AUTOSAR EXP：Firmware Over-The-Air 更新解析

版权申诉

107 浏览量更新于2024-07-18 收藏 659KB PDF 举报

"AUTOSAR EXP Firmware Over The Air.pdf" 这篇文档详细解释了AUTOSAR (AUTomotive Open System ARchitecture) 在经典平台上关于Firmware Over-The-Air (FOTA) 的实现，该技术是智能驾驶和车辆标准中的一个重要组成部分。FOTA允许汽车软件的远程更新，从而提高车辆的安全性、性能以及功能。文档标题 "Explanation of Firmware Over-The-Air" 明确指出其主要内容是解析FOTA的工作原理。文档由AUTOSAR组织负责，并且在R20-11版本的标准发布中占有重要地位。文档状态为已发布，显示了它是一个经过修订和完善的版本。文档的变更历史记录了两个主要的更新阶段： 1. 2020-11-30，发布了20-11版本，更新内容包括：改进了FOTA内部缓冲区处理、细化了FOTA状态机、详细描述了回滚程序，以及进行了编辑性的修订。 2. 2019-11-28，这是初始发布，标志着FOTA相关内容的首次公开。文档的主要内容可能涵盖以下几个方面： 1. **FOTA基础**：FOTA的基本概念，包括为何需要FOTA，以及它如何适应现代汽车的复杂电子架构。 2. **FOTA流程**：详细描述了FOTA更新的整个过程，从软件更新包的生成、验证、传输到汽车端的接收、存储、安装和验证。 3. **内部缓冲区处理**：FOTA过程中如何管理临时存储更新数据的内存，确保更新过程的稳定性和安全性。 4. **状态机设计**：FOTA状态机的结构，包括各个状态（如初始化、下载、安装、验证等）及其转换条件，以确保更新的有序进行。 5. **回滚机制**：当FOTA更新出现问题时，如何回滚到先前版本的软件，保证车辆的正常运行。 6. **安全措施**：FOTA系统如何防止未经授权的访问或恶意攻击，确保更新过程的安全性。 7. **版权与知识产权**：文档强调了所有内容受版权和其他知识产权法律保护，商业利用需遵守相应法规。此文档对于理解AUTOSAR平台上的FOTA实施提供了全面的技术指导，对于汽车制造商、软件供应商以及智能交通领域的工程师来说，是一份重要的参考资料。

Explanation of Firmware Over-The-Air

AUTOSAR CP R20-11

• Verification strategy of the newly flashed SW

• ECU SW version handling and checking (vendor specific)

• ECU SW compatibility/integrity check (vendor specific)

• Any details about the SW architecture of the memory stack

8 of 41 Document ID 945: AUTOSAR_EXP_FirmwareOverTheAir

Explanation of Firmware Over-The-Air

AUTOSAR CP R20-11

2 Constraints and Assumptions

2.1 Prerequisites to the memory stack

Within this document, the term memory stack shall substitute the memory driver (e.g.

FlashDriver) and memory management modules (e.g. Fee), regardless if they are re-

alized as internal or external driver, since no decisions on architectural solutions have

been made yet within AUTOSAR. As long as these prerequisites are under discus-

sion and not yet part of the specification documents, the following assumptions must

be considered and implemented in the memory stack, in order to realize the FOTA

approach as described in this document.

• Access to program flash memory

Up to now AUTOSAR only foresees the access to the data flash sections dur-

ing runtime. The access to program flash sections was not addressed within

AUTOSAR yet and needed to be realized in a proprietary manner (e.g. in boot-

loader mode). To realize the FOTA approach, it is necessary to get read and

write access to the program flash sections during runtime. Therefore an exten-

sion of the AUTOSAR memory stack in order to gain write access to the program

memory is currently under development and planned to be released in R20-11.

• Read-while-write feature

Assuming FOTA shall be realized on HW solutions with A/B swap capability

(memory abstraction), there is a need to write the new software to an inactive

memory section while the active section is accessed for reading during normal

execution in parallel. This mainly affects the planned realization of the program

flash access, where one partition is executed (active) and accessed for reading,

while another non-runtime related partition (inactive) needs to have write access

in order to apply new software in the background. In order to realize the read-

while-write approach, the HW vendor needs to provide the needed functionality

in their MCAL implementation.

• Use of different memory solutions

The FOTA procedure is meant to work with all different kinds memory architec-

tures and techniques. However, the hardware and driver vendors are responsible

to provide the needed interfaces, defined by AUTOSAR MCAL layer, in order to

instrument the FOTA features in the here described manner. Differences between

existing and future hardware solutions and low-level drivers, are expected to be

invisible within all provided interfaces to the memory stack APIs. In other words,

all existing memory architectures shall be supported without affecting any upper

layers in any way.

• Handling of Nv (user) data

While user data (Nv-Data, see section 5.1.1.3) updates are handled by the NvM

module, using its provided features and interfaces, an appropriate mechanism to

9 of 41 Document ID 945: AUTOSAR_EXP_FirmwareOverTheAir

剩余40页未读，继续阅读

电动汽车控制与安全

粉丝: 263
资源: 4186

AUTOSAR EXP：Firmware Over-The-Air 更新解析

AUTOSAR CP标准文档

AUTOSAR_SWS_E2ELibrary.zip

autosar_exp_vfb.pdf

autosar_sws_e2elibrary.zip

autosar_srs_bswgeneral.pdf下载

autosar_sws_diagnostics.pdf

autosar_tr_bswmodulelist.pdf

翻译一下Adaptive AUTOSAR规范文档《AUTOSAR_SWS_Diagnostics.pdf》

autosar_sws_cannetworkmanagement_4.3_中文版本.pdf

*autosar_*.o (.text .text*)

最新资源

autosar_.o (.text .text*)