Abstract: A system, computer-program product and computer-implemented method of updating a software configuration of a vehicle. A communication interface communicate with a plurality of electronic control units (ECUs) of the vehicle, and a processor. The processor performs an updating operation on the plurality of ECUs to change the software configuration for the plurality of ECUs from a first software configuration to an intended software configuration, identifies at least one ECU from the plurality of ECUs that fails to update to the intended software configuration after performing the updating operation. The processor rolls back the at least one successfully updated ECU to the previous version of software configuration.

Abstract: A software update system for a vehicle is disclosed, as well as a method of determining whether to install a software update at an electronic control unit (ECU) in the vehicle. The method includes the steps of: receiving at the ECU a first signal from a first vehicle system module (VSM) in the vehicle; receiving at the ECU a second signal from a second VSM in the vehicle, wherein the first and second signals each provide an indication that the vehicle is in a stationary state; based on the first and second signals, assessing at the ECU that the vehicle is in the stationary state, wherein the assessment is in accordance with a first predetermined confidence level; and in response to the assessment, authorizing at the ECU an installation of the software update on ECU memory.

Abstract: A method of detecting and mitigating an unintended active state of an in-vehicle communication network. The in-vehicle communication network includes a plurality of electronic control units (ECUs) communicating over a controller area network bus system. Each ECU includes both transmitting and receiving capabilities, and is configured with a communication protocol that provides guidelines for exchanging messages with other ECUs within the communication system. Each ECU enters a communication kernel active state for communicating on the bus. Virtual networks within the communication system are identified. Each virtual network includes a collection of signals involving respective ECUs whose transmission and reception are started and stopped collectively as a unit. Each respective virtual network that is active by fault is detected. Each faulty active virtual network is deactivated.

Abstract: A method of detecting and mitigating an unintended active state of an in-vehicle communication network. The in-vehicle communication network includes a plurality of electronic control units (ECUs) communicating over a controller area network bus system. Each ECU includes both transmitting and receiving capabilities, and is configured with a communication protocol that provides guidelines for exchanging messages with other ECUs within the communication system. Each ECU enters a communication kernel active state for communicating on the bus. Virtual networks within the communication system are identified. Each virtual network includes a collection of signals involving respective ECUs whose transmission and reception are started and stopped collectively as a unit. Each respective virtual network that is active by fault is detected. Each faulty active virtual network is deactivated.

Abstract: A vehicle access system that includes an electronic key ensures that the vehicle transmission is in a proper condition before power to the selected vehicle components is turned off. A control panel within the vehicle allows a driver to activate a switch indicating a desire to turn off the vehicle engine. A controller first determines whether a valid authentication code is received from a passive signaling device. Once validation is complete, the controller turns off the engine. Next, the controller determines that the vehicle is in the appropriate gear. If the transmission must be switched to the appropriate gear, the controller provides an indication to the driver that the transmission must be switched before the power to the accessory components will be turned off.

Abstract: A so-called “smart card” system is provided with controls which ensure that a request for change in status of a vehicle is not inconsistent with the presence or lack thereof of an appropriate card in the vehicle. As an example, prior to stopping ignition upon the request for stopping ignition, a sensor will look for the presence of a valid card within the vehicle cab. If no valid card is identified, then a warning signal is sent to the operator that no card is within the cab. This will prevent the operator from stopping the vehicle in the event that any appropriate cards have left the vehicle. The operator will thus be saved the inconvenience of having to walk to a location to get another card. In another example, should the request be for locking of the vehicle driver door, the presence of a valid card within the vehicle would be made known to the operator. In this way, the operator will be less likely to lock the card within the vehicle.