Vehicle Software Update Center Detecting Unauthorized Version Changes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software update systems for vehicles cannot reliably distinguish between software version changes caused by authorized updates and unauthorized rewriting, leading to potential unrecognized changes in electronic control units.
Innovation Solution
A center system that communicates with vehicles, stores update records, and determines if the current software version matches the last recorded update, transmitting error notifications and disabling update data distribution if it does not, while inquiring about version changes and enabling distribution when instructed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the center distributes update data to vehicles, then software updates are performed, but unauthorized software changes cannot be detected
Solution Approach 1:
The center stores the software version information before the update is performed (pre-update version) and compares it with the version after update (post-update version) to detect any unauthorized changes. This preliminary recording of version information enables detection of unauthorized modifications that occur during or after the update process.
Solution Approach 2:
The system implements a feedback mechanism where the center receives software version information from vehicles, compares it with recorded pre-update versions, and notifies vehicles of unauthorized changes. This closed-loop feedback ensures that any deviation from authorized updates is detected and communicated back to the system.
2Reliability
If the center monitors software versions, then unauthorized changes are detected, but update distribution is interrupted
Solution Approach 1:
The center performs version comparison for all vehicles but only interrupts update distribution for those with detected unauthorized changes. This partial application of the monitoring action maintains high overall update distribution efficiency while ensuring security for affected vehicles.
Solution Approach 2:
The system applies different treatment to different vehicles based on their specific version comparison results. Vehicles with matching versions receive normal update distribution, while vehicles with version mismatches have their updates interrupted. This localized quality control optimizes overall system productivity while maintaining security.
Data Source
AI summary
A center configured to communicate with a vehicle includes one or more processors. The processors are configured to store an update record of software of an electronic control unit mounted on the vehicle. The processors are configured to receive a current version of the software of the electronic control unit from the vehicle. The processors are configured to determine whether the received current version agrees with a version of a last update recorded in the update record. The processors are configured to transmit an error notification to the vehicle when the processors determine that the received current version does not agree with the version of the last update.