Method and system for remote programming of a program-controlled device using a legitimization code

• US 8,060,873 B2
• Filed: 07/08/2004
• Issued: 11/15/2011
• Est. Priority Date: 07/14/2003
• Status: Active Grant

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Bauer, Norbert, Sonnenrein, Thomas, Engel, Peter, De Boer, Gerrit, Ceskutti, Holger
• Primary Examiner(s): Zhen; Wei
• Assistant Examiner(s): Chen; Qing
• Application Number:
  US10/564,208
• Publication Number:
  US 20060220900A1
• Time in Patent Office: 2,686 Days
• Field of Search: 717168-178, 340/988, 455/418, 455/419, 701/1, 701/2
• US Class Current: 717/177
• CPC Class Codes: G06F 8/60 Software deployment

Abstract

A method for remote programming of a program-controlled device, and a system having an interface to receive program data and a legitimization, as well as a remotely programmable, program-controlled device, which includes a processor and a program memory, are provided. In the method, program data are remotely transmitted from a control station to the interface and buffer-stored there in a buffer store. Subsequently, a legitimization is transmitted from the control station to the interface, and from there to the program-controlled device. The device checks the legitimization and imports the program data from the buffer store if the legitimization check is positive.

Claims

1. A method for remote programming of a device configured to be program-controlled, comprising:

remotely transmitting program data from a control station via a long-distance connection to an interface connected to the device, wherein the program data include one or more check sums calculated from the program data;

buffering the program data at the interface;

checking the integrity of the program data by using the one or more check sums;

if the program data is determined to be free of errors, remotely transmitting a legitimization from the control station to the interface, wherein the legitimization forms a security code associated with the device;

assigning a validity period to the legitimization;

forwarding the legitimization, unbuffered, to the device upon receiving the legitimization at the interface;

checking, by the device, the legitimization for validity, wherein the checking includes checking of the validity period of the legitimization; and

if the legitimization is determined to be valid, entering the program data into a memory of the device.

2. The method as recited in claim 1, wherein at least one of the legitimization and the program data is wirelessly transmitted via the long-distance connection.

3. The method as recited in claim 2, wherein the method is repeated if a fault occurs in the wireless transmission of at least one of the legitimization and the program data.

4. The method as recited in claim 3, wherein at least one of the program data and the legitimization is forwarded via a wired connection from the interface to the device.

5. The method as recited in claim 4, further comprising:

prior to the remote transmission of the program data to the interface, reading data from the memory of the device and transmitting the device memory data to the control station.

6. The method as recited claim 4, further comprising:

after entering of the program data into the memory of the device, checking whether the remote programming has been successfully completed, and

if the remote programming has been successfully completed, resuming an operation of the device, controlled by the program data.

7. A method for remote programming of a device configured to be program-controlled, comprising:

remotely transmitting program data from a control station via a long-distance connection to an interface connected to the device, wherein the program data include one or more check sums calculated from the program data;

buffering the program data at the interface;

checking the integrity of the program data by using the one or more check sums;

if the program data is determined to be free of errors, remotely transmitting a legitimization from the control station to the interface, wherein the legitimization forms a security code associated with the device;

buffering the legitimization at the interface by storing the legitimization together with the program data;

assigning a validity period to the legitimization;

after the buffering of the legitimization, forwarding the legitimization to the device;

checking, by the device, the legitimization for validity, wherein the checking includes checking of the validity period of the legitimization; and

if the legitimization is determined to be valid, entering the program data into a memory of the device.

8. The method as recited in claim 7, wherein at least one of the legitimization and the program data is wirelessly transmitted via the long-distance connection.

9. The method as recited in claim 8, wherein the method is repeated if a fault occurs in the wireless transmission of at least one of the legitimization and the program data.

10. The method as recited in claim 9, wherein at least one of the program data and the legitimization is forwarded via a wired connection from the interface to the device.

11. The method as recited in claim 10, further comprising:

prior to the remote transmission of the program data to the interface, reading data from the memory of the device and transmitting the device memory data to the control station.

12. The method as recited in claim 11, wherein the device memory data are buffered at the interface prior to being transmitted to the control station.

13. The method as recited in claim 11, wherein the control station arranges the program data on the basis of the device memory data.

14. A system for remote programming of a device, comprising:

an interface configured to receive program data and a legitimization from a control station, wherein the program data include one or more check sums calculated from the program data; and

the device is configured to be remotely programmed and program-controlled, wherein the device includes a processor and a program memory, wherein the device is operatively connected to the interface, wherein the legitimization forms a security code associated with the device, wherein the legitimization is assigned a validity period, and wherein the device is further configured to check the validity period of the legitimization;

wherein the interface is further configured to;

buffer the received program data;

check the integrity of the received program data by using the one or more check sums;

receive the legitimization from the control station if the received program data is determined to be free of errors;

forward the received legitimization to the device without buffering, upon receiving the legitimization; and

transmit the buffered program data to the device after a positive determination of validity of the received legitimization by the device.

15. The system as recited in claim 14, wherein the program memory is one of a flash memory and an EEPROM.

16. The system as recited in claim 14, wherein the interface is operatively connected to a control station with the aid of a wireless long-distance connection.

17. The system as recited in claim 16, wherein the device is a control unit that controls a subsidiary device.

18. The system as recited in claim 17, wherein the subsidiary device is one of:

a motor vehicle;

a component of the motor vehicle; and

an engine.