Vehicle OTA Update Verification via ECU Configuration Matching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current vehicle information communication systems lack an efficient method for over-the-air (OTA) updating of electronic control unit (ECU) software, particularly in ensuring that only approved configurations and necessary updates are distributed to vehicles, which can lead to compatibility issues and improper vehicle operation.

Innovation Solution

A vehicle information communication system comprising a center apparatus and vehicle apparatus, where the center apparatus includes an approved-configuration database and an update database, enabling wireless communication to determine if received ECU configuration information matches approved settings and if software updates are available, and sends updates only when both conditions are met.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If OTA update is implemented without configuration verification, then update speed is improved, but system reliability deteriorates due to compatibility issues

Engineering Contradiction:
Improveupdate speedVSAvoidsystem reliability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The center computer performs preliminary verification of ECU configuration information against approved configuration information in the approved-configuration DB before initiating the update process. This preliminary action ensures that only vehicles with approved configurations receive updates, preventing compatibility issues while maintaining efficient OTA updates.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If configuration verification is performed for all vehicles, then system reliability is improved, but processing time increases

Engineering Contradiction:
Improvesystem reliabilityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs configuration verification selectively - only for vehicles that require updates or have unverified configurations. The center computer checks whether software update data exists in the update DB and only verifies configurations for vehicles that need updates, avoiding unnecessary processing time for vehicles that are already up-to-date or don't require verification.

Inventive Principle:
Principle #16Partial or excessive action

3Productivity

If all ECUs are updated simultaneously, then update efficiency is improved, but system complexity increases due to coordination requirements

Engineering Contradiction:
Improveupdate efficiencyVSAvoidcoordination complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system segments the update process into distinct phases: configuration verification phase, update data retrieval phase, and update execution phase. The center computer handles verification for multiple vehicles independently, then coordinates updates based on individual vehicle status, reducing overall coordination complexity while maintaining efficient batch processing.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11579865B2Vehicle information communication system
Publication Date: 2023.02.14 DENSO CORP
  • US11579865B2 patent drawing
  • US11579865B2 patent drawing
  • US11579865B2 patent drawing

AI summary

A vehicle information communication system includes a center apparatus and a vehicle apparatus that includes a group of electronic control units (ECUs) and that sends vehicle configuration information including configuration information on the group of ECUs mounted in the vehicle to the center apparatus via wireless communications. The center apparatus performs a first determination of whether the vehicle configuration information received from the vehicle apparatus matches approved-configuration information registered in an approved-configuration database, and performs a second determination of whether software update data for at least one ECU of the group of ECUs mounted in the vehicle exists in an update database. When both the first and second determinations are true, the center apparatus sends the software update data for at least one ECU of the group of ECUs mounted in the vehicle to the vehicle apparatus via the wireless communications.