Vehicle Program Update Management via Volatile Storage and Server Intermediaries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current vehicle program update management systems face security risks and inefficiencies, particularly when updating electronic control units via wireless connections, as they lack robust authentication and uniform update management, making it difficult to protect against unauthorized program alterations and ensuring accurate update histories.
Innovation Solution
A vehicle program update management system comprising a first server for managing program configurations, a second server for managing update programs, and a reprogramming terminal that acquires and writes update information, using volatile storage to reduce security risks and enable accurate, efficient updates without storing sensitive information on nonvolatile media.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If update programs and commands are stored in nonvolatile storage units in the reprogramming terminal, then the terminal can retain update information without power, but the security risk of program and command leakage increases
Solution Approach 1:
The patent extracts the sensitive update programs and install commands from the reprogramming terminal's storage and stores them exclusively on secure servers. The terminal only temporarily holds minimal configuration data in volatile memory during the update process, eliminating the security risk of storing sensitive information in nonvolatile storage while maintaining the ability to perform updates.
Solution Approach 2:
The patent introduces servers as intermediaries between the update program source and the reprogramming terminal. The servers act as secure custodians that store the update programs and generate install commands, which are then transmitted to the terminal only when needed. This intermediary architecture eliminates the need for the terminal to store sensitive information permanently.
2Object-affected harmful factors
If update information is stored in volatile storage units only, then security risk is reduced, but the update process requires continuous power supply and cannot retain information without power
Solution Approach 1:
The patent extracts the long-term storage function from the reprogramming terminal and relocates it to secure servers. The terminal's volatile storage is used only for temporary processing during the update operation, while the servers provide persistent secure storage, thus resolving the contradiction between volatility and retention requirements.
3Ease of operation
If program updates are performed wirelessly, then convenience is improved, but uniform update management across multiple control devices becomes difficult
Solution Approach 1:
The patent creates a universal update management system where the first server manages program configurations and the second server manages update programs for multiple control devices. The reprogramming terminal serves as a multi-functional device that can update any control device through wired connection, providing uniform management across all devices while allowing wireless updates where applicable.
Solution Approach 2:
The patent introduces servers as intermediaries that centralize update management. The first server acts as a configuration manager that determines which programs need updating across multiple devices, while the second server acts as a repository that provides update programs to the reprogramming terminal. This intermediary architecture simplifies uniform management regardless of whether individual devices are updated wirelessly or wired.
4Reliability
If authentication is performed outside network range, then security against unauthorized updates is improved, but protection against stolen or altered programs remains difficult
Solution Approach 1:
The patent introduces servers as secure intermediaries that maintain the authentication chain even when the reprogramming terminal operates outside the network range. The first server authenticates the terminal and provides program configuration, while the second server provides authenticated update programs. This intermediary architecture ensures that authentication and program distribution remain secure even when the terminal cannot continuously communicate with the network.
Solution Approach 2:
The patent performs preliminary authentication and program retrieval actions before the actual update process. The reprogramming terminal authenticates with the servers and retrieves the necessary update programs and install commands in advance, storing them temporarily in volatile memory. This preliminary action ensures that authentication is completed while connected, and the authenticated session can then operate offline without risk of unauthorized program substitution.
Data Source
AI summary
A vehicle program update management system includes a first server configured to manage a program configuration which is a combination of a plurality of programs, a second server configured to manage a plurality of update programs for the plurality of programs, and a reprogramming terminal which is a device that is wiredly connected to the plurality of control devices to perform information processing for updating the programs.