Vehicle Program Update Control via Operating Condition Assessment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional program update techniques for vehicle control devices expose the vehicle to security risks during updates, as they require the engine to be stopped, disabling security measures like theft prevention and allowing potential incorrect operations.
Innovation Solution
A program update control system and method that assess the vehicle's operating conditions to update security programs in ECUs only when it is safe, ensuring the vehicle remains secure by transferring and executing updates during appropriate conditions, such as when the vehicle is stopped.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If the engine is stopped to update the security program, then the program update can be performed, but the security measures (theft prevention device) do not function and the vehicle is exposed to security risk
Solution Approach 1:
The system performs preliminary assessment of vehicle operating conditions before initiating program update. The control device determines whether the vehicle is in a safe state for update (stopped or parked with security measures active) before transferring the updated program, preventing updates during unsafe operating conditions
Solution Approach 2:
The control device continuously monitors vehicle operating conditions and provides feedback to determine appropriate update timing. By assessing real-time vehicle state (stopped, moving, security status), the system dynamically decides whether to proceed with program update, ensuring security requirements are met
2Reliability
If the security program is updated when the vehicle is moving, then security risk is avoided, but the update cannot be performed safely
Solution Approach 1:
The system evaluates vehicle operating conditions in advance before initiating update. By checking whether the vehicle is stopped or in a safe parked state before transferring the program, the system ensures updates are prepared only when safety conditions are met, avoiding attempts to update during unsafe conditions
Solution Approach 2:
The system dynamically adapts update execution based on real-time vehicle operating conditions. The control device adjusts update availability and timing according to vehicle state (moving, stopped, parked), making the update capability flexible rather than fixed, allowing updates to proceed when conditions permit
Data Source
AI summary
A first control device includes a data processing controller that generates and transfers information indicating a current operating condition of the first control device and information indicating a current operating condition of a vehicle, and transfers a most recent version of a security program, to which the program is to be updated, to a second control device, while the second control device, having received the most recent version of the security program from the first control device, specifies the current operating condition of the vehicle on the basis of the information obtained from the first control device, and when the specified current operating condition matches a vehicle operating condition in which processing for updating the program to the most recent version of the security program is possible, executes processing for updating the program to the most recent version of the security program.