Vehicle Runtime Environment Updates With Version-Synchronized Coordination

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for updating multiple runtime environments in a motor vehicle face challenges in maintaining version synchronization and avoiding conflicts due to different update mechanisms and protocols, leading to difficulties in providing consistent software versions across environments.

Innovation Solution

A method involving local update modules within each runtime environment accessing environment-specific update data sources, coordinated by a central control module, ensures version-synchronized updates by using in-vehicle server modules to manage and distribute update data packages, decoupling from external sources and ensuring coordinated software versions across all environments.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If each runtime environment uses its own local update module with different update mechanisms and protocols, then each environment can be updated independently, but version synchronization between environments becomes difficult to maintain

Engineering Contradiction:
ImproveIndependent update capabilityVSAvoidVersion synchronization
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

A central control module is introduced as an intermediary between external update sources and individual runtime environments. This mediator receives update information, determines version compatibility across environments, and coordinates updates to maintain synchronization. The central control module acts as a traffic controller that manages the flow of update data while ensuring version consistency.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The central control module serves multiple functions: it receives update information from external sources, determines compatibility across different runtime environments, distributes update data to appropriate environments, and monitors update status. This multi-functional approach consolidates what would otherwise require separate mechanisms in each environment.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If a single centralized update source is used for all runtime environments, then version consistency can be maintained, but the complexity of managing different update mechanisms increases

Engineering Contradiction:
ImproveVersion consistencyVSAvoidUpdate management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The update management system is segmented into hierarchical levels: a central control module that handles high-level coordination and compatibility determination, and local update modules in each runtime environment that handle execution. This segmentation allows the complex compatibility checking to be centralized while keeping individual environment updates simple and modular.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Instead of having each runtime environment independently determine its own update compatibility (bottom-up approach), the system inverts the approach by having the central control module determine compatibility for all environments (top-down approach). This reversal simplifies the complexity by centralizing the decision-making logic.

Inventive Principle:
Principle #13The other way round (Inversion)

3Productivity

If update data packages are distributed separately to each control unit, then each unit can be updated independently, but ensuring coordinated software versions across all environments becomes difficult

Engineering Contradiction:
ImproveUpdate distribution efficiencyVSAvoidSoftware version coordination
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The central control module implements a feedback mechanism where it receives update status information from individual runtime environments and uses this information to coordinate subsequent updates. This feedback loop ensures that version coordination is maintained while allowing independent update execution, as the central module can adjust distribution based on current system state.

Inventive Principle:
Principle #23Feedback

4Adaptability or versatility

If runtime environments are customized to access specific update data sources, then each environment can use its preferred update protocol, but the system loses flexibility in using standard update mechanisms

Engineering Contradiction:
ImproveProtocol compatibilityVSAvoidUpdate mechanism standardization
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The central control module serves as a protocol translation intermediary. It receives update information from external sources using various protocols, standardizes the information internally, and distributes it to runtime environments. This mediator approach allows the system to support multiple protocols externally while maintaining standardized internal operations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP4476611B1Method for operating a motor vehicle in order to coordinate software updates in a plurality of runtime environments, and correspondingly operable motor vehicle
Publication Date: 2025.12.31 CARIAD SE
  • EP4476611B1 patent drawingFigure 1
  • EP4476611B1 patent drawingFigure 2

AI summary

The invention relates to a method for operating a motor vehicle (10), wherein in the motor vehicle (10), in each of a plurality of runtime environments (16) which interact with one another and which are installed altogether jointly in one control device (13, 15) or in a manner distributed among a plurality of control devices (13, 15), an associated local update module (17) is operated, which downloads an update data packet of an associated new software version from an associated environment-specific update data source for the associated runtime environment (16) and thus implements a local update routine in the runtime environment (16) and, if a predetermined check routine (33) signals error-free implementation of the associated update routine, the associated runtime environment (16) is put into operation with the new software version. The invention provides for a plurality of different server modules (23) provided in the motor vehicle (10) to download, from a vehicle-external data source, update data packets for one of the runtime environments (16) to which the server module is assigned, and for the relevant server module (23) to be operated as a vehicle-internal update data source for the relevantly assigned runtime environment (16).