ECU Reprogramming via Manifest State Transitions Without Restart

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing reprogramming methods for in-vehicle ECUs require restarting the device, leading to service downtime during wireless reprogramming and operational delays during wired reprogramming.

Innovation Solution

A system that utilizes a manifest file to define machine states and function groups, allowing for state transitions without restarting the reprogram target ECU, by defining 'normal', 'reprogram', 'activation', and 'stop' states, and managing these transitions for appropriate reprogramming.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the ECU is restarted during reprogramming, then the reprogramming process can be completed, but waiting time increases and operational delays occur

Engineering Contradiction:

Improvereprogramming completionVSAvoidwaiting time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system dynamically transitions between operational mode and reprogramming mode without requiring a full restart. The ECU maintains dynamic adaptability by switching execution contexts, allowing reprogramming to occur while the vehicle is running or stopped, thereby eliminating idle waiting time while ensuring reliable program updates

Inventive Principle:

Principle #15Dynamics

2Manufacturing precision

If the ECU is restarted during reprogramming, then the update program can be written, but operational delays occur

Engineering Contradiction:

Improveprogram writing accuracyVSAvoidreprogramming efficiency

Core Design Contradiction:

Manufacturing precisionVSProductivity

Solution Approach 1:

The ECU's execution memory is segmented into first execution memory for operational programs and second execution memory for reprogramming. This segmentation allows the update program to be written to the second memory while the first memory continues to execute operational code, enabling simultaneous program writing and vehicle operation without productivity loss while maintaining writing accuracy

Inventive Principle:

Principle #1Segmentation

3Reliability

If the ECU is restarted during reprogramming, then the reprogramming process can be completed, but the vehicle operation is interrupted

Engineering Contradiction:

Improvereprogramming completionVSAvoidvehicle operation continuity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system performs preliminary setup by designating a second execution memory area before reprogramming begins. This preliminary action enables the ECU to switch to executing from the second memory during reprogramming, allowing the vehicle to continue operating without interruption while the update program is being written and executed, thus maintaining both reliability and operational continuity

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12613689B2Electronic control device, reprogram execution method, and non-transitory computer readable storage medium

Publication Date: 2026.04.28 DENSO CORP

AI summary

An electronic control device includes: a manifest file acquisition unit; an update program acquisition unit; and a reprogram execution unit that executes reprogramming according to a machine state and a function group defined in a manifest file by instructing an electronic control unit as a reprogram target device to write the update program. The manifest file defines a normal state and a reprogram state as machine states conforming to a predetermined in-vehicle software platform standard specification; a first group to which a reprogrammable application while a vehicle drive mechanism is running belongs as a function group conforming to the specification; a second group to which an application not relating to the reprogramming belongs; and an activation state and a stop state in each of the first group and the second group.