Upgrade methods, devices, and systems

The OTA server or control unit in intelligent vehicles adapts upgrade policies based on user identities, ensuring safe and seamless software updates for multiple users.

JP2026104911APending Publication Date: 2026-06-25YINWANG INTELLIGENT TECHNOLOGIES CO LTD

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Applications
Current Assignee / Owner
YINWANG INTELLIGENT TECHNOLOGIES CO LTD
Filing Date
2026-04-09
Publication Date
2026-06-25

AI Technical Summary

Technical Problem

Existing Over-the-Air (OTA) software upgrade systems for intelligent connected vehicles do not consider multiple users, affecting their driving experience and safety, as only the vehicle owner can perform upgrades without involving other users.

Method used

An OTA server or control unit determines upgrade operations based on the identification results of the vehicle owner and authorized users, ensuring each user's experience and safety by flexible implementation policies.

Benefits of technology

Ensures a reliable driving experience and improves safety for all users by allowing authorized users to participate in OTA upgrades without needing to know the upgrade process details.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 2026104911000001_ABST
    Figure 2026104911000001_ABST
Patent Text Reader

Abstract

Upgrade methods, devices, and systems are provided in the field of Internet of Vehicle technology. [Solution] This method includes the steps of obtaining status information of a terminal device, wherein the status information includes the identification result of a first user and / or the identification result of a second user, wherein the first user is the owner of the terminal device and the second user is an authorized user of the terminal device, and performing an upgrade operation of the terminal device based on the status information. This method helps to flexibly implement the OTA upgrade process of a terminal device in a multi-user scenario and ensures a reliable user experience for each user.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of Internet of Vehicles technology, and particularly to an upgrade method, device, and system.

Background Art

[0002] With the continuous development of the vehicle industry, vehicles are becoming increasingly electrified, intelligent, networked, and shared, so the software functions of vehicles are becoming increasingly complex. The software of vehicles is updated faster than the hardware of vehicles.

[0003] Currently, using Over-the-Air Technology (OTA) to remotely wirelessly upgrade the software of vehicles has become an essential function of intelligent connected vehicles. The procedure for performing an upgrade operation on the software of a vehicle is usually carried out by the vehicle owner (i.e., the owner of the vehicle) without considering other users other than the vehicle owner. Other users do not have the authority to perform an upgrade operation on the software of the vehicle, nor do they know how to process the upgrade operation information. This affects the driving experience of other users and also brings a major safety risk.

[0004] Therefore, how to implement OTA of intelligent connected vehicles in a multi-user scenario is still an important problem that needs to be urgently solved.

Summary of the Invention

[0005] This application provides an upgrade method, device, and system that can flexibly implement OTA upgrades of intelligent connected vehicles in a multi-user scenario, ensure the driving experience of vehicle users, and help improve driving safety.

Means for Solving the Problems

[0006] According to a first aspect, one embodiment of the present application provides an upgrade method. The method may be performed by an OTA server. The OTA server may be implemented as a communication device. This communication device may be a standalone device, a chip or component within a device, or software, and may be deployed in a cloud, roadside device, remote server, local server, etc. The product form and deployment method of the OTA server are not limited in this application.

[0007] This upgrade method may include the steps of obtaining status information of a terminal device, wherein the status information includes the identification result of a first user and / or the identification result of a second user, where the first user is the owner of the terminal device and the second user is an authorized user of the terminal device; and performing an upgrade operation of the terminal device based on the status information.

[0008] According to the method described above, in order to implement OTA for intelligent connected vehicles in a multi-user scenario and ensure a consistent user experience for each user, the OTA server can flexibly perform upgrade operations on the terminal device, including, but not limited to, determining the OTA content based on the identification results of the first user and / or the second user, downloading the OTA upgrade package, installing the OTA upgrade package, and activating the OTA upgrade package.

[0009] For example, the terminal device may be a vehicle, the first user may be the vehicle owner, and the second user may be an authorized user of the vehicle other than the vehicle owner. According to the upgrade method of this embodiment of the present application, in order to carry out the vehicle's OTA upgrade process, the OTA server can flexibly determine the specific implementation policy for the terminal device's OTA upgrade process based on the identification results of the vehicle owner and / or the identification results of the authorized user, for example, how to deliver upgrade operation information for the terminal device. Vehicle OTA is carried out in a multi-user scenario, ensuring a reliable driving experience for each user of the vehicle and improving driving safety.

[0010] In this embodiment of the present application, when the owner of the terminal device is a corporate user rather than an individual user, the first user may be understood as a specific user designated by the corporate user, for example, as an administrator user, and the second user may be understood as an authorized user other than the administrator user designated by the corporate user.

[0011] Referring to the first aspect, a method for obtaining status information of a terminal device in a possible implementation is as follows: obtaining status information based on usage management information of the terminal device; receiving first instruction information from the terminal device, wherein the first instruction information indicates and receives the identification result of a first user and / or the identification result of a second user; or receiving second instruction information from the first user, wherein the second instruction information indicates and receives the identification result of a first user and / or the identification result of a second user.

[0012] According to the method described above, in order to help determine the specific implementation policy for the OTA upgrade process of terminal devices, the OTA server can flexibly obtain status information of terminal devices in multiple ways and consider various cases as comprehensively as possible.

[0013] Generally, the owner of a terminal device has all the rights to dispose of the terminal device and is best familiar with how the OTA upgrade process for the terminal device should be carried out. In this embodiment of the present application, in order to ensure the smooth execution of the terminal device upgrade operation, the OTA server can determine how to perform the upgrade operation on the terminal device based on the relationship between the first user and the terminal device. This embodiment of the present application may include the following examples.

[0014] In one example, the identification result of the first user may include the presence of the first user within the terminal device or the presence of the first user in the default location of the terminal device, and the step of performing an upgrade operation on the terminal device based on the status information includes the step of sending terminal device upgrade operation information to the terminal device. In this way, in order to complete the smooth implementation of the terminal device OTA upgrade process, the first user, whether within the terminal device or in the default location of the terminal device, can perform subsequent related processing based on the upgrade operation information received by the terminal device.

[0015] In this embodiment of the present application, it should be noted that the default location of a terminal device can be understood in various ways in various scenarios. For example, if the terminal device is a vehicle in an Internet of Vehicles scenario, the default location of the terminal device may be a default location within the terminal device, such as the driver's location. In a mobile services scenario (including a remote driving scenario), the default location of the terminal device may be an external location associated with the terminal device, such as an external location from which the terminal device can be remotely controlled or monitored. This is not limited to this embodiment of the present application.

[0016] In another example, the identification result for the first user may include that the first user is not present in the terminal device, or that the first user is present in the terminal device but is not in the terminal device's default location, and the step of performing a terminal device upgrade operation based on the status information includes the step of sending terminal device upgrade operation information to the first user.

[0017] Therefore, if the first user is not on the terminal device or is not in the terminal device's default location, the OTA server can send terminal device upgrade operation information to the first user, who then processes the upgrade operation information. In this way, other users of the terminal device do not need to know how the terminal device's upgrade operation information is processed, nor do they need to have the authority to process this information, allowing them to use the terminal device with the utmost care. This ensures a reliable user experience for other users.

[0018] In another example, the identification result for the second user may include the presence of the second user within the terminal device, and the step of performing an upgrade operation on the terminal device based on the status information includes the step of sending terminal device upgrade operation information to the first user or terminal device.

[0019] Therefore, when a first user allows a second user to use a terminal device, in order to ensure the second user's user experience and the smooth execution of the terminal device's OTA upgrade process, the OTA server will determine that the first user or terminal device is the recipient of the terminal device's upgrade operation information, and the first user will have as much control over the terminal device's OTA upgrade process as possible, so that other users of the terminal device do not need to know how the terminal device's upgrade operation information is handled, do not need to have the authority to handle this information, and can use the terminal device with the utmost care. This ensures a reliable user experience for other users.

[0020] It should be noted that in this embodiment of the present application, the first user may also grant the second user the authority to process upgrade operation information for the terminal device. Accordingly, when making a decision, the OTA server may also use the second user as one of the recipients of the upgrade operation information based on the first user's authorization information for the second user, so that the second user performs the upgrade operation for the terminal device through interaction with the second user.

[0021] Referring to the first embodiment, in one possible implementation, the upgrade method may further include the step of transmitting a third instruction information to a terminal device, wherein the third instruction information indicates the identification result of a first user and / or the identification result of a second user.

[0022] According to the method described above, the OTA server can further send third instruction information to the terminal device to instruct the identification results of the first user and / or the second user, so that the terminal device can determine how to perform the upgrade operation based on the identification results. For example, the terminal device can output upgrade operation information, and the corresponding user on the terminal device can perform the OTA upgrade process of the terminal device based on the upgrade operation information. Alternatively, the terminal device can send upgrade operation information to the first user, and the first user can perform the OTA upgrade process of the terminal device based on the upgrade operation information. Or, after obtaining permission from the first user, the terminal device can send upgrade operation information to the second user, and the second user can perform the OTA upgrade process of the terminal device based on the upgrade operation information. Therefore, in order to ensure a reliable user experience for each user, the terminal device can flexibly perform the OTA upgrade operation in various cases.

[0023] According to a second aspect, one embodiment of the present application provides an upgrade method. This method may be performed by an OTA control unit. The OTA control unit may be implemented as a communication device. The communication device may be a standalone device, a chip or component within a device, or software. The communication device may be configured within a terminal device. For example, the communication device may be an application, which may be installed or run on a chip or component within the terminal device, or on an intelligent device such as a mobile phone or tablet computer within the terminal device. Alternatively, the communication device may be a software module, which may be deployed in each electronic control unit (ECU) of the terminal device. Alternatively, the communication device may be a hardware module newly added to the terminal device. The relevant decision logic or algorithm may be configured within this hardware module, which may function as an ECU within the terminal device to implement the upgrade method of this embodiment of the present application, and which may transfer information to another ECU via an internal communication network. The product form and deployment method of the OTA control unit are not limited in this embodiment of the present application.

[0024] In one optional implementation, the terminal device may be a vehicle. The communication device corresponding to the OTA control unit may be an Internet of Vehicle Intelligent Terminal (Telematics BOX, T-BOX), also called a Telematics Control Unit (TCU), which may integrate functional modules such as a Global Positioning System (GPS), an external communication interface, an ECU, a microcontroller, a mobile communication unit, and memory. The T-BOX may be internally connected to an in-vehicle bus (i.e., the terminal device's internal communication network, e.g., a CAN bus), and externally, by using a cloud platform, it can exchange information between vehicle terminals, handheld devices, roadside units (RSUs), and public networks that communicate using V2V, V2R, V2H, V2S, etc.

[0025] This upgrade method may include the steps of: receiving upgrade operation information for the terminal device from an OTA server; obtaining status information for the terminal device, wherein the status information includes the identification result of a first user and / or the identification result of a second user, the first user being the owner of the terminal device and the second user being an authorized user of the terminal device; and performing an upgrade operation for the terminal device based on the status information and the upgrade operation information.

[0026] According to the foregoing method, in order to flexibly execute the OTA upgrade operation of the terminal device and implement the OTA of the intelligent connected vehicle in a multi-user scenario, after receiving the upgrade operation information, the OTA control unit can determine how to process the upgrade operation information based on the status information of the terminal device. For example, when the terminal device is a vehicle, the first user is the vehicle owner, and the second user is an authorized user of the vehicle other than the vehicle owner. According to the upgrade method of this embodiment of the present application, in order to implement the OTA upgrade process of the vehicle, the OTA control unit can flexibly determine the specific implementation policy of the OTA upgrade process of the terminal device based on the identification result of the vehicle owner and / or the identification result of the authorized user. For example, it can determine how to output the upgrade operation information of the terminal device. The OTA of the vehicle can be implemented in a multi-user scenario, ensuring the driving experience of each user of the vehicle and improving driving safety.

[0027] Referring to the second aspect, in a possible implementation, the method of obtaining the status information of the terminal device includes one or more of the following: receiving the first instruction information from the OTA server, where the first instruction information instructs the identification result of the first user and / or the identification result of the second user; obtaining the identification result of the first user and / or the identification result of the second user based on the usage management information of the terminal device; obtaining the identification result of the first user and / or the identification result of the second user based on the detection result of the terminal device; or obtaining the identification result of the first user and / or the identification result of the second user based on the input information received by the terminal device.

[0028] According to the foregoing method, in order to help determine the specific implementation policy of the OTA upgrade process of the terminal device, the OTA control unit can flexibly obtain the status information of the terminal device in multiple ways and comprehensively consider various cases as much as possible.

[0029] Generally, the owner of a terminal device has all the rights to dispose of the terminal device and is most familiar with how to implement the OTA upgrade process of the terminal device. In this embodiment of the present application, in order to ensure the smooth implementation of the upgrade operation of the terminal device, the OTA control unit can determine how to execute the upgrade operation on the terminal device based on the relationship between the first user and the terminal device. This embodiment of the present application may include the following examples.

[0030] In one example, the identification result of the first user may include that the first user exists in the terminal device or the first user exists at the default position of the terminal device, and the step of executing the upgrade operation of the terminal device based on the situation information and the upgrade operation information is the step of sending second instruction information to a first device associated with the first user in the terminal device, where the second instruction information instructs to output the upgrade operation information on the first device, and includes the step. In a possible implementation, the step of sending second instruction information to a first device associated with the first user in the terminal device includes the step of sending second instruction information to the first device via a second device in the terminal device. In this way, in order to complete the smooth implementation of the OTA upgrade process of the terminal device, the first user who is in the terminal device or at the default position of the terminal device can execute subsequent related processing based on the upgrade operation information received by the terminal device. For the related description of the default position of the terminal device, please refer to the foregoing related description. Details will not be described again here.

[0031] In another example, the identification result of the first user may include that the first user does not exist in the terminal device or the first user exists in the terminal device and the first user is not at the default position of the terminal device, and the step of executing the upgrade operation of the terminal device based on the situation information and the upgrade operation information includes the step of sending the upgrade operation information of the terminal device to the first user.

[0032] Therefore, if the first user is not present on the terminal device, or is not in the default location on the terminal device, the OTA control unit can send terminal device upgrade operation information to the first user, who then processes the upgrade operation information. In this way, other users of the terminal device do not need to know how the terminal device's upgrade operation information is processed, nor do they need to have the authority to process this information, allowing them to use the terminal device with the utmost care. This ensures a reliable user experience for other users.

[0033] In another example, the identification result for the second user may include the presence of the second user within the terminal, and the step of performing an upgrade operation on the terminal device based on the status information and the upgrade operation information includes the step of sending the upgrade operation information to the first user or the terminal device.

[0034] Therefore, when a first user allows a second user to use a terminal device, in order to ensure the second user's user experience and the smooth execution of the terminal device's OTA upgrade process, the OTA control unit will, when it is necessary to perform the terminal device's OTA upgrade process, determine that the first user or terminal device is the recipient of the terminal device's upgrade operation information, and ensure that other users of the terminal device do not need to know how the terminal device's upgrade operation information is processed, do not need to have the authority to process this information, and can use the terminal device with the utmost care. This ensures a reliable user experience for other users.

[0035] It should be noted that in this embodiment of the present application, the first user may also grant a second user the authority to process upgrade operation information for the terminal device. Accordingly, when making a decision, the OTA control unit may also use the second user as one of the recipients of the upgrade operation information based on the first user's authorization information to the second user, so that the second user performs the upgrade operation for the terminal device through interaction with the second user.

[0036] According to a third aspect, one embodiment of the present application provides an upgrade method. The method can be applied to a first human-machine interface (HMI), the first HMI may be, for example, an HMI of a terminal device, and the method may include the steps of: receiving upgrade operation information; outputting upgrade operation information; obtaining input information in response to the upgrade operation information, the input information being used to permit a second HMI to output the upgrade operation information; and transmitting output control information based on the input information, the output control information instructing the second HMI to output the upgrade operation information.

[0037] According to the method described above, the first HMI of the terminal device outputs upgrade operation information, receives input information in accordance with the upgrade operation information, and transmits output control information based on the input information. As a result, the upgrade operation information is output on the second HMI, and the user on the second HMI side performs the upgrade operation on the terminal device.

[0038] In this embodiment of the present application, it will be understood that in specific implementations, the first HMI may have only input / output functions. In one example, the output control information may be upgrade operation information, and the first HMI transmitting the output control information based on input information may be, for example, the first HMI transmitting the upgrade operation information to the second HMI via the terminal device's OTA control unit. In another example, the output control information is control information instructing the second HMI to output the upgrade operation information. The first HMI transmitting the output control information based on input information may be, for example, the first HMI transmitting the output control information to the second HMI via the terminal device's OTA control unit. Alternatively, in another embodiment, the first HMI can directly transmit the upgrade operation information or output control information to the second HMI and synchronize the relevant information of the transmission operation with the terminal device's OTA control unit so that the OTA control unit knows the path of the upgrade operation information or output control information. The method of transmitting the upgrade operation information or output control information is not limited in this embodiment of the present application.

[0039] In this embodiment of the present application, it will be understood that, in specific implementation, the first HMI of a terminal device may be an HMI within the terminal device or an external HMI associated with the terminal device, for example, an external HMI that can remotely control or monitor the terminal device. This is not limited to this embodiment of the present application. Similarly, the second HMI may be an HMI within the terminal device or an external HMI associated with the terminal device. For example, the first HMI may be an HMI within the terminal device and the second HMI may be an HMI within the terminal device other than the first HMI. Or, for example, the first HMI may be an HMI within the terminal device and the second HMI may be an external HMI associated with the terminal device. Another example is that the first HMI is an external HMI associated with the terminal device and the second HMI is an HMI within the terminal device. Another example is that both the first and second HMIs are external HMIs associated with the terminal device.

[0040] According to a fourth aspect, one embodiment of the present application provides an upgrade method. The method can be applied to an intelligent terminal of a first user, the first user being the owner of the terminal device, and the method includes the steps of: receiving upgrade operation information from an OTA server or the terminal device; outputting the upgrade operation information; obtaining input information in response to the upgrade operation information, wherein the input information is used to authorize another device other than the intelligent terminal to perform an upgrade operation on the terminal device; and transmitting operation control information to the OTA server or the terminal device based on the input information, wherein the operation control information instructs the other device to perform an upgrade operation on the terminal device. For example, the operation control information may be input information, or the operation control information may be control information instructing the other device to perform an upgrade operation on the terminal device.

[0041] According to the method described above, in order to flexibly perform upgrade operations on terminal devices, the first user's intelligent terminal can output upgrade operation information, receive input information in accordance with the upgrade operation information, and send operation control information to the OTA server or terminal device. The OTA server or terminal device then makes a decision based on the operation control information and determines which terminal device will receive the upgrade operation information.

[0042] According to a fifth aspect, one embodiment of the present application provides a communication device comprising: an acquisition unit configured to obtain status information of a terminal device, wherein the status information includes an identification result of a first user and / or an identification result of a second user, where the first user is the owner of the terminal device and the second user is an authorized user of the terminal device; and an upgrade control unit configured to perform an upgrade operation of the terminal device based on the status information.

[0043] Referring to the fifth aspect, in one possible implementation, a method for obtaining status information of a terminal device by an acquisition unit is as follows: obtaining status information based on usage management information of a terminal device; receiving first instruction information from a terminal device using a communication unit, wherein the first instruction information indicates and is received as a result of identifying a first user and / or identifying a second user; or receiving second instruction information from a first user using a communication unit, wherein the second instruction information indicates and is received as a result of identifying a first user and / or identifying a second user.

[0044] Referencing the fifth aspect, in one possible implementation, the identification result of the first user includes the presence of the first user within the terminal device or the presence of the first user in a default location within the terminal device, and the upgrade control unit is configured to transmit terminal device upgrade operation information to the terminal device using a communication unit.

[0045] Referencing the fifth aspect, in one possible implementation, the identification result of the first user includes the fact that the first user is not present in the terminal device, or that the first user is present in the terminal device but is not in the default location of the terminal device, and the upgrade control unit is configured to send terminal device upgrade operation information to the first user using a communication unit.

[0046] Referring to the fifth aspect, in one possible implementation, the identification result of the second user includes the presence of the second user within the terminal device, and the upgrade control unit is configured to use a communication unit to transmit terminal device upgrade operation information to the first user or terminal device.

[0047] Referring to the fifth aspect, in one possible implementation, the upgrade control unit is further configured to use a communication unit to transmit third instruction information to a terminal device, the third instruction information indicating the identification result of a first user and / or a second user.

[0048] According to a sixth aspect, one embodiment of the present application provides a communication unit configured to receive upgrade operation information for a terminal device from an OTA server; an acquisition unit configured to obtain status information for a terminal device, wherein the status information includes an identification result for a first user and / or an identification result for a second user, the first user being the owner of the terminal device and the second user being an authorized user of the terminal device; and an upgrade control unit configured to perform an upgrade operation for the terminal device based on the status information and the upgrade operation information.

[0049] Referring to the sixth aspect, in one possible implementation, a method for obtaining status information of a terminal device is as follows: receiving first instruction information from an OTA server, wherein the first instruction information indicates the identification result of a first user and / or the identification result of a second user; obtaining the identification result of a first user and / or the identification result of a second user based on terminal device usage management information; obtaining the identification result of a first user and / or the identification result of a second user based on terminal device detection results; or obtaining the identification result of a first user and / or the identification result of a second user based on input information received by the terminal device.

[0050] Referencing the sixth aspect, in one possible implementation, the identification result of the first user includes the presence of the first user within the terminal device or the presence of the first user in a default location within the terminal device, and the upgrade control unit is configured to transmit, using a communication unit, second instruction information to a first device associated with the first user within the terminal device, the second instruction information instructing the first device to output upgrade operation information.

[0051] Referring to the sixth aspect, in one possible implementation, the step of using a communication unit to transmit second instruction information to a first device associated with a first user in a terminal device includes the step of using a communication unit to transmit the second instruction information to the first device via a second device in the terminal device.

[0052] Referencing the sixth aspect, in one possible implementation, the identification result of the first user includes the fact that the first user is not present in the terminal device, or that the first user is present in the terminal device but is not in the default location of the terminal device, and the upgrade control unit is configured to send upgrade operation information to the first user using a communication unit.

[0053] Referencing the sixth aspect, in one possible implementation, the identification result of the second user includes the presence of the second user within the terminal, and the upgrade control unit is configured to transmit upgrade operation information to the first user or terminal device using a communication unit.

[0054] According to a seventh aspect, one embodiment of the present application provides a human-machine interface (HMI) comprising: a communication unit configured to receive upgrade operation information; an output unit configured to output upgrade operation information; and an input unit configured to obtain input information in response to the upgrade operation information, the input information being used to authorize a second HMI to output the upgrade operation information. The communication unit is further configured to transmit output control information based on the input information, the output control information instructing the second HMI to output the upgrade operation information.

[0055] According to the eighth aspect, one embodiment of the present application provides an intelligent terminal comprising: a communication unit configured to receive upgrade operation information for a terminal device from an OTA server or a first user, wherein the first user is the owner of the terminal device; an output unit configured to output upgrade operation information; and an input unit configured to obtain input information in response to the upgrade operation information, wherein the input information is used to authorize another device other than the intelligent terminal to perform an upgrade operation for the terminal device. The communication unit is further configured to transmit operation control information to the OTA server or terminal device based on the input information, wherein the operation control information instructs another device to perform an upgrade operation for the terminal device. For example, the operation control information may be input information, or the operation control information may be control information instructing another device to perform an upgrade operation for the terminal device.

[0056] According to the ninth aspect, one embodiment of the present application provides a communication device. The communication device includes a communication interface configured to communicate with another device and a processor coupled to the communication interface, thereby enabling the communication device to perform a method according to any one of the first aspect and a possible implementation thereof, or a method according to any one of the second aspect and a possible implementation thereof, or a method according to any one of the third aspect and a possible implementation thereof, or a method according to any one of the fourth aspect and a possible implementation thereof.

[0057] According to the tenth aspect, one embodiment of the present application provides a computer-readable storage medium. The computer-readable storage medium stores a computer program, and when the computer program is executed on a computer, the computer is able to perform a method according to any one of the first aspect and a possible implementation thereof, or a method according to any one of the second aspect and a possible implementation thereof, or a method according to any one of the third aspect and a possible implementation thereof, or a method according to any one of the fourth aspect and a possible implementation thereof.

[0058] According to the eleventh aspect, one embodiment of the present application provides a computer program product. The computer program product includes a computer program, which, when executed on a computer, enables the computer to perform a method according to any one of the first aspect and a possible implementation thereof, or a method according to any one of the second aspect and a possible implementation thereof, or a method according to any one of the third aspect and a possible implementation thereof, or a method according to any one of the fourth aspect and a possible implementation thereof.

[0059] According to a twelfth aspect, one embodiment of the present application provides a chip including a processor. The processor is coupled to memory and configured to execute a computer program or instruction stored in memory. When the computer program or instruction is executed, a method according to any one of the first aspect and a possible implementation thereof is performed, or a method according to any one of the second aspect and a possible implementation thereof, or a method according to any one of the third aspect and a possible implementation thereof, or a method according to any one of the fourth aspect and a possible implementation thereof.

[0060] According to the 13th aspect, one embodiment of the present application provides a terminal device. The terminal device may be configured to perform a method according to any one of the first aspect and a possible implementation of the first aspect, or to perform a method according to any one of the second aspect and a possible implementation of the second aspect, or to perform a method according to any one of the third aspect and a possible implementation of the third aspect, or to perform a method according to any one of the fourth aspect and a possible implementation of the fourth aspect. For example, the terminal device includes, but is not limited to, intelligent transport devices (e.g., automobiles, ships, unmanned aerial vehicles, trains, or trucks), intelligent manufacturing devices (e.g., robots, industrial devices, intelligent logistics, or smart factories), or intelligent terminals (e.g., mobile phones, computers, tablet computers, palmtop computers, desktop computers, headsets, acoustic devices, wearable devices, or in-vehicle devices).

[0061] According to a fourteenth aspect, one embodiment of the present application provides a vehicle. The vehicle may include an OTA control unit configured to implement a method according to either the second aspect or a possible implementation of the second aspect, or a method according to either the fourth aspect or a possible implementation of the fourth aspect.

[0062] In one optional implementation, the vehicle may include an HMI. The HMI may be configured to output upgrade operation information for the vehicle and / or to obtain input information in response to the upgrade operation information.

[0063] According to the 15th aspect, one embodiment of the present application provides a communication system. The communication system may include one or more of the following communication devices: a communication device that performs a method according to any one of the first aspect and a possible implementation of the first aspect; a communication device that performs a method according to any one of the second aspect and a possible implementation of the second aspect; a communication device that performs a method according to any one of the third aspect and a possible implementation of the third aspect; or a communication device that performs a method according to any one of the fourth aspect and a possible implementation of the fourth aspect.

[0064] In this embodiment of the present application, further combinations can be made to provide more implementations based on the implementations described above.

[0065] For technical effects that can be achieved in any one of the fifth through fifteenth embodiments, please refer to the description of the technical effects that can be achieved in any one of the possible implementations of the first embodiment. No repetition of this description will be provided. [Brief explanation of the drawing]

[0066] [Figure 1] This is a diagram of a system architecture according to one embodiment of the present application. [Figure 2] This is a schematic flowchart of an upgrade method according to one embodiment of this application. [Figure 3] This is a diagram of a system architecture applied to an Internet of Vehicles scenario according to one embodiment of the present application. [Figure 4A] This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 4B]This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 5A] This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 5B] This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 6A] This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 6B] This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 7] This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 8] This is a flowchart of a method applied to an Internet of Vehicles scenario according to one embodiment of this application. [Figure 9] This is a diagram of a communication device according to one embodiment of the present application. [Figure 10] This is a diagram of a communication device according to one embodiment of the present application. [Figure 11] This is a diagram of a communication device according to one embodiment of the present application. [Figure 12] This is a diagram of a communication device according to one embodiment of the present application. [Modes for carrying out the invention]

[0067] Embodiments of this application provide an upgrade method. To help flexibly implement OTA for intelligent connected vehicles in multi-user scenarios, ensuring a reliable driving experience for vehicle users and improving driving safety, the upgrade operation of terminal devices is flexibly performed based on status information of the terminal devices. This method and apparatus are based on the same technical concept. This method and apparatus have similar principles for solving the problem. Therefore, the implementation of this method and apparatus should be mutually referenced. Details of repeated parts are not described. In addition, in the embodiments of this application, unless there is a special explanation or logical inconsistency, the terminology and / or descriptions of the embodiments are consistent and mutually referential. Based on the internal logical relationships between the technical features, it is also possible to combine the technical features of various embodiments to form new embodiments.

[0068] Figure 1 is a diagram of a system architecture to which one embodiment of this application can be applied.

[0069] Please refer to Figure 1. The scenario includes an OTA server 110, a terminal device 120, and an intelligent terminal 130 of a first user (e.g., the owner of the terminal device). In an optional implementation, an intelligent terminal 140 of a second user (e.g., an authorized user of the terminal device) may also be included in the scenario. Any two of the OTA server 110, terminal device 120, intelligent terminal 130, or intelligent terminal 140 can communicate with each other. The communication method may be wired or wireless. This is not limited to this embodiment of the present application.

[0070] The OTA server 110 can trigger the OTA upgrade procedure on the terminal device 120.

[0071] For example, when the OTA server 110 learns that the terminal device 120 is capable of performing a software upgrade, it obtains upgrade operation information for the terminal device 120, determines a specific implementation plan for the OTA upgrade process of the terminal device based on the status information of the terminal device 120, and can selectively send the upgrade operation information to one of the devices: the terminal device 120, the first user's intelligent terminal 130, or the second user's intelligent terminal 140. This allows the OTA server 110 and at least one of the terminal device 120, intelligent terminal 130, or intelligent terminal 140 to cooperate in performing the upgrade operation on the terminal device 120.

[0072] For example, the upgrade operation information may include, but is not limited to, one or more of the following: OTA activity content reminder, OTA activity content confirmation, OTA execution start reminder, OTA upgrade package download reminder, or OTA process (including processes such as downloading, installing, and starting the OTA file package). After receiving the upgrade operation information, one of the terminal device 120, the first user's intelligent terminal 130, and / or the second user's intelligent terminal 140 may output the upgrade operation information, and the corresponding user on the device side can perform subsequent related operations based on the upgrade operation information output by the device in order to complete the upgrade operation on terminal device 120. In addition, during the process of performing the OTA upgrade on terminal device 120, the first user or the second user can further find out the progress of the upgrade using terminal device 120 or the first user's or the second user's intelligent terminal 130 / 140.

[0073] For example, during the process of a first user using terminal device 120, the terminal device can receive and output upgrade operation information from the OTA server. Based on the upgrade operation information, the first user can perform subsequent related processes, such as checking the OTA activity details, confirming the start of the OTA upgrade, confirming the download of the OTA upgrade package, and confirming that the related processes for performing the OTA upgrade are being executed on terminal device 120. In addition, the first user can monitor the status of the OTA upgrade.

[0074] As another example, the intelligent terminal 130 of the first user or the intelligent terminal 140 of the second user can receive and output upgrade operation information from the OTA server using SMS messages, email, applications, etc. The first user or the second user can perform subsequent related processes based on the upgrade operation information to remotely confirm that the terminal device 120 has started the related processes for performing the OTA upgrade, for example, by checking the OTA activity, confirming the start of the OTA upgrade, and confirming the download of the OTA upgrade package. In addition, the first user or the second user can monitor the status of the OTA upgrade on their intelligent terminal.

[0075] Based on the system architecture shown in Figure 1, embodiments of this application provide an upgrade method.

[0076] Figure 2 is a schematic flowchart of an upgrade method according to one embodiment of the present application. This method can be carried out in cooperation with an OTA server 110 and at least one of the terminal devices 120 shown in Figure 1, a first user's intelligent terminal 130, or a second user's intelligent terminal 140. As shown in Figure 2, the upgrade method may include the following steps.

[0077] S210: The OTA server obtains status information for the terminal device.

[0078] S220: The OTA server performs upgrade operations on terminal devices based on status information.

[0079] In this embodiment of the present application, the status information of the terminal device can indicate the usage status of the terminal device, and the status information may include, but is not limited to, the identification result of a first user and / or the identification result of a second user.

[0080] For example, the first user is the owner of the terminal device, and the second user is an authorized user of the terminal device. The identification result of the first user may include, but is not limited to, whether the first user allows the OTA server to obtain status information of the terminal device, how the first user allows the OTA server to obtain status information of the terminal device, whether the first user allows the second user to use the terminal device, how the first user allows the second user to use the terminal device, the relationship between the first user and the terminal device, for example, whether the first user is located within the terminal device, the specific location of the first user on the terminal device, and whether the first user is located in the default location on the terminal device, or the positional relationship between the first user and the second user. The identification results of the second user may include, but are not limited to, whether the second user is authorized to use the terminal device, how the second user is authorized to use the terminal device, the relationship between the second user and the terminal device, such as the functional rights of the second user who is authorized to use the terminal device, the amount of time the second user is authorized to use the terminal device, whether the second user is located within the terminal device, the specific location of the second user within the terminal device, and whether the second user is located in the default location on the terminal device, or the positional relationship between the second user and the first user.

[0081] Here, an example is used to illustrate the identification results for the first user and the second user, but this does not constitute any limitation on the identification results. In another embodiment, any information that can be used to identify the relationship between the first user, the second user, and the terminal device can be used as an identification result and can be used to assist the OTA server in making decisions to flexibly implement OTA upgrade procedures for terminal devices in multi-user scenarios. In various scenarios, the default location of the terminal device can be understood in various ways. For example, if the terminal device is a vehicle in an Internet of Vehicles scenario, the default location of the terminal device may be a default location within the terminal device, such as the driver's location. In a mobile services scenario (including a remote driving scenario), the default location of the terminal device may be an external location associated with the terminal device, such as an external location from which the terminal device can be remotely controlled or monitored. This is not limited to this embodiment of the present application.

[0082] In this embodiment of the present application, when S210 is performed, status information of the terminal device can be obtained in multiple ways. For example, the methods of obtaining the information may include one or more of the following:

[0083] (1) The OTA server obtains terminal device status information based on terminal device usage management information.

[0084] In this example, terminal device usage management information can be used to record all users of the terminal device, as well as each user's permissions, such as permitted functions, permitted usage time, permitted operational permissions, and other information. Terminal device status information can be obtained based on the usage management information.

[0085] Generally, the owner of a terminal device has all rights to dispose of the terminal device, including all usage rights and the total usage time, and can permit other users to use some or all of the terminal device's functions, as well as permit other users to use the terminal device's usage time and operational rights. Usage management information can record the usage information of all users in association. For example, User A* represents the owner of terminal device α, and Users B and C represent the two authorized users of terminal device α, and the usage management information may be as shown in Table 1, for example.

[0086] [Table 1]

[0087] In Table 1, α represents the terminal device identifier, A*, B, and C represent user identifiers, and * is the owner identifier, indicating the owner of the terminal device.

[0088] The information recorded in the second row of Table 1 indicates that User A* is the owner of terminal device α, that User A* has the right to use all functions of terminal device α, and that the usage time is for the entire period (including the period from the start of use of terminal device α to the end of use of terminal device α). The information recorded in the third row of Table 1 indicates that User B is an authorized user of terminal device α, and that User B is permitted to use all functions of terminal device α from 2021.12.1 to 2021.12.30. The information recorded in the fourth row of Table 1 indicates that User C is an authorized user of terminal device α, and that User C is permitted to use some functions of terminal device α, such as functions 1 to 10, for the entire period of use of terminal device α.

[0089] In one optional implementation, the usage management information may further include an item called "Authorized Operational Permissions," which indicates whether the owner of terminal device α has authorized another authorized user to perform operations on the terminal device's upgrade operation information. If the entry for this item for another authorized user is "Yes" or another "Authorized" mark, it indicates that the other authorized user is authorized. For example, in Table 1, user B is authorized to perform operations on the terminal device's upgrade operation information. If the entry for this item for another authorized user is "No" or another "Not Authorized" mark, it indicates that the other authorized user is not authorized. For example, in Table 1, user C is not authorized to perform operations on the terminal device's upgrade operation information. In the case of the terminal device owner, it will be understood that the entry for this item for the terminal device owner is empty (represented by, for example, "-"), indicating default authorization. For example, in Table 1, user A* can obtain operations on the terminal device's upgrade operation information by default after being bound to the terminal device.

[0090] It should be understood that the information recorded in Table 1 is merely an example and not a limitation on the implementation of usage management information. Usage management information can further record information about who uses the terminal device during a specific period, such as information recorded when the terminal device owner grants permission for another user to use the terminal device, such as an electronic key issued to an authorized user by the terminal device owner, or information recorded when another user requests permission to use the terminal device from the terminal device owner. The usage time recorded in usage management information may include past, present, and future times. In other words, to enable convenient management of terminal devices based on usage management information, relevant information may be recorded in the usage management information each time the terminal device owner grants permission for another user. In addition, the above table is only one way of presenting terminal device usage management information, and usage management information is not limited to presenting and storing data in the form of a table.

[0091] Usage management information may be stored in the memory of the terminal device, or it may be reported to and stored on the relevant server by the terminal device or the owner of the terminal device (e.g., the first user). The first user can grant the OTA server permission to access the memory of the terminal device or the server, thereby allowing the OTA server to obtain usage management information and terminal device status information.

[0092] In one optional implementation, terminal device usage management information may be stored in the OTA server's local memory, or in another device accessible to the OTA server. The OTA server can obtain terminal device usage management information by accessing the OTA server's local memory or another device, obtain terminal device status information based on the usage management information, and determine how to distribute terminal device upgrade operation information based on the status information.

[0093] Table 1 shows the usage management information as an example. If Table 1 contains information only in the row where user identifier A* is located, it means that the terminal device is used only by the terminal device owner A*, and its use is not permitted to other users. In this case, the OTA server can use A* as the identification result for the first user, and the terminal device status information may include the identification result for the first user. Alternatively, the OTA server can use "NONE" as the identification result for the second user, and the terminal device status information may include the identification result for the second user: NONE. Alternatively, the OTA server can use A* as the identification result for the first user and NONE as the identification result for the second user, and the terminal device status information may include the identification results for both the first and second users. In this case, the OTA server can determine that the terminal device is a recipient of upgrade operation information and send the terminal device upgrade operation information to the terminal device, so that the user on the terminal device side (e.g., the first user) performs the terminal device upgrade operation based on the upgrade operation information received by the terminal device.

[0094] If Table 1 contains further information in the row where user identifier B or user identifier C is located, it means that use of the terminal device is permitted to user B or user C other than the terminal device owner A, i.e., a second user exists. In this case, the OTA server can use B or C as the identification result for the second user, and the terminal device status information may include the identification result for the second user. Alternatively, the OTA server can use A* as the identification result for the first user and B or C as the identification result for the second user, and the terminal device status information may include the identification results for both the first and second users. In this case, the OTA server can determine that the first user is the recipient of the upgrade operation information and send the terminal device upgrade operation information to the first user, so that the first user performs the terminal device upgrade operation based on the received upgrade operation information.

[0095] In one optional implementation, after the first user has granted the second user the authority to perform an upgrade operation on the terminal device, the OTA server can also determine that the second user is the recipient of the upgrade operation information and send the upgrade operation information to the second user, who then performs the upgrade operation on the terminal device based on the received information. In one example, the first user may permit the use of the terminal device while simultaneously granting the second user the authority to perform an upgrade operation on the terminal device. The permitted authority can be recorded by the OTA server in "Permitted Authority" in Table 1. In another example, the first user permitting the use of the terminal device and the first user permitting the second user to perform an upgrade operation on the terminal device can be two independent authorization operations. The first user can first permit the use of the terminal device. The OTA server can record the corresponding usage management information. If operational authority needs to be granted, the first user can further grant the second user operational authority over terminal device upgrade operation information, and the OTA server can receive permission confirmation information from the first user in real time. This permission confirmation information can instruct the first user to confirm that they are granting the second user operational authority over terminal device upgrade operation information. Based on the permission confirmation information, the OTA server can determine the second user's authorized operational authority and synchronously update the terminal device usage management information. Note that in the aforementioned example of this application, the status information obtained based on the usage management information may include the identification results of the first user and / or the identification results of the second user, and the method of presenting the status information is not limited. Further details will not be explained again here.

[0096] (2) The OTA server receives first instruction information from the terminal device, and the first instruction information indicates the identification result of the first user and / or the identification result of the second user.

[0097] In this embodiment of the present application, the terminal device can directly or indirectly detect the identification result of a first user and / or a second user (by using a sensing component associated with the terminal device). In this example, an OTA server can communicate with the terminal device and obtain the identification result of a first user and / or a second user based on instructions from the terminal device. It should be understood that the detection of the terminal device described in this embodiment of the present application includes the detection of a sensing component associated with the terminal device. Hereafter, the detections will not be described separately.

[0098] For example, a first user may authorize the use of a terminal device, and the terminal device may send first instruction information to the OTA server. The first instruction information may indicate a second user who has been authorized to use the terminal device. Therefore, the first instruction information indicates the identification result of the second user. The identification result of the second user may include one or more of the following information: the second user, the authorization to use the terminal device obtained by the second user, the authorized functions used by the second user, the authorized usage time of the second user, etc.

[0099] As another example, a terminal device can detect whether a first user is present within the terminal device or whether a first user is present in the default location of the terminal device, and can send first instruction information to an OTA server, the first instruction information can indicate that a first user is present within the terminal device or that a first user is present in the default location of the terminal device. Therefore, the first instruction information indicates the identification result of the first user, and the identification result of the first user may include that a first user is present within the terminal device or that a first user is present in the default location of the terminal device.

[0100] As described above, the default location of a terminal device can be understood in various ways in different scenarios. For example, if the terminal device is a vehicle in an Internet of Vehicles scenario, the default location of the terminal device may be a default location within the terminal device, such as the driver's location. In this case, the vehicle can use a vehicle detection system to detect whether a first user is inside the vehicle or whether the first user is at the driver's location of the vehicle. In a mobile service scenario (including a remote driving scenario), the default location of the terminal device may be an external location associated with the terminal device, such as an external location from which the terminal device can be remotely controlled or monitored. The terminal device can communicate with an associated external detection component (e.g., a camera) and obtain detection results from the external detection component to determine whether a first user is at the default location. This is not limited to this embodiment of the present application. As another example, a terminal device can detect whether a second user is present within the terminal device or whether the second user is in the terminal device's default location, and can send first instruction information to an OTA server, which can indicate that the second user is present within the terminal device or that the second user is in the terminal device's default location. Thus, the first instruction information may indicate the identification result of the second user, which may include the presence of an authorized user (i.e., the second user) within the terminal device or the presence of an authorized user (i.e., the second user) in the terminal device's default location. Similar to the example above, depending on various understandings of the terminal device's default location in various scenarios, the terminal device can also detect whether a second user is present within the terminal device or whether the second user is in the terminal device's default location in various ways. Details will not be explained again here.

[0101] As another example, a first user may authorize the use of a terminal device, and simultaneously, the terminal device may detect whether the first user is present within the terminal device or whether the first user is in the terminal device's default location. The terminal device may send first instruction information to an OTA server, which may indicate a second user authorized to use the terminal device, and may also indicate that the first user is present within the terminal device or in the terminal device's default location. Therefore, the first instruction information indicates the identification results for the first user and the second user. The identification results for the first user include whether the first user is present within the terminal device or in the terminal device's default location. The identification results for the second user include one or more of the following information: the second user, the authorization to use the terminal device obtained by the second user, the authorized functions used by the second user, the authorized usage time for the second user, etc.

[0102] Furthermore, when S220 is performed, the OTA server can make decisions based on the received first instruction information to determine how to distribute the upgrade operation information for the terminal device in order to perform the upgrade operation for the terminal device.

[0103] (3) The OTA server receives second instruction information from the first user, and the second instruction information may indicate the identification result of the first user and / or the identification result of the second user.

[0104] In this example, the OTA server can communicate with a first user (e.g., the first user's intelligent terminal) and obtain the identification results for the first user and / or the second user based on the first user's instructions.

[0105] For example, the first user may authorize the use of a terminal device by using the first user's intelligent terminal, which can then send second instruction information to the OTA server; or the first user may authorize the use of a terminal device in another way (e.g., by using an electronic key, email, or a written file), and then send second instruction information to the OTA server using the terminal device (e.g., by using a communication component included in the terminal device that communicates with the outside world), or using the first user's intelligent terminal. The second instruction information may indicate the second user's identification result, which may include one or more of the following information: the second user, the authorization to use the terminal device obtained by the second user, the authorized functions used by the second user, the authorized usage time of the second user, etc.

[0106] As another example, the intelligent terminal of the first user can determine the positional relationship between the first user and the terminal device using positioning technology, and the intelligent terminal can send second instruction information to the OTA server, or the first user can directly send the second instruction information to the OTA server using the intelligent terminal of the first user or using the terminal device (for example, using a communication component included in the terminal device that communicates with the outside) based on the positional relationship between the first user and the terminal device. The second instruction information can indicate whether the first user is present in the terminal device, or not present in the terminal device, or whether the first user is present in the default location of the terminal device, or not present in the default location of the terminal device. Therefore, the identification result of the first user may include whether the first user is present in the terminal device or whether the first user is present in the default location of the terminal device. For the default location of the terminal device, please refer to the related explanation above. Details will not be explained again here.

[0107] As another example, second instruction information from a first user may indicate the identification result of the first user and the identification result of the second user, which may be obtained in the same or different manner, using a combination of the aforementioned manners, or in a different manner. The identification result of the first user and the identification result of the second user may be carried in the same instruction information or in separate instruction information, and the instruction information may be from the same device of the first user or from different devices of the first user. The specific manner in which the second instruction information is obtained is not limited in this embodiment of the present application.

[0108] Please note that the above examples (1) to (3) are merely examples of how an OTA server can obtain status information of a terminal device, and do not constitute a limitation. In another embodiment, the OTA server may obtain status information of a terminal device in yet another manner. This is not limited to this embodiment of the present application.

[0109] In this embodiment of the present application, when S220 is performed to deliver upgrade operation information to the corresponding receiving side and to perform an upgrade operation on the terminal device, the OTA server can determine the receiving side of the terminal device upgrade operation information based on the obtained status information. The specific interaction process in S220 differs depending on the various cases indicated by the status information. For example,

[0110] (1) The identification result of the first user includes the presence of the first user within the terminal device or the presence of the first user in the default location on the terminal device. In S220, the OTA server can send upgrade operation information for the terminal device to the terminal device. Accordingly, the first user on the terminal device can perform subsequent related operations based on the upgrade operation information to complete the upgrade operation of terminal device 120.

[0111] (2) The identification result of the first user includes the fact that the first user is not present in the terminal device, or that the first user is present in the terminal device but is not in the default location of the terminal device. In S220, the OTA server can send terminal device upgrade operation information to the first user. Accordingly, the first user can complete the upgrade operation of terminal device 120 by performing subsequent related operations based on the received upgrade operation information.

[0112] (3) The identification result of the second user includes the presence of the second user within the terminal device. In S220, the OTA server may send terminal device upgrade operation information to the first user or terminal device. That is, if the OTA server determines that there is another user other than the owner of the terminal device, it sends terminal device upgrade operation information to the first user or terminal device to ensure the other user's experience.

[0113] To facilitate understanding, the specific implementation details of the embodiments of this application will be described below using an example in which the embodiments are applied to an Internet of Vehicles scenario.

[0114] Figure 3 is a diagram of a system architecture applied to an Internet of Vehicles scenario according to one embodiment of the present application. For example, terminal device 120 in Figure 1 is vehicle 350 in Figure 3, and intelligent terminals 130 / 140 in Figure 1 are smartphones 330 / 340 in Figure 3. Please refer to Figure 3. In this scenario, in order to perform an OTA upgrade procedure for vehicle 350, the OTA server 110 can communicate with vehicle 350 and the vehicle owner's smartphone 330 or the vehicle's authorized user's smartphone 340 via a wireless network to transmit upgrade operation information for vehicle 350 and other information related to the upgrade operation.

[0115] The OTA server 110 can trigger an OTA upgrade procedure on the vehicle 350. During the OTA upgrade process, the OTA server 110 obtains status information of the vehicle 350 and, based on this status information, can determine the recipient of the vehicle 350's OTA upgrade operation information. For example, the recipient could be one of the devices in the vehicle 350, the vehicle owner's smartphone 330, or the smartphone 340 of an authorized user of the vehicle. The OTA server 110 can distribute the upgrade operation information to the determined recipient and trigger the vehicle 350's OTA upgrade procedure. In addition, the OTA server 110 can further monitor the vehicle 350's OTA upgrade process.

[0116] The vehicle 350 may include an ECU, for example, a network communication device 351, an OTA control unit 352, at least one human-machine interface HMI 353 (e.g., HMI 353_1, HMI 353_2, HMI 353_3), a cockpit domain controller 354, a vehicle detection system 355, and an in-vehicle communication network (e.g., a CAN bus) configured to perform internal vehicle communication.

[0117] The network communication device 351 functions as a communication bridge between external devices such as the OTA server 110, smartphone 330, and smartphone 340 and the internal ECUs of the vehicle 350 in order to perform functions such as sending, receiving, and forwarding information related to OTA upgrades. Within the vehicle 350, the network communication device 351 can transmit information to each ECU of the vehicle 350 via an in-vehicle communication network, such as a CAN bus. In this embodiment of the present application, the network communication device 351 can support wireless or wired communication methods. This is not limited to this embodiment of the present application.

[0118] The OTA control unit 352 can function as a decision unit for performing OTA upgrade control in the vehicle 350, and can make a comprehensive decision based on one or more of the following information: for example, obtained upgrade operation information, status information of the vehicle 350, relevant information obtained from at least one human-machine interface HMI 353, relevant information obtained from the cockpit domain controller 354, relevant information obtained from the vehicle detection system 355, or relevant information obtained from another ECU, and can control the output of the upgrade operation information based on the decision result. Accordingly, the vehicle owner and authorized vehicles of the vehicle 350 can complete the upgrade operation of the vehicle 350 based on the outputted upgrade operation information.

[0119] The OTA control unit 352 and the network communication device 351 may be separate unit modules or the same unit module, for example, a T-BOX, which may integrate functional modules such as GPS, an external communication interface, an ECU, a microcontroller, a mobile communication unit, and memory. The T-BOX may be internally connected to an in-vehicle bus (i.e., the vehicle's internal communication network, e.g., a CAN bus) and externally, by using a cloud platform, information can be exchanged between vehicle terminals, handheld devices, RSUs, and public networks that communicate using V2V, V2R, V2H, V2S, etc. Alternatively, the OTA control unit 352 may be a hardware module newly added to the vehicle. The relevant decision logic or algorithm may be configured within this hardware module, and this hardware module may function as an ECU in the vehicle 350 to implement the upgrade method of this embodiment of the application, and transfer information to another ECU through the vehicle's internal communication network. The product form of the OTA control unit 352 is not limited in this embodiment of the application.

[0120] The vehicle detection system 355 may include, for example, a detection component such as a camera. The vehicle detection system 355 can obtain detection results, such as images of people inside the vehicle, and provide the detection results to the cockpit domain controller 354.

[0121] The cockpit domain controller 354 is connected to the vehicle detection system 355, receives detection results from the vehicle detection system 355, and based on the detection results, can determine information such as whether the people inside the vehicle include the vehicle owner, and the specific location of the vehicle owner in the vehicle 350, and provide this information to the OTA control unit 352 in order to make an overall decision.

[0122] In an alternative implementation, the vehicle detection system 355 may instead provide the detection results directly to the OTA control unit 352, which then makes an overall decision.

[0123] At least one human-machine interface (HMI) 353 is an input / output device within the vehicle 350. The at least one HMI 353 may be configured to communicate with an OTA control unit 352 via an in-vehicle communication network, provide an OTA operation interface, and perform tasks such as outputting upgrade operation information and receiving operation input information. The at least one HMI 353 may have its own communication identifier and communication address, and may be configured to receive information to be output or to provide obtained input information to another module. For example, the at least one HMI 353 may include an in-vehicle device such as an in-vehicle display (e.g., a touchscreen), and may also include external related devices such as a smartphone or tablet computer located within the vehicle 350. This is not limited to this embodiment of the present application.

[0124] Smartphones 330 and 340 can communicate with the OTA server 110 and the network communication device of the vehicle 350 via the mobile network. If the OTA server 110 determines that it can directly send upgrade operation information for the vehicle 350 to smartphone 330 or smartphone 340, the OTA server 110 can directly send the upgrade operation information to smartphone 330 or smartphone 340. Smartphones 330 or smartphone 340 can also receive upgrade operation information transferred by the network communication device of the vehicle 350. For example, an OTA application may be installed and run on smartphone 330 and smartphone 340. The vehicle owner or authorized user of the vehicle can control the driving status of vehicle 350 using an application running on the owner's or authorized user's smartphone, and can control the OTA upgrade process of vehicle 350 by communicating with the OTA server 110. In the process of implementing the upgrade method of the embodiments of this application, at least one of the human-machine interface HMI 353, smartphone 330, and smartphone 340 can function as an output device to output upgrade operation information for the terminal device. This output device may be the device that ultimately outputs the upgrade operation information, or it may be an output device that outputs the upgrade operation information during the upgrade process. The method and opportunity for outputting the upgrade operation information are not limited in the embodiments of this application. For ease of distinction, in the embodiments of this application, output devices used to output upgrade operation information for the terminal device and involved in various cases may be referred to as the first device, the second device, and so on. Various examples will be described below. Details will not be described here.

[0125] Based on the system architecture shown in Figure 3, and using an example in which a vehicle in manual driving mode is used as a terminal device, along with various methods for obtaining vehicle status information and various cases indicated by the status information, the specific implementation procedures of the upgrade method of the embodiment of this application may include Examples 1 to 5. These examples will be described separately below with reference to the accompanying drawings such as Figures 4A to 8. It will be understood that the steps shown in Figures 4A to 8 are merely examples of steps that may be included in the upgrade method of the embodiment of this application, and do not constitute any limitation. The specific execution order of the steps in these examples may be adjusted with reference to each other. In some embodiments, new embodiments may be formed based on combinations of the technical features of the various embodiments described with reference to Figures 4A to 8.

[0126] Example 1: The OTA server can obtain vehicle usage management information, determine the recipient of vehicle upgrade operation information based on the usage management information, and send the vehicle upgrade operation information to that recipient.

[0127] As shown in Figures 4A and 4B, the upgrade method in Example 1 may include the following steps.

[0128] S401: The OTA server prepares for OTA activities, for example, by preparing an OTA upgrade package, creating OTA-related messages, and determining which vehicles can perform the OTA upgrade. Vehicles that can perform the OTA upgrade may include all vehicles on which the software to be upgraded is installed, or any vehicles selected from all vehicles. The method for determining the vehicles is not limited to this embodiment of the present application.

[0129] S402: The OTA server obtains vehicle information and vehicle usage management information for the vehicle.

[0130] Vehicle information and usage management information may be stored on the OTA server or on a server accessible by the OTA server. For example, vehicle information may include one or more of the following: vehicle identifier, e.g., vehicle frame number or vehicle identification number (VIN), vehicle communication address, vehicle owner (or referred to as vehicle owner), and contact information such as the vehicle owner's mobile phone number or email address. Usage management information may include one or more of the following: vehicle identifier / vehicle communication address, user, permitted usage functions, permitted usage time, permitted operational privileges (optional).

[0131] S403: The OTA server obtains vehicle status information based on usage management information, and based on the status information, determines whether or not another user other than the first user (i.e., the vehicle owner), i.e., a second user, is in the vehicle.

[0132] If the result is "no", S404 is executed, or if the result is "yes", S407 or S409 may be executed. If the result is "yes", it is necessary to consider whether the authorized user of the terminal device has the authority to perform operations on the upgrade operation information. If "yes", S409 may be executed. If "no", S407 may be executed.

[0133] Table 1 shows the usage management information as an example. If Table 1 contains information only in the row where user identifier A* is located, it means that the terminal device is used only by the terminal device owner A*, and its use is not permitted to other users. In this case, the result obtained in S403 is "no", and S404 is executed. If Table 1 contains information in the row where user identifier C is located, it means that the use of the terminal device is permitted to user C other than the terminal device owner A*, and user C is not permitted to perform operations on the terminal device upgrade operation information. In this case, the result obtained in S403 is "yes", another authorized user does not have the operation rights, and S407 is executed. If Table 1 contains information in the row where user identifier B is located, it means that the terminal device is permitted to user B other than the terminal device owner A*, and user B is permitted to perform operations on the terminal device upgrade operation information. In this case, the result obtained in S403 is "yes", another authorized user has the operation rights, and S409 is executed.

[0134] S404: The OTA server sends vehicle upgrade operation information to the vehicle.

[0135] S405: The vehicle's network communication device receives upgrade operation information from an OTA server, for example, via a wireless network, and transmits the upgrade operation information to the vehicle's OTA control unit.

[0136] S406: The vehicle's OTA control unit receives upgrade operation information and performs subsequent related processing based on that information. The OTA control unit can perform subsequent related processing based on the related decision logic or algorithm configured by the OTA control unit. The decision process of the OTA control unit is described below with reference to Examples 3 and 4. Details are not explained here.

[0137] S407: The OTA server sends vehicle upgrade operation information to the first user based on the first user's specific contact method. The contact method may include, but is not limited to, one of the following: SMS message, email, or application.

[0138] S408: The first user's intelligent terminal receives upgrade operation information from an OTA server, for example, via a wireless network, and processes the upgrade operation.

[0139] S409: The OTA server sends vehicle upgrade operation information to the second user based on the second user's specific contact method. In another optional implementation, S409 may be the same step as S404. In other words, S404 may be executed after S403, except when S407 is executed if it is determined that a second user exists and the second user does not have the necessary operational privileges. The first user performs the vehicle upgrade operation as far as possible by sending the upgrade operation information to the first user.

[0140] S410: The second user's intelligent terminal receives upgrade operation information from the OTA server, for example, via a wireless network, and processes the upgrade operation.

[0141] In an optional implementation, the OTA server may further transmit third instruction information in S404, S407, or S409. The third instruction information may indicate the identification result of the first user and / or the identification result of the second user, so that the vehicle, the first user, and the second user make decisions based on the third instruction information. The third instruction information and the upgrade operation information may be carried in the same message or in separate messages. This is not limited to this embodiment of the present application. Further details will be provided below with reference to other examples. Details are not described here.

[0142] Example 2: If the OTA server cannot obtain terminal device usage management information, the OTA server can send vehicle upgrade operation information to the vehicle based on vehicle information. Furthermore, the vehicle-side OTA control unit determines the recipient of the vehicle upgrade operation information based on vehicle usage management information, etc., and sends the vehicle upgrade operation information to that recipient, or determines the output side of the vehicle upgrade operation information and outputs the upgrade operation information at that output side. The steps performed on the vehicle side, as shown in Figures 5A and 5B, can also be applied to subsequent actions after the OTA server has delivered the vehicle upgrade operation information to the vehicle based on S404 shown in Figures 4A and 4B.

[0143] As shown in Figures 5A and 5B, the upgrade method in Example 2 may include the following steps.

[0144] S501: The OTA server prepares for OTA activities, such as preparing the OTA upgrade package, creating OTA-related messages, and determining which vehicles can perform the OTA upgrade. For specific implementation details, please refer to the explanation in S401. Details will not be explained again here.

[0145] S502: If the OTA server cannot obtain usage management information for the terminal device, the OTA server will send upgrade operation information to the vehicle based on the vehicle's vehicle information.

[0146] Vehicle information may be stored on the OTA server or on a server accessible to the OTA server. For example, vehicle information may include a vehicle identifier, such as the vehicle frame number or VIN, the vehicle's communication address, a first user, and contact information such as the first user's mobile phone number or email address. During the execution of S502, the OTA server may send upgrade operation information to the vehicle, for example, based on the vehicle's VIN or communication address.

[0147] In one optional implementation, the OTA server may instead send a third instruction (not shown in Figures 5A and 5B) to the vehicle. The third instruction can indicate the identification result of the first user and / or the identification result of the second user. For example, the third instruction can indicate that the OTA server does not obtain the vehicle's usage management information, i.e., it does not determine whether a second user exists based on the usage management information. Alternatively, if S502 includes S403 and S404 shown in Figures 4A and 4B, it means that the OTA server has confirmed the vehicle's usage management information, and the OTA server can further send the third instruction to the vehicle. The third instruction can indicate that the OTA server has determined whether a second user exists based on the vehicle's usage management information. In a specific implementation, the upgrade operation information and the third instruction information may be carried in the same message. For example, the OTA server may add a flag bit to the message carrying the upgrade operation information. This flag bit may carry the third instruction information. The third instruction information can indicate whether the OTA server has confirmed the vehicle usage management information. The implementation of this instruction information is not limited to this embodiment of the present application.

[0148] S503: The vehicle's network communication device receives upgrade operation information from an OTA server, for example, via a wireless network, and transmits the upgrade operation information to the OTA control unit.

[0149] S504 (Optional): The OTA control unit determines whether the OTA server has confirmed the vehicle usage management information. If the result is "yes", it executes S505; otherwise, it executes S506.

[0150] This step uses an example where a flag bit carrying a third instruction information is added to a message carrying upgrade operation information. For example, different values ​​of the flag bit can be used to carry different instruction information. For instance, if the flag bit is 1, it means that the OTA server has checked the vehicle usage management information, or if the flag bit is 0, it means that the OTA server has not checked the vehicle usage management information. In S504, the OTA control unit can make a decision based on a specific value of the flag bit.

[0151] S505: The OTA control unit transmits upgrade operation information to the main vehicle HMI.

[0152] The primary vehicle HMI described in this book may be, for example, an HMI associated with the driver's position in the vehicle. The primary vehicle HMI can output upgrade operation information, and a user at the position associated with the primary vehicle HMI (e.g., the driver's position) can perform an over-the-air (OTA) upgrade operation on the vehicle based on the upgrade operation information.

[0153] Alternatively, the vehicle may be configured to perform the function of Solution B in S505. In S505, the OTA control unit can further perform Solution B shown in Figures 6A and 6B based on the default settings. Solution B will be described below with reference to Figures 6A and 6B and embodiments. Details will not be described again here.

[0154] S506 (Optional): The OTA control unit determines whether the vehicle can obtain vehicle usage management information. If the result is "yes", it executes S507; otherwise, it executes S510.

[0155] It will be understood that usage management information may be stored in the vehicle's internal storage device or in a specific storage device accessible to the vehicle. This is not limited to this embodiment of the present application.

[0156] S507 (Optional): The OTA control unit obtains vehicle usage management information.

[0157] S508: The OTA control unit determines whether a second user exists based on the vehicle usage management information. If the result is "no", it executes S509, or if the result is "yes", it executes S511.

[0158] S509 / S510: The OTA control unit transmits upgrade operation information to the main vehicle HMI. The main vehicle HMI can output the upgrade operation information. A user at a location associated with the main vehicle HMI can perform an OTA upgrade operation on the vehicle based on the upgrade operation information. Alternatively, the vehicle may be configured to perform the functions of Solution B. In S510, the OTA control unit can further perform Solution B based on the default settings, as shown in Figures 6A and 6B.

[0159] S511: The OTA control unit obtains vehicle information and transmits upgrade operation information to the first user based on the vehicle information. The vehicle information can specify how the first user should contact the system. Alternatively, the vehicle may be configured to perform the functions of solution B. In S511, the OTA control unit can further perform solution B based on the default settings, as shown in Figures 6A and 6B.

[0160] During implementation, the OTA control unit may send upgrade operation information to the first user, for example, using an SMS message, email, or application, based on a user contact method associated with the vehicle when the first user is registered. The method of sending upgrade operation information is not limited to this embodiment of the present application.

[0161] S512: The first user's intelligent terminal receives upgrade operation information from the vehicle's network communication device via the wireless network and outputs the upgrade operation information. Accordingly, the first user remotely decides on their smartphone to initiate the relevant procedures on the vehicle to perform the OTA upgrade based on the upgrade operation information.

[0162] The steps shown within the dashed boxes in Figures 5A and 5B are optional steps, meaning that the relevant decision logic of the OTA control unit may include the aforementioned optional steps, and it will be understood that the specific decision process for the upgrade method is not limited. In some embodiments, the OTA control unit may selectively perform the aforementioned steps, for example, by directly executing S508 without executing S504 to S507.

[0163] Example 3: Based on Examples 1 and 2, the vehicle is an intelligent connected vehicle and may be equipped with a vehicle detection system and at least one HMI, etc. After the OTA server delivers vehicle upgrade operation information to the vehicle, the OTA control unit uses the vehicle detection system and at least one HMI, etc. to obtain the identification results of a first user and / or a second user, and determines how to output the upgrade operation information in order to perform the vehicle upgrade operation.

[0164] For example, if the identification result for the first user includes the presence of the first user within the terminal device, or the presence of the first user in the default location within the terminal device, the OTA control unit can send instruction information to the first device associated with the first user within the terminal device, instructing the first device to output vehicle upgrade operation information. Alternatively, the OTA control unit can send instruction information to the first device via a second device within the terminal device. As another example, if the identification result for the first user includes the presence of the first user within the terminal device, or the presence of the first user within the terminal device but not in the default location within the terminal device, the OTA control unit can send vehicle upgrade operation information to the first user. As yet another example, the identification result for the second user may include the presence of the second user within the terminal, and the OTA control unit can send upgrade operation information to the first user or the vehicle.

[0165] Let us use an example of making a decision using a vehicle detection system. For example, the vehicle detection system may include a camera. The OTA control unit can use the camera to identify the faces of people inside the vehicle and make a decision based on the detection results. For example, the OTA control unit can determine whether a first user is inside the vehicle or whether the first user is in a predetermined location in the vehicle, based on the facial image captured by the camera. Alternatively, for example, the vehicle detection system may include a microphone. The OTA control unit can perform voiceprint recognition and make a decision based on voice information of people inside the vehicle collected using the microphone while the vehicle is starting or in motion, and determine whether a first user is inside the vehicle based on whether the recognized voiceprint information matches the voiceprint information of a first user stored in the vehicle. In another example, in another method, the OTA control unit can determine whether a first user and / or a second user are inside the vehicle by determining whether the vehicle is started using, for example, the vehicle owner's electronic key or the electronic key of an authorized user, based on attributes corresponding to the current user of the vehicle, such as a password or start command entered by the vehicle user at the time the user starts the vehicle. To implement the upgrade method of this embodiment of the present application, the OTA control unit can obtain vehicle status information based on the aforementioned determination results and make decisions based on the vehicle status information.

[0166] Let's take an example where a vehicle detection system is used to identify people inside a vehicle. As shown in Figures 6A and 6B, Solution B described in Example 2 may include the following steps in its upgrade method.

[0167] S601: The OTA control unit enables the detection function of the vehicle detection system in accordance with upgrade operation information from the vehicle's network communication device in order to obtain the identification result of a person inside the vehicle.

[0168] In this step, upgrade operation information can arrive from the OTA server, and the OTA control unit can receive the upgrade operation information from the OTA server using the vehicle's network communication device. Figures 6A and 6B merely illustrate one example of how upgrade operation information is transferred by the network communication device and should be understood as not limiting the routing information of the upgrade operation information.

[0169] S602: The vehicle detection system / cockpit domain controller obtains the identification result of a person inside the vehicle based on the detection result and feeds back the identification result of the person inside the vehicle to the OTA control unit.

[0170] In this embodiment of the present application, the vehicle detection system may include, for example, a detection component such as a camera or microphone configured to obtain detection feature information. For example, the camera may be configured to obtain an image of a person inside the vehicle, for example, a facial image, and the microphone may be configured to collect voice data of a person inside the vehicle. The cockpit domain controller can communicate with the vehicle detection system and identify the detection results obtained by the vehicle detection system to obtain identification results of a person inside the vehicle, for example, by identifying a facial image to obtain facial information and iris information of a person inside the vehicle, or by performing voiceprint recognition on the voice data to obtain voiceprint information of a person inside the vehicle.

[0171] The OTA control unit can communicate with the vehicle detection system. In S601, the OTA control unit enables the detection function of the vehicle detection system. For example, the OTA control unit can send an activation command to the vehicle detection system to enable the detection function of the vehicle detection system. In S602, the OTA control unit can directly obtain the detection result from the vehicle detection system as the identification result of a person in the vehicle. Alternatively, the OTA control unit can also communicate with the cockpit domain controller. In S601, the OTA control unit enables the detection function of the vehicle detection system. For example, the OTA control unit can send an acquisition command for the identification result to the cockpit domain controller, and the cockpit domain controller can send an activation command to the vehicle detection system in response to the acquisition command in order to enable the detection function of the vehicle detection system and obtain the detection result from the vehicle detection system. The cockpit domain controller identifies the detection result obtained from the vehicle detection system and obtains the identification result of a person in the vehicle. In S602, the OTA control unit can obtain the identification result of a person in the vehicle from the cockpit domain controller. The method of obtaining the identification result is not limited to this embodiment of the present application.

[0172] For example, the identification results for people inside a vehicle may include information such as occupant identifiers, vehicle owner marks (used to mark whether an occupant is the vehicle owner, e.g., the "*" above), and occupant positions obtained by identifying all occupants inside the vehicle.

[0173] In this embodiment of the present application, it will be understood that detection feature information (including facial information, iris information, voiceprint information, etc.) of the vehicle owner and / or authorized user of the vehicle may be stored in the vehicle's memory or on another device accessible to the vehicle. In the identification process, the vehicle detection system / cockpit domain controller can compare the detection results obtained in real time with the stored detection feature information to determine the identification result of a person in the vehicle. The specific implementation process of the identification process is not limited in this embodiment of the present application and will not be described in detail again here.

[0174] S603: The OTA control unit determines whether the people inside the vehicle include the first user, i.e., the vehicle owner. If the result is "no", it executes S604, or if the result is "yes", it executes S605.

[0175] For example, the OTA control unit can determine whether the occupants include the first user based on whether the identification result obtained in S602 includes the vehicle owner mark.

[0176] S604: The OTA control unit transmits upgrade operation information to the first user.

[0177] For example, the OTA control unit can send upgrade operation information to the first user's smartphone using SMS messages, email, applications, etc.

[0178] S605: The OTA control unit determines whether the location of the first user in the vehicle is associated with the HMI. If the result is "no", it executes S606, or if the result is "yes", it executes S607.

[0179] S606: The OTA control unit transmits upgrade operation information to the main vehicle HMI.

[0180] For example, the main vehicle HMI may be an HMI associated with the vehicle's driver position. In another optional implementation of this step, the OTA control unit may instead send upgrade operation information to the vehicle owner's smartphone.

[0181] S607: The OTA control unit transmits upgrade operation information to the HMI associated with the location of the first user in the vehicle.

[0182] In other words, the OTA control unit can make decisions based on the relationship between the first user and the vehicle, based on the detection results of the vehicle sensors. For example, if the first user is not in the vehicle, the OTA control unit can send upgrade operation information to the first user's intelligent terminal. If the first user is in the vehicle, the OTA control unit can send upgrade operation information to the HMI associated with the first user's location, based on the first user's location within the vehicle. For example, if the first user is in the driver's position, the OTA control unit can send upgrade operation information to the main vehicle HMI. As another example, if the vehicle owner is in a position other than the driver's position, for example, in the front passenger position or rear row position, the OTA control unit can send upgrade operation information to the HMI associated with the front passenger position or rear row position where the first user is located.

[0183] In one optional implementation, the upgrade method shown in Figures 6A and 6B allows for the execution order of S605 and S606, and S603 through S604 to be swapped; that is, the decision process of S605 is executed first, followed by the decision process of S603. The corresponding recipient of the upgrade operation information is determined based on the decision result.

[0184] Therefore, according to the example method shown in Figures 6A and 6B, the OTA control unit can use the intelligent connected vehicle's detection function to identify people inside the vehicle and, based on the identification result, flexibly send the upgrade operation information to be processed to the appropriate HMI for output. The appropriate person then performs the subsequent relevant processing on the outputted upgrade operation information to complete the vehicle's OTA upgrade operation. This method avoids the direct imposition of upgrade operation information on the main vehicle HMI, thus avoiding unnecessary hassle and driving burden on users who are not the vehicle owner. This improves the driving experience for users who are not the vehicle owner.

[0185] Example 4: In the OTA process (including determining the OTA content, downloading the OTA upgrade package, installing the OTA upgrade package, and activating the OTA upgrade package), multiple people can perform collaborative operations. Based on the examples shown in Figures 4A to 6B, after the upgrade operation information is delivered to the vehicle and output by a first device in the vehicle, the first device can obtain further input information according to the upgrade operation information, and the OTA control unit can transfer the upgrade operation information to a second device in the vehicle based on the input information. In this way, the upgrade operation information is transferred and output between various devices in the vehicle, so that the appropriate person can perform subsequent related processing on the upgrade operation information, ensuring the driving safety of the vehicle and improving the user experience.

[0186] As shown in Figure 7, the upgrade method may include the following steps:

[0187] S701: The OTA control unit receives vehicle upgrade operation information from the network communication device and transmits instruction information and upgrade operation information to a first device in the vehicle. The instruction information instructs the first device to output the upgrade operation information.

[0188] For example, the first device may be the vehicle's main vehicle HMI. Alternatively, the first device may be a device associated with the vehicle owner, for example, an HMI associated with the vehicle owner's location within the vehicle. Alternatively, the first device may be the vehicle owner's smartphone.

[0189] S702: The first device outputs upgrade operation information.

[0190] S703: The first device receives input information according to the upgrade operation information.

[0191] S704: The first device transmits output control information to the OTA control unit based on the input information. The OTA control unit can then receive the output control information.

[0192] For example, input information may be provided by a user associated with the first device. Input information may include, for example, authorization information used to permit a second device in the vehicle to output upgrade operation information. Alternatively, input information may include processing instructions for the upgrade operation information, such as confirmation of OTA content, or agreement or disagreement. For example, output control information may be upgrade operation information. Alternatively, output control information may be control information that instructs the second device to output upgrade operation information.

[0193] S705: The OTA control unit determines whether the output control information is authorization information used to grant operational authority over vehicle upgrade operation information. If the result is "yes", it executes S706; otherwise, it executes S708.

[0194] S706: The OTA control unit transmits upgrade operation information to a second device in the vehicle.

[0195] S707: The second device can receive and output upgrade operation information.

[0196] The second device may be an HMI other than the first device in the vehicle. For example, the first device may be the main vehicle HMI. At present, the authorized user of the vehicle is located in the driver's position, and the vehicle owner is located in the front passenger position or rear passenger position within the vehicle, and the second device may be an HMI associated with the front passenger position or rear passenger position, or the vehicle owner's smartphone. Alternatively, for example, the first device may be the main vehicle HMI. At present, the vehicle owner is located in the driver's position, and the authorized user of the vehicle is located in the front passenger position or rear passenger position, and the second device may be an HMI associated with the front passenger position or rear passenger position. Alternatively, for example, at present, the vehicle owner may be located in the front passenger position, and the first device may be an HMI associated with the front passenger position of the vehicle, and the second device may be an HMI associated with the driver position or rear passenger position.

[0197] S708: The OTA control unit executes instructions corresponding to the output control information, based on the output control information which is authorization information.

[0198] For example, the output control information may be "no upgrade," and the OTA control unit may ignore the upgrade operation information.

[0199] Therefore, according to the example method shown in Figure 7, the OTA control unit can use the ability of an intelligent connected vehicle to have multiple HMIs to transfer and output vehicle upgrade operation information between separate HMIs. To complete the vehicle's OTA upgrade operation, a person with operational authority, or a person located in a relatively safe location (e.g., the front passenger position or rear row position of the vehicle), can then perform subsequent related processing on the outputted upgrade operation information. This method allows transfer and authorization operations to be performed between multiple HMIs, thereby avoiding unnecessary inconvenience and driving burden on the driver operating the vehicle and improving the driving experience.

[0200] Example 5: In an OTA process (including determining OTA content, downloading the OTA upgrade package, installing the OTA upgrade package, activating the OTA upgrade package, etc.), multiple people can perform collaborative operations. Based on the examples shown in Figures 4A to 6B, after the vehicle upgrade operation information is delivered to the vehicle owner's intelligent terminal, the intelligent terminal can function as the first device described above, and the vehicle owner can use the intelligent terminal to grant operational authority over the vehicle upgrade operation information to another device other than the intelligent terminal (e.g., the second device described above). The other device may be a device inside the vehicle, or it may be a device outside the vehicle, including but not limited to a device of an authorized user of the vehicle, another intelligent terminal of the vehicle owner, and the vehicle itself. This is not limited to this embodiment of the present application.

[0201] As shown in Figure 8, the upgrade method may include the following steps:

[0202] S801: The first user's intelligent terminal receives vehicle upgrade operation information from the OTA server.

[0203] S802. The first user's intelligent terminal outputs upgrade operation information and receives input information from the first user.

[0204] For example, the input information may include authorization information used to grant another device permission to perform operations on vehicle upgrade operations. The input information may further include information such as the communication address of the other device.

[0205] S803: The first user's intelligent terminal sends instruction information to the OTA server based on the input information. The OTA server receives instruction information from the first user's intelligent terminal accordingly.

[0206] For example, if the input information includes authorization information, the instruction information may specify information such as the communication address of another authorized device. For instance, the input information may specify an authorized user who is authorized to perform operations on vehicle upgrade operations, and the instruction information may include the authorized user's contact method, such as their mobile phone number or email address. As another example, the input information may specify the communication address of another intelligent terminal belonging to the vehicle owner.

[0207] S804: The OTA server determines whether the instruction information from the first user's intelligent terminal is authorization information used to grant another device permission to perform vehicle upgrade operations. If the result is "no", it executes S805; if the result is "yes", it executes S806.

[0208] S805: The OTA server executes the corresponding instruction if the instruction information from the first user's intelligent terminal is unauthorized information.

[0209] S806: The OTA server sends vehicle upgrade operation information to another device if the instruction information from the first user's intelligent terminal is authorization information.

[0210] For example, another device may include a second user's intelligent terminal. In S806, the OTA server can send upgrade operation information to the second user's intelligent terminal. Alternatively, another device may include a vehicle. In S806, the OTA server can send upgrade operation information to the vehicle. The other device is not limited to this embodiment of the present application.

[0211] S807: Another device receives vehicle upgrade operation information from the OTA server and outputs the upgrade operation information. Accordingly, the user on the other device can decide to perform subsequent related processes based on the received upgrade operation information in order to complete the vehicle's OTA upgrade operation.

[0212] Therefore, according to the example method shown in Figure 8, after receiving vehicle upgrade operation information using the first user's intelligent terminal, the first user can, in order to ensure the driving safety of the vehicle and perform the vehicle's OTA upgrade operation in a timely manner, grant permission to another device more suitable for performing the vehicle's OTA upgrade operation, such as the vehicle itself, or to the intelligent terminal of a second user who is currently using the vehicle and has a better understanding of the vehicle's real-time status, to perform the vehicle's OTA upgrade operation information through an authorization operation.

[0213] In this case, using an example where the terminal device is a vehicle, various implementation processes of the upgrade method of the embodiment of this application in various cases were explained with reference to the method flowcharts in Figures 4A to 8. In this method, in intelligent connected vehicle scenarios and multi-user scenarios, the user best suited to perform the vehicle upgrade operation can be determined based on the vehicle's status information. Upgrade operation information is then flexibly distributed to the device associated with that user, and that user controls the specific implementation process of the upgrade operation. This not only improves the user's driving experience in the vehicle but also ensures vehicle driving safety and the timeliness of performing OTA upgrades on the vehicle.

[0214] One embodiment of this application further provides a communication device configured to perform the method performed by an OTA server, an OTA control unit, a first device, a terminal device, etc., in the embodiment of the method described above. For relevant features, please refer to the embodiment of the method described above. Details will not be described again here.

[0215] As shown in Figure 9, the communication device 900 may include an acquisition unit 901 configured to obtain status information of a terminal device, wherein the status information includes the identification result of a first user and / or a second user, where the first user is the owner of the terminal device and the second user is an authorized user of the terminal device; and an upgrade control unit 902 configured to perform an upgrade operation of the terminal device based on the status information. For specific implementations, please refer to the steps of the method implemented by the OTA server in the embodiment of the method described above. Details will not be explained again here.

[0216] As shown in Figure 10, the communication device 1000 may include a communication unit 1001 configured to receive upgrade operation information for a terminal device from an OTA server, an acquisition unit 1002 configured to obtain status information for a terminal device, wherein the status information includes the identification result of a first user and / or a second user, where the first user is the owner of the terminal device and the second user is an authorized user of the terminal device, and an upgrade control unit 1003 configured to perform an upgrade operation for the terminal device based on the status information and the upgrade operation information. For specific implementations, please refer to the steps of the method performed by the OTA control unit in the embodiment of the method described above. Details will not be explained again here.

[0217] It should be noted that in the example shown in Figure 10, the acquisition unit 1002 and the communication unit 1001 may be the same unit or they may be separate units. This is not limited to this embodiment of the present application. For example, if the acquisition unit 1002 obtains status information of a terminal device from a local database, then the acquisition unit 1002 and the communication unit 1001 are the same unit; however, if the acquisition unit 1002 obtains status information from a device other than the communication device 1000, then the acquisition unit 1002 and the communication unit 1001 are separate units.

[0218] As shown in Figure 11, the communication device 1100 may include a communication unit 1101 configured to receive upgrade operation information, an output unit 1102 configured to output upgrade operation information, and an input unit 1103 configured to obtain input information in response to the upgrade operation information, the input information being used to authorize the second HMI to output the upgrade operation information. The communication unit 1101 is further configured to transmit output control information based on the input information, the output control information instructing the second HMI to output the upgrade operation information. For specific implementations, please refer to the steps of the method implemented by the first device in the embodiment of the method described above. Details will not be described again here.

[0219] Alternatively, as shown in Figure 11, the communication device 1100 may include a communication unit 1101 configured to receive upgrade operation information for a terminal device from an OTA server or a first user, wherein the first user is the owner of the terminal device; an output unit 1102 configured to output upgrade operation information; and an input unit 1103 configured to obtain input information in response to the upgrade operation information, wherein the input information is used to authorize another device other than the intelligent terminal to perform the upgrade operation for the terminal device. The communication unit may further be configured to send operation control information to the OTA server or terminal device based on the input information, wherein the operation control information instructs another device to perform the upgrade operation for the terminal device. For specific implementations, please refer to the steps of the method implemented by the terminal device or vehicle in the embodiments of the method described above. Details will not be described again here.

[0220] It should be understood that the division of units in the aforementioned device is merely a logical functional division. In actual implementation, all or part of the units may be integrated into a single object, or they may be physically separated. In addition, units within a device may be implemented in a form in which software is invoked by a processor. For example, the device includes a processor, the processor is connected to memory, the memory stores instructions, and the processor invokes the instructions stored in memory to perform one of the aforementioned methods, or to perform the functions of the units within the device. The processor may be, for example, a general-purpose processor, such as a Central Processing Unit (CPU) or a microprocessor, and the memory may be memory within the device or memory outside the device. Alternatively, units within a device may be implemented in the form of hardware circuits, and some or all of the functions of the units may be implemented by designing hardware circuits. Hardware circuits can be understood as one or more processors. For example, in one implementation, the hardware circuit is an application-specific integrated circuit (ASIC), and some or all of the functions of the units are implemented by designing the logical relationships between elements in the circuit. As another example, in a different implementation, the hardware circuitry may be implemented using programmable logic devices (PLDs), such as a field programmable gate array (FPGA), which may contain a large number of logic gate circuits, and the connections between the logic gate circuits are configured using a configuration file to implement some or all of the functions of the unit. All units of the device may be implemented in the form of software invoked by a processor or in the form of hardware circuitry, or some units may be implemented in the form of software invoked by a processor and the remaining units may be implemented in the form of hardware circuitry.

[0221] In this embodiment of the present application, the processor is a circuit having signal processing capabilities. In one implementation, the processor may be a circuit having the ability to read and execute instructions, and may be, for example, a CPU, a microprocessor, a graphics processing unit (GPU) (which can be understood as a microprocessor), or a digital signal processor (DSP). In another implementation, the processor can perform specific functions by using the logical relationships of hardware circuits. The logical relationships of hardware circuits may be fixed or reconfigurable. For example, the processor is a hardware circuit implemented using an ASIC or PLD, such as an FPGA. In a reconfigurable hardware circuit, the process by which the processor loads a configuration document to implement the hardware circuit configuration can be understood as the process by which the processor loads instructions to perform some or all of the functions of the unit. In addition, the circuit may be a hardware circuit designed for artificial intelligence, and may be understood as an ASIC, for example, a Neural Network Processing Unit (NPU), a Tensor Processing Unit (TPU), or a Deep Learning Processing Unit (DPU).

[0222] It can be seen that a unit within the device may be configured as one or more processors (or processing circuits) for carrying out the aforementioned method, for example, as a CPU, GPU, NPU, TPU, DPU, microprocessor, DSP, ASIC, FPGA, or a combination of at least two of these processor forms.

[0223] In addition, all or some of the units within the device may be integrated, or each unit within the device may be implemented independently. In one implementation, these units are integrated and implemented in the form of a system-on-a-chip (SOC). The SOC may include at least one processor configured to perform one of the methods described above, or to perform the functions of the units of the device. The type of at least one processor may vary, including, for example, a CPU and an FPGA, a CPU and an artificial intelligence processor, a CPU and a GPU, and so on.

[0224] In a simple embodiment, a person skilled in the art will understand that the communication device of the above-described embodiment may be in the form shown in Figure 12.

[0225] The device 1200 shown in Figure 12 includes at least one processor 1210 and a communication interface 1230. In one optional design, the device may further include a memory 1220.

[0226] The specific connection medium between the processor 1210 and the memory 1220 is not limited in this embodiment of the present application.

[0227] In the device shown in Figure 12, when communicating with another device, the processor 1210 can transmit data through the communication interface 1230.

[0228] If the communication device is in the configuration shown in Figure 12, the processor 1210 in Figure 12 can call computer executable instructions stored in memory 1220, and as a result, the device 1200 can perform any of the embodiments of the method described above.

[0229] One embodiment of this application further relates to a chip system, which includes a processor configured to call a computer program or computer instruction stored in memory, the processor performing one of the methods of the above-described embodiments.

[0230] In one possible implementation, the processor may be coupled to memory via an interface.

[0231] In one possible implementation, the chip system may further directly include memory, which stores computer programs or computer instructions.

[0232] For example, memory may be volatile memory or non-volatile memory, or may include both volatile and non-volatile memory. Non-volatile memory may be read-only memory (ROM), programmable read-only memory (PROM), erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), or flash memory. Volatile memory may be random access memory (RAM) used as an external cache. Many forms of RAM may be used, not as an example but as an example, such as static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous link dynamic random access memory (synchlink DRAM, SLDRAM), and direct rambus dynamic random access memory (direct rambus RAM, DR RAM).

[0233] One embodiment of this application further relates to a processor. This processor is configured to call a computer program or computer instruction stored in memory, and as a result the processor performs one of the methods of the embodiments described above.

[0234] For example, in this embodiment of the present application, the processor is an integrated circuit chip having signal processing capabilities. For example, the processor may be an FPGA, a general-purpose processor, a DSP, an ASIC or another programmable logic device, a discrete gate or transistor logic device or a discrete hardware component, or a system on a chip (SoC), or a CPU, or a network processor (NP), or a microcontroller unit (MCU), or a PLD or another integrated chip, and may implement or execute the methods, steps and logic block diagrams disclosed in embodiments of the present application. The general-purpose processor may be a microprocessor, or the processor may be any conventional processor, etc. The steps of the methods disclosed with reference to embodiments of the present application may be implemented and completed directly by a hardware decoding processor, or by using a combination of hardware and software modules within the decoding processor. The software modules may be located in mature storage media of the art, such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory or registers. The storage medium resides in memory, and the processor reads the information from memory and, in cooperation with the processor's hardware, completes the steps of the method described above.

[0235] It should be understood that embodiments of this application may be provided as a method, system, or computer program product.

[0236] In one possible implementation, one embodiment of the present application provides a computer-readable storage medium. This computer-readable storage medium stores program code, and when the program code is executed on a computer, the computer is able to perform embodiments of the method described above.

[0237] In one possible implementation, one embodiment of this application provides a computer program product. When this computer program product is executed on a computer, the computer becomes capable of performing embodiments of the method described above.

[0238] Therefore, this application can utilize certain hardware-only embodiments, software-only embodiments, and embodiments that combine software and hardware. In addition, this application can utilize certain computer program products implemented on one or more computer-usable storage media (including, but not limited to, disk memory, CD-ROM, optical memory, etc.) that include computer-usable program code.

[0239] These computer program instructions may be stored in computer-readable memory that can instruct a computer or any other programmable data processing device to operate in a specific manner, in which case the instructions stored in computer-readable memory generate artifacts including an instruction unit. The instruction unit performs specific functions in one or more processes in a flowchart and / or one or more blocks in a block diagram.

[0240] Computer program instructions may instead be loaded onto a computer or another programmable data processing device, resulting in a series of operations and steps being performed on the computer or other programmable device, thereby generating a computer execution process. Thus, instructions executed on a computer or other programmable device provide steps for performing a specific function in one or more steps of a flowchart and / or one or more blocks of a block diagram.

[0241] It will be apparent to those skilled in the art that various modifications and changes can be made to the embodiments of this application without departing from the scope of the embodiments. In this case, this application intends to include such modifications and changes to the embodiments of this application, insofar as such modifications and changes fall within the scope of protection determined by the claims of this application and the equivalent art. In the embodiments of this application, unless otherwise specified or logically contradictory, the terminology and / or descriptions of the various embodiments are consistent and can be referenced to one another. It is also possible to combine the technical features of the various embodiments to form new embodiments based on the internal logical relationships between the technical features. [Explanation of Symbols]

[0242] 110 OTA servers 120 terminal devices 130 Intelligent Terminals 140 Intelligent Terminals 350 vehicles 330 Smartphones 340 Smartphones 351 Network communication device 352 OTA control unit 353 HMI 353_1 HMI 353_2 HMI 353_3 HMI 354 Cockpit Domain Controller 355 Vehicle Detection System 900 Communication equipment 901 acquired units 902 Upgrade Control Unit 1000 Communication devices 1001 Communication Unit 1002 units acquired 1003 Upgraded Control Unit 1100 Communication equipment 1101 Communication Unit 1102 Output Unit 1103 Input Unit 1200 equipment 1210 Processor 1230 Communication Interface 1220 memory

Claims

1. An upgrade method, wherein the method is A step of obtaining status information of a terminal device, wherein the status information includes the identification result of a first user and / or the identification result of a second user, wherein the first user is the owner of the terminal device and the second user is an authorized user of the terminal device. The steps include: performing an upgrade operation on the terminal device based on the aforementioned status information; Methods that include...

2. The method for obtaining the status information of the terminal device is as follows: Obtaining the status information based on the usage management information of the terminal device, Receiving first instruction information from the terminal device, wherein the first instruction information indicates, receives, the identification result of the first user and / or the identification result of the second user, or Receiving second instruction information from the first user, wherein the second instruction information indicates the identification result of the first user and / or the identification result of the second user. The method according to claim 1, comprising one or more of the following.

3. The identification result of the first user includes the presence of the first user within the terminal device or the presence of the first user in the default location of the terminal device, and the step of performing an upgrade operation of the terminal device based on the status information is: Steps to transmit upgrade operation information for the terminal device to the terminal device. The method according to claim 1 or 2, including the method described in claim 1 or 2.

4. The identification result of the first user includes the fact that the first user is not present in the terminal device, or that the first user is present in the terminal device but is not in the default location of the terminal device, and the step of performing an upgrade operation of the terminal device based on the status information is: Step of sending upgrade operation information for the terminal device to the first user. The method according to claim 1 or 2, including the method described in claim 1 or 2.

5. The identification result of the second user includes the presence of the second user within the terminal device, and the step of performing an upgrade operation on the terminal device based on the status information is: Step of sending upgrade operation information for the terminal device to the first user or the terminal device. The method according to claim 1 or 2, including the method described in claim 1 or 2.

6. A step of transmitting a third instruction information to the terminal device, wherein the third instruction information indicates the identification result of the first user and / or the identification result of the second user. The method according to any one of claims 3 to 5, further comprising:

7. The steps include receiving upgrade operation information for the terminal device from the OTA server, A step of obtaining status information of the terminal device, wherein the status information includes the identification result of a first user and / or the identification result of a second user, wherein the first user is the owner of the terminal device and the second user is an authorized user of the terminal device. A step of performing an upgrade operation on the terminal device based on the status information and the upgrade operation information. Upgrade methods, including...

8. The method for obtaining the status information of the terminal device is as follows: Receiving first instruction information from the OTA server, wherein the first instruction information indicates the identification result of the first user and / or the identification result of the second user. Based on the usage management information of the terminal device, obtain the identification result of the first user and / or the identification result of the second user. Based on the detection results of the terminal device, obtain the identification result of the first user and / or the identification result of the second user, or Based on the input information received by the terminal device, the identification result of the first user and / or the identification result of the second user is obtained. The method according to claim 7, comprising one or more of the following.

9. The identification result of the first user includes that the first user is present in the terminal device or that the first user is in the default location of the terminal device, and the step of performing an upgrade operation on the terminal device based on the status information and the upgrade operation information is: A step of transmitting second instruction information to a first device associated with the first user within the terminal device, wherein the second instruction information instructs the first device to output the upgrade operation information. The method according to claim 7 or 8, including the method according to claim 7 or 8.

10. The step of transmitting second instruction information to the first device associated with the first user within the terminal device is: The step of transmitting the second instruction information to the first device via the second device within the terminal device. The method according to claim 9, including the method described in claim 9.

11. The identification result of the first user includes the fact that the first user is not present in the terminal device, or that the first user is present in the terminal device but is not in the default location of the terminal device, and the step of performing an upgrade operation of the terminal device based on the status information and the upgrade operation information is, Step of sending the upgrade operation information to the first user. The method according to claim 7 or 8, including the method according to claim 7 or 8.

12. The identification result of the second user includes the presence of the second user within the terminal, and the step of performing an upgrade operation on the terminal device based on the status information and the upgrade operation information is: Step of transmitting the upgrade operation information to the first user or the terminal device. The method according to claim 7 or 8, including the method according to claim 7 or 8.

13. An upgrade method applicable to a first human-machine interface (HMI), wherein the method is: Steps to receive upgrade operation information, The step of outputting the upgrade operation information, A step of obtaining input information in accordance with the upgrade operation information, wherein the input information is used to permit a second HMI to output the upgrade operation information. A step of transmitting output control information based on the input information, wherein the output control information instructs the second HMI to output the upgrade operation information. Upgrade methods, including...

14. An upgrade method applied to an intelligent terminal of a first user, wherein the first user is the owner of the terminal device, and the method is: The steps include receiving upgrade operation information from an OTA server or the terminal device, The step of outputting the upgrade operation information, A step of obtaining input information in accordance with the upgrade operation information, wherein the input information is used to permit another device other than the intelligent terminal to perform the upgrade operation on the terminal device, A step of transmitting operation control information to the OTA server or the terminal device based on the input information, wherein the operation control information instructs the other device to perform the upgrade operation of the terminal device. Upgrade methods, including...

15. An acquisition unit configured to obtain status information of a terminal device, wherein the status information includes the identification result of a first user and / or the identification result of a second user, wherein the first user is the owner of the terminal device and the second user is an authorized user of the terminal device; An upgrade control unit configured to perform an upgrade operation on the terminal device based on the status information, A communication device equipped with the following features.

16. The method for obtaining the status information of the terminal device using the acquisition unit is as follows: Obtaining the status information based on the usage management information of the terminal device, Receiving first instruction information from the terminal device using a communication unit, wherein the first instruction information indicates, receives, the identification result of the first user and / or the identification result of the second user, or Receiving second instruction information from the first user using a communication unit, wherein the second instruction information indicates the identification result of the first user and / or the identification result of the second user. The apparatus according to claim 15, comprising one or more of the following.

17. The identification result of the first user includes the presence of the first user within the terminal device or the presence of the first user in the default location of the terminal device, and the upgrade control unit, The communication unit is used to transmit upgrade operation information for the terminal device to the terminal device. The apparatus according to claim 15 or 16, configured as follows.

18. A communication unit configured to receive upgrade operation information for terminal devices from an OTA server, An acquisition unit configured to obtain status information of the terminal device, wherein the status information includes the identification result of a first user and / or the identification result of a second user, the first user being the owner of the terminal device, and the second user being an authorized user of the terminal device; An upgrade control unit configured to perform an upgrade operation on the terminal device based on the status information and the upgrade operation information. A communication device equipped with the following features.

19. The method for obtaining the status information of the terminal device using the acquisition unit is as follows: Receiving first instruction information from the OTA server, wherein the first instruction information indicates the identification result of the first user and / or the identification result of the second user. Based on the usage management information of the terminal device, obtain the identification result of the first user and / or the identification result of the second user. Based on the detection results of the terminal device, obtain the identification result of the first user and / or the identification result of the second user, or Based on the input information received by the terminal device, the identification result of the first user and / or the identification result of the second user is obtained. The apparatus according to claim 18, comprising one or more of the following.

20. The identification result of the first user includes the presence of the first user within the terminal device or the presence of the first user in the default location of the terminal device, and the upgrade control unit, Using the communication unit, transmit second instruction information to a first device associated with the first user in the terminal device, wherein the second instruction information instructs the first device to output the upgrade operation information. The apparatus according to claim 18 or 19, configured as follows.

21. Using the communication unit, transmitting the second instruction information to the first device associated with the first user within the terminal device is: Using the communication unit, transmit the second instruction information to the first device via the second device within the terminal device. The apparatus according to claim 20, including the apparatus described in claim 20.

22. Human-machine interface (HMI), A communication unit configured to receive upgrade operation information, An output unit configured to output the aforementioned upgrade operation information, An input unit configured to obtain input information in accordance with the upgrade operation information, wherein the input information is used to allow a second HMI to output the upgrade operation information, and Equipped with, The communication unit is further configured to transmit output control information based on the input information, the output control information instructing the second HMI to output the upgrade operation information. Human-machine interface (HMI).

23. It is an intelligent terminal, A communication unit configured to receive upgrade operation information for a terminal device from an OTA server or a first user, wherein the first user is the owner of the terminal device, An output unit configured to output the aforementioned upgrade operation information, An input unit configured to obtain input information in response to the upgrade operation information, wherein the input information is used to authorize another device other than the intelligent terminal to perform the upgrade operation of the terminal device, and Equipped with, The communication unit is further configured to transmit operation control information to the OTA server or the terminal device based on the input information, wherein the operation control information instructs the other device to perform the upgrade operation on the terminal device. Intelligent terminal.

24. A communication device, wherein the communication device is A communication interface configured to communicate with another device, A processor coupled to the aforementioned communication interface and Equipped with, As a result, the communication device performs the method described in any one of claims 1 to 6 or 7 to 12, or the method described in claim 13 or 14. Communication device.

25. A computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed on a computer, the computer is able to perform the method described in any one of claims 1 to 6 or 7 to 12, or the method described in claim 13 or 14.

26. A computer program product comprising a computer program, wherein when the computer program is executed on a computer, the computer becomes capable of performing the method described in any one of claims 1 to 6 or 7 to 12, or the method described in claim 13 or 14.

27. A chip comprising a processor, the processor being coupled to memory and configured to execute a computer program or instruction stored in the memory, wherein when the computer program or instruction is executed, the method described in any one of claims 1 to 6 or 7 to 12, or the method described in claim 13 or 14, is performed.

28. A vehicle comprising an OTA control unit configured to carry out the method described in any one of claims 7 to 12 or the method described in claim 14.

29. The vehicle according to claim 28, comprising an HMI configured to output upgrade operation information for the vehicle and / or to obtain input information in accordance with the upgrade operation information.

30. The following communication devices: A communication device configured to carry out the method described in any one of claims 1 to 6, A communication device configured to carry out the method described in any one of claims 7 to 12, A communication device configured to carry out the method described in claim 13, or A communication device configured to carry out the method described in claim 14. A communication system that includes one or more of the following.