JP2008248699A - Vehicular electronic information management server, data writing device for vehicular electronic control unit, and vehicular electronic information management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve traceability of information recorded in a vehicular electronic control unit, in a vehicular electronic information management server, a data writing device for vehicular electronic control unit, and a vehicular electronic information management system. <P>SOLUTION: The vehicular electronic information management server comprises: an information management means 2a storing copy information copying vehicular unique information and vehicular ECU information as databases; a start information storage means 2b storing start information for starting a data writing device 6; a server first reception means 4a receiving the unique information transmitted from the data writing device 6 before the start of writing work; a time information generation means 3a generating time information defining a use permission time of the data writing device 6 based on a receipt time of the unique information; a server transmission means 4b transmitting the start information and the time information to the data writing device 6; a server second reception means 4c receiving a new copy information of the ECR information; and an update means 3c updating the database by using the unique information and the new copy information. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a vehicular electronic information management server for centrally managing a change history of information recorded in a vehicular electronic control device, a data writing device connectable to the management server, and the management server and data The present invention relates to a vehicle electronic information management system including a writing device.

In recent years, main devices of a vehicle such as an engine, a steering, a suspension, and a brake are electronically controlled by an electronic control unit (ECU). Inside the ECU, a storage device (nonvolatile memory or the like) that holds written information without being energized is built in, and various control parameters are recorded in this storage device.
The specific value of the control parameter is determined depending on the model of the vehicle and the individual characteristics of the parts used in the vehicle. That is, the airflow data relating to the calculation of the intake air amount is determined according to the cross-sectional shape of the intake manifold and the pipe length, and is prepared for each vehicle model. On the other hand, the injector injection amount correction value related to the control of the fuel injection amount largely depends on the injection characteristics of each injector device, and is set individually for each vehicle.

  For this reason, when the user of the vehicle exchanges parts related to the control of the ECU, it is necessary to set a new control parameter. Conventionally, in such a case, a control dealer writes a control parameter by using a dedicated tool at a market dealer whose parts have been replaced. In addition, when writing information in the ECU, information before writing and writing history information are left in preparation for the occurrence of an error in writing contents or writing location.

For example, in Patent Document 1, when replacing an actuator (for example, an injector) mounted on a vehicle in a replaceable manner, the correction data of the replaced actuator and the time of the replacement are specified in a predetermined database of an electronic control unit (ECU). A data writing method for readablely writing history information for reading is disclosed. With such a configuration, when a malfunction occurs in the operation of the actuator at a later date, the cause can be clarified smoothly by referring to the history information.
JP 2004-257327 A

  However, in the conventional technique as described in Patent Document 1, if the ECU itself is replaced, all the history information recorded in the ECU until then is lost. Therefore, there arises a problem that it becomes difficult to identify the cause when a control problem is caused due to a mismatch between the control parameter of the ECU used so far and the control parameter of the newly replaced ECU. Note that it is possible to take over the history information by re-recording information inside the old ECU in the new ECU when the ECU itself is replaced, so that it can be referred to in the case of the trouble described above. There is no way to check whether information has been transferred successfully.

  In addition, for example, when it is desired to narrow down vehicles equipped with an ECU in which a control parameter of a specific value is recorded due to a request for quality control of the vehicle, the maintenance history of all the vehicles manufactured so far must be confirmed. Another problem is that quality control is extremely complicated. That is, the internal information of the ECU must be confirmed not only for vehicles with a history of replacing the ECU itself but also for all vehicles that have repaired and replaced parts related to the control of the ECU.

  The present invention has been made in view of such problems, and is capable of improving the traceability of information recorded in an electronic control device for a vehicle. An object of the present invention is to provide a data writing device for a control device and an electronic information management system for a vehicle.

  In order to achieve the above object, the vehicle electronic information management server according to the present invention as claimed in claim 1 is a vehicle electronic information management server for centrally managing a change history of information recorded in the vehicle electronic control device. In addition, unique information (for example, chassis number and VIN information) of each vehicle given to individually identify the vehicle and ECU information (for example, injector injection) recorded in an electronic control device mounted on the vehicle Information management means for storing, as a database, copy information obtained by copying correction values, airflow data, ECU's own serial number, and other control characteristic values), and the ECU recorded in the electronic control device mounted on the vehicle Activation information storage means for storing activation information for activating a data writing device capable of changing information, and an operator before starting a writing operation using the data writing device Therefore, based on the server first receiving means for receiving the vehicle specific information transmitted from the data writing device and the reception time of the vehicle specific information received by the server first receiving means, Time information generating means for generating time information that defines a use permission time of the data writing device, the activation information stored in the activation information storage means, and the time information generated by the time information generating means Server transmitting means for transmitting to the data writing device, server second receiving means for receiving new copy information obtained by copying new ECU information of the electronic control device, the unique information received by the server first receiving means, and Update means for updating a database stored in the information management means using the new copy information received by the server second receiving means.

The server second receiving means may receive new copy information obtained by copying new ECU information of the electronic control device that has been changed using the data writing device. In this case, the new copy information is information changed by the writing operation and is information that should be reflected in the database.
Alternatively, the server second receiving means may receive new copy information obtained by copying the ECU information before the change. In this case, the new copy information is the same information as the copy information stored in the database, and is used to confirm that the ECU information has not been changed at all when it is desired to cancel the writing operation.

  In addition, the server transmission unit may be connected to the electronic control unit mounted on the vehicle from the database stored in the information management unit based on the unique information of the vehicle received by the server first reception unit. It is preferable that the copy information obtained by copying the stored ECU information is read and returned to the data writing device. In this case, copy information of the ECU information before the writing work is transmitted to the worker.

According to a second aspect of the present invention, in the electronic information management server for a vehicle according to the present invention, in addition to the configuration according to the first aspect, the server transmission means encrypts the activation information and the time information to the data writing device. It is characterized by transmitting.
According to a third aspect of the present invention, there is provided a vehicular electronic information management server according to the present invention, wherein, in addition to the configuration of the first or second aspect, the server transmission means transmits the activation information and the time information when writing the ECU information. And a flag setting means for setting a flag indicating that the loading operation is in progress and turning off the flag when the new copy information is received by the server second receiving means.

According to a fourth aspect of the present invention, there is provided a vehicular electronic information management server according to the present invention, wherein, in addition to the configuration of the third aspect, the server transmission means has the flag set by the flag setting means set. The activation information and the time information are transmitted, and when the flag is off, the activation information and the time information are not transmitted.
According to a fifth aspect of the present invention, in the vehicle electronic information management server according to the present invention, in addition to the configuration according to any one of the first to fourth aspects, the server first receiving means receives the specific information of the vehicle. First writing prompting means for transmitting a first electronic mail to the data writing device to prompt the completion of the writing operation of the ECU information when a predetermined time elapses from the reception time. It is characterized by having prepared.

  According to a sixth aspect of the present invention, in the vehicle electronic information management server according to the present invention, in addition to the configuration according to any one of the third to fifth aspects, the flag set by the flag setting means is set. When the server first receiving means receives vehicle specific information from another person other than the worker, a second e-mail is sent to the data writing device to prompt the completion of the writing operation of the ECU information. A second writing prompting means for transmitting is further provided.

  According to a seventh aspect of the present invention, in the electronic information management server for a vehicle according to the present invention, in addition to the configuration according to any one of the third to sixth aspects, the server second receiving means includes the data writing device. Receiving the change history of ECU information, and when the flag setting means confirms that the ECU information has not been changed from the change history received by the server second receiving means, erases the flag. It is characterized by.

  Further, the data writing device of the vehicle electronic control device of the present invention according to claim 8 is recorded in the unique information of each vehicle given to individually identify the vehicle and the electronic control device mounted on the vehicle. The ECU information stored in the electronic control unit of each vehicle is provided so as to be communicable with a management server that centrally manages the change history of the ECU information. A data writing device for transmitting the information, the writing device first transmitting means for transmitting the unique information of the individual vehicle to the management server before the start of the writing operation, and the writing device first transmission Time information generated by the management server based on the reception time at which the unique information transmitted from the means is received by the management server, and startup information for starting the data writing device stored in the management server in advance. Receive Writing device receiving means, and start permission time setting means for setting a start permission time of a program for changing the ECU information of the electronic control device defined by the time information received by the writing device receiving means, Program start means for starting the program only during the start permission time set by the start permission time setting means using the start information received by the writing device receiving means is provided.

According to a ninth aspect of the present invention, in addition to the configuration of the eighth aspect, the data writing device of the vehicle electronic control device according to the present invention copies new ECU information of the electronic control device after the end of the writing operation. And a writing device second transmitting means for transmitting the new copy information to the management server.
According to a tenth aspect of the present invention, there is provided an electronic information management system for a vehicle according to the present invention, wherein a management server that centrally manages a change history of information recorded in an electronic control device for a vehicle, and communicates with the management server via a network. An electronic information management system for a vehicle comprising a data writing device that can be provided and can change ECU information recorded in an electronic control device of each vehicle, and is provided to identify the vehicle individually Information management means for storing, in the management server, copy information obtained by copying unique information of each vehicle and ECU information recorded in the electronic control device mounted on the vehicle, and ECU information of the electronic control device. Startup information storage means for storing startup information for starting a program to be changed in the data writing device in the management server, and before starting the writing operation, the individual information The writing device first transmitting means for transmitting the vehicle specific information from the data writing device to the management server, and the management server receiving the vehicle specific information transmitted from the writing device first transmitting means. Server first receiving means, and time information generating means for generating time information defining the use permission time of the data writing device based on the reception time of the specific information of the vehicle received by the server first receiving means And server transmission means for transmitting the activation information stored in the activation information storage means and the time information generated by the time information generation means from the management server to the data writing device, and the server transmission means A writing device receiving means for receiving the time information and the activation information transmitted from the data writing device, and based on the use permission time defined by the time information received by the writing device receiving means. , The electric Activation permission time setting means for setting activation permission time of a program for changing ECU information of the control device, and activation set by the activation permission time setting means using the activation information received by the writing device reception means Program starting means for starting the program in the data writing device only during the permitted time, and new copy information obtained by copying new ECU information of the electronic control device after the writing operation is completed. Writing device second transmitting means for transmitting from the writing device to the management server; server second receiving means for receiving the new copy information transmitted from the writing device second transmitting means at the management server; Update means for updating a database stored in the information management means using the unique information received by the first receiving means and the new copy information received by the server second receiving means. ing.

Further, in the electronic information management system for a vehicle according to the eleventh aspect of the invention, in addition to the configuration according to the tenth aspect, the server transmission means encrypts the activation information and the time information to the data writing device. The writing device receiving means receives and restores the activation information and the time information.
According to a twelfth aspect of the present invention, there is provided a vehicular electronic information management system according to the present invention, in addition to the configuration according to the tenth or eleventh aspect, after the start information and the time information are transmitted by the server transmission means. And a flag setting means for setting a flag indicating that the loading operation is in progress and turning off the flag when the new copy information is received by the server second receiving means.

  According to a thirteenth aspect of the present invention, in the electronic information management system for a vehicle according to the present invention, in addition to the configuration of the twelfth aspect, when the server transmission means sets the flag set by the flag setting means, The activation information and the time information are transmitted to the writing device reception means, and when the flag is off, the activation information and the time information are not transmitted to the writing device reception means.

  According to a fourteenth aspect of the present invention, in addition to the configuration according to any one of the tenth to thirteenth aspects, the vehicular electronic information management system according to the present invention receives the specific information of the vehicle by the server first receiving means. First writing prompting means for transmitting a first electronic mail to the data writing device to prompt the completion of writing of the ECU information when a predetermined time set in advance from the reception time elapses; Furthermore, it is characterized by having prepared.

  In addition to the configuration described in any one of claims 12 to 14, the vehicle electronic information management system according to the present invention described in claim 15 is in a state in which the flag set by the flag setting means is set. When the server first receiving means receives vehicle-specific information from a writing device other than the data writing device, the second data writing device is requested to prompt the completion of the ECU information writing operation. A second writing prompting means for transmitting an e-mail is further provided.

  According to a sixteenth aspect of the present invention, in addition to the configuration according to any one of the twelfth to fifteenth aspects, the vehicular electronic information management system according to the present invention records a change history of the ECU information in the data writing device. A history storage unit, wherein the writing device second transmission unit transmits the change history recorded in the history storage unit to the management server, and the server second reception unit includes the writing device (2) The change history transmitted from the transmission means is received, and when the flag setting means confirms that the ECU information has not been changed from the change history, the flag is turned off.

According to the vehicle electronic information management server of the present invention (Claim 1), when the ECU information recorded in the electronic control unit mounted on the vehicle is changed, the database is obtained from the vehicle unique information and the new copy information. Therefore, the ECU information of each vehicle can be managed centrally and the traceability of the ECU information can be improved.
In addition, since the start time of the data writing device is limited by the time information generated by the time information generating means, it is possible to prompt the operator to perform a quick writing operation. In addition, by defining the use permission time of the data writing device, it is possible to grasp the scheduled completion time of the writing operation of the electronic control device in the vehicle identified by the unique information.

In addition, according to the vehicle electronic information management server of the present invention (claim 2), the activation information and the time information are encrypted, so that the safety of the information transmitted from the server transmission means can be improved. The safety and reliability of information can be improved.
According to the vehicle electronic information management server of the present invention (Claim 3), whether or not the ECU information is being written by checking the state of the flag set by the flag setting means. Can be easily grasped.

  According to the vehicle electronic information management server of the present invention (Claim 4), the writing operation is permitted only to the data writing device that transmitted the vehicle specific information when the flag is off. In addition, it is possible to prevent work other than the worker who is the sender of the information related to the reception by the server first receiving means, and to prevent overwriting of the ECU information due to duplication of writing work by a plurality of workers. it can. Further, it is possible to prevent the latest data of ECU information from being reflected.

According to the vehicle electronic information management server of the present invention (Claim 5), a prompt writing operation is performed to the worker by transmitting the first e-mail for reminder before the use permission time is exhausted. Can be urged.
According to the vehicle electronic information management server of the present invention (Claim 6), a request for another writing work by another worker is secondly issued to the worker who is writing the ECU information. This can be notified by e-mail, and can prompt the operator to write more quickly.

According to the vehicle electronic information management server of the present invention (claim 7), when the ECU information is not changed by the data writing device, the writing work can be canceled using the change history.
According to the data writing device of the vehicle electronic control device of the present invention (claim 8), the work cannot be started unless the management server is accessed before the ECU information writing work is started. The vehicle ECU information can be centrally managed accurately. In addition, since the start permission time of the writing program is set by the time information given from the management server, it is possible to prompt the operator to perform a quick writing operation.

In addition, the database of the management server can be updated using the new copy information obtained by copying the newly written ECU information, so that the information in the database can always be kept up-to-date, and the ECU information of each vehicle Can be managed centrally.
Moreover, according to the data writing device of the vehicle electronic control device of the present invention (claim 9), since the encrypted start information and time information are received, the safety of the information can be improved, and the ECU information Safety and reliability can be improved.

  According to the vehicle electronic information management system of the present invention (claim 10), the activation permission time of the data writing program is set by the time information generated by the time information generating means, and the activation time is limited. Therefore, it is possible to prompt the operator to perform a quick writing operation. Further, the management server can grasp the scheduled completion time of the writing operation of the electronic control device in the vehicle identified by the unique information.

  In addition, after the ECU information recorded in the electronic control unit mounted on the vehicle is changed, information obtained by copying the new ECU information is transmitted to the management server, and the database is updated with the vehicle specific information and the new copy information. The Therefore, the information in the database can always be kept up-to-date, and the ECU information of each vehicle can be managed accurately and centrally.

Moreover, according to the vehicle electronic information management system of the present invention (claim 11), the activation information and the time information are encrypted, so that the safety of the information transmitted from the server transmission means to the data writing device is enhanced. be able to.
According to the vehicle electronic information management system of the present invention (Claim 12), the ECU information can be written in the data writing device by checking the state of the flag set by the flag setting means of the management server. It is possible to easily grasp whether or not work is being performed.

  According to the vehicle electronic information management system of the present invention (claim 13), the writing operation is permitted only to the data writing device that has transmitted the vehicle specific information when the flag is off. In addition, it is possible to prevent work other than the worker who is the sender of the information related to the reception by the server first receiving means, and to prevent overwriting of the ECU information due to duplication of writing work by a plurality of workers. it can. Further, it is possible to prevent the latest data of ECU information from being reflected.

According to the vehicle electronic information management system of the present invention (Claim 14), the prompt writing can be performed more quickly by sending the first e-mail to the data writing device before the use permission time is exhausted. The operator can be encouraged to work.
According to the vehicle electronic information management system of the present invention (Claim 15), a second request for another writing work by another worker is made to the worker who is writing the ECU information. This can be notified by e-mail, and can prompt the operator to perform a faster writing operation with the data writing device.

  According to the vehicle electronic information management system of the present invention (claim 16), the ECU information is not changed by the data writing device from the change history recorded in the history storage means of the data writing device. Confirmation can be canceled. As a result, for example, when it is determined that the ECU information of the electronic control unit related to the writing work cannot be read after the writing work is started, the work can be stopped while maintaining traceability. .

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIGS. 1 to 7 illustrate a vehicle electronic information management server, a vehicle electronic control device data writing device, and a vehicle electronic information management system according to an embodiment of the present invention. FIG. 1 illustrates the vehicle. FIG. 2 is a schematic diagram showing a specific system configuration example of the vehicle electronic information management system. FIG. 2 is a block diagram showing the overall configuration of the vehicle electronic information management system including the electronic information management server for the vehicle and the data writing device. FIG. 3, FIG. 3 is a database structure diagram stored in the vehicle electronic information management server, FIG. 4 is a signal sequence diagram for explaining the control contents during the writing operation in the vehicle electronic information management system, FIG. 5 and FIG. 6 is a signal sequence diagram for explaining the control contents at the time of prompting the writing work in the vehicle electronic information management system, and FIG. 7 is when the writing work is stopped in the vehicle electronic information management system. It is a signal sequence diagram illustrating the control contents.

[1. overall structure]
As shown in FIG. 1, this vehicle electronic information management system includes a vehicle electronic information management server (hereinafter simply referred to as a management server) 1 and a data writing device (hereinafter simply referred to as a data writing device) of a vehicle electronic control device. 6).
The management server 1 is a database server for centrally managing a change history of information (hereinafter referred to as ECU information) recorded in an electronic control unit (ECU) for a vehicle, and a communication network 5 such as the Internet or an intranet. Is placed on top. The management server 1 holds management information for the entire life cycle of the ECU, and the ECU information managed by the management server 1 includes not only ECU information at the time of sales of vehicles sold in the market, but also vehicle information. ECU information written in the manufacturing process and ECU information corrected or added in maintenance after sales are included.

The data writing device 6 is a device that rewrites information recorded in the ECU mounted on each vehicle, and is provided so as to be connectable to the communication network 5 in which the management server 1 is arranged. The management server 1 and the data writing device 6 can communicate with each other via the communication network 5.
Although not shown in FIG. 1, the management server 1 is a single server, whereas a plurality of data writing devices 6 are provided on the communication network 5. A plurality of data writing devices 6 are provided, for example, at vehicle development / production bases, sales offices, maintenance factories, etc. throughout the country.

[2. System overview]
In the vehicle electronic information management system, the ECU information writing operation is performed only by a specific data writing device 6 over the entire life cycle of the ECU. It is assumed that a plurality of specific data writing devices 6 are prepared, and writing operations by all the data writing devices 6 are managed by the management server 1. Further, the data writing device 6 cannot freely write the ECU information to the ECU, and requires reporting to the management server 1 and permission of the work before and after the writing work. That is, the management server 1 can grasp all the start and end of the ECU information writing operation.

  The management server 1 is a copy of the vehicle number (unique information) of each vehicle assigned to identify each manufactured vehicle and the ECU information recorded in the ECU mounted on each vehicle. Information and activation information for activating a program installed in the data writing device 6 are stored. The management server 1 also stores administrator information of the data writing device 6 and worker information for performing the actual writing work as materials for determining whether or not to give the work permission. Has been.

For example, at the start of the writing work, the manager of the data writing device 6 or the actual worker applies for work permission to the management server 1. At the time of the application, the manager information, the worker information, and the chassis number of the vehicle related to the work are transmitted from the data writing device 6 to the management server 1.
The management server 1 confirms that the application is valid from the received administrator information and worker information, and then gives start information and time information as work permission. The activation information is information for activating the data writing program installed in the data writing device 6, and the time information is information that defines the use permission time of the data writing program. At this time, the management server 1 reads the ECU information corresponding to the received chassis number from the database, and returns it to the data writing device 6 together with the chassis number. These pieces of information are encrypted and communicated between the management server 1 and the data writing device 6.

  When the work permission is given, the worker can start the data writing program of the data writing device 6 using the start information and the time information. Change information. At this time, it is possible to arbitrarily use ECU information returned from the database side. For example, when the ECU itself is exchanged, the ECU information returned from the database side may be written as it is.

After the completion of the writing operation, the administrator of the data writing device 6 or the actual operator reports the completion of the operation to the management server 1. At this time, new copy information obtained by copying new ECU information and the chassis number are transmitted to the management server 1 so that the management server can grasp the history of changes due to the writing operation.
The management server 1 updates the database based on the received new copy information and chassis number. As a result, the completion of the ECU information writing operation is reported, and at the same time, the contents of the database are updated. Subsequently, specific configurations of the management server 1 and the data writing device 6 will be described in detail.

[3. Management server]
As illustrated in FIG. 1, the management server 1 includes a storage unit 2, a control unit 3, and a communication unit 4 as a configuration for realizing a storage / calculation function.

[3-1. Storage unit]
The storage unit 2 stores information related to the writing of ECU information for a long period of time, and includes, for example, an HDD, a ROM, a RAM, a nonvolatile memory, an external storage device, and the like. The storage unit 2 is provided with a database unit (information management unit) 2a and an activation information storage unit (activation information storage unit) 2b.

  The database unit 2a stores a database including information on ECUs mounted on all manufactured vehicles. In this database, as shown in FIG. 3, ECU information is labeled by the chassis number of the vehicle on which the ECU is mounted. For example, data A, data B, and data C in FIG. 3 include airflow data related to the calculation of intake air amount, injector injection amount correction value related to control of the fuel injection amount, serial number of the ECU itself, and various characteristic values. It is a name, and the chassis number of one vehicle and the ECU information written in the ECU mounted on the vehicle are arranged in each row.

That is, here, the unique information (chassis number) given to each vehicle for individually identifying the vehicle and the copy information obtained by copying the ECU information recorded in the ECU mounted on the vehicle are neatly organized. A database is formed.
The database unit 2a also includes a work flag F, manager information for applying for work permission, and worker information for performing work as information for grasping the writing work status of each vehicle to the ECU. It has come to be remembered.

  The chassis number is information that is not changed even if it is added to or deleted from the database, and functions as information for searching the database. On the other hand, ECU information is information that may be changed at any time. Further, it can be said that the work flag F, the administrator information, and the worker information are information whose contents are changed only before and after the writing operation of the ECU is performed.

The activation information storage unit 2b stores activation information for using the data writing device 6. As described above, the data writing device 6 can not write the ECU information to the ECU without permission of the management server 1, and the ECU information writing function is normally controlled to be invalid. The activation information stored in the activation information storage unit 2b serves as a key (password) for enabling the ECU information writing function. The detailed configuration of the data writing device 6 will be described later.
Although not shown in FIG. 1, the storage unit 2 also stores administrator information of the data writing device 6 and worker information for performing an actual writing operation.

[3-2. Control unit]
The control unit 3 includes a time information generating unit (time information generating unit) 3a, a flag setting unit (flag setting unit) 3b, an updating unit (updating unit) 3c, and a first writing prompting unit (first writing prompting unit) 3d. And a second writing prompting section (second writing prompting means) 3e.

  The time information generating unit 3a detects the time when the permission of the writing work is applied from the data writing device 6 via the communication network 5, and the time information specifying the use permission time of the data writing device 6 Is to be generated. The use permission time is set, for example, “24 hours from the application reception time” based on the reception time of the application for work permission. Such use permission time is defined in the time information. In addition, it is good also as a structure which changes the length of setting time according to the content of work.

  The flag setting unit 3b sets a work flag F indicating the execution status of the writing work by the data writing device 6. The work flag F is information added to each ECU information in the database as shown in FIG. Here, based on the administrator information and worker information at the time of the application for work permission transmitted from the data writing device 6, the application is confirmed by collating with the administrator information and worker information stored in the storage unit 2. It is confirmed whether the application is valid or not, and whether the application is accepted or not is determined.

  In other words, if the administrator information and worker information from the data writing device 6 match those stored in the storage unit 2, the application is approved as valid, and the chassis from the data writing device 6 The work flag F of the ECU information corresponding to the number is set to F = 1, and the manager information and worker information are stored in the database. At the end of the writing work, this work flag F is set to F = 0, and the administrator information and the worker information are deleted.

The update unit 3c is for updating the database after the writing work in the data writing device 6 is completed. As described above, when the completion of the work is reported from the data writing device 6, it is stored in the database unit 2a using the new copy information and the chassis number that are a copy of the new ECU information changed by the writing work. Update the database.
The first writing prompt unit 3d receives the data writing when the completion of the work has not yet been reported when a predetermined time has elapsed from the time when the application for work permission is transmitted from the data writing device 6. An e-mail (first e-mail) that prompts completion of the work and a report thereof is transmitted to the embedded device.

  On the other hand, the second writing prompting unit 3e completes and reports the work to the data writing device 6 when a work permission is applied from another administrator or worker during the writing of the ECU information. A mail (second electronic mail) for prompting is sent. That is, based on the vehicle chassis number transmitted from the data writing device 6 at the time of application for work permission, it is confirmed whether or not the work flag F corresponding to the vehicle chassis number is F = 1.

  If F = 1, the administrator information and worker information received at that time are inconsistent with the administrator information and worker information stored in the database unit 2a. It is determined that the application is from the worker, and an e-mail is transmitted to the manager and worker who are involved in the writing work. In addition, the address of the mail transmitted from the 1st writing prompt part 3d and the 2nd writing prompt part 3e is memorize | stored in the memory | storage part 2 so that it can be searched from manager information or worker information. And

  Note that the means for prompting by the first writing prompting unit 3d and the second writing prompting unit 3e are not limited to e-mails. For example, an office to which an administrator or worker belongs, a sales office, a maintenance factory, or the like. A facsimile addressed to may be transmitted.

[3-3. Communication Department]
The communication unit 4 exchanges information with the data writing device 6, and includes a server first receiving unit (server first receiving unit) 4a, a server transmitting unit (server transmitting unit) 4b, and a server first unit. 2 receiving section (server second receiving means) 4c.

The server first receiving unit 4a receives an application for work permission transmitted from an administrator of the data writing device 6 or an actual worker before the writing work using the data writing device 6 is started. It is. The information received here is manager information, worker information, and the chassis number of the vehicle involved in the work.
When the application is permitted by the flag setting unit 3b, the server transmission unit 4b uses the data writing device to store the activation information stored in the activation information storage unit 2b and the time information generated by the time information generation unit 3a. 6 to be transmitted. That is, the server transmission unit 4 b transmits information for enabling the ECU information writing function in the data writing device 6 and information on the use permission time to the data writing device 6.

  On the other hand, the server second receiving unit 4c receives new copy information obtained by copying the ECU information of the ECU related to the writing operation from the data writing device 6. The new copy information means a copy of the ECU information recorded inside the actual ECU. Before the writing operation is performed, the new copy information and the ECU information stored in the database unit 2a are the same. Therefore, when canceling the writing operation, the new copy information is used to confirm that the ECU information has not been changed.

The new copy information obtained after the writing operation is information changed by the writing operation and should be reflected in the database. Therefore, when the writing operation is completed, the update unit 3c uses the new copy information to update the database unit 2a.
All of the information transmitted and received by these receiving units and transmitting units 4a to 4c is encrypted and exchanged. The server transmission unit 4b encrypts the copy information, the activation information, the time information, and the chassis number and transmits them to the data writing device 6 side. The server first receiving unit 4a and the server second receiving unit 4c restore the encrypted information transmitted from the data writing device 6 side.

[4. Data writing device]
The data writing device 6 includes the functions of the storage unit 7, the control unit 8, and the communication unit 9.

[4-1. Storage unit]
As shown in FIG. 1, the storage unit 7 includes a data writing program 7a and a history storage unit (history storage unit) 7b. The data writing program 7 a is an application for writing ECU information to the ECU, and is installed in the data writing device 6 in advance. The data writing program 7a cannot be activated (executed) without the activation information stored in the management server 1, and is designed to be activated when the activation information is given.

  The history storage unit 7 b stores a history of ECU information writing work by the data writing device 6. Here, the serial number of the worker who performed the writing operation and the ECU itself to be worked, the chassis number of the vehicle, the name of the item that has been written, and the like are stored as a log.

[4-2. Control unit]
The control unit 8 includes an activation permission time setting unit (activation permission time setting unit) 8a and a program activation unit (program activation unit) 8b.

  The activation permission time setting unit 8a is for setting the activation permission time of the data writing program 7a based on the time information transmitted from the server transmission unit 4b of the management server 1. In the present embodiment, the activation permission time of the data writing program 7a is “24 hours from the application reception time” in accordance with the usage permission time defined in the time information generated by the time information generation unit 3a of the management server 1. And so on.

  The program activation unit 8b activates the data writing program 7a only during the activation permission time set by the activation permission time setting unit 8a using the activation information transmitted from the server transmission unit 4b of the management server 1. To do. That is, the ECU information can be written only after the data writing program 7a is started.

[4-3. Communication Department]
The communication unit 9 exchanges information with the management server 1 and is provided corresponding to the communication unit 4 of the management server 1. The communication unit 9 includes a writing device first transmitting unit (writing device first transmitting unit) 9a, a writing device receiving unit (writing device receiving unit) 9b, and a writing device second transmitting unit (writing device first). 2 transmission means) 9c.

The writing device first transmission unit 9a transmits an application for work permission to the server first reception unit 4a. This application is made by an administrator of the data writing device 6 or an actual worker.
The writing device receiver 9b receives the activation information and time information transmitted from the server transmitter 4b. The startup information and time information received here are used for control in the control unit 8 described above. The writing device second transmitting unit 9c transmits new copy information obtained by copying the ECU information of the ECU related to the writing operation to the server second receiving unit 4c.

  In addition, as with the receiving unit and transmitting units 4a to 4c of the management server 1, all information transmitted and received by these receiving units and transmitting units 9a to 9c is encrypted. The writing device first transmission unit 9a encrypts the manager information, the worker information, and the chassis number of the vehicle involved in the work and transmits them to the server first receiving unit 4a. The writing device second transmission unit 9c The copy information is encrypted and transmitted to the server second receiver 4c. The writing device receiving unit 9b restores the encrypted information transmitted from the server transmitting unit 4b.

[5. Specific system configuration example]
A specific configuration example of the vehicle electronic information management system will be described with reference to FIG.
The data writing device 6 of this configuration example includes a client PC (hereinafter simply referred to as a PC) 11 and a MUT (multi-use tester) 13, and is connected to the management server 1 via the communication network 5. The PC 11 is a computer installed in the sales office 10 and is managed by the administrator 12.

  The MUT 13 is a small maintenance diagnosis computer for the ECU of the vehicle, an interface that enables mutual transmission of information with the PC 11, an interface for accessing the ECU 16 mounted on the vehicle, an operator 14 and an input interface operated directly. In this configuration example, the functions of the storage unit 7 and the control unit 8 illustrated in FIG. 1 are realized by the MUT 13, and the function of the communication unit 9 is mainly realized by the PC 11.

  The MUT 13 can not only copy the copy information transmitted from the PC 11 to the ECU 16 but also write information directly input by the operator 14 to the ECU 16. In addition, information can be read from the ECU 16 side. The work contents in the MUT 13 are stored as work history information in a history management unit (not shown) inside the MUT 13.

  Note that a plurality of computers other than the PC 11 are installed in the store 10. For example, the PC 17 is a computer managed by an administrator 18 who is in a different department from the administrator 12. A plurality of such computers are provided at vehicle development / production bases, sales offices, maintenance factories, etc. throughout the country.

[6. Communication procedure]
In the vehicle electronic information management system according to the embodiment of the present invention, communication is performed as shown below.

[6-1. Write and database update]
A communication procedure in the case where the worker 14 performs a writing operation to the ECU 16 at the sales office 10 will be described with reference to FIG. First, the PC 11 is connected to the management server 1 via the communication network 5 by the operation of the administrator 12. The manager 12 inputs the manager information, the worker information, and the chassis number of the vehicle on which the ECU 16 is mounted to the PC 11, and applies for work permission to the management server 1 (step A10).

This application is received by the server first receiving unit 4a of the management server 1, and the time information generating unit 3a of the management server 1 detects the reception time of this application and generates time information. Further, the flag setting unit 3b confirms the work flag F of the ECU information corresponding to the chassis number transmitted from the PC 11 on the database.
Here, when F = 0, the application is permitted, the administrator information and the worker information are recorded, and the work flag F is set to F = 1. Further, the activation information stored in the activation information storage unit 2b and the time information generated by the time information generation unit 3a are transmitted from the server transmission unit 4b to the PC 11 (step A20). On the other hand, details of control when F = 1 will be described later.

  In this embodiment, at the same time, the chassis number and the copy information of the ECU information corresponding to the chassis number stored in the database unit 2a are transmitted to the PC 11 (step A20). The chassis number is used for reference at the time of updating the database after completion of the writing operation. Therefore, when another method for specifying the location of data to be updated in the database is used in combination, the chassis number need not be transmitted to the PC 11.

The copy information is used when the operator 14 performs an operation to replace the ECU itself. For example, the copy information is not used in the case of updating the ECU information accompanying the injector replacement operation. Therefore, it is not necessary to send the copy information to the PC 11 during normal writing operations.
In the PC 11, the activation information, time information, chassis number, and copy information are received by the writing device receiver 9b. These pieces of information are transmitted to the MUT 13 via any information transmission means (step A30).

  In the MUT 13, the activation permission time setting unit 8a sets the activation permission time based on the transmitted time information. Further, the program activation unit 8b uses the activation information to activate the data writing program 7a, and the writing operation to the ECU 16 can be performed only during the activation permission time. Thereby, the ECU information written in the ECU 16 is changed by the hand of the operator 14.

  In the case of updating ECU information associated with vehicle injector replacement work, for example, information (alphanumeric characters, symbols, or bar codes) directly stamped on the injector body is read, and new ECU information is read. Can be overwritten as Further, in the case of replacement work of the ECU 16 itself, the copy information transmitted from the management server 1 may be copied to the ECU 16 as it is.

  After the completion of the writing operation, new ECU information written in the ECU 16 by the operator 14 is read into the MUT 13. The ECU information read here is transmitted to the PC 11 as new copy information via an arbitrary information transmission means (step A40). In the PC 11, the transmitted new copy information and chassis number are transmitted to the management server 1 by the writing device second transmission unit 9c, and a work completion report is made (step A50).

  These new copy information and chassis information are received by the server second receiving unit 4c of the management server 1. The management server 1 receives the work completion report, and the ECU information stored in the database unit 2a is updated with the new copy information and the chassis number. In addition, permission for the application for work cancellation is returned to the PC 11, and the work flag F is set to F = 0 in the flag setting unit 3b (step A60).

[6-2. First reminder notice]
The control for prompting the writing work by the worker 14 or causing the completion report after the work to be submitted without delay will be described.
The first writing prompt unit 3d of the management server 1 determines whether or not a predetermined time has elapsed from the reception time of the application after permitting the application for work permission. This determination is repeated until a work completion report is received.

  When a predetermined time elapses, an email (prompt notification) for prompting the completion of the work and its report is transmitted to the PC 11 of the manager 12 (step B10). In other words, as shown in FIG. 5, if there is no completion report even after a predetermined time has passed in the state where the application for work permission by the administrator 12 is permitted, the writing is performed by sending a reminder notice. The work completion report is encouraged. A plurality of predetermined times for sending the reminder mail may be set.

  Further, when not only mail but also a facsimile is used (or used in combination) as a reminder, a facsimile addressed to the manager or worker of the sales office 10 is transmitted in step B10. By doing in this way, prompting can be further ensured.

[6-3. Second reminder notice]
The control when a plurality of work permission applications are simultaneously applied to one ECU, that is, when the writing work competes, will be described. FIG. 6 shows a case where an application for work permission is made by another administrator 18 in the same sales office 10 when an application for work permission by the administrator 12 is permitted.

  First, the manager 18 inputs manager information, worker information, and a chassis number to the PC 17, and applies to the management server 1 for work permission (step C10). This application is received by the server first receiving unit 4a of the management server 1, and the time information generating unit 3a of the management server 1 detects the reception time of this application and generates time information. Further, the flag setting unit 3b confirms the work flag F of the ECU information corresponding to the chassis number transmitted from the PC 11 on the database.

  Here, if the work flag F is F = 1, the application of writing work to the ECU mounted on the vehicle having the same chassis number is duplicated. For this reason, the application by the administrator 18 is not permitted, and the administrator 17 is notified that the PC 17 should wait until the writing operation by another person is completed (step C20). At this time, the reception time of the application by the administrator 12 may be notified to the PC 17 as a reference for the standby time.

Further, the second writing prompt unit 3e of the management server 1 transmits an email (prompt notification) for prompting the completion of the work and the report to the PC 11 of the manager 12 (step C30). That is, by notifying the administrator 12 that there has been an application for a writing operation by another person, the completion report at the end of the operation is prevented from being delayed.
Alternatively, as described above, in step C30, the facsimile transmission may be used instead of or in combination with the facsimile transmission to ensure the prompt.

[6-4. Cancel control]
The control when the work is stopped after the application for the work permission is granted, that is, when the writing work to the ECU 16 is not performed will be described. In this case, if the management server 1 confirms that the ECU information of the ECU 16 is the same as the copy information stored in the database unit 2a, the management server 1 considers that there has been no application for work permission from the beginning and cancels the permission. Can do. This is because if the ECU information has been changed to some extent in the ECU 16, the database may be updated in accordance with the above-described procedure for the normal writing operation.

There are two methods for confirming the ECU information of the ECU 16.
One is a method in which the ECU information of the ECU 16 whose contents are not changed is read by the MUT 13 and transmitted to the PC 11 and the management server 1 as new copy information. This method is the same procedure as the communication procedure during the normal writing operation described above. As a result, the management server 1 can collate the new copy information with the copy information in the database 2a, and cancel the work permission if the contents are the same.

  The other is a method using work history information recorded in the MUT 13. For example, as shown in FIG. 7, the worker 14 transmits the worker information, the work history information, and the chassis number from the MUT 13 to the PC 11 and applies for work cancellation (step D10). In response to this, the manager 12 adds his / her manager information to the transmitted information and transmits it to the management server 1 (step D20). In the management server 1, it is confirmed from the work history information that writing to the ECU 16 has not been performed, and permission for the application for work cancellation is returned to the PC 11. Further, the work flag F is set to F = 0 in the flag setting unit 3b (step D30).

[7. effect]
[7-1. Vehicle electronic information management server]
According to the vehicle electronic information management server 1 according to the present embodiment, the following effects can be expected.
That is, when the ECU information recorded in the ECU 16 mounted on the vehicle is changed, the database of the database unit 2a is updated with the vehicle chassis number and the new copy information. Centralized management is possible, and the traceability of ECU information can be improved.

  In addition, since the time information generated by the time information generation unit 3a of the management server 1 limits the activation time of the data writing device 6 (that is, the activation time of the data writing program 7a of the MUT 13), rapid writing The operator 14 can be urged to work. In addition, by defining the use permission time of the data writing device 6 on the management server 1 side, the management server 1 can grasp the scheduled completion time of the writing work relating to the vehicle identified by the chassis number.

Moreover, since the starting information and time information transmitted from the management server 1 are encrypted, the safety and reliability of information communication can be improved.
Further, since the management server 1 includes the flag setting unit 3b, it is possible to easily grasp whether or not the writing operation of the ECU information is being performed by checking the state of the work flag F. Can be prevented from overlapping. In addition, since the writing operation is permitted only to the data writing device that targets the vehicle in which F = 0, it is not the worker 14 who is the sender of the information related to the reception by the server first receiving unit 4a. Thus, it is possible to prevent the ECU information from being overwritten due to duplication of writing work by a plurality of workers. Further, it is possible to prevent the latest data of ECU information from being reflected.

In particular, when a plurality of parts related to the control of the ECU 16 of a certain vehicle must be repaired and replaced at the same time, writing of ECU information by a plurality of workers may be mixed. Such an exclusive permission system for work permission application makes it possible to manage work history significantly.
Further, according to the present management server 1, the provision of the first writing prompting unit 3d enables a prompting email to be transmitted before the use permission time has been exhausted, enabling a faster writing operation to be performed by the worker. 14 can be prompted. The reminder mail also functions as a reminder for the worker 14 not to forget the report after the completion of the writing work. In addition, since the second writing prompting unit 3e is provided, it is possible to notify a request for another writing work by another worker by e-mail, and further prompt the worker 14 to perform a quick writing work. Can do.

  Further, when it is desired to cancel the writing operation, the writing operation can be canceled using the change history stored in the MUT 13.

[7-2. Data writing device]
Further, according to the data writing device 6 (client PC 11 and MUT 13) according to the present embodiment, the following effects can be expected.

  First, since the work cannot be started unless the management server 1 is accessed before the ECU information writing work is started, the writing work can be prevented from being mistakenly performed without the permission of the management server 1. It is possible to accurately and centrally manage ECU information of each vehicle. Moreover, since the start permission time of the program for writing is set by the time information given from the management server 1, the operator 14 can be prompted to perform a quick writing operation.

In addition, the database of the management server 1 can be updated using the new copy information newly written by the MUT 13, and the information in the database unit 2a can always be kept up-to-date.
Moreover, since the encrypted starting information and time information are received, the safety of information can be improved and the safety and reliability of ECU information can be improved.

[7-3. Vehicle electronic information management system]
Further, according to the electronic information management system for a vehicle, the following effects are expected.
First, since the activation permission time of the data writing program 7a is set by the time information generated by the time information generation unit 3a of the management server 1 and the activation time is limited, a quick writing operation is performed on the operator 14. Can be urged. Further, the management server 1 can grasp the scheduled completion time of the writing operation of the ECU 16 of the vehicle identified by the chassis number.

  Further, after the ECU information recorded in the ECU 16 is changed, information obtained by copying new ECU information is transmitted to the management server 1, and the database of the database unit 2a is updated. In other words, the information in the database can always be kept up-to-date, and the ECU information of each vehicle can be accurately and centrally managed. Thereby, for example, even when it is desired to narrow down vehicles equipped with ECUs in which control parameters of specific values are recorded due to a request in quality control of the vehicle, it is easy to search the database of the database unit 2a. It is possible to grasp the target vehicle. In addition, since this database covers all the information stored in the ECU, it is extremely versatile.

Further, in the communication between the management server 1 and the PC 11, since the activation information and the time information are encrypted and decrypted, it is possible to prevent impersonation and information interception due to unauthorized access, and to improve security. it can.
Further, by confirming the state of the work flag F set by the flag setting unit 3b of the management server 1, it is possible to easily grasp whether or not the writing work of the ECU information is being performed.

  In addition, since the writing work is permitted only to the PC 11 that has applied for work permission when the work flag F is F = 0, work by a person other than the specific worker 14 can be prevented, and a plurality of work can be prevented. It is possible to prevent the ECU information from being overwritten due to duplication of writing work by the person. In addition, since the order of writing operations becomes clear, it is possible to prevent the latest data of ECU information from being reflected.

Further, by sending a reminder email to the PC 11 before the use permission time is exhausted, it is possible to prompt the manager 12 and the worker 14 to perform a faster writing operation. Furthermore, it is possible to notify the worker 14 who is writing the ECU information of another writing work request by another worker by e-mail, so that the worker 14 can perform a faster writing work. Can be urged.
Further, it is possible to confirm on the management server 1 side that the ECU information has not been changed by using the history of the writing operation stored in the history storage unit 7b of the MUT 13, and the writing operation can be canceled. . Thereby, for example, when it is found that information in the ECU related to the writing work cannot be read after the writing work is started, the work can be stopped while maintaining traceability.

[8. Others]
Although the embodiments of the present invention have been described above, the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.
For example, in the above-described embodiment, the chassis number is used as unique information given to identify each of all manufactured vehicles. Instead, vehicle ID information such as VIN information is used as a configuration. Also good. That is, any information may be used as long as it is a unique value that can identify each vehicle.

  In the specific example in the above-described embodiment, an example in which the function of the data writing device 6 is separated into the client PC 11 and the MUT 13 is shown. However, an integrated device having these functions is provided. It is good also as the structure used.

1 is a block diagram illustrating an overall configuration of a vehicle electronic information management system including a vehicle electronic information management server and a data writing device according to an embodiment of the present invention. It is a schematic diagram showing a specific system configuration example of the electronic information management system for a vehicle. It is a database structure figure preserve | saved at this electronic information management server for vehicles. It is a signal sequence diagram explaining the control content at the time of the write-in work in this electronic information management system for vehicles. It is a signal sequence diagram explaining the control content at the time of prompting of the writing work in this electronic information management system for vehicles. It is a signal sequence diagram explaining the control content at the time of prompting of the writing work in this electronic information management system for vehicles. It is a signal sequence diagram explaining the control content at the time of cancellation of the writing work in this electronic information management system for vehicles.

Explanation of symbols

1 Vehicle Electronic Information Management Server (Management Server)
2 Storage unit 2a Database unit (information management means)
2b Activation information storage unit (activation information storage means)
3 Control unit 3a Time information generation unit (time information generation means)
3b Flag setting unit (flag setting means)
3c Update unit (update means)
3d first writing reminder (first writing reminder)
3e Second writing reminder (second writing reminder)
4 communication unit 4a server first receiving unit (server first receiving means)
4b Server transmission unit (server transmission means)
4c server second receiving unit (server second receiving means)
5 Communication Network 6 Data Writing Device 7 Storage Unit 7a Data Writing Program 7b History Saving Unit (History Saving Means)
8 Control part 8a Activation permission time setting part (activation permission time setting means)
8b Program starting part (program starting means)
9 Communication Unit 9a Writing Device First Transmitting Unit (Writing Device First Transmitting Unit)
9b Writing device receiving section (writing device receiving means)
9c Writing device 2nd transmission part (writing device 2nd transmission means)
11 Client PC
12 Administrator 13 MUT (Multi Use Tester)
14 worker 16 ECU

Claims (16)

A vehicle electronic information management server for centrally managing a change history of information recorded in an electronic control device for a vehicle,
Information management means for storing, as a database, copy information obtained by copying the unique information of each vehicle assigned to individually identify the vehicle and the ECU information recorded in the electronic control unit mounted on the vehicle;
Activation information storage means for storing activation information for activating a data writing device capable of changing the ECU information recorded in the electronic control device mounted on the vehicle;
Server first receiving means for receiving the vehicle specific information transmitted from the data writing device by an operator before the start of the writing work using the data writing device;
Time information generating means for generating time information defining the use permission time of the data writing device by the worker based on the reception time of the specific information of the vehicle received by the server first receiving means;
Server transmission means for transmitting the activation information stored in the activation information storage means and the time information generated by the time information generation means to the data writing device;
Server second receiving means for receiving new copy information obtained by copying new ECU information of the electronic control unit;
Update means for updating a database stored in the information management means using the specific information received by the server first receiving means and the new copy information received by the server second receiving means. An electronic information management server for vehicles. 2. The vehicle electronic information management server according to claim 1, wherein the server transmission means encrypts the activation information and the time information and transmits the encrypted information to the data writing device. When the server transmitting means sets the flag indicating that the writing operation of the ECU information is being performed when the activation information and the time information are transmitted, and the server second receiving means receives the new copy information The vehicle electronic information management server according to claim 1, further comprising flag setting means for deleting the flag. The server transmission means transmits the activation information and the time information when the flag set by the flag setting means is set, and the activation information and the time information when the flag is off. The vehicle electronic information management server according to claim 3, wherein the electronic information management server for vehicles is not transmitted. When a predetermined time elapses from the reception time at which the server first receiving means has received the vehicle specific information, the data writing device is urged to prompt the completion of the ECU information writing operation. The vehicular electronic information management server according to any one of claims 1 to 4, further comprising first writing prompting means for transmitting the first electronic mail. Completion of writing of the ECU information when the server first receiving means receives vehicle specific information by a person other than the operator while the flag set by the flag setting means is on. The vehicle electronic information according to any one of claims 3 to 5, further comprising second writing prompting means for transmitting a second electronic mail to the data writing device to prompt the user. Management server. The server second receiving means receives the change history of the ECU information by the data writing device,
The flag setting means turns off the flag when it is confirmed from the change history received by the server second receiving means that the ECU information has not been changed. The electronic information management server for vehicles according to any one of the above. The unique information of each vehicle given to individually identify the vehicle and the copy information obtained by copying the ECU information recorded in the electronic control unit mounted on the vehicle are stored as a database, and the change history of the ECU information is unified. A data writing device provided to be communicable with a management server to be managed and for changing ECU information recorded in an electronic control device of each vehicle,
A writing device first transmitting means for transmitting the specific information of the individual vehicle to the management server before starting the writing operation;
Time information generated by the management server based on the reception time when the management server received the unique information transmitted from the writing device first transmission means and the data writing device stored in the management server in advance. Writing device receiving means for receiving activation information for activation;
An activation permission time setting means for setting an activation permission time of a program for changing the ECU information of the electronic control device defined by the time information received by the writing device reception means;
Program activation means for activating the program only during the activation permission time set by the activation permission time setting means using the activation information received by the writing device reception means;
A data writing device for an electronic control device for a vehicle, comprising: a writing device second transmitting means for transmitting new copy information obtained by copying new ECU information of the electronic control device to the management server. 9. The data writing device of the vehicle electronic control device according to claim 8, wherein the writing device receiving means receives and restores the activation information and the time information encrypted by the management server. . A management server that centrally manages a change history of information recorded in an electronic control device for a vehicle, and an ECU that is provided so as to be able to communicate with the management server via a network and that is recorded in the electronic control device of each vehicle An electronic information management system for a vehicle comprising a data writing device capable of changing information,
Information management means for storing in the management server, as a database, copy information obtained by copying ECU-specific information recorded in an electronic control device mounted on the vehicle-specific information and unique information of each vehicle assigned to individually identify the vehicle; ,
Start information storage means for storing start information for starting a program for changing ECU information of the electronic control device in the data writing device in the management server;
A writing device first transmitting means for transmitting unique information of the individual vehicle from the data writing device to the management server before starting the writing operation;
Server first receiving means for receiving the vehicle specific information transmitted from the writing device first transmitting means at the management server;
Time information generating means for generating time information defining the use permission time of the data writing device based on the reception time of the specific information of the vehicle received by the server first receiving means;
Server transmission means for transmitting the activation information stored in the activation information storage means and the time information generated by the time information generation means from the management server to the data writing device;
A writing device receiving means for receiving the time information and the activation information transmitted from the server transmitting means by the data writing device;
An activation permission time setting means for setting an activation permission time of a program for changing ECU information of the electronic control device based on the use permission time defined by the time information received by the writing device reception means;
Program activation means for activating the program in the data writing device only during the activation permission time set by the activation permission time setting means using the activation information received by the writing device reception means;
A writing device second transmitting means for transmitting new copy information obtained by copying new ECU information of the electronic control device from the data writing device to the management server after the end of the writing operation;
Server second receiving means for receiving at the management server the new copy information transmitted from the writing device second transmitting means;
Update means for updating the database stored in the information management means using the specific information received by the server first receiving means and the new copy information received by the server second receiving means. An electronic information management system for vehicles. The server transmission means encrypts the activation information and the time information and transmits the encrypted information to the data writing device,
11. The vehicular electronic information management system according to claim 10, wherein the writing device receiving means receives and restores the activation information and the time information. When the server transmission means sets a flag indicating that the writing operation of the ECU information is in progress after the activation information and the time information are transmitted, and the server second reception means receives the new copy information The vehicle electronic information management system according to claim 10 or 11, further comprising flag setting means for deleting the flag. When the server transmitting means transmits the activation information and the time information to the writing device receiving means when the flag set by the flag setting means is set, and when the flag is off, 13. The vehicle electronic information management system according to claim 12, wherein the activation information and the time information are not transmitted to the writing device receiving means. When a predetermined time elapses from the reception time at which the server first receiving means has received the vehicle specific information, the data writing device is urged to prompt the completion of the ECU information writing operation. The vehicle electronic information management system according to claim 10, further comprising first writing prompting means for transmitting the first electronic mail. When the specific information of the vehicle is received from the writing device other than the data writing device in the server first receiving means with the flag set by the flag setting means being set, the ECU information is written. The vehicle according to any one of claims 12 to 14, further comprising second writing prompting means for transmitting a second electronic mail to the data writing device to prompt the completion of work. Electronic information management system. A history storing means for recording a change history of the ECU information in the data writing device;
The writing device second transmission means transmits the change history recorded in the history storage means to the management server;
The server second receiving means receives the change history transmitted from the writing device second transmitting means,
16. The vehicle according to claim 12, wherein the flag setting unit turns off the flag when it is confirmed from the change history that the ECU information has not been changed. Electronic information management system.

Images