WO2023000320A1 - 一种空中下载(ota)升级方法及装置 - Google Patents

一种空中下载(ota)升级方法及装置 Download PDF

Info

Publication number
WO2023000320A1
WO2023000320A1 PCT/CN2021/108210 CN2021108210W WO2023000320A1 WO 2023000320 A1 WO2023000320 A1 WO 2023000320A1 CN 2021108210 W CN2021108210 W CN 2021108210W WO 2023000320 A1 WO2023000320 A1 WO 2023000320A1
Authority
WO
WIPO (PCT)
Prior art keywords
upgrade
terminal device
state
task
upgrade task
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2021/108210
Other languages
English (en)
French (fr)
Inventor
马涛
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Priority to JP2024504233A priority Critical patent/JP2024530431A/ja
Priority to PCT/CN2021/108210 priority patent/WO2023000320A1/zh
Priority to EP21950569.0A priority patent/EP4375802A4/en
Priority to CN202180100204.0A priority patent/CN117616364A/zh
Publication of WO2023000320A1 publication Critical patent/WO2023000320A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861—Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/30—Services specially adapted for particular environments, situations or purposes
    • H04W4/40—Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P]
    • H04W4/44—Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P] for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/50—Service provisioning or reconfiguring

Definitions

  • the embodiments of the present application relate to the technical field of the Internet of Vehicles, and in particular to an OTA upgrade method and device.
  • a smart car is a complex system, which contains dozens or even hundreds of electronic control units (ECU), and various complex functions of a smart car are realized by cooperation between ECUs.
  • ECU electronice control units
  • the maintenance and upgrading of various functions of the smart car by the original equipment manufacturer (OEM) of the smart car is mainly realized by upgrading the ECU related to these functions.
  • Over the air (OTA) technology can be applied to upgrade related hardware or software of vehicles, which is beneficial for manufacturers to reduce recall costs, quickly respond to needs, and improve user experience.
  • OTA Over the air
  • smart cars perform OTA upgrade tasks, the original software or hardware functions are in an unavailable state, which brings security problems.
  • how to ensure that the OTA upgrade task is executed in a safe environment is a technical problem to be solved urgently by those skilled in the art.
  • the embodiment of the present application discloses an OTA upgrade method and a corresponding device, which can realize a safe OTA upgrade, that is, ensure that the OTA upgrade can be performed in an environment that ensures safety (especially personal safety).
  • an upgrade method is provided, and the method may be executed by a terminal device or a chip configured in the terminal device.
  • the method includes: receiving a first upgrade task, where the first upgrade task corresponds to a first execution condition; according to the first execution condition, acquiring a first state of the terminal device, where the first state includes a first biometric identification result; A first operation corresponding to the first state is performed.
  • the method may also be executed by an OTA management module included in the terminal device or a chip configured in the OTA management module.
  • the OTA upgrade can be performed in a safe environment.
  • the performing the first operation corresponding to the first state includes: the first biometric identification result is that there is a living creature in the terminal device, and the Executing the first operation corresponding to the first state is to output a first prompt, and the first prompt is used to indicate that the first upgrade task cannot be executed; or, the first biometric identification result is the There is no creature, and the executing the first operation corresponding to the first state is executing the first upgrade task.
  • the first prompt may be output through one or more of the following: a mobile phone, a wearable device, a tablet computer, a notebook computer, and an HMI interface.
  • the first prompt is highlighted in a prominent manner. Based on this, the implementation of the first upgrade task can be easily followed.
  • the performing the first operation corresponding to the first state is performing the first upgrade task
  • the method further includes: controlling the door of the terminal device The lock is in a closed state and/or a second prompt is output, and the second prompt is used to indicate that no creature should exist in the terminal device.
  • the second prompt may further include time information T, which is used to indicate that within a time range satisfying the time information T, no creature should exist in the terminal device. Based on this, it can be realized that the terminal device can be used in time after the first upgrade task is executed.
  • the second prompt may be output through one or more of the following: a mobile phone, a wearable device, a tablet computer, and a notebook computer.
  • the second prompt is highlighted in a prominent manner. In this way, the execution condition of the first upgrade task can be easily noticed, thereby ensuring that the first upgrade task can be executed in a safe environment.
  • the performing the first operation corresponding to the first state is performing the first upgrade task
  • the method further includes: acquiring a door of the terminal device lock state, the door lock state of the terminal device includes that the door lock is opened; and/or, acquire a second state of the terminal device, the second state includes a second biometric identification result, and the second biometric
  • the identification result is that there is a creature in the terminal device; and suspending or terminating the execution of the first upgrading task.
  • the execution of the first upgrade task can be suspended or terminated. Based on this, the first upgrade task can be realized During the execution of an upgrade task, the OTA upgrade is performed in an environment that ensures safety (especially personal safety). In addition, through this solution, the normal use of the terminal device in a specific scenario can also be guaranteed.
  • the performing the first operation corresponding to the first state is performing the first upgrade task
  • the method further includes: acquiring a door of the terminal device lock state, the door lock state of the terminal device includes that the door lock is opened; and/or, acquire a second state of the terminal device, the second state includes a second biometric identification result, and the second biometric
  • the identification result is that there is a living creature in the terminal device; and it is determined that the first upgrade subtask included in the first upgrade task has been completed, and the first upgrade subtask corresponds to the upgrade of biosafety-related components; and continue to execute The first upgrade task.
  • the upgrade task corresponding to the biosafety-related components can be performed in a safe environment without affecting the execution of other upgrade tasks, thereby ensuring the execution efficiency of the upgrade task.
  • the method when performing the first operation corresponding to the first state is outputting a first prompt, the method further includes: outputting a third prompt, the third The prompt is used to indicate a reason why the first upgrade task cannot be executed and/or a condition for re-executing the first upgrade task.
  • the reason why the first upgrade task is not executed and/or the conditions under which it can be executed can be known, so as to ensure that the subsequent OTA upgrade can be executed in a safe environment.
  • the third prompt may be output through one or more of the following: a mobile phone, a wearable device, a tablet computer, a notebook computer, and an HMI interface.
  • the third prompt is highlighted in a prominent manner. Based on this, it can be realized that the reason why the first upgrade task is not executed or the first execution condition is easy to be paid attention to.
  • the solution further includes: outputting a fourth prompt, where the fourth prompt is used to indicate the first execution condition.
  • the solution further includes: according to settings, determining whether to acquire the first state according to confirmation information in response to the fourth prompt.
  • the flexibility of OTA upgrade can be realized.
  • the user of the terminal device can choose to start performing the first upgrade task in a suitable scenario, so as to ensure the normal use of the terminal device , and can ensure that the OTA upgrade is performed in a safe environment.
  • the solution further includes: receiving the first execution condition from the server; or, according to the configured or defined mapping relationship between the upgrade task and the execution condition, determining the Describe the first execution condition.
  • the first execution condition can be determined, thereby ensuring that the OTA upgrade is executed in a suitable execution environment, thereby ensuring the security of the OTA upgrade.
  • the obtaining the first state of the terminal device includes: obtaining the first state through a sensor in the terminal device, and the sensor includes one of the following: One or more items: camera, pressure sensor, millimeter wave radar sensor, lidar sensor.
  • an upgrading method which can be executed by a server or a chip configured in the server.
  • the method includes: generating a first upgrade task, the first upgrade task corresponds to a first execution condition, wherein the first execution condition includes the state of the terminal device, and the state of the terminal device includes that the terminal device does not exist creature; send the first upgrade quest.
  • the method may further include: configuring the first execution condition according to the first upgrade task; and sending the first execution condition.
  • the first upgrade task includes a first upgrade subtask, and the first upgrade subtask corresponds to the upgrade of biosafety-related components.
  • a communication device including a processing unit and a transceiver unit, so as to execute the method in the above first aspect or any possible implementation of the first aspect, or to execute the above second aspect or the method of the second aspect A method in any possible implementation.
  • a communication device including at least one processor and a transceiver, and the at least one processor is used to call at least one computer program stored in a memory to implement the above-mentioned first aspect or any possibility of the first aspect.
  • the transceiver is used to perform functions related to sending and receiving.
  • the transceiver includes a receiver and a transmitter, or is a transmitter and a receiver.
  • the communication device further includes a memory, the memory is coupled to a processor included in the communication device, and the processor can be used to execute instructions in the memory, so that the device Execute the method in the above first aspect or any possible implementation manner of the first aspect, or execute the method in the above second aspect or any possible implementation manner of the second aspect.
  • the device may further include an interface circuit, and the processing module is coupled to the interface circuit.
  • the communication device is a communication chip
  • the transceiver may be an input and output circuit or port of the communication chip.
  • a terminal device which is characterized by comprising a communication device configured to execute the method in the first aspect or any possible implementation manner of the first aspect.
  • a server which is characterized by comprising a communication device configured to execute the method in the second aspect or any possible implementation manner of the second aspect.
  • a communication system which is characterized in that it includes a communication device for performing the method in the first aspect or any possible implementation of the first aspect, and/or for performing the method in the second aspect Or the communication device of the method in any possible implementation manner of the second aspect.
  • a chip in an eighth aspect, there is provided a chip, the chip includes one or more processors and an interface circuit, and the chip is used to execute the method in the above-mentioned first aspect or any possible implementation of the first aspect, or to execute The above second aspect or the method in any possible implementation manner of the second aspect.
  • a computer-readable storage medium stores computer programs or instructions.
  • the communication device executes the above-mentioned first aspect or the first aspect.
  • the method in any possible implementation manner of the first aspect, or causing the communication device to execute the above second aspect or the method in any possible implementation manner of the second aspect.
  • a computer program product in a tenth aspect, includes a computer program or an instruction, and when the computer program or instruction is executed by a communication device, the communication device performs the first aspect or any possibility of the first aspect.
  • FIG. 1 is a schematic diagram of an upgrade system architecture provided by an embodiment of the present application
  • FIG. 2 is a schematic diagram of a terminal device provided by an embodiment of the present application.
  • FIG. 3 is a schematic diagram of another upgrade system architecture provided by an embodiment of the present application.
  • FIG. 4 is a schematic diagram of another upgrade system architecture provided by an embodiment of the present application.
  • FIG. 5 is a schematic flowchart corresponding to an upgrade method provided in the embodiment of the present application.
  • FIG. 6 is a schematic diagram of a communication device provided by an embodiment of the present application.
  • FIG. 7 is a schematic diagram of another communication device provided by an embodiment of the present application.
  • FIG. 8 is a schematic diagram of a chip structure provided by an embodiment of the present application.
  • first and second use ordinal numerals such as "first" and “second” to distinguish multiple objects, and are not used to limit the order, timing, priority or importance of multiple objects degree.
  • first information and the second information are only for distinguishing different information, and do not indicate the difference in content, priority, sending order, or degree of importance of the two kinds of information.
  • system architecture and business scenarios of the embodiments of the present application are firstly described below. It should be noted that the system architecture and business scenarios described in this application are for the purpose of more clearly explaining the technical solution of this application, and do not constitute a limitation on the technical solution provided by this application. The evolution of technology and the emergence of new business scenarios, the technical solution provided by this application is also applicable to similar technical problems.
  • Fig. 1 shows a schematic diagram of an upgrade system architecture applicable to the embodiment of the present application.
  • the upgraded system architecture may include a server, a wireless communication link and a terminal device.
  • the server mentioned in the embodiment of the present application refers to a device that can serve as a manufacturer or an OEM to provide OTA upgrades for terminal devices.
  • the server may be deployed on an electronic device with a wireless communication function and a storage function, and may also be deployed on a virtual machine or a container on a cloud, where the cloud may be a cluster composed of multiple electronic devices.
  • the wireless communication link described in the embodiments of the present application may be a link implemented through a communication network
  • the communication network may be a local area network, or a wide area network switched through a relay (relay) device, or include LAN and WAN.
  • the communication network can be a wifi hotspot network, a wifi point-to-point (point to point, P2P) network, a bluetooth network, a zigbee network, a near field communication (near field communication, NFC) network or a future possible general-purpose short-distance communication network, etc.
  • the communication network may be a third-generation mobile communication technology (3rd-generation wireless telephone technology, 3G) network, a fourth-generation mobile communication technology (the 4th generation mobile communication technology, 4G) network, 5th-generation mobile communication technology (5th-generation mobile communication technology, 5G) network, future evolution of mobile communication technology network (including but not limited to 6G, etc.), public land mobile network (public land mobile network, PLMN) or the Internet (Internet) etc., which are not limited in this embodiment of the present application.
  • 3G third-generation mobile communication technology
  • 4G fourth-generation mobile communication technology
  • 5th-generation mobile communication technology 5th-generation mobile communication technology
  • future evolution of mobile communication technology network including but not limited to 6G, etc.
  • public land mobile network public land mobile network, PLMN
  • Internet Internet
  • the terminal device mentioned in the embodiment of the present application refers to a device that supports the OTA upgrade service provided by the server.
  • the terminal device may be a vehicle or a smart device.
  • the means of transportation may include motor vehicles (such as unmanned vehicles, smart vehicles, electric vehicles, digital vehicles, etc.), drones, rail cars, traffic lights, and the like.
  • Fig. 2 shows the schematic diagram of the terminal device that the embodiment of the present application provides, as shown in Fig. 2, this terminal device comprises OTA management module (can be referred to as OTA Master module) and a plurality of OTA upgrading modules (can be called OTA Slave module ).
  • the OTA management module is used for receiving the upgrade package from the server, and sending the upgrade package of the upgrade object that the OTA upgrade module is responsible for to the OTA upgrade module.
  • the OTA upgrade module is used to install the upgrade package, and feed back the installation result of the upgrade package to the OTA management module.
  • this embodiment of the present application does not limit the specific form of the upgrade object. Taking a smart car as an example, the upgrade object may be a component in the vehicle or software in the component.
  • FIG. 3 shows a schematic diagram of another upgrade system architecture applicable to the embodiment of the present application.
  • the upgrade system architecture may include an OTA server, a wireless communication link, and a vehicle.
  • the vehicle includes at least a gateway (Gateway, GW), a software and hardware integration platform for supporting intelligent driving, that is, a vehicle computing platform (vehicle computing platform, VPC), a human-machine interaction system (human-machine interaction, HMI), remote Information control unit (telematics control unit, TCU), automobile box (telematics box, Tbox), electronic control unit ECU and other components.
  • the GW is the core component of the vehicle's electronic and electrical architecture.
  • VPC can be used to realize the automatic driving function of the vehicle.
  • HMI can be used for human-computer interaction information display.
  • TCU and Tbox are mainly used to communicate with external devices of the vehicle (such as mobile phones, background systems, etc.).
  • ECU is a microcomputer controller dedicated to vehicles. ECU includes but not limited to vehicle integrated/integration unit (VIU), cockpit domain controller (CDC) and vehicle domain controller (VDC).
  • the components to be upgraded include but are not limited to the above-mentioned GW, VPC, HMI, TCU, Tbox and ECU, and the components to be upgraded may include one or more of the above-mentioned GW, VPC, HMI, TCU, Tbox and ECU .
  • the OTA upgrade of the whole vehicle usually involves the upgrade of multiple components in the vehicle.
  • the OTA management module located in the smart car can run on the GW, Tbox and other components of the vehicle, coordinate the OTA upgrade modules of other components, and jointly complete the vehicle upgrade.
  • Fig. 4 shows a schematic diagram of another upgrade system architecture applicable to the embodiment of the present application. As shown in Figure 4, the OTA management module is deployed in the GW of the vehicle, and the OTA upgrade module is deployed in other parts of the vehicle. Among them, the OTA management module can coordinate the OTA upgrade module deployed by each component to jointly complete the OTA upgrade of the whole vehicle.
  • the upgrade task includes an upgrade task corresponding to the power supply of the smart car
  • other electronic control unit ECUs in the smart car will be powered off, and the ECU will be responsible for Temporary failure of interior components.
  • the ECU responsible for the airbag is powered off, which will cause the airbag to temporarily fail. At this time, if there is a driver or a passenger in the smart car and a collision occurs, the temporary failure of the airbag will cause personal safety injuries to the driver or the passenger in the car.
  • this embodiment of the application provides an upgrade method.
  • the terminal device receives a first upgrade task, and the first upgrade task corresponds to a first execution condition; based on the first execution condition, a first state of the terminal device is acquired, wherein the first state includes a first biometric identification result; A first operation corresponding to the first state is performed.
  • different first operations can be performed based on different first biometric identification results, thereby realizing that the upgrade task can be performed while ensuring safety.
  • FIG. 5 is a schematic flowchart corresponding to an upgrade method provided in an embodiment of the present application. Further, the method can be implemented based on the upgrade system architecture shown in FIG. 1 to FIG. 4 .
  • the method can include:
  • the server generates a first upgrade task.
  • the first upgrade task corresponds to a first execution condition
  • the first execution condition includes the state of the terminal device
  • the state of the terminal device includes that there is no creature in the terminal device.
  • the server can create an upgrade task and manage the upgrade task, including deploying the upgrade task, terminating the upgrade task, suspending the upgrade task, rerunning the upgrade task, or determining the priority among multiple upgrade tasks.
  • the server generates an upgrade task, which can be understood as creating an upgrade task for the server.
  • An upgrade task can include one or more upgrade packages.
  • the upgrade task is to agree on an upgrade process for one or a batch of cars to be upgraded.
  • the upgrade task generally stipulates which in-vehicle devices in this car or a batch of cars need to be upgraded, what kind of notification needs to be sent to the user before the upgrade, what content to remind the user, and the upgrade package used for the upgrade, etc.
  • the on-vehicle device may include HMI, battery management system (battery management system, BMS), infotainment system, on-vehicle power supply module, etc., which is not limited in this embodiment of the present application.
  • upgrade task 1 is used to upgrade the BMS
  • upgrade task 2 is used to improve the memory function of the cockpit seat to provide a better user experience.
  • upgrade task 3 corresponds to firmware upgrade (firmware over the air, FOTA)
  • upgrade task 4 corresponds to software upgrade (software over the air, SOTA).
  • FOTA upgrade involves hardware, such as downloading a complete The solid image of the firmware, or patch the existing firmware, update the flash memory; SOTA is biased towards application software upgrades, such as updates displayed on the HMI interface on smart cars.
  • the first upgrade task is an example of an upgrade task.
  • the first upgrade task may also include an upgrade package corresponding to the first upgrade task.
  • generating the first upgrade task by the server may also include generating a corresponding upgrade package.
  • the first upgrade task corresponds to the first execution condition, which may include: execution of the first upgrade task needs to meet the first execution condition. That is, the first upgrade task will be executed only when the first execution condition is met.
  • the first execution condition includes the state of the terminal device.
  • the state of the terminal device includes that there is no creature in the terminal device.
  • the first upgrade task will be executed only when there is no creature in the terminal device corresponding to the first upgrade task.
  • the status of the terminal device may also include one or more of the following items: the travel speed of the terminal device is lower than a defined or configured first threshold (for example, the travel speed of the terminal device is zero), the power of the terminal device is not lower than the defined or configured second threshold, the vehicle gear of the terminal device is in P gear, and the area where the terminal device is located is safe.
  • the state of the terminal device may include an attribute of the terminal device.
  • the first execution condition includes the attribute of the terminal device
  • the first upgrade task will be executed only when the attribute of the terminal device corresponding to the first upgrade task satisfies a preset condition.
  • the state of the terminal device contains a living being.
  • the first upgrade task will be executed only when the biological state of the terminal device meets a preset condition.
  • the state of the terminal device may also include one or more of the following items: driving speed, battery power, vehicle gear, and location. It should be understood that the preset conditions corresponding to different terminal device attributes are different.
  • the preset condition may be defined by the protocol, or pre-configured by the server to the terminal device, or realized by other means, which is not specifically limited.
  • the creatures existing in the terminal device may include one or more of the following: drivers, occupants, and pets.
  • the first upgrade task may include multiple upgrade subtasks.
  • the server can classify the specific tasks contained in an upgrade task according to the upgrade components corresponding to the upgrade task, for example, the upgrade task of battery software in the upgrade task is regarded as a subtask, and the corresponding tasks included in the upgrade task
  • the upgrade task of the brake control software is another subtask; for another example, the server can classify the multiple subtasks included in an upgrade task according to the functions realized by the upgrade task, such as the upgrade of the automatic driving perception function in the upgrade task
  • the task is regarded as a subtask, and the task corresponding to the automatic driving planning function in the upgrade task is regarded as another subtask.
  • the server may also divide specific tasks included in the first upgrade task into different upgrade subtasks according to other rules.
  • the first upgrade task includes a first upgrade subtask, and the first upgrade subtask corresponds to the upgrade of biosafety-related components.
  • the biosafety-related component is included in the terminal device, for example, the biosafety-related component is a component in a smart car.
  • the biosafety-related components can be understood as components that directly or indirectly affect biosafety.
  • the biosafety-related components may include one or more of the following: systems or components used to protect the safety of drivers or passengers in the vehicle (such as airbag systems or components), power supply systems or components in the vehicle.
  • the airbag system or component can protect the safety of the driver or occupant in the vehicle, so the airbag system or component can be considered as a component that has a direct impact on biological safety ; and the power supply system or parts in the car will affect the power supply to the ECU in the car. For example, when the power system or parts fail, it will cause other ECUs in the car to be unusable due to power-off. Therefore, the power system or parts can be considered as Components that have an indirect impact on biosafety.
  • the first upgrade subtask may correspond to FOTA or SOTA, which is not specifically limited in this embodiment of the present application.
  • the first upgrade task may include other upgrade subtasks besides the first upgrade subtask, for example, the first upgrade subtask corresponds to the upgrade of the vehicle power supply module, and other upgrade subtasks correspond to the smart car
  • the update displayed on the HMI interface as another possible implementation, the first upgrade task may only include the first upgrade subtask or the first upgrade task is an upgrade task corresponding to the upgrade of biosafety-related components. It should be understood that in this embodiment of the present application, based on the specific upgrade content included in the first upgrade task, the first upgrade task may correspond to one or more different execution conditions, and these one or more different execution conditions can be understood as including in the first execution condition.
  • the server sends a first upgrade task to the OTA management module.
  • the OTA management module receives the first upgrade task.
  • the first upgrade task includes an upgrade package.
  • the upgrade method described in the embodiment of the present application may further include step S503 and step S504, and this step may be necessary for some specific scenarios. details as follows:
  • the server configures a first execution condition.
  • the server configures the first execution condition corresponding to the first upgrade task according to the content of the first upgrade task. If the server identifies that the first upgrade task includes the first upgrade subtask, then it is determined that the first execution condition includes the state of the terminal device, and the state of the terminal device includes that there is no creature in the terminal device. Wherein, for the state of the terminal device, reference may be made to the related description in step S501, which will not be repeated here.
  • the server sends a first execution condition.
  • the OTA management module receives the first execution condition.
  • the server may send the first upgrade task and the first execution condition in the same signaling, or may send the first upgrade task and the first execution condition separately through different signaling.
  • the OTA management module acquires the first state of the terminal device according to the first execution condition corresponding to the first upgrade task.
  • the first status includes a first biometric identification result.
  • the OTA management module may determine a first execution condition corresponding to the first upgrade task, where the first execution condition includes the state of the terminal device. Based on this, the OTA management module needs to obtain the first state of the terminal device before performing the first upgrade task. For example, if the state of the terminal device includes that there is no living creature in the terminal device, the OTA management module needs to obtain the first state of the terminal device before performing the first upgrade task, the first state contains the first biometric identification result, The first biometric identification result includes that there is a living creature in the terminal device, or that there is no living creature in the terminal device.
  • the state of the terminal device includes the attribute of the terminal device
  • the OTA management module can obtain the first state corresponding to the attribute in a similar manner .
  • the OTA management module needs to obtain the first state of the terminal device before performing the first upgrade task, the first state contains the first biometric result, and the first biometric result Including the presence of living beings in the terminal device, or the absence of living beings in the terminal device.
  • the OTA management module may obtain the first biometric identification result through the sensor of the terminal device.
  • the OTA management module processes the data from the sensor to obtain the first biometric identification result; for another example, the data from the sensor can directly identify the first biometric identification result, and based on this, the OTA management module can directly obtain the first biometric identification result. recognition result.
  • the OTA management module may also obtain the first biometric identification result in other ways, which are not limited in this embodiment of the present application.
  • the above sensors include one or more of the following: cameras, pressure sensors, millimeter wave radar sensors, lidar sensors, or other types of sensors, and the sensors can be installed in the terminal equipment or It can be installed outside the terminal device, and the embodiment of the present application does not specifically limit the specific form and installation position of the sensor.
  • the first state also includes The first driving speed result, the first driving speed result includes that the driving speed of the terminal device is lower than the first threshold, or the driving speed of the terminal device is not higher than the first threshold; for another example, if the status of the terminal device also includes If the power level of the terminal device is not lower than the second threshold, then correspondingly, the first state also includes a first power level result, and the first power level result includes that the power level of the terminal device is lower than the second threshold, or the power level of the terminal device Not lower than the second threshold; for another example, if the state in the terminal device also includes the vehicle gear of the terminal device in the P gear, then correspondingly, the first state also includes the result of the first gear, and the first gear
  • the bit result includes whether the gear position of the terminal device is in the P position or not in the P position; for another example, if
  • the state of the terminal device is realized by means of attributes, for example, the state of the terminal device also includes one or more of the following: driving speed, power, vehicle gear, location, the OTA management module can use the above The first state corresponding to the attribute is obtained in a similar manner.
  • the OTA management module will perform different first operations. For clarity of description, different operations of the OTA management module are specifically described below for different situations of the first biometric identification result.
  • Case 1 The first biometric identification result is that there is no living creature in the terminal device.
  • the OTA management module performs a first operation corresponding to the first state, which may include: the OTA management module performs a first upgrade task.
  • the OTA management module may execute the first upgrade task. For example, the OTA management module determines that the driver and the occupant are not included in the vehicle through the camera in the vehicle, or determines that the driver, occupant and pet are not included in the vehicle, and then can perform the first upgrade task.
  • the execution of the first upgrade task may cause temporary failure of the interior components, such as the temporary failure of the airbag system. Therefore, in this way, only when it is determined that there is no living thing in the terminal device, the first The upgrade task is started to be executed. Based on this, the upgrade package included in the first upgrade task can be installed in an environment that ensures safety (especially personal safety), thereby realizing a safe OTA upgrade.
  • the OTA management module performing the first upgrade task may include: the OTA management module may distribute the upgrade package included in the first upgrade task to the corresponding OTA upgrade module, and then the OTA upgrade module is responsible for the upgrade package.
  • the installation may also include: the OTA management module is directly responsible for the specific installation of the upgrade package.
  • the first upgrade task includes an upgrade package corresponding to the upgrade of the vehicle power supply module, and the OTA management module can send the upgrade package to an OTA upgrade module (such as a body control module, BCM) responsible for the upgrade of the power supply module.
  • BCM body control module
  • the module is responsible for the installation of the upgrade package, or the OTA management module can also directly install the upgrade package corresponding to the upgrade of the vehicle power supply module.
  • the OTA management module can also use one or more of the following methods to ensure that the OTA upgrade task is always executed in an environment that ensures safety (especially personal safety).
  • the OTA management module may ensure that the OTA upgrade is safe through one or more of the following methods during the execution of the first upgrade task.
  • Mode 1 Control the door lock of the terminal device to be in a closed state and/or output a second prompt.
  • the terminal device here is the terminal device corresponding to the first upgrade task.
  • the OTA management module may control the door lock of the terminal device to be in a closed state. It should be understood that in this manner, no person outside the terminal device is allowed to enter into the terminal device. Further, in an optional design, the OTA management module may control the door lock of the terminal device to be in a closed state for a period of time. For example, when the first upgrade task is completed, the OTA management module can no longer control the door lock of the terminal device to be closed. At this time, people outside the terminal device can enter the terminal device, for example, by opening the car lock. within the terminal device.
  • the OTA management module controls the door lock of the terminal device to be in the closed state, which can be realized in the following manner: a possible implementation method is that the OTA management module directly controls the door lock of the terminal device to be in the closed state; Another possible implementation manner is that the OTA management module sends indication information A to other components in the terminal device, where the indication information A is used to indicate that the door lock of the terminal device is in a closed state. After the other components receive the instruction information A, the door lock of the control terminal device is in the closed state. Other components here may include other components (such as BCM) capable of controlling the door lock, for example. In addition, the OTA management module can also control the door lock of the terminal device to be in the closed state through other methods, which is not specifically limited.
  • the second prompt may be prompted that during the execution of the first upgrade task, personnel outside the terminal device are not allowed to return to the terminal device.
  • the second prompt is used to indicate that no creature should exist in the terminal device.
  • the second prompt is used to indicate one or two of the following: the first upgrade task is being executed, and the first execution condition. It should be understood that since the first upgrade task can only be done if the first execution condition is met, the second prompt can also be used to indicate to the terminal device by indicating that the first upgrade task is being executed or by indicating the first execution condition There should be no living things inside. After obtaining the second prompt, the user of the terminal device knows that he cannot enter into the terminal device.
  • the user of the terminal device can be understood as the owner of the terminal device, such as a car owner, or can also be understood as the driver and/or passenger who leaves the terminal device, or can also be understood as other Users who may have access to the terminal equipment.
  • the second prompt may also include time information T, which is used to indicate that within a time range satisfying the time information T, no creature should exist in the terminal device.
  • time information T is the time required from the start of installing the first upgrade task to the completion of the installation of the first upgrade task, such as 2 hours.
  • T is the absolute time, which can correspond to the time when the first upgrade task is installed, such as 2:00 p.m., at this time, after the user of the terminal device gets the second prompt, it can be determined that before 2:00 p.m. Creatures should exist.
  • outputting the second prompt may include: the OTA management module directly outputs the second prompt to the user of the terminal device, for example, directly outputs the second prompt to the driver; or, The OTA management module outputs the second prompt to the user of the terminal device through the network device.
  • the second prompt can be output through one or more of the following: a mobile phone, a wearable device, a tablet computer, and a notebook computer.
  • the second prompt can also be highlighted in a prominent way, for example, on the prompt interface (such as mobile phones, wearable devices, tablet computers, laptops), the font color of the second prompt is consistent with other upgrades
  • the font color of the prompt corresponding to the task is different, and/or the font size of the second prompt is different from the font size of the prompt corresponding to other upgrade tasks.
  • the other upgrade tasks may be upgrade tasks other than the first upgrade task, or upgrade tasks corresponding to other execution conditions different from the first execution condition.
  • Adopting mode 1 by closing the car lock and/or outputting prompts, it is possible to prevent personnel outside the terminal device from entering the terminal device during the execution of the first upgrade task, thereby ensuring that the first upgrade task is executed.
  • the OTA upgrade is also performed in an environment that ensures safety (especially personal safety).
  • the second prompt includes the time information T, the user of the terminal device can use the terminal device in time after the first upgrade task is executed.
  • Mode 2 Obtain the door lock state of the terminal device and/or obtain the second state of the terminal device, and suspend or terminate the execution of the first upgrade task.
  • the door lock status includes that the door lock is unlocked.
  • the second state includes a second biometric identification result, and the second biometric identification result is that there is a living creature in the terminal device.
  • the OTA management module may determine whether personnel outside the terminal device try to enter the terminal device during the execution of the first upgrade task by acquiring the door lock status of the terminal device. For example, if the obtained door lock state includes that the door lock is opened, the OTA management module can judge that people outside the terminal device are trying to enter or have entered the terminal device, and then the OTA management module can suspend or terminate the first upgrade task execution.
  • the OTA management module may determine whether any person outside the terminal device enters the terminal device during the execution of the first upgrade task by acquiring the second state of the terminal device. If the acquired second biometric result is that biomes exist in the terminal device, the OTA management module may suspend or terminate the execution of the first upgrade task.
  • the OTA management module to obtain the second state of the terminal device refer to the manner in which the OTA management module obtains the first state in step S505.
  • the OTA management module may obtain the second biometric identification result through the sensor of the terminal device, which will not be repeated here.
  • the OTA management module can also suspend or terminate the execution of the first upgrade task by obtaining the door lock state of the terminal device and the second state of the terminal device, wherein the door lock state and the second state can refer to the above description, I won't go into details here.
  • the terminal device in mode 2, after the OTA management module suspends or terminates the execution of the first upgrade task, the terminal device can return to the state before the execution of the first upgrade task, so as to ensure that the Normal use of terminal equipment.
  • the execution of the first upgrade task may be suspended or terminated.
  • the OTA upgrade is also performed under the environment of ensuring safety (especially personal safety), that is, it is guaranteed that the OTA upgrade is always performed under the environment of ensuring safety (especially personal safety).
  • the use of terminal equipment under special circumstances can also be realized. For example, in some special cases, people outside the terminal device need to re-enter the terminal device, such as returning to the terminal device to take out important items or materials, and for example, in an emergency situation, the terminal device needs to be reused. At this time, through method 2 , It can also ensure the normal use of terminal equipment in these scenarios.
  • Mode 3 Obtain the door lock state of the terminal device and/or obtain the second state of the terminal device, determine that the first upgrade subtask included in the first upgrade task has been completed, and continue to execute the first upgrade task.
  • the door lock state and the second state can refer to the specific description in the above-mentioned mode 2, and the first upgrade subtask can refer to the relevant description in step S501, which will not be repeated here.
  • the OTA management module may determine, according to the door lock state and/or the second state of the terminal device, that persons outside the terminal device are trying to enter or have entered the terminal device during the execution of the first upgrade task. But at this time, if the upgrade corresponding to the biosafety-related components has been completed, the OTA management module may continue to perform the first upgrade task.
  • the first upgrade task includes an upgrade task (the first upgrade subtask) corresponding to the upgrade of the vehicle power supply module and an upgrade task (other upgrade tasks) corresponding to the update of the HMI interface display on the smart car.
  • the OTA management module may not suspend or terminate the first upgrade task, but continue to execute the upgrade task corresponding to the display update of the HMI interface on the smart car. It should be understood that if the first upgrade subtask is not completed, the OTA management module may suspend or terminate the execution of the first upgrade task.
  • the security of the OTA upgrade can also be realized through a combination of the foregoing manners 1 to 3.
  • the OTA upgrade is also performed in an environment that ensures safety (especially personal safety).
  • the OTA management module can use method 1 to prevent personnel outside the terminal device from entering the terminal device during the execution of the first upgrade task, but if during the execution of the first upgrade task, personnel outside the terminal device enter In the terminal device, the OTA management module can also suspend or terminate the execution of the first upgrade task in combination with method 2, which can not only ensure that the OTA upgrade is always executed in an environment that ensures safety (especially personal safety), but also Realize the normal use of the terminal device without completing the first upgrade task; or the OTA management module can also combine mode 3 to continue to execute other tasks included in the first upgrade task when it is determined that the first upgrade subtask has been completed.
  • the upgrade task can not only ensure that the OTA upgrade is always performed in an environment that guarantees safety (especially to ensure personal safety), but also can upgrade the execution efficiency of the task.
  • the OTA management module executes the first operation corresponding to the first state, which may include the following: the OTA management module does not execute the first upgrade task and/or outputs a first prompt, and the first prompt is used to indicate that the first upgrade task An upgrade task cannot be performed.
  • the terminal device also includes creatures, it means that the first execution condition corresponding to the first upgrade task is not satisfied, and at this time, not executing the first upgrade task can ensure the safety of the creatures in the terminal device.
  • the user of the terminal device can also learn about the execution status of the first upgrade task.
  • the first prompt may also be used to indicate a reason why the first upgrade task cannot be executed and/or a condition for re-executing the first upgrade task.
  • the first prompt may also be used to indicate that the first upgrade task needs to be performed under the condition that no creature exists in the terminal device.
  • the information used to indicate the reason why the first upgrade task cannot be executed and/or the conditions for re-executing the first upgrade task can be realized through the first prompt, or through other methods Realization, for example, through the third prompt, which is not limited in this embodiment of the present application.
  • outputting the first prompt may include: the OTA management module directly outputs the first prompt to the user of the terminal device, for example, directly outputs the first prompt to the driver; or, The OTA management module outputs the first prompt to the user of the terminal device through the network device.
  • the first prompt may be output through one or more of the following: a mobile phone, a wearable device, a tablet computer, a laptop computer, and an HMI interface.
  • the first prompt or the third prompt can also be prominently displayed in a prominent manner, for example, on a prompt interface (such as an HMI interface, a mobile phone, a wearable device, a tablet computer, a laptop computer), the first prompt
  • a prompt interface such as an HMI interface, a mobile phone, a wearable device, a tablet computer, a laptop computer
  • the first prompt The font color of the prompt or the third prompt is different from the font color of the prompts corresponding to other upgrade tasks, and/or the font size of the first prompt or the third prompt is different from the font size of the prompts corresponding to other upgrade tasks.
  • the other escalation task may be an escalation task other than the first escalation task, or an escalation task corresponding to another execution condition different from the first execution condition.
  • step S505 the upgrade method described in the embodiment of the present application may further include step S507, which may be necessary for some specific scenarios.
  • Step S507 is specifically as follows:
  • the fourth hint is used to indicate the first execution condition.
  • outputting the fourth prompt may include: the OTA management module directly outputs the first prompt to the user of the terminal device, for example, directly outputs the fourth prompt to the driver; or, The OTA management module outputs the fourth prompt to the user of the terminal device through the network device.
  • the fourth prompt may be output through one or more of the following: a mobile phone, a wearable device, a tablet computer, a notebook computer, and an HMI interface.
  • the fourth prompt can also be highlighted in a prominent way, for example, on the prompt interface (such as HMI interface, mobile phone, wearable device, tablet computer, laptop computer), the font color of the fourth prompt.
  • the font color of the prompts corresponding to other upgrade tasks is different, and/or the font size of the fourth prompt is different from the font size of the prompts corresponding to other upgrade tasks.
  • the other upgrade tasks may be upgrade tasks other than the first upgrade task, or upgrade tasks corresponding to other execution conditions different from the first execution condition.
  • the OTA management module may also determine, according to the user settings of the terminal device, whether to start acquiring the first state of the terminal device according to the confirmation information B in response to the fourth prompt.
  • whether the upgrade task needs to be confirmed by the user of the terminal device before execution may be set in advance by the user of the terminal device.
  • the driver is used as an example of the user of the terminal device.
  • the driver can set in advance whether to perform the upgrade task according to the information B. For example, the driver can turn on the settings corresponding to the confirmation information B or the settings corresponding to the upgrade task on the mobile phone.
  • the OTA management module before the OTA management module receives the first upgrade task and executes actions associated with the first upgrade task, it needs to obtain confirmation information from the driver (corresponding to confirmation information B).
  • the operations associated with the first upgrade task here may include acquiring the first state of the terminal device and/or executing the first upgrade task.
  • the OTA management module can obtain the first state of the terminal device only after the driver's confirmation (for example, through a mobile phone application (application, APP) to realize the confirmation).
  • the driver can also turn off the settings corresponding to the information B or the settings corresponding to the upgrade task on the mobile phone.
  • the OTA management module does not need to obtain confirmation information (corresponding to confirmation information B) from the driver before receiving the first upgrade task and performing actions associated with the first upgrade task.
  • the OTA management module may start to perform actions associated with the first upgrade task, for example, acquire the first state of the terminal device.
  • the flexibility of OTA upgrade can be realized.
  • the user of the terminal device can choose to start again in a suitable scenario. Executing the first upgrade task can not only ensure the normal use of the terminal equipment, but also ensure that the OTA upgrade is performed in a safe environment.
  • the user of the terminal device may not confirm the received fourth prompt.
  • the first upgrade task will not be executed temporarily;
  • the user of the terminal device may confirm the received fourth prompt, and at this time the OTA management module may start to acquire the first state of the terminal device.
  • step S505 the upgrade method described in the embodiment of the present application may further include step S508, which may be necessary for some specific scenarios.
  • Step S508 is specifically as follows:
  • the OTA management module receives the first execution condition from the server, and determines the first execution condition.
  • the OTA management module determines the first execution condition according to the mapping relationship between the upgrade task and the execution condition.
  • the mapping relationship can be configured or defined.
  • the OTA server can configure or define the mapping relationship and send it to the OTA management module in advance.
  • the OTA management module receives the first upgrade task, it can , to determine a first execution condition corresponding to the first upgrade task.
  • the OTA management module may determine the first execution condition according to the content included in the first upgrade task and in combination with the mapping relationship. In this manner, signaling overhead can be saved.
  • the first operation of a state can realize a safe OTA upgrade. That is to ensure that OTA upgrades can be performed in an environment that ensures safety (especially personal safety).
  • Fig. 6 is a schematic block diagram of a communication device provided by an embodiment of the present application.
  • the communication device may include at least one processor and a transceiver, so as to execute the methods in any possible implementation manners above.
  • at least one processor may be used to perform internal processing of the device, for example, according to the first execution condition, obtain the first state of the terminal device; for example, output a first prompt, and the first prompt is used to indicate that the first An upgrade task cannot be executed; another example, execute the first upgrade task; another example, generate the first upgrade task, and so on.
  • Transceivers are used to perform functions related to transmission and reception, such as sending information to or receiving information from other devices.
  • the communication device may further include at least one memory, as shown by a dashed box in FIG. 7 .
  • Fig. 7 is a schematic block diagram of a communication device provided by an embodiment of the present application.
  • the at least one memory is coupled with the at least one processor and the transceiver included in the communication device. It can be understood that the at least one memory, the at least one processor, and the transceiver communicate with each other through an internal connection path.
  • the at least one processor may be configured to execute instructions in the at least one memory, so that the apparatus executes the method in any possible implementation manner in the embodiments of the present application.
  • the communications device includes a processing unit and a transceiver unit configured to execute the method in any possible implementation manner in the embodiments of the present application.
  • the above-mentioned communication device may be a device of a terminal device or an OTA management module, and the communication device may be used to execute any method performed by the above-mentioned terminal device or OTA management module, or the above-mentioned communication device A device that may be a server, then the communication device may be used to perform any method performed by the server above.
  • the communication device is a communication chip
  • the transceiver can be an input-output circuit or port of the communication chip.
  • the transceiver included in the communication device may be a transmitter and a receiver, or a transmitter and a receiver.
  • the communication device may correspond to the chip in the terminal device in any possible implementation of the embodiment of the present application, or may correspond to the OTA management module in any possible implementation of the embodiment of the present application chip in.
  • the embodiment of the present application also provides a terminal device, where the terminal device includes a communication device for executing the method in any possible implementation manner performed by the above OTA management module.
  • An embodiment of the present application also provides a server, where the server includes a communication device for executing the method in any possible implementation manner performed by the server above.
  • the embodiment of the present application also provides a communication system, the communication system includes a communication device for performing the method in any possible implementation manner performed by the above OTA management module, and is used for performing any of the methods performed by the server above.
  • a communication device for performing the method in any possible implementation manner performed by the above OTA management module, and is used for performing any of the methods performed by the server above.
  • One or more of the communication devices that may implement the method in the manner.
  • FIG. 8 shows a schematic structural diagram of a chip.
  • the chip includes one or more processors and an interface circuit, where the interface circuit is used to provide the one or more processors with information input and/or output for executing the method in any possible implementation manner above.
  • the chip may also include a bus. in:
  • the processor is an integrated circuit chip with signal processing capabilities.
  • the processor can be a field programmable gate array (field programmable gate array, FPGA), a general processor, a digital signal processor (digital signal processor, DSP), an application specific integrated circuit (application specific integrated circuit, ASIC) Or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, system on chip (SoC), central processor unit (CPU), or network processing
  • SoC system on chip
  • CPU central processor unit
  • a network processor network processor
  • NP network processor
  • MCU microcontroller
  • programmable logic device programmable logic device
  • PLD programmable logic device
  • a general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.
  • the steps of the method disclosed in connection with the embodiments of the present application may be directly implemented by a hardware decoding processor, or implemented by a combination of hardware and software modules in the decoding processor.
  • the software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register.
  • the storage medium is located in the memory, and the processor reads the information in the memory, and completes the steps of the above method in combination with its hardware.
  • the interface circuit can be used for sending or receiving data, instructions or information, and the processor can process the data, instructions or other information received by the interface circuit, and can send the processing completion information through the interface circuit.
  • the chip also includes a memory, which may be a volatile memory or a non-volatile memory, or may include both volatile and non-volatile memories.
  • the non-volatile memory can be read-only memory (read-only memory, ROM), programmable read-only memory (programmable ROM, PROM), erasable programmable read-only memory (erasable PROM, EPROM), electrically programmable Erases programmable read-only memory (electrically EPROM, EEPROM) or flash memory.
  • Volatile memory can be random access memory (RAM), which acts as external cache memory.
  • RAM random access memory
  • SRAM static random access memory
  • DRAM dynamic random access memory
  • DRAM synchronous dynamic random access memory
  • SDRAM double data rate synchronous dynamic random access memory
  • double data rate SDRAM double data rate SDRAM
  • DDR SDRAM enhanced synchronous dynamic random access memory
  • ESDRAM enhanced synchronous dynamic random access memory
  • serial link DRAM SLDRAM
  • direct memory bus random access memory direct rambus RAM, DR RAM
  • processors and the interface circuit can be realized through hardware design, software design, or a combination of software and hardware, which is not limited here.
  • memory of the systems and methods described herein is intended to include, but not be limited to, these and any other suitable types of memory.
  • the embodiment of the present application also provides a computer program product, the computer program product includes: computer program code, when the computer program code runs on the computer, the computer executes any possible implementation performed by the first node above The method in the manner, or execute the method in any possible implementation manner performed by the second node above.
  • the present application also provides a computer-readable medium, the computer-readable medium stores program codes, and when the program codes are run on a computer, the computer is made to execute the method in any one of the above possible implementation manners.
  • all or part of them may be implemented by software, hardware, firmware or any combination thereof.
  • software When implemented using software, it may be implemented in whole or in part in the form of a computer program product.
  • the computer program product includes one or more computer instructions. When the computer instructions are loaded and executed on the computer, the processes or functions according to the embodiments of the present application will be generated in whole or in part.
  • the computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices.
  • the computer instructions may be stored in or transmitted from one computer-readable storage medium to another computer-readable storage medium, for example, the computer instructions may be transmitted from a website, computer, server or data center Transmission to another website site, computer, server or data center by wired (such as coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (such as infrared, wireless, microwave, etc.).
  • the computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media.
  • the available medium may be a magnetic medium (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, a high-density digital video disc (digital video disc, DVD)), or a semiconductor medium (for example, a solid state disk (solid state disc, SSD)) etc.
  • a magnetic medium for example, a floppy disk, a hard disk, a magnetic tape
  • an optical medium for example, a high-density digital video disc (digital video disc, DVD)
  • a semiconductor medium for example, a solid state disk (solid state disc, SSD)
  • the disclosed systems, devices and methods may be implemented in other ways.
  • the device embodiments described above are only illustrative.
  • the division of the units is only a logical function division. In actual implementation, there may be other division methods.
  • multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented.
  • the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.
  • the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.
  • each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

Landscapes

  • Engineering & Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Biomedical Technology (AREA)
  • Computing Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Health & Medical Sciences (AREA)
  • Stored Programmes (AREA)
  • Telephone Function (AREA)

Abstract

本申请实施例提供一种OTA升级方法及装置，应用于车联网领域。具体应用中，服务器生成第一升级任务，该第一升级任务对应第一执行条件，该第一执行条件包含终端设备的状态，该状态包含在所述终端设备内不存在生物。服务器将该第一升级任务发送给终端设备。终端设备接收第一升级任务之后，根据该第一升级任务对应的第一执行条件，获取包含第一生物识别结果的第一状态，并基于不同的第一生物识别结果，执行对应所述第一状态的第一操作。采用该方式，可以实现OTA升级任务在保证安全的环境下被执行。

Description

一种空中下载(OTA)升级方法及装置 技术领域
本申请实施例涉及车联网技术领域，尤其涉及一种OTA升级方法及装置。
背景技术
随着社会的发展和科技的进步，智能汽车在智能驾驶和无人驾驶领域的应用也越来越广泛。智能汽车是一个复杂的系统，其中包含有几十个甚至上百个电子控制单元(electronic control unit，ECU)，智能汽车的各种复杂功能是依靠ECU之间的协作来实现的。
智能汽车的厂商(original equipment manufacturer，OEM)对该智能汽车的各种功能的维护和升级主要通过对与这些功能相关的ECU进行升级来实现。空中下载(over the air，OTA)技术可应用于升级车辆的相关硬件或软件，有利于厂商减少召回成本、快速响应需求、提升用户体验。但智能汽车在执行OTA升级任务时，原有的软件或硬件功能处于不可用的状态，进而带来安全问题。在执行OTA升级任务时，如何保证OTA升级任务在保证安全的环境下被执行，是本领域人员亟待解决的技术问题。
发明内容
本申请实施例公开了一种OTA升级方法及相应的装置，可以实现安全的OTA升级，即保证OTA升级能够在保证安全(特别是人身安全)的环境下被执行。
第一方面，提供了一种升级方法，该方法可以由终端设备或配置于终端设备中的芯片执行。该方法包括：接收第一升级任务，所述第一升级任务对应第一执行条件；根据所述第一执行条件，获取终端设备的第一状态，所述第一状态包含第一生物识别结果；执行对应所述第一状态的第一操作。
在一种可选的设计中，该方法也可以由终端设备包括的OTA管理模块或配置于OTA管理模块中的芯片执行。
通过该方案，在OTA任务执行之前，首先获取第一生物识别结果，并基于该第一生物识别结果，执行相应的第一操作。由于考虑了终端设备的第一状态，因此可以实现OTA升级能够在保证安全的环境下被执行。
结合第一方面，在第一方面的某些实现方式中，所述执行对应所述第一状态的第一操作，包括：所述第一生物识别结果为所述终端设备内存在生物，所述执行对应所述第一状态的第一操作为输出第一提示，所述第一提示用于指示所述第一升级任务无法执行；或者，所述第一生物识别结果为所述在终端设备内不存在生物，所述执行对应所述第一状态的第一操作为执行所述第一升级任务。
通过该方案，基于不同的生物识别结果，执行不同的操作，可以实现OTA升级能够在保证安全的环境下被执行。
在一种可选的设计中，所述第一提示可以通过如下一项或多项输出：手机、可穿戴设备、平板电脑、笔记本电脑、HMI界面。
在一种可选的设计中，所述第一提示通过显著的方式被突出显示。基于此，可以实现第一升级任务的执行情况容易被关注。
结合第一方面，在第一方面的某些实现方式中，所述执行对应所述第一状态的第一操作为执行所述第一升级任务，该方法还包括：控制所述终端设备的门锁处于关闭状态和/或输出第二提示，所述第二提示用于指示所述终端设备内不应存在生物。
通过该方案，可以避免在第一升级任务执行的过程中，终端设备外的人员进入到终端设备内，进而保证了在第一升级任务执行的过程中，OTA升级是在保证安全(特别是人身安全)的环境下被执行。
在一种可选的设计中，所述第二提示还可以包含时间信息T，用于指示在满足时间信息T的时间范围内，该终端设备内不应存在生物。基于此，可以实现在第一升级任务被执行完毕之后，该终端设备可以被及时使用。
在一种可选的设计中，所述第二提示可以通过如下一项或多项输出：手机、可穿戴设备、平板电脑、笔记本电脑。
在一种可选的设计中，所述第二提示通过显著的方式被突出显示。这样可以实现第一升级任务的执行条件容易被关注，进而保证第一升级任务能够在保证安全的环境下被执行。
结合第一方面，在第一方面的某些实现方式中，所述执行对应所述第一状态的第一操作为执行所述第一升级任务，该方法还包括：获取所述终端设备的门锁状态，所述终端设备的门锁状态包括所述门锁被打开；和/或，获取所述终端设备的第二状态，所述第二状态包含第二生物识别结果，所述第二生物识别结果为所述终端设备内存在生物；以及暂停或终止所述第一升级任务的执行。
通过该方案，第一升级任务执行的过程中，一旦发现终端设备外有人员尝试进入或者已经进入到终端设备内，第一升级任务可以被暂停执行或被终止执行，基于此，可以实现在第一升级任务执行的过程中，OTA升级是在保证安全(特别是人身安全)的环境下被执行。此外，通过该方案，还可以保证终端设备在特定场景下的正常使用。
结合第一方面，在第一方面的某些实现方式中，所述执行对应所述第一状态的第一操作为执行所述第一升级任务，该方法还包括：获取所述终端设备的门锁状态，所述终端设备的门锁状态包括所述门锁被打开；和/或，获取所述终端设备的第二状态，所述第二状态包含第二生物识别结果，所述第二生物识别结果为所述终端设备内存在生物；以及确定所述第一升级任务中包含的第一升级子任务已完成，所述第一升级子任务对应于生物安全相关的部件的升级；以及继续执行所述第一升级任务。
通过该方案，可以实现对应于生物安全相关的部件的升级任务在保证安全的环境下进行，同时也不影响其他升级任务的执行，保证了升级任务的执行效率。
结合第一方面，在第一方面的某些实现方式中，所述执行对应所述第一状态的第一操作为输出第一提示时，该方法还包括：输出第三提示，所述第三提示用于指示所述第一升级任务无法执行的原因和/或重新执行所述第一升级任务的条件。
通过该方案，可以获知第一升级任务被未执行的原因和/或可以被执行的条件，从而保证后续该OTA升级可以在安全的环境下被执行。
在一种可选的设计中，所述第三提示可以通过如下一项或多项输出：手机、可穿戴设备、平板电脑、笔记本电脑、HMI界面。
在一种可选的设计中，所述第三提示通过显著的方式被突出显示。基于此，可以实现 第一升级任务未被执行的原因或第一执行条件容易被关注。
结合第一方面，在第一方面的某些实现方式中，该方案还包括：输出第四提示，所述第四提示用于指示所述第一执行条件。
结合第一方面，在第一方面的某些实现方式中，该方案还包括：根据设置，确定是否根据响应于该第四提示的确认信息，获取所述第一状态。通过该方案，可以实现OTA升级的灵活性。当设置需要根据对应于第四信息的确认信息，执行升级任务相关联的操作时，终端设备的用户可以选择在合适的场景下再开始执行第一升级任务，这样既可以保证终端设备的正常使用，又可以保证OTA升级在安全的环境下被执行。
结合第一方面，在第一方面的某些实现方式中，该方案还包括：接收来自服务器的第一执行条件；或者，根据配置或定义的升级任务与执行条件之间的映射关系，确定所述第一执行条件。
通过该方案，可以确定第一执行条件，进而保证OTA升级在合适的执行环境下被执行，进而保证OTA升级的安全性。
结合第一方面，在第一方面的某些实现方式中，所述获取终端设备的第一状态，包括：通过所述终端设备内的传感器，获取所述第一状态，所述传感器包括以下一项或多项：摄像头，压力传感器，毫米波雷达传感器，激光雷达传感器。
第二方面，提供了一种升级方法，该方法可以由服务器或配置于服务器中的芯片执行。该方法包括：生成第一升级任务，所述第一升级任务对应第一执行条件，其中所述第一执行条件包含终端设备的状态，所述终端设备的状态包含在所述终端设备内不存在生物；发送所述第一升级任务。
结合第二方面，在第二方面的某些实现方式中，该方法还可以包括：根据所述第一升级任务，配置所述第一执行条件；发送所述第一执行条件。
在一种可选的设计中，所述第一升级任务包含第一升级子任务，所述第一升级子任务对应于生物安全相关的部件的升级。
第三方面，提供了一种通信装置，包括处理单元和收发单元，以执行上述第一方面或第一方面的任意可能的实现方式中的方法，或者以执行上述第二方面或第二方面的任意可能的实现方式中的方法。
第四方面，提供了一种通信装置，包括至少一个处理器和收发器，所述至少一个处理器用于调用至少一个存储器中存储的计算机程序，以执行上述第一方面或第一方面的任意可能的实现方式中的方法，或者以执行上述第二方面或第二方面的任意可能的实现方式中的方法。其中，收发器用于执行与发送和接收相关的功能。在一种可选的设计中，该收发器包括接收器和发射器，或者为发射机和接收机。
结合第四方面，在第四方面的某些实现方式中，该通信装置还包括存储器，该存储器与该通信装置包括的处理器耦合，该处理器可用于执行存储器中的指令，以使得该装置执行上述第一方面或第一方面的任意可能的实现方式中的方法，或者执行上述第二方面或第二方面的任意可能的实现方式中的方法。在一种可选的设计中，该装置还可以包括接口电路，处理模块与接口电路耦合。
结合第四方面，在第四方面的某些实现方式中，该通信装置为通信芯片，该收发器可 以为该通信芯片的输入输出电路或者端口。
第五方面，提供了一种终端设备，其特征在于，包括用于执行述第一方面或第一方面的任意可能的实现方式中的方法的通信装置。
第六方面，提供了一种服务器，其特征在于，包括用于执行述第二方面或第二方面的任意可能的实现方式中的方法的通信装置。
第七方面，提供了一种通信系统，其特征在于，包括用于执行述第一方面或第一方面的任意可能的实现方式中的方法的通信装置，和/或用于执行述第二方面或第二方面的任意可能的实现方式中的方法的通信装置。
第八方面，提供了一种芯片，该芯片包括一个或多个处理器和接口电路，该芯片用于执行上述第一方面或第一方面的任意可能的实现方式中的方法，或者用于执行上述第二方面或第二方面的任意可能的实现方式中的方法。
第九方面，提供了一种计算机可读存储介质，该计算机可读存储介质中存储有计算机程序或指令，当计算机程序或指令被通信装置执行时，使得该通信装置执行上述第一方面或第一方面的任意可能的实现方式中的方法，或者使得该通信装置执行上述第二方面或第二方面的任意可能的实现方式中的方法。
第十方面，提供了一种计算机程序产品，该计算机程序产品包括计算机程序或指令，当该计算机程序或指令被通信装置执行时，使得该通信装置执行上述第一方面或第一方面的任意可能的实现方式中的方法，或者使得该通信装置执行上述第二方面或第二方面的任意可能的实现方式中的方法。
附图说明
以下对本申请实施例用到的附图进行介绍。
图1是本申请实施例提供的一种升级系统架构的示意图；
图2是本申请实施例提供的终端设备的示意图；
图3是本申请实施例提供的另一种升级系统架构的示意图；
图4是本申请实施例提供的另一种升级系统架构的示意图；
图5是本申请实施例提供的一种升级方法所对应的流程示意图；
图6是本申请实施例提供的一种通信装置的示意图；
图7是本申请实施例提供的另一种通信装置的示意图；
图8是本申请实施例提供的一种芯片结构的示意图。
具体实施方式
下面结合本申请实施例中的附图，对本申请实施例中的技术方案进行详细描述。
需要说明的是，本申请实施例中，“示例性地”或者“例如”等词用于表示作例子、例证或说明。本申请中被描述为“示例性地”或者“例如”的任何实施例或设计方案不应被解释为比其他实施例或设计方案更优选或更具优势。确切而言，使用“示例性地”或者“例如”等词旨在以具体方式呈现相关概念。
本申请中实施例提到的“和/或”用来描述关联对象的关联关系，表示可以存在三种 关系，例如，A和/或B，可以表示：单独存在A、同时存在A和B、单独存在B这三种情况，其中A、B可以是单数或者复数。字符“/”一般表示前后关联对象是一种“或”的关系。
此外，除非有相反的说明，本申请实施例使用“第一”、“第二”等序数词是用于对多个对象进行区分，不用于限定多个对象的顺序、时序、优先级或者重要程度。例如，第一信息和第二信息，只是为了区分不同的信息，而并不是表示这两种信息的内容、优先级、发送顺序或者重要程度等的不同。
下面先对本申请实施例的系统架构和业务场景进行描述。需要说明的是，本申请描述的系统架构及业务场景是为了更加清楚的说明本申请的技术方案，并不构成对于本申请提供的技术方案的限定，本领域普通技术人员可知，随着系统架构的演变和新业务场景的出现，本申请提供的技术方案对于类似的技术问题，同样适用。
图1示出了适用于本申请实施例的一个升级系统架构的示意图。如图1所示，该升级系统架构可以包括服务器、无线通信链路和终端设备。
示例性地，本申请实施例中所述的服务器是指能够作为厂商或OEM为终端设备提供OTA升级的装置。具体的，服务器可以部署在具有无线通信功能和存储功能的电子设备上，还可以部署在云上的虚拟机或者容器上，其中云可以是多个电子设备组成的集群。
示例性地，本申请实施例中所述的无线通信链路可以是通过通信网络实现的链路，该通信网络可以是局域网，也可以是通过中继(relay)设备转接的广域网，或者包括局域网和广域网。当该通信网络为局域网时，该通信网络可以是wifi热点网络、wifi点到点(point to point，P2P)网络、蓝牙网络、zigbee网络、近场通信(near field communication，NFC)网或者未来可能的通用短距离通信网络等。当该通信网络为广域网时，该通信网络可以是第三代移动通信技术(3rd-generation wireless telephone technology，3G)网络、第四代移动通信技术(the 4th generation mobile communication technology，4G)网络、第五代移动通信技术(5th-generation mobile communication technology，5G)网络、未来演进的移动通信技术网络(包含但不限于6G等)、公共陆地移动网(public land mobile network，PLMN)或因特网(Internet)等，本申请实施例对此不做限定。
示例性地，本申请实施例中所述的终端设备是指支持该服务器提供的OTA升级服务的装置。例如，该终端设备可以为运输工具或者智能设备。具体的，该运输工具可以包括机动车辆(如无人车、智能汽车、电动车、数字汽车等)、无人机、轨道车、交通灯等。
图2示出了本申请实施例提供的终端设备的示意图，如图2所示，该终端设备包括OTA管理模块(可以称为OTA Master模块)和多个OTA升级模块(可以称为OTA Slave模块)。其中，OTA管理模块用于接收来自服务器的升级包，并向OTA升级模块发送该OTA升级模块负责的升级对象的升级包。OTA升级模块用于安装升级包，并向OTA管理模块反馈该升级包的安装结果。在一种可选的设计中，本申请实施例对升级对象的具体形态不做限定。以智能汽车为例，该升级对象可以为车辆中的部件，也可以为该部件中的软件。
以智能汽车为例，图3示出了适用于本申请实施例的另一个升级系统架构的示意图。如图3所示，该升级系统架构可以包括OTA服务器、无线通信链路和车辆。其中，车辆中至少包括网关(gateway，GW)、用于支撑智能驾驶的软硬件一体化平台即车载计算平台 (vehicle computing platform，VPC)、人机交互系统(human-machine interaction，HMI)、远程信息控制单元(telematics control unit，TCU)、汽车盒子(telematics box，Tbox)、电子控制单元ECU等部件。其中，GW是整车电子电气架构中的核心部件，其作为整车网络的数据交互枢纽，可将控制区域网络(controller area network，CAN)、局域互联网络(local interconnect network，LIN)、多媒体软件升级(media oriented system transport，MOST)网络等网络数据在不同网络中进行路由。VPC可以用于实现车辆的自动驾驶功能。HMI可以用于人机交互信息显示。TCU和Tbox主要用于和车辆外部设备(例如手机、后台系统等)进行通信。ECU是车辆专用微机控制器。ECU包括但不限于整车集成单元(vehicle integrated/intergration unit，VIU)、座舱域控制器(cockpit domain controller，CDC)和整车域控制器(vehicle domain controller，VDC)等。示例性地，待升级的部件包括但不限于上述GW、VPC、HMI、TCU、Tbox和ECU，待升级的部件可以包括上述GW、VPC、HMI、TCU、Tbox和ECU中的一项或多项。
在整车OTA升级中通常涉及车辆中多个部件的升级，位于智能汽车内的OTA管理模块可以运行在车辆的GW、Tbox等部件上，协调其他部件的OTA升级模块，共同完成整车升级。图4示出了适用于本申请实施例的另一个升级系统架构的示意图。如图4所示，车辆的GW中部署了OTA管理模块，车辆的其他部件中部署了OTA升级模块。其中，OTA管理模块可以协调各部件部署的OTA升级模块，共同完成整车OTA升级。
在终端设备执行升级任务过程中，该终端设备包括的原有的软件或硬件功能可能处于不可用的状态，进而带来安全问题。以智能汽车为例，如果升级任务中包含对应于智能汽车电源的升级任务，则智能汽车在执行该升级任务时，会导致该智能汽车内的其他电子控制单元ECU下电，进而导致该ECU负责的车内部件临时失效。示例性地，当执行对应于电源的升级任务时，负责安全气囊相关的ECU下电，这将导致安全气囊临时失效。此时如果该智能汽车内有驾驶员或乘员，且发生碰撞，则由于安全气囊的临时失效会导致对车内的驾驶员或乘员造成人身安全伤害。
鉴于此，本申请实施例提供一种升级方法。在该方法中，终端设备接收第一升级任务，该第一升级任务对应第一执行条件；基于该第一执行条件，获取终端设备的第一状态，其中第一状态包含第一生物识别结果；执行对应该第一状态的第一操作。采用这种方式，可以基于不同的第一生物识别结果，执行不同的第一操作，进而实现升级任务在保证安全的情况下被执行。
下面结合具体实施例对本申请实施例提供的升级方法进行介绍。需要说明的是，为了描述清楚，下述实施例以OTA管理模块为例进行说明，可替换地，OTA管理模块也可以替换为终端设备。请参见图5，图5是本申请实施例提供的一种升级方法所对应的流程示意图。进一步的，该方法可以基于图1至图4所示的升级系统架构来实现。该方法可以包括：
S501，服务器生成第一升级任务。
其中，该第一升级任务对应第一执行条件，该第一执行条件包含终端设备的状态，该终端设备的状态包含在所述终端设备内不存在生物。
在本申请实施例中，服务器可以创建升级任务并对升级任务进行管理，包括部署升级任务、终止升级任务、暂停升级任务、重新运行升级任务、或多个升级任务之间优先级认 定等。示例性地，服务器生成升级任务，可以理解为服务器创建升级任务。升级任务可以包括一个或多个升级包。
示例性地，以汽车为例，升级任务是约定一辆或一批待升级汽车的升级过程。例如，升级任务一般约定这一辆或一批汽车内的哪些车载设备要升级，升级前需要给用户发送什么样的通知，向用户提示哪些内容，升级使用的升级包等。进一步的，车载设备可以包含HMI，电池管理系统(battery management system，BMS)、信息娱乐系统、车载电源模块等，本申请实施例对此不做限定。
示例性地，不同的升级任务可以对应不同的功能。以智能汽车为例，升级任务1用于BMS的升级，升级任务2用于改善座舱座椅记忆功能，提供更好的用户体验。
示例性地，不同的升级任务可以对应不同的升级对象。以智能汽车为例，升级任务3对应固件升级(firmware over the air，FOTA)，升级任务4对应软件升级(software over the air，SOTA)，其中FOTA升级是涉及硬件的，例如给ECU闪存下载完整的固体镜像，或者修补现有固件、更新闪存；SOTA偏向于应用软件升级，例如智能汽车上HMI界面显示的更新。
应理解，在本申请实施例中，第一升级任务为升级任务的一个示例。
在一种可选的设计中，该第一升级任务还可以包含与该第一升级任务对应的升级包。相应地，服务器生成第一升级任务还可以包含生成对应的升级包。
在本申请实施例中，第一升级任务对应第一执行条件，可以包括：该第一升级任务的执行需要满足第一执行条件。即只有当该第一执行条件满足时，该第一升级任务才会被执行。
在本申请实施例中，第一执行条件包含终端设备的状态。
在一种可能的实现方式中，该终端设备的状态包含在该终端设备内不存在生物。示例性地，在这种情况下，只有对应于该第一升级任务的终端设备内不存在生物时，该第一升级任务才会被执行。进一步地，在一种可选的设计中，该终端设备的状态还可以包含如下一项或多项：该终端设备的行驶速度低于定义或配置的第一阈值(例如该终端设备的行驶速度为零)，该终端设备的电量不低于定义或配置的第二阈值，该终端设备的车辆档位处于P档，该终端设备所在的区域是安全的。
在另一种可能的实现方式中，该终端设备的状态可以包含该终端设备的属性。示例性地，当第一执行条件包含该终端设备的属性时，只有对应于该第一升级任务的终端设备的属性满足预设的条件时，该第一升级任务才会被执行。例如该终端设备的状态包含生物。在这种情况下，需要根据终端设备内的生物状态，确定是否可以执行第一升级任务，比如，当该终端设备的生物状态满足预设条件时，该第一升级任务才会被执行。进一步地，在一种可选的设计中，该终端设备的状态还可以包含如下一项或多项：行驶速度，电量，车辆档位，所在区域。应理解，对应于不同终端设备属性的预设条件是不同的。此外，该预设条件可以是协议定义的，或者是服务器预先配置给终端设备的，或者通过其他方式实现，对此不做具体限定。
在本申请实施例中，终端设备内存在的生物可以包括如下一项或多项：驾驶员、乘员、宠物。
在一种可选的设计中，第一升级任务可以包含多个升级子任务。例如，服务器可以按照升级任务所对应的升级部件，将一个升级任务中包含的具体任务进行分类，比如将升级任务中对电池软件的升级任务作为一个子任务，而将该升级任务中包括的对制动控制软件的升级任务作为另外一个子任务；又例如，服务器可以按照升级任务实现的功能，将一个升级任务中包含的多个子任务进行分类，比如将升级任务中对自动驾驶感知功能的升级任务作为一个子任务，而将该升级任务中对应自动驾驶规划功能的任务作为另外一个子任务。服务器还可以根据其他规则将第一升级任务中包含的具体任务划分为不同的升级子任务。
示例性地，第一升级任务中包含第一升级子任务，该第一升级子任务对应于生物安全相关的部件的升级。该生物安全相关的部件包含于终端设备内，例如，该生物安全相关的部件为智能汽车内的一个部件。在本申请实施例中，在一种可选的设计中，该生物安全相关的部件可以理解为会对生物安全产生直接或间接影响的部件。例如，该生物安全相关的部件可以包含如下一项或多项：车内用于保护驾驶员或乘员安全的系统或部件(比如安全气囊系统或部件)，车内的电源系统或部件。应理解，在发生意外情况时(比如车辆发生碰撞时)，安全气囊系统或部件可以保护车内驾驶员或乘员的安全，因此该安全气囊系统或部件可以认为是对生物安全产生直接影响的部件；而车内的电源系统或部件会影响对车内ECU的供电，比如当电源系统或部件发生故障时，会导致车内其他ECU由于下电而无法使用，因此该电源系统或部件可以认为是对生物安全产生间接影响的部件。此外，第一升级子任务可以对应FOTA，也可以对应SOTA，本申请实施例不做具体限定。
作为一种可能的实现方式，第一升级任务除了包含第一升级子任务，还可以包含其他升级子任务，例如第一升级子任务对应于车载电源模块的升级，其他升级子任务对应于智能汽车上HMI界面显示的更新；作为另一种可能的实现方式，第一升级任务中也可以只包含第一升级子任务或者第一升级任务即为对应于生物安全相关的部件升级的升级任务。应理解，在本申请实施例中，基于第一升级任务包含的具体升级内容，第一升级任务可以对应一个或多个不同的执行条件，这一个或多个不同的执行条件都可以理解为包含于第一执行条件中。
S502，服务器向OTA管理模块发送第一升级任务。
相应地，OTA管理模块接收该第一升级任务。进一步地，在一种可选的设计中，该第一升级任务中包括升级包。
在一种可选的设计中，本申请实施例中所述的升级方法，还可以包括步骤S503和步骤S504，该步骤对于某些具体的场景可以是必须的。具体如下：
S503，服务器配置第一执行条件。
示例性地，服务器根据第一升级任务的内容，配置对应于第一升级任务的第一执行条件。如果服务器识别第一升级任务中包括第一升级子任务，则确定第一执行条件中包含终端设备的状态，且该终端设备的状态包含在该终端设备内不存在生物。其中，终端设备的状态可以参考步骤S501中的相关描述，在此不做赘述。
S504，服务器发送第一执行条件。
相应地，OTA管理模块接收该第一执行条件。
应理解，服务器可以将第一升级任务和第一执行条件携带在同一条信令中发送，或者 也可以通过不同的信令分别发送第一升级任务和第一执行条件。
S505，OTA管理模块根据对应于该第一升级任务的第一执行条件，获取终端设备的第一状态。
其中，该第一状态包含第一生物识别结果。
示例性地，OTA管理模块接收到该第一升级任务之后，可以确定该第一升级任务对应的第一执行条件，该第一执行条件中包含终端设备的状态。基于此，OTA管理模块在执行该第一升级任务之前，需要先获取该终端设备的第一状态。例如，如果终端设备的状态包含在终端设备内不存在生物，则OTA管理模块在执行第一升级任务之前，需要先获取该终端设备的第一状态，该第一状态包含第一生物识别结果，该第一生物识别结果包括在该终端设备内存在生物，或在该终端设备内不存在生物。应理解，对应于步骤S501中描述的终端设备的状态的另一种实现方式，即终端设备的状态中包含终端设备的属性，OTA管理模块可以采用类似的方式获取对应于该属性的第一状态。例如，如果终端设备的状态包含生物，则OTA管理模块在执行第一升级任务之前，需要先获取该终端设备的第一状态，该第一状态包含第一生物识别结果，该第一生物识别结果包括在该终端设备内存在生物，或在该终端设备内不存在生物。
示例性地，在本申请实施例中，OTA管理模块可以通过终端设备的传感器，获取第一生物识别结果。例如，OTA管理模块对来自该传感器的数据进行处理，得到第一生物识别结果；又例如，来自该传感器的数据可以直接标识第一生物识别结果，基于此，OTA管理模块可以直接获取第一生物识别结果。应理解，OTA管理模块还可以通过其他方式获取第一生物识别结果，在本申请实施例中不做限定。另外，在本申请实施例中，上述传感器包括以下一项或多项：摄像头，压力传感器，毫米波雷达传感器，激光雷达传感器，或者也可以包括其他形式的传感器，传感器可以安装在终端设备内也可以安装在终端设备之外，本申请实施例对于传感器的具体形式以及安装位置不做具体限定。
此外，进一步地，在一种可选的设计中，例如，终端设备的状态中如果还包含终端设备的行驶速度低于定义或配置的第一阈值，则相应地，该第一状态中还包含第一行驶速度结果，该第一行驶速度结果包括该终端设备的行驶速度低于第一阈值，或者该终端设备的行驶速度不高于第一阈值；又例如，终端设备的状态中如果还包含终端设备的电量不低于第二阈值，则相应地，该第一状态中还包含第一电量结果，该第一电量结果包括该终端设备的电量低于第二阈值，或者该终端设备的电量不低于第二阈值；再例如，终端设备中的状态中如果还包含终端设备的车辆档位处于P档，则相应地，该第一状态中还包括第一档位结果，该第一档位结果包括该终端设备的档位处于P档或者不处于P档；再例如，终端设备中的状态中如何还包含终端设备所在的区域是安全的，则相应地，该第一状态中还包括第一区域识别结果，该第一区域识别结果包括该终端设备所在的区域是安全的或者是不安全的。应理解，当终端设备的状态是通过属性的方式来实现时，例如，终端设备的状态还包含如下一项或多项：行驶速度、电量、车辆档位、所在区域，OTA管理模块可以采用上述类似的方式获取对应于该属性的第一状态。
S506，执行对应该第一状态的第一操作。
在本申请实施例中，对应不同的第一生物识别结果，OTA管理模块将执行不同的第一 操作。为了描述清楚，下述针对第一生物识别结果的不同情况，具体描述OTA管理模块的不同操作。
情况1：第一生物识别结果为终端设备内不存在生物。
在这种情况下，OTA管理模块执行对应该第一状态的第一操作，可以包括：OTA管理模块执行第一升级任务。应理解，当第一生物结果为终端设备内不存在生物时，可以说明当前终端设备的状态满足第一执行条件，因此在这种情况下，OTA管理模块可以执行第一升级任务。例如，OTA管理模块通过车内摄像头确定车内不包括驾驶员和乘员，或者确定车内不包括驾驶员、乘员以及宠物，进而可以执行第一升级任务。
应理解，第一升级任务在执行过程中可能会导致车内部件的临时失效，例如安全气囊系统临时失效，因此采用该方式，可以实现只有在确定终端设备内不存在生物的情况下，第一升级任务才开始被执行。基于此，可以在保证安全(特别是人身安全)的环境下安装第一升级任务中包括的升级包，实现了安全的OTA升级。
此外，示例性地，OTA管理模块执行第一升级任务可以包括：OTA管理模块可以将第一升级任务中包括的升级包分发到对应的OTA升级模块，再由OTA升级模块负责该升级包的具体安装，或者也可以包括：OTA管理模块直接负责该升级包的具体安装。例如第一升级任务中包括对应车载电源模块升级的升级包，OTA管理模块可以将该升级包发送给负责电源模块升级的OTA升级模块(比如车身控制模块(body control module，BCM)，由该升级模块负责该升级包的安装，或者OTA管理模块也可以直接安装对应车载电源模块升级的升级包。
进一步地，在一种可选的设计中，OTA管理模块还可以通过如下方式中的一项或多项，保证OTA升级任务总是在保证安全(特别是人身安全)的环境下被执行。示例性地，OTA管理模块可以在第一升级任务执行的过程中，通过如下方式中的一项或多项，保证OTA升级是安全的。
方式1：控制终端设备的门锁处于关闭状态和/或输出第二提示。
这里的终端设备为第一升级任务所对应的终端设备。
示例性地，OTA管理模块可以控制终端设备的门锁处于关闭状态。应理解，在这种方式下，不允许终端设备外的人员进入到该终端设备内。进一步地，在一种可选的设计中，OTA管理模块可以控制终端设备的门锁在一段时间内处于关闭状态。例如，当第一升级任务执行完毕，OTA管理模块可以不再控制终端设备的门锁处于关闭状态，此时终端设备外的人员可以进入到该终端设备内，例如通过打开车锁的方式进入到该终端设备内。
在一种可选的设计中，OTA管理模块控制终端设备的门锁处于关闭状态，可以通过如下方式实现：一种可能的实现方式是，OTA管理模块直接控制终端设备的门锁处于关闭状态；另一种可能的实现方式是，OTA管理模块向终端设备内的其他部件发送指示信息A，该指示信息A用于指示终端设备的门锁处于关闭状态。其他部件接收到指示信息A后，控制终端设备的门锁处于关闭状态。这里的其他部件例如可以包括能够控制该门锁的其他部件(比如BCM)。此外，OTA管理模块还可以通过其他方式，控制终端设备的门锁处于关闭状态，对此不做具体限定。
示例性地，通过输出第二提示，可以提示在第一升级任务执行过程中，终端设备外的 人员不允许返回到终端设备内。该第二提示用于指示该终端设备内不应存在生物。可替换地，该第二提示用于指示如下一项或两项：第一升级任务正在执行，第一执行条件。应理解，由于第一升级任务只有在第一执行条件被满足的情况下被还行，因此通过指示第一升级任务正在执行或通过指示第一执行条件，也可以实现第二提示指示该终端设备内不应存在生物。终端设备的用户获得该第二提示后，获知不能进入到终端设备内。在一种可选的设计中，终端设备的用户可以理解为该终端设备的所有者，例如车主，或者也可以理解为从终端设备内离开的驾驶员和/或乘员，或者也可以理解为其他可能进入该终端设备内的用户。
进一步地，在一种可选的设计中，该第二提示还可以包含时间信息T，用于指示在满足时间信息T的时间范围内，该终端设备内不应存在生物。为了描述清楚，这里以第二提示用于指示该终端设备内不应存在生物为例说明。例如该时间信息T为从开始安装第一升级任务到将第一升级任务安装完毕所需要的时间，比如2小时，此时终端设备的用户获得第二提示后，可以确定从接收到该第二提示的时间开始(或者从第二提示的发送时间开始，或者从第一升级任务开始执行的时间开始)，在接下来的2小时内，该终端设备内不应存在生物；又例如该时间信息T为绝对时间，该绝对时间可以对应第一升级任务安装完毕时的时间，比如下午2点，此时终端设备的用户获得第二提示后，可以确定在下午2点之前，该终端设备内不应存在生物。
在一种可选的设计中，在本申请实施例中，输出第二提示，可以包括：OTA管理模块直接向终端设备的用户输出第二提示，例如向驾驶员直接输出第二提示；或者，OTA管理模块通过网络设备将第二提示输出给终端设备的用户。
在一种可选的设计中，该第二提示可以通过如下一项或多项输出：手机、可穿戴设备、平板电脑、笔记本电脑。在一种可选的设计中，第二提示还可以通过显著的方式突出显示，例如在提示界面(比如手机，可穿戴设备，平板电脑、笔记本电脑)上，第二提示的字体颜色与其他升级任务对应的提示的字体颜色不同，和/或第二提示的字体大小与其他升级任务对应的提示的字体大小不同。这里，其他升级任务可以为除第一升级任务之外的升级任务，或者为对应于不同于第一执行条件的其他执行条件的升级任务。采用该方式，可以实现终端设备的用户更容易关注到第一升级任务的执行条件，进而保证第一升级任务能够在保证安全的环境下被执行。
示例性地，在本申请实施例中，还可以通过控制终端设备的门锁处于关闭状态和输出第二提示，保证OTA升级是在保证安全的环境下被执行的。
采用方式1，可以通过车锁关闭的方式和/或输出提示的方式，避免在第一升级任务执行的过程中，终端设备外的人员进入到终端设备内，进而保证了在第一升级任务执行的过程中，OTA升级也是在保证安全(特别是人身安全)的环境下被执行的。进一步地，当第二提示中包括时间信息T时，还可以在第一升级任务执行完毕之后，实现该终端设备的用户及时使用该终端设备。
方式2：获取终端设备的门锁状态和/或获取终端设备的第二状态，以及暂停或终止第一升级任务的执行。
其中，该门锁状态包括该门锁被打开。该第二状态包含第二生物识别结果，该第二生 物识别结果为该终端设备内存在生物。
示例性地，OTA管理模块可以通过获取终端设备的门锁状态，确定在第一升级任务执行的过程中，终端设备外的人员是否尝试进入到该终端设备内。例如，如果获取的门锁状态包括该门锁被打开，则OTA管理模块可以判断终端设备外的人员在尝试进入或已经进入到该终端设备内，进而OTA管理模块可以暂停或终止第一升级任务的执行。
示例性地，OTA管理模块可以通过获取终端设备的第二状态，确定在第一升级任务执行的过程中，是否有终端设备外的人员进入到该终端设备内。如果获取的第二生物结果为该终端设备存在生物，则OTA管理模块可以暂停或终止第一升级任务的执行。OTA管理模块获取终端设备的第二状态可以参考步骤S505中OTA管理模块获取第一状态的方式，例如，OTA管理模块可以通过终端设备的传感器，获取第二生物识别结果，在此不做赘述。
示例性地，OTA管理模块还可以通过获取终端设备的门锁状态和获取终端设备的第二状态，暂停或终止第一升级任务的执行，其中，门锁状态、第二状态可以参考上述描述，在此不做赘述。
进一步地，在一种可选的设计中，在方式2中，当OTA管理模块暂停或终止第一升级任务的执行之后，该终端设备可以恢复到第一升级任务执行前的状态，从而保证该终端设备的正常使用。
应理解，通过方式2，在第一升级任务执行的过程中，一旦发现终端设备外有人员尝试进入或者已经进入到终端设备内，第一升级任务可以被暂停执行或被终止执行，这样在第一升级任务执行的过程中，OTA升级也是在保证安全(特别是人身安全)的环境下被执行的，即保证OTA升级总是在保证安全(特别是保证人身安全)的环境下被执行。此外，通过方式2，还可以实现在特殊情况下对终端设备的使用。例如在一些特殊情况下，终端设备外的人员需要重新进入到该终端设备内，比如返回终端设备内取出重要物品或材料，又比如在紧急情况下需要重新使用该终端设备，此时通过方式2，还可以保证终端设备在这些场景下的正常使用。
方式3：获取所述终端设备的门锁状态和/或获取所述终端设备的第二状态，以及确定第一升级任务中包含的第一升级子任务已完成，以及继续执行第一升级任务。
其中，门锁状态和第二状态可以参考上述方式2中的具体描述，第一升级子任务可以参考步骤S501中的相关描述，在此不做赘述。
示例性地，OTA管理模块根据终端设备的门锁状态和/或第二状态，可以确定在第一升级任务执行的过程中，终端设备外的人员在尝试进入或已经进入到该终端设备内。但此时如果对应于生物安全相关的部件的升级已经完成，则OTA管理模块可以继续执行第一升级任务。例如，第一升级任务中包含对应于车载电源模块升级的升级任务(第一升级子任务)和对应于智能汽车上HMI界面显示更新的升级任务(其他升级任务)。采用方式3，如果OTA管理模块通过门锁状态和/或第二状态，判断终端设备外的人员在尝试进入或已经进入到该终端设备内，但此时对应于车载电源模块升级的升级任务已经完成，则OTA管理模块可以不暂停或终止第一升级任务，而继续执行对应于智能汽车上HMI界面显示更新的升级任务。应理解，第一升级子任务未完成，则OTA管理模块可以暂停或终止第一升级任务的执行。
通过方式3，可以保证对应于生物安全相关的部件的升级任务在保证安全的环境下进行，同时也不影响其他升级任务的执行，从而保证了升级任务的执行效率。
需要说明的是，在本申请实施例中，还可以通过上述方式1～方式3的组合，实现OTA升级的安全性。例如，在实现在第一升级任务执行的过程中，OTA升级也是在保证安全(特别是人身安全)的环境下被执行的。例如，OTA管理模块可以通过方式1，避免在第一升级任务执行过程中，终端设备外的人员进入到该终端设备内，但如果在第一升级任务的执行过程中，终端设备外的人员进入到该终端设备内，则OTA管理模块还可以结合方式2暂停或终止第一升级任务的执行，不仅可以保证OTA升级总是在保证安全(特别是保证人身安全)的环境下被执行，还可以实现在未完成第一升级任务的情况下，终端设备的正常使用；或者OTA管理模块还可以结合方式3在确定第一升级子任务已经完成的情况下，继续执行第一升级任务中包含的其他升级任务，不仅可以保证OTA升级总是在保证安全(特别是保证人身安全)的环境下被执行，还可以升级任务的执行效率。
情况2：第一生物识别结果为终端设备内存在生物。
在这种情况下，OTA管理模块执行对应该第一状态的第一操作，可以包括如下：OTA管理模块不执行第一升级任务和/或输出第一提示，该第一提示用于指示该第一升级任务无法执行。应理解，如果终端设备内还包括生物，则说明对应于第一升级任务的第一执行条件不满足，此时，第一升级任务不被执行可以保证终端设备内生物的安全性。此外，通过输出第一提示，还可以实现终端设备的用户获知第一升级任务的执行情况。
进一步地，在一种可选的设计中，该第一提示还可以用于指示该第一升级任务无法执行的原因和/或重新执行该第一升级任务的条件。例如，该第一提示还可以用于指示该第一升级任务需要在保证终端设备内不存在生物的情况下被执行。终端设备的用户通过该提示，可以获知第一升级任务被执行所需要的条件，在该用户确定执行第一升级任务之前，可以保证该终端设备内不包括生物，例如该终端设备内的所有人员和/或宠物都离开该终端设备。通过该提示方式，可以实现安全的OTA升级。
需要说明的是，在本申请实施例中，用于指示该第一升级任务无法执行的原因和/或重新执行该第一升级任务的条件的信息可以通过第一提示实现，也可以通过其他方式实现，例如通过第三提示实现，本申请实施例对此不做限定。
在一种可选的设计中，在本申请实施例中，输出第一提示，可以包括：OTA管理模块直接向终端设备的用户输出第一提示，例如向驾驶员直接输出第一提示；或者，OTA管理模块通过网络设备将第一提示输出给终端设备的用户。
在一种可选的设计中，该第一提示可以通过如下一项或多项输出：手机、可穿戴设备、平板电脑、笔记本电脑、HMI界面。
应理解，第三提示的实现方式可以参考第一提示的实现方式，在此不做赘述。
在一种可选的设计中，第一提示或第三提示还可以通过显著的方式突出显示，例如在提示界面(比如HMI界面，手机，可穿戴设备，平板电脑、笔记本电脑)上，第一提示或第三提示的字体颜色与其他升级任务对应的提示的字体颜色不同，和/或第一提示或第三提示的字体大小与其他升级任务对应的提示的字体大小不同。这里，其他升级任务可以为除第一升级任务之外的升级任务，或者为对应于不同于第一执行条件的其他执行条件的升级 任务。采用该方式，可以实现终端设备的用户更容易关注到第一升级任务的执行条件以及执行情况，进而更快地获知该第一升级任务能够被执行的条件，保证第一升级任务能够在保证安全的环境下被执行。
在一种可选的设计中，本申请实施例中所述的升级方法，在步骤S505之前，还可以包括步骤S507，该步骤对于某些具体的场景可以是必须的。步骤S507具体如下：
S507，输出第四提示。
该第四提示用于指示第一执行条件。
在一种可选的设计中，在本申请实施例中，输出第四提示，可以包括：OTA管理模块直接向终端设备的用户输出第一提示，例如向驾驶员直接输出第四提示；或者，OTA管理模块通过网络设备将第四提示输出给终端设备的用户。
在一种可选的设计中，该第四提示可以通过如下一项或多项输出：手机、可穿戴设备、平板电脑、笔记本电脑、HMI界面。
在一种可选的设计中，第四提示还可以通过显著的方式突出显示，例如在提示界面(比如HMI界面，手机，可穿戴设备，平板电脑、笔记本电脑)上，第四提示的字体颜色与其他升级任务对应的提示的字体颜色不同，和/或第四提示的字体大小与其他升级任务对应的提示的字体大小不同。这里，其他升级任务可以为除第一升级任务之外的升级任务，或者为对应于不同于第一执行条件的其他执行条件的升级任务。采用该方式，可以实现终端设备的用户更容易关注到第一升级任务的执行条件，进而更快地获知该第一升级任务能够被执行的条件，保证第一升级任务能够在保证安全的环境下被执行。
进一步地，在一种可选的设计中，OTA管理模块还可以根据终端设备的用户设置，确定是否根据响应于第四提示的确认信息B，开始获取终端设备的第一状态。在一种可选的设计中，升级任务在执行前是否需要得到终端设备的用户的确认，可以是终端设备的用户提前设置的。为了描述清楚，这里以驾驶员作为终端设备的用户为例说明。针对升级任务，驾驶员可以提前设置是否需要根据信息B，执行升级任务。例如，驾驶员可以在手机上将对应确认信息B的设置或者将对应升级任务的设置打开。在这种情况下，OTA管理模块在接收到第一升级任务且执行与该第一升级任务相关联的动作之前，需要先得到驾驶员的确认信息(对应确认信息B)。这里与该第一升级任务相关联的操作可以包括获取终端设备的第一状态和/或执行第一升级任务。具体的，在输出第四提示后，只有得到驾驶员的确认(例如通过手机应用(application，APP)实现确认)，OTA管理模块才可以获取终端设备的第一状态。又例如，驾驶员也可以在手机上将对应信息B的设置或者将对应升级任务的设置关闭。在这种情况下，OTA管理模块在接收到第一升级任务且执行与该第一升级任务相关联的动作之前，不需要得到驾驶员的确认信息(对应确认信息B)。具体的，在输出第四提示后，OTA管理模块就可以开始执行与该第一升级任务相关联的动作，例如获取终端设备的第一状态。采用该方式，可以实现OTA升级的灵活性，进一步地，当设置需要根据对应于第四信息的确认信息，执行升级任务相关联的操作时，终端设备的用户可以选择在合适的场景下再开始执行第一升级任务，这样既可以保证终端设备的正常使用，又可以保证OTA升级在安全的环境下被执行。具体的，例如终端设备正处于使用中时，终端设备的用户可以对收到的第四提示不予以确认，在这种情况下，第一升级任务暂不执行；当终端设备的 用户确定可以执行第一升级任务时，终端设备的用户可以对收到的第四提示予以确认，此时OTA管理模块可以开始获取终端设备的第一状态。
在一种可选的设计中，本申请实施例中所述的升级方法，在步骤S505之前，还可以包括步骤S508，该步骤对于某些具体的场景可以是必须的。步骤S508具体如下：
S508，确定第一执行条件。
一种实现方式下，OTA管理模块接收来自服务器的第一执行条件，确定第一执行条件。
另一种实现方式下，OTA管理模块根据升级任务与执行条件之间的映射关系，确定第一执行条件。示例性地，该映射关系可以是配置或定义的，例如OTA服务器可以配置或定义该映射关系，并提前发送给OTA管理模块，OTA管理模块再接收到第一升级任务之后，可根据该映射关系，确定第一升级任务对应的第一执行条件。例如，OTA管理模块可以根据第一升级任务包括的内容，再结合该映射关系，确定第一执行条件。采用该方式，可以节省信令开销。
基于上述描述，采用本申请实施例所示的方式，在执行第一升级任务之前，通过获取包含第一生物识别结果的第一状态，并且基于不同的第一生物识别结果，执行对应于该第一状态的第一操作，可以实现安全的OTA升级。即保证OTA升级能够在保证安全(特别是人身安全)的环境下被执行。
需要说明的是，本申请各实施例中的方法包括的步骤可以根据实际需要进行顺序调整、合并和删减。
上面结合图5介绍了本申请实施例提供的升级方法，下面结合图6至图8详细说明本申请实施例提供的装置。
图6是本申请实施例提供的通信装置的示意性框图。如图6所示，该通信装置可以包括至少一个处理器和收发器，以执行上文中任意可能的实现方式中的方法。其中，至少一个处理器可以用于进行装置的内部处理，例如根据所述第一执行条件，获取终端设备的第一状态；又例如，输出第一提示，该第一提示用于指示所述第一升级任务无法执行；再例如，执行所述第一升级任务；再例如，生成第一升级任务等。收发器用于执行与发送和接收相关的功能，例如向其他装置发送信息或从其他装置接收信息。
进一步地，在一种可选的设计中，该通信装置还可以包括至少一个存储器，如图7中虚框所示。图7是本申请实施例提供的通信装置的示意性框图。其中，该至少一个存储器与该通信装置包括的至少一个处理器、收发器耦合，可以理解的是，该至少一个存储器、该至少一个处理器和该收发器通过内部连接通路互相通信。具体地，该至少一个处理器可用于执行该至少一个存储器中的指令，以使得该装置执行本申请实施例中任意可能的实现方式中的方法。
在又一种实现方式中，该通信装置包括用于执行本申请实施例中任意可能的实现方式中的方法的处理单元和收发单元。
在一种可选的设计中，上述通信装置可以是终端设备或OTA管理模块的装置，则该通信装置可以用于执行上文中终端设备或OTA管理模块所执行的任一方法，或者上述通信装置可以是服务器的装置，则该通信装置可以用于执行上文中服务器所执行的任一方法。
在一种可选的设计中，该通信装置为通信芯片，该收发器可以为该通信芯片的输入输 出电路或者端口。在又一种可选的设计中，该通信装置包括的收发器可以为发射器和接收器，或者为发射机和接收机。
在本申请实施例中，该通信装置可以对应于本申请实施例中任意可能的实现方式中的终端设备中的芯片，或者可以对应于本申请实施例中任意可能的实现方式中的OTA管理模块中的芯片。
本申请实施例还提供了一种终端设备，该终端设备包括用于执行上文中OTA管理模块所执行的任一种可能实现方式中的方法的通信装置。
本申请实施例还提供了一种服务器，该服务器包括用于执行上文中服务器所执行的任一种可能实现方式中的方法的通信装置。
本申请实施例还提供了一种通信系统，该通信系统包括用于执行上文中OTA管理模块所执行的任一种可能实现方式中的方法的通信装置、用于执行上文中服务器所执行的任一种可能实现方式中的方法的通信装置中的一个或多个。
另外，本申请实施例中还提供了一种芯片，如图8所示。图8示出了一种芯片的结构示意图。芯片包括一个或多个处理器以及接口电路，该接口电路用于为该一个或多个处理器提供信息输入和/或输出用于执行上文中任一种可能实现方式中的方法。在一种可选的设计中，该芯片还可以包括总线。其中：
示例性地，处理器是一种集成电路芯片，具有信号的处理能力。例如，该处理器可以是现场可编程门阵列(field programmable gate array，FPGA)，可以是通用处理器、数字信号处理器(digital signal processor，DSP)、专用集成电路(application specific integrated circuit，ASIC)或者其他可编程逻辑器件、分立门或者晶体管逻辑器件、分立硬件组件，还可以是系统芯片(system on chip，SoC)，还可以是中央处理器(central processor unit，CPU)，还可以是网络处理器(network processor，NP)，还可以是微控制器(micro controller unit，MCU)，还可以是可编程控制器(programmable logic device，PLD)或其他集成芯片。可以实现或者执行本申请实施例中的公开的各方法、步骤及逻辑框图。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等。结合本申请实施例所公开的方法的步骤可以直接体现为硬件译码处理器执行完成，或者用译码处理器中的硬件及软件模块组合执行完成。软件模块可以位于随机存储器，闪存、只读存储器，可编程只读存储器或者电可擦写可编程存储器、寄存器等本领域成熟的存储介质中。该存储介质位于存储器，处理器读取存储器中的信息，结合其硬件完成上述方法的步骤。
接口电路可以用于数据、指令或者信息的发送或者接收，处理器可以利用接口电路接收的数据、指令或者其它信息，进行加工，可以将加工完成信息通过接口电路发送出去。
在一种可选的设计中，芯片还包括存储器，可以是易失性存储器或非易失性存储器，或可包括易失性和非易失性存储器两者。其中，非易失性存储器可以是只读存储器(read-only memory，ROM)、可编程只读存储器(programmable ROM，PROM)、可擦除可编程只读存储器(erasable PROM，EPROM)、电可擦除可编程只读存储器(electrically EPROM，EEPROM)或闪存。易失性存储器可以是随机存取存储器(random access memory，RAM)，其用作外部高速缓存。通过示例性但不是限制性说明，许多形式的RAM可用，例如静态随机存取存储器(static RAM，SRAM)、动态随机存取存储器(dynamic RAM，DRAM)、 同步动态随机存取存储器(synchronous DRAM，SDRAM)、双倍数据速率同步动态随机存取存储器(double data rate SDRAM，DDR SDRAM)、增强型同步动态随机存取存储器(enhanced SDRAM，ESDRAM)、同步连接动态随机存取存储器(synchlink DRAM，SLDRAM)和直接内存总线随机存取存储器(direct rambus RAM，DR RAM)。
需要说明的是，处理器、接口电路各自对应的功能既可以通过硬件设计实现，也可以通过软件设计来实现，还可以通过软硬件结合的方式来实现，这里不作限制。
需要说明的是，本文描述的系统和方法的存储器旨在包括但不限于这些和任意其它适合类型的存储器。
本申请实施例还提供了一种计算机程序产品，该计算机程序产品包括：计算机程序代码，当该计算机程序代码在计算机上运行时，使得该计算机执行上文中第一节点所执行的任意可能的实现方式中的方法，或者执行上文中第二节点所执行的任意可能的实现方式中的方法。
本申请还提供一种计算机可读介质，该计算机可读介质存储有程序代码，当该程序代码在计算机上运行时，使得该计算机执行上述任一种可能实现方式中的方法。
在上述实施例中，可以全部或部分地通过软件、硬件、固件或者其任意组合来实现。当使用软件实现时，可以全部或部分地以计算机程序产品的形式实现。所述计算机程序产品包括一个或多个计算机指令。在计算机上加载和执行所述计算机指令时，全部或部分地产生按照本申请实施例所述的流程或功能。所述计算机可以是通用计算机、专用计算机、计算机网络、或者其他可编程装置。所述计算机指令可以存储在计算机可读存储介质中，或者从一个计算机可读存储介质向另一个计算机可读存储介质传输，例如，所述计算机指令可以从一个网站站点、计算机、服务器或数据中心通过有线(例如同轴电缆、光纤、数字用户线(digital subscriber line，DSL))或无线(例如红外、无线、微波等)方式向另一个网站站点、计算机、服务器或数据中心进行传输。所述计算机可读存储介质可以是计算机能够存取的任何可用介质或者是包含一个或多个可用介质集成的服务器、数据中心等数据存储设备。所述可用介质可以是磁性介质(例如，软盘、硬盘、磁带)、光介质(例如，高密度数字视频光盘(digital video disc，DVD))、或者半导体介质(例如，固态硬盘(solid state disc，SSD))等。
本领域普通技术人员可以意识到，结合本文中所公开的实施例描述的各示例的单元及算法步骤，能够以电子硬件、或者计算机软件和电子硬件的结合来实现。这些功能究竟以硬件还是软件方式来执行，取决于技术方案的特定应用和设计约束条件。专业技术人员可以对每个特定的应用来使用不同方法来实现所描述的功能，但是这种实现不应认为超出本申请的范围。
所属领域的技术人员可以清楚地了解到，为描述的方便和简洁，上述描述的系统、装置和单元的具体工作过程，可以参考前述方法实施例中的对应过程，在此不再赘述。
在本申请所提供的几个实施例中，应该理解到，所揭露的系统、装置和方法，可以通过其它的方式实现。例如，以上所描述的装置实施例仅仅是示意性的，例如，所述单元的划分，仅仅为一种逻辑功能划分，实际实现时可以有另外的划分方式，例如多个单元或组件可以结合或者可以集成到另一个系统，或一些特征可以忽略，或不执行。另一点，所显 示或讨论的相互之间的耦合或直接耦合或通信连接可以是通过一些接口，装置或单元的间接耦合或通信连接，可以是电性，机械或其它的形式。
所述作为分离部件说明的单元可以是或者也可以不是物理上分开的，作为单元显示的部件可以是或者也可以不是物理单元，即可以位于一个地方，或者也可以分布到多个网络单元上。可以根据实际的需要选择其中的部分或者全部单元来实现本实施例方案的目的。
另外，在本申请各个实施例中的各功能单元可以集成在一个处理单元中，也可以是各个单元单独物理存在，也可以两个或两个以上单元集成在一个单元中。
以上所述，仅为本申请的具体实施方式，但本申请的保护范围并不局限于此，任何熟悉本技术领域的技术人员在本申请揭露的技术范围内，可轻易想到变化或替换，都应涵盖在本申请的保护范围之内。因此，本申请的保护范围应以所述权利要求的保护范围为准。

Claims (30)

  1. 一种升级方法，其特征在于，所述方法包括：
    接收第一升级任务，所述第一升级任务对应第一执行条件；
    根据所述第一执行条件，获取终端设备的第一状态，所述第一状态包含第一生物识别结果；
    执行对应所述第一状态的第一操作。
  2. 根据权利要求1所述的方法，其特征在于，所述执行对应所述第一状态的第一操作，包括：
    所述第一生物识别结果为所述终端设备内存在生物，所述执行对应所述第一状态的第一操作为输出第一提示，所述第一提示用于指示所述第一升级任务无法执行；或者，
    所述第一生物识别结果为所述终端设备内不存在生物，所述执行对应所述第一状态的第一操作为执行所述第一升级任务。
  3. 根据权利要求2所述的方法，其特征在于，所述执行对应所述第一状态的第一操作为执行所述第一升级任务，所述方法还包括：
    控制所述终端设备的门锁处于关闭状态和/或输出第二提示，所述第二提示用于指示所述终端设备内不应存在生物。
  4. 根据权利要求2或3所述的方法，其特征在于，所述执行对应所述第一状态的第一操作为执行所述第一升级任务，所述方法还包括：
    获取所述终端设备的门锁状态，所述终端设备的门锁状态包括所述门锁被打开；和/或，
    获取所述终端设备的第二状态，所述第二状态包含第二生物识别结果，所述第二生物识别结果为所述终端设备内存在生物；
    以及暂停或终止所述第一升级任务的执行。
  5. 根据权利要求2或3所述的方法，其特征在于，所述执行对应所述第一状态的第一操作为执行所述第一升级任务，所述方法还包括：
    获取所述终端设备的门锁状态，所述终端设备的门锁状态包括所述门锁被打开；和/或，
    获取所述终端设备的第二状态，所述第二状态包含第二生物识别结果，所述第二生物识别结果为所述终端设备内存在生物；
    以及确定所述第一升级任务中包含的第一升级子任务已完成，所述第一升级子任务对应于生物安全相关的部件的升级；
    以及继续执行所述第一升级任务。
  6. 根据权利要求2所述的方法，其特征在于，所述执行对应所述第一状态的第一操作为输出第一提示，所述方法还包括：
    输出第三提示，所述第三提示用于指示所述第一升级任务无法执行的原因和/或重新执行所述第一升级任务的条件。
  7. 根据权利要求1至6任一项所述的方法，在所述获取终端设备的第一状态之前，所述方法还包括：
    输出第四提示，所述第四提示用于指示所述第一执行条件。
  8. 根据权利要求1至7任一项所述的方法，其特征在于，所述方法还包括：
    接收来自服务器的所述第一执行条件；
    或者，根据配置或定义的升级任务与执行条件之间的映射关系，确定所述第一执行条件。
  9. 根据权利要求1至8任一项所述的方法，其特征在于，所述获取终端设备的第一状态，包括：通过所述终端设备内的传感器，获取所述第一状态，所述传感器包括以下一项或多项：摄像头，压力传感器，毫米波雷达传感器，激光雷达传感器。
  10. 一种升级方法，其特征在于，所述方法包括：
    生成第一升级任务，所述第一升级任务对应第一执行条件，其中所述第一执行条件包含终端设备的状态，所述终端设备的状态包含在所述终端设备内不存在生物；
    发送所述第一升级任务。
  11. 根据权利要求10所述的方法，其特征在于，所述方法还包括：
    根据所述第一升级任务，配置所述第一执行条件；
    发送所述第一执行条件。
  12. 根据权利要求10或11所述的方法，其特征在于，所述第一升级任务包含第一升级子任务，所述第一升级子任务对应于生物安全相关的部件的升级。
  13. 一种通信装置，其特征在于，包括：
    收发单元，用于接收第一升级任务，所述第一升级任务对应第一执行条件；
    处理单元，用于根据所述第一执行条件，获取终端设备的第一状态，所述第一状态包含第一生物识别结果；执行对应所述第一状态的第一操作。
  14. 根据权利要求13所述的装置，其特征在于，所述处理单元执行对应所述第一状态的第一操作，包括：
    所述第一生物识别结果为所述终端设备内存在生物，所述处理单元执行对应所述第一状态的第一操作为所述处理单元输出第一提示，所述第一提示用于指示所述第一升级任务无法执行；或者，
    所述第一生物识别结果为所述终端设备内不存在生物，所述处理单元执行对应所述第一状态的第一操作为所述处理单元执行所述第一升级任务。
  15. 根据权利要求14所述的装置，其特征在于，所述处理单元执行对应所述第一状态的第一操作为所述处理单元执行所述第一升级任务，所述处理单元还用于：
    控制所述终端设备的门锁处于关闭状态和/或输出第二提示，所述第二提示用于指示所述终端设备内不应存在生物。
  16. 根据权利要求14或15所述的装置，其特征在于，所述处理单元执行对应所述第一状态的第一操作为所述处理单元执行所述第一升级任务，所述处理单元还用于：
    获取所述终端设备的门锁状态，所述终端设备的门锁状态包括所述门锁被打开；和/或，
    获取所述终端设备的第二状态，所述第二状态包含第二生物识别结果，所述第二生物识别结果为所述终端设备内存在生物；
    以及暂停或终止所述第一升级任务的执行。
  17. 根据权利要求14或15所述的装置，其特征在于，所述处理单元执行对应所述第一状态的第一操作为所述处理单元执行所述第一升级任务，所述处理单元还用于：
    获取所述终端设备的门锁状态，所述终端设备的门锁状态包括所述门锁被打开；和/或，
    获取所述终端设备的第二状态，所述第二状态包含第二生物识别结果，所述第二生物识别结果为所述终端设备内存在生物；
    以及确定所述第一升级任务中包含的第一升级子任务已完成，所述第一升级子任务对应于生物安全相关的部件的升级；
    以及继续执行所述第一升级任务。
  18. 根据权利要求14所述的装置，其特征在于，所述处理单元执行对应所述第一状态的第一操作为所述处理单元输出第一提示，所述处理单元还用于：
    输出第三提示，所述第三提示用于指示所述第一升级任务无法执行的原因和/或重新执行所述第一升级任务的条件。
  19. 根据权利要求13至18任一项所述的装置，其特征在于，所述处理单元还用于：
    输出第四提示，所述第四提示用于指示所述第一执行条件。
  20. 根据权利要求13至19任一项所述的装置，其特征在于，所述收发单元还用于接收来自服务器的所述第一执行条件；或者所述处理单元还用于根据配置或定义的升级任务与执行条件之间的映射关系，确定所述第一执行条件。
  21. 一种通信装置，其特征在于，包括：
    处理单元，用于生成第一升级任务，所述第一升级任务对应第一执行条件，其中所述第一执行条件包含终端设备的状态，所述终端设备的状态包含在所述终端设备内不存在生物；
    收发单元，用于发送所述第一升级任务。
  22. 根据权利要求21所述的装置，其特征在于，所述处理单元还用于根据所述第一升级任务，配置所述第一执行条件；所述收发单元还用于发送所述第一执行条件。
  23. 根据权利要求22所述的装置，其特征在于，所述第一升级任务包含第一升级子任务，所述第一升级子任务对应于生物安全相关的部件的升级。
  24. 一种通信装置，其特征在于，所述通信装置包括至少一个处理器和收发器，所述至少一个处理器用于调用至少一个存储器中存储的计算机程序，以执行如权利要求1至9中任一项、或权利要求10至12中任一项所述的方法。
  25. 一种终端设备，其特征在于，包括用于执行如权利要求1至9中任一项所述的方法的通信装置。
  26. 一种服务器，其特征在于，包括用于执行如权利要求10至12中任一项所述的方法的通信装置。
  27. 一种通信系统，其特征在于，包括用于执行权利要求1至9任一项所述的方法的通信装置和/或用于执行权利要求10至12任一项所述的方法的通信装置。
  28. 一种芯片，其特征在于，包括一个或多个处理器和接口电路，所述接口电路用于为所述一个或多个处理器提供信息输入和/或输出，所述芯片用于执行如权利要求1至9中任一项、或10至12中任一项所述的方法。
  29. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质中存储有计算机程序或指令，当所述计算机程序或指令被通信装置执行时，实现如权利要求1至9、或 权利要求10至12中任一项所述的方法。
  30. 一种计算机程序产品，其特征在于，所述计算机程序产品在一个或多个处理器上运行时，实现如权利要求1至9中任一项、或权利要求10至12中任一项所述的方法。
PCT/CN2021/108210 2021-07-23 2021-07-23 一种空中下载(ota)升级方法及装置 Ceased WO2023000320A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
JP2024504233A JP2024530431A (ja) 2021-07-23 2021-07-23 オーバーザエア（ｏｔａ）アップグレード方法および装置
PCT/CN2021/108210 WO2023000320A1 (zh) 2021-07-23 2021-07-23 一种空中下载(ota)升级方法及装置
EP21950569.0A EP4375802A4 (en) 2021-07-23 2021-07-23 METHOD AND APPARATUS FOR OVER-THE-AIR (OTA) UPGRADING
CN202180100204.0A CN117616364A (zh) 2021-07-23 2021-07-23 一种空中下载（ota）升级方法及装置

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2021/108210 WO2023000320A1 (zh) 2021-07-23 2021-07-23 一种空中下载(ota)升级方法及装置

Publications (1)

Publication Number Publication Date
WO2023000320A1 true WO2023000320A1 (zh) 2023-01-26

Family

ID=84980554

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/108210 Ceased WO2023000320A1 (zh) 2021-07-23 2021-07-23 一种空中下载(ota)升级方法及装置

Country Status (4)

Country Link
EP (1) EP4375802A4 (zh)
JP (1) JP2024530431A (zh)
CN (1) CN117616364A (zh)
WO (1) WO2023000320A1 (zh)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116437317A (zh) * 2023-04-11 2023-07-14 成都赛力斯科技有限公司 一种升级刷写方法、装置及车辆
WO2026007127A1 (zh) * 2024-07-05 2026-01-08 深圳引望智能技术有限公司 一种基于ota技术的升级方法、通信装置及通信系统

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106445615A (zh) * 2016-10-12 2017-02-22 北京元心科技有限公司 多系统ota升级的方法及装置
CN109032653A (zh) * 2018-08-29 2018-12-18 百度在线网络技术（北京）有限公司 无人驾驶汽车车载终端升级方法、装置、设备及存储介质
CN111769962A (zh) * 2019-04-01 2020-10-13 成都启英泰伦科技有限公司 一种mcu固件ota升级方法
CN111949299A (zh) * 2020-08-24 2020-11-17 上海博泰悦臻网络技术服务有限公司 一种车载软件ota升级的控制方法及装置
US10913464B1 (en) * 2019-10-11 2021-02-09 GM Global Technology Operations LLC Intelligent escalation strategy for autonomous vehicle
CN112947958A (zh) * 2021-01-28 2021-06-11 浙江合众新能源汽车有限公司 一种汽车软件ota升级系统

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20090271875A1 (en) * 2005-03-31 2009-10-29 Pioneer Corporation Upgrade Module, Application Program, Server, and Upgrade Module Distribution System
JP4437496B2 (ja) * 2007-03-02 2010-03-24 富士通テン株式会社 車載表示制御装置
JP2010274783A (ja) * 2009-05-28 2010-12-09 Autonetworks Technologies Ltd 制御装置及びコンピュータプログラム
KR20110107579A (ko) * 2010-03-25 2011-10-04 삼성전자주식회사 인쇄 제어 단말장치 및 펌웨어 업그레이드 방법
JP2015210808A (ja) * 2014-04-30 2015-11-24 大橋　正 ウェブからの電子機器へのソフトウェア更新方式
US10165084B2 (en) * 2015-06-16 2018-12-25 Lear Corporation Method for software updating of vehicle components
JP6756225B2 (ja) * 2016-10-04 2020-09-16 株式会社オートネットワーク技術研究所 車載更新システム、車載更新装置及び更新方法
JP7322361B2 (ja) * 2018-03-16 2023-08-08 株式会社デンソー 電力制御システム
JP2020140432A (ja) * 2019-02-28 2020-09-03 京セラドキュメントソリューションズ株式会社 ファームウェアアップグレードシステム、モバイルデバイス及びファームウェアアップグレードプログラム
JP7218623B2 (ja) * 2019-03-08 2023-02-07 住友電装株式会社 車載更新装置、更新処理システム、更新処理方法及びコンピュータプログラム
JP7161971B2 (ja) * 2019-04-22 2022-10-27 本田技研工業株式会社 ソフトウェア更新装置、ソフトウェア更新システム、及びソフトウェア更新方法

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106445615A (zh) * 2016-10-12 2017-02-22 北京元心科技有限公司 多系统ota升级的方法及装置
CN109032653A (zh) * 2018-08-29 2018-12-18 百度在线网络技术（北京）有限公司 无人驾驶汽车车载终端升级方法、装置、设备及存储介质
CN111769962A (zh) * 2019-04-01 2020-10-13 成都启英泰伦科技有限公司 一种mcu固件ota升级方法
US10913464B1 (en) * 2019-10-11 2021-02-09 GM Global Technology Operations LLC Intelligent escalation strategy for autonomous vehicle
CN111949299A (zh) * 2020-08-24 2020-11-17 上海博泰悦臻网络技术服务有限公司 一种车载软件ota升级的控制方法及装置
CN112947958A (zh) * 2021-01-28 2021-06-11 浙江合众新能源汽车有限公司 一种汽车软件ota升级系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP4375802A4 *

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN116437317A (zh) * 2023-04-11 2023-07-14 成都赛力斯科技有限公司 一种升级刷写方法、装置及车辆
WO2026007127A1 (zh) * 2024-07-05 2026-01-08 深圳引望智能技术有限公司 一种基于ota技术的升级方法、通信装置及通信系统

Also Published As

Publication number Publication date
EP4375802A1 (en) 2024-05-29
CN117616364A (zh) 2024-02-27
EP4375802A4 (en) 2024-10-02
JP2024530431A (ja) 2024-08-21

Similar Documents

Publication Publication Date Title
US10887155B2 (en) System and method for a unified connected network
US20200283004A1 (en) Method and system for overriding vehicle systems based on special conditions
CN113196230A (zh) 终端升级的方法及装置
CN117999540A (zh) 一种空中下载（ota）升级方法及装置
WO2023000320A1 (zh) 一种空中下载(ota)升级方法及装置
CN105100189A (zh) 用于车辆计算系统与社交媒体网站进行通信的方法和系统
EP4342743A1 (en) Vehicle control method and related device
US12115931B2 (en) System and method for remote interface with vehicle
US12528430B2 (en) Vehicle control device and vehicle control system
US20240402787A1 (en) Sleep/Wake-Up Method, System, and Apparatus
WO2022205443A1 (zh) 软件升级方法及装置
CN117441320A (zh) 数据访问控制方法及装置
CN115662026A (zh) 针对遗留在车辆中的宠物的方法、装置和车辆
CN119487489A (zh) 一种升级方法及装置
US11546737B2 (en) Role-based HMI context dynamic update
US20250077222A1 (en) Vehicle control method and apparatus, and vehicle
US20250024828A1 (en) Systems and methods to monitor animals in a garage
CN117768862A (zh) 一种车机的通信方法、通信装置及车载设备的控制系统
JP2024545266A (ja) アップグレード方法、装置、およびシステム
CN119213409A (zh) 一种协同控车方法及相关装置
CN114851981A (zh) 车辆控制系统及车辆
US12455565B2 (en) Emergency vehicle interactions using external triggers
EP4722900A1 (en) Upgrading method and related apparatus
CN119734659B (zh) 车辆的解闭锁模式的控制方法、装置和车辆
JP7760973B2 (ja) 車載装置、プログラム及び情報処理方法

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21950569

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 202180100204.0

Country of ref document: CN

ENP Entry into the national phase

Ref document number: 2024504233

Country of ref document: JP

Kind code of ref document: A

WWE Wipo information: entry into national phase

Ref document number: 2021950569

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE

ENP Entry into the national phase

Ref document number: 2021950569

Country of ref document: EP

Effective date: 20240223