Dual-Processor ECU Scheduling for In-Service Software Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic control units (ECUs) face delays in software updating due to the inability to restart during vehicle operation or when parked, as they continue to perform various services.
Innovation Solution
The ECU is configured with two processing units, each performing different services based on the vehicle's power state, allowing suspension periods for both units to facilitate software updates without interrupting ongoing services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the electronic control unit performs various services continuously while the vehicle is traveling or parked, then the service coverage and functionality are improved, but the opportunity to restart for software updating is lost, causing update delays
Solution Approach 1:
The electronic control unit is divided into a first processing unit and a second processing unit. Each unit has its own processor and rewritable storage device, and each can independently execute services. This segmentation allows one unit to provide services while the other unit performs software updates, resolving the contradiction between continuous service provision and software update timing.
2Device complexity
If the electronic control unit uses a single processing unit to perform all services, then the device complexity is reduced, but the ability to perform software updates without service interruption is compromised
Solution Approach 1:
The system is segmented into two processing units, each capable of independent operation. This allows the system to maintain service reliability during software updates by switching between units, ensuring that updates can be completed without compromising overall system reliability.
Solution Approach 2:
The electronic control unit configures suspendable periods in advance for each processing unit. By pre-planning these periods, the system ensures that software updates can be performed at appropriate times without disrupting service continuity, thereby maintaining reliability while enabling update completion.
3Reliability
If the electronic control unit configures suspendable periods for both processing units independently, then the opportunity for each unit to restart for updating is improved, but the service continuity may be affected
Solution Approach 1:
The electronic control unit configures periodic suspendable periods for both processing units independently. This periodic structure ensures that each unit has regular opportunities to restart for software updates while maintaining overall service continuity through the other unit's operation during these periods.
Solution Approach 2:
The system merges the operations of two processing units, where one unit provides services while the other performs updates during suspendable periods. This combination allows both units to achieve their respective goals (service provision and software updates) without compromising overall service continuity.
Data Source
AI summary
An electronic control unit includes a first processing unit and a second processing unit. Each of the first processing unit and the second processing unit includes a processor and a rewritable storage device. Each of the first processing unit and the second processing unit is configured to perform a service by the processor executing software stored in the rewritable storage device. The electronic control unit is configured to set, during a period other than a first period during which all services performed by the first processing unit are suspendable, a second period during which all services performed by the second processing unit are suspendable.


