Over-the-air (OTA) updates offer vehicle manufacturers a method to deploy software revisions and introduce new features without requiring a workshop visit. This capability can enhance safety systems, improve infotainment functionality, and modify powertrain characteristics, but it operates within defined regulatory and hardware limitations.
What over-the-air updates can change
OTA updates primarily target software-driven vehicle functions. This includes revisions to engine and transmission control units, potentially altering power delivery, fuel efficiency, or emissions characteristics within the vehicle's certified parameters. Infotainment systems are frequent recipients, with updates introducing new applications, user interface refinements, or bug fixes. Driver assistance systems, such as adaptive cruise control or lane-keeping assist, can also be refined through software updates, potentially improving their performance or expanding their operational envelope. For example, a system initially certified to UNECE Regulation No. 171 for driver-control assistance might receive an update that refines its object detection algorithms, leading to smoother operation.
Safety-critical systems are also subject to OTA updates. The EU General Safety Regulation (GSR) mandates certain safety features, and manufacturers can use OTA to ensure compliance or enhance the performance of these systems. This might involve updates to the automatic emergency braking (AEB) system logic, potentially improving its ability to detect vulnerable road users as assessed by Euro NCAP Safety Assist protocols. Similarly, the eCall system, which automatically dials 112 in a serious accident, relies on software that can be updated to maintain functionality or address vulnerabilities.
The limits of over-the-air updates
Despite their versatility, OTA updates are fundamentally constrained by the vehicle's physical hardware. A software update cannot add a sensor that was not originally installed, nor can it fundamentally alter the mechanical design of a component. For instance, a vehicle without a radar sensor for adaptive cruise control cannot gain this functionality through an OTA update alone. Similarly, a software update cannot increase the physical capacity of a battery pack or change the gear ratios in a transmission.
Regulatory frameworks also impose limits. Any OTA update that significantly alters a vehicle's type approval, such as a change that impacts its certified emissions or safety performance beyond defined tolerances, may require re-homologation. Manufacturers must ensure that updates maintain compliance with all relevant regulations, including those governing emissions, noise, and crashworthiness. An update that, for example, increases engine power beyond the original certification limits would likely necessitate a new type approval.
Furthermore, the vehicle's electronic architecture dictates which modules can receive updates. Older vehicles may have isolated electronic control units (ECUs) that are not designed for remote updates, or their communication networks may lack the bandwidth or security protocols required for reliable OTA deployment. The update process itself also requires a stable internet connection and sufficient battery charge to prevent interruptions that could corrupt critical software.
Verifying update compatibility and impact
Vehicle owners can determine which systems are eligible for OTA updates by consulting their vehicle's official documentation. The owner's manual typically details the scope of OTA capabilities, specifying which modules or features are designed to receive remote updates. Manufacturers' official websites or dedicated owner portals often provide more current information, including a history of deployed updates and a roadmap for future enhancements.
When an update is available, the vehicle's infotainment system or a companion smartphone application usually notifies the driver. This notification should include a description of the update's purpose, the changes it will implement, and any prerequisites for installation, such as parking the vehicle or ensuring a minimum battery level. For safety-critical updates, manufacturers are generally proactive in communicating the importance and necessity of the installation.
Drivers should pay close attention to updates that affect powertrain characteristics or driver assistance systems. While an update might promise improved fuel efficiency, real-world outcomes can vary based on driving style and conditions. Similarly, changes to driver assistance systems, even if intended to enhance performance, might alter their behaviour in ways that require the driver to re-familiarise themselves with the system's operation.
Scenarios for OTA versus workshop updates
The choice between an OTA update and a workshop visit depends on the nature of the change and the vehicle's capabilities. For minor bug fixes in the infotainment system, or refinements to non-critical driver assistance features, OTA updates are generally preferable due to their convenience. A driver travelling from Lisbon to Berlin, for example, could receive an infotainment update overnight without interrupting their journey or needing to locate a service centre.
However, if an update involves a critical safety recall that requires physical inspection or replacement of a component, a workshop visit is essential. Similarly, if the update is complex, involves multiple interdependent ECUs, or carries a higher risk of installation failure, a controlled workshop environment with specialised diagnostic tools might be deemed safer by the manufacturer. Some updates, particularly those affecting core vehicle functions, may also require specific calibration procedures that can only be performed by trained technicians using proprietary equipment.
In cases where a vehicle's hardware needs an upgrade to support new software features, a workshop visit is unavoidable. For instance, if a new generation of AEB software requires a more advanced radar unit, the physical installation must occur at a service centre. The vehicle manual or manufacturer's service bulletins will specify when a physical intervention is necessary.
The role of cybersecurity in OTA updates
The integrity and security of OTA updates are paramount. Manufacturers employ robust cybersecurity measures to prevent unauthorised access or malicious manipulation of vehicle software. This includes strong encryption protocols for data transmission, secure boot processes that verify the authenticity of software before execution, and digital signatures to confirm that updates originate from the manufacturer.
A compromised OTA system could potentially allow attackers to introduce malware, disable safety features, or even take control of vehicle functions. Therefore, manufacturers invest heavily in secure software development lifecycles and penetration testing to identify and mitigate vulnerabilities. Regular security audits and prompt patching of discovered exploits are critical to maintaining trust in OTA update systems. Drivers should ensure their vehicle's software is kept up-to-date to benefit from the latest security enhancements.
