Vehicle ECU Restart Control for Software Version Mismatch

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing vehicle control systems face challenges in enabling vehicle functions when software versions across electronic control units (ECUs) do not match, particularly during ECU restarts or resets, leading to potential system failures.

Innovation Solution

The system includes a master ECU that manages software versions and enables functions by disabling or restricting execution of software in slave ECUs when mismatches are detected, allowing continued operation by executing alternative software versions or disabling functions as needed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the ECU disables software execution after restart to prevent version mismatch, then software version consistency is improved, but system functionality deteriorates

Engineering Contradiction:
Improvesoftware version consistencyVSAvoidsystem functionality
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

Instead of completely disabling software execution or completely trusting the restarted ECU, the system applies a partial action approach: the master ECU assesses version compatibility and issues selective permission or restriction instructions. This allows the restarted ECU to execute software when versions match while preventing execution when versions mismatch, achieving a balanced partial execution strategy.

Inventive Principle:
Principle #16Partial or excessive action

2Reliability

If the master ECU checks version information from all slave ECUs, then software version consistency is improved, but system complexity increases

Engineering Contradiction:
Improvesoftware version consistencyVSAvoidversion management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The master ECU serves multiple functions: it acts as a central version information collection point, performs compatibility assessment, generates control instructions, and manages overall software version consistency across the network. This multi-functional design consolidates version management complexity into a single universal controller rather than requiring distributed version checking across all ECUs.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12528429B2Electronic control unit, vehicle control system, and vehicle control method
Publication Date: 2026.01.20 TOYOTA JIDOSHA KK
  • US12528429B2 patent drawing
  • US12528429B2 patent drawing
  • US12528429B2 patent drawing

AI summary

An electronic control unit (ECU), a vehicle control system, and a vehicle control method are provided. The disabling process disables execution of the software stored in storage circuitry when execution circuitry is restarted during operation of the vehicle control system. In a function restricting process, when another ECU is restarted during the operation of the vehicle control system, the software stored in the storage circuitry is executed to enable one of the functions that is capable of being enabled when execution of software in the other ECU is disabled.