ECU Virtual Machine Software Update via Hypervisor Segmentation

Solution Overview

Problem

The existing virtualization technologies for electronic control units in vehicles require significant time to update software across multiple virtual machines, leading to inefficiencies and potential safety risks due to the complexity of managing and updating numerous hypervisors.

Innovation Solution

An electronic control unit with a virtual machine managed by a hypervisor, equipped with a file acquisition and storage system that determines whether hypervisors are the same before transferring software updates, allowing for efficient transfer and reduction in update time by omitting unnecessary transfers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If software updates are transferred to all virtual machines regardless of hypervisor identity, then all virtual machines can be updated, but update time increases and communication loads increase

Engineering Contradiction:

Improvesoftware update completenessVSAvoidupdate time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system segments virtual machines by their managing hypervisor identity. The determining portion divides virtual machines into groups based on whether they are managed by the same or different hypervisors, allowing targeted update transfers only to virtual machines managed by different hypervisors. This segmentation eliminates redundant transfers while ensuring all necessary virtual machines receive updates.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The determining portion acts as an intermediary between the transfer portion and virtual machines. It receives information about virtual machine hypervisor management relationships, determines whether a virtual machine is managed by a different hypervisor than the current one, and based on this determination, either permits or blocks the transfer of update files. This intermediary function prevents unnecessary transfers while ensuring complete update coverage.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If software updates are transferred to all virtual machines regardless of hypervisor identity, then all virtual machines can be updated, but communication loads and congestion increase

Engineering Contradiction:

Improvesoftware update completenessVSAvoidcommunication loads

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The system segments virtual machines by their managing hypervisor identity. The determining portion divides virtual machines into groups based on whether they are managed by the same or different hypervisors, allowing targeted update transfers only to virtual machines managed by different hypervisors. This segmentation eliminates redundant transfers while ensuring all necessary virtual machines receive updates.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The determining portion acts as an intermediary between the transfer portion and virtual machines. It receives information about virtual machine hypervisor management relationships, determines whether a virtual machine is managed by a different hypervisor than the current one, and based on this determination, either permits or blocks the transfer of update files. This intermediary function prevents unnecessary transfers while ensuring complete update coverage.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Adaptability or versatility

If multiple hypervisors are managed separately, then each hypervisor can manage its virtual machines independently, but the number of hypervisors increases and management complexity increases

Engineering Contradiction:

Improvehypervisor independenceVSAvoidnumber of hypervisors

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The determining portion provides a universal function that works across all hypervisors in the system. It handles the determination of hypervisor identity relationships and manages the update distribution logic uniformly, allowing each hypervisor to maintain its independence while participating in a coordinated update process. This universal mechanism reduces overall system complexity despite having multiple hypervisors.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS11836476B2Electronic control unit, software update method, software update program product and electronic control system

Publication Date: 2023.12.05 DENSO CORP

AI summary

An electronic control unit includes: a file acquisition portion that acquires a file to update software; and a storage portion that stores the file. A first virtual machine included in the electronic control unit includes: a determination portion that determines whether a first hypervisor that manages the first virtual machine and a second hypervisor that manages a second virtual machine connected to the first virtual machine are the same; and a transfer portion that transfers the file to the second virtual machine when the determination portion determines that the first hypervisor and the second hypervisor are different from each other.