Atomicity in OTA updates for vehicle systems

By synchronizing ECUs and MCUs with secure boot and cryptographic authentication, atomic OTA updates are achieved, addressing incomplete update issues and improving vehicle safety and security.

JP2026085868APending Publication Date: 2026-05-25TOYOTA JIDOSHA KK
View PDF 0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Applications
Current Assignee / Owner
TOYOTA JIDOSHA KK
Filing Date
2025-10-10
Publication Date
2026-05-25

AI Technical Summary

Technical Problem

Existing OTA updates for vehicle systems lack atomicity, leading to issues such as partial updates, device bricking, data corruption, increased downtime, security vulnerabilities, and compromised safety due to incomplete updates, particularly affecting safety-critical automotive systems.

Method used

Implementing a synchronization protocol among ECUs and MCUs to ensure atomic updates, using hardware enforcement mechanisms like secure boot, and employing distributed consensus protocols with cryptographic authentication to verify and lock in updates only when all components are compatible.

Benefits of technology

Ensures complete and secure updates, enhancing vehicle safety, security, reliability, and user satisfaction while reducing the risk of incomplete updates.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 2026085868000001_ABST
    Figure 2026085868000001_ABST
Patent Text Reader

Abstract

This provides a method for updating software in atomic radio (OTA) communication. [Solution] The method includes updating the original data structure in the first memory partition of the first controller to form an updated data structure in the second memory partition of the first controller; verifying the updated data structure; sending an indication to the synchronization entity that the second memory partition is valid; receiving an indication from the synchronization entity that the first controller and all other controllers in the mobile computing network each have a verified memory partition compatible with the second memory partition; and applying an attribute to the second memory partition indicating that it will be used by the operating program upon restart.
Need to check novelty before this filing date? Find Prior Art