ECU Configuration Updates With Protected Coordinator Parameters
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques for updating electronic control units in vehicles do not allow for the distinction between parameterizations made by the motor-vehicle manufacturer and those made by technical coordinators, leading to potential data loss and lack of protection for updates performed by the technical coordinator.
Innovation Solution
A device and method featuring two programmable update interfaces, one accessible by the motor-vehicle manufacturer and the other by the technical coordinator, to protect configuration parameters modified by the technical coordinator from alteration during updates initiated by the motor-vehicle manufacturer, ensuring that updates from both sources are managed separately and securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single update interface is used for both manufacturer and technical coordinator updates, then update simplicity is maintained, but configuration parameters modified by the technical coordinator are not protected from alteration during manufacturer updates
Solution Approach 1:
The update interface is segmented into two distinct interfaces: a first update interface for technical coordinators that allows configuration parameter modifications, and a second update interface for manufacturer updates that respects those modifications. This segmentation protects coordinator-modified parameters from being overwritten during manufacturer updates, resolving the contradiction between reliability and complexity by creating structured separation rather than a monolithic interface.
Solution Approach 2:
The system implements local quality by applying different update behaviors to different configuration parameters based on their origin. Parameters modified by the technical coordinator through the first interface are marked and protected, while other parameters remain accessible to manufacturer updates through the second interface. This localized differentiation allows selective protection of specific parameters without affecting the entire update system.
2Reliability
If manufacturer updates overwrite all configuration parameters, then consistent system updates are achieved, but personalized configurations made by technical coordinators are lost
Solution Approach 1:
The system performs preliminary action by having the technical coordinator modify and protect configuration parameters through the first update interface before manufacturer updates are applied. The filter values are pre-configured to identify which parameters should be protected, allowing the system to preserve personalized configurations in advance of manufacturer updates rather than attempting to restore them afterward.
Solution Approach 2:
The update mechanism applies local quality by selectively updating only those configuration parameters that are not protected by filter values. During manufacturer updates through the second interface, the system checks filter values for each parameter and skips updates for protected parameters while applying updates to unprotected ones, thus preserving personalized configurations without completely halting the update process.
3Reliability
If configuration parameters are protected from manufacturer updates, then technical coordinator modifications are preserved, but manufacturer ability to correct defects is limited
Solution Approach 1:
The system implements dynamics by making the protection status of configuration parameters changeable. The filter values that determine which parameters are protected can be modified by the technical coordinator through the first update interface, allowing the protection mechanism itself to adapt. This enables the system to balance stability and flexibility dynamically based on operational needs rather than being fixed.
Solution Approach 2:
The segmentation of update interfaces allows different levels of access and control. The first interface enables the technical coordinator to selectively protect specific configuration parameters by setting filter values, while the second interface provides manufacturer access that respects these selections. This segmented approach allows manufacturers to update unprotected parameters for defect correction while leaving protected parameters unchanged, maintaining both configuration stability and update flexibility.
Data Source
AI summary
A device for managing an electronic control unit of a motor vehicle that includes an update module that updates the configuration of the electronic control unit. The update module has a first programmable update interface that updates the parameter value associated with at least one configuration parameter and updates the filter value associated with the at least one configuration parameter in response to the update. The update module has a second programmable update interface to update the parameter values associated with at least part of a set of configuration parameters on the basis of the filter values associated with the configuration parameters.