Method for operating a control unit, motor vehicle, control unit and control device for a motor vehicle

Abstract

Method for operating a control unit (10, 12) in a motor vehicle (1), wherein the control unit (10, 12) can be accessed by both an onboard tester (100) and an external device, in particular an offboard tester (200), characterized in that a memory (24, 26) of the control unit (10, 12) is designed such that, at least in predetermined applications of the onboard tester (100) as well as at least in predetermined applications of the external device (200), the onboard tester (100) and the external device (200) simultaneously have access to the memory (24, 26).

Description

[0001] The invention relates to a method for operating a control unit in a motor vehicle, wherein the control unit can be accessed by both an onboard tester and an external device such as an offboard tester or other dongle. The invention also relates to a motor vehicle capable of implementing the method, a control unit for such a motor vehicle, a computer program product for this control unit, and a control device for such a motor vehicle and a computer program product for this control device.

[0002] An onboard tester is a diagnostic tool (diagnostic master) in a motor vehicle responsible for updating (diagnostic and / or software) control units and for commissioning them. Updates can be received wirelessly by the onboard tester ("over the air," OTA) or via an "online remote update," ORU. Furthermore, this onboard tester can perform various diagnostic routines outside of updates, even without connecting an external device.

[0003] An offboard tester has essentially the same functions as an onboard tester, except that the offboard tester is connected as an external device to a diagnostic port of the vehicle (e.g., "OBD connector").

[0004] The invention also relates to the case where an external device different from an offboard tester is connected to the diagnostic socket of the motor vehicle, such as a dongle of the type used by vehicle insurers to read the mileage of the motor vehicle, etc.

[0005] In cases where both an onboard and an offboard tester are used, a conflict can occur between processes initiated by the onboard tester when the offboard tester is activated. Both the onboard and offboard testers can be configured to read and / or write to the ECU. Typically, this also includes the ability to flash new software to the ECU or update existing software.

[0006] CN 107 659 494 A discloses a motor vehicle with an internal gateway for offboard access.

[0007] DE 10 2017 218 872 A1 concerns updating the software of a vehicle control unit. DE 10 2017 222 962 A1 deals with a control unit with a communication device for contactless data exchange. DE 10 2013 011 687 A1 also concerns a control unit. DE 10 2013 202 064 A1 deals with connecting a diagnostic device to a control unit in a motor vehicle.

[0008] Traditionally, the offboard tester has absolute priority: When the offboard tester is activated, all processes initiated by the onboard tester are immediately interrupted.

[0009] Like any sudden shutdown of a connected device, this can have adverse effects on the data structure in the control unit's memory.

[0010] The object of the invention is therefore to improve a method for operating a control unit as described above and to provide a corresponding motor vehicle and a corresponding control unit with an associated computer program product.

[0011] The inventive method for operating a control unit (where the memory can also be referred to as a "diagnostic stack"), wherein the control unit can be accessed by both an onboard tester and an external device, includes the fact that the memory of the control unit is designed such that, at least in predetermined applications of the onboard tester as well as predetermined applications of the external device, the onboard tester and the external device simultaneously have access to the memory.

[0012] The memory can be designed to be somewhat larger compared to the state of the art, so that individual memory areas are present, one area of ​​which is accessible to the onboard tester and one area of ​​which is accessible to the external device, with the two areas preferably not overlapping.

[0013] The invention makes it possible for the onboard tester to gain greater importance, which corresponds to the general trend, while at the same time not disadvantaging the offboard tester or other external devices. Both can access the system simultaneously.

[0014] According to a preferred embodiment of the invention, when the software of the control unit is already being updated by the onboard tester, the external device only receives read access.

[0015] In this way, the update process is not affected by write access or by an offboard tester acting as the external device.

[0016] According to another preferred embodiment, if the software of the control unit is already being updated by the offboard tester as an external device, the onboard tester only has read access. Conversely, the same applies here: the onboard tester cannot negatively affect a memory update by the offboard tester.

[0017] According to a further preferred embodiment, a diagnostic query by the onboard tester is blocked while a diagnostic query is in progress by the external device. The diagnostic query is therefore not among the predetermined applications in which both testers have simultaneous access to the memory. This allows each diagnostic query to be performed with particular reliability.

[0018] Alternatively or additionally, it may be possible to block diagnostic queries by the external device while a diagnostic query is in progress by the onboard tester.

[0019] The motor vehicle according to the invention has at least one control unit to be tested and an onboard tester for the control unit to be tested, and furthermore it has a connection for an offboard tester, wherein a control unit connected downstream of the connection checks whether an offboard tester connected to the connection (or possibly another device connected to the connection) should be allowed write access or only read access to a control unit to be tested, and the control unit enables corresponding access to the control unit to be tested.

[0020] The control unit also functions as a gateway, which in this case has knowledge of the rights of the offboard tester, for example depending on (ongoing and / or planned) processes initiated by the onboard tester.

[0021] The invention further includes providing a corresponding control unit for a motor vehicle of the type just described, wherein a computer program is stored on the control unit which is designed to cause the control unit, when connected downstream of a port, to check whether an offboard tester connected to the port (or possibly another device connected to the port) should be allowed write access or only read access via the control unit to a control unit to be tested coupled to the control unit on the other hand, and enables corresponding access to the control unit to be tested.

[0022] The invention further includes the provision of a computer program product with a computer program for the aforementioned control unit, which causes the control unit (in operation, i.e., when the computer program is running on a processor), when connected downstream of a port, to check whether an offboard tester connected to the port (or possibly another device connected to the port) should be allowed write access or only read access via the control unit to a control unit to be tested coupled to the control unit on the other hand, and enables corresponding access to the control unit to be tested.

[0023] A motor vehicle according to another aspect of the invention comprises a control unit to be tested and an onboard tester for the control unit to be tested, as well as a connection for an external device such as an offboard tester, wherein the control unit to be tested has a memory that is designed such that, at least in predetermined applications of the onboard tester as well as predetermined applications of the (connected to the) external device, the onboard tester and the external device can simultaneously access this memory.

[0024] In this respect, the motor vehicle has a particularly expanded storage capacity.

[0025] According to one embodiment, a first storage unit is provided for the onboard tester and a second storage unit for the external device. The first and second storage units, which are intended to be different from each other, can be sectors on a single memory, but preferably they are two separate "diagnostic stacks".

[0026] This aspect includes the provision of a control unit for a motor vehicle, wherein the control unit has a memory, and wherein a computer program is stored on the control unit which causes the control unit (in operation, i.e. when the computer program is running on a processor) to use a first memory unit when accessed by an onboard tester and to use a second memory unit different from the first when accessed by an external device.

[0027] Finally, the invention also includes the provision of a computer program product with a computer program for this control unit, wherein the computer program is designed (in operation, i.e., when the computer program is running on a processor) to cause the control unit to use a first memory unit when accessed by an onboard tester and to use a second memory unit different from the first when accessed by an external device.

[0028] For use cases or application situations that may arise during the procedure and are not explicitly described here, it may be provided that, according to the procedure, an error message and / or a request for user feedback is issued and / or a default setting and / or a predetermined initial state is set.

[0029] The invention includes the control device for the motor vehicle. The control device can comprise a data processing device or a processor unit configured to carry out an embodiment of the method according to the invention. For this purpose, the processor unit can comprise at least one microprocessor and / or at least one microcontroller and / or at least one FPGA (Field Programmable Gate Array) and / or at least one DSP (Digital Signal Processor). Furthermore, the processor unit can comprise program code configured to carry out the embodiment of the method according to the invention when executed by the processor unit. The program code can be stored in a data memory of the processor unit. A processor circuit of the processor unit can, for example, comprise at least one circuit board and / or at least one SoC (System on Chip).

[0030] The invention also includes further developments of the method according to the invention, which have features already described in connection with the further developments of the motor vehicle according to the invention, and vice versa. For this reason, the corresponding further developments of the method according to the invention are not described again here, and vice versa.

[0031] The motor vehicle according to the invention is preferably designed as a motor vehicle, in particular as a passenger car or truck, or as a passenger bus or motorcycle.

[0032] As a further solution, the invention also includes a computer-readable storage medium comprising instructions that, when executed by a computer or a computer network, cause it to execute an embodiment of the method according to the invention. The storage medium can, for example, be configured at least partially as a non-volatile data storage medium (e.g., as flash memory and / or as an SSD - solid state drive) and / or at least partially as a volatile data storage medium (e.g., as RAM - random access memory). The storage medium can also be operated, for example, as an app store server on the internet. The computer or computer network can provide a processor circuit with at least one microprocessor. The instructions can be provided as binary code or assembly language and / or as source code in a programming language (e.g., C).

[0033] The invention also includes combinations of the features of the described embodiments. The invention therefore also includes realizations that each exhibit a combination of the features of several of the described embodiments, provided that the embodiments have not been described as mutually exclusive.

[0034] The following are described exemplary embodiments of the invention. The only embodiment shown here is the sole The figure schematically shows the construction of a motor vehicle that simultaneously implements various aspects of the invention, and an offboard tester connected to it.

[0035] The exemplary embodiments described below are preferred embodiments of the invention. In these exemplary embodiments, the described components each represent individual features of the invention, which can be considered independently of one another and each further develops the invention independently. Therefore, the disclosure is intended to include combinations of features of the embodiments other than those shown. Furthermore, the described embodiments can also be supplemented by further features of the invention already described.

[0036] In the figures, identical reference symbols denote functionally equivalent elements.

[0037] A motor vehicle, designated as a whole by 1, comprises two control units 10 and 12 to be tested. These control units perform functions within the vehicle, such as controlling actuators (not shown in the diagram) and receiving signals from sensors, among others. Such control units are tested using an onboard tester 100. The onboard tester 100 selectively performs read access to the memory in control units 10 and 12 at specific time intervals, performs write access, diagnoses the condition based on the read data, and updates the control units, i.e., their software is updated. An offboard tester 200, which can be connected via an interface (diagnostic socket, e.g., an OBD connector), can perform the same task. (Alternatively, a dongle, not shown in the diagram, can be connected via the interface as another type of external device, i.e., connected to the diagnostic socket.)The following explanations regarding the offboard tester also apply, where applicable, to any other such external device. The invention is realized in one aspect by providing a control unit 14 directly behind the interface 16. This control unit receives information from the onboard tester 100 indicating whether the onboard tester is currently active, i.e., performing a read access, write access, diagnostic query, update, or similar action on at least one of the control units 10 and 12. If this is the case, the lock 20 in the control unit 14 blocks any write access from the offboard tester and allows only read access to the control units 10 and 12, respectively.

[0038] In another aspect, a gateway 22 is connected upstream of control unit 12, which prioritizes the offboard tester 200 in case of a conflict. Gateway 22 receives information from the onboard tester 100 as to whether it is currently performing a read or write access, a diagnostic query, an update, or something similar. If this is not the case, the offboard tester can access it. As long as the offboard tester 200 is accessing, for example, control unit 12, the onboard tester 100 would be blocked by gateway 22.

[0039] According to another aspect, the control unit 12 is equipped with an expanded memory 24. This expansion allows, compared to the state of the art, not only the onboard tester 100 to access memory 24, but also the offboard tester 200.

[0040] As an alternative to expanding memory 24, a second memory 26 ("diagnostic stack") can be provided, whereby the onboard tester 100, for example, can only access memory 24 and the offboard tester 200 can only access memory 26, or vice versa.

[0041] The aspects of providing the control unit 14 with the lock 20 on the one hand, the gateway 22 on the other, and further the extended memory 24 or a second memory 26 each constitute an aspect of the invention. These four measures can be implemented individually, in any combination of two or three, or all four simultaneously in one and the same motor vehicle 1.

[0042] Overall, the examples show how the use of an onboard tester can be provided when a first tester is connected.

Claims

[1] Method for operating a control unit (10, 12) in a motor vehicle (1), wherein the control unit (10, 12) can be accessed by both an onboard tester (100) and an external device, in particular an offboard tester (200), characterized by , that a memory (24, 26) of the control unit (10, 12) is designed such that, at least in predetermined applications of the onboard tester (100) as well as at least in predetermined applications of the external device (200), the onboard tester (100) and the external device (200) simultaneously have access to the memory (24, 26). [2] Method according to claim 1, wherein, during the software update of the control unit (10, 12) by the onboard tester (100) is already in progress, the external device (200) only receives read access. [3] Method according to claim 1 or 2, wherein, when the software of the control unit (10, 12) is already being updated by an offboard tester (200) as an external device, the onboard tester (100) only has read access. [4] Method according to one of claims 1 to 3, wherein a diagnostic query by the onboard tester (100) is blocked when a diagnostic query is in progress by the external device (200). [5] Motor vehicle with at least one control unit (10, 12) to be tested and an onboard tester (100) for the control unit (10, 12) to be tested and with a connection (16) for an offboard tester (200), wherein a control unit (14) is provided downstream of the connection (16) which is designed to check whether an offboard tester (200) connected to the connection (16) should be allowed write access or only read access to a control unit (10, 12) to be tested, and to enable corresponding access to the control unit (10, 12) to be tested. [6] Control unit (14) for a motor vehicle, in particular for a motor vehicle according to claim 5, on which a computer program is stored which causes the control unit (14), when connected downstream of a port (16), to check whether an offboard tester (200) connected to the port (16) should be allowed write access or only read access via the control unit (14) to a control unit (10, 12) to be tested coupled to the control unit (14) on the other hand, and enables corresponding access to the control unit (10, 12) to be tested. [7] Computer program product for the control unit (14) according to claim 6, comprising a computer program which causes the control unit (14), when connected downstream of a port (16), to check whether an offboard tester (200) connected to the port (16) should be allowed write access or only read access via the control unit (14) to a control unit (10, 12) to be tested coupled to the control unit (14) on the other hand, and enables corresponding access to the control unit (10, 12) to be tested. [8] Motor vehicle (1) with a control unit (10, 12) to be tested and an onboard tester (100) for the control unit (10, 12) to be tested, and with a connection (16) for an external device such as, in particular, an offboard tester (200), wherein the control unit (10, 12) to be tested has a memory (24, 26) which is designed such that, at least in predetermined applications of the onboard tester (100) as well as in predetermined applications of the external device (200), the onboard tester (100) and the external device (200) simultaneously have access to the memory (24, 26). [9] Motor vehicle according to claim 8, characterized by , that a first memory unit (24) is provided for the onboard tester (100) and a second memory unit (26) is provided for the external device (200). [10] Control unit (10, 12) for a motor vehicle, wherein the control unit (10, 12) has a memory (24, 26), and wherein a computer program is stored on the control unit (10, 12) which causes the control unit (10, 12) to use a first memory unit (24) when accessed by an onboard tester (100) and to use a second memory unit (26) different from the first memory unit (24) when accessed by an external device such as, in particular, an offboard tester (200). [11] Computer program product for the control unit according to claim 10, comprising a computer program which causes the control unit (10, 12) to use a first memory unit (24) when accessed by an onboard tester (100) and to use a second memory unit (26) different from the first memory unit (24) when accessed by an external device such as, in particular, an offboard tester (200).

Images