| 摘要 |
The present invention relates to a method for updating a control unit (1) for an automotive vehicle, the control unit comprising a runtime system (22, 122) with a virtualization layer (32, 132) adapted to run on the processor (3), the virtualization layer being adapted to assign processor time and memory space to a plurality of guest systems (24, 26, 28, 30, 124, 126, 128, 130, 158), the method comprising: downloading (1018), by a first update client (38, 40, 138, 140) of a first untrusted guest system (26, 28) running on the virtualization layer (32, 132), one or more first update files or data segments from a first remote server (44, 46, 48, 144, 146, 148); storing, by the first update client (38, 40, 138, 140), the one or more first update files or data segments in an untrusted memory (5) accessible to the first untrusted guest system; running an update operating system (58, 158) adapted to update one or more files or data segments of the control unit; retrieving, by the updating operating system (58, 158), the one or more first update files or data segments from the untrusted memory (5); and updating (1108, 1110, 1112, 1114) the one or more files or data segments of the control unit (1). |
