Vehicle FOTA upgrade system and method based on feed protection

By introducing a feed protection module into the vehicle FOTA upgrade system to monitor and respond to the abnormal feeding status of the external power supply, the software crash caused by abnormal feeding during the vehicle FOTA upgrade process is solved, and effective protection and safety improvement of the vehicle system is achieved.

WO2025112280A1PCT designated stage expired Publication Date: 2025-06-05ZHIJI AUTOMOTIVE TECH CO LTD
View PDF 5 Cites 0 Cited by

Patent Information

Application Number
PCT/CN2024/090771
Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Priority Date
2023-12-01
Filing Date
2024-04-30
Publication Date
2025-06-05

AI Technical Summary

Technical Problem

During the vehicle FOTA upgrade process, abnormal power feeding from external power supplies may cause software crash or damage, posing safety risks, and the prior art cannot completely eliminate this risk.

Method used

The vehicle FOTA upgrade system based on feed protection is adopted. The electrical parameters of the external power supply are obtained through the electrical parameter acquisition module. The power feed protection module monitors the feed status and sends it to the upgrade control module to control the termination or recovery of the vehicle FOTA upgrade based on the abnormal feed result.

Benefits of technology

Effectively protect the vehicle system from abnormal power feeds, without the need to complete backup of the original software, reduces the cost and complexity of the vehicle and improves the safety and reliability of the system.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN2024090771_05062025_PF_FP_ABST
    Figure CN2024090771_05062025_PF_FP_ABST
Patent Text Reader

Abstract

A vehicle FOTA upgrade system and method based on feed protection. The vehicle FOTA upgrade system comprises: an electrical parameter acquisition module, which is at least used for acquiring electrical parameters of an external power source, wherein the electrical parameters comprise a voltage, a current and an electrical frequency; a feed protection module, which is at least used for monitoring a feed state of the external power source on the basis of the electrical parameters, and sending the feed state to an upgrade control module; and the upgrade control module, which is at least used for controlling the FOTA upgrade of a vehicle on the basis of the feed state. The present application solves the problem of an abnormal feed occurring in an external power source during an FOTA upgrade process, such that a vehicle system can be protected from the impact of the abnormal feed of the external power source, and it is not necessary to perform a complete backup on original software, thereby reducing the cost and complexity of a vehicle.
Need to check novelty before this filing date? Find Prior Art

Description

A vehicle FOTA upgrade system and method based on feed protection

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to Chinese patent application No. 202311641057.5, filed on December 1, 2023, entitled “A vehicle FOTA upgrade system and method based on feed protection,” the disclosure of which is incorporated herein by reference in its entirety. Technical Field

[0003] The present application belongs to the technical field of over-the-air software upgrade (FOTA) of a vehicle's mobile terminal, and specifically relates to a vehicle FOTA upgrade system and method based on power feed protection. Background Art

[0004] During the vehicle FOTA upgrade process, abnormal power supply from the external power supply may cause the software during the vehicle FOTA upgrade process to crash or be damaged, or even cause the vehicle to be unable to drive normally, posing certain safety risks.

[0005] Currently, commonly used vehicle FOTA (Functional Over-The-Air (FOTA)) upgrade technologies primarily utilize differential or mirror upgrades to protect vehicle system security. Differential upgrades compare the upgrade package with the original software and only upgrade the changed parts. Mirror upgrades copy the vehicle system to a backup partition during the upgrade process and switch back to the backup partition after the upgrade is complete. Differential upgrades require a complete backup of the original software, while mirror upgrades increase vehicle cost and complexity. However, neither differential nor mirror upgrades can completely eliminate the safety risks posed by abnormal power supply from an external power source.

[0006] Summary of the Invention

[0007] In view of the shortcomings of the related technologies mentioned above, the purpose of this application is to provide a vehicle FOTA upgrade system and method based on power supply protection, which solves the problem of abnormal power supply from the external power supply during the FOTA upgrade process, can protect the vehicle system from the impact of abnormal power supply from the external power supply, eliminates the need for a complete backup of the original software, and reduces the cost and complexity of the vehicle.

[0008] To achieve the above objectives, this application adopts the following technical solutions:

[0009] In a first aspect of the present application, a vehicle FOTA upgrade system based on feed protection is provided, comprising:

[0010] An electrical parameter acquisition module, at least for acquiring electrical parameters of an external power source, said electrical parameters including voltage, current and electrical frequency;

[0011] a power feeding protection module, at least for monitoring a power feeding state of an external power source based on the electrical parameters, and sending the power feeding state to an upgrade control module;

[0012] The upgrade control module is at least used to control the vehicle FOTA upgrade based on the power feeding status.

[0013] As an embodiment of the present application, the feed protection module includes a voltage monitoring module, a current monitoring module and / or an electrical frequency monitoring module.

[0014] If the voltage exceeds a preset voltage threshold and / or the current exceeds a preset current threshold and / or the electrical frequency exceeds a preset electrical frequency threshold, the power feeding result mapped by the power feeding state is an abnormal power feeding result;

[0015] The upgrade control module controls the vehicle FOTA upgrade to terminate based on the abnormal power feeding result.

[0016] As an implementation method of the present application, the vehicle FOTA upgrade system further includes a recovery module;

[0017] The recovery module is used to restore the vehicle to a state before the upgrade when the upgrade control module terminates the vehicle FOTA upgrade based on the abnormal power feeding result.

[0018] As an implementation manner of the present application, the power feed protection module is provided in an executable computing device of a vehicle, and the executable computing device includes an electronic controller (ECU, Electronic Control Unit) and / or an on-board network.

[0019] As an implementation method of the present application, the vehicle FOTA upgrade system further includes a status acquisition module;

[0020] The status acquisition module is used to acquire the external power supply status, the vehicle operation status and the high-voltage system status. The vehicle operation status includes the parking state and the non-parking state. The high-voltage system status includes the power battery level.

[0021] As an implementation method of the present application, the vehicle FOTA upgrade system further includes a first judgment module, a first execution module and a second execution module;

[0022] The first judgment module is used to judge the vehicle operating status and high-voltage system status after the power feeding protection module generates an abnormal power feeding result and before the vehicle FOTA upgrade continues;

[0023] The first execution module is configured to supplement power to the external power supply through the high-voltage system if the vehicle is in a parking state and the power battery power level is not lower than a preset power threshold;

[0024] The second execution module is used to supplement the external power supply through the motor if the vehicle is in a non-parking state.

[0025] As an implementation manner of the present application, the vehicle FOTA upgrade system further includes a second judgment module, a first termination module and a second termination module;

[0026] The second judgment module is used to continuously judge the external power supply status, the vehicle operating status and the high-voltage system status after the first execution module or the second execution module replenishes the external power supply and before the vehicle FOTA upgrade continues;

[0027] If the power level of the power battery is lower than a preset power threshold, the first termination module stops the high-voltage system from replenishing power to the external power supply;

[0028] If the external power supply is replenished and the power level of the external power supply is not higher than a preset replenishment threshold within a preset time period, the second termination module terminates the high-voltage system from replenishing the external power supply or terminates the motor from replenishing the external power supply.

[0029] As an implementation manner of the present application, the vehicle FOTA upgrade system further includes a third judgment module, a first association module and a second association module;

[0030] The third judgment module is used to obtain and judge the state of the external power supply after the high-voltage system stops supplying power to the external power supply and / or the motor stops supplying power to the external power supply;

[0031] If the external power supply level is higher than a preset recharge threshold value when the vehicle is parked, the first association module sends a signal indicating that the external power supply level is higher than the preset recharge threshold value to the upgrade control module, and the upgrade control module maintains the vehicle FOTA upgrade;

[0032] If the power level of the external power supply is not higher than the preset power replenishment threshold, the second association module sends a signal indicating that the power level of the external power supply is not higher than the preset power replenishment threshold to the upgrade control module, and the upgrade control module terminates the vehicle FOTA upgrade.

[0033] As an implementation manner of the present application, the vehicle FOTA upgrade system further includes a fourth judgment module and a third association module;

[0034] The fourth determination module is configured to continuously determine the power level of the external power supply after the first execution module or the second execution module replenishes the power of the external power supply;

[0035] If the power level of the external power supply is higher than the preset power replenishment threshold within a preset time period, the third association module sends a signal indicating that the power level of the external power supply is higher than the preset power replenishment threshold to the upgrade control module, and the upgrade control module maintains the vehicle FOTA upgrade.

[0036] A second aspect of the present application provides a vehicle FOTA upgrade method based on feed protection, comprising:

[0037] Acquiring electrical parameters of an external power source, wherein the electrical parameters include voltage, current, and electrical frequency;

[0038] monitoring a power feeding state of an external power source based on the electrical parameter;

[0039] The vehicle FOTA upgrade is controlled based on the power feeding status.

[0040] As an embodiment of the present application, if the voltage exceeds a preset voltage threshold and / or the current exceeds a preset current threshold and / or the electrical frequency exceeds a preset electrical frequency threshold, the feeding result mapped by the feeding state is an abnormal feeding result; based on the abnormal feeding result, the vehicle FOTA upgrade is terminated.

[0041] The third aspect of the present application provides a vehicle FOTA upgrade device based on power feed protection, comprising: a processor; and a memory storing computer instructions, which, when executed by the processor, implement the vehicle FOTA upgrade method based on power feed protection as described in the second aspect of the present application.

[0042] The fourth aspect of the present application provides a non-transitory computer-readable storage medium storing a computer program, which, when executed by a processor, implements the steps of the vehicle FOTA upgrade method based on power feed protection as described in the second aspect of the present application.

[0043] The fifth aspect of the present application provides a computer program product, comprising computer instructions, which, when executed by the processor, implement the vehicle FOTA upgrade method based on power feed protection as described in the second aspect of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0045] FIG1 is a module composition diagram of a vehicle FOTA upgrade system based on feed protection in some embodiments of the present application.

[0046] FIG2 is a module composition diagram of another vehicle FOTA upgrade system based on feed protection in some embodiments of the present application.

[0047] FIG3 is a module composition diagram of another vehicle FOTA upgrade system based on feed protection in some embodiments of the present application.

[0048] FIG4 is a flow chart of a vehicle FOTA upgrade system based on power feed protection in some embodiments of the present application.

[0049] FIG5 is an exemplary configuration diagram of a vehicle FOTA upgrade device based on feed protection in some embodiments of the present application. DETAILED DESCRIPTION

[0050] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without making creative work are within the scope of protection of this application. In addition, it should be understood that the specific embodiments described herein are only used to illustrate and explain the present application and are not used to limit the present application.

[0051] It should be noted that the order of description of the following embodiments does not limit the preferred order of the embodiments of the present application. In addition, in the following embodiments, the description of each embodiment has its own focus. For parts not described in detail in one embodiment, please refer to the relevant description of other embodiments.

[0052] Vehicle FOTA upgrades refer to the technology that wirelessly upgrades vehicle software while the vehicle is in operation. Abnormal power supply refers to power supply that does not meet the normal operating requirements of the vehicle.

[0053] With the continuous development of intelligent automotive technology, vehicle software is becoming increasingly complex and important. Vehicle FOTA upgrade technology allows vehicle software to be upgraded during operation to fix software vulnerabilities and improve vehicle performance and functionality.

[0054] During the vehicle FOTA upgrade process, abnormal power supply from an external power supply may cause vehicle system failure or even damage. As shown in Figures 1-3, some embodiments of the present application provide a vehicle FOTA upgrade system based on power supply protection, including the following contents.

[0055] The electrical parameter acquisition module is configured to acquire at least electrical parameters of an external power supply, including voltage, current, and frequency of the external power supply. Specifically, the external power supply is a low-voltage system corresponding to a high-voltage system in the vehicle, i.e., a 12V power supply within the vehicle.

[0056] The power feeding protection module is at least used to monitor the power feeding status of the external power supply based on the electrical parameters and send the power feeding status to the upgrade control module; specifically, since the electrical parameters include the voltage of the external power supply, the current of the external power supply and the electrical frequency of the external power supply, monitoring the power feeding status of the external power supply based on the electrical parameters specifically includes monitoring the power feeding status of the external power supply based on at least one of the voltage, current and electrical frequency.

[0057] The upgrade control module is configured to control the vehicle FOTA upgrade based on the power supply status. Specifically, the power supply status represents the power supply result of the external power supply. Therefore, the power supply result mapped by the power supply status can be used as an execution standard for the upgrade control module to control the vehicle FOTA upgrade action, such as controlling the vehicle FOTA upgrade to terminate or maintain the vehicle FOTA upgrade.

[0058] Here, this method can timely control the vehicle FOTA upgrade action when it is detected that the external power supply has an abnormal power supply situation, so as to protect the vehicle system from the impact of the abnormal power supply from the external power supply.

[0059] In some embodiments of the present application, the feed protection module includes a voltage monitoring module, a current monitoring module and / or an electrical frequency monitoring module.

[0060] If the voltage exceeds a preset voltage threshold and / or the current exceeds a preset current threshold and / or the electrical frequency exceeds a preset electrical frequency threshold, the power feeding result mapped by the power feeding state is an abnormal power feeding result;

[0061] The upgrade control module controls the vehicle FOTA upgrade to terminate based on the abnormal power feeding result.

[0062] Specifically, by setting a preset voltage threshold, the preset current threshold and the preset electrical frequency threshold, the abnormal power feeding state or the abnormal power feeding result can be quantified and displayed. After understanding the logic of the present application, those skilled in the art can make combined modifications by changing the threshold of the electrical parameters or the types of electrical parameters not mentioned, which also falls within the scope of protection of the present application.

[0063] Taking a lead-acid battery as an example, for the voltage of the electrical parameter, the preset voltage threshold can be set to 70%, and the operating voltage of the vehicle can be set to 14V. An operating voltage lower than 11V is an abnormal power feeding result.

[0064] As shown in FIG2 , in some embodiments of the present application, the vehicle FOTA upgrade system further includes a recovery module;

[0065] The recovery module is used to restore the vehicle to a state before the upgrade when the upgrade control module terminates the vehicle FOTA upgrade based on the abnormal power feeding result.

[0066] Specifically, for vehicles with A\B dual partitions, after the upgrade control module terminates the vehicle FOTA upgrade based on the abnormal power feeding result, that is, after the upgrade fails, the recovery module can restore the system to the original version without affecting the vehicle function.

[0067] In some embodiments of the present application, the power feed protection module is disposed in an executable computing device of the vehicle, which includes an ECU and / or an in-vehicle network. Specifically, the power feed protection module can be disposed in the vehicle hardware in the form of a software-defined chip with additional functions. Specifically, the power feed protection module can be distributed in the chip of the intelligent vehicle control controller, the chip of the vehicle battery management module, and the chip of the system management module.

[0068] As shown in FIG3 , in some embodiments of the present application, the vehicle FOTA upgrade system further includes a status acquisition module;

[0069] The status acquisition module is used to obtain the external power supply power, vehicle operating status and high-voltage system status, the external power supply status includes the external power supply power, the vehicle operating status includes the parking state and the non-parking state, and the high-voltage system status includes the power battery power.

[0070] Specifically, the vehicle FOTA upgrade system further includes a first judgment module, a first execution module and a second execution module;

[0071] The first judgment module is used to judge the vehicle operating status and high-voltage system status before controlling the vehicle FOTA upgrade after the power feeding protection module generates an abnormal power feeding result;

[0072] The first execution module is configured to supplement power to the external power supply through the high-voltage system if the vehicle is in a parking state and the power battery power level is not lower than a preset power threshold;

[0073] The second execution module is used to supplement the external power supply through the motor if the vehicle is in a non-parking state.

[0074] Here, this method can enable the system to provide power replenishment relief after obtaining the initial abnormal power feeding result. By distinguishing the vehicle's operating scenarios according to the vehicle's operating status, the high-voltage power battery can be used for power replenishment in the parked state, and the motor or generator can be started for power replenishment in the non-parked state.

[0075] In order to improve the feasibility of vehicle FOTA upgrade and improve the efficiency of FOTA upgrade, in some embodiments of the present application, the vehicle FOTA upgrade system further includes a second judgment module, a first termination module and a second termination module;

[0076] The second judgment module is used to continuously judge the power battery status, vehicle operating status and high-voltage system status after the first execution module or the second execution module replenishes the external power supply and before the vehicle FOTA upgrade continues;

[0077] If the power battery level is lower than a preset power threshold when the vehicle is parked, the first termination module terminates the high-voltage system from supplying power to the external power supply. The preset power threshold can be customized by the user according to his or her own needs, or recommended by the system based on the actual power consumption of the vehicle, and is not specifically limited here.

[0078] If, after the external power supply is recharged, the power level of the external power supply does not exceed a preset recharge threshold within a preset time period, the second termination module terminates the high-voltage system's recharge of the external power supply, or terminates the motor's recharge of the external power supply. The preset power growth rate can be set based on actual circumstances and is not specifically limited here. By limiting this time parameter to a preset time period, the accuracy of the external power supply power determination can be increased, indicating that the external power supply remains unable to be recharged within a certain period of time.

[0079] Here, after the external power supply is recharged by the first execution module and the second execution module, the vehicle operating status and the high-voltage system status are continuously judged. The second judgment module judges the feasibility of the FOTA upgrade from two aspects: First, when the vehicle is parked, if the power battery power is lower than the preset power threshold, the first termination module terminates the high-voltage system's recharging of the external power supply. Secondly, from another aspect, if neither the recharging method in the parked state nor the recharging method in the non-parked state can make the external power supply power growth rate higher than the preset power growth rate within the preset time, it means that the external power supply may be unable to compensate for the power through recharging, which is not conducive to the implementation of the FOTA upgrade. Therefore, the second termination module will terminate the high-voltage system's recharging of the external power supply, or terminate the motor's recharging of the external power supply.

[0080] Therefore, this application can promptly terminate recharging when the power battery is low by continuously assessing the vehicle's operating status and the high-voltage system's status. Because the external power supply's charge level does not exceed the preset recharging threshold within a preset time period, there may be situations where the external power supply is damaged and recharging is impossible. In both cases, recharging can be terminated to protect the vehicle system and the stability of the vehicle's overall operation.

[0081] In some embodiments of the present application, the vehicle FOTA upgrade system further includes a third judgment module, a first association module and a second association module;

[0082] The third judgment module is used to judge the state of the external power supply after the high-voltage system stops supplying power to the external power supply and / or the motor stops supplying power to the external power supply;

[0083] If the external power supply level is higher than a preset recharge threshold value when the vehicle is parked, the first association module sends a signal indicating that the external power supply level is higher than the preset recharge threshold value to the upgrade control module, and the upgrade control module maintains the vehicle FOTA upgrade;

[0084] If the power level of the external power supply is not higher than the preset power replenishment threshold, the second association module sends a signal indicating that the power level of the external power supply is not higher than the preset power replenishment threshold to the upgrade control module, and the upgrade control module terminates the vehicle FOTA upgrade.

[0085] Here, this method can be used to achieve that after terminating the external power supply, by setting the first associated module and the second associated module, the upgrade control module can better maintain or terminate the vehicle FOTA upgrade to ensure the safety of the vehicle system.

[0086] In some embodiments of the present application, the vehicle FOTA upgrade system further includes a fourth judgment module and a third association module;

[0087] The fourth determination module is configured to continuously determine the external power state after the first execution module or the second execution module replenishes the external power supply;

[0088] If the power level of the external power supply is higher than the preset power replenishment threshold, the third association module sends a signal indicating that the power level of the external power supply is higher than the preset power replenishment threshold to the upgrade control module, and the upgrade control module maintains the vehicle FOTA upgrade.

[0089] Here, the fourth judgment module is a continuous monitoring and judgment module after the power is replenished, which is used to promptly obtain the situation where the power of the external power supply is higher than the preset power replenishment threshold. In this way, the vehicle FOTA upgrade can be quickly maintained and the upgrade efficiency can be improved.

[0090] In addition, when the vehicle's parking state is converted to an unparked state, the external power supply state, vehicle operating state, high-voltage system state, etc. can be judged, executed, terminated and associated with reference to the latest vehicle parking state. No further details will be given here.

[0091] As shown in FIG4 , some embodiments of the present application provide a vehicle FOTA upgrade method based on feed protection, including:

[0092] Step S1: Acquire electrical parameters of an external power source, wherein the electrical parameters include voltage, current, and electrical frequency;

[0093] Step S2: monitoring the power feeding status of the external power supply based on the electrical parameters;

[0094] Step S3: Controlling the vehicle FOTA upgrade based on the power feeding status.

[0095] In some embodiments of the present application, if the voltage exceeds a preset voltage threshold and / or the current exceeds a preset current threshold and / or the electrical frequency exceeds a preset electrical frequency threshold, the feeding result mapped by the feeding state is an abnormal feeding result;

[0096] The vehicle FOTA upgrade is terminated based on the abnormal power feeding result.

[0097] In some embodiments of the present application, the external power supply status, vehicle operating status and high-voltage system status are also obtained, wherein the external power supply status includes the external power supply power, the vehicle operating status includes the parking state and the non-parking state, and the high-voltage system status includes the power battery power.

[0098] Specifically, after the power feeding protection module generates an abnormal power feeding result and before the vehicle FOTA upgrade continues, the vehicle operating status and high-voltage system status are judged;

[0099] If the vehicle is in a parked state and the power battery level is not lower than a preset power threshold, the external power supply is supplemented with power through the vehicle's high-voltage system;

[0100] If the vehicle is in a non-parking state, the external power supply is supplemented with electricity through the motor.

[0101] Specifically, after the external power supply is replenished and before the vehicle FOTA upgrade continues, the external power supply status, vehicle operating status, and high-voltage system status are continuously judged;

[0102] If the power level of the power battery is lower than a preset power threshold, the high-voltage system stops supplying power to the external power supply;

[0103] If the power level of the external power supply is lower than a preset power replenishment threshold within a preset time period, the high-voltage system is stopped from replenishing power to the external power supply, or the motor is stopped from replenishing power to the external power supply.

[0104] Specifically, after the high-voltage system stops supplying power to the external power supply and / or the motor stops supplying power to the external power supply, the external power supply state is determined;

[0105] If the vehicle is parked and the power level of the external power supply is higher than the preset recharge threshold, the vehicle FOTA upgrade is maintained;

[0106] If the power level of the external power supply is not higher than the preset power replenishment threshold, the vehicle FOTA upgrade is terminated.

[0107] Specifically, after the external power supply is replenished, the power level of the external power supply is continuously determined;

[0108] If the power level of the external power supply is higher than the preset power replenishment threshold within the preset time period, the vehicle FOTA upgrade is maintained.

[0109] This application can effectively protect the vehicle system from abnormal power supply from an external power supply, eliminates the need for a complete backup of the original software, reduces cost and complexity, and is easy to implement and deploy.

[0110] 5 , some embodiments of the present application disclose a vehicle FOTA upgrade device based on power feed protection, including a processor and a memory. The memory stores computer instructions that, when executed by the processor, implement the vehicle FOTA upgrade method based on power feed protection described in any of the above embodiments.

[0111] Some embodiments of the present application also disclose a non-transient computer-readable storage medium, which stores a computer program, and when the computer program is executed by a processor, it implements the steps of the vehicle FOTA upgrade based on feed protection described in any of the above embodiments. The computer-readable storage medium may include: any entity or device that can carry a computer program, a recording medium, a U disk, a mobile hard disk, a magnetic disk, an optical disk, a computer memory, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), and a software distribution medium, etc. The computer program includes a computer program code. The computer program code can be in source code form, object code form, an executable file or some intermediate form, etc. The computer-readable storage medium may include: any entity or device that can carry a computer program code, a recording medium, a U disk, a mobile hard disk, a magnetic disk, an optical disk, a computer memory, ROM, RAM, and a software distribution medium, etc.

[0112] Furthermore, some embodiments of the present application also disclose a computer program product, including computer instructions, which, when executed by a processor, can implement the vehicle FOTA upgrade method based on feed protection described in any of the above embodiments.

[0113] To sum up, compared with the related art, the present application includes at least one of the following beneficial technical effects: the present application can detect when the external power supply has an abnormal power supply situation, and promptly control the vehicle FOTA upgrade action to protect the vehicle system from the abnormal power supply from the external power supply; the present application can protect the vehicle system from the abnormal power supply from the external power supply without the need for a complete backup of the original software, thereby reducing the cost and complexity of the vehicle; this aspect can provide power replenishment relief after obtaining the abnormal result, and distinguish the vehicle's operating scenarios according to the vehicle's operating status. In the parked state, the high-voltage power battery can be used for power replenishment operations, and in the non-parked state, the motor or generator can be started for power replenishment.

[0114] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, segment or portion of code comprising one or more executable instructions for implementing the steps of a specific logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may be performed out of the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by those skilled in the art to which the embodiments of the present application belong.

[0115] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, apparatus or device (such as a computer-based system, a system including a processing module, or other system that can fetch instructions from an instruction execution system, apparatus or device and execute instructions), or used in conjunction with such instruction execution systems, apparatuses or devices.

[0116] The above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A vehicle FOTA upgrade system based on power feed protection, comprising: An electrical parameter acquisition module, at least used to acquire electrical parameters of an external power source, wherein the electrical parameters include voltage, current and electrical frequency; A power feeding protection module, at least used for monitoring the power feeding state of the external power source based on the electrical parameter, and sending the power feeding state to the upgrade control module; The upgrade control module is at least used to control the vehicle FOTA upgrade based on the feeding state.

2. The vehicle FOTA upgrade system based on feed protection according to claim 1, wherein: The feed protection module includes at least one of a voltage monitoring module, a current monitoring module and an electrical frequency monitoring module. If at least one of the voltage exceeds a preset voltage threshold, the current exceeds a preset current threshold, and the electrical frequency exceeds a preset electrical frequency threshold is satisfied, the power feeding result mapped by the power feeding state is an abnormal power feeding result; The upgrade control module controls the vehicle FOTA to terminate the upgrade based on the abnormal power feeding result.

3. The vehicle FOTA upgrade system based on feed protection according to claim 2, wherein: The vehicle FOTA upgrade system also includes a recovery module; The recovery module is used to restore the vehicle to a state before the upgrade when the upgrade control module terminates the vehicle FOTA upgrade based on the abnormal power feeding result.

4. The vehicle FOTA upgrade system based on feed protection according to claim 1, wherein: The feed protection module is arranged in an executable computing device of the vehicle, and the executable computing device includes at least one of an ECU and an on-board network.

5. The vehicle FOTA upgrade system based on feed protection according to claim 2, wherein: The vehicle FOTA upgrade system also includes a status acquisition module; The status acquisition module is used to acquire the external power supply status, the vehicle operation status and the high-voltage system status, the external power supply status includes the external power supply power, the vehicle operation status includes the parking state and the non-parking state, and the high-voltage system status includes the power battery power.

6. The vehicle FOTA upgrade system based on power feed protection according to claim 5, wherein: The vehicle FOTA upgrade system also includes a first judgment module, a first execution module and a second execution module; The first judgment module is used to judge the vehicle operation status and the high-voltage system status after the power feeding protection module generates an abnormal power feeding result and before the vehicle FOTA continues to upgrade; The first execution module is used to supplement the external power supply through the high-voltage system if the vehicle is in the parking state and the power battery power is not less than a preset power threshold; The second execution module is used to supplement the external power supply through the motor if the vehicle is in a non-parking state.

7. The vehicle FOTA upgrade system based on feed protection according to claim 6, wherein: The vehicle FOTA upgrade system also includes a second judgment module, a first termination module and a second termination module; The second judgment module is used to continuously judge the external power supply state, the vehicle operation state and the high-voltage system state after the first execution module or the second execution module replenishes the external power supply and before the vehicle FOTA upgrade continues; If the power battery power is lower than a preset power threshold, the first termination module stops the high-voltage system from supplementing power to the external power supply; If the power level of the external power supply is not higher than a preset power replenishment threshold within a preset time period after the external power supply is replenished, the second termination module terminates the high voltage system from replenishing the external power supply, or terminates the motor from replenishing the external power supply.

8. The vehicle FOTA upgrade system based on feed protection according to claim 7, wherein: The vehicle FOTA upgrade system also includes a third judgment module, a first association module and a second association module; The third judgment module is used to judge the state of the external power supply after at least one of terminating the high voltage system to supplement the external power supply and terminating the motor to supplement the external power supply; If the power level of the external power supply is higher than the preset power replenishment threshold when the vehicle is parked, the first association module sends a signal that the power level of the external power supply is higher than the preset power replenishment threshold to the upgrade control module, and the upgrade control module maintains the vehicle FOTA upgrade; If the power level of the external power supply is not higher than the preset power replenishment threshold, the second association module sends a signal indicating that the power level of the external power supply is not higher than the preset power replenishment threshold to the upgrade control module, and the upgrade control module terminates the vehicle FOTA upgrade.

9. The vehicle FOTA upgrade system based on feed protection according to claim 7, wherein: The vehicle FOTA upgrade system also includes a fourth judgment module and a third association module; The fourth determination module is used to continuously determine the state of the external power supply after the first execution module or the second execution module replenishes the external power supply; If the power level of the external power supply is higher than the preset power replenishment threshold within a preset time period, the third association module sends a signal indicating that the power level of the external power supply is higher than the preset power replenishment threshold to the upgrade control module, and the upgrade control module maintains the vehicle FOTA upgrade.

10. A vehicle FOTA upgrade method based on power feed protection, comprising: Acquiring electrical parameters of an external power source, wherein the electrical parameters include voltage, current and electrical frequency; monitoring a power feeding state of an external power source based on the electrical parameter; The vehicle FOTA upgrade is controlled based on the power feeding status.

11. The vehicle FOTA upgrade method based on feed protection according to claim 10, wherein: If at least one of the voltage exceeds a preset voltage threshold, the current exceeds a preset current threshold, and the electrical frequency exceeds a preset electrical frequency threshold is satisfied, the power feeding result mapped by the power feeding state is an abnormal power feeding result; The vehicle FOTA upgrade is terminated based on the abnormal power feeding result.

12. A vehicle FOTA upgrade device based on power feed protection, comprising: processor; as well as A memory storing computer instructions, wherein the computer instructions, when executed by the processor, implement the vehicle FOTA upgrade method based on feed protection according to any one of claims 10-11.

13. A non-transitory computer-readable storage medium storing a computer program, wherein: When the computer program is executed by a processor, the vehicle FOTA upgrade method based on feed protection as described in any one of claims 10-11 is implemented.

14. A computer program product, comprising computer instructions, which, when executed by a processor, implement the vehicle FOTA upgrade method based on power feed protection as described in any one of claims 10-11.

Citation Information

Patent Citations

  • OTA (over-the-air) upgrading method for vehicle

    CN112486528A

  • Vehicle charging method and device, electronic equipment and vehicle

    CN116834604A

  • OTA upgrade control system and electric working machine

    CN116954665A

  • Vehicle FOTA upgrading system and method based on feed protection

    CN117785256A

  • Erase-replace OTA smart power strategy

    US20190210545A1