ECU Update Control via Hash Value Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle update systems struggle to accurately detect ECU replacement during program updates, especially when there is no version change, leading to potential activation of old program versions on newly mounted ECUs, which can result in incomplete system functionality and maintenance issues.
Innovation Solution
The system employs hardware serial number management to sense ECU replacement by comparing calculated hash values with stored values, preventing activation of old program versions and ensuring the ECU is updated to the correct version by acquiring and applying the latest update program from an external apparatus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If ECU replacement detection is performed using only program version comparison, then the detection method is simple, but ECU replacement cannot be accurately detected when no version change occurs
Solution Approach 1:
The patent introduces a hash value as an intermediary element to detect ECU replacement. Instead of directly comparing ECUs or relying solely on version numbers, the system calculates hash values from ECU identification information (such as serial numbers) and compares these hash values to detect replacement. This intermediary mechanism enables accurate detection without requiring complex direct comparison methods.
Solution Approach 2:
The patent replaces the mechanical/version-based detection method with a cryptographic hash-based detection method. By substituting the traditional version number comparison mechanism with hash value calculation and comparison, the system achieves more accurate detection while maintaining computational efficiency. The hash function transforms complex ECU identification data into comparable fixed-length values.
2Reliability
If the system allows program activation without verifying ECU replacement, then the update process is fast, but old program versions may be activated on newly mounted ECUs
Solution Approach 1:
The patent performs preliminary hash value calculation and comparison before allowing program activation. By checking whether the ECU has been replaced (through hash value comparison) before the activation step, the system ensures that only compatible ECUs can activate programs. This preliminary verification prevents incorrect activations while maintaining a streamlined update process.
Solution Approach 2:
The system implements feedback by comparing the calculated hash value with the stored hash value and using this comparison result to control program activation. If the hash values match, activation is permitted; if they differ, activation is blocked. This feedback mechanism ensures reliability without requiring manual intervention or complex verification procedures.
3Measurement precision
If hardware serial number management is implemented to detect ECU replacement, then detection accuracy is improved, but system complexity increases
Solution Approach 1:
The patent extracts only the essential identification information from the ECU (such as serial numbers) and uses this extracted data to generate hash values for replacement detection. By taking out only the necessary identification elements rather than managing entire ECU configurations, the system achieves accurate detection while minimizing the increase in system complexity.
Solution Approach 2:
The patent transforms ECU identification information into hash values, changing the parameter representation from variable-length identification data to fixed-length hash values. This parameter transformation simplifies the comparison process and reduces the computational burden, thereby limiting the increase in system complexity while maintaining high detection accuracy.
Data Source
AI summary
An update control apparatus includes: a first acquiring unit configured to acquire information based on a unique value of a moving-body control unit; a second acquiring unit configured to acquire version information of a program for performing control by the moving-body control unit from a first storage region of a storage apparatus provided in the moving-body control unit; a third acquiring unit configured to acquire, on a basis of the version information acquired by the second acquiring unit, a newer version of the program for performing the control by the moving-body control unit; a writing unit configured to write the new version of the program acquired by the third acquiring unit to a second storage region provided in the storage apparatus; and an instruction unit configured to output an instruction to cause the moving-body control unit to control in accordance with the program stored in the second storage region.