Vehicle Program Update Fallback Without Stored Limp-Home Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle program update systems face increased costs due to the need for additional memory capacity to store a limp home program for safe vehicle operation when regular updates fail, and they lack efficient methods to ensure safe vehicle control without relying on onboard control devices.
Innovation Solution
A vehicle program update system that determines the normalcy of the updated program and switches to a limp home operation, allowing the vehicle to travel using driving force from a vehicle driving source without onboard control, thereby eliminating the need for a separate limp home program and reducing memory requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a limp home program is stored in the on-board control device to enable safe vehicle operation when updates fail, then vehicle safety is improved, but memory capacity and cost increase
Solution Approach 1:
The patent extracts the limp home program from the on-board control device memory and relocates it to an external server. The on-board control device only stores minimal verification data, while the full limp home program resides externally and can be downloaded when needed. This resolves the contradiction by maintaining vehicle safety functionality while eliminating the need for large memory capacity in the on-board device.
2Reliability
If a limp home program is stored in the on-board control device to enable safe vehicle operation when updates fail, then vehicle safety is improved, but device complexity and cost increase
Solution Approach 1:
The external server serves multiple functions: storing the limp home program, verifying update integrity, and providing download capabilities. This multi-functional approach eliminates the need for dedicated limp home program storage in the on-board device, reducing device complexity while maintaining safety through the universal external infrastructure.
3Quantity of substance
If the vehicle travels without onboard control during limp home operation, then memory requirements are reduced, but control precision and safety monitoring decrease
Solution Approach 1:
The system performs preliminary verification of the update program's integrity using verification data stored in the on-board control device before execution. This preliminary check ensures that only valid, non-corrupted programs are run, maintaining control precision and safety even when the vehicle operates with minimal onboard control during limp home mode.
Data Source
AI summary
A vehicle program update system and a vehicle program update method are provided which update a vehicle program that is used to control a vehicle by an on-board control device mounted on the vehicle to an update program received by the vehicle from an external device separate from the vehicle via wireless communication. When the update of the vehicle program is completed, determination is made whether the updated vehicle program is normal. When determination is made that the updated vehicle program is not normal, control of the vehicle is switched from control that is performed by the on-board control device using the vehicle program to limp home control for performing a limp home operation in which the vehicle travels using a driving force from a vehicle driving force source without being controlled by the on-board control device.