JP2010019175A - Data writing system for in-vehicle electronic control unit - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To perform concurrent data writing (programming rewriting, e.g.) for a plurality of vehicles in radio communication while maintaining working accuracy. <P>SOLUTION: A radio communication device (a radio communication means) 200 outside the vehicles receives vehicle information for individual vehicles in a communication possible range via an in-vehicle transceiver (a transmitting and receiving means) 105, specifies the data-writing object vehicles in accordance with the vehicle information, and transmits and receives written data and writes concurrently for all specified object vehicles. Information about whether data is written or not is transmitted via the transceiver 105 to the radio communication device 200. Then, the radio communication device 200 stores the information about whether it is written or not, for each vehicle information. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a data writing system for an in-vehicle electronic control unit that performs wireless communication with the outside of the vehicle and writes data received from the outside of the vehicle to the in-vehicle electronic control unit.

Patent Document 1 discloses a memory rewriting device of an in-vehicle ECU that rewrites a program of an in-vehicle electronic control unit (ECU) based on program data transmitted from an external data communication device.
JP 2004-028000 A

By the way, for example, when a plurality of vehicles that require program rewriting in the electronic control unit are collected, if the program rewriting operation is performed one by one by one-to-one communication, Work efficiency is poor.
On the other hand, if the program is rewritten at the same time by sending data to a plurality of vehicles at the same time, the work efficiency can be improved. However, for example, a plurality of vehicles placed in a motor pool are not subject to rewriting. There are cases where vehicles are mixed, and there is a possibility of communication or writing failure.If data writing work is attempted to proceed simultaneously on multiple vehicles by wireless communication, the accuracy of rewriting work will be reduced. There was a possibility.

  The present invention has been made in view of the above problems, and data writing of an in-vehicle electronic control unit capable of performing data writing (for example, program rewriting) in parallel in a plurality of vehicles by wireless communication while maintaining work accuracy. The purpose is to provide a system.

  Therefore, in the present invention, the wireless communication means outside the vehicle receives vehicle information of individual vehicles within the communicable range via the in-vehicle transmission / reception means, specifies the target vehicle for data writing based on the vehicle information, For all of the identified target vehicles, write data is transmitted / received and written in parallel, and information on the success / failure of data writing is transmitted to the wireless communication means via the transmission / reception means, and the wireless communication means The success / failure information is stored for each vehicle information.

  According to the above invention, among the vehicles located within the communicable range of the wireless communication means outside the vehicle, the vehicle that is the target of data writing (for example, program rewriting) is specified, and the writing data is transmitted and received for all the target vehicles Since data is written in parallel, it is possible to efficiently write data to a plurality of vehicles that need to be written, and the wireless communication means receives data write success / failure information. Therefore, it can be easily confirmed whether or not data writing is normally performed in a plurality of vehicles, and it is easy to appropriately perform operations such as rewriting.

Embodiments of the present invention will be described below.
FIG. 1 shows the overall configuration of a data writing system according to an embodiment of the present invention.
The vehicle 100 is provided with a plurality of electronic control units 101 for controlling an engine, an automatic transmission, and the like.
The electronic control unit 101 includes a microcomputer including a CPU, a ROM, a RAM, an I / O, etc., an EEPROM that is a rewritable nonvolatile memory, and the like, according to programs stored in the EEPROM or the like. A signal from the sensor is processed and an operation signal is output to an engine, an automatic transmission or the like.

Further, the vehicle 100 includes various electrical components such as a hazard lamp 102 (exterior lamp) and a horn (alarm) 103, and these various electrical components are controlled by a BCM (Body Control Module) 104. .
Further, the vehicle 100 is provided with a transceiver (transmission / reception means) 105 for performing wireless communication with the outside of the vehicle. The electronic control unit 101, the BCM 104, and the transceiver 105 are connected by a vehicle network 106. They are connected so that they can communicate with each other.

On the other hand, a wireless communication device (wireless communication means) 200 is provided as a work tool outside the vehicle that performs wireless communication with the transceiver 105.
The wireless communication device 200 is a device that includes a display screen, a keyboard and the like as well as a device that transmits and receives data, and further includes a microcomputer that controls these devices. For example, a notebook personal computer can be used.

For example, when rewriting the program of the electronic control unit 101, a new version of the program after rewriting is stored in the rewritable memory of the wireless communication device 200, and an operator operates the wireless communication device 200. And do the rewriting work.
The wireless communication apparatus 200 is specially handled by maintenance shop and dealer workers in order to write data to the electronic control unit 101 (rewrite the program), and software is incorporated into a general-purpose personal computer. Or a dedicated device.

The flowcharts of FIGS. 2, 5, and 6 show the flow of data write processing using the wireless communication apparatus 200.
The flowchart of FIG. 2 shows a process of confirming / selecting a vehicle as a data writing work target by wireless communication.
The following explanation is based on the premise that a plurality of vehicles that perform data writing (program rewriting / version upgrading) are collected in the motor pool, and these target vehicles are written all at once.

Prior to the start of work, the worker turns on the key switch of the target vehicle 100 for writing data (program rewriting / upgrading) and wirelessly communicates the vehicle (work target vehicle) control system (transceiver 105, electronic control). The unit 101 or the like is turned on (step S1001).
If the operator starts the engine (internal combustion engine) prior to the work, the battery can be prevented from running out during the work even if the data writing work time becomes long.

Therefore, it can be a precondition that data is written that the engine (internal combustion engine) is in an operating state.
However, in the hybrid vehicle, when the engine is automatically started due to a decrease in the battery voltage, the operator only has to turn on the key switch. It is not limited to the vehicle provided, but may be an electric vehicle or the like.

In addition, when the transceiver 105 is in a communication standby state in which power is constantly supplied and receives communication from the wireless communication device 200, power supply to the electronic control unit 101 is started, and further, the engine is automatically activated. It can be configured to be able to start automatically.
In this case, the operator does not need to perform individual operations on the individual vehicles, and can immediately start the writing work, thereby improving work efficiency.

As described above, when the transmitter / receiver 105 is turned on and then the wireless communication device 200 is turned on (step S2001), the wireless communication device 200 first performs a communication check to perform work within a communicable range. The presence of the target vehicle is confirmed (step S2002).
The communication check is started when an operator operates the wireless communication device 200 to instruct the start of the communication check, transmits a communication check signal from the wireless communication device 200, and sends a reply from the vehicle 100 side. By receiving it, it is confirmed whether or not the work target vehicle exists.

Here, if the level (intensity) of the transmission radio wave from the vehicle 100 is equal to or greater than the threshold value, all the vehicles that satisfy the condition are regarded as the target vehicles, but the level of the transmission radio wave from the vehicle 100 ( When the intensity is less than the threshold, it is determined that reliable transmission / reception is difficult, and is excluded from the target vehicle (communication partner) (see FIG. 3).
The threshold is set in advance as an allowable minimum value of the radio wave level (intensity) at which data can be transmitted and received stably.

As a result, it is possible to avoid rewriting failure due to the communication state, and to reliably complete the rewriting work.
In addition, when a plurality of wireless communication devices 200 are installed in a distributed manner and the plurality of wireless communication devices 200 are operated simultaneously, the vehicle 100 is present in an area where communication ranges of the plurality of wireless communication devices 200 overlap. However, if priority is given to the wireless communication device 200 that has started communication for one vehicle, and the other wireless communication device 200 tries to communicate later, the transceiver 105 does not respond to this. Data is transmitted / received only to / from the wireless communication apparatus 200 that has started communication (see FIG. 4).

  As described above, since there are many target vehicles, a plurality of wireless communication devices 200 are arranged in a distributed manner, and when a plurality of wireless communication devices 200 perform work simultaneously, one vehicle 100 has a plurality of wireless communication devices. Even if the wireless communication device 200 is within the communicable range of 200, it is possible to identify one wireless communication device 200 as a communication partner, and to reliably perform data transmission / reception and grasping of the work status.

Further, when the transceiver 105 receives signals from a plurality of wireless communication devices 200, the wireless communication device 200 that transmits a signal having a higher radio wave level (intensity), in other words, the closest wireless communication The apparatus 200 can be configured to be specified as a data transmission / reception partner.
As a result of the communication check, the wireless communication device 200 determines whether or not the target vehicle exists within the communicable range (step S2003). If there is a target vehicle with which communication has been established, Then, a signal requesting transmission of vehicle information is sent (step S2004).

On the other hand, if it is determined that there is no target vehicle with which communication has been established, the communication check (confirmation of the target vehicle) is continued.
If the target vehicle cannot be confirmed even after a predetermined time has elapsed since the start of the communication check (confirmation of the target vehicle), the target vehicle is displayed on the display device of the wireless communication device 200. A display warning that it is not found is performed, and the communication check (confirmation of the target vehicle) is once ended.

When the target vehicle is confirmed and a signal requesting transmission of vehicle information is sent from the wireless communication apparatus 200 to each vehicle 100 (transceiver 105), the transceiver 105 directs the vehicle information to the wireless communication apparatus 200. (Step S1002).
The vehicle information is, for example, vehicle identification information such as a vehicle registration number, a vehicle body number, a vehicle type, and a vehicle manufacturing date, and may be single information or a combination of a plurality of information. Good.

The wireless communication device 200 receives the vehicle information sent from the vehicle 100 (the transceiver 105) (step S2005), and selects the current work target vehicle based on the vehicle information (step S2006).
An operator inputs information on a vehicle that is a work target vehicle to the wireless communication apparatus 200 in advance using a keyboard or the like.

Whether the wireless communication device 200 is the target vehicle to be rewritten this time by comparing the vehicle information designated in advance as the work target vehicle with the vehicle information sent from the vehicle 100 (the transceiver 105). Whether or not the communication check (confirmation of the target vehicle) is completed is determined for each vehicle.
For example, when the wireless communication apparatus 200 downloads update data of a program from a host computer, vehicle information to which the update data is applied may be downloaded at the same time, or vehicle information is included in the update data itself. It can also be set as the structure attached integrally.

As described above, when the current work target vehicle is selected, the data indicating that the work target vehicle has been selected is transmitted to the vehicle 100 (transceiver 105), and the transceiver 105 that has received the data receives the data. The BCM 104 can be instructed to turn on the hazard lamp 102 or to generate a warning sound due to the operation of the horn 103.
With the above configuration, the worker can easily confirm the vehicle selected as the work target among the vehicles arranged in a row, for example, although it is a vehicle that should be the original work target, It is possible to recognize a vehicle or the like that the wireless communication apparatus 200 cannot communicate with because the operator forgot to operate the key switch before actually starting the data writing operation, and to perform the key operation again.

As described above, the radio communication device 200 or another work tool and the electronic control unit for each vehicle confirmed as a work target vehicle by lighting the hazard lamp 102 or generating a warning sound due to the operation of the horn 103. 101 can be connected with a cable to perform a program data writing operation or the like.
In addition, exterior lamps such as headlights, tail lamps, and brake lamps can be turned on instead of the hazard lamps 102, and an alarm of the anti-theft device can be operated instead of the horn 103.

  Furthermore, instead of making the worker recognize that the vehicle is a work target vehicle by flashing light or recognizing that the vehicle is a work target vehicle by sound, it recognizes that the vehicle is a work target vehicle by the movement of vehicle parts. Specifically, a vehicle selected as a work target by opening and closing a door or a window using a wiper operation or an automatic opening / closing device so that an operator can identify the state change of each vehicle. can do.

In the present application, the various exterior lamps including the hazard lamp 102, the horn 103, the anti-theft device, the wiper, the automatic opening / closing device, etc. all correspond to the electrical components, but the electrical components to be operated are not limited to these. Absent.
The flowchart of FIG. 5 shows a process of reading data of a diagnosis result from the electronic control unit 101 of the target vehicle and transmitting the data to the wireless communication device 200 after the work target vehicle is selected according to the flowchart of FIG.

The electronic control unit 101 stores a diagnostic processing program. Based on the diagnostic processing program, the electronic control unit 101 performs abnormality diagnosis on various sensors, mechanisms to be controlled, and the like, and stores the result (history) of the abnormality diagnosis. It is like that.
When the wireless communication device 200 reads the diagnosis result from the vehicle 100 side, first, the wireless communication device 200 determines whether or not the work target vehicle is in a state where the diagnosis result can be read (step). S2011).

  For example, information on the engine speed is obtained from the electronic control unit 101 that controls the engine, and when the engine is stopped, it is determined that the diagnosis result cannot be read out. This is applied when the operation of the engine is a precondition for the communication process in order to prevent the battery from being operated for a long time with the engine stopped.

Further, when the communication is unstable, it can be determined that the diagnosis result cannot be read. In this case, it is possible to prevent the diagnosis result from being erroneously transmitted to the wireless communication apparatus 200 due to the communication abnormality.
If it is determined that the diagnostic result cannot be read, an error message warning that the diagnostic result cannot be read is displayed on the display device provided in the wireless communication apparatus 200 (step S2012).

At this time, the reason why it is determined that reading is not possible (engine stop, communication instability, etc.) can be displayed together with the vehicle information. In this case, based on the cause of the reading failure, the worker makes the reading possible state. Processing (engine startup, antenna orientation adjustment, removal of obstacles to communication, etc.)
In addition, when it is determined that some of the plurality of vehicles that are the targets for reading the diagnosis result are unreadable, the reading work can be performed on the readable vehicles other than the vehicle. The operator can determine whether or not to cancel the reading of the diagnosis result from the vehicle that has been determined to be unreadable, and can perform a reading operation after the target vehicle becomes readable. It can also be made selectable by the operation of.

On the other hand, if the diagnostic result can be read, a signal requesting transmission of the diagnostic result is transmitted from the wireless communication apparatus 200 to each vehicle 100 (transceiver 105) (step S2013).
The transmitter / receiver 105 that has received the transmission request for the diagnostic result requests the electronic control unit 101 to transmit the stored diagnostic result via the vehicle network 106 and is sent from the electronic control unit 101. The diagnosis result is transmitted to the wireless communication device 200 (step S1011).

The wireless communication device 200 receives information on the diagnosis result sent from each vehicle 100 (transceiver 105) (step S2014), and displays the received data for each vehicle (vehicle information) on the display screen (step S2015). Further, the vehicle information and the corresponding diagnosis result information are stored as a pair.
Since the acquisition of the diagnosis result is executed in parallel in a plurality of vehicles specified as work vehicles for one wireless communication device 200, the diagnosis result can be efficiently collected, and the diagnosis result is a vehicle. Since it is linked to the information, maintenance (maintenance inspection) based on the diagnosis result and analysis of the diagnosis result can be performed appropriately.

The flowchart of FIG. 6 transmits program data from the wireless communication apparatus 200 to the electronic control unit 101 of the target vehicle after the work target vehicle is selected according to the flowchart of FIG. This shows the processing for rewriting the program.
Here, prior to the rewriting of the program, it is assumed that the wireless communication device 200 stores program data (update data) and information specifying the electronic control unit 101 that performs the rewriting of the program.

First, in the wireless communication apparatus 200, the electronic control unit 101 that rewrites a program is selected (step S2021).
That is, among the plurality of electronic control units 101 provided in the vehicle 100, the electronic control unit 101 that rewrites the program this time is specified.
The electronic control unit 101 selected as a program rewrite target by the wireless communication apparatus 200 is the electronic control unit 101 that applies the same update program data, in other words, is rewritten to the same program.

Next, in the wireless communication device 200, it is determined whether each work target vehicle is in a state where the program can be rewritten (step S2022).
Specifically, it is determined from the vehicle information whether or not the electronic control unit 101 storing the program to be rewritten is installed, or the electronic control to be rewritten from the vehicle 100 side (transceiver 105). The specification information of the unit is transmitted, and it is determined whether or not the transmitted specification information is to be rewritten.

Note that the work target vehicle that has already been rewritten is determined to be incapable of rewriting the program and is excluded from the rewriting target.
If the program cannot be rewritten, an error message warning that the program cannot be rewritten is displayed on the display device provided in the wireless communication apparatus 200 (step S2023).

Here, among a plurality of work target vehicles, a vehicle that cannot be rewritten and a vehicle that can be rewritten can be distinguished and displayed based on vehicle information.
In response to a wireless instruction from the wireless communication device 200 to the transceiver 105 of the vehicle incapable of rewriting the program, the hazard lamp 102 is turned on via the BCM 104 or a warning sound is generated due to the operation of the horn 103. It is possible for a person to directly recognize a vehicle in which the program cannot be rewritten by turning on the hazard lamp 102 or the like.

  If some of the target vehicles are determined to be non-rewritable, the rewritable vehicle excluding the vehicle can be rewritten, and all target vehicles can be rewritten. The rewriting work can be performed after entering the state, and the operator can select whether or not to cancel the rewriting of the program in the vehicle that is determined to be unrewritable.

If the program can be rewritten, write data (reprogramming data) is transmitted from the wireless communication apparatus 200 to each transceiver 105 of the work target vehicle (step S2024).
The transceiver 105 of each work target vehicle receives the write data (reprogramming data) (step S1021), and performs data writing (reprogramming) to the corresponding electronic control unit 101 (EEPROM) in parallel. (Step S1022).

Specifically, according to a rewrite program stored in advance in a memory (for example, EEPROM) of each electronic control unit 101, writing (program rewriting) of the received program data to the memory (for example, EEPROM) is executed.
Accordingly, it is possible to perform the program rewriting work on a plurality of vehicles at the same time without using one wireless communication device 200 and connecting each electronic control unit 101 with a line. Program rewriting (version upgrade) can be performed efficiently.

  Then, the transceiver 105 determines whether or not writing (rewriting) has been completed (step S1023), and if not completed, whether or not an abnormality such as freezing has occurred in the writing (rewriting) work. (Step S1024) and if no abnormality has occurred, the writing (rewriting) operation is continued and information indicating that the writing (rewriting) operation is being performed normally is transmitted to the wireless communication apparatus 200. (Step S1025).

On the other hand, when the writing (rewriting) work is not completed and an abnormality such as freezing has occurred, information indicating that the writing (rewriting) work has occurred is transmitted to the wireless communication apparatus 200 side. Transmit (step S1026).
Note that the writing (rewriting) work abnormality includes a reception error of writing data (reprogramming data).

During rewriting work (during data transmission / reception and / or rewriting operation), in principle, the vehicle is stopped within the communicable range, but the vehicle to be rewritten moves from within the communicable range. If the communication state deteriorates due to disconnection, normal rewriting cannot be performed.
Therefore, when the movement of the target vehicle is determined based on the decrease in the level (intensity) of the radio wave transmitted from the vehicle 100 (transceiver 105), and the radio wave level (intensity) falls below the allowable minimum value. For this reason, it is preferable to determine that this is an abnormality in the writing (rewriting) operation, interrupt the writing if it is in progress, and transmit the occurrence of the abnormality to the wireless communication apparatus 200 (step S1025).

Further, when the radio communication device 200 detects a decrease in the level (intensity) of the radio wave transmitted from the vehicle in communication, the radio communication device 200 illuminates the hazard lamp 102 with respect to the transmitter / receiver 105 or alarms due to the operation of the horn 103. It is possible to transmit a signal instructing execution (warning to the worker) such as occurrence of the error.
An operator who wants to move the vehicle notices that the vehicle should not be moved because the hazard lamp 102 lights up or the crank sound starts, regardless of his / her own operation. The rewriting operation can be continued by stopping and returning to the original position.

Further, even if it is determined that the writing (rewriting) work has been completed, if it is in an abnormal end state such as when the work is finished in the middle of writing (rewriting) (step S1027), the writing (rewriting) work is abnormal. Is transmitted to the wireless communication apparatus 200 (step S1026).
It should be noted that even if the electronic control unit 101 does not rewrite a program for communication with the transceiver 105 and the program rewriting fails, the electronic control unit 101 and the transceiver 105 The transmitter / receiver 105 can transmit the rewrite progress status and success / failure information to the wireless communication apparatus 200.

Further, when the writing (rewriting) work is normally completed (step S1027), information indicating that the writing (rewriting) work is normally completed is transmitted to the wireless communication apparatus 200 (step S1028).
In the wireless communication device 200 that has received information indicating the progress status of the writing (rewriting) work / abnormality from each vehicle (step S2025), the progress status of the writing (rewriting) work in the vehicle corresponding to the vehicle information Whether or not there is an abnormality is displayed on the display screen (step S2026), and finally whether or not rewriting of the program has been completed normally (information on the success or failure of writing) is linked to the vehicle information for each target vehicle )Remember.

Thus, the worker can individually grasp the work status in each vehicle based on the screen display of the wireless communication device 200 while simultaneously performing data writing (program rewriting) work in a plurality of vehicles. .
Moreover, since it memorize | stores whether the rewriting of a program was completed normally finally for every vehicle (linked with vehicle information), the vehicle which was not able to complete the rewriting of a program normally is selected, Rewriting can be performed again later, and it is possible to avoid repetitively rewriting the program for vehicles in which the program has been normally rewritten.

Here, at least one of the fact that the writing (rewriting) work is being continued normally, an abnormality has occurred in the writing (rewriting) work, and the writing (rewriting) work has been completed normally, the hazard lamp 102 is turned on. The operator can be notified by the generation of a warning sound due to the operation of the horn 103 or the like.
Furthermore, by switching the on / off pattern of the hazard lamp 102 and the generation pattern of the warning sound, the operator can determine whether the writing (rewriting) operation is proceeding normally, whether an abnormality has occurred, or has been completed normally. It can be determined.

  When a vehicle in which an abnormality has occurred in the writing (rewriting) work among the work target vehicles (step S2027), it is performed again from the selection of the electronic control unit 101 for rewriting the program (step S2021). Thus, the writing (rewriting) of the vehicle in which an abnormality has occurred in the writing (rewriting) work is tried again.

The repetition of the writing operation is limited to a certain number of times, and if the writing process does not end normally even if the writing process is repeated a certain number of times, the writing process is stopped and the vehicle cannot be written (rewritten). Is preferably displayed.
As a result of simultaneous writing (program rewriting) work, if writing (rewriting) work could not be done on some vehicles, cancel the wireless writing (rewriting) work on the vehicle, It is possible to perform individual writing (rewriting) work by connecting the wireless communication apparatus 200 (personal computer) and the corresponding electronic control unit 101.

  In the above embodiment, the program is rewritten. However, for example, the control constant may be rewritten, and the data to be written (rewritten) is not limited to the program data.

It is a figure which shows the whole structure of the data writing system in embodiment of this invention. It is a flowchart which shows the process which confirms and selects the vehicle as the object of the data writing operation | work in embodiment of this invention. It is a figure which shows the relationship between the communicable range and target vehicle / non-target vehicle in embodiment of this invention. It is a figure which shows the relationship between the overlap of the communicable range in embodiment of this invention, and a target vehicle. It is a flowchart which shows the transmission / reception process of the diagnostic result in embodiment of this invention. It is a flowchart which shows the transmission / reception process of the program data in the embodiment of this invention, and the rewriting process of the program data.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 100 ... Vehicle, 101 ... Electronic control unit, 102 ... Hazard lamp, 103 ... Horn, 104 ... BCM (Body Control Module), 105 ... Transceiver (transmission / reception means), 106 ... Vehicle network, 200 ... Wireless communication apparatus (wireless communication) means)

Claims (5)

A wireless communication unit outside the vehicle; and an in-vehicle transmission / reception unit that performs wireless communication with the wireless communication unit, and the transmission / reception unit writes data received from the wireless communication unit in the in-vehicle electronic control unit In-vehicle electronic control unit data writing system,
The wireless communication means receives vehicle information of individual vehicles within a communicable range via the transmission / reception means, specifies a target vehicle for data writing based on the vehicle information, and all of the specified target vehicles The transmission / reception and writing of the write data are performed in parallel, and the success / failure information of the data writing is transmitted to the wireless communication means via the transmission / reception means, and the wireless communication means sends the success / failure information for each vehicle information. A data writing system for an on-vehicle electronic control unit characterized by storing the data.   2. The transmission / reception unit operates an electrical component provided in the vehicle according to a communication state with the wireless communication unit and / or a data writing state in the electronic control unit. In-vehicle electronic control unit data writing system.   The data writing system for an on-vehicle electronic control unit according to claim 2, wherein the electrical component is an exterior lamp and / or a sound alarm.   The in-vehicle electronic control unit according to any one of claims 1 to 3, wherein when a target vehicle moves during data transmission / reception and / or data writing, communication abnormality processing is performed. Data writing system.   The vehicle located in the region where the communicable ranges of the plurality of wireless communication units overlap each other gives priority to the communication with the wireless communication unit that has started communication earlier. The data writing system of the on-vehicle electronic control unit described in 1.

Images