vehicle

Abstract

The present invention relates to a vehicle comprising a main computer (1) and at least one subcomputer (2) communicably connected to the main computer (1), wherein each subcomputer (2) is configured to run at least one control program (3) to control vehicle components for providing vehicle functions (4), and the main computer has an activation module (5) configured to send an activation signal (6) to at least one subcomputer (2) to enable or disable the control program (3), the activation module (5) includes an event data record (7), the event data record (7) includes a summary of all generally available vehicle functions (4) and the respective target activation states (8) of those vehicle functions. A vehicle according to the present invention is characterized in that an activation module (5) is configured to transmit an event data record (7) as an activation signal (6) to all connected subcomputers (2), each of which is configured to receive the event data record (7), read from the event data record (7) a target activation state (8) for at least the vehicle functions (4) that can be provided by each subcomputer (2), and set the underlying control program (3) according to the respective target activation state (8).

Description

Technical Field

[0001] The present invention relates to a vehicle as more particularly defined by the generic concept of claim 1.

Background Art

[0002] When purchasing a new car, customers can choose from a variety of variations. Thus, in addition to standard equipment, various optional equipment such as various engine performances, transmission types, and various driving assistance systems can be ordered additionally. In order to be able to provide such diverse vehicle functions, various vehicle components are incorporated into the vehicle. In this case, each vehicle component is controlled by a specially customized control program. Therefore, in order to be able to provide each vehicle function, it is necessary to combine hardware components and software components.

[0003] As vehicle functions, a vehicle can have, for example, functions such as adaptive high beam assist, irradiating the surrounding with a light pattern using matrix headlights, rear axle steering, enhancement of engine output beyond the standard mode, a navigation system, a drive recorder, a DAB+ radio, a smartphone connection function, a TV tuner, a massage seat function, and variously configurable suspension settings. Some vehicle functions may require the incorporation of special vehicle components, while other vehicle functions can be provided only by adapting a basic control program. These vehicle functions are also called "on-demand functions".

[0004] During vehicle manufacturing, the vehicle functions available for subsequent driving are determined based on the installed vehicle components, and the vehicle is manufactured and configured accordingly. For this purpose, the vehicle's onboard electronics are divided into a main computer and at least one subcomputer that is communicatively connected to the main computer. In this case, each subcomputer controls its respective vehicle component to provide vehicle functions. Conversely, the main computer can configure the subcomputers to provide each vehicle function. For this purpose, corresponding information is stored in a tamper-proof memory area of ​​the activation module provided in the main computer during vehicle manufacturing, via diagnostic codes or variation codes.

[0005] Next, this activation module provides each subcomputer with information via its corresponding interface about which vehicle functions are provided (enabled) and which are not provided (disabled). This is done by transmitting a Boolean value in the form of true (enabled) or false (disabled). For this reason, conventional technology uses an interface specifically adapted for each subcomputer. To transmit this information to different subcomputers, the main computer periodically transmits bus signals via the corresponding data lines. Due to the large number of different interfaces and the need to periodically transmit bus signals, configuring each subcomputer requires a relatively large amount of effort. Accordingly, the underlying data lines are used under heavy load over relatively long or large time and space periods, limiting the transmission of other data. Since each activation signal is function-specific, the programming work is further increased. Furthermore, each subcomputer transmits a corresponding function-specific response signal. Thus, each vehicle function has its own unique pair of specific activation and response signals. The reality becomes even more complex, as some vehicle functions may be divided among many subcomputers. For example, to project a light pattern into the surroundings using matrix headlights, two matrix headlights must be controlled. Furthermore, adapting existing vehicle functions or retrofitting new vehicle functions to a vehicle requires a significant amount of programming work.

[0006] German Patent Application Publication No. 102020109379 describes a method and system for automatically executing vehicle functions. This document describes the automatic execution of numerous vehicle functions in the event of a trigger event. For example, a vehicle can automatically turn off the engine, close the windows, put the automatic transmission into park, engage the parking brake, turn off the ignition, open the doors, and lock the vehicle keys. Such execution routines can be used, for example, by delivery companies. The delivery company can use a dedicated button inside the vehicle as a trigger event, and the trigger event can also be automatically output, for example, upon arrival at a specific geographical location. Here, a so-called service groups various vehicle functions into a single themed group and provides these functions through a defined interface. This service abstracts vehicle-specific hardware and / or software characteristics to generate and output corresponding control signals. Advantageously, the underlying interface is immutable and can be standardized when utilizing different hardware and / or software characteristics. This enables a versatile implementation.

[0007] Furthermore, German Patent Application Publication No. 102015010203 discloses a method and system for driving a vehicle. This method involves creating a vehicle function list on a server, which includes definitions of vehicle functions that are permitted (enabled) and vehicle functions that are locked (disabled) in the vehicle. The vehicle function list is then transmitted wirelessly to a control unit inside the vehicle, where it is processed. The control unit then controls the vehicle's control devices to permit or lock the vehicle functions as appropriate.

[0008] Furthermore, U.S. Patent Application Publication No. 2022 / 0204012 discloses a method and system for providing connected car services. In this system, an in-vehicle device generates a first service list describing the use of vehicle functions within the vehicle. This service list is transmitted to a server, which identifies the number of unused services from the service list. The server generates guidance information to be displayed to the user. Based on the guidance information, the user can receive information about available vehicle functions that have not yet been used and the procedures for using them.

[0009] Furthermore, European Patent Application Publication No. 1967435 discloses a method for adaptive setting recognition. In this case, a central control unit in a vehicle receives identification information from further components that are data-technically connected to the control unit, thereby recognizing the presence of those further components in the vehicle. For these components, the control unit loads the appropriate software from data memory. Subsequently, the control unit writes information to memory describing which components have been recognized. After the control unit is restarted, if the identification information and stored information no longer match due to the replacement of a component, the control unit considers the component to be non-existent by adjusting the corresponding information.

[0010] Furthermore, European Patent No. 3793868 discloses a method for activating a control device of a vehicle's infotainment system to enable its functions. A user can request a function within the vehicle. In response, the vehicle sends a request signal to a server operated by the vehicle manufacturer to enable the function. The server checks for the permissibility of the permission to use, and if permission is granted, allows the control device to connect to the activation computer. Following this, the encryption-protected activation of the function takes place within the vehicle.

[0011] Furthermore, U.S. Patent Application Publication No. 2018 / 0196660 discloses a method and system for reprogramming in-vehicle control devices wirelessly. In this case, a first encrypted packet containing an audio file in an encrypted state and a second encrypted packet containing data and vehicle information are generated. The two encrypted packets are mixed together and transmitted wirelessly. The mixed packets are received in the vehicle and stored there. In the vehicle, the mixed packets are separated again by corresponding modulation and each is decrypted. Based on the data extracted from the second encrypted packet, the in-vehicle control devices are reprogrammed. [Overview of the project] [Problems that the invention aims to solve]

[0012] This invention is based on the challenge of presenting an improved vehicle featuring an efficient internal communication flow of underlying in-vehicle electronics in relation to the provision of various vehicle functions. [Means for solving the problem]

[0013] According to the present invention, this problem is solved by a vehicle having the features of claim 1. Advantageous embodiments and variations will become apparent from claims dependent on this claim.

[0014] A vehicle comprising one main computer and at least one subcomputer communicably connected to the main computer, each subcomputer configured to run at least one control program to control vehicle components for providing vehicle functions, and the main computer having an activation module configured to send an activation signal to at least one subcomputer to enable or disable a control program, wherein in a standard vehicle, the activation module is provided to include an event data record, which includes a summary of all generally available vehicle functions and their respective target activation states, and according to the present invention, the activation module is configured to send the event data record as an activation signal to all connected subcomputers, each subcomputer is configured to receive the event data record, read the target activation states for at least the vehicle functions that can be provided by at least the respective subcomputer from the event data record, and set their respective underlying control programs according to their respective target activation states.

[0015] The communication scheme provided by the vehicle's main computer and subcomputers according to the present invention is characterized by improved efficiency, thereby enabling efficient use of data lines used for in-vehicle electronics and communication connections. By using event data records, the unification and standardization of the communication interface between the main computer and each subcomputer is ensured. This simplifies the programmer's programming work. Only event data records need to be distributed to the subcomputers via the vehicle's data lines. Therefore, since it is not necessary to periodically send function-specific activation signals from the main computer to the subcomputers via the data lines, the utilization rate of the data lines can be reduced. In this case, the main computer is available to retrieve the event data records via the data lines. Here, typically, all subcomputers can query the event data records while they are being provided by the main computer. For particularly efficient use of the dataset, selected subcomputers of the vehicle's in-vehicle electronics can also "subscribe" to the event data records, which further reduces read access via the data lines. In this case, subcomputers that do not subscribe to the event data records can work more efficiently by allocating their available hardware resources and computing power to other tasks.

[0016] Event data records can be interpreted, for example, as lists or tables. Each row in the table lists the generally available vehicle functions. Each column records the target activation status for each vehicle. Event data records can be generated during vehicle manufacturing and stored in the main computer, as in conventional technology. The target activation status includes entries that are enabled, disabled, or unavailable. Each subcomputer stores which vehicle functions it can provide. Each subcomputer then selectively reads the columns of the event data record that contain entries related to the vehicle functions it can provide. This reduces the utilization rate of each subcomputer, thereby further improving the efficiency of the in-vehicle electronics.

[0017] When each subcomputer reads "Enabled" as the target activation status, the respective control program for providing the vehicle function is enabled. Conversely, when "Disabled" is read as the target activation status, the control program is configured so that the respective vehicle function is unavailable within the vehicle. If a vehicle function is unavailable due to the vehicle's physical configuration, i.e., because a physical vehicle component is missing, the event data record for that vehicle function will include an entry indicating "Unavailable."

[0018] In this case, all generally available vehicle functions are similarly defined by the vehicle manufacturer. Therefore, event data records include all generally available vehicle functions, which allows for unification or standardization regardless of the vehicle components actually installed in the vehicle.

[0019] The vehicle may be any road vehicle, such as a passenger car, truck, transporter, or bus. Generally, it could also be a railway vehicle, ship, or aircraft.

[0020] The main computer can also be called a central onboard computer. Particularly preferably, the main computer is integrated into a so-called head unit or used to provide functions available through the vehicle's head unit. Each subcomputer can also be called a control unit. The data lines between the main computer and the subcomputers may be implemented wirelessly or wired. A hybrid configuration is also possible. Furthermore, different communication protocols such as CAN, FlexRay, Lin, and Ethernet can be used. A CAN bus system is particularly preferred.

[0021] In this case, the activation module is composed of hardware and software components. This allows the activation module to utilize various hardware components of the main computer, such as numerous memory elements and execution units. Here, software components distributed across different hardware components can work together in coordination with each other.

[0022] Event data records are sent from the main computer to subcomputers in response to events; this is also known as "event-based" computing.

[0023] In a further advantageous embodiment of the vehicle according to the present invention, the activation module is further configured to transmit event data records multiple times consecutively within a certain time period. Generally, individual subcomputers may be fully operational (busy) while transmitting or providing event data records from the main computer. In such cases, each subcomputer may not be able to read the event data records. To ensure the corresponding settings of the control programs executed by each subcomputer, the activation module transmits event data records multiple times consecutively within a certain time period as appropriate, prioritizing their transmission. Once each subcomputer has finished the computational operation it is currently performing, it can retrieve the event data record from the main computer. This time period may be predetermined or may vary in length for each event. For example, when the utilization rate of each subcomputer is high, the vehicle may choose a relatively longer time period than when the utilization rate of each subcomputer is low.

[0024] According to a further advantageous embodiment of the present invention, each subcomputer is configured to send a query signal to a main computer, and the main computer is configured to send an event data record to at least the subcomputer that issued the query signal in response to the query signal. This can further improve the efficiency of the in-vehicle electronics or the communication scheme underlying the in-vehicle electronics. By transmitting the query signal to the main computer, the main computer can be intentionally made to send or provide the event data record, so that the time the data lines used are occupied by providing the event data record is further reduced. In particular, if a subcomputer misses the initially sent event data record, for example, due to high utilization, it sends a query signal to the main computer.

[0025] The provision of event data records by the activation module can also be referred to as a so-called "service" in this context. An event data record can also be referred to as an event or an "event". An inquiry signal can also be referred to as a so-called "method" in this context.

[0026] Furthermore, in a further advantageous embodiment of the vehicle according to the invention, each subcomputer is configured to transmit a response signal to the main computer as a response to the received event data record, and this response signal is provided to include at least the vehicle functions that can be provided by each subcomputer and the respective settings of the underlying control program that have been executed. The response signal can also be referred to as a "method" in this context. By transmitting the response signal from each subcomputer to the main computer, the main computer or the activation module can be informed of how each subcomputer has reacted to the event data record. Thus, similarly, in order to determine that each control program for providing each vehicle function has been properly set, there is no need to transmit function-specific response signals via the data line, and it is only necessary to transmit a response signal implemented according to the standard format defined by the event data record. This further simplifies the implementation of the aforementioned underlying communication scheme.

[0027] As a supplement to the set vehicle functions and the executed settings, the response signal can further include a category for identifying each client that calls the method.

[0028] According to a further advantageous embodiment of the vehicle according to the invention, furthermore, the main computer is configured to resend an event data record each time the vehicle is started and / or each time the in-vehicle electronics are activated. Each setting of the control program can be permanently stored in each sub-computer. However, it is not necessary for each individual sub-computer to be able to permanently store this information. By resending the event data record each time the vehicle is started or each time the in-vehicle electronics are operated, each sub-computer can be reset. Furthermore, the vehicle components of the vehicle may be changed or replaced, which requires the resetting of the respective control programs of the sub-computers. Thereby, it is ensured that each sub-computer or control program is always correctly set. In this case, the start of the vehicle or the operation of the in-vehicle electronics is particularly suitable as an event for transmitting the event data record, since thereby the use of the vehicle and the vehicle functions is started. Setting the control program or the sub-computer at the start of each usage phase ensures the correct setting, so that each vehicle user can use their vehicle "as ordered by the vehicle manufacturer".

[0029] In a further advantageous embodiment of the vehicle according to the invention, furthermore, the main computer is configured to receive an update data record, which includes a change to the event data record and is adapted to adapt the event data record according to the change. Thus, the update data record enables the update of the event data record. When the vehicle settings are changed, i.e., for example, when vehicle components are replaced, new vehicle components are installed, or function restrictions or function locks are removed, by adapting the event data record stored in the vehicle, vehicle functions made available by the changed or new vehicle components and vehicle functions that were previously artificially restricted can be used as appropriate.

[0030] Preferably, in this case, the vehicle includes a communication unit configured to wirelessly receive update data records from a central computer and transfer them to the main computer. Generally, update data records can be introduced to the vehicle in various ways, for example, via an onboard diagnostic interface while the vehicle is in a service center. However, in this case, a visit to the service center is required. Wireless transmission of update data records can improve the convenience of the vehicle user. Wireless update introduction is also called "over-the-air (OTA)" update. The central computer may be a server or a group of servers. The central computer is accessible via the internet and in this context can also be called a cloud server. The communication unit can establish a connection between the in-vehicle electronics and the internet via mobile radio. Other wireless communication technologies, such as Wi-Fi, can also be considered to establish the communication connection. The advantage of a standardized interface in the form of event data records is particularly effective, as is the initial setup of subcomputers and control programs. This eliminates the need to adapt individual function signals, and it is sufficient to revise the event data records in bulk.

[0031] Furthermore, in a more advantageous embodiment of this vehicle, each subcomputer is configured to receive changes to existing and / or new control programs. This allows not only to enable or lock existing or new vehicle functions later, but also to adapt the underlying control programs themselves. This makes it possible to introduce entirely new functions to the vehicle or modify existing ones. Consequently, it is possible to eliminate errors, also known as "bugs," resolve security vulnerabilities, and provide new functions.

[0032] In this case, changes to the control program or a new control program can be introduced into the vehicle in various ways, at various points in time or events, similar to updated data records. Therefore, over-the-air transmission and installation while the vehicle is in a service center are also possible.

[0033] Another advantageous configuration of the vehicle according to the present invention will become apparent from the embodiments described below in more detail with reference to the figures. [Brief explanation of the drawing]

[0034] [Figure 1] This is a schematic diagram of the system architecture of the in-vehicle electronics that forms the basis of a vehicle based on the present invention. [Figure 2] This is a schematic diagram of the control program settings using conventional technology. [Figure 3] This is a schematic diagram of the configuration of a subcomputer for providing vehicle functions according to the present invention. [Modes for carrying out the invention]

[0035] A vehicle based on the present invention has a highly idealized system architecture, as shown in Figure 1. The figure shows a main computer 1, which is communicatively connected to a plurality of subcomputers 2 via data lines not shown in detail. In this case, the subcomputers 2 may be connected to the main computer 1 directly or indirectly via further subcomputers 2. Each subcomputer 2 is configured to run at least one control program 3 shown in Figure 2, thereby controlling vehicle components (not shown in detail) for providing vehicle functions 4 shown in Figure 3. Here, depending on the vehicle configuration, various vehicle functions 4 can be used or provided within the vehicle. In this case, it is necessary to configure the vehicle so that each vehicle function 4 is permitted or blocked. Thus, each vehicle user must be able to utilize the vehicle functions 4 acquired for their vehicle at the time of manufacture or purchase. Vehicle functions 4 can also be retrofitted or added later.

[0036] For this purpose, the main computer 1 has an activation module 5. The activation module 5 may be divided into multiple submodules, for example, three submodules 5.1, 5.2, and 5.3. Submodule 5.1 can store, for example, variation codes. Submodule 5.2 forms or contains the actual program code for executing method processes that can be performed by the activation module 5. Submodule 5.3 can be a securely writable memory, for example, by listing the subcomputers 2 installed in the vehicle and storing the anti-theft PIN.

[0037] The activation module 5 contains an event data record 7, which is distributed as a service 12 to subcomputers 2 connected to the main computer 1. Subcomputers 2 can also forward the event data record 7 to other subcomputers 2 downstream in the communication direction. The event data record 7 includes a summary of all generally available vehicle functions 4 and their respective target activation states 8, as shown in Figure 3. The activation module 5 is configured to transmit the event data record 7 as an activation signal 6 to all connected subcomputers 2. Each subcomputer 2 receives the event data record 7, reads from the event data record 7 at least the respective target activation states 8 for the vehicle functions 4 available to its respective subcomputer 2, and is configured to set the underlying control program 3 according to the respective target activation states 8.

[0038] Furthermore, service 12 may include query signals 9 and response signals 10. Query signals 9 and response signals 10 contain routines applicable by their respective subcomputers 2. This allows subcomputer 2 to transmit response signals 9 to main computer 1, thereby causing main computer 1 to resend event data record 7. Additionally, after receiving event data record 7 and configuring the corresponding control programs 3, subcomputer 2 can transmit their respective response signals 10 to main computer 1, thereby notifying main computer 1 that the configuration has been performed.

[0039] The acquisition or reading of event data record 7 by subcomputer 2 is indicated by arrow 101. The transmission of response signal 10 and inquiry signal 9 are indicated by arrow 102.

[0040] The event data record 7 may be initially provided by the central computer 11, for example, during the vehicle's manufacture. Furthermore, the event data record 7 can be modified. To this end, updated data records can be distributed from the central computer 11 to the main computer 1, particularly wirelessly, during the vehicle's usage phase. Further communication components, such as a communication unit for wirelessly connecting the main computer 1 to the internet, are not shown here.

[0041] Furthermore, the activation module 5 can also be read or manipulated by the diagnostic service 13.

[0042] Figure 2 shows a magnified view of how the activation module 5 configures each control program 3 of the subcomputer 2 to provide each vehicle function 4, following a procedure known from the prior art. The activation module 5 periodically transmits a function-specific activation signal 6 for each control program 3. In response, each higher-level subcomputer 2 replies with a function-specific response signal 10 to confirm the setting. Since each pair of activation signal 6 and response signal 10 must be created function-specific, this involves a lot of programming work. Furthermore, since the corresponding signals are transmitted continuously and periodically, the utilization rate of the data lines also increases. Each control program 3 may be software for controlling, for example, augmented reality navigation, trailer steering assistant, traffic sign detection, gear change program, digital floodlight, etc.

[0043] In contrast, Figure 3 schematically illustrates the data exchange procedure according to the present invention. The activation module 5 provides a service 12 including the event data record 7, query signal 9, and response signal 10 mentioned above. The event data record 7 is distributed to each subcomputer 2. The data structure is illustrated as a table in Figure 3. Each row contains a generally available vehicle function 4. In this case, the first column describes which vehicle function 4 it is and therefore contains a unique identifier such as a name or ID. The second column contains the respective target activation state 8 for each subcomputer 2. Since a subcomputer 2 can also provide multiple vehicle functions 4, in Figure 3, multiple rows of the table are partially assigned to each subcomputer 2. For example, the target activation state 8 can take three values. For example, 0 could be "disabled", 1 could be "enabled", and 2 could be "unavailable". Next, the event data record 7 is distributed to the subcomputer 2 as an activation signal 6. Each subcomputer 2 accesses the table entry associated with its respective subcomputer 2.

[0044] The vehicle electronics structure presented here significantly simplifies the integration of new vehicle functions 4 to be implemented in the future. Integrating the new vehicle functions 4 requires only a single data structure revision in the form of event data records 7. This implementation can be designed generically, eliminating the need for extensive, particularly function-specific, adaptations. Ideally, these changes can be made using a code generator.

[0045] The communication scheme described here allows for the formation of a standardized exchange interface. This facilitates integration into the entire system and allows for continuous improvement of its maturity. Since only one event data record 7 needs to be transmitted on an event basis, it can reduce the utilization of data lines, particularly in the form of bus load. [Prior art documents] [Patent Documents]

[0046] [Patent Document 1] German Patent Application Publication No. 102020109379 [Patent Document 2] German Patent Application Publication No. 102015010203 [Patent Document 3] U.S. Patent Application Publication No. 2022 / 0204012 [Patent Document 4] European Patent Application Publication No. 1967435 [Patent Document 5] European Patent No. 3793868 [Patent Document 6] U.S. Patent Application Publication No. 2018 / 0196660

Claims

1. A vehicle comprising one main computer (1) and at least one subcomputer (2) communicably connected to the main computer (1), wherein each subcomputer (2) is configured to execute at least one control program (3) to control vehicle components for providing vehicle functions (4), and the main computer has an activation module (5) configured to transmit an activation signal (6) to the at least one subcomputer (2) to enable or disable the control program (3), The activation module (5) includes an event data record (7), which includes a summary of all generally available vehicle functions (4) and the target activation state (8) for each of those vehicle functions in a vehicle. The vehicle is characterized in that the activation module (5) is configured to transmit the event data record (7) as an activation signal (6) to all connected subcomputers (2), each of which is configured to receive the event data record (7), read from the event data record (7) the target activation state (8) for at least the vehicle function (4) that can be provided by each of the subcomputers (2), and set the respective underlying control programs (3) according to the respective target activation state (8).

2. Furthermore, the vehicle according to claim 1, characterized in that the activation module (5) is configured to transmit the event data record (7) multiple times in succession within a certain period of time.

3. The vehicle according to claim 1 or 2, characterized in that each subcomputer (2) is configured to transmit an inquiry signal (9) to the main computer (1), and the main computer (1) is configured to transmit the event data record (7) to at least the subcomputer (2) that issued the inquiry signal (9) as a response to the inquiry signal (9).

4. Furthermore, each subcomputer (2) is configured to transmit a response signal (10) to the main computer (1) in response to the received event data record (7), wherein the response signal (10) includes at least the vehicle function (4) that can be provided by each subcomputer (2) and the respective executed settings of the underlying control program (3), as described in any one of claims 1 to 3.

5. Furthermore, the vehicle according to any one of claims 1 to 4, characterized in that the main computer (1) is configured to retransmit the event data record (7) each time the vehicle is started and / or when the in-vehicle electronics are operated.

6. Furthermore, the vehicle according to any one of claims 1 to 5, wherein the main computer (1) is configured to receive update data records, the update data records include changes to the event data records (7), and the event data records (7) are adapted in accordance with the changes.

7. The vehicle according to claim 6, characterized by a communication unit configured to wirelessly receive the updated data record from a central computer (11) and transfer it to the main computer (1).

8. The vehicle according to any one of claims 1 to 7, characterized in that each subcomputer (2) is configured to receive changes to an existing control program (3) and / or a new control program (3).

Images