Methods and apparatus to selectively disable functions of electronic control units

• US 10,259,469 B2
• Filed: 06/08/2016
• Issued: 04/16/2019
• Est. Priority Date: 06/08/2016
• Status: Active Grant

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: Miloser, James Andrew, Cunningham, Steve Michael, Acosta, Chris
• Primary Examiner(s): Kleinman, Lail A
• Application Number:
  US15/176,850
• Publication Number:
  US 20170355381A1
• Time in Patent Office: 1,042 Days
• Field of Search: None
• CPC Class Codes: B60W 2050/0006 Digital architecture hierarchy
• CPC Class Codes: B60W 50/04 Monitoring the functioning of the control system
• CPC Class Codes: G06F 11/00 Error detection; Error correction; Monitoring error detection, correction or monitoring in information storage based on relative movement between record carrier and transducer G11B20/18; monitoring, i.e. supervising the progress of recording or reproducing G11B27/36; in static stores G11C29/00
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/085 using electronic data carriers

Abstract

Methods and apparatus to selectively disable functions in electronic control units are disclosed. An example method includes executing, via a processor of an electronic control unit in a vehicle, a first software function and a second software function. The method further includes preventing the execution of the first software function while continuing to execute the second software function.

Claims

1. A method comprising:

executing, via a processor of an electronic control unit in a vehicle, a first software function and a second software function;

receiving, at the electronic control unit via a controller network in the vehicle, a first message transmitted from an external device; and

in response to the first message, preventing the execution of the first software function while continuing to execute the second software function, the preventing of the execution of the first software function accomplished without a physical modification to the vehicle, the external device to execute a replacement software function when the first software function is prevented from being executed, the replacement software function corresponding to the functionality of the electronic control unit provided by the first software function.

2. The method of claim 1, further including executing the second software function using first data generated by the first software function before receiving the first message when the first software function is executed, and executing the second software function using replacement data generated by the replacement software function after receiving the first message when the first software function is prevented from being executed.

3. The method of claim 1, further including:

receiving a second message for the first software function from a different electronic control unit; and

routing the second message to the external device, the external device to execute the replacement software function using data contained within the second message.

4. The method of claim 3, further including:

receiving a response to the second message from the external device; and

forwarding the response to the second message to a designated destination.

5. The method of claim 1, further including:

receiving the first message during runtime of the electronic control unit; and

preventing the execution of the first software function during the runtime.

6. The method of claim 1, further including preventing the execution of the first software function after the electronic control unit is reset.

7. The method of claim 1, wherein the external device is a different electronic control unit in the vehicle.

8. The method of claim 1, wherein the external device is communicatively coupled to the electronic control unit via at least one of an onboard diagnostic connector of the vehicle or a wireless communication interface.

16. The method of claim 1, wherein at least one of (1) execution of the first software function is triggered by a first output from a different electronic control unit in the vehicle or (2) execution of the first software function generates a second output that triggers the execution of a different software function in a different electronic control unit.

9. An electronic control unit in a vehicle comprising:

a processor; and

a memory including instructions that, when executed, cause the processor to;

execute a first software function of the electronic control unit of the vehicle;

execute a second software function of the electronic control unit;

receive, via a controller network in the vehicle, a first message transmitted from an external device; and

in response to the first message, disable the first software function to prevent the execution of the first software function while continuing to execute the second software function, the disabling of the first software function accomplished independent of physical modifications to the vehicle, the external device execute a replacement software function when the first software function is prevented from being executed, the replacement software function corresponding to a functionality of the electronic control unit provided by the first software function.

10. The electronic control unit of claim 9, wherein the instructions further cause the processor to execute the second software function using first data generated by the first software function before receiving the first message when the first software function executed, and execute the second software function using replacement data generated by the replacement software function after receiving the first message when the first software function is disabled.

11. The electronic control unit of claim 9, wherein the instructions further cause the processor to:

receive a second message for the first software function from a different electronic control unit; and

route the second message to the external device, the external device to execute the replacement software function using data contained within the second message.

12. The electronic control unit of claim 11, wherein the instructions further cause the processor to:

receive a response to the second message from the external device; and

forward the response to the second message to a designated destination.

17. The electronic control unit of claim 9, wherein at least one of (1) execution of the first software function is triggered by a first output from a different electronic control unit in the vehicle or (2) execution of the first software function generates a second output that triggers the execution of a different software function in a different electronic control unit.

13. A tangible computer readable storage medium comprising instructions that, when executed, cause a machine to at least:

execute a first software function of an electronic control unit in a vehicle;

execute a second software function of the electronic control unit;

receive, via a controller network in the vehicle, a first message transmitted from an external device; and

in response to the first message, disable the first software function while continuing to execute the second software function, the disabling of the first software function accomplished without physical modification to the vehicle, the external device to execute a replacement software function when the first software function is prevented from being executed, the replacement software function corresponding to a functionality of the electronic control unit provided by the first software function.

14. The tangible computer readable storage medium of claim 13, wherein the instructions further cause the machine to:

receive a second message for the first software function from a different electronic control unit; and

route the second message to the external device, the external device to execute the replacement software function using data contained within the second message.

15. The tangible computer readable storage medium of claim 14, wherein the instructions further cause the machine to:

receive a response to the second message from the external device; and

forward the response to the second message to a designated destination.

18. The tangible computer readable storage medium of claim 13, wherein at least one of (1) execution of the first software function is triggered by a first output from a different electronic control unit in the vehicle or (2) execution of the first software function generates a second output that triggers the execution of a different software function in a different electronic control unit.