Processing

Please wait...

Settings

Settings

Goto Application

1. WO2020113186 - ERROR-RESILIENT OVER-THE-AiR SOFTWARE UPDATES FOR VEHICLES

Note: Text based on automatic Optical Character Recognition processes. Please use the PDF version for legal matters

[ EN ]

CLAIMS

What is claimed is:

1. A non-transitory computer-readable medium having computer-executable instructions stored thereon that, in response to execution by one or more processors of a vehicle computer system, cause the vehicle computer system to perform actions comprising:

receiving a software update package from a remote computer system via a wireless communication network, wherein the software update package comprises a first software update for a first updatable electronic component of the vehicle;

installing the first software update in the first updatable electronic component; determining that the installation of the first software update is successful; and in response to determining that the installation of the first software update is successful, storing the first software update in a storage medium in the vehicle computer system as a current backup software version for the first updatable electronic component.

2. The non-transitory computer-readable medium of Claim 1, wherein storing the first software update as the current backup software version comprises overwriting a previous backup software version for the first updatable electronic component.

3. The non-transitory computer-readable medium of Claim 1, wherein the vehicle computer system comprises a computing device including a wireless modem, a processor, and the storage medium, and wherein the computing device performs at least the steps of receiving the software update package and storing the first software update as the current backup software version.

4. The non-transitory computer-readable medium of Claim 1, wherein the first updatable electronic component comprises an electronic control unit (ECU).

5. The non-transitory computer-readable medium of Claim 1, wherein determining that the installation of the first software update is successful comprises receiving an indication that the first updatable electronic component is functioning correctly.

6. The non-transitory computer-readable medium of Claim 1, wherein the software update package comprises a second software update for a second updatable electronic component of the vehicle, the actions further comprising:

installing the second software update in the second updatable electronic component;

determining that the installation of the second software update is successful; and in response to determining that the installation of the second software update is successful, storing the second software update as a backup software version for the second updatable electronic component.

7. The non-transitory computer-readable medium of Claim 1, the actions further comprising, prior to installing the first software update:

checking the storage medium for a previously stored backup software version for the first updatable electronic component that is compatible with a current configuration of the vehicle; and

determining that the previously stored backup software version is not compatible with the current configuration of the vehicle; and

in response to determining that the previously stored backup software version is not compatible with the current configuration of the vehicle:

requesting a compatible backup software version;

receiving a compatible backup software version; and

storing the updated backup software version in the storage medium.

8. A method of returning an updatable electronic component of a vehicle to a functional state after a software update error or interruption, the method comprising, by an on-board computer system of the vehicle:

receiving a software update package comprising a first software update for a first updatable electronic component of the vehicle;

determining that a backup software version for the first updatable electronic component is present on a storage medium in the on-board computer system;

initiating an installation of the first software update for the first updatable electronic component;

detecting an error or interruption in the installation of the first software update; canceling the installation of the first software update;

retrieving the backup software version from the storage medium; and

installing the backup software version on the first updatable electronic component.

9. The method of Claim 8 further comprising, prior to initiating the installation of the first software update, checking the backup software version for compatibility with a current configuration of the vehicle.

10. The method of Claim 9 further comprising:

determining that the backup software version is incompatible with the current vehicle configuration; and

in response to determining that the backup software version is incompatible with the current vehicle configuration, updating the backup software version such that the backup software version is compatible with the current vehicle configuration.

11. The method of Claim 10, wherein updating the backup software version comprises requesting and receiving a compatible backup software version from a remote server.

12. The method of Claim 8, wherein the on-board computer system comprises a computing device including a wireless modem, a processor, and the storage medium, and wherein the computing device performs at least the steps of receiving the software update and retrieving the backup software version from the storage medium.

13. The method of Claim 8, wherein the first updatable electronic component comprises an electronic control unit (ECU).

14. The method of Claim 8 wherein the software update package comprises a second software update for a second updatable electronic component of the vehicle, the method further comprising:

installing the second software update in the second updatable electronic component;

validating installation of the second software update in the second updatable electronic component; and

storing the second software update as a backup software version for the second updatable electronic component in the storage medium.

15. The method of Claim 8, wherein the vehicle computer system performs at least the steps of detecting the error or interruption, suspending the installation of the first software update, retrieving the backup software version, and installing the backup software version automatically without requiring user input.

16. The method of Claim 8, wherein the software update package is received from a remote computer system via a wireless communication network.

17. A vehicle comprising:

a first electronic control unit (ECU); and

a computing device comprising a wireless modem, a processor, and non-transitory computer-readable storage media, the computing device being programmed to perform actions comprising:

receiving a first software update package from a remote computer system via the wireless modem, wherein the first software update package comprises a first software update for the first ECU;

installing the first software update in the first ECU;

storing the first software update in the storage media as a current backup software version for the first ECU;

receiving a second software update package from the remote computer system via the wireless modem, wherein the second software update package comprises a second software update for the first ECU;

initiating an installation of the second software update in the first ECU; detecting an error or interruption in the installation of the second software update;

suspending the installation of the second software update; retrieving the current backup software version from the storage media; and reinstalling the current backup software version in the first ECU.

18. The vehicle of Claim 17, wherein the computing device is further programmed to perform actions comprising, prior to installing the first software update:

checking the storage media for a previously stored backup software version for the first ECU that is compatible with a current configuration of the vehicle;

if the previously stored backup software version for the first ECU is not available or not compatible with the current configuration of the vehicle:

obtaining an updated backup software version for the first ECU; and storing the updated backup software version in the storage media.

19. The vehicle of Claim 17, wherein storing the first software update in the storage media as the current backup software version for the first ECU comprises overwriting a previous backup software version for the first ECU.

20. The vehicle of Claim 17, wherein the computing device is further programmed to perform actions comprising:

prior to initiating the installation of the second software update, checking the current backup software version; and

if the current backup software version is missing or incompatible with a current vehicle configuration, delaying the installation of the second software update until a compatible backup software version is obtained.

21. The vehicle of Claim 17 further comprising a second ECU, wherein the first software update package comprises a software update for the second ECU, and wherein the computing device is further programmed to perform actions comprising: installing the software update for the second ECU; and

storing the software update for the second ECU as a backup software version for the second ECU.

22. The vehicle of Claim 17, wherein the computing device is further programmed to perform at least the steps of detecting the error or interruption, obtaining the current backup software version, and reinstalling the current backup software version automatically without requiring user input.

23. The vehicle of Claim 17, wherein the computing device is further programmed to, prior to storing the first software update in the storage media, validate installation of the first software update in the first ECU.