Vehicle OTA Update Approval Using In-Vehicle Reply Priority
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software update systems using Over The Air (OTA) technology face challenges in ensuring user convenience by preventing erroneous operations, particularly when using portable terminals, and ensuring updates are only executed when desired by the user.
Innovation Solution
A system that requests and validates replies from both an in-vehicle terminal and a portable terminal, invalidating the portable terminal's reply if both respond, prioritizing the in-vehicle terminal's response to ensure the update process aligns with user intent.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the HMI for making the reply is limited to the in-vehicle terminal, then erroneous operations are reduced, but the user cannot make the reply using OTA technology when the vehicle is not on the vehicle
Solution Approach 1:
The system dynamically switches between two terminal configurations: using both in-vehicle terminal and portable terminal when the vehicle is stationary, and using only the in-vehicle terminal when the vehicle is moving. This dynamic adaptation resolves the contradiction by adjusting the HMI configuration based on the vehicle's operational state, ensuring both reliability and convenience are optimized for each scenario.
2Ease of operation
If the portable terminal is used for making the reply, then user convenience is improved, but erroneous operations may occur
Solution Approach 1:
The in-vehicle terminal acts as an intermediary that validates and confirms user intent before executing software updates. When the portable terminal is used for convenience, the in-vehicle terminal serves as a secondary verification layer that prevents erroneous operations by requiring confirmation through the more reliable in-vehicle interface.
3Ease of operation
If both terminals are used for reply, then user convenience is maximized, but determining which reply to validate becomes complex
Solution Approach 1:
The system applies asymmetric validation rules to the two terminals: the in-vehicle terminal's reply is given priority and considered the authoritative source for validation, while the portable terminal's reply serves as a supplementary convenience option. This asymmetric approach simplifies the validation logic by establishing a clear hierarchy rather than requiring complex equivalence checking between both terminals.
Data Source
AI summary
A server includes one or more processors configured to: make a request of a first terminal and a second terminal for a reply as to whether to approve a process related to update of software for a control device mounted on a vehicle, the first terminal being a terminal mounted on the vehicle, and the second terminal being a terminal to be carried by a user of the vehicle; and when receiving both the reply from the first terminal and the reply from the second terminal as a response to the request, invalidate the reply from the second terminal and validate the reply from the first terminal.