Vehicle Control Module Over-the-Air Update Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for updating vehicle software require vehicles to be driven to a dealership, where technicians manually apply updates, which is inefficient and limits the frequency and convenience of software updates for vehicle components.

Innovation Solution

A method and system for updating vehicle controls that involves receiving, installing, and checking control updates in a vehicle module, allowing the module to operate with the new updates without restarting the vehicle, and including error checking to ensure validity and compatibility, with the ability to download updates using a portable device connected to the vehicle's network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual software updates are applied at a dealership, then software update reliability is ensured, but update time and convenience deteriorate

Engineering Contradiction:
Improvesoftware update reliabilityVSAvoidupdate time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The vehicle's control module automatically performs software updates by receiving control updates from a portable device, installing them in a second memory location, and executing them without requiring technician intervention. This self-service approach eliminates the need for dealership visits while maintaining update reliability through automated validation and error checking mechanisms.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system performs preliminary error checking and validation of control updates before installation by checking the control update at the first memory location for validity. This preliminary action ensures that only valid updates are installed and executed, maintaining reliability while enabling automated updates that reduce time loss.

Inventive Principle:
Principle #10Preliminary action

2Productivity

If control updates are immediately activated, then productivity is improved, but system stability may deteriorate

Engineering Contradiction:
Improveupdate application speedVSAvoidsystem stability
Core Design Contradiction:
ProductivityVSStability of the object's composition

Solution Approach 1:

The control module performs preliminary error checking and validation of the control update at the first memory location before activating it in the second memory location. This preliminary validation ensures that only verified updates are activated, maintaining system stability while enabling rapid update deployment.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system implements feedback through error checking mechanisms that validate control updates before and during activation. If errors are detected, the system can prevent activation or roll back changes, providing feedback that maintains stability while allowing productive update application when updates are valid.

Inventive Principle:
Principle #23Feedback

3Reliability

If error checking is performed on control updates, then reliability is improved, but device complexity increases

Engineering Contradiction:
Improveupdate validityVSAvoidchecking mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The control module performs self-validation by automatically checking control updates for errors using integrated error checking mechanisms. This self-service approach improves reliability through comprehensive validation without requiring external complexity, as the checking functionality is built into the control module itself.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The error checking functionality is merged with the control module's existing memory and processing capabilities. The first and second memory locations are integrated within the same control module, combining storage and validation functions in a single component, which improves reliability without proportionally increasing overall device complexity.

Inventive Principle:
Principle #5Merging (Combining)

4Ease of operation

If updates are applied without restarting the vehicle, then convenience is improved, but measurement precision of update application may deteriorate

Engineering Contradiction:
Improveupdate convenienceVSAvoidupdate application accuracy
Core Design Contradiction:
Ease of operationVSMeasurement precision

Solution Approach 1:

The control module automatically manages the update application process without requiring vehicle restart or technician intervention. It receives updates from a portable device, installs them in a separate memory location, performs error checking, and activates them seamlessly, improving convenience while maintaining precision through automated validation mechanisms.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The memory system is segmented into a first memory location for storing received control updates and a second memory location for installing and executing updates. This segmentation allows updates to be applied without restarting the vehicle, as the control module can switch between memory locations seamlessly, improving convenience while maintaining update application precision.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9841970B2Vehicle control update methods and systems
Publication Date: 2017.12.12 FORD GLOBAL TECH LLC
  • US9841970B2 patent drawing
  • US9841970B2 patent drawing
  • US9841970B2 patent drawing

AI summary

A vehicle can include methods and systems to update controls in vehicle modules. The systems and methods can include receiving a control update for a receiving vehicle module to be stored at a first memory location, installing the received controls at the first memory location, running the module using controls at a second memory location, checking the controls at the first memory location, if checking is valid, operating the vehicle module using the controls at the first memory location in place of the controls at the second memory location. The vehicle module can operate the controls at the first memory location without waiting to restart the vehicle or can delay use of the controls until a later event, e.g., restart or download to other vehicle modules on which the current module may depend.