基于实时操作系统的车载ECU双分区软件空中下载升级技术  

A Dual-Slot Software OTA Upgrading Technology Based on RTOS of Vehicle Electronic Control Unit

作　　者：周恒 梁贵友 柳旭 张建平 周时莹 王腾 马骉 ZHOU Heng;LIANG Guiyou;LIU Xu;ZHANG Jianping;ZHOU Shiying;WANG Teng;MA Biao(Intelligent Connected Vehicle Development Institute of China FAW Group Co.,Ltd.,Changchun 130013,China)

机构地区：[1]中国第一汽车集团有限公司智能网联开发院,长春130013

出　　处：《汽车工程学报》2023年第6期803-809,共7页Chinese Journal of Automotive Engineering

摘　　要：针对空中下载(Over The Air,OTA)升级失败时,实时操作系统(Real Time Operating System,RTOS)控制器无法进行软件回滚的问题,提出了一种双分区升级技术,此技术分为同面启动升级和异面启动升级。同面启动升级通过外扩存储器作为备份分区,升级时将原程序复制至备份分区后将软件下载至激活分区启动执行;而异面启动升级通过读取控制器分区信息将软件下载至备份分区,利用地址重映射技术和SWAP AB技术进行分区切换,从而实现升级或失败时软件回滚。通过搭建测试环境验证了该软件回滚技术的可行性、有效性及稳定性。To address the issue that the real-time operating system(RTOS)ECU can't roll back software after an unsuccessful over the air(OTA)upgrade,a dual-slot OTA upgrading technique is proposed,which is divided into the same-side startup and different-side startup methods.The same-side startup upgrade uses extended memory as the backup slot.During the upgrading,the original program is copied to the backup slot,and then the new software is downloaded to the active slot for execution.For the different-side startup upgrade,software is downloaded to the backup partition by reading the slot information of the ECU.Using the address remapping technology and SWAP AB technology,switching slot is achieved,enabling software upgrades or rollbacks in the event of upgrading failures.The feasibility,effectiveness and stability of the proposed software rollback technology are verified by building a test environment.

关 键 词：空中下载技术 双分区 地址重映射 同面启动 异面启动 

分 类 号：U461[机械工程—车辆工程]