Vehicle ECU Firmware Update Control With Double-Bank Memory

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing technologies do not effectively address the need for updating firmware in vehicle ECUs, particularly in the context of connected cars, without increasing costs by incorporating additional UCM functions.

Innovation Solution

An electronic control system utilizing a master controller, sub-controller, and a specific update execution unit to manage firmware updates, including a double-bank memory structure with a boot flag, allowing seamless switching between active areas during updates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If firmware update functionality is added to the ECU system, then the system can perform firmware updates, but the device complexity increases

Engineering Contradiction:

Improvefirmware update capabilityVSAvoidUCM function complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The sub-controller is designed to perform multiple functions: it manages both application program updates and firmware updates. By making the sub-controller universal, the system avoids adding separate dedicated firmware update hardware, thus preventing complexity increase while enabling firmware update capability

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The firmware update function is merged with the existing UCM sub-controller rather than being implemented as a separate system. The sub-controller handles both app program management and firmware management, combining these functions into a single control unit to avoid duplicating infrastructure

Inventive Principle:

Principle #5Merging (Combining)

2Reliability

If a double-bank memory structure is implemented, then system reliability during updates is improved, but the memory cost increases

Engineering Contradiction:

Improveupdate process reliabilityVSAvoidmemory capacity

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The memory is segmented into two banks (first bank and second bank) where each bank can independently store firmware. This segmentation allows the system to maintain one active bank while updating the other, ensuring continuity and reliability without requiring a complete memory replacement

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system prepares a standby bank (second bank) in advance before performing updates. This cushioning approach ensures that if the update process fails or the new firmware has issues, the system can immediately switch back to the original bank, providing a safety buffer against update failures

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS12504961B2Electronic control system for vehicle firmware

Publication Date: 2025.12.23 DENSO CORP

AI summary

An electronic control system includes: a master controller that: receives an update program and an update information file including information related to a program update; and transfers the update information file and the update program; a sub-controller that: writes an update program into a first memory; and receives the update information file and the update program from the master controller; and a specific update execution unit that: stores specific update information related to a program update for a second memory; and writes an update program into the second memory. The sub-controller controls the specific update execution unit to write, according to the specific update information, an update program of a firmware into the second memory when the update information file indicates that the program update includes an update of the firmware.