Software Update Server Defect Prohibition Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In software update systems, there is a risk of defects in new software being applied to vehicles, which can lead to unforeseen issues, and existing systems lack a mechanism to immediately suppress the application of defective software.
Innovation Solution
A software update server system that includes a storage device for campaign information specifying target vehicles and update software, along with accompanying information indicating defects, and an execution device that prohibits the update process when defects are detected, ensuring that defective software is not applied to vehicles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the update process is allowed to proceed without defect checking, then software updates can be applied efficiently to vehicles, but defective software may be applied causing system failures
Solution Approach 1:
The system performs preliminary defect checking on update software before allowing the update process to proceed. The execution device checks whether the update software has a defect before applying it to the vehicle, preventing defective software from being installed. This preliminary action ensures safety without requiring complex real-time monitoring during the update process.
2Reliability
If defect checking is implemented in the update system, then defective software can be prevented from being applied, but the system complexity increases
Solution Approach 1:
The execution device serves as an intermediary between the update software and the vehicle system. It mediates the update process by checking for defects and controlling whether the update software is applied to the target ECU. This intermediary approach centralizes the defect checking function, avoiding the need for complex distributed verification across multiple system components.
3Reliability
If the update process is prohibited when defects are detected, then vehicle safety is ensured, but update productivity decreases
Solution Approach 1:
The defect checking function is extracted as a separate, dedicated process within the execution device. This allows the system to efficiently check for defects without embedding complex verification logic throughout the entire update system. When no defects are found, updates proceed smoothly; when defects are detected, only the specific defective update is blocked, not the entire update process.
Data Source
AI summary
A software update server includes an execution device and a storage device. The storage device stores campaign information including information specifying a target vehicle for a software update process, and information specifying update software to be applied to a control device mounted on the target vehicle. The storage device stores accompanying information indicating whether there is a defect in the update software itself for each piece of the update software. The execution device stores the accompanying information in the storage device based on an input from outside. When the accompanying information indicates that there is a defect in the update software itself, the execution device prohibits the update process according to the campaign information for the campaign information specifying the update software having a defect.