ECU Program Update Progress Synchronization After Interruptions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing program update methods in vehicle control systems often experience interruptions during updates, leading to incomplete updates and signal transmission/reception lags between control devices, particularly when resuming from interruptions.
Innovation Solution
A program update system and method that involve storing and updating progress information of signal transmission/reception between distribution and communication devices, allowing for synchronized resumption and matching of progress information to prevent lags, by using a distribution device to manage and transmit progress updates between ECUs, ensuring continuous and efficient updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the update program is overwritten with a pre-update old program in the device to be updated, then the update can be completed, but interruption of the update may disable execution using the old program, making it impossible to resume the update
Solution Approach 1:
The patent applies preliminary action by storing a backup of the old program before the update process begins. This backup is preserved in a protected memory area that cannot be overwritten during the update. If the update is interrupted, the system can restore from this backup and resume the update process, rather than being completely disabled. This resolves the contradiction by preparing the old program in advance for potential recovery scenarios.
Solution Approach 2:
The patent implements beforehand cushioning by creating a safety mechanism through program backup and protection. The old program is safeguarded in a read-only or protected memory section before the update occurs, providing a cushion against update failures. This allows the system to withstand interruptions and still recover, addressing both the reliability of update completion and the capability to resume after interruptions.
2Productivity
If progress information is not synchronized between distribution device and communication device, then transmission/reception can proceed independently, but lags occur in signal transmission/reception between control devices
Solution Approach 1:
The patent applies feedback by implementing a progress information synchronization mechanism where the distribution device and communication device continuously exchange and update their progress status. The communication device reports its reception progress back to the distribution device, which then adjusts its transmission accordingly. This feedback loop prevents lags and ensures both devices remain synchronized, resolving the contradiction between transmission efficiency and synchronization accuracy.
Solution Approach 2:
The patent uses an intermediary approach by introducing progress information as a mediating element between the distribution device and communication device. This progress data acts as a bridge that coordinates their operations, allowing them to proceed efficiently while maintaining synchronization. The progress information mediates the relationship between transmission speed and synchronization, enabling both high productivity and accurate information tracking.
3Quantity of substance
If the update process is interrupted and the old program is destroyed, then memory space is freed, but the simple communication program stored in excluded memory block is needed to resume reprogramming
Solution Approach 1:
The patent applies segmentation by dividing the memory into distinct functional areas: a reprogrammable area for the main program and a protected non-reprogrammable area for the simple communication program. This segmentation allows the main program to be updated and overwritten while the communication program remains intact in its protected segment. The communication program segment is specifically excluded from reprogramming operations, ensuring it remains available to facilitate resumption of updates even when memory is constrained.
Solution Approach 2:
The protected communication program area serves multiple functions: it maintains simple communication capabilities during updates, enables resumption of interrupted reprogramming, and provides a reliable bootstrap function. By making this memory segment multi-functional, the system can free up reprogrammable memory space while still maintaining the ability to resume operations, resolving the contradiction between memory availability and operational ease.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A distribution device and a communication device each include a storage unit for storing progress information representing a progress of transmission/reception the communication signal and the new computer program. The distribution device updates the progress information stored in the storage unit of the distribution device, in accordance with the progress of transmission/reception; transmits the updated progress information to the communication device; receives the progress information stored in the storage unit of the communication device from the communication device; and specifies a communication signal or a new computer program that is to be transmitted/received next between the communication device and the distribution device, according to the received progress information. The communication device receives the progress information transmitted from the distribution device; updates the progress information stored in the storage unit of the communication device, based on the received progress information; and transmits the updated progress information to the distribution device.