Onboard ECU Update Adoption with Server Cancellation Check

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing onboard update systems do not adequately handle notifications for canceling control program adoption by a program providing apparatus before the control program is activated by a target onboard ECU, leading to potential issues with program updates.

Innovation Solution

An onboard update apparatus that attempts to communicate with an external server to confirm cancellation information before allowing the target onboard ECU to adopt an update program, canceling the adoption if cancellation information is acquired, and adopting the program if communication fails or no cancellation information is available.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the control program is downloaded to the vehicle and automatically adopted by the target onboard ECU, then the update process is simplified and productivity is improved, but the risk of adopting incorrect or canceled programs increases, reducing reliability

Engineering Contradiction:
Improveupdate process efficiencyVSAvoidprogram adoption accuracy
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system performs a communication check with the external server before the target onboard ECU adopts the update program. This preliminary action allows the relay apparatus to verify whether the program should still be adopted, preventing adoption of canceled programs while maintaining efficient automatic updates.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If the system communicates with the external server before program adoption to check for cancellation, then program adoption accuracy is improved, but the complexity of the update system increases

Engineering Contradiction:
Improveprogram adoption accuracyVSAvoidupdate system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The relay apparatus serves as an intermediary between the target onboard ECU and the external server. It handles the communication check with the server and manages the program adoption process, shielding the ECU from complexity while ensuring accurate adoption decisions based on server responses.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If the system requires communication with the external server before every program adoption, then program adoption accuracy is improved, but the update time and energy consumption increase

Engineering Contradiction:
Improveprogram adoption accuracyVSAvoidupdate time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs a partial communication check - only verifying program adoption status with the external server, rather than complete program validation. This partial action sufficient to prevent adoption of canceled programs while minimizing communication time and energy consumption.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS12001831B2Onboard update apparatus and update processing program
Publication Date: 2024.06.04 AUTONETWORKS TECH LTD
  • US12001831B2 patent drawing
  • US12001831B2 patent drawing
  • US12001831B2 patent drawing

AI summary

An onboard update apparatus includes a control unit that controls adoption of an update program by an onboard ECU installed in a vehicle, wherein the control unit attempts to communicate with an external server outside of the vehicle when a target onboard ECU for updating adopts the update program stored in a predetermined storage area in the vehicle; in a case where communication with the external server is successful, in a case where information relating to cancelation of the update program is acquired, adoption of the update program by the target onboard ECU for updating is canceled, and in a case where the information relating to cancelation cannot be acquired, the target onboard ECU for updating adopts the update program; and in a case where communication with the external server has failed, the target onboard ECU for updating adopts the update program.