WO2018176692A1 - Procédé de mise à jour de micrologiciel système, dispositif et système de gestion de batterie - Google Patents

Procédé de mise à jour de micrologiciel système, dispositif et système de gestion de batterie Download PDF

Info

Publication number
WO2018176692A1
WO2018176692A1 PCT/CN2017/093299 CN2017093299W WO2018176692A1 WO 2018176692 A1 WO2018176692 A1 WO 2018176692A1 CN 2017093299 W CN2017093299 W CN 2017093299W WO 2018176692 A1 WO2018176692 A1 WO 2018176692A1
Authority
WO
WIPO (PCT)
Prior art keywords
update
segment
program
application
system application
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2017/093299
Other languages
English (en)
Chinese (zh)
Inventor
姚志瑞
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Contemporary Amperex Technology Co Ltd
Original Assignee
Contemporary Amperex Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Contemporary Amperex Technology Co Ltd filed Critical Contemporary Amperex Technology Co Ltd
Publication of WO2018176692A1 publication Critical patent/WO2018176692A1/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L50/00—Electric propulsion with power supplied within the vehicle
    • B60L50/50—Electric propulsion with power supplied within the vehicle using propulsion power supplied by batteries or fuel cells
    • B60L50/60—Electric propulsion with power supplied within the vehicle using propulsion power supplied by batteries or fuel cells using power supplied by batteries
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L58/00—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles
    • B60L58/10—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles for monitoring or controlling batteries
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/445—Program loading or initiating
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
    • Y02T10/00—Road transport of goods or passengers
    • Y02T10/60—Other road transportation technologies with climate change mitigation effect
    • Y02T10/70—Energy storage systems for electromobility, e.g. batteries

Definitions

  • the invention belongs to the technical field of computers, and in particular relates to a firmware updating method, device and battery management system of a system.
  • BootLoader is a bootloader that runs before the embedded system application runs. It is mainly implemented by In Application Programming (IAP) technology and is responsible for updating the electronic device program. Once the BootLoader goes wrong, it is easy to cause the device to become "brick", whether it is its own problem or user problem.
  • IAP In Application Programming
  • Embodiments of the present invention provide a firmware update method, apparatus, and battery management system for a system, which can simplify the update process while improving the reliability of updating the firmware of the system.
  • a method for updating a firmware of a system may include the following steps:
  • system update block In the case where the system update block is judged to be valid, when the system application is received more When the new instruction is executed, the system application corresponding to the system application segment is updated by the system update program corresponding to the system update block;
  • system update program segment In the case that the system update program segment is judged to be invalid, the original system application program is executed and the system update program upgrade prompt message is sent, and when the system update program update command is received, the validity of the system application segment is identified by updating the boot segment. If the system application segment is judged to be valid, the system update program is updated by the system application.
  • a firmware update apparatus for a system may include: an identification unit, a system update program update unit, and a system application update unit.
  • the identification unit may be configured to execute an update boot segment to identify the validity of the system update program segment, wherein the content stored in the update boot segment cannot be overwritten during program execution.
  • the system update program update unit may be configured to, when the system update program segment is determined to be valid, update the system corresponding to the system application segment by the system update program corresponding to the system update program segment when receiving the system application update command. application.
  • the system application update unit may be configured to execute the original system application and send a system update program upgrade prompt message when the system update program segment is determined to be invalid, and when the system update program update command is received, the update guide is performed.
  • the segment identifies the validity of the system application segment, and if the system application segment determines to be valid, the system update program is updated by the system application.
  • a battery management system is provided that can be applied to an electric vehicle and can include the firmware update device of the system described above.
  • the firmware update method, apparatus and battery management system of the system provided by the embodiment of the present invention, by updating the boot segment, the validity of the system update program segment and the system application segment is recognized, and at the same time, the content stored in the update boot segment cannot be in the program.
  • the system is rewritten during the operation, and the system application and the system update program can update each other through the update instruction, but cannot rewrite the own program.
  • This peer-to-peer mutual update method ensures that at least one of the system application and the system update program can be reliably used during the firmware update process of the system, especially during the update process of the battery management system for the electric vehicle.
  • the two-level BOOT program update method is omitted, which simplifies the update process.
  • FIG. 1 is a schematic flowchart of a firmware update method of a system according to an embodiment of the present invention
  • FIG. 2 is a schematic flowchart of a firmware update method of a system according to another embodiment of the present invention.
  • FIG. 3 is a schematic flowchart of a firmware update method of a system according to still another embodiment of the present invention.
  • FIG. 4 is a schematic structural block diagram of an electrical system of an embodiment of the present invention.
  • FIG. 5 is a schematic flowchart of a firmware updating method applicable to the electrical system shown in FIG. 4 according to an embodiment of the present invention
  • FIG. 6 is a schematic data structure of an update boot segment, a system update block, and a system application segment, in accordance with an embodiment of the present invention
  • FIG. 7 is a schematic structural block diagram of a firmware update apparatus of a system according to an embodiment of the present invention.
  • FIG. 8 is a schematic structural block diagram of a firmware update apparatus of a system according to another embodiment of the present invention.
  • FIG. 9 is a schematic structural block diagram of a battery management system according to an embodiment of an embodiment of the present invention.
  • FIG. 10 is a schematic block diagram of a computing device implementation of a firmware update device of a system in accordance with an embodiment of the present invention.
  • firmware update method of the system can be used for firmware update of the controller in the electrical system, for example, firmware or other automotive electronic control unit that can be applied to the electric vehicle battery management system (English: Electronic Control Unit; ) update.
  • the firmware update method of the system can include:
  • the flash boot is used to lock the update boot segment so that the content stored in the update boot segment cannot be overwritten during program execution.
  • S120 The system update program segment is determined to be valid.
  • the system application program corresponding to the system application segment is updated by the system update program corresponding to the system update program segment.
  • the system update block is a BOOT segment
  • the content stored in the BOOT segment can be identified.
  • the system application corresponding to the system application segment may be updated by the system update program corresponding to the BOOT segment.
  • the system update program segment is determined to be invalid, executing the original system application program and sending a system update program upgrade prompt message, and when receiving the system update program update instruction, identifying the validity of the system application segment by updating the boot segment, if When the system application segment is judged to be valid, the system update program is updated by the system application.
  • the system update block is a BOOT segment
  • the content stored in the BOOT segment can be identified.
  • the system application may be directly executed, and a system update program upgrade prompt message is generated by the system application to prompt to update the system update program.
  • the system update program is updated by the system application when a system update program update instruction is received.
  • the validity of the system update program segment and the system application segment can be identified by updating the boot segment, and at the same time, the content stored in the update boot segment cannot be rewritten in the program running, and the system is implemented.
  • the application and system update program can update each other through the update command, but cannot rewrite their own program.
  • This kind of peer-to-peer mutual update can guarantee the firmware update process of the system, especially when it is suitable for electric During the update process of the battery management system of the automobile, at least one of the system application program and the system update program can be used reliably, and the program update mode of the two-level BOOT is omitted, which simplifies the update process.
  • the above S110 may include: identifying the validity of the system update program segment by using the identification information of the system update program segment.
  • the identification information of the system update program segment may be set at the start address of the system update program segment and the end address of the system update program segment.
  • the identification information of the system update program segment may include the verification information of the system update program segment, the system update program version number, and the password of the system update program.
  • the above S130 may further include: identifying the validity of the system application segment by the identification information of the system application segment.
  • the identification information of the system application segment is set at the start address of the system application segment and the end address of the system application segment.
  • the identification information of the system application segment includes the verification information of the system application segment, the system application version number, and the password of the system application.
  • the identification information of the system application segment and the identification information of the system update program segment may also include other identifying information capable of identifying the validity of the system application segment and the system update program segment.
  • firmware update method of the system may further include the following steps:
  • the predetermined time can be set to 300 ms. Then, when the system update block is determined to be valid, the system update program starts counting, and when the waiting time exceeds 300 ms, the validity of the system application segment continues to be recognized.
  • the system application segment described above can be an APP segment.
  • S220 Execute the system application when the system application segment is determined to be valid.
  • the program can jump from the system update program to the system application.
  • the execution system The original firmware of the firmware ensures the normal operation of the electrical system.
  • the program when the APP segment is identified as invalid, then the program cannot jump from the system update program to the system application, but does not perform an action until a system application update instruction is received, and then the invalid APP is updated.
  • FIG. 3 is a schematic flowchart of a firmware update method of the system according to still another embodiment of the present invention.
  • the firmware update method of the system may include: in addition to the operations in the embodiment shown in FIG. 1 or FIG.
  • S310 Send a response message after receiving a system update instruction from the outside, where the system update instruction includes a system update program update instruction and/or a system application update instruction.
  • the external CAN physical layer can be connected through a master system node in the electrical system, and the master system node can be used as a bridge.
  • the master system node acting as the bridge can directly forward the data to the internal CAN without processing.
  • the internal electrical system nodes on the internal CAN are just like those connected to the external CAN.
  • the forwarding procedure as the master node of the bridge is relatively simple.
  • the master system node acting as a bridge can determine the destination address of the data packet sent by the upper computer to the address of the internal electrical system node, and then copy the data packet to the internal CAN transmission buffer.
  • S320 Generate and send a system update broadcast message, where the system update broadcast message indicates that no response is performed.
  • the essence is not the bridging of the data link layer, but the application layer is in communication with the battery master system node.
  • the battery master system node After the battery master system node gives a response, it then sends a broadcast message internally.
  • the broadcast message can use the network layer ISO15765 of UDS to directly forward the content; it can also customize the protocol as long as it ensures that the recipient does not respond in the forwarded content.
  • the master system node directly feeds back the response message upon receiving a system update command from the outside, then generates and sends a system update broadcast message to other internal electrical system nodes, and instructs the other internal electrical system nodes to receive The above system does not respond after updating the broadcast message.
  • the master system node may query the other internal electrical system nodes one by one after the feedback message, and return the query feedback result to the external node. Solve the problem of upgrading internal electrical system nodes through external CAN through S310 and S320.
  • the electrical system can include a battery management system 401; a charging station interface 408 that communicates with the battery management system 401 via an external bus CAN1; an in-vehicle charger 406 that communicates with the battery management system 401 via an external bus CAN2,
  • the measurement interface 407 and the vehicle controller 409 are debugged; and the motor controller 410 is in communication with the battery management system 401.
  • the battery management system 401 can include internal electrical system nodes such as a battery control system 402, a battery system 403, a high voltage security system 404, and a current sensor system 405, wherein the battery control system 402, the battery system 403, the high voltage security system 404, and The current sensor system 405 communicates via the internal bus CAN3.
  • internal electrical system nodes such as a battery control system 402, a battery system 403, a high voltage security system 404, and a current sensor system 405, wherein the battery control system 402, the battery system 403, the high voltage security system 404, and The current sensor system 405 communicates via the internal bus CAN3.
  • FIG. 5 is a schematic flow chart of a firmware update method applicable to the electrical system shown in FIG. 4 according to an embodiment of the present invention. As shown in FIG. 5, the firmware update method of the system may further include:
  • S510 Send a response message after receiving a system update command from the external, where the system update instruction may include a system update program update instruction and/or a system application update instruction, a receiver of the external system update instruction, and a sender of the response message.
  • the system update instruction may include a system update program update instruction and/or a system application update instruction, a receiver of the external system update instruction, and a sender of the response message.
  • S520. Generate and send a system update broadcast message, where the system update broadcast message is generated and sent by the battery master system node, and the system update broadcast message receiver may include: a battery system node, a high voltage security system node, and a current sensor. System node.
  • the battery master system 402 node can be used as a bridge.
  • the host computer sends an update command to the internal electrical system of the battery management system (for example, the battery system 403, the high voltage safety system 404, and the current sensor system 405).
  • the battery master system 402 node can forward the data directly to the internal CAN, such as CAN3, without processing.
  • the internal battery system 403 node, the high voltage safety system 404 node, and the current sensor system 405 node on CAN3 are as if they are connected to the external CAN.
  • the forwarding procedure of the battery master system node as the bridge is relatively simple, the destination address of the data packet is determined, and then the data packet is copied to the internal CAN transmission buffer.
  • FIG. 6 is a schematic data structure of an update boot segment, a system update block, and a system application segment, in accordance with an embodiment of the present invention.
  • the address areas of the first to third lines (0x0000_0000-0x0000_C000) of the start address Start address are set to BOOT segments.
  • the address area of the fourth line to the sixteenth line (0x0001_0000-0x00016_C000) of the start address Start address is set to the APP segment.
  • the first row (0x0000_0000-0x000_7FFF) address area of the start address Start address can be used as an update boot segment StartUP for identifying the validity of the program stored in the APP segment and the BOOT segment.
  • the reset vector address 0x0000_0000 stores StartUP.
  • the BOOT MAIN function can be placed at the 0x0000_8000 address, and the (0x0000_8000-0x0000_8100) address area check information, BOOT version number, and password are placed in the start address portion and the end address portion of the segment address.
  • the (0x0000_C000-0x0000_FFFF) address area can be treated as a reserved address.
  • the interrupt vector table of the APP may be remapped to address 0x0001_0000, and the check information, APP version number, and password of the (0x0001_0000-0x0001_0100) address area are placed in the start address portion and the end address portion of the segment address. .
  • the StartUP of the BOOT segment is executed, and the StartUP identifies the main function MAIN of the BOOT segment. For example, if the recognition is passed, the jump executes BOOT, otherwise the jump executes the APP.
  • BOOT waits for 300ms and the UDS connection command is not received and the APP segment is recognized as valid, the APP can be jumped to execute, otherwise the upgrade command is waited for the upgrade APP.
  • the APP may generate an upgrade prompt message prompting to upgrade the BOOT.
  • (0x0000_0000-0x0000_7FFF) address area is set to update the boot segment and the contents stored therein cannot be overwritten during program execution, it can never be overwritten by application programming (English: In Application Programming, abbreviation: IAP).
  • IAP International Application Programming, abbreviation: IAP.
  • JTAG mode to change the electrical system after unpacking.
  • the (0x0000_8000-0x0000_BFFF) address area can be rewritten by the APP upgrade, but the BOOT itself cannot be changed; (0x000C_0000-0x0015_FFFF) the address area can be rewritten by BOOT, but the APP itself cannot be rewritten.
  • This mutual exclusion design guarantees that APP and BOOT can update each other through UDS, but cannot rewrite themselves, so that one of APP and BOOT must be valid.
  • the firmware update method of the system according to the embodiment of the present invention is described in detail above with reference to FIG. 1 to FIG. 6.
  • the firmware update device and the battery management system of the system according to the embodiment of the present invention will be described in detail below with reference to FIG. 7 to FIG. .
  • FIG. 7 is a schematic structural block diagram of a firmware update apparatus of a system according to an embodiment of the present invention.
  • the firmware update apparatus 700 of the system may include an identification unit 710, a system update program update unit 720, and a system application update unit 730.
  • the identification unit 710 can be configured to execute the update boot segment and identify the validity of the system update program segment, wherein the content stored in the update boot segment cannot be overwritten during program execution.
  • the system update program update unit 720 can be configured to update the system corresponding to the system application segment by the system update program corresponding to the system update program segment when the system application update command is received in the case that the system update program segment is determined to be valid. application.
  • the system application update unit 730 can be configured to execute the original system application and send a system update program upgrade prompt message when the system update program segment is determined to be invalid, and when the system update program update command is received, the update guide is performed.
  • the segment identifies the validity of the system application segment, and if the system application segment is determined to be valid, the system update program is updated by the system application.
  • the firmware update apparatus 700 of the system according to an embodiment of the present invention may correspond to an execution body in the firmware update method of the system according to the embodiment of the present invention, and the above operations and/or functions of the respective units in the firmware update apparatus 700 of the system are In order to implement the corresponding processes of the respective methods in FIG. 1 , for brevity, no further details are provided herein.
  • the validity of the system update program segment and the system application segment can be identified by updating the boot segment, and at the same time, the content stored in the update boot segment cannot be rewritten in the program running, so that the system The application and system update program can update each other through the update command, but cannot rewrite their own program.
  • This peer-to-peer mutual update method ensures that at least one of the system application and the system update program can be reliably used in the firmware update of the system, especially the battery management system for the electric vehicle, and the invention is omitted.
  • the two-level BOOT program update method simplifies the update process.
  • the identifying unit 710 is further configured to: identify, by using the identification information of the system update program segment, the validity of the system update program segment, where the identification information of the system update program segment is set at a start address of the system update program segment. And the end address of the system update program segment, the identification information of the system update program segment includes the verification information of the system update program segment, the system update program version number, and the password of the system update program.
  • the identification information includes the verification information of the system application segment, the system application version number, and the password of the system application.
  • system update program update unit 720 is further configured to: if the system application update instruction is not received for more than a predetermined time, identify the validity of the system application segment; when the system application segment is valid, execute the system application Program; when the system application segment is invalid, no action is performed until a system application update command is received.
  • FIG. 8 is a schematic structural block diagram of a firmware update apparatus of a system according to another embodiment of the present invention.
  • the firmware update apparatus 800 of the system may include an identification unit 810, a system update program update unit 820, a system application update unit 830, and a communication unit 840.
  • the identification unit 810 can be configured to execute an update boot segment to identify the validity of the system update program segment and the system application segment, wherein the content stored in the update boot segment cannot be in the running of the program. Was rewritten.
  • the system update program update unit 820 can be configured to update the system application corresponding to the system application segment by the system update program corresponding to the system update block when the system update program is received.
  • the system application update unit 830 can be configured to execute the system application and send a system update program upgrade prompt message if the system update program segment is invalid, and update the system update program by the system application when receiving the system update program update instruction. .
  • the communication unit 840 is configured to send a response message after receiving a system update instruction from the external, the system update instruction includes a system update program update instruction and/or a system application update instruction; generate and send a system update broadcast message, where the system updates the broadcast message Indicates that no response is made.
  • communication unit 840 can also be used with a battery master system node, wherein in such a case, communication unit 840 can be used to:
  • the battery main control system node causing the battery main control system node to send a response message after receiving a system update instruction from the external, wherein the system update instruction includes a system update program update instruction and/or a system application update instruction;
  • the battery master system node generates and transmits a system update broadcast message, wherein the system update broadcast message indicates that the receiver does not respond, and the system update receiver includes: a battery system node, a high voltage security system node, and a current sensor system node .
  • FIG. 9 is a schematic block diagram of a battery management system of an embodiment of the present invention.
  • the battery management system 900 can be applied to an electric vehicle, and can include the firmware update apparatus 700 of the above system.
  • the validity of the system update program segment and the system application segment can be identified by updating the boot segment, and at the same time, the content stored in the update boot segment cannot be rewritten in the program running, and the system application is realized.
  • Programs and system update programs can update each other with update instructions, but cannot rewrite their own programs.
  • This peer-to-peer mutual update method can ensure that at least one of the system application and the system update program can be reliably used in the update process of the electrical system, especially in the battery management system applicable to the electric vehicle, and two levels are omitted. BOOT's program update method simplifies the update process.
  • FIG. 10 is a computing device implementation of a firmware update device of a system in accordance with an embodiment of the present invention. Schematic block diagram of the structure. As shown in FIG. 10, at least a portion of the firmware update method and firmware update device of the system in conjunction with the system described above can be implemented by computing device 1000.
  • Computing device 1000 can include a processor 1003, a memory 1004, and a bus 1010.
  • the computing device 1000 can also include an input device 1001, an input port 1002, an output port 1005, and an output device 1006.
  • the input port 1002, the processor 1003, the memory 1004, and the output port 1005 are connected to each other through a bus 1010.
  • the input device 1001 and the output device 1006 are connected to the bus 1010 through the input port 1002 and the output port 1005, respectively, and thus the computing device 1000.
  • Other components are connected.
  • the object of the invention can also be achieved by running a program or a set of programs on any computing device.
  • the computing device can be a well-known general purpose device.
  • the object of the present invention can also be achieved by merely providing a program product comprising program code for implementing the method or apparatus. That is to say, such a program product also constitutes the present invention, and a storage medium storing such a program product also constitutes the present invention. It will be apparent that the storage medium may be any known storage medium or any storage medium developed in the future.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Sustainable Development (AREA)
  • Sustainable Energy (AREA)
  • Power Engineering (AREA)
  • Transportation (AREA)
  • Mechanical Engineering (AREA)
  • Stored Programmes (AREA)

Abstract

L'invention concerne un procédé de mise à jour de micrologiciel système, un dispositif et un système de gestion de batterie. Le procédé consiste à : exécuter un segment de guidage de mise à jour et reconnaître la validité d'un segment de programme de mise à jour de système (S110), le contenu stocké dans le segment de guidage de mise à jour ne pouvant pas être réécrit pendant l'exécution du programme; le segment de programme de mise à jour de système étant déterminé comme étant valide, lorsqu'une instruction de mise à jour d'un programme d'application de système est reçue, un programme de mise à jour de système correspondant à un segment de programme de mise à jour de système mettant à jour le programme d'application de système correspondant à un segment de programme d'application de système (S120); où le programme de mise à jour de système est déterminé comme étant invalide, exécuter un programme d'application de système d'origine et envoyer un message d'invite de mise à niveau du programme de mise à jour de système; lorsqu'une instruction de mise à jour du programme de mise à jour de système est reçue, reconnaître la validité du segment de programme d'application de système au moyen du segment de guidage de mise à jour; si le segment de programme d'application de système est déterminé comme étant valide, mettre à jour le programme de mise à jour de système au moyen du programme d'application de système (130). Ce procédé peut améliorer la fiabilité de la mise à jour de micrologiciel d'un système et simplifier le processus de mise à jour en même temps.
PCT/CN2017/093299 2017-03-28 2017-07-18 Procédé de mise à jour de micrologiciel système, dispositif et système de gestion de batterie Ceased WO2018176692A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201710192164.2 2017-03-28
CN201710192164.2A CN108664256A (zh) 2017-03-28 2017-03-28 系统的固件更新方法、装置和电池管理系统

Publications (1)

Publication Number Publication Date
WO2018176692A1 true WO2018176692A1 (fr) 2018-10-04

Family

ID=63674054

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/093299 Ceased WO2018176692A1 (fr) 2017-03-28 2017-07-18 Procédé de mise à jour de micrologiciel système, dispositif et système de gestion de batterie

Country Status (2)

Country Link
CN (1) CN108664256A (fr)
WO (1) WO2018176692A1 (fr)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110688136A (zh) * 2019-09-25 2020-01-14 北京经纬恒润科技有限公司 一种应用程序更新方法及装置
CN111552493A (zh) * 2020-04-24 2020-08-18 苏州华芯微电子股份有限公司 防盗器软件更新方法、防盗器、自刷新设备
CN112925545A (zh) * 2021-03-01 2021-06-08 青岛海信移动通信技术股份有限公司 移动终端及其应用更新方法
CN115827023A (zh) * 2022-12-09 2023-03-21 株洲嘉成科技发展股份有限公司 一种主从板设计下控制器的固件更新方法
CN118741488A (zh) * 2024-09-03 2024-10-01 云储新能源科技有限公司 一种电池数据采集装置广播升级方法及设备

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110618825B (zh) * 2019-08-02 2023-06-13 惠州市德赛西威汽车电子股份有限公司 一种车机Boot Loader的自更新方法
CN112445505B (zh) * 2019-08-29 2024-09-03 北京小米移动软件有限公司 电子设备及设备控制方法和装置
CN113064400A (zh) * 2021-03-15 2021-07-02 奇瑞新能源汽车股份有限公司 车辆控制器的测试刷新方法及装置
CN113127043A (zh) * 2021-03-19 2021-07-16 力高(山东)新能源技术有限公司 一种单片机APP在线升级BootLoader的方法
CN115357886A (zh) * 2022-08-30 2022-11-18 广东博力威科技股份有限公司 电池bms系统的app升级方法、系统、电子设备及存储介质

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110320794A1 (en) * 2010-06-28 2011-12-29 Chung-Jen Yang Flash System And Method For Updating The Flash System
US20120210165A1 (en) * 2011-02-14 2012-08-16 Dell Products L.P. System and method for auto-failover and version matching of bootloader in an access controller
CN103995712A (zh) * 2014-04-16 2014-08-20 潍柴动力股份有限公司 一种自动更新的bootloader装置及更新方法
CN105573797A (zh) * 2015-12-18 2016-05-11 广州市中海达测绘仪器有限公司 嵌入式系统的可逆离线升级方法及装置
CN105677388A (zh) * 2015-12-31 2016-06-15 清华大学苏州汽车研究院（吴江） 电动汽车电机控制器的固件更新方法
CN106303709A (zh) * 2016-08-01 2017-01-04 深圳市创维软件有限公司 一种机顶盒及其应用程序升级方法、系统

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR101913706B1 (ko) * 2011-10-20 2018-10-31 현대모비스 주식회사 린 네트워크 멀티 채널 부트로더 장치 및 그 동작 방법
CN104572180B (zh) * 2014-12-19 2018-06-26 沈阳东软医疗系统有限公司 一种嵌入式设备的固件升级方法及嵌入式系统
CN104765632A (zh) * 2015-04-15 2015-07-08 南京汽车集团有限公司 一种BootLoader的管理方法
CN205899529U (zh) * 2016-06-30 2017-01-18 武汉英泰斯特电子技术有限公司 一种车辆ecu远程更新设备

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20110320794A1 (en) * 2010-06-28 2011-12-29 Chung-Jen Yang Flash System And Method For Updating The Flash System
US20120210165A1 (en) * 2011-02-14 2012-08-16 Dell Products L.P. System and method for auto-failover and version matching of bootloader in an access controller
CN103995712A (zh) * 2014-04-16 2014-08-20 潍柴动力股份有限公司 一种自动更新的bootloader装置及更新方法
CN105573797A (zh) * 2015-12-18 2016-05-11 广州市中海达测绘仪器有限公司 嵌入式系统的可逆离线升级方法及装置
CN105677388A (zh) * 2015-12-31 2016-06-15 清华大学苏州汽车研究院（吴江） 电动汽车电机控制器的固件更新方法
CN106303709A (zh) * 2016-08-01 2017-01-04 深圳市创维软件有限公司 一种机顶盒及其应用程序升级方法、系统

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110688136A (zh) * 2019-09-25 2020-01-14 北京经纬恒润科技有限公司 一种应用程序更新方法及装置
CN110688136B (zh) * 2019-09-25 2023-12-22 北京经纬恒润科技股份有限公司 一种应用程序更新方法及装置
CN111552493A (zh) * 2020-04-24 2020-08-18 苏州华芯微电子股份有限公司 防盗器软件更新方法、防盗器、自刷新设备
CN112925545A (zh) * 2021-03-01 2021-06-08 青岛海信移动通信技术股份有限公司 移动终端及其应用更新方法
CN115827023A (zh) * 2022-12-09 2023-03-21 株洲嘉成科技发展股份有限公司 一种主从板设计下控制器的固件更新方法
CN118741488A (zh) * 2024-09-03 2024-10-01 云储新能源科技有限公司 一种电池数据采集装置广播升级方法及设备

Also Published As

Publication number Publication date
CN108664256A (zh) 2018-10-16

Similar Documents

Publication Publication Date Title
WO2018176692A1 (fr) Procédé de mise à jour de micrologiciel système, dispositif et système de gestion de batterie
JP7666873B2 (ja) データ処理方法、制御デバイス、診断デバイス、コンピュータプログラム、及び電子デバイス
US20200310782A1 (en) Gateway device, in-vehicle network system, and firmware update method
CN109240730B (zh) 一种单片机在线升级方法和系统
CN111381844A (zh) 更新车辆ecu固件的方法及装置
CN102945174A (zh) 通过接着片外Flash实现单片机程序升级的方法
CN114564179B (zh) 参数配置方法、装置及系统
JP7602493B2 (ja) 車両の車載バス上のコンピュータと対話する方法
CN109871225B (zh) 电子控制单元ecu升级方法及ecu
CN113093694B (zh) 一种基于uds的车载电控单元数据刷写方法及系统
CN108509215B (zh) 一种系统软件的更换方法、装置、终端设备及存储介质
CN112835598A (zh) 一种汽车ecu刷写方法及其系统、计算机可读存储介质
EP3895939B1 (fr) Dispositif de commande électronique et procédé de vérification de sécurité pour dispositif de commande électronique
CN110688136B (zh) 一种应用程序更新方法及装置
CN118819586B (zh) 一种车载控制器固件升级方法、车载控制器及系统
CN113434163B (zh) 适用于电子控制单元的在线标定方法、系统、设备及介质
CN114579161A (zh) 应用程序更新方法及ecu
CN105334840B (zh) 整车网络子节点配置方法
CN117295055A (zh) 一种ota升级系统及升级方法
CN112925546B (zh) 一种防止车载ecu刷新出错的多级校验方法及系统
CN117950707A (zh) 车辆ecu的ota升级刷写方法、装置、vbox及新能源汽车
CN116909808A (zh) 车辆电子控制单元的升级方法、装置、设备以及存储介质
WO2024197570A1 (fr) Procédé et dispositif de détection de mise à niveau
CN115988503A (zh) 一种基于车辆的应用功能的处理方法、设备及介质
CN113190246A (zh) 软件程序升级方法及装置、可读存储介质、电子设备

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17903133

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17903133

Country of ref document: EP

Kind code of ref document: A1