System and method for transmitting at least one update package for at least one motor vehicle control device

Abstract

The invention relates to a system (1) for transmitting at least one update package (3) for at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) of a motor vehicle (6), having a motor-vehicle-external storage device (2) designed to store the update package (3) and a communication device (4) designed to wirelessly transmit the update package (3) from the motor-vehicle-external storage device (2) to at least one transmission mechanism (5, 9, 11) of the system (1), which dominates the transmission process of the update package (3) for the at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) and is designed to install the update package (3) on the at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c), wherein the at least one transmission mechanism (5, 9, 11) is arranged in the interior of the motor vehicle.

Description

Technical Field

[0001] This invention relates to a system for transmitting at least one update package for at least one vehicle control device. The system includes an external vehicle storage device designed to store the update package. The system also includes a communication device designed to wirelessly transmit the update package from the external vehicle storage device to at least one transmission mechanism within the system, wherein the transmission mechanism controls the transmission process of the update package for the at least one control device and is designed to mount the update package on the at least one control device. Background Technology

[0002] Updating distributed control unit combinations is an extended form of control unit updates. Relatedly, the software technology interrelationships within the combination are identified before the update, and the installation of each software update is organized based on these interrelationships. This requires forming domains from several control unit combinations to distribute the data load across the vehicle during download and to accelerate installation.

[0003] DE 10 2016 210 672 A1 discloses a method for wirelessly remotely updating vehicle software. The method includes manager software hosted on a server, wherein the server is a client server or a central server accessible to clients. The manager software is used to select a group of target vehicles and generate differentiated update packages containing an update manager. The update packages are provided by download manager software for download to one or more target vehicles. The update manager is used in each vehicle to update the one or more target control devices.

[0004] DE 10 2016 210 674 A1 discloses a method for real-time, large-scale distribution of software updates for vehicle components containing flash memory. The method includes: providing a client server to initiate a software update; providing an intermediate server that communicates with the client server during operation; providing a distributed network comprising multiple communication servers, each of which can communicate with devices in multiple corresponding vehicles during operation; controlling the devices to communicate with one of the multiple communication servers via a wireless network to receive and apply the software update to an electronic control unit (ECU) in the corresponding vehicle; controlling the devices to generate status updates and transmit the status updates to the communication servers via a wireless network; and controlling the communication servers to generate a data stream comprising data packets from the multiple corresponding vehicles and sending the data stream to the intermediate server.

[0005] In the prior art, there is a transmission mechanism (download manager) designed to lead the transmission process of an update package for at least one control device outside the vehicle and install the update package on said control device. With this transmission mechanism, the update package can then be used by multiple vehicles. This has a particular disadvantage: it cannot be tailored to specific vehicles or vehicle states. This could lead to the download manager downloading the program to the vehicle's telecom unit, potentially overloading the battery installed in the vehicle. This could deplete the battery, rendering the vehicle inoperable. Furthermore, it cannot accommodate vehicle-specific characteristics, such as those found in vehicle network structures (domains) within the vehicle. Summary of the Invention

[0006] The objective of this invention is to provide a system and a method for selectively downloading and installing update packages for at least one control device, tailored to the specific needs of a motor vehicle.

[0007] This task is accomplished by the system and method according to the independent claims.

[0008] One aspect of the invention relates to a system for transmitting at least one update package for at least one motor vehicle control device. The system includes an external storage device for the motor vehicle designed to store the update package. Additionally, the system includes a communication device designed to wirelessly transmit the update package from the external storage device to at least one transmission mechanism of the system, wherein the transmission mechanism leads the transmission process of the update package for the at least one control device and is designed to install the update package on the at least one control device.

[0009] It is stipulated that at least one transmission mechanism is located inside the vehicle. This allows for the appropriate distribution of update packages throughout the entire vehicle network and enables the monitoring of the installation. Therefore, update packages can be supplied specifically and flexibly to all groups of vehicles or control units, independent of vehicle structure. Particularly feasible here is that the update packages can be executed in a predetermined order according to corresponding priorities. Thus, vehicle-specific updates can be performed for the at least one control unit. In particular, the different interrelationships between control units can be considered when there are multiple control units. Furthermore, the solution of this invention enables an accelerated installation process.

[0010] Furthermore, it is stipulated that the transmission process of at least one update package for the multiple transmission mechanisms and its installation on the at least one control device can be guided by a leading mechanism within the vehicle. In other words, if multiple transmission mechanisms are installed within the vehicle, the download of update packages can be controlled by the leading mechanism. This allows for, for example, hierarchical classification within the vehicle network, so that, for example, components with higher priority can be updated first, while, for example, components with lower priority can be updated later. This leading mechanism can then be referred to as the master control mechanism, which, for example, uses a cross-activity ID, so that each transmission mechanism knows whether it is part of a cross-activity and therefore must participate together in the agreement of update packages. For the exchange of information between the various transmission mechanisms and the updatable control device, a shared interface is provided, which must be available to all transmission mechanisms.

[0011] Additionally, one of the multiple transmission mechanisms can be selected as the leading mechanism, responsible for leading the transmission process across the multiple transmission mechanisms and executing the installation on at least one control device. If multiple update packages are executed across multiple domains, one transmission mechanism in particular from one domain can be designated as the leading unit, the so-called master control mechanism. The master control mechanism is selected within the vehicle for one activity and is responsible for initiating updates in the control device of its domain, but also controls updates in other domains. This is crucial because one control device in a distributed application may reference new parameters, and the application in another control device may be based on those new parameters. Therefore, the preferred component must always be selected. This results in a hierarchy within updates controlled by the master control mechanism. The master control mechanism accomplishes this role, particularly by consistently fulfilling its role in one of the vehicle's transmission mechanisms. This master control mechanism selection criterion can be that the transmission mechanism is part of the vehicle's basic equipment and is independent of add-on equipment.

[0012] The at least one control device may in particular be an electronic control unit (ECU). This control device is particularly designed as an electronic computing device. The vehicle's external storage device is, in particular, a server, which may, for example, communicate with a network. The system's transmission mechanism is, in particular, a so-called download manager, which is formed here within the vehicle and is designed to lead or manage the transmission process of the update package and to install the update package on the at least one control device. For example, the vehicle may have a communication device by which it can communicate with the communication device of the storage device, and the update package can be received. The communication device may, for example, be a so-called remote communication control unit (TCU).

[0013] "Dominance" specifically refers to control over the installation and / or consideration of functional relevance. Additionally, "dominance" can mean "causing" the installation and / or downloading of update packages from external storage. Installation specifically refers to the control of, for example, the transmission of useful data to the control device. In this case, the transmission mechanism can be designated to dominate and directly execute the installation for the control device. Alternatively, the transmission mechanism can dominate the installation by allowing the control device to receive control information and for the control device to download and install software (i.e., update packages) itself from external storage. Therefore, the control device itself can be designed as a communication device, but without direct communication with external communication devices related to control data.

[0014] Specifically, it is stipulated that so-called update package activities can be defined in the vehicle's external storage device by using vehicle information from the transmission mechanism as a set of rules. These rules are stored in the storage device and are applied to all vehicles, adapting to target characteristics. Thus, an activity can be dynamically formed without prior knowledge of the exact range of vehicles. If a rule applies to a vehicle, the vehicle's external storage device first synchronizes control data with the transmission mechanism to inform the vehicle of the type and scope of the update package. Then, the transmission mechanism downloads the useful data of the update package and installs it in the relevant control device.

[0015] Therefore, activities, such as starting, pausing, and stopping, can be controlled via the vehicle's external storage device. If an activity is defined and started, it continues until the vehicle has been processed within the defined scope. This is categorized as successful update or update error. If an update error occurs, the update package can be restarted. If the activity is paused, the rules are not further transmitted to the vehicle, so only vehicles that have already started downloading will continue downloading the update package. When the activity stops, the vehicle's external storage device can terminate the download and installation of the update package in the transmission mechanism via a command. Accordingly, early termination of the update package activity can also be achieved when, for example, the update package may contain serious errors and its propagation should be stopped immediately.

[0016] Through the synchronization mechanism, the vehicle's external storage device can obtain status information about downloads and installations and monitor it in the activity management system. Furthermore, errors and installation failures that can be monitored in this way will be reported.

[0017] The synchronization mechanism forms the basis for data exchange between the vehicle and its external storage device. It aggregates the software identification characteristics of the control devices within the vehicle that need updating through a transmission mechanism. The transmission mechanism periodically synchronizes with the external storage device, thus caching all updatable vehicles. If the transmission mechanism receives a new update task through synchronization with the external storage device, it should then obtain the control data for the update package. Using this control data, the transmission mechanism can update the relevant control devices within the vehicle network, taking into account different correlations.

[0018] Software correlation is addressed through a broad suite of software components, which are interpreted by the transmission mechanism and used to transmit each piece of software within the suite to its respective control unit. For example, vehicle identification numbers, currently available software versions, and software identification codes are used as characteristics.

[0019] In particular, it can be stipulated that a software package consisting of multiple software programs or software subsets is called an update package, but it also refers to a non-fixed integration of software and update information.

[0020] This system can be provided, in particular, for individual motor vehicles as well as for groups of motor vehicles. In other words, the update package can be provided to an individual motor vehicle equipped with the transmission mechanism. Alternatively, the system can provide the update package to multiple motor vehicles, where each individual motor vehicle then has its own transmission mechanism.

[0021] According to an advantageous design, the at least one transmission mechanism can guide the transmission process and its installation on the at least one control device based on judgment criteria. Therefore, it can be specifically adapted to the functions or network architecture within the vehicle. This allows for targeted installation of the update package on the at least one control device according to the specific vehicle.

[0022] It has also proven advantageous to design the transmission mechanism such that it guides the transmission process and performs the installation on the at least one control device based on a functional judgment criterion. This functional judgment criterion could, for example, be for the active power supply of the motor vehicle. In other words, for example, the update package can only be downloaded to the transmission mechanism when the ignition is turned on. Therefore, for example, it can prevent the motor vehicle's battery from discharging.

[0023] In another advantageous design, the transmission mechanism can be designed such that it guides the transmission process and performs the installation on the at least one control device based on judgment criteria related to the physical components of the control device. These physical components are, in particular, so-called hardware. Therefore, hardware-side connectivity can be provided when updating with an update package. Hardware-side connectivity is achieved, for example, through the integration of a bus system.

[0024] It is also advantageous to design the transmission mechanism such that it guides the transmission process and performs the installation on the at least one control device based on judgment criteria related to the variable components of the control device. The variable components of the control device are, in particular, so-called software. Software-side correlation can operate within different control device software within a single system, or it can be cross-system correlation, which can be described as software combination / interconnection. For example, consider common parameters in different software within different control devices. It is important to note that control device software with such correlation must be updated accordingly. Software correlation is addressed through extensive software combinations, which are interpreted by the transmission mechanism and transmitted to their respective control devices. For example, vehicle identification numbers, currently available software versions, and software identification codes are used as characteristics.

[0025] In another advantageous design, the vehicle can have multiple control devices, and the transmission mechanism governs the transmission of update packages for these multiple control devices and is designed to install the update packages on these multiple control devices. Therefore, the update packages can be distributed for different control devices via the single transmission mechanism. Thus, for example, activities for controlling update packages for different control devices can be established and monitored via an external storage device of the vehicle. Specifically, the multiple control devices or network structure can be referred to as domains. In particular, it can be specified that if the activity involves the multiple control devices, each control device and transmission mechanism is also listed in the external storage device of the vehicle. The structure of the sub-networks (i.e., the so-called domains) must be known and taken into account at this time. By clearly identifying each domain and global activity, the transmission mechanism ensures timely updates to its subordinate control devices. Once the control data has been synchronized with the transmission mechanism, the transmission mechanism can automatically download the update package from the external storage device of the vehicle. If the update package is subsequently downloaded, the transmission mechanism automatically begins installation on the respective designated control devices.

[0026] According to another advantageous design, the vehicle can have multiple control devices, and the transmission mechanism dominates the transmission process of multiple update packages for the multiple control devices and is designed to install the multiple update packages on the multiple control devices. Alternatively, the transmission mechanism may be designed in a simplified manner, whereby it performs the transmission process and forwards the update packages to the multiple control devices. Thus, it is possible for example, the update packages to be designed to be different, and the corresponding control devices can be updated with the corresponding update packages by downloading multiple update packages at once using the transmission mechanism. This allows for resource-efficient updates to each control device. It is feasible that the simplified transmission mechanism is integrated into the respective control device, which can dominate or control the downloading and installation of useful data / control data on the control device. The transmission mechanism is thus specifically designed to be responsible only for transmitting data from external storage devices or communication devices of the vehicle, and, when necessary, for downloading update package information from external storage devices. This allows for the simple downloading and installation of at least one update package for the at least one control device.

[0027] Advantageously, the vehicle has multiple transmission mechanisms, each of which independently manages its own transmission process and is designed to install update packages on at least one corresponding control device associated with that transmission mechanism. To enable multiple control devices within the vehicle to complete their updates, these transmission mechanisms can be installed within the vehicle, each independently performing synchronization with an external storage device. Therefore, on the one hand, more specific types of control devices (e.g., entertainment system components or safety-related components) can be recorded in the external storage device, as the transmission mechanisms have fixed control device affiliations within the vehicle and thus predetermined communication structures. On the other hand, this also allows new control device types to be identified in the external storage device by connecting to a new update domain via its transmission mechanisms. Therefore, updates for each control device within the vehicle can be performed specifically for the vehicle and for a specific domain.

[0028] Advantageously, the transmission mechanism is selected based on the update package to be transmitted, which, in the case of multiple transmission mechanisms, dominates the transmission process and installation on at least one control device. This is therefore a dynamic selection of the master control mechanism. This can be accomplished dynamically, for example, through communication protocols between transmission mechanisms for each update package activity. In this case, once the transmission mechanism recognizes from the update package that it is a cross-domain update, it must select a master control mechanism. The transmission mechanism must then inform all other transmission mechanisms accordingly and trigger the selection so that it can control the subsequent download and installation activities of these individual domains. Here, the master control mechanism selection criterion can also be that the transmission mechanism is part of the vehicle's basic equipment and is unrelated to add-on equipment. The selection of the master control mechanism for updates must be re-executed for each update package. For this purpose, a common interface must be provided as specified to facilitate information exchange between the transmission mechanism and the updateable control device.

[0029] It is also advantageous that update package information can be transmitted from the vehicle's external storage device to the transmission mechanism before the update package transmission process, and / or can be transmitted from the storage device to the transmission mechanism before the update package transmission process. Here, the update package information includes information about other update package storage locations separate from the storage device, and the transmission mechanism is designed to download the update package from these other storage locations. In other words, by providing information before obtaining the actual update package, the transmission mechanism can use this information to determine when, for example, it should download the update package. This can, for example, depend on hardware-side or software-side functional judgment criteria. Thus, downloading can be specifically implemented for the vehicle or its condition. It is also advantageous that the update package information includes information about other storage locations. For example, the other storage location could be a network, from which the update package can be downloaded. Therefore, the update package can be stored not only on the vehicle's external storage device but also, for example, in other storage locations. By providing information about other update package storage locations through the vehicle's external storage device, the transmission mechanism can then independently download the update package from these other storage locations.

[0030] According to another advantageous design, the at least one control device can be designed as a control device for a transmission mechanism or a control device for a vehicle functional unit. If, for example, the transmission mechanism itself is related to updates, then the control device for the transmission mechanism must be considered separately from other control devices to be updated, because updates to the transmission mechanism may also affect updates to other control devices in the vehicle network, especially in the domain. Therefore, for example, separate update packages can be provided. Alternatively, the vehicle can distribute data downloads within the vehicle among defined participants, i.e., so-called domains. The domain can be specifically designated in the vehicle's external storage device based on rules, so that update packages can be specifically formed for the domain. The domain's transmission mechanism must then coordinate and prioritize the update packages of the control devices assigned to it. The functional unit can be, for example, an auxiliary system or an entertainment system, which is not part of the transmission mechanism. In addition to the examples described, other functional units installed within the vehicle can also be implemented. Therefore, the enumeration of functional units should be considered as illustrative rather than exhaustive.

[0031] In another advantageous design, the status information signal can be transmitted to an external vehicle storage device via this transmission mechanism. Here, the status information signal may include information about the status of the transmission process and / or the installation status on the control device. In other words, information about the update package installation or download status can be transmitted to the external vehicle control system via the status information signal. Therefore, the status can be checked using the external vehicle storage device.

[0032] Another aspect of the invention relates to a method for transmitting at least one update package for at least one motor vehicle control device, wherein the at least one update package is provided by a storage device and wirelessly transmitted from the storage device to at least one transmission mechanism via a communication device, the transmission mechanism controlling the transmission process of the at least one update package and its installation on the at least one control device. The update package will then be transmitted to an in-vehicle transmission mechanism.

[0033] Specifically, it is stipulated that the transmission process is guided according to a functional judgment criterion, and the installation on the at least one control device is also performed according to the same functional judgment criterion. Alternatively, it can be stipulated that the transmission process is led by the transmission mechanism and the installation on the at least one control device is performed according to another judgment criterion related to the physical components of the control device. It is also feasible that the transmission process is led by the transmission mechanism and the installation on the at least one control device is also performed by the transmission mechanism, based on yet another judgment criterion related to the variable components of the control device.

[0034] Alternatively, it can be stipulated that the transmission process of the update package for multiple control devices is led by the transmission mechanism, and the update package is installed on the multiple control devices by means of the transmission mechanism.

[0035] It can also be stipulated that a transmission mechanism is used to lead the transmission process of multiple update packages for multiple control devices, and that the multiple update packages are installed on multiple control devices using the transmission mechanism.

[0036] It is also advantageous to use multiple transmission mechanisms to independently control their respective transmission processes, and to use these multiple transmission mechanisms to install update packages on at least one corresponding control device associated with the respective transmission mechanism.

[0037] It can also be stipulated that, in the case of multiple transmission mechanisms, one of the transmission mechanisms is selected as the dominant mechanism, and the selected transmission mechanism is used to lead the transmission process for the multiple transmission mechanisms and to perform the installation on the at least one control device.

[0038] Alternatively, it can be stipulated that update package information is transmitted from the storage device to the transmission mechanism before the update package transmission process, and / or the update package information is transmitted from the storage device to the transmission mechanism before the update package transmission process, wherein the update package information includes information about another storage location of other update packages separate from the storage device, and the update package is downloaded from the other storage location by means of the transmission mechanism.

[0039] According to another advantageous design, the status information signal can be transmitted to the storage device by means of the transmission mechanism. Here, the status information signal may contain information about the status of the transmission process and / or about the status of the installation on the control device.

[0040] Another aspect of the invention relates to a motor vehicle having a communication device designed to wirelessly transmit an update package from an external storage device of the motor vehicle to at least one internal transmission mechanism of the motor vehicle, wherein the transmission mechanism dominates, in particular manages, the transmission process of the update package for at least one motor vehicle control device and is designed to install the update package on at least one control device.

[0041] A favorable design for the system should be considered as a favorable design for both the method and the vehicle. The system and the vehicle therefore possess thematic characteristics to allow for the execution of the method. Attached Figure Description

[0042] Other advantages, features, and details of the invention will become apparent from the following description of preferred embodiments and in conjunction with the accompanying drawings. Features and combinations thereof mentioned above in the specification, as well as features and combinations thereof mentioned hereafter in the description of the drawings and / or shown individually in the figures, may be used not only in their respective described combinations, but also in other combinations or individually, without departing from the scope of the invention, wherein:

[0043] Figure 1 A schematic diagram showing one embodiment of the system is provided.

[0044] Figure 2 Another schematic diagram showing another embodiment of the system.

[0045] In the accompanying drawings, identical or functionally identical parts are marked with the same reference numerals. Detailed Implementation

[0046] Figure 1 An embodiment of System 1 is illustrated schematically. System 1 has an external vehicle storage device 2. The external vehicle storage device 2 is designed to store an update package 3. Additionally, System 1 has communication devices 4a and 4b, designed to wirelessly transmit the update package 3 from the external vehicle storage device 2 to at least one transmission mechanism 5 of System 1. In this example, the communication devices 4a and 4b consist of a first communication device component 4a and a second communication device component 4b, the first communication device component being disposed on the external vehicle storage device 2, and the second communication device component being formed within the vehicle 6 of System 1.

[0047] The motor vehicle 6 also has at least one control device 7a, 7b, or 7c. In this example, the motor vehicle 6 specifically has three control devices 7a, 7b, or 7c.

[0048] In this example, the transmission mechanism 5 and the control devices 7a, 7b, and 7c form a motor vehicle network, which can also be referred to as domain 8.

[0049] The transmission mechanism 5 is specified to be located inside the motor vehicle. The transmission mechanism 5 is designed to lead, and in particular manage, the transmission process of the update package 3 for at least one control device 7a, 7b, 7c, and is designed to install the update package 3 on said at least one control device 7a, 7b, 7c.

[0050] Therefore, in Figure 1The diagram illustrates a system 1 for distributing and controlling distributed control device updates (in other words, update packages 3) within domain 8. There, in particular, the transmission mechanism 5 can aggregate hardware and software identification data of remotely updatable control devices 7a, 7b, and 7c within the vehicle 6 and wirelessly synchronize them with the vehicle's external storage device 2. The external storage device 2 is thus able to distribute software for different control devices 7a, 7b, and 7c to each different vehicle 6 to create and monitor activities for controlling update packages 3 in each of the different control devices 7a, 7b, and 7c. Furthermore, the status information and update progress of the transmission mechanism 5 are monitored there.

[0051] Specifically, it is specified that at least one control device 7a, 7b, 7c is designed as a control device 7a, 7b, 7c for the transmission mechanism 5 or a control device 7a, 7b, 7c for a functional unit of the motor vehicle 6. For example, an internal system of the motor vehicle, such as an auxiliary system or entertainment facility, may be referred to as a functional unit. The exemplary listing of functional units should be considered as illustrative only and not exhaustive.

[0052] Feasibly, a streamlined transmission mechanism 5 is integrated into the corresponding control devices 7a, 7b, and 7c, which can lead or control the downloading of useful data / control data and its installation on the control devices 7a, 7b, and 7c. Thus, the transmission mechanism 5 is specifically designed to handle only the transmission of data from the vehicle's external storage device 2 or from the communication device 4a, and, when necessary, the downloading of update package information from the external storage device 2.

[0053] Additionally, a status information signal can be transmitted to the vehicle external storage device 2 via the transmission mechanism 5. This status information signal may include information about the transmission process and / or the installation status on the control devices 7a, 7b, and 7c.

[0054] Specifically, it is specified that at least one transmission mechanism 5 leads the transmission process and performs installation on at least one control device 7a, 7b, 7c based on judgment criteria. It is also specifically specified that the transmission mechanism 5 is designed such that it leads the transmission process and performs installation on at least one control device 7a, 7b, 7c based on functional judgment criteria. Alternatively, it can be specified that the transmission mechanism 5 leads the transmission process and performs installation on at least one control device 7a, 7b, 7c based on judgment criteria related to the physical components of the control devices 7a, 7b, 7c. For example, the physical components can be the hardware of the control devices 7a, 7b, 7c. It is also possible to design the transmission mechanism 5 such that it leads the transmission process and performs installation on at least one control device 7a, 7b, 7c based on judgment criteria related to the variable components of the control devices 7a, 7b, 7c. The variable components can be, in particular, so-called software.

[0055] Alternatively, the vehicle 6 may be configured to have multiple control devices 7a, 7b, and 7c, and the transmission mechanism 5 may be configured to control the transmission of update packages 3 for the multiple control devices 7a, 7b, and 7c and to install the update packages 3 on the multiple control devices 7a, 7b, and 7c. It is also feasible for the vehicle 6 to have multiple control devices 7a, 7b, and 7c, and for the transmission mechanism 5 to control the transmission of multiple update packages 3 for the multiple control devices 7a, 7b, and 7c and to install the multiple update packages 3 on the multiple control devices 7a, 7b, and 7c.

[0056] In the external storage device 2 of the motor vehicle, the software update activity (in other words, update package 3) can be defined using the vehicle information from the transmission mechanism 5 as a set of rules. These rules, applied to all motor vehicles 6 in the external storage device 2, are adapted to target characteristics. Therefore, an activity can be dynamically formed without prior knowledge of the exact scope of the motor vehicles 6. If a rule applies to a motor vehicle 6, the external storage device 2 first synchronizes control data with the transmission mechanism 5 to inform the motor vehicle 6 of the type and scope of update package 3. Then, the transmission mechanism 5 downloads the useful data of update package 3 and installs it in the relevant control devices 7a, 7b, and 7c.

[0057] The activity can be controlled via the vehicle's external storage device 2, such as starting, pausing, and stopping it. If the activity is defined and started, it continues until all vehicles 6 within the defined range have been processed. This is divided into successful update and update error. If an update error occurs, the update package 3 can be restarted. If the activity is paused, the rules are not transmitted to the vehicles 6, so only vehicles 6 that have started downloading will continue downloading the update package 3. When the activity stops, the vehicle's external storage device 2 can stop the download and installation of the update package 3 within the transmission mechanism 5 by command. Therefore, it is also conceivable to prematurely stop the update package activity, for example, when there is a serious software update error and its process must be stopped immediately.

[0058] Through the synchronization mechanism, the vehicle's external storage device 2 can obtain status information regarding downloads and installations and monitor it in the activity management system. Furthermore, errors and installation failures that can be monitored in this way will be reported.

[0059] Figure 1The data exchange is illustrated, which aggregates the software identification features of the control devices 7a, 7b, and 7c within the vehicle to be updated via transmission mechanism 5. Transmission mechanism 5 periodically synchronizes with the vehicle's external storage device 2, thereby caching all updatable vehicle data. If transmission mechanism 5 receives a new update task through synchronization with the vehicle's external storage device 2, it should obtain the update control data therein. Using the control data, transmission mechanism 5 can independently download update package 3 from a specified source and perform updates on the relevant control devices 7a, 7b, and 7c within domain 8, taking into account functional dependencies. Such functional dependencies could be, for example, the active power supply of the vehicle.

[0060] In addition to functional correlations related to updating vehicle status, hardware-side and software-side correlations also exist in control devices 7a, 7b, and 7c. Hardware-side correlations, for example, are achieved through bus system connections / integration. Software-side correlations can operate within the software of various control devices 7a, 7b, and 7c within a single system, or they can be cross-system correlations, which can also be described as software combinations. For example, consider common parameters in the different software of various control devices 7a, 7b, and 7c. It is important to note that the control device software with such correlations must be updated accordingly. Software correlations are addressed through comprehensive software combinations, which are interpreted by transmission mechanism 5 and transmitted to the corresponding control devices 7a, 7b, and 7c via transmission mechanism 5. For example, vehicle identification numbers, currently available software versions, and software identification codes are used as characteristics.

[0061] If an activity involves multiple control devices 7a, 7b, and 7c within the vehicle 6, all control devices 7a, 7b, and 7c, along with their corresponding transmission mechanisms 5, must be listed in the vehicle's external storage device 2. The structure of domain 8 must be known and taken into account at this time. By explicitly identifying each domain 8 and the global activity, the transmission mechanism 5 ensures timely updates to its subordinate control devices 7a, 7b, and 7c. Once the control data is synchronized with the transmission mechanism 5, it can automatically download the update package 3 from a specific source (whose address has been transmitted, for example, via update package information). If the update package 3 is downloaded, the transmission mechanism 5 automatically begins installation.

[0062] If control devices 7a, 7b, and 7c are the same as those in transmission mechanism 5, they must be treated separately from other control devices 7a, 7b, and 7c that are to be updated, because update package 3 for transmission mechanism 5 may also affect the updates of other control devices 7a, 7b, and 7c within domain 8. This can be ensured, in particular, by using a separate update package 3.

[0063] If, for example, an update should be performed within domain 8, then vehicle 6 can distribute data downloads across several domains 8 within vehicle 6, because the amount of data makes it inefficient to distribute a large number of applications to the different control devices 7a, 7b, 7c within vehicle 6 via a single path. Domains 8 can be specifically designated in the external storage device 2 of the vehicle via rules, so that update packages 3 can be specifically formed for these domains 8. The transmission mechanism 5 then manages and installs the update packages 3 for its subordinate control devices 7a, 7b, 7c.

[0064] Figure 2 Another implementation of System 1 is illustrated in the schematic diagram. Figure 2 A system 1 is described for distributing and controlling distributed update packets 3 via multiple transmission mechanisms 5, 9, and 11 in the presence of multiple domains 8. Each transmission mechanism 5, 9, and 11 is capable of updating its subordinate control devices 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c, thus forming a so-called update domain. Each transmission mechanism 5, 9, and 11 is individually wirelessly synchronized with the vehicle's external storage device 2 via its respective communication device component 4b. Therefore, cross-domain update packets 3 can be achieved through in-vehicle synchronization of the transmission mechanisms 5, 9, and 11, the process of which is coordinated by the transmission mechanisms 5, 9, and 11. Alternatively, instead of each transmission mechanism 5, 9, and 11 having its own assigned communication device component 4b, a shared communication device component 4b is formed for the multiple transmission mechanisms 5, so that the transmission mechanisms 5, 9, and 11 share a single communication device component 4b. Transmission mechanisms 5, 9, and 11 then communicate, for example, via a bus with a communication device component 4b, which in turn communicates with an external storage device 2, for example, via a mobile network. The vehicle's external storage device 2 is thus able to distribute software for different control devices 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c in different domains 8 to different vehicles 6, establish and monitor the activities of the control update package 3 in each of the different control devices 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c, and monitor its status.

[0065] Also in Figure 2As seen in the diagram, the motor vehicle 6 has multiple transmission mechanisms 5, 9, and 11. Each of these transmission mechanisms 5, 9, and 11 can independently control its own transmission process and is designed to install an update package 3 on at least one corresponding control device 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c associated with that transmission mechanism. It can also be specified that the transmission process of at least one update package 3 for the multiple transmission mechanisms 5, 9, and 11, and its installation on the at least one control device 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c, can be guided by a control mechanism within the motor vehicle. In particular, one of the plurality of transmission mechanisms 5, 9, 11 can be selected as the leading mechanism, which is responsible for leading the transmission process for the plurality of transmission mechanisms 5, 9, 11 and executing the installation on the at least one control device 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c.

[0066] It can also be specified that the transmission mechanism 5, 9, 11 is selected based on the update package 3 to be transmitted, which dominates the transmission process and its installation on at least one control device 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c.

[0067] It can also be stipulated that, before the transmission of update package 3, the update package information can be transmitted from the vehicle external storage device 3 to the transmission mechanism 5, 9, 11, and / or before the transmission of update package 3, the update package information can be transmitted from the vehicle external storage device 2 to the transmission mechanism 5, 9, 11, wherein the update package information contains information about other storage locations of update package 3 that are separate from the vehicle external storage device 2, and the transmission mechanism 5, 9, 11 is designed to download update package 3 from other storage locations.

[0068] like Figure 2 As shown, multiple control devices 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c are installed within the vehicle 6, and they can be synchronized via corresponding transmission mechanisms 5, 9, and 11. Therefore, for example, more specific types of control devices 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c (e.g., entertainment system components or safety-related components) can be recorded in the vehicle's external storage device 2, because the transmission mechanisms 5, 9, and 11 have fixed control device affiliations within the vehicle 6, thus pre-defining a specific communication structure. On the other hand, this also allows new control device types to be identified within the vehicle's external storage device 2 by connecting to a new domain 8 via its transmission mechanisms 5, 9, and 11.

[0069] Updates can be implemented by guiding across multiple domains 8 and using multiple update packages 3, which are downloaded by the corresponding transmission mechanisms 5, 9, and 11 of each domain 8. The transmission mechanisms 5, 9, and 11 agree on the installation order of the update packages 3 through a control mechanism. Here, within a domain, each transmission mechanism 5, 9, and 11 is assigned to the control device software according to the local priority of the vehicle's external storage device 2.

[0070] If updates are performed across multiple domains 8, the transmission mechanisms 5, 9, and 11 of one of the domains 8 must be designated as the dominant unit, the so-called master control mechanism. This is because the master control mechanism is selected within the vehicle 6 for an activity and is responsible for triggering updates in the control units 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c of its respective domain 8, but also controls updates in other domains 8. This is crucial because one control unit 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c can use new parameters based on the application in another control unit 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, and 12c in a distributed application. Therefore, this component must always be preferred. This results in a hierarchical division in updates controlled by the master control mechanism. The selection of the master controller can be achieved either by consistently fulfilling the master controller role in one of the transmission mechanisms 5, 9, or 11 of vehicle 6, or dynamically through the communication protocol between transmission mechanisms 5, 9, and 11 for update package 3. In the case of dynamic selection, once transmission mechanisms 5, 9, and 11 identify update package 3 as a cross-domain update package 3, they must select a master controller. Transmission mechanisms 5, 9, and 11 must then notify all other transmission mechanisms 5, 9, and 11 and trigger the selection so that they can control the subsequent download and installation actions of these individual domains 8. The master controller selection criterion can be that the transmission mechanism 5, 9, or 11 is part of the basic equipment of vehicle 6 and is unrelated to additional equipment. In addition to being identified as the update master controller, a cross-activity ID is also required so that other transmission mechanisms 5, 9, and 11 know whether they are part of a cross-activity and therefore must participate in the agreement of the update master controller. The selection of the update master controller must be re-executed for each update, in other words, for each update package 3, or it can be fixed. In order to exchange information between transmission mechanisms 5, 9, 11 and updatable control devices 7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c, a common interface is specified, which must perform its function in all transmission mechanisms 5, 9, 11.

Claims

1. A system (1) for transmitting at least one update package (3) for at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) of a motor vehicle (6), comprising an external storage device (2) of the motor vehicle designed for storing the update package (3) and a communication device (4a, 4b) designed for wirelessly transmitting the update package (3) from the external storage device (2) to at least one transmission mechanism (5, 9, 11) of the system (1), the transmission mechanism controlling the transmission process of the update package (3) for the at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) and designed for mounting the update package (3) on the at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c), characterized in that, The at least one transmission mechanism (5,9,11) is arranged inside the vehicle, wherein the transmission process of at least one update package (3) for the plurality of transmission mechanisms (5,9,11) and the installation on the at least one control device (7a,7b,7c,10a,10b,10c,12a,12b,12c) can be guided by a dominant mechanism inside the vehicle, and wherein one of the plurality of transmission mechanisms (5,9,11) is selected as the dominant mechanism, which is responsible for leading the transmission process for the plurality of transmission mechanisms (5,9,11) and performing the installation on the at least one control device (7a,7b,7c,10a,10b,10c,12a,12b,12c), wherein dominance refers to control over the installation and / or consideration of functional correlation, wherein the plurality of transmission mechanisms (5,9,11) are formed inside the vehicle.

2. The system (1) according to claim 1, characterized in that, The at least one transmission mechanism (5, 9, 11) governs the transmission process and the installation on the at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) according to the judgment criteria.

3. The system according to claim 2, characterized in that, The transmission mechanism (5,9,11) is designed such that it guides the transmission process and its installation on the at least one control device (7a,7b,7c,10a,10b,10c,12a,12b,12c) according to functional judgment criteria.

4. The system (1) according to claim 2 or 3, characterized in that, The transmission mechanism (5,9,11) is designed such that it guides the transmission process and its installation on the at least one control device (7a,7b,7c,10a,10b,10c,12a,12b,12c) based on judgment criteria related to the physical components of the control device (7a,7b,7c,10a,10b,10c,12a,12b,12c).

5. The system (1) according to claim 2 or 3, characterized in that, The transmission mechanism (5,9,11) is designed such that it guides the transmission process and its installation on the at least one control device (7a,7b,7c,10a,10b,10c,12a,12b,12c) based on judgment criteria related to the variable components of the control device (7a,7b,7c,10a,10b,10c,12a,12b,12c).

6. The system (1) according to any one of claims 1 to 3, characterized in that, The motor vehicle (6) has multiple control devices (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c), and the transmission mechanism (5, 9, 11) dominates the transmission process of the update package (3) for the multiple control devices (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) and is designed to install the update package (3) on the multiple control devices (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c).

7. The system (1) according to any one of claims 1 to 3, characterized in that, The transmission mechanism (5,9,11) is designed in a simplified manner so that it performs the transmission process and forwards the update packet (3) to the plurality of control devices (7a,7b,7c,10a,10b,10c,12a,12b,12c).

8. The system (1) according to any one of claims 1 to 3, characterized in that, The motor vehicle (6) has multiple control devices (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c), and the transmission mechanism (5, 9, 11) dominates the transmission process of multiple update packages (3) for the multiple control devices (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) and is designed to install the multiple update packages (3) on the multiple control devices (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c).

9. The system (1) according to any one of claims 1 to 3, characterized in that, The transmission mechanism that dominates the transmission process and is installed on the at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) is selected based on the update package (3) to be transmitted, in the presence of multiple transmission mechanisms.

10. The system (1) according to any one of claims 1 to 3, characterized in that, The update package information can be transmitted from the vehicle external storage device (2) to the transmission mechanism (5,9,11) before the transmission process of the update package (3).

11. The system (1) according to any one of claims 1 to 3, characterized in that, The update package information can be transmitted from the vehicle external storage device (2) to the transmission mechanism (5,9,11) before the transmission process of the update package (3). The update package information contains information about the storage location of other update packages (3) that are separate from the vehicle external storage device (2), and the transmission mechanism (5,9,11) is designed to download the update package (3) from the other storage location.

12. The system (1) according to any one of claims 1 to 3, characterized in that, The at least one control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) is designed as a control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) for the transmission mechanism (5, 9, 11) or a control device (7a, 7b, 7c, 10a, 10b, 10c, 12a, 12b, 12c) for the functional unit of the motor vehicle (6).

13. The system (1) according to any one of claims 1 to 3, characterized in that, The status information signal can be transmitted to the external storage device (2) of the motor vehicle by means of the transmission mechanism (5,9,11), wherein the status information signal can include the status related to the transmission process.

14. The system (1) according to any one of claims 1 to 3, characterized in that, The status information signal can be transmitted to the vehicle external storage device (2) by means of the transmission mechanism (5,9,11), wherein the status information signal can include the status related to the installation on the control device (7a,7b,7c,10a,10b,10c,12a,12b,12c).

Images