Vehicle Lamp OTA Rollback for Safe Light Distribution Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

OTA software updates for vehicle lamp light distribution control can result in unintended incomplete light distribution patterns if the update fails, posing a risk to vehicle safety.

Innovation Solution

A vehicle system with an update control unit and a restriction unit that manages light distribution control program updates via wireless communication, including a storage unit to revert to a previous or predetermined state in case of update failure, ensuring safe and stable light distribution.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If OTA update is performed for light distribution control program, then software functionality is improved, but system reliability deteriorates due to potential update failure causing unintended light distribution patterns

Engineering Contradiction:

Improvesoftware update capabilityVSAvoidlight distribution control reliability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary actions by acquiring backup data before the OTA update and preparing restriction rules in advance. This ensures that if the update fails, the system can revert to the previous stable state or apply safety restrictions, thus maintaining reliability while enabling software updates.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system provides a safety cushion by storing backup data and establishing restriction rules beforehand. This cushioning mechanism protects against update failures by enabling rollback to previous versions or limiting functionality to safe operating modes, preventing unintended light distribution patterns.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

2Reliability

If light distribution control is restricted after update failure, then safety is improved, but operational functionality deteriorates

Engineering Contradiction:

Improvevehicle safetyVSAvoidlight distribution control functionality

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The system applies partial restriction rather than complete shutdown. By selectively restricting only the potentially unsafe updated functions while allowing other light distribution operations to continue, the system maintains adequate functionality while ensuring safety. This partial action approach balances safety requirements with operational needs.

Inventive Principle:

Principle #16Partial or excessive action

3Reliability

If backup data is stored for rollback, then reliability is improved, but storage requirements and system complexity increase

Engineering Contradiction:

Improveupdate failure recoveryVSAvoiddata management complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system extracts only the essential backup data needed for rollback - specifically the previous version of the light distribution control program - rather than storing complete system images. This selective extraction reduces storage requirements and simplifies data management while still providing reliable recovery capability.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS20240419431A1Vehicle system

Publication Date: 2024.12.19 KOITO MFG CO LTD

AI summary

A vehicle system includes a controller configured to control update of a light distribution control program, using update data acquired via wireless communication, perform light distribution control of a vehicle lamp based on the light distribution control program, and in a case where the update of the light distribution control program using the update data is failed, light distribution control performed by the controller.