FR3066626A1 - DEVICE AND METHOD FOR CONTROLLING THE STARTS OF DOWNLOADED SYSTEM UPDATES OF A SYSTEM - Google Patents

Abstract

A control device (DC) equips a system (V) comprising at least one rechargeable main battery (BP) during a recharging phase, a service battery (BS) rechargeable via this main battery (BP) and supplying at least one an electronic equipment (E1) that can be updated, and a communication module (CMN) that can receive updates by way of waves. This device (DC) comprises control means (MCT) which determines, following the reception of an update for the electronic equipment (E1), a first time to start this update received according to a duration of this update, a second start time of a programmed recharging phase, and a state of charge of the service battery (BS), and which control the start of this update received at first schedule determined.

Description

DEVICE AND METHOD FOR CONTROLLING THE START-UP OF

DOWNLOADED UPDATES FROM SYSTEM EQUIPMENT

The invention relates to systems which include at least one electronic device which can be updated by downloading by means of waves.

As those skilled in the art know, many systems, such as vehicles, possibly of the automobile type, include electronic equipment (generally computers) whose operation is defined by software modules (or “software”) , which for at least some of them may be the subject of downloaded updates. “Download” is understood here to mean transmitting by wave (or “Over The Air”), to the communication module of a system, one or more data files defining an update of minus electronic equipment from a system. Such a transmission can be done on the initiative of a server or at the request of a computer of the system.

When a computer update campaign is decided, the update is transmitted by waves to the systems concerned and the start of this received update is triggered as soon as possible. The start of the received update is generally carried out once the system is asleep (or unused), which requires waking it up and consequently induces a discharge of the service battery (very low voltage) which powers the electronic equipment. . Such operation can pose several problems.

Indeed, if the state of charge of the service battery is low, the installation of an update can discharge it below a level allowing the system to start, which then prevents the use of this last and can accelerate the aging of this service battery.

In addition, when the system includes a rechargeable battery which can be recharged in a programmed manner, the start of a received update may result in an interruption of a charging phase in progress or else a cancellation of a programmed recharging phase . This results in particular from the fact that the updating of electronic equipment may not be possible during a recharging phase.

Furthermore, when a system is woken up several times for successive installations of several updates received in a short period of time, this causes each time the wakeup and then the functioning of several electronic devices (and not only that to be put ), which accelerates the aging of this electronic equipment.

It has certainly been proposed in patent document WO 2012/002231 to estimate the periods during which a vehicle will not be used in order to install the updates received during these periods. But such a solution only avoids the installation of updates during the phases of use of the vehicle, which could prove potentially dangerous, but not successive awakenings and interruptions or cancellations of the recharging phases.

The invention therefore aims in particular to improve the situation.

It proposes in particular a control device intended to equip a system comprising at least one main battery rechargeable during a recharging phase, a service battery rechargeable via this main battery and supplying at least one electronic equipment capable of being updated, and a communication module capable of receiving updates by waves.

This control device is characterized by the fact that it comprises control means which determine, following the reception of an update for electronic equipment, a first schedule for starting this update received as a function of a duration of this update, of a second schedule for starting a programmed recharging phase, and of a state of charge of the service battery, and which control the start of this update received at the first determined schedule .

This control over the start of updates not only prevents interruptions or cancellations of the recharging phases, but also the premature aging of electronic components involved in alarms and updates of electronic equipment.

The control device according to the invention may include other characteristics which can be taken separately or in combination, and in particular:

- its control means can determine a first schedule equal to or later than the second schedule when the update of the electronic equipment is feasible during a recharging phase;

- its control means can determine, when the state of charge of the service battery is greater than a first threshold and that the updating of the electronic equipment cannot be carried out during the recharging phase, a first schedule equal to a result of subtracting the second schedule from the sum of the update time and a hold time;

- its control means can determine, when the state of charge of the service battery is less than a first threshold and that the updating of the electronic equipment is not feasible during the recharging phase, a first schedule equal to or later than a sum of the second schedule and an estimated duration of the recharging phase. In a first variant embodiment, its control means can temporarily prohibit the start of the update until receipt of an update order provided by a user of the system. In a second variant embodiment, its control means can determine a first schedule equal to a result of subtracting a third schedule for the start of a phase of programmed use of the system from the sum of the duration of the setting. up to date and on-call time;

- its control means can determine the first schedule so that a sum of the latter and the update time is less than a fourth schedule for starting a programmed operating phase of other electronic equipment of the system .

The invention also provides a system comprising at least one main rechargeable battery during a recharging phase, a service battery rechargeable via this main battery and supplying at least one electronic equipment capable of being updated, a clean communication module. to receive updates by wave, and a control device of the type presented above.

For example, this system can constitute a vehicle, possibly of the automobile type.

The invention also provides a control method intended to be implemented in a system comprising at least one main rechargeable battery during a recharging phase, a service battery rechargeable via this main battery and supplying at least one own electronic equipment. to be updated, and a communication module capable of receiving updates by means of waves.

This method is characterized by the fact that it comprises a step in which, the system determines, following the reception of an update for the electronic equipment, a first schedule for starting this update received as a function of a duration of this update, of a second schedule for starting a programmed recharging phase, and of a state of charge of the service battery, and starts this update received at the first determined schedule.

Other characteristics and advantages of the invention will appear on examination of the detailed description below, and of the appended drawing, in which the single figure schematically and functionally illustrates a vehicle comprising an all-electric type transmission chain and a supervision computer equipped with a control device according to the invention.

The object of the invention is in particular to propose a DC control device intended, on the one hand, to equip a system V comprising at least one main rechargeable battery BP, a service battery BS rechargeable via this main battery BP and supplying at least electronic equipment Ej, MCN which can be updated by downloading, and, on the other hand, to control the installations of the updates received.

In what follows, it is considered, by way of nonlimiting example, that the system V is a vehicle of automobile type, such as for example a car. However, the invention is not limited to this type of system. It in fact relates to any type of vehicle system comprising a main rechargeable battery and a service battery supplying electronic equipment which can be updated by downloading. Consequently, the invention relates to vehicles (land, sea (or river), and air), electronic devices (possibly general public), and installations, possibly of industrial type, for example.

There is schematically shown in the single figure an example of a system (here a vehicle) V comprising a main rechargeable battery BP, a service battery BS, an on-board network (or electrical supply) RB to which electronic equipment are connected Ej and an MCN communication module, a CB charger and a DC control device according to the invention.

In the example illustrated without limitation, the system V is a vehicle and therefore comprises a transmission chain. Here, the transmission chain is of the all-electric type. It therefore includes, in particular, a first drive machine MM1, first coupling means MC1 and a first transmission shaft AT1 associated with a first train T1, in addition to its main battery BP and its charger CB. However, the invention is not limited to this type of transmission chain. In fact, the transmission chain could be of the hybrid type by additionally comprising a thermal drive machine associated with its second train T2.

The term “driving machine” is understood here to mean a machine (or an engine) arranged so as to supply or recover torque for moving a vehicle, either alone or in addition to at least one other possible driving machine electric or thermal (such as a heat engine (reactor, turbojet or chemical engine)).

The control of at least the first motive machine MM1 and of the first coupling means MC1 is ensured by a supervision computer CS.

The main BP battery is designed to store electrical energy, for example at low voltage (typically 300 V). It can in particular be replaced via the CB charger during programmed or unscheduled recharging phases.

The CB charger is intended to be connected to an external power supply, such as a charging station or a mains socket, via a dedicated charging cord.

The first coupling means MC1 are responsible for coupling / decoupling the first motor machine MM1 to / from the first transmission shaft AT1, on the order of the supervision computer CS, in order to communicate the torque that it produces and which is defined by a setpoint (of torque or speed), thanks to the electrical energy stored in the main battery BP, at the first transmission shaft AT1. The latter (AT1) is coupled to the first train T1 (here of wheels).

For example, the first train T1 is located at the rear of the vehicle V, and preferably, and as illustrated, coupled to the first drive shaft AT1 via a differential (here rear) DR. However, in a variant, this first train T1 could be located at the front of vehicle V.

The service battery BS is of very low voltage type (for example 12 V, 24 V or 48 V). It supplies an on-board network RB to which electronic equipment Ej, MCN of the vehicle V are connected. This service battery BS is preferably coupled to the main battery BP via a CV converter of DC / DC type, in order to be able to be recharged in particular. during a recharging phase via the CB charger.

One of the electronic equipment MCN is a communication module by wave which can in particular receive from a non-wired communication network data files defining updates of at least one electronic equipment Ej, MCN of the vehicle V The electronic equipment Ej (which can be updated) are, for example, computers or man / machine interfaces or sensors or even actuators. Note that at least one of these computers can be involved in the installation of updates. In the example illustrated without limitation in the single figure, three electronic devices E1 to E3 (j = 1 to 3) are connected to the on-board network RB. However, the number of electronic devices Ej connected to the on-board network RB can take any value greater than or equal to one (1).

The control device DC, according to the invention, comprises control means MCT which are responsible for intervening each time that the communication module MCN has received an update to be installed in at least one of the electronic devices Ej.

In the nonlimiting example illustrated in the single figure, the control device DC is part of the supervision computer CS. But it is not compulsory. This DC control device could indeed be an equipment coupled to the CS supervision computer, directly or indirectly. Consequently, the DC control device can be produced in the form of software modules (or computer or "software"), or else of a combination of electronic circuits (or "hardware") and software modules.

When an update has been received for electronic equipment Ej (for example the first E1), the control means MCT begin by determining, possibly at the request of a man / machine interface, a first schedule h1 to start this update received as a function of a duration d1 of this update, of a second schedule h2 of starting a programmed recharging phase (of the service battery BS), and of a state of charge (in course) ec of the BS service battery. Then, the control means MCT control the start of this update received at the first hour h1 that they have determined.

The second schedule h2 has, for example, been programmed by a user of vehicle V via a man / machine interface, or else by an on-board computer (such as for example the supervisory computer CS) according to the usual hours of use of vehicle V ( known by learning or recorded by the user).

The second schedule h2 and the state of charge ec are easily accessible in vehicle V, for example via one of the computers and / or via an on-board communication network, through which the electronic equipment Ej and MCN exchange data and possibly multiplexed type.

This control of the starting of updates in vehicle V advantageously makes it possible to avoid interruptions or cancellations of the recharging phases, the premature aging of the service battery BS, and the premature aging of the electronic components which are involved in the alarms and Ej electronic equipment updates.

Several implementations of determining the first schedule h1 can be envisaged.

For example, the control means MCT can determine a first schedule h1 which is equal to or later than the second schedule h2 when the update of the electronic equipment Ej concerned (for example E1) is achievable during a programmed recharging phase.

Also for example, the control means MCT can determine a first schedule h1 which is equal to the result of the subtraction of the second schedule h2 from the sum of the duration d1 of the update and a duration of guard (or time delay) ) dg, when the state of charge ec of the service battery BS is greater than a first threshold s1 and the updating of the electronic equipment Ej concerned cannot be carried out during the programmed recharging phase. In this implementation we therefore have the relation h1> h2 - (d1 + dg) when ec> s1, which means that we consider that we can install the update before performing the recharging phase because the service battery BS is sufficiently charged to support the update without it discharging it too much (which would accelerate its aging and could possibly prevent the next starting of the vehicle V). For example, the dg guard time can be between 0 seconds and 30 minutes.

Also for example, the control means MCT can determine a first schedule h1 which is equal to or later than the sum of the second schedule h2 and a minimum recharging time d _m in function of an estimated duration of the recharging phase, when the state of charge ec of the service battery BS is less than the first threshold s1 and the updating of the electronic equipment Ej concerned cannot be carried out during the recharging phase. This minimum recharging duration d _m in may, for example, correspond to the duration which is necessary for the state of charge of the main battery BP to reach a second threshold s2 and which depends on the estimated duration of the recharging phase. For example, this minimum recharging time d _m in may correspond to a second threshold s2 equal to a predefined percentage of the maximum charge (100%) of the main BP battery (this predefined percentage depends in particular on the technology of the service battery BS and the definition given to the maximum load). In this implementation we therefore have the relation h1> h2 + d _m in when ec <s1, which means that we consider that we must wait for the end of the recharging phase to install the update with a battery BS service also recharged.

In a first variant of the last implementation, the MCT control means can temporarily prohibit the start of the update until receipt of an update order provided by a user of the vehicle V. In other words , the installation of the update is postponed until it is the user who takes the decision to start it, for example by selecting an option from a menu displayed on a screen of vehicle V (possibly that central handset).

In a second variant of the last implementation, the control means MCT can determine a first schedule h1 which is equal to the result of the subtraction of a third schedule h3 for the start of a scheduled use phase of the vehicle V from the sum of the duration d1 of the update and of a guard (or timeout) duration dg '. The programmed use phase can be known to vehicle V by learning or recorded by a user of vehicle V via a man / machine interface. In this implementation variant we therefore have the relation h1 = h3 - (d1 + dg j when ec <s1, which means that we delay the installation of the update for as long as possible while making sure it must be completed before the third hour h3 For example, the guard time dg 'can be between 0 seconds and 30 minutes.

It will also be noted that the control means MCT can possibly determine the first time h1 by taking into account another parameter h4 which is a fourth time for starting a programmed operating phase of other electronic equipment Ej 'of the vehicle V before the use of vehicle V. In this case, they determine the first schedule h1 so that the sum of the latter (h1) and the duration d1 of updating is less (or earlier) than the fourth schedule h4. By way of example, this other electronic equipment Ej ’can be at least part of an air conditioning installation of a passenger compartment of the vehicle, and the programmed operating phase can be intended to carry out thermal preconditioning of this passenger compartment. In this implementation there is therefore the relation h1 + d1 <h4, which means that the installation of the update is carried out before the operating phase programmed in the fourth schedule h4.

It will also be noted that when several updates have been received in a short period of time, the MCT control means can control their installation in parallel or in series in order to limit the number of alarms and the activation times of the computers. Consequently, the first schedule h1 can be determined according to this constraint which the installation of several updates can represent. In this case, the aforementioned duration d1 may be equal to the longest of the durations of the updates received (for a parallelization) or to the sum of the durations of the various updates received (for a serialization).

It is also important to note that the invention can also be considered from the angle of a control method, which can in particular be implemented by means of a DC control device of the type presented above. The functionalities offered by the implementation of the method according to the invention being identical to those offered by the DC control device presented above, only the combination of main functionalities offered by the control method is presented below.

This control method comprises a step in which, the system V (and more precisely its control device DC) determines, following the reception of an update for an electronic equipment Ej, MCN, a first schedule h1 to start this update received as a function of the duration d1 of this update, of a second schedule h2 of starting a programmed recharging phase, and of the state of charge ec of the service battery BS, and starts this update received at the first determined hour h1.

Claims (10)

1. Control device (DC) for a system (V) comprising at least one main battery (BP) rechargeable during a recharging phase, a service battery (BS) rechargeable via said main battery (BP) and supplying power to the less electronic equipment (Ej) capable of being updated, and a communication module (MCN) capable of receiving updates by wave, characterized in that it includes determining means of control (MCT) , following receipt of an update for said electronic equipment (Ej), a first schedule for starting this update received as a function of a duration of this update, a second schedule for starting a programmed recharging phase, and of a state of charge of said service battery (BS), and controlling said starting of this update received at said first determined schedule. 2. Device according to claim 1, characterized in that said control means (MCT) determine a first schedule equal to or after said second schedule when said updating of the electronic equipment (Ej) is achievable during a recharging phase. 3. Device according to claim 1 or 2, characterized in that said control means (MCT) determine, when said state of charge of the service battery (BS) is greater than a first threshold and that said updating of the electronic equipment (Ej) is not feasible during said recharging phase, a first schedule equal to a result of subtracting said second schedule from the sum of said duration of the update and a duration of custody. 4. Device according to one of claims 1 to 3, characterized in that said control means (MCT) determine, when said state of charge of the service battery (BS) is less than a first threshold and that said setting day of the electronic equipment (Ej) is not feasible during said recharging phase, a first schedule equal to or later than a sum of said second schedule and a minimum recharging time depending on an estimated duration of said phase of refill. 5. Device according to one of claims 1 to 3, characterized in that said control means (MCT) temporarily prohibit the start of said update until receipt of an update order provided by a user of said system (V), when said state of charge of the service battery (BS) is less than a first threshold and when said updating of the electronic equipment (Ej) cannot be carried out during said recharging phase. 6. Device according to one of claims 1 to 3, characterized in that said control means (MCT) determine a first schedule equal to a result of a subtraction of a third schedule for the start of a use phase programmed of said system (V) of the sum of said duration of the update and a duration of guard, when said state of charge of the service battery (BS) is less than a first threshold and that said update electronic equipment (Ej) cannot be produced during said recharging phase. 7. Device according to one of claims 1 to 6, characterized in that said control means (MCT) determine said first schedule so that a sum of the latter and said update time is less than a fourth start time of a programmed operating phase of other electronic equipment (Ej ') of said system (V). 8. System (V) comprising at least one main battery (BP) rechargeable during a recharging phase, a service battery (BS) rechargeable via said main battery (BP) and supplying at least its own electronic equipment (Ej) to be updated, and a communication module (MCN) suitable for receiving updates by wave, characterized in that it further comprises a control device (DC) according to one of the preceding claims . 9. System (V) according to claim 8, characterized in that it constitutes a vehicle. 10. Control method for a system (V) comprising at least one main battery (BP) rechargeable during a recharging phase, a service battery (BS) rechargeable via said main battery (BP) and supplying at least one piece of equipment electronic (Ej) suitable for being updated, and a communication module (MCN) suitable for receiving updates by wave, characterized in that it comprises a step in which said system (V) determines, following the reception of an update for said electronic equipment (Ej), a first schedule for starting this update received as a function of a duration of this update, of a second start schedule for a programmed recharging phase, and of a state of charge of said service battery (BS), and starts this update received at said first determined schedule.