ECU Delta Rollback Using Virtual File System Updates

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current methods for updating Electronic Control Unit (ECU) software in vehicles are inefficient, requiring significant memory and downtime, and often introduce bugs or are costly, especially when dealing with differential updates or rolling back software versions without reprogramming the memory.

Innovation Solution

The use of delta files and a virtual file system to manage and track ECU software versions, allowing for efficient updates and rollbacks by configuring ECUs to execute new software versions without interrupting existing operations, using startup code to initialize runtime libraries and update memory addresses, and defragmenting memory as needed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional ECU software update methods are used (distributing complete replacement packages), then software vulnerabilities can be fixed, but significant storage space is consumed and ECU functionality is interrupted

Engineering Contradiction:

Improvesoftware vulnerability fixationVSAvoidstorage space consumption

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent segments the software update process by dividing the complete ECU software package into differential update packages that contain only the necessary changes. This segmentation allows the update to be applied to the existing software without requiring complete replacement, thereby reducing storage space consumption while maintaining the ability to fix software vulnerabilities.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements preliminary actions by maintaining a version control system that tracks the current software state and prepares the appropriate differential update package before application. This preliminary preparation ensures that the update can be applied efficiently without interrupting ECU functionality, as the update package is pre-configured to integrate with the existing software version.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If complete ECU software replacement is performed, then software updates are delivered, but ECU operation is interrupted and downtime increases

Engineering Contradiction:

Improvesoftware update deliveryVSAvoidECU downtime

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements a dynamic update mechanism where the ECU can apply differential update packages to its running software without complete shutdown. The system dynamically integrates the update changes into the existing software execution, allowing the ECU to maintain operational functionality during the update process and significantly reducing downtime.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent ensures continuity of useful action by designing the differential update process to allow the ECU to continue its normal operations during the update application. The update mechanism is integrated into the running software execution flow, enabling the ECU to perform its control functions continuously without interruption while still receiving and applying software updates.

Inventive Principle:

Principle #20Continuity of useful action

3Ease of repair

If OBD ports are used for ECU updates, then fixes can be provided to affected vehicles, but the OBD ports create additional attack surfaces and security vulnerabilities

Engineering Contradiction:

ImproveECU fix deliveryVSAvoidattack surface expansion

Core Design Contradiction:

Ease of repairVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the update delivery mechanism from the traditional OBD port interface and implements it through the existing CAN bus communication system. By taking out the dependency on OBD ports for update delivery and using the already-present CAN bus infrastructure, the system maintains ease of repair capability while eliminating the security vulnerability of exposing additional attack surfaces through dedicated update ports.

Inventive Principle:

Principle #2Taking out (Extraction)

4Ease of operation

If over-the-air update techniques are used, then remote updates are possible, but the process is inefficient, inconvenient, and prone to introducing additional bugs

Engineering Contradiction:

Improveremote update capabilityVSAvoidupdate efficiency

Core Design Contradiction:

Ease of operationVSProductivity

Solution Approach 1:

The patent applies partial action by implementing differential updating that transfers only the necessary change portions rather than complete software packages. This partial transfer approach maintains remote update capability and ease of operation while dramatically improving update efficiency by reducing data transmission requirements and minimizing the risk of introducing bugs through incomplete or excessive data transfers.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS12093682B2Roll back of data delta updates

Publication Date: 2024.09.17 AURORA LABS LTD

AI summary

Disclosed embodiments relate to adjusting vehicle Electronic Control Unit (ECU) software versions. Operations may include receiving a prompt to adjust an ECU of a vehicle from executing a first version of ECU software to a second version of ECU software; configuring, in response to the prompt and based on a delta file corresponding to the second version of ECU software, the second version of ECU software on the ECU in the vehicle for execution; and configuring, in response to the prompt, the first version of ECU software on the ECU in the vehicle to become non-executable.