Method for introducing a wireless update into a computer unit of a vehicle and system

Abstract

The invention relates to a method for introducing a wireless update into a computer unit (1) of a vehicle (2). The method according to the invention is characterised in that a management module (5) makes a proactive request at least once to a user of the vehicle (2) to specify a vehicle status default value for at least one vehicle status; the management module (5) receives and stores a vehicle status default value specified by the user; after provision of the wireless update by a central computer device (3), the management module (5) compares status information of the vehicle (2) with the specified vehicle status default values; the management module (5) makes a proactive user request via a mobile terminal (6) to install the wireless update if at least one vehicle status for which a vehicle status default value has been set fulfills its respective vehicle status default value; and the management module (5) initiates the installation of the wireless update on the computer unit (1) when the management module (5) receives an installation confirmation.

Description

[0001] Method for introducing a wireless update into a computing unit of a vehicle and system

[0002] The invention relates to a method for introducing a wireless update into a computing unit of a vehicle according to the type defined in more detail in the preamble of claim 1 and to a system according to the type defined in more detail in the preamble of claim 8.

[0003] To handle complex control and regulation tasks and to provide driver assistance systems, increasingly powerful computer systems are being integrated into vehicles. Over the course of their service life, it may be necessary to update the software components executed by these computer systems. This allows bugs to be fixed, new functions to be provided, or security gaps to be closed. Corresponding software updates can be downloaded to a computer outside the vehicle and then installed in the vehicle, for example, during maintenance at a workshop or by the vehicle user, for example, using a USB stick.

[0004] Modern vehicles are equipped with a telecommunications unit that enables wireless connection to the internet. This also allows software updates to be downloaded wirelessly, for example, via a mobile network.

[0005] While downloading data is possible while the vehicle is in use, depending on the software component or computer system being updated, the vehicle must be stationary or the engine or on-board electronics deactivated. During the installation of a software update, the corresponding computer system may not be able to perform its typical tasks because relevant code blocks are being replaced, and one or more reboots may be necessary. Therefore, a suitable time window must be found to install the relevant software updates in the vehicle to prevent the vehicle from being unusable when the user is about to take a trip.

[0006] Installing software updates can also be time-consuming. During installation, the corresponding computer system is switched on and consumes energy. Powerful computer systems, in particular, have high energy requirements. This leads to the vehicle's electrical energy storage system becoming increasingly depleted while installing software updates. In a battery-electric vehicle, this can reduce the remaining range.

[0007] To increase vehicle reliability during the installation of software updates, it is generally known to make the installation of software updates dependent on prerequisites, such as a sufficient battery charge. US Pat. No. 11,269,617 B2, which represents the closest prior art, discloses a system for transmitting at least one update package for at least one control unit of a motor vehicle and a corresponding method. The installation of the update package on the control unit can, for example, be made dependent on whether the vehicle is currently connected to a charging station. Furthermore, dependencies of the update packages on specific hardware and software components can be taken into account.This allows for the creation of installation groups, allowing different update packages to be grouped together depending on the vehicle's hardware and / or software configuration. This enables quick and efficient distribution of update packages to differently equipped vehicles.

[0008] Furthermore, DE 102016 014 326 A1 discloses a method for operating an assistance system of a vehicle, which provides that a comparison is carried out with stored data on the basis of vehicle data and an update of the vehicle data to be carried out is determined on the basis of the comparison and, if an update is present, a notification for carrying out this update is issued to a mobile terminal of the user, wherein the user is only informed of the update of the vehicle data when the vehicle is stationary and the ignition is switched off.Furthermore, DE 102019 104434 A1 discloses a system comprising a memory storing a probability map including information indicating probabilities that a vehicle will be used during each of a plurality of segments of a time period; and a processor of the vehicle programmed to schedule a time to install a software update using the probability map and an expected downtime required for installation, and to install the software update at that time in response to confirmation that the vehicle is not in use.

[0009] Furthermore, WO 2017 / 190 868 A1 discloses a method for updating the software of at least one sensor in a motor vehicle equipped with a motor vehicle communication system. The software to be updated is transmitted to the motor vehicle communication system and transferred from the motor vehicle communication system to the at least one sensor. The new software is transferred to the at least one sensor only when the motor vehicle or the motor vehicle's engine is at a standstill. Furthermore, confirmation of the software update is requested via the smartphone of the user or driver of the vehicle in order to install the software update.

[0010] In addition, US 2015 / 0 169 311 A1 discloses a method for scheduling a software update with an automatic determination of a time window for the software update based on a tracked usage pattern and the application of software updates to the vehicle during the planned time window, determining whether prior notification or approval of the user is required and, if so, performing the software update upon user approval.

[0011] Furthermore, it is known to initiate software updates via a third-party device. For example, a first computer system can be used to remotely access a second computer system, and thus a software update can be installed on the second computer system via the first computer system. The computer systems can be configured in various ways, for example, as desktop computers, laptops, tablet computers, smartphones, servers, and the like. The present invention is based on the object of providing an improved method for incorporating a wireless update into a computing unit of a vehicle, with the aid of which the reliability of the vehicle can be increased.

[0012] According to the invention, this object is achieved by a method for introducing a wireless update into a computing unit of a vehicle having the features of claim 1. Advantageous embodiments and further developments as well as a corresponding system for implementing the method emerge from the dependent claims.

[0013] A generic method for introducing a wireless update into a computing unit of a vehicle, wherein the wireless update is provided by a central computing device, is transmitted wirelessly from the central computing device to a vehicle-internal telecommunications unit and is temporarily buffered in the vehicle, and wherein a management module collects status information which describes at least one vehicle status, and the management module, depending on the status information, initiates an installation of the wireless update on the computing unit when the management module receives an installation command issued by a user via a mobile terminal, is further developed according to the invention in that

[0014] - the management module makes at least one proactive request to the user to specify a vehicle state default value for at least one vehicle state;

[0015] - the management module receives and stores a vehicle condition default value specified by the user;

[0016] - the management module, after the wireless update has been provided by the central computing device, compares the status information with the specified vehicle status default values;

[0017] - the management module makes a proactive user request to install the wireless update via the mobile device if at least one vehicle state for which a vehicle state default value has been defined meets its respective vehicle state default value; and

[0018] - the management module initiates the installation of the wireless update on the computing unit when the management module receives an installation confirmation. The vehicle status describes all conceivable properties and states of the vehicle and its components. This includes, for example, a door locking status, the degree of opening of an electric window, the degree of opening of a roof window, the ignition status, the time elapsed after the engine has been switched off, an oil temperature, an interior temperature, an outside temperature, a time of day, a date, settings of vehicle subsystems such as a radio station tuned in an infotainment system, an active audio source, the setting of an air conditioning system, and the like. Corresponding status information is measured by the vehicle using sensors and provided by the computing units installed in the vehicle.Access is possible via data bus, for example via CAN bus.

[0019] This enables the user to define situations in which installing wireless updates is appropriate. For example, the user can specify that a suitable time window for installing wireless updates only exists when a certain minimum amount of time has elapsed after the vehicle's engine has been switched off and, optionally, additionally, when the engine, oil, or cooling water has cooled down to a certain temperature. This can be an indication that the vehicle will not be used for an extended period of time, meaning that wireless updates can be installed without the user wanting to use the vehicle. This increases the reliability of the vehicle because it prevents the vehicle from being unavailable when the user wants to use it for a journey.

[0020] The management module only requests the user to confirm the installation of the wireless update when a suitable time period exists, i.e., a situation defined by the user based on the vehicle status default values. This further improves user convenience, as installation requests are not made if a suitable time window is not available. By using the mobile device, the user does not have to be present in the vehicle to start the installation, which not only further improves user convenience but also increases reliability, as installation of the wireless update can begin immediately after the relevant installation conditions have been met, without having to wait until the user has entered their vehicle. In this context, "introducing" means both downloading the wireless update and installing it on the computing unit.The central computing device can, for example, be a cloud server, also known as a backend. The central computing device can be operated by the vehicle manufacturer, for example. A wireless connection between the telecommunications unit and the central computing device is possible using various radio technologies, such as mobile communications, WiFi, Bluetooth, NFC, ZigBee, or the like. A particularly available connection is possible via mobile communications. It is also conceivable that a Wi-Fi hotspot is available, for example, at the user's private parking location, via which the telecommunications unit can establish a connection to the central computing device using WLAN and the user's landline.

[0021] A downloaded wireless update can be cached at various locations in the vehicle. The corresponding data can be stored, for example, in the telecommunications unit itself or in any computing unit. Installation then takes place by reading the corresponding data from the telecommunications unit or computing unit. The wireless update can also be a so-called differential update, i.e., an update that only contains portions of the program code that need to be replaced. Programs or program sections already implemented on a computing unit can be replaced, or entirely new programs can be introduced into the vehicle.

[0022] The management module can also be referred to as a download manager, installation manager, or update manager. The management module can be implemented using hardware and / or software components. The management module can be a separate unit or be distributed. Individual parts of the management module can be distributed across one or more computing units of the vehicle, the telecommunications unit, the mobile device, and / or the central computing device.

[0023] A respective vehicle state default value defines the vehicle states for which the user wishes to install wireless updates. For example, the vehicle state could be the ignition state, in which case the vehicle state default value would then assume the value "Off." Another example of a vehicle state would be the charge level of a traction battery with the value "over 40%" for the corresponding vehicle state default value. Another example of a vehicle state would be the use of an auxiliary heater with the value "Deactivated" for the corresponding vehicle state default value. In this way, the user can specify that a software update should only be performed before starting or after using an auxiliary heater, but not while the auxiliary heater is in operation.

[0024] In other words, the power consumption of the vehicle's electrical system can also be taken into account, preventing excessive strain on an already strained electrical system caused by the installation of wireless updates and the associated increased power consumption of the processing unit. It is also possible to specifically deactivate non-relevant loads or schedule the installation during a time window in which these loads are deactivated, a process also known as load balancing.

[0025] A vehicle state default value can also be enhanced with additional information, such as a time window. For example, the user can specify that an over-the-air update should only be installed 30 minutes after the engine is turned off.

[0026] A wireless update can also be enhanced with additional information. This additional information can be determined by the vehicle manufacturer and attached to the wireless update. It can, for example, specify the installation time depending on the respective hardware component, as well as the power consumption or the amount of electrical energy required. The management module can consider this additional information to determine suitable time windows, taking into account the vehicle's default values, during which the proactive user request to install the wireless update is sent to the user.For example, if the user specifies that a wireless update should be installed before running a parking heater program, but there is insufficient time to install the wireless update after the central computing device has provided the wireless update until the parking heater is activated, the management module will refrain from issuing the proactive user request. Information regarding the download or installation progress can, of course, be displayed via the mobile device. For example, the user can be shown the current download rate, download progress, or installation progress.

[0027] An advantageous development of the method provides that the management module only submits the user request to install the wireless update when all vehicle states for which a vehicle state default value has been defined meet their respective vehicle state default values. In general, it is possible for the user to define vehicle state default values ​​for multiple vehicle states. The user can then prioritize which vehicle states must at least be met for the corresponding installation prompt to be displayed to the user. An equivalent OR selection can also be made, such as either the elapse of a specified period of time after deactivation of the drive motor or the cooling of the engine or the cooling water or oil to a specific temperature.Ideally, all vehicle condition presets specified by the user must be met before the proactive user request to install the wireless update is sent to the user via the mobile device. This increases the probability that a time window actually exists during which the vehicle will not be used by the user, thus enabling a safe installation of the wireless update.

[0028] According to a further advantageous embodiment of the method, the mobile device, the central computing device, or the management module automatically issues the installation confirmation as soon as at least one vehicle state for which a vehicle state default value has been defined meets its respective vehicle state default value. This allows the reliability of the vehicle to be further improved. If the respective vehicle states defined by the user meet their respective vehicle state default value, it can be assumed that the user also wishes to install the wireless update. In this case, the wireless update can be installed directly by automatically issuing the installation confirmation.During the day, it often happens that the mobile device is not within reach of the user, for example when the user is attending a meeting, showering, cooking, playing with their children, or similar. By automatically issuing the installation confirmation, a suitable time window for installing a wireless update can be prevented from being lost unused while the user does not have their mobile device within reach. The user can also specify for which individual vehicle states the automatic issue of the installation confirmation should and for which not. For example, the user can specify that an installation confirmation should be issued automatically between 10 p.m. and 4 a.m. when the vehicle ignition is deactivated, but that manual confirmation is required during the day.

[0029] A further advantageous embodiment of the method further provides that the management module determines the current electrical energy consumption of the vehicle, compares the current energy consumption with an electrical energy reserve stored in an electrical energy storage device of the vehicle, and only initiates the installation of the wireless update on the computing unit if, in addition, a predicted electrical energy reserve after installation of the wireless update is greater than a predetermined threshold. This ensures that, after installation of the wireless update, a sufficient remaining range is maintained in an electrically powered vehicle, in particular a purely battery-powered vehicle.In this context, "energy consumption" refers to the energy balance, i.e., the power consumption of electrical consumers as well as any charging power when the vehicle is connected to a charging station, for example. The energy consumption can be positive or negative. The electrical energy storage device could be, for example, a traction battery or a starter battery. The vehicle is able to estimate how much electrical energy will be consumed until the wireless update is installed, taking into account the expected download or installation time and the energy requirements of the corresponding computing units. By also taking the electrical energy consumption into account, the vehicle can then forecast what electrical energy reserves are likely to remain after the wireless update has been installed.

[0030] According to a further advantageous embodiment of the method, the management module outputs a notification message to the user via the mobile terminal if at least one vehicle state for which a vehicle state default value has been defined has not met its respective vehicle state default value for a vehicle state-specific period of time. If the corresponding vehicle state is relevant to the user for installing wireless updates and the corresponding vehicle state does not meet its vehicle state default value for a disproportionately long period of time, the wireless update cannot be installed due to the failure to issue the proactive user query for installing the wireless update. This is the case, for example, if the user has specified a specific threshold voltage for the vehicle's electrical energy storage device and this threshold voltage is never exceeded.This can be the case, for example, if unexpected leakage currents are present in the vehicle's electrical system. In this case, the user should take their vehicle to a workshop to have the defect rectified. In such a case, alert messages are displayed to the user via their mobile device, further increasing the reliability of the vehicle's availability.

[0031] A further advantageous embodiment of the method according to the invention further provides that the management module sends an action request to the user via the mobile terminal for at least one vehicle state that does not meet its respective vehicle state preset value. After confirmation of this action by the user, the management module causes a vehicle component linked to the vehicle state to be controlled to change its state. This also allows the reliability of the vehicle to be further increased. If, for example, the user has specified that wireless updates should only be installed when the windows are closed, a corresponding notification message can be issued to the user in a case in which at least one window of the vehicle is still at least partially open.The user is then able to give a closing command to the vehicle via the mobile device so that the vehicle closes the window automatically and can then begin installing the wireless update.

[0032] According to a further advantageous embodiment of the method according to the invention, after the wireless update has been provided by the central computing device, the management module sends a proactive user request to transmit the wireless update to the telecommunications unit via the mobile terminal, and only initiates the transmission of the wireless update to the telecommunications unit if the management module receives a transmission confirmation. The transmission confirmation is accordingly issued by the user via the mobile terminal. In other words, available wireless updates are not downloaded automatically and immediately from the vehicle, but only after confirmation by the user. This gives the user even more control over the process of installing wireless updates in their vehicle.

[0033] In a system comprising an in-vehicle computing unit, an in-vehicle telecommunications unit, a central computing device, a mobile terminal, and a management module, according to the invention the computing unit, the telecommunications unit, the central computing device, the mobile terminal, and the management module are configured to carry out a method as described above. To provide the method according to the invention, corresponding hardware components and software components are required. The hardware components comprise computer-readable storage media on which program code is stored, the execution of which by an execution unit such as a processor enables the method steps according to the invention to be carried out. As already mentioned, the management module, i.e. a corresponding download, installation, orUpdate manager can be implemented entirely or partially on one or different hardware components, i.e. on an in-vehicle computing unit, the telecommunications unit, the central computing device and the mobile device.

[0034] Further advantageous embodiments of the method and system according to the invention also emerge from the exemplary embodiments which are described in more detail below with reference to the figures.

[0035] Showing:

[0036] Fig. 1 shows a schematic representation of a system according to the invention for introducing wireless updates into a computing unit of a vehicle; and Fig. 2 shows a flowchart of a method according to the invention for introducing wireless updates into a computing unit of the vehicle. Figure 1 shows a vehicle 2 comprising two computing units 1 and a telecommunications unit 4. Also shown are a mobile terminal 6 and a central computing device 3.

[0037] The vehicle 2 is configured to receive wireless updates in order to update or introduce new software executed or executable by one or more computing units 1. A corresponding wireless update is provided by the central computing device 3 and transmitted wirelessly, for example via mobile radio, to the telecommunications unit 4. The wireless update can be temporarily buffered on the telecommunications unit 4 or another computing unit 1 of the vehicle 2. The corresponding update process is managed by a user via their mobile terminal 6. Furthermore, a management module 5 is implemented on one or more hardware components and operates in the background. In the exemplary embodiment shown in Figure 1, the management module 5 is integrated into one of the computing units 1 of the vehicle 2, as represented by a solid line.However, as indicated by dashed lines, parts or even a complete management module 5 can be distributed across the telecommunications unit 4, the mobile terminal 6, and / or the central computing device 3. The management module 5 can also be referred to as a download manager, installation manager, or update manager.

[0038] The question arises as to when a wireless update should be introduced into vehicle 2, i.e., downloaded and installed. Since the update process prevents vehicle 2 or at least individual subcomponents of vehicle 2 from being used to perform their intended function, the corresponding wireless update should be installed when vehicle 2 does not need to be used by the user. This is where the method according to the invention comes into play, which is illustrated using a flowchart shown in Figure 2.

[0039] A user initially specifies the vehicle states under which an installation is possible. These states correlate with situations in which the user is unlikely to use their vehicle. A corresponding situation exists when said vehicle states meet their corresponding vehicle state default value specified by the user (not shown). In a method step 201, a new wireless update is provided by the central computing device 3. The wireless update is then downloaded to the vehicle 2 via the telecommunications unit 4 in a method step 202. Optionally, as indicated by a method step 202', it may be necessary for the user to first confirm the download.

[0040] In a method step 203, the management module 5 collects status information describing the respective vehicle states. In a method step 204, the status information is compared with the respective vehicle state default values ​​specified by the user. If vehicle states specified as relevant by the user in method step 205 do not meet their respective vehicle state default values, the process continues with method step 203. If at least one critical vehicle state meets its vehicle state default value, a proactive user request for installation of the wireless update is sent to the user's mobile device 6 in method step 206.

[0041] In method step 207, the user manually confirms this user request, which initiates the installation of the wireless update in method step 208. Optionally, instead of a manual confirmation, a corresponding installation confirmation can also be issued automatically, as indicated by method step 207. This is the case if the user has enabled this for individual vehicle states. If the vehicle state preset value is met for such an enabled vehicle state, the installation confirmation can then be issued automatically.

[0042] With the aid of the method and system according to the invention, the reliability of the vehicle 2 is increased, as it is more likely that wireless updates have already been installed (within a suitable time window), thus ensuring that the user can use their vehicle 2 to complete a journey when they intend to. Furthermore, user satisfaction is improved due to the convenient management of update processes via the mobile terminal 6.

Claims

Patent claims 1. A method for introducing a wireless update into a computing unit (1) of a vehicle (2), wherein the wireless update is provided by a central computing device (3), is transmitted wirelessly from the central computing device (3) to an in-vehicle telecommunications unit (4) and is temporarily buffered in the vehicle (2), and wherein a management module (5) collects status information describing at least one vehicle status, and the management module (5) initiates an installation of the wireless update on the computing unit (1) depending on the status information when the management module (5) receives an installation command issued by a user via a mobile terminal (6), characterized in that - the management module (5) makes at least one proactive request to the user to specify a vehicle state default value for at least one vehicle state; - the management module (5) receives and stores a vehicle condition default value specified by the user; - the management module (5), after the wireless update has been provided by the central computing device (3), compares the status information with the specified vehicle status default values; - the management module (5) makes a proactive user request to install the wireless update via the mobile terminal (6) if at least one vehicle state for which a vehicle state default value has been defined meets its respective vehicle state default value; and - the management module (5) initiates the installation of the wireless update on the computing unit (1) when the management module (5) receives an installation confirmation.

2. Method according to claim 1, characterized in that the management module (5) only submits the user request to install the wireless update when all vehicle states for which a vehicle state default value has been defined meet their respective vehicle state default values.

3. Method according to claim 1 or 2, characterized in that the mobile terminal (6), the central computing device (3) or the management module (5) automatically issues the installation confirmation as soon as the at least one vehicle state for which a vehicle state default value has been defined meets its respective vehicle state default value.

4. Method according to one of claims 1 to 3, characterized in that the management module (5) determines a current electrical energy consumption of the vehicle (2), compares the current energy consumption with an electrical energy reserve held in an electrical energy storage device of the vehicle (2) and only initiates the installation of the wireless update on the computing unit (1) if, in addition, a predicted electrical energy reserve after installation of the wireless update is greater than a predetermined threshold value.

5. Method according to one of claims 1 to 4, characterized in that the management module (5) outputs a notification message to the user via the mobile terminal (6) if at least one vehicle state for which a vehicle state default value was defined has not fulfilled its respective vehicle state default value for a vehicle state-specific period of time.

6. Method according to one of claims 1 to 5, characterized in that the management module (5) sends an action request to the user via the mobile terminal (6) for at least one vehicle state which does not meet its respective vehicle state preset value, after confirmation by the user the management module (5) causes a vehicle component linked to the vehicle state to be controlled to change its state.

7. Method according to one of claims 1 to 6, characterized in that the management module (5), after provision of the wireless update by the central computing device (3), makes a proactive user request for transmission of the wireless update to the telecommunications unit (4) via the mobile terminal (6), and the management module (5) only initiates the transmission of the wireless update to the telecommunications unit (4) if the management module (5) receives a transmission confirmation.

8. System comprising an in-vehicle computing unit (1), an in-vehicle telecommunications unit (4), a central computing device (3), a mobile terminal (6) and a management module (5), characterized in that the computing unit (1), the telecommunications unit (4), the central computing device (3), the mobile terminal (6) and the management module (5) are set up to carry out a method according to one of claims 1 to 7.

Images