WO2025190876A1 - Procédé et dispositif de vérification de la validité et/ou de mise à jour d'une fonction mise en œuvre numériquement dans un véhicule - Google Patents

Procédé et dispositif de vérification de la validité et/ou de mise à jour d'une fonction mise en œuvre numériquement dans un véhicule

Info

Publication number
WO2025190876A1
WO2025190876A1 PCT/EP2025/056486 EP2025056486W WO2025190876A1 WO 2025190876 A1 WO2025190876 A1 WO 2025190876A1 EP 2025056486 W EP2025056486 W EP 2025056486W WO 2025190876 A1 WO2025190876 A1 WO 2025190876A1
Authority
WO
WIPO (PCT)
Prior art keywords
vehicle
digitally implemented
function
validity
implemented function
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
PCT/EP2025/056486
Other languages
German (de)
English (en)
Inventor
Volkmar SCHÖNING
Dr. Frank Hüsemann
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Volkswagen AG
Original Assignee
Volkswagen AG
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Volkswagen AG filed Critical Volkswagen AG
Publication of WO2025190876A1 publication Critical patent/WO2025190876A1/fr
Pending legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/70—Software maintenance or management
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates

Definitions

  • the present invention relates to a method for checking the validity and/or updating of a digitally implemented function in a vehicle and a device for carrying out the method.
  • UNECE Regulation R156 will require a Software Update Management System (SUMS) for the software in vehicle control units to ensure that vehicles in the field are regularly provided with updates.
  • SUMS Software Update Management System
  • R 156 does not describe in detail how such a Software Update Management System would be implemented.
  • US 2015/0312380 A1 discloses a method for continuing to operate a telematics unit integrated in a vehicle, which originally communicated with the outside world based on a now-obsolete first mobile radio protocol.
  • Data transmitted by the telematics unit in the vehicle using a first communication protocol is received by a relay device and converted into a second communication protocol, so that the data can be transmitted from the relay device to a mobile radio tower using the second communication protocol.
  • a method for checking the validity of a digitally implemented function in a vehicle comprises determining whether parameters of a data transmission method used by a vehicle-external location for checking the validity correspond to or are compatible with the parameters of a data transmission method used for this purpose by the vehicle;
  • the data transmission method used by the external unit is first converted into the data transmission method used by the vehicle and the data sent by the external unit is received in the vehicle after the data transmission method has been converted; and the validity of the digitally implemented function of the vehicle is checked using the received data.
  • the received data advantageously comprise an information query regarding the function digitally implemented in the vehicle, an extension of the validity of the digitally implemented function and/or information for updating the digitally implemented function.
  • the parameters of the data transmission method relate to the message and/or communication protocol used, wherein a conversion of the message and/or communication protocols takes place between the vehicle and the vehicle-external location.
  • the parameters of the data transmission method may relate to the mobile radio standard used and/or the generation of the mobile radio standard used, whereby a conversion of the mobile radio standard used and/or the generation of the mobile radio standard used takes place between the vehicle and the vehicle-external location.
  • the conversion of the data transmission methods takes place by means of an exchangeable module which is arranged in the vehicle.
  • the method according to the invention can provide that the digitally implemented function is implemented as a software component on a control unit of the vehicle.
  • a measure is taken with regard to the affected digitally implemented function if a deviation from a target state is detected and the digitally implemented function cannot be updated.
  • the digitally implemented function or a function of the vehicle that is superior to this digitally implemented function can be deactivated in whole or in part.
  • the verification of the validity of the digitally implemented function comprises a validation of the functionality of the intended use and/or compliance with the current period of validity.
  • data with information about the digitally implemented function and/or the Update of the digitally implemented function is sent to the vehicle-external location.
  • the functions digitally implemented in the vehicle are categorized according to the safety relevance of the respective digitally implemented function, wherein an update and/or a measure with respect to a non-updated digitally implemented function is carried out according to the categorization.
  • Yet another embodiment may include determining the country of operation in which the vehicle is operated; determining which regulations for the digitally implemented functions apply there; and checking the validity and/or updating of a digitally implemented function and/or executing an action with respect to a non-updated digitally implemented function in accordance with the regulations applicable in the country of operation.
  • the invention further comprises a device for carrying out a method according to the invention and a computer program with instructions which cause a device according to the invention to carry out the steps of the method according to the invention.
  • the invention also includes a vehicle which is configured to carry out a method according to the invention or has a device according to the invention.
  • FIG. 1 shows a flowchart with basic steps of the method according to the invention
  • Fig. 2 shows a more detailed flowchart in which a review, update and/or action is taken based on a categorization of the digitally implemented functions
  • Fig. 3 shows a schematic view of a vehicle with an authorized body for checking the validity of the digitally implemented functions and, if necessary, for updating;
  • Fig. 4 shows a schematic block diagram of an exchangeable module according to the invention.
  • Figure 1 shows a flowchart of the inventive verification of the validity of a digitally implemented function in a vehicle.
  • the method is started in a first method step 10, for example, every time the vehicle is restarted.
  • the authorized body may, for example, be a licensing authority, which is responsible for issuing operating permits and vehicle registration as well as verifying the security of updates.
  • the authorized body may also be a vehicle manufacturer or OEM. Manufacturers of components that house the digitally implemented functions may be involved. It may be stipulated that the respective automobile manufacturer or OEM manufacturer is required to provide evidence that the verification is carried out as required for all affected vehicles. For this to happen, each of these vehicles must be "known" to them, including its current system or software status.
  • the next query 27 checks whether it is a serious deviation. If this is the case, the user is urgently recommended in step 28 to visit a workshop immediately in order to carry out an update as quickly as possible and thus correct the deviation.
  • An autonomously driving vehicle is accordingly instructed to immediately visit the nearest workshop.
  • a time period is selected that is as short as possible, but realistically allows the user or vehicle to reach a suitable workshop. This time period can also be selected depending on other parameters, such as the current location of the vehicle or whether a workshop is open at the current time of day or night.
  • a navigation system integrated in the vehicle can automatically generate a route to the nearest A workshop suitable for rectifying the deviation must be identified and the vehicle must be taken to this workshop.
  • step 29 a check is then made to determine whether the update was completed within the specified timeframe. If this is the case, the process is terminated in step 40. Otherwise, in step 26, the vehicle is immediately shut down or, if possible, a function is dropped.
  • step 30 checks whether it is a moderate deviation. If this is the case, the required update to correct the deviation is scheduled in step 31. After the corresponding deadline has expired, a check is then made in step 32 to determine whether the update was completed within the specified time. If this is not the case, an immediate visit to the workshop is urgently recommended or initiated according to step 28. Otherwise, the process is terminated in step 40.
  • step 40 If query 30 shows that there is only a slight deviation, an update is only offered in step 33 but not scheduled, and the process is then terminated in step 40.
  • Figure 3 shows a schematic of a vehicle with an authorized body for checking the validity of the digitally implemented functions and, if necessary, updating them.
  • the vehicle F has a replaceable module for checking the validity and, if necessary, updating any software applications of the vehicle, which can be designed in particular as a replaceable control unit SG.
  • the replaceable module enables wireless communication with an authorized location, in particular the receipt of data from the authorized location and the transmission of data to the authorized location via mobile communications.
  • the transmission can take place, for example, using a mobile communications standard such as 4G or 5G, or based on a wireless local area network such as WLAN.
  • the replaceable module is connected to a digital data bus DB in the vehicle via an interface and thus enables communication with other components of the vehicle.
  • the vehicle has an assistance unit AE that provides assistance functions such as automatic longitudinal and lateral guidance of the vehicle and, for this purpose, draws on sensor data from various environmental sensors, among other things.
  • assistance unit AE that provides assistance functions such as automatic longitudinal and lateral guidance of the vehicle and, for this purpose, draws on sensor data from various environmental sensors, among other things.
  • the present example only shows a forward-facing radar sensor R and a front camera K.
  • the vehicle can have a multitude of other sensors for which the method according to the invention can be applied.
  • the evaluation of the sensor signals generated by the radar sensor R and the front camera K can, for example, take place in an evaluation and control unit AS using software for image processing and evaluation, which must be regularly checked for currency and updated if necessary.
  • a position detection unit P is provided for locating the vehicle. This unit evaluates, for example, GPS signals and, in conjunction with map data, enables the identification of the current country of operation. Furthermore, a navigation unit N is provided, which, among other things, enables route guidance to a workshop for performing an update.
  • a memory unit (MF) is also provided in the vehicle.
  • the memory can have both volatile and non-volatile memory areas and can include a wide variety of storage devices and storage media. For example, information on the regulatory requirements or regulations of the various operating countries can be stored in the memory unit (MF). Furthermore, information on the functions digitally implemented in the vehicle, such as the current version status, can be stored there. Finally, instructions for executing a program that implements the method according to the invention on the vehicle side can be stored in the memory.
  • the authorized body Z for verifying the validity of the digitally implemented functions has a server device S, which can, for example, be operated as a backend server by a vehicle manufacturer and be part of an IT infrastructure not further described here.
  • a storage device MR stores information on the digitally implemented functions for each vehicle in the fleet monitored by the authorized body with regard to its software status. This information can be queried and updated by the server device S.
  • a cryptography module KR is provided for encrypting or decrypting the transmitted data.
  • a certificate can be sent back to the vehicle by the authorized body Z and stored there.
  • FIG. 4 shows a schematic block diagram of an exchangeable module according to the invention, which is designed as an exchangeable control unit.
  • the control unit SG has various modules for executing the method according to the invention, which can be implemented as software or hardware.
  • a first communication module KOM1 enables wireless communication with an authorized location, in particular the reception of data from the authorized location and the transmission of data to the authorized location via mobile radio. This communication module KOM1 also checks whether the message and/or communication protocols used by the vehicle and the location external to the vehicle differ from one another.
  • a conversion module converts the message and/or communication protocols between the vehicle and the external location.
  • a cryptography module is also provided, which can be used to decrypt the received data, verify certificates to verify the issuer, and sign and encrypt the sent data.
  • a second communication module KOM2 then represents the interface to the vehicle's electronic network, enabling communication with one or more vehicle control units (not shown here).
  • the network is designed, in particular, as a bus system B, for example, a CAN, MOST, FlexRay, or Automotive Ethernet bus.
  • a memory module SM is provided, in which the received data can be stored locally.
  • the invention can be used in any vehicle to check the validity and update of digitally implemented functions. List of reference symbols

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Traffic Control Systems (AREA)

Abstract

Dans le procédé selon l'invention pour vérifier la validité d'une fonction mise en œuvre numériquement dans un véhicule (F), il est déterminé (11) si des paramètres d'un procédé de transmission de données utilisé par un point (Z) à l'extérieur du véhicule pour vérifier la validité correspondent ou sont compatibles avec les paramètres d'un procédé de transmission de données utilisé par le véhicule à cet effet. Si tel est le cas, des données qui sont envoyées par le point à l'extérieur du véhicule et concernent une fonction mise en œuvre numériquement dans le véhicule sont reçues (12). Si tel n'est pas le cas, le procédé de transmission de données utilisé par le point à l'extérieur du véhicule est d'abord converti (13) en le procédé de transmission de données utilisé par le véhicule, et après que le procédé de transmission de données a été converti, les données envoyées par le point à l'extérieur du véhicule sont reçues (12) dans le véhicule. La validité de la fonction mise en œuvre numériquement du véhicule (F) est vérifiée (14) au moyen des données reçues.
PCT/EP2025/056486 2024-03-11 2025-03-10 Procédé et dispositif de vérification de la validité et/ou de mise à jour d'une fonction mise en œuvre numériquement dans un véhicule Pending WO2025190876A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102024202281.0 2024-03-11
DE102024202281.0A DE102024202281A1 (de) 2024-03-11 2024-03-11 Verfahren und Vorrichtung zur Überprüfung der Gültigkeit und/oder Aktualisierung einer digital implementierten Funktion in einem Fahrzeug

Publications (1)

Publication Number Publication Date
WO2025190876A1 true WO2025190876A1 (fr) 2025-09-18

Family

ID=94974015

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/EP2025/056486 Pending WO2025190876A1 (fr) 2024-03-11 2025-03-10 Procédé et dispositif de vérification de la validité et/ou de mise à jour d'une fonction mise en œuvre numériquement dans un véhicule

Country Status (2)

Country Link
DE (1) DE102024202281A1 (fr)
WO (1) WO2025190876A1 (fr)

Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102005009640A1 (de) 2005-03-03 2006-09-07 Bayerische Motoren Werke Ag Vorrichtung und Verfahren zur Steuerung einer Fuktion in einem Kraftfahrzeug
DE102009018761A1 (de) 2009-04-27 2010-10-28 Bayerische Motoren Werke Aktiengesellschaft Verfahren zur Aktualisierung von Softwarekomponenten
DE102010008816A1 (de) 2010-02-22 2011-08-25 Continental Automotive GmbH, 30165 Verfahren zur Online-Kommunikation
WO2014111987A1 (fr) 2013-01-15 2014-07-24 Toyota Jidosha Kabushiki Kaisha Traduction de protocole dans des communications de réseau intelligent
US20150312380A1 (en) 2014-04-29 2015-10-29 General Motors Llc Translating cellular protocols for a vehicle telematics unit
US20170206717A1 (en) 2016-01-19 2017-07-20 Trendfire Technologies, Inc. System and method for driver evaluation, rating, and skills improvement
DE102018200318A1 (de) 2018-01-11 2019-07-11 Bayerische Motoren Werke Aktiengesellschaft Absicherung eines Softwareupdates eines Steuergerätes eines Fortbewegungsmittels
DE102021211353A1 (de) * 2021-10-07 2023-04-13 Continental Automotive Technologies GmbH Verfahren zur Inbetriebnahme von Programmpaketen in Fahrzeugen
DE102021211607A1 (de) 2021-10-14 2023-04-20 Robert Bosch Gesellschaft mit beschränkter Haftung Verfahren und Vorrichtung zum Verarbeiten von mit einem Steuergerät assoziierten Daten

Family Cites Families (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10254284A1 (de) * 2002-06-10 2004-01-08 Robert Bosch Gmbh Verfahren und Vorrichtung für einen fahrzeugbezogenen Telematikdienst

Patent Citations (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102005009640A1 (de) 2005-03-03 2006-09-07 Bayerische Motoren Werke Ag Vorrichtung und Verfahren zur Steuerung einer Fuktion in einem Kraftfahrzeug
DE102009018761A1 (de) 2009-04-27 2010-10-28 Bayerische Motoren Werke Aktiengesellschaft Verfahren zur Aktualisierung von Softwarekomponenten
DE102010008816A1 (de) 2010-02-22 2011-08-25 Continental Automotive GmbH, 30165 Verfahren zur Online-Kommunikation
WO2014111987A1 (fr) 2013-01-15 2014-07-24 Toyota Jidosha Kabushiki Kaisha Traduction de protocole dans des communications de réseau intelligent
US20150312380A1 (en) 2014-04-29 2015-10-29 General Motors Llc Translating cellular protocols for a vehicle telematics unit
US20170206717A1 (en) 2016-01-19 2017-07-20 Trendfire Technologies, Inc. System and method for driver evaluation, rating, and skills improvement
DE102018200318A1 (de) 2018-01-11 2019-07-11 Bayerische Motoren Werke Aktiengesellschaft Absicherung eines Softwareupdates eines Steuergerätes eines Fortbewegungsmittels
DE102021211353A1 (de) * 2021-10-07 2023-04-13 Continental Automotive Technologies GmbH Verfahren zur Inbetriebnahme von Programmpaketen in Fahrzeugen
DE102021211607A1 (de) 2021-10-14 2023-04-20 Robert Bosch Gesellschaft mit beschränkter Haftung Verfahren und Vorrichtung zum Verarbeiten von mit einem Steuergerät assoziierten Daten

Also Published As

Publication number Publication date
DE102024202281A1 (de) 2025-09-11

Similar Documents

Publication Publication Date Title
EP3368379B1 (fr) Mise à jour des appareils de commande dans un véhicule à moteur
EP2425333B1 (fr) Méthode pour mettre à jour des composants logiciels
EP2705430B1 (fr) Système destiné à réaliser un diagnostic portant sur un composant dans un véhicule
DE102006009098A1 (de) Kraftfahrzeugdiagnose und Fahrzeugannahme
DE102008010056A1 (de) System und Verfahren zum Steuern eines Informationszugriffs an einer mobilen Plattform
DE10038096A1 (de) Verfahren und System zur Übertragung von Daten
DE112020001126T5 (de) Fahrzeugsteuergerät
DE112016005669T5 (de) Bord-Kommunikationseinrichtung, Bord-Kommunikationssystem und Verfahren zum Verbieten spezieller Verarbeitungen für ein Fahrzeug
DE102020126317A1 (de) Anhaltender neutraler betrieb von fahrzeugen
EP3741094B1 (fr) Systeme de commande pour vehicule automobile, procede de fonctionnement du systeme de commande et vehicule automobile comportant un tel systeme de commande
DE10219832A1 (de) Verfahren zum Kodieren von Steuergeräten in Verkehrsmitteln
DE102020007310A1 (de) Verfahren zum Vorsehen und Installieren von Softwareaktualisierungen für ein Fahrzeug
DE102022104321A1 (de) Center, aktualisierungsmanagementverfahren und nicht-transitorisches speichermedium
DE112022002574T5 (de) Elektronische Steuervorrichtung für ein Fahrzeug, elektronisches Steuersystem für ein Fahrzeug, und Aktualisierte-Konfigurationsinformationen-Bestimmungsprogramm
EP4268070B1 (fr) Procédé de configuration d'un logiciel de commande pour un véhicule ferroviaire
WO2018145786A1 (fr) Procédé de mise à jour d'une carte numérique d'un dispositif serveur externe du véhicule à moteur
WO2025190876A1 (fr) Procédé et dispositif de vérification de la validité et/ou de mise à jour d'une fonction mise en œuvre numériquement dans un véhicule
EP4268071B1 (fr) Procédé de configuration d'un logiciel de commande dans un véhicule ferroviaire
DE112022002792T5 (de) Elektronische fahrzeugsteuervorrichtung und aktualisierungsprogramm
DE102021121896A1 (de) Anpassen einer einen Ladevorgang betreffenden Eigenschaftsinformation
DE102023003239B4 (de) Fahrzeug
EP4267448B1 (fr) Procédure de configuration d'un logiciel de contrôle sur un véhicule ferroviaire
DE102024206327B3 (de) System und Verfahren zum Einbinden endnutzerspezifischer Zusatzausstattung in eine Bordinfrastruktur eines Kraftfahrzeugs sowie Kraftfahrzeug
WO2024022732A1 (fr) Procédé de mise à jour d'un véhicule automobile
WO2024193844A1 (fr) Procédés, dispositifs et programmes informatiques pour serveur et véhicule

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 25711671

Country of ref document: EP

Kind code of ref document: A1