Vehicle ECU OTA Updates with Operator Proximity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for updating electronic control units (ECUs) in vehicles lack efficiency and safety, particularly in ensuring that firmware updates are completed under optimal vehicle operating conditions and operator proximity, which can lead to unsafe or incomplete updates.
Innovation Solution
An over-the-air (OTA) update system that determines operator proximity to the vehicle and checks vehicle operating conditions before initiating firmware updates, ensuring updates are only completed when the vehicle is stationary, with adequate battery voltage, and the operator is nearby, using a telematics device and OTA server to manage the update process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If firmware updates are performed without verifying operator proximity and vehicle conditions, then update speed and efficiency are improved, but safety and reliability deteriorate due to incomplete or unsafe updates
Solution Approach 1:
The system performs preliminary verification of operator proximity through NFC tap detection and vehicle operating conditions (stationary state, battery voltage, ignition status) before initiating the firmware update process. This preliminary action ensures that all safety criteria are met before the update begins, preventing unsafe updates while maintaining efficient update execution.
2Reliability
If multiple verification steps are implemented for operator proximity and vehicle conditions, then safety and reliability are improved, but device complexity and operation difficulty worsen
Solution Approach 1:
The verification process is segmented into distinct, independent checks: NFC tap detection for operator proximity, stationary state verification, battery voltage check, and ignition status confirmation. Each verification step operates independently and contributes to the overall safety decision, making the complex verification process manageable and systematic.
Solution Approach 2:
The OTA update server acts as an intermediary that coordinates between the operator terminal, telematics device, and vehicle systems. It receives verification data from multiple sources, processes safety criteria, and controls the update initiation, simplifying the overall system architecture by centralizing the coordination function.
3Reliability
If operator proximity verification through NFC tap is required, then safety is improved by ensuring operator presence, but ease of operation deteriorates due to additional steps
Solution Approach 1:
The operator performs the NFC tap action on their own device to verify their presence and authorization. This self-service approach integrates seamlessly into the update process, requiring minimal additional effort from the operator while ensuring reliable verification of operator presence and intent.
Data Source
AI summary
Systems and method for safe over-the-air (OTA) update of electronic control units in vehicles are provided. The OTA server determines whether an operator terminal is close to a vehicle and if so, sends a request to the operator terminal requesting confirmation for proceeding with completing a firmware update for an electronic control unit in the vehicle. In response to receiving the confirmation, the OTA server sends a request to a telematics device coupled to the vehicle to complete the firmware update.