Vehicle OTA Rescue Update for Failed Critical Components
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Vehicle power loss and battery overdischarge risks arise due to uncertain timing of technical personnel intervention following an OTA update failure, leading to prolonged downtime.
Innovation Solution
A device rescue method involving a vehicle sending update failure information to a server, which determines and triggers a rescue update task for critical components, allowing the vehicle to re-update these components quickly, potentially bypassing certain checks to limit driving hazards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual intervention is used to create update tasks after OTA update failure, then update can be performed, but time delay occurs leading to power loss and battery overdischarge
Solution Approach 1:
The system performs preliminary actions by automatically detecting update failures and pre-generating rescue update tasks without waiting for manual intervention. The server monitors update status and proactively creates rescue tasks, eliminating the time delay caused by manual task creation while ensuring updates are performed reliably
Solution Approach 2:
The system implements self-service by enabling the vehicle terminal to automatically report update failure information to the server and receive rescue update tasks without human intervention. The entire process from failure detection to task execution is automated, allowing the system to serve itself and eliminate dependency on manual operations
2Loss of time
If automatic rescue update task is triggered, then time delay is reduced, but system complexity increases
Solution Approach 1:
The server acts as an intermediary between the vehicle terminal and the update system. It receives update failure information, automatically generates rescue update tasks, and sends them back to the terminal. This intermediary approach automates the process without requiring complex local decision-making logic at the terminal, balancing time reduction with manageable system complexity
Solution Approach 2:
The system implements feedback by having the vehicle terminal report update failure information back to the server. This feedback loop enables the server to detect failures and automatically trigger rescue update tasks. The feedback mechanism is simple and effective, reducing time delay without significantly increasing system complexity
Data Source
AI summary
Embodiments of this application disclose a device rescue method, and the device rescue method may be applied to a scenario like vehicle rescue. The method includes: After a vehicle fails to be updated, the vehicle sends, to a server, first information that includes update failure information of a plurality of components, and then receives, from the server, second information for triggering a rescue update task, where the rescue update task is related to a to-be-re-updated target component in the plurality of components. Further, the vehicle executes a strategy corresponding to the rescue update task and re-updates the target component, where the strategy is used to limit driving of the vehicle. The server may automatically determine the to-be-re-updated target component based on the update failure information reported by the vehicle.