Intelligent and connected vehicles are the future direction of the automotive industry. The rapid development of smart cars has changed the value of cars. With the rise of user experience needs, system software has become increasingly important, and the trend of software-defined vehicles has become irreversible.The core idea of Software Defined Vehicles (SDV) is that the future of cars will be determined by software technology centered on artificial intelligence, rather than the size of the car's horsepower, whether it has genuine leather seats, or the quality of its mechanical performance. This will become a common development trend in the automotive industry. The industrial structure of the automotive industry is following the development path of the computer and mobile phone industries, and the standard for measuring the quality of cars will shift from the "hardware" level to the level of intelligence and the quality of software services.

In the process of automotive intelligence development, although the importance and proportion of software continue to increase, the research and development cycle of the whole vehicle is invisibly shortened, so the risk of car recalls caused by software vulnerabilities continues to rise. At present, the total code amount of high-end cars has exceeded 100 million lines. Even if controlled according to the highest software standard of CMMI (Capability Maturity Model Integration) level 5, the code defect rate is still 0.32‰, and the scale of potential problems is not to be underestimated. Recall events require car manufacturers to pay huge direct and indirect costs.

For industries in development, facing the major trend of the development of smart cars, system update functions similar to those of Tesla will inevitably become the premise and foundation for the sustainable development of the industry. FOTA (Firmware Over-The-Air) has thus become one of the best solutions for addressing software vulnerabilities and upgrading smart car components.

FOTA wireless upgrades refer to providing firmware upgrade services for terminal devices with networking capabilities through the cloud. Users use the network to obtain smart terminal system upgrade packages on demand and in an easy-to-expand manner, and upgrade through FOTA to complete system repairs and optimizations. Car manufacturers and suppliers can quickly and conveniently achieve iterations of car ECUs, system versions, etc., through professional FOTA upgrade plans, ensuring system security and rapid upgrades, allowing users to experience new functions without replacing hardware equipment.

At present, FOTA has gradually been recognized and has developed into a new trend of the Internet of Vehicles that affects the decisions of OEMs (Original Equipment Manufacturers) and TSPs (Telematics Service Providers). It is also one of the innovative attempts and trends for car manufacturers to improve user experience.

    1.Product Features

Ø  Utilizes the DoIP protocol for data transmission, in compliance with the ISO13400 standard

Ø  Adaptable to the program update specifications of various car manufacturers

Ø  Supports multiple encryption mechanisms to ensure the security and reliability of data

Ø  Offers update capabilities for both applications and data

Ø  Features safe and stable upgrade processes with mechanisms such as breakpoint resumption, intelligent restoration, and traceability

Ø  Supports differential restoration technology, which can speed up the upgrade process by 90% compared to standard upgrades

Ø  Supports full package upgrades for enhanced security

Ø  Compatible with ZC.Xuanwu program update tools, providing a comprehensive solution for program updates

ZC.Xuanwu-- Program Update Tool

    2.Deployment Modes

ZC.Qinglong FOTA supports three deployment methods, which can provide users with different implementation schemes.。

Ø  Hardware AB Partition Scheme:

Hardware AB Partition Scheme

As shown in Figure 5-3, the Flash area is divided into Area A and Area B, with only one active area and one inactive area. The active area is used to run the App software, while the inactive area is used for the Bootloader to download new versions of the App software, and the active and inactive areas can be freely switched through hardware functionality to run the corresponding area software.

Advantages of the scheme:

l  Application A and Application B do not interfere with each other and can run independently.

l  Rolling back is convenient; simply switch the active area and reset to complete the rollback.

Disadvantages of the scheme:

l  Requires the chip to support address mapping functionality.

l  Address allocation is limited by the address mapping functionality.

Ø  Software AB Partition Scheme:

As shown in Figure, the Application area is divided into Area A and Area B, with only one active area and one inactive area. The active area is used to run the App software, while the inactive area is used for the Bootloader to download new versions of the App software, and the active and inactive areas can be freely switched. The Boot Manager will determine which active area to jump to at startup

Advantages of the scheme:

l  Application A and Application B do not interfere with each other and can run independently.

l  Rolling back is convenient; simply switch the active area and reset to complete the rollback.

l  No hardware support for address mapping functionality is required.

Disadvantages of the scheme:

l  The address allocation for partitions A and B is inconsistent, requiring the use of two sets of address allocations to generate Application software.

Ø  Software Backup Partition Scheme:

Software Backup Partition Scheme

As shown in Figure, the Application area is divided into a running area and a backup area. The running area is used to store the running Application, and the backup area is used to store the Application that was running before the update. When the App software needs to be rolled back, the Bootloader completes the rollback by downloading the data from the Back up Data area back into the Application.

Advantages of the scheme:

l  The Application running address is fixed.

l  The size of the Back up Data area can be reduced through compression algorithms.

Disadvantages of the scheme:

l  Rolling back requires a certain amount of time.

l  Only the Application can be rolled back to an older version; it is not possible to switch an old version back to a new version.

 3.PROCESS DOCUMENTATION

ZC.Qinglong BootLoader is a self-developed program refreshing software (BootLoader) by ZC Technology. Controllers using ZC.Qinglong BootLoader can achieve the update function of the application program through communication methods such as CAN, LIN, SPI, and UART. ZC.Qinglong BootLoader supports chips from NXP, Infineon, Renesas, ST, and other manufacturers, and also supports the program refreshing standards of many car manufacturers, offering customized development services.

Based on ZC.Qinglong BootLoader, ZC.Qinglong FOTA, built on the Infineon TC3xx platform, has realized the OTA (Over-The-Air) functionality. The controller can perform A/B backup, breakpoint resumption, rollback, and other functions, enhancing the security of program refreshing. It also supports the OTA standards of many car manufacturers and provides customized development services.

ZC.Qinglong FOTA can be applied to the controller program refreshing function based on the TC3xx series chips. The supported controllers include:

Ø  Body Systems Vehicle

body controllers, air conditioning controllers, door controllers, gateways, etc

Ø  Power Systems

Engine controllers, battery management systems, motor controllers, whole vehicle controllers, etc

Ø  Chassis Systems

Electric power steering systems, anti-lock braking systems, electronic stability systems, etc

Ø  ADAS System

Radar, camera systems, etc 

ZC. Qinglong FOTA software is located within the FOTA Master ECU/GUI Test Tool, controlling the FOTA target ECU to perform update operations through the TCP/IP protocol stack and CAN communication UDS diagnostic commands, providing application upgrade capabilities for the upper-layer APP.

ZC.Qinglong FOTA software includes the following functional modules:：

Ø  SoAd Network Adaptation Layer processing SoAd

Implementing the mapping relationship between I-PDU ID and Socket, transforming PDU communication into Socket communication

Ø  Diagnostic Interface processing : DoIP、DoCAN

Diagnostic communication and network management functions responsible for data transmission

Ø  DCM Diagnostic Communication Management DCM

Implementing the complete UDS protocol, responsible for process control

Ø  FOTA Handler

Responsible for application installation, application verification, and rollback operations in case of errors

Ø  SecM Security Management Algorithm SecM

Implementation of security algorithms, responsible for data security and access control.

Click to download the product manual