Vehicle ECU Update Control Under Terminal Communication Loss

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current software update systems for vehicle ECUs continue processing even when the information terminal that approved the update is no longer cooperating with the vehicle, leading to potential issues in software update control.

Innovation Solution

A center is introduced to manage and control software updates for vehicle ECUs by determining the communication state between the vehicle and the information terminal, restricting update processing when communication is interrupted, and ensuring updates are executed only when both are in cooperation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If software update processing is continuously executed after approval, then update completion is ensured, but system reliability deteriorates when information terminal moves away from vehicle

Engineering Contradiction:
Improvesoftware update control reliabilityVSAvoidupdate processing efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The center continuously monitors the communication state between the vehicle and information terminal during software update processing. When the information terminal moves away from the vehicle and communication is interrupted, the center detects this change and automatically restricts further update processing, preventing unauthorized or incomplete updates while maintaining system reliability

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The software update control system dynamically adjusts its operation based on real-time communication conditions. The center transitions between permitting update processing when communication is stable and restricting it when communication is interrupted, allowing the system to adapt to changing environmental conditions during the update process

Inventive Principle:
Principle #15Dynamics

2Adaptability or versatility

If software update is approved by information terminal, then update function is added, but security risk increases when terminal is no longer cooperating

Engineering Contradiction:
Improvesoftware function update capabilityVSAvoidunauthorized update risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The center acts as an intermediary between the information terminal and the vehicle's software update system. It verifies the cooperation state of the information terminal throughout the update process and controls whether update processing should proceed, preventing unauthorized updates even after initial approval is obtained

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The center performs preliminary verification of the information terminal's cooperation state before allowing software update processing to continue. This preliminary check ensures that the terminal remains authorized and present, preventing security risks before they can manifest

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12561123B2Center, method, and non-transitory storage medium
Publication Date: 2026.02.24 TOYOTA JIDOSHA KK
  • US12561123B2 patent drawing
  • US12561123B2 patent drawing
  • US12561123B2 patent drawing

AI summary

A center includes one or more processors configured to: execute communication between a vehicle and an information terminal associated with the vehicle; determine a communication state between the vehicle and the information terminal; control software update processing of an electronic control unit mounted on the vehicle based on an update approval notification received from the information terminal; and restrict the software update processing when the communication between the vehicle and the information terminal is being interrupted.