Updating a control unit on board a motor vehicle

Abstract

A control system (200) for updating a control unit (225) on board a motor vehicle comprises a communication device (205) with a wireless interface; a data storage device; and a processing device. The processing device is configured to determine update data required for updating the control unit (225); to receive an indication of a communication opportunity (140, 150, 155) in the vicinity of the motor vehicle; and to control the communication device (205) to download any missing part of the update data from the communication opportunity (140, 150, 155) into the data storage device.

Description

[0001] The present invention relates to updating a control unit on board a motor vehicle. In particular, the invention relates to transmitting update data to the motor vehicle.

[0002] A motor vehicle contains an electronic control unit (ECU) whose software needs to be updated. Typically, a vehicle manufacturer releases a new version of the software, and this software must be distributed to a large number of vehicles. The vehicle includes a cellular interface through which the software can be downloaded. However, this type of connection is relatively expensive, and available bandwidth can be exhausted if many vehicles are downloading update data simultaneously. Alternatively, Wi-Fi can be used for downloading by equipping the vehicle with a suitable wireless interface that can connect to a Wi-Fi hotspot. However, some vehicles are not near a hotspot for extended periods, so this method is not always reliable.

[0003] US 2023 / 0298406 A1 proposes a technique for managing vehicle update data.

[0004] One of the problems underlying the present invention is to provide an improved technique for updating an on-board control unit of a motor vehicle. The invention solves this problem by means of the subject matter of the independent claims. Dependent claims describe preferred embodiments.

[0005] According to a first aspect of the present invention, a control system for updating an on-board control unit of a motor vehicle comprises a communication device with a wireless interface; a data storage device; and a processing device. The processing device is configured to determine update data required for updating the control unit; to receive an indication of a communication opportunity within the vicinity of the motor vehicle; and to control the communication device to download any missing portion of the update data from the communication opportunity into the data storage device.

[0006] The update data can include, for example, parts of an application, a library, or an operating system. This allows software running on the control unit to be updated. For instance, a security vulnerability can be closed, a function can be modified, added, or removed. A user interface or operating data can be updated. Even extensive update data, such as geographic map data, can be transmitted more efficiently using the presented technique.

[0007] The control system can be part of a data-centric data processing system on board the vehicle. The processing unit's primary task is to determine which update data should be downloaded and which communication opportunity should be used for this purpose. The actual download, however, can be performed autonomously by the communication unit. By evaluating the notification, metadata can be accessed that would otherwise not be available on board the vehicle. The notification can be provided by a central entity that can determine a communication opportunity related to the vehicle. The control system can be part of a higher-level system for distributing update data.

[0008] The communication device can include multiple wireless interfaces, with the processing device configured to control the use of these interfaces for downloading update data. The communication device can provide a control interface through which the processing device can, for example, select which of the wireless interfaces should be used for downloading. The communication device can include interfaces for WLAN, cellular networks, or Bluetooth, for example. A suitable interface can be selected based on the data to be transferred and the availability of communication opportunities. This allows, in particular, attempts to transfer large amounts of data via a cost-effective interface.If data needs to be transferred urgently, for example, if only a small portion of the required update data is missing, a more expensive interface such as mobile communications can be used. Alternatively, a mobile device belonging to a person assigned to the vehicle can be used to provide update data. The mobile device can be instructed to download a specific portion of the update data from an external location as soon as it has a suitable connection. The downloaded data can be stored in internal memory, from where it can be retrieved when the mobile device is later back within communication range of the vehicle. This technique typically requires the installation of appropriate software on the mobile device.

[0009] In a particularly preferred embodiment, the communication device is configured to download update data from another vehicle. This other vehicle may already have the update data stored locally, for example, because it has already performed a similar update or is collecting the necessary update data. Communication between the vehicles preferably uses direct radio technology to keep costs low and bandwidth high. For example, WLAN, Bluetooth, or a direct exchange method for mobile communications can be used. Such interfaces can provide high bandwidth, so that even a short transmission time may be sufficient to download a significant portion of the required update data.

[0010] This technology allows update data to be propagated from vehicle to vehicle, using local connection techniques in each case. Overall, communication costs for transmitting update data to a large number of vehicles can be significantly reduced. Update data can be distributed to vehicles more quickly, allowing the onboard control unit to be updated sooner. For example, if the update addresses a security vulnerability, this can improve the vehicle's operational safety.

[0011] It should be noted that one communication opportunity, such as another vehicle or a mobile device belonging to a person associated with the vehicle, provides the update data from local storage. Another type of communication opportunity involves a hotspot or other type of data access point that allows the vehicle to connect to a data storage system, which may be centralized or provided as a service in the cloud. This data storage system can centrally provide the update data for a large number of vehicles.

[0012] If the communication opportunity includes another vehicle, it is preferred that a two-way data exchange be possible. The processing device can be configured to provide the other vehicle with update data stored in its data storage. In this way, both vehicles can benefit from each other's data. The probability that the two vehicles have different portions of the update data in their data storage can be increased if the update data is divided into data blocks that are downloaded by the vehicles in different sequences. In a simple embodiment, both vehicles can download the data blocks in a pseudo-random order. This can significantly increase the probability that two randomly paired vehicles have different sets of data blocks.

[0013] According to another aspect of the present invention, a motor vehicle comprises a control system described herein. The motor vehicle can also comprise several control units, each of which can be updated in the same way. Preferably, the motor vehicle comprises a passenger car. In a further embodiment, the motor vehicle can also comprise a motorcycle. Other motor vehicles are also possible.

[0014] According to yet another aspect of the present invention, a method for updating a control unit on board a motor vehicle comprises steps of determining update data required for updating the control unit; receiving a notification of a communication opportunity in the area of ​​the motor vehicle; and downloading a still missing part of the update data from the communication opportunity into a data storage device.

[0015] The method is preferably carried out using a system described herein, in particular using a control system described herein on board a motor vehicle. It is preferred that the processing device be electronic. The processing device may, for example, comprise an integrated circuit, a programmable logic device, or a programmable microcomputer. The method may be implemented in the form of a configuration or as a computer program product with program code means for the processing device. The configuration or the computer program product may be stored on a computer-readable data carrier. Features or advantages of the method may be transferred to the device, or vice versa.

[0016] In one embodiment, the communication opportunity is only temporarily available. An approximate start and end time of a communication window can be determined based on the notification. A communication device on board the vehicle can be specifically prepared to download certain update data from the communication opportunity as soon as a connection can be established. Based on the notification, it can be clarified in advance which parts of the update data can be exchanged with the communication opportunity. This can shorten or eliminate the need to negotiate the data to be transmitted when a communication connection is already established.

[0017] The communication opportunity can be determined based on the vehicle's position and / or planned route. Preferably, the communication opportunity is determined by an entity outside the vehicle. This external entity can process position or movement data, or other data necessary for determining communication opportunities, for a large number of vehicles and determine indications of when two or more vehicles may be within mutual communication range. The same technique can also be used for communication between a vehicle and a stationary communication opportunity, such as a Wi-Fi hotspot. In this way, the individual vehicle can communicate with another vehicle without disclosing further information about its location or planned route.

[0018] Information required for planning or preparing a data exchange between the vehicle and a communication opportunity, particularly another vehicle, can be transmitted via a different interface than the update data. Specifically, the vehicle can receive the notification via mobile network. The data volume to be transmitted can be relatively small, thus justifying the comparatively high costs of using the mobile network interface. The update data is preferably transmitted via a different communication channel. This can include, in particular, Wi-Fi, Bluetooth, or another direct wireless communication channel.

[0019] Once all necessary update data has been received and stored in the data storage, the control unit can be updated. The update data can be checked beforehand to ensure that it is complete and unaltered. These checks can be performed, for example, using checksums or cryptographic certificates. If it is determined that the update data is incomplete or unaltered, a portion of the data whose validity could not be verified can be downloaded again. The control unit is preferably updated while the vehicle is stationary. In particular, the vehicle can be switched off before the update is performed.

[0020] It is preferred that the vehicle be equipped with several electronic control units (ECUs) whose updates must be coordinated. Update data for the ECUs can be downloaded using the technique described herein. The ECU updates can then be performed in a predetermined sequence or in a predetermined, interconnected manner.

[0021] According to yet another embodiment of the present invention, a device for distributing update data to motor vehicles is configured to determine update data that is required on board the motor vehicles, to determine the positions and / or routes of the motor vehicles; and to provide a first motor vehicle with a portion of update data that is still missing there.

[0022] Preferably, each of the two vehicles is provided with a reference to the other vehicle. The vehicles can perform one-way or two-way data transmission of update data. In a further preferred embodiment, the reference can include information about which parts of the update data can be downloaded from the other vehicle. For this purpose, both vehicles can inform the device which parts they have already downloaded and which are still missing.

[0023] Furthermore, a system is proposed comprising a device described herein and a plurality of motor vehicles described herein. The system can be used to distribute update data for potentially a plurality of control units to a practically unlimited number of motor vehicles.

[0024] The invention will now be described in more detail with reference to the attached drawings, in which: Fig. 1 a system; Fig. 2 a device on board a motor vehicle; and Fig. 3. A flowchart of a process is illustrated.

[0025] Fig. Figure 1 shows a system 100 with at least one motor vehicle 105 and a central station 110. The central station 110 can operate with practically any number of motor vehicles 105. A first motor vehicle 115 and a second motor vehicle 120 are shown purely as examples.

[0026] Each motor vehicle 105 includes a communication device 125 for wireless communication with the central station 110.

[0027] The central unit 110 comprises a device 130 configured to support the distribution of update data stored in a data storage device 135 to a motor vehicle 105. The device 130 and the data storage device 135 can each communicate with a motor vehicle 105 via mobile communication 140. At least the data storage device 135 can also be accessed via a network 145, which can be a public or private network and, in one embodiment, includes a section of the internet. A WLAN node 150, which can also be called a hotspot, can be connected to the data storage device 135 via the network 145 or by other means. Thus, a motor vehicle 105 can establish a wireless connection to a WLAN node 150 using the communication device 125 and download update data from the data storage device 135 via this connection.

[0028] Another way to download update data from data storage 135 is to transfer portions of the update data to the vehicle 105 using a mobile device 155. The mobile device 155 can download a portion of the update data from data storage 135 if it has a good connection to the network 145, for example, via a Wi-Fi node 150. The downloaded update data can then be taken along with the mobile device 155 to the vicinity of the vehicle 105, from where it can be downloaded to the vehicle 105, for example, via Bluetooth or Wi-Fi. This technique typically uses only one mobile device 155, which is assigned to the vehicle 105 in question. For example, the mobile device 155 could belong to an owner or driver of the vehicle 105.

[0029] Another way to distribute update data to motor vehicles 105 is to exchange already downloaded portions of the update data between motor vehicles 115 and 120. A portion of the update data already downloaded by the first motor vehicle 115 from the central data storage 135 can thus be passed directly and resource-efficiently to the second motor vehicle 120. Preferably, the exchange is bidirectional, so that portions of update data still missing from the first motor vehicle 115 can be transferred to the second motor vehicle 120.

[0030] It is proposed that the central office 110, based on position, route, or movement data of vehicles 115 and 120, generates recommendations as to which communication opportunity 105, 140, 150, or 155 is suitable for each vehicle 115 or 120. The specific communication opportunity that vehicles 115 and 120 actually use can then be decided locally.

[0031] Fig. Figure 2 shows a control system 200 on board a motor vehicle 105. The control system 200 comprises a communication device 205 with at least one wireless interface 210, a data storage device 215, and a processing device 220. The processing device 220 can access the mobile communication interface 140.

[0032] The vehicle 105 is equipped with one or more control units 225 that require updating. Typically, updating one control unit 225 also requires updating another control unit 225. Therefore, it is not uncommon for several control units 225 to need updating simultaneously. To perform an update of a control unit 225, the corresponding update data must be completely downloaded to the vehicle 105. The update data is stored in the local data storage 215. An update process usually only begins once all update data has been completely downloaded.

[0033] It is proposed that the processing unit 220 receives a notification from the central unit 110 via the mobile communication interface 140 regarding potential communication opportunities in the vicinity of the vehicle 105. The processing unit 220 can then control the communication unit 205 to take advantage of one of these communication opportunities in order to download a further portion of the required update data. It is possible to control which communication opportunity 140, 150, or 155 is to be used and which parts of the update data are to be downloaded. In one embodiment, it is possible to determine which parts of the update data are offered by the communication opportunity 140, 150, or 155 even before a data connection to that communication opportunity is established. After configuration, the communication unit 205 can autonomously control the actual download process.

[0034] Fig. Figure 3 shows a flowchart of an exemplary procedure 300 for controlling the distribution of update data to a large number of motor vehicles 115. For illustrative purposes only, the following discussion focuses on providing update data to a single motor vehicle 115.

[0035] For better understanding, steps that are more likely to be associated with the central location 110 are shown in a left area, and those that are more likely to be associated with the motor vehicle 115 are shown in a right area.

[0036] In step 305, update data to be transmitted to a control unit 225 on board the vehicle 115 can be determined. This involves determining which control units 225 are present on board the vehicle 115, their functions, their software version, their configuration, etc. The update data to be installed on the control unit 225 can thus be specified precisely.

[0037] In step 310, the position and / or planned route of the motor vehicle 115 can be determined. This information can be forwarded to the central office 110.

[0038] In step 315, the central unit 110 can determine communication opportunities 140, 150, 155 for the vehicle 115. For example, map information can be used to specify the location and / or access data for a WLAN node 150. Further information can include that another vehicle 120 is coming within communication range of the vehicle 115. The determined communication opportunities 140, 150, 155 are transmitted to the vehicle 115. This data can be forwarded to the processing unit 220, in particular via mobile network 140. It is assumed below that update information is to be downloaded via the other vehicle 120. Alternative scenarios, in which update data is downloaded, for example, via a WLAN node 150 or the mobile device 155, are also possible.

[0039] In step 320, the processing unit 220 can prepare the communication unit 205 to initiate communication with the other motor vehicle 120. In one embodiment, it is specified from when to when a communication attempt with the other motor vehicle 120 is to be made, which parts of the update data are to be downloaded from the other motor vehicle 120, and optionally also which parts of the update data from the data storage 215 can be made available to the other motor vehicle 120.

[0040] In step 325, a one-way or two-way transmission of parts of the update data takes place between the vehicles 115 and 120. Communication between the vehicles 115 and 120 is usually only possible temporarily. For example, the vehicles 115 and 120 may meet at a traffic light, on a road, or at other infrastructure. Efforts are made to utilize the connection between the vehicles 115 and 120 as effectively as possible before it becomes unusable due to the distance between them.

[0041] In step 330, the control system 200 can inform the central office 110 which parts of the update data have been downloaded or which parts of the update data can be made available from the data storage 215 to another motor vehicle 120.

[0042] Device 130 can return to step 305 with this information, and procedure 300 can be repeated.

[0043] Once it has been determined that all update data required for updating one or more control units 225 is available in the local data storage 215, the updating of the control units 225 can be scheduled and / or carried out in a single step 335. The update is usually delayed until the vehicle 115 is parked and is not expected to be driven for a certain period of time required for the update. The update is preferably performed at night when the vehicle 115 is less likely to be used by a user.

[0044] It should be noted that the update data downloaded from the central data storage unit 135 can remain on board the vehicle 115 or in the data storage unit 215 in order to be passed on to another vehicle 120 if necessary. If the downloaded update data is outdated or the data storage unit 215 is needed for another purpose, the update data that is no longer needed locally can be deleted from the data storage unit 215. Reference sign 100 System 105 motor vehicle 110 central office 115 first motor vehicle 120 second motor vehicle 125 wireless communication device 130 Device 135 data storage devices 140 Mobile communications 145 Network 150 Wi-Fi nodes, hotspot 155 Mobile device 200 tax system 205 Communication device 210 wireless interface 215 Data storage 220 processing unit 225 Control unit 300 procedures 305 determine update data 310 Determine position / route 315 opportunities for communication 320 Preparing communication effectively 325 Synchronize 330 Update status 335 Update control unit QUOTES INCLUDED IN THE DESCRIPTION

[0000] This list of documents cited by the applicant was automatically generated and is included solely for the reader's convenience. The list is not part of the German patent or utility model application. The DPMA accepts no liability for any errors or omissions. Cited patent literature

[0000] US 2023 / 0298406 A1

[0003]

Claims

[1] Control system (200) for updating a control unit (225) on board a motor vehicle; wherein the control system (200) comprises: - a communication device (205) with a wireless interface (210); - a data storage device (215); and - a processing facility (220) which is set up for this purpose: - To determine update data required for updating the control unit (7225); - to receive a notification of a communication opportunity (140, 150, 155) in the area of ​​the motor vehicle; and - to control the communication device (205) to download a missing part of the update data from the communication opportunity (140, 150, 155) into the data storage. [2] Control system (200) according to claim 1, wherein the communication device (205) comprises multiple wireless interfaces (210) and the processing device (220) is configured to control the use of the interfaces (210) for downloading the update data. [3] Control system (200) according to claim 1 or 2, wherein the communication device (205) is configured to download update data from another motor vehicle (120); wherein the processing device (220) may be configured to provide the other motor vehicle (120) with update data stored in the data storage (215). [4] Motor vehicle (105) comprising a tax system (200) according to any of the preceding claims. [5] Method (300) for updating a control unit (225) on board a motor vehicle, the method comprising the following steps: - Determine (305) update data required for updating the control unit (225); - Receiving (320) a notification of a communication opportunity (140, 150, 155) in the vicinity of the motor vehicle; and - Downloading (325) a missing part of the update data from the communication opportunity (140, 150, 155) into a data storage device (215). [6] Method according to claim 5, wherein the communication opportunity (140, 150, 155) is only temporarily available: and / or wherein the communication opportunity (140, 150, 155) is determined on the basis of a position and / or a planned route of the motor vehicle (310). [7] A method according to claim 5 or 6, wherein the motor vehicle (105) supports different communication channels and the download is controlled depending on a channel supported by the communication opportunity (140, 150, 155), wherein the notification can be received via mobile communication (140); and the update data is transmitted preferably via another communication channel (150, 155). [8] Method according to any one of claims 5 to 7, further comprising updating (335) the control unit (225) after all required update data has been received; and / or wherein several control units (225) are provided on board the motor vehicle, the updates of which must be coordinated; and wherein update data for the control units (225) is downloaded. [9] Device (110) for distributing update data to motor vehicles (105); wherein the device (110) is configured to: - To determine the update data required on board each of the motor vehicles (105); - to determine the positions and / or routes of the motor vehicles (105); and - to provide a first motor vehicle (115) with a reference to a second motor vehicle (120), wherein the second motor vehicle (120) can provide the first motor vehicle (115) with a missing part of update data. [10] System (100) comprising a device (110) according to claim 9 and a plurality of motor vehicles (105) according to claim 4.

Images