JP2000043654A - Controller for automobile - Google Patents

Abstract

PROBLEM TO BE SOLVED: To attain a controller for an automobile, capable of rewriting the controlling contents of an automobile stored in a storage device through a transmission network, and rewriting the controlling contents after confirming proper operation with the contents. SOLUTION: A changer's permitting function 36 determines whether or not the changing operation from changer's operating terminal 31 is permissible. If the changing operation is permitted, a changing content is transmitted from the changing content recording medium 32 to the changing content permitting function part 35 of an information control center 21 through a transmission network 23a, and whether a changing content is permitted or not is determined. If a changing content is permitted, a testing function part 34 confirms that a control system 22 operates properly after a change in the stored contents. The testing function part 34, after confirming the normal operation of the automotive control system 22, permits the changing content to be stored in storage devices 11c to 11n.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an automobile control apparatus, and more particularly to an automobile control apparatus capable of changing an automobile control program and data stored in a storage device.

[0002]

2. Description of the Related Art Conventionally, when changing a program or data for controlling an automobile, it has been necessary to replace a control unit provided with a storage device, or to replace a storage device with a storage device whose storage content has been changed.

However, in recent years, writable read-only storage devices have been used as storage devices for vehicle control,
It is considered that the control content stored in the storage device can be changed.

[0004] With this configuration, it is possible to change the control contents of the vehicle by rewriting the control contents of the purchased vehicle control device.

As a method of changing or adding the control contents of the vehicle, for example, as described in Japanese Patent Application Laid-Open No. HEI 9-190353, a management center operates via a communication network, such as a "communication terminal software update system". It is conceivable to apply the method for updating the contents of the storage device to the control storage device of the vehicle control device. This method
The contents of the storage device are updated by writing the updated contents to the free area of the storage device.

[0006]

However, in the case of the control contents of an automobile, if it is possible to immediately change the control contents via a communication network, it is necessary to confirm whether or not the control contents operate normally. It is not desirable from the viewpoint of ensuring safety.

Accordingly, the system described in the above publication is
As it is, it cannot be applied to change or addition of the control content of the vehicle control device.

Further, in the system described in the above publication, since the updated contents are written in the empty area without erasing the previous contents, the system can be updated many times due to the limit of the number of times of writing to the memory. There is a problem that there is no free space and a sufficient free space is required for updating.

An object of the present invention is to rewrite the control contents of a vehicle stored in a storage device via a communication network, and after confirming whether or not the contents can be normally operated with the contents, An object of the present invention is to realize an automobile control device that rewrites control contents.

[0010]

In order to achieve the above object, the present invention is configured as follows. (1) In a vehicle control device for changing the storage contents of a storage means for storing control contents of a vehicle, a request for changing the storage contents of the storage means of a target vehicle is received via a communication network, and the change request is received. Control content to be
Change content permitting means for determining whether or not the control content is permitted to be changed; test means for determining whether or not the target vehicle normally operates with the control content permitted for change; and the test means Storage control means for storing the control content determined to operate normally in the storage means via the communication network and changing the storage content.

The change content permitting means determines whether or not the change content is control content permitted to be changed, and the test means determines whether or not the target vehicle normally operates with the control content to be changed. I do. Then, the memory change unit only operates when the test unit normally operates with the changed contents.
The storage contents of the storage means are changed to the changed contents.

Thus, the control contents of the vehicle can be changed through the communication network while ensuring the safety of the control operation of the vehicle, and the control contents can be changed without changing the control device for the purchased vehicle. By rewriting, the control content of the vehicle can be changed.

(2) Preferably, in the above (1),
Further, there is provided a changer permitting means for judging whether or not the person requesting the change of the storage content of the storage means is a specific person, and permitting a change request from only the specific person.

If the configuration is such that the change of the stored contents is permitted only by a specific person, the reliability of the change of the control contents can be further improved.

(3) Preferably, in the above (1), the storage change means determines a part of the control contents requested to be changed, which is different from the same part as the control contents already stored. The content of only the different part is changed and stored in the storage means.

If it is configured such that the same portion as the control content already stored and a different portion are discriminated, the content of only the different portion is changed and stored in the storage means.
The number of times of rewriting of the storage device can be reduced, and the life of the storage device can be extended.

(4) Preferably, in the above (1), the storage area of the storage means is divided into a first area and a second area, and the storage change means is provided in the first area. And the content stored in the second area,
Change alternately.

If the contents stored in the first area and the contents stored in the second area are alternately changed, if the storage device does not operate normally after the storage contents are changed, Since the contents before the change completely remain, at least the operation before the change can be guaranteed.

[0019]

Embodiments of the present invention will be described below in detail with reference to the drawings. (1) First Embodiment of the Present Invention First, a first embodiment of the present invention will be described. FIG.
1 is an overall schematic configuration diagram of a vehicle control system using a vehicle control device of the present invention. In FIG. 1, an automobile control system 22 is mounted on an automobile 24,
Control the operation of. In addition, the vehicle control system 22 includes:
.. 42n are connected to the communication network 23b and operate by communicating data and the like with each other.

Each of the control devices 42c... 42n has a communication function 52c... 52n for performing data communication via the communication network 23b, and a sensor / actuator for measuring and controlling the throttle opening. 61n for inputting data or issuing commands to the devices 71c... 71n, and storage devices 11c... 11n for storing programs and data.
And

The vehicle control system 22 includes a communication terminal 41. The communication terminal 41 has a function of communicating with the information management sensor 21 and the like via a communication network 23a different from the communication network 23b. The communication terminal 41 includes a communication function 51b for performing communication by the communication network 23a, a communication function 52b for performing communication by the communication network 23b, and a network 23a.
And 23b, for performing data conversion between the two communication functions, and a storage device 11b in which control programs and data are written.

The storage device 11b of the vehicle control system 22
.. The information management center 21 for instructing the change of the storage contents of the 11n, the test function unit 34, the change content permission function unit 35, the changer permission function unit 36, the storage device change function unit 37, And a control unit for a vehicle including the functional unit 51a.

The changer permission function unit 36 is provided in the storage device 11b.
... It is determined whether the person who changes 11n is a permitted person. The change content permission function unit 35 determines whether the change content is permitted.

After changing the stored contents, the test function unit 34 tests whether the vehicle control system 22 operates normally.

The recording device change function unit 37 includes a storage device 11c... 1 in the control devices 42c.
1n is changed. Then, the communication function unit 51a
This network 2 is connected via the communication network 23a.
Communicate with other devices connected to 3a.

The changer work terminal 31 inputs a password and monitors work contents to confirm the changer. The changer and the change content recording medium 33 record when, who changed which car, which storage device, and what content. The control device 42c...
42n describes the contents that change the contents described.

Each of the functional units 34, 35, 36, and 37 provided in the vehicle control device of the information management center 21 is provided with the communication function 51a so that it can be individually connected to the communication network 23a to realize the function. Can be. Also,
The recording media 32 and 33 and the work terminal 31 have a communication function 51a.
And can communicate via the communication network 23a. The recording media 32 and 33 may be arranged in the information management center 21 or may be arranged in another place.

FIG. 2 is an operation flowchart for changing the storage contents of the storage devices 11b to 11n of the vehicle control system 22 shown in FIG.

In step 110 of FIG. 2, the changer is changed by the changer permission function 36 of the control device for the vehicle of the information management center 21 from the password input by the changer from the changer work terminal 31 via the communication network 23a. Determine whether to allow the work. In this step 110, if not permitted, the recording devices 11b ... 11n
Is not changed, and the process ends via step 110A.

If the change of the stored contents is permitted in step 110, the process proceeds to step 111 via step 110A. Step 110 allows only a specific authorized person to make changes and provides a means of ensuring the reliability of the changed vehicle control system 22.

In step 111, the change content is transmitted from the change content recording medium 32 to the change content permission function unit 35 of the information management center 21 via the communication network 23a, and the change content is permitted by the change content permission function unit 35. It is determined whether or not to perform. If the change is not permitted in step 111, the storage devices 11b... 11n are not changed, and the process ends via step 111A. If the change is permitted in step 111, the process proceeds to step 112 via step 111A.

By this step 111, it is possible to change only the contents of the change permitted in advance, and it becomes a means for guaranteeing the reliability of the vehicle control system 22 after the change.
The contents permitted to be changed are determined by the control system 22 such as a manufacturer.
Has been tested in advance and confirmed to operate normally, and it is guaranteed that operation will be performed without any problem even if the contents of the storage devices 11b to 11n are changed.

Next, at step 112, the storage contents of the storage devices 11b... 11n are changed. The details of the operation of changing the stored contents will be separately described with reference to FIG.

After changing the stored contents in step 112, the process proceeds to step 113. This step 113 is a step of using the test function unit 34 to confirm that the control system 22 operates normally after the storage contents are changed. If the operation is normal in step 113, step 1
The process proceeds to step 115 via 13A. Step 113
If it does not operate normally, the process proceeds to step 114 via step 113A.

In step 114, if the normal operation is not performed in step 113, it is determined whether or not to perform the change operation again. If the change is made again, the process returns to step 112. If the change operation is stopped in step 114, the process ends. If the storage contents of the storage devices 11b... 11n do not operate normally as a result of the change, the change work fails, and the work is restarted or the changed contents are restored.

The restoring operation also proceeds to step 112, and thereafter, at step 113, a test is performed to determine whether the operation is normal. It is necessary to carry the automobile 24 to a repair shop for repair if the apparatus does not operate normally even if the operation is repeated several times.

The test function unit 34 has a test pattern for confirming that the vehicle control system 22 operates normally, and communicates this test pattern to the vehicle control system 22 via the communication network 23a. The communication terminal 41 that has received the test pattern sends the test pattern to the control devices 42c to 42n via the communication network 23b.

Each of the control devices 42c to 42n receives the test pattern, operates, and outputs the test pattern to the communication network 23b. The communication terminal 41 determines necessary information from the information flowing in the communication network 23b, and sends it to the test function unit 34 of the information management center 21 via the communication network 23a. The test function unit 34 confirms that the vehicle control system 22 is operating normally based on the transmitted information.

In the test of the control system 22, the control system 22 is provided with a test mode and generates information for operating the sensors / actuators 71c... 71n.
.. 71n do not operate, and send information for the operation to the test function unit 34 of the vehicle control device of the information management center 21 via the communication network 23a.

In step 115, the person who made the change, the contents of the change, and the work of the change are recorded on the recording medium 33. Then, the operation ends. It should be noted that if a series of operations up to this point are recorded on the recording medium 33, and if and who did what is recorded, it is possible to prevent illegally changing the storage devices 11b... 11n.

FIG. 3 is a detailed operation flowchart of step 112 shown in FIG. In step 1 of FIG. 3, the storage contents of the storage devices 11b... 11n are sent to the storage device change function unit 37 of the information management center 21 via the communication network 23a.

In step 2, the contents of the change are sent from the change content recording medium 32 to the recording device change function unit 37 of the information management center 21 via the communication network 23 a, and then the process proceeds to step 3.

In step 3, the storage devices 11b... 11 sent to the recording device change function unit 37 in step 1
On the basis of the contents of n and the contents of the change sent from the change contents recording medium 32 in step 2, the contents to be changed and the contents that cannot be changed are distinguished.

The distinction between the content to be changed and the content that cannot be changed is determined by the current system content, information unique to each vehicle such as aging, newly added functions, control changes, and the like.

The contents to be changed include the following, for example. Data information such as control programs and parameters required for control programs.

On the other hand, the contents that cannot be changed include the following, for example. Information that does not need to be changed by judging from specific information that differs for each car such as aging and changes.

In step 3, after the content to be changed and the content not to be changed are distinguished, that is, the unchanged portion is extracted, the process proceeds to step 4. This step 4
In step (3), the contents to be changed extracted in step 3 are changed to new contents, and the new contents are linked to the previously unchangeable contents.

In step 5, the new contents and the unchangeable contents linked in step 4 are written to the storage devices 11b... 11n via the communication network 23a, and the process ends.

FIG. 4 shows storage areas before and after the contents of the storage devices 11c... 11n are changed. Storage device 11
y and 11z are storage areas before and after the change, respectively. 81y is the area of the content part to be changed before the change, and 81z is the area of the content part after the change. Also, 8
2y is an unchanged portion before the change, and 82z is an unchanged portion after the change. The storage device 11z after the change is stored in step 1
12 is overwritten as it is.
The overwriting area 83 extends over all the areas generated in step 112.

The unmodified contents 82y and 82z are different in the written area before and after the change, but the contents are not changed.

Test function unit 34 of information management center 21
If the self-diagnosis function mounted on the vehicle 24 is used, each vehicle can be replaced, and the operation can be confirmed together with the self-diagnosis function.

According to the first embodiment of the present invention described above, it is possible to rewrite the control contents of the vehicle stored in the storage device via the communication network.
It is possible to realize a vehicle control device that rewrites the control contents after confirming whether or not the operation is normal with the contents.

Thus, the control contents of the vehicle can be changed via the communication network while ensuring the safety of the control operation of the vehicle, and the control contents can be changed without changing the control device for the purchased vehicle. By rewriting, the control content of the vehicle can be changed.

Further, by changing only the portion of the currently stored contents that is to be changed, it is possible to realize an automobile control device capable of shortening the time required for rewriting the contents of the storage device.

(2) Second Embodiment of the Present Invention In the first embodiment of the present invention, the content change area of the storage device is not particularly limited, and the entire storage device is changed, but only the changed portion is extracted. Then, only that part may be changed. This eliminates the need to overwrite unnecessary portions, and has the effect of increasing the number of overwrites and shortening the write time.

FIG. 5 shows a second embodiment of the present invention.
FIG. 4 is an explanatory diagram of a content change area of a storage device of the vehicle control device. Note that portions other than the storage device content change area are the same as those of the first embodiment and the second embodiment of the present invention, and therefore illustration and detailed description thereof are omitted.

In FIG. 5, the storage devices 11w, 11x
Are storage areas before and after the storage contents are changed, respectively. 81w is an area of the contents to be changed before the change.
x2 is an area of the content after the change. Also, 82w1, 8
2w2 is an area of an unchanged portion before the change, 82x1,
82x2 is an area of an unchanged portion after the change.

As shown in FIG. 5, in the unchanged portion, the storage area does not change before and after the change, and step 112 in FIG.
Only the part to be changed is overwritten and changed with the storage contents generated in step (1).

As described above, according to the second embodiment of the present invention, the same effects as those of the first embodiment can be obtained, and unnecessary portions need not be overwritten. It is possible to increase the writing time and shorten the writing time, and to realize a control device for a vehicle capable of extending the life of the storage device and reducing the capacity.

(3) Third Embodiment of the Present Invention In the first or second embodiment of the present invention, the storage content change area of the storage device is the entire storage device or a part thereof. It is also possible to divide the area into two and use these two areas before and after the change. Thus, when the storage device does not operate normally after the storage contents are changed, the contents before the change are completely left, so that at least the operation before the change can be guaranteed.

FIG. 6 shows a third embodiment of the present invention.
FIG. 4 is an explanatory diagram of a content change area of a storage device of the vehicle control device. Note that portions other than the storage device content change area are equivalent to those of the first embodiment and the third embodiment of the present invention, and therefore illustration and detailed description thereof are omitted.

In FIG. 6, the storage device is in an area 91 (first area).
An example in which the storage areas 91 and 92 are separately used before and after the storage content is changed by dividing the storage area into two areas, namely, the area of FIG. In the area 91, the contents used before are left as they are, and the contents generated in step 112 of FIG.

The operation test at step 113 in FIG.
The contents stored in the area 92 are used. If it does not operate normally, the changed content is overwritten in the area 92 again. If the content does not operate properly even if the content is changed many times, the content stored in the area 91 is used. At least all the content before the change is stored in this area 91, so that the function before the change is normal. Works.

When normal operation is performed using the area 92 and the contents stored in the area 92 are to be changed, the area 92 is saved as it is, and the contents generated in step 112 in FIG. Overwrite area 91. Thus, the two regions 91 and 92 are used alternately.

As described above, according to the third embodiment of the present invention, the same effects as those of the first embodiment can be obtained. Since the contents before the change completely remain, there is an effect that at least the operation before the change can be guaranteed.

An example in which the third embodiment of the present invention is combined with the above-described second embodiment is also considered as an embodiment of the present invention. That is, the storage area of the storage device is divided into two parts, and each time the storage contents are changed, these two divided storage areas are rewritten alternately, and the changed part is changed in each area as in the example shown in FIG. It is also possible to configure so that only the part that has been changed and the part that has not been changed is in the previous state.

With this configuration, in addition to the effect obtained in the third embodiment, it is not necessary to overwrite unnecessary portions, and the effect of increasing the number of overwrites and shortening the writing time can be obtained. .

[0068]

Since the present invention is configured as described above, it has the following effects. A control for a vehicle which can rewrite the control content of the vehicle stored in the storage device via the communication network, and after renewing the control content after confirming whether or not the operation is normally performed with the content. The device can be realized.

Thus, the control contents of the vehicle can be changed via the communication network while ensuring the safety of the control operation of the vehicle, and the control contents can be changed without changing the control device for the purchased vehicle. By rewriting, the control content of the vehicle can be changed.

Further, if it is configured that the same portion as the control content already stored and a different portion are discriminated and the content of only the different portion is changed and stored in the storage means, the number of times of rewriting of the storage device can be reduced. And the life of the storage device can be extended.

Further, the storage area of the storage means is divided into a first area and a second area, and the contents stored in the first area and the contents stored in the second area are alternately changed. If the configuration is changed, if the storage device does not operate normally after the storage content is changed, the operation before the change can be guaranteed at least because the content before the change completely remains.

[Brief description of the drawings]

FIG. 1 is an overall schematic configuration diagram of an automobile control system using an automobile control device of the present invention.

FIG. 2 is an operation flowchart for changing storage contents of a storage device of the vehicle control system shown in FIG. 1;

FIG. 3 is a detailed operation flowchart of step 112 shown in FIG. 2;

FIG. 4 is a diagram showing storage areas before and after the change of the content of the storage device.

FIG. 5 is an explanatory diagram of a content change area of a storage device of a vehicle control device according to a second embodiment of the present invention.

FIG. 6 is an explanatory diagram of a content change area of a storage device of an automobile control device according to a third embodiment of the present invention.

[Explanation of symbols]

 11b ... 11n Storage device 21 Information management center 22 Car control system 23a, 23b Communication network 24 Car 31 Modifier work terminal 32 Change contents recording medium 33 Worker and work contents recording medium 34 Test function unit 35 Change contents permission function unit 36 changer permission function unit 37 storage device change function unit 41 communication terminal 42c... 42n control device 51b communication function unit 52c... 52n transmission and reception unit 61b... 61n CPU 71c... 71n sensor / actuator 81y, 81z Change contents 81w, 81x2 Change contents 81v1, 81v2 Change contents 82y, 82z Unchanged contents 82w1, 82w2 Unchanged contents 82x1, 82x2 Unchanged contents 82y1, 82y2 Unchanged contents 83 Overwrite area 91, 92 Two divided areas of the storage device

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Kozo Nakamura 7-1-1, Omikacho, Hitachi City, Ibaraki Prefecture Inside Hitachi Research Laboratory, Hitachi, Ltd. (72) Inventor Takanori Yokoyama 7-1 Omikacho, Hitachi City, Ibaraki Prefecture No. 1 Hitachi, Ltd. Hitachi Research Laboratory (72) Inventor Satoshi Kuragaki 7-1-1, Omika-cho, Hitachi City, Ibaraki Prefecture Inside Hitachi Research Laboratory Hitachi Research Laboratory, Ltd. (72) Inventor Takaaki Imai Omika, Hitachi City, Ibaraki Prefecture Hitachi Research Laboratories, Hitachi, Ltd. (72) Inventor Yoshitaka Takahashi 7-1-1, Omika-cho, Hitachi City, Ibaraki Pref., Hitachi Research Laboratories, Hitachi, Ltd.

Claims (4)

[Claims] An automobile control device for changing the storage contents of a storage means for storing control contents of an automobile, wherein the request for changing the storage contents of the storage means of the target automobile is received via a communication network. A change permission means for determining whether the control content requested to be changed is the control content permitted to be changed; and determining whether the target vehicle normally operates based on the control content permitted for change. An automobile comprising: a test unit; and a storage changing unit configured to cause the storage unit to store the control content determined to operate normally by the test unit via the communication network and change the storage content. Control device. 2. A control device for a vehicle according to claim 1, wherein whether or not the person requesting the change of the storage contents of said storage means is a specific person is determined, and the change request is issued only from the specific person. A control device for a vehicle, further comprising changer permitting means for permitting a change. 3. The control device for a vehicle according to claim 1, wherein the storage change unit determines, from the control contents requested to be changed, a part different from the same part as the control contents already stored, A control device for a vehicle, wherein the content of only the different part is changed and stored in the storage means. 4. The control device for a vehicle according to claim 1, wherein a storage area of said storage means is divided into a first area and a second area, and said storage change means is provided in said first area. A vehicle control device for alternately changing stored contents and contents stored in a second area.