Dual-Processor Moving Body Control During Software Update Failures

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The challenge is to prevent a moving body from becoming inoperable due to failures in updating software on multiple processors in a moving body control device, which can lead to synchronization issues and safety risks.

Innovation Solution

A moving body control device is designed with multiple processors and memories, a software update unit, an abnormality recognition unit, and an abnormality handling unit. This setup allows for the recognition and handling of software abnormalities during updates, enabling the device to switch to old software versions or restrict functionality to maintain operability.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If software update processing is performed on multiple processors, then software functionality and performance are improved, but the risk of abnormality increases and the moving body may become inoperable

Engineering Contradiction:
Improvesoftware update reliabilityVSAvoidabnormality risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent performs software abnormality recognition after update processing is completed, before determining whether to switch to abnormality handling mode. This preliminary check allows the system to verify software integrity and detect abnormalities early, preventing inoperable states before they occur.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent prepares abnormality handling modes in advance that can be activated when software abnormalities are detected. These pre-prepared handling modes serve as a safety cushion, ensuring the moving body can maintain operability even when software update abnormalities occur.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Adaptability or versatility

If software updates are performed to improve functionality, then system capabilities are enhanced, but synchronization between processors may be compromised

Engineering Contradiction:
Improvesoftware functionalityVSAvoidprocessor synchronization
Core Design Contradiction:
Adaptability or versatilityVSStability of the object's composition

Solution Approach 1:

The patent implements a feedback mechanism where the software abnormality recognition unit continuously monitors software status after updates, and provides information to the abnormality handling unit. This feedback loop ensures that any synchronization issues between processors are detected and handled appropriately, maintaining system stability while allowing functional enhancements.

Inventive Principle:
Principle #23Feedback

3Ease of operation

If software updates are performed without restrictions, then update flexibility is improved, but the risk of abnormality increases

Engineering Contradiction:
Improveupdate flexibilityVSAvoidsoftware operability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent enables the moving body control device to autonomously perform software abnormality recognition and automatically switch to appropriate abnormality handling modes when abnormalities are detected. This self-service capability maintains update flexibility while ensuring software operability, as the system can independently manage update risks without requiring external intervention or restrictive procedures.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS20250153706A1Moving body control device, moving body control method, and recording medium
Publication Date: 2025.05.15 HONDA MOTOR CO LTD
  • US20250153706A1 patent drawing
  • US20250153706A1 patent drawing
  • US20250153706A1 patent drawing

AI summary

A moving body control device includes: a software update unit that performs update processing of first software or second software; a software abnormality recognition unit that recognizes presence or absence of an abnormality of first software and second software after the update processing is performed; and a software abnormality handling unit that causes either a first processor or a second processor to perform abnormality handling processing of operating a target moving body to be controlled by the moving body control device in a predetermined abnormality handling mode, in a case where the software abnormality recognition unit recognizes the abnormality of either the first software stored in a first memory or the second software stored in a second memory.