WO2023241458A1 - Procédé et appareil de mise à niveau de logiciel pour dispositif de commande embarqué, et dispositif et support de stockage - Google Patents

Procédé et appareil de mise à niveau de logiciel pour dispositif de commande embarqué, et dispositif et support de stockage Download PDF

Info

Publication number
WO2023241458A1
WO2023241458A1 PCT/CN2023/099216 CN2023099216W WO2023241458A1 WO 2023241458 A1 WO2023241458 A1 WO 2023241458A1 CN 2023099216 W CN2023099216 W CN 2023099216W WO 2023241458 A1 WO2023241458 A1 WO 2023241458A1
Authority
WO
WIPO (PCT)
Prior art keywords
storage partition
data
target
upgrade
vehicle
Prior art date
Application number
PCT/CN2023/099216
Other languages
English (en)
Chinese (zh)
Inventor
刘超
李长龙
柳旭
***
肖心刚
祁明阳
孔祥明
Original Assignee
中国第一汽车股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中国第一汽车股份有限公司 filed Critical 中国第一汽车股份有限公司
Publication of WO2023241458A1 publication Critical patent/WO2023241458A1/fr

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/70—Software maintenance or management
    • G06F8/71—Version control; Configuration management

Definitions

  • Embodiments of the present application relate to the field of vehicle technology, for example, to a software upgrade method, device, equipment, storage medium and system for a vehicle controller.
  • a processing module configured to write the data of the target data packet into a target storage partition.
  • the target storage partition refers to a storage partition that is currently in an inactive state.
  • the target storage partition is the first storage partition or The second storage partition; determine whether the data of the upgrade software package in the target storage partition has been written; in response to determining that the data of the upgrade software package in the target storage partition has been written, verify the The data integrity of the upgrade software package in the target storage partition; in response to the data integrity verification of the upgrade software package in the target storage partition passing, changing the status of the target storage partition to an activated state;
  • a control module configured to control the operation of the vehicle controller based on the data of the upgrade software package in the target storage partition.
  • embodiments of the present application provide a computer-readable storage medium on which a computer program is stored.
  • the program is executed by a processor, the software of the vehicle-mounted controller as described in the first aspect is implemented. Upgrade method.
  • embodiments of the present application provide a software upgrade system for a vehicle-mounted controller, including: a cloud, a vehicle-mounted communication device, and at least one vehicle-mounted controller according to claim 8; the cloud and the vehicle-mounted communication device pass Wireless network connection, the vehicle-mounted communication device is connected to at least one vehicle-mounted controller through an in-vehicle communication link.
  • Figure 1 is a schematic structural diagram of a software upgrade system for a vehicle controller provided in Embodiment 1 of the present application;
  • Figure 2 is a schematic flow chart of a software upgrade method for a vehicle controller provided in Embodiment 2 of the present application;
  • Figure 3 is a schematic flow chart of a software upgrade method for a vehicle-mounted controller provided in Embodiment 3 of the present application;
  • FIG. 5 is a schematic structural diagram of a vehicle-mounted controller provided in Embodiment 5 of the present application.
  • the current relevant OTA upgrade scheme is: when the vehicle communication device receives the OTA upgrade task, it will obtain task-related information from the cloud, download the upgrade software package file from the cloud to its memory, and perform integrity verification on the upgrade software package. After verification, the upgrade software package is sent to the target vehicle controller to be upgraded through the in-vehicle communication link (such as Controller Area Network (CAN) or Ethernet) for software flashing.
  • the upgrade software package of the previous version of each controller will be stored in the memory of the vehicle communication device.
  • the vehicle communication device will continue to flash the previous version of the software to the target vehicle controller, thereby returning the software to the version state before the upgrade to ensure that relevant functions or vehicles are available.
  • the embodiment of this application provides a software upgrade solution for a vehicle controller.
  • AB partition i.e. dual partition
  • the data of the package is downloaded and written to the inactive partition of the controller to be upgraded (that is, the target vehicle controller).
  • the data of the upgrade software package is downloaded and written in the form of a data stream, so that the vehicle communication device does not need to reserve a large storage space to save the entire upgrade software of each vehicle controller.
  • the AB partition technology is used to alternately use the inactive partitions in the AB partition to flash the upgrade software package data, so that no additional version rollback operation is required when the flash fails, thereby solving the problem of related technologies.
  • the problem of related functions or vehicle unavailability caused by software version rollback reduces the risk of functional failure of the vehicle controller to be upgraded, which is beneficial to improving the user experience.
  • Figure 1 is a schematic structural diagram of a software upgrade system for a vehicle-mounted controller provided in Embodiment 1 of the present application.
  • the software upgrade system 100 for a vehicle-mounted controller includes:
  • the vehicle-mounted communication device 120 refers to a device on the vehicle that can communicate with the cloud 110.
  • it can be a telematics box (Telematics BOX, T-BOX) or a gateway (Gateway).
  • the communication network between the vehicle communication device 120 and the cloud 110 may be a 4G network or a 5G network, etc.
  • the vehicle controller 130 refers to the control unit of related electronic equipment in the vehicle, which can be various electronic control units (Electronic Control Unit, ECU), remote information control unit (Transmission Control Unit, TCU) or body control unit (Body Control Management). , BCM) etc.
  • ECU Electronic Control Unit
  • TCU Transmission Control Unit
  • BCM Body Control Management
  • the in-vehicle communication link used between the vehicle controller 130 and the vehicle communication device 120 may be a control area network bus or Ethernet, or the like.
  • vehicle-mounted communication device 120 and at least one vehicle-mounted controller 130 in FIG. 1 are both located on the vehicle side.
  • each vehicle-mounted controller 130 is provided with a first storage partition and a second storage partition, wherein one storage partition is an activated storage partition and the other storage partition is an inactive storage partition.
  • the active storage partition refers to the storage partition that is currently in the active state, that is, the storage partition that is currently in the working state.
  • the inactive storage partition refers to the storage partition that is currently in the inactive state, that is, the storage partition that is currently in the non-working state. .
  • the second storage partition is an inactive storage partition; if the first storage partition is an inactive storage partition, the second storage partition is an activated storage partition.
  • the cloud 110 is responsible for pushing new OTA upgrade tasks.
  • the vehicle-mounted communication device 120 sends a software upgrade request to the cloud 110.
  • the cloud 110 starts to send the data of the upgrade software package in the form of a data stream based on receiving the software upgrade request, that is, the data of the upgrade software is sent in batches in the form of multiple data packets to the vehicle-mounted communication device 120 located at the vehicle end.
  • the software upgrade process of one of the vehicle-mounted controllers 130 As an example, assume that the currently transmitted data packet is called a target data packet. For example, in this embodiment, after the vehicle-mounted communication device 120 receives the target data packet, it will The data packet is forwarded to the vehicle-mounted controller 130 that needs software upgrade. In order to facilitate the distinction, the vehicle-mounted controller that needs software upgrade is called the target vehicle-mounted controller. After receiving the target data packet, the target vehicle-mounted controller will follow the preset software The upgrade process processes the target data packet.
  • the target vehicle controller determines the storage partition that is currently in an inactive state. To facilitate differentiation, the storage partition that is currently in an inactive state is called the target storage partition. , and writes the data in the target packet to the target storage partition. After writing the data of the target data package, determine whether the data of the upgrade software package in the target storage partition has been written, that is, determine whether the target data package is the last data package of the upgrade software package. If so, Then verify the data integrity of the upgrade software package in the target storage partition, that is, determine whether the data of the upgrade software package in the target storage partition is the data sent by the cloud 110, that is, determine whether the data of the upgrade software package has been tampered with during the transmission process.
  • the verification passes, it means that the software upgrade is successful, and the status of the first storage partition and the second storage partition is switched, so that the original inactive storage partition is converted into an activated storage partition, and the original activated storage partition is converted into an inactive storage partition. .
  • the verification fails, it means that the software upgrade has failed, and the status of the first storage partition and the second storage partition is kept unchanged, thereby ensuring that the activated storage partition is always the partition that stores the latest version of the software data that has been successfully flashed. Since this embodiment will switch the storage partition every time the software upgrade is successful, the target vehicle controller will use the data in the storage partition to run the software. When the software upgrade fails, the storage partition will not be switched, so that the target vehicle controller will not switch the storage partition. The on-board controller still uses the data in the original storage partition to run the software, which avoids the impact of failed software upgrades on users and improves the user experience.
  • the target storage partition is the first storage partition
  • the first storage partition when the software upgrade is successful, the first storage partition is converted into an activated storage partition, and the second storage partition is converted into an inactive storage partition.
  • the software upgrade fails, the first storage partition remains as an inactive storage partition and the second storage partition remains as an active storage partition.
  • state switching between the first storage partition and the second storage partition is achieved by changing the status identifiers of the first storage partition and the second storage partition.
  • the identification of the active state and the inactive state can be predefined. For example, the number “1" is used to represent the active state, and the number "0" is used to represent the inactive state. If the target storage partition is the One storage partition, it can be determined that the current status identifier of the first storage partition is "0", and the current status identifier of the second storage partition is "1". When performing state switching, just change the current state identifier of the first storage partition to "1" and change the current state identifier of the second storage partition to "0".
  • the status identifier of only one of the storage partitions can be read to determine The target storage partition (which is an inactive storage partition).
  • the target storage partition (which is an inactive storage partition).
  • the vehicle communication device 120 sends the upgrade request to the cloud 110 and at the same time, adds the data length value and calibration value of the upgrade software package in the upgrade task information.
  • the verification value and other information are sent to the target vehicle controller.
  • the target vehicle controller determines whether the data of the upgrade software package in the target storage partition has been written according to the data length value in the upgrade task information, and verifies the target storage based on the check value information in the upgrade task information. Data integrity of upgrade packages in partitions.
  • the inactive storage partition and set the target vehicle controller to always run with the data in the active partition.
  • the vehicle communication equipment since the vehicle communication equipment only needs to reserve space large enough to store a single data packet, it does not need to reserve a large storage space to save the entire upgrade software package of each vehicle controller, which solves the problem of related technologies.
  • the problem of large storage space overhead in vehicle communication equipment saves the hardware cost of vehicle communication equipment, thereby reducing the cost of a single vehicle.
  • the target vehicle controller is determined to run.
  • FIG. 2 is a schematic flowchart of a software upgrade method for a vehicle-mounted controller provided in Embodiment 2 of the present application.
  • the method of this embodiment can be executed by a software upgrade device for a vehicle-mounted controller provided by the embodiment of the present application.
  • the device can be implemented by software and/or hardware, and can be integrated into each vehicle controller as shown in Figure 1.
  • the software upgrade method of the vehicle controller in this embodiment includes:
  • the cloud when the software upgrade is started, the cloud sends the data package of the upgrade software package to the target vehicle controller in the form of a data stream through the vehicle communication device.
  • the target controller receives the upgrade sent by the cloud through the vehicle communication device.
  • the data package of the software package when the software upgrade is started, the cloud sends the data package of the upgrade software package to the target vehicle controller in the form of a data stream through the vehicle communication device.
  • the target data packet is the data packet currently received by the target vehicle controller, and the target data packet includes part of the data of the upgrade software package.
  • the target data package may be an upgrade software package, may be the first data package of the upgrade software package, may be the last data package of the upgrade software package, or may be a data package between the first data package and the last data package.
  • the target vehicle-mounted controller determines the storage partition that is currently in the inactive state.
  • the storage partition that is currently in the inactive state is called the target storage partition, and the target The data in the packet is written to the target storage partition.
  • the target storage partition may be the first storage partition or the second storage partition.
  • the target data packet is The data of the target data packet is written into the first storage partition; in response to determining that the first storage partition is not the target storage partition, the data of the target data packet is written into the second storage partition.
  • the data in the target data package is stored in the target storage partition through S202, in this step, it is necessary to determine whether the data of the upgrade software package in the target storage partition has been written, that is, whether the target data package is the last one of the upgrade software package. data package.
  • S204 is executed.
  • the data of the upgrade software package in the target storage partition not being completely written the data of the upgrade software package continues to be received and written.
  • the target vehicle controller calculates the second length value of the data written in the target storage partition, and determines whether the second length value is consistent with the first length value in the received upgrade task information. Whether the length values are consistent determines whether the data of the upgrade software package has been written. For example, if the second length value is equal to the first length value, it means that the data of the upgrade software package in the target storage partition has been written; if the second length value is less than the first length value, it means that the data of the upgrade software package in the target storage partition has been written. Data writing has not been completed.
  • the target vehicle controller calculates the second check value of the upgrade software package based on the data written in the target storage partition, and determines whether the second check value is consistent with the first check value. , to verify the data integrity of the upgrade software package in the target storage partition. For example, if the second check value is consistent with the first check value, it means that the data of the upgrade software package in the target storage partition has not been transferred during the transmission process. has been tampered with, that is, the written data is credible, and the verification passes; if the second verification value is inconsistent with the first verification value, it means that the data of the upgrade software package in the target storage partition has been tampered with during the transmission process. , that is, the written data is not trustworthy, and the verification fails.
  • the first check value and the second check value are CRC values calculated using the same CRC algorithm.
  • the state of the first storage partition and the second storage partition is switched, that is, the target storage partition (that is, the original The inactive storage partition) becomes the active storage partition, and the non-target storage partition (that is, the original active storage partition) becomes the inactive storage partition.
  • the target storage partition is the first storage partition
  • the first storage partition is converted into an activated storage partition
  • the second storage partition is converted into an inactive storage partition.
  • state switching between the first storage partition and the second storage partition is achieved by changing the status identifiers of the first storage partition and the second storage partition.
  • the identification of the active state and the inactive state can be predefined. For example, the number “1" is used to represent the active state, and the number "0" is used to represent the inactive state. If the target storage partition is the One storage partition, it can be determined that the current status identifier of the first storage partition is "0", and the current status identifier of the second storage partition is "1". When performing state switching, just change the current state identifier of the first storage partition to "1" and change the current state identifier of the second storage partition to "0".
  • the target vehicle-mounted controller is controlled to run based on the data operation of the upgrade software package in the target storage partition, so that the target vehicle-mounted controller can switch to the upgraded Software provides services to users.
  • the target vehicle controller will continue to be controlled based on the data of the upgrade software package in the non-target storage partition. run.
  • the first storage partition and the second storage partition are not switched, and the first storage partition and the second storage partition are kept in their original state, that is, the target storage partition is kept in an inactive state and the non-target storage partition is kept. is activated.
  • the method in this embodiment also includes:
  • the upgrade task information is sent from the cloud to the vehicle-mounted communication device, and is sent by the vehicle-mounted communication device to the target vehicle controller.
  • the upgrade task information includes information such as the upgrade software package data length value (i.e., the first length value) and the check value (i.e., the first check value), so as to subsequently determine whether the data of the upgrade software package has been written and Used when verifying the data integrity of the upgrade software package.
  • the data of the target data package is written into the target storage partition that is currently in an inactive state.
  • the target storage partition For the first storage partition or the second storage partition, determine whether the data of the upgrade software package in the target storage partition has been written, and in response to determining that the data of the upgrade software package in the target storage partition has been written, verify the upgrade software in the target storage partition.
  • the data integrity of the package in response to the data integrity check of the upgrade software package in the target storage partition passing, changes the status of the target storage partition to the active state, and controls the vehicle controller based on the data of the upgrade software package in the target storage partition Run, so that the data of the upgrade software package can be flashed to the inactive partition of the target vehicle controller while downloading, which not only reduces the storage overhead of the vehicle communication equipment, saves the hardware cost of the vehicle communication equipment, and reduces the cost of a single vehicle, but also It solves the problem of unavailability of related functions
  • FIG. 3 is a schematic flowchart of a software upgrade method for a vehicle-mounted controller provided in Embodiment 3 of the present application.
  • the method in this embodiment can be jointly executed by a vehicle-mounted communication device and a vehicle-mounted controller.
  • the software upgrade method of the vehicle controller in this embodiment mainly includes the following steps:
  • the vehicle-mounted communication equipment periodically detects whether there are new OTA upgrade tasks in the cloud. When a new OTA upgrade task is detected, the vehicle-mounted communication equipment obtains the upgrade task information from the cloud;
  • the target vehicle controller will restart when the upgrade is successful, and after the restart is completed, switch to the newly activated partition to run, ending this upgrade task.
  • FIG 4 is a schematic structural diagram of a software upgrade device for a vehicle-mounted controller provided in Embodiment 4 of the present application.
  • the device can be implemented by software and/or hardware, and can be integrated into each vehicle-mounted controller shown in Figure 1 middle.
  • the software upgrade device 400 of the vehicle controller in this embodiment includes:
  • the communication module 410 is configured to receive a target data packet of the upgrade software package, where the target data packet includes part of the data of the upgrade software package;
  • the control module 430 is configured to control the operation of the vehicle controller based on the data of the upgrade software package in the target storage partition.
  • the communication module 410 is configured to, before receiving the target data packet of the upgrade software package,
  • Receive upgrade task information which includes the first length value of the upgrade software package
  • FIG 5 is a schematic structural diagram of a vehicle-mounted controller provided in Embodiment 5 of the present application.
  • the vehicle-mounted controller 130 includes a memory 131, a processor 132, and a program stored in the memory and capable of running on the processor.
  • Computer program, the number of processors 132 in the vehicle-mounted controller 130 can be one or more, one processor 132 is taken as an example in Figure 5; the processor 132 and the memory 131 in the vehicle-mounted controller 130 can be connected through a bus or other means.
  • Figure 5 takes connection via bus as an example.
  • Embodiment 6 of the present application also provides a computer-readable storage medium on which a computer program is stored.
  • the computer program when executed by a computer processor, is used to perform a software upgrade method for a vehicle-mounted controller.
  • the method includes:
  • the target storage partition refers to the storage partition that is currently inactive, and the target storage partition is the first storage partition or the second storage partition;
  • the present application can be implemented with the help of software and necessary general hardware. Of course, it can also be implemented with hardware, but in many cases the former is a better implementation. .
  • the technical solution of the present application can be embodied in the form of a software product in essence or that contributes to related technologies.
  • the computer software product can be stored in a computer-readable storage medium, such as a computer floppy disk, Read-Only Memory (ROM), Random Access Memory (RAM), flash memory (FLASH), hard disk or optical disk, etc., including multiple instructions to make a computer device (which can be a personal computer , server, or grid device, etc.) to execute the methods described in various embodiments of this application.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Stored Programmes (AREA)

Abstract

Les modes de réalisation de la présente invention concernent un procédé, un appareil et un système de mise à niveau de logiciel pour un dispositif de commande embarqué, ainsi qu'un dispositif et un support de stockage. Le procédé consiste à : recevoir un paquet de données cible d'un progiciel de mise à niveau ; écrire des données du paquet de données cible dans une partition de stockage cible, qui est actuellement dans un état inactif ; déterminer si les données du progiciel de mise à niveau dans la partition de stockage cible sont complètement écrites ; en réponse au fait que les données sont complètement écrites, vérifier l'intégrité des données du progiciel de mise à niveau dans la partition de stockage cible ; en réponse au fait que la vérification est réussie, changer l'état de la partition de stockage cible en un état actif ; et sur la base des données du progiciel de mise à niveau dans la partition de stockage cible, commander le fonctionnement d'un dispositif de commande embarqué.
PCT/CN2023/099216 2022-06-14 2023-06-08 Procédé et appareil de mise à niveau de logiciel pour dispositif de commande embarqué, et dispositif et support de stockage WO2023241458A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202210669229.9A CN114895947A (zh) 2022-06-14 2022-06-14 车载控制器的软件升级方法、装置、设备和存储介质
CN202210669229.9 2022-06-14

Publications (1)

Publication Number Publication Date
WO2023241458A1 true WO2023241458A1 (fr) 2023-12-21

Family

ID=82727412

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2023/099216 WO2023241458A1 (fr) 2022-06-14 2023-06-08 Procédé et appareil de mise à niveau de logiciel pour dispositif de commande embarqué, et dispositif et support de stockage

Country Status (2)

Country Link
CN (1) CN114895947A (fr)
WO (1) WO2023241458A1 (fr)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117978853A (zh) * 2024-03-29 2024-05-03 成都智邦科技有限公司 一种充电桩的远程升级控制方法

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114895947A (zh) * 2022-06-14 2022-08-12 中国第一汽车股份有限公司 车载控制器的软件升级方法、装置、设备和存储介质

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2018160207A (ja) * 2017-03-24 2018-10-11 日立オートモティブシステムズ株式会社 車載制御装置、及び、プログラム更新ソフトウェア
WO2021244143A1 (fr) * 2020-05-30 2021-12-09 展讯通信（上海）有限公司 Procédé et dispositif de mise à niveau de logiciel
CN114064095A (zh) * 2020-08-10 2022-02-18 威马智慧出行科技（上海）有限公司 车载软件的升级方法、车载控制器、车辆及存储介质
CN114895947A (zh) * 2022-06-14 2022-08-12 中国第一汽车股份有限公司 车载控制器的软件升级方法、装置、设备和存储介质

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2018160207A (ja) * 2017-03-24 2018-10-11 日立オートモティブシステムズ株式会社 車載制御装置、及び、プログラム更新ソフトウェア
WO2021244143A1 (fr) * 2020-05-30 2021-12-09 展讯通信（上海）有限公司 Procédé et dispositif de mise à niveau de logiciel
CN114064095A (zh) * 2020-08-10 2022-02-18 威马智慧出行科技（上海）有限公司 车载软件的升级方法、车载控制器、车辆及存储介质
CN114895947A (zh) * 2022-06-14 2022-08-12 中国第一汽车股份有限公司 车载控制器的软件升级方法、装置、设备和存储介质

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
LERCH SEBASTIAN, JONAS WOLF: "Software Update and Upgrade Over the Air SOTA", VECTOR INDIA CONFERENCE 2019, PUNE, 16 July 2019 (2019-07-16), Pune, pages 1 - 25, XP093117525, Retrieved from the Internet <URL:https://cdn.vector.com/cms/content/events/2019/VH/VIC2019/7_Software_Update_and_Upgrade_Over_the_Air__SOTA_.pdf> [retrieved on 20240110] *

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN117978853A (zh) * 2024-03-29 2024-05-03 成都智邦科技有限公司 一种充电桩的远程升级控制方法

Also Published As

Publication number Publication date
CN114895947A (zh) 2022-08-12

Similar Documents

Publication Publication Date Title
WO2023241458A1 (fr) Procédé et appareil de mise à niveau de logiciel pour dispositif de commande embarqué, et dispositif et support de stockage
US11314502B2 (en) Self-healing learning system for one or more controllers
CN111343064A (zh) 汽车控制***软件升级***及方法
US20220156057A1 (en) In-vehicle update device, update processing program, and program update method
WO2021168840A1 (fr) Procédé, appareil et système de retour en arrière de version de logiciel
US20210397433A1 (en) On-board update device, update processing program, program update method, and on-board update system
CN112134940A (zh) 一种ota升级任务生命周期策略管理方法
CN111886576A (zh) 用于更新远程网络设备的方法和装置
JP6902722B2 (ja) プログラム更新システム、制御システム、移動体、プログラム更新方法及びプログラム
US20240069906A1 (en) Server, software update system, distribution method, and non-transitory storage medium
JP7396229B2 (ja) ソフトウェア更新装置、更新制御方法、更新制御プログラム及びｏｔａマスタ
JP7230768B2 (ja) 電子制御装置、セッション確立プログラム及び制御プログラム
JP2021015618A (ja) 車載更新装置、更新処理プログラム及び、プログラムの更新方法
US20220391192A1 (en) Ota master, center, system, method, non-transitory storage medium, and vehicle
US11803364B2 (en) Server, software updating device, vehicle, software updating system, control method, and non-transitory storage medium
WO2022205443A1 (fr) Procédé et appareil de mise à niveau de logiciel
US20220391193A1 (en) Ota master, system, method, non-transitory storage medium, and vehicle
US20230333838A1 (en) Method and device for updating software of an onboard computer in a vehicle, comprising a runtime memory, a backup memory and a control memory
CN116909609B (zh) 车载智能设备的软件升级方法、装置及车载智能设备
US20240004640A1 (en) Computer-Implemented Method And Device For The Automated Update Of A Communication Unit Of A Control Unit Of A Vehicle
WO2022244588A1 (fr) Dispositif de commande électronique pour véhicules, programme de mise à jour et structure de données
CN116319745A (zh) 应用资源下载方法、装置、车机、车辆及存储介质
CN116382723A (zh) 一种软件升级方法、装置及电子设备
CN118276895A (zh) 车辆ota升级***和车辆
CN117806682A (zh) 一种车载控制器ota回滚控制方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 23823026

Country of ref document: EP

Kind code of ref document: A1