Vehicle Software Update Staging for Low-Downtime Activation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for updating digital systems in vehicles are inefficient, often requiring the vehicle to be stationary and taking a long time, and are prone to interruptions due to anomalies and communication breaks, leading to unacceptably long downtime and potential behavioral changes during updates.

Innovation Solution

A method that involves a client computer downloading an update file when the electrical energy accumulator is rechargeable, distributing and installing it without needing continuous connection to the remote server, and activating the update only when the vehicle is stopped, using a gateway computer to manage tasks and keep the monitor-control unit available for its primary functions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the vehicle is stopped to perform the update, then the reliability of the update process is improved, but the loss of time increases

Engineering Contradiction:
Improveupdate process reliabilityVSAvoidvehicle unavailability time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The update file is downloaded in advance to the onboard client computer when the vehicle is moving and the accumulator is recharging, so that the actual update installation can be performed quickly when the vehicle is stopped, reducing overall unavailability time while maintaining reliability

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The update process is divided into separate stages: download phase (during vehicle movement), installation phase (during vehicle stop), and activation phase (after stop). This segmentation allows the time-consuming download to occur during movement, minimizing the impact on vehicle availability

Inventive Principle:
Principle #1Segmentation

2Loss of time

If the update is performed while the vehicle is moving, then the loss of time is reduced, but the reliability deteriorates due to potential anomalies and communication breaks

Engineering Contradiction:
Improvevehicle unavailability timeVSAvoidupdate process reliability
Core Design Contradiction:
Loss of timeVSReliability

Solution Approach 1:

The complete update file is downloaded in advance to the onboard client computer before the vehicle stops, so that the critical installation phase can be performed in a stable environment without communication interruptions, maintaining reliability while minimizing total downtime

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The onboard client computer acts as an intermediary, receiving the update file from the remote server when the vehicle is moving, and then distributing it to the monitor-control unit when stopped, isolating the critical update process from communication instability

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If the download is performed continuously, then the productivity is improved, but the use of energy increases due to high consumption during writing

Engineering Contradiction:
Improveupdate speedVSAvoidelectrical energy consumption
Core Design Contradiction:
ProductivityVSUse of energy by moving object

Solution Approach 1:

The download is performed periodically when the accumulator device is in a recharging state, rather than continuously. This synchronizes high-energy consumption operations with periods when energy is being replenished, maintaining productivity while managing energy usage effectively

Inventive Principle:
Principle #19Periodic action

4Reliability

If the update is interrupted due to anomalies, then the reliability is protected by resetting, but the loss of time increases due to repeated update attempts

Engineering Contradiction:
Improveupdate completion reliabilityVSAvoidtotal update time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The complete update file is downloaded in advance to the onboard client computer before any installation begins, so that if an interruption occurs during installation, the system can reset and retry using the already-downloaded file without needing to re-download, reducing total time while maintaining reliability

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system stores the complete update file in advance in the onboard client computer's memory, creating a buffer that protects against communication interruptions during the installation phase, allowing safe resetting and retrying without time penalty for re-downloading

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS11928458B2Method for updating a digital system
Publication Date: 2024.03.12 NISSAN MOTOR CO LTD
  • US11928458B2 patent drawing
  • US11928458B2 patent drawing
  • US11928458B2 patent drawing

AI summary

A method updates a digital system in a vehicle having an onboard client computer that communicates with a remote server, an onboard monitor-control unit operatively connected to the onboard client computer, and an electrical energy accumulator device for powering the onboard client computer and the onboard monitor-control unit. The method includes downloading a file from the remote server using the onboard client computer as long as the electrical energy accumulator device is capable of being recharged. Then at least part of the file that was downloaded is distributed to the onboard monitor-control unit using the onboard client computer. Then, all or a portion of the at least part of the file that was distributed is installed in the onboard monitor-control unit. Then the at least part of the file that was installed is activated after stopping the vehicle using the onboard monitor-control unit.