Vehicle ECU Update Control With Travel Propriety Notification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
During remote program updates in vehicles via wireless communication, there is a risk of unintended vehicle operation when the update process is performed while the vehicle is being driven, potentially leading to unsafe conditions due to insufficient program rewriting processing.
Innovation Solution
A vehicle device that includes a reprogramming master device which determines the travel propriety and commands a notification medium to inform the user of their travel permissions, ensuring that updates are only performed when it is safe to do so, by referencing a traveling propriety determination table and controlling the update process to prevent vehicle operation during unsafe conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If remote program updates are performed via wireless communication, then system functionality is improved and software can be updated remotely, but vehicle safety deteriorates when updates are performed during driving due to potential unintended vehicle operation
Solution Approach 1:
The system performs preliminary checks to determine whether the vehicle is in a state suitable for program updates before initiating the update process. The determination unit evaluates vehicle state (stopped vs. moving) and update suitability (whether update can proceed safely) in advance, preventing unsafe updates from occurring during driving.
Solution Approach 2:
The notification unit provides feedback to the user about the vehicle state and update status, informing users when the vehicle is in an appropriate state for updates and when updates are in progress. This feedback mechanism ensures users are aware of the update state and can make informed decisions about vehicle operation.
2Productivity
If program updates are performed while the vehicle is moving, then productivity is improved by allowing continuous operation, but manufacturing precision deteriorates due to insufficient program rewriting processing
Solution Approach 1:
The system determines in advance whether the vehicle is in a suitable state for program updates by evaluating both the vehicle state (stopped or moving) and update suitability. Updates are only initiated when the determination unit confirms the vehicle is in an appropriate state, ensuring complete and safe program rewriting before resuming vehicle operation.
3Loss of information
If the system notifies users of travel permissions during updates, then information completeness is improved, but device complexity increases due to additional notification mechanisms
Solution Approach 1:
The notification unit serves multiple functions: it notifies users of vehicle state (stopped/moving), update suitability (can/cannot update), and update progress (in progress/completed). This multi-functional approach provides comprehensive information to users without requiring separate dedicated notification mechanisms for each type of information.
Data Source
AI summary
A vehicle system includes: a reprogramming slave device that is an electronic control unit (hereinafter, referred to as ECU) to be a target of updating an update file of a program stored among a plurality of the ECUs; a reprogramming master device that transmits the update file to the reprogramming slave device in response to a request from a terminal operable by a vehicle user to control updating of the program stored in the reprogramming slave device; and a determination unit that determines traveling propriety of a vehicle when the update file is rewritten in the reprogramming slave device. The vehicle device functions as the reprogramming master device, and includes: an obtaining unit that obtains the traveling propriety determined by the determination unit; and a notification command unit that commands a notification medium to notify information of the traveling propriety obtained by the obtaining unit.