Vehicle control method and apparatus and vehicle
The vehicle control method and device ensure basic services are maintained during software upgrades by sensing the presence of a person and using dedicated communication channels, addressing the disruption caused by vehicle software updates.
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- YINWANG INTELLIGENT TECHNOLOGIES CO LTD
- Filing Date
- 2022-05-20
- Publication Date
- 2026-05-01
AI Technical Summary
Vehicle software upgrades often disrupt normal vehicle operation, leading to a poor user experience due to the unavailability of basic services during the upgrade process, particularly in connected, automated, and electrified vehicles.
A vehicle control method and device that senses the presence of a person inside the vehicle during the software upgrade process, enabling the provision of basic services by controlling units such as air conditioners, speakers, and vehicle lights through dedicated communication channels, ensuring minimal disruption to the upgrade process.
Enables the provision of basic services during vehicle software upgrades, improving user experience by reducing the impact on vehicle operation and ensuring essential functions are available even during software updates.
Smart Images

Figure 0007854253000001 
Figure 0007854253000002 
Figure 0007854253000003
Abstract
Description
Technical Field
[0005]
[0001]
[0001] This application relates to the field of vehicle technology, and in particular, to vehicle control methods and devices and vehicles.
Background Art
[0002]
[0002] With the popularization of "connected, automated, shared, and electrified" vehicles, there are an increasing number of electronic programs. The electronic cost of vehicles has become a cause of the gradual increase in vehicle cost, and in contrast to conventional vehicles, it significantly increases in new energy vehicles. "Software-defined vehicles" are becoming a development trend in vehicles, and accordingly, the complexity of vehicle software has increased significantly. To perform software fault recovery in a timely manner and implement functions such as customized requirement updates, vehicle software upgrades are becoming increasingly frequent. Vehicle software upgrades include wired software upgrades, over-the-air technology (OTA), etc. However, in the vehicle software upgrade process, the vehicle cannot be used normally, and as a result, the user experience is not good.
Summary of the Invention
[0003]
[0003] Embodiments of this application disclose a vehicle control method, a device, and a vehicle for providing basic services normally in the vehicle software upgrade process.
[0004]
[0004] According to a first aspect, this application provides a vehicle control method. The method includes the following:
[0005] In a vehicle software upgrade process, the vehicle's control unit receives a signal from a target unit, the target unit is configured to sense whether a person is present inside the vehicle; and The process includes the step of, based on a signal, determining that a person is present in the vehicle, and then the control unit controlling the basic service unit in the vehicle to provide basic services.
[0005]
[0006] Optionally, the control unit may include one or more of the following: Vehicle Domain Controller (VDC), Cockpit Domain Controller (CDC), Vehicle Integration Unit (VIU), or Gateway.
[0006]
[0007] Optionally, the target unit may be one or more of the following: a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box.
[0007]
[0008] As an option, the Basic Service Unit includes one or more of the following: air conditioner, speakers, vehicle-mounted infotainment screen, horn, wipers, vehicle lights, or the vehicle's dashboard.
[0008]
[0009] In this solution, signals from the target unit can still be received during the vehicle's software upgrade process. As a result, if the received signals indicate the presence of a person inside the vehicle, the basic service unit within the vehicle can be controlled to provide basic services to the user. Compared to existing solutions where vehicle services are unavailable during the vehicle upgrade process, this solution can meet the user's basic service requirements during the vehicle's software upgrade process, thereby improving the user experience.
[0009]
[0010] In possible implementations, the control unit is connected to the target unit via a signaling circuit, which is configured to transmit signals from the target unit to the control unit during the vehicle's software upgrade process.
[0010]
[0011] In this solution, a directly connected signal line may be placed between the control unit and the target unit, specifically configured to transmit signals from the target unit to the control unit during the vehicle's software upgrade process. As a result, the control unit can sense whether a person is present in the vehicle and, if a person is present, control the basic service unit within the vehicle to provide basic services to the user. In this solution, if another communication channel is disabled during the vehicle's software upgrade process, signals from the target unit can still be transmitted to the control unit. This reduces reliance on controller area network communication and provides a basis for meeting the user's basic service requirements during the vehicle's software upgrade process.
[0011]
[0012] In possible implementations, the method is:
[0013] A step in which the control unit receives a communication control packet, the communication control packet instructing the control unit to disable the controller area network CAN communication function; and The further step includes, after receiving a communication control packet, the control unit ensures CAN communication functionality between the control unit and the target unit based on a first pre-configured configuration.
[0012]
[0014] The steps for the vehicle's control unit to receive a signal from the target unit are:
[0015] The control unit receives a signal from a target unit via a controller area network, wherein the signal is a CAN signal;
[0013]
[0016] Optionally, a first pre-configured configuration indicates that the control unit is only permitted to receive a target signal from the target unit via the controller area network, and the target signal is used to determine whether a person is present in the vehicle.
[0014]
[0017] In possible implementations, the method is: The further step includes, after receiving a communication control packet, the control unit ensures CAN communication functionality with the basic service unit based on a second pre-configured configuration.
[0015]
[0018] The steps for the control unit to control the basic service unit within the vehicle to provide basic services are as follows:
[0019] The control unit transmits a packet to a basic service unit via a controller area network, the packet instructing the basic service unit to provide basic services, and the packet is a CAN packet;
[0016]
[0020] In the aforementioned solution, where CAN communication functionality is ensured based on a pre-configured configuration, the specified CAN communication functionality is ensured through the pre-configured configuration during the vehicle software upgrade process, and as a result, signals from the target unit can be transmitted to the control system. In this case, basic services can be provided during the vehicle software upgrade process. Furthermore, during the vehicle software upgrade process, only the CAN communication functionality necessary to provide basic services can be ensured, while the CAN communication functionality of other signals or vehicle components is still disabled. Therefore, the impact on data flushing during the vehicle software upgrade process can be reduced as much as possible. In other words, the present application allows for the provision of basic services during the vehicle software upgrade process to improve the user experience, provided that the impact on vehicle software upgrade services is reduced as much as possible.
[0017]
[0021] In a possible implementation, the steps of a control unit controlling a basic service unit within a vehicle to provide basic services are: The process includes a step in which the control unit sends a packet to the basic service unit using the Unified Diagnostic Services (UDS) protocol, instructing the basic service unit to provide basic services.
[0018]
[0022] In the vehicle's software upgrade process, the UDS protocol is used to transmit data for data flushing. In this solution, the UDS protocol is used to transmit packets from the control unit to the basic service unit, so that the upgrade data and packets are transmitted synchronously. In other words, the basic service unit can be controlled to provide basic services without affecting the flushing of upgrade data, resulting in an improved user experience.
[0019]
[0023] In a possible implementation, the target unit includes a vehicle key controller. Signals from the target unit include signals from the vehicle key controller, including a signal indicating whether the vehicle key is inside the vehicle. A signal indicating that the vehicle key is inside the vehicle indicates that a person is inside the vehicle, and a signal indicating that the vehicle key is not inside the vehicle indicates that no person is inside the vehicle.
[0020]
[0024] In a possible implementation, the target unit includes a seat controller. Signals from the target unit include signals from the seat controller, which include signals indicating whether a person is present in a seat in a vehicle; a signal indicating a person is present in a seat in a vehicle indicates that a person is present in the vehicle; and a signal indicating no person is present in a seat in a vehicle indicates that no person is present in the vehicle.
[0021]
[0025] In a possible implementation, the target unit includes a vehicle-mounted T-box, and the signals from the target unit include signals from the vehicle-mounted T-box indicating whether a person is present in the vehicle.
[0022]
[0026] In a possible implementation, the target unit further includes a vehicle lock controller. A signal from the target unit is a signal from the vehicle lock controller, including a signal indicating that the vehicle lock of the vehicle is in an unlocked state or a locked state. A signal indicating that the vehicle lock of the vehicle is in an unlocked state indicates that there is a person in the vehicle, and a signal indicating that the vehicle lock of the vehicle is in a locked state indicates that there is no person in the vehicle.
[0023]
[0027] In a possible implementation, a signal from a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box has a higher priority than a signal from the vehicle lock controller.
[0024]
[0028] Based on the signal, making a determination that there is a person in the vehicle:
[0029] Based on a signal from the vehicle lock controller, making a determination that there is no person in the vehicle, and based on a signal from the vehicle key controller, the seat controller, the camera, or the vehicle-mounted T-box, making a determination that there is a person in the vehicle. In this case, the control unit includes making a determination that there is a person in the vehicle.
[0025]
[0030] Whether there is a person in the vehicle is determined based on signals from one or more target units, and as a result, it is possible to timely sense the presence of a person in the vehicle, quickly and appropriately control the corresponding basic service unit to provide basic services, and improve the user experience. Further, the above step of comprehensively determining whether there is a person in the vehicle based on signals from a plurality of target units improves the determination accuracy and controls the basic service to provide the basic service unit, avoiding waste of resources caused by performing it due to a false determination that there is a person in the vehicle, and avoiding a poor user experience caused by not providing the basic service due to a false determination that there is no person in the vehicle.
[0026]
[0031] According to a second aspect, the present application provides a vehicle control method. The method is as follows:
[0032] In the software upgrade process of the vehicle, when a target unit senses whether there is a person in the vehicle, it includes the step of transmitting a signal to the control unit of the vehicle, and the signal instructs the control unit to control the basic service unit in the vehicle to provide basic services.
[0027]
[0033] Optionally, the control unit includes one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.
[0028]
[0034] Optionally, the target unit is one or more of a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or an in-vehicle T-box of the vehicle.
[0029]
[0035] In this solution, during the vehicle's software upgrade process, the target unit can still transmit signals to the control unit. As a result, if the signal received by the control unit indicates the presence of a person inside the vehicle, the basic service unit within the vehicle can be controlled to provide basic services to the user. Compared to existing solutions where vehicle services are unavailable during the vehicle upgrade process, this solution can meet the user's basic service requirements during the vehicle's software upgrade process, thereby improving the user experience.
[0030]
[0036] In possible implementations, the target unit is connected to the control unit via a signaling circuit; the signaling circuit is configured to transmit signals from the target unit to the control unit during the vehicle's software upgrade process.
[0031]
[0037] In this solution, a directly connected signal line may be placed between the target unit and the control unit, specifically configured to transmit signals from the target unit to the control unit during the vehicle's software upgrade process. As a result, the control unit can sense whether a person is present in the vehicle and control the basic service unit within the vehicle to provide basic services to the user if a person is present. In this solution, even if another communication channel is disabled during the vehicle's software upgrade process, signals from the target unit can still be transmitted to the control unit. This provides a basis for meeting the user's basic service requirements during the vehicle's software upgrade process.
[0032]
[0038] In possible implementations, the method is:
[0039] A step in which the target unit receives a communication control packet, the communication control packet instructing the target unit to disable the controller area network CAN communication function; and The process includes the step of the target unit, after receiving a communication control packet, ensuring CAN communication functionality with the control unit based on a pre-configured configuration;
[0033]
[0040] The steps for the target unit to send a signal to the vehicle's control unit are:
[0041] The process includes the step of the target unit transmitting a signal to the control unit via a controller area network, the signal being a CAN signal.
[0034]
[0042] Optionally, a pre-configured setting indicates that the target unit is only permitted to transmit a target signal to the control unit via the controller area network, and this target signal is used to determine whether a person is present inside the vehicle.
[0035]
[0043] In the aforementioned solution, where CAN communication functionality is ensured based on a pre-configured configuration, the specified CAN communication functionality is ensured through the pre-configured configuration during the vehicle's software upgrade process, thereby enabling the transmission of signals from the target unit to the control system. In this case, basic services can be provided during the vehicle's software upgrade process. Furthermore, during the vehicle's software upgrade process, only the CAN communication functionality necessary to provide basic services may be ensured, while the CAN communication functionality of other signals or vehicle components remains disabled. Thus, the impact on data flushing during the vehicle's software upgrade process can be reduced as much as possible. In other words, the present application makes it possible to provide basic services during the vehicle's software upgrade process to improve the user experience, provided that the impact on vehicle software upgrade services is reduced as much as possible.
[0036]
[0044] According to a third aspect, the present application provides a vehicle control method. The method is:
[0045] The process includes the step of the vehicle's OAT controller broadcasting a communication control packet to the vehicle based on a pre-configured configuration, the communication control packet instructing the vehicle to disable all CAN communication functions except for the target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between the vehicle's target unit and control unit, the target unit being configured to sense whether a person is present in the vehicle, and the target signal being a signal from the target unit used to determine whether a person is present in the vehicle; The first CAN communication function is used to transmit target signals to the control unit during the vehicle's software upgrade process.
[0037]
[0046] Generally, to reduce the impact of other data transmissions on upgrade data transmission during a vehicle upgrade process, an OTA controller can broadcast a communication control packet to the vehicle to disable the vehicle's entire CAN communication function. In this case, the vehicle's entire basic service is unavailable. However, in this solution, when broadcasting a communication control packet, the OTA controller can be instructed not to disable the target CAN communication function, but to disable all CAN communication functions except the target CAN communication function. In this way, signal communication between the target unit and the basic control unit can still be maintained while minimizing the impact on upgrade data transmission; that is, signals from the target unit can be transmitted to the control unit. As a result, during the vehicle upgrade process, the control unit can control the basic service unit to provide basic services based on the signals, thereby improving the user experience.
[0038]
[0047] In possible implementations, the target CAN communication function further includes a second CAN communication function for transmitting target packets between the control unit and the basic service unit, the target packets instructing the basic service unit to provide basic services.
[0039]
[0048] The second CAN communication function is used to send target packets to the basic service unit during the vehicle's software upgrade process.
[0040]
[0049] In this solution, the target CAN communication function further includes a CAN communication function for transmitting target packets between the control unit and the basic service unit. As a result, during a vehicle software upgrade, the control system can send packets to the basic service unit via the CAN communication function to instruct the basic service unit to provide basic services, thereby improving the user experience.
[0041]
[0050] According to a fourth aspect, the present application provides a vehicle control device, the control device being installed in a vehicle, and the control device is: A receiving module configured to receive signals from a target unit in a vehicle software upgrade process, wherein the target unit is configured to sense whether a person is present inside the vehicle; and Includes a control module configured to control a basic service unit within a vehicle to provide basic services when it is determined, based on a signal, that a person is present inside the vehicle.
[0042]
[0051] In possible implementations, the control unit is connected to the target unit via a signal line.
[0043]
[0052] The signaling circuit is configured to transmit signals from the target unit to the control unit during the vehicle's software upgrade process.
[0044]
[0053] In possible implementations, the receiving module is further configured to receive communication control packets, which instruct the control unit to disable the Controller Area Network CAN communication function.
[0045]
[0054] The control unit further includes a reserved module configured to ensure CAN communication functionality between the control unit and the target unit based on a first pre-configured configuration after a communication control packet has been received.
[0046]
[0055] The receiving module specifically: It is configured to receive signals from the target unit via a controller area network, and these signals are CAN signals.
[0047]
[0056] In a possible implementation, a first pre-configured configuration indicates that the control unit is only permitted to receive a target signal from a target unit via the controller area network, and the target signal is used to determine whether a person is present in the vehicle.
[0048]
[0057] In possible implementations, the reservation module is further configured to ensure CAN communication functionality with the basic service unit based on a second pre-configured configuration after a communication control packet has been received.
[0049]
[0058] The control unit further includes a transmission module, and the control module is: The transmitting module is specifically configured to control the transmission module to send packets to the Basic Service Unit via the Controller Area Network, the packets instructing the Basic Service Unit to provide the Basic Service, and the packets are CAN packets.
[0050]
[0059] In possible implementations, the control unit further includes a transmitting module, and the control module is: The system is specifically configured to control the transmitting unit to send packets to the Basic Service Unit by utilizing the Unified Diagnostic Services (UDS) protocol, and these packets instruct the Basic Service Unit to provide the Basic Service.
[0051]
[0060] In possible implementations, the control system includes one or more of the following: a vehicle domain controller (VDC), a cockpit domain controller (CDC), a vehicle integration unit (VIU), or a gateway.
[0052]
[0061] In possible implementations, the target unit is one or more of the following: a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box.
[0053]
[0062] In a possible implementation, the target unit includes a vehicle key controller. Signals from the target unit include signals from the vehicle key controller indicating whether the vehicle key is inside the vehicle, the signal indicating that the vehicle key is inside the vehicle indicates that a person is inside the vehicle, and the signal indicating that the vehicle key is not inside the vehicle indicates that no person is inside the vehicle.
[0054]
[0063] In a possible implementation, the target unit includes a seat controller. Signals from the target unit include signals from the seat controller, which include signals indicating whether a person is present in a seat in a vehicle; a signal indicating a person is present in a seat in a vehicle indicates that a person is present in the vehicle; and a signal indicating no person is present in a seat in a vehicle indicates that no person is present in the vehicle.
[0055]
[0064] In possible implementations, the target unit includes a vehicle-mounted T-box. Signals from the target unit are signals from the vehicle-mounted T-box, including signals indicating whether a person is present in the vehicle.
[0056]
[0065] In possible implementations, the target unit further includes a vehicle lock controller. Signals from the target unit include signals from the vehicle lock controller, including signals indicating whether the vehicle's vehicle lock is unlocked or locked, the signal indicating that the vehicle's vehicle lock is unlocked indicating that a person is present in the vehicle, and the signal indicating that the vehicle's vehicle lock is locked indicating that no person is present in the vehicle.
[0057]
[0066] In possible implementations, signals from the vehicle key controller, seat controller, camera, or vehicle-mounted T-box have higher priority than signals from the vehicle lock controller.
[0058]
[0067] The control device further includes a determination unit, which is configured to determine, based on a signal, whether a person is present inside the vehicle, specifically: Based on the signal from the vehicle lock controller, the system determines that there is no person inside the vehicle. If, based on the signal from the vehicle key controller, seat controller, camera, or vehicle-mounted T-box, the system determines that there is a person inside the vehicle, then the system determines that there is a person inside the vehicle.
[0059]
[0068] According to the fifth aspect, the present application provides a vehicle device, the vehicle device: The vehicle's software upgrade process includes a transmitting module configured to send a signal to the vehicle's control unit when it senses the presence of a person inside the vehicle, instructing the control unit to control the basic service unit within the vehicle to provide basic services.
[0060]
[0069] In possible implementations, the vehicle device is connected to the control unit via a signal line.
[0061]
[0070] The signaling circuit is configured to transmit signals from the vehicle's equipment to the control unit during the vehicle's software upgrade process.
[0062]
[0071] In possible implementations, the vehicle device would be: A receiving module configured to receive communication control packets, wherein the communication control packets instruct the vehicle device to disable the Controller Area Network CAN communication function; and A reserved module configured to ensure CAN communication functionality with the control unit based on a pre-configured setting after receiving a communication control packet; It also includes.
[0063]
[0072] The transmitting module is: It is specifically configured to transmit signals to the control unit via a controller area network, and these signals are CAN signals.
[0064]
[0073] In possible implementations, a pre-configured setting indicates that the vehicle device is only permitted to transmit a target signal to the control unit via the controller area network, and this target signal is used to determine whether a person is present inside the vehicle.
[0065]
[0074] In possible implementations, the control unit includes one or more of the following: a vehicle domain controller (VDC), a cockpit domain controller (CDC), a vehicle integration unit (VIU), or a gateway.
[0066]
[0075] In possible implementations, the vehicle device is one or more of the following: a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box.
[0067]
[0076] According to the sixth aspect, the present application provides a vehicle control device, the vehicle control device is: The system includes a broadcast module configured to broadcast communication control packets to the vehicle based on a pre-configured configuration, the communication control packets instructing the system to disable all CAN communication functions except the target CAN communication function, the target CAN communication function including a first CAN communication function for transmitting a target signal between the vehicle's target unit and the control unit, the target unit being configured to sense whether a person is present in the vehicle, and the target signal being a signal from the target unit used to determine whether a person is present in the vehicle.
[0068]
[0077] The first CAN communication function is used to transmit target signals to the control unit during the vehicle's software upgrade process.
[0069]
[0078] In possible implementations, the target CAN communication function further includes a second CAN communication function for transmitting target packets between the control unit and the basic service unit, the target packets instructing the basic service unit to provide basic services.
[0070]
[0079] The second CAN communication function is used to send target packets to the basic service unit during the vehicle's software upgrade process.
[0071]
[0080] According to the seventh aspect, the present application provides a vehicle control device, the device being included in a vehicle, and the device including a processor and memory. The memory is coupled to the processor, and when a computer program stored in the memory is executed, the processor can implement the vehicle control method described in any implementation of the first aspect. The device may further include a communication interface, which is used for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module, or another type of communication interface.
[0072]
[0081] In possible implementations, the device: Memory configured to store computer programs; and Processor; It may include: The processor is configured to receive signals from a target unit via a communication interface during the vehicle's software upgrade process, and the target unit is configured to sense whether a person is present inside the vehicle; and The processor is configured to control the basic service unit within the vehicle to provide basic services if it determines, based on a signal, that a person is present inside the vehicle.
[0073]
[0082] It should be noted in this application that the computer program in memory may be pre-stored or may be downloaded from the Internet and stored when the device is used. The source of the computer program in memory is not particularly limited in this application. The coupling in the embodiments of this application may be an indirect coupling or connection between devices, units, or modules in an electrical, mechanical, or other form and may be used for information exchange between devices, units, or modules.
[0074]
[0083] According to the eighth aspect, the present application provides a vehicle device, the device being included in the vehicle, and the device including a processor and memory. The memory is coupled to the processor, and when a computer program stored in the memory is executed, the processor can implement a vehicle control method as described in any implementation of the second aspect. The device may further include a communication interface, which is used for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module, or another type of communication interface.
[0075]
[0084] In possible implementations, the device: Memory configured to store computer programs; and Processor; It may include: The processor is configured to transmit signals to the vehicle's control unit via a communication interface during the vehicle's software upgrade process. These signals instruct the control unit to control the basic service unit within the vehicle to provide basic services.
[0076]
[0085] It should be noted in this application that the computer program in memory may be pre-stored or may be downloaded from the Internet and stored when the device is used. The source of the computer program in memory is not particularly limited in this application. The coupling in the embodiments of this application may be an indirect coupling or connection between devices, units, or modules in an electrical, mechanical, or other form and may be used for information exchange between devices, units, or modules.
[0077]
[0086] According to the ninth aspect, the present application provides a vehicle control device, the device being included in a vehicle, and the device including a processor and memory. The memory is coupled to the processor, and when a computer program stored in the memory is executed, the processor can implement the vehicle control method described in any implementation of the third aspect. The device may further include a communication interface, which is used for the device to communicate with other devices. For example, the communication interface may be a transceiver, a circuit, a bus, a module, or another type of communication interface.
[0078]
[0087] In possible implementations, the device: Memory configured to store computer programs; and Processor; It may include: The processor is configured to broadcast a communication control packet to the vehicle based on a pre-configured configuration, the communication control packet instructing the vehicle to disable all CAN communication functions except for the target CAN communication function, the target CAN communication function includes a first CAN communication function for transmitting a target signal between the vehicle's target unit and the control unit, the target unit is configured to sense whether a person is present in the vehicle, the target signal is a signal from the target unit used to determine whether a person is present in the vehicle, and the first CAN communication function is used to transmit the target signal to the control unit during the vehicle's software upgrade process.
[0079]
[0088] It should be noted in this application that the computer program in memory may be pre-stored or may be downloaded from the Internet and stored when the device is used. The source of the computer program in memory is not particularly limited in this application. The coupling in the embodiments of this application may be an indirect coupling or connection between devices, units, or modules in an electrical, mechanical, or other form and may be used for information exchange between devices, units, or modules.
[0080]
[0089] According to the tenth aspect, the present application provides a vehicle comprising a control device and a vehicle device, wherein the control device is a control device in any implementation of the fourth aspect, and the vehicle device is a vehicle device in any implementation of the fifth aspect.
[0081]
[0090] According to the eleventh aspect, the present application provides a computer-readable storage medium which stores a computer program which is executed by a processor to carry out the method according to the first aspect or any possible implementation thereof.
[0082]
[0091] According to the twelfth aspect, the present application provides a computer-readable storage medium that stores a computer program, and the computer program is executed by a processor to implement the method according to the second aspect or any possible implementation thereof.
[0083]
[0092] According to the 13th aspect, the present application provides a computer-readable storage medium which stores a computer program, and the computer program is executed by a processor to carry out a method according to the third aspect or any possible implementation thereof.
[0084]
[0093] According to the fourteenth aspect, the present application provides computer program software. When the computer program software is executed by a processor, the first aspect or any possible implementation thereof is performed.
[0085]
[0094] According to the 15th aspect, the present application provides computer program software. When the computer program software is executed by a processor, the method according to the second aspect or any possible implementation thereof is performed.
[0086]
[0095] According to the sixteenth aspect, the present application provides computer program software. When the computer program software is executed by a processor, a method according to the third aspect or any possible implementation thereof is performed.
[0087]
[0096] The solutions provided in the fourth through sixteenth aspects are used to implement or in conjunction with the methods provided in the first, second, or third aspects, and thus can achieve the same or corresponding beneficial effects as those in the first, second, or third aspects. Further details are not provided here. [Brief explanation of the drawing]
[0088] [Figure 1]
[0097] Figure 1 shows the structure of an intelligent vehicle system according to an embodiment of the present application. [Figure 2]
[0098] Figure 2 is a diagram showing the structure of the in-vehicle network according to the embodiment of the present application. [Figure 3]
[0099] Figure 3 is a schematic flowchart of the method according to the embodiment of the present application. [Figure 4A]
[0100] Figure 4A is a diagram of an intra-vehicle communication channel according to an embodiment of the present application. [Figure 4B]
[0101] Figure 4B shows another intra-vehicle communication channel according to an embodiment of the present application. [Figure 4C]
[0102] Figure 4C shows another intra-vehicle communication channel according to an embodiment of the present application. [Figure 4D]
[0103] Figure 4D is a diagram showing the connection relationships between vehicle components according to the embodiment of the present application. [Figure 4E]
[0104] Figure 4E is a diagram illustrating the dialogue procedure according to the embodiment of the present application. [Figure 5A]
[0105] Figure 5A is a diagram of another intra-vehicle communication channel according to an embodiment of the present application. [Figure 5B]
[0106] Figure 5B shows another intra-vehicle communication channel according to an embodiment of the present application. [Figure 5C]
[0107] Figure 5C shows another intra-vehicle communication channel according to an embodiment of the present application. [Figure 6]
[0108] Figure 6 is a diagram of another dialogue procedure according to an embodiment of the present application. [Figure 7]
[0109] Figure 7 is a logic diagram of the control device according to the embodiment of the present application. [Figure 8]
[0110] Figure 8 is a logical configuration diagram of the vehicle device according to the embodiment of the present application. [Figure 9]
[0111] Figure 9 is a logic diagram of another control device according to an embodiment of the present application. [Figure 10]
[0112] Figure 10 is a hardware configuration diagram of the control device according to the embodiment of the present application. [Figure 11]
[0113] Figure 11 is a hardware configuration diagram of a vehicle device according to an embodiment of the present application. [Figure 12]
[0114] Figure 12 is a hardware configuration diagram of another control device according to an embodiment of the present application. [Modes for carrying out the invention]
[0089]
[0115] The technical solution in the embodiment of this application will be described below with reference to the attached drawings of the embodiment of this application.
[0090]
[0116] Figure 1 shows an example of the configuration diagram of an intelligent vehicle system. The intelligent vehicle system includes an over-the-air technology (OTA) module, a gateway (GW) or vehicle integration unit (VIU), a vehicle domain controller (VDC), a cockpit domain controller (CDC), a vehicle lock controller, and a seat controller. The OTA module, VDC, CDC, vehicle lock controller, and seat controller are connected to the gateway (or VIU).
[0091]
[0117] The OTA module may be connected to the gateway (or VIU) via an Ethernet® bus and a Controller Area Network (CAN) bus. The VDC and gateway (or VIU) may also be connected via an Ethernet bus and a CAN bus, and the CDC and gateway (or VIU) may also be connected via an Ethernet bus and a CAN bus. The vehicle lock controller and gateway (or VIU) may be connected via a CAN bus, and the seat controller and gateway (or VIU) may be connected via a CAN bus.
[0092]
[0118] An intelligent vehicle system may include multiple gateways (or VIUs), which may be arranged in a distributed manner within the intelligent vehicle system. For ease of understanding, see, for example, Figure 2, in which four gateways (or VIUs) are used as an example. As shown in Figure 2, distributed gateways (or VIUs) may provide a high-speed Ethernet bus for interconnection to form a ring network. The ring network provides reliable communication performance. If any of the VIUs fail, the entire ring network can ensure the communication security of the entire system via a loopback route. Figure 2 is merely an example and does not constitute a limitation to embodiments of the present application.
[0093]
[0119] In possible implementations, the gateway can be a core component of the vehicle's overall electronic and electrical architecture. As a data exchange hub for the entire vehicle network, the gateway can route data from various networks, such as CAN networks, Local Interconnect Networks (LIN), and Media Oriented System Transport (MOST) networks, within those networks. For example, the gateway may specifically implement protocol conversion functions, protocol encapsulation and transmission functions, and data format conversion functions.
[0094]
[0120] In practical implementation, the VIU can provide all or part of the data processing or control functions for multiple vehicle components. The functions of the VIU are illustrated below with examples. It should be understood that the VIU may have one or more of the following functions:
[0095]
[0121] 1. Electronic control functions. This means that the VIU is configured to perform electronic control functions provided by electronic control units (ECUs) within some or all of the vehicle components. For example, the VIU has control functions required by the vehicle components. Another example is the VIU having data processing functions required by the vehicle components.
[0096]
[0122] 2. Same functions as the gateway. This means that the VIU may have some or all of the same functions as the gateway, for example, protocol conversion functions, protocol encapsulation and transmission functions, and data format conversion functions.
[0097]
[0123] 3. The ability to process data between vehicle components. This means that processing and calculations are performed on data obtained from actuators of multiple vehicle components.
[0098]
[0124] It should be noted that the data related to the aforementioned functions may include operating data of actuators within the vehicle components, such as actuator motion parameters and actuator operating states. Furthermore, the data related to the aforementioned functions may also include data collected via data acquisition units (e.g., sensing elements or sensors) of the vehicle components, such as road information and weather information of the roads on which the vehicle travels, which are collected by the vehicle's sensing elements. This is not particularly limited to the embodiments of this application.
[0099]
[0125] The OTA module may be configured to perform an OTA upgrade of the entire vehicle. The OTA module is capable of wireless communication with the OTA server. Specifically, a secure channel may be established between the OTA server and the OTA module. For example, a security channel such as the hypertext transfer protocol over secure socket layer (HTTPS), transport layer security (TLS), or datagram transport layer security (DTLS) protocol may be established. Information can be securely transmitted between the OTA server and the OTA module over the established secure channel. For example, policy packages and upgrade packages for components to be upgraded can be securely transmitted. The OTA server may be deployed on an electronic device with wireless communication and storage capabilities, or on a virtual machine (VM) or container in the cloud, where the cloud may be a cluster containing multiple electronic devices.
[0100]
[0126] The VDC is configured to serve vehicle components within the body domain and vehicle components within the chassis domain. Vehicle components in the body domain include door and window lift controllers, power rearview mirrors, air conditioners, central door locks, etc. Vehicle components in the chassis domain include vehicle components in the braking system, vehicle components in the steering system, vehicle components in the accelerator system (e.g., throttle) and similar components.
[0101]
[0127] The aforementioned CDC is configured to provide services to vehicle components within the cockpit domain. These vehicle components include head-up displays, instrument displays, radios, navigators, cameras, and the like.
[0102]
[0128] A vehicle lock controller may be configured to communicate with a vehicle key and receive and process signals transmitted by the vehicle key. For example, a vehicle lock controller can receive an unlock (or lock) signal transmitted by the vehicle key and control the vehicle lock to be in an unlock (or locked) state based on the unlock (or lock) signal.
[0103]
[0129] The seat controller may be configured to sense, using sensors or sensing elements, whether or not a person is present in the seat.
[0104]
[0130] In possible implementations, the intelligent vehicle system may further include an autonomous driving domain controller, a vehicle key controller, and the like. The autonomous driving domain controller is configured to provide services to vehicle components that perform autonomous driving functions. Vehicle components that perform autonomous driving functions include monocular cameras, binocular cameras, millimeter-wave radar, lidar, ultrasonic radar, and the like. For example, the functions of the autonomous driving domain controller may be implemented by a mobile data center (MDC). The vehicle key controller is used to sense, via sensors or sensing elements, whether or not a vehicle key is present in the vehicle.
[0105]
[0131] VDC, CDC, and MDC are all configured to serve components within a vehicle's area and are therefore sometimes referred to as the vehicle's domain controllers.
[0106]
[0132] In possible implementations, the intelligent vehicle system may further include a central controller. The central controller may include vehicle mode management functions and be configured to coordinate and control domain controllers, vehicle components, etc., within the vehicle.
[0107]
[0133] The above describes the components of an intelligent vehicle system using specific examples. These components are not limited to those described above, depending on the specific implementation. Details are not listed individually in this application.
[0108]
[0134] From the above description of the intelligent vehicle system, it is clear that an OTA upgrade of the entire vehicle can be performed via an OTA module. In existing OTA upgrade solutions, after receiving data such as an upgrade package from the OTA server, the OTA module can perform a software upgrade by transmitting packets to flash the software data within the electronic control unit (ECU) using the Unified Diagnostic Services (UDS) protocol. ECU is a general term for all controllers within an intelligent vehicle system. For example, the VDC, CDC, VIU, gateway, vehicle lock controller or seat controller, and other vehicle component controllers in an intelligent vehicle system are all ECUs.
[0109]
[0135] However, in existing intelligent vehicle system architectures, both UDS protocol packets and CAN packets are transmitted over the CAN bus, and CAN packets have higher priority than UDS protocol packets. To avoid frame loss of UDS packets used to flush ECU data, the OTA module sends a communication control packet to each ECU by broadcast throughout the vehicle before sending UDS packets. The communication control packet instructs the ECU to disable its CAN communication function, i.e., the ECU will no longer process CAN packets. For example, the communication control packet may be sent by using service 28 of the UDS protocol. After receiving the communication control packet, the gateway (or VIU) also disables the route forwarding function for CAN packets to make way for UDS protocol packets.
[0110]
[0136] Once the CAN communication function of the entire vehicle is disabled, the lowest level of service communication is interrupted, and the entire vehicle will be unable to provide basic services as usual. For example, after the CAN communication function is disabled, the vehicle will not be able to detect whether a person is inside the vehicle, and will not be able to provide basic services such as sound, light, and electricity if a person is inside the vehicle. This will affect the normal use of vehicle services by users.
[0111]
[0137] In addition to the aforementioned vehicle-wide software upgrade via OTA module, vehicle software upgrades may also be performed via wired flushing, for example, at a maintenance shop site. If the vehicle-wide CAN communication function is disabled during the wired flushing software upgrade process, basic services may not be able to be provided as normal.
[0112]
[0138] To address the aforementioned problem of being unable to provide basic services as normal during a vehicle's software upgrade process, embodiments of the present application provide a method for providing basic services in a vehicle. See, for example, Figure 3. The method includes, but is not limited to, the following steps.
[0113]
[0139] S301: In the vehicle software upgrade process, the vehicle's control unit is configured to receive signals from a target unit, and the target unit is configured to sense whether a person is present inside the vehicle.
[0114]
[0140] In specific implementations, the control unit may include one or more of the following: VDC, CDC, VIU, or gateway. The target unit may include one or more of the following: vehicle lock controller, vehicle key controller, seat controller, camera, or vehicle-mounted T-box.
[0115]
[0141] S302: Based on the signal, if the control unit determines that a person is present in the vehicle, it controls the basic service unit in the vehicle to provide basic services.
[0116]
[0142] In specific implementations, the basic service unit includes one or more of the following in-vehicle audio control units, light control units, electrical control units, or entertainment control units. For example, the basic service unit may include one or more of the following in-vehicle: air conditioner, vehicle lights, in-vehicle infotainment screen, horn, wipers, speakers, dashboard, etc. The air conditioner can provide services utilizing the air conditioner, the vehicle lights can provide services utilizing the vehicle lights, the in-vehicle infotainment screen can provide services utilizing the in-vehicle infotainment screen, the horn can provide services utilizing the horn, the wipers can provide services utilizing the wipers, the speakers can provide services utilizing the speakers, and the dashboard can provide services utilizing the dashboard. This is merely an example, and the basic service unit is not limited to the embodiments of this application.
[0117]
[0143] For the sake of clarity in subsequent explanations, signals received by the control unit from the target unit are sometimes referred to as notification signals.
[0118]
[0144] For example, the aforementioned process of determining whether a person is present in a vehicle based on a signal may include one or more of the following cases:
[0119]
[0145] Case 1: The target unit includes a vehicle lock controller. For example, if a user needs to enter a vehicle, the user can send a signal to the vehicle lock controller, such as via a vehicle key, to unlock the vehicle lock. The vehicle lock controller receives the signal to unlock the vehicle lock, unlocks the vehicle lock, and as a result, the user can enter the vehicle. After receiving the signal to unlock the vehicle lock, the vehicle lock controller generates a notification signal based on the signal to unlock the vehicle lock and sends the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating that the vehicle lock of the vehicle is in an unlocked state. After receiving the notification signal, the control unit may determine that someone is inside the vehicle based on the signal indicating the unlocked state. Alternatively, for example, the generated notification signal may be a signal generated by the vehicle lock controller based on the signal to unlock the vehicle lock according to a pre-set signal generation rule, and may be a signal indicating that a person is inside the vehicle. For example, a pre-configured signal generation rule might indicate the presence of a person inside the vehicle by marking a field in the generated signal with an identifier such as "1". Naturally, the identifier can be any identifier and is not limited to "1" as provided here as an example. In this case, after receiving a notification signal carrying the identifier, the control unit may determine, based on the specific identifier, whether a person is inside the vehicle.
[0120]
[0146] In other implementations, for example, when a user leaves the vehicle, a signal to lock the vehicle lock may be sent to the vehicle lock controller via the vehicle key or the like. The vehicle lock controller receives the signal to lock the vehicle lock and locks the vehicle lock. After receiving the signal to lock the vehicle lock, the vehicle lock controller generates a notification signal based on the signal to lock the vehicle lock and sends the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating that the vehicle lock of the vehicle is locked. After receiving the notification signal, the control unit may determine that there is no person inside the vehicle based on the signal indicating that it is locked. Alternatively, for example, the generated notification signal may be a signal generated by the vehicle lock controller based on the signal to lock the vehicle lock according to a pre-set signal generation rule, and it may be a signal indicating that there is no person inside the vehicle. For example, a pre-configured signal generation rule might mark a field in the generated signal with an identifier such as "0" to indicate that no person is present in the vehicle. Of course, the identifier can be any identifier and is not limited to "0" as provided here as an example. In this case, after receiving a notification signal carrying the identifier, the control unit may determine, based on the specific identifier, that no person is present in the vehicle.
[0121]
[0147] Case 2: The target unit includes a vehicle key controller. The vehicle key controller can sense whether a vehicle key is inside the vehicle using a vehicle key sensor or sensing element. If the vehicle key is inside the vehicle, it indicates that a person is inside the vehicle. If the vehicle key is not inside the vehicle, it indicates that no one is inside the vehicle. When the vehicle key sensor or sensing element senses that the vehicle key is inside the vehicle, a signal indicating that the vehicle key is inside the vehicle is sent to the vehicle key controller. After receiving the signal indicating that the vehicle key is inside the vehicle, the vehicle key controller generates a notification signal based on the signal indicating that the vehicle key is inside the vehicle and sends the generated notification signal to the control unit. The generated notification signal can indicate that the vehicle key is inside the vehicle. After receiving the notification signal, the control unit can determine, based on the notification signal, that a person is inside the vehicle. Alternatively, for example, the generated notification signal may be a signal generated by the vehicle lock controller according to a pre-configured signal generation rule based on a signal indicating that the vehicle key is inside the vehicle, and which indicates that a person is inside the vehicle. For example, the pre-configured signal generation rule may indicate that a person is inside the vehicle by marking a field in the generated signal as an identifier, such as "1". Of course, the identifier may be any identifier and is not limited to "1" provided as an example here. In this case, after receiving a notification signal carrying an identifier, the control unit may determine, based on the specific identifier, that a person is inside the vehicle.
[0122]
[0148] When a vehicle key sensor or sensing element detects that the vehicle key is not inside the vehicle, a signal indicating that the vehicle key is not inside the vehicle is sent to the vehicle key controller. After receiving the signal indicating that the vehicle key is not inside the vehicle, the vehicle key controller generates a second signal based on the signal indicating that the vehicle key is not inside the vehicle. The generated notification signal can indicate that the vehicle key is not inside the vehicle. After receiving the notification signal, the control unit can determine, based on the notification signal, that there is no person inside the vehicle. Alternatively, for example, the generated notification signal may be a signal generated by the vehicle lock controller according to a pre-configured signal generation rule based on the signal indicating that the vehicle key is inside the vehicle, and which indicates that there is no person inside the vehicle. For example, the pre-configured signal generation rule may be to mark a field in the generated signal as an identifier such as "0" to indicate that there is no person inside the vehicle. Of course, the identifier may be any identifier and is not limited to "0" provided as an example here. In this case, after receiving a notification signal carrying an identifier, the control unit may determine, based on the specific identifier, that there is no person inside the vehicle.
[0123]
[0149] Case 3: The target unit includes a seat controller. The seat controller can sense whether a person is present in a seat using a seat sensor or sensing element. When it senses that a person is present in a seat, the seat sensor or sensing element sends a signal to the seat controller indicating that a person is present in the seat. After receiving the signal indicating that a person is present in the seat, the seat controller generates a notification signal based on the signal indicating that a person is present in the seat and sends the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating that a person is present in a seat in a vehicle. After receiving the notification signal, the control unit can determine that a person is present in the vehicle based on the signal indicating that a person is present in the seat. Alternatively, for example, the generated notification signal may be a signal generated by the seat controller according to a pre-configured signal generation rule based on the signal indicating that a person is present in the seat, and it may be a signal indicating that a person is present in the vehicle. For example, the pre-configured signal generation rule may be to mark a field in the generated signal as an identifier such as "1" to indicate that a person is present in the vehicle. Of course, the identifier may be any identifier and is not limited to "1" provided as an example here. In this case, after receiving a notification signal carrying an identifier, the control unit may determine, based on the specific identifier, that a person is present inside the vehicle.
[0124]
[0150] When a seat sensor or sensing element detects that no one is in the seat, a signal indicating that no one is in the seat is sent to the seat controller. After receiving the signal indicating that no one is in the seat, the seat controller generates a second signal based on the signal indicating that no one is in the seat and sends the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating that no one is in the vehicle's seats. After receiving the notification signal, the control unit can determine that no one is in the vehicle based on the signal indicating that no one is in the seat. Alternatively, for example, the generated notification signal may be a signal generated by the seat controller according to a pre-configured signal generation rule based on the signal indicating that no one is in the seat, and it may be a signal indicating that no one is in the vehicle. For example, the pre-configured signal generation rule may be to mark a field in the generated signal as an identifier such as "0" to indicate that no one is in the vehicle. Of course, the identifier may be any identifier and is not limited to "0" provided as an example here. In this case, after receiving the notification signal carrying the identifier, the control unit may determine that no one is in the vehicle based on the specific identifier.
[0125]
[0151] Case 4: The target unit includes a camera. The camera can analyze whether an image captured by the vehicle contains a face. If the image captured by the camera contains a face, a notification signal may be generated and transmitted to the control unit. For example, the generated notification signal may be a signal indicating that the captured image contains a face. After receiving the notification signal, the control unit can determine that a person is present in the vehicle based on the signal indicating that the captured image contains a face. Alternatively, for example, the generated notification signal may be a signal generated by the camera according to a pre-configured signal generation rule based on the fact that the captured image contains a face, and it may be a signal indicating that a person is present in the vehicle. For example, the pre-configured signal generation rule may be to mark a field in the generated signal as an identifier, such as "1", to indicate that a person is present in the vehicle. Of course, the identifier may be any identifier and is not limited to "1" provided as an example here. In this case, after receiving the notification signal carrying the identifier, the control unit may determine that a person is present in the vehicle based on the specific identifier.
[0126]
[0152] If an image captured by the camera does not contain a face, a notification signal may be generated, and the generated notification signal is transmitted to the control unit. For example, the generated notification signal may be a signal indicating that the captured image does not contain a face. After receiving the notification signal, the control unit can determine that there is no person inside the vehicle based on the signal indicating that the captured image does not contain a face. Alternatively, for example, the generated notification signal may be a signal generated by the camera according to a pre-configured signal generation rule based on the fact that the captured image does not contain a face, and it may be a signal indicating that there is no person inside the vehicle. For example, the pre-configured signal generation rule may mark a field in the generated signal as an identifier such as "0", indicating that there is no person inside the vehicle. do notIt may also indicate that there is a person inside the vehicle. Naturally, the identifier can be any identifier and is not limited to "0" which is provided as an example here. In this case, after receiving a notification signal carrying the identifier, the control unit determines, based on the specific identifier, that there is a person inside the vehicle. do not It may be determined that...
[0127]
[0153] In possible implementations, the camera may include an image capture component and an image processing component.
[0128]
[0154] Case 5: The target unit includes a vehicle-mounted T-box. Specifically, the vehicle-mounted T-box is capable of receiving signals from a remote control unit. If the signal indicates the presence of a person in the vehicle or instructs the vehicle to enable basic services, the vehicle-mounted T-box generates a notification signal and transmits the generated notification signal to the control unit. For example, the generated notification signal may be a signal indicating the presence of a person in the vehicle, based on whether the signal indicates the presence of a person in the vehicle or instructs the vehicle to enable basic services, and may be a signal generated by the vehicle-mounted T-box according to a pre-configured signal generation rule. For example, the pre-configured signal generation rule may indicate the presence of a person in the vehicle by marking a field in the generated signal as an identifier, such as "1". Of course, the identifier may be any identifier and is not limited to "1" provided as an example here. In this case, after receiving the notification signal carrying the identifier, the control unit may determine, based on the specific identifier, whether a person is present in the vehicle.
[0129]
[0155] In possible implementations, if the notification signal indicates the presence of a person inside the vehicle and includes multiple cases as described above, the control unit can determine whether or not a person is present inside the vehicle by combining the notification signals from multiple cases.
[0130]
[0156] For example, if the control unit determines, based on a signal received from the vehicle lock controller, that there is no person inside the vehicle, and also determines, based on a signal received from at least one of the vehicle key controller, seat controller, camera, or vehicle-mounted T-box, that there is a person inside the vehicle, the control unit can perform a comprehensive analysis and determine that there is a person inside the vehicle. For example, this case may arise because the user is seated in the vehicle and the vehicle locks are engaged.
[0131]
[0157] As another example, if the control unit determines, based on a signal received from the vehicle lock controller, that there is a person inside the vehicle, and also determines, based on signals received from at least one of the following: the vehicle key controller, seat controller, camera, or vehicle-mounted T-box, that there is no person inside the vehicle, the control unit can perform a comprehensive analysis and determine that there is no person inside the vehicle. For example, this case may arise because the user has enabled the vehicle lock but is not inside the vehicle.
[0132]
[0158] For example, if the control unit determines, based on a signal received from the vehicle key controller, that there is no person inside the vehicle, and also determines, based on a signal received from at least one of the following: the vehicle key controller, seat controller, camera, or vehicle-mounted T-box, the control unit can perform a comprehensive analysis and determine that there is a person inside the vehicle. For example, this case may arise because a user is seated in the vehicle, but the vehicle key is not placed in its designated holder.
[0133]
[0159] In conclusion, the priority of signals from the vehicle key controller, seat controller, camera, or vehicle-mounted T-box is higher than the priority of signals from the vehicle lock controller. Furthermore, the presence of a person in the vehicle may be determined based on signals received from at least one of the vehicle key controller, seat controller, camera, or vehicle-mounted T-box.
[0134]
[0160] In possible implementations, if the target unit includes only a vehicle lock controller, the control unit may independently determine whether a person is present in the vehicle based on signals received from the vehicle lock controller.
[0135]
[0161] The aforementioned comprehensive determination methods are merely examples and do not constitute a limitation on the embodiments of this application. In a particular implementation, the control unit may receive one or more notification signals. If multiple notification signals are received, whether or not a person is present in the vehicle can be determined after a comprehensive analysis of the multiple notification signals. The specific number of notification signals received is not limited in this application.
[0136]
[0162] The following describes several implementations of the vehicle control method provided in the embodiments of this application, using specific examples. The following description uses an example where the vehicle software is upgraded via OTA. It is also applicable to cases where the vehicle software is updated via wired flushing. Further details will not be described again later.
[0137]
[0163] Implementation 1: An additional signaling circuit is provided between the control unit and the target unit for communication purposes. This signaling circuit can transmit notification signals from the target unit to the control unit during the process of upgrading the vehicle's software via OTA (Over-the-Air). If CAN communication within the vehicle is disabled during the OTA software upgrade process, signals cannot be transmitted via the CAN bus. Therefore, signals between the control unit and the target unit may be transmitted via a separate signaling circuit. For example, one end of the signaling circuit may be connected to the control unit, and the other end may be connected to the target unit. For example, the signaling circuit may be a hard circuit.
[0138]
[0164] For easier understanding, please refer to Figures 4A, 4B, and 4C, for example. In Figures 4A, 4B, and 4C, the "×" in the small block indicates that the CAN communication function is disabled.
[0139]
[0165] In Figure 4A, a VDC within a control unit is used as an example. At least one of the target units, such as a vehicle lock controller and a seat controller, may be connected to the VDC via a signaling line. In this case, during the aforementioned process of upgrading the in-vehicle software via OTA, the vehicle lock controller and / or seat controller can send a notification signal to the VDC via the signaling line to indicate whether a person is present in the vehicle. It should be noted that target units such as a camera or a vehicle key controller may also be connected to the VDC via a signaling line and transmit notification signals. Further details are not provided here. In specific implementations, one or more of the aforementioned target units, such as a vehicle lock controller, seat controller, camera, or vehicle key controller, may be connected to the VDC via a signaling line. The number of target units connected to a particular signaling line is not limited in this application.
[0140]
[0166] In Figure 4B, a CDC within a control unit is used as an example. At least one of the target units, such as a vehicle lock controller and a seat controller, may be connected to the CDC via a signaling line. In this case, during the aforementioned process of upgrading the software in the vehicle via OTA, the vehicle lock controller and / or seat controller can send a notification signal to the CDC via the signaling line to indicate whether a person is present in the vehicle. It should be noted that target units such as a camera or a vehicle key controller may also be connected to the CDC via a signaling line and transmit notification signals. Further details are not provided here. In specific implementations, one or more of the aforementioned target units, such as a vehicle lock controller, seat controller, camera, or vehicle key controller, may be connected to the CDC via a signaling line. The number of target units connected to a particular signaling line is not limited in this application.
[0141]
[0167] In Figure 4C, a gateway (or VIU) within a control unit is used as an example. At least one of the target units, such as a vehicle lock controller and a seat controller, may be connected to the gateway (or VIU) via a signaling line. In this case, during the aforementioned process of upgrading the in-vehicle software via OTA, the vehicle lock controller and / or seat controller can send a notification signal to the gateway (or VIU) via the signaling line to indicate whether a person is present in the vehicle. It should be noted that target units such as a camera or a vehicle key controller may also be connected to the gateway (or VIU) via a signaling line and transmit notification signals. Further details are not provided here. In specific implementations, one or more of the aforementioned target units, such as a vehicle lock controller, seat controller, camera, or vehicle key controller, may be connected to the gateway (or VIU) via a signaling line. The number of target units connected to a particular signaling line is not limited in this application.
[0142]
[0168] In possible implementations, the target unit may be connected via a signaling circuit to one or more of the VDC, CDC, or gateway (or VIU). This is not limited to the present application. For ease of understanding, please refer to Figure 4D. Figure 4D illustrates an example in which the target unit (e.g., a vehicle lock controller and / or a seat controller) may be connected via a signaling circuit to one or more of the VDC, CDC, or gateway (or VIU). The solid arrows in Figure 4D indicate that the vehicle lock controller and seat controller are connected to the VDC via a signaling circuit. The dashed arrows in Figure 4D indicate that in another possible implementation, the vehicle lock controller, seat controller, and VDC may be further connected via a signaling circuit to another control unit (i.e., a CDC and / or gateway (or VIU)).
[0143]
[0169] In a specific implementation, after determining the presence of a person in the vehicle based on the received notification signal, the control unit can send a notification packet to the basic service unit in the vehicle, instructing the basic service unit to provide basic services. For a specific implementation of how the control unit determines the presence of a person in the vehicle based on the received notification signal, please refer to the corresponding explanation in S302. Further details are not provided here.
[0144]
[0170] From the above explanation, it can be seen that in possible implementations, if the control unit includes a VDC, the VDC can provide services to basic service units such as air conditioners. In this case, after determining that a person is present in the vehicle, the VDC sends a notification packet to the basic service unit such as the air conditioner. After receiving the notification packet, the basic service unit such as the air conditioner enables a specific basic service based on the notification packet, for example, by enabling the air conditioner. In possible implementations, the VDC may send notification packets to the basic service unit such as the air conditioner by using the UDS protocol. That is, the notification packet may be a UDS protocol packet.
[0145]
[0171] For example, if the presence of a person is detected in a vehicle, a notification packet sent by the VDC to a basic service unit, such as an air conditioner, may contain information indicating the presence of a person in the vehicle. In this case, the basic service unit, such as an air conditioner, enables the corresponding basic service based on the information indicating the presence of a person in the vehicle. Alternatively, the notification packet may contain information instructing the basic service unit, such as an air conditioner, to enable the service. In this case, the basic service unit, such as an air conditioner, enables the corresponding service based on the information instructing it to enable the service. The same applies to notification packets that instruct a basic service unit to provide basic services, as described later. Further details will not be explained again.
[0146]
[0172] If the VDC determines, based on the received notification signal, that there are no people in the vehicle, the VDC may also send a notification packet to a basic service unit, such as an air conditioner. The notification packet instructs the basic service unit to disable the basic service. After receiving the notification packet, the basic service unit, such as an air conditioner, disables a specific basic service based on the notification packet, for example, disabling the air conditioner. In possible implementations, the notification packet may be a UDS protocol packet.
[0147]
[0173] Similarly, for example, if it is determined that no person is in the vehicle, a notification packet sent by the VDC to a basic service unit such as an air conditioner may contain information indicating that no person is in the vehicle. In this case, the basic service unit, such as an air conditioner, will disable the corresponding basic service based on the information indicating that no person is in the vehicle. Alternatively, the notification packet may contain information instructing the basic service unit, such as an air conditioner, to disable the service. In this case, the basic service unit, such as an air conditioner, will disable the corresponding service based on the information instructing it to disable the service. The same applies to notification packets that instruct a basic service unit to disable a basic service, as described later. Further details will not be explained again.
[0148]
[0174] From the above description, it can be seen that in possible implementations, if the control unit includes a CDC, the CDC can provide services to the basic service unit in the cockpit domain. The basic service unit in the cockpit domain includes, for example, a head-up display, an instrument cluster display, a radio, a navigator, or a camera. In this case, after determining that a person is present in the vehicle, the CDC sends a notification packet to the basic service unit in the cockpit domain. After receiving the notification packet, the basic service unit in the cockpit domain enables a specific basic service based on the notification packet, for example, enabling the head-up display, an instrument cluster display, a radio, a navigator, or a camera. In possible implementations, the CDC may send the notification packet to the basic service unit in the cockpit domain by using the UDS protocol. That is, the notification packet may be a UDS protocol packet.
[0149]
[0175] For example, if it is determined that a person is present in a vehicle, the notification packet sent by the CDC to the basic services unit in the cockpit domain may contain information indicating the presence of a person in the vehicle. In this case, the basic services unit in the cockpit domain enables the corresponding basic service based on the information indicating the presence of a person in the vehicle. Alternatively, the notification packet may contain information instructing the basic services unit in the cockpit domain to enable the service. In this case, the basic services unit in the cockpit domain enables the corresponding service based on the information instructing it to enable the service.
[0150]
[0176] If the CDC determines, based on the received notification signal, that there is no person inside the vehicle, the CDC may also send a notification packet to the basic services unit in the cockpit domain. The notification packet instructs the basic services unit to disable basic services. After receiving the notification packet, the basic services unit in the cockpit domain disables specific basic services based on the notification packet, such as the head-up display, instrument cluster display, radio, navigator, or camera. The notification packet may also be a UDS protocol packet.
[0151]
[0177] Similarly, for example, if it is determined that there is no person inside the vehicle, the notification packet sent by the CDC to the basic service unit in the cockpit domain may contain information indicating that there is no person inside the vehicle. In this case, the basic service unit in the cockpit domain will disable the corresponding basic service based on the information indicating that there is no person inside the vehicle. Alternatively, the notification packet may contain information instructing the basic service unit in the cockpit domain to disable the service. In this case, the basic service unit in the cockpit domain will disable the corresponding service based on the information instructing it to disable the service.
[0152]
[0178] In possible implementations, the CDC's transmission of notification packets to basic service units in the cockpit domain may be interpreted as the CDC transmitting notification packets to one or more basic service units in the cockpit domain. The specific basic service units to which the CDC transmits notification packets are not limited in this application.
[0153]
[0179] In possible implementations, if the control unit includes a gateway (or VIU), after determining that a person is present in the vehicle, the gateway (or VIU) may first send a notification packet to the VDC and / or CDC indicating the presence of a person in the vehicle. The VDC and / or CDC then send notification packets to the basic service units within their respective domains, instructing them to provide basic services. From the above description of Figure 1, it can be seen that an Ethernet bus is connected between the gateway (or VIU) and the VDC, and another Ethernet bus is connected between the gateway (or VIU) and the CDC. Since CAN communication is disabled in the OTA upgrade process, the gateway (or VIU) can send notification packets to the VDC and / or CDC via the Ethernet bus. For example, the notification packets sent by the gateway (or VIU) to the VDC and / or CDC are packets that conform to scalable service-oriented middleware over IP (SOME / IP).
[0154]
[0180] For specific implementations of how the VDC and / or CDC send notification packets to the basic service units in their respective domains after receiving notification packets from the gateway (or VIU), instructing them to provide basic services, please refer to the above description. Further details are not provided here.
[0155]
[0181] For example, if it is determined that a person is present in a vehicle, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may contain information indicating the presence of a person in the vehicle. In this case, the VDC and / or CDC send a notification packet to the basic service units in their respective domains instructing them to provide basic services based on the information indicating the presence of a person in the vehicle. Alternatively, the notification packet may contain information instructing the basic service units in the VDC and / or CDC domains to enable the service. In this case, the basic service units in their respective domains send a notification packet to the basic service units in their respective domains instructing them to provide basic services based on the information instructing them to enable the service.
[0156]
[0182] If the gateway (or VIU) determines, based on the received notification signal, that there is no person inside the vehicle, the gateway (or VIU) can first send a notification packet indicating that there is no person inside the vehicle to the VDC and / or CDC. The VDC and / or CDC then send a notification packet to the basic service units in their respective domains instructing them to disable basic services. Similarly, for example, the notification packets sent by the gateway (or VIU) to the VDC and / or CDC are SOME / IP protocol packets.
[0157]
[0183] Similarly, for example, if it is determined that no person is inside a vehicle, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may contain information indicating that no person is inside the vehicle. In this case, the VDC and / or CDC send a notification packet to the basic service units in their respective domains instructing them to disable the basic service based on the information indicating that no person is inside the vehicle. Alternatively, the notification packet may contain information instructing the basic service units in the VDC and / or CDC domains to disable the service. In this case, the VDC and / or CDC send a notification packet to the basic service units in their respective domains instructing them to disable the basic service based on the information instructing them to disable the service.
[0158]
[0184] In possible implementations, if the intelligent vehicle system includes a central controller, after determining that a person is present in the vehicle, the VDC, CDC, or gateway (or VIU) may first send a notification packet to the central controller indicating the presence of a person in the vehicle. The central controller then sends notification packets to each basic service unit instructing them to provide basic services. Similarly, notification packets sent to the central controller by the VDC, CDC, or gateway (or VIU) may be, for example, SOME / IP protocol packets. Alternatively, notification packets sent to the basic service units by the central controller may be, for example, UDS protocol packets.
[0159]
[0185] For example, if a person is detected inside a vehicle, the notification packet sent to the central controller by the VDC, CDC, or gateway (or VIU) may contain information indicating the presence of a person inside the vehicle. In this case, the central controller sends notification packets to the basic service units in each of its domains instructing them to provide basic services based on the information indicating the presence of a person inside the vehicle. Alternatively, the notification packet may contain information instructing the basic service units in the central controller to enable the service. In this case, the central controller sends notification packets to the basic service units in its domain instructing them to provide basic services based on the information instructing them to enable the service.
[0160]
[0186] If a VDC, CDC, or gateway (or VIU) determines, based on a received notification signal, that there is no person inside the vehicle, the VDC, CDC, or gateway (or VIU) can first send a notification packet to the central controller indicating that there is no person inside the vehicle. The central controller then sends notification packets to each basic service unit indicating that basic services are to be disabled. Similarly, notification packets sent to the central controller by a VDC, CDC, or gateway (or VIU) are, for example, SOME / IP protocol packets. Alternatively, notification packets sent to basic service units by the central controller may be, for example, UDS protocol packets.
[0161]
[0187] Similarly, for example, if it is determined that no person is inside a vehicle, the notification packet sent by the gateway (or VIU) to the central controller may contain information indicating that no person is inside the vehicle. In this case, the central controller sends a notification packet to the basic service unit in the domain instructing it to disable the basic service based on the information indicating that no person is inside the vehicle. Alternatively, the notification packet may contain information to instruct the basic service unit in the central controller to disable the service. In this case, the central controller sends a notification packet to the basic service unit in the domain instructing it to disable the basic service based on the information to disable the service.
[0162]
[0188] To better understand the aforementioned procedure in which the central controller controls the basic service unit to provide basic services, please refer to Figure 4E, for example. Figure 4E shows that a VDC, CDC, or gateway (or VIU) can determine whether a person is present in the vehicle based on a notification signal from the target unit, and generate a corresponding notification packet based on the determination result. The notification packet can indicate whether a person is present in the vehicle. The VDC, CDC, or gateway (or VIU) can then send the notification packet to the central controller using the SOME / IP protocol. The central controller then sends the notification packet indicating whether a person is present in the vehicle to the basic service unit using the UDS protocol. The basic service unit can then determine whether a person is present in the vehicle based on the notification packet, and if a person is present, it can enable the service. Optionally, the basic service unit can further know, based on the notification packet, that if no person is present in the vehicle, the service will be disabled or its enablement will be suppressed.
[0163]
[0189] As can be seen further from Figure 4E, in another possible implementation, the central controller may, alternatively, use the UDS protocol to send notification packets to the VDC, CDC, or gateway (or VIU) indicating whether a person is present in the vehicle, instructing the basic service unit in the control domain of the VDC, CDC, or gateway (or VIU) to provide basic services. Based on the notification packets received from the central controller, the VDC, CDC, or gateway (or VIU) can determine whether a person is present in the vehicle and, if a person is present, control the basic service unit in the domain to provide basic services. Optionally, if no person is present in the vehicle, the basic service unit in the control domain may be disabled or its service enablement may be suppressed.
[0164]
[0190] In the aforementioned implementation, notification signals from the target unit to the control unit are transmitted via an additional signal line between the control unit and the target unit. As a result, in the aforementioned process of upgrading the vehicle's software via OTA, notification signals can be transmitted without relying on CAN communication. In this implementation, even if the vehicle's overall CAN communication function is disabled during the OTA upgrade process—that is, data flashing during the OTA upgrade is unaffected—the notification signals from the target unit can still be transmitted to the control unit. As a result, basic services can still be provided during the OTA upgrade process, further improving the user experience.
[0165]
[0191] Implementation 2: Before the vehicle's software is upgraded via OTA, the control unit and target unit can receive a communication control packet instructing them to disable CAN communication, and based on a pre-configured configuration, the CAN communication function between the target unit and the control unit can be maintained. In possible implementations, within the vehicle, the CAN communication function between the target unit and the control unit, which is reserved based on a pre-configured configuration, is still disabled, along with the CAN communication function between other vehicle components and the control unit.
[0166]
[0192] In possible implementations, a pre-configured setting for the target unit indicates that the target unit is permitted only to transmit target notification signals to the control unit via the CAN network (i.e., via the CAN bus). Similarly, a pre-configured setting for the control unit indicates that the control unit is permitted only to receive target notification signals via the CAN network (i.e., via the CAN bus). The target notification signal is a notification signal from the target unit indicating whether or not a person is present in the vehicle.
[0167]
[0193] To facilitate understanding of Implementation 2, please refer to Figures 5A, 5B, and 5C, for example.
[0168]
[0194] In Figure 5A, the VDC within the control unit is used as an example. Before upgrading the software in the vehicle via OTA, the OTA module sends a communication control packet to the VDC and target unit instructing them to disable CAN communication. In Figure 5A, one or more of the vehicle lock controller and seat controllers are the target unit. Since the VDC and target unit are pre-configured, they are permitted to maintain CAN communication during the OTA upgrade process. Furthermore, the gateway (or VIU) is also pre-configured and permitted to forward CAN packets between the VDC and target components during the OTA upgrade process. Therefore, even if the VDC and target unit receive a communication control packet instructing them to disable CAN communication, CAN communication between the VDC and target unit can still be maintained during the OTA upgrade process.
[0169]
[0195] It should be noted that the target unit may further include, for example, a camera or a vehicle key controller. Further details are not provided here. In specific implementations, one or more of the aforementioned target units, such as a vehicle lock controller, seat controller, camera, or vehicle key controller, may maintain CAN communication with the VDC during the OTA upgrade process. This is not particularly limited in this application.
[0170]
[0196] In a possible implementation, Figure 5A may show that the pre-configuration performed on the VDC, target unit, and gateway (or VIU) is such that only two of the VDC, target unit, and gateway (or VIU) are permitted to maintain the transmission and reception of target notification signals during the OTA upgrade process. During the OTA upgrade process, signals other than target notification signals cannot be transmitted to the VDC via the CAN network. In other words, during the OTA upgrade process, only CAN notification signals indicating whether a person is present in the vehicle are permitted to be processed, and the processing of other CAN signals is stopped, thereby reducing the impact on UDS packets during the OTA upgrade process and allowing the presence of a person in the vehicle to be sensed in order to provide the corresponding basic service.
[0171]
[0197] For example, the configuration performed on the VDC, target unit, and gateway (or VIU) may include the setting of the logical address or network segment of the component authorized to perform CAN communication on the VDC, target unit, and gateway (or VIU). For example, the logical address or network segment of the target unit authorized to perform CAN communication may be set on the VDC. The logical address or network segment of the VDC authorized to perform CAN communication may be set on the target unit. The logical addresses or network segments of the target unit and VDC authorized to perform CAN communication may be set on the gateway (or VIU). Then, in the OTA upgrade process, the target unit may send a target notification signal to the VDC via the CAN network based on the configured logical address or configured network segment of the VDC. The gateway (or VIU) can forward the target notification signal from the target unit to the VDC based on the configured logical address or configured network segment of the target unit and the configured VDC. The VDC receives the target notification signal based on the configured logical address or configured network segment of the target unit.
[0172]
[0198] In Figure 5B, the CDC within the control unit is used as an example. Before upgrading the software in the vehicle via OTA, the OTA module sends a communication control packet to the CDC and target unit instructing them to disable CAN communication. In Figure 5B, one or more of the vehicle lock controller and seat controllers are the target unit. Since the CDC and target unit are pre-configured, they are permitted to maintain CAN communication during the OTA upgrade process. Furthermore, the gateway (or VIU) is also pre-configured and permitted to forward CAN packets between the CDC and the target component during the OTA upgrade process. Therefore, even if the CDC and target unit receive a communication control packet instructing them to disable CAN communication, CAN communication between the CDC and the target unit can still be maintained during the OTA upgrade process.
[0173]
[0199] It should be noted that the target unit may further include, for example, a camera or a vehicle key controller. Further details are not provided here. In specific implementations, one or more of the aforementioned target units, such as a vehicle lock controller, seat controller, camera, or vehicle key controller, may maintain CAN communication with the CDC during the OTA upgrade process. This is not particularly limited in this application.
[0174]
[0200] In a possible implementation, Figure 5B may show that the pre-configuration performed on the CDC, target unit, and gateway (or VIU) is such that only two of the CDC, target unit, and gateway (or VIU) are permitted to maintain the transmission and reception of target notification signals during the OTA upgrade process. During the OTA upgrade process, signals other than target notification signals cannot be transmitted to the CDC via the CAN network. In other words, during the OTA upgrade process, only CAN notification signals indicating whether a person is present in the vehicle are permitted to be processed, and the processing of other CAN signals is stopped, thereby reducing the impact on UDS packets during the OTA upgrade process and allowing the presence of a person in the vehicle to be sensed in order to provide the corresponding basic service.
[0175]
[0201] For example, the configuration performed on the CDC, target unit, and gateway (or VIU) may include the setting of the logical address or network segment of the component authorized to perform CAN communication on the CDC, target unit, and gateway (or VIU). For example, the logical address or network segment of the target unit authorized to perform CAN communication may be set on the CDC. The logical address or network segment of the CDC authorized to perform CAN communication may be set on the target unit. The logical addresses or network segments of the target unit and CDC authorized to perform CAN communication may be set on the gateway (or VIU). Then, in the OTA upgrade process, the target unit may send a target notification signal to the CDC via the CAN network based on the configured logical address or configured network segment of the CDC. The gateway (or VIU) can forward the target notification signal from the target unit to the CDC based on the configured logical address or configured network segment of the target unit and the configured VDC. The CDC receives the target notification signal based on the configured logical address or configured network segment of the target unit.
[0176]
[0202] In Figure 5C, a gateway (or VIU) within a control unit is used as an example. Before upgrading the software in the vehicle via OTA, the OTA module sends a communication control packet to the gateway (or VIU) and target unit instructing them to disable CAN communication. In Figure 5C, one or more of the vehicle lock controllers and seat lock controllers are the target unit. Since the gateway (or VIU) and target unit are pre-configured, they are permitted to maintain CAN communication during the OTA upgrade process. Therefore, even if the gateway (or VIU) and target unit receive a communication control packet instructing them to disable CAN communication, CAN communication between the gateway (or VIU) and target unit can still be maintained during the OTA upgrade process.
[0177]
[0203] It should be noted that the target unit may further include, for example, a camera or a vehicle key controller. Further details are not provided here. In specific implementations, one or more of the aforementioned target units, such as a vehicle lock controller, seat controller, camera, or vehicle key controller, may maintain CAN communication with the gateway (or VIU) during the OTA upgrade process. This is not particularly limited in this application.
[0178]
[0204] In a possible implementation, Figure 5C may show that the pre-configuration performed on the gateway (or VIU) and target unit is such that only these two are permitted to maintain the transmission and reception of target notification signals during the OTA upgrade process. During the OTA upgrade process, no signals other than target notification signals can be transmitted to the gateway (or VIU) via the CAN network. In other words, during the OTA upgrade process, only CAN notification signals indicating whether a person is present in the vehicle are permitted to be processed, and the processing of other CAN signals is stopped, thereby reducing the impact on UDS packets during the OTA upgrade process and allowing the presence of a person in the vehicle to be sensed in order to provide the corresponding basic service.
[0179]
[0205] For example, the configuration performed on the target unit and gateway (or VIU) may include setting the logical address or network segment of the components permitted to perform CAN communication on the target unit and gateway (or VIU). For example, the logical address or network segment of the gateway (or VIU) permitted to perform CAN communication may be set on the target unit. The logical address or network segment of the target unit permitted to perform CAN communication may be set on the gateway (or VIU). Then, in the OTA upgrade process, the target unit can send a target notification signal to the gateway (or VIU) via the CAN network based on the configured logical address or configured network segment of the gateway (or VIU). The gateway (or VIU) can receive a target notification signal from the target unit based on the configured logical address or configured network segment of the target unit.
[0180]
[0206] In possible implementations, before upgrading the software within the vehicle via OTA, the OTA module may send a communication control packet to one or more of the VDC, CDC, or gateway (or VIU) within the control unit to instruct that CAN communication be disabled. This is not particularly limited in this application.
[0181]
[0207] In possible implementations, before the vehicle's software is upgraded via OTA, the OTA module can partially disable the vehicle's CAN communication capabilities based on a pre-configured setting.
[0182]
[0208] During implementation, the vehicle's OTA controller broadcasts a communication control packet to the vehicle based on a pre-configured setting. The communication control packet instructs the vehicle to disable all CAN communication functions except for the target CAN communication function. The target CAN communication function includes a first CAN communication function that transmits a target notification signal between the control unit and the target unit. The target unit is a vehicle component configured to sense whether a person is present in the vehicle. The target notification signal is a notification signal from the target unit that indicates whether a person is present in the vehicle. The first CAN communication function is used to send the target notification signal to the control unit during the process of upgrading the vehicle's software via OTA.
[0183]
[0209] The target CAN communication function further includes a second CAN communication function for transmitting target notification packets between the control unit and the basic service unit. The target notification packet is generated by the control unit based on a target notification signal. If the target notification signal indicates the presence of a person in the vehicle, the target notification packet instructs the basic service unit to provide basic services. The second CAN communication function is used to send target notification packets to the basic service unit during the process of upgrading the vehicle's software via OTA.
[0184]
[0210] The aforementioned pre-configured configuration may be a configuration within the OTA module of the logical address or network segment of a component whose CAN communication function is required to be disabled during the OTA upgrade process. Alternatively, the aforementioned pre-configured configuration may be a configuration within the OTA module of the logical address or network segment of a component whose CAN communication function is required to be preserved during the OTA upgrade process. The logical address or network segment that preserves the CAN communication function may be used to transmit target notification signals and target notification packets. The OTA module then broadcasts a communication control packet to the component whose corresponding CAN communication function needs to be disabled during the OTA upgrade process, based on the configured network segment or logical address. In this way, during the OTA upgrade process, the component in the vehicle disables the CAN communication function corresponding to that component based on the received communication control packet. Thus, the influence of the CAN signal on the UDS signal is reduced during the OTA upgrade process.
[0185]
[0211] In a specific implementation, after determining that a person is present in the vehicle based on a target notification signal received via the CAN network, the control unit may send a notification packet to the basic service unit in the vehicle, instructing the basic service unit to provide basic services. For a specific implementation of how the control unit determines the presence of a person in the vehicle based on the received notification signal, please refer to the corresponding explanation in S302. Further details are not provided here.
[0186]
[0212] In possible implementations, the control unit may send notification packets to the basic service unit via the UDS protocol, and these notification packets may be UDS protocol packets.
[0187]
[0213] In another possible implementation, a pre-configured configuration may be applied to the basic service unit. This pre-configured configuration instructs the basic service unit to retain its CAN communication capabilities during the process of upgrading the vehicle's software via OTA. Thus, during the process of upgrading the vehicle's software via OTA, the basic service unit is able to receive CAN notification packets from the control unit. In this case, even if the OTA module sends a communication control packet to the basic service unit instructing it to disable CAN communication before the vehicle's software is upgraded via OTA, the basic service unit is permitted to maintain CAN communication during the OTA upgrade process because it is pre-configured. Therefore, even if the basic service unit receives a communication control packet instructing it to disable CAN communication, it can still maintain its CAN communication capabilities during the OTA upgrade process.
[0188]
[0214] Optionally, in possible implementations, the pre-configured settings of the basic service unit may allow the basic service unit to receive target notification packets from the control unit. A target notification packet is a notification packet sent by the control unit indicating whether a person is present in the vehicle. Alternatively, a notification packet is a notification packet sent by the control unit instructing the basic service unit to enable or disable something. Packets other than target notification packets cannot be transmitted to the basic service unit via the CAN network during the OTA upgrade process. In other words, during the OTA upgrade process, only the basic service unit is permitted to process target notification packets transmitted via the CAN network, while processing of other CAN packets is suspended, thereby reducing the impact on UDS packets during the OTA upgrade process and enabling the unit to sense whether a person is present in the vehicle in order to provide the corresponding basic service. From this perspective, the control unit can send notification packets to the basic service unit via the CAN network; i.e., the notification packets may be CAN packets.
[0189]
[0215] To facilitate understanding, the following examples will be used to illustrate the concepts.
[0190]
[0216] From the above explanation, it can be seen that in possible implementations, if the control unit includes a VDC, the VDC can provide services to basic service units such as air conditioners. In this case, after determining that a person is present in the vehicle based on a target notification signal received via the CAN network, the VDC sends a notification packet to a basic service unit such as an air conditioner. After receiving the notification packet, the basic service unit such as an air conditioner enables a specific basic service based on the notification packet, for example, by enabling the air conditioner.
[0191]
[0217] For example, a notification packet sent by the VDC to a basic service unit such as an air conditioner may be a notification packet indicating the presence of a person in the vehicle. Alternatively, the notification packet may be a notification packet instructing the basic service unit to enable the service.
[0192]
[0218] In possible implementations, the VDC can send notification packets to basic service units, such as air conditioners, using the UDS protocol. That is, the notification packets may be UDS protocol packets.
[0193]
[0219] As can be seen from the above explanation, in another possible implementation, during the process of upgrading the vehicle's software via OTA, the basic service unit can receive and process CAN packets from the control unit based on a pre-configured configuration. Therefore, the VDC can send notification packets to a basic service unit, such as an air conditioner, via the CAN network. That is, the notification packets may be CAN packets.
[0194]
[0220] If the Vehicle Data Center (VDC) determines, based on the received notification signal, that no person is present in the vehicle, the VDC may also send a notification packet to a basic service unit, such as an air conditioner. The notification packet instructs the basic service unit to disable the basic service. After receiving the notification packet, the basic service unit, such as an air conditioner, may disable a specific basic service based on the notification packet, for example, by disabling the air conditioner. In a possible implementation, the notification packet may be a UDS protocol packet. In another possible implementation, the notification packet may be a CAN packet. For example, a notification packet sent by the VDC to a basic service unit, such as an air conditioner, may be a notification packet indicating that no person is present in the vehicle. Alternatively, the notification packet may be a notification packet instructing the basic service unit to disable the service.
[0195]
[0221] From the above explanation, it can be seen that in possible implementations, if the control unit includes a CDC, the CDC can provide services to the basic service unit in the cockpit domain. The basic service unit in the cockpit domain includes, for example, a head-up display, meter display, radio, navigator, or camera. In this case, after determining that a person is present in the vehicle based on a target notification signal received via the CAN network, the CDC sends a notification packet to the basic service unit in the cockpit domain. After receiving the notification packet, the basic service unit in the cockpit domain enables a specific basic service based on the notification packet, for example, enabling the head-up display, meter display, radio, navigator, or camera.
[0196]
[0222] For example, a notification packet sent by the CDC to a basic service unit in the cockpit domain might be a notification packet indicating the presence of a person in the vehicle. Alternatively, the notification packet might be a notification packet instructing the basic service unit to enable the service.
[0197]
[0223] In possible implementations, the CDC can send notification packets to the basic service unit in the cockpit domain by using the UDS protocol. That is, the notification packets may be UDS protocol packets.
[0198]
[0224] As can be seen from the above explanation, in another possible implementation, during the process of upgrading the vehicle's software via OTA, the basic service unit can receive and process CAN packets from the control unit based on a pre-configured configuration. Therefore, the CDC can send notification packets to the basic service unit in the cockpit domain via the CAN network. That is, the notification packets may be CAN packets.
[0199]
[0225] If the CDC determines, based on the received notification signal, that there is no person in the vehicle, the CDC may also send a notification packet to the basic service unit in the cockpit domain. The notification packet instructs the basic service unit to disable the basic services. After receiving the notification packet, the basic service unit in the cockpit domain disables specific basic services based on the notification packet, such as the head-up display, meter display, radio, navigator, or camera. In a possible implementation, the notification packet may be a UDS protocol packet. In another possible implementation, the notification packet may be a CAN packet. For example, the notification packet sent by the CDC to the basic service unit in the cockpit domain may be a notification packet indicating that there is no person in the vehicle. Alternatively, the notification packet may be a notification packet instructing the basic service unit to disable the services.
[0200]
[0226] In possible implementations, the CDC's transmission of notification packets to basic service units in the cockpit domain may be interpreted as the CDC transmitting notification packets to one or more basic service units in the cockpit domain. The specific basic service units to which the CDC transmits notification packets are not limited in this application.
[0201]
[0227] In possible implementations, if the control unit includes a gateway (or VIU), after determining that a person is present in the vehicle based on a target notification signal received via the CAN network, the gateway (or VIU) may first send a notification packet to the VDC and / or CDC indicating the presence of a person in the vehicle. The VDC and / or CDC then send a notification packet (for example, the notification packet may be a UDS protocol packet or a CAN packet) instructing the basic service units within their respective domains to provide basic services. Similarly, the gateway (or VIU) can send notification packets to the VDC and / or CDC via the Ethernet bus. For example, the notification packets sent by the gateway (or VIU) to the VDC and / or CDC are packets conforming to scalable service-oriented middleware over IP (SOME / IP).
[0202]
[0228] For specific implementations of how the VDC and / or CDC send notification packets to the basic service units in their respective domains after receiving notification packets from the gateway (or VIU), instructing them to provide basic services, please refer to the above description. Further details are not provided here.
[0203]
[0229] For example, a notification packet sent by a gateway (or VIU) to a VDC and / or CDC might be a notification packet indicating the presence of a person inside the vehicle. Alternatively, the notification packet might be a notification packet instructing a basic service unit to enable the service.
[0204]
[0230] If the gateway (or VIU) determines, based on the received notification signal, that there is no person inside the vehicle, the gateway (or VIU) may first send a notification packet (for example, the notification packet may be a UDS protocol packet or a CAN packet) to the VDC and / or CDC indicating that there is no person inside the vehicle. The VDC and / or CDC then send a notification packet to the basic service unit in their respective domains instructing them to disable basic services. Similarly, for example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may be a SOME / IP protocol packet. For example, the notification packet sent by the gateway (or VIU) to the VDC and / or CDC may be a notification packet indicating that there is no person inside the vehicle. Alternatively, the notification packet may be a notification packet instructing the basic service unit to disable the service.
[0205]
[0231] In possible implementations, if the intelligent vehicle system includes a central controller, after determining that a person is present in the vehicle, the gateway (or VIU) may first send a notification packet to the central controller indicating the presence of a person in the vehicle. The central controller then sends notification packets (for example, the notification packets may be UDS protocol packets or CAN packets) to each basic service unit instructing them to provide basic services. Similarly, notification packets sent by the gateway (or VIU) to the central controller may be, for example, SOME / IP protocol packets.
[0206]
[0232] To better understand the aforementioned procedure in which the central controller controls the basic service unit to provide basic services, please refer to Figure 6, for example. Figure 6 shows that the VDC, CDC, or gateway (or VIU) can determine whether a person is present in the vehicle based on a notification signal from the target unit, and generate a corresponding notification packet based on the determination result. The notification packet can indicate whether a person is present in the vehicle. The VDC, CDC, or gateway (or VIU) can then send the notification packet to the central controller using the SOME / IP protocol. The central controller then uses the CAN protocol to determine whether a person is present in the vehicle. A notification packet indicating whether or not there is a person is sent to the basic service unit. Specifically, the central controller may first send the notification packet to the gateway (or VIU) using the CAN protocol, and the gateway (or VIU), after further routing, sends the notification packet to the basic service unit using the CAN protocol. The basic service unit then determines, based on the notification packet, whether or not there is a person in the vehicle, and if there is a person in the vehicle, it can enable the service. Optionally, the basic service unit may further know, based on the notification packet, that if there is no person in the vehicle, the service will be disabled or its enablement will be suppressed.
[0207]
[0233] As can be further seen from Figure 6, in another possible implementation, the central controller may, alternatively, use the CAN protocol to send a notification packet to the VDC, CDC, or gateway (or VIU) indicating whether a person is present in the vehicle, instructing the basic service unit in the control domain of the VDC, CDC, or gateway (or VIU) to provide basic services. Based on the notification packet received from the central controller, the VDC, CDC, or gateway (or VIU) can determine whether a person is present in the vehicle and, if a person is present, control the basic service unit in the domain to provide basic services. Optionally, if no person is present in the vehicle, the basic service unit in the control domain may be disabled or its service enablement suppressed.
[0208]
[0234] If the gateway (or VIU) determines, based on the received notification signal, that there is no person inside the vehicle, the gateway (or VIU) may first send a notification packet to the central controller indicating that there is no person inside the vehicle. The central controller then sends a notification packet (for example, the notification packet may be a UDS protocol packet or a CAN packet) to each basic service unit instructing them to disable basic services. Similarly, the notification packet sent by the gateway (or VIU) to the central controller may be a SOME / IP protocol packet.
[0209]
[0235] In the aforementioned implementation, during the process of upgrading the vehicle's software via OTA, the specified CAN communication function is reserved by a pre-configured setting, and as a result, notification signals from the target unit can be notified to the control unit, enabling the provision of basic services during the OTA upgrade process. Furthermore, during the vehicle's software upgrade process, only the CAN communication function necessary to provide basic services can be secured, while the CAN communication function of vehicle components or other signals remains disabled. Therefore, the impact on data flushing during the vehicle's software upgrade process can be reduced as much as possible. In other words, in this application, if the impact on vehicle software upgrade services is reduced as much as possible, basic services can be provided during the vehicle's software upgrade process, improving the user experience.
[0210]
[0236] The above primarily describes the vehicle control method provided in the embodiments of the present application. It is possible to understand that, in order to implement the corresponding functions described above, each apparatus or device includes a corresponding hardware structure and / or a corresponding software module for performing each function. In combination with the exemplary units and steps described in the embodiments disclosed in this specification, the present application can be implemented by hardware, or by a combination of hardware and computer software. Whether the functions are performed by hardware or by hardware driven by computer software depends on the specific application and design constraints of the technical solution. A person skilled in the art may use various methods to implement the described functions for each specific application, but such implementation should not be considered to extend beyond the scope of the present application.
[0211]
[0237] In embodiments of the present application, the device can be divided into functional modules based on the method examples described above. For example, each functional module corresponding to each function may be obtained by division, or two or more functions may be integrated into a single processing module. The integrated module may be implemented in hardware form or in the form of a software functional module. It should be noted that in embodiments of the present application, the division into modules is merely an example, a logical functional division, and other divisions may be used in actual implementations.
[0212]
[0238] Figure 7 shows a possible logical structure of the control unit 700 in the vehicle, where each functional module is obtained by division based on its corresponding function. The control unit 700 may be the control unit described above. The control unit 700 includes a receiving module 701 and a control module 702.
[0213]
[0239] The receiving module 701 is configured to receive signals from a target unit during the vehicle's software upgrade process. The target unit is configured to sense whether a person is present inside the vehicle. The receiving module 701 may be configured to perform step S301 shown in Figure 3.
[0214]
[0240] The control module 702 is configured to control the basic service unit in the vehicle to provide basic services when it determines, based on a signal, that a person is present in the vehicle. The control module 702 may also be configured to perform step S302 shown in Figure 3.
[0215]
[0241] In possible implementations, the control unit 700 is connected to the target unit via a signal line.
[0216]
[0242] The signaling circuit is configured to transmit signals from the target unit to the control unit 700 during the vehicle's software upgrade process.
[0217]
[0243] In possible implementations, the receiving module 701 is further configured to receive communication control packets, which instruct the control unit 700 to disable the Controller Area Network CAN communication function.
[0218]
[0244] The control unit 700 further includes a reservation module configured to ensure CAN communication functionality between the control unit 700 and the target unit based on a first pre-configured configuration after a communication control packet has been received.
[0219]
[0245] The receiving module 701 specifically: It is configured to receive signals from the target unit via a controller area network, and these signals are CAN signals.
[0220]
[0246] In a possible implementation, a first pre-configured configuration indicates that the control unit 700 is permitted only to receive a target signal from a target unit via the controller area network, and the target signal is used to determine whether a person is present in the vehicle.
[0221]
[0247] In possible implementations, reserved modules are: After a communication control packet is received, the system is further configured to ensure CAN communication functionality with the basic service unit based on a second pre-configured configuration.
[0222]
[0248] The control device 700 further includes a transmission module, and the control module 702 is: The transmitting module is specifically configured to control the transmission module to send packets to the Basic Service Unit via the Controller Area Network, the packets instructing the Basic Service Unit to provide the Basic Service, and the packets are CAN packets.
[0223]
[0249] In possible implementations, the control unit 700 further includes a transmitting module, and the control module 702 includes: The system is specifically configured to control the transmitting unit to send packets to the Basic Service Unit by utilizing the Unified Diagnostic Service (UDS) protocol, and these packets instruct the Basic Service Unit to provide the Basic Service.
[0224]
[0250] In possible implementations, the control unit 700 includes one or more of the following: a vehicle domain controller (VDC), a cockpit domain controller (CDC), a vehicle integration unit (VIU), or a gateway.
[0225]
[0251] In possible implementations, the target unit is one or more of the following: a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box.
[0226]
[0252] In a possible implementation, the target unit includes a vehicle key controller. Signals from the target unit include signals from the vehicle key controller, including a signal indicating whether the vehicle key is inside the vehicle. A signal indicating that the vehicle key is inside the vehicle indicates that a person is inside the vehicle, and a signal indicating that the vehicle key is not inside the vehicle indicates that no person is inside the vehicle.
[0227]
[0253] In a possible implementation, the target unit includes a seat controller. Signals from the target unit include signals from the seat controller, which include signals indicating whether a person is present in a seat in a vehicle; a signal indicating a person is present in a seat in a vehicle indicates that a person is present in the vehicle; and a signal indicating no person is present in a seat in a vehicle indicates that no person is present in the vehicle.
[0228]
[0254] In a possible implementation, the target unit includes a vehicle-mounted T-box, and the signals from the target unit include signals from the vehicle-mounted T-box indicating whether a person is present in the vehicle.
[0229]
[0255] In possible implementations, the target unit further includes a vehicle lock controller. Signals from the target unit include signals from the vehicle lock controller, including signals indicating whether the vehicle's vehicle lock is unlocked or locked, the signal indicating that the vehicle's vehicle lock is unlocked indicating that a person is present in the vehicle, and the signal indicating that the vehicle's vehicle lock is locked indicating that no person is present in the vehicle.
[0230]
[0256] In possible implementations, signals from the vehicle key controller, seat controller, camera, or vehicle-mounted T-box have higher priority than signals from the vehicle lock controller.
[0231]
[0257] The control device 700 further includes a determination unit, which is configured to determine, based on a signal, whether a person is present inside the vehicle, specifically: Based on the signal from the vehicle lock controller, the system determines that there is no person inside the vehicle. If, based on the signal from the vehicle key controller, seat controller, camera, or vehicle-mounted T-box, the system determines that there is a person inside the vehicle, then the system determines that there is a person inside the vehicle.
[0232]
[0258] For specific operation and beneficial effects of the units within the control device 700 shown in Figure 7, please refer to Figure 3 and the corresponding descriptions in the possible method embodiments thereof. Further details are not described here.
[0233]
[0259] Figure 8 shows a possible logical structure of the vehicle device 800, where each functional module is obtained by division based on its corresponding function. The vehicle device 800 may also be the aforementioned target unit. The vehicle device 800 includes a transmission module 801.
[0234]
[0260] The transmitting module 801 is configured to transmit a signal to the vehicle's control unit when it senses the presence of a person inside the vehicle during the vehicle's software upgrade process. The signal instructs the control unit to control the basic service unit inside the vehicle to provide basic services.
[0235]
[0261] In possible implementations, the vehicle device is connected to the control unit via a signal line.
[0236]
[0262] The signaling circuit is configured to transmit signals from the vehicle's equipment to the control unit during the vehicle's software upgrade process.
[0237]
[0263] In possible implementations, the vehicle device would be: A receiving module configured to receive communication control packets, wherein the communication control packets instruct the vehicle device to disable the Controller Area Network CAN communication function; and A reserved module configured to ensure CAN communication functionality with the control unit based on a pre-configured setting after receiving a communication control packet; It also includes.
[0238]
[0264] Transmitter module 801 is: It is specifically configured to transmit signals to the control unit via a controller area network, and these signals are CAN signals.
[0239]
[0265] In possible implementations, a pre-configured setting indicates that the vehicle device is only permitted to transmit a target signal to the control unit via the controller area network, and this target signal is used to determine whether a person is present inside the vehicle.
[0240]
[0266] In possible implementations, the control unit includes one or more of the following: a vehicle domain controller (VDC), a cockpit domain controller (CDC), a vehicle integration unit (VIU), or a gateway.
[0241]
[0267] In possible implementations, the vehicle device is one or more of the following: a vehicle lock controller, a vehicle key controller, a seat controller, a camera, or a vehicle-mounted T-box.
[0242]
[0268] For specific operation and beneficial effects of the units within the vehicle device 800 shown in Figure 8, please refer to Figure 3 and the corresponding descriptions in the possible method embodiments thereof. Further details are not provided here.
[0243]
[0269] Figure 9 shows a possible logical structure of the control unit 900 in the vehicle, where each functional module is obtained by division based on its corresponding function. The control unit 900 may be the aforementioned OTA controller. The control unit 900 includes a broadcast module 901.
[0244]
[0270] The broadcast module 901 is configured to broadcast a communication control packet to the vehicle based on a pre-configured configuration, the communication control packet instructing the vehicle to disable all CAN communication functions except the target CAN communication function, the target CAN communication function includes a first CAN communication function for transmitting a target signal between the vehicle's target unit and the control unit, the target unit is configured to sense whether a person is present in the vehicle, and the target signal is a signal from the target unit used to determine whether a person is present in the vehicle.
[0245]
[0271] The first CAN communication function is used to transmit target signals to the control unit during the vehicle's software upgrade process.
[0246]
[0272] In possible implementations, the target CAN communication function further includes a second CAN communication function for transmitting target packets between the control unit and the basic service unit, the target packets instructing the basic service unit to provide basic services.
[0247]
[0273] The second CAN communication function is used to send target packets to the basic service unit during the vehicle's software upgrade process.
[0248]
[0274] For specific operation and beneficial effects of the units within the vehicle device 900 shown in Figure 9, please refer to the corresponding descriptions in possible method embodiments. Further details are not provided here.
[0249]
[0275] Figure 10 shows a possible hardware configuration of the vehicle control device according to the present application. The control device may be a control unit in the method of the embodiment described above. The control device 1000 includes a processor 1001, a memory 1002, and a communication interface 1003. The processor 1001, the communication interface 1003, and the memory 1002 may be connected to each other or to each other via a bus 1004.
[0250]
[0276] For example, memory 1002 is configured to store computer programs and data for the control unit 1000. Memory 1002 may include, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), compact disc read-only memory (CD-ROM), etc.
[0251]
[0277] The software or program code required for the functions of all or some of the units of the control unit in the embodiment of the method described above is stored in memory 1002.
[0252]
[0278] In possible implementations, if software or program code required by the functionality of some units is stored in memory 1002, the processor 1001 can, in addition to calling the program code in memory 1002 to perform some function, cooperate with another component (e.g., communication interface 1003) to jointly complete another function (e.g., data reception or transmission function) as described in the embodiment of the method.
[0253]
[0279] Multiple communication interfaces 1003 may exist, and they are configured to support the control device 1000 when performing communication such as receiving or transmitting data or signals.
[0254]
[0280] For example, the processor 1001 may be a central processing unit, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or another programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Alternatively, the processor may be a combination of processors that perform arithmetic functions, for example, a combination of one or more microprocessors, or a combination of a digital signal processor and a microprocessor. The processor 1001 can read a program stored in memory 1002 and perform operations performed by the control unit in the manner described in Figure 3 and the possible embodiments of Figure 3.
[0255]
[0281] In a specific implementation, the processor 1001 may be configured to read a program stored in memory 1002, and as a result, the control unit 1000 performs the following operations: In the software upgrade process of a vehicle, the vehicle's control unit receives a signal from a target unit, and the target unit is configured to sense whether there is a person in the vehicle. Based on the signal, when it is determined that there is a person in the vehicle, the control unit controls the basic service unit in the vehicle to provide basic services.
[0256]
[0282] For the specific operations and beneficial effects of the units within the control device 1000 shown in FIG. 10, please refer to the corresponding descriptions in the method embodiments. Details will not be described again here.
[0257]
[0283] FIG. 11 is a diagram of a possible hardware configuration of a vehicle device according to the present application. The vehicle device may be the target unit in the method in the foregoing embodiments. The vehicle device 1100 includes a processor 1101, a memory 1102, and a communication interface 1103. The processor 1101, the communication interface 1103, and the memory 1102 may be connected to each other, or may be connected to each other via a bus 1004.
[0258]
[0284] For example, the memory 1102 is configured to store the computer program and data of the control device 1100. The memory 1102 may include, but is not limited to, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM), a compact disc read-only memory (CD-ROM), etc.
[0259]
[0285] The software or program code required for the functionality of all or some of the units of the target unit in the embodiment of the method described above is stored in memory 1102.
[0260]
[0286] In possible implementations, if software or program code required by the functionality of some units is stored in memory 1102, the processor 1101 can, in addition to calling the program code in memory 1102 to perform some function, cooperate with another component (e.g., communication interface 1103) to jointly complete another function (e.g., data reception or transmission function) as described in the embodiment of the method.
[0261]
[0287] Multiple communication interfaces 1103 may exist, and they are configured to support the control device 1100 when performing communication such as receiving or transmitting data or signals.
[0262]
[0288] For example, the processor 1101 may be a central processing unit, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or another programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Alternatively, the processor may be a combination of processors that perform arithmetic functions, for example, a combination of one or more microprocessors, or a combination of a digital signal processor and a microprocessor. The processor 1101 can read a program stored in memory 1102 and perform operations performed by the target unit in the manner described in Figure 3 and the possible embodiments of Figure 3.
[0263]
[0289] In a specific implementation, the processor 1101 may be configured to read a program stored in memory 1102, and as a result, the vehicle device 1100 performs the following operations: During the vehicle's software upgrade process, the target unit, upon detecting the presence of a person inside the vehicle, sends a signal to the vehicle's control unit, which instructs the control unit to operate the basic service unit within the vehicle to provide basic services.
[0264]
[0290] For specific operation and beneficial effects of the units within the control device 1100 shown in Figure 11, please refer to the corresponding descriptions in the method embodiments. Further details will not be explained here.
[0265]
[0291] Figure 12 shows a possible hardware configuration of the vehicle control device according to the present application. The control device may be an OTA controller as described in the above embodiment. The control device 1200 includes a processor 1201, a memory 1202, and a communication interface 1203. The processor 1201, the communication interface 1203, and the memory 1202 may be connected to each other or to each other via a bus 1204.
[0266]
[0292] For example, memory 1202 is configured to store computer programs and data for the control unit 1200. Memory 1202 may include, but is not limited to, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM), compact disc read-only memory (CD-ROM), etc.
[0267]
[0293] The software or program code required for the functions of all or some of the units of the OTA controller in the embodiment of the method described above is stored in memory 1202.
[0268]
[0294] In possible implementations, if software or program code required by the functionality of some units is stored in memory 1202, the processor 1201 can, in addition to calling the program code in memory 1202 to perform some function, cooperate with another component (e.g., communication interface 1203) to jointly complete another function (e.g., data reception or transmission function) as described in the embodiment of the method.
[0269]
[0295] Multiple communication interfaces 1203 may exist, and they are configured to support the control device 1200 when performing communication such as receiving or transmitting data or signals.
[0270]
[0296] For example, the processor 1201 may be a central processing unit, a digital signal processor, an application-specific integrated circuit, a field-programmable gate array or another programmable logic device, a transistor logic device, a hardware component, or any combination thereof. Alternatively, the processor may be a combination of processors that perform arithmetic functions, for example, a combination of one or more microprocessors, or a combination of a digital signal processor and a microprocessor. The processor 1201 can read a program stored in memory 1202 and perform operations performed by the OTA controller in the manner described in Figure 3 and the possible embodiments of Figure 3.
[0271]
[0297] In a specific implementation, the processor 1201 may be configured to read a program stored in memory 1202, and as a result, the control unit 1200 performs the following operations:
[0298] The vehicle's OTA controller broadcasts a communication control packet to the vehicle based on a pre-configured configuration, instructing the vehicle to disable all CAN communication functions except for the target CAN communication function, which includes a first CAN communication function for transmitting a target signal between the vehicle's target unit and control unit, the target unit being configured to sense whether a person is present in the vehicle, and the target signal being a signal from the target unit used to determine whether a person is present in the vehicle; the first CAN communication function is used to transmit the target signal to the control unit during the vehicle's software upgrade process.
[0272]
[0299] For specific operation and beneficial effects of the units within the control device 1200 shown in Figure 12, please refer to the corresponding descriptions in the method embodiments. Further details will not be explained here.
[0273]
[0300] Embodiments of the present application further provide a vehicle, which includes at least one of the control device 1000 shown in Figure 10, the vehicle device 1100 shown in Figure 11, or the control device 1200 shown in Figure 12.
[0274]
[0301] Embodiments of the present application further provide a computer-readable storage medium. The computer-readable storage medium stores a computer program. The computer program is executed by a processor to perform operations performed by a control unit in any one of the above embodiments and possible embodiments thereof.
[0275]
[0302] Embodiments of the present application further provide a computer-readable storage medium. The computer-readable storage medium stores a computer program. The computer program is executed by a processor to perform operations executed by a target unit in any one of the foregoing embodiments and possible embodiments of the foregoing embodiments.
[0276]
[0303] Embodiments of the present application further provide a computer-readable storage medium. The computer-readable storage medium stores a computer program. The computer program is executed by a processor to perform operations executed by an OTA controller in any one of the foregoing embodiments and possible embodiments of the foregoing embodiments.
[0277]
[0304] Embodiments of the present application further provide a computer program software. When the computer program software is loaded and executed by a computer, operations executed by a control unit in any one of the foregoing embodiments and possible embodiments are executed.
[0278]
[0305] Embodiments of the present application further provide a computer program software. When the computer program software is loaded and executed by a computer, operations executed by a target unit in any one of the foregoing embodiments and possible embodiments are executed.
[0279]
[0306] Embodiments of the present application further provide a computer program software. When the computer program software is loaded and executed by a computer, operations executed by an OTA controller in any one of the foregoing embodiments and possible embodiments are executed.
[0280]
[0307] In conclusion, in this solution, signals from the target unit can still be received during the vehicle's software upgrade process, and as a result, if the received signals indicate the presence of a person inside the vehicle, the basic service unit within the vehicle can be controlled to provide basic services to the user. Compared to existing solutions where vehicle services are unavailable during the vehicle upgrade process, this solution allows the user's basic service requirements to be met during the vehicle's software upgrade process, thereby improving the user experience.
[0281]
[0308] In this application, terms such as "first" and "second" are used to distinguish between the same or similar items that have essentially the same function. It should be understood that "first," "second," and "n" do not have a logical or temporally continuous dependency and do not limit the number or order of execution. It should also be understood that while the following explanation uses terms such as "first" and "second" to describe various elements, these elements should not be limited by these terms. These terms are simply used to distinguish one element from another.
[0282]
[0309] It should be further understood that in the embodiments of this application, the process sequence number does not mean the execution order. The execution order of a process should be determined based on the function and internal logic of the process and should not be construed as any limitation to the implementation process of the embodiments of this application.
[0283]
[0310] It should be further understood that the term “include” (as used in this specification by a first-person, second-person, or plural subject) (also referred to as “includes,” “including,” “comprises,” and / or “comprising” by a third-person singular subject) specifies the existence of the described feature, entity, step, action, element, and / or component, and does not exclude the existence or addition of one or more other features, entities, steps, actions, elements, components, and / or their components.
[0284]
[0311] It should be further understood that the terms “one embodiment,” “embodiment,” and “possible implementation” as used throughout the specification mean that certain features, structures, or characteristics related to an embodiment or implementation are included in at least one embodiment of the present application. Therefore, “in one embodiment,” “in a particular embodiment,” or “possible implementation” as used throughout the specification do not necessarily refer to the same embodiment. Furthermore, these particular features, structures, or characteristics may be combined in one or more embodiments in any suitable manner.
[0285]
[0312] Finally, it should be noted that the embodiments described above are not intended to limit the present application, but merely to illustrate the technical solutions of the present application. Although the present application is described in detail with reference to the embodiments described above, those skilled in the art will understand that it is possible to further modify the technical solutions described in the embodiments described above, or to make equivalent substitutions for all or some of their technical features, without departing from the scope of the technical solutions of the embodiments of the present application.
Claims
1. A vehicle control method: In a vehicle software upgrade process, the vehicle's control unit receives a signal from a target unit, the target unit is configured to sense whether a person is present inside the vehicle; and If, based on the aforementioned signal, the control unit determines that a person is present in the vehicle, the control unit controls the basic service unit in the vehicle to provide basic services; In a method including, The steps include: the control unit receiving a communication control packet, the communication control packet instructing the control unit to disable the controller area network CAN communication function; and After receiving the communication control packet, the control unit ensures CAN communication functionality between the control unit and the target unit based on a first pre-configured configuration; The step further includes the vehicle's control unit receiving a signal from the target unit: The control unit receives a signal from the target unit via a controller area network, wherein the signal is a CAN signal; Methods that include...
2. In the method according to claim 1, the control unit is connected to the target unit via a signal line; A method wherein the signal line is configured to transmit the signal from the target unit to the control unit during the software upgrade process of the vehicle.
3. A method according to claim 1, wherein the first pre-configured configuration indicates that the control unit is permitted only to receive a target signal from the target unit via the controller area network, and the target signal is used to determine whether a person is present in the vehicle.
4. In the method according to claim 1: After receiving the communication control packet, the control unit ensures CAN communication functionality with the basic service unit based on a second pre-configured configuration; The step of the control unit controlling the basic service unit in the vehicle to provide basic services is: The control unit transmits a packet to the basic service unit via the controller area network, wherein the packet instructs the basic service unit to provide basic services, and the packet is a CAN packet; Methods that include...
5. The method according to claim 1, the step of the control unit controlling the basic service unit in the vehicle to provide basic services is: The control unit transmits a packet to the basic service unit using the Unified Diagnostic Services (UDS) protocol, wherein the packet instructs the basic service unit to provide basic services; Methods that include...
6. The method according to claim 1, wherein the control unit comprises one or more of a vehicle domain controller VDC, a cockpit domain controller CDC, a vehicle integration unit VIU, or a gateway.
7. A vehicle control device that is installed on a vehicle: In the software upgrade process of the vehicle, a receiving module configured to receive signals from a target unit, wherein the target unit is configured to sense whether a person is present in the vehicle; and A control module configured to control a basic service unit within a vehicle to provide basic services when it is determined, based on the aforementioned signal, that a person is present inside the vehicle; In a control device including, The receiving module is further configured to receive communication control packets, which instruct the control device to disable the controller area network CAN communication function; and The control device further includes a reservation module configured to ensure CAN communication functionality between the control device and the target unit based on a first pre-configured configuration after the communication control packet has been received; A control device wherein the receiving module is configured to receive a signal from the target unit via a controller area network, and the signal is a CAN signal.
8. In the control device according to claim 7, the control device is connected to the target unit via a signal line; The signal line is configured to transmit the signal from the target unit to the control device during the software upgrade process of the vehicle.
9. A control device according to claim 7, wherein the first preset configuration indicates that the control device is permitted only to receive a target signal from the target unit via the controller area network, and the target signal is used to determine whether a person is present in the vehicle.
10. In the control device according to claim 7: The reservation module is further configured to ensure CAN communication functionality with the basic service unit based on a second pre-configured configuration after the communication control packet has been received; and The control device further includes a transmission module, the control module being: A control device configured to control the transmission module to send packets to the basic service unit via the controller area network, wherein the packets instruct the basic service unit to provide basic services, and the packets are CAN packets.
11. The control device according to claim 7, wherein the control device further includes a transmission module, and the control module is: A control device configured to control the transmission module to send packets to the basic service unit by utilizing the Unified Diagnostic Service (UDS) protocol, wherein the packets instruct the basic service unit to provide basic services.
12. A control device according to claim 7, wherein the control device includes one or more of a vehicle domain controller (VDC), a cockpit domain controller (CDC), a vehicle integration unit (VIU), or a gateway.
13. A computer-readable storage medium that stores computer programs, The computer program is executed by a processor on a storage medium to carry out the method described in claim 1.
Citation Information
Patent Citations
Data communication authentication system for vehicle, and gateway apparatus for vehicle
JP2013171378A
In-vehicle device
JP2017220091A
Electronic controller and session establishing program
JP2020021506A
Vehicle program rewriting system
WO2012017719A1