate. The module for creating a new task creates a corresponding upgrade task for the ECU to be upgraded. The module for managing upgrade tasks sends the upgrade tasks to the OTA host. The module for displaying logs shows the upgrade progress and upgrade results.

5. The OTA differential upgrade system for commercial vehicles according to claim 2, characterized in that, When the software management platform receives a request from the OTA platform to obtain a software package, it returns the software package download URL address to the OTA platform.

6. The OTA differential upgrade system for commercial vehicles according to claim 4, characterized in that, The OTA host verifies and parses the certificate and executes the upgrade task. The OTA host and OTA platform exchange certificates and verify each other. After successful verification, the OTA host parses and executes the upgrade task. When the OTA host receives the upgrade command, it downloads the differential software package from the OTA platform. After downloading, the OTA host determines the size of the differential software package. If the differential software package exceeds the OTA data packet transmission limit, it determines whether the OTA object is a network device. If it is a network device, the OTA host sends the upgrade command and upgrade link address to the OTA object, and the OTA object upgrades itself. If it is not a network device, the bootloader flashes the ECU and reports the upgrade result. If the verification fails, the session is disconnected and the interaction stops.

7. The OTA differential upgrade system for commercial vehicles according to claim 1, characterized in that, The OTA object receives the flashing command and performs the restore action. The OTA host sends a routine control diagnostic service request to the OTA object. The restore component inside the OTA object starts working and generates the target software package based on the source software package and the differential software package. During the execution of the restore component, the OTA host needs to continuously send online diagnostic device service requests to the OTA object and continuously report the restore progress to the OTA platform. If the restoration is successful, the OTA object sends a positive response to the OTA host; if the restoration fails, it sends a negative response. The OTA host then determines whether to continue the differential upgrade process. Once the restoration is complete, the upgrade process continues, and the upgrade result is reported.

8. The OTA differential upgrade system for commercial vehicles according to claim 7, characterized in that, The restoration action is performed when the OTA object receives a restoration control command sent by the OTA host, and then starts the restoration component to restore the source software package and the differential software package to the target software package, and verifies the source software package and the differential software package.

Images