Vehicle Memory Repartitioning for Safe Software Updates

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for re-partitioning vehicle controller memory can lead to corrupted data due to incorrect processes, and software updates transmitted wirelessly may become corrupt or modify memory partitions, risking data loss or corruption.

Innovation Solution

A control system that receives a software update package with partition validation data, compares it with current memory distribution data, and only repartitions the memory if the data matches, ensuring the update is safe and compatible, thereby preventing corruption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Extent of automation

If software updates are performed manually by connecting a terminal device to a server, then update functionality can be achieved, but the process requires user operation and cannot execute automatically

Engineering Contradiction:
Improveautomatic update executionVSAvoiduser operation requirement
Core Design Contradiction:
Extent of automationVSEase of operation

Solution Approach 1:

The vehicle terminal device automatically performs software updates by independently connecting to the server, receiving update packages, and executing installation without requiring user initiation or operation. The system self-manages the entire update process including connection establishment, package reception, and installation execution.

Inventive Principle:
Principle #25Self-service

2Reliability

If the vehicle terminal device maintains continuous connection capability with the server, then update availability is improved, but power consumption increases when the device is in sleep mode

Engineering Contradiction:
Improveupdate availabilityVSAvoidpower consumption in sleep mode
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The vehicle terminal device operates in periodic cycles, alternating between sleep mode and active communication mode. The device wakes up at scheduled intervals to check for update packages, maintains connection capability through periodic communication, and returns to sleep mode to conserve power, thus balancing update availability with energy conservation.

Inventive Principle:
Principle #19Periodic action

3Productivity

If update packages are stored in the vehicle terminal device, then update speed is improved, but device complexity increases due to additional storage requirements

Engineering Contradiction:
Improveupdate installation speedVSAvoidstorage system complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The update package storage function is segmented between the vehicle terminal device and the server. The device maintains only minimal local storage capability for receiving and installing updates, while the server maintains the primary update repository. This segmentation allows fast local installation when updates are received while avoiding the complexity of maintaining a complete local update database.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentEP4115279B1Software update process on a vehicle
Publication Date: 2026.05.06 JAGUAR LAND ROVER LTD
  • EP4115279B1 patent drawingFigure 1
  • EP4115279B1 patent drawingFigure 2
  • EP4115279B1 patent drawingFigure 3

AI summary

Aspects of the present invention relate to a control system (12) for a vehicle (10), the control system (12) comprising one or more controllers (20) configured to access at least one partitioned memory (22). The control system (12) is configured to: receive a software update package (16), the software update package (16) comprising partition validation data and partition distribution data; determine a current partition distribution data of the memory (22); compare the current partition distribution data with the partition validation data; and repartition the memory (22) in dependence on the received partition distribution data if the current partition distribution data matches the partition validation data.