Power Distribution Board Firmware Update via Segmented Boot
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing firmware update mechanisms for power distribution boards in autonomous vehicles face challenges due to their mutually dependent relationship with computers, where updates can potentially disrupt power supply, leading to unrecoverable situations if faulty firmware is installed.
Innovation Solution
The implementation of different boot procedures, such as warm and cold boot procedures, allows for firmware updates on power distribution boards without interrupting power supply, ensuring that the system can revert to a proven image if the update fails, thereby preventing system shutdowns and ensuring recovery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If firmware update is performed on power distribution board, then firmware can be updated to improve functionality, but power supply may be disrupted causing system failure
Solution Approach 1:
The firmware is segmented into multiple images (first firmware image and second firmware image) stored in separate regions of the flash memory. The system switches between these segmented firmware images using different boot procedures, allowing update without disrupting power supply to downstream devices.
Solution Approach 2:
The new firmware image is prepared and validated in advance before being activated. The system performs validation checks on the new firmware image before switching boot procedures, ensuring that the update process does not compromise power supply reliability.
2Device complexity
If traditional boot procedure is used during firmware update, then update process is simple, but system may enter unrecoverable state
Solution Approach 1:
The boot procedure is made dynamic by detecting the power state of downstream devices and selecting appropriate boot modes (first boot procedure or second boot procedure). This dynamic adaptation allows the system to maintain recoverability while managing update complexity.
Solution Approach 2:
A state machine is introduced as an intermediary to manage the firmware update process. The state machine coordinates between the computer, power distribution board, and firmware images, ensuring that transitions between firmware versions are controlled and reversible.
3Extent of automation
If power distribution board controls power to computer providing firmware update, then power management is integrated, but update process becomes vulnerable to power interruption
Solution Approach 1:
The system implements feedback mechanisms where the power distribution board monitors the power state of downstream devices and adjusts its behavior accordingly. During firmware updates, the system receives feedback about power status and selectively applies boot procedures to maintain update reliability.
Solution Approach 2:
The system prepares backup firmware images and maintains proven good images as a cushion against update failures. Before attempting an update, the system ensures a valid firmware image is available, providing a safety buffer that prevents unrecoverable states.
Data Source
AI summary
The disclosed technology relates to solutions for improving a firmware update mechanism and in particular, for improving a firmware update mechanism of a power distribution board by utilizing different boot procedures. A process of the disclosed technology can include steps for receiving, at a microcontroller, a firmware update, wherein the firmware update is transmitted by a computer powered by a power distribution board associated with the microcontroller, initiating, by the microcontroller, a warm boot procedure using the firmware update, and marking the warm boot procedure as successful if a message received from the computer indicates that the firmware update is successful. In some aspects, the process can further include steps for determining a power reset of the computer, initiating, by the microcontroller, a cold boot procedure using the firmware update, and marking the firmware update as proven if the message from the computer indicates that the firmware update is successful. Systems and machine-readable media are also provided.