Vehicle ECU Rollback Control During Program Rewrite Cancellation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle electronic control systems face challenges in completing program rewriting operations when cancellation requests are generated during the process, leading to incomplete states and abnormal ECU operation.
Innovation Solution
A vehicle master device and control method that include an update data acquisition unit, distribution unit, cancellation request determination unit, rollback method specifying unit, and execution unit, which allow for proper rollback and completion of program rewriting by determining cancellation requests and specifying appropriate rollback methods based on memory type and data types, ensuring the ECU returns to a stable state with the old program.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If program rewriting is performed in the ECU, then the ECU functionality is improved with new features, but the system becomes vulnerable to cancellation requests that may leave the ECU in an incomplete state
Solution Approach 1:
The patent applies preliminary action by creating a backup of the old program data before initiating the rewriting process. The master device stores the original program in a backup area of the non-volatile memory before writing the new program, ensuring that if rewriting is cancelled or interrupted, the ECU can restore to its previous functional state.
Solution Approach 2:
The patent implements beforehand cushioning by preparing rollback capability in advance. The system designates specific memory areas for backup storage and establishes the rollback mechanism before rewriting begins, providing a safety buffer that prevents the ECU from entering an incomplete or abnormal state if the rewriting process is interrupted.
2Reliability
If rollback mechanism is implemented to handle cancellation requests, then the ECU reliability is improved, but the device complexity increases
Solution Approach 1:
The patent applies self-service by enabling the ECU to autonomously perform rollback operations using its own resources. The ECU's microcomputer executes the rollback process by reading the backup program data from its non-volatile memory and rewriting its program memory, without requiring external assistance from the master device, thereby simplifying the overall system complexity.
3Stability of the object's composition
If the cancellation request is detected and rollback is executed, then the ECU operational stability is maintained, but the rewriting process time is increased
Solution Approach 1:
The patent extracts the backup creation step as a separate, preliminary action that occurs once before rewriting begins. By creating the backup in advance and storing it in the non-volatile memory, the system avoids the need to recreate or transfer backup data during the rewriting process, reducing the time penalty associated with rollback capability.
Data Source
AI summary
A vehicle master device includes a cancellation request determination unit that is configured to determine whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU by the update data distribution unit, a rollback method specifying unit that is configured to, when the cancellation request determination unit determines that the cancellation request is generated, specify a rollback method for returning the rewrite target ECU to a state where writing of the update data has not yet started in accordance with a memory type of the non-volatile memory of the rewrite target ECU and a data type of the update data of the new program or the old program, and a rollback execution unit that is configured to instruct the rewrite target ECU to execute a rollback according to the rollback method specified by the rollback method specifying unit and have the rewrite target ECU operate with the old program.