vehicle

Abstract

Vehicle comprising a main computer (1) and at least one subcomputer (2) communicatively connected to the main computer (1), wherein each subcomputer (2) is configured to execute at least one control program (3) for controlling a vehicle component to provide a vehicle functionality (4), and the main computer (1) has an unlocking module (5) which is configured to send an unlock signal (6) to the at least one subcomputer (2) to activate or deactivate the control program (3), wherein the unlocking module (5) comprises an event data set (7), wherein the event data set (7) contains a compilation of all generally available vehicle functionalities (4) and their respective target activation state (8), characterized by the fact that The unlocking module (5) is configured to send the event data set (7) as an unlock signal (6) to all connected subcomputers (2), wherein each subcomputer (2) is configured to receive the event data set (7), to read at least the target activation state (8) for the vehicle functionalities (4) provided by the respective subcomputer (2) from the event data set (7) and to configure the respective underlying control program (3) according to the respective target activation state (8).

Description

[0001] The invention relates to a vehicle of the type defined in more detail in the preamble of claim 1.

[0002] The range of options available to customers when configuring a new vehicle is extensive. In addition to the standard equipment, various optional extras can be added, such as different engines, transmission types, driver assistance systems, and the like. Correspondingly, different vehicle components are installed to enable these varying functionalities. These components are controlled by specially tailored control programs. Therefore, a combination of hardware and software components is required to provide each specific functionality.

[0003] Vehicle functionalities can include, for example: adaptive high-beam assist, the ability to project light patterns into the surroundings using matrix headlights, rear-axle steering, increased engine power compared to a standard mode, a navigation system, a dashcam, DAB+ radio, smartphone integration, a TV tuner, a massage seat function, various configurable suspension settings, and the like. Some vehicle functionalities may require the installation of special vehicle components, while others can be provided simply by modifying the underlying control program. These vehicle functionalities are also referred to as "on-demand functions."

[0004] Which vehicle functionalities, based on the installed vehicle components, are available during later operation is determined during vehicle manufacturing, and the vehicle is built and configured accordingly. For this purpose, the vehicle's on-board electronics are divided into a main computer and at least one subcomputer connected to the main computer. The respective subcomputers control the individual vehicle components and provide the vehicle functionalities. The main computer is capable of configuring the subcomputers to provide a specific vehicle function. To do this, relevant information is stored during vehicle production via diagnostic or variant coding in a tamper-proof memory area of ​​an activation module provided on the main computer.

[0005] The activation module then provides information via a corresponding interface to the respective subcomputers, specifying which vehicle functionalities should be enabled and which should not. This is done by sending a Boolean value in the form of True (active) or False (inactive). Current technology dictates that specifically adapted interfaces are used for each subcomputer. To transmit the respective information to the various subcomputers, the main computer sends cyclic bus signals via a dedicated data line. Due to the large number of different interfaces and the requirement to send bus signals cyclically, the effort required to configure each subcomputer is comparatively high. Consequently, the underlying data line is heavily utilized for a relatively long period, which limits the transmission of other data.The respective activation signal is function-specific, which further increases the programming effort. In addition, each subcomputer sends a corresponding function-specific response signal. Thus, a specific pair of activation and response signals exists for each vehicle function. The situation becomes even more complex because some vehicle functions can be distributed across multiple subcomputers. For example, to project light patterns into the surroundings using matrix headlights, two such projection headlights must be controlled. Furthermore, a significant programming effort is required to adapt existing vehicle functions or to subsequently implement new ones in the vehicle.

[0006] German patent application DE 10 2020 109 379 A1 describes a method and system for the automated execution of vehicle functions. The document describes the automatic execution of multiple vehicle functions upon the occurrence of a trigger event. For example, the vehicle can automatically switch off the engine, close the windows, shift an automatic transmission into park, activate the parking brake, switch off the ignition, open the doors, and lock the vehicle. Such an execution routine could be used, for example, by a parcel delivery service. The trigger event could be, for instance, the delivery service pressing a specific button in the vehicle, or the trigger event could be automatically generated by the vehicle, for example, upon reaching a specific geographic location. A so-called service bundles various vehicle functions into a single set of parameters and makes them available via a defined interface.The service abstracts vehicle-specific hardware and / or software properties for generating and outputting corresponding control signals. Advantageously, the underlying interface is immutable, allowing for standardization when using different hardware and / or software properties. This enables universal implementation.

[0007] Furthermore, DE 10 2015 010 203 A1 discloses a method and system for operating a motor vehicle. The method involves generating a vehicle function list on a server, containing a definition of the vehicle functions that are enabled and disabled for use. The vehicle function list is then wirelessly transmitted to an in-vehicle control unit and processed by it. The control unit then activates the vehicle's control units to enable or disable the corresponding vehicle functions.

[0008] Furthermore, US patent 2022 / 0204012A1 discloses a method and system for providing a connected vehicle service. An in-vehicle device generates an initial service list describing the use of vehicle functions. This service list is transmitted to a server, which identifies a number of unused services. The server then generates instructions that are displayed to the user. These instructions inform the user which unused vehicle functions are available and how to access them.

[0009] Furthermore, EP 1 967 435 B1 discloses a method for adaptive configuration recognition. In this method, a central control unit in a vehicle receives identifying information from other components connected to it, enabling the control unit to recognize that corresponding additional components are present in the vehicle. The control unit then loads the appropriate software for these components from a data storage device. Subsequently, the control unit writes information to a memory device describing which components were detected. If, after the control unit restarts, the identifying information and the stored information no longer match due to a component change, the control unit adjusts the corresponding information so that the affected component is considered absent.

[0010] Furthermore, EP 3 793 868 B1 discloses a method for operating a control device of a vehicle's infotainment system to activate functions. In the vehicle, a user can request a function. The vehicle then sends a request signal to a server operated by the vehicle manufacturer to activate the function. The server verifies the permissibility of the activation and, if the activation is permissible, enables the control device to connect to an activation computer. The function is then activated in the vehicle using cryptographic security.

[0011] Furthermore, US patent 2018 / 0 196 660 A1 discloses a method and system for reprogramming electronic control units (ECUs) in a vehicle wirelessly. This involves generating a first encrypted packet containing encrypted audio files and a second encrypted packet containing data and vehicle information. Both encrypted packets are mixed together and transmitted wirelessly. The mixed packets are received and stored by the vehicle. Within the vehicle, the mixed packets are separated and decrypted using appropriate modulation. The data extracted from the second encrypted packet is then used to reprogram an ECU in the vehicle.

[0012] The present invention is based on the objective of providing an improved vehicle which is characterized by an efficient internal communication process of the underlying on-board electronics in connection with the provision of different vehicle functionalities.

[0013] According to the invention, this problem is solved by a vehicle with the features of claim 1. Advantageous embodiments and further developments result from the dependent claims.

[0014] A vehicle of this type, comprising a main computer and at least one subcomputer communicatively connected to the main computer, wherein each subcomputer is configured to execute at least one control program for controlling a vehicle component to provide vehicle functionality, and the main computer has an activation module configured to send an activation signal to the at least one subcomputer to activate or deactivate the control program, provides that the activation module comprises an event data set, wherein the event data set contains a compilation of all generally available vehicle functionalities and their respective target activation state, wherein according to the invention the activation module is configured to send the event data set as an activation signal to all connected subcomputers, wherein each subcomputer is configured to receive the event data set.at least to read the target activation state for the vehicle functionalities provided by the respective subcomputer from the event data record and to configure the respective underlying control program according to the respective target activation state.

[0015] The communication scheme provided by the main computer and subcomputers of the vehicle according to the invention is characterized by increased efficiency, allowing for efficient use of the vehicle's electronics and the data line used for communication. The event data set ensures the standardization of the communication interface between the main computer and the respective subcomputers. This simplifies programming efforts for programmers. Only the event data set needs to be distributed to the subcomputers via the vehicle's data line. Therefore, function-specific activation signals do not need to be cyclically sent from the main computer to the subcomputers via the data line, thus reducing the load on the data line. The main computer makes the event data set available for retrieval via the data line.Generally, all subcomputers can query the event data set while it is being provided by the main computer. For particularly efficient use of the data line, a selection of the vehicle's onboard electronics subcomputers can also "subscribe" to the event data set, further reducing the read access required over the data line. Those subcomputers that have not subscribed to the event data set can also operate more efficiently, as their available hardware resources and processing power are then freed up for other tasks.

[0016] The event data record can be interpreted, for example, as a list or table. The individual rows of the table then list the generally available vehicle functionalities. The target activation state for the respective vehicle is stored in the corresponding columns. The event data record can be generated during vehicle manufacturing, analogous to current best practices, and stored in the main computer. The target activation state contains either the entry "active," "inactive," or "unavailable." The respective subcomputers contain information about which vehicle functionalities they can provide. The respective subcomputers then selectively read those rows of the event data record that contain entries for the vehicle functionalities they can provide. This reduces the workload of the respective subcomputers, further improving the efficiency of the vehicle's electronics.

[0017] If the respective subcomputer reads "Active" as the target activation state, the corresponding control program for providing the vehicle functionality is activated. If, however, the target activation state is read as "Inactive," the control program is configured so that the respective vehicle functionality cannot be used in the vehicle. If the respective vehicle functionality is unavailable due to the vehicle's physical configuration, i.e., due to missing physical vehicle components, the event record for the respective vehicle functionality contains the entry "Not available."

[0018] The entirety of generally available vehicle functionalities is also defined by the vehicle manufacturer. The event data set thus contains all generally available vehicle functionalities, enabling unification and standardization, regardless of the vehicle components actually installed in the vehicle.

[0019] The vehicle in question can be any road vehicle such as a car, truck, van, bus, or similar. Generally, it could also be a rail vehicle, watercraft, aircraft, or similar.

[0020] The main computer can also be referred to as the central on-board computer. Ideally, the main computer is integrated into the so-called head unit, or serves to provide functionalities that can be accessed via the vehicle's head unit. The individual subcomputers can also be called control units. The data connection between the main computer and the subcomputers can be wireless or wired. Hybrid solutions are also possible. Various communication protocols can be used, such as CAN, FlexRay, LIN, Ethernet, and the like. A CAN bus system is particularly preferred.

[0021] The unlocking module is comprised of hardware and software components. It utilizes various hardware components of the main computer, such as multiple memory elements and execution units. Software components distributed across these different hardware components can then interact with each other.

[0022] The event data record is sent from the main computer to the subcomputers depending on an event, which is also referred to as "event-based".

[0023] A further advantageous embodiment of the vehicle according to the invention provides that the unlocking module is also configured to send the event data record several times in succession over a period of time. Generally, it is possible that individual subcomputers may be busy while the main computer is sending or providing the event data record. In this case, the respective subcomputers cannot read the event data record. To ensure a corresponding configuration of the control programs executed by the respective subcomputers, the unlocking module preferably sends the event data record several times in succession over a period of time. As soon as a respective subcomputer has completed its currently executed calculation, it can then retrieve the event data record from the main computer.The duration can be fixed or vary depending on different events. For example, if the vehicle is in a state that results in the respective subcomputers being more heavily utilized, a longer duration can be chosen compared to a state where the individual subcomputers are less heavily utilized.

[0024] According to a further advantageous embodiment of the vehicle according to the invention, each subcomputer is configured to send a query signal to the main computer, and the main computer is configured to send the event data record in response to the query signal, at least to the subcomputer that issued the query signal. This further increases the efficiency of the on-board electronics and the underlying communication scheme. By transmitting the query signal to the main computer, the sending or provision of the event data record by the main computer can be specifically initiated, thus reducing the time required to provide the event data record on the data line.In particular, a subcomputer sends a query signal to the main computer if the respective subcomputer has missed the initially sent event data record, for example due to high utilization.

[0025] The provision of the event data record by the activation module can also be referred to as a "service" in this context. The event data record can also be referred to as an event. The query signal can then also be referred to as a "method" in this context.

[0026] A further advantageous embodiment of the vehicle according to the invention provides that each subcomputer is also configured to send a response signal to the main computer in response to the received event data set, wherein the response signal contains at least the vehicle functionalities that can be provided by the respective subcomputer, along with the respective configuration of the underlying control programs. The response signal can also be referred to as a "method" in this context. By transmitting the response signal from the respective subcomputers to the main computer, the main computer or the unlocking module can be informed how the respective subcomputers have reacted to the event data set.To confirm the successful configuration of the respective control programs for providing the respective vehicle functionalities, it is no longer necessary to send function-specific response signals via the data line, but rather response signals implemented according to the standard format defined by the event data record. This further simplifies the implementation of the underlying communication scheme described.

[0027] In addition to the configured vehicle functionality and the configuration performed, the response signal can also contain a category that identifies the respective client requesting the method.

[0028] According to a further advantageous embodiment of the vehicle according to the invention, the main computer is also configured to resend the event data set each time the vehicle is started and / or the on-board electronics are activated. The respective configuration of the control programs can be stored persistently in the respective subcomputers. However, it may not be possible to store this information persistently in some subcomputers. By resending the event data set each time the vehicle is started or the on-board electronics are activated, the respective subcomputers can be reconfigured accordingly. In addition, it may be possible that vehicle components are modified or replaced, which necessitates reconfiguration of the respective control programs of the subcomputers. Thus, it can be ensured that the respective subcomputers or control programs are correctly configured at all times. Starting the vehicle orActivating the vehicle's electronics is particularly suitable as an event for sending the event data set, as this initiates the use of the vehicle and thus its functionalities. Configuring the control programs or subcomputers at the start of each usage phase ensures correct configuration, allowing the vehicle user to operate their vehicle "as ordered by the manufacturer."

[0029] A further advantageous embodiment of the vehicle according to the invention provides that the main computer is also configured to receive an update data set, wherein the update data set contains changes to the event data set, and to adapt the event data set accordingly. Thus, an update of the event data set is possible with the help of the update data set. If the vehicle configuration is changed, for example, if vehicle components are replaced, new vehicle components are installed, or if a function restriction or lock is to be removed, the event data set stored in the vehicle can be adapted in order to enable the use of the vehicle functionalities made available by the changed or new vehicle components, or the previously artificially restricted vehicle functionalities.

[0030] Preferably, the vehicle includes a telecommunications unit configured to wirelessly receive the update data set from a central computing unit and forward it to the main computer. Generally, the update data set could be introduced into the vehicle in various ways, for example, via the onboard diagnostics interface while the vehicle is in a workshop. However, this requires a visit to the workshop. Wireless transmission of the update data set can increase convenience for the vehicle user. The introduction of wireless updates is also known as "over-the-air (OTA)" updates. The central computing unit can be a server or a server cluster. The central computing unit can be accessible via the internet and, in this context, can also be referred to as a cloud server.The telecommunications unit can establish a connection between the vehicle's electronics and the internet via mobile network. Other wireless communication technologies, such as Wi-Fi, are also suitable for establishing this connection. The advantages of the standardized interface in the form of the event data set are particularly evident, as is also the case during the initial configuration of the subcomputers or control programs. This eliminates the need to adjust individual function-specific signals; a single, centralized revision of the event data set is sufficient.

[0031] A further advantageous design feature of the vehicle includes a dedicated subcomputer configured to receive changes to existing and / or new control programs. This allows not only for the subsequent activation or deactivation of existing or new vehicle functionalities, but also for the modification of the underlying control programs themselves. This enables the introduction of entirely new functionalities into the vehicle, or the modification of existing ones. In this way, errors (also known as "bugs") can be corrected, security vulnerabilities closed, new functionalities provided, and the like.

[0032] Changes to the control programs, or new control programs, can be introduced into the vehicle in various ways, at different times or events, similar to the update data set. Over-the-air transmission or installation during a workshop visit are also conceivable.

[0033] Further advantageous embodiments of the vehicle according to the invention also result from the exemplary embodiments which are described in more detail below with reference to the figures.

[0034] This shows: Fig. 1 a schematic representation of the system architecture of the on-board electronics underlying a vehicle according to the invention; Fig. 2. A schematic representation of the configuration of control programs according to the state of the art; and Fig. 3 a schematic representation of the configuration of subcomputers according to the invention for providing vehicle functionalities.

[0035] A vehicle according to the invention has the in Fig. Figure 1 shows a highly idealized system architecture. A main computer 1 is shown, which is connected to several subcomputers 2 via a data line (not shown in detail). Subcomputers 2 can be connected to the main computer 1 directly or indirectly via other subcomputers 2. Each subcomputer 2 is responsible for executing at least one of the following: Fig. 2 shown control program 3 for controlling a vehicle component not shown in detail to provide a in Fig. The vehicle functionality 4 shown in section 3 is set up. Depending on the vehicle's configuration, a wide variety of vehicle functionalities 4 can be used or made available. The vehicle must be configured in such a way that the use of the respective vehicle functionalities 4 is either enabled or blocked. This ensures that only those vehicle functionalities 4 are available that the respective vehicle user purchased for their vehicle at the time of manufacture or purchase. It is also possible to implement or retrofit vehicle functionalities 4 at a later date.

[0036] The main computer 1 has an activation module 5 for this purpose. The activation module 5 can be distributed across several submodules, for example, three submodules 5.1, 5.2, and 5.3. Submodule 5.1 can, for example, store variant coding. Submodule 5.2 contains the actual program code for executing the process steps that can be performed by the activation module 5. Submodule 5.3 can, for example, be a securely writable memory containing, for instance, a list of the subcomputers 2 installed in the vehicle, an anti-theft PIN, and similar information.

[0037] The activation module 5 comprises an event data set 7, which is distributed as a service 12 to the subcomputers 2 connected to the main computer 1. A subcomputer 2 can also forward the event data set 7 to a subsequent subcomputer 2 in the communication direction. The event data set 7 includes a compilation of all generally available vehicle functionalities 4 and their corresponding information. Fig. The respective target activation states 8 are shown in Figure 3. The unlocking module 5 is configured to send the event data set 7 as an unlock signal 6 to all connected subcomputers 2. The respective subcomputers 2 are in turn configured to receive the event data set 7, to read at least the respective target activation state 8 for the vehicle functionalities 4 provided by the respective subcomputer 2 from the event data set 7, and to configure the respective underlying control program 3 according to the respective target activation state 8.

[0038] Service 12 can also contain a query signal 9 and a response signal 10. Query signal 9 and response signal 10 comprise a routine that can be applied by the respective subcomputers 2. Thus, a subcomputer 2 can transmit query signal 9 to the main computer 1 to cause the main computer 1 to send event data record 7 again. Furthermore, after receiving event data record 7 and configuring their respective control programs 3, the subcomputers 2 can transmit a corresponding response signal 10 back to the main computer 1 to inform it of the configuration performed.

[0039] The retrieval or reading of event data record 7 by subcomputer 2 is indicated by arrow 101. The transmission of the response signal 10 and the sending of the query signal 9 are indicated by arrow 102.

[0040] The event data record 7 may have been initially provided by a central computing unit 11, for example, during the vehicle's manufacture. Furthermore, changes can be made to the event data record 7. For this purpose, update data records, particularly wirelessly, can also be distributed from the central computing unit 11 to the main computer 1 during the vehicle's operational phase. Not shown here are any additional communication components, such as a telecommunications unit for connecting the main computer 1 to the internet via mobile network.

[0041] Furthermore, reading or manipulating the unlocking module 5 is possible via a diagnostic service 13.

[0042] Fig. Figure 2 shows an enlarged representation of how the activation module 5 configures the respective control programs 3 of the subcomputers 2 to provide the respective vehicle functionalities 4, according to a procedure known from the prior art. The activation module 5 cyclically sends function-specific activation signals 6 for each control program 3. The respective higher-level subcomputer 2 then sends back a function-specific response signal 10 to confirm the configuration. Because each pair of activation signal 6 and response signal 10 must be developed function-specifically, this involves a high programming effort. Furthermore, the successive and cyclical transmission of the corresponding signals increases the load on the data line.The respective control programs 3 may, for example, be software for controlling an augmented reality navigation system, a trailer maneuvering assistant, a traffic sign recognition system, a gear shifting program, a digital light projector, or the like.

[0043] Fig. Figure 3, however, schematically illustrates the inventive procedure for data exchange. The activation module 5 provides the service 12, which comprises the aforementioned event data set 7, query signal 9, and response signal 10. The event data set 7 is distributed to the respective subcomputers 2. The data structure is shown by way of example in Fig. Figure 3 illustrates this as a table. The generally available vehicle functionalities 4 are contained in the respective rows. The first column describes which vehicle functionality 4 it is and thus contains a unique identifier such as a name or an ID. The second column contains the respective target activation state 8 for the respective subcomputers 2. Since subcomputers 2 can also provide several vehicle functionalities 4, in Fig. 3. Several rows of the table are assigned to a respective subcomputer 2. For example, the target activation state 8 can take three values. These would be, for example, 0 for "inactive", 1 for "active", and 2 for "not available". The event data record 7 is then distributed to the subcomputers 2 as an activation signal 6. The respective subcomputers 2 access the entries from the table that are relevant to their respective subcomputer 2.

[0044] The vehicle electronics architecture presented here significantly simplifies the future integration of newly implemented vehicle functionalities. Only a single data structure, in the form of the event data set, needs to be revised to integrate new vehicle functionalities. This implementation can be designed generically, eliminating the need for any major, and especially functionality-specific, adjustments. Ideally, changes can be made using a code generator.

[0045] The communication scheme presented here allows for the creation of a standardized exchange interface. This facilitates integration into the overall system and continuously increases its maturity level. Since only a single event data record (7) needs to be sent based on events, the utilization of the data line, particularly in the form of bus load, can be reduced.

Claims

[1] Vehicle comprising a main computer (1) and at least one subcomputer (2) communicatively connected to the main computer (1), wherein each subcomputer (2) is configured to execute at least one control program (3) for controlling a vehicle component to provide a vehicle functionality (4), and the main computer (1) has an unlocking module (5) which is configured to send an unlock signal (6) to the at least one subcomputer (2) to activate or deactivate the control program (3), wherein the unlocking module (5) comprises an event data set (7), wherein the event data set (7) contains a compilation of all generally available vehicle functionalities (4) and their respective target activation state (8), characterized by , that The unlocking module (5) is configured to send the event data set (7) as an unlock signal (6) to all connected subcomputers (2), wherein each subcomputer (2) is configured to receive the event data set (7), to read at least the target activation state (8) for the vehicle functionalities (4) provided by the respective subcomputer (2) from the event data set (7) and to configure the respective underlying control program (3) according to the respective target activation state (8). [2] Vehicle according to claim 1, characterized by , that the unlocking module (5) is further configured to send the event data record (7) several times in succession during a period of time. [3] Vehicle according to claim 1 or 2, characterized by, that each subcomputer (2) is configured to send a query signal (9) to the main computer (1) and the main computer (1) is configured to send the event data record (7) as a response to the query signal (9) at least to the subcomputer (2) that outputs the query signal (9). [4] Vehicle according to any one of claims 1 to 3, characterized by , that each subcomputer (2) is further configured to send a response signal (10) to the main computer (1) in response to the received event data set (7), wherein the response signal (10) contains at least the vehicle functionalities (4) that can be provided by the respective subcomputer (2) with a configuration of the underlying control programs (3) as appropriate. [5] Vehicle according to any one of claims 1 to 4, characterized by, that the main computer (1) is further configured to resend the event data set (7) each time the vehicle is started and / or the on-board electronics are activated. [6] Vehicle according to any one of claims 1 to 5, characterized by , that the main computer (1) is further configured to receive an update record, wherein the update record contains changes to the event record (7), and to adapt the event record (7) according to the changes. [7] Vehicle according to claim 6, characterized by a telecommunications unit which is set up to wirelessly receive the update data set from a central computing unit (11) and forward it to the main computer (1). [8] Vehicle according to any one of claims 1 to 7, characterized by , that each subcomputer (2) is set up to receive changes for existing tax programs (3) and / or new tax programs (3).

Images