ZC.Qinglong BootLoader is a self-developed flash programming software (BootLoader) by ZC. Controllers using ZC.Qinglong BootLoader can achieve the update function of the application program through communication methods such as CAN, LIN, SPI, and UART. ZC.Qinglong BootLoader supports chips from NXP, Infineon, Renesas, ST, and other manufacturers, and also supports the program refreshing standards of many car manufacturers, offering customized development services.

Based on ZC.Qinglong BootLoader, ZC.Qinglong FOTA, built on the Infineon TC3xx platform, has realized the OTA (Over-The-Air) functionality. The controller can perform A/B backup, breakpoint resumption, rollback, and other functions, enhancing the security of program refreshing. It also supports the OTA standards of many car manufacturers and provides customized development services.

ZC.Qinglong FOTA can be applied to the controller program refreshing function based on the TLE9893 series chips. The supported controllers include:

Ø  Power Systems

Engine controllers, battery management systems, motor controllers, etc

Ø  Chassis Systems

Electric power steering systems, etc

Intelligent and connected vehicles are the future direction of the automotive industry. The rapid development of smart cars has changed the value of cars. With the rise of user experience needs, system software has become increasingly important, and the trend of software-defined vehicles has become irreversible.The core idea of Software Defined Vehicles (SDV) is that the future of cars will be determined by software technology centered on artificial intelligence, rather than the size of the car's horsepower, whether it has genuine leather seats, or the quality of its mechanical performance. This will become a common development trend in the automotive industry. The industrial structure of the automotive industry is following the development path of the computer and mobile phone industries, and the standard for measuring the quality of cars will shift from the "hardware" level to the level of intelligence and the quality of software services.

In the process of automotive intelligence development, although the importance and proportion of software continue to increase, the research and development cycle of the whole vehicle is invisibly shortened, so the risk of car recalls caused by software vulnerabilities continues to rise. At present, the total code amount of high-end cars has exceeded 100 million lines. Even if controlled according to the highest software standard of CMMI (Capability Maturity Model Integration) level 5, the code defect rate is still 0.32‰, and the scale of potential problems is not to be underestimated. Recall events require car manufacturers to pay huge direct and indirect costs.

For industries in development, facing the major trend of the development of smart cars, system update functions similar to those of Tesla will inevitably become the premise and foundation for the sustainable development of the industry. FOTA (Firmware Over-The-Air) has thus become one of the best solutions for addressing software vulnerabilities and upgrading smart car components.

FOTA wireless upgrades refer to providing firmware upgrade services for terminal devices with networking capabilities through the cloud. Users use the network to obtain smart terminal system upgrade packages on demand and in an easy-to-expand manner, and upgrade through FOTA to complete system repairs and optimizations. Car manufacturers and suppliers can quickly and conveniently achieve iterations of car ECUs, system versions, etc., through professional FOTA upgrade plans, ensuring system security and rapid upgrades, allowing users to experience new functions without replacing hardware equipment.

At present, FOTA has gradually been recognized and has developed into a new trend of the Internet of Vehicles that affects the decisions of OEMs (Original Equipment Manufacturers) and TSPs (Telematics Service Providers). It is also one of the innovative attempts and trends for car manufacturers to improve user experience.

Ø  Utilizes the CAN/LIN protocol for data transmission, in compliance with the ISO14229和ISO15765 standard

Ø  Adaptable to the program update specifications of various car manufacturers

Ø  Supports multiple encryption mechanisms to ensure the security and reliability of data

Ø  Offers update capabilities for both applications and data

Ø  Features safe and stable upgrade processes with mechanisms such as breakpoint resumption, intelligent restoration, and traceability

Ø  Supports differential restoration technology, which can speed up the upgrade process by 90% compared to standard upgrades

Ø  Supports full package upgrades for enhanced security

Ø  Compatible with ZC.Xuanwu program update tools, providing a comprehensive solution for program updates

The Qinglong Ethernet FOTA system architecture supports the FOTA function in communication scenarios such as CAN, LIN, SPI, and Ethernet. It realizes the parsing of UDS messages and diagnostic programming through the Dcm module, and meets the information security requirements of various OEM specifications by adapting to the Crypto Library. The following are the functional descriptions of each module:

Ø  Bootloader

The BootManager module provides FOTA startup management functions and supports the adaptation of hardware and software SecureBoot functions. It stores the expected MAC values of the Bootloader and Application through programming and flashing. During the startup phase, SecureBoot performs software integrity verification by calculating and comparing the MACs of the Bootloader and Application to ensure software security requirements.

Ø  Can Com

The Can module supports CAN and CANFD communication functions.

Ø  Spi Com

The Spi module supports the master-slave programming function. By adapting to the hardware configurations of 5, 6, and 7 wires, it can support multiple SPI communication programming modes.

Ø  Dcm

The Dcm module realizes the diagnostic function based on the support of the communication module, meeting the definitions of ISO 14229 and ISO 15765 standards.

Ø  Crypto, HSM

The Ethernet OTA supports the adaptation of the Muniu Crypto Library functions. It combines asymmetric encryption algorithms with other encryption algorithms to achieve the secure flashing function. It adapts to the certificate authentication function to meet the security diagnostic requirements and adapts to the HSM to improve the stability and verification speed of the Cybersecurity function.

Deployment Modes

Based on TLE989x, ZC.Qinglong FOTA supports two software deployment modes, which can provide users with different implementation solutions.

Ø  Software AB Partition Scheme:

As shown in Figure 5-4, the Application area is divided into Area A and Area B, with only one active area and one inactive area. The active area is used to run the App software, while the inactive area is used for the Bootloader to download new versions of the App software, and the active and inactive areas can be freely switched. The Boot Manager will determine which active area to jump to at startup

Advantages of the scheme:

l  Application A and Application B do not interfere with each other and can run independently.

l  Rolling back is convenient; simply switch the active area and reset to complete the rollback.

l  No hardware support for address mapping functionality is required.

Disadvantages of the scheme:

l  The address allocation for partitions A and B is inconsistent, requiring the use of two sets of address allocations to generate Application software.

Ø  Software Backup Partition Scheme:

As shown in Figure 5-5, the Application area is divided into a running area and a backup area. The running area is used to store the running Application, and the backup area is used to store the Application that was running before the update. When the App software needs to be rolled back, the Bootloader completes the rollback by downloading the data from the Back up Data area back into the Application.

Advantages of the scheme:

l  The Application running address is fixed.

l  The size of the Back up Data area can be reduced through compression algorithms.

Disadvantages of the scheme:

l  Rolling back requires a certain amount of time.

l  Only the Application can be rolled back to an older version; it is not possible to switch an old version back to a new version.

Click to download the product manual