• 专利附录
  • 专利说明
  • 权利要求
  • 类似技术
  • 同族专利
  • 引用文献
  • 法律状态
  • 优先权
    • 专利摘要:
    The invention relates to a method of updating a plurality of vehicles (10) each comprising an embedded server (20) and at least two devices (25A, 25B), embedded server (20) and each of the devices (25A, 25B) storing initial data, each embedded server (20) being connected to the devices (25A, 25B) mounted in the same vehicle (10) by a local area network (R1). The method comprises the steps of: - transfer of modified data, through a radiofrequency communication wide area network (R2), from a ground server (55) to the embedded servers (20), - when the modified data has been stored in each embedded server (20), transmission via the extended network (R2), an update command, and - transmission of the modified data to at least one device (25A, 25B) through the corresponding local network (R1). , the modified data replacing, in said apparatus (25A, 25B), the initial data.
    公开号:FR3053864A1
    申请号:FR1656424
    申请日:2016-07-05
    公开日:2018-01-12
    发明作者:Lilian Planche
    申请人:Alstom Transport Technologies SAS；
    IPC主号:
    专利说明:

    053 864
    56424 ® FRENCH REPUBLIC
    NATIONAL INSTITUTE OF INDUSTRIAL PROPERTY © Publication number:
    (only to be used for reproduction orders) © National registration number
    COURBEVOIE © Int Cl 8 : H 04 L 29/02 (2017.01)
    PATENT INVENTION APPLICATION
    A1
    ©) Date of filing: 05.07.16.(© Priority: © Applicant (s): ALSTOM TRANSPORT TECHNOLOGIES — TR. @ Inventor (s): LILIAN BOARD. ®) Date of public availability of the request: 12.01.18 Bulletin 18/02. ©) List of documents cited in the preliminary search report: See the end of this booklet (© References to other related national documents: ® Holder (s): ALSTOM TRANSPORT TECHNOLOGIES. ©) Extension request (s): (© Agent (s): LAVOIX.
    METHOD FOR UPDATING A PLURALITY OF VEHICLES AND ASSEMBLY OF A PLURALITY OF RAIL VEHICLES AND AN ASSOCIATED MANAGEMENT SYSTEM.
    FR 3 053 864 - A1 _ The invention relates to a method for updating a plurality of vehicles (10) each comprising an on-board server (20) and at least two devices (25A, 25B), on-board server (20) and each of the devices (25A, 25B) storing initial data, each on-board server (20) being connected to the devices (25A, 25B) mounted in the same vehicle (10) by a local network (R1).
    The process includes the steps of:
    - transfer of modified data, through a wide radiofrequency communication network (R2), from a ground server (55) to the on-board servers (20),
    - when the modified data have been stored in each on-board server (20), transmission via the wide area network (R2), of an update command, and
    - Transmission of the modified data to at least one device (25A, 25B) through the corresponding local network (R1), the modified data replacing, in said device (25A, 25B), the initial data.
    EU
    EU
    EU
    EU
    EU
    EU
    EU EU
    EU EU EU
    EU EU
    ==. 1 - 1 i - '/ 1 - 1 - __— 5 - 25A RI 25A RI

    Method for updating a plurality of vehicles and assembly formed by a plurality of railway vehicles and an associated management system
    The present invention relates to a method for updating a plurality of vehicles. The present invention also relates to an assembly formed by a plurality of vehicles and a system for managing the plurality of vehicles. The vehicles are, for example, railway.
    Many vehicles are fitted with electronic equipment for many functions. For example, safety equipment such as signaling systems, traction control, maintenance management, or even network equipment, are frequently mounted on many types of vehicles. Other electronic equipment enables communication functions, optimization of the performance and energy consumption of vehicles, or even monitoring of its proper functioning.
    Electronic equipment of the aforementioned types generally comprises a memory on which data is stored, and in particular software instructions which are implemented by a controller to execute said functions. The advantage of such software instructions is that they can be modified in order to improve the operation of the equipment or to adapt it to a modification of the vehicle, for example if other devices with which the equipment is interacting are fitted. on the vehicle. Thus, in most cases, it is not necessary to modify the equipment itself, but only to adapt the software instructions. Such a modification of the software instructions is called "update".
    However, updating the device usually requires the intervention of a specialized technician. Thus, either the technician must move to the location of the vehicle, or the vehicle must be immobilized at the depot for the technician to perform the update. Updating a large number of vehicles, for example a fleet of vehicles managed by a public transport company or a fleet of trains, is therefore long. In addition, it implies a significant loss of availability of the vehicles in question, which are generally immobilized for updating during the day, during the usual working hours of the technician.
    In addition, a period that is sometimes quite long may exist during which several versions of the same software instructions coexist, the time for the technician (s) to perform the update on the entire fleet, which complicates the management of the fleet by the operator. .
    Thus, there is a need for a method of updating the electronic equipment of a fleet of vehicles which allows better availability of the vehicles.
    To this end, the subject of the invention is a method for updating a plurality of vehicles, each vehicle comprising an on-board server, a first electronic device and at least a second electronic device, the on-board server comprising a first memory and a radio frequency communication module and each of the first device and the second device comprising a controller and a second memory storing a set of initial data, each on-board server being connected to each of the first device and the second device mounted in the same vehicle by a network vehicle internal communication room. The process includes the following steps:
    transfer of update data, through an extended radio frequency communication network, from at least one server on the ground to the on-board servers of the vehicles of said plurality, the update data comprising modified data intended to be stored by at least one of the first device and the second device of each vehicle considered,
    - storage of update data in the first memory of each vehicle,
    - when the update data has been stored in the first memory of each vehicle, transmission through the wide area network, by a server on the ground, of an update command to the on-board server of each vehicle, and
    transmission by each on-board server having received the update command of the modified data to at least one of the first device and of the second device through the corresponding local network, the modified data replacing, in the second memory of said device, the initial data.
    According to other advantageous aspects of the invention, the method comprises one or more of the following characteristics, taken alone or in any technically possible combination:
    - the transmission step includes the following substeps:
    • sending of an update request, by each on-board server having received the update command, to at least one of the first device and the second device of the same vehicle, • return, by said device, of a authorization to update the on-board server, and • replacement, said device, of the original data with the modified data, the replacement sub-step being implemented after the reception, by the on-board server, of the authorization to corresponding update;
    an active state and an inactive state are defined for each vehicle of the plurality, the inactive state being representative of the fact that the vehicle is not in motion and the active state being representative of the fact that the vehicle is in motion, at least one of the first device and of the second device being configured to, during the return substep, return the authorization if the vehicle is in the inactive state and, if said vehicle is in the active state, wait until said vehicle switches to the inactive state to return the authorization;
    - in the issuing step, the update command is issued simultaneously by the server on the ground to each on-board server of the plurality of vehicles;
    - the transmission step is implemented successively for the first device and the second device of the same vehicle in a predetermined order;
    - in the issuing step, the update command is issued successively by the server on the ground to each on-board server of the plurality of vehicles;
    - The transmission step is implemented simultaneously for the first device and the second device of the same vehicle;
    the first device is configured to transmit information between the second device and the on-board server, the update data comprising first modified data intended to be stored in the second memory of the first device and second modified data intended to be stored in the second memory of the second device, the second modified data being transmitted to the second device during the transmission step, no first modified data being transmitted to the first device before the second modified data have been fully stored by the second device;
    the update data are distributed into a set of data packets and, during the transfer step, a set of transfer messages is sent by the server on the ground to each on-board server, each message of transfer comprising a data packet and a checksum, the on-board server being configured to calculate each checksum from the corresponding data packet, and to compare the calculated checksum with the checksum contained in the transfer message , each checksum calculated by each on-board server being further transmitted to the server on the ground, the server on the ground comparing each checksum received with the checksum transferred with the corresponding transfer message;
    - the start of the transmission stage is offset from the end of the transfer stage by a time duration greater than or equal to 5 seconds.
    The subject of the invention is also an assembly formed by a plurality of rail vehicles and a system for managing the plurality of rail vehicles, each rail vehicle comprising an on-board server, a first electronic device and at least a second electronic device. , the on-board server comprising a first memory and a radio frequency communication module and each of the first device and of the second device comprising a controller and a second memory storing a set of initial data, each on-board server being connected to each of the first device and of the second device by a local communication network internal to the vehicle, and the management system comprising a server on the ground. The ground server is configured to:
    - transfer, by radio frequency communication, update data to the on-board server of each vehicle through the wide area network, the update data comprising modified data intended to be stored in the second memory of at least one of the first device and the second device, and for
    - issue, through the wide area network, an update command to the on-board server of each vehicle (of the plurality of vehicles when the update data have been stored in the first memory of each vehicle having received the data update, and each embedded server is configured to:
    - store the update data in the first memory, and
    - following receipt of the update command, transmit the modified data to at least one of the first device and the second device through the corresponding local network, the modified data replacing, in the second memory of said device, the initial data.
    The characteristics and advantages of the invention will appear on reading the description which follows, given solely by way of nonlimiting example, and made with reference to the appended drawings, in which:
    FIG. 1 is a schematic representation of an assembly formed by a plurality of railway vehicles and a system for managing the plurality of vehicles according to the invention, and
    - Figure 2 is a flow chart of the steps of a method according to the invention for updating vehicles shown in Figure 1.
    An assembly 1 according to the invention is described with reference to FIG. 1. The assembly 1 comprises a plurality of vehicles 10 and a management system 15 of the plurality of vehicles 10.
    Each vehicle 10 is a rail vehicle. For example, each vehicle 10 is a train. As a variant, each vehicle 10 is a car of a train comprising several cars. According to another variant, each vehicle 10 is a tram.
    According to another variant, each vehicle 10 is a road vehicle, for example a bus.
    An active state is defined for each vehicle 10. The active state is representative of the fact that the vehicle 10 is in motion. For example, vehicle 10 is in the active state when an engine of vehicle 10 is started. Alternatively, the vehicle 10 is in the active state when the vehicle engine 10 is powered.
    An inactive state is defined for each vehicle 10. The inactive state is representative of the fact that the vehicle 10 is not in motion. For example, vehicle 10 is in the inactive state when an engine of vehicle 10 is turned off. Alternatively, the vehicle 10 is in the inactive state when the engine of the vehicle 10 is not powered.
    As a variant, time slots are defined during which the vehicle 10 is likely to be in commercial service and time slots during which the vehicle 10 is in the garage, and the vehicle 10 is in the inactive state only during time slots during which the vehicle 10 is in the garage. These time slots are for example entered manually by an operator or are supplied by a vehicle fleet management system 10.
    Each vehicle 10 comprises an on-board server 20 and a plurality of electronic devices 25. For example, each vehicle 10 comprises a first device 25A, a second device 25B and a third device 25C. Alternatively, each vehicle 10 includes a first device 25A and at least a second device 25B.
    Each on-board server 20 is configured to exchange information with at least one device 25A, 25B, 25C mounted in the same vehicle 10. For example, each on-board server 20 is configured to exchange information with each device 25A, 25B, 25C mounted in the same vehicle 10. In particular, each on-board server 20 is connected to the devices 25A, 25B, 25C mounted in the same vehicle 10 by a local network R1.
    Each on-board server 20 is further configured to exchange information with the management system 15. For example, each on-board server 20 belongs to an extended communication network R2.
    Each on-board server 20 includes a radio frequency communication module 30, a first memory 35 and a computer 40.
    The radio frequency communication module 30 is configured to transmit or receive data transmitted via a signal comprising at least one OEM radio frequency electromagnetic wave.
    Preferably, the radio frequency communication module 30 is capable of transmitting and receiving data transmitted via a signal comprising at least one OEM radio frequency electromagnetic wave.
    OEM radiofrequency electromagnetic waves are electromagnetic waves with a frequency between 3 kilohertz (kHz) and 6 gigahertz (gHz).
    The radio frequency communication module 30 is configured to receive, through the wide area network R2, update data Dm from the management system 15. For example, the radio frequency communication module 30 is configured to receive, through the extended network R2, at least one transfer message MT from the management system 15.
    The update data Dm includes modified data Moi, Mo2, Mo3 intended to be stored in the memory of at least one device 25A, 25B, 25C.
    The update data Dm is distributed into a set of data packets P.
    “Data packet” is understood to mean a set of data transmitted in a single transfer message.
    Each transfer message MT contains a data packet P and a checksum SC. In optional addition, each MT transfer message contains an identifier of an on-board server 20 or of the vehicle 10 which comprises said on-board server 20, for which the MT transfer message is intended.
    A SC checksum (also called "checksum" in English, sometimes also called "fingerprint"), is a number which is added to a message to be transmitted to allow the receiver to verify that the message received is indeed the one which was sent . For example, the SC checksum is a number calculated from the data to be transmitted, so that a modification of the transmitted data induces a modification of the calculated SC checksum.
    The first memory 35 is capable of storing sending software, calculation software and replacement software.
    Each local network R1 is a computer network such that the elements which belong to the local network send data frames to the level of the link layer without using internet access.
    Each local network R1 is, for example, a LAN network (from the English local area network), which means "local network".
    Each local network R1 is, for example, a wired network such as an Ethernet network using a TCP / IP protocol. The TCP / IP suite is the set of protocols used for transferring data over the Internet. It is often called TCP / IP, after the name of its first two protocols: TCP (Transmission Control Protocol) and IP (Internet Protocol). These protocols are described in the reference document RFC 1122.
    As a variant, each local network R1 is a wireless network, for example a Wi-Fi network. Wi-Fi is a set of wireless communication protocols governed by the standards of the group IEEE 802.11 (ISO / IEC 8802-11) . Each local network R1 is a network internal to the vehicle 10 considered. In particular, only devices mounted in the vehicle 10 considered are capable of exchanging data through the local network R1.
    The extended network R2 differs from the local network R1, in the sense that the global network R2 covers a geographical area greater than the local network R1.
    The wide area network R2 is, for example, a WAN network (from the English wide area network), which means "wide area network". In the example of FIG. 1, the wide area network R2 is represented by wire, but it is clear that, as a variant, the wide area network R2 is a wireless network.
    Preferably, the extended network R2 is a mobile telephone network. This means that the WAN R2 is configured to allow the exchange of telephony data by radio frequency electromagnetic waves.
    For example, the extended network R2 is a mobile telephone network conforming to the GSM standard established by the European Telecommunications Standards Institute (or "European Telecommunications Standards Institute"), to the UMTS standard or to the LTE standard.
    The Universal Mobile Telecommunications System (UMTS) is one of the third generation (3G) mobile phone technologies. UMTS is defined by the 3rd Generation Partnership Project (3GPP)
    LTE (Long Term Evolution) is an evolution of GSM and UMTS mobile telephony standards, also defined by 3GPP.
    Alternatively, the extended network R2 is a Wi-Fi network.
    The sending software is configured to send, via the local network R1, an update request to at least one of the first device 25A, the second device 25B and the third device 25C of the vehicle 10.
    The calculation software is configured to calculate, from the data packet P contained in each transfer message MT, the checksum SC. The calculation software is further configured to compare each calculated SC checksum with the SC checksum contained in the corresponding MT transfer message.
    The replacement software is configured to replace data stored in the second memory of at least one of the first device 25A, the second device 25B and the third device 25C with the modified data Moi, Mo2, Mo3.
    When executed on the computer 40, the sending software, the calculation software and the replacement software respectively form a module 42 for sending an update request, a module 43 for calculating a SC checksum and replacement module 44.
    Each of the first device 25A, the second device 25B and the third device 25C is an electronic device. In particular, each of the first device 25A, the second device 25B and the third device 25C is configured to manipulate and / or transform data represented as electronic or physical quantities in registers of a controller and / or in memories in d other similar data corresponding to physical data in memories, registers or other types of display, transmission or storage devices.
    Each of the first device 25A, the second device 25B and the third device 25C includes a controller 45 and a second memory 50.
    For example, the first device 25A is a network switch.
    For example, the second device 25B is a traction computer capable of controlling an engine of the vehicle 10.
    For example, the third device 25C is a signaling computer capable of exchanging signaling signals with devices external to the vehicle 10.
    As a variant, the third device 25C is a braking computer capable of controlling the braking of the vehicle 10.
    Each of the first device 25A, the second device 25B and the third device 25C belongs to the local network R1.
    According to the example of FIG. 1, the first device 25A and the third device 25C are configured to exchange information directly with the corresponding on-board server 20 through the local network R1. It is understood by "exchanging directly" that the information transmitted is transmitted between the device in question and the on-board server 20 without passing through an intermediate electronic device. For example, the first device 25A and the third device 25C are each connected to the server 20 by a single connection cable.
    The first device 25A acts as a communication relay between the second device 25B and the on-board server 20. This means that the first device 25A is configured to transmit information between the second device 25B and the corresponding on-board server 20. In particular, the first device 25A is configured to receive information from the second device 25B and to transmit said information to the corresponding on-board server 20. The first device 25A is also configured to receive information from the on-board server 20 and to transmit said information to the second device 25B.
    For example, the local network R1 is a ring network. The first device 25A, the second device 25B, the third device 25C and the on-board server 20 are then each connected to two other elements of the first network R1, the on-board server 20 being connected in particular to the first device 25A and to the third device 25C.
    As a variant, the first network R1 is a star network.
    The controller 45 of each of the first device 25A, the second device 25B and the third device 25C is configured to carry out a predetermined function when software instructions are executed on the controller 45. For example, the controller 45 is configured to generate a analog or digital control signal from a vehicle actuator 10.
    The second memory 50 of each device 25A, 25B, 25C is configured to store initial data.
    The second memory 50 is capable of storing authorization software.
    Each authorization software is configured to accept or refuse an update request and to communicate, as the case may be, an update authorization or a refusal to the embedded server 20.
    The authorization is, for example, a message including an indicator of the device 25A, 25B, 25C considered.
    In optional addition, the authorization software of at least one of the first device 25A, the second device 25B and the third device 25C is configured to detect the state of the vehicle 10 and to return the authorization according to the vehicle status 10. For example, at least one of the authorization software includes a vehicle status indicator 10. The indicator is, for example, a set of data equal to zero if the vehicle 10 is in the active state and equal to one if the vehicle 10 is in the inactive state.
    For example, the authorization software of the third device 25C is configured to return the corresponding authorization if the vehicle 10 is in the inactive state. The authorization software for the third device 25C is configured to, if the vehicle 10 is in the active state, wait for the vehicle 10 to switch to the inactive state to return the authorization. In other words, the authorization software of the third device 25C is configured to, if the vehicle 10 is in the active state, refuse the update.
    This is for example the case if the third device 25C is a traction computer, a braking computer or even a signaling computer.
    When executed on the computer 40, the authorization software forms an authorization module 52.
    The management system 15 is configured to control the updating of at least one of the first device 25A, the second device 25B and the third device 25C of each vehicle 10.
    The management system 15 comprises at least one server on the ground 55. For example, the management system 15 comprises two servers on the ground 55. Preferably, the management system 15 comprises a single server on the ground 55.
    The ground server 55 differs from each on-board server 20 in that the ground server 55 is not on-board in one of the vehicles 10. For example, the ground server 55 is fixed relative to a building in which the server at floor 55 is mounted.
    As a variant, the server on the ground 55 is mobile. For example, the ground server 55 is movable relative to a building in which the ground server 55 is mounted.
    The ground server 55 is configured to store the update data Dm and to transmit the update data Dm, through the wide area network R2, to at least one of the on-board servers 20. Preferably, the server on the ground 55 is configured to transmit the update data Dm, through the wide area network R2, to each on-board server 20 of the plurality of vehicles 10.
    The update data Dm includes the modified data Moi, Mo2, Mo3 intended to be stored in the second memory 50 of at least one of the first device 25A, the second device 25B and the third device 25C.
    For example, the update data Dm comprise first modified data Moi, second modified data Mo2 and third modified data Mo3. The first modified data Moi are intended to be stored in the second memory 50 of the first device 25A of each vehicle 10. The second modified data Mo2 are intended to be stored in the second memory 50 of the second device 25B of each vehicle 10. The third modified data Mo3 are intended to be stored in the second memory 50 of the third device 25C of each vehicle 10.
    As a variant, the update data Dm comprise the first modified data Moi and the second modified data Mo2.
    The ground server 55 comprises a transfer module 60 and a third memory 65. Advantageously, the ground server 55 also includes a radio frequency communication module.
    The transfer module 60 is configured to transmit the update data Dm, through the wide area network R2, to at least one of the on-board servers 20. In particular, the transfer module 60 is configured to transmit each data message MT on-board server audit 20.
    The transfer module 60 is also configured to receive from at least one of the on-board servers 20 each checksum SC calculated by this on-board server 20.
    The transfer module 60 is configured to send, for example at the request of an operator, through the wide area network R2, an update command to the on-board server 20 of at least one of the vehicles 10 when the data Dm update files have been stored in each embedded server 20.
    The third memory 65 is able to store the modified data Moi, Mo2,
    Mo3.
    The third memory 65 is also able to store control software and comparison software.
    The control software is configured to control the updating, by at least one on-board server 20, of at least one corresponding device 25A, 25B, 25C.
    The comparison software is configured to compare a checksum SC calculated by the calculation module 43 with a checksum stored in the third memory 65.
    When run on a computer on the ground server 55, the control software and the comparison software respectively form a control module and a comparison module.
    The operation of the assembly formed by the plurality of vehicles 10 and the management system 15 will now be described.
    A flowchart of a method for updating the plurality of vehicles 10 has been shown in FIG. 2. The updating method comprises a step 100 of initialization, a step 110 of transfer, a step 120 of storage, a step 130 of transmission and a step 140 of transmission.
    During the initialization step 100, a user U of the management system 15 orders the transfer of update data from at least one vehicle 10. For example, the user U enters a list of at least a vehicle 10 to be updated. As a variant or in addition, the user U enters a list of at least two vehicles 10 to be updated. As a variant, the user U requests the update of each vehicle 10 of the plurality of vehicles 10.
    During the initialization step 100, the second memory 45 of each of the first device 25A, the second device 25B and the third device 25C contains a set of initial data. The initial data includes the software instructions intended to be executed on the corresponding controller 45.
    Then, during the transfer step 110, the update data Dm are transferred to the on-board server 20 of each vehicle 10 in the list.
    The update data Dm is, for example, transferred according to an FTP or SFTP protocol. File Transfer Protocol, or FTP, is a communication protocol for the computer exchange of files over a TCP / IP network. FTP allows, from a computer, to copy files to another computer on the network, or to delete or modify files on this computer.
    As a variant, the update data Dm are transmitted according to an HTTP or HTTPS protocol. The HyperText Transfer Protocol, better known by the abbreviation HTTP - literally "hypertext transfer protocol" - is a client-server communication protocol developed for the World Wide Web.
    The transfer step 110 includes a transfer sub-step 150, a calculation sub-step 160 and a return sub-step 170.
    During the transfer sub-step 150, a transfer message MT is transmitted to a server 20 in the list, by radio frequency communication, by the transfer module 60 of the server on the ground 55.
    For example, the transfer module 60 selects a data packet P and generates the transfer message MT. The transfer module 60 also calculates the checksum SC, stores it in the third memory 65 and integrates it into the transfer message MT.
    During the calculation sub-step 160, the calculation module 43 of the on-board server 20 having received the transfer message MT calculates the checksum SC from the data packet P contained in the transfer message MT and compares the SC checksum calculated with the SC checksum contained in the transfer message MT.
    If the calculated checksum SC is equal to the checksum SC contained in the transfer message MT, the calculation sub-step 160 is followed by the return sub-step 170. Otherwise, the transfer sub-step 150 is repeated with the same data packet P.
    Then, during the return substep 170, the radio frequency communication module 30 of the on-board server 20 having received the transfer message MT transmits to the server on the ground 55 the checksum SC calculated by the calculation module 43. The comparison module then compares the checksum SC calculated by the calculation module 43 with the checksum SC stored in the third memory 65 of the server on the ground 55.
    If the checksum SC calculated by the calculation module 43 is different from the checksum SC stored in the third memory 65, the transfer sub-step 150 is reiterated with the same data packet P.
    If the checksum SC calculated by the calculation module 43 is equal to the checksum SC stored in the third memory 65, the transfer sub-step 150 is reiterated for a new data packet P. This is represented on the Figure 2 by an arrow 175.
    Thus, during the transfer step 110, the update data Dm are transferred to the on-board server 20 of each vehicle 10 in the list. For example, the update data Dm transmitted to each vehicle 10 in the list are identical to each other.
    In the storage step 120, each data packet P is stored in the first memory 35 of the on-board server 20 having received the transfer message MT. At the end of the storage step 120, the update data Dm are therefore stored in the first memory 35 of each vehicle 10 in the list.
    At the end of the storage step 120, the first memory 35 therefore contains the first modified data Moi, the second modified data Mo2 and the third modified data Mo3.
    During the transmission step 130, the control module generates an update command. The transfer module 60 issues the update command, through the wide area network R2, to the on-board server 20 of each vehicle 10 in the list.
    Preferably, the update command is issued simultaneously, by the ground server 55, to the on-board server 20 of each vehicle 10 on the list. For example, the update command is a message sent to the corresponding vehicle 10 in response to a message sent periodically by the vehicle 10.
    The transmission step 130 is implemented after the update data Dm has been stored in the first memory 35 of each vehicle 10 having received the update data Dm. In other words, no update command is issued before each vehicle 10 in the list has received each of the transfer messages MT intended for it. For example, the transmission step 130 is implemented only if, for each data packet P, the checksum SC calculated by the calculation module 43 is equal to the checksum SC stored in the third memory 65 .
    According to the example of FIG. 2, the update data Dm are therefore stored in the first memory 35 of each vehicle 10 having received the update data Dm before the update command is issued. The transmission step 130 is therefore separated from the transfer step 110 by a non-zero time duration. For example, the start of the transmission step 130 is offset from the end of the transfer step 110 by a time duration greater than or equal to 5 seconds.
    During the transmission step 140, each on-board server 20 having received the update command transmits the modified data Moi, Mo2, Mo3 to at least one of the first device 25A and the second device 25B. For example, each on-board server 20 having received the update command transmits the modified data Moi, Mo2, Mo3 to at least one of the first device 25A, the second device 25B and the third device 25C.
    According to the example of FIG. 2, each on-board server 20 having received the update command transmits the modified data Moi, Mo2, Mo3 to the first device 25A, to the second device 25B and to the third device 25C. This is represented in FIG. 2 by three transmission steps 140 (a transmission step 140 for each of the first device 25A, the second device 25B and the third device 25C)
    The transmission step 140 comprises a sending sub-step 180, a returning sub-step 190 and a replacement sub-step 200.
    The transmission step 140 is implemented successively for the first device 25A and for the second device 25B according to a predetermined sequence. For example, the transmission step 140 is implemented for the first device 25A after the transmission step 140 implemented for the second device 25B is completed. In particular, the first modified data Moi are not transmitted to the first device 25A before the second modified data Mo2 has been fully stored in the second memory 50 of the second device 25B.
    As a variant, the transmission step 140 is implemented simultaneously for each of the first device 25A, the second device 25B and the third device 25C.
    For example, the sending step 180 is implemented successively for the first device 25A and for the second device 25B according to a predetermined sequence. For example, the sending step 180 is implemented for the second device 25B, and the sending step 180 is implemented for the first device 25A after the replacement step 200 implemented for the second device 25B was completed.
    As a variant, the sending step 180 is implemented simultaneously for each device 25A, 25B, 25C of the same vehicle 10, but the replacement step 200 is implemented for each device 25A, 25B, 25C according to a predetermined sequence. For example, the replacement step 200 is implemented for the first device 25A after the replacement step 200 implemented for the second device 25B has been completed.
    During the sending substep 180, the on-board server 20 of each vehicle 10 having received the update command sends the update request to at least one of the first device 25A and the second device 25B of the same vehicle 10. More specifically, the on-board server 20 sends the update request to each of the first device 25A, the second device 25B and the third device 25C for which the on-board server 20 has received, during the transfer step 110, the modified data Me, Mo2, Mo3. According to the example of FIG. 2, the on-board server 20 of each vehicle 10 having received the update command therefore sends the update request to each of the first device 25A and the second device 25B and the third device 25C.
    According to the example of FIG. 2, during the sending substep 180, the on-board server 20 sends an update request simultaneously to each of the first device 25A, the second device 25B and the third device 25C. As a variant, the on-board server 20 sends the update requests to the first device 25A, to the second device 25B and to the third device 25C in a predetermined order. For example, the on-board server 20 waits for the replacement substep 200 implemented for the second device 25B to be completed before sending the update request to the first device 25A.
    During the return substep 190, at least one device 25A, 25B, 25C returns the update authorization to the on-board server 20.
    Preferably, at least one device 25A, 25B, 25C only returns the update authorization if the vehicle 10 is in the inactive state.
    In the example of FIG. 2, the vehicle 10 is in the active state when the on-board server 20 sends the update request. The first device 25A and the second device 25B then return the respective update authorizations to the on-board server 20. The third device 25C, for its part, does not return the update authorization. The third device 25C waits for the vehicle 10 to go into the inactive state before returning the update authorization. This is shown in Figure 2 by an arrow in phantom.
    During the replacement substep 200, each device 25A, 25B, 25C having returned the update authorization receives from the on-board server 20 the corresponding modified data Moi, Mo2, Mo3 through the local network R1. The initial data are replaced, in the second memory 50, by the modified data Moi, Mo2, Mo3 corresponding.
    The replacement substep 200 is implemented, for each device 25A, 25B, 25C for which modified data Moi, Mo2, Mo3 have been received, after the reception, by the on-board server 20, of the authorization to update updated returned by the device 25A, 25B, 25C considered.
    When the modified data Moi, Mo2, Mo3 have been stored in the second memory 50 of the corresponding device 25A, 25B, 25C, an end message MF is, for example, transmitted to the on-board server 20 through the local network R1. The MF end message contains, for example, an identifier of the device 25A, 25B, 25C considered and the date of issue of the MF end message.
    The replacement substep 200 is, for example, implemented for the first device 25A after the end message MF sent by the second device 25B has been received by the on-board server 20.
    Thanks to the invention, the modified data Me, Mo2, Mo3 are stored in the memory 50 of each device 25A, 25B, 25C without requiring the intervention of a technician. The updating of the apparatuses 25A, 25b, 25C of the plurality of vehicles 10 is therefore faster, and the availability of the vehicles 10 is improved.
    In addition, the modified data Moi, Mo2, Mo3 are stored in each on-board server 20 before the update command is issued. Thus, the modified data Moi, Mo2, Mo3 can be transmitted to each vehicle 10 with a relatively low bit rate, and the updating of the vehicles 10 is, however, almost simultaneous. It is not necessary to provide a high transmission rate to obtain such a simultaneous update. In addition, little staff is required for the update.
    In addition, the method is not very sensitive to connection interruptions between the on-board servers 20 and the ground server or servers 55, since the transfer of data between the ground server 55 and the on-board servers 20 takes place during a step. prior to updating the devices 25A, 25B, 25C.
    In addition, by the use of the checksum SC and an FTP protocol, the transfer step 110 is robust and not very sensitive to possible interruptions of the wide area network R2, or to temporary decommissioning of the server. on the ground 55 or of the embedded server 20 considered.
    The transmission step 140 being implemented for the first device 25A after it has been implemented for the second device 25B, the second device 25B is permanently able to communicate with the first device 25A. In particular, incompatibilities due to different updates are avoided.
    In a second example of implementation of the updating method, the steps 100 of initialization, 110 of transfer and 120 of storage are implemented for each vehicle 10.
    During a first transmission step 130, the update command is sent to a single vehicle 10 intended to play the role of guinea pig. The transmission step 140 is then implemented for the guinea pig vehicle 10. Then, the correct functioning of the guinea pig vehicle 10 is checked. For example, each device 25A, 25B, 25C having been updated in the guinea pig vehicle 10 is tested.
    If no problem is detected during the tests, the transmission step 130 and the transmission step 140 are implemented for each other vehicle 10 on the list.
    If a problem is detected during the tests, a second transfer step is implemented. During the second transfer step, rectified data Dr are transferred from the ground server 55 to each on-board server 20. The rectified data are intended to at least partially replace the update data Dm in the first memory 35 of each server 20. In other words, the rectified data Dr includes a correction of the update data Dm. For example, the rectified data Dr are intended to partially replace one of the first modified data Me, the second modified data Mo2 and the third modified data Mo3.
    The transmission step 130 and the transmission step 140 are then implemented for each other vehicle 10 in the list, from the update data Dm modified thanks to the corrected data Dr.
    The method then makes it possible to easily test the validity of the update data.
    权利要求:
    Claims (9)
    [1" id="c-fr-0001]
    1A method for updating a plurality of vehicles (10), each vehicle (10) comprising an on-board server (20), a first electronic device (25A) and at least a second electronic device (25B), the on-board server ( 20) comprising a first memory (35) and a radio frequency communication module (30) and each of the first device (25A) and the second device (25B) comprising a controller (45) and a second memory (50) storing a set of initial data, each on-board server (20) being connected to each of the first device (25A) and the second device (25B) mounted in the same vehicle (10) by a local communication network (R1) internal to the vehicle (10), the method being characterized in that it comprises the following stages:
    - transfer (110) of update data, through a wide radio communication network (R2), from at least one server on the ground (55) to the on-board servers (20) of the vehicles (10) of said plurality, the update data comprising modified data intended to be stored by at least one of the first device (25A) and the second device (25B) of each vehicle (10) considered,
    - storage (120) of update data in the first memory (35) of each vehicle (10),
    - when the update data has been stored in the first memory (35) of each vehicle (10), transmission (130) through the wide area network (R2), by a server on the ground (55), of a update command to the on-board server (20) of each vehicle (10), and
    - transmission (140), by each on-board server (20) having received the update command, modified data to at least one of the first device (25A) and the second device (25B) through the local network (R1) corresponding, the modified data replacing, in the second memory (50) of said apparatus (25A, 25B), the initial data.
    [2" id="c-fr-0002]
    2, - Method according to claim 1, in which the transmission step (140) comprises the following substeps:
    - sending (180) of an update request, by each on-board server (20) having received the update command, to at least one of the first device (25A) and the second device (25B) of the same vehicle (10),
    - return (190), by said device (25A, 25B), of an update authorization to the on-board server (20), and
    - replacement (200), in said device (25A, 25B), of the original data with the modified data, the replacement sub-step being implemented after the reception, by the on-board server (20), of the corresponding update authorization.
    [3" id="c-fr-0003]
    3. - Method according to claim 2, wherein an active state and an inactive state are defined for each vehicle (10) of the plurality, the inactive state being representative of the fact that the vehicle is not in motion and the active state being representative of the fact that the vehicle is in motion, at least one of the first device (25A) and of the second device (25B) being configured to, during the return sub-step (190), return the authorization if the vehicle (10) is in the inactive state and, if said vehicle (10) is in the active state, wait for said vehicle (10) to switch to the inactive state to return the authorization.
    [4" id="c-fr-0004]
    4. - Method according to any one of claims 1 to 3, wherein, in the transmission step (130), the update command is issued simultaneously by the ground server (55) to each on-board server (20) of the plurality of vehicles (10).
    [5" id="c-fr-0005]
    5. - Method according to any one of claims 1 to 4, wherein the transmission step (140) is implemented successively for the first device (25A) and the second device (25B) of the same vehicle ( 10) according to a predetermined order.
    [6" id="c-fr-0006]
    6. - Method according to claim 5, wherein the first device (25A) is configured to transmit information between the second device (25B) and the on-board server (20), the update data comprising first modified data intended to be stored in the second memory (50) of the first device (25A) and of the second modified data intended to be stored in the second memory (50) of the second device (25B), the second modified data being transmitted to the second device (25B ) during the transmission step (140), no first modified data being transmitted to the first device (25A) before the second modified data has been fully stored by the second device (25B).
    [7" id="c-fr-0007]
    7. - Method according to any one of claims 1 to 6, in which the update data are distributed in a set of data packets and, during the transfer step (110), a set of messages. transfer (MT) is sent (150) by the ground server (55) to each on-board server (20), each transfer message (MT) comprising a data packet and a checksum, the on-board server ( 20) being configured to calculate (160) each checksum from the corresponding data packet, and to compare the calculated checksum to the checksum contained in the transfer message (MT), each checksum calculated by each on-board server (20) being further transmitted (170) to the ground server (55), the ground server (55) comparing each checksum received with the checksum transferred with the corresponding transfer message (MT) .
    [8" id="c-fr-0008]
    8. - Method according to any one of claims 1 to 7, wherein the start of the transmission step (130) is offset from the end of the transfer step (110) by a greater time period or equal to 5 seconds.
    [9" id="c-fr-0009]
    9. - Assembly formed by a plurality of railway vehicles (10) and a system (15) for managing the plurality of railway vehicles (10), each railway vehicle (10) comprising an on-board server (20), a first electronic device (25A) and at least a second electronic device (25B), the on-board server (20) comprising a first memory (35) and a radio frequency communication module (30) and each of the first device (25A) and the second device (25B) comprising a controller (45) and a second memory (50) storing a set of initial data, each on-board server (20) being connected to each of the first device (25A) and of the second device (25B) by a network communication room (R1) internal to the vehicle (10), and the management system (15) comprising a ground server (55), the assembly being characterized in that the ground server (55) is configured to:
    - transfer, by radio frequency communication, update data to the on-board server (20) of each vehicle (10) through a wide area network (R2), the update data comprising modified data intended to be stored in the second memory (50) of at least one of the first device (25A) and the second device (25B), and for
    - issue, through the wide area network (R2), an update command to the on-board server (20) of each vehicle (10) of the plurality of vehicles (10) when the update data has been stored in the first memory (35) of each vehicle (10) having received the update data, and in that each on-board server (20) is configured to:
    - store the update data in the first memory (35), and
    - following receipt of the update command, transmit the modified data to at least one of the first device (25A) and the second device (25B) through the corresponding local network (R1), the modified data replacing, in the second memory of said device (25A, 25B), the data
    5 initials.
    1/2 a θ
    a a
    2/2
    类似技术:
    公开号 | 公开日 | 专利标题
    EP3267663B1|2020-03-18|Method for updating a plurality of vehicles and ensemble formed by a plurality of railway vehicles and an associated management system
    EP2727414A1|2014-05-07|The obtaining, by a terminal, of information relating to access to a service
    US20200259655A1|2020-08-13|Connected gateway server system for real-time vehicle control service
    EP2296405A1|2011-03-16|Wireless communication device and method, and system comprising such a device
    EP2158735B1|2013-08-07|Method of communication between a source node and a destination node, the nodes belonging to a vehicular network
    EP2438735A1|2012-04-11|Method for calculating a first identifier of a secure element of a mobile terminal according to a second identifier of said secure element
    FR2996716A1|2014-04-11|METHOD FOR ROAMING IN CASE OF DEFICIENCY OF THE DATA SERVICE OF A MOBILE TELEPHONE NETWORK
    FR3032074A1|2016-07-29|METHOD FOR TESTING A RADIOCOMMUNICATION DEVICE TO TEST A GATEWAY IN A GATEWAY PARK
    EP3478002A1|2019-05-01|Communication device for a vehicle comprising a plurality of communication means
    WO2020016499A1|2020-01-23|Method for coordinating a plurality of device management servers
    AU2017204468B2|2022-03-03|Method for updating a plurality of vehicles and assembly formed by a plurality of railway vehicles and an associated management system
    US8855561B2|2014-10-07|Device data collection using bluetooth
    EP3479551B1|2021-08-04|Method for synchronizing context dataof network functions in a mobile network
    WO2016087751A1|2016-06-09|Technique for accessing at least one adminstration server
    EP2263350A2|2010-12-22|Managing secure use of a terminal
    EP3520324B1|2021-04-07|Method of controlling the distribution of the recording devices deployed in the virtualized infrastructures of two entities
    CN103856562A|2014-06-11|Terminal state cache method and device under http protocol
    EP2039207B1|2013-04-24|Redirecting traffic in a mobile telephone network
    KR101410257B1|2014-06-20|Wireless network equiptment and method for managing network by using the equipment
    FR3068501A1|2019-01-04|SYSTEM AND METHOD FOR WIRELESS DOWNLOAD IN ONBOARD CALCULATORS
    FR3099682A1|2021-02-05|Vehicle communication method and device
    EP2469959B1|2017-12-06|Method and apparatus for managing a service session between a multi-mode terminal and an ANDSF server
    FR3112254A1|2022-01-07|METHOD OF DETERMINING A MODE OF COMMUNICATION BETWEEN TWO NEIGHBORING DEVICES OF A NETWORK.
    WO2010142902A1|2010-12-16|Optimization of data communication, in particular for applications for the continuous transmission of video data
    WO2008025853A2|2008-03-06|Method of remotely controlling a radio communication terminal
    同族专利:
    公开号 | 公开日
    SA117380762B1|2021-06-02|
    US20180011703A1|2018-01-11|
    US10678534B2|2020-06-09|
    FR3053864B1|2018-08-17|
    BR102017014446A2|2018-02-14|
    EP3267663B1|2020-03-18|
    EP3267663A1|2018-01-10|
    AU2017204468A1|2018-01-25|
    引用文献:
    公开号 | 申请日 | 公开日 | 申请人 | 专利标题
    US20090300595A1|2008-05-30|2009-12-03|Ise Corporation|System and Method for Remotely Updating Control Software in a Vehicle With an Electric Drive System|
    US9960820B2|2008-12-23|2018-05-01|Keyssa, Inc.|Contactless data transfer systems and methods|
    US8707019B2|2011-07-02|2014-04-22|Intel Corporation|Component update using management engine|
    CN103229522A|2011-11-25|2013-07-31|松下电器产业株式会社|Host device, collaborative service management system, and collaborative service management method|
    US9128798B2|2012-10-17|2015-09-08|Movimento Group|Module updating device|
    US8856256B1|2013-03-13|2014-10-07|CoralTree Inc.|System and method for file sharing and updating|
    JP6028689B2|2013-08-05|2016-11-16|トヨタ自動車株式会社|Mobile information processing apparatus, mobile information processing method, and driving support system|
    US9891907B2|2014-07-07|2018-02-13|Harman Connected Services, Inc.|Device component status detection and illustration apparatuses, methods, and systems|TW201913406A|2017-08-17|2019-04-01|佳能企業股份有限公司|Data transmission method and communication system|
    JP6973262B2|2018-04-18|2021-11-24|トヨタ自動車株式会社|Service provision system for vehicles, in-vehicle equipment and command transmission method|
    GB2582006A|2019-03-08|2020-09-09|Jaguar Land Rover Ltd|Vehicle controller|
    EP3945703A1|2020-07-29|2022-02-02|Siemens Mobility GmbH|Method, network, computer programm product and apparatus for remotely updating a target device in a network, in particular in a a rail automation system|
    法律状态:
    2017-07-24| PLFP| Fee payment|Year of fee payment: 2 |
    2018-01-12| PLSC| Publication of the preliminary search report|Effective date: 20180112 |
    2018-07-25| PLFP| Fee payment|Year of fee payment: 3 |
    2020-07-21| PLFP| Fee payment|Year of fee payment: 5 |
    优先权:
    申请号 | 申请日 | 专利标题
    FR1656424A|FR3053864B1|2016-07-05|2016-07-05|METHOD FOR UPDATING A PLURALITY OF VEHICLES AND ASSEMBLY FORMED OF A PLURALITY OF RAILWAY VEHICLES AND AN ASSOCIATED MANAGEMENT SYSTEM|
    FR1656424|2016-07-05|FR1656424A| FR3053864B1|2016-07-05|2016-07-05|METHOD FOR UPDATING A PLURALITY OF VEHICLES AND ASSEMBLY FORMED OF A PLURALITY OF RAILWAY VEHICLES AND AN ASSOCIATED MANAGEMENT SYSTEM|
    AU2017204468A| AU2017204468B2|2016-07-05|2017-06-29|Method for updating a plurality of vehicles and assembly formed by a plurality of railway vehicles and an associated management system|
    US15/639,566| US10678534B2|2016-07-05|2017-06-30|Method for updating a plurality of vehicles and assembly formed by a plurality of railway vehicles and an associated management system|
    BR102017014446-1A| BR102017014446A2|2016-07-05|2017-07-04|METHOD FOR UPDATING A VEHICLE PLURALITY AND ASSEMBLY FORMED WITH A RAILWAY VEHICLE PLURALITY|
    EP17179627.9A| EP3267663B1|2016-07-05|2017-07-04|Method for updating a plurality of vehicles and ensemble formed by a plurality of railway vehicles and an associated management system|
    SA117380762A| SA117380762B1|2016-07-05|2017-07-04|Method for Updating a Plurality of Vehicles and Assembly Formed by a Plurality of Railway Vehicles and an Associated Management System|
    [返回顶部]