Hybrid electric vehicle with automated software update system

• US 10,564,954 B2
• Filed: 10/11/2017
• Issued: 02/18/2020
• Est. Priority Date: 10/11/2017
• Status: Active Grant

• Current Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Original Assignee: Ford Global Technologies, LLC (Ford Motor Company)
• Inventors: Tillman, Brian David, Throop, Medville Jay, Zeneli, Ylldes, Clark, Karl Nathan
• Primary Examiner(s): Wang, Philip
• Assistant Examiner(s): Wang, Rongfa P
• Application Number:
  US15/730,651
• Publication Number:
  US 20190108010A1
• Time in Patent Office: 860 Days
• Field of Search: None
• CPC Class Codes: B60L 58/12 responding to state of charge [SoC]
• CPC Class Codes: B60W 2556/45 External transmission of data to or from the vehicle
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/0841 Registering performance data recording measured values G01D; information storage G11B
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: Y02T 10/70 Energy storage systems for electromobility, e.g. batteries

Abstract

A vehicle includes an onboard controller(s) coupled to a wireless transceiver, which are configured to connect to a remote server, and to respond to a remote software update message for a vehicle from the remote server(s). In response, the controller(s) download a software update to the vehicle from the remote server(s). The controller(s) are further configured to detect a vehicle idle state, to determine whether the vehicle is unattended, such that the software update may proceed. If the idle state is detected, and in response to the remote software update message, the controller(s) configure the vehicle to a program mode, having vehicle conditions that include key on, transmission in park, and engine off. If the program mode configurations are successful, then the controller(s) update and/or flash the downloaded updates to in-vehicle, onboard computer processing systems and controller(s), which may include for example an engine control unit (ECU), among others.

Claims

1. A vehicle, comprising:

an onboard controller configured to;

responsive to receiving a remote software update message for a vehicle, download a software update to the vehicle from a remote server; and

responsive to detecting a vehicle not in use state,

automatically configure the vehicle to a programt mode including key on, park, and engine off conditions,

flash and verify the update to one or more vehicle controllers, and

terminate the first mode and command a key off condition.

2. The vehicle according to claim 1, comprising:

the onboard controller coupled to a networked communications device, and further configured to;

connect periodically to the remote server, and

responsive to receiving a software version request from the server,

generate a reply to the server including a software version list, and

receive the remote software update message including software update authentication data.

3. The vehicle according to claim 1, comprising:

the onboard controller coupled to a wireless transceiver and in communication with the remote server, and further configured to;

in response to a software version list transmitted to the server,

receive the remote software update message including software update authentication data, and

verify the downloaded software update according to the authentication data, and

in response to a failed verification,

redownload the software update, and

in response to successful verification,

automatically configure the vehicle to the program mode.

4. The vehicle according to claim 1, comprising:

the onboard controller further configured to;

responsive to detecting a current time to be within a predetermined update schedule,

automatically configure the vehicle to the program mode, and responsive to detecting unavailability, generating a pending update message.

5. The vehicle according to claim 1, comprising:

the onboard controller further configured to;

responsive to detecting a current time to be within a predetermined update schedule,

automatically configure the vehicle to the program mode, and responsive to detecting unavailability,

monitor a current time until detecting a time within the predetermined update schedule.

6. The vehicle according to claim 1, comprising:

the onboard controller coupled to a battery, and further configured to;

responsive to detecting a battery state of charge exceeding a flash charge limit, automatically configure the vehicle to the programt mode.

7. The vehicle according to claim 6, comprising:

the onboard controller further configured to;

responsive to detecting a recharge permission and the state of charge (SoC) not exceeding the limit,

automatically configure the vehicle to the program mode with an engine on condition,

such that the battery is recharged until the SoC exceeds the flash charge limit.

8. The vehicle according to claim 1, comprising:

the onboard controller further configured to;

responsive to verification of the update and termination of the program mode,

communicate an update status to one or more of the remote server and the vehicle.

9. The vehicle according to claim 1, comprising:

the onboard controller coupled to a graphical user interface, and further configured to;

generate and communicate to the remote server an update inquiry in response to an input from the graphical user interface, and

receive in response, the remote software update message for the vehicle.

10. The vehicle according to claim 1, comprising:

the onboard controller coupled to a graphical user interface, and further configured to;

in response to a vehicle/user interaction signal received by the controller,

generate at least one of a program mode alert message to the graphical user interface and an audiovisual alert to annunciate the configured program mode.

11. A vehicle, comprising:

an onboard controller coupled to a wireless transceiver and configured to;

responsive to detecting updated software on a remote server,

download the software to the vehicle; and

responsive to detecting an unused and unattended state during a predetermined time,

automatically configure the vehicle with key on, park, and engine off conditions,

flash the software to at least one vehicle controller, and

automatically command a key off condition.

12. The vehicle according to claim 11, comprising:

the onboard controller further configured to;

connect periodically to the remote server, and

responsive to receiving a software version request from the server,

generate a reply to the server including a software version list, and

download the software with update authentication data.

13. The vehicle according to claim 11, comprising:

the onboard controller further configured to communicate with the remote server, and to;

in response to a software version list transmitted to the server,

download the updated software and update authentication data, and

verify the downloaded software update according to the authentication data, and

in response to a failed verification,

redownload the updated software, and

in response to successful verification,

automatically configure the vehicle with the key off condition.

14. The vehicle according to claim 11, comprising:

the onboard controller coupled to a battery, and further configured to;

responsive to detecting a battery state of charge exceeding a flash charge limit,

automatically configure the vehicle with the key on, park, and engine off conditions.

15. The vehicle according to claim 11, comprising:

the onboard controller further coupled to a battery and configured to;

responsive to detecting a recharge permission and a state of charge (SoC) not exceeding a flash charge limit,

automatically configure the vehicle with an engine on condition, such that the battery is recharged until the SoC exceeds the limit.

16. A method of controlling a vehicle, comprising:

by an onboard controller coupled to a wireless transceiver,

responsive to detecting updated software on a remote server,

downloading the software to the vehicle; and

responsive to detecting an unattended and unused vehicle state,

automatically configuring the vehicle with key on, park, and engine off conditions,

flashing the software to at least one vehicle controller, and

commanding a key off condition.

17. The method according to claim 16, comprising:

by the onboard controller,

connecting periodically to the remote server, and

responsive to receiving a software version request from the server,

generating a reply to the server including a software version list, and

downloading the software with update authentication data.

18. The method according to claim 16, further comprising:

by the onboard controller further configured to communicate with the remote server,

in response to transmitting a software version list to the server,

downloading the updated software and update authentication data, and

verifying the downloaded software update according to the authentication data, and

in response to a failed verification,

redownloading the updated software, and

in response to successful verification,

automatically configuring the vehicle with the key off condition.

19. The method according to claim 16, comprising:

by the onboard controller coupled to a battery,

responsive to detecting a battery state of charge exceeding a flash charge limit,

automatically configuring the vehicle with the key on, park, and engine off conditions.

20. The method according to claim 16, further comprising:

by the onboard controller coupled to a battery and further configured to;

responsive to detecting a recharge permission and a state of charge (SoC) not exceeding a flash charge limit,

automatically configure the vehicle with an engine on condition,

such that the battery is recharged until the SoC exceeds the limit.