Method and system for introducing wireless updates to a vehicle's computing unit.

Abstract

The present invention relates to a method for introducing wireless updates to a computing unit (1) of a vehicle (2). The method according to the present invention is - The management module (5) makes at least one proactive request to the user of the vehicle (2) to set a vehicle status setting value for at least one vehicle status. - The management module (5) receives and stores the vehicle status settings set by the user. - The management module (5) compares the status information of the vehicle (2) with the set vehicle status setting value after the wireless update is provided by the central computer (3). - If at least one vehicle state for which a vehicle state setting value is set satisfies the respective vehicle state setting value, the management module (5) shall make a proactive user request via the mobile terminal (6) to install a wireless update. -When the management module (5) receives an installation confirmation, the management module (5) instructs the calculation unit (1) to install the wireless update. It is characterized by the following.

Description

Technical Field

[0001] The present invention relates to a method for introducing a wireless update into a vehicle's computing unit of the type defined in detail in the preamble of claim 1, and to a system of the type defined in detail in the preamble of claim 8.

Background Art

[0002] To execute complex control tasks and adjustment tasks, and to provide a vehicle assistant system, it is increasingly common to integrate more powerful computing systems into vehicles. Over the vehicle's service life, it may be necessary to update the software components executed by the corresponding computing system. This can eliminate bugs, provide new features, or correct security vulnerabilities. The corresponding software updates can be downloaded to a computer outside the vehicle and then introduced into the vehicle, for example, during maintenance at a workshop or by the vehicle user using, for example, a USB stick.

[0003] Modern vehicles are equipped with a communication unit that can be used to wirelessly connect the vehicle to the Internet. This makes it possible to obtain software updates wirelessly, for example, via mobile radio.

[0004] While data can be downloaded even while the vehicle is in use, depending on the software components being updated or the computing system being updated, it may be necessary to stop the vehicle or disable the motors and onboard electronics. During the installation of a software update, the corresponding computing system may, in some cases, become unavailable to perform its normal tasks because related code modules are replaced, potentially requiring one or more reboots. Therefore, it is necessary to find an appropriate time to introduce the corresponding software update to the vehicle to prevent the vehicle from being unavailable when the user wants to drive.

[0005] In addition, installing software updates can take time. During installation, the corresponding computing system is turned on and consumes energy. High-performance computing systems, in particular, consume a lot of energy. As a result, installing software updates will gradually deplete the vehicle's electrical energy storage. In the case of battery-powered vehicles, this can reduce the remaining driving range.

[0006] To improve vehicle reliability during software update installation, it is generally known to make the installation of software updates dependent on preconditions, such as the battery being sufficiently charged. The most recent prior art, Patent Document 1, provides a system and corresponding method for transmitting at least one update package for at least one control unit of an automobile. The installation of the update package to the control unit can be made dependent, for example, on whether the vehicle is just connected to a charging station. Furthermore, dependencies of the update package on specific hardware and software components can also be considered. This allows for the formation of installation groups, and various update packages can be grouped together depending on the vehicle's hardware and / or software specifications. This enables the rapid and efficient distribution of update packages to vehicles with different equipment.

[0007] Furthermore, Patent Document 1 discloses a method for operating a vehicle assistant system in which a comparison is performed between vehicle data and stored data, and based on this comparison, updates to the vehicle data that need to be performed are detected. If there are updates, instructions for performing these updates are issued to the user's mobile terminal. In this case, the user is instructed to update the vehicle data after the vehicle has stopped and the ignition is turned off.

[0008] Furthermore, Patent Document 2 discloses a system comprising a storage device that stores a probability map containing information indicating the probability of a vehicle being used at each of a number of time segments, and a vehicle processor programmed to use this probability map and the expected downtime required for installation to plan the timing of a software update installation, and to install the software update at that time in response to confirmation that the vehicle is not in use.

[0009] Furthermore, Patent Document 3 discloses a method for updating the software of at least one sensor in a vehicle equipped with an automotive communication system. In this method, the software to be updated is transmitted to the automotive communication system and transferred from the automotive communication system to at least one sensor, and the new software is transferred to at least one sensor only when the vehicle is stopped or the vehicle's motor is stopped. Furthermore, confirmation of the software update is requested via the user's or the vehicle's driver's smartphone, thereby installing the software update.

[0010] Furthermore, Patent Document 4 discloses a software update planning method that automatically determines a time frame for a software update based on tracked usage patterns and applies the software update to the vehicle during the planned time frame. In this method, it is checked whether prior notification or approval from the user is required, and if the user approves, the software update is performed. Furthermore, it is known that software updates can be initiated via a third-party device. For example, since a second computing system can be accessed remotely using a first computing system, a software update can be introduced to the second computing system via the first computing system. In this case, the computing system may be configured in various ways, such as a desktop computer, a laptop computer, a tablet computer, a smartphone, or a server. [Prior art documents] [Patent Documents]

[0011] [Patent Document 1] US11269617B2 [Patent Document 2] DE102016014326A1 [Patent Document 3] DE102019104434A1 [Patent Document 4] WO2017 / 190868A1 [Patent Document 5] US2015 / 0169311A1 [Overview of the Initiative] [Problems that the invention aims to solve]

[0012] The present invention is based on the problem of providing an improved method for introducing wireless updates to a vehicle's computing unit, and the reliability of the vehicle can be improved with the help of this method. [Means for solving the problem]

[0013] According to the present invention, this problem is solved by a method for introducing wireless updates to a vehicle's computing unit, having the features of claim 1. Advantageous configurations and variations, as well as corresponding systems for carrying out the method, will become apparent from the claims dependent on claim 1.

[0014] A standard method for introducing a wireless update to a vehicle's computing unit, based on the present invention, is as follows: the wireless update is provided by a central computing unit, transmitted wirelessly from the central computing unit to a communication unit inside the vehicle, temporarily stored within the vehicle, and a management module collects state information describing at least one vehicle state, and when the management module receives an installation command issued by a user via a mobile terminal, the management module instructs the computing unit to install the wireless update according to that state information. - The management module must proactively request the user at least once to set a vehicle status setting value for at least one vehicle status. - The management module receives and stores vehicle status settings configured by the user. - The management module compares the status information with the set vehicle status setting value after the central computer provides a wireless update. - If at least one vehicle state for which a vehicle state setting value is set satisfies that respective vehicle state setting value, the management module shall make a proactive user request via the mobile terminal to install a wireless update. - If the management module receives an installation confirmation, the management module will instruct the wireless update to be installed on the compute unit. It will develop further through this.

[0015] Vehicle status represents all possible characteristics and states of the vehicle and its components. This includes, for example, door lock status, power window open degree, roof window open degree, ignition status, elapsed time since engine stop, oil temperature, cabin temperature, outside temperature, time, date, and settings of vehicle subsystems (such as radio stations set in the infotainment system, active audio settings, and air conditioning settings). In other words, the corresponding status information is measured by sensors in the vehicle and provided by a computing unit installed inside the vehicle. Access is possible using a data bus, such as CAN-Bus.

[0016] This allows users to configure the conditions under which over-the-air (Wireless) updates can be installed. For example, a user can set it so that a suitable time for installing a Wireless Update exists only after a certain minimum elapsed time has passed since the vehicle's motor stopped, and optionally, after the motor, oil, or coolant has cooled to a specific temperature. This can serve as an indicator that the vehicle has not been used for a relatively long time, allowing for Wireless Update installation without risking the user wanting to use the vehicle. Consequently, this improves vehicle reliability by preventing the vehicle from being unready when the user wants to use it for driving.

[0017] The management module will only request the user to confirm the installation of a wireless update if the appropriate time (i.e., the conditions defined by the user through the vehicle status settings) exists. This further improves user convenience, as no installation request will be made if the appropriate time does not exist. Furthermore, the use of a mobile terminal means that the user does not need to be inside the vehicle to initiate the installation. This further improves user convenience on the one hand, and on the other hand, it further improves reliability, as the wireless update installation can begin as soon as the corresponding installation conditions are met, without having to wait for the user to enter the vehicle.

[0018] In this context, "implementation" refers to both the download of wireless updates and their installation on the computing unit. The central computing device may be, for example, a cloud server, also known as a backend. The central computing device may be operated by, for example, a vehicle manufacturer. Wireless connectivity of the communication unit to the central computing device is possible through various wireless technologies, such as mobile radio, WiFi, Bluetooth, NFC, and ZigBee. In particular, connectivity via mobile radio is possible. For example, if there is a WiFi hotspot in the user's private parking lot, the communication unit could establish a connection to the central computing device using WLAN and the user's fixed line via this hotspot.

[0019] Downloaded wireless updates can be temporarily stored in various locations within the vehicle. The corresponding data can be stored, for example, in the communication unit itself or in any computing unit. Installation is then performed by reading the corresponding data from the communication unit or computing unit. Wireless updates may also be so-called differential updates, meaning they only include the program code portion to be replaced. It is possible to replace programs or program portions already implemented on the computing unit, or to introduce entirely new programs into the vehicle.

[0020] The management module can also be referred to as a download manager, an installation manager, or an update manager. The management module may be formed by hardware components and / or software components. The management module can be an independent unit, or it may be implemented in a distributed form. That is, the individual parts of the management module can be distributed to one or more computing units, communication units, mobile terminals, and / or central computing devices of the vehicle.

[0021] In this case, each vehicle state setting value defines the vehicle state in which the user wishes to install a wireless update. For example, the vehicle state may be the ignition state, and at this time, the vehicle state setting value takes on a characteristic such as "off". A further example of the vehicle state is the charge state of the traction battery, and the vehicle state setting value related to this could be "40% or more". A further example of the vehicle state is the use of an auxiliary heater, and the vehicle state setting value related to this could be "operation stopped". Therefore, the user can set that the software update may be executed only before the start or after the use of the auxiliary heater, but not during the operation of the auxiliary heater.

[0022] In other words, the consumption of the vehicle's on-board power supply can also be considered, thereby preventing an excessive load from being added to the already loaded on-board power supply due to the installation of a wireless update and the accompanying increase in the power demand of the execution computing unit. It is also possible to appropriately stop the operation of currently irrelevant consumption devices or allocate the installation to the time period when the mentioned consumption devices are stopped. This is also called load distribution or "load balancing".

[0023] Furthermore, the vehicle state setting value can also add further information such as a time period. Therefore, the user can set to install a wireless update 30 minutes after the motor stops.

[0024] Wireless updates can also include additional information. This additional information is determined by the vehicle manufacturer and attached to the wireless update, and may include, for example, the installation time dependent on each hardware component, and, if necessary, the power consumption or amount of electrical energy required. The management module can take this additional information into consideration, thereby finding an appropriate time while taking into account the vehicle state settings and proactively requesting the user to install the wireless update. For example, even if the user has set the wireless update to be installed before the auxiliary heater program is executed, if there is only a short time for the wireless update to be installed between the time the wireless update is provided by the central computer and the auxiliary heater is activated, the management module will refrain from issuing a proactive user request.

[0025] Of course, it is also possible to display information related to the download or installation progress via a mobile device. For example, the current download speed, download progress, or installation progress can be displayed to the user.

[0026] In an advantageous development of this method, the management module requests the user to install a wireless update only after all vehicle states configured for the vehicle state settings have met their respective settings. Generally, a user can configure vehicle state settings for multiple vehicle states. The user can then prioritize the vehicle states that must be met at a minimum so that the corresponding installation request is displayed to the user. In this case, an equivalent "or" selection is also possible, such as either a set time has elapsed since the drive motor stopped operating, or the motor, coolant, or oil has cooled to a specific temperature. In a highly advantageous manner, all vehicle state settings configured by the user must be met before a proactive user request to install a wireless update is issued to the user via the mobile terminal. This increases the probability that there are periods when the user is not using the vehicle, thus enabling a safer installation of wireless updates.

[0027] According to a further advantageous embodiment of this method, when at least one vehicle state for which a vehicle state setting value is defined satisfies its respective vehicle state setting value, the mobile terminal, central computer, or management module automatically issues an installation confirmation. This further improves the reliability of the vehicle. When each vehicle state set by the user satisfies its respective vehicle state setting value, it can be assumed that the user also wishes to install a wireless update. In this case, the wireless update can be installed directly by the automatic issuance of the installation confirmation. There are often times throughout the day when the mobile terminal is not within the user's reach, such as when the user is attending a meeting, taking a shower, cooking, or playing with children. Therefore, this automatic issuance of the installation confirmation prevents the loss of a suitable time for wireless update installation when the mobile terminal is not within the user's reach. The user can also configure which individual vehicle states are subject to automatic issuance of installation confirmation and which are not. For example, the user can configure the system to automatically issue an installation confirmation when the vehicle ignition is off between 10 PM and 4 AM, but require manual confirmation during the day.

[0028] Furthermore, according to a more advantageous embodiment of this method, the management module detects the vehicle's current electrical energy consumption, compares the current energy consumption to the electrical energy reserve held in the vehicle's electrical energy storage device, and instructs the computing unit to install the wireless update only if the expected electrical energy reserve after the wireless update installation is greater than a specified threshold. This ensures that, after the wireless update installation, an electrically driven vehicle, especially a purely battery-powered vehicle, will have sufficient remaining range. In this context, "energy consumption" means the energy balance, i.e., the output of the electrical consumption device, and the charging capacity if the vehicle is connected to a charging station, etc. Energy consumption may be positive or negative as appropriate. The electrical energy storage device is, for example, a traction battery or a starter battery. The vehicle can estimate how much energy will be consumed before installing the wireless update, taking into account the expected download or installation time and the energy requirements of the corresponding computing unit. Furthermore, taking into account the electrical energy consumption, the vehicle can predict the estimated electrical energy reserve that will remain after the wireless update.

[0029] According to a further advantageous embodiment of the present invention, if, in at least one vehicle state for which a vehicle state setting value is set, the respective vehicle state setting value is not met over a period of time specific to that vehicle state, the management module issues a notification message to the user via a mobile terminal. If the corresponding vehicle state is related to the user installing a wireless update, and the corresponding vehicle state has not met its vehicle state setting value for an extremely long period of time, the wireless update cannot be installed because there is no proactive user request to install the wireless update. This applies, for example, to cases where a user has set a specific threshold voltage for the vehicle's electrical energy storage device, but this threshold voltage is never exceeded. This may also apply, for example, if there is an unexpected leakage current in the onboard power supply circuit. In this case, the user needs to visit a workshop with their vehicle to have the fault repaired. In such cases, the notification message is displayed to the user via the mobile terminal, thereby further increasing confidence in the vehicle's availability.

[0030] A further advantageous embodiment of the method according to the present invention further includes the management module sending an action request to the user via a mobile terminal for at least one vehicle state that does not meet its respective vehicle state setting value, and once the user acknowledges the action request, the management module controls the vehicle component associated with that vehicle state to change its state. This also further enhances the reliability of the vehicle. The user can configure the system to install wireless updates only when, for example, a window is closed, and a corresponding notification message can be issued to the user if at least one window of the vehicle is at least partially open. The user can then communicate a close command to the vehicle via a mobile terminal, so that the vehicle can automatically close the window and then begin installing the wireless update.

[0031] According to a further advantageous embodiment of the method based on the present invention, after a wireless update is provided from the central computer, the management module makes an active user request via the mobile terminal for the transmission of the wireless update to the communication unit, and only if the management module receives a transmission confirmation does the management module instruct the communication unit to transmit the wireless update. Transmission confirmations are issued by the user via the mobile terminal as appropriate. In other words, this ensures that available wireless updates are downloaded only after confirmation by the user, rather than automatically and directly by the vehicle. This gives the user more control over the process of deploying wireless updates to the vehicle.

[0032] In a system including a vehicle-internal computing unit, a vehicle-internal communication unit, a central computing device, a mobile terminal, and a management module, the computing unit, communication unit, central computing device, mobile terminal, and management module are configured to perform the method described above, according to the present invention. To provide the method according to the present invention, corresponding hardware and software components are required. The hardware components appropriately include computer-readable memory media in which their respective program codes are stored, and the execution of these program codes by an execution unit such as a processor enables the provision of the method steps according to the present invention. As already mentioned, the management module, i.e., the corresponding download manager, installation manager, or update manager, can be implemented in whole or in part in one or various hardware components, i.e., in the vehicle-internal computing unit, communication unit, central computing device, and mobile terminal.

[0033] Further advantageous embodiments of the methods and systems according to the present invention are also evident from the examples described below in detail with reference to the figures. [Brief explanation of the drawing]

[0034] [Figure 1]This is a schematic diagram of a system based on the present invention for introducing wireless updates to a vehicle's computing unit. [Figure 2] This is a flowchart of a method according to the present invention for introducing wireless updates to a vehicle's computing unit. [Modes for carrying out the invention]

[0035] Figure 1 shows a vehicle 2 including two computing units 1 and one communication unit 4. A mobile terminal 6 and a central computing device 3 are also shown.

[0036] Vehicle 2 is configured to receive wireless updates to update or install new software that is run by or executable by one or more computing units 1. The corresponding wireless updates are provided from the central computing unit 3 and transmitted wirelessly, for example via mobile radio, to the communication unit 4. The wireless updates can be temporarily stored in the communication unit 4 or other computing unit 1 of vehicle 2. The corresponding update process is managed by the user via a mobile terminal 6. A management module 5 operating in the background is also implemented on one or more hardware components. In the embodiment shown in Figure 1, the management module 5 is integrated into one of the computing units 1 of vehicle 2, as shown by the solid line. However, some or all of the management module 5 may be distributed across the communication unit 4, mobile terminal 6 and / or central computing unit 3, as shown by the dashed line. The management module 5 may also be called a download manager, installation manager, or update manager.

[0037] The question is when to introduce the aforementioned wireless update to vehicle 2, i.e., when to download and install it. The corresponding wireless update must be installed when the user does not need to use vehicle 2, because the update process will render vehicle 2 or at least its individual subcomponents unavailable to perform tasks scheduled for those subcomponents. Therefore, the method according to the present invention, as illustrated in the flowchart shown in Figure 2, is applied.

[0038] At this point, the user initially sets the vehicle states under which installation is possible. These states correspond to situations where it is almost certain that the user will not be using the vehicle. The corresponding situations are those where the mentioned vehicle states satisfy the corresponding vehicle state settings configured by the user (not shown).

[0039] In step 201 of the method, a new wireless update is provided from the central computer 3. Next, in step 202 of the method, the wireless update is downloaded to the vehicle 2 via the communication unit 4. Optionally, user confirmation of the download may be required first, as shown in step 202' of the method.

[0040] In step 203, the management module 5 collects status information describing each vehicle state. In step 204, the status information is compared with each vehicle state setting value set by the user. If any vehicle state that the user has designated as important in step 205 does not meet its respective vehicle state setting value, the process returns to step 203. If at least one important vehicle state meets its vehicle state setting value, in step 206, a proactive user request to install a wireless update is sent to the user's mobile terminal 6.

[0041] In step 207 of the method, the user manually confirms this user request, which initiates the installation of the wireless update in step 208. Optionally, instead of manual confirmation, an installation confirmation can be automatically issued as shown in step 207. This applies if the user has authorized this for a specific vehicle state. For such authorized vehicle states, an installation confirmation can be automatically issued when the vehicle state setting is met.

[0042] The method and system based on the present invention enhance the reliability of vehicle 2. This is because, by the time the user intends to drive, the wireless update is already installed (in an appropriate time frame), and therefore the user is more likely to be able to use vehicle 2 to drive. Furthermore, user satisfaction is also improved by the convenient management of the update process by the mobile terminal 6.

Claims

1. A method for introducing a wireless update to a computing unit (1) of a vehicle (2), wherein the wireless update is provided by a central computing device (3), transmitted wirelessly from the central computing device (3) to a communication unit (4) inside the vehicle, temporarily stored within the vehicle (2), a management module (5) collects status information describing at least one vehicle state, and when the management module (5) receives an installation command issued by a user via a mobile terminal (6), the management module (5) instructs the installation of the wireless update to the computing unit (1) according to the status information, - The management module (5) shall make at least one proactive request to the user to set a vehicle status setting value for at least one vehicle status. - The management module (5) receives and stores the vehicle status setting values ​​set by the user. - The management module (5) compares the status information with the set vehicle status setting value after the wireless update is provided by the central computer (3). - If at least one vehicle state for which a vehicle state setting value is set satisfies each of the vehicle state setting values, the management module (5) shall make a proactive user request to install the wireless update via the mobile terminal (6). - When the management module (5) receives an installation confirmation, the management module (5) instructs the installation of the wireless update to the computing unit (1). The method characterized by the above.

2. The method according to claim 1, characterized in that the management module (5) makes the user request to install the wireless update after all vehicle states for which vehicle state setting values ​​have been set have satisfied their respective vehicle state setting values.

3. The method according to claim 1 or 2, characterized in that when at least one of the vehicle states for which the vehicle state setting value is set satisfies each of the vehicle state setting values, the mobile terminal (6), the central computer (3), or the management module (5) automatically issues the installation confirmation.

4. The method according to any one of claims 1 to 3, wherein the management module (5) detects the current electrical energy consumption of the vehicle (2), compares the current energy consumption with the electrical energy reserve held in the vehicle (2)'s electrical energy storage device, and further instructs the calculation unit (1) to install the wireless update only if the electrical energy reserve expected after the installation of the wireless update is greater than a specified threshold.

5. The method according to any one of claims 1 to 4, characterized in that, in at least one vehicle state for which the vehicle state setting value is set, if the respective vehicle state setting value is not met over the elapsed time for each vehicle state, the management module (5) issues a notification message to the user via the mobile terminal (6).

6. The method according to any one of claims 1 to 5, characterized in that the management module (5) sends an action request to the user via the mobile terminal (6) for at least one vehicle state that does not satisfy each vehicle state setting value, and when the user acknowledges the action request, the management module (5) controls the vehicle component associated with the vehicle state to change its state.

7. The method according to any one of claims 1 to 6, characterized in that the management module (5), after providing the wireless update from the central computing device (3), makes an active user request to the communication unit (4) for transmission of the wireless update via the mobile terminal (6), and only if the management module (5) receives a transmission confirmation, the management module (5) instructs the communication unit (4) to transmit the wireless update.

8. A system including a vehicle-internal computing unit (1), a vehicle-internal communication unit (4), a central computing device (3), a mobile terminal (6), and a management module (5), The system is characterized in that the computing unit (1), the communication unit (4), the central computing device (3), the mobile terminal (6), and the management module (5) are configured to perform the method described in any one of claims 1 to 7.

Images