A software update monitor is configured to receive a software update intended for a safety critical control unit. The software update monitor determines a first verification code based on the received software update from a software update component and independently receives a second verification code associated with the software update from an update server. Next, it determines if the first verification code matches the second verification code. If the two codes match, the software update monitor effects the software update at the control unit. The software update monitor is configured to write the software update into a target memory location in a memory of the control unit. The software update monitor is configured to enable switching from a previous memory location, where an older software version may be running, to the target memory location, where the new software update is written, if the first and the second verification codes match.
SOFTWARE UPDATE MECHANISM FOR SAFETY CRITICAL SYSTEMS
SOFTWAREAKTUALISIERUNGSMECHANISMUS FÜR KRITISCHE SICHERHEITSSYSTEME
MÉCANISME DE MISE À JOUR DE LOGICIEL POUR SYSTÈMES CRITIQUES DE SÉCURITÉ
2019-09-04
Patent
Electronic Resource
English
Software update of non-critical components in dual safety-critical distributed systems
European Patent Office | 2019
|SYSTEMS & SOFTWARE - Safety-critical software for aerospace systems.
Online Contents | 2004
Software Methodologies for Safety Critical Systems
NTIS | 1991
|