System and method for flashing data between a flash station and a target board

Abstract

The invention relates to a system (1) and a method for flashing data between a flash station (3) and a multiboard (2), the system (1) comprising the flash station (3) and the multiboard (2) and at least a first target board (4) and a second target board (N), which are arranged on the multiboard (2), for flashing data between the flash station (3) and the first target board (4) and between the flash station (3) and the second target board (N).

Description

[0001] The invention relates to a system and a method for flashing data between a flash station and a target board.

[0002] Newly developed functions in the automotive sector require ever-increasing computing power. To meet this demand, more and more high-performance computers are being produced. In production, an equally ever-increasing amount of data from vehicle control software, maps, infotainment data, driving models, etc. must be transferred to the non-volatile memory (NVM) of these devices.

[0003] The installation or reinstallation of, for example, control software on an ECU, the so-called "flashing" of the software, is usually performed using a flash station: The fully assembled target board in the ECU or for the ECU, located on a transport pallet, is transported to a flash station, or vice versa. The flash station contains the software variants to be installed on a memory device. The ECU is then connected to the flash station via cable, and the desired control software is loaded into the ECU's main memory. The ECU is then tested.

[0004] The flash data can be transmitted from the flash station to several control units, for example to separate CAN or CAN FD vehicle buses, in order to be able to flash them.

[0005] Flashing ECUs in vehicle production is required both in-line and off-line. The challenge in production is to quickly distribute flash data to many ECUs via bus systems.

[0006] Please note that common, look-up computer terms have been left in English for ease of understanding.

[0007] DE 102015224829 A1 discloses a device and a method for flashing firmware onto a device having a memory unit, a processing unit, and a communication unit, comprising the following method steps: a. starting the device, b. checking by means of the processing unit whether a flash flag is set in the memory unit, which represents that the device should be put into a flash state, wherein if no, the process continues with step c, or if yes, the process continues with step d, c. checking by means of the processing unit whether valid firmware is present, wherein if no, the process continues with step d, or if yes, the process continues with step e, d. putting the device into a flash state, or otherwise e. putting the device into an application state, and f.Check whether a flash command has been received via the communication unit; if not, proceed to step e; or if yes, proceed to step g. Set a flash flag in the memory unit and proceed to step a.

[0008] It is an object of the invention to provide an improved system and method for flashing a target board.

[0009] The problem is solved by a system having the features of claim 1 and a method having the features of claim 9.

[0010] Advantageous embodiments emerge from the dependent patent claims, the description and the figures.

[0011] The object is achieved by a system for flashing data between a flash station and a multiboard, the system comprising the flash station and the multiboard as well as a first target board and at least one second target board, which are arranged on the multiboard, for flashing data between the flash station and the first target board and between the flash station and the second target board, wherein the multiboard has a vehicle network processor, which has an Ethernet switch for connecting the first target board and the second target board to the vehicle network processor via an Ethernet connection, and a PCIe switch for connecting the first target board and the second target board to the vehicle network processor via a PCIe connection. The flash station has a memory, and an Ethernet connection is provided. The memory is connected to the Ethernet switch of the vehicle network processor via the Ethernet connection. A PCIe connection is provided. The memory is connected to the PCIe switch of the vehicle network processor via the PCIe connection. The memory has a control partition, the control partition containing the control data to be flashed to the vehicle network processor.wherein the control data to be flashed is transferable to the vehicle network processor via the Ethernet connection, and wherein the control data to be flashed comprises at least the OEM operating software for the vehicle network processor and a first bootloader file for the first target board and a second bootloader file for the at least second target board, which links the first target board to a first memory partition and links the second target board to a second memory partition, and the first memory partition is provided which stores a first OEM file to be flashed for the first target board, wherein the vehicle network processor is configured to transmit the first OEM file to be flashed from the first memory partition to the first target board via the PCIe connection via the PCIe switch, and the second memory partition is provided, which has a second OEM file to be flashed for the at least second target board, and wherein the vehicle network processor is configured to transmit the second OEM file to be flashed from the second memory partition to the second target board via the PCIe switch via the PCIe connection.

[0012] In a PCI Express (PCIe) system, a root complex connects the CPU and memory subsystem to, for example, one or more endpoints. The root complex generates transaction requests on behalf of the CPU. A root complex (RC) refers to the root of an I / O hierarchy that connects the CPU / memory subsystem to the I / O. The root complex in PCI Express (PCIe) is the intermediary between the central processing unit (CPU), the memory, and the PCIe switch fabric, which includes one or more PCIe or PCIe devices.

[0013] It is known that pre-flashing NVM (Non-Volatile Memory) storage on computer boards / PCBs can be a solution for transferring large data packets to the target board cost-effectively. NVM (Non-Volatile Memory Express) is a communications interface and driver that takes advantage of the increased bandwidth offered by PCIe. It is designed for greater performance and efficiency while providing interoperability across a wide range of enterprise and consumer systems.

[0014] It is also known that different endpoints can be coupled via switches. This allows for direct connections between PCI Express devices.

[0015] Likewise, a target board mounted on the computer board may have specific installation routines or security restrictions that require software installation on the running system. This is especially true for N-target boards.

[0016] According to the invention, it was recognized that in the production of a high-performance computer (HPC, multiboard) comprising several, for example, N-computer boards (HPC boards), which are referred to here as target boards, the complexity of the overall system and possible interdependencies of the individual N-target boards must be taken into account in the product testing and flashing process.

[0017] This is now solved by the system according to the invention. The vehicle network processor (VNP) according to the invention comprises an Ethernet switch that provides an Ethernet network to all target boards. Furthermore, the system according to the invention includes a PCIe connection from the flash station to the individual target boards. The entire flash and test process after assembly and during assembly thus takes place via only two physical interfaces, instead of using a separate physical interface for each target board included. This leads to a more effective and cost-effective production environment, as the flash stations / multiboards must provide fewer interfaces.The vehicle network processor can act as a gateway, opening a network tunnel between the target boards and the production flash station, via which, for example, the test results of the individual boards are collected and the control data for the vehicle network processor is transmitted. The system according to the invention enables the analysis of field returns—i.e., test results generated, for example, in the event of a malfunction—to be performed using a single gateway, namely the vehicle network processor. Possible security considerations for restricting unauthorized access via the field return analysis interface can be focused on this single access point.

[0018] The control partition has a first bootloader file for the first target board and a second bootloader file for the at least second target board, which links the first target board to the first memory partition and the second target board to the second memory partition. The bootloader files can be transferred to each target board via the Ethernet connection and stored in the memory of the respective target board. This assigns each target board a memory partition. Furthermore, the control data can also contain the operating system or OEM software required for the operation of the vehicle network processor.

[0019] In a further development, the vehicle network processor is configured to establish a TLS connection to the memory, i.e., in particular, to the control partition, via the Ethernet connection. Transport Layer Security (TLS) is a protocol of the ISO / OSI layer model that ensures encrypted data transmission over the Internet.

[0020] In a further embodiment, the first memory partition has a first test file for testing the first target board with regard to its target board configuration, wherein the first target board is designed to transmit a first test result resulting from the execution of the first test file to the vehicle network processor for further transmission of the first test result to the flash station via the Ethernet connection and wherein the second memory partition has a second test file for testing the second target board with regard to its target board configuration, wherein the second target board is designed to transmit a test result resulting from the execution of the second test file to the vehicle network processor for further transmission of the second test result to the flash station via the Ethernet connection.Furthermore, all test files are not flashed to the respective target boards, but can be booted directly from the respective memory partition by the vehicle network processor via the PCIe connection.

[0021] In particular, the vehicle network processor can be configured to execute the first test file on the first target board using the PCIe connection, with the first test file remaining on the first memory partition, and can further be configured to execute the second test file on the second target board using the PCIe connection, with the second test file remaining on the second memory partition. Thus, the entire test software (test files) are not flashed onto the respective target boards, but rather booted directly from the respective memory partition connected to the target boards via PCIe.

[0022] In further development, the control partition has a test planner, which contains a plan for executing the test files with respect to the target board configuration of each target board, as well as a flashing planner, which contains a plan for flashing the OEM files.

[0023] Specifically, the test planner runs on the vehicle network processor and triggers the test files on each target board via an Ethernet connection, which are then executed over the PCIe connection. This approach enables a holistic, centralized product testing process. The vehicle network processor can act as a gateway, opening a network tunnel between the target boards and the flash station during production—i.e., during the loading of the target board with software—through which, for example, the test results of the individual target boards are collected. Furthermore, the flashing process can be controlled by the vehicle network processor.

[0024] There may be dependencies in the flashing sequence between target boards, for example, due to safety requirements. These can be taken into account by a flashing planner running on the vehicle network processor. The flashing planner can structure the flashing process across all target boards.

[0025] Furthermore, a TLS connection can be established as a proxy tunnel with the vehicle network processor acting as a network proxy between each target board and the flash station. In particular, the test results of the executed test files can be transmitted via the vehicle network processor over the TLS connection, which contributes to security.

[0026] In a further development, the vehicle network processor is configured to execute the test file on one of the target boards using the PCIe connection and to execute the flashing of another target board using the PCIe connection in parallel. Since the PCIe connection to the memory is already established during product testing, the flashing of individual target boards can be started while the target boards are being tested. This parallelizes the process.

[0027] Furthermore, the flash station has a non-transparent bridge connected to the memory, as well as a PCIe connector connected to the non-transparent bridge, and wherein the vehicle network processor has a multi-board PCIe connector for establishing a PCIe connection between the multi-board PCIe connector and the PCIe connector, and wherein the vehicle network processor is configured to flash the OEM files from the first memory partition and the at least second memory partition to the respective target board via the PCIe connection. Furthermore, the non-transparent bridge is connected to the memory and to a flash station Ethernet connector connected to the non-transparent bridge, and wherein the multi-board has a (multi-board) Ethernet connector for establishing the Ethernet connection between the flash station and the vehicle network processor.

[0028] Furthermore, the object is achieved by a method for flashing data between a flash station and a multiboard, the system comprising the flash station and the multiboard and at least a first target board and a second target board arranged on the multiboard, for flashing data between the flash station and the first target board and between the flash station and the second target board comprising the steps: - Providing a vehicle network processor on the multiboard, which has an Ethernet switch and a PCIe switch, - Connecting the first target board as well as the second target board via an Ethernet connection to the vehicle network processor via the Ethernet switch, - Connecting the first target board as well as the second target board via a PCle connection to the vehicle network processor via the PCle switch, - Providing a memory on the flash station, and connecting the memory via an Ethernet connection to the Ethernet switch with the vehicle network processor, and connecting the memory via a PCIe connection to the PCIe switch of the vehicle network processor, - Providing a control partition on the memory, wherein the control partition comprises the control data to be flashed to the vehicle network processor, wherein the control data to be flashed is transmitted to the vehicle network processor via the Ethernet connection, and wherein the control data to be flashed comprises at least the OEM operating software for the vehicle network processor and a first bootloader file for the first target board and a second bootloader file for the at least second target board, which links the first target board to a first memory partition and links the second target board to a second memory partition, - Providing the first memory partition, which has a first OEM file to be flashed for the first target board, and wherein the first OEM file to be flashed is transmitted via the PCIe switch from the first memory partition to the first target board via the PCIe connection, using the vehicle network processor, - Providing the second memory partition having the second OEM file to be flashed for the second target board, and wherein, using the vehicle network processor, the second OEM file to be flashed is transmitted from the second memory partition to the second target board via the PCIe connection via the PCIe switch.

[0029] The advantages of the system can be transferred to the process. In further development, the process includes the following steps: - Providing a first test file, which is contained in the first OEM file to be flashed for the first target board, for testing the first target board with regard to its target board configuration, and a second test file, which is contained in the second OEM file to be flashed for the at least second target board, for testing the second target board with regard to its target board configuration, - Providing a test planner in the control data, which contains a plan for executing the test files with respect to the target board configuration of each target board, - Providing a flashing planner in the control data, which contains a plan for flashing the OEM files, - Transmitting the test planner via the Ethernet connection to the vehicle network processor to trigger one test each to test the first target board and the second target board.

[0030] Furthermore, further procedural steps may be included: - Establishing a TLS connection between the vehicle network processor and the first target board and between the vehicle network processor and the second target board, using the Ethernet connection, - Establish a TLS connection between the vehicle network processor and the flash station to provide a secure communication channel for all Ethernet communication, - Execute the first test file over the PCIe connection using the test planner to test the first target board, leaving the first test file on the first memory partition, - Execute the second test file over the PCIe connection using the test scheduler to test the second target board, leaving the second test file on the second memory partition.

[0031] When the first test file is executed, first test results can be generated and when the second test file is executed, second test results can be generated, and the first test results and the second test results can be transmitted to the flash station via the Ethernet connection, in particular in encrypted form. Furthermore, further procedural steps may be included: - Providing a flashing planner, which is included in the control data to be flashed, - Transmitting the flashing planner, which contains a plan for flashing the first OEM file and the second OEM file via the PCIe connection for the first target board and the second target board, via the Ethernet connection, - Perform the flashing using the flashing planner and flash the first OEM file and the second OEM file via the PCIe connection to the first target board and the second target board.

[0032] This allows parallel execution of a test file and flashing between the two different target boards.

[0033] The system and procedure can avoid uncoordinated tests for testing the target boards.

[0034] The system and method according to the invention comprises a test planner and a flashing planner running on the vehicle network processor, which structure the testing and flashing of the OEM files across the entire multiboard, ie each individual target board.

[0035] The test files are not flashed to the respective target boards, but booted directly from the memory partitions that are connected to the target boards via the PCIe connection.

[0036] The system and method according to the invention eliminate the need for multiple external interfaces. The system and method according to the invention allow the entire flash and test process to be performed via just two physical interfaces, namely the PCIe connection and the Ethernet connection, instead of using a separate physical interface for each target board. This results in a more effective and cost-effective production environment, as the system must provide fewer interfaces.

[0037] The system and method according to the invention provides a single gateway, i.e., the vehicle network processor, for analyzing test results, i.e., field returns after flashing. Possible security considerations for restricting unauthorized access via the field return analysis interface can be focused on this single access point. The various test files for the target boards can be booted from memory. The vehicle network processor can establish a secure communication channel (TLS tunnel) to receive the test results, i.e., field returns. This creates easy access for field return analysis, allowing for very rapid testing even after flashing.

[0038] The system and method according to the invention provides the multiboard manufacturer with a single entry point for field return analysis (analysis of field failures, in this case, board failure), i.e., an analysis of a multiboard that has already been flashed. Only software needs to be maintained in the vehicle network processor: The test scheduler described above must be available here, as well as the key material for opening the TLS connection between the memory and the multiboard. Each target board must also provide booting from its memory partition as an activatable bootloader option.

[0039] This allows test files to be booted from a remote storage and analyzed with the same or different test software as in the flash process without having to reflash the multiboard.

[0040] Further features, characteristics, and advantages of the present invention will become apparent from the following description with reference to the accompanying figures, which schematically show: Fig. 1: a system according to the invention, Fig. 2: the system when running the test file, Fig. 3: the system while flashing.

[0041] Fig. 1 shows a system 1 for flashing data between a flash station 3 and a multiboard 2.

[0042] The multiboard 2 has a first target board 4 (HPC board, High Performance Computing Board) and further Nth target boards N.

[0043] Each target board 4 has a target board root complex 4a, a target board main memory 4b, a (non-volatile) target board memory 4c, in particular an NVM memory, a target board memory controller 4d, a target board processor 4f, a target board Ethernet controller 4e, and possibly other peripheral microcontrollers that have a suitable connection for data transmission. Furthermore, the multiboard 2 has a vehicle network processor (VNP) 5. The vehicle network processor 5 has a processor 5a, an NVM controller 5b, and a memory 5c. Furthermore, the vehicle network processor 5 has an Ethernet controller 6 and an Ethernet switch 7. The Ethernet switch 7 is connected via the Ethernet controller 6 to the processor 5a, which in turn is suitably connected to the NVM controller 5b and the memory 5c.

[0044] Furthermore, the Ethernet switch 7 is connected via the target board Ethernet controller 4e to the first target board 4 to form an Ethernet connection, as well as to the Ethernet controllers of the other existing target boards N.

[0045] The Ethernet controller 6 is connected to a multiboard Ethernet connector 17, which is arranged on the multiboard 2.

[0046] Furthermore, the vehicle network processor 5 has a PCIe switch 8. This has several upstream ports for connecting the PCIe switch 8 to the target board root complex 4a of the first target board 4 as well as the respective root complex of the existing target boards N.

[0047] Furthermore, the multiboard 2 has a multiboard PCIe connector 9. This is connected to the PCIe switch 8 via a downstream port.

[0048] The configuration of the PCIe switch 8 and the Ethernet switch 7 takes place within the vehicle network processor 5.

[0049] The Flashstation 3 has a non-transparent bridge 11 with an upstream port, whereby the non-transparent bridge 11 is connected to the multiboard PCle connector 9 on the multiboard 2 via a PCIe connector 12 on the Flashstation 3.

[0050] Furthermore, the Flashstation 3 has a Flashstation root complex 3a, a Flashstation RAM 3b, a Flashstation processor 3c, a Flashstation Ethernet controller 3d, and a Flashstation Ethernet connector 3e. The non-transparent bridge 11 is connected to the multiboard PCIe connector 9 on the multiboard 2 via the Flashstation PCIe connector 12 on the Flashstation 3.

[0051] Furthermore, the flash station 3 has a memory 15, in particular an SSD memory.

[0052] This has a control partition 16 and a first memory partition 10 as well as further memory partitions N-memory analogous to the number of target boards N.

[0053] Furthermore, an Ethernet connection 13, which runs between the Flashstation Ethernet connector 3e to the multiboard Ethernet connector 17, is provided for connecting the memory 15 to each target board 4, N via the vehicle network processor 5.

[0054] Furthermore, a PCIe connection 14 is provided from the memory 15 to the target boards 4, N via the vehicle network processor 5.

[0055] Furthermore, the control partition 16 contains the control data. The control data includes OEM operating software for the vehicle network processor 5, i.e., the operating software, which is understood to be the software required to operate the individual components on the vehicle network processor 5.

[0056] Furthermore, a test planner (TP), which contains a plan for testing the data, and a flashing planner (FP), which contains a plan for flashing the OEM files, are available. The test planner (TP) is installed and executed on the vehicle network processor 5. The OEM operating software includes additional software required to execute the test planner (TP) and the flashing planner (FP).

[0057] Furthermore, a first bootloader file is present, as well as additional bootloader files corresponding to the number of target boards N. Such bootloader files can contain bootloader configurations for each target board 4,N, which enable booting from the correct memory partition 10,N for each target board 4,N, for example, booting from the first memory partition 10 for the first target board 4.

[0058] This means that each target board N is assigned a memory partition N-memory.

[0059] Furthermore, the first memory partition 10 includes a first test file for testing the first target board 4 with respect to its target board configuration. Such a test file may, for example, also include associated files (Production OS for Target Board) required to start the test file or to execute the test file on the first target board 4. Such test files may include tests as functions related to mechanical resistance, solder quality, electrical conductivity, temperature, or other functional sets or interface tests, environmental testing, etc.

[0060] The remaining existing memory partitions N-memory have the same for their corresponding target board N, i.e., each memory partition N-memory has such a test file.

[0061] Furthermore, a first OEM file, for example as an OEM software package, is present in the first memory partition 10. In addition to an application, the first OEM file also includes, for example, an OEM bootloader configuration for the first target board 4, i.e., an operating system through which the application can run independently after being disconnected from the flash station 3.

[0062] The remaining existing memory partitions N-memory have the same for their corresponding target board N, i.e. each memory partition N-memory has an OEM file.

[0063] Furthermore, the vehicle network processor 5 already contains a bootable kernel, and the Ethernet connection 13 to the flash station 3 is set up. The necessary key material for the Transport Layer Security (TLS) connection—for example, a public TLS key of the flash station 3—is already present in the memory 5c of the vehicle network processor 5. The use of a TLS protocol results in the encryption of the transmitted content. TLS is thus a method that encrypts data streams so that they can only be read by authorized recipients.

[0064] Fig. Figure 2 shows System 1 running the test file.

[0065] In a first step S1, the test planner TP is loaded into the memory 5c of the vehicle network processor 5 via the Ethernet connection 13. The test planner TP specifies the execution plan, at what time and in what order the individual test files for testing the target boards 4, N are executed. Thus, the test planner TP triggers the execution of the test files of each individual target board 4, N for testing the target boards 4, N as well as the overall configuration.

[0066] In a second step S2, the flashing planner FP, which contains the plan for flashing the OEM files for each target board 4, N, is loaded into the memory 5c of the vehicle network processor 5 via the Ethernet connection 13. Thus, the flashing planner FP triggers the flashing of the OEM file for each individual target board 4, N to save the OEM file in the respective persistent memory of the target boards 4, N.

[0067] Subsequently, in a third step S3, the Ethernet switch 7 is configured by the vehicle network processor 5 using the OEM operating software on the vehicle network processor 5.

[0068] In a fourth step S4, a TLS connection is established between each target board 4,N and the flash station 3. This guarantees secure data transmission. The vehicle network processor 5 serves as a network proxy, and the Ethernet connection is configured as a proxy tunnel between each target board 4,N and the vehicle network processor 5.

[0069] Subsequently, in a fifth step S5, the PCle switch 8 is configured by the vehicle network processor 5 using the OEM operating software on the vehicle network processor 5.

[0070] In a sixth step S6, a first bootloader file, as well as further bootloader files corresponding to the number of target boards N, are loaded into the non-volatile memory 4c of the target board 4. Such bootloader files can contain bootloader configurations for each target board 4, N, based on which booting from the correct memory partition 10, N memory for each target board 4, N is accomplished, for example, booting from the first memory partition 10 by the first target board 4. This means that each target board N is assigned a memory partition N memory. Furthermore, the PCIe connection 14 is established.

[0071] In a seventh step S7, the test planner TP is executed. For this purpose, the test functions contained in the test file, such as stress tests, temperature tests, etc., are triggered via the internal Ethernet connection 13. This means that the test files or test functions are not flashed / loaded onto the respective target board 4, N, but are booted directly from the memory partition 10, N, which is connected to the target board 4, N via the PCIe connection 14. Each test file produces one or more test results, which are then transmitted back to the memory 15.

[0072] The vehicle network processor 5 acts as a gateway that generates the network tunnel between the target boards 4, N and the flash station 3 or the memory 15, via which the test results of the individual target boards 4, N are collected and sent to the flash station 3 and evaluated.

[0073] Thus, the various test files for the individual target boards 4, N are booted from the corresponding memory partitions 10, N memory, with the vehicle network processor 5 establishing a secure communication channel, namely the Ethernet connection 13 as a TLS connection, to receive and transmit the test results.

[0074] This approach enables a holistic, centralized product testing process.

[0075] Fig. 3 shows the flashing of OEM files using System 1.

[0076] If the test result is successful, the OEM files of the individual memory partitions 10, N can be flashed to the respective target boards 4, N. For this purpose, the flashing planner FP is executed in an eighth step S8.

[0077] The installation files for OEM files are available in the storage partitions 10, N storage. According to the flashing planner FP and possible hardware limitations, the flashing of the individual target boards 4, N is planned via PCIe connection 14.

[0078] The flashing of the individual OEM files in the respective memory partitions 10, N is then triggered and executed by the vehicle network processor 5 based on the flashing plan FP. For this purpose, the OEM files are loaded into the non-volatile memory 4c of the individual target boards 4, N via the PCIe connection 14 and the PCIe switch 8. The OEM files, with which the multiboard 2 will later be operated, are thus flashed directly from the memory partitions 10, N of the flash station 3 into the non-volatile memory of the target boards 4, N via the PCIe connection 14.

[0079] Therefore, the fast PCIe interface speed or PCIe connection 14 can be used for the data transfer process.

[0080] Pipelining, i.e. parallel testing and flashing, can be used.

[0081] Since the PCIe connection 14 to the memory 15 is already established during the execution of the test files, the flashing of individual target boards 4, N can be started during the tests. This parallelizes the process.

[0082] Afterwards, the operating system etc. of each target board 4, N can be configured and a reboot can be started as well as a test.

[0083] System 1 allows for avoiding uncoordinated tests for testing the target boards 4, N. The vehicle network processor 5 (VNP) includes an Ethernet switch 7 that provides an Ethernet network to all target boards 4, N. There may be dependencies in the flashing sequence between the target boards 4, N, e.g., due to safety requirements.

[0084] The system 1 according to the invention has a test planner TP and a flashing planner FP running on the vehicle network processor 5, which structure the testing and flashing of the OEM files across the entire multiboard 2.

[0085] The test files are not flashed to the respective target boards 4, N, but booted directly from the memory partitions 10, N, which are connected to the target boards 4, N via the PCIe connection 14.

[0086] The system 1 according to the invention eliminates the need for multiple external interfaces. The system 1 according to the invention allows the entire flash and test process to be performed via only two physical interfaces, namely the PCIe connection and the Ethernet connection, instead of using a separate physical interface for each target board 4, N. This results in a more effective and cost-effective production environment, as the system must provide fewer interfaces.

[0087] The system 1 according to the invention provides a single gateway, i.e., the vehicle network processor 5, for analyzing test results, i.e., field returns after flashing. Possible security considerations for restricting unauthorized access via the field return analysis interface can be focused on this single access point. The various test files for the target boards 4, N can be booted from memory 15. The vehicle network processor 5 can establish a secure communication channel (TLS tunnel) to receive the test results, i.e., field returns. This creates easy access for field return analysis, allowing for very rapid testing even after flashing.

[0088] This invention provides the Multiboard 2 manufacturer with a single entry point for field return analysis. Only the vehicle network processor 5 requires software to be maintained: the test scheduler TP described above must be available here, as well as the key material for opening the TLS connection between memory 5 and the Multiboard 2. Each target board 4, N must also provide booting from its memory partition 10, N as an activatable bootloader option.

[0089] If these requirements are met, test files can be booted from a remote storage 15 and analyzed with the same or different test software as in the flash process without having to re-flash the Multiboard 2. List of reference symbols 1 system 2 multiboards 3 Flash Station 3a Root Complex 3b Flashstation memory 3c Flashstation processor 3d Flashstation Ethernet controller 3e Flashstation Ethernet connector 4 Target board 4a Target Board Root Complex 4b target board memory 4c target board memory 4d target board memory controller 4e target board Ethernet controller 4f target board processor 5 Vehicle network processor 5a processor 5b Controller 5c memory 6 Ethernet controllers 7 Ethernet switch 8 PCIe switches 9 Multiboard PCIe connector 10 first storage partition 11 Non-Transparent Bridge 12 PCIe connectors 13 Ethernet connection 14 PCIe connection 15 storage 16 Control partition 17 Multiboard Ethernet connector N-memory Nth memory partition N Nth target board FP Flashing Planner TP Test Planner QUOTES CONTAINED IN THE DESCRIPTION

[0000] This list of documents submitted by the applicant was generated automatically and is included solely for the convenience of the reader. This list is not part of the German patent or utility model application. The DPMA assumes no liability for any errors or omissions. Cited patent literature

[0000] DE 102015224829 A1

[0007]

Claims

[1] System (1) for flashing data between a flash station (3) and a multiboard (2), the system (1) comprising the flash station (3) and the multiboard (2) and at least a first target board (4) and a second target board (N) arranged on the multiboard (2), for flashing data between the flash station (3) and the first target board (4) and between the flash station (3) and the second target board (N), characterized by , that the multiboard (2) has a vehicle network processor (5) which has an Ethernet switch (7) for connecting the first target board (4) and the second target board (N) via an Ethernet connection to the vehicle network processor (5) and a PCIe switch for connecting the first target board (4) and the second target board (N) via a PCIe connection (14) to the vehicle network processor (5), wherein the flash station (3) has a memory (15), and wherein an Ethernet connection (13) is provided, wherein the memory (15) is connected to the Ethernet switch (7) of the vehicle network processor (5) via the Ethernet connection (13), and wherein a PCIe connection (14) is provided, and wherein the memory (15) is connected to the PCIe switch of the vehicle network processor (5) via the PCIe connection (14), and wherein the memory (15) has a control partition (16), wherein the control partition (16) contains the control data to be flashed to the vehicle network processor (5), wherein the control data to be flashed is transferable to the vehicle network processor (5) via the Ethernet connection (13), and wherein the control data to be flashed comprises at least the OEM operating software for the vehicle network processor (5) and a first bootloader file for the first target board (4) and a second bootloader file for the at least second target board (N),which links the first target board (4) to a first memory partition (10) and links the second target board (N) to a second memory partition (N-memory), and the first memory partition (10) is provided, which stores a first OEM file to be flashed for the first target board (4), wherein the vehicle network processor (5) is designed to transmit the first OEM file to be flashed via the PCle switch (8) from the first memory partition (10) to the first target board (4) via the PCle connection (14), and the second memory partition (N-memory) is provided, which has a second OEM file to be flashed for the at least second target board (N), and wherein the vehicle network processor (5) is designed to transmit the second OEM file to be flashed via the PCIe switch (8) from the second memory partition (N-memory) via the PCIe connection (14) to the second target board (N). [2] System (1) according to claim 1, characterized by in that the first memory partition (10) has a first test file for testing the first target board (4) with regard to its target board configuration, wherein the first target board (4) is designed to transmit a first test result resulting from the execution of the first test file to the vehicle network processor (5) for further transmission of the first test result to the flash station (3) via the Ethernet connection (13), and wherein the second memory partition (N-memory) has a second test file for testing the second target board (N) with regard to its target board configuration, wherein the second target board (N) is designed to transmit a test result resulting from the execution of the second test file to the vehicle network processor (5) for further transmission of the second test result to the flash station (3) via the Ethernet connection (13). [3] System (1) according to claim 2, characterized by that the control partition (16) has a test planner (TP) which contains a plan for executing the test files with respect to the target board configuration of each target board (4,N) as well as a flashing planner (FP) which contains a plan for flashing the OEM files. [4] System (1) according to claim 3, characterized by that the vehicle network processor (5) is designed to establish a TLS connection to the memory (15) via the Ethernet connection. [5] System (1) according to one of the preceding claims 3 to 4, characterized byin that the vehicle network processor (5) is designed to execute the first test file on the first target board (4) using the PCIe connection (14), wherein the first test file remains on the first memory partition (10), and to execute the second test file on the second target board (N) using the PCIe connection (14), wherein the second test file remains on the second memory partition (N-memory). [6] System (1) according to one of the preceding claims 3 to 5, characterized by in that the vehicle network processor (5) is designed to execute the test file on one of the target boards (4,N) using the PCIe connection (14) and to execute the flashing of another target board (4,N) in parallel using the PCIe connection (14). [7] System (1) according to one of the preceding claims, characterized byin that the flash station (3) has a non-transparent bridge (11) which is connected to the memory (15), and a PCIe connector (12) connected to the non-transparent bridge (11), and wherein the vehicle network processor (5) has a multi-board PCIe connector (9) for establishing a PCIe connection between the multi-board PCIe connector (9) and the PCIe connector (12), and wherein the vehicle network processor (5) is designed to flash the OEM files from the first memory partition (10) and also from the at least second memory partition (N-memory) to the respective target board (4,N) via the PCIe connection (14). [8] System (1) according to one of the preceding claims, characterized bythat the flash station (3) has a non-transparent bridge (11) which is connected to the memory (15), as well as a flash station Ethernet connector (3e) connected to the non-transparent bridge (11), and wherein the multiboard (2) has an Ethernet connector (17) for forming the Ethernet connection (13) between the flash station (3) and the vehicle network processor (5). [9] Method for flashing data between a flash station (3) and a multiboard (2), the system (1) comprising the flash station (3) and the multiboard (2) as well as a first target board (4) and at least one second target board (N) arranged on the multiboard (2), for flashing data between the flash station (3) and the first target board (4) and between the flash station (3) and the second target board (N) comprising the steps: - Providing a vehicle network processor (5) on the multiboard (2), which has an Ethernet switch (7) and a PCle switch (8), - Connecting the first target board (4) as well as the second target board (N) via an Ethernet connection to the vehicle network processor (5) via the Ethernet switch (7), - Connecting the first target board (4) as well as the second target board (N) via a PCle connection (14) to the vehicle network processor (5) via the PCle switch (8), - Providing a memory (15) on the flash station (3), and connecting the memory (15) via an Ethernet connection (13) to the Ethernet switch (7) with the vehicle network processor (5), and connecting the memory (15) via a PCle connection (14) to the PCle switch (8) of the vehicle network processor (5), - Providing a control partition (16) on the memory (15), wherein the control partition comprises the control data to be flashed to the vehicle network processor (5), wherein the control data to be flashed is transmitted to the vehicle network processor (5) via the Ethernet connection (13), and wherein the control data to be flashed comprises at least the OEM operating software for the vehicle network processor (5) and a first bootloader file for the first target board (4) and a second bootloader file for the at least second target board (N), which link the first target board (4) to a first memory partition (10) and link the second target board (N) to a second memory partition (N-memory), - Providing the first memory partition (10) which has a first OEM file to be flashed for the first target board (4), and wherein the first OEM file to be flashed is transmitted via the PCle switch (8) from the first memory partition (10) to the first target board (4) via the PCle connection (14) using the vehicle network processor (5), - Providing the second memory partition (N-memory) which has the second OEM file to be flashed for the second target board (N), and wherein, using the vehicle network processor (5), the second OEM file to be flashed is transmitted via the PCle switch (8) from the second memory partition (N-memory) to the second target board (N) via the PCle connection (14). [10] Method according to claim 9, comprising the steps: - Providing a first test file, which is contained in the first OEM file to be flashed for the first target board (4), for testing the first target board (4) with regard to its target board configuration, and a second test file, which is contained in the second OEM file to be flashed for the at least second target board (N), for testing the second target board (N) with regard to its target board configuration, - Providing a test planner (TP) in the control data, which contains a plan for executing the test files with respect to the target board configuration of each target board (4,N), - Providing a Flashing Planner (FP) in the control data, which contains a plan for flashing the OEM files, - Transmitting the test planner (TP) via the Ethernet connection (13) to the vehicle network processor (5) to trigger a test for testing the first target board (4) and the second target board (N). [11] Method according to claim 10, characterized by that further procedural steps are included: - Establishing a TLS connection between the vehicle network processor (5) and the first target board (4) and between the vehicle network processor (5) and the second target board (N) using the Ethernet connection (13), - executing the first test file via the PCle connection (14) using the test planner (TP) to test the first target board (4), whereby the first test file remains on the first memory partition (10), - Executing the second test file via the PCIe connection (14) using the test planner (TP) to test the second target board (N), wherein the second test file remains on the second memory partition (N-memory). [12] Method according to claim 10 or 11, characterized bythat when the first test file is executed, first test results are generated and when the second test file is executed, second test results are generated, wherein the first test results and the second test results are transmitted to the flash station (3) via the Ethernet connection (13). [13] Method according to claim 11 or 12, comprising the steps - transmitting the flashing planner (FP), which has a plan for flashing the first OEM file and the second OEM file via the PCIe connection for the first target board (4) and the second target board (N), via the Ethernet connection (13), - Executing the flashing using the flashing planner (FP) and flashing the first OEM file and the second OEM file via the PCIe connection (14) to the first target board (4) and the second target board (N). [14] Method according to claim 13, characterized bythat allows parallel execution of a test file and flashing between the two different target boards (4,N). [15] Method according to claim 14, characterized by that after the flashing is completed a restart is carried out on the multiboard (2).

Images