Dual-Processor ECU Scheduling for In-Service Software Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic control units (ECUs) face delays in software updating due to the inability to restart during vehicle operation or when parked, as they continue to perform various services.

Innovation Solution

The ECU is configured with two processing units, each performing different services based on the vehicle's power state, allowing suspension periods for both units to facilitate software updates without interrupting ongoing services.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the electronic control unit performs various services continuously while the vehicle is traveling or parked, then the service coverage and functionality are improved, but the opportunity to restart for software updating is lost, causing update delays

Engineering Contradiction:
Improveservice coverageVSAvoidsoftware update time
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The electronic control unit is divided into a first processing unit and a second processing unit. Each unit has its own processor and rewritable storage device, and each can independently execute services. This segmentation allows one unit to provide services while the other unit performs software updates, resolving the contradiction between continuous service provision and software update timing.

Inventive Principle:
Principle #1Segmentation

2Device complexity

If the electronic control unit uses a single processing unit to perform all services, then the device complexity is reduced, but the ability to perform software updates without service interruption is compromised

Engineering Contradiction:
Improveprocessing unit structureVSAvoidsoftware update completion
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The system is segmented into two processing units, each capable of independent operation. This allows the system to maintain service reliability during software updates by switching between units, ensuring that updates can be completed without compromising overall system reliability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The electronic control unit configures suspendable periods in advance for each processing unit. By pre-planning these periods, the system ensures that software updates can be performed at appropriate times without disrupting service continuity, thereby maintaining reliability while enabling update completion.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the electronic control unit configures suspendable periods for both processing units independently, then the opportunity for each unit to restart for updating is improved, but the service continuity may be affected

Engineering Contradiction:
Improvesoftware update opportunityVSAvoidservice continuity
Core Design Contradiction:
ReliabilityVSDuration of action of moving object

Solution Approach 1:

The electronic control unit configures periodic suspendable periods for both processing units independently. This periodic structure ensures that each unit has regular opportunities to restart for software updates while maintaining overall service continuity through the other unit's operation during these periods.

Inventive Principle:
Principle #19Periodic action

Solution Approach 2:

The system merges the operations of two processing units, where one unit provides services while the other performs updates during suspendable periods. This combination allows both units to achieve their respective goals (service provision and software updates) without compromising overall service continuity.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS12619420B2Electronic control unit
Publication Date: 2026.05.05 TOYOTA JIDOSHA KK
  • US12619420B2 patent drawing
  • US12619420B2 patent drawing
  • US12619420B2 patent drawing

AI summary

An electronic control unit includes a first processing unit and a second processing unit. Each of the first processing unit and the second processing unit includes a processor and a rewritable storage device. Each of the first processing unit and the second processing unit is configured to perform a service by the processor executing software stored in the rewritable storage device. The electronic control unit is configured to set, during a period other than a first period during which all services performed by the first processing unit are suspendable, a second period during which all services performed by the second processing unit are suspendable.