基于KF32A微控制器的汽车仪表双分区BootLoader设计  

Design of Dual-partition BootLoader for Automotive Instrument Based on KF32A Microcontroller

作　　者：惠志洲 单慧 HUI Zhizhou;SHAN Hui(R&D Department,Nanjing Xiehe Electronic Technology Company Limited,Nanjing 211100,China;Technology Department,Sangdest Microelectronics(Nanjing)Company Limited,Nanjing 211100,China)

机构地区：[1]南京协和电子科技有限公司研发部,江苏南京211100 [2]桑德斯微电子器件(南京)有限公司技术部,江苏南京211100

出　　处：《汽车实用技术》2024年第12期83-88,共6页Automobile Applied Technology

摘　　要：基于统一诊断服务(UDS)协议的BootLoader在升级前需要读取软硬件版本号。当升级异常中断,仪表黑屏后,可能无法获取到准确的软硬件版本号,升级无法重新进行。为了解决上述问题,提出了软件回滚的三种方式,分析各自的优缺点,以A/B区轮流互为备份的启动方式设计了一款组合仪表的引导程序BOOT。当升级异常中断后,应用程序能够自动回滚到上一个稳定的版本,可以继续工作。利用CANoe软件设计BootLoader上位机,分别按照正常升级、升级异常中断、异常中断后再升级三个步骤进行验证。实验结果表明,当升级中断后,仪表能够回滚到之前的软件版本继续工作,且可以按照原步骤再升级,达到了预期效果。The BootLoader based on the unified diagnostic services(UDS)protocol needs to read the software and hardware version before upgrading.When the upgrade is abnormally interrupted and the automotive instrument screen is black,it may not be able to obtain the accurate software and hardware version,and the upgrade cannot be restarted.In order to solve the above problems,three ways of software rollback are proposed,their advantages and disadvantages are analyzed,and a BOOT program of combined instrument is designed with the boot mode of A/B area alternating with each other.When the upgrade is interrupted abnormally,the application can automatically rolling back to the previous stable version and can continue to work.CANoe software is used to design the upper computer of the BootLoader,and the verification is carried out in three steps:normal upgrade,abnormal upgrade,and upgrade after abnormal interruption.The experimental results show that when the upgrade is interrupted,the instrument can be rolled back to the previous software version to continue to work,and can be upgraded according to the original step,and the expected effect is achieved.

关 键 词：微控制器 双分区 汽车仪表 软件回滚 BOOTLOADER CANOE 

分 类 号：U463.7[机械工程—车辆工程]