System and method for reprogramming nodes in an automotive switch fabric network

• US 7,593,344 B2
• Filed: 12/17/2004
• Issued: 09/22/2009
• Est. Priority Date: 10/14/2004
• Status: Active Grant

• Current Assignee: Continental Automotive Systems, Inc. (Continental AG)
• Original Assignee: Temic Automotive of North America, Incorporated (Continental AG)
• Inventors: Jordan, Patrick D., Dong, Hai, Johnson, Hugh W., Kartha, Prakash U.
• Primary Examiner(s): Patel; Ajit
• Application Number:
  US11/015,133
• Publication Number:
  US 20060083173A1
• Time in Patent Office: 1,740 Days
• Field of Search: 370/241, 370/242, 370/245, 370/246, 370/250, 370/252, 701/2, 701/23, 701/24, 701/29, 701/31, 701/33, 701/34, 701/35
• US Class Current: 370/241
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G07C 5/008 communicating information to a remotely located station transmission systems for measured values G08C
• CPC Class Codes: G07C 5/0808 Diagnosing performance data testing of vehicles G01M17/00; testing of electrical installation on vehicles G01R31/005
• CPC Class Codes: H04L 12/40 Bus networks
• CPC Class Codes: H04L 12/40032 Details regarding a bus interface enhancer
• CPC Class Codes: H04L 12/4135 using bit-wise arbitration
• CPC Class Codes: H04L 12/4625 Single bridge functionality, e.g. connection of two networks over a single bridge
• CPC Class Codes: H04L 2012/40273 the transportation system being a vehicle
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 49/1576 Crossbar or matrix
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A system and method for reprogramming nodes in an automotive switch fabric network using a diagnostic interface. The switch fabric network includes a plurality of nodes joined by communication links for the transmission of data there between. The plurality of nodes includes at least one target node. The target node includes a processor, a transceiver, and a memory. The memory includes an erasable memory portion and a protected memory portion. The processor in the target node switches from executing instructions in the erasable memory portion to executing instructions in the protected memory portion during a reprogramming period when the target node erases a current software component and stores a new software component in its erasable memory portion. The diagnostic interface is adapted to transmit the new software component to the target node.

Claims

1. A vehicle network comprising:

a plurality of nodes joined by communication links for the transmission of data there between, the plurality of nodes including at least one target node, the target node including a processor, a transceiver, and a memory, the memory including an erasable memory portion and a protected memory portion;

a diagnostic interface adapted to transmit a new software component to the target node;

wherein the processor in the target node switches from executing instructions in the erasable memory portion to executing instructions in the protected memory portion during a reprogramming period when the target node erases a current software component and stores the new software component in its erasable memory portion.

2. The vehicle network in claim 1, wherein the erasable memory portion in the target node includes software for an application layer, a network layer, and a link layer.

3. The vehicle network in claim 1, wherein the protected memory portion in the target node includes software for a flash memory loader, a system manager agent, a network layer, and a link layer.

4. The vehicle network in claim 1, wherein the diagnostic interface receives the new software component from a diagnostic device in response to an input from a remote user that identifies the target node.

5. The vehicle network in claim 1 further comprising a gateway node that is adapted to receive the new software component from the diagnostic interface and route the new software component to the target node.

6. The vehicle network in claim 1 wherein the processor in the target node switches from executing instructions in the erasable memory portion to executing instructions in the protected memory portion in response to reprogramming message received from the diagnostic interface.

7. The vehicle network in claim 1 wherein the processor in the target node stores the new software component in its erasable memory portion after verifying a checksum received from the diagnostic interface.

8. A diagnostic system for a vehicle network, the vehicle network including a plurality of nodes joined by communication links for the transmission of data there between, the plurality of nodes including at least one target node and a gateway node, the target node including a processor, a transceiver, and a memory, the memory including an erasable memory portion and a protected memory portion, the diagnostic system comprising:

a diagnostic interface connected to the gateway node;

a diagnostic device connected to the diagnostic interface, the diagnostic device having a system manager for controlling a reprogramming process to replace at least one current software component residing in the erasable memory portion with at least one new software component;

wherein the reprogramming process includes a message transmitted from the system manager to the target node, the message causing the target node to switch from executing instructions in the erasable memory portion to executing instruction in the protected memory portion before replacing the at least one current software component residing in the erasable memory portion.

9. The diagnostic system in claim 8, wherein the erasable memory portion in the target node includes software for an application layer, a network layer, and a link layer.

10. The diagnostic system in claim 8, wherein the protected memory portion in the target node includes software for a flash memory loader, a system manager agent, a network layer, and a link layer.

11. The diagnostic system in claim 8, wherein the diagnostic interface receives the at least one new software component from the diagnostic device in response to an input from a remote user that identifies the target node.

12. The diagnostic system in claim 11, wherein the gateway node receives the at least one new software component from the diagnostic interface and routes the at least one new software component to the target node.

13. The diagnostic system in claim 8 wherein the reprogramming process includes a second message transmitted from the system manager to the target node, the second message causing the target node to erase the at least one current software component in its erasable memory portion.

14. The diagnostic system in claim 13 wherein the reprogramming process includes a third message transmitted from the system manager to the target node, the third message causing the target node to perform a checksum operation after receiving the at least one new software component from the diagnostic device.

15. The diagnostic system in claim 14 wherein the reprogramming process includes a fourth message transmitted from the system manager to the target node, the fourth message causing the target node to store the at least one new software component in its erasable memory portion.

16. A method for reprogramming nodes in a switch fabric of a vehicle communication network, the switch fabric including a plurality of nodes joined by communication links for the transmission of data there between, the plurality of nodes including at least one target node and a gateway node, the target node including a processor, a transceiver, and a memory, the memory including an erasable memory portion and a protected memory portion, the method comprising the steps of:

receiving, at the gateway node, a reprogramming message and routing the reprogramming message to the target node;

switching, at the target node, from executing instructions in the erasable memory portion to executing instructions in the protected memory portion;

erasing, at the target node, at least one current software component in the erasable memory portion;

receiving, at the gateway node, at least one new software component and routing the new software component to the target node;

storing, at the target node, the new software component in the erasable memory portion; and

switching, at the target node, from executing instructions in the protected memory portion to executing instructions in the erasable memory portion.

17. The method in claim 16, wherein the step of receiving a reprogramming message at the gateway node is sent by a diagnostic interface.

18. The method in claim 16, wherein the erasable memory portion of the memory in the target node includes software for an application layer, a network layer, and a link layer.

19. The method in claim 16, wherein the protected memory portion of the memory in the target node includes software for a flash memory loader, a system manager agent, a network layer, and a link layer.

20. The method in claim 16, wherein the step of receiving at least one new software component at the gateway node is sent by a diagnostic interface.

21. The method in claim 16 if further comprising the steps of:

receiving, at the gateway node, a checksum message and routing the checksum message to the target node; and

performing, at the target node, a checksum operation prior to the step of storing the at least one new software component in the erasable memory portion.