Vehicle ECU Update Consent Control for Owner Change Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In connected-car systems, existing data distribution technologies fail to manage owner changes effectively, leading to unauthorized data updates when the vehicle's ownership is transferred, as the center device may not update the owner information, resulting in campaign notifications being sent to the previous owner instead of the current one.
Innovation Solution
A consent request system is implemented, where a consent request unit asks multiple devices for permission to distribute data to a vehicle, with a consent determination unit judging the responses to ensure that only the current owner's consent is required for data distribution, preventing unauthorized updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the center device uses existing data distribution technology to update ECUs, then data distribution can be performed, but unauthorized updates occur when vehicle ownership changes because the center device does not update owner information
Solution Approach 1:
The system performs preliminary consent requests to multiple devices (vehicle terminal, mobile terminal, server) before data distribution. This advance verification ensures that only authorized current owners can receive updates, preventing unauthorized updates while maintaining system reliability without excessive complexity.
2Loss of information
If the center device sends campaign notifications to all registered devices, then notifications reach the vehicle owner, but notifications are sent to the previous owner instead of the current one when ownership changes
Solution Approach 1:
The system implements a feedback mechanism where consent responses from multiple devices are collected and verified. The center device receives consent information from vehicle terminals, mobile terminals, and servers, then uses this feedback to determine whether to proceed with data distribution. This ensures notifications and updates are sent only to current authorized owners, maintaining information accuracy while managing the additional communication overhead through systematic verification.
3Reliability
If the system requires consent from multiple devices, then unauthorized updates are prevented, but the consent verification process becomes more complex
Solution Approach 1:
The consent verification system is segmented into distinct functional components: a consent request unit that sends requests to multiple devices, a consent determination unit that collects and evaluates responses, and a distribution control unit that executes data distribution based on verification results. This segmentation allows the system to maintain high verification accuracy while managing complexity through modular, organized processing of consent information from vehicle terminals, mobile terminals, and servers.
Data Source
AI summary
A center device includes: a consent request unit that is configured to make a consent request to a plurality of devices for data distribution to a vehicle; a consent determination unit that is configured to judge a consent response from each of the plurality of devices; a distribution control unit that is configured to control the data distribution to the vehicle according to a determination result by the consent determination unit; and a necessity determination unit that is configured to determine whether the consent request to the plurality of devices is needed before the consent request are made to the plurality of devices. The consent request unit is further configured to determine whether to make the consent request to the plurality of devices according to a determination result by the necessity determination unit.