Method to update software components

Translation of description of equivalent WO 2010124775 A1

p0001Method for updating software components

p0002The invention relates to a method for updating at least one software component of a motor vehicle, comprising at least the steps of: determining vehicle configuration information that includes at least the information about which hardware and / or software components that are present in a particular motor vehicle, by a state determining device; Providing a telecommunications link between an in-vehicle service interface and a vehicle-external service facility; Sending the determined by the device Zustandsermittlungs- vehicle configuration information and identification data of the motor vehicle from the vehicle via the telecommunication link to the outside the vehicle service facility; Check with the vehicle configuration information through the vehicle-external service device if one or more software components to be updated in accordance with a control law available in the vehicle external service facility; Providing a corresponding update instructions by the vehicle-external service and updating of the software to be updated component using the update procedure.

p0003Motor vehicles in accordance with the present state of the art include a plurality of electronic control units, which include not only hardware and software components or software components. Motor vehicles today have an average life span of several years. Over this period, also referred to as automotive life cycle, altering the software components are due to technical changes required, in particular the exchange, the addition or expansion of software, that is of particular software modules or software-based functions. Such procedures are referred to hereinafter as updates of software components. If necessary, individual updating measures can be distinguished in updates, in which the previously specified functions usually substantially maintained, and upgrades, in which the specified functionality will be extended as a rule, ie a function multiplication occurs. One possible reason for the need for an update / upgrade, for example, changing needs in terms of connection to external devices, in particular accessory devices, represent. With the Update software components associated usually a change of configuration data of the motor vehicle.

p0004From the prior art, for example from the WO 2007/098781 A1, method for carrying out an update of software components in motor vehicles, in particular processes of the type mentioned are already known. However, the known from the prior art methods have considerable drawbacks to all motor vehicles, in which a particular update action should be made easily and efficiently set in terms of the total expenditure, which is to operate, this fact in knowledge and deemed necessary updating measure easily, safely and at low cost to perform.

p0005It is an object of the invention to provide a simple and reliable method with low total cost of updating software components in motor vehicles to provide.

p0006This object is achieved by a method having the features of claim 1. Advantageous embodiments and developments of the invention result from the dependent claims.

p0007the actual update to update a software component solely by the driver of the motor vehicle according to the invention can be released. To move the driver to a corresponding release, updating the software to be updated component is available to the driver of the vehicle-external service device prior to implementation. This can be done for example by sending an electronic message to the vehicle and their display in the MMI (Man-Machine Interface) of the motor vehicle. The release may then be granted by the driver confirmation action, for example, the selection of a confirmation response (eg "OK." Or "Start Update."), Which is indicated to the driver at the same time with the transmitted message in the MMI. Quite in contrast to only releasable by the driver update is inventively sending the vehicle configuration information and the identification data repeatedly and without the involvement and / or alert the driver timed and / or event-driven instead. In other words, extensive measures in preparation for the actual update of the driver are unnoticed met before the driver release will be obtained for performing the actual update. The driver thus retains control over software upgrades, since the actual update is performed only on its release back. At the same time the driver's total expense in terms of actions and / or notifications is not on by News, References and / or prompts the sending of the vehicle configuration information and the identification data bothered because this is done in his view unremarkable "in the background" and without his intervention. the driver is reduced by the invention.

p0008The inventive method is based on a partial departure from the commonly untouched in the prior art approach to let the driver control over the traffic between his vehicle and the vehicle-external service facility. This renunciation is but just enough so that information on the vehicle configuration and vehicle identification is transmitted to the service center so that these custom update actions plan for the vehicle in question and may propose. Function Involved software components of the motor vehicle are preferably not changed without driver intervention, removed and / or added.

p0009Under the driver's participation in the context of this document, unless otherwise noted, a participation in the individual case, ie, with each individual Versendevorgang understand. At a later point will be made clear that the need for a one-time involvement of the driver, for example in the form of an MMI-controlled activation of a service through which then a variety of Versendevorgängen will be induced might be expedient.

p0010To meet privacy requirements, sending the vehicle configuration information and the identification data is preferably carried out via a secure connection, or in encrypted form.

p0011In order to even further privacy requirements, the vehicle configuration information and the identification information may be obtained at fahrzeugextemen service establishment after processing immediately (or after a predetermined The invention allows an individual examination of each to log on to the outside the vehicle service facility (and its vehicle configuration information and identification data transmitted) vehicle on the need for software updates and / or upgrades and a custom implementation of the actually required updates / upgrades. A purpose comparable quality of service can not be reached by fleet-based testing and Notifizierungsmaßnahmen. The appearing at first glance to be a disadvantage (or even a practical implementation via standing) traffic for repeated transmission of the vehicle configuration information to the vehicle-external service device is outweighed by the advantages of the method and can optionally by appropriate data selection and / or appropriate data preprocessing and / or a matched transmission timing of the vehicles of a fleet of vehicles will be limited to a reasonable degree. associated with the process costs are at least partially offset by reduced warranty costs and increased customer satisfaction.

p0012The vehicle includes configuration information, where appropriate, in list form, preferably have one or more of the following categories:

p0013- Identification of the vehicle in the current and / or originally installed hardware components,

p0014- Identification of the vehicle in the current and / or originally existing software components,

p0015- Mappings between the vehicle is currently and / or originally installed hardware components and the vehicle is currently and / or originally existing software components.

p0016The identification data preferably comprise at least a unique vehicle identification number, for example, the chassis number. Other information on the origin of the vehicle, in particular information regarding manufacturer, model, date of manufacture and / or; period, batch etc. are conceivable, as a so-called vehicle order, ie, a vehicle description and a corresponding production order. However, it can alternatively or additionally also a special award for remote maintenance services identifiers, such as a purpose of awarded username, be used.

p0017In addition to the vehicle configuration information and the identification data may further vehicle data, in particular fault memory contents and / or maintenance of the vehicle's data and / or operating the vehicle's data and / or the vehicle's data and / or the use of software-based functions of the motor vehicle concerned vehicle data are transmitted to the vehicle-external service facility.

p0018The vehicle configuration information may be the vehicle side automatically preprocessed in that it is compressed and / or reduced to potentially relevant for software updates information. Thus, the data to be transferred amount can be reduced or it may at the same total amount of data often are sent to the vehicle-external service facility vehicle configuration information.

p0019The automatic preprocessing can the vehicle side, for example, by the state determining device, but alternatively by another processing unit of the vehicle, are made using a compression and / or filter rule. Such compression and / or filter rule can be permanently deposited with the vehicle, but can be transmitted to the vehicle by the vehicle-external service facility.

p0020It can also take place an automatic preprocessing effect that only changes, so to speak, an increment or delta, from an earlier vehicle configuration determined and is transmitted to the vehicle-external service facility. The vehicle configuration information relating to the earlier vehicle configuration remains preferably stored in the vehicle-external service facility and is assigned to the transmitted increment or delta based on the identification data or based specifically mitgesendeter association data. Also in this manner, the amount of data to be transmitted or it can be significantly reduced with the same total amount of data frequently are sent to the vehicle-external service facility vehicle configuration information. A further possibility for considerable reduction of the transferred amount of data in the individual case is only to determine a unique configuration for a particular vehicle identification code and to transmit, in particular a so-called hash sum. been made, a check on the need for updating, particularly in cases in which a specific vehicle configuration has already been transferred to an earlier point in time to the external to the vehicle service device and optionally also already in the vehicle-external service device based on this vehicle configuration and / or an update rule provided (However, the update of the update procedure has not yet been voergenommen) has been, the future process costs can be reduced, for example as follows: It can be used both on the vehicle side and on the part of the vehicle-external service means a this vehicle configuration uniquely characterizing identification code, for example, the hash first -Total on the transmitted vehicle configuration, are stored. The part of fahrzeugextemen service facility stored identification code can optionally also not the actual vehicle configuration concern, but provided on its base Aktuaüsierungsvorschrift. As a result, then, may be a renewed transfer of the entire vehicle information (or instead of having re-examined on the need for updating and / or a recent deployment of an update rule) only a balance of mutual identification codes are made. As long as the mutual identification codes remain unchanged, no additional measures are required. However, changes to the transmitted from the vehicle identification code due to a change in the vehicle configuration, new (detailed or complete) vehicle configuration information must be transmitted to the outside the vehicle service facility accordingly. A change of discarded on train external service device identification code, for example as a result of a particular Neuverfügbarkeit updates / upgrades, at least one new test on the need for updating and / or renewed provision of an updated provision must be made.

p0021A preferred example of the invention as determined and transmitted vehicle configuration information is therefore a via the respective vehicle configuration calculated hash sum which identifies this vehicle configuration clearly. Transmission of the vehicle configuration information and the identification data takes place time-controlled and / or event-driven repeatedly.

p0022A timing allows, for example, to ensure a maximum time lag between the availability of a new software component in the vehicle external service facility and a corresponding update range of the driver.

p0023A timing also allows to coordinate the traffic of a variety of vehicles such that certain limits manageable amounts of data are not exceeded. To this end, sending the vehicle configuration information may be provided for each vehicle from a variety of motor vehicles periodically, the transmission times of the individual vehicles are distributed as evenly as possible within the period. The determination of the period and / or the transmission times can be accomplished by a factory and / or subsequent configuration of the vehicle. To comply with a specified "schedule" the motor vehicle preferably has a clock and / or a timer. A possible subsequent, ie not factory, configure the temporal transmission behavior of the motor vehicle can either be paid in a service mode or via a wireless connection from a central service point made be made. the central service point can be the vehicle-external service device already mentioned. the wireless connection can be the same, which is also used for the transmission of the configuration information and identification data and / or for the transmission of updates / upgrades to the motor vehicle.

p0024Preferably, sending the vehicle configuration information and the identification data from the central service center, which may be the vehicle-external service device already mentioned in particular, also be completely deactivated or activated.

p0025An event control permits as opposed to a particular timing, to respond promptly to specific events.

p0026As the triggering event, for example, the vehicle-mounted detection of a change in a hardware and / or software component of the motor vehicle are defined. For example, for a control device replacement in a workshop, the does not have appropriate programming means, the driver offered that required for safe vehicle operation software "over the air" to load into the vehicle from outside the vehicle service facility.

p0027As the triggering event may also be the initial and / or repeated connection of a particular accessory device, particularly a mobile telephone, an audio A / ideo player or a portable computer, are defined to the motor vehicle. It can be the driver then offered promptly, the load on the accessory device suitable driver and / or integrating software components into the vehicle.

p0028As the triggering event and more than a certain mileage limit and / or refueling of the vehicle can be defined. This ensures that particularly heavily used vehicles preferably receive updated offers.

p0029As the triggering event and the crossing of a border or the approximation of a border can be defined. This ensures that updates / upgrades, which are particularly suitable for a specific country and / or required to be offered to the driver in good time.

p0030As the triggering event and the re-opening of the motor vehicle after prolonged non-use can be defined and / or the restoration of wireless accessibility by the vehicle-external service facility after a longer interruption of this accessibility. So the driver of an example, for a long time parked in an underground parking the vehicle can be offered as soon as possible with the resumption of the use of vehicles to bring their vehicles in the latest software version.

p0031As the triggering event and the on-board detection can be a, for example, via an MMI commanded update request of the driver, as defined. In an alternative embodiment of the present invention the possibility of commanding such an update request, however, is deliberately not provided by the driver to completely free the driver from worrying about the need for software updates. As the triggering event may possibly even the receipt of a sent from the external to the vehicle service facility or from another service facility vehicle individual trigger signal to be defined. In this way could the vehicle-external service facility or other service facility - subject to a reaction of the triggered Vehicles - control which vehicles should be at what time tested for the availability of software updates. Particularly advantageously, it seems, to create the conditions that the vehicle-external controller can send a vehicle individual trigger that leads to the vehicle for immediate or deferred review of updates / upgrades, if and only if a figures relate to the vehicle customer in an (online ) software Store an application, a content, a service, or feature has ordered free of charge or for a fee, which then transferred into the vehicle unlocked or there but the vehicle is to be harnessed (upgrade case). In an alternative embodiment of the present invention, the likelihood of initiating an update by external to the vehicle service facilities, however, is deliberately not intended to minimize the logistical effort in the vehicle external service facility. In extreme cases, then there must be in the vehicle external service means no knowledge of soft vehicles could be put in touch with her to check the availability of a software update. Without such knowledge, no notification of the vehicles from the external to the vehicle service facility is of course possible.

p0032Even data protection concerns that exist possibly could given the unnoticed by the driver sending the vehicle configuration information and identification data to the outside the vehicle service facility, are particularly unjustified when these data are not or no long a concrete, individual upgrade process also in the vehicle external service bodies are stored.

p0033Preferably, sending the vehicle configuration information and the identification data - even if it is carried out event-driven - from a central service point completely deactivated or activated.

p0034Alternatively or additionally, the sending of the vehicle configuration information as well as his or activated, for example by activating or deactivating a service today. The repeated sending of the vehicle configuration information and the identification data can therefore in particular due to a one-off - (/ wöchentlicht / monthly / yearly re-activating service daily example), or at least against the repeated sending be made with significantly less repetition - MMI controlled involvement of the driver held.

p0035The determination of vehicle configuration information through the Zustandsermittlungs- device can be carried out in manner known per se. Also, the provision of the wireless telecommunication connection between the in-vehicle service interface and the external to the vehicle service device can be carried out in manner known per se, as well as sending the vehicle configuration information and the identification data to the vehicle-external service device and the running at the vehicle-external service facility check whether one or more software components, according to a check there is available to update rule. The latter test can in the inventive method for example, correspond to that examination, which is also used in prior art workshop programming systems for updating individual software components.

p0036Providing a corresponding update procedure by the vehicle-external service facility and updating to update software component based on the updated regulation is preferably carried out by specific software update packages or software upgrade packages are determined by a title of each package, optionally together with a brief description of the package transmitted to the vehicle, where it is displayed to the driver as an available and suitable for display, and by transferred to a release of the driver's back and / or on a selection of individual packages offered by several with subsequent release through these packages to the vehicle and are installed there.

p0037In the following, a preferred embodiment of the invention will be described with reference to the single accompanying drawing. This results in further details, preferred embodiments and developments of the invention. In detail, schematically Fig. 1 is a flowchart of the procedural steps of an exemplary service on

p0038Basis of the invention.

p0039According to the currently in use state of the art software-based updates and upgrades are carried out by different technical solutions in motor vehicles.

p0040Known are inter alia the following systems and procedures:

p0041a) Workshop programming systems: In order to perform an update or upgrade the motor vehicle is wired or wireless connected via a local communication network to a workshop system, via which the programming of the motor vehicle is made. Here, the workshop system checks through specific diagnostic queries that are sent to the motor vehicle which software version is present. Because of existing information is then checked by the unit itself or on the basis of a communication over an (Wide Area) communications network to a central system at the manufacturer if there are for this automotive software updates / upgrades. In case of a positive test, the workshop system (off-board) takes over the programming of the motor vehicle. As an interface to the motor vehicle act special programming and diagnostic interfaces. Workshop programming systems are known for the programming of the total motor vehicle, but also for updating individual software components.

p0042b) CD / DVD-based systems: Individual controllers called in motor vehicles (eg head units, so the central navigation / entertainment system) or dedicated program components in the control devices can also be programmed by a special programming CD / DVD. For this purpose usually the existing CD / DVD collection wells are used. are especially known CD / DVD-based systems for programming the firmware of the navigation system of a motor vehicle.

p0043c) USB-based systems: Individual control units in motor vehicles (eg head units or also telephone / communication control devices) or dedicated program components in the control devices can also be programmed by software that resides on an external storage medium via a USB port connected to the motor vehicle is. In such a storage medium, the software must be downloaded before, eg via the Internet and home PC. Given the available USB ports are used in the motor vehicle. Known examples of the use of such USB based systems are the update of driver software for a phone control, updating of applications for the Head Unit and updating of map data of a navigation system.

p0044In the case of the above methods and systems (workshop programming systems, CD / DVD-based systems, USB-based systems)

p0045- Either vehicle configuration data or motor vehicle status data from a central unit, retrieved from the vehicle to a subsequent comparison of possible software updates / upgrades to perform (in particular handled with workshop programming systems)

p0046- Or else it is restricted or not checked whether the known in the motor vehicle motor vehicle software is compatible with the software updates / upgrades, simply because the existing software will be overwritten, (particularly as handled in CD / DVD-based systems, and USB-based systems).

p0047In the cases where a software or hardware must be subjected to or replaced for operational reasons or because of identified by placing functional errors Update during the life cycle of a motor vehicle, is spoken in automotive experts also from a technical action (TA). In such TA is usually via a centralized system in which all data is already produced motor vehicles, a calibration is carried out which vehicles are however affected by a necessary software update or a hardware replacement. It can then be made with the customer data a comparison of motor vehicle records, so that the driver of the TA can be informed. However, it is alternatively or additionally also a list of relevant vehicles are created for a TA is to be performed at the next workshop visit. It can also be determined in the diagnosis of the motor vehicle in the shop, whether it is for this vehicle a new software version WO 2007/098781 A1 describes a telematics system or tele-programming system that allows an online connection of the motor vehicle with a central infrastructure via a preferably wireless communication network. As part of technical actions relevant motor vehicles could be informed by means of an electronic message about such a system that a software update or a hardware replacement needs to be made for them. Based on such telematics system or tele-programming system, a necessary software update or a wanted by the customer software upgrade over the wireless communication network to be made - in a comparable per se manner as prior art for mobile phones and computer ,

p0048Workshop programming systems have highlighted the disadvantages of

p0049- That an update of the software object requires a visit to the workshop of the motor vehicle, which is associated with corresponding costs (workshop assignment, loss of use for the driver, replacement vehicle) and

p0050- The driver the update process itself can affect not but alone the workshop decides what is updated.

p0051CD / DVD-based systems, and USB-based systems have highlighted the disadvantages of

p0052- That on the date that a software update is usually no current vehicle configuration information is available, which is why a deployed software update either - must carry may very complex Kompatiblitätsbeschreibung or even - in cases of doubt - due to lack of information on the current in the vehicle existing hardware and software no update can be performed, although a deployed update would actually compatible, and

p0053- That the driver update autonomously and directly can not perform the motor vehicle from, but the software update / upgrade only "indirectly" (eg Purchase a CD / DVD or Download via PC) to pick up and has to steer the vehicle.

p0054Both workshop programming systems as well as CD / DVD-based systems, and USB-based systems have the disadvantages

p0055that software updates will only delay introduced into the motor vehicle (maintenance stay of the motor vehicle, customer informs himself about available updates, information by post / e-mail)

p0056that relevant for a timely information of the driver via a software-based TA vehicles consuming (creating and managing lists) of available data have to be determined,

p0057- That for a possible notification (by post or email) the driver of a software update additional costs and additional expenses incurred (postage, administration, customer information) and

p0058- That drivers of motor vehicles, which are now, possibly brought on alternative routes and without the knowledge of the relevant vehicle-external service device, the current software version, are unnecessary information.

p0059With the help of a data transfer enabled communication device in the motor vehicle (in-vehicle service interface), it is possible, a current state of all the motor vehicle factory-installed and / or subsequently exchanged in a workshop and / or upgraded hardware and software components (vehicle configuration information) to the determination to transfer (by a state determining device) to a so-called back-end system (external to the vehicle service facility). Since the current vehicle status (SW, HW and possibly relevant fault memory, etc.) is often different from the original factory-installed software and hardware components, it is advisable to make such data synchronization periodically. Once the vehicle data in the backend system are received, can take place individually for each currently connected to the backend automobile checking whether this new vehicle - optional or Paid - updates. Due to the "on-time" review of the received vehicle data can be ensured that the update processes are only triggered for the respective motor vehicle, when it is actually affected.

p0060There are exemplified the following individual steps for the practical implementation of the solution generally described above suggested (see flow chart in Fig. 1.):

p00611. A motor vehicle logs communication technology, wirelessly at regular intervals, ie time-based (but possibly also event-based), with a communication device of the backend to. The motor vehicle must for that are not close to the backend system. The back-end system, a single processing unit, or a plurality, possibly spatially distributed and interlinked, computing units include (see FIG. 1 block in Fig. 1).

p00622. After a successful login, a set vehicle-relevant data, including a motor vehicle identification number and a description of the vehicle configuration, consisting of the current hardware and software components and versions and all fault memory entries, transmitted via an application protocol to the back-end system (see. block 2 in Fig. 1).

p00633. The backend system evaluates the received data and compares them with compatibility and configuration data from databases in the backend system to individually check for the registered motor vehicle if this vehicle is affected by one or more updates and upgrades. The review found both optional, as well as requiring updates or upgrades instead (see FIG. 3 block in Fig. 1).

p00644. If an update / upgrade or even several updates / upgrades for registered motor vehicle required or recommended, is to the motor vehicle (or its in-vehicle service interface or other communication interface of the motor vehicle), an electronic message received (see. Block 4 in Fig. 1). 5. After this electronic message was received from the motor vehicle, the driver of the vehicle is informed through an appropriate MMI dialogue that (and if so, which) new updates / upgrades are available (see. Block 5 in Fig. 1).

p00656. The update / upgrade process is actively initiated by the driver by a control command within the MMI dialogue (cf.. Block 6 in Fig. 1).

p0066. The process steps according to the blocks 1, 2 and 3 of Figure 1 preferably run from repeated periodically; the method steps according to the blocks 4, 5 and 6 of FIG. 1 will only be passed is when in fact an update / upgrade for the registered motor vehicle required or recommended. The processing performed by the backend test in block 7 illustrates this. If there is an update / upgrade, the process steps according to the blocks 4, 5 and 6 pass through. Otherwise, the next step in the application pursuant to block. 1

p0067The time or the frequency of transmission can be preferably set from the backend. In this case, for example, the following transmission rules can be defined:

p0068Time-dependent triggering: the vehicle logs every predetermined time on the backend, and sends the data said.

p0069Mileage-dependent triggering: the vehicle logs every predetermined route on the backend, and sends the data mentioned.

p0070Event triggering: upon the occurrence of a predefined condition, the vehicle uses the backend (eg falls below a critical battery voltage).

p0071- Remote triggering: The vehicle can be triggered from the backend customization, log in to the backend.

p0072Repeated Sign of the vehicle at the back end and sending predetermined data to the backend can be regarded as expiring during vehicle service. Such a Service may preferably central side, ie from out back, turned on and off. Optionally, the driver can be given the opportunity, the service itself on and off via the control means in the vehicle. The activation and deactivation of the service can be embedded in an approach to managing, in particular activation and deactivation of multiple services or an entire service package (for example, "TeleServices" in vehicles of the applicant).

p0073The implementation of the solution described above, the following advantages can be achieved:

p0074It is reduced to informational motor vehicles, the number of software-related via a technical action and / or the availability of other updates / upgrades. Due to the "on-time" monitoring of the actual vehicle prior no relevant preselection of motor vehicles is necessary.

p0075It is reduced in the back end of the effort to manage the affected and / or potentially affected vehicles.

p0076The regular comparison using a communication device, the timeliness of the data is improved, (in the case of storage) in the backend services concerning the installed in the vehicles of a vehicle fleet hardware and software components.

p0077Finally, the timeliness of the automotive software status is improved as updates / upgrades regularly can be carried out regardless of the location of the motor vehicle, that is, without the driver having to ensure consult a workshop.