ECU Multi-Side Reprogram Recovery After Power Failure

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In-vehicle electronic control devices face challenges in reactivating systems with multiple software sides after a power source failure during reprogramming, leading to software version discrepancies and abnormal reactivation.

Innovation Solution

An electronic control device with an activation mode information storage unit and an activation side information storage unit, which updates information based on reprogramming progress, allowing the system to be reactivated normally upon power source recovery by referencing the activation mode and side information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If reprogramming is performed during system operation, then software updates can be applied without system downtime, but power source failure during reprogramming causes software version discrepancies and abnormal reactivation

Engineering Contradiction:
Improvesystem availability during software updateVSAvoidsystem reactivation reliability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The software area is divided into multiple sides (first side and second side), allowing the system to segment software storage into separate operational units. This segmentation enables one side to be reprogrammed while the other remains operational, and allows safe switching between sides if power failure occurs during reprogramming.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system performs preliminary actions by storing activation mode information and activation side information in storage units before reprogramming begins. These pre-stored indicators enable the system to determine the correct activation state after power recovery, preventing abnormal reactivation due to power failure during the reprogramming process.

Inventive Principle:
Principle #10Preliminary action

2Productivity

If multiple software sides are used for reprogramming, then system control can continue during update, but tracking activation state becomes more complex

Engineering Contradiction:
Improvecontinuous system operation during updateVSAvoidactivation state tracking complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system implements feedback mechanisms by storing activation mode information and activation side information that reflect the current software activation state. These stored indicators provide continuous feedback about which software side is active and in what mode, enabling the control unit to make correct activation decisions after power recovery without complex tracking logic.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent introduces intermediary storage units (activation mode information storage unit and activation side information storage unit) that mediate between the multiple software sides and the control unit. These intermediaries simplify the control logic by providing clear indicators of the current activation state, reducing the complexity of tracking which software side should be activated.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20240004635A1Electronic control device, reprogram execution method, and non-transitory computer readable storage medium
Publication Date: 2024.01.04 DENSO CORP
  • US20240004635A1 patent drawing
  • US20240004635A1 patent drawing
  • US20240004635A1 patent drawing

AI summary

A control unit in an electronic control device includes: an activation mode information storage unit having a software area with a plurality of sides for storing software and activation mode information indicating whether a system is activated in a normal mode or a reprogram mode; and an activation side information storage unit storing activation side information indicating with which of the plurality of sides the system is activated in the normal mode. At least one of the activation mode information and the activation side information is updated according to a progress of reprogram. The system is activated based on the activation mode information and the activation side information.