On-board ECU Update Resumption with Identity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing on-board update systems fail to handle scenarios where an on-board ECU is replaced during the transmission of a control program update, leading to interruptions and potential errors in the update process.
Innovation Solution
An on-board update device that resumes or cancels the update process based on identification information, specifically checking for changes in ECU part numbers and MAC addresses to determine if an ECU has been replaced, and performs predetermined processing such as canceling the transmission or storing the result of the determination.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the transmission of the update program is resumed after an interruption without checking ECU identity, then the update process can be completed efficiently, but the system cannot detect if the ECU has been replaced with an unauthorized device
Solution Approach 1:
The patent applies preliminary action by checking the identification information of the on-board ECU before resuming the transmission of the update program. The control unit compares the current identification information with the previously stored identification information to determine whether the ECU has been replaced. This preliminary check ensures system integrity before continuing the update process, preventing unauthorized ECUs from receiving update programs while maintaining a relatively simple update resumption mechanism.
2Reliability
If the identification information is checked before resuming transmission, then ECU replacement can be detected, but the update process requires additional processing steps
Solution Approach 1:
The identification check is performed as a preliminary action before resuming transmission. The control unit stores the identification information of the on-board ECU before interrupting the transmission and compares it with the current identification information when resumption is requested. This approach detects ECU replacement while keeping the additional processing time minimal by using straightforward comparison logic rather than complex verification procedures.
3Productivity
If the transmission is automatically resumed after interruption, then the update process is efficient, but unauthorized ECUs may receive update programs
Solution Approach 1:
The patent implements feedback by comparing the current identification information of the on-board ECU with the previously stored identification information before resuming transmission. The control unit receives feedback from this comparison to determine whether the ECU has been replaced. If the identification information matches, the transmission is resumed efficiently; if it differs, the resumption is prohibited. This feedback mechanism ensures that only authorized ECUs can receive update programs while maintaining update efficiency for legitimate scenarios.
Data Source
AI summary
An on-board update device that acquires an update program transmitted from an external server located outside a vehicle, and performs processing to update a program for an on-board ECU provided in the vehicle, the on-board update device including a control unit that controls transmission of the update program to the on-board ECU, wherein, when the transmission is to be resumed after an interruption of the transmission, if identification information of the on-board ECU is different from the identification information before the interruption of the transmission, the control unit determines that the on-board ECU has been replaced during the interruption of the transmission, and performs predetermined processing.