Method for changing the software in the memory of an electronic control unit

• US 9,678,867 B2
• Filed: 12/09/2014
• Issued: 06/13/2017
• Est. Priority Date: 12/09/2013
• Status: Active Grant

• Current Assignee: Dspace Digital Signal Processing And Control Engineering Gmbh
• Original Assignee: Dspace Digital Signal Processing And Control Engineering Gmbh
• Inventors: Dressler, Marc, Hufnagel, Thorsten, Kellers, Bastian
• Primary Examiner(s): Chavis, John
• Application Number:
  US14/564,958
• Publication Number:
  US 20150161046A1
• Time in Patent Office: 917 Days
• Field of Search: 710 48, 711102, 717168
• CPC Class Codes: G06F 12/0638 Combination of memories, e.g. ROM and RAM such as to permit replacement or supplementing of words in one module by words in another module address formation of the next microinstruction G06F9/26; masking faults in memories by using spares or by reconfiguring G11C29/70
• CPC Class Codes: G06F 13/24 using interrupt G06F13/32 takes precedence
• CPC Class Codes: G06F 2212/202 Non-volatile memory
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/66 of program code stored in read-only memory [ROM]

Abstract

A method for changing software in a memory of an electronic control unit, wherein each memory address from the overlay memory can be assigned to a memory address in the read-only memory by an assignment information item. During a run time of the control unit, at least a functional part of a bypass routine that is to at least partially replace an original program routine is stored in an address range in the overlay memory, or a jump instruction is stored in the overlay memory as the first part of a bypass routine that refers to a second part of the bypass routine that is stored in an address range accessible to the processor. To activate an overlay functionality the address and/or the address range of the overlay memory are assigned to an address or address range of the program routine to be replaced.

Claims

1. A method for changing a software in the memory of an electronic control unit, wherein the memory includes at least one read-only memory with multiple original program routines stored therein that constitute at least a portion of the software and that are processed by at least one processor of the control unit, the memory has at least one working memory for storing volatile data, and the memory also has an overlay memory, the method comprising:

assigning each memory address from the overlay memory to a memory address in the read-only memory by an assignment information item, with the result that, when an overlay functionality is activated, instead of processing a program routine instruction at an address in the read-only memory, the processor processes the instruction at an assigned address of the overlay memory;

storing, during a run time of the control unit, at least a functional part of a bypass routine that is to at least partially replace an original program routine in an address range in the overlay memory, or storing a jump instruction in the overlay memory as the first part of a bypass routine that refers directly or indirectly to a second part of the bypass routine that is stored in an address range accessible to the processor; and

creating an assignment information item, in order to activate an overlay functionality, that assigns the address and/or the address range of the overlay memory to an address or address range of the program routine to be replaced or the portion of the program routine to be replaced and this assignment information item is activated or deactivated through an interface of the control unit,

wherein an activation of the overlay functionality takes place at a time when machine code to be replaced by the activation of the overlay functionality is not being executed by the processor of the control unit.

2. The method according to claim 1, wherein an entire address range in the read-only memory that is occupied by the program routine to be replaced or program routine portion to be replaced is overlaid by the overlay memory with an address range of equal length in which the replacing bypass routine is at least partially stored.

3. The method according to claim 1, wherein in the case of a bypass routine with a longer program code length than the program routine to be replaced or than the program routine portion to be replaced, the entire address range in the read-only memory that is occupied by the program routine to be replaced or by the program routine portion to be replaced is overlaid in the overlay memory by an address range of equal length in which is stored a first portion of the bypass routine ending with a jump instruction that causes the processor to continue processing at an address identified by the jump instruction and starting at which at least an additional portion of the bypass routine is stored.

4. The method according to claim 2, wherein, in the case of replacement of an entire program routine, the bypass routine ends with a return instruction that causes the processor to return program processing to the program routine that has called the program routine to be replaced, or has called it as a subroutine, or in the case of replacement of only a portion of a program routine, the bypass routine ends with a jump instruction that causes the processor to proceed with program processing at the instruction of the original program routine that follows the portion to be replaced.

5. The method according to claim 1, wherein the entire functional code of a bypass routine is stored in a memory area outside of the active overlay memory and an instruction or data item at an address of the program routine to be replaced is overlaid by the overlay memory with a jump instruction that causes the processor to continue processing at the address identified by the jump instruction and starting at which is stored the functional code of the bypass routine, which routine ends with a return instruction that causes the processor to return to the particular program routine that has called the program routine to be replaced, in particular has called it as a subroutine.

6. The method according to claim 1, wherein the functional code of the bypass routine is stored in a memory area outside of the active overlay memory and an instruction at an address of the program routine to be replaced in the overlay memory is overlaid with a jump instruction that causes the processor to continue processing at an address identified by the jump instruction, wherein the jump instruction refers to an address starting at which a program code further performs calling of the functional code of the bypass routine, in particular wherein the calling of the functional code of the bypass routine takes place within a subroutine called within this program code.

7. The method according to claim 1, wherein a logic unit performing the activation, which runs on the influencing device connected through the interface, monitors the program processing position of the processor of the control unit by the program counter, and wherein the activation takes place at a time when the program processing position points to an address outside the program routine to be replaced.

8. The method according to claim 1, wherein a logic unit performing the activation, which runs on the influencing device connected through the interface, monitors a trigger/interrupt that is set by program code located outside the program routine to be replaced, and the activation takes place when a change in the trigger/interrupt is detected.

9. The method according to claim 8, wherein the trigger is implemented by the accessing of a variable or a state change of an I/O pin.

10. The method according to claim 1, wherein the activation is carried out by a subroutine called by a processor of the control unit.

11. The method according to claim 1, wherein an instruction in a program routine outside the program routine to be replaced or outside the portion of the program routine to be replaced is overlaid by a jump instruction in the overlay memory, wherein the jump instruction refers to an address starting at which a program code is programmed that reconstructs the overlaid instruction, that additionally performs the deactivation/activation of the overlay functionality for the program routine to be replaced, and that ends with a jump instruction that refers to the instruction in the program routine outside the program routine to be replaced that follows the overlaid instruction, and wherein the activation is accomplished by calling a subroutine within this program code.

12. The method according to claim 1, wherein the code stored in the active overlay memory exactly reconstructs a part of the code stored in the corresponding assigned memory addresses of the read-only memory.

13. The method according to claim 1, wherein the creation of the assignment information item and the activation of the overlay functionality take place by an influencing device connected to an interface of the control unit or a computer connected to an interface of the control unit.

14. The method according to claim 1, wherein the creation of the assignment information item and/or the activation of the overlay functionality take place by a program routine executed by a processor of the control unit.

15. The method according to claim 14, wherein the control unit has at least two processor cores, wherein the program routine for creation of the assignment information and/or the activation of the overlay functionality is processed by a first processor core and the original program routines are processed by a second processor core or by multiple additional processor cores.

16. The method according to claim 1, wherein the bypass routine contains a complete function ending with a return instruction.

17. The method according to claim 1, wherein the bypass routine or a part of a bypass routine is stored in a memory area addressable by the processor through an interface of the control unit during the run time of the control unit.

18. The method according to claim 1, wherein at least one instruction in a program routine is overlaid by a jump instruction in the overlay memory, and wherein the jump instruction refers to an address starting at which a program code is programmed that reconstructs the overlaid instruction, that additionally calls a functional bypass routine, and that ends with a jump instruction that refers to the instruction in the program routine that follows the overlaid instruction.

19. The method according to claim 18, wherein the control unit has at least two processor cores and at least the functional code of the bypass routine is processed by one or more first processor cores and the original program routines are processed by one or more second processor cores.

20. The method according to claim 1, wherein an overlay memory on a control unit is created by programming a memory management unit of the control unit such that the logical memory addresses that are assigned to the program routine to be replaced or program routine portion to be replaced when the overlay functionality is deactivated are assigned, when the overlay functionality is activated, to physical memory addresses that in their totality contain at least a part of the bypass routine.