Event data protection method for a flash programmable microprocessor-based control module

• US 20020143409A1
• Filed: 04/02/2001
• Published: 10/03/2002
• Est. Priority Date: 04/02/2001
• Status: Active Grant

• Current Assignee: Carrum Technologies, LLC (Pratima Instruments, LLC)
• Original Assignee: Delphi Technologies, Inc. (BorgWarner Incorporated)
• Inventors: Patterson, James Frank, Wallner, Edward J.
• Granted Patent: US 6,804,752 B2
• Time in Patent Office: Days
• US Class Current: 700/2
• CPC Class Codes: G05B 19/0426 Programming the control sequence
• CPC Class Codes: G05B 2219/23308 Transfer program from ram to eprom, flash, card
• CPC Class Codes: G05B 2219/23338 Transfer modified program from ram to eprom, flash
• CPC Class Codes: G05B 2219/24142 Program has a protected, independent part and a free programmable part
• CPC Class Codes: G05B 2219/24151 Inhibit programming if physical resources are missing, no gas for heating
• CPC Class Codes: G05B 2219/25265 Flash memory

Abstract

A flash programmable microprocessor-based control module is operated in a manner to protect the integrity of event data stored in the programmable memory of the module while permitting authorized manufacturing and field alteration of the programmable memory with a Download and Execute routine. The Download and Execute routine is resident in a designated sector of the module'"'"'s read-only memory, and download access to the module'"'"'s random access memory after module manufacture has been completed is denied. During manufacture of the module, and during field programming of the controller prior to the writing of event data, the programmable memory may be externally altered by an authorized service tool by transferring the Download and Execute routine from read-only memory to random access memory for execution by the module'"'"'s microprocessor, and downloading the new data or code over a data link coupling the service tool to the module. After event data has been written to the programmable memory, external requests to alter the programmable or read-only memories are denied, and the transfer of the Download and Execute routine to random access memory is not permitted.

Claims

1. A method of operation for a microprocessor-based control module having a programmable memory for storing event data, where the method protects said event data from alteration by an external device while permitting authorized manufacturing and field alteration of data stored in the programmable memory with a Download and Execute routine, the method comprising the steps of:

storing the Download and Execute routine in a designated sector of said programmable memory during manufacture of said module; and

responding to a request by said external device to download data for storage in said programmable memory by;

determining if event data is stored in said programmable memory;

transferring said Download and Execute routine to a random access memory of said module and executing said Download and Execute routine for downloading data from said external device and storing the downloaded data in said programmable memory if it is determined that event data is not stored in said programmable memory; and

denying said request to download data if it is determined that event data is stored in said programmable memory.

2. The method of operation of claim 1, including the steps of:

granting requests by said external device to download data to said random access memory during manufacture of said module; and

denying requests by said external device to download data to said random access memory after the manufacture of said module has been completed.

3. The method of operation of claim 1, including the steps of:

performing a security check to determine if said external device is authorized to access said module; and

denying said request to download data if said external device fails to pass said security check.

4. A method of operation for a microprocessor-based control module having a programmable memory for storing event data, where the method protects said event data from alteration by an external device while permitting authorized manufacturing and field alteration of data stored in the programmable memory with a Download and Execute routine, the method comprising the steps of:

during manufacture of said module;

granting requests by said external device to download data, including a Download and Execute routine, to a random access memory of said module; and

storing the Download and Execute routine in a designated sector of said programmable memory; and

after the manufacture of said module has been completed;

denying requests by said external device to download data to said random access memory;

determining if event data is stored in said programmable memory;

granting a request by said external device to download data for storage in said programmable memory using the Download and Execute routine stored in said programmable memory if it is determined that event data is not stored in said programmable memory; and

denying a request by said external device to download data for storage in said programmable memory if it is determined that event data is stored in said programmable memory.

5. The method of operation of claim 4, wherein the step of granting a request by said external device to download data for storage in said programmable memory includes the steps of:

copying said Download and Execute routine from said designated sector of said programmable memory to the random access memory of said module; and

executing the copied Download and Execute routine for downloading data from said external device and storing the downloaded data in said programmable memory.

6. The method of operation of claim 4, including the steps of:

performing a security check to determine if said external device is authorized to access said module; and

denying said request to download data if said external device fails to pass said security check.