Disclosed embodiments relate to generating an update package for updating software on an Electronic Control Unit (ECU) in a vehicle. Operations may include accessing a plurality of attributes of a software update to be stored on the ECU in the vehicle; accessing a corresponding plurality of attributes of current software stored on the ECU in the vehicle; comparing the plurality of attributes with the corresponding plurality of attributes; generating a delta file representing differences between the plurality of attributes and the corresponding plurality of attributes determined in the comparison; and providing the delta file to the ECU, wherein the delta file is configured to be processed by startup code in the ECU that enables the delta file to execute in the ECU in the vehicle.

Disclosed embodiments relate to performing updates to Electronic Control Unit (ECU) software while an ECU of a vehicle is operating. Operations may include receiving, at the vehicle while the ECU of the vehicle is operating, a software update file for the ECU software; writing, while the ECU is operating, the software update file into a first memory location in a memory of the ECU while simultaneously executing a code segment of existing code in a second memory location in the memory of the ECU; and updating a plurality of memory addresses associated with the memory of the ECU based on the software update file and without interrupting the execution of the code segment currently being executed in the second memory location in the memory of the ECU.

Disclosed embodiments relate to opportunistically updating Electronic Control Unit (ECU) software in a vehicle. Operations may include receiving, at a controller in a vehicle, a wireless transmission indicating a need to update software running on at least one ECU in the vehicle; monitoring an operational status of the vehicle to determine whether the vehicle is in a first mode of operation in which an ECU software update is prohibited; delaying the ECU software update when the operational status is prohibited; continuing to monitor the operational status of the vehicle to determine whether the vehicle is in a second mode of operation in which the ECU software update is permitted; and enabling updating of the at least one ECU with the delayed ECU software update when it is determined that the vehicle is in the second mode of operations.

Disclosed embodiments relate to reporting Electronic Control Unit (ECU) errors or faults to a remote monitoring server. Operations may include receiving operational data from a plurality of ECUs in the vehicle, the operational data being indicative of a plurality of runtime attributes of the plurality of ECUs; generating, through a machine learning process, a statistical model of the operational data; receiving live, runtime updates from the plurality of ECUs in the communications network of the vehicle; identifying an ECU error associated with an ECU in the communications network of the vehicle, the ECU error being determined by a comparison of the live, runtime updates with the statistical model of the operational data to identify at least one deviation from the operational data; and wirelessly sending a report to the remote monitoring server based on the live, runtime updates, the report identifying the ECU and the identified ECU error.

Disclosed is a vehicular update system including a communication device configured to communicate between a server and a controller included in a vehicle, a memory, and a controller configured to, (i) when a public key set including a root public key for verifying a root signature is stored in the memory, acquire the root signature from the server and verify root metadata based on the acquired root signature and the root public key of the public key set pre-stored in the memory, and configured to, (ii) when the public key set is not stored in the memory, acquire, from the server, root metadata including a public key set and a root signature obtained by performing a digital signature on a hash value of the public key set using a root private key, verify the root metadata based on the root public key of the acquired root metadata and the root signature, and store the public key set.

Disclosed embodiments relate to automatically providing updates to at least one vehicle, Operations may include receiving, at a server remote from the at least one vehicle, Electronic Control Unit (ECU) activity data from the at least one vehicle, the ECU activity data corresponding to actual operation of the ECU in the at least one vehicle; determining, at the server and based on the ECU activity data, a software vulnerability affecting the at least one vehicle, the software vulnerability being determined based on a deviation between the received ECU activity data and expected ECU activity data; identifying, at the server, an ECU software update based on the determined software vulnerability; and sending, from the server, a delta file configured to update software on tree ECU with a software update corresponding to the identified ECU software update.

A management apparatus includes a memory configured to store, for each setting place, identification information for identifying an attribute of a device and device information for associating the identification information, a model of the device, and firmware version information of the device; and a processor coupled to the memory and configured to: specify, for each setting place, firmware version information of a same model among devices included in the device information associated with one kind of the identification information based on the identification information and the device information stored in the memory, and execute update processing of firmware of the device of the same model based on the specified firmware version information.

A vehicle control apparatus including: a storage portion configured to store therein a vehicle control software for controlling a vehicle; an updating portion configured to update the vehicle control software stored in the storage portion, to an update software, and an operation check portion configured, when the update software is stored in the storage portion, to make an operation check as to whether the vehicle operates normally or not, by executing processing of the update software on condition that the vehicle is in a vehicle stopped state in which the vehicle is suppressed from being moved in forward and reverse directions. When it is checked by the operation check portion that the vehicle operates normally with the processing of the update software, the updating portion is configured to update the vehicle control software to the update software.

A vehicle control apparatus including: a storage portion configured to store therein a vehicle control software for controlling a vehicle; a receiving portion configured to receive an update software from an external server; and an updating portion configured to update the vehicle control software stored in the storage portion, to the update software received by the receiving portion. The updating portion is configured to determine whether the vehicle is in a long-time requiring state that requires a long time for making a repair of the vehicle which is needed in case update of the vehicle control software is not successfully completed. The updating portion is configured to execute the update of the vehicle control software when determining that the vehicle is not in the long-time requiring state, and is configured to withhold the update of the vehicle control software when determining that the vehicle is in the long-time requiring state.

A communication apparatus is provided in a movable object, and communicates with an external server. The communication apparatus includes a communication control unit for controlling communication with the server, and controlling communication with a movable object control unit controlling the movable object and communication with an update control unit controlling program update of the movable object control unit. The communication control unit performs, when control on the movable object control unit is to be performed from the server, control to receive a first startup request and a command for the movable object control unit from the server, start up and control the movable object control unit, and performs, when control related to program update of the movable object control unit is to be performed from the server, control to receive a second startup request for the update control unit from the server, and start up the update control unit.