SDAA317 April 2026 AM62L
Traditional OTA (Over-The-Air) updates employ a simple mechanism where new applications directly overwrite existing ones. This lacks backup mechanisms, status flags, monitoring, and protection for critical areas. If an update fails, the device can become unusable, requiring manual intervention.
This paper proposes a novel OTA process using a dual-slot design, incorporating status flags and an automatic rollback mechanism to verify automatic system recovery in the event of update failure. Key innovations include: dual-slot design, status flag system, automatic rollback mechanism, and protection of critical areas.
The combined advantages of this design include: enhanced system robustness, improved maintainability, no manual intervention required, prevention of consecutive failures, and protection of critical system components.
The OTA system design method proposed in this paper is not only applicable to AM62 processors but can also be extended to TI's Jacinto™ processor family (for automotive infotainment and ADAS applications), Sitara processor family (for industrial automation and edge computing devices), and other ARM-based TI processors.
Through this flexible and robust OTA system design, devices using TI processors can achieve more reliable remote update capabilities, significantly reducing field maintenance costs and improving the end-user experience. This design approach provides a valuable reference for various embedded systems that require high-reliability OTA functionality.