Functionally expandable vehicle control device and method for supplementing the functionality of a vehicle control device

• US 9,880,927 B2
• Filed: 05/08/2013
• Issued: 01/30/2018
• Est. Priority Date: 05/12/2012
• Status: Active Grant

• Current Assignee: Volkswagen AG
• Original Assignee: Volkswagen AG
• Inventors: Krieger, Olaf
• Primary Examiner(s): Dao, Thuy
• Assistant Examiner(s): Smith, Cheneca
• Application Number:
  US14/400,565
• Publication Number:
  US 20150154113A1
• Time in Patent Office: 1,728 Days
• CPC Class Codes: G06F 12/0246 in block erasable memory, e.g. flash memory
• CPC Class Codes: G06F 12/1433 for a module or a part of a module
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 2212/7201 Logical to physical mapping or translation of blocks or pages
• CPC Class Codes: G06F 8/654 using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
• CPC Class Codes: G06F 9/4881 Scheduling strategies for dispatcher, e.g. round robin, multi-level priority queues
• CPC Class Codes: G06F 9/5016 the resource being the memory

Abstract

A vehicle control device for supplementing/changing the functionality of a vehicle control device. A vehicle control device is created having at least one processor, a memory coupled to the processor, a plurality of application modules, and at least one communication interface for interchanging data with other vehicle control devices or an external vehicle device. Also disclosed is a method for supplementing/changing the functionality of a vehicle control device.

Claims

1. A method for augmenting the functionality of a vehicle controller, comprising:

providing or producing a program code for an augmenting module that, when executed, prompts a new or altered functionality of the vehicle controller;

setting up a communication link to an update module of the vehicle controller via at least one communication interface;

transmitting the program code of the augmenting module to the vehicle controller; and

storing the program code in a program memory area allocated to a runtime environment module, as a result of which the runtime environment module executes the program code of the augmenting module,

wherein the program code of the augmenting module has metadata added to the program code that comprises at least requirement information about resources needed for execution, the metadata are transmitted to the vehicle controller prior to transmission of the program code or with the program code, the update module uses the metadata to check whether the vehicle controller meets the requirement for the resources that are needed, and metadata that, when the vehicle controller does not meet the requirement for the resources that are needed, terminates transmission of the program data from the augmenting module, rejects said transmission, discards said transmission or erases said transmission from the memory again; and

providing or producing program code for a plurality of augmenting modules,

wherein the runtime environment module is designed to dynamically split the data memory area allocated to the runtime environment module and the processor access time available to the runtime environment module at runtime to execute the program code of the augmenting modules.

2. A vehicle controller, comprising:

at least one processor;

a memory coupled to the processor, wherein the memory stores program codes from an operating system that are able to be executed on the processor;

a plurality of application modules that provide functionalities of the vehicle controller; and

at least one communication interface for data interchange with other vehicle controllers or with an external vehicle device,

wherein the application modules each have the program and data memory areas of the memory that are needed for their respective execution statically associated with them, and

wherein the operating system is designed to enable the individual application modules to access the processor at previously statically stipulated intervals of time for the purpose of executing their program code,

wherein one of the plurality of application modules is an update module enabling the at least one communication interface to receive program code from augmenting modules and to store the received program code in the memory to prompt an expansion and/or change in functionality of the vehicle controller,

wherein one of the plurality of application modules is a runtime environment module that provides a runtime environment to execute the program code of the augmenting modules,

wherein the update module is designed to store the program code of the augmenting modules in the program memory associated with the runtime environment module, and

wherein the runtime environment module is designed to dynamically split the data memory area allocated to the runtime environment module and the processor access time available to the runtime environment module at runtime to execute the program code of the augmenting modules.

3. The vehicle controller of claim 2, wherein the memory comprises a nonvolatile parameter memory to store parameters for the plurality of application modules, wherein one of the plurality of application modules provides a functionality that permits the parameters to be read and/or set by communication using the at least one communication interface, and wherein parameters for augmenting modules are stored in the parameter memory in the form of key value pairs.

4. The vehicle controller of claim 2, wherein the communication structure in the controller is statically stipulated at the time of production of the vehicle controller, said communication structure comprising message queues that the runtime environment module uses to interchange data with the remainder of the application modules.

5. The vehicle controller of claim 4, wherein the runtime environment module provides a message queue manager in the runtime environment, said message queue manager providing static runtime environment message queues that are mapped onto the static message queues of the operating system level and enable the augmenting modules to communicate with the remainder of the application modules and permitting dynamic message queues to be formed at runtime to allow communication between the augmenting modules.

6. The vehicle controller of claim 2, wherein the runtime environment module comprises a virtual machine in a stack machine.

7. The vehicle controller of claim 2, wherein the communication interface is as a message-based interface and the individual vehicle controllers have associated communication identifiers, and at least one communication identifier is stipulated that is provided for communication by or with an augmenting module.