OTA Master Coordination for Single- and Dual-Bank ECU Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing software update methods for vehicles with electronic control units (ECUs) having single-bank and dual-bank memories are inefficient due to differing recovery methods, leading to prolonged startup times when updates fail.

Innovation Solution

An OTA master system that receives and controls software updates for both single-bank and dual-bank ECUs based on their memory types, managing the update process to ensure efficient installation and activation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If software update is executed for both single-bank and dual-bank ECUs using the same update process, then update simplicity is maintained, but startup time increases due to different recovery methods required

Engineering Contradiction:
Improveupdate process simplicityVSAvoidstartup time
Core Design Contradiction:
Ease of operationVSLoss of time

Solution Approach 1:

The update process is segmented into distinct sequences for single-bank and dual-bank ECUs. The controller identifies ECU type and applies appropriate update sequences: single-bank ECUs receive installation-only updates while dual-bank ECUs receive installation followed by activation. This segmentation allows each ECU type to undergo optimized updates tailored to its memory architecture, reducing overall startup time while maintaining operational simplicity through automated type identification.

Inventive Principle:
Principle #1Segmentation

2Loss of time

If separate update processes are used for single-bank and dual-bank ECUs, then startup time is reduced through optimized recovery methods, but system complexity increases

Engineering Contradiction:
Improvestartup timeVSAvoidupdate control complexity
Core Design Contradiction:
Loss of timeVSDevice complexity

Solution Approach 1:

The controller acts as an intermediary that automatically identifies ECU memory bank types and routes them to appropriate update sequences. This intermediary function manages the complexity internally while presenting a unified update interface to external systems. The controller examines ECU responses, determines bank configuration, and executes corresponding update protocols, thereby reducing startup time without exposing system complexity to users or external systems.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If update installation and activation are executed simultaneously for all ECUs, then update efficiency is maximized, but reliability decreases due to communication interruptions

Engineering Contradiction:
Improveupdate efficiencyVSAvoidupdate success rate
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system executes update installation as a preliminary action before activation for dual-bank ECUs. The installation phase completes fully, writing update data to memory, before the activation phase begins. This preliminary separation ensures that if communication interruptions occur during installation, the ECU can recover using the previous version stored in the other bank, thereby maintaining reliability while still achieving efficient sequential updates across the vehicle network.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS12461732B2Ota master, system, method, non-transitory storage medium, and vehicle
Publication Date: 2025.11.04 TOYOTA JIDOSHA KK
  • US12461732B2 patent drawing
  • US12461732B2 patent drawing
  • US12461732B2 patent drawing

AI summary

An OTA master includes one or more processors configured to: receive, from a center, first type update data for a first electronic control unit on which a first type non-volatile memory having one storage area is mounted, and second type update data for a second electronic control unit on which a second type non-volatile memory having two storage areas is mounted, the first electronic control unit and the second electronic control unit being included in a plurality of electronic control units mounted on a vehicle; and control software update for a plurality of target electronic control units of which pieces of software are to be updated among the electronic control units mounted on the vehicle, based on the first type update data and the second type update data.