Vehicle Software Update Staging for Low-Downtime Activation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for updating digital systems in vehicles are inefficient, often requiring the vehicle to be stationary and taking a long time, and are prone to interruptions due to anomalies and communication breaks, leading to unacceptably long downtime and potential behavioral changes during updates.
Innovation Solution
A method that involves a client computer downloading an update file when the electrical energy accumulator is rechargeable, distributing and installing it without needing continuous connection to the remote server, and activating the update only when the vehicle is stopped, using a gateway computer to manage tasks and keep the monitor-control unit available for its primary functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the vehicle is stopped to perform the update, then the reliability of the update process is improved, but the loss of time increases
Solution Approach 1:
The update file is downloaded in advance to the onboard client computer when the vehicle is moving and the accumulator is recharging, so that the actual update installation can be performed quickly when the vehicle is stopped, reducing overall unavailability time while maintaining reliability
Solution Approach 2:
The update process is divided into separate stages: download phase (during vehicle movement), installation phase (during vehicle stop), and activation phase (after stop). This segmentation allows the time-consuming download to occur during movement, minimizing the impact on vehicle availability
2Loss of time
If the update is performed while the vehicle is moving, then the loss of time is reduced, but the reliability deteriorates due to potential anomalies and communication breaks
Solution Approach 1:
The complete update file is downloaded in advance to the onboard client computer before the vehicle stops, so that the critical installation phase can be performed in a stable environment without communication interruptions, maintaining reliability while minimizing total downtime
Solution Approach 2:
The onboard client computer acts as an intermediary, receiving the update file from the remote server when the vehicle is moving, and then distributing it to the monitor-control unit when stopped, isolating the critical update process from communication instability
3Productivity
If the download is performed continuously, then the productivity is improved, but the use of energy increases due to high consumption during writing
Solution Approach 1:
The download is performed periodically when the accumulator device is in a recharging state, rather than continuously. This synchronizes high-energy consumption operations with periods when energy is being replenished, maintaining productivity while managing energy usage effectively
4Reliability
If the update is interrupted due to anomalies, then the reliability is protected by resetting, but the loss of time increases due to repeated update attempts
Solution Approach 1:
The complete update file is downloaded in advance to the onboard client computer before any installation begins, so that if an interruption occurs during installation, the system can reset and retry using the already-downloaded file without needing to re-download, reducing total time while maintaining reliability
Solution Approach 2:
The system stores the complete update file in advance in the onboard client computer's memory, creating a buffer that protects against communication interruptions during the installation phase, allowing safe resetting and retrying without time penalty for re-downloading
Data Source
AI summary
A method updates a digital system in a vehicle having an onboard client computer that communicates with a remote server, an onboard monitor-control unit operatively connected to the onboard client computer, and an electrical energy accumulator device for powering the onboard client computer and the onboard monitor-control unit. The method includes downloading a file from the remote server using the onboard client computer as long as the electrical energy accumulator device is capable of being recharged. Then at least part of the file that was downloaded is distributed to the onboard monitor-control unit using the onboard client computer. Then, all or a portion of the at least part of the file that was distributed is installed in the onboard monitor-control unit. Then the at least part of the file that was installed is activated after stopping the vehicle using the onboard monitor-control unit.


