CN116719567A

CN116719567A - Chip program updating method, device, computer equipment and storage medium

Info

Publication number: CN116719567A
Application number: CN202310763498.6A
Authority: CN
Inventors: 刘存
Original assignee: Beijing Jidu Technology Co Ltd
Current assignee: Beijing Jidu Technology Co Ltd
Priority date: 2023-06-26
Filing date: 2023-06-26
Publication date: 2023-09-08

Abstract

The present disclosure provides a chip program updating method, a device, a computer device and a storage medium, the method is applied to a single chip microcomputer chip, the single chip microcomputer chip comprises a primary bootstrap program and a secondary bootstrap program, and the method comprises: after the singlechip chip is started, running the secondary bootstrap program based on second identification information associated with the secondary bootstrap program; jumping from the secondary boot program to the primary boot program upon receiving a routine service indicating entry into the primary boot program; and responding to a first updating instruction, updating the secondary bootstrap program and the associated second identification information based on the primary bootstrap program, and generating an updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program, wherein the secondary bootstrap program is used for updating the application program on the singlechip chip.

Description

Chip program updating method, device, computer equipment and storage medium

Technical Field

The disclosure relates to the technical field of computers, and in particular relates to a method and a device for updating a chip program, computer equipment and a storage medium.

Background

The boot program is an intermediate interface code program that the monolithic chip performs to start and update the application. Usually, the single chip microcomputer chip only comprises a first-level bootstrap program, and the application program is refreshed by the first-level bootstrap program; the primary bootstrap program cannot write the primary bootstrap program (namely, the primary bootstrap program) by itself, so that when the primary bootstrap program is abnormal in writing, an application program cannot be started or written by the primary bootstrap program, and meanwhile, the chip cannot change the writing standard by writing the primary bootstrap program, so that the singlechip system cannot adapt to different writing standards.

Disclosure of Invention

In view of this, the present disclosure provides at least a chip program updating method, apparatus, computer device and storage medium.

In a first aspect, the present disclosure provides a method for updating a chip program, which is applied to a single chip microcomputer chip, where the single chip microcomputer chip includes a primary bootstrap program and a secondary bootstrap program, and the method includes:

after the singlechip chip is started, running the secondary bootstrap program based on second identification information associated with the secondary bootstrap program;

jumping from the secondary boot program to the primary boot program upon receiving a routine service indicating entry into the primary boot program;

And responding to a first updating instruction, updating the secondary bootstrap program and the associated second identification information based on the primary bootstrap program, and generating an updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program, wherein the secondary bootstrap program is used for updating the application program on the singlechip chip.

In a possible implementation manner, the second identification information includes a start address and second instruction content of the secondary bootstrap; after the singlechip chip is started, running the secondary bootstrap based on the second identification information associated with the secondary bootstrap, including:

responding to a chip starting instruction, and judging whether the second identification information is in a valid state or not based on the second instruction content in the second identification information associated with the secondary boot program;

and operating the secondary bootstrap program based on the starting address of the secondary bootstrap program contained in the second identification information under the condition that the second identification information is in a valid state.

In a possible implementation manner, the first identification information includes a start address of the primary bootstrap program and the first indication content; the method further comprises the steps of:

Judging whether the first identification information is in a valid state or not based on the first indication content contained in the first identification information associated with the primary bootstrap program under the condition that the second identification information is determined to be in a invalid state;

and under the condition that the first identification information is in a valid state, running the primary bootstrap program based on the starting address of the primary bootstrap program contained in the first identification information.

In a possible implementation manner, the updating the secondary bootstrap program and the associated second identification information based on the primary bootstrap program, generating an updated secondary bootstrap program and updated second identification information associated with the updated secondary bootstrap program, includes:

based on the primary bootstrap program, the secondary bootstrap program is brushed into an acquired updated secondary bootstrap program;

checking the updated secondary bootstrap program by using the primary bootstrap program to generate a first checking result;

and under the condition that the first verification result indicates that the updated secondary bootstrap is complete, the second identification information is rewritten into the acquired updated second identification information associated with the updated secondary bootstrap, and the updated second identification information is in a valid state.

In a possible implementation manner, the writing the secondary bootstrap program into the acquired updated secondary bootstrap program based on the primary bootstrap program includes:

storing a brushing function module contained in the primary bootstrap program in a target storage area of the singlechip chip into a backup storage area;

checking whether the brushing function module in the backup storage area is complete or not by using the primary bootstrap program;

if yes, the second-level bootstrap program in the target storage area is refreshed to be the acquired updated second-level bootstrap program by utilizing the refreshing function module in the backup storage area.

In a possible implementation manner, after the second identification information is written as the acquired updated second identification information associated with the updated second-level bootstrap, the method further includes:

checking the updated second identification information by using the primary bootstrap program to generate a second checking result;

and running the updated secondary bootstrap program based on the updated second identification information under the condition that the second verification result indicates that the updated second identification information is complete.

In a possible embodiment, the method further comprises:

under the condition that routine service for indicating to enter a primary bootstrap program is not received, judging whether an application program on the singlechip chip is in a valid state or not by utilizing the secondary bootstrap program;

under the condition that the application program is in an invalid state, responding to a second updating instruction, updating the application program by using the secondary bootstrap program, and generating an updated application program;

and running the application program under the condition that the application program is in an effective state.

The following description of the effects of the apparatus, the computer device, etc. refers to the description of the above method, and will not be repeated here.

In a second aspect, the present disclosure provides a chip program update apparatus, applied to a single chip microcomputer chip, where the single chip microcomputer chip includes a primary bootstrap program and a secondary bootstrap program, including:

the operation module is used for operating the secondary bootstrap program based on the second identification information associated with the secondary bootstrap program after the singlechip chip is started;

a jump module for jumping from the secondary boot program to the primary boot program in the case of receiving a routine service for instructing entry into the primary boot program;

The updating module is used for responding to a first updating instruction, updating the secondary bootstrap program and the associated second identification information based on the primary bootstrap program, generating an updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program, wherein the secondary bootstrap program is used for updating the application program on the singlechip chip.

In a third aspect, the present disclosure provides a computer device comprising: a processor, a memory and a bus, the memory storing machine-readable instructions executable by the processor, the processor and the memory in communication via the bus when the computer device is running, the machine-readable instructions when executed by the processor performing the steps of the chip program update method as described in the first aspect or any of the embodiments.

In a fourth aspect, the present disclosure provides a computer readable storage medium having stored thereon a computer program which, when executed by a processor, performs the steps of the chip program update method according to the first aspect or any of the embodiments described above.

The embodiment of the disclosure provides a chip program updating method, which comprises the steps of setting a primary guide program and a secondary guide program in a singlechip chip, and running the secondary guide program based on second identification information associated with the secondary guide program after the singlechip chip is started so as to update an application program on the singlechip chip by using the secondary guide program; and, when the secondary boot program is running, the secondary boot program may be jumped to the primary boot program from the secondary boot program in the case of receiving a routine service for instructing to enter the primary boot program; and the updating of the secondary bootstrap program through the primary bootstrap program is realized, so that the matched refreshing specification of the secondary bootstrap program can be changed through the updating of the secondary bootstrap program, and the singlechip chip can adapt to a plurality of different refreshing specifications, thereby improving the flexibility and diversity of the refreshing of the application program on the chip.

The foregoing objects, features and advantages of the disclosure will be more readily apparent from the following detailed description of the preferred embodiments taken in conjunction with the accompanying drawings.

Drawings

In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the drawings required for the embodiments are briefly described below, which are incorporated in and constitute a part of the specification, these drawings showing embodiments consistent with the present disclosure and together with the description serve to illustrate the technical solutions of the present disclosure. It is to be understood that the following drawings illustrate only certain embodiments of the present disclosure and are therefore not to be considered limiting of its scope, for the person of ordinary skill in the art may admit to other equally relevant drawings without inventive effort.

Fig. 1 is a schematic flow chart of a method for updating a chip program according to an embodiment of the disclosure;

FIG. 2 is a schematic diagram showing a jump procedure between a primary boot program, a secondary boot program, and an application program in a chip program update method according to an embodiment of the present disclosure;

fig. 3 is a schematic diagram illustrating an update flow of a secondary boot program in a method for updating a chip program according to an embodiment of the disclosure;

FIG. 4 is a schematic diagram of a chip program update apparatus according to an embodiment of the disclosure;

fig. 5 shows a schematic structural diagram of a computer device according to an embodiment of the disclosure.

Detailed Description

For the purposes of making the objects, technical solutions and advantages of the embodiments of the present disclosure more apparent, the technical solutions of the embodiments of the present disclosure will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present disclosure, and it is apparent that the described embodiments are only some embodiments of the present disclosure, not all embodiments. The components of the embodiments of the present disclosure, which are generally described and illustrated in the figures herein, may be arranged and designed in a wide variety of different configurations. Thus, the following detailed description of the embodiments of the present disclosure provided in the accompanying drawings is not intended to limit the scope of the disclosure, as claimed, but is merely representative of selected embodiments of the disclosure. All other embodiments, which can be made by those skilled in the art based on the embodiments of this disclosure without making any inventive effort, are intended to be within the scope of this disclosure.

The boot program is an intermediate interface code program that the monolithic chip initiates and writes the application. Usually, the single chip microcomputer chip only comprises a first-level bootstrap program, and the application program is refreshed by the first-level bootstrap program; the primary bootstrap program cannot write the primary bootstrap program (namely, the primary bootstrap program) by itself, so that when the primary bootstrap program is abnormal in writing, an application program cannot be started or written by the primary bootstrap program, and meanwhile, the chip cannot change the writing standard by writing the primary bootstrap program, so that the singlechip system cannot adapt to different writing standards.

In order to alleviate the above problems, embodiments of the present disclosure provide a method, an apparatus, a computer device, and a storage medium for updating a chip program.

It should be noted that: like reference numerals and letters denote like items in the following figures, and thus once an item is defined in one figure, no further definition or explanation thereof is necessary in the following figures.

For the convenience of understanding the embodiments of the present disclosure, a method for updating a chip program disclosed in the embodiments of the present disclosure will be described in detail first. The execution subject of the chip program update method provided in the embodiments of the present disclosure is generally a computer device having a certain computing capability, where the computer device includes, for example: a terminal device or server or other processing device, etc. In some possible implementations, the chip program update method may be implemented by a processor invoking computer readable instructions stored in a memory.

The following describes a chip program updating method provided by the embodiment of the present disclosure, taking an execution body as a single chip microcomputer chip as an example. The single chip microcomputer chip can comprise a primary bootstrap program and a secondary bootstrap program.

Referring to fig. 1, a flow chart of a method for updating a chip program according to an embodiment of the disclosure is shown, where the method includes: S101-S103, specifically:

S101, after the singlechip chip is started, the secondary bootstrap program is operated based on second identification information associated with the secondary bootstrap program.

S102, when receiving routine service for indicating to enter the primary bootstrap program, jumping from the secondary bootstrap program to the primary bootstrap program.

And S103, responding to the first updating instruction, updating the secondary bootstrap program and the associated second identification information based on the primary bootstrap program, generating an updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program, wherein the secondary bootstrap program is used for updating the application program on the singlechip chip.

According to the method, the primary guide program and the secondary guide program are arranged in the singlechip chip, and the secondary guide program can be operated based on the second identification information related to the secondary guide program after the singlechip chip is started, so that the application program on the singlechip chip is updated by the secondary guide program; and, in the course of running the secondary boot program, may jump from the secondary boot program to the primary boot program upon receiving a routine service for instructing entry into the primary boot program; and the updating of the secondary bootstrap program through the primary bootstrap program is realized, so that the matched refreshing specification of the secondary bootstrap program can be changed through the updating of the secondary bootstrap program, and the singlechip chip can adapt to a plurality of different refreshing specifications, thereby improving the flexibility and diversity of the refreshing of the application program on the chip.

S101 to S103 are described in relatively detail below.

For S101:

the singlechip chip can be applied to vehicle-mounted central control equipment, for example, the singlechip chip can be a TC3XX chip and the like. Here, only the single chip microcomputer chip is illustrated, and the model of the single chip microcomputer chip is not particularly limited.

The singlechip chip can be provided with a primary bootstrap bootloader and a secondary bootstrap bootloader, namely the singlechip chip can comprise a primary bootstrap and a secondary bootstrap; the primary bootstrap program can be used for updating and refreshing the secondary bootstrap program, and the secondary bootstrap program can be used for updating and refreshing the application program in the singlechip chip. The first-level bootstrap program is associated with first identification information, the second-level bootstrap program is associated with second identification information, and when the implementation is carried out, the singlechip chip can firstly operate the second-level bootstrap program based on the second identification information, and when the second-level bootstrap program cannot operate or needs to write the second-level bootstrap program, the first-level bootstrap program is operated based on the first identification information.

In a possible implementation manner, the second identification information includes a start address and second instruction content of the secondary bootstrap program; after the singlechip chip is started, based on the second identification information associated with the secondary bootstrap program, the operation of the secondary bootstrap program can comprise:

And step A1, responding to a chip starting instruction, and judging whether the second identification information is in a valid state or not based on second indication content in the second identification information associated with the secondary boot program.

And step A2, running the secondary boot program based on the starting address of the secondary boot program contained in the second identification information when the second identification information is in a valid state.

When the method is implemented, after the singlechip chip is started, whether the secondary bootstrap program can be operated or not can be judged based on the second identification information associated with the secondary bootstrap program; in the implementation, since the second identification information includes the start address of the secondary boot program and the second instruction content, where the second instruction content may be used to determine whether the second identification information is in a valid state, the start address of the secondary boot program may be an address where the secondary boot program is stored, so that the secondary boot program may be read from the start address of the secondary boot program, and the secondary boot program may be run.

Further, in response to the chip start instruction, the second identification information associated with the secondary boot program may be read, and whether the second identification information is in a valid state may be determined based on the second instruction content in the second identification information associated with the secondary boot program, and in the case where the second identification information is in a valid state, the secondary boot program may be run based on the start address of the secondary boot program included in the second identification information.

For example, the second indication content may include an 8-bit binary number, and the second identification information may be determined to be in an invalid state when the second indication content is 00000000; when the second indication content is 11111111, it is determined that the second identification information is in a valid state. The correspondence between the second indication content and the valid state may be set according to actual requirements, which is only illustrated here as an example.

Here, by determining the validity of the second identification information associated with the secondary boot program in response to the chip start instruction, it is ensured that the secondary boot program is operated under the condition that the second identification information is in a valid state, and the working efficiency of the single chip microcomputer chip is improved.

In one possible implementation, the first identification information may include a start address of the primary bootstrap and first indication content; the method may further comprise:

and B1, judging whether the first identification information is in a valid state or not based on first indication content contained in the first identification information associated with the first-stage bootstrap program when the second identification information is determined to be in the invalid state.

And step B2, running the primary bootstrap program based on the starting address of the primary bootstrap program contained in the first identification information under the condition that the first identification information is in a valid state.

The first identification information may include a start address of the primary boot program and first indication content, wherein the first indication content may be used to determine whether the first identification information is in a valid state, and the start address of the primary boot program may be an address storing the primary boot program, so that the primary boot program may be read from the start address of the primary boot program to run the primary boot program.

When the second identification information is determined to be in an invalid state, the first-stage bootstrap program can be utilized to carry out brushing on the second-stage bootstrap program, for example, the first identification information associated with the first-stage bootstrap program can be read, and whether the first identification information is in an valid state or not can be judged based on the first indication content contained in the first identification information associated with the first-stage bootstrap program; that is, if the state indicated by the first indication content is the valid state, it may be determined that the first identification information is in the valid state; in the case where the state indicated by the first indication content is an invalid state, it may be determined that the first identification information is in the invalid state. When the first identification information is in a valid state, the first-stage bootstrap program can be operated based on the starting address of the first-stage bootstrap program contained in the first identification information; under the condition that the first identification information is in an invalid state, the first-stage bootstrap program may have problems, such as a program file of the first-stage bootstrap program is lost, or a storage address storing the first-stage bootstrap program is damaged, etc., so that the program cannot be updated, and further feedback information for indicating that the chip of the singlechip is abnormal can be generated, wherein the feedback information can comprise, for example, chip damage, file loss, file failure, etc.

Here, in the case where it is determined that the second identification information is in the invalid state, the primary boot program may be run to implement updating of the secondary boot program; meanwhile, under the condition that the first identification information is judged to be in a valid state based on the first indication content contained in the first identification information associated with the first-stage bootstrap program, the first-stage bootstrap program is operated based on the starting address of the first-stage bootstrap program contained in the first identification information, and the working efficiency of the single chip microcomputer chip is improved.

For S102:

in implementation, during the running process of the secondary boot program, a preset time period may be waited for, and whether an operation instruction is received in the preset time period is determined, for example, the operation instruction may include a jump operation instruction to jump to the primary boot program, or a brush operation instruction to update the application program, etc. If routine service indicating entry into the primary boot program is received during the operation of the secondary boot program, a jump may be made from the secondary boot program to the primary boot program. The routine service for indicating the entering of the primary bootstrap program may be set according to the actual situation, for example, may be 31 routine service.

In particular embodiments, the method may further comprise:

and step C1, judging whether an application program on the singlechip chip is in a valid state or not by utilizing the secondary bootstrap program under the condition that routine service for indicating to enter the primary bootstrap program is not received.

And step C2, under the condition that the application program is in an invalid state, the application program is updated by utilizing the secondary bootstrap program in response to the second update instruction, and the updated application program is generated.

And step C3, running the application program under the condition that the application program is in an effective state.

In practice, an application may be run without receiving a routine service indicating entry into a primary boot; specifically, the indication data for indicating whether the application program is effective can be stored in the storage area of the single chip microcomputer chip, and then the two-stage bootstrap program can be utilized to judge whether the application program on the single chip microcomputer chip is in an effective state according to the indication data for indicating whether the application program is effective stored in the storage area; for example, the indicating data may include a one-bit binary number, and when the indicating data is 0, it may be determined that the application is in an invalid state; when the instruction data is 1, it may be determined that the application is in a valid state.

Further, the application may be run with the application in an active state. And under the condition that the application program is in an invalid state, the secondary bootstrap program can be continuously operated, a second update instruction for indicating the application program to be updated is waited to be received, and the application program can be updated by the secondary bootstrap program to generate the updated application program in response to the second update instruction. The specific process of updating the application program will be described later.

In the specific implementation, during the running process of the application program, an operation instruction can be received, for example, when the application program needs to be upgraded, a third updating instruction for updating the application program can be received, namely, the application program can be jumped to the secondary bootstrap program; the specific process of running the secondary boot program can be seen in steps A1 to A2. After the secondary boot program is run, a subsequent operation instruction may be sent to the secondary boot program within a preset period of time for which the secondary boot program waits to receive the operation instruction, for example, an erase instruction may be sent, and the erase instruction may be used to erase the application program and indicate data indicating whether the application program is valid; a download instruction can also be sent, and the download instruction can be used for downloading the updated application program; etc.

When the secondary bootstrap program is operated, the secondary bootstrap program is utilized to judge whether the application program on the singlechip chip is in an effective state or not under the condition that routine service for indicating to enter the primary bootstrap program is not received, and the application program is operated under the condition that the application program is in the effective state, so that the starting of the application program is realized, and the working efficiency of the singlechip chip is improved. Under the condition that the application program is in an invalid state, the second-level bootstrap program is utilized to update the application program in response to the second update instruction, and the updated application program is generated, so that the application program in the invalid state can be repaired, and the application program can work normally.

For S103:

when the method is implemented, in the running process of the primary bootstrap program, the primary bootstrap program and the associated second identification information can be updated based on the primary bootstrap program in response to the first update instruction, and the updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program are generated; specifically, the primary bootstrap program can be utilized to erase the secondary bootstrap program and the associated second identification information, then the updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program can be obtained, and the updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program are written into the singlechip chip to generate the updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program. The secondary bootstrap program can be used for updating the application program on the singlechip chip.

In a possible implementation manner, updating the secondary bootstrap program and the associated second identification information based on the primary bootstrap program, and generating the updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program may include:

and step D1, based on the primary bootstrap program, the secondary bootstrap program is written as the acquired updated secondary bootstrap program.

And D2, checking the updated secondary bootstrap program by using the primary bootstrap program to generate a first checking result.

And D3, under the condition that the first checking result indicates that the updated secondary bootstrap program is complete, the second identification information is rewritten into the acquired updated second identification information associated with the updated secondary bootstrap program, and the updated second identification information is in a valid state.

Considering that if the updated second identification information is written first, after the updated second identification information is written, if an abnormal condition such as power failure occurs, the writing failure of the secondary boot program is caused, and in this case, the state of the updated secondary boot program is not matched with the state indicated by the associated updated second identification information, so that the program file of the updated secondary boot program cannot be found when the updated secondary boot program is operated, and the operation failure of the single chip is caused. Based on this, when the secondary boot program and the associated second identification information are updated, the brushing flow may write the updated second identification information associated with the updated secondary boot program first, and then write the updated secondary boot program.

In particular implementations, the present disclosure may flush a secondary boot program as an acquired updated secondary boot program based on a primary boot program; specifically, the primary bootstrap program can be utilized to erase the secondary bootstrap program and the associated second identification information, and then an update file can be obtained, wherein the file content of the update file comprises the updated secondary bootstrap program and the updated second identification information associated with the updated secondary bootstrap program; and the updated second identification information associated with the updated second boot strap can be written into a backup storage area, such as a random access storage area RAM.

When the method is implemented, after the second-level bootstrap program is written as the acquired updated second-level bootstrap program, the updated second-level bootstrap program can be checked by utilizing the first-level bootstrap program before the updated second identification information is written, and a first check result is generated; for example, the updated secondary bootstrap program may be hashed to obtain first data to be checked, and then the first data to be checked may be compared with the obtained first reference data, and a first check result for indicating that the updated secondary bootstrap program is complete is generated when the first data to be checked is consistent with the first reference data; and under the condition that the first data to be checked is inconsistent with the first reference data, generating a first check result for indicating that the updated secondary bootstrap program is incomplete. The first reference data is generated based on the updated secondary bootstrap program, for example, the first reference data can be obtained by carrying out hash processing on the acquired updated secondary bootstrap program.

The second identification information can be written into the acquired updated second identification information associated with the updated second-level bootstrap program when the first verification result indicates that the updated second-level bootstrap program is complete, and the updated second identification information is in a valid state; and generating feedback information representing failure of updating the secondary bootstrap program under the condition that the first check result indicates that the updated secondary bootstrap program is incomplete, and waiting for a subsequent operation instruction.

In order to alleviate the problem that the state of the updated secondary bootstrap program is not matched with the state indicated by the associated updated second identification information, the secondary bootstrap program is refreshed to be the acquired updated secondary bootstrap program by using the primary bootstrap program, the updated secondary bootstrap program is checked, and the generated updated second identification information corresponding to the updated secondary bootstrap program is written under the condition that the updated secondary bootstrap program is complete is determined, so that the updated secondary bootstrap program can be ensured to run normally, and the working efficiency of the singlechip chip is improved.

In a possible implementation manner, step D1, based on the primary bootstrap program, of brushing the secondary bootstrap program as the acquired updated secondary bootstrap program may include:

and step D11, storing the brushing function module contained in the primary bootstrap program in the target storage area of the singlechip chip into the backup storage area.

Step D12, checking whether the brushing function module in the backup storage area is complete or not by using the primary bootstrap program;

and D13, if yes, using a brushing function module in the backup storage area to brush the secondary bootstrap program in the target storage area into the acquired updated secondary bootstrap program.

The primary boot program and the secondary boot program can be stored in a target storage area of the singlechip chip, for example, the target storage area can be a storage area from an address 0x00003000 to an address 0x00007000 in a flash storage area; and when the secondary bootstrap program is refreshed as the acquired updated secondary bootstrap program, a refreshing function module contained in the primary bootstrap program can be used; considering that when the secondary bootstrap program and the associated second identification information are erased, the case that the brushing function module contained in the primary bootstrap program is erased exists, so that the primary bootstrap program cannot update the secondary bootstrap program.

In order to alleviate the above-mentioned problem, the present disclosure may store the brush writing function module included in the primary boot program located in the target storage area of the singlechip chip to the backup storage area, for example, may be stored in the RAM storage area. The first-level bootstrap program can be utilized to check whether the brushing function module in the backup storage area is complete; for example, the brushing function module contained in the primary bootstrap program in the target storage area may be compared with the brushing function module in the backup storage area, and if the brushing function module contained in the primary bootstrap program in the target storage area is consistent with the brushing function module in the backup storage area, the brushing function module in the backup storage area is determined to be complete. Furthermore, the secondary boot program in the target storage area can be refreshed as the acquired updated secondary boot program by utilizing the refreshing function module in the backup storage area.

If the brushing function module contained in the primary bootstrap program in the target storage area is inconsistent with the brushing function module in the backup storage area, determining that the brushing function module in the backup storage area is incomplete, and generating feedback information for indicating the failure of the backup of the brushing function module.

Because the primary bootstrap program and the secondary bootstrap program are stored in the same storage area of the singlechip chip, and when the primary bootstrap program is utilized to update the secondary bootstrap program, the secondary bootstrap program needs to be erased; so the brush writing function module contained in the primary guide program in the target storage area of the singlechip chip is stored into the backup storage area; and under the condition that the complete brushing function module in the backup storage area is determined, brushing the secondary bootstrap program into the acquired updated secondary bootstrap program so as to ensure that the primary bootstrap program can normally update the secondary bootstrap program and generate the updated secondary bootstrap program.

In a possible implementation manner, in step D3, after the second identification information is rewritten into the acquired updated second identification information associated with the updated second level bootstrap, the method may further include:

step D31, checking the updated second identification information by using the first-level bootstrap program to generate a second checking result; .

And D32, running the updated secondary bootstrap program based on the updated second identification information when the second verification result indicates that the updated second identification information is complete.

When the method is implemented, under the condition that the updated secondary bootstrap program is determined to be complete, updated second identification information associated with the updated secondary bootstrap program stored in the backup storage area can be written into the storage area to obtain updated second identification information corresponding to the updated secondary bootstrap program; the first-stage bootstrap program can be utilized to check the updated second identification information to generate a second check result, for example, the first-stage bootstrap program can be utilized to hash the updated second identification information in the storage area to obtain second check data, the second check data is compared with the acquired second reference data, and if the updated second identification information in the storage area is consistent with the second reference data, a second check result for indicating that the updated second identification information in the storage area is complete can be generated; at this time, the updated second-level bootstrap may be run based on the updated second identification information, and the specific process may refer to S101, which is not described herein.

If the updated second identification information in the storage area is inconsistent with the second reference data, a second check result for indicating that the updated second identification information in the storage area is incomplete can be generated; at this time, feedback information indicating that the secondary boot update failed may be generated. The second reference data may be generated based on the acquired updated second identification information associated with the updated second-level bootstrap, for example, hash processing may be performed on the acquired updated second identification information associated with the updated second-level bootstrap to obtain the second reference data.

Here, under the condition that the updated second-level bootstrap program is determined to be complete, the first-level bootstrap program is utilized to verify the updated second identification information, and under the condition that the updated second identification information is determined to be complete, the updated second-level bootstrap program is operated based on the updated second identification information, so that the integrity of the second identification information can be ensured, and the accuracy of operating the second-level bootstrap program based on the second identification information is improved.

Referring to the schematic diagram of the jump flow between the primary boot program, the secondary boot program, and the application program shown in fig. 2, the flow shown in fig. 2 is described in more detail below. The singlechip chip can comprise a primary bootstrap program, a secondary bootstrap program and an application program; the first-level boot program is associated with first identification information, the second-level boot program is associated with second identification information, and the application program is associated with indicating data indicating whether the application program is valid.

In response to a chip start instruction, that is, a chip start instruction, whether the second identification information is valid or not may be checked, for example, whether the second identification information is in a valid state may be determined based on the second instruction content in the second identification information associated with the secondary boot program; and when the second identification information is in a valid state, running the secondary boot program based on the starting address of the secondary boot program contained in the second identification information. In the course of running the secondary boot program, a routine service such as 31 routine service for instructing to enter the primary boot program may be received, and in the case of receiving a routine service for instructing to enter the primary boot program, a jump is made from the secondary boot program to the primary boot program, in the course of running the primary boot program, in response to the first update instruction, the secondary boot program and associated second identification information are updated based on the primary boot program, and updated secondary boot program and updated second identification information associated with the updated secondary boot program are generated.

Checking whether the application program is valid or not under the condition that routine service for indicating to enter the primary bootstrap program is not received, for example, whether the application program on the singlechip chip is in a valid state or not can be judged by utilizing the secondary bootstrap program; when the application program is in an invalid state, a second update instruction for indicating the update of the application program can be waited, and the application program is updated by the secondary bootstrap program in response to the second update instruction, so as to generate an updated application program; the application is run with the application in an active state.

In the case of determining that the second identification information is in the invalid state, it may be checked whether the first identification information is valid, for example, whether the first identification information is in the valid state based on the first instruction content included in the first identification information associated with the primary boot program. When the first identification information is in a valid state, the first-stage bootstrap program can be operated based on the starting address of the first-stage bootstrap program contained in the first identification information, and in the process of operating the first-stage bootstrap program, the second-stage bootstrap program and the associated second identification information are updated based on the first-stage bootstrap program in response to a first update instruction, so that an updated second-stage bootstrap program and updated second identification information associated with the updated second-stage bootstrap program are generated. In the case where the first identification information is in an invalid state, there may be a problem in characterizing the primary boot program, such as that the program file of the primary boot program is lost, or that the storage address where the primary boot program is stored is damaged, etc., so that the program cannot be updated.

Referring to the schematic diagram of the update flow of the secondary boot program shown in fig. 3, the update flow shown in fig. 3 is described in more detail below.

In the process of running the primary bootstrap program, responding to a first updating instruction, and running a programming session for updating the secondary bootstrap program; and then, the method can perform safe unlocking, namely, checking whether the source of the first updating instruction is reliable, performing safe unlocking under the condition of determining that the source of the first updating instruction is reliable, and generating feedback information for indicating that the source of the first updating instruction is unreliable under the condition of determining that the source of the first updating instruction is unreliable.

Further, the refreshing function module contained in the primary bootstrap program can be backed up first, and the refreshing function module in the backup storage area is subjected to integrity check; specifically, the refreshing function module contained in the primary bootstrap program in the target storage area of the chip can be stored in the backup storage area, and whether the refreshing function module in the backup storage area is complete or not is checked by utilizing the primary bootstrap program; for example, the brushing function module contained in the primary bootstrap program in the target storage area and the brushing function module in the backup storage area can be compared, if the brushing function module contained in the primary bootstrap program in the target storage area and the brushing function module in the backup storage area are inconsistent, the brushing function module in the backup storage area is determined to be incomplete, and feedback information for indicating that the brushing function module fails to backup can be generated; and if the brushing function module contained in the primary bootstrap program in the target storage area is consistent with the brushing function module in the backup storage area, determining that the brushing function module in the backup storage area is complete.

Under the condition that the complete brushing function module in the backup storage area is determined, the brushing function module in the backup storage area can be utilized to erase the second identification information related to the secondary bootstrap program and the secondary bootstrap program in the target storage area; and the obtained updated secondary boot program can be written into a target storage area such as a flash storage area, and updated second identification information associated with the updated secondary boot program can be written into a backup storage area such as a RAM storage area.

Furthermore, the primary bootstrap program can be utilized to verify the updated secondary bootstrap program; generating feedback information representing failure of updating the secondary bootstrap program under the condition that the updated secondary bootstrap program is incomplete; under the condition that the updated secondary bootstrap program is determined to be complete, the updated second identification information associated with the updated secondary bootstrap program stored in the backup storage area can be written into the storage area to obtain updated second identification information corresponding to the updated secondary bootstrap program; the first-level bootstrap program can be utilized to verify the updated second identification information; generating feedback information representing failure of updating the secondary bootstrap program under the condition that the updated second identification information is incomplete; and under the condition that the updated second identification information is determined to be complete, resetting the chip, namely, running the updated second-level bootstrap program based on the updated second identification information.

The update flow of the application program is described in more detail below.

In the process of running the secondary boot program, responding to the second updating instruction, running a programming session for updating the application program, and further performing safe unlocking. Further, the refreshing function module contained in the secondary bootstrap program can be backed up first, and the refreshing function module in the backup storage area is subjected to integrity check; under the condition that the complete refreshing function module in the backup storage area is determined, the refreshing function module in the backup storage area can be utilized to erase the indication data related to the application program and indicating whether the application program is effective or not and the application program in the target storage area; and the obtained updated application program can be written into the target storage area, and the updated indication data associated with the updated application program can be written into the backup storage area.

Furthermore, the updated application program can be checked by using the secondary bootstrap program; generating feedback information representing failure of updating the application program under the condition that the updated application program is incomplete; under the condition that the updated application program is determined to be complete, the updated indicating data stored in the backup storage area can be written into the storage area to obtain updated indicating data; the updated indication data can be checked by using a secondary bootstrap program; generating feedback information representing the update failure of the application program under the condition that the updated indication data is incomplete; and resetting the chip under the condition that the updated indication data is complete.

It will be appreciated by those skilled in the art that in the above-described method of the specific embodiments, the written order of steps is not meant to imply a strict order of execution but rather should be construed according to the function and possibly inherent logic of the steps.

Based on the same concept, the embodiment of the disclosure further provides a chip program updating device, which is applied to a single chip microcomputer chip, wherein the single chip microcomputer chip comprises a primary bootstrap program and a secondary bootstrap program, and referring to fig. 4, an architecture diagram of the chip program updating device provided by the embodiment of the disclosure is shown, and the architecture diagram comprises an operation module 401, a skip module 402 and an updating module 403, and specifically:

an operation module 401, configured to operate the secondary boot program based on second identification information associated with the secondary boot program after the monolithic chip is started;

a skip module 402, configured to skip from the secondary bootstrap to the primary bootstrap when receiving a routine service for instructing entry to the primary bootstrap;

the updating module 403 is configured to respond to a first updating instruction, update the secondary bootstrap and the associated second identification information based on the primary bootstrap, and generate an updated secondary bootstrap and updated second identification information associated with the updated secondary bootstrap, where the secondary bootstrap is configured to update an application program on the singlechip chip.

In a possible implementation manner, the second identification information includes a start address and second instruction content of the secondary bootstrap; the operation module 401 is configured to, after the single chip microcomputer chip is started, operate the secondary boot program based on the second identification information associated with the secondary boot program, where the second identification information is used for:

In a possible implementation manner, the first identification information includes a start address of the primary bootstrap program and the first indication content; the apparatus further includes a first judging module 404, where the first judging module 404 is configured to:

In a possible implementation manner, the updating module 403 is configured to, when updating the secondary bootstrap program and the associated second identification information based on the primary bootstrap program, generate an updated secondary bootstrap program and updated second identification information associated with the updated secondary bootstrap program:

In a possible implementation manner, the updating module 403 is configured to, when writing the secondary bootstrap program as the acquired updated secondary bootstrap program based on the primary bootstrap program:

In a possible implementation manner, the apparatus further includes a verification module 405, where after the second identification information is written as the acquired updated second identification information associated with the updated second level bootstrap, the verification module 405 is configured to:

In a possible implementation manner, the apparatus further includes a second judging module 406, where the second judging module 406 is configured to:

In some embodiments, the functions or templates included in the apparatus provided by the embodiments of the present disclosure may be used to perform the methods described in the foregoing method embodiments, and specific implementations thereof may refer to descriptions of the foregoing method embodiments, which are not repeated herein for brevity.

Based on the same technical concept, the embodiment of the disclosure also provides computer equipment. Referring to fig. 5, a schematic structural diagram of a computer device according to an embodiment of the disclosure includes a processor 501, a memory 502, and a bus 503. The memory 502 is configured to store execution instructions, including a memory 5021 and an external memory 5022; the memory 5021 is also referred to as an internal memory, and is used for temporarily storing operation data in the processor 501 and data exchanged with an external memory 5022 such as a hard disk, the processor 501 exchanges data with the external memory 5022 through the memory 5021, and when the computer device is running, the processor 501 and the memory 502 communicate through the bus 503, so that the processor 501 executes the following instructions:

The specific processing flow of the processor 501 may refer to the description of the above method embodiments, and will not be repeated here.

Furthermore, the embodiments of the present disclosure also provide a computer readable storage medium, on which a computer program is stored, which when executed by a processor performs the steps of the chip program update method described in the above method embodiments. Wherein the storage medium may be a volatile or nonvolatile computer readable storage medium.

The embodiments of the present disclosure further provide a computer program product, where the computer program product carries program code, and instructions included in the program code may be used to perform the steps of the method for updating a chip program described in the foregoing method embodiments, and specifically reference may be made to the foregoing method embodiments, which are not described herein.

Wherein the above-mentioned computer program product may be realized in particular by means of hardware, software or a combination thereof. In an alternative embodiment, the computer program product is embodied as a computer storage medium, and in another alternative embodiment, the computer program product is embodied as a software product, such as a software development kit (Software Development Kit, SDK), or the like.

It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the above-described system and apparatus may refer to corresponding procedures in the foregoing method embodiments, which are not described herein again. In the several embodiments provided in the present disclosure, it should be understood that the disclosed systems, devices, and methods may be implemented in other manners. The above-described apparatus embodiments are merely illustrative, for example, the division of the units is merely a logical function division, and there may be other manners of division in actual implementation, and for example, multiple units or components may be combined or integrated into another system, or some features may be omitted, or not performed. Alternatively, the coupling or direct coupling or communication connection shown or discussed with each other may be through some communication interface, device or unit indirect coupling or communication connection, which may be in electrical, mechanical or other form.

The units described as separate units may or may not be physically separate, and units shown as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present disclosure may be integrated in one processing unit, or each unit may exist alone physically, or two or more units may be integrated in one unit.

The functions, if implemented in the form of software functional units and sold or used as a stand-alone product, may be stored in a non-volatile computer readable storage medium executable by a processor. Based on such understanding, the technical solution of the present disclosure may be embodied in essence or a part contributing to the prior art or a part of the technical solution, or in the form of a software product stored in a storage medium, including several instructions to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in the embodiments of the present disclosure. And the aforementioned storage medium includes: a U-disk, a removable hard disk, a Read-Only Memory (ROM), a random access Memory (Random Access Memory, RAM), a magnetic disk, or an optical disk, or other various media capable of storing program codes.

The foregoing is merely a specific embodiment of the disclosure, but the protection scope of the disclosure is not limited thereto, and any person skilled in the art can easily think about changes or substitutions within the technical scope of the disclosure, and it should be covered in the protection scope of the disclosure. Therefore, the protection scope of the present disclosure shall be subject to the protection scope of the claims.

Claims

1. The chip program updating method is characterized by being applied to a single chip microcomputer chip, wherein the single chip microcomputer chip comprises a primary bootstrap program and a secondary bootstrap program, and the method comprises the following steps:

2. The method of claim 1, wherein the second identification information includes a start address and second instruction content of the secondary boot program; after the singlechip chip is started, running the secondary bootstrap based on the second identification information associated with the secondary bootstrap, including:

3. The method of claim 2, wherein the first identification information includes a start address of the primary bootstrap and the first indication content; the method further comprises the steps of:

4. The method of claim 1, wherein updating the secondary boot program and the associated second identification information based on the primary boot program generates an updated secondary boot program and updated second identification information associated with the updated secondary boot program, comprising:

5. The method of claim 4, wherein the flushing the secondary boot program as the acquired updated secondary boot program based on the primary boot program comprises:

6. The method of claim 4, wherein after the flushing the second identification information as the acquired updated second identification information associated with the updated second level bootstrap, the method further comprises:

7. The method according to any one of claims 1-6, further comprising:

8. The utility model provides a chip program updating device which characterized in that is applied to the singlechip chip, the singlechip chip includes first order bootstrap program and second order bootstrap program, includes:

9. A computer device, comprising: a processor, a memory and a bus, said memory storing machine readable instructions executable by said processor, said processor and said memory communicating via the bus when the computer device is running, said machine readable instructions when executed by said processor performing the steps of the chip program update method according to any of claims 1 to 7.

10. A computer-readable storage medium, characterized in that the computer-readable storage medium has stored thereon a computer program which, when executed by a processor, performs the steps of the chip program updating method according to any of claims 1 to 7.