Wake-Up Controlled ECU Software Updates in Trusted Wireless Zones
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software update methods for vehicle electronic control units (ECUs) via wireless communication face risks of unauthorized access by malicious third parties, as they allow updates to be performed anywhere, potentially enabling unauthorized access.
Innovation Solution
A software update system that restricts wireless communication to a predefined trusted zone, using a wake-up receiver to ensure only authorized updates can occur within specific geographic and temporal conditions, employing a wake-up ID and wake-up sequence to secure the communication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If wireless communication is allowed anywhere for software updates, then update accessibility is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The patent applies local quality by creating a trusted zone with specific spatial and temporal characteristics. The wake-up receiver is configured to operate only within a predetermined time period and in specific locations, giving different operational properties to different spatial-temporal regions. This resolves the contradiction by allowing updates only in authorized local contexts while blocking unauthorized access elsewhere.
Solution Approach 2:
The wake-up receiver acts as an intermediary device between the external environment and the ECU. It receives wake-up requests from external devices and selectively activates the ECU based on predetermined conditions. This intermediary layer prevents direct unauthorized access while allowing legitimate updates, resolving the security accessibility contradiction.
2Object-affected harmful factors
If the ECU remains in sleep state to prevent unauthorized access, then security is improved, but update responsiveness deteriorates
Solution Approach 1:
The system performs preliminary action by pre-configuring the wake-up receiver with authentication credentials and operational parameters before actual update operations. The receiver is prepared in advance to recognize and respond to legitimate wake-up requests, enabling rapid authorized access without requiring the ECU to remain continuously awake, thus maintaining both security and responsiveness.
3Speed
If the ECU wakes up continuously to check for updates, then update responsiveness is improved, but power consumption increases
Solution Approach 1:
The wake-up receiver operates using periodic action by listening for wake-up requests at specific intervals rather than continuously. It wakes up the ECU only when a valid wake-up request is detected during its active listening periods, and returns to sleep state otherwise. This periodic operation pattern maintains update responsiveness while significantly reducing power consumption compared to continuous operation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A software update device includes a communication unit connected with an electronic device that executes software, and a wake-up receiving unit. When the wake-up receiving unit receives a wake-up request from a wireless access point registered in advance, the wake-up receiving unit allows the communication unit to transition from a sleep state to a wake-up state. When the communication unit transitioned to the wake-up state, the communication unit initiates wireless communication with an external device, and updates the software of the electronic device by update software received from the external device.