Cars that can be updated remotely have changed how manufacturers develop them. The engineering consequences reach well beyond the convenience of avoiding a workshop visit.
A car stopped being finished at delivery
Under the traditional model, software was frozen before production and any change required a recall or a service visit, which was expensive and slow.
That expense made manufacturers extremely conservative, since a defect discovered after launch could not be corrected without significant cost.
Remote updating removes much of that friction, which permits a car to ship with software that will be improved during its life rather than completed beforehand.
The architecture had to change first
Older vehicles distribute functions across many small control units from different suppliers, each with its own software and no common update path.
Updating that arrangement remotely is impractical, so manufacturers consolidated functions into a smaller number of powerful computers with defined interfaces.
The vehicle also needs a permanent connection, secure storage for a second copy of the software, and a way to roll back a failed installation safely.
Safety requires the update to be recoverable
An update that fails halfway through must never leave a vehicle unable to start or, worse, able to move with partially updated safety systems.
Systems therefore write the new version to a separate partition, verify it completely, and switch over only once the whole image has been validated.
Updates affecting safety-related functions are typically blocked unless the vehicle is stationary, secured and adequately charged, which is why timing is restricted.
Security becomes a permanent obligation
A vehicle that accepts software remotely must be certain that the software came from the manufacturer, which requires cryptographic signing and key management.
That obligation extends across the vehicle's entire service life, well beyond the period a consumer electronics product would be supported.
Regulators in several markets now require manufacturers to demonstrate a management system for vehicle cybersecurity and software updates, with requirements that continue to evolve.
The relationship with the owner changed too
Features can now be added after purchase, and the same mechanism allows features to be offered as subscriptions or activated on hardware already fitted.
Owners have pushed back where capability was physically present but disabled, which has made manufacturers more careful about how such offerings are framed.
The durable consequence is that a used car's software version now matters, since two identical vehicles can behave differently depending on what they have received.