OTA Update Voting Mechanism for Smart Car Control Nodes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In smart transport systems like smart cars, the Over-the-Air (OTA) software update process is unreliable when the master update control node fails, leading to potential update failures and resource wastage due to repeated downloading and installation by multiple backup nodes, which can result in unpredictable risks and inefficiencies.

Innovation Solution

Implementing a voting mechanism among candidate control nodes to determine a replacement for the faulty master update control node, ensuring that only a validated candidate node with sufficient votes takes over, thereby improving reliability and efficiency by avoiding simultaneous actions of multiple backup nodes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple backup master update control nodes are configured to replace the master update control node when it fails, then the reliability of the update control system is improved, but multiple backup nodes may simultaneously initiate update processes leading to resource wastage and unpredictable risks

Engineering Contradiction:
Improveupdate control system reliabilityVSAvoidresource wastage and update conflicts
Core Design Contradiction:
ReliabilityVSObject-generated harmful factors

Solution Approach 1:

The patent implements a feedback mechanism where candidate control nodes exchange voting information through message passing. Each node receives voting results from other nodes and adjusts its behavior accordingly. When a node receives voting information indicating another node will become the new master, it aborts its own update process, preventing conflicts and resource wastage while maintaining system reliability.

Inventive Principle:
Principle #23Feedback

2Device complexity

If a single backup master update control node is configured, then the system structure is simple, but the update process cannot proceed if both the master and the single backup node are faulty

Engineering Contradiction:
Improvebackup node configuration complexityVSAvoidupdate control availability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent segments the backup functionality into multiple independent candidate control nodes instead of using a single backup node. Each candidate node has equal capability to become the master update control node. This segmentation increases system reliability by ensuring that if one candidate fails, other candidates remain available, while the voting mechanism maintains manageable complexity by coordinating their behavior.

Inventive Principle:
Principle #1Segmentation

3Reliability

If multiple candidate control nodes participate in the voting process, then the reliability of master node selection is improved, but the communication overhead and time required for voting increases

Engineering Contradiction:
Improvemaster node selection reliabilityVSAvoidvoting process time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by having candidate control nodes proactively send voting information to all other candidate nodes simultaneously when the master node fails. This allows the voting process to occur in parallel rather than sequentially, reducing the total time required. The mechanism also includes timeout and abort logic that limits the maximum voting time, preventing excessive delays while maintaining reliable selection through multiple candidate participation.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4180947B1Software upgrading method, apparatus, and system
Publication Date: 2024.10.30 YINWANG INTELLIGENT TECHNOLOGIES CO LTD
  • EP4180947B1 patent drawingFigure 1
  • EP4180947B1 patent drawingFigure 2
  • EP4180947B1 patent drawingFigure 3

AI summary

This application provides a software update method and apparatus, and an electronic system, applied to a smart car and an Internet of Vehicles system. The method includes: A first candidate control node sends at least one piece of first voting information. Each piece of first voting information includes an identifier of one candidate control node. The first candidate control node receives at least one piece of second voting information. Each piece of second voting information includes an identifier of one candidate control node. The first candidate control node determines, based on the identifier that is of the candidate control node and that is included in the second voting information, a candidate control node that replaces a master update control node to control slave update control nodes. Therefore, a plurality of candidate control nodes can be avoided from replacing the master update control node at the same time, and reliability and efficiency of software update can be improved. Especially for a smart transport means such as a smart car, it is very important to improve reliability and efficiency of whole vehicle update.