Vehicle OTA Update Control for Defective Package Avoidance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In over-the-air (OTA) software updates for vehicles, important software packages can be delayed due to defects in campaign data, leading to concerns about the timely application of high-priority updates.
Innovation Solution
A system comprising a center and an OTA master that communicates via a network to distribute campaign data, determines defects, and transmits application avoidance instructions to prevent the application of defective packages, ensuring timely and safe application of high-priority updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the distribution of campaign data is stopped when a defect is found, then the reliability of the update process is improved, but the productivity of distributing important update software is worsened
Solution Approach 1:
The campaign data is segmented into individual package data units, allowing the system to identify and isolate defective packages while continuing to distribute non-defective ones. This segmentation enables selective distribution based on defect status, resolving the contradiction between stopping all distributions for reliability and continuing important updates for productivity.
Solution Approach 2:
The system applies different quality control measures to different packages within the same campaign data. Non-defective packages receive standard distribution treatment while defective packages are flagged with defect information and excluded from distribution. This local quality differentiation allows important non-defective packages to be distributed promptly while maintaining overall update reliability.
2Reliability
If all package data in campaign data is withheld due to a defect in one package, then the reliability of the update system is improved, but the loss of time for applying important updates is worsened
Solution Approach 1:
The system performs preliminary defect detection and classification before distribution, tagging each package data unit with its defect status. This preliminary action allows the distribution system to immediately identify and distribute non-defective packages without waiting for complete verification, reducing time loss while maintaining reliability through pre-established defect checking mechanisms.
Solution Approach 2:
The system implements feedback mechanisms where defect information is continuously monitored and used to dynamically adjust distribution decisions. When defects are detected in specific packages, the feedback loop enables the system to exclude only those affected packages while continuing distribution of unaffected packages, preventing time loss for important updates while maintaining system reliability.
Data Source
AI summary
A center includes one or more processors configured to: distribute, to an OTA master, campaign data including one or more pieces of package data, each of which includes one or more pieces of update software of one or more target ECUs included in a vehicle; determine, after distributing the campaign data, whether a defect involved in an update of the one or more target ECUs is found in the one or more pieces of package data included in the campaign data; and transmit, when determining that the defect is found, an application avoidance instruction to the vehicle to which the campaign data is to be applied via the network, the application avoidance instruction instructing the OTA master not to apply a piece of package data in which the defect is found at a timing of applying the campaign data.