Vehicle control method and device, and vehicle

Abstract

The present application discloses a vehicle control method and apparatus, and a vehicle. The method includes: in a software upgrade process of the vehicle, a control unit of the vehicle receives a signal from a target unit, the target unit being configured to sense whether a person exists in the vehicle; and when the control unit determines that a person exists in the vehicle based on the signal, the control unit controls a basic service unit in the vehicle to provide a basic service. In the software upgrade process of the vehicle, the basic service can be provided normally, thereby improving the user experience. The method provided in the embodiments of the present application may be applied to an intelligent vehicle.

Description

[Technical field]

[0001]

[0001] The present application relates to the field of vehicle technology, and in particular to a vehicle control method and device, and a vehicle. [Background technology]

[0002]

[0002] With the popularization of "connected, automated, shared, and electronic" vehicles, there are more and more electronic programs. The electronic cost of vehicles is the cause of the gradual increase of vehicle costs, which increases significantly in new energy vehicles in contrast to traditional vehicles. "Software-defined vehicles" are becoming the development trend of vehicles, and the complexity of vehicle software is correspondingly increased significantly. In order to perform software failure recovery in a timely manner and implement functions such as customized requirement updates, vehicle software upgrades are becoming more and more frequent. Vehicle software upgrades include wired software upgrades, over-the-air technology (OTA), etc. However, in the vehicle software upgrade process, the vehicle cannot be used as usual, resulting in a poor user experience. Summary of the Invention

[0003]

[0003] The embodiments of the present application disclose a vehicle control method and apparatus, and a vehicle, for providing basic services normally during a software upgrade process of the vehicle.

[0004] According to a first aspect, the present application provides a vehicle control method, the method including:

[0005] In a software upgrade process of the vehicle, a control unit of the vehicle receives a signal from a target unit, the target unit being configured to sense whether a person is present within the vehicle; and The method includes a step in which, when it is determined based on the signal that a person is present in the vehicle, the control unit controls a basic service unit in the vehicle to provide a basic service.

[0005]

[0006] Optionally, the control unit comprises one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

[0006]

[0007] Optionally, the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

[0007]

[0008] Optionally, the basic service unit may include one or more of the following: air conditioning, speakers, vehicle mounted infotainment screen, horn, windshield wipers, vehicle lights or dashboard within the vehicle.

[0008]

[0009] In the present solution, the signal from the target unit can still be received in the vehicle's software upgrade process, so that when the received signal indicates that there is a person in the vehicle, the basic service unit in the vehicle can be controlled to provide basic services to the user. Compared with the existing solution in which the vehicle's services are not available in the vehicle's upgrade process, the present solution can meet the user's basic service requirements in the vehicle's software upgrade process, thereby improving the user experience.

[0009]

[0010] In a possible implementation, the control unit is connected to the target unit via a signal line, the signal line being configured to transmit a signal from the target unit to the control unit during a software upgrade process of the vehicle.

[0010]

[0011] In the present solution, a directly connected signal line may be arranged between the control unit and the target unit, and is specifically configured to transmit a signal from the target unit to the control unit in the vehicle software upgrade process, so that the control unit can sense whether a person is present in the vehicle, and control the basic service unit in the vehicle to provide basic services to the user when a person is present in the vehicle. In the present solution, when another communication channel is disabled in the vehicle software upgrade process, the signal from the target unit can still be transmitted to the control unit. This reduces the dependency on the controller area network communication and provides a basis for meeting the user's basic service requirements in the vehicle software upgrade process.

[0011]

[0012] In a possible implementation, the method is:

[0013] receiving, by the control unit, a communication control packet, the communication control packet instructing the control unit to disable a controller area network (CAN) communication function; and The method further includes: after receiving the communication control packet, the control unit ensures CAN communication function between the control unit and the target unit based on the first preset configuration.

[0012]

[0014] The steps of the vehicle control unit receiving a signal from a target unit include:

[0015] The control unit receives a signal from the target unit via a controller area network, the signal being a CAN signal.

[0013]

[0016] Optionally, a first pre-set configuration indicates that the control unit is only permitted to receive a target signal from a target unit via the controller area network, the target signal being used to determine whether a person is present within the vehicle.

[0014]

[0017] In a possible implementation, the method is: The method further includes: after receiving the communication control packet, the control unit ensures CAN communication function with the basic service unit based on the second preset configuration.

[0015]

[0018] The steps of the control unit controlling the basic service unit in the vehicle to provide the basic service include:

[0019] The method includes the steps of: the control unit transmitting a packet to the basic service unit via the controller area network, the packet instructing the basic service unit to provide a basic service, the packet being a CAN packet.

[0016]

[0020] In the above solution in which the CAN communication function is ensured based on the preset configuration, in the vehicle software upgrade process, the specified CAN communication function is ensured through the preset configuration, so that the signal from the target unit can be transmitted to the control system. In this case, the basic service can be provided in the vehicle software upgrade process. Furthermore, in the vehicle software upgrade process, only the CAN communication function required to provide the basic service can be ensured, and the CAN communication function of other signals or vehicle components is still disabled. Therefore, the impact on data flashing in the vehicle software upgrade process can be reduced as much as possible. In other words, in the present application, the basic service can be provided in the vehicle software upgrade process to improve the user experience when the impact on the vehicle software upgrade service is reduced as much as possible.

[0017]

[0021] In a possible implementation, the steps of the control unit controlling a basic service unit in the vehicle to provide the basic service include: The method includes a step of the control unit sending a packet to the basic service unit by utilizing a unified diagnostic service (UDS) protocol, the packet instructing the basic service unit to provide the basic service.

[0018]

[0022] In the software upgrade process of a vehicle, the UDS protocol is used to transmit data for data flashing. In the solution of this case, the UDS protocol is used to transmit packets from the control unit to the basic service unit, so that the upgrade data and packets can be transmitted synchronously. In other words, the basic service unit can be controlled to provide basic services without affecting the flashing of the upgrade data, so that the user experience is improved.

[0019]

[0023] In a possible implementation, the target unit includes a vehicle key controller, and the signals from the target unit include a signal from the vehicle key controller indicating whether a vehicle key is placed in the vehicle, the signal indicating that the vehicle key is placed in the vehicle indicating that a person is present in the vehicle, and the signal indicating that the vehicle key is not placed in the vehicle indicating that a person is not present in the vehicle.

[0020]

[0024] In a possible implementation, the target unit includes a seat controller, and the signals from the target unit include a signal from the seat controller indicating whether a person is present in a seat of the vehicle, the signal indicating the presence of a person in the seat of the vehicle indicating that a person is present in the vehicle, and the signal indicating the absence of a person in the seat of the vehicle indicating that a person is not present in the vehicle.

[0021]

[0025] In a possible implementation, the target unit includes a vehicle-mounted T-box and the signal from the target unit includes a signal from the vehicle-mounted T-box indicating whether a person is present within the vehicle.

[0022]

[0026] In a possible implementation, the target unit further includes a vehicle lock controller, and the signals from the target unit include a signal from the vehicle lock controller indicating that the vehicle lock of the vehicle is in an unlocked state or a locked state, the signal indicating that the vehicle lock of the vehicle is in an unlocked state indicating that a person is present in the vehicle, and the signal indicating that the vehicle lock of the vehicle is in a locked state indicating that a person is not present in the vehicle.

[0023]

[0027] In a possible implementation, signals from a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box have a higher priority than signals from a vehicle lock controller.

[0024]

[0028] Determining the presence of a person in a vehicle based on a signal includes:

[0029] The control unit includes determining that a person is present in the vehicle when a determination is made based on a signal from the vehicle lock controller indicating that a person is not present in the vehicle and a determination is made based on a signal from the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box indicating that a person is present in the vehicle.

[0025]

[0030] Whether there is a person in the vehicle is determined based on signals from one or more target units, so that the presence of a person in the vehicle can be sensed in a timely manner, and the corresponding basic service unit can be controlled promptly and accordingly to provide basic services and improve user experience. Furthermore, the aforementioned step of comprehensively determining whether there is a person in the vehicle based on signals from multiple target units can improve the determination accuracy, avoid the waste of resources caused by controlling the basic service to provide the basic service unit due to a false determination that there is a person in the vehicle, and avoid the unpleasant user experience caused by not providing basic services due to a false determination that there is no person in the vehicle.

[0026]

[0031] According to a second aspect, the present application provides a method for controlling a vehicle, the method comprising:

[0032] The vehicle software upgrade process includes a step in which, when the target unit senses whether a person is present in the vehicle, the target unit transmits a signal to a control unit of the vehicle, the signal instructing the control unit to control a basic service unit in the vehicle to provide basic services.

[0027]

[0033] Optionally, the control unit comprises one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

[0028]

[0034] Optionally, the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

[0029]

[0035] In the present solution, in the vehicle software upgrade process, the target unit can still send a signal to the control unit, so that when the signal received by the control unit indicates that there is a person in the vehicle, the basic service unit in the vehicle can be controlled to provide basic services to the user. Compared with the existing solution in which the vehicle's services are not available in the vehicle upgrade process, the present solution can meet the user's basic service requirements in the vehicle software upgrade process, thereby improving the user experience.

[0030]

[0036] In a possible implementation, the target unit is connected to the control unit via a signal line; the signal line is configured to transmit a signal from the target unit to the control unit during a software upgrade process of the vehicle.

[0031]

[0037] In the present solution, a directly connected signal line may be arranged between the target unit and the control unit, and is specifically configured to transmit signals from the target unit to the control unit in the vehicle's software upgrade process, so that the control unit can sense whether there is a person in the vehicle, and control the basic service unit in the vehicle to provide basic services to the user when there is a person in the vehicle. In the present solution, when another communication channel is disabled in the vehicle's software upgrade process, the signal from the target unit can still be transmitted to the control unit. This provides a basis for satisfying the user's basic service requirements in the vehicle's software upgrade process.

[0032]

[0038] In a possible implementation, the method is:

[0039] receiving, by the target unit, a communication control packet, the communication control packet instructing the target unit to disable a controller area network (CAN) communication function; and after receiving the communication control packet, the target unit ensures CAN communication capability with the control unit based on a pre-configured configuration.

[0033]

[0040] The target unit sends a signal to the vehicle's control unit in the following steps:

[0041] The method includes the step of the target unit transmitting a signal to the control unit via a controller area network, the signal being a CAN signal.

[0034]

[0042] Optionally, a pre-set configuration may indicate that the target unit is only allowed to transmit a target signal via the controller area network to the control unit, which target signal is used to determine whether a person is present within the vehicle.

[0035]

[0043] In the above solution in which the CAN communication function is ensured based on the preset configuration, the specified CAN communication function is ensured through the preset configuration during the vehicle software upgrade process, thereby allowing the signal from the target unit to be transmitted to the control system. In this case, the basic service can be provided during the vehicle software upgrade process. Furthermore, during the vehicle software upgrade process, only the CAN communication function required to provide the basic service may be ensured, and the CAN communication function of other signals or vehicle components is still disabled. Therefore, the impact on data flashing during the vehicle software upgrade process can be reduced as much as possible. In other words, in the present application, the basic service can be provided during the vehicle software upgrade process to improve the user experience, when the impact on the vehicle software upgrade service is reduced as much as possible.

[0036]

[0044] According to a third aspect, the present application provides a vehicle control method, the method comprising:

[0045] The method includes a step of an OAT controller of the vehicle broadcasting a communication control packet to the vehicle based on a preset configuration, the communication control packet instructing to disable all CAN communication functions in the vehicle except a target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between a target unit and a control unit of the vehicle, the target unit being configured to sense whether a person is present in the vehicle, and the target signal being a signal from the target unit used to determine whether a person is present in the vehicle; The first CAN communication function is used to send target signals to the control unit during the vehicle's software upgrade process.

[0037]

[0046] Generally, in order to reduce the impact of other data transmissions on the upgrade data transmission in the vehicle upgrade process, the OTA controller can broadcast a communication control packet to the vehicle to disable the CAN communication function of the entire vehicle. In this case, the basic service of the entire vehicle cannot be used. However, in the solution of this case, when broadcasting the communication control packet, the OTA controller can instruct not to disable the target CAN communication function and to disable all CAN communication functions except the target CAN communication function. In this way, the signal communication between the target unit and the basic control unit can still be maintained while reducing the impact on the upgrade data transmission as much as possible, that is, the signal from the target unit can be transmitted to the control unit, so that in the vehicle upgrade process, the control unit can control the basic service unit to provide the basic service based on the signal, thereby improving the user experience.

[0038]

[0047] In a possible implementation, the target CAN communication function further includes a second CAN communication function for transmitting target packets between the control unit and the basic service unit, the target packets instructing the basic service unit to provide the basic service.

[0039]

[0048] The second CAN communication function is used to send target packets to the basic service unit during the vehicle's software upgrade process.

[0040]

[0049] In the present solution, the target CAN communication function further includes a CAN communication function for transmitting target packets between the control unit and the basic service unit, so that during a software upgrade of the vehicle, the control system can send packets to the basic service unit via the CAN communication function to instruct the basic service unit to provide basic services, thereby improving the user experience.

[0041]

[0050] According to a fourth aspect, the present application provides a vehicle control device, the control device being arranged in a vehicle, the control device comprising: a receiving module configured to receive a signal from a target unit in a software upgrade process of the vehicle, the target unit being configured to sense whether a person is present within the vehicle; and a control module configured to control a basic service unit in the vehicle to provide basic services when a determination is made based on the signal that a person is present in the vehicle.

[0042]

[0051] In a possible implementation, the control unit is connected to the target unit via a signal line.

[0043]

[0052] The signal line is configured to transmit a signal from the target unit to the control device during a software upgrade process of the vehicle.

[0044]

[0053] In a possible implementation, the receiving module is further configured to receive a communication control packet, the communication control packet instructing the controller to disable controller area network CAN communication functionality.

[0045]

[0054] The control device further includes a reservation module configured to ensure CAN communication functionality between the control device and the target unit based on a first preset configuration after the communication control packet is received.

[0046]

[0055] The receiving module specifically: It is configured to receive a signal from a target unit via a Controller Area Network, the signal being a CAN signal.

[0047]

[0056] In a possible implementation, a first pre-set configuration indicates that the control device is only permitted to receive a target signal from a target unit via the controller area network, the target signal being used to determine whether a person is present within the vehicle.

[0048]

[0057] In a possible implementation, the reservation module is further configured to reserve CAN communication capability with the basic service unit based on a second pre-configured configuration after the communication control packet is received.

[0049]

[0058] The control device further includes a transmission module, the control module comprising: Specifically configured to control the transmitting module to transmit a packet to the basic service unit via the controller area network, the packet instructing the basic service unit to provide the basic service, the packet being a CAN packet.

[0050]

[0059] In a possible implementation, the control device further includes a transmission module, the control module being: The method is specifically configured to control the transmitting unit to transmit a packet to the basic service unit by utilizing a unified diagnostic service (UDS) protocol, the packet instructing the basic service unit to provide the basic service.

[0051]

[0060] In a possible implementation, the control device includes one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

[0052]

[0061] In a possible implementation, the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

[0053]

[0062] In a possible implementation, the target unit includes a vehicle key controller, and the signals from the target unit include a signal from the vehicle key controller indicating whether a vehicle key is placed in the vehicle, where the signal indicating that the vehicle key is placed in the vehicle indicates the presence of a person in the vehicle, and where the signal indicating that the vehicle key is not placed in the vehicle indicates the absence of a person in the vehicle.

[0054]

[0063] In a possible implementation, the target unit includes a seat controller, and the signals from the target unit include a signal from the seat controller indicating whether a person is present in a seat of the vehicle, the signal indicating the presence of a person in the seat of the vehicle indicating that a person is present in the vehicle, and the signal indicating the absence of a person in the seat of the vehicle indicating that a person is not present in the vehicle.

[0055]

[0064] In a possible implementation, the target unit includes a vehicle-mounted T-box, and the signal from the target unit includes a signal from the vehicle-mounted T-box indicating whether a person is present within the vehicle.

[0056]

[0065] In a possible implementation, the target unit further includes a vehicle lock controller, and the signals from the target unit include a signal from the vehicle lock controller indicating that the vehicle lock of the vehicle is in an unlocked state or a locked state, the signal indicating that the vehicle lock of the vehicle is in an unlocked state indicating that a person is present in the vehicle, and the signal indicating that the vehicle lock of the vehicle is in a locked state indicating that a person is not present in the vehicle.

[0057]

[0066] In a possible implementation, signals from a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box have a higher priority than signals from a vehicle lock controller.

[0058]

[0067] Specifically, the control device further includes a determining unit, and the determining unit is configured to determine that a person is present in the vehicle based on the signal, If a determination is made based on a signal from the vehicle lock controller indicating that no person is present in the vehicle, and if a determination is made based on a signal from the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box indicating that a person is present in the vehicle, then a determination is made that a person is present in the vehicle.

[0059]

[0068] According to a fifth aspect, the present application provides a vehicle apparatus, the vehicle apparatus comprising: The vehicle includes a transmitting module configured to transmit a signal to a control unit of the vehicle when a software upgrade process of the vehicle senses the presence of a person within the vehicle, the signal instructing the control unit to control a basic service unit within the vehicle to provide basic services.

[0060]

[0069] In a possible implementation, the vehicle devices are connected to the control unit via signal lines.

[0061]

[0070] The signal line is configured to transmit a signal from the vehicle device to the control unit during a software upgrade process of the vehicle.

[0062]

[0071] In a possible implementation, the vehicle equipment: a receiving module configured to receive a communication control packet, the communication control packet instructing the vehicle device to disable a controller area network (CAN) communication function; and a reservation module configured to ensure a CAN communication function with the control unit based on a preset configuration after the communication control packet is received; Further includes.

[0063]

[0072] The transmitting module is: The controller is specifically configured to transmit a signal to a control unit via a controller area network, the signal being a CAN signal.

[0064]

[0073] In a possible implementation, the pre-set configuration indicates that the vehicle devices are only allowed to transmit target signals to the control unit via the controller area network, where the target signals are used to determine whether a person is present within the vehicle.

[0065]

[0074] In a possible implementation, the control unit includes one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

[0066]

[0075] In possible implementations, the vehicle device is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

[0067]

[0076] According to a sixth aspect, the present application provides a vehicle control device, the vehicle control device comprising: The vehicle includes a broadcast module configured to broadcast a communication control packet to the vehicle based on a pre-set configuration, the communication control packet instructing disabling of all CAN communication functions except the target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between a target unit and a control unit of the vehicle, the target unit configured to sense whether a person is present in the vehicle, and the target signal being a signal from the target unit used to determine whether a person is present in the vehicle.

[0068]

[0077] The first CAN communication function is used to send target signals to the control unit during the vehicle's software upgrade process.

[0069]

[0078] In a possible implementation, the target CAN communication function further includes a second CAN communication function for transmitting target packets between the control unit and the basic service unit, the target packets instructing the basic service unit to provide the basic service.

[0070]

[0079] The second CAN communication function is used to send target packets to the basic service unit during the vehicle's software upgrade process.

[0071]

[0080] According to a seventh aspect, the present application provides a vehicle control device, the device being included in a vehicle, the device including a processor and a memory. The memory is coupled to the processor, and when executing a computer program stored in the memory, the processor can perform the vehicle control method described in any implementation of the first aspect. The device may further include a communication interface. The communication interface is used for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module, or another type of communication interface.

[0072]

[0081] In a possible implementation, the device: memory configured to store a computer program; and Processor; Could include: The processor is configured to receive a signal from a target unit via the communication interface during a software upgrade process of the vehicle, the target unit being configured to sense whether a person is present within the vehicle; and The processor is configured to control a basic service unit in the vehicle to provide basic services when the processor determines, based on the signal, that a person is present in the vehicle.

[0073]

[0082] It should be noted that in this application, the computer program in the memory may be pre-stored or downloaded and stored from the Internet when the device is used. The source of the computer program in the memory is not particularly limited in this application. The coupling in the embodiments of this application may be an indirect coupling or connection between the devices, units, or modules in an electrical form, a mechanical form, or another form, and is used for information exchange between the devices, units, or modules.

[0074]

[0083] According to an eighth aspect, the present application provides an apparatus for a vehicle, the apparatus being included in a vehicle, the apparatus including a processor and a memory. The memory is coupled to the processor, and when executing a computer program stored in the memory, the processor can perform the vehicle control method described in any implementation of the second aspect. The apparatus may further include a communication interface. The communication interface is used for the apparatus to communicate with other apparatuses. For example, the communication interface may be a transceiver, a circuit, a bus, a module, or another type of communication interface.

[0075]

[0084] In a possible implementation, the device: memory configured to store a computer program; and Processor; Could include: The processor is configured to send a signal to a control unit of the vehicle via the communication interface during a software upgrade process of the vehicle, the signal instructing the control unit to control a basic service unit in the vehicle to provide the basic service.

[0076]

[0085] It should be noted that in this application, the computer program in the memory may be pre-stored or downloaded and stored from the Internet when the device is used. The source of the computer program in the memory is not particularly limited in this application. The coupling in the embodiments of this application may be an indirect coupling or connection between the devices, units, or modules in an electrical form, a mechanical form, or another form, and is used for information exchange between the devices, units, or modules.

[0077]

[0086] According to a ninth aspect, the present application provides a vehicle control device, the device being included in a vehicle, the device including a processor and a memory. The memory is coupled to the processor, and when executing a computer program stored in the memory, the processor can perform the vehicle control method described in any implementation of the third aspect. The device may further include a communication interface. The communication interface is used for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module, or another type of communication interface.

[0078]

[0087] In a possible implementation, the device: memory configured to store a computer program; and Processor; Could include: The processor is configured to broadcast a communication control packet to the vehicle based on a pre-set configuration, the communication control packet instructing to disable all CAN communication functions in the vehicle except a target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between a target unit and a control unit of the vehicle, the target unit configured to sense whether a person is present in the vehicle, the target signal being a signal from the target unit used to determine whether a person is present in the vehicle, and the first CAN communication function is used to send the target signal to the control unit during a software upgrade process of the vehicle.

[0079]

[0088] It should be noted that in this application, the computer program in the memory may be pre-stored or downloaded and stored from the Internet when the device is used. The source of the computer program in the memory is not particularly limited in this application. The coupling in the embodiments of this application may be an indirect coupling or connection between the devices, units, or modules in an electrical form, a mechanical form, or another form, and is used for information exchange between the devices, units, or modules.

[0080]

[0089] According to a tenth aspect, the present application provides a vehicle, the vehicle comprising a control device and a vehicle device, the control device being a control device according to any implementation of the fourth aspect, and the vehicle device being a vehicle device according to any implementation of the fifth aspect.

[0081]

[0090] According to an eleventh aspect, the present application provides a computer readable storage medium, the computer readable storage medium storing a computer program, the computer program being executed by a processor to perform a method according to the first aspect or any possible implementation of the first aspect.

[0082]

[0091] According to a twelfth aspect, the present application provides a computer readable storage medium, the computer readable storage medium storing a computer program, the computer program being executed by a processor to implement a method according to the second aspect or any possible implementation of the second aspect.

[0083]

[0092] According to a thirteenth aspect, the present application provides a computer readable storage medium, the computer readable storage medium storing a computer program, the computer program being executed by a processor to perform a method according to the third aspect or any possible implementation of the third aspect.

[0084]

[0093] According to a fourteenth aspect, the present application provides computer program software which, when executed by a processor, performs a method according to the first aspect or any possible implementation of the first aspect.

[0085]

[0094] According to a fifteenth aspect, the present application provides computer program software which, when executed by a processor, performs a method according to the second aspect or any possible implementation of the second aspect.

[0086]

[0095] According to a sixteenth aspect, the present application provides computer program software which, when executed by a processor, performs a method according to the third aspect or any possible implementation of the third aspect.

[0087]

[0096] The solutions provided in the fourth to sixteenth aspects can be used to implement or cooperate with the methods provided correspondingly in the first, second or third aspects, and thus achieve the same or corresponding beneficial effects as those in the first, second or third aspects, and the details will not be described again here. [Brief description of the drawings]

[0088] [Figure 1]

[0097] FIG. 1 is a diagram illustrating the structure of an intelligent vehicle system according to an embodiment of the present application. [Diagram 2]

[0098] FIG. 2 is a diagram of an in-vehicle network structure according to an embodiment of the present application. [Diagram 3]

[0099] FIG. 3 is a schematic flow chart of a method according to an embodiment of the present application. [Figure 4A]

[0100] FIG. 4A is a diagram of an intra-vehicle communication channel according to an embodiment of the present application. [Figure 4B]

[0101] FIG. 4B is a diagram of another intra-vehicle communication channel according to an embodiment of the present application. [Figure 4C]

[0102] FIG. 4C is a diagram of another intra-vehicle communication channel according to an embodiment of the present application. [Figure 4D]

[0103] FIG. 4D is a diagram of the connectivity between vehicle components according to an embodiment of the present application. [Figure 4E]

[0104] FIG. 4E is a diagram of an interaction procedure according to an embodiment of the present application. [Figure 5A]

[0105] FIG. 5A is a diagram of another intra-vehicle communication channel according to an embodiment of the present application. [Figure 5B]

[0106] FIG. 5B is a diagram of another intra-vehicle communication channel according to an embodiment of the present application. [Figure 5C]

[0107] FIG. 5C is a diagram of another intra-vehicle communication channel according to an embodiment of the present application. [Figure 6]

[0108] FIG. 6 is a diagram of another interaction procedure according to an embodiment of the present application. [Figure 7]

[0109] FIG. 7 is a logical configuration diagram of a control device according to an embodiment of the present application. [Figure 8]

[0110] FIG. 8 is a logical configuration diagram of a vehicle device according to an embodiment of the present application. [Figure 9]

[0111] FIG. 9 is a logical configuration diagram of another control device according to an embodiment of the present application. [Figure 10]

[0112] FIG. 10 is a hardware configuration diagram of a control device according to an embodiment of the present application. [Figure 11]

[0113] FIG. 11 is a hardware configuration diagram of a vehicle device according to an embodiment of the present application. [Figure 12]

[0114] FIG. 12 is a hardware configuration diagram of another control device according to an embodiment of the present application. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0089]

[0115] Hereinafter, the technical solutions in the embodiments of the present application will be described with reference to the accompanying drawings in the embodiments of the present application.

[0090]

[0116] Figure 1 shows an example of an intelligent vehicle system. The intelligent vehicle system includes an over-the-air technology (OTA) module, a gateway (GW) or vehicle integration unit (VIU), a vehicle domain controller (VDC), a cockpit domain controller (CDC), a vehicle lock controller, and a seat controller. The OTA module, the VDC, the CDC, the vehicle lock controller, and the seat controller are connected to the gateway (or VIU).

[0091]

[0117] The OTA module may be connected to the gateway (or VIU) via an Ethernet bus and a Controller Area Network (CAN) bus. Also, the VDC and the gateway (or VIU) may be connected via an Ethernet bus and a CAN bus, and the CDC and the gateway (or VIU) may be connected via an Ethernet bus and a CAN bus. The vehicle lock controller and the gateway (or VIU) are connected via a CAN bus, and the seat controller and the gateway (or VIU) are connected via a CAN bus.

[0092]

[0118] An intelligent vehicle system may include multiple gateways (or VIUs), and multiple gateways (or VIUs) may be arranged in a distributed manner in the intelligent vehicle system. For ease of understanding, refer to FIG. 2, for example. In FIG. 2, four gateways (or VIUs) are used as an example. As shown in FIG. 2, the gateways (or VIUs) arranged in a distributed manner may provide a high-speed Ethernet bus for interconnection to form a ring network. The ring network provides reliable communication performance. If any VIU fails, the entire ring network can ensure the communication security of the entire system through a loopback route. FIG. 2 is merely an example and does not constitute a limitation on the embodiments of the present application.

[0093]

[0119] In a possible implementation, the gateway may be a core component of the entire electronic and electrical architecture of the vehicle. As a data exchange hub for the entire vehicle network, the gateway can route data within various networks, such as CAN networks, Local Interconnect Networks (LIN), and Media Oriented System Transport (MOST) networks. For example, the gateway may specifically implement protocol conversion functions, protocol encapsulation and forwarding functions, data format conversion functions, etc.

[0094]

[0120] In a specific implementation, the VIU may provide all or part of the data processing or control functions for multiple vehicle components. The following describes the functions of the VIU by using examples. It should be understood that the VIU may have one or more of the following functions:

[0095]

[0121] 1. Electronic control function. This means that the VIU is configured to perform electronic control functions provided by electronic control units (ECUs) within some or all of the vehicle components. For example, the VIU has control functions required by the vehicle components. As another example, the VIU has data processing functions required by the vehicle components.

[0096]

[0122] 2. The same functions as those of a gateway. This means that the VIU may further have some or all of the same functions as those of a gateway, such as a protocol conversion function, a protocol encapsulation and forwarding function, and a data format conversion function.

[0097]

[0123] 3. The ability to process data between vehicle components, which means that processing, calculations, etc. are performed on data obtained from actuators of multiple vehicle components.

[0098]

[0124] It should be noted that the data related to the aforementioned functions may include operation data of actuators in the vehicle components, such as the actuator's motion parameters and the actuator's operating status. Furthermore, the data related to the aforementioned functions may also be data collected through a data collection unit (e.g., a sensing element or a sensor) of the vehicle components, such as road information and weather information of the road on which the vehicle travels, which is collected by the sensing element of the vehicle. This is not particularly limited in the embodiments of the present application.

[0099]

[0125] The OTA module may be configured to perform an OTA upgrade of the entire vehicle. The OTA module may perform wireless communication with an OTA server. Specifically, a secure channel may be established between the OTA server and the OTA module. For example, a security channel such as a protocol called hypertext transfer protocol over secure socket layer (HTTPS), a transport layer security (TLS) protocol, or a datagram transport layer security (DTLS) protocol may be established. Through the established secure channel, information may be securely transmitted between the OTA server and the OTA module. For example, a policy package and an upgrade package of the component to be upgraded are securely transmitted. The OTA server may be deployed on an electronic device having wireless communication and storage capabilities, or may be deployed on a virtual machine (VM) or a container on a cloud, and the cloud may be a cluster including multiple electronic devices.

[0100]

[0126] The VDC is configured to provide services to vehicle components in the body domain and to vehicle components in the chassis domain. Vehicle components in the body domain include door window lift controllers, powered rearview mirrors, air conditioning, central door locks, etc. Vehicle components in the chassis domain include vehicle components in the braking system, vehicle components in the steering system, vehicle components in the accelerator system (e.g., throttle), and the like.

[0101]

[0127] The CDC is configured to provide services to vehicle components in the cockpit domain, including head-up displays, instrument displays, radios, navigators, cameras, etc.

[0102]

[0128] The vehicle lock controller may be configured to communicate with a vehicle key and to receive and process a signal transmitted by the vehicle key. For example, the vehicle lock controller may receive an unlock (or lock) signal transmitted by the vehicle key and control the vehicle lock to be in an unlocked (or locked) state based on the unlock (or lock) signal.

[0103]

[0129] The seat controller may be configured to sense, for example, whether or not a person is present in the seat by a sensor or sensing element.

[0104]

[0130] In a possible implementation, the intelligent vehicle system may further include an autonomous driving domain controller, a vehicle key controller, etc. The autonomous driving domain controller is configured to provide services to vehicle components that implement the autonomous driving function. The vehicle components that realize the autonomous driving function include a monocular camera, a binocular camera, a millimeter wave radar, a lidar, an ultrasonic radar, etc. For example, the function of the autonomous driving domain controller may be realized by a mobile data center (MDC). The vehicle key controller is used to sense whether the vehicle key is present in the vehicle, etc. through a sensor or a sensing element.

[0105]

[0131] The VDC, CDC, and MDC are all configured to provide services to components within the area of ​​the vehicle and are therefore sometimes referred to as domain controllers for the vehicle.

[0106]

[0132] In a possible implementation, the intelligent vehicle system may further include a central controller, which may include vehicle mode management functionality and may be configured to coordinate and control domain controllers, vehicle components, and the like within the vehicle.

[0107]

[0133] The above describes the components of the intelligent vehicle system using specific examples. The above components are not limited to specific implementations. Details are not listed one by one in this application.

[0108]

[0134] It can be seen from the above description of the intelligent vehicle system that the OTA upgrade of the whole vehicle can be implemented through the OTA module. In the existing OTA upgrade solution, after receiving data such as upgrade package from the OTA server, the OTA module can use the unified diagnostic services (UDS) protocol to transmit packets to flash software data in the electronic control unit (ECU) and implement the software upgrade. ECU is a general term for all controllers in an intelligent vehicle system. For example, the VDC, CDC, VIU, gateway, vehicle lock controller or seat controller, and other vehicle component controllers in an intelligent vehicle system are all ECUs.

[0109]

[0135] However, in the existing intelligent vehicle system architecture, both UDS protocol packets and CAN packets are transmitted on the CAN bus, and the priority of the CAN packets is higher than that of the UDS protocol packets. To avoid frame loss of the UDS packets used to flush ECU data, the OTA module sends a communication control packet to each ECU by broadcasting in the whole vehicle before sending the UDS packets. The communication control packet instructs the ECU to disable the CAN communication function, i.e., the ECU no longer processes CAN packets. For example, the communication control packet may be sent by using the service 28 of the UDS protocol. After receiving the communication control packet, the gateway (or VIU) also disables the route forwarding function of the CAN packets to make way for the UDS protocol packets.

[0110]

[0136] Once the CAN communication function of the whole vehicle is disabled, the lowest level service communication will be interrupted and the whole vehicle will not be able to provide basic services as usual. For example, after the CAN communication function is disabled, the vehicle will not be able to sense whether there is a person in the vehicle, and will not be able to provide basic services such as sound, light, and electricity when there is a person in the vehicle. This will affect the normal use of vehicle services by users.

[0111]

[0137] In addition to the above-mentioned software upgrade of the whole vehicle by the OTA module, the software upgrade of the vehicle may also be performed through wired flashing, for example, the software upgrade of the vehicle is performed at a maintenance shop site. If the CAN communication function of the whole vehicle is disabled in the software upgrade process by wired flashing, the basic service cannot be provided as usual.

[0112]

[0138] In order to solve the above-mentioned problem of being unable to provide basic services normally during the software upgrade process of a vehicle, an embodiment of the present application provides a processing method for providing basic services in a vehicle, for example, see Figure 3. The method includes but is not limited to the following steps:

[0113]

[0139] S301: In a software upgrade process of a vehicle, a control unit of the vehicle receives a signal from a target unit, the target unit being configured to sense whether a person is present within the vehicle.

[0114]

[0140] In a specific implementation, the control unit may include one or more of a VDC, a CDC, a VIU, or a gateway, and the target unit may include one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box.

[0115]

[0141] S302: When it is determined based on the signal that a person is present in the vehicle, the control unit controls a basic service unit in the vehicle to provide a basic service.

[0116]

[0142] In a specific implementation, the basic service unit includes one or more of an audio control unit, a light control unit, an electrical control unit, or an entertainment control unit in a vehicle. For example, the basic service unit may be one or more of an air conditioner, a vehicle light, an in-vehicle infotainment screen, a horn, a windshield wiper, a speaker, a dashboard, etc. in a vehicle. The air conditioner can provide a service using the air conditioner, the vehicle light can provide a service using the vehicle light, the in-vehicle infotainment screen can provide a service using the in-vehicle infotainment screen, the horn can provide a service using the horn, the windshield wiper can provide a service using the windshield wiper, the speaker can provide a service using the speaker, and the dashboard can provide a service using the dashboard. This is merely an example, and the basic service unit is not limited in the embodiments of the present application.

[0117]

[0143] For ease of the following description, the signal received by the control unit from the target unit may be referred to as the notification signal.

[0118]

[0144] For example, the above-described process of determining the presence of a person in a vehicle based on a signal may include one or more of the following cases:

[0119]

[0145] Case 1: The target unit includes a vehicle lock controller. For example, when a user needs to enter the vehicle, the user can send a signal to the vehicle lock controller to unlock the vehicle lock, such as via a vehicle key. The vehicle lock controller receives the signal to unlock the vehicle lock and unlocks the vehicle lock, so that the user can enter the vehicle. After receiving the signal to unlock the vehicle lock, the vehicle lock controller generates a notification signal based on the signal to unlock the vehicle lock and sends the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating that the vehicle lock of the vehicle is in an unlocked state. After receiving the notification signal, the control unit may determine that a person is present in the vehicle based on the signal indicating the unlocked state. Alternatively, for example, the generated notification signal may be a signal generated by the vehicle lock controller based on the signal to unlock the vehicle lock according to a preset signal generation rule, indicating that a person is present in the vehicle. For example, the pre-set signal generation rule may be, for example, to mark a field in the generated signal with an identifier, such as "1", to indicate the presence of a person in the vehicle. Of course, the identifier may be any identifier and is not limited to "1" provided here as an example. In this case, after receiving a notification signal carrying an identifier, the control unit may determine that a person is present in the vehicle based on the particular identifier.

[0120]

[0146] In another implementation, for example, when a user leaves the vehicle, a signal for locking the vehicle lock may be sent to the vehicle lock controller via a vehicle key or the like. The vehicle lock controller receives the signal for locking the vehicle lock and locks the vehicle lock. Also, after receiving the signal for locking the vehicle lock, the vehicle lock controller generates a notification signal based on the signal for locking the vehicle lock and transmits the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating that the vehicle lock of the vehicle is in a locked state. After receiving the notification signal, the control unit may determine that no person is present in the vehicle based on the signal indicating the locked state. Alternatively, for example, the generated notification signal may be a signal indicating that no person is present in the vehicle, which is generated by the vehicle lock controller according to a preset signal generation rule based on the signal for locking the vehicle lock. For example, the pre-set signal generation rule may be to mark a field in the generated signal as an identifier, such as "0", to indicate the absence of a person in the vehicle. Of course, the identifier may be any identifier and is not limited to the "0" provided as an example here. In this case, after receiving a notification signal carrying an identifier, the control unit may determine that a person is not present in the vehicle based on the particular identifier.

[0121]

[0147] Case 2: The target unit includes a vehicle key controller. The vehicle key controller can sense whether the vehicle key is in the vehicle by a vehicle key sensor or sensing element. If the vehicle key is in the vehicle, it indicates that a person is present in the vehicle. If the vehicle key is not in the vehicle, it indicates that a person is not present in the vehicle. When the vehicle key sensor or sensing element senses that the vehicle key is in the vehicle, a signal indicating that the vehicle key is in the vehicle is sent to the vehicle key controller. After receiving the signal indicating that the vehicle key is in the vehicle, the vehicle key controller generates a notification signal based on the signal indicating that the vehicle key is in the vehicle and sends the generated notification signal to the control unit. The generated notification signal can indicate that the vehicle key is in the vehicle. After receiving the notification signal, the control unit can determine that a person is present in the vehicle based on the notification signal. Alternatively, for example, the generated notification signal may be a signal generated by the vehicle lock controller according to a pre-set signal generation rule based on a signal indicating that the vehicle key is in the vehicle, indicating the presence of a person in the vehicle. For example, the pre-set signal generation rule may be to mark a field in the generated signal as an identifier, such as, for example, “1”, to indicate the presence of a person in the vehicle. Of course, the identifier may be any identifier and is not limited to the “1” provided as an example here. In this case, after receiving the notification signal carrying the identifier, the control unit may determine that a person is present in the vehicle based on the particular identifier.

[0122]

[0148] When the vehicle key sensor or sensing element senses that the vehicle key is not in the vehicle, a signal indicating that the vehicle key is not in the vehicle is sent to the vehicle key controller. After receiving the signal indicating that the vehicle key is not in the vehicle, the vehicle key controller generates a second signal based on the signal indicating that the vehicle key is not in the vehicle. The generated notification signal may indicate that the vehicle key is not in the vehicle. After receiving the notification signal, the control unit may determine that there is no person in the vehicle based on the notification signal. Alternatively, for example, the generated notification signal may be a signal generated by the vehicle lock controller according to a preset signal generation rule based on the signal indicating that the vehicle key is in the vehicle, indicating that there is no person in the vehicle. For example, the preset signal generation rule may be to mark a field in the generated signal as an identifier, such as, for example, “0”, to indicate that there is no person in the vehicle. Of course, the identifier may be any identifier and is not limited to “0” provided as an example herein. In this case, after receiving a notification signal carrying an identifier, the control unit may determine that no person is present within the vehicle based on the particular identifier.

[0123]

[0149] Case 3: The target unit includes a seat controller. The seat controller can sense whether a person is present in the seat by a seat sensor or sensing element. Upon sensing the presence of a person in the seat, the seat sensor or sensing element transmits a signal indicating the presence of a person in the seat to the seat controller. After receiving the signal indicating the presence of a person in the seat, the seat controller generates a notification signal based on the signal indicating the presence of a person in the seat and transmits the generated notification signal to the control unit. For example, the generated notification signal can be a signal indicating the presence of a person in the seat of the vehicle. After receiving the notification signal, the control unit can determine that a person is present in the vehicle based on the signal indicating the presence of a person in the seat. Alternatively, for example, the generated notification signal can be a signal generated by the seat controller according to a preset signal generation rule based on the signal indicating the presence of a person in the seat, indicating the presence of a person in the vehicle. For example, the preset signal generation rule can be to mark a field in the generated signal as an identifier, such as "1", to indicate the presence of a person in the vehicle. Of course, the identifier can be any identifier and is not limited to "1" provided as an example here. In this case, after receiving a notification signal carrying an identifier, the control unit may determine that a person is present within the vehicle based on the particular identifier.

[0124]

[0150] When the seat sensor or sensing element detects that no person is present in the seat, a signal indicating that no person is present in the seat is sent to the seat controller. After receiving the signal indicating that no person is present in the seat, the seat controller generates a second signal based on the signal indicating that no person is present in the seat and sends the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating that no person is present in the seat of the vehicle. After receiving the notification signal, the control unit may determine that no person is present in the vehicle based on the signal indicating that no person is present in the seat. Alternatively, for example, the generated notification signal may be a signal generated by the seat controller according to a preset signal generation rule based on the signal indicating that no person is present in the seat, indicating that no person is present in the vehicle. For example, the preset signal generation rule may be to mark a field in the generated signal as an identifier, such as "0", to indicate that no person is present in the vehicle. Of course, the identifier may be any identifier and is not limited to "0" provided as an example here. In this case, after receiving the notification signal carrying an identifier, the control unit may determine that no person is present in the vehicle based on the specific identifier.

[0125]

[0151] Case 4: The target unit includes a camera. The camera is capable of capturing an image in the vehicle and analyzing whether the image includes a face. If the image captured by the camera includes a face, a notification signal may be generated, and the generated notification signal is transmitted to the control unit. For example, the generated notification signal may be a signal indicating that the captured image includes a face. After receiving the notification signal, the control unit may determine that a person is present in the vehicle based on the signal indicating that the captured image includes a face. Alternatively, for example, the generated notification signal may be a signal generated by the camera according to a pre-set signal generation rule based on the case where the captured image includes a face, indicating that a person is present in the vehicle. For example, the pre-set signal generation rule may be a signal indicating that a person is present in the vehicle, such as, for example, a "1". Of course, the identifier may be any identifier and is not limited to the "1" provided as an example here. In this case, after receiving the notification signal carrying an identifier, the control unit may determine that a person is present in the vehicle based on the particular identifier.

[0126]

[0152] When the image captured by the camera does not include a face, a notification signal may be generated, and the generated notification signal is sent to the control unit. For example, the generated notification signal may be a signal indicating that the captured image does not include a face. After receiving the notification signal, the control unit may determine that a person is not present in the vehicle based on the signal indicating that the captured image does not include a face. Alternatively, for example, the generated notification signal may be a signal generated by the camera according to a preset signal generation rule based on the case where the captured image does not include a face, indicating that a person is not present in the vehicle. For example, the preset signal generation rule may be to mark a field in the generated signal as an identifier, such as "0", to indicate that a person is present in the vehicle. Of course, the identifier may be any identifier and is not limited to "0" provided as an example here. In this case, after receiving the notification signal carrying the identifier, the control unit may determine that a person is present in the vehicle based on the specific identifier.

[0127]

[0153] In a possible implementation, the camera may include an image capture component and an image processing component.

[0128]

[0154] Case 5: The target unit includes a vehicle-mounted T-box. Specifically, the vehicle-mounted T-box is capable of receiving a signal from a remote control unit. If the signal indicates the presence of a person in the vehicle or indicates enabling a basic service of the vehicle, the vehicle-mounted T-box generates a notification signal and transmits the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating the presence of a person in the vehicle based on the case indicating the presence of a person in the vehicle or indicating enabling a basic service of the vehicle, the signal being generated by the vehicle-mounted T-box according to a pre-set signal generation rule. For example, the pre-set signal generation rule may be to mark a field in the generated signal as an identifier, such as, for example, “1”, to indicate the presence of a person in the vehicle. Of course, the identifier may be any identifier and is not limited to “1” provided as an example here. In this case, after receiving the notification signal carrying the identifier, the control unit may determine that a person is present in the vehicle based on the specific identifier.

[0129]

[0155] In a possible implementation, when the cases in which the notification signal indicates that a person is present in the vehicle include multiple cases as described above, the control unit can determine whether or not a person is present in the vehicle by combining the notification signals of the multiple cases.

[0130]

[0156] For example, if the control unit determines that no person is present in the vehicle based on signals received from the vehicle lock controller, and determines that a person is present in the vehicle based on signals received from at least one of the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box, the control unit may comprehensively analyze and determine that a person is present in the vehicle, which may occur, for example, due to a user being seated in the vehicle and locking the vehicle lock.

[0131]

[0157] As another example, if the control unit determines that a person is present in the vehicle based on signals received from a vehicle lock controller, and determines that a person is not present in the vehicle based on signals received from at least one of a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box, the control unit may comprehensively analyze and determine that a person is not present in the vehicle, which may occur, for example, due to a user enabling the vehicle lock but not entering the vehicle.

[0132]

[0158] For example, if the control unit determines that no person is present in the vehicle based on signals received from the vehicle key controller, and determines that a person is present in the vehicle based on signals received from at least one of the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box, the control unit may comprehensively analyze and determine that a person is present in the vehicle. For example, this case may occur due to a user being seated in the vehicle, but the vehicle key not being placed in a dedicated device for placing vehicle keys.

[0133]

[0159] In conclusion, a priority of a signal from a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box is higher than a priority of a signal from a vehicle lock controller, and a presence of a person in the vehicle may be determined based on a signal received from at least one of the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box.

[0134]

[0160] In a possible implementation, if the target unit includes only a vehicle lock controller, the control unit may independently determine whether a person is present within the vehicle based on signals received from the vehicle lock controller.

[0135]

[0161] The above several comprehensive determination manners are merely examples and do not constitute limitations to the embodiments of the present application. In a specific implementation, the control unit can receive one or more notification signals. When multiple notification signals are received, whether there is a person in the vehicle can be determined after the multiple notification signals are comprehensively analyzed. The specific quantity of the received notification signals is not limited in the present application.

[0136]

[0162] Hereinafter, some implementations of the vehicle control method provided in the embodiments of the present application will be described by using concrete examples. In the following description, an example is used in which the software in the vehicle is upgraded via OTA. It is also applicable to the case where the vehicle software is upgraded by wired flashing. Details will not be described again hereinafter.

[0137]

[0163] Implementation 1: A signal line used for communication is additionally provided between the control unit and the target unit, and the signal line can transmit a notification signal from the target unit to the control unit in the process of upgrading software in the vehicle via OTA. When the CAN communication in the vehicle is disabled in the process of upgrading software via OTA, signals cannot be transmitted via the CAN bus. Therefore, the signal between the control unit and the target unit may be transmitted via another signal line. For example, one end of the signal line is connected to the control unit, and the other end of the signal line is connected to the target unit. For example, the signal line may be a hard line.

[0138]

[0164] For ease of understanding, please refer to, for example, Figures 4A, 4B, and 4C. In Figures 4A, 4B, and 4C, an "x" in a small block indicates that the CAN communication function is disabled.

[0139]

[0165] In FIG. 4A, the VDC in the control unit is used as an example. At least one of the target units, e.g., the vehicle lock controller and the seat controller, may be connected to the VDC via a signal line. In this case, in the aforementioned process of upgrading the software in the vehicle via OTA, the vehicle lock controller and / or the seat controller may send a notification signal to the VDC via the signal line to indicate whether there is a person in the vehicle. It should be noted that the target units, e.g., the camera or the vehicle key controller, may also be connected to the VDC via the signal line to transmit the notification signal. Details are not described here. In a specific implementation, one or more of the aforementioned target units, e.g., the vehicle lock controller, the seat controller, the camera, or the vehicle key controller, may be connected to the VDC through the signal line. The quantity of the target units connected to a specific signal line is not limited in this application.

[0140]

[0166] In FIG. 4B, the CDC in the control unit is used as an example. At least one of the target units, e.g., the vehicle lock controller and the seat controller, may be connected to the CDC via a signal line. In this case, in the aforementioned process of upgrading the software in the vehicle via OTA, the vehicle lock controller and / or the seat controller may send a notification signal to the CDC via the signal line to indicate whether there is a person in the vehicle. It should be noted that the target units, e.g., the camera or the vehicle key controller, may also be connected to the CDC via the signal line to transmit the notification signal. Details are not described here. In a specific implementation, one or more of the aforementioned target units, e.g., the vehicle lock controller, the seat controller, the camera, or the vehicle key controller, may be connected to the CDC through the signal line. The quantity of the target units connected to a specific signal line is not limited in this application.

[0141]

[0167] In FIG. 4C, the gateway (or VIU) in the control unit is used as an example. At least one of the target units, e.g., the vehicle lock controller and the seat controller, may be connected to the gateway (or VIU) through a signal line. In this case, in the aforementioned process of upgrading the software in the vehicle through OTA, the vehicle lock controller and / or the seat controller may send a notification signal to the gateway (or VIU) through the signal line to indicate whether there is a person in the vehicle. It should be noted that the target units, e.g., the camera or the vehicle key controller, may also be connected to the gateway (or VIU) through the signal line to transmit the notification signal. Details are not described here. In a specific implementation, one or more of the aforementioned target units, such as the vehicle lock controller, the seat controller, the camera, or the vehicle key controller, may be connected to the gateway (or VIU) through the signal line. The quantity of the target units connected to a specific signal line is not limited in this application.

[0142]

[0168] In a possible implementation, the target unit may be connected to one or more of the VDC, CDC, or gateway (or VIU) via a signal line. This is not limited in the present application. For ease of understanding, please refer to FIG. 4D. FIG. 4D is an example diagram in which the target unit (e.g., the vehicle lock controller and / or the seat controller) may be connected to one or more of the VDC, CDC, or gateway (or VIU) via a signal line. The solid arrows in FIG. 4D indicate that the vehicle lock controller and the seat controller are connected to the VDC via a signal line. The dashed arrows in FIG. 4D indicate that in another possible implementation, the vehicle lock controller, the seat controller, and the VDC may be further connected to another control unit (i.e., the CDC and / or the gateway (or VIU)) via a signal line.

[0143]

[0169] In a specific implementation, after determining that there is a person in the vehicle according to the received notification signal, the control unit can send a notification packet to the basic service unit in the vehicle to instruct the basic service unit to provide a basic service. For a specific implementation of determining that there is a person in the vehicle according to the received notification signal by the control unit, please refer to the corresponding description in S302. Details will not be described again here.

[0144]

[0170] It can be seen from the above description that in a possible implementation, when the control unit includes a VDC, the VDC can provide a service to a basic service unit such as an air conditioner. In this case, after determining that a person is present in the vehicle, the VDC sends a notification packet to the basic service unit such as an air conditioner. After receiving the notification packet, the basic service unit such as an air conditioner enables a certain basic service based on the notification packet, for example, enables the air conditioner. In a possible implementation, the VDC may send the notification packet to the basic service unit such as an air conditioner by using the UDS protocol. That is, the notification packet may be a UDS protocol packet.

[0145]

[0171] For example, when it is determined that a person is present in the vehicle, the notification packet sent by the VDC to a basic service unit such as an air conditioner may include information indicating that a person is present in the vehicle. In this case, the basic service unit such as an air conditioner enables the corresponding basic service based on the information indicating that a person is present in the vehicle. Alternatively, the notification packet may include information instructing the basic service unit such as an air conditioner to enable a service. In this case, the basic service unit such as an air conditioner enables the corresponding service based on the information instructing to enable the service. The same is true for the notification packet described below that instructs the basic service unit to provide a basic service. Details will not be described again.

[0146]

[0172] If the VDC determines that no person is present in the vehicle based on the received notification signal, the VDC may also send a notification packet to a basic service unit, such as an air conditioner. The notification packet instructs the basic service unit to disable the basic service. After receiving the notification packet, the basic service unit, such as an air conditioner, disables a specific basic service based on the notification packet, for example, disabling the air conditioner. In a possible implementation, the notification packet may be a UDS protocol packet.

[0147]

[0173] Similarly, for example, when it is determined that no person is present in the vehicle, the notification packet sent by the VDC to a basic service unit such as an air conditioner may include information indicating that no person is present in the vehicle. In this case, the basic service unit such as an air conditioner disables the corresponding basic service based on the information indicating that no person is present in the vehicle. Alternatively, the notification packet may include information instructing the basic service unit such as an air conditioner to disable the service. In this case, the basic service unit such as an air conditioner disables the corresponding service based on the information instructing to disable the service. The same is true for the notification packet described below that instructs the basic service unit to disable the basic service. Details will not be described again.

[0148]

[0174] It can be seen from the above description that in a possible implementation, when the control unit includes a CDC, the CDC can provide services to a basic service unit in the cockpit domain. The basic service unit in the cockpit domain includes, for example, a head-up display, a meter display, a radio, a navigator, or a camera. In this case, after determining that a person is present in the vehicle, the CDC sends a notification packet to the basic service unit in the cockpit domain. After receiving the notification packet, the basic service unit in the cockpit domain enables a specific basic service based on the notification packet, for example, enables a head-up display, a meter display, a radio, a navigator, or a camera. In a possible implementation, the CDC may send the notification packet to the basic service unit in the cockpit domain by using the UDS protocol. That is, the notification packet may be a UDS protocol packet.

[0149]

[0175] For example, when it is determined that a person is present in the vehicle, the notification packet sent by the CDC to the basic service unit in the cockpit domain may include information indicating that a person is present in the vehicle. In this case, the basic service unit in the cockpit domain enables the corresponding basic service based on the information indicating that a person is present in the vehicle. Alternatively, the notification packet may include information instructing the basic service unit in the cockpit domain to enable the service. In this case, the basic service unit in the cockpit domain enables the corresponding service based on the information instructing to enable the service.

[0150]

[0176] If the CDC determines that no person is present in the vehicle based on the received notification signal, the CDC may also send a notification packet to the basic service unit in the cockpit domain. The notification packet instructs the basic service unit to disable basic services. After receiving the notification packet, the basic service unit in the cockpit domain disables certain basic services based on the notification packet, for example, disabling the head-up display, the meter display, the radio, the navigator, or the camera. The notification packet may be a UDS protocol packet.

[0151]

[0177] Similarly, for example, when it is determined that no person is present in the vehicle, the notification packet sent by the CDC to the basic service unit in the cockpit domain may include information indicating that no person is present in the vehicle. In this case, the basic service unit in the cockpit domain disables the corresponding basic service based on the information indicating that no person is present in the vehicle. Alternatively, the notification packet may include information instructing the basic service unit in the cockpit domain to disable the service. In this case, the basic service unit in the cockpit domain disables the corresponding service based on the information instructing to disable the service.

[0152]

[0178] In a possible implementation, sending the notification packet by the CDC to a basic service unit in the cockpit domain may be sending the notification packet to one or more basic service units in the cockpit domain. The specific basic service units to which the CDC sends the notification packet are not limited in this application.

[0153]

[0179] In a possible implementation, if the control unit includes a gateway (or VIU), after determining that a person is present in the vehicle, the gateway (or VIU) may first send a notification packet to the VDC and / or CDC indicating that a person is present in the vehicle. Then, the VDC and / or CDC send a notification packet to a basic service unit in each domain of the VDC and / or CDC to provide a basic service. It can be seen from the above description of FIG. 1 that an Ethernet bus is connected between the gateway (or VIU) and the VDC, and an Ethernet bus is connected between the gateway (or VIU) and the CDC. Since the CAN communication is disabled in the OTA upgrade process, the gateway (or VIU) can send the notification packet to the VDC and / or CDC via the Ethernet bus. For example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC is a packet conforming to scalable service-oriented middleware over IP (SOME / IP).

[0154]

[0180] For the specific implementation of sending a notification packet by the VDC and / or CDC to instruct the basic service units in the respective domains of the VDC and / or CDC to provide basic services after receiving the notification packet from the gateway (or VIU), please refer to the above description, and the details will not be described again here.

[0155]

[0181] For example, when it is determined that a person is present in the vehicle, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may include information indicating the presence of a person in the vehicle. In this case, the VDC and / or CDC sends a notification packet to the basic service unit in the respective domain of the VDC and / or CDC to instruct the basic service unit to provide a basic service based on the information indicating the presence of a person in the vehicle. Alternatively, the notification packet may include information to instruct the basic service unit in the respective domain of the VDC and / or CDC to enable a service. In this case, the basic service unit in the respective domain of the VDC and / or CDC sends a notification packet to the basic service unit in the respective domain of the VDC and / or CDC to instruct the basic service unit to provide a basic service based on the instruction information for enabling the service.

[0156]

[0182] If the gateway (or VIU) determines that there is no person in the vehicle based on the received notification signal, the gateway (or VIU) may first send a notification packet to the VDC and / or CDC indicating that there is no person in the vehicle. Then, the VDC and / or CDC sends a notification packet to the basic service unit in the respective domain of the VDC and / or CDC to instruct the basic service to be disabled. Similarly, for example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC is a SOME / IP protocol packet.

[0157]

[0183] Similarly, for example, when it is determined that there is no person in the vehicle, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may include information indicating that there is no person in the vehicle. In this case, the VDC and / or CDC sends a notification packet to the basic service unit in the VDC and / or CDC's respective domain to instruct the basic service unit to disable the basic service based on the information indicating that there is no person in the vehicle. Alternatively, the notification packet may include information to instruct the basic service unit in the VDC and / or CDC's respective domain to disable the service. In this case, the VDC and / or CDC sends a notification packet to the basic service unit in the VDC and / or CDC's respective domain to instruct the basic service unit to disable the basic service based on the instruction information to disable the service.

[0158]

[0184] In a possible implementation, when the intelligent vehicle system includes a central controller, after determining that a person is present in the vehicle, the VDC, CDC, or gateway (or VIU) may first send a notification packet indicating that a person is present in the vehicle to the central controller. Then, the central controller sends a notification packet to each basic service unit instructing the basic service unit to provide the basic service. Similarly, for example, the notification packet sent by the VDC, CDC, or gateway (or VIU) to the central controller is a SOME / IP protocol packet. Also, for example, the notification packet sent by the central controller to the basic service unit may be a UDS protocol packet, etc.

[0159]

[0185] For example, when it is determined that a person is present in the vehicle, the notification packet sent by the VDC, CDC, or gateway (or VIU) to the central controller may include information indicating that a person is present in the vehicle. In this case, the central controller sends a notification packet to the basic service unit in each domain of the central controller to instruct the basic service unit to provide a basic service based on the information indicating that a person is present in the vehicle. Alternatively, the notification packet may include information to instruct the basic service unit in the central controller to enable a service. In this case, the central controller sends a notification packet to the basic service unit in the domain to instruct the basic service unit to provide a basic service based on the instruction information for enabling the service.

[0160]

[0186] When the VDC, CDC, or gateway (or VIU) determines that no person is present in the vehicle based on the received notification signal, the VDC, CDC, or gateway (or VIU) may first send a notification packet indicating that no person is present in the vehicle to the central controller. Then, the central controller sends a notification packet indicating that the basic service is to be disabled to each basic service unit. Similarly, for example, the notification packet sent by the VDC, CDC, or gateway (or VIU) to the central controller is a SOME / IP protocol packet. Also, for example, the notification packet sent by the central controller to the basic service unit may be a UDS protocol packet, etc.

[0161]

[0187] Similarly, for example, when it is determined that there is no person in the vehicle, the notification packet sent by the gateway (or VIU) to the central controller may include information indicating that there is no person in the vehicle. In this case, the central controller sends a notification packet to the basic service unit in the domain instructing the basic service unit to disable the basic service based on the information indicating that there is no person in the vehicle. Alternatively, the notification packet may include information to instruct the basic service unit in the central controller to disable the service. In this case, the central controller sends a notification packet to the basic service unit in the domain instructing the basic service unit to disable the basic service based on the instruction information to disable the service.

[0162]

[0188] To facilitate understanding of the above procedure in which the central controller controls the basic service unit to provide the basic service, please refer to FIG. 4E, for example. It can be seen from FIG. 4E that the VDC, CDC, or gateway (or VIU) can determine whether a person exists in the vehicle based on the notification signal from the target unit, and generate a corresponding notification packet based on the determination result. The notification packet can indicate whether a person exists in the vehicle. Then, the VDC, CDC, or gateway (or VIU) can send the notification packet to the central controller by using the SOME / IP protocol. Then, the central controller sends the notification packet to the basic service unit by using the UDS protocol, indicating whether a person exists in the vehicle. Then, the basic service unit can determine whether a person exists in the vehicle based on the notification packet, and enable the service if a person exists in the vehicle. Optionally, the basic service unit can further know based on the notification packet that the service is disabled or inhibited from being enabled if a person does not exist in the vehicle.

[0163]

[0189] It can further be seen from FIG. 4E that in another possible implementation, the central controller may alternatively send a notification packet to the VDC, CDC, or gateway (or VIU) indicating whether a person is present in the vehicle by using the UDS protocol, and instruct the basic service unit in the control domain of the VDC, CDC, or gateway (or VIU) to provide a basic service. The VDC, CDC, or gateway (or VIU) can determine whether a person is present in the vehicle based on the notification packet received from the central controller, and control the basic service unit in the domain to provide a basic service if a person is present in the vehicle. Optionally, if no person is present in the vehicle, the basic service unit in the control domain is disabled or inhibited from enabling the service.

[0164]

[0190] In the above implementation, the notification signal from the target unit to the control unit is transmitted through an additional signal line between the control unit and the target unit, so that in the above process of upgrading the software of the vehicle via OTA, the notification signal can be transmitted without relying on CAN communication. In this implementation, even if the CAN communication function of the entire vehicle is disabled in the OTA upgrade process, that is, the data flash in the OTA upgrade is not affected, the notification signal of the target unit can still be transmitted to the control unit, so that the basic service can still be provided in the OTA upgrade process, and the user experience is further improved.

[0165]

[0191] Implementation 2: Before the software in the vehicle is upgraded via OTA, the control unit and the target unit may receive a communication control packet instructing them to disable CAN communication and reserving CAN communication functionality between the target unit and the control unit based on a pre-configured configuration. In a possible implementation, in the vehicle, CAN communication functionality between the target unit and the control unit that is reserved based on a pre-configured configuration as well as CAN communication functionality between other vehicle components and the control unit are still disabled.

[0166]

[0192] In a possible implementation, for the target unit, the pre-set configuration indicates that the target unit is only authorized to send target notification signals to the control unit via the CAN network (i.e. via the CAN bus). For said control unit, the pre-set configuration indicates that the control unit is only authorized to receive target notification signals via the CAN network (i.e. via the CAN bus). The target notification signal is a notification signal from the target unit indicating whether or not a person is present in the vehicle.

[0167]

[0193] To facilitate understanding of Implementation 2, please refer to, for example, FIGS. 5A, 5B, and 5C.

[0168]

[0194] In FIG. 5A, the VDC in the control unit is used as an example. Before upgrading the software in the vehicle via OTA, the OTA module sends a communication control packet to the VDC and the target unit to instruct them to disable CAN communication. In FIG. 5A, one or more of the vehicle lock controller and the seat controller are the target units. Since the VDC and the target unit are pre-configured, the VDC and the target unit are allowed to maintain CAN communication in the OTA upgrade process. In addition, the gateway (or VIU) is also pre-configured and allowed to forward CAN packets between the VDC and the target components in the OTA upgrade process. Therefore, even if the VDC and the target unit receive a communication control packet to instruct them to disable CAN communication, the CAN communication can still be maintained between the VDC and the target unit in the OTA upgrade process.

[0169]

[0195] It should be noted that the target unit may further include, for example, a camera or a vehicle key controller. Details are not described here. In a specific implementation, one or more of the aforementioned target units, such as a vehicle lock controller, a seat controller, a camera, or a vehicle key controller, can maintain CAN communication with the VDC during the OTA upgrade process. This is not particularly limited in the present application.

[0170]

[0196] In a possible implementation, in FIG. 5A, the pre-performed configuration for the VDC, the target unit, and the gateway (or VIU) may be that only two of the VDC, the target unit, and the gateway (or VIU) are allowed to keep sending and receiving the target notification signal in the OTA upgrade process. In the OTA upgrade process, signals other than the target notification signal cannot be transmitted to the VDC through the CAN network. In other words, in the OTA upgrade process, only the CAN notification signal indicating whether there is a person in the vehicle is allowed to be processed, and the processing of other CAN signals is stopped, so that the impact on the UDS packet in the OTA upgrade process can be reduced, and whether there is a person in the vehicle can be sensed to provide the corresponding basic service.

[0171]

[0197] For example, the configuration performed for the VDC, the target unit, and the gateway (or VIU) may be that the logical addresses or network segments of the components authorized to perform CAN communication are configured in the VDC, the target unit, and the gateway (or VIU). For example, the logical address or network segment of the target unit authorized to perform CAN communication may be configured in the VDC. The logical address or network segment of the VDC authorized to perform CAN communication may be configured in the target unit. The logical addresses or network segments of the target unit and the VDC authorized to perform CAN communication may be configured in the gateway (or VIU). Then, in the OTA upgrade process, the target unit may send a target notification signal to the VDC based on the configured logical address or configured network segment of the VDC through the CAN network. The gateway (or VIU) may forward the target notification signal from the target unit to the VDC based on the configured logical address or configured network segment of the target unit and the configured VDC. The VDC receives the target notification signal based on the configured logical address or configured network segment of the target unit.

[0172]

[0198] In FIG. 5B, the CDC in the control unit is used as an example. Before upgrading the software in the vehicle via OTA, the OTA module sends a communication control packet to the CDC and the target unit to instruct them to disable CAN communication. In FIG. 5B, one or more of the vehicle lock controller and the seat controller are the target units. Since the CDC and the target unit are pre-configured, the CDC and the target unit are allowed to maintain CAN communication in the OTA upgrade process. In addition, the gateway (or VIU) is also pre-configured and allowed to forward CAN packets between the CDC and the target components in the OTA upgrade process. Therefore, even if the CDC and the target unit receive a communication control packet to instruct them to disable CAN communication, the CAN communication can still be maintained between the CDC and the target unit in the OTA upgrade process.

[0173]

[0199] It should be noted that the target unit may further include, for example, a camera or a vehicle key controller. Details are not described here. In a specific implementation, one or more of the aforementioned target units, such as a vehicle lock controller, a seat controller, a camera, or a vehicle key controller, can maintain CAN communication with the CDC during the OTA upgrade process. This is not particularly limited in the present application.

[0174]

[0200] In a possible implementation, in FIG. 5B, the pre-performed configuration for the CDC, the target unit, and the gateway (or VIU) may be such that only two of the CDC, the target unit, and the gateway (or VIU) are allowed to keep sending and receiving the target notification signal in the OTA upgrade process. In the OTA upgrade process, signals other than the target notification signal cannot be transmitted to the CDC via the CAN network. In other words, in the OTA upgrade process, only the CAN notification signal indicating whether there is a person in the vehicle is allowed to be processed, and the processing of other CAN signals is stopped, so that the impact on the UDS packet in the OTA upgrade process can be reduced, and whether there is a person in the vehicle can be sensed to provide the corresponding basic service.

[0175]

[0201] For example, the configuration performed for the CDC, the target unit, and the gateway (or VIU) may be that the logical addresses or network segments of the components authorized to perform CAN communication are configured in the CDC, the target unit, and the gateway (or VIU). For example, the logical address or network segment of the target unit authorized to perform CAN communication may be configured in the CDC. The logical address or network segment of the CDC authorized to perform CAN communication may be configured in the target unit. The logical addresses or network segments of the target unit and the CDC authorized to perform CAN communication may be configured in the gateway (or VIU). Then, in the OTA upgrade process, the target unit may send a target notification signal to the CDC based on the configured logical address or configured network segment of the CDC via the CAN network. The gateway (or VIU) may forward the target notification signal from the target unit to the CDC based on the configured logical address or configured network segment of the target unit and the configured VDC. The CDC receives the target notification signal based on the configured logical address or configured network segment of the target unit.

[0176]

[0202] In FIG. 5C, the gateway (or VIU) in the control unit is used as an example. Before upgrading the software in the vehicle via OTA, the OTA module sends a communication control packet to the gateway (or VIU) and the target unit to instruct them to disable CAN communication. In FIG. 5C, one or more of the vehicle lock controller and the seat lock controller are the target units. Since the gateway (or VIU) and the target unit are pre-configured, the gateway (or VIU) and the target unit are allowed to maintain CAN communication in the OTA upgrade process. Therefore, even if the gateway (or VIU) and the target unit receive a communication control packet to instruct them to disable CAN communication, the CAN communication can still be maintained between the gateway (or VIU) and the target unit in the OTA upgrade process.

[0177]

[0203] It should be noted that the target unit may further include, for example, a camera or a vehicle key controller. Details are not described here. In a specific implementation, one or more of the aforementioned target units, such as a vehicle lock controller, a seat controller, a camera, or a vehicle key controller, can maintain CAN communication with the gateway (or VIU) during the OTA upgrade process. This is not particularly limited in the present application.

[0178]

[0204] In a possible implementation, in FIG. 5C, the pre-configured settings for the gateway (or VIU) and the target unit may be such that only the two are allowed to keep sending and receiving the target notification signal in the OTA upgrade process. In the OTA upgrade process, no signals other than the target notification signal can be transmitted to the gateway (or VIU) through the CAN network. In other words, in the OTA upgrade process, only the CAN notification signal indicating whether there is a person in the vehicle is allowed to be processed, and the processing of other CAN signals is stopped, so that the impact on the UDS packet in the OTA upgrade process can be reduced, and whether there is a person in the vehicle can be sensed to provide the corresponding basic service.

[0179]

[0205] For example, the configuration performed on the target unit and the gateway (or VIU) may be that the logical addresses or network segments of the components allowed to perform CAN communication are configured in the target unit and the gateway (or VIU). For example, the logical address or network segment of the gateway (or VIU) allowed to perform CAN communication may be configured in the target unit. The logical address or network segment of the target unit allowed to perform CAN communication may be configured in the gateway (or VIU). Then, in the OTA upgrade process, the target unit can send a target notification signal to the gateway (or VIU) via the CAN network based on the configured logical address or configured network segment of the gateway (or VIU). The gateway (or VIU) can receive a target notification signal from the target unit based on the configured logical address or configured network segment of the target unit.

[0180]

[0206] In a possible implementation, before upgrading software in a vehicle via OTA, the OTA module can send a communication control packet to one or more of the VDC, CDC, or gateway (or VIU) in the control unit to instruct them to disable CAN communication, which is not particularly limited in the present application.

[0181]

[0207] In a possible implementation, before software in the vehicle is upgraded via OTA, the OTA module may partially disable CAN communication functions in the vehicle based on a pre-set configuration.

[0182]

[0208] In a specific implementation, the OTA controller of the vehicle broadcasts a communication control packet to the vehicle based on a preset configuration. The communication control packet instructs disabling all CAN communication functions in the vehicle except the target CAN communication function. The target CAN communication function includes a first CAN communication function for transmitting a target notification signal between the control unit and the target unit. The target unit is a vehicle component configured to sense whether a person is present in the vehicle. The target notification signal is a notification signal from the target unit indicating whether a person is present in the vehicle. The first CAN communication function is used to transmit the target notification signal to the control unit in a process of upgrading software in the vehicle via OTA.

[0183]

[0209] The target CAN communication function further includes a second CAN communication function for transmitting a target notification packet between the control unit and the basic service unit. The target notification packet is generated by the control unit based on the target notification signal. If the target notification signal indicates that a person is present in the vehicle, the target notification packet instructs the basic service unit to provide a basic service. The second CAN communication function is used to send the target notification packet to the basic service unit in a process of upgrading software in the vehicle via OTA.

[0184]

[0210] The aforementioned pre-set configuration may be a configuration in the OTA module of a logical address or a network segment of a component whose CAN communication function is required to be disabled in the OTA upgrade process. Alternatively, the aforementioned pre-set configuration may be a configuration in the OTA module of a logical address or a network segment of a component whose CAN communication function is required to be secured in the OTA upgrade process. The logical address or the network segment that secures the CAN communication function may be used to transmit the target notification signal and the target notification packet. Then, the OTA module broadcasts a communication control packet to the component whose corresponding CAN communication function is required to be disabled in the OTA upgrade process based on the set network segment or logical address. In this way, in the OTA upgrade process, the component in the vehicle disables the CAN communication function corresponding to the component based on the received communication control packet. In this way, in the OTA upgrade process, the influence of the CAN signal on the UDS signal is reduced.

[0185]

[0211] In a specific implementation, after determining that there is a person in the vehicle based on the target notification signal received through the CAN network, the control unit may send a notification packet to the basic service unit in the vehicle to instruct the basic service unit to provide a basic service. For a specific implementation of the control unit determining that there is a person in the vehicle based on the received notification signal, please refer to the corresponding description in S302. The details will not be described again here.

[0186]

[0212] In a possible implementation, the control unit is capable of sending a notification packet to the basic service unit via the UDS protocol, the notification packet being a UDS protocol packet.

[0187]

[0213] In another possible implementation, a pre-configured configuration may be performed on the basic service unit. The pre-configured configuration instructs the basic service unit to maintain the CAN communication function in the process of upgrading the software in the vehicle via OTA. In this way, in the process of upgrading the software in the vehicle via OTA, the basic service unit can receive a CAN notification packet from the control unit. In this case, even if the OTA module sends a communication control packet to the basic service unit to instruct it to disable CAN communication before the software in the vehicle is upgraded via OTA, the basic service unit is allowed to maintain the CAN communication in the OTA upgrade process because the basic service unit has been pre-configured. Thus, even if the basic service unit receives a communication control packet instructing it to disable CAN communication, the basic service unit can still maintain the CAN communication function in the OTA upgrade process.

[0188]

[0214] Optionally, in a possible implementation, the pre-set configuration of the basic service unit may be such that the basic service unit is only allowed to receive target notification packets from the control unit. The target notification packets are notification packets sent by the control unit indicating whether a person is present in the vehicle. Alternatively, the notification packets are notification packets sent by the control unit instructing the basic service unit to enable or disable. Packets other than the target notification packets cannot be transmitted to the basic service unit via the CAN network in the OTA upgrade process. In other words, in the OTA upgrade process, only the basic service unit is allowed to process the target notification packets transmitted via the CAN network, and the processing of other CAN packets is stopped, so that the impact on the UDS packets in the OTA upgrade process can be reduced and the basic service unit can sense whether a person is present in the vehicle to provide the corresponding basic service. In this respect, the control unit can transmit notification packets to the basic service unit via the CAN network, i.e. the notification packets can be CAN packets.

[0189]

[0215] For ease of understanding, the following will illustrate the case by using a concrete example.

[0190]

[0216] It can be seen from the above description that in a possible implementation, if the control unit includes a VDC, the VDC can provide services to a basic service unit such as an air conditioner. In this case, after determining that a person is present in the vehicle based on a target notification signal received via the CAN network, the VDC sends a notification packet to the basic service unit such as an air conditioner. After receiving the notification packet, the basic service unit such as an air conditioner enables a certain basic service based on the notification packet, e.g., enables the air conditioner.

[0191]

[0217] For example, a notification packet sent by a VDC to a basic service unit, such as an air conditioner, may be a notification packet indicating the presence of a person in the vehicle, or alternatively, the notification packet may be a notification packet instructing the basic service unit to enable a service.

[0192]

[0218] In a possible implementation, the VDC can send a notification packet to a basic service unit such as an air conditioner by using the UDS protocol, i.e. the notification packet can be a UDS protocol packet.

[0193]

[0219] In another possible implementation, it can be seen from the above description that in the process of upgrading the vehicle's software via OTA, the basic service unit can receive and process CAN packets from the control unit based on the pre-configured configuration. Thus, the VDC can send notification packets to the basic service unit, such as an air conditioner, via the CAN network. That is, the notification packets can be CAN packets.

[0194]

[0220] If the VDC determines that no person is present in the vehicle based on the received notification signal, the VDC may also send a notification packet to a basic service unit, such as an air conditioner. The notification packet instructs the basic service unit to disable the basic service. After receiving the notification packet, the basic service unit, such as an air conditioner, disables a specific basic service based on the notification packet, for example, disabling the air conditioner. In a possible implementation, the notification packet may be a UDS protocol packet. In another possible implementation, the notification packet may be a CAN packet. For example, the notification packet sent by the VDC to a basic service unit, such as an air conditioner, may be a notification packet indicating that no person is present in the vehicle. Alternatively, the notification packet may be a notification packet instructing the basic service unit to disable the service.

[0195]

[0221] It can be seen from the above description that in a possible implementation, if the control unit includes a CDC, the CDC can provide services to a basic service unit in the cockpit domain. The basic service unit in the cockpit domain can include, for example, a head-up display, a meter display, a radio, a navigator, or a camera. In this case, after determining that a person is present in the vehicle based on the target notification signal received via the CAN network, the CDC sends a notification packet to the basic service unit in the cockpit domain. After receiving the notification packet, the basic service unit in the cockpit domain enables a specific basic service based on the notification packet, for example, enabling the head-up display, the meter display, the radio, the navigator, or a camera.

[0196]

[0222] For example, a notification packet sent by the CDC to a basic service unit in the cockpit domain may be a notification packet indicating the presence of a person in the vehicle, or alternatively, the notification packet may be a notification packet instructing the basic service unit to enable a service.

[0197]

[0223] In a possible implementation, the CDC can send a notification packet to a basic service unit in the cockpit domain by using the UDS protocol, i.e., the notification packet can be a UDS protocol packet.

[0198]

[0224] In another possible implementation, it can be seen from the above description that in the process of upgrading the vehicle's software via OTA, the basic service unit can receive and process CAN packets from the control unit based on the pre-configured configuration. Thus, the CDC can send notification packets to the basic service unit in the cockpit domain via the CAN network. That is, the notification packets can be CAN packets.

[0199]

[0225] If the CDC determines that no person is present in the vehicle based on the received notification signal, the CDC may also send a notification packet to the basic service unit in the cockpit domain. The notification packet instructs the basic service unit to disable basic services. After receiving the notification packet, the basic service unit in the cockpit domain disables certain basic services based on the notification packet, for example, disabling the head-up display, the meter display, the radio, the navigator, or the camera. In a possible implementation, the notification packet may be a UDS protocol packet. In another possible implementation, the notification packet may be a CAN packet. For example, the notification packet sent by the CDC to the basic service unit in the cockpit domain may be a notification packet indicating that no person is present in the vehicle. Alternatively, the notification packet may be a notification packet instructing the basic service unit to disable a service.

[0200]

[0226] In a possible implementation, the sending of the notification packet by the CDC to the basic service unit in the cockpit domain may be sending the notification packet to one or more basic service units in the cockpit domain. The specific basic service units to which the CDC sends the notification packet are not limited in this application.

[0201]

[0227] In a possible implementation, if the control unit includes a gateway (or VIU), after determining that a person is present in the vehicle based on the target notification signal received via the CAN network, the gateway (or VIU) may first send a notification packet indicating that a person is present in the vehicle to the VDC and / or CDC. Then, the VDC and / or CDC send a notification packet (e.g., the notification packet may be a UDS protocol packet or a CAN packet) to the basic service unit in the respective domain of the VDC and / or CDC to provide a basic service. Similarly, the gateway (or VIU) may send the notification packet to the VDC and / or CDC via the Ethernet bus. For example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC is a packet conforming to scalable service-oriented middleware over IP (SOME / IP).

[0202]

[0228] For the specific implementation of sending a notification packet by the VDC and / or CDC to instruct the basic service units in the respective domains of the VDC and / or CDC to provide basic services after receiving the notification packet from the gateway (or VIU), please refer to the above description, and the details will not be described again here.

[0203]

[0229] For example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may be a notification packet indicating the presence of a person in the vehicle, or alternatively, the notification packet may be a notification packet instructing the basic service unit to enable a service.

[0204]

[0230] If the gateway (or VIU) determines that there is no person in the vehicle based on the received notification signal, the gateway (or VIU) may first send a notification packet (e.g., the notification packet may be a UDS protocol packet or a CAN packet) to the VDC and / or CDC indicating that there is no person in the vehicle. Then, the VDC and / or CDC sends a notification packet to the basic service unit in the respective domain of the VDC and / or CDC instructing to disable the basic service. Similarly, for example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC is a SOME / IP protocol packet. For example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may be a notification packet indicating that there is no person in the vehicle. Alternatively, the notification packet may be a notification packet instructing the basic service unit to disable the service.

[0205]

[0231] In a possible implementation, when the intelligent vehicle system includes a central controller, after determining that a person is present in the vehicle, the gateway (or VIU) may first send a notification packet indicating that a person is present in the vehicle to the central controller. Then, the central controller sends a notification packet (for example, the notification packet may be a UDS protocol packet or a CAN packet) to each basic service unit to instruct the basic service unit to provide the basic service. Similarly, for example, the notification packet sent by the gateway (or VIU) to the central controller is a SOME / IP protocol packet.

[0206]

[0232] To facilitate understanding of the above procedure in which the central controller controls the basic service unit to provide the basic service, please refer to FIG. 6 for example. It can be seen from FIG. 6 that the VDC, CDC, or gateway (or VIU) can determine whether there is a person in the vehicle based on the notification signal from the target unit, and generate a corresponding notification packet based on the determination result. The notification packet can indicate whether there is a person in the vehicle. Then, the VDC, CDC, or gateway (or VIU) can send the notification packet to the central controller by using the SOME / IP protocol. The central controller can then determine whether there is a person in the vehicle by using the CAN protocol. The central controller may first send the notification packet to the gateway (or VIU) by using the CAN protocol, and the gateway (or VIU) sends the notification packet to the basic service unit by using the CAN protocol after further routing. Then, the basic service unit can determine whether there is a person in the vehicle based on the notification packet, and enable the service if there is a person in the vehicle. Optionally, the basic service unit can further know based on the notification packet that the service is disabled or inhibited from being enabled if there is no person in the vehicle.

[0207]

[0233] It can further be seen from FIG. 6 that in another possible implementation, the central controller may alternatively send a notification packet to the VDC, CDC, or gateway (or VIU) indicating whether a person is present in the vehicle by using the CAN protocol, and instruct the basic service unit in the control domain of the VDC, CDC, or gateway (or VIU) to provide a basic service. The VDC, CDC, or gateway (or VIU) can determine whether a person is present in the vehicle based on the notification packet received from the central controller, and control the basic service unit in the domain to provide a basic service if a person is present in the vehicle. Optionally, if no person is present in the vehicle, the basic service unit in the control domain is disabled or inhibited from enabling the service.

[0208]

[0234] When the gateway (or VIU) determines that no person is present in the vehicle based on the received notification signal, the gateway (or VIU) may first send a notification packet indicating that no person is present in the vehicle to the central controller. Then, the central controller sends a notification packet (e.g., the notification packet may be a UDS protocol packet or a CAN packet) to each basic service unit to instruct the basic service unit to disable the basic service. Similarly, for example, the notification packet sent by the gateway (or VIU) to the central controller is a SOME / IP protocol packet.

[0209]

[0235] In the above implementation, in the process of upgrading software in a vehicle via OTA, a specified CAN communication function is reserved according to a preset configuration, so that the notification signal of the target unit can be notified to the control unit, and basic services can be provided in the OTA upgrade process. Also, in the vehicle software upgrade process, only the CAN communication function required to provide basic services can be reserved, and the CAN communication function of the vehicle components or other signals is still disabled. Therefore, the impact on data flashing in the vehicle software upgrade process can be reduced as much as possible. In other words, in the present application, if the impact on the vehicle software upgrade service is reduced as much as possible, basic services can be provided in the vehicle software upgrade process to improve user experience.

[0210]

[0236] The above mainly describes the vehicle control method provided in the embodiments of the present application. It can be understood that, to implement the corresponding functions described above, each apparatus or device includes a corresponding hardware structure and / or a corresponding software module for performing each function. In combination with the exemplary units and steps described in the embodiments disclosed in this specification, the present application can be implemented by hardware, or a combination of hardware and computer software. Whether the functions are performed by hardware or by hardware driven by computer software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use various methods to implement the described functions for each specific application, but the implementation should not be considered to go beyond the scope of the present application.

[0211]

[0237] In the embodiment of the present application, the device can be divided into functional modules based on the above-mentioned method example. For example, each functional module corresponding to each function may be obtained by division, or two or more functions may be integrated into one processing module. The integrated module may be implemented in the form of hardware, or in the form of a software function module. It should be noted that in the embodiment of the present application, the division into modules is an example, which is merely a logical division of functions, and may be other divisions in actual implementation.

[0212]

[0238] In the case where each functional module is obtained by division based on its corresponding function, FIG. 7 is a diagram of a possible logical structure of a control device 700 in a vehicle. The control device 700 may be the control unit mentioned above. The control device 700 includes a receiving module 701 and a control module 702.

[0213]

[0239] The receiving module 701 is configured to receive a signal from a target unit in a software upgrade process of the vehicle. The target unit is configured to sense whether a person is present in the vehicle. The receiving module 701 may be configured to perform step S301 shown in FIG.

[0214]

[0240] The control module 702 may be configured to control a basic service unit in the vehicle to provide basic services when the control module 702 determines based on the signal that a person is present in the vehicle. The control module 702 may be configured to perform step S302 shown in FIG.

[0215]

[0241] In a possible implementation, the control device 700 is connected to the target unit via a signal line.

[0216]

[0242] The signal line is configured to transmit signals from the target unit to the controller 700 during the vehicle software upgrade process.

[0217]

[0243] In a possible implementation, the receiving module 701 is further configured to receive a communication control packet, which instructs the control device 700 to disable the controller area network CAN communication function.

[0218]

[0244] The control device 700 further includes a reservation module configured to ensure CAN communication functionality between the control device 700 and the target unit based on a first preset configuration after the communication control packet is received.

[0219]

[0245] Specifically, the receiving module 701: It is configured to receive a signal from a target unit via a Controller Area Network, the signal being a CAN signal.

[0220]

[0246] In a possible implementation, a first pre-set configuration indicates that the control device 700 is only allowed to receive a target signal from a target unit via the controller area network, which is used to determine whether a person is present within the vehicle.

[0221]

[0247] In a possible implementation, the reservation module: The device is further configured to ensure CAN communication capability with the basic service unit based on a second preset configuration after the communication control packet is received.

[0222]

[0248] The control device 700 further includes a transmission module, and the control module 702 is configured to: Specifically configured to control the transmitting module to transmit a packet to the basic service unit via the controller area network, the packet instructing the basic service unit to provide the basic service, the packet being a CAN packet.

[0223]

[0249] In a possible implementation, the control device 700 further includes a transmission module, and the control module 702: The device is specifically configured to control the transmitting unit to transmit a packet to the basic service unit by utilizing a unified diagnostic service (UDS) protocol, the packet instructing the basic service unit to provide the basic service.

[0224]

[0250] In a possible implementation, the control device 700 includes one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

[0225]

[0251] In a possible implementation, the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

[0226]

[0252] In a possible implementation, the target unit includes a vehicle key controller, and the signals from the target unit include a signal from the vehicle key controller indicating whether a vehicle key is placed in the vehicle, the signal indicating that the vehicle key is placed in the vehicle indicating that a person is present in the vehicle, and the signal indicating that the vehicle key is not placed in the vehicle indicating that a person is not present in the vehicle.

[0227]

[0253] In a possible implementation, the target unit includes a seat controller, and the signals from the target unit include a signal from the seat controller indicating whether a person is present in a seat of the vehicle, the signal indicating the presence of a person in the seat of the vehicle indicating that a person is present in the vehicle, and the signal indicating the absence of a person in the seat of the vehicle indicating that a person is not present in the vehicle.

[0228]

[0254] In a possible implementation, the target unit includes a vehicle-mounted T-box and the signal from the target unit includes a signal from the vehicle-mounted T-box indicating whether a person is present within the vehicle.

[0229]

[0255] In a possible implementation, the target unit further includes a vehicle lock controller, and the signals from the target unit include a signal from the vehicle lock controller indicating that the vehicle lock of the vehicle is in an unlocked state or a locked state, the signal indicating that the vehicle lock of the vehicle is in an unlocked state indicating that a person is present in the vehicle, and the signal indicating that the vehicle lock of the vehicle is in a locked state indicating that a person is not present in the vehicle.

[0230]

[0256] In a possible implementation, signals from a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box have a higher priority than signals from a vehicle lock controller.

[0231]

[0257] Specifically, the control device 700 further includes a determining unit, and the determining unit is configured to determine that a person is present in the vehicle based on the signal. If a determination is made based on a signal from the vehicle lock controller indicating that no person is present in the vehicle, and if a determination is made based on a signal from the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box indicating that a person is present in the vehicle, then a determination is made that a person is present in the vehicle.

[0232]

[0258] For the specific operations and beneficial effects of the units in the control device 700 shown in Fig. 7, please refer to the corresponding descriptions in Fig. 3 and its possible method embodiments. The details will not be described again here.

[0233]

[0259] 8 is a diagram of a possible logical structure of a vehicle device 800 in the case where each functional module is obtained by division based on its corresponding function. The vehicle device 800 may be the target unit mentioned above. The vehicle device 800 includes a transmission module 801.

[0234]

[0260] The transmitting module 801 is configured to transmit a signal to a control unit of the vehicle when a software upgrade process of the vehicle senses the presence of a person in the vehicle, the signal instructing the control unit to control a basic service unit in the vehicle to provide basic services.

[0235]

[0261] In a possible implementation, the vehicle devices are connected to the control unit via signal lines.

[0236]

[0262] The signal line is configured to transmit a signal from the vehicle device to the control unit during a software upgrade process of the vehicle.

[0237]

[0263] In a possible implementation, the vehicle equipment: a receiving module configured to receive a communication control packet, the communication control packet instructing the vehicle device to disable a controller area network (CAN) communication function; and a reservation module configured to ensure a CAN communication function with the control unit based on a preset configuration after the communication control packet is received; Further includes.

[0238]

[0264] The transmitting module 801: The controller is specifically configured to transmit a signal to a control unit via a controller area network, the signal being a CAN signal.

[0239]

[0265] In a possible implementation, the pre-set configuration indicates that the vehicle devices are only allowed to transmit target signals to the control unit via the controller area network, where the target signals are used to determine whether a person is present within the vehicle.

[0240]

[0266] In a possible implementation, the control unit includes one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

[0241]

[0267] In possible implementations, the vehicle device is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

[0242]

[0268] For the specific operation and beneficial effects of the units in the vehicle device 800 shown in Fig. 8, please refer to the corresponding description in Fig. 3 and its possible method embodiments, and the details will not be described again here.

[0243]

[0269] 9 is a diagram of a possible logical structure of a control device 900 in a vehicle, in the case where each functional module is obtained by division based on its corresponding function. The control device 900 may be the OTA controller described above. The control device 900 includes a broadcast module 901.

[0244]

[0270] The broadcast module 901 is configured to broadcast a communication control packet to the vehicle based on a pre-configured configuration, the communication control packet instructing to disable all CAN communication functions except the target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between a target unit and the control unit of the vehicle, the target unit configured to sense whether a person is present in the vehicle, and the target signal being a signal from the target unit used to determine whether a person is present in the vehicle.

[0245]

[0271] The first CAN communication function is used to send target signals to the control unit during the vehicle's software upgrade process.

[0246]

[0272] In a possible implementation, the target CAN communication function further includes a second CAN communication function for transmitting target packets between the control unit and the basic service unit, the target packets instructing the basic service unit to provide the basic service.

[0247]

[0273] The second CAN communication function is used to send target packets to the basic service unit during the vehicle's software upgrade process.

[0248]

[0274] For the specific operations and beneficial effects of the units in the vehicle device 900 shown in Figure 9, please refer to the corresponding descriptions in the possible method embodiments, and the details will not be described again here.

[0249]

[0275] 10 is a diagram of a possible hardware configuration of a vehicle control device according to the present application. The control device may be a control unit in the method in the above-mentioned embodiment. The control device 1000 includes a processor 1001, a memory 1002, and a communication interface 1003. The processor 1001, the communication interface 1003, and the memory 1002 may be connected to each other or may be connected to each other via a bus 1004.

[0250]

[0276] For example, the memory 1002 is configured to store computer programs and data for the controller 1000. The memory 1002 may include, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), compact disc read-only memory (CD-ROM), and the like.

[0251]

[0277] The software or program code required for the functionality of all or some of the units of the control unit in the method embodiments described above is stored in memory 1002 .

[0252]

[0278] In a possible implementation, if software or program code required by the functions of some units is stored in memory 1002, the processor 1001, in addition to calling up the program code in memory 1002 to perform some function, can cooperate with another component (e.g., communication interface 1003) to jointly complete another function described in the method embodiment (e.g., data receiving or transmitting function).

[0253]

[0279] There may be multiple communication interfaces 1003, which are configured to support the control device 1000 in performing communications, such as receiving or transmitting data or signals.

[0254]

[0280] For example, the processor 1001 may be a central processing unit, a digital signal processor, an application specific integrated circuit, a field programmable gate array or another programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Alternatively, the processor may be a combination of processors performing computational functions, for example a combination of one or more microprocessors, or a combination of a digital signal processor and a microprocessor. The processor 1001 is capable of reading a program stored in the memory 1002 to perform the operations performed by the control unit in the method described in FIG. 3 and the possible embodiments of FIG. 3.

[0255]

[0281] In a specific implementation, the processor 1001 may be configured to read a program stored in the memory 1002, so that the control device 1000 performs the following operations: In a software upgrade process of the vehicle, a control unit of the vehicle receives a signal from a target unit, which is configured to sense whether a person is present in the vehicle; when the control unit determines that a person is present in the vehicle based on the signal, the control unit controls a basic service unit in the vehicle to provide a basic service.

[0256]

[0282] For the specific operations and beneficial effects of the units in the control device 1000 shown in Figure 10, please refer to the corresponding descriptions in the method embodiments. The details will not be described again here.

[0257]

[0283] 11 is a diagram of a possible hardware configuration of a vehicle device according to the present application. The vehicle device may be a target unit in the method of the above-mentioned embodiment. The vehicle device 1100 includes a processor 1101, a memory 1102, and a communication interface 1103. The processor 1101, the communication interface 1103, and the memory 1102 may be connected to each other or may be connected to each other via a bus 1004.

[0258]

[0284] For example, the memory 1102 is configured to store computer programs and data for the controller 1100. The memory 1102 may include, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), compact disc read-only memory (CD-ROM), and the like.

[0259]

[0285] The software or program code required for the functionality of all or some of the units of the target unit in the above described method embodiments is stored in memory 1102 .

[0260]

[0286] In a possible implementation, if software or program code required by the functions of some units is stored in memory 1102, the processor 1101, in addition to calling up the program code in memory 1102 to perform some function, can cooperate with another component (e.g., communication interface 1103) to jointly complete another function described in the method embodiment (e.g., data receiving or transmitting function).

[0261]

[0287] There may be multiple communication interfaces 1103 configured to support the control device 1100 in performing communications, such as receiving or transmitting data or signals.

[0262]

[0288] For example, the processor 1101 may be a central processing unit, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Alternatively, the processor may be a combination of processors performing computational functions, such as a combination of one or more microprocessors, or a combination of a digital signal processor and a microprocessor. The processor 1101 is capable of reading a program stored in the memory 1102 to perform the operations performed by the target unit in the method described in FIG. 3 and the possible embodiments of FIG. 3.

[0263]

[0289] In a specific implementation, the processor 1101 may be configured to read a program stored in the memory 1102, so that the vehicle device 1100 performs the following operations: In a vehicle software upgrade process, when the target unit detects the presence of a person in the vehicle, it sends a signal to the vehicle's control unit, and the signal instructs the control unit to control the basic service unit in the vehicle to provide basic services.

[0264]

[0290] For the specific operations and beneficial effects of the units in the control device 1100 shown in Figure 11, please refer to the corresponding descriptions in the method embodiments. The details will not be described again here.

[0265]

[0291] 12 is a diagram of a possible hardware configuration of a vehicle control device according to the present application. The control device may be an OTA controller in the method in the above embodiment. The control device 1200 includes a processor 1201, a memory 1202, and a communication interface 1203. The processor 1201, the communication interface 1203, and the memory 1202 may be connected to each other or may be connected to each other via a bus 1204.

[0266]

[0292] For example, the memory 1202 is configured to store computer programs and data for the controller 1200. The memory 1202 may include, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), compact disc read-only memory (CD-ROM), and the like.

[0267]

[0293] The software or program code required for the functionality of all or some units of the OTA controller in the above described method embodiments is stored in memory 1202.

[0268]

[0294] In a possible implementation, if software or program code required by the functions of some units is stored in memory 1202, the processor 1201, in addition to calling up the program code in memory 1202 to perform some function, can cooperate with another component (e.g., communication interface 1203) to jointly complete another function described in a method embodiment (e.g., a data receiving or transmitting function).

[0269]

[0295] There may be multiple communication interfaces 1203 configured to support the controller 1200 in performing communications, such as receiving or transmitting data or signals.

[0270]

[0296] For example, the processor 1201 may be a central processing unit, a digital signal processor, an application specific integrated circuit, a field programmable gate array or other programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Alternatively, the processor may be a combination of processors performing computational functions, such as a combination of one or more microprocessors, or a combination of a digital signal processor and a microprocessor. The processor 1201 may load a program stored in the memory 1202 to perform the operations performed by the OTA controller in the method described in FIG. 3 and the possible embodiments of FIG. 3.

[0271]

[0297] In a specific implementation, the processor 1201 may be configured to read a program stored in the memory 1202, so that the control device 1200 performs the following operations:

[0298] The vehicle's OTA controller broadcasts a communication control packet to the vehicle based on a pre-configured configuration, the communication control packet instructing to disable all CAN communication functions in the vehicle except for a target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between a target unit and a control unit of the vehicle, the target unit configured to sense whether a person is present in the vehicle, the target signal being a signal from the target unit used to determine whether a person is present in the vehicle; the first CAN communication function is used to send the target signal to the control unit in a software upgrade process of the vehicle.

[0272]

[0299] For the specific operations and beneficial effects of the units in the control device 1200 shown in Figure 12, please refer to the corresponding descriptions in the method embodiments. The details will not be described again here.

[0273]

[0300] An embodiment of the present application further provides a vehicle, which includes at least one of the control device 1000 shown in FIG. 10, the vehicle device 1100 shown in FIG. 11, or the control device 1200 shown in FIG.

[0274]

[0301] An embodiment of the present application further provides a computer-readable storage medium, which stores a computer program, which, when executed by a processor, performs the operations performed by the control unit in any one of the above-mentioned embodiments and possible embodiments of the above-mentioned embodiments.

[0275]

[0302] An embodiment of the present application further provides a computer readable storage medium, which stores a computer program, which, when executed by a processor, performs the operations performed by the target unit in any one of the above-mentioned embodiments and possible implementations of the above-mentioned embodiments.

[0276]

[0303] An embodiment of the present application further provides a computer-readable storage medium, which stores a computer program, which, when executed by a processor, performs the operations performed by the OTA controller in any one of the above-mentioned embodiments and possible implementations of the above-mentioned embodiments.

[0277]

[0304] An embodiment of the present application further provides a computer program software, which, when loaded and executed by a computer, performs the operations performed by the control unit in any one of the above embodiments and possible embodiments.

[0278]

[0305] An embodiment of the present application further provides a computer program software, which, when loaded and executed by a computer, performs the operations performed by the target unit in any one of the above embodiments and possible embodiments.

[0279]

[0306] An embodiment of the present application further provides a computer program software, which, when loaded and executed by a computer, performs the operations performed by the OTA controller in any one of the above embodiments and possible embodiments.

[0280]

[0307] In conclusion, in the present solution, the signal from the target unit can still be received during the vehicle's software upgrade process, so that when the received signal indicates that there is a person in the vehicle, the basic service unit in the vehicle can be controlled to provide basic services to the user. Compared with the existing solution in which the vehicle's services are not available during the vehicle's upgrade process, the present solution can meet the user's basic service requirements during the vehicle's software upgrade process, thereby improving the user experience.

[0281]

[0308] In this application, terms such as "first" and "second" are used to distinguish between the same or similar items having essentially the same function. It should be understood that "first", "second", and "nth" do not have a logical or chronological sequential dependency, and do not limit the quantity or execution order. It should also be understood that although the following description uses terms such as "first" and "second" to describe various elements, these elements should not be limited by the terms. These terms are used merely to distinguish one element from another.

[0282]

[0309] It should be further understood that in the embodiments of the present application, the sequence numbers of the processes do not mean the execution order, and the execution order of the processes should be determined based on the functions and internal logic of the processes, and should not be construed as any limitation on the implementation process of the embodiments of the present application.

[0283]

[0310] It is to be further understood that the term "include" (in the first, second or plural subject) as used herein (also referred to as "includes," "including," "comprises," and / or "comprising") specifies the presence of stated features, entities, steps, operations, elements, and / or components and does not exclude the presence or addition of one or more other features, entities, steps, operations, elements, components, and / or components thereof.

[0284]

[0311] It should be further understood that the references throughout the specification to "one embodiment," "embodiment," and "possible implementations" mean that a particular feature, structure, or characteristic associated with an embodiment or implementation is included in at least one embodiment of the application. Thus, the appearances of "in one embodiment" or "in an embodiment" or "possible implementations" throughout the specification do not necessarily refer to the same embodiment. Furthermore, these particular features, structures, or characteristics may be combined in any suitable manner in one or more embodiments.

[0285]

[0312] Finally, it should be noted that the above embodiments do not limit the present application, but are only intended to describe the technical solutions of the present application. Although the present application has been described in detail with reference to the above embodiments, those skilled in the art should understand that, without departing from the scope of the technical solutions of the embodiments of the present application, further modifications can be made to the technical solutions described in the above embodiments, or equivalent substitutions can be made to all or part of the technical features thereof.

Claims

1. 1. A method of controlling a vehicle, comprising: In a software upgrade process of a vehicle, a control unit of the vehicle receives a signal from a target unit, the target unit being configured to sense whether a person is present in the vehicle; and when determining based on the signal that a person is present in the vehicle, the control unit controls a basic service unit in the vehicle to provide a basic service; The method includes:

2. 2. The method of claim 1, wherein the control unit is connected to the target unit via a signal line; The method of claim 1, wherein the signal line is configured to transmit the signal from the target unit to the control unit during the software upgrade process of the vehicle.

3. 13. The method of claim 1 : receiving, by the control unit, a communication control packet instructing the control unit to disable a controller area network (CAN) communication function; and After receiving the communication control packet, the control unit ensures a CAN communication function between the control unit and the target unit based on a first preset configuration; and wherein the step of the control unit of the vehicle receiving a signal from a target unit comprises: the control unit receiving a signal from the target unit via a controller area network, the signal being a CAN signal; A method comprising:

4. 4. The method of claim 3, wherein the first pre-set configuration indicates that the control unit is only authorized to receive target signals from the target unit via the controller area network, the target signals being used to determine whether a person is present within the vehicle.

5. 5. The method according to claim 3 or 4, After receiving the communication control packet, the control unit ensures a CAN communication function with the basic service unit based on a second preset configuration; The step of the control unit controlling a basic service unit in the vehicle to provide a basic service further includes: the control unit sending a packet to the basic service unit via the controller area network, the packet instructing the basic service unit to provide a basic service, the packet being a CAN packet; A method comprising:

6. 5. The method according to claim 1, wherein the step of the control unit controlling a basic service unit in the vehicle to provide a basic service comprises: the control unit sending a packet to the basic service unit by utilizing a unified diagnostic service (UDS) protocol, the packet instructing the basic service unit to provide a basic service; A method comprising:

7. 7. The method according to claim 1, wherein the control unit comprises one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

8. 8. The method according to any one of claims 1 to 7, wherein the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

9. 9. The method of claim 8, wherein the target unit includes the vehicle key controller; and the signals from the target unit include a signal from the vehicle key controller indicating whether a key for the vehicle has been placed in the vehicle, wherein a signal indicating that the key for the vehicle has been placed in the vehicle indicates the presence of a person in the vehicle, and a signal indicating that the key for the vehicle has not been placed in the vehicle indicates the absence of a person in the vehicle.

10. 10. A method according to claim 8 or 9, wherein the target unit includes the seat controller; and the signals from the target unit include a signal from the seat controller indicating whether a person is present in the seat of the vehicle, the signal indicating the presence of a person in the seat of the vehicle indicating that a person is present in the vehicle, and the signal indicating the absence of a person in the seat of the vehicle indicating that a person is not present in the vehicle.

11. 11. The method of claim 8, wherein the target unit includes a vehicle-mounted T-box, and the signal from the target unit includes a signal from the vehicle-mounted T-box indicating whether a person is present in the vehicle.

12. 12. A method according to any one of claims 9 to 11, wherein the target unit further comprises the vehicle lock controller; and the signals from the target unit comprise a signal from the vehicle lock controller indicating that a vehicle lock of the vehicle is in an unlocked state or a locked state, the signal indicating that a vehicle lock of the vehicle is in the unlocked state indicating that a person is present in the vehicle, and the signal indicating that a vehicle lock of the vehicle is in the locked state indicating that a person is not present in the vehicle.

13. 13. The method of claim 12, wherein a signal from the vehicle key controller, the seat controller, the camera, or the vehicle mounted T-box has a higher priority than a signal from the vehicle lock controller; and Determining a presence of a person within the vehicle based on the signal includes: the control unit makes a determination that a person is present in the vehicle when a determination is made based on a signal from the vehicle lock controller indicating that a person is not present in the vehicle and a determination is made based on a signal from the vehicle key controller, the seat controller, the camera, or the vehicle mounted T-box indicating that a person is present in the vehicle.

14. 14. The method of any one of claims 1 to 13, wherein the basic service unit comprises one or more of an air conditioner, a speaker, a vehicle-mounted infotainment screen, a horn, windshield wipers, vehicle lights, or a dashboard in a vehicle.

15. 1. A method of controlling a vehicle, comprising: In a software upgrade process of a vehicle, when a target unit senses whether a person exists in the vehicle, sending a signal to a control unit of the vehicle, the signal instructing the control unit to control a basic service unit in the vehicle to provide a basic service; The method includes:

16. 16. The method of claim 15, wherein the target unit is connected to the control unit via a signal line; The method of claim 1, wherein the signal line is configured to transmit the signal from the target unit to the control unit during the software upgrade process of the vehicle.

17. 17. The method of claim 15 or 16, wherein the method comprises: receiving, by the target unit, a communication control packet, the communication control packet instructing the target unit to disable a controller area network (CAN) communication function; and After receiving the communication control packet, the target unit ensures a CAN communication function with the control unit based on a preset configuration; and wherein the step of the target unit transmitting a signal to a control unit of the vehicle further comprises: the target unit transmitting the signal to the control unit via a controller area network, the signal being a CAN signal; A method comprising:

18. 20. The method of claim 17, wherein the pre-set configuration indicates that the target unit is only authorized to transmit a target signal to the control unit via the controller area network, the target signal being used to determine whether a person is present within the vehicle.

19. 19. The method according to any one of claims 15 to 18, wherein the control unit comprises one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

20. 20. The method of any one of claims 15 to 19, wherein the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

21. 1. A method of controlling a vehicle, comprising: a step of an OAT controller of a vehicle broadcasting a communication control packet to the vehicle based on a preset configuration, the communication control packet instructing to disable all CAN communication functions in the vehicle except a target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between a target unit and a control unit of the vehicle, the target unit being configured to sense whether a person is present in the vehicle, the target signal being a signal from the target unit used to determine whether a person is present in the vehicle; The method of claim 1, wherein the first CAN communication function is used to transmit the target signal to the control unit during a software upgrade process of the vehicle.

22. 22. The method of claim 21, wherein the target CAN communication function further comprises a second CAN communication function for transmitting target packets between the control unit and a basic service unit, the target packets instructing the basic service unit to provide a basic service; and The method of claim 1, wherein the second CAN communication function is used to transmit the target packet to the basic service unit during a software upgrade process of the vehicle.

23. A vehicle control device disposed in a vehicle, the vehicle control device comprising: a receiving module configured to receive a signal from a target unit in a software upgrade process of the vehicle, the target unit being configured to sense whether a person is present within the vehicle; and a control module configured to control a basic service unit in the vehicle to provide a basic service when a control module determines based on the signal that a person is present in the vehicle; A control device including:

24. 24. The control device of claim 23, wherein the control device is connected to the target unit via a signal line; The signal line is configured to transmit the signal from the target unit to the control device during the software upgrade process of the vehicle.

25. 24. The control device of claim 23, The receiving module is further configured to receive a communication control packet, the communication control packet instructing the control device to disable a controller area network (CAN) communication function; and The control device further includes a reservation module configured to reserve a CAN communication function between the control device and the target unit based on a first preset configuration after the communication control packet is received; The receiving module specifically includes: A controller configured to receive a signal from the target unit via a controller area network, the signal being a CAN signal.

26. 26. The control device of claim 25, wherein the first preset configuration indicates that the control device is only authorized to receive target signals from the target unit via the controller area network, the target signals being used to determine whether a person is present within the vehicle.

27. 27. The control device according to claim 25 or 26, The reservation module is further configured to reserve a CAN communication function with the basic service unit based on a second preset configuration after the communication control packet is received; and The control device further includes a transmission module, the control module comprising: A control device, specifically configured to control the transmitting module to transmit a packet to the basic service unit via the controller area network, the packet instructing the basic service unit to provide a basic service, the packet being a CAN packet.

28. 27. The control device of any one of claims 23 to 26, wherein the control device further comprises a transmission module, the control module comprising: A control device, specifically configured to control the sending module to send packets to the basic service unit by utilizing a Unified Diagnostic Service (UDS) protocol, the packets instructing the basic service unit to provide a basic service.

29. 29. The control device according to any one of claims 23 to 28, wherein the control device comprises one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

30. 30. The control device of any one of claims 23 to 29, wherein the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

31. 31. The control device of claim 30, wherein the target unit includes the vehicle key controller; and the signals from the target unit include a signal from the vehicle key controller indicating whether a key for the vehicle has been placed in the vehicle, the signal indicating that the key for the vehicle has been placed in the vehicle indicating that a person is present in the vehicle, and the signal indicating that the key for the vehicle has not been placed in the vehicle indicating that a person is not present in the vehicle.

32. A control device as claimed in claim 30 or 31, wherein the target unit includes the seat controller; and the signal from the target unit includes a signal from the seat controller indicating whether a person is present in the seat of the vehicle, the signal indicating the presence of a person in the seat of the vehicle indicating that a person is present in the vehicle, and the signal indicating the absence of a person in the seat of the vehicle indicating that a person is not present in the vehicle.

33. 33. A control device as claimed in any one of claims 30 to 32, wherein the target unit includes a vehicle-mounted T-box, and the signal from the target unit includes a signal from the vehicle-mounted T-box indicating whether a person is present in the vehicle.

34. 34. A control device as claimed in any one of claims 30 to 33, wherein the target unit further comprises the vehicle lock controller; and the signals from the target unit include a signal from the vehicle lock controller indicating that the vehicle lock of the vehicle is in an unlocked state or a locked state, the signal indicating that the vehicle lock of the vehicle is in the unlocked state indicating that a person is present in the vehicle, and the signal indicating that the vehicle lock of the vehicle is in the locked state indicating that a person is not present in the vehicle.

35. 35. The control device of claim 34, wherein a signal from the vehicle key controller, the seat controller, the camera, or the vehicle mounted T-box has a higher priority than a signal from the vehicle lock controller; and Specifically, the control device further includes a determination unit, and the determination unit is configured to determine that a person is present in the vehicle based on the signal, the determination unit being configured to: A control device which determines, based on a signal from the vehicle lock controller, that no person is present in the vehicle, and when it determines, based on a signal from the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box, that a person is present in the vehicle, determines that a person is present in the vehicle.

36. 13. A vehicle apparatus comprising: A vehicle device comprising: a transmitting module configured to transmit a signal to a control unit of the vehicle when a software upgrade process of the vehicle senses the presence of a person in the vehicle, the signal instructing the control unit to control a basic service unit in the vehicle to provide a basic service.

37. 37. The vehicle apparatus of claim 36, wherein the vehicle apparatus is connected to the control unit via a signal line; The signal line is configured to transmit the signal from the vehicle device to the control unit during the software upgrade process of the vehicle.

38. 38. The vehicle arrangement of claim 36 or 37, a receiving module configured to receive a communication control packet instructing the vehicle device to disable a controller area network (CAN) communication function; and a reservation module configured to reserve a CAN communication function with the control unit based on a preset configuration after the communication control packet is received; and wherein the transmitting module further includes: A vehicle device specifically configured to transmit said signal to said control unit via a Controller Area Network, said signal being a CAN signal.

39. 40. The vehicle device of claim 38, wherein the pre-set configuration indicates that the vehicle device is only authorized to transmit a target signal to the control unit via the controller area network, the target signal being used to determine whether a person is present within the vehicle.

40. 40. A vehicle device according to any one of claims 36 to 39, wherein the control unit comprises one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.

41. 41. The vehicle device of any one of claims 36 to 40, wherein the vehicle device is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle mounted T-box of the vehicle.

42. A vehicle control device comprising: a broadcast module configured to broadcast a communication control packet to the vehicle based on a preset configuration, the communication control packet instructing to disable all CAN communication functions in the vehicle except a target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between a target unit and a control unit of the vehicle, the target unit configured to sense whether a person is present in the vehicle, the target signal being a signal from the target unit used to determine whether a person is present in the vehicle; The first CAN communication function is used to transmit the target signal to the control unit during a software upgrade process of the vehicle.

43. 43. The control device of claim 42, wherein the target CAN communication function further comprises a second CAN communication function for transmitting target packets between the control unit and a basic service unit, the target packets instructing the basic service unit to provide a basic service; and A control device, wherein the second CAN communication function is used to transmit the target packet to the basic service unit during a software upgrade process of the vehicle.

44. A vehicle comprising a control device and a vehicle equipment, the control device being a control device as claimed in any one of claims 23 to 35, and the vehicle equipment being a vehicle equipment as claimed in any one of claims 36 to 41.

45. A computer-readable storage medium storing a computer program, The computer program, when executed by a processor, for carrying out the method according to any one of claims 1 to 14; or The computer program, when executed by a processor, for carrying out the method according to any one of claims 15 to 20; or A storage medium, the computer program being executed by a processor to perform the method according to claim 21 or 22.

Images