Remote Approval Server for Autonomous Vehicle Software Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Automatic driving vehicles lack a reliable method to determine whether it is safe to start traveling after a control program update, as there is no driver present to verify the changes.
Innovation Solution
A server system that monitors and communicates with automatic driving vehicles, allowing remote monitoring personnel to review and approve the changes to the control program before permitting the vehicle to start traveling, ensuring safety and proper operation post-update.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a control program is updated for an automatic driving vehicle, then the vehicle's functionality and performance are improved, but the safety and reliability of vehicle operation cannot be ensured without a driver present to verify changes
Solution Approach 1:
A server acts as an intermediary between the control program update source and the automatic driving vehicle. The server receives update information, presents it to remote monitoring personnel for approval, and only after approval transmits the updated control program to the vehicle. This intermediary mechanism ensures that updates are verified before implementation, maintaining operational safety.
Solution Approach 2:
The system performs preliminary verification of control program updates by presenting update information to remote monitoring personnel before the actual update is applied to the vehicle. This advance review allows potential issues to be identified and resolved before they affect vehicle operation, ensuring reliability.
2Reliability
If remote monitoring personnel are introduced to approve control program updates, then operation safety is ensured, but system complexity increases
Solution Approach 1:
The server serves as a centralized intermediary that manages the entire update approval process. Rather than distributing complexity across multiple systems, the server consolidates functions for receiving updates, presenting them to monitoring personnel, obtaining approval, and transmitting approved updates to vehicles, thereby managing complexity centrally.
Solution Approach 2:
The server performs multiple functions within a single system: it receives control program updates, presents update information to remote monitoring personnel, manages approval decisions, and transmits approved updates to vehicles. This multi-functionality reduces overall system complexity by consolidating what could be separate distributed systems into one universal platform.
Data Source
AI summary
A vehicle that is an automatic driving vehicle acquires a control program for an ECU from a control center by wireless communication. A server includes a keyboard and mouse to accept handling by a remote monitoring person that monitors the vehicle from the outside of the vehicle, a display to present information to the remote monitoring person, a communication IF configured to communicate with the vehicle, and a processor. The processor controls the display such that the server presents the change content of the control program to the remote monitoring person, when the control program for the vehicle has been updated. The processor controls the communication IF such that a notice of permission of traveling is given to the vehicle, when the keyboard and the mouse have accepted a remote monitoring person's handling for permitting the vehicle to travel in accordance with the control program after the update.