METHOD FOR UPDATING SOFTWARE IMPLEMENTED IN A SET OF MOTOR VEHICLES

Abstract

The invention relates to a method for updating software implemented in a fleet of motor vehicles, said fleet comprising a controller vehicle and at least one secondary vehicle, said controller vehicle being configured to receive an update from a central server and to transmit said update to the secondary vehicles, the central server being controlled by a management device, characterized in that the method comprises a control step (E1) of the transfer of the update from the central server to the controller vehicle by the management device; a transfer step (E2) of the update from the central server to the controller vehicle via an internet network; and a dissemination step (E3) of the update from the controller vehicle to the secondary vehicles. Abstract figure: Fig. 1

Description

Title of the invention: METHOD FOR UPDATING SOFTWARE IMPLEMENTED IN A SET OF MOTOR VEHICLES

[0001] The invention relates to means of updating the software of motor vehicles.

[0002] Prior art patent application WO2024095683, which describes a tuning device for modifying the communication parameters of an embedded network, is known. The tuning device performs an acquisition process, a selection process, and an update process when the tuning device connects to the embedded network. The embedded network comprises a plurality of SDN (Software Defined Network) switches. The SDN switches are connected to each other via a network line. Each SDN switch is connected to an embedded device. Each SDN switch relays the information sent and received by each embedded device. An SDN controller is connected to one of the SDN switches. The SDN controller defines the rules for transferring information between the embedded devices. When each SDN switch completes an update, a notification is sent to the SDN controller.When the SDN controller receives notification from all SDN switches, it sends a notification to the embedded devices indicating that the update is complete. However, a drawback remains. The notifications indicate that the updates have been transmitted, but there is no indication of whether the update is functional or has been correctly installed.

[0003] The objective of the present invention is to remedy these drawbacks and to update software for a plurality of motor vehicles efficiently.

[0004] To achieve this objective, the invention proposes a method for updating software implemented in a set of motor vehicles, said set of motor vehicles comprising a controller vehicle and at least one secondary vehicle, said controller vehicle being configured to receive an update from a central server and to transmit said update to the secondary vehicles, the central server being controlled by a management device, notable in that the method comprises the following steps: - a step to order the transfer of the update from the central server to the controller vehicle by the management device; - a step of transferring the update from the central server to the controlling vehicle when the management device commands the transfer during the command step, the transfer being carried out via an internet network; - a step of distributing the update from the controller vehicle to secondary vehicles.

[0005] Thanks to the invention, the control vehicle ensures the distribution of the update to each vehicle in the fleet, so that the distribution is fast and inexpensive.

[0006] Advantageously, the central server is able to check the status of the update to determine whether said update is functional, the process comprising a step of checking the update by the central server, said check step being implemented following said command step.

[0007] This avoids propagating a non-functional or malfunctioning update. This would be a waste of time, and it could also cause the software to malfunction.

[0008] Advantageously, the secondary vehicle is capable of sending an acknowledgment of said update to the control vehicle, the secondary vehicle being capable of determining a result of the update and sending the result of the update to the control vehicle, said result being the success or failure of the update installation, the control vehicle being capable of transmitting the acknowledgment and the result from the secondary vehicle to the central server, said method includes a step of checking the installation of the update during which the secondary vehicle issues an acknowledgment to said control vehicle when the update is received by said secondary vehicle and during which each secondary vehicle sends the result to the control vehicle, the control vehicle transmitting the acknowledgment and the result from the secondary vehicle to the central server,said control step being implemented following said dissemination step.

[0009] This makes it possible to identify if, possibly, one or more vehicles have failed to perform the update, and thus to intervene quickly to resolve the problem.

[0010] Preferably, the vehicle set comprises a plurality of secondary vehicles including at least a first secondary vehicle and a second secondary vehicle, the method comprising a step of transmitting the update from the first secondary vehicle to the second secondary vehicle, said transmission step being implemented following said dissemination step.

[0011] Thus, if the second vehicle is too far from the controller vehicle, the first secondary vehicle acts as a relay to deliver the update to the second secondary vehicle.

[0012] Advantageously, the second secondary vehicle is capable of sending an acknowledgment to the first secondary vehicle when said second secondary vehicle receives said update, the second secondary vehicle being capable of determining a result of the update and sending the result of the update to the first secondary vehicle, said result being the success or failure of the installation of the update, said first secondary vehicle being capable of transmitting the acknowledgment and the result of the second secondary vehicle to the control vehicle, the method comprising a control step during which the second secondary vehicle transmits the acknowledgment and the result to the first secondary vehicle, the first secondary vehicle transmitting the acknowledgment and the result of the second secondary vehicle to the control vehicle.

[0013] Thus, even if the controller vehicle does not have direct access to the second secondary vehicle, it is possible to determine whether its update has been carried out correctly or not.

[0014] Preferably, said dissemination step is implemented via the internet network, via Bluetooth or via vehicle-to-vehicle transfer.

[0015] Preferably, the internet network is chosen from a wireless local area network or a mobile wide area network.

[0016] These are high-performance wireless communication means to ensure the transmission of the update between vehicles.

[0017] The invention further relates to a computer program comprising instructions which, when the program is executed by a computer, lead the latter to implement the steps of the method of updating software implemented in a set of motor vehicles previously described.

[0018] The invention will be further detailed by describing non-limiting embodiments, and based on the accompanying figures illustrating variants of the invention, in which: - [Fig.1] schematically illustrates, in the form of a flowchart, a method for updating software implemented in a set of motor vehicles according to an embodiment of the invention.

[0019] A method for updating software implemented in a fleet of motor vehicles according to an embodiment of the invention is schematically illustrated in [Fig. 1] in the form of a flowchart. The update is performed via OTA (Over-The-Air) technology, which allows for the remote distribution and installation of new software versions without physical intervention. OTA technology relies on secure network connections to send updates directly to the vehicles, thus ensuring rapid and efficient deployment while minimizing disruptions. The process leverages Software-Defined Networking (SDN) technology, which enables flexible and centralized network management. With SDN, the network can be dynamically configured to meet update requirements, optimizing data flow and enhancing transmission security. By combining over-the-air (OTA) updates and SDN, automakers can keep their vehicle fleets up-to-date in real time, quickly address security vulnerabilities, and introduce new features without requiring dealership visits. The update is performed via a central server located outside the vehicles. This central server is controlled by a management device, which is also external to the vehicles.The vehicle fleet includes, in particular, a control vehicle capable of receiving the update from the central server and transmitting it to the other vehicles in the fleet. In addition, the vehicle fleet includes at least one secondary vehicle. During a command step 1E1, the management device instructs the central server to transfer the update from the central server to the control vehicle. During a transfer step E2, the update is transferred from the central server to the control vehicle when the management device commands the transfer during the command step 1E1. The transfer is carried out via an internet network. Preferably, the internet network is a wireless local area network, more commonly known as Wi-Fi®, or a mobile wide area network. The mobile wide area network is, for example, of the fourth or fifth generation type, known respectively as 4G or 5G networks.During an E3 broadcast step, the update is transferred from the control vehicle to the secondary vehicles, without passing through the central server. Preferably, this E3 broadcast step is carried out via the internet, whether it be, for example, a wireless local area network (WLAN) or a mobile wide area network (MWAN), via Bluetooth, or via vehicle-to-vehicle (V2V) transfer. Bluetooth is a wireless telecommunication method that uses UHF (Ultra High Frequency) radio waves in the 2.4 GHz frequency band. A Bluetooth connection allows the exchange of digital information between two separate digital entities without a wired connection between them.Vehicle-to-vehicle transfer is a communication technology that allows motor vehicles to exchange information directly with each other without going through a central infrastructure, such as the internet or a central server. In this way, updates can be transmitted even when vehicles are not connected to the internet or Bluetooth.

[0020] Preferably, the central server is capable of checking the update status to determine whether the update is functional or not. The method then involves A verification step for the update performed by the central server. This verification step is implemented following the aforementioned command step E1 and, if the update is functional, possibly before the aforementioned transfer step E2. Indeed, preferably, the update is transferred to the controller vehicle only if, during the verification step, it is confirmed that the update is functional.

[0021] Optionally, each secondary vehicle is capable of sending an acknowledgment of the update to the control vehicle when said secondary vehicle has actually received said update. The secondary vehicle is also capable of determining an update result and sending said result to the control vehicle. The result is the success or failure of the software update installation on the given secondary vehicle. In this case, the method includes an update installation verification step during which the secondary vehicle issues an acknowledgment to said control vehicle when the update is received by said secondary vehicle. Furthermore, during said verification step, the secondary vehicle sends the result to the control vehicle. The control vehicle is capable of sending said acknowledgment and said result from the secondary vehicle to the central server.The control step is implemented following the E3 dissemination step. Optionally, the vehicle set includes a plurality of secondary vehicles, including a first secondary vehicle and a second secondary vehicle. The method includes a step for transmitting the update from the first secondary vehicle to the second secondary vehicle. This transmission step is implemented following the E3 dissemination step. Optionally, the second secondary vehicle is capable of sending an acknowledgment to the first secondary vehicle when the second secondary vehicle receives the update. Furthermore, the second secondary vehicle is capable of determining the result of the update and sending the update result to the first secondary vehicle.As before, the result is the success or failure of the update installation, determining whether the update is functional on the second secondary vehicle or not. The first secondary vehicle, after receiving the acknowledgment and result from the second secondary vehicle, is able to transmit said acknowledgment and result from the second secondary vehicle to the controller vehicle.

[0022] The invention further relates to a computer program configured to implement the steps of the process described above.

Claims

Demands

1. A method for updating software implemented in a set of motor vehicles, said set of motor vehicles comprising a controller vehicle and at least one secondary vehicle, said controller vehicle being configured to receive an update from a central server and to transmit said update to the secondary vehicles, the central server being controlled by a management device, characterized in that the method comprises the following steps: - a command step (E1) of the transfer of the update from the central server to the controller vehicle by the management device; - a transfer step (E2) of the update from the central server to the controller vehicle when the management device commands the transfer during the command step (E1), the transfer being carried out via an internet network;- a dissemination step (E3) of the update from the controller vehicle to the secondary vehicles.;

2. A method according to claim 1, characterized in that the central server is capable of checking the update status to determine whether said update is functional, the method comprising a step of checking the update by the central server, said check step being implemented following said command step (El).

3. A method according to claim 1 or 2, characterized in that the secondary vehicle is capable of sending an acknowledgment of said update to the control vehicle, the secondary vehicle being capable of determining an update result and sending the update result to the control vehicle, said result being the success or failure of the update installation, the control vehicle being capable of transmitting the acknowledgment and the result from the secondary vehicle to the central server, said method comprising an update installation control step during which the secondary vehicle issues an acknowledgment to said control vehicle when the update is received by said secondary vehicle and during which each secondary vehicle sends the result to the control vehicle, the control vehicle transmitting the acknowledgment and the result from the secondary vehicle to the central server, said control step being implemented following said dissemination step (E3).

4. A method according to any one of claims 1 to 3, characterized in that the vehicle assembly comprises a plurality of secondary vehicles including at least a first secondary vehicle and a second secondary vehicle, the method comprising a step of transmitting the update from the first secondary vehicle to the second secondary vehicle, said transmission step being implemented following said dissemination step (E3).

5. A method according to claim 4, characterized in that the second secondary vehicle is capable of sending an acknowledgment to the first secondary vehicle when said second secondary vehicle receives said update, the second secondary vehicle being capable of determining a result of the update and sending the result of the update to the first secondary vehicle, said result being the success or failure of the installation of the update, said first secondary vehicle being capable of transmitting the acknowledgment and the result of the second secondary vehicle to the control vehicle, the method comprising a control step during which the second secondary vehicle transmits the acknowledgment and the result to the first secondary vehicle, the first secondary vehicle transmitting the acknowledgment and the result of the second secondary vehicle to the control vehicle.

6. A method according to any one of claims 1 to 5, characterized in that said dissemination step is implemented via the internet network, Bluetooth, or vehicle-to-vehicle transfer.

7. A method according to any one of claims 1 to 6, characterized in that the internet network is chosen from a wireless local area network or a mobile wide area network.

8. A computer program comprising instructions which, when the program is executed by a computer, cause the computer to carry out the steps of the method for updating software implemented in a set of motor vehicles according to any one of claims 1 to 7.

Images