Vehicle ECU Update Coordination for Synchronized Activation Timing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

During the process of updating the program for electronic control units (ECUs) in vehicles, there is a risk that the vehicle may become inoperable, which is inconvenient for users, due to the potential for inconsistent or improper activation of update data across different systems.

Innovation Solution

A data distribution system where the master device downloads and extracts update data from packages, and then instructs all relevant ECUs to install and activate the data simultaneously, ensuring that all systems are updated at the same timing to minimize operational disruptions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If update data is activated at different timings for different ECUs, then each system can be updated independently, but the vehicle may become inoperable due to inconsistent activation across systems

Engineering Contradiction:
Improvevehicle operabilityVSAvoidsynchronization control
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The master device receives activation timing information from the data distribution device before actually activating the update data. This preliminary receipt of timing information allows the master device to coordinate activation across all ECUs simultaneously, ensuring system consistency and preventing vehicle inoperability while maintaining manageable control complexity

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The master device acts as an intermediary between the data distribution device and multiple ECUs. It receives activation timing information from the data distribution device and distributes coordinated activation commands to all ECUs, ensuring they activate update data simultaneously. This intermediary role simplifies synchronization control while guaranteeing reliable vehicle operability

Inventive Principle:
Principle #24Intermediary (Mediator)

2Loss of time

If update data is activated immediately after installation, then update time is shortened, but the vehicle may become inoperable during the update process

Engineering Contradiction:
Improveupdate timeVSAvoidvehicle operability
Core Design Contradiction:
Loss of timeVSReliability

Solution Approach 1:

The master device receives activation timing information from the data distribution device before executing the activation. This preliminary receipt of timing information allows the system to prepare for coordinated activation across all ECUs simultaneously, ensuring that updates are completed quickly while maintaining vehicle operability through synchronized timing control

Inventive Principle:
Principle #10Preliminary action

3Productivity

If multiple packages are downloaded and activated separately, then each system update can be managed independently, but the total update time increases

Engineering Contradiction:
Improveupdate efficiencyVSAvoidtotal update time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The master device receives activation timing information for multiple packages from the data distribution device and coordinates the activation of all packages simultaneously across multiple ECUs. This merging of activation operations for different packages into a single coordinated event improves update efficiency while reducing total update time through parallel processing

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS12067391B2Master device, data distribution system, and non-transitory computer readable storage medium
Publication Date: 2024.08.20 DENSO CORP
  • US12067391B2 patent drawing
  • US12067391B2 patent drawing
  • US12067391B2 patent drawing

AI summary

A first package corresponding to a first system and a second package corresponding to a second system are downloaded from a center device, and an update data is extracted from the first package and the second package. An electronic control device as a write target installs the update data and activates the update data after an install of the update data is completed. All electronic control devices as a first write target corresponding to the first system and all electronic control devices as a second write target corresponding to the second system are instructed at a same timing to activate the update data after completing the install of the update data in all the electronic control devices.