1. A method for rolling back edition of OTA upgrade failure is characterized in that: providing an SOC main controller, an AI chip and an MCU microprocessor, wherein the SOC main controller is in communication connection with the AI chip and the MCU microprocessor; the method comprises the following specific steps:

s1: the SOC master controller downloads the OTA firmware package to the local through a network transmission channel and caches the OTA firmware package;

s2: the SOC master controller decompresses the OTA firmware package, the decompressed OTA firmware package comprises AI firmware, MCU firmware and local firmware, and the SOC master controller creates a firmware distribution task;

s3: the SOC main controller respectively transmits AI firmware and MCU firmware to an AI chip and an MCU microprocessor according to firmware distribution tasks, the local firmware is stored in the SOC main controller, the AI chip and the MCU microprocessor respectively receive the AI firmware and the MCU firmware, and the AI chip and the MCU microprocessor generate a partition instruction when starting to receive the AI firmware and the MCU firmware and send the partition instruction to the SOC main controller;

s4: the SOC master controller generates a partition switching command when receiving a partition instruction, and the AI chip and the MCU microprocessor generate a partition switching identifier;

s5: if the AI chip and the MCU microprocessor complete the reception of the AI firmware and the MCU firmware, the AI chip and the MCU microprocessor respectively generate a receiving completion instruction and send the receiving completion instruction to the SOC main controller, the SOC main controller sends a partition switching command to the AI chip and the MCU microprocessor, the AI chip and the MCU microprocessor send a partition switching identifier to the SOC main controller, and a new firmware partition is established according to the partition switching identifier;

s6: if the AI chip does not finish receiving AI firmware and/or the MCU microprocessor does not finish receiving MCU firmware, the SOC master controller generates an update canceling instruction, the SOC master controller does not send a partition switching command and respectively sends the update canceling instruction to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor cancel a partition switching identifier and keep an old firmware partition when receiving the update canceling instruction;

s7: when the SOC master controller receives the partition switching identifier or generates an update cancelling command, the SOC master controller generates a restart command and sends the restart command to the AI chip and the MCU microprocessor;

s8: if the SOC master controller sends a restart command to the AI chip and the MCU microprocessor after receiving the switching partition identification, the AI chip and the MCU microprocessor are started from the established new firmware partition and perform version synchronous upgrading treatment, and the SOC master controller performs synchronous upgrading treatment according to local firmware;

s9: and if the SOC master controller generates a cancel upgrading command and then sends a restart command to the AI chip and the MCU microprocessor, restarting the AI chip and the MCU microprocessor from the old firmware partition to perform version synchronous rollback starting, and simultaneously performing synchronous rollback starting by the SOC master controller.

2. The OTA upgrade failure rollback version method of claim 1, wherein: the SOC master includes a firmware verification module therein, and step S1 includes:

s101: the firmware verification module analyzes and verifies the OTA firmware;

s102: if the OTA firmware does not meet the upgrading requirement after the firmware verification module verifies the OTA firmware, the firmware verification module deletes the OTA firmware;

s103: the SOC master controller reestablishes a downloading channel to download the OTA firmware again;

s104: and if the firmware verification module verifies the OTA firmware, the OTA firmware meets the upgrading requirement, and the OTA firmware is cached in the SOC main controller.

3. The OTA upgrade failure rollback version method of claim 1, wherein: the creating of the firmware distribution task in step S2 includes:

s201: the SOC master controller generates a firmware sending instruction and sends the firmware sending instruction to the AI chip and the MCU microprocessor;

s202: the AI chip and the MCU microprocessor generate a firmware confirmation instruction after receiving the firmware sending instruction and send the firmware confirmation instruction back to the SOC main controller;

s203: and the SOC master controller establishes a transmission link after receiving a firmware confirmation instruction, and the AI firmware and the MCU firmware are respectively transmitted to the AI chip and the MCU through the transmission link.

4. The OTA upgrade failure rollback version method of claim 1, wherein: the SOC master controller is also provided with a timing module, the timing module comprises a timing unit and a delay unit, a timing strategy, a receiving threshold and a delay threshold are arranged in the timing module, and the timing strategy specifically comprises the following steps:

the timing unit starts timing when the SOC main controller transmits AI firmware and MCU firmware, the timing unit generates a delay signal and transmits the delay signal to the delay unit if the AI chip and the MCU microprocessor do not transmit a receiving completion instruction within the receiving threshold time, the delay unit receives the delay signal to perform timing, and the SOC main controller generates an upgrading cancellation instruction if the AI chip and the MCU microprocessor do not transmit the receiving completion instruction within the delay threshold time;

and if the SOC master controller receives the command of finishing receiving within the receiving threshold and/or the delay threshold, the SOC master controller sends a partition switching command to the AI chip and the MCU microprocessor.

5. The OTA upgrade failure rollback version method of claim 4, wherein: a receiving algorithm for calculating a receiving threshold is arranged in the timing unit, and the receiving algorithm specifically comprises the following steps:

wherein: t represents a time value of the reception threshold; m represents the OTA firmware size; g represents the download speed; a represents a weight value of the reception threshold; b represents a weight value of the download speed.

6. The OTA upgrade failure rollback version method of claim 4, wherein: a delay algorithm for calculating a delay threshold is arranged in the delay unit, and the delay algorithm specifically comprises the following steps:

H＝CT

wherein: h represents a time value of the delay threshold, and C represents a weight value of the delay threshold.

7. The OTA upgrade failure rollback version method of claim 1, wherein: the step S8 specifically includes:

s801: the SOC master controller generates a version synchronization command and sends the version synchronization command to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor send a confirmation synchronization command to the SOC master controller after receiving the version synchronization command;

s802: if the AI chip or the MCU microprocessor is restarted from the old firmware partition, the SOC master controller generates a version rollback command and sends the version rollback command to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor perform version rollback processing when receiving the version rollback command and generate a confirmation rollback instruction and send the confirmation rollback instruction to the SOC master controller when rollback is completed;

s803: and when the SOC master controller receives the back-off confirmation instruction, the SOC master controller generates an upgrading restart instruction and sends the upgrading restart instruction to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor restart the system after receiving the upgrading restart instruction and synchronously upgrade the system from a new firmware partition.

8. The OTA upgrade failure rollback version method of claim 7, wherein: the SOC master controller is also provided with a counting module, a restarting threshold value is preset in the counting module, and the restarting threshold value is used for judging the times that the AI chip and the MCU microprocessor in S803 receive the upgrading restarting instruction;

if the times that the AI chip and the MCU microprocessor receive the upgrading restart instruction are larger than the restart threshold value, restarting the AI chip and the MCU microprocessor from the old firmware partition to perform version synchronous backspacing starting, and simultaneously performing synchronous backspacing starting by the SOC main controller;

and if the times of the AI chip and the MCU microprocessor receiving the upgrading restart instruction are less than or equal to a restart threshold value, the AI chip and the MCU microprocessor are started from the established new firmware subarea and perform version synchronous upgrading treatment, and the SOC master controller performs synchronous upgrading treatment according to local firmware.

Background

With the rapid development of artificial intelligence, the automobile field has come to the intelligent era, the technology of intelligent driving is gradually developed and applied, the situation that a chip cannot be used for control in the process of intelligent control is avoided, a single chip is not enough to meet the processing of an automobile intelligent scheme at present, especially, a plurality of artificial intelligence chips are matched with a main control chip for processing in automatic driving, an integral control system also needs to be upgraded when the intelligent control is carried out, so that the intelligent control processing can be better carried out, an over-the-air (OTA) downloading technology is commonly used in the method of upgrading at present and a firmware package is transmitted to the main control chip, and the main control chip controls the upgrading of the artificial intelligence chip and other chips according to configuration files in the firmware package.

At present, the whole OTA upgrading not only relates to a main control chip, but also relates to an artificial intelligence chip and other chips, due to the complexity of the system and the interference of the environment, the upgrading of the chips is successful in the upgrading process, the condition that the versions are inconsistent exists due to the condition that some chips are failed in upgrading, and the normal use of the whole system is influenced due to the fact that the versions are inconsistent, and the system cannot normally work.

Disclosure of Invention

Aiming at the defects in the prior art, the invention aims to provide a rollback version method for OTA upgrade failure, which has the effects of keeping the system version consistent and realizing the normal operation of the system during the version upgrade.

In order to achieve the purpose, the invention provides the following technical scheme:

a rollback version method for OTA upgrade failure is provided, which comprises providing an SOC main controller, an AI chip and an MCU microprocessor, wherein the SOC main controller is in communication connection with the AI chip and the MCU microprocessor; the method comprises the following specific steps:

s1: the SOC master controller downloads the OTA firmware package to the local through a network transmission channel and caches the OTA firmware package;

s2: the SOC master controller decompresses the OTA firmware package, the decompressed OTA firmware package comprises AI firmware, MCU firmware and local firmware, and the SOC master controller creates a firmware distribution task;

s3: the SOC main controller respectively transmits AI firmware and MCU firmware to an AI chip and an MCU microprocessor according to firmware distribution tasks, the local firmware is stored in the SOC main controller, the AI chip and the MCU microprocessor respectively receive the AI firmware and the MCU firmware, and the AI chip and the MCU microprocessor generate a partition instruction when starting to receive the AI firmware and the MCU firmware and send the partition instruction to the SOC main controller;

s4: the SOC master controller generates a partition switching command when receiving a partition instruction, and the AI chip and the MCU microprocessor generate a partition switching identifier;

s5: if the AI chip and the MCU microprocessor complete the reception of the AI firmware and the MCU firmware, the AI chip and the MCU microprocessor respectively generate a receiving completion instruction and send the receiving completion instruction to the SOC main controller, the SOC main controller sends a partition switching command to the AI chip and the MCU microprocessor, the AI chip and the MCU microprocessor send a partition switching identifier to the SOC main controller, and a new firmware partition is established according to the partition switching identifier;

s6: if the AI chip does not finish receiving AI firmware and/or the MCU microprocessor does not finish receiving MCU firmware, the SOC master controller generates an update canceling instruction, the SOC master controller does not send a partition switching command and respectively sends the update canceling instruction to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor cancel a partition switching identifier and keep an old firmware partition when receiving the update canceling instruction;

s7: when the SOC master controller receives the partition switching identifier or generates an update cancelling command, the SOC master controller generates a restart command and sends the restart command to the AI chip and the MCU microprocessor;

s8: if the SOC master controller sends a restart command to the AI chip and the MCU microprocessor after receiving the switching partition identification, the AI chip and the MCU microprocessor are started from the established new firmware partition and perform version synchronous upgrading treatment, and the SOC master controller performs synchronous upgrading treatment according to local firmware;

s9: and if the SOC master controller generates a cancel upgrading command and then sends a restart command to the AI chip and the MCU microprocessor, restarting the AI chip and the MCU microprocessor from the old firmware partition to perform version synchronous rollback starting, and simultaneously performing synchronous rollback starting by the SOC master controller.

As a further improvement of the present invention, the SOC master includes a firmware verification module therein, and step S1 includes:

s101: the firmware verification module analyzes and verifies the OTA firmware;

s102: if the OTA firmware does not meet the upgrading requirement after the firmware verification module verifies the OTA firmware, the firmware verification module deletes the OTA firmware;

s103: the SOC master controller reestablishes a downloading channel to download the OTA firmware again;

s104: and if the firmware verification module verifies the OTA firmware, the OTA firmware meets the upgrading requirement, and the OTA firmware is cached in the SOC main controller.

As a further improvement of the present invention, the creating of the firmware distribution task in step S2 includes:

s201: the SOC master controller generates a firmware sending instruction and sends the firmware sending instruction to the AI chip and the MCU microprocessor;

s202: the AI chip and the MCU microprocessor generate a firmware confirmation instruction after receiving the firmware sending instruction and send the firmware confirmation instruction back to the SOC main controller;

s203: and the SOC master controller establishes a transmission link after receiving a firmware confirmation instruction, and the AI firmware and the MCU firmware are respectively transmitted to the AI chip and the MCU through the transmission link.

As a further improvement of the present invention, the SOC master controller is further provided with a timing module, the timing module includes a timing unit and a delay unit, the timing module is provided with a timing strategy, a receiving threshold and a delay threshold, and the timing strategy specifically includes:

the timing unit starts timing when the SOC main controller transmits AI firmware and MCU firmware, the timing unit generates a delay signal and transmits the delay signal to the delay unit if the AI chip and the MCU microprocessor do not transmit a receiving completion instruction within the receiving threshold time, the delay unit receives the delay signal to perform timing, and the SOC main controller generates an upgrading cancellation instruction if the AI chip and the MCU microprocessor do not transmit the receiving completion instruction within the delay threshold time;

and if the SOC master controller receives the command of finishing receiving within the receiving threshold and/or the delay threshold, the SOC master controller sends a partition switching command to the AI chip and the MCU microprocessor.

As a further improvement of the present invention, a receiving algorithm for calculating a receiving threshold is provided in the timing unit, and the receiving algorithm specifically includes:

wherein: t represents a time value of the reception threshold; m represents the OTA firmware size; g represents the download speed; a represents a weight value of the reception threshold; b represents a weight value of the download speed.

As a further improvement of the present invention, a delay algorithm for calculating a delay threshold is provided in the delay unit, and the delay algorithm specifically includes:

H＝CT

wherein: h represents a time value of the delay threshold, and C represents a weight value of the delay threshold.

As a further improvement of the present invention, the step S8 specifically includes:

s801: the SOC master controller generates a version synchronization command and sends the version synchronization command to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor send a confirmation synchronization command to the SOC master controller after receiving the version synchronization command;

s802: if the AI chip or the MCU microprocessor is restarted from the old firmware partition, the SOC master controller generates a version rollback command and sends the version rollback command to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor perform version rollback processing when receiving the version rollback command and generate a confirmation rollback instruction and send the confirmation rollback instruction to the SOC master controller when rollback is completed;

s803: and when the SOC master controller receives the back-off confirmation instruction, the SOC master controller generates an upgrading restart instruction and sends the upgrading restart instruction to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor restart the system after receiving the upgrading restart instruction and synchronously upgrade the system from a new firmware partition.

As a further improvement of the present invention, the SOC master controller is further provided with a time counting module, a restart threshold is preset in the time counting module, and the restart threshold is used for determining the number of times that the AI chip and the MCU microprocessor in S803 receive the upgrade restart instruction;

if the times that the AI chip and the MCU microprocessor receive the upgrading restart instruction are larger than the restart threshold value, restarting the AI chip and the MCU microprocessor from the old firmware partition to perform version synchronous backspacing starting, and simultaneously performing synchronous backspacing starting by the SOC main controller;

and if the times of the AI chip and the MCU microprocessor receiving the upgrading restart instruction are less than or equal to a restart threshold value, the AI chip and the MCU microprocessor are started from the established new firmware subarea and perform version synchronous upgrading treatment, and the SOC master controller performs synchronous upgrading treatment according to local firmware.

The invention has the beneficial effects that: the OTA firmware is downloaded through the SOC main controller, the firmware content in the OTA firmware is respectively distributed to the AI chip, the MCU microprocessor and the SOC main controller, when the AI chip and the MCU microprocessor finish receiving the AI firmware and the MCU firmware, the SOC main controller establishes a new firmware partition, the AI chip and the MCU microprocessor synchronously upgrade from the new firmware partition, when the AI chip and/or the MCU microprocessor do not finish receiving the AI firmware and the MCU firmware, the AI chip and the MCU microprocessor synchronously start from the old firmware partition, the consistency of system versions is kept when the versions are upgraded, and the effect that the system keeps normal operation is realized.

Drawings

FIG. 1 is a schematic flow chart embodying the present invention;

fig. 2 is a schematic flowchart showing version synchronization upgrade.

Detailed Description

The present invention will be described in further detail with reference to the accompanying drawings and examples. In which like parts are designated by like reference numerals. It should be noted that the terms "front," "back," "left," "right," "upper" and "lower" used in the following description refer to directions in the drawings, and the terms "bottom" and "top," "inner" and "outer" refer to directions toward and away from, respectively, the geometric center of a particular component.

Referring to fig. 1 and 2, in order to provide a specific embodiment of the OTA upgrade failure rollback version method of the present invention, an SOC main controller, an AI chip, and an MCU microprocessor are provided, and the SOC main controller is in communication connection with the AI chip and the MCU microprocessor; the system comprises an SOC main controller, wherein the SOC main controller comprises a firmware verification module, the firmware verification module is used for verifying OTA firmware, a timing module is further arranged in the SOC main controller, the timing module comprises a timing unit and a delay unit, a timing strategy, a receiving threshold and a delay threshold are arranged in the timing module, and the method comprises the following specific steps:

s1: the SOC master controller downloads the OTA firmware package to the local through a network transmission channel and caches the OTA firmware package;

s2: the SOC master controller decompresses the OTA firmware package, the decompressed OTA firmware package comprises AI firmware, MCU firmware and local firmware, and the SOC master controller creates a firmware distribution task;

s3: the SOC main controller respectively transmits AI firmware and MCU firmware to the AI chip and the MCU according to the firmware distribution tasks, local firmware is stored in the SOC main controller, the AI chip and the MCU microprocessor respectively receive the AI firmware and the MCU firmware, and the AI chip and the MCU microprocessor generate a partition instruction when starting to receive the AI firmware and the MCU firmware and send the partition instruction to the SOC main controller;

s4: the SOC master controller generates a partition switching command when receiving a partition instruction, and the AI chip and the MCU microprocessor generate a partition switching identifier;

s5: if the AI chip and the MCU microprocessor complete the reception of the AI firmware and the MCU firmware, the AI chip and the MCU microprocessor respectively generate a receiving completion instruction and send the receiving completion instruction to the SOC main controller, the SOC main controller sends a partition switching command to the AI chip and the MCU microprocessor, the AI chip and the MCU microprocessor send a partition switching identifier to the SOC main controller, and a new firmware partition is established according to the partition switching identifier;

s6: if the AI chip does not finish receiving the AI firmware and/or the MCU microprocessor does not finish receiving the MCU firmware, the SOC master controller generates an update canceling instruction, the SOC master controller does not send a partition switching command and respectively sends the update canceling instruction to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor cancel a partition switching identifier and keep an old firmware partition when receiving the update canceling instruction;

s7: when the SOC master controller receives the partition switching identifier or generates an update cancelling command, the SOC master controller generates a restart command and sends the restart command to the AI chip and the MCU microprocessor;

s8: if the SOC master controller receives the switching partition identification and then sends a restart command to the AI chip and the MCU microprocessor, the AI chip and the MCU microprocessor are started from the established new firmware partition and perform version synchronous upgrading treatment, and meanwhile, the SOC master controller performs synchronous upgrading treatment according to local firmware, so that the synchronous upgrading of systems in the SOC master controller, the AI chip and the MCU microprocessor is realized, and the consistency of the upgraded versions is kept;

s9: if the SOC master controller generates an upgrade canceling command and then sends a restart command to the AI chip and the MCU microprocessor, the AI chip and the MCU microprocessor are restarted from the old firmware partition to synchronously back up and start the versions, and meanwhile, the SOC master controller synchronously backs up and starts up, so that the SOC master controller, the AI chip and the MCU microprocessor fail to upgrade and back up to the old versions and keep the versions consistent.

Wherein the step of S1 further includes:

s101: the firmware verification module analyzes and verifies the OTA firmware;

s102: if the OTA firmware is verified by the firmware verification module and does not meet the upgrading requirement, the OTA firmware is deleted by the firmware verification module;

s103: the SOC master controller reestablishes a downloading channel to download the OTA firmware again, and a network of the downloading channel downloads the OTA firmware by using a 4G or 5G network;

s104: and if the firmware verification module verifies the OTA firmware, the OTA firmware meets the upgrading requirement, and the OTA firmware is cached in the SOC main controller.

Creating the firmware distribution task in step S2 includes:

s201: the SOC master controller generates a firmware sending instruction and sends the firmware sending instruction to the AI chip and the MCU microprocessor;

s202: the AI chip and the MCU microprocessor generate a firmware confirmation instruction after receiving the firmware sending instruction and send the firmware confirmation instruction back to the SOC main controller;

s203: the SOC main controller establishes a transmission link after receiving the firmware confirmation instruction, the AI firmware and the MCU firmware are respectively transmitted to the AI chip and the MCU microprocessor through the transmission link, and the transmission link is established as a TCP transmission control protocol channel, so that the transmission rate of the AI firmware and the MCU firmware is improved, and the file is not easy to lose during transmission.

The timing strategy specifically comprises:

the timing unit starts timing when the SOC main controller transmits AI firmware and MCU firmware, the timing unit generates a delay signal and transmits the delay signal to the delay unit when the AI chip and the MCU microprocessor do not transmit a receiving completion instruction within the receiving threshold time, the delay unit receives the delay signal to perform timing, and the SOC main controller generates an upgrading cancellation instruction when the AI chip and the MCU processor do not transmit the receiving completion instruction within the delay threshold time;

if the SOC master controller receives the command of finishing receiving within the receiving threshold and/or the delay threshold, the SOC master controller sends a partition switching command to the AI chip and the MCU microprocessor;

a receiving algorithm used for calculating a receiving threshold value is arranged in the timing unit, and the receiving algorithm specifically comprises the following steps:

wherein: t represents a time value of the reception threshold; m represents the OTA firmware size; g represents the download speed; a represents the weight value of the receiving threshold, and the value range of A is 1-2; b represents the weight value of the downloading speed, and the value range of B is 0.5-1; for example: when the size of the OTA firmware is 1000M, the downloading speed is 3M/s, A is 1.5, B is 0.5, and the receiving threshold time T is 1000 s.

A delay algorithm for calculating a delay threshold is arranged in the delay unit, and the delay algorithm specifically comprises the following steps:

H＝CT

wherein: h represents the time value of the delay threshold, C represents the weight value of the delay threshold, the value range of C is 0.1-0.5, C is 0.2, namely when T is 1000S, the delay threshold H is 200S.

Step S8 specifically includes:

s801: the SOC master controller generates a version synchronization command and sends the version synchronization command to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor send a confirmation synchronization command to the SOC master controller after receiving the version synchronization command;

s802: if the AI chip or the MCU microprocessor is restarted from the old firmware partition, the SOC master controller generates a version rollback command and sends the version rollback command to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor perform version rollback processing when receiving the version rollback command, generate a rollback confirmation instruction when rollback is completed and send the rollback confirmation instruction to the SOC master controller;

s803: when the SOC master controller receives the back-off confirmation instruction, the SOC master controller generates an upgrading restart instruction and sends the upgrading restart instruction to the AI chip and the MCU microprocessor, and the AI chip and the MCU microprocessor restart the system after receiving the upgrading restart instruction and synchronously upgrade the system from a new firmware partition;

the SOC master controller is also provided with a counting module, a restarting threshold value is preset in the counting module, the restarting threshold value is used for judging the times of receiving the upgrading restarting instruction by the AI chip and the MCU microprocessor in the S803, and the times of restarting the threshold value in the embodiment are selected to be 3 times;

if the times that the AI chip and the MCU microprocessor receive the upgrading restart instruction are larger than the restart threshold value, restarting the AI chip and the MCU microprocessor from the old firmware partition to perform version synchronous backspacing starting, and simultaneously performing synchronous backspacing starting by the SOC main controller;

if the times that the AI chip and the MCU microprocessor receive the upgrading restart instruction are less than or equal to the restart threshold, the AI chip and the MCU microprocessor are started from the established new firmware subarea and perform version synchronous upgrading treatment, and the SOC master controller performs synchronous upgrading treatment according to local firmware;

therefore, when synchronous upgrading is carried out, if the AI chip or the MCU microprocessor does not synchronously pass through the synchronous upgrading in the new firmware partition, the upgrading is carried out again after rollback, the upgraded version is maintained after the upgrading is successful within the preset restarting threshold value, and if the upgrading is not successful after exceeding the preset restarting threshold value, the synchronous rollback is carried out to keep the versions consistent.

The working principle and the effect are as follows:

the OTA firmware is downloaded through the SOC main controller, the firmware content in the OTA firmware is respectively distributed to the AI chip, the MCU microprocessor and the SOC main controller, when the AI chip and the MCU microprocessor finish receiving the AI firmware and the MCU firmware, the SOC main controller establishes a new firmware partition, the AI chip and the MCU microprocessor synchronously upgrade from the new firmware partition, when the AI chip and/or the MCU microprocessor do not finish receiving the AI firmware and the MCU firmware, the AI chip and the MCU microprocessor synchronously start from the old firmware partition, the consistency of system versions is kept when the versions are upgraded, and the effect that the system keeps normal operation is realized.

The above description is only a preferred embodiment of the present invention, and the protection scope of the present invention is not limited to the above embodiments, and all technical solutions belonging to the idea of the present invention belong to the protection scope of the present invention. It should be noted that modifications and embellishments within the scope of the invention may occur to those skilled in the art without departing from the principle of the invention, and are considered to be within the scope of the invention.