Vehicle Software Update Scheduling for Safe Staged Rollout

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing software update technologies fail to ensure safety and efficiency in updating software programs, particularly in high-frequency use scenarios like vehicle automation, due to inadequate defect recognition and limited update timing opportunities.

Innovation Solution

An information processing system that updates software for each processing unit of a moving apparatus, prioritizing updates in vehicles with lower risk scenarios and confirming safety before distributing to other vehicles, using a server to manage and relearn software updates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the update SW is distributed after sufficient development to eliminate all defects, then the safety is improved, but the distribution time is delayed and the update cannot be implemented timely

Engineering Contradiction:
ImprovesafetyVSAvoiddistribution time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the software update process into multiple phases: initial distribution to a first group of vehicles for defect detection, and subsequent distribution to a second group after verification. This segmentation allows parallel processing of safety verification and update distribution, resolving the contradiction between ensuring safety and reducing distribution time.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary defect detection by distributing the update SW to a first group of vehicles before widespread distribution. This preliminary action identifies potential defects early, enabling safe distribution to the second group without requiring complete development verification, thus reducing overall distribution time while maintaining safety.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If the update is performed at stop timing in high-frequency use vehicles, then the safety is improved, but the update opportunities are extremely limited

Engineering Contradiction:
ImprovesafetyVSAvoidupdate frequency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent divides the vehicle fleet into two groups: a first group used for safety verification during stop timing, and a second group that receives updates without strict timing constraints. This segmentation enables continuous update propagation across the entire fleet while maintaining safety through the first group's verification process.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The first group of vehicles acts as an intermediary between the update development phase and the second group's update implementation. By verifying defects in the first group before distributing to the second group, the system enables more frequent updates overall while maintaining safety through this intermediary verification layer.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If the update SW is distributed to all vehicles simultaneously, then the productivity is improved, but the risk of widespread defects increases

Engineering Contradiction:
Improveupdate speedVSAvoiddefect risk
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent segments the distribution process into two sequential phases: first distributing to a first group for defect detection, then distributing to a second group after verification. This segmented approach maintains high overall productivity by enabling parallel defect detection and continued operation in the second group, while reducing defect risk through the verification buffer.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent creates a cushioning buffer by distributing the update SW to a first group before widespread distribution to the second group. This beforehand cushioning allows defect detection and mitigation to occur in the first group, preventing potential widespread defects while maintaining high productivity through the staged rollout approach.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentEP4177734B1Information processing device, information processing method, information processing system, and program
Publication Date: 2025.11.26 SONY GROUP CORP
  • EP4177734B1 patent drawingFigure 1
  • EP4177734B1 patent drawingFigure 2
  • EP4177734B1 patent drawingFigure 3

AI summary

The present disclosure relates to an information processing apparatus, an information processing method, an information processing system, and a program that enable update of an SW to be quickly and safely implemented. When the software program (SW) is updated, the SW is updated at a timing at which the SW does not operate in a plurality of processing units constituting the SW, so that the SW is updated without stopping the entire operation of the SW. The present disclosure can be applied to an automated driving technology.