WO2018043107A1 - Dispositif de mise à jour embarqué et système de mise à jour de embarqué - Google Patents

Dispositif de mise à jour embarqué et système de mise à jour de embarqué Download PDF

Info

Publication number
WO2018043107A1
WO2018043107A1 PCT/JP2017/029285 JP2017029285W WO2018043107A1 WO 2018043107 A1 WO2018043107 A1 WO 2018043107A1 JP 2017029285 W JP2017029285 W JP 2017029285W WO 2018043107 A1 WO2018043107 A1 WO 2018043107A1
Authority
WO
WIPO (PCT)
Prior art keywords
update
program
vehicle
data
unit
Prior art date
Application number
PCT/JP2017/029285
Other languages
English (en)
Japanese (ja)
Inventor
聡一 中村
Original Assignee
株式会社オートネットワーク技術研究所
住友電装株式会社
住友電気工業株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from JP2017056007A external-priority patent/JP6696468B2/ja
Application filed by 株式会社オートネットワーク技術研究所, 住友電装株式会社, 住友電気工業株式会社 filed Critical 株式会社オートネットワーク技術研究所
Priority to CN201780052273.2A priority Critical patent/CN109643253A/zh
Priority to US16/327,998 priority patent/US11029935B2/en
Priority to DE112017004311.5T priority patent/DE112017004311T5/de
Publication of WO2018043107A1 publication Critical patent/WO2018043107A1/fr

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/04—Arrangement of batteries
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring

Definitions

  • the present invention relates to an in-vehicle update device and an in-vehicle update system for updating a program or data of a communication device mounted on a vehicle.
  • a vehicle is equipped with a plurality of communication devices such as an ECU (Electronic Control Unit), and the plurality of ECUs are connected via a communication line such as a CAN (Controller Area Network) bus to transmit / receive information to / from each other.
  • a communication line such as a CAN (Controller Area Network) bus to transmit / receive information to / from each other.
  • Each ECU reads and executes a program stored in a storage unit such as a flash memory or an EEPROM (ElectricallyrasErasable Programmable Read Only Memory) by a processing device such as a CPU (Central Processing Unit), thereby performing various control such as vehicle control Is being processed.
  • a storage unit such as a flash memory or an EEPROM (ElectricallyrasErasable Programmable Read Only Memory)
  • CPU Central Processing Unit
  • the program or data stored in the storage unit of the ECU needs to be updated to be rewritten with a new program or data, for example, when it becomes necessary to add a function, correct a defect, or upgrade a version.
  • an update program or data is transmitted to the ECU to be updated by a communication line.
  • Patent Document 1 when a driver updates a software program used in a vehicle while the engine is running, the program update device transmits vehicle state monitoring information to the center, and from the center based on the monitoring information.
  • a program update system in which a program update device operates in response to the command.
  • the present invention has been made in view of such circumstances, and an object of the present invention is to provide an in-vehicle update device and an in-vehicle update system that can prevent the stored power amount of a battery from being significantly reduced due to an update process. Is to provide.
  • An in-vehicle update device is an in-vehicle update device that includes an update processing unit that performs a process of updating a program or data stored in a storage unit of a communication device mounted on a vehicle.
  • An update information acquisition unit that performs a process of acquiring an update program or data, and a required power amount that estimates the amount of power required for the update process using the update program or data acquired by the update information acquisition unit
  • An estimation unit and a battery power amount acquisition unit that acquires the amount of power stored in the battery of the vehicle, wherein the update processing unit includes the power amount estimated by the required power amount estimation unit and the battery power amount acquisition unit.
  • the update processing is performed according to the amount of power acquired by and the priority of the update program or data acquired by the update information acquisition unit.
  • the in-vehicle update device is based on the amount of power acquired by the battery power amount acquisition unit and the amount of power estimated by the required power amount estimation unit, for update acquired by the update information acquisition unit.
  • An update determination unit that determines whether or not program or data update processing is possible, and the update processing unit determines that the update determination unit is capable of update processing, and has a high priority update program Alternatively, update processing using data is preferentially performed.
  • the update determination unit determines that the update processing unit is not capable of updating the update program or data having a high priority
  • the update processing unit The update process using the program or data is not performed, and the update process using the update program or data having a lower priority than the priority is not performed.
  • the update determination unit determines that the update processing unit is not capable of updating the update program or data having a high priority
  • the update processing unit The update process using the program or data is not performed, and the update process or the update program or data having the second highest priority is performed according to the determination result of the update determination unit.
  • the in-vehicle update device includes an update notification unit that notifies information related to an update program or data that performs update processing by the update processing unit, and the update notification unit includes the update information acquisition unit Has acquired the update program or data, but does not notify the update program or data that is not subjected to the update processing by the update processing unit.
  • the in-vehicle update device includes an update availability accepting unit that accepts execution of program or data update processing in response to the notification from the update notifying unit.
  • the in-vehicle update device is characterized in that the update notification unit notifies the time required for update processing using an update program or data.
  • the in-vehicle update device includes an update time calculation unit that calculates a time required for an update process using an update program or data, and the update notification unit includes a time calculated by the update time calculation unit. It is characterized by notifying.
  • the update information acquisition unit together with the update program or data from the device outside the vehicle, information on the time required for the update process using the update program or data
  • the update notification unit notifies the time acquired by the update information acquisition unit.
  • the in-vehicle update device includes an update storage unit in which the update information acquisition unit stores an update program or data, and the update storage unit is an update program for which update processing has been completed.
  • the update information acquisition unit acquires the update program or data but the update program or data that is not subjected to update processing by the update processing unit is stored while erasing data. .
  • the update program or data priority and the update It is characterized in that it is determined whether or not to acquire the next update program or data from the device outside the vehicle according to the free capacity of the update storage unit.
  • the update information acquisition unit has an update program stored in the update storage unit and the update storage unit has insufficient free space, or When the priority of data is lower than the priority of the next update program or data, the update program or data stored in the update storage unit is deleted, and the next update is performed from the device outside the vehicle. The program or data is acquired and stored in the update storage unit.
  • the in-vehicle update device includes an unupdate notification unit that notifies the device outside the vehicle when an update program or data that has not been updated is deleted from the update storage unit. It is characterized by that.
  • An in-vehicle update device is an in-vehicle update device that includes an update processing unit that performs a process of updating a program or data stored in a storage unit of a communication device mounted on a vehicle.
  • An update information acquisition unit that performs a process of acquiring an update program or data from the apparatus, an update time calculation unit that calculates a time required for an update process using the update program or data, and the update time calculation unit
  • An update notification unit that notifies the calculated time, and an update availability accepting unit that accepts execution of program or data update processing in response to the notification from the update notification unit.
  • an in-vehicle update system includes a plurality of communication devices mounted on a vehicle, and an in-vehicle update device having an update processing unit that performs processing for updating a program or data stored in a storage unit of the communication device.
  • the in-vehicle update system includes an update information acquisition unit that performs a process of acquiring an update program or data from an apparatus outside the vehicle, and the update acquired by the update information acquisition unit.
  • the update process includes: a required power amount estimation unit that estimates a power amount necessary for an update process using a program or data for use; and a battery power amount acquisition unit that acquires a power amount stored in the battery of the vehicle.
  • Update processing is performed according to data priority, and the communication device receives an update program or data from the in-vehicle update device, and stores and updates the received update program or data in the storage unit It is characterized by performing.
  • the in-vehicle update system includes an update notification unit that notifies the information related to the update program or data in which the in-vehicle update device performs update processing by the update processing unit, and the update notification unit includes:
  • the update information acquisition unit acquires an update program or data, but does not notify an update program or data that is not updated by the update processing unit.
  • the in-vehicle update device calculates the time required for the update process using the update program or data, and the notification of the update notification unit, An update availability accepting unit for accepting execution of program or data update processing, and the update notifying unit notifies the update time calculated by the update time calculating unit.
  • the in-vehicle update device performs update processing of programs or data of a plurality of communication devices mounted on the vehicle.
  • the in-vehicle update device acquires an update program or data from a server device or the like installed outside the vehicle.
  • the in-vehicle update device acquires an update program or data for each communication device.
  • a plurality of communication devices may be updated using one update program or data.
  • the in-vehicle update device estimates the amount of electric power necessary for performing an update process using the acquired update program or data, and acquires information on the amount of electric power stored in the battery of the vehicle.
  • the in-vehicle update device performs the update process of the communication device according to the estimated required power amount, the stored power amount of the battery, and the priority of the update program or data.
  • the priority of the program or data may be configured to acquire the priority information together when acquiring the program or data from a device outside the vehicle, for example, and for example, priority is given to the program or data acquired by the in-vehicle update device. It is good also as a structure which attaches a degree. Accordingly, the in-vehicle update device can preferentially update the program or data with a high priority in consideration of the stored power amount of the battery at that time. In addition, when the in-vehicle update device determines that the update process should not be performed based on the stored power of the battery, the update process can be stopped or postponed.
  • the in-vehicle update device determines that update is possible based on the amount of power, and preferentially performs an update process using an update program or data having a high priority. As a result, even when the stored power amount of the battery is small, the in-vehicle update device can preferentially perform update processing with high priority.
  • the in-vehicle update device Update processing using data is not performed, and update processing using an update program or data having a lower priority than that is not performed. That is, the in-vehicle update device waits for an update process with a low priority until an update process using an update program or data with a high priority is completed.
  • the in-vehicle update device waits for an update process with a low priority until an update process using an update program or data with a high priority is completed.
  • the in-vehicle update device when it is determined that the update program or data with high priority cannot be updated based on the required power amount for update and the stored power amount of the battery, the in-vehicle update device has the next priority. It is determined whether or not an update process using a high update program or data is possible. If the update process is possible, the update process is performed. As a result, the update process can be performed as much as possible by using the power stored in the battery to the maximum.
  • the in-vehicle update device when the update process is performed, notifies the user of the vehicle of information related to the update. Thereby, the user of a vehicle etc. can grasp
  • the in-vehicle update device may acquire a program or data for update from a device outside the vehicle for a program or data that is determined not to be updated based on the required power amount for update and the stored power amount of the battery. Notification to the user is not performed. Thereby, it is possible to prevent notification of information unnecessary for the user, such as information about a program or data that is not subjected to update processing.
  • the program or data that has not been subjected to the update process may be notified when it is determined that the stored power amount of the battery will increase and the update process is performed thereafter.
  • the user or the like receives a selection as to whether or not to permit execution of the update process for the notification.
  • the in-vehicle update device performs update processing when execution is permitted, and does not perform update processing when it is not permitted. Thereby, for example, when the user thinks of using the vehicle when receiving the notification of the update process or when the user thinks of using the vehicle after a while, the user makes a selection not to perform the update process. It is possible to prevent the user from using the vehicle by the update process.
  • the in-vehicle update device may accept whether or not the update processing can be executed for each program or data. Thereby, the range of selection of the user can be expanded.
  • the in-vehicle update device notifies the time required for the update process when the update process is performed using the update program or data.
  • the time required for the update process can be calculated (estimated) from information such as the size of the update program or data and the processing speed of the communication device to be updated.
  • This update time may be configured to be calculated by the in-vehicle update device, or may be acquired from the device outside the vehicle. Thereby, the user can grasp the end time of the update process and the like, and can grasp how much time the vehicle becomes unusable by the update process.
  • the in-vehicle update device may notify the time required for the update processing for each program or data.
  • the user can obtain more detailed information about the time required for the update process.
  • the in-vehicle update device is configured to accept whether or not update processing is possible from the user, providing information useful for selecting whether or not update processing is possible by the user by notifying the time required for the update processing Can do.
  • the in-vehicle update device stores the update program or data acquired from the device outside the vehicle in the update storage unit.
  • the update storage unit is preferably a non-volatile storage unit.
  • the in-vehicle update device deletes the update program or data for which the update process is completed from the update storage unit, but determines that the update process is not performed based on the required power amount for update and the stored power amount of the battery, or The data is stored in the update storage unit.
  • the update process can be performed without re-acquiring the update program or data from the device outside the vehicle. it can.
  • the in-vehicle update device stores an update program or data in the update storage unit, and when it is necessary to acquire another update program or data from a device outside the vehicle, the update storage It is determined whether or not to acquire a new update program or data based on the free space of the copy and the priority of the update program or data. For example, an in-vehicle update device stores in an update storage unit when there is not enough free space in the update storage unit and it is necessary to acquire another update program or data from a device outside the vehicle. The priority of the program or data that has been acquired is compared with the priority of the program or data to be newly acquired.
  • the in-vehicle update device When the priority of the program or data stored in the update storage unit is lower than the priority of the program or data to be newly acquired, the in-vehicle update device erases the program or data stored in the update storage unit Then, a new update program or data is acquired from a device outside the vehicle, and stored in the update storage unit. Thereafter, the in-vehicle update device notifies the device outside the vehicle that the update program or data deleted from the update storage unit without performing the update process has not been updated. As a result, the in-vehicle update device cannot perform the update process, the update program or data is left in the update storage unit, and the free space in the update storage unit is insufficient.
  • the in-vehicle update device acquires a new update program or data with high priority, stores it in the update storage unit, and even if the update program or data with low priority is deleted, By notifying the apparatus, the erased update program or data can be reacquired later.
  • the required power amount for performing the update process is estimated for the update program or data acquired by the in-vehicle update device from the device outside the vehicle, and the estimated required power amount and storage of the vehicle battery are estimated.
  • FIG. 6 is a block diagram illustrating a configuration of a gateway according to Embodiment 2.
  • FIG. 6 is a schematic diagram illustrating an example of a notification screen for update information displayed on a display device in the in-vehicle update system according to Embodiment 2.
  • FIG. 10 is a flowchart illustrating a procedure of update processing performed by a gateway according to the second embodiment.
  • FIG. 1 is a schematic diagram showing a configuration of an in-vehicle update system according to the present embodiment.
  • a plurality of ECUs (Electronic Control Units) 2 mounted on a vehicle 1 communicate with each other via communication lines 1 a and 1 b and a gateway 10 arranged in the vehicle 1. It is a system that performs.
  • the gateway 10 corresponds to an in-vehicle update device
  • the ECU 2 corresponds to a communication device.
  • two ECUs 2 and one display device 7 are connected to the communication line 1a in the vehicle, three ECUs 2 are connected to the communication line 1b, and the two communication lines 1a and 1b are connected to the gateway 10. Since the gateway 10 relays communication between the communication lines 1a and 1b, data can be transmitted and received between all the ECUs 2.
  • the wireless communication device 3 is connected to the gateway 10 via the communication line 1c, and the gateway 10 is a server installed outside the vehicle 1 via the wireless communication device 3. Communication with the device 9 can be performed.
  • An IG signal is input to the gateway 10 from the IG switch 4 of the vehicle 1, and a detection result is input from the battery detection unit 6 that detects the stored power amount of the battery 5 of the vehicle 1.
  • the ECU 2 includes, for example, an ECU that controls the operation of the engine of the vehicle 1, an ECU that controls the locking / unlocking of the door, an ECU that controls the turning on / off of the light, an ECU that controls the operation of the airbag, and an ABS (Antilock Various ECUs such as an ECU for controlling the operation of the Brake System may be included.
  • Each ECU 2 is connected to a communication line 1a or 1b arranged in the vehicle 1, and can transmit and receive data to and from another ECU 2 and the gateway 10 via the communication lines 1a and 1b.
  • the wireless communication device 3 can transmit and receive information to and from the server device 9 by performing wireless communication such as a mobile phone communication network or a wireless LAN (Local Area Network).
  • the wireless communication device 3 is connected to the gateway 10 via the communication line 1c, and can transmit / receive information to / from the gateway 10 by wired communication.
  • the wireless communication device 3 can relay communication between the gateway 10 and the server device 9, transmits data given from the gateway 10 to the server device 9, and transmits data received from the server device 9 to the gateway Give to 10.
  • the gateway 10 is connected to a plurality of communication lines 1a to 1c constituting the in-vehicle network of the vehicle 1, and performs a process of relaying data transmission / reception between the communication lines.
  • the gateway 10 has three communication lines 1a to 1c, that is, a first communication line 1a to which two ECUs 2 and one display device 7 are connected, and a second one to which three ECUs 2 are connected.
  • the communication line 1b and the third communication line 1c to which the wireless communication device 3 is connected are connected.
  • the gateway 10 relays data by transmitting data received from any one of the communication lines 1a to 1c to the other communication lines 1a to 1c.
  • the IG switch 4 is a switch for the user to start the engine of the vehicle 1 and the like, and is switched to two states of on / off.
  • the IG signal indicates the state of the IG switch 4
  • IG ON is a state in which a prime mover such as the engine of the vehicle 1 is operating, and power is generated by an alternator or the like
  • IG OFF is In this state, the prime mover of the vehicle 1 is stopped and no power generation is performed.
  • the battery detection unit 6 detects the amount of electric power stored in the battery 5 based on the voltage value of the output terminal of the battery 5 and / or the integrated value of the input / output current amount.
  • the display device 7 is a liquid crystal display, for example, and displays a message for the user of the vehicle 1 in accordance with a display command given from the ECU 2 or the gateway 10.
  • the display device 7 has an operation unit such as a touch panel or a hardware key, for example, accepts a user operation and notifies the ECU 2 or the gateway 10 of the accepted operation content.
  • the display device 7 may be shared with a car navigation device, for example.
  • the server device 9 manages and stores programs and data executed by the ECU 2 mounted on the vehicle 1. In response to an inquiry from the vehicle 1, the server device 9 notifies whether or not the program needs to be updated, and distributes the update program and data to the vehicle 1 when the update is necessary. Process.
  • communication between the gateway 10 and the server device 9 is performed when the engine of the vehicle 1 is operating, and the program and / or necessary for update are transferred from the server device 9 to the gateway 10.
  • acquisition (download) of data etc. is performed.
  • the gateway 10 that has completed the acquisition of the program and / or data necessary for the update needs to perform the update process when the engine of the vehicle 1 is subsequently stopped (when the IG switch 4 is switched to the off state).
  • the display device 7 notifies the user to that effect.
  • the gateway 10 performs an update process by transmitting the acquired program and / or data to the ECU 2 to be updated.
  • the ECU 2 that has received the program and / or data necessary for the update from the gateway 10 performs the update process by writing the program and / or data in its own storage unit.
  • FIG. 2 is a block diagram showing the configuration of the ECU 2.
  • the ECU 2 includes a processing unit 21, a storage unit 22, a communication unit 23, and the like.
  • the processing unit 21 is configured by using an arithmetic processing device such as a CPU (Central Processing Unit) or an MPU (Micro-Processing Unit), for example, and by reading and executing the program 22a stored in the storage unit 22, Perform arithmetic processing.
  • the contents of the program 22a stored in the storage unit 22 are different for each ECU 2.
  • the storage unit 22 is configured by using a non-volatile memory element such as a flash memory or an EEPROM (Electrically Erasable Programmable Read Only Memory).
  • the storage unit 22 stores a program 22a executed by the processing unit 21 and data necessary for executing the program 22a.
  • program 22a may include the program 22a and data necessary for executing the program 22a.
  • the communication unit 23 is connected to the communication line 1a or 1b constituting the in-vehicle network, and transmits and receives data according to a communication protocol such as CAN (Controller (Area Network).
  • the communication unit 23 converts the data provided from the processing unit 21 into an electrical signal and outputs the signal to the communication line 1a or 1b to transmit the data, and also obtains the potential of the communication line 1a or 1b by sampling.
  • the data is received by, and the received data is given to the processing unit 21.
  • the processing unit 21 of the ECU 2 is provided with an update information receiving unit 21a and an update processing unit 21b.
  • the update information receiving unit 21 a and the update processing unit 21 b are functional blocks for updating the program 22 a stored in the storage unit 22.
  • the update information receiving unit 21a and the update processing unit 21b are software functional blocks realized by the processing unit 21 executing a program (not shown) that is different from the program 22a to be updated. is there.
  • the update information receiving unit 21a receives an update program transmitted via the communication line 1a or 1b by the communication unit 23, and stores the received update program in a buffer memory (not shown) or the like. Perform the process.
  • the update processing unit 21b performs a process of updating the program 22a by storing the update program stored in the buffer memory or the like in the storage unit 22 (overwriting the program 22a before the update).
  • FIG. 3 is a block diagram showing the configuration of the gateway 10.
  • the gateway 10 includes a processing unit (processor) 11, a storage unit 12, three in-vehicle communication units 13, and the like.
  • the processing unit 11 is configured using, for example, an arithmetic processing device such as a CPU or MPU, and reads out and executes a program stored in the storage unit 12 or a ROM (Read Only Memory) (not shown), thereby performing various arithmetic processing. I do.
  • the processing unit 11 performs a processing for relaying data transmission / reception between the communication lines 1a to 1c of the in-vehicle network and an arithmetic processing necessary for an update processing of the ECU 2.
  • the IG signal supplied from the IG switch 4 of the vehicle 1 and the accumulated power amount of the battery 5 detected by the battery detection unit 6 are input to the processing unit 11.
  • the IG signal and / or the stored power amount may be input to the gateway 10 by in-vehicle communication using the communication lines 1a to 1c.
  • the storage unit 12 is configured using a non-volatile memory element such as a flash memory or an EEPROM.
  • the storage unit 12 stores, for example, programs and data used for updating the ECU 2.
  • the storage unit 12 may store a program executed by the processing unit 11 and data necessary for executing the program.
  • the storage unit 12 may store data generated in the course of processing by the processing unit 11.
  • the in-vehicle communication unit 13 is connected to the communication lines 1a to 1c constituting the in-vehicle network, and transmits and receives data according to a communication protocol such as CAN.
  • the in-vehicle communication unit 13 transmits information by converting the data supplied from the processing unit 11 into an electrical signal and outputs the signal to the communication lines 1a to 1c, and samples and acquires the potentials of the communication lines 1a to 1c. Thus, the data is received and the received data is given to the processing unit 11.
  • the three in-vehicle communication units 13 included in the gateway 10 may perform communication according to different communication protocols.
  • the processing unit 11 executes a program stored in the storage unit 12 or the ROM, so that an update information acquisition unit 11a, a required power amount estimation unit 11b, a battery power amount acquisition unit 11c, and an update determination unit 11d.
  • the update notification unit 11e, the update information transmission unit 11f, the non-update notification unit 11g, and the like are realized as software functional blocks.
  • the update information acquisition unit 11a communicates with the server device 9 via the wireless communication device 3 at a predetermined timing, and inquires whether or not the program 22a of the ECU 2 mounted on the vehicle 1 needs to be updated.
  • the predetermined timing for inquiring whether update is necessary may be a predetermined cycle, for example, every day or every week, or may be, for example, every time the IG switch 4 is switched from the off state to the on state.
  • the update information acquisition unit 11a transmits the program and data required for the update from the server device 9 via the wireless communication device 3 (hereinafter simply referred to as update). (Referred to as “program for use”) and stored in the storage unit 12. At this time, the update information acquisition unit 11a acquires the update program for all ECUs 2 that need to be updated.
  • priority information is attached to the update program transmitted from the server device 9 to the gateway 10.
  • the priority information is expressed, for example, as a numerical value in five stages from 1 to 5, and the higher the numerical value, the higher the priority. Further, for example, the priority information is determined by a manufacturer, a sales company, a designer, or the like of the vehicle 1 and registered in the server device 9 together with the update program. However, the priority information is not attached to the update program in advance, but the gateway 10 that has acquired the update program may determine the priority by analyzing the contents of the update program.
  • the required power amount estimation unit 11b performs a process of estimating the amount of power consumed when the update process of the target ECU 2 is performed using the update program for each of the update programs acquired from the server device 9. .
  • the gateway 10 stores a numerical value per predetermined amount of data (for example, 1 Kbyte) in the form of a table or the like for each ECU 2 with respect to the amount of power consumed when processing for storing the update program in the storage unit 22 of the ECU 2 is performed. Has been.
  • the required power amount estimation unit 11b checks the data amount of the update program and obtains the power consumption amount per predetermined data amount from the table for the ECU 2 that is the target of the update process using the update program.
  • the required power amount estimation unit 11b calculates the power consumption amount when the update process using the update program is performed by multiplying the data amount of the update program by the power consumption amount per predetermined data amount. To do.
  • the above table is created in advance based on the power consumption calculated or measured in the design stage or production stage of the vehicle 1 or the ECU 2, for example, and is stored in the storage unit 12 of the gateway 10 or the like.
  • the battery power acquisition unit 11c stores the stored power input from the battery detection unit 6 when the timing for performing the update process of the ECU 2 is reached (in the present embodiment, the IG switch 4 is switched to the off state). By acquiring the amount, the amount of power stored in the battery 5 of the vehicle 1 at that time is acquired.
  • the battery power amount acquisition unit 11 c simply acquires the detection result of the battery detection unit 6.
  • the battery power amount acquisition unit 11c acquires the input information from the battery detection unit 6 and uses the acquired information as the acquired information. Based on this, it is necessary to perform a process of calculating the stored power amount of the battery 5.
  • the update determination unit 11d acquired from the server device 9 based on the power amount necessary for the update process estimated by the required power amount estimation unit 11b and the accumulated power amount of the battery 5 acquired by the battery power amount acquisition unit 11c. It is determined whether or not the update process by the update program can be performed.
  • the amount of power is calculated as the amount of power that can be used for the update process.
  • the required power amount estimation unit 11b calculates a required power amount for each update program. Whether the update determination unit 11d performs the update process using each update program based on the amount of power that can be used for the update process, the required power amount of each update program, and the priority of each update program Whether or not is determined individually for each update program.
  • the update determination unit 11d determines that the update process is performed when the amount of power that can be used for the update process is greater than the required power amount for the update program with the highest priority. Next, the update determination unit 11d subtracts the amount of power used in the update process by the update program with the highest priority from the available power amount, and similarly performs the update process for the update program with the next highest priority. Determine whether to do it. In this way, the update determination unit 11d determines whether or not to perform update processing in order of priority for all the update programs acquired from the server device 9.
  • the update determination unit 11d determines that the update process is not performed for this update program. In the present embodiment, the update determination unit 11d performs update processing without performing determination based on the amount of power for an update program having a lower priority than the update program that has been determined not to perform update processing. Judge that there is no. When there are a plurality of update programs with the same priority, the update determination unit 11d determines that no update process is performed for any of the update programs, and other update programs with the same priority. The program makes a determination based on the amount of power.
  • the update notification unit 11e notifies the user that update processing is to be performed by displaying, on the display device 7, information related to the update program that the update determination unit 11d has determined to perform update processing.
  • the update notification part 11e does not notify a user of the information regarding this update program, when the update program which the update determination part 11d determined not to perform an update process exists. Therefore, the user can know only the information related to the update program that is actually updated, and does not know the information related to the update program that needs to be updated but is not currently updated.
  • the update notification unit 11e receives an approval for the update process from the user through the operation unit of the display device 7. When the update process is not approved by the user, the gateway 10 does not perform the update process.
  • the update information transmission unit 11f reads the update program acquired by the update information acquisition unit 11a from the server device 9 and stored in the storage unit 22, and sends the read update program to the ECU 2 that is the target of the update process. By transmitting, the program 22a stored in the storage unit 22 of the ECU 2 is updated.
  • the update information transmission unit 11f performs transmission to the ECU 2 in descending order of priority.
  • the ECU 2 that has received the update program from the gateway 10 performs an update process on the program 22a by overwriting the pre-update program 22a stored in the storage unit 22 with the received update program.
  • the update program transmitted to the ECU 2 by the update information transmitting unit 11f is deleted from the storage unit 12 (however, it may be stored until another data needs to be written without being deleted).
  • the update program determined not to perform the update process by the update determination unit 11d is stored in the storage unit 12, and waits for the next opportunity to perform the update process. For example, when the IG switch 4 is turned on and the vehicle 1 travels and then the IG switch 4 is turned off, it is determined whether or not the update program stored in the storage unit 22 can be updated in the same procedure as described above. Then, update processing is performed.
  • the update information acquisition unit 11 a acquires a new update program from the server device 9 and stores it in the free area of the storage unit 12. .
  • the update information acquisition unit 11a includes the priority of the update program stored in the storage unit 12, The priority of the update program to be acquired from the server device 9 is compared. When the priority of the update program stored in the storage unit 12 is lower, the update information acquisition unit 11a deletes the update program from the storage unit 12 and the new update program is stored in the server device 9. And stored in the storage unit 12.
  • the non-update notification unit 11g When the update program that has not been updated is deleted from the storage unit 12, the non-update notification unit 11g performs a process of notifying the server device 9 to that effect.
  • the server device 9 manages the update status of the program of each vehicle 1 and stores information regarding whether or not the update program has been transmitted to each vehicle 1. If the server 9 receives a notification from the vehicle 1 that the update program has been deleted without updating, the server device 9 will receive this update when it receives an inquiry from the gateway 10 of the vehicle 1 after that. It is possible to notify the gateway 10 that the program for use needs to be updated.
  • FIG. 4 is a schematic diagram for explaining the acquisition of the update program by the gateway 10.
  • the update program is indicated by a solid or dashed rectangle, and a three-digit number identifying the program is added to the initial letter P indicating the program, for example, P-101 (3) in this rectangle. And show. After this number, a numerical value indicating the priority of the program is written in parentheses. In this example, the priority is five levels of 1 to 5, with priority 5 being the highest priority and priority 1 being the lowest priority. The size of the rectangle indicating each program indicates the data amount of this program.
  • the storage unit 12 of the gateway 10 stores three programs P-101 (3), P-102 (2), and P-103 (1) as unupdated update programs. .
  • the data amount of the update program P-201 (5) is larger than the free capacity of the storage unit 12. In this case, a situation occurs in which the update program P-201 (5) cannot be stored in the storage unit 12.
  • the gateway 10 gives priority to the update programs P-101 (3), P-102 (2) and P-103 (1) stored in the storage unit 12, as shown in the lower part of FIG. And the priority of the new update program P-201 (5).
  • the new update program P-201 (5) has the highest priority. Therefore, the gateway 10 has the update program P- having the lowest priority among the update programs P-101 (3), P-102 (2) and P-103 (1) stored in the storage unit 12. 103 (1) is erased from the storage unit 12 to expand the free space.
  • the gateway 10 notifies the server device 9 that the update program P-103 (1) has been deleted without performing the update process. Then, the gateway 10 acquires a new update program P-201 (5) from the server device 9 and stores it in the storage unit 12.
  • FIG. 5 is a flowchart showing the procedure of the update program acquisition process performed by the gateway 10.
  • the update information acquisition unit 11a of the processing unit 11 of the gateway 10 determines whether the IG switch 4 is switched from the off state to the on state based on the IG signal input from the IG switch 4 (step S1). .
  • the update information acquisition unit 11a waits until the IG switch 4 is switched to the on state.
  • the update information acquisition unit 11a performs wireless communication via the wireless communication device 3, and the program of the ECU 2 mounted on the vehicle 1 to the server device 9 Is inquired about whether or not there is an update (step S2).
  • the update information acquisition unit 11a receives a response transmitted from the server device 9 in response to the inquiry via the wireless communication device 3 (step S3). In addition to the presence / absence of update, this response includes information related to the program that needs to be updated, for example, information such as program identification information, data amount, and priority. Based on the information included in the response from the server device 9, the update information acquisition unit 11a determines whether or not the program of the ECU 2 mounted on the vehicle 1 has been updated (step S4). When there is no update (S4: NO), the update information acquisition unit 11a returns the process to step S1.
  • the update information acquisition unit 11a compares the data amount of the update program to be acquired from the server device 9 with the free capacity of the storage unit 12, and installs a new update program. It is determined whether there is a sufficient free area to be stored in the storage unit 12 (step S5).
  • the update information acquisition unit 11a is for update to be acquired from the server device 9 based on the priority of the update program stored in the storage unit 12. It is determined whether the priority of the program is high (step S6). When the priority of the update program to be acquired from the server device 9 is not high (S6: NO), the update information acquisition unit 11a returns the process to step S1. When the priority of the update program to be acquired from the server device 9 is high (S6: YES), the update information acquisition unit 11a erases the update program with the low priority stored in the storage unit 12 (step S6). S7). Further, the update information acquisition unit 11a transmits a non-update notification about the deleted update program to the server device 9 (step S8), and advances the process to step S9.
  • step S5 When there is a sufficient free area in the storage unit 12 in step S5 (S5: YES), or after sending an unupdate notification in step S8, the update information acquisition unit 11a updates the server device 9 for update. Request transmission of the program (step S9).
  • the update information acquisition unit 11a receives the update program transmitted from the server device 9 in response to the request via the wireless communication device 3 (step S10), and receives the received update program in the free space of the storage unit 12 (Step S11), and the process returns to step S1.
  • FIG. 6 is a flowchart showing the procedure of the update program transmission process performed by the server device 9.
  • the server device 9 determines whether or not an inquiry about whether or not the program of the ECU 2 has been updated has been received from the gateway 10 of the vehicle 1 (step S21). When the inquiry has not been received (S21: NO), the server device 9 advances the process to step S24.
  • the server device 9 accesses a database that records the version of the program of the vehicle 1 and the like, thereby determining whether or not the program of the ECU 2 of the vehicle 1 related to the inquiry has been updated. Investigation is performed (step S22).
  • the server apparatus 9 transmits the presence / absence of the update obtained as a result of the investigation to the inquiry source gateway 10 as a response (step S23), and advances the process to step S24.
  • the server device 9 determines whether or not a transmission request for an update program has been received from the gateway 10 of the vehicle 1 (step S24). When the transmission request has not been received (S24: NO), the server device 9 advances the process to step S27.
  • the server device 9 reads the update program to be updated by the ECU 2 of the requesting vehicle 1 and transmits it to the requesting gateway 10 (step S25).
  • the server device 9 updates the database in order to record that the update program has been transmitted (step S26), and proceeds to step S27.
  • the database managed by the server device 9 records that the update program has already been transmitted for the requesting vehicle 1.
  • the server device 9 determines whether or not an unupdated notification has been received from the gateway 10 of the vehicle 1 (step S27).
  • the server device 9 returns the process to step S21.
  • the server device 9 updates the database in order to change the record that has been transmitted to the vehicle 1 to the non-transmission for the update program to be notified. (Step S28), and the process returns to Step S21.
  • FIG. 7 to 9 are schematic diagrams for explaining determination of whether or not the update process is performed by the server device 9.
  • FIG. the rectangle shown on the left side indicates the stored power amount of the battery 5 and the amount of power that can be used for the update process, and the rectangle shown on the right side shows the required power amount for the update process of each update program. It is.
  • the amount of electric power stored in the battery 5 is shown as a percentage of 0% to 100%. It is assumed that the stored power amount of the battery 5 can be used in the update process as long as the stored power amount of the battery 5 does not fall below 90%.
  • a character string such as P-301 (5) in a plurality of rectangles shown on the right side is a character string for identifying an update program attached according to the same rule as shown in FIG.
  • the rectangular size of each update program indicates the amount of power required for the update process.
  • the example shown in the upper part of FIG. 7 is a situation in which the stored power amount of the battery 5 is 98%, and 8% of power can be used for the update process.
  • the amount of power required for the program update process is equal to 2%. Therefore, the gateway 10 is in a situation where the total amount of power required for updating the four update programs is 8%, and 8% of the power can be used for the update process. It is determined that the update process is possible.
  • the example shown in the lower part of FIG. 7 is a situation in which the stored power amount of the battery 5 is 97%, which is 1% less than that in the upper part of FIG.
  • the gateway 10 since the gateway 10 cannot perform update processing of all the update programs, the gateway 10 selects the update program with a high priority in priority, and selects the three update programs P-301 (5) and P-302. (4) It is determined that update processing is possible for P-303 (2), and it is determined that update processing is not possible for one update program P-304 (1).
  • the example shown in the upper part of FIG. 8 is a case where the stored power amount of the battery 5 is the same as the example of the upper part of FIG. 7, but the required power amount of the update program P-301 (5) is 5%. .
  • the gateway 10 preferentially selects an update program with a high priority, and determines that the update process is possible for the two update programs P-301 (5) and P-302 (4).
  • the other two update processing programs P-303 (2) and P-304 (1) are determined not to be updateable.
  • the example shown in the lower part of FIG. 8 is a situation in which the stored power amount of the battery 5 is 94%, which is 4% less than the example in the upper part of FIG.
  • the update process of the update program P-301 (5) having the highest priority in this situation cannot be performed, so the gateway 10 is not limited to the update program P-301 (5).
  • the update programs P-302 (4), P-303 (2), and P-304 (1) having lower priority than this are determined to be incapable of update processing.
  • the gateway 10 uses the available power amount of 4% to the maximum, and updates the two update programs P-302 (4) and P-303 (2) having the second highest priority. Is determined to be possible.
  • the display device 7 is notified that the update process is to be performed, and this update program is used when the user's approval is obtained. An update process of the ECU 2 is performed.
  • FIG. 10 is a flowchart showing the procedure of the update process performed by the gateway 10.
  • the processing unit 11 of the gateway 10 determines whether or not the IG switch 4 has been switched from the on state to the off state based on the IG signal input from the IG switch 4 (step S31).
  • the processing unit 11 waits until the IG switch 4 is switched to the off state.
  • the processing unit 11 needs to perform update processing by checking whether or not an unupdated update processing program is stored in the storage unit 12. It is determined whether or not there is (step S32).
  • step S32 determines whether or not necessary to perform the update process.
  • the battery power amount acquisition unit 11c of the processing unit 11 acquires the stored power amount of the battery 5 based on the input from the battery detection unit 6 (step S33). .
  • the required power amount estimation unit 11b of the processing unit 11 estimates the power amount necessary for the update process for each update program stored in the storage unit 12 (step S34). At this time, the required power amount estimation unit 11b refers to a table including information on the power consumption amount per predetermined data amount for each ECU 2, and estimates the required power amount based on the data amount of each update program.
  • the update determination unit 11d of the processing unit 11 calculates the amount of power that can be used for the update process from the accumulated power amount acquired in step S33, the amount of usable power, the amount of power required for each update program, Based on the priority of the update program, an update determination process for each update program is performed (step S35).
  • the processing unit 11 determines whether or not at least one update program is determined to be updatable based on the result of the update determination process in step S35 (step S36). When it is determined that all the update programs cannot be updated (S36: NO), the processing unit 11 returns the process to step S31.
  • the update notification unit 11e of the processing unit 11 updates the display device 7 by transmitting a display command to the display device 7 via the in-vehicle communication unit 13.
  • the display device 7 notifies that the update program determined to be possible is updated (step S37).
  • the update notification unit 11e determines whether or not the update has been approved based on the user operation received by the operation unit of the display device 7 in response to the update notification (step S38). When the update is not approved (S38: NO), the processing unit 11 returns the process to step S31.
  • the update information transmitting unit 11f of the processing unit 11 transmits the update program stored in the storage unit 12 to the ECU 2 to be updated by the in-vehicle communication unit 13 (Ste S39).
  • the update information transmitting unit 11f determines whether or not the update process has been completed for all the update target ECUs 2 depending on whether or not an update completion notification has been received from the update target ECU 2 (step S40). If the update process has not been completed (S40: NO), the update information transmitting unit 11f returns the process to step S39 and continues to transmit the update program.
  • the processing unit 11 deletes the update program that has been updated from the storage unit 12 (step S41), and returns the process to step S31.
  • FIG. 11 is a flowchart showing the procedure of the update process performed by the ECU 2.
  • the update information receiving unit 21a of the processing unit 21 of the ECU 2 determines whether or not the update program transmitted from the gateway 10 has been received by the communication unit 23 (step S51). When the update program has not been received (S51: NO), the update information receiving unit 21a waits until the update program is received. When the update program is received (S51: YES), the update information receiving unit 21a temporarily stores the received update program in a buffer or the like.
  • the update processing unit 21b of the processing unit 21 performs update processing of the program 22a by storing (overwriting) the received update program in the storage unit 22 (step S52).
  • the update processing unit 21b determines whether or not the update of the program 22a has been completed (step S53). If the update has not been completed (S53: NO), the update processing unit 21b returns the process to step S52 and continues the update process. When the update of the program 22a is completed (S53: YES), the processing unit 21 notifies the gateway 10 of the update completion through the communication unit 23 (step S54), and returns the process to step S51.
  • the gateway 10 performs the update process of the programs 22a (programs or data) of the plurality of ECUs 2 mounted on the vehicle 1.
  • the gateway 10 acquires an update program (update program or data) from the server device 9 outside the vehicle by wireless communication via the wireless communication device 3.
  • the gateway 10 acquires an update program for each ECU 2.
  • the structure which can perform the update process of several ECU2 using one update program may be sufficient.
  • the gateway 10 estimates the required power amount for performing the update process on the acquired update program, and acquires the stored power amount of the battery 5 of the vehicle 1 based on the input from the battery detection unit 6.
  • the gateway 10 performs an update process of the ECU 2 according to the estimated required power amount, the stored power amount of the battery 5, and the priority of the update program.
  • the priority of the update program may be configured such that, for example, when the update program is acquired from the server device 9, the priority information is acquired together.
  • the gateway 10 has a priority with respect to the acquired update program. It is good also as a structure which attaches.
  • the gateway 10 can preferentially perform the update process by the update program having a high priority in consideration of the stored power amount of the battery 5 at that time. Further, when the gateway 10 determines that the update process should not be performed based on the stored power amount of the battery 5, it is possible to cancel or postpone the update process. Therefore, the in-vehicle update system 100 can prevent the stored power amount of the battery 5 of the vehicle 1 from being significantly reduced by performing the update process of the ECU 2.
  • the gateway 10 determines whether or not the update process using the update program acquired from the server device 9 is possible based on the stored power amount of the battery 5 and the required power amount of the update process of the ECU 2. .
  • the gateway 10 determines that the update is possible based on the electric energy, and preferentially performs the update process using the update program having a high priority. Thereby, even when the amount of stored power of the battery 5 is small, the gateway 10 can preferentially perform the update process with high priority.
  • the gateway 10 determines that the update program with high priority cannot be updated based on the required power amount for update and the stored power amount of the battery 5, the gateway 10 does not perform the update process using the update program. Does not perform update processing using an update program with a lower priority than this. That is, the gateway 10 waits for an update process with a low priority until the update process using the update program with a high priority is completed. As a result, when a large amount of power is required for an update process with a high priority, an update process with a high priority can be prevented from being maintained in a standby state.
  • the gateway 10 determines that the update program with the highest priority is not updatable based on the required power amount for update and the stored power amount of the battery 5, the update using the update program with the next highest priority is performed. Whether or not processing is possible is determined, and if update processing is possible, update processing is performed. Thereby, the update process can be performed as much as possible by using the power stored in the battery 5 to the maximum.
  • the gateway 10 when performing the update process, notifies the user of the vehicle 1 and the like of the information related to the update on the display device 7. Thereby, the user or the like can grasp the update status of the program of the ECU 2 mounted on the vehicle 1.
  • the gateway 10 determines that the update process is not performed based on the required power amount of the update and the stored power amount of the battery 5, even if the update program is acquired from the server device 9, Do not notify. Thereby, it is possible to prevent information unnecessary for the user from being notified, such as information about a program that is not subjected to update processing.
  • the update program that has not been updated may be notified when it is determined that the stored power amount of the battery 5 will increase and the update process is performed thereafter.
  • the gateway 10 stores the update program acquired from the server device 9 in the storage unit 12.
  • the storage unit 12 is preferably a non-volatile storage unit.
  • the gateway 10 deletes the update program for which the update process has been completed from the storage unit 12, but for the update program that is determined not to perform the update process based on the required power amount for update and the stored power amount of the battery 5, This is stored in the storage unit 12.
  • Update processing can be performed using an update program.
  • the gateway 10 stores an update program in the storage unit 12, and when it becomes necessary to acquire another update program from the server device 9, the free space in the storage unit 12 and the priority of the update program are stored. Based on the above, it is determined whether or not a new update program is acquired from the server device 9.
  • the gateway 10 when the gateway 10 has insufficient free space in the storage unit 12 and needs to acquire another update program from the server device 9, the update program stored in the storage unit 12 And the priority of the update program to be newly acquired are compared.
  • the gateway 10 deletes the update program stored in the storage unit 12 and the server device 9 A new update program is acquired from the storage unit 12 and stored in the storage unit 12. Thereafter, the gateway 10 notifies the server device 9 that the update program that has been deleted from the storage unit 12 without performing the update process has not been updated.
  • the gateway 10 cannot perform the update process, the update program remains in the storage unit 12, and a new update program is received from the server device 9 in a state where the storage unit 12 has insufficient free space.
  • a new update program can be acquired can be determined according to the priority.
  • the gateway 10 acquires a new update program with a high priority and stores it in the storage unit 12. Even when the update program with a low priority is deleted from the storage unit 12, the gateway 10 notifies the server device 9 to that effect. By notifying this, the erased update program can be reacquired later.
  • the gateway 10 mounted on the vehicle 1 acquires the update program from the server device 9 and transmits the update program to each ECU 2, that is, the gateway 10 serves as the in-vehicle update device.
  • the gateway 10 serves as the in-vehicle update device.
  • Any ECU 2, wireless communication device 3, or other in-vehicle device may perform processing as the in-vehicle update device.
  • the update program is acquired from the server device 9 outside the vehicle by wireless communication, but is not limited thereto.
  • the update program may be acquired by the gateway 10 reading a recording medium on which the update program is recorded.
  • the communication device to be updated is the ECU 2, the present invention is not limited to this, and various communication devices other than the ECU 2 may be the target of the update process. Communication performed between the gateway 10 and the ECU 2 in the vehicle 1 may be wireless communication instead of wired communication.
  • the gateway 10 is configured to perform the update process when the IG switch 4 is switched to the OFF state, but the present invention is not limited to this.
  • the gateway 10 is updated at a timing other than immediately after the IG switch 4 is switched to the OFF state, such as when the IG switch 4 is in the OFF state and the update process is performed when a predetermined time such as 2 am is reached. Processing may be performed.
  • the gateway 10 does not notify the user, or when the IG switch 4 is switched to the off state, the update program that has been acquired regardless of the stored power amount of the battery 5
  • An update notification may be given to obtain approval from the user, and the amount of stored power in the battery 5 may be checked at the timing when the update process is performed to determine whether the update process is possible.
  • FIG. 12 is a block diagram illustrating a configuration of the gateway according to the second embodiment.
  • the gateway 210 according to the second embodiment has a configuration in which an update time calculation unit 11h and an update availability accepting unit 11i are added to the processing unit 211 with respect to the gateway 10 according to the first embodiment.
  • the update time calculation unit 11h and the update availability accepting unit 11i are configured such that the program stored in the storage unit 12 or the ROM is executed by the processing unit 211 in the same manner as the update information acquisition unit 11a to the non-update notification unit 11g. Is a functional block realized by.
  • the update time calculation unit 11h performs, for each update program acquired from the server device 9, a process for calculating (estimating) a time required when the update process of the ECU 2 is performed using the update program.
  • the update time calculation unit 11h can calculate the time required for the update process based on, for example, the size of the update program and the processing speed of the ECU 2 that performs the update process using the update program.
  • the processing speed of the ECU 2 in this case may be a speed depending on the writing speed to the storage unit 22 instead of the processing speed of the processing unit 21 of the ECU 2.
  • the gateway 210 stores in advance information related to the processing speed of the ECU 2 that can be the target of the update process.
  • the update notification unit 11e of the gateway 210 calculates an update time for each update program when displaying information on the update program that the update determination unit 11d determines to perform the update process on the display device 7.
  • the update time calculated by the unit 11h is displayed.
  • the update availability accepting unit 11i receives a notification from the update notifying unit 11e, and then accepts from the user a selection as to whether or not to perform an update process using each update program.
  • the update availability accepting unit 11 i communicates with the display device 7 in the in-vehicle communication unit 13 and accepts the user's selection through the operation unit provided in the display device 7.
  • FIG. 13 is a schematic diagram illustrating an example of an update information notification screen displayed on the display device 7 in the in-vehicle update system 100 according to the second embodiment.
  • the update notification unit 11e of the gateway 210 displays information on the update program that is determined to be updated based on the amount of power of the battery 5 on the display device 7 as “program update information”.
  • the program update information notification screen displays the name of the program to be updated, the time required for the update, a check box 71 for accepting an update permission operation, an update start button 72, a cancel button 73, and the like.
  • the name of the program to be displayed displayed on the program update information notification screen is not the file name of the update program, but a car navigation update program, a wireless communication security update program, a recall compatible program, or the like. It is preferable that a name that allows the user of the vehicle 1 to easily understand the contents of the program is displayed.
  • the name of the displayed program is given as accompanying information when the gateway 210 acquires the update program from the server device 9, for example.
  • the programs A to E are simply described as program names to be updated.
  • the time required for the update displayed on the program update information notification screen is the update time of each update program calculated by the update time calculation unit 11h.
  • the update time of program A is 50 seconds
  • the update time of program B is 3 minutes
  • the update time of program C is 1 minute
  • the update time of program D is 30 seconds
  • the update time for E is 2 minutes.
  • the display device 7 has a touch panel that detects a touch operation on the displayed screen.
  • the display device 7 corresponds to a check box 71, an update start button 72, and a cancel button 73 provided on a program update information notification screen. Touch operation can be detected by a touch panel.
  • a check box 71 is provided for each program on the program update information notification screen.
  • the check box 71 toggles between a selected state and a non-selected state according to the user's touch operation.
  • the user can switch between permission and non-permission of the program update process by switching the state of the check box 71.
  • the update process is permitted for the programs B and C, and the update process is not permitted for the programs A, D, and E.
  • the update start button 72 provided on the program update information notification screen is a button for accepting an instruction to start update processing by a user's touch operation.
  • update processing of the program permitted to be updated in the check box 71 is started. If there is no program to which update permission is given in the check box 71 (when all check boxes 71 are in a non-selected state), an error message or the like is displayed.
  • the cancel button 73 provided on the program update information notification screen is a button for accepting an instruction to stop the update process by a user's touch operation. When a touch operation is performed on the cancel button 73, update processing is not performed for all programs regardless of the selection state of the check box 71.
  • the display device 7 After displaying the program update information notification screen, the display device 7 receives a touch operation on the check box 71, the update start button 72, and the cancel button 73, and notifies the gateway 210 of the received operation. Based on the operation notified from the display device 7, the update availability accepting unit 11 i of the gateway 210 accepts a selection as to whether or not to permit the update process.
  • FIG. 14 is a flowchart showing a procedure of update processing performed by the gateway 210 according to the second embodiment.
  • the processing unit 211 of the gateway 210 according to the second embodiment determines whether or not the IG switch 4 has been switched from the on state to the off state (step S61). When the IG switch 4 is not switched to the off state (S61: NO), the processing unit 211 waits until the IG switch 4 is switched to the off state. When the IG switch 4 is switched to the off state (S61: YES), the processing unit 211 determines whether or not an update process needs to be performed (step S62). When it is not necessary to perform the update process (S62: NO), the processing unit 211 returns the process to step S61.
  • the battery power amount acquisition unit 11c of the processing unit 211 acquires the stored power amount of the battery 5 (step S63).
  • the required power amount estimation unit 11b of the processing unit 211 estimates the power amount necessary for the update process for each update program stored in the storage unit 12 (step S64).
  • the update determination unit 11d of the processing unit 211 calculates the amount of power that can be used for the update process from the accumulated power amount acquired in step S63, the amount of usable power, the amount of power required for each update program, Based on the priority of the update program, update determination processing for each update program is performed (step S65).
  • the processing unit 211 determines whether or not at least one update program is determined to be updatable based on the result of the update determination process in step S65 (step S66). When it is determined that all the update programs cannot be updated (S66: NO), the processing unit 211 returns the process to step S61.
  • the update time calculation unit 11h of the processing unit 11 updates the update time necessary for the update process for each update program determined to be updateable. Is calculated (step S67).
  • the update notification unit 11e of the processing unit 211 transmits an instruction to display the update information notification screen of the program illustrated in FIG. 13 to the display device 7 together with the update time calculated in step S67, thereby performing the update process. Information on the information is notified to the user on the display device 7 (step S68).
  • the update availability accepting unit 11i of the processing unit 211 determines whether or not the update process by each update program is permitted based on the user operation received by the operation unit of the display device 7 (step S69). When the update is not permitted for all the update programs (S69: NO), the processing unit 211 returns the process to step S61.
  • the update information transmitting unit 11f of the processing unit 211 uses the in-vehicle communication unit 13 to store the update program stored in the storage unit 12. It transmits to ECU2 of update object (step S70).
  • the update information transmitting unit 11f determines whether or not the update process has been completed for all the update target ECUs 2 depending on whether or not an update completion notification has been received from the update target ECU 2 (step S71). If the update process has not been completed (S71: NO), the update information transmitting unit 11f returns the process to step S70 and continues to transmit the update program.
  • the processing unit 211 deletes the update program that has been updated from the storage unit 12 (step S72), and returns the process to step S61.
  • the gateway 210 displays a notification screen on the display device 7 and notifies the update process
  • the update process using the update program is permitted. Selection of whether or not to do is accepted from the user.
  • the gateway 210 performs update processing when execution is permitted, and does not perform update processing when it is not permitted.
  • the user performs the update process. It is possible to prevent the user from using the vehicle 1 by the update process.
  • the gateway 210 accepts whether or not the update process can be executed for each update program. Thereby, the range of selection of the user regarding the execution of the update process can be expanded.
  • the gateway 210 calculates the time required for the process when the ECU 2 is updated using the update program, and notifies the user of the calculated update time on the notification screen.
  • the time required for the update process can be calculated from information such as the size of the update program and the processing speed of the ECU 2 to be updated, for example. Accordingly, the user can grasp the end time of the update process and the like, and can grasp how much time the vehicle 1 cannot be used by the update process.
  • the gateway 210 calculates and notifies the update time for each update program. Thereby, the user can obtain more detailed information about the time required for the update process.
  • the gateway 210 by notifying the time required for the update process by the gateway 210, it is possible to provide the user with useful information for determining whether the update process can be performed when accepting the update process on the notification screen.
  • the configuration of the notification screen shown in FIG. 13 is an example, and the present invention is not limited to this.
  • the update time of each program shown on the notification screen is an example, and is not limited to this.
  • the update time when the gateway 210 performs the update process is calculated.
  • the present invention is not limited to this.
  • the gateway 210 acquires the update program from the server device 9 the server 210 acquires information related to the time required for the update process using the update program.
  • the server device 9 of the in-vehicle update system 100 stores information related to the time required for update processing using the update program, together with the update program transmitted to the gateway 210 of the vehicle 1.
  • the time required for the update process is calculated or measured in advance by the ECU 2 or the developer of the update program, and stored in the server device 9 together with the update program.
  • each time the server device 9 transmits the update program to the gateway 210 the time required for the update process using the update program may be calculated.
  • the server device 9 can calculate the update time based on the size of the update program and the processing speed of the ECU 2 that performs the update process using the update program.
  • the server device 9 has a database that stores the processing speed of the ECU 2 that can be an application target of the update processing program.
  • Modification 2 In the example shown in FIG. 13 as the notification screen displayed by the gateway 210 in the in-vehicle update system 100 according to the second embodiment, the name of the program to be updated and information on the time required for the update are notified.
  • the information to be notified is not limited to these.
  • the gateway 210 according to the modified example 2 notifies the information on the power amount estimated by the required power amount estimation unit 11b for each program in addition to the information on the name of the program to be updated and the time required for the update.
  • the power amount to be notified may be, for example, a ratio of the power consumption amount to the total capacity or the remaining amount of the battery 5 or may be a power amount expressed in units such as W (watts).
  • the gateway 210 according to the second modification may notify the user of the update priority of each program.
  • the gateway 210 may display the priority on the notification screen as a numerical value, for example, or may display a plurality of programs arranged in order of priority.

Landscapes

  • Engineering & Computer Science (AREA)
  • Mechanical Engineering (AREA)
  • Theoretical Computer Science (AREA)
  • Quality & Reliability (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Stored Programmes (AREA)

Abstract

La présente invention concerne un dispositif de mise à jour embarqué et un système de mise à jour embarqué qui sont aptes à empêcher une diminution significative de la quantité d'énergie électrique stockée dans une batterie pendant un processus de mise à jour. Le dispositif de mise à jour embarqué est pourvu d'une unité de traitement de mise à jour pour exécuter un processus pour mettre à jour un programme ou des données stockées dans une unité de stockage d'un dispositif de communication monté dans un véhicule. Le dispositif de mise à jour embarqué comprend en outre : une unité d'acquisition d'informations de mise à jour qui effectue un processus pour acquérir un programme ou des données de mise à jour à partir d'un dispositif à l'extérieur du véhicule; une unité d'estimation de quantité d'énergie électrique requise qui estime la quantité d'énergie électrique requise pour un traitement de mise à jour à l'aide du programme de mise à jour ou des données acquises par l'unité d'acquisition d'informations de mise à jour; et une unité d'acquisition de quantité d'énergie électrique de batterie qui acquiert la quantité d'énergie électrique accumulée dans une batterie du véhicule, l'unité de traitement de mise à jour effectuant un traitement de mise à jour conformément à: la quantité d'énergie électrique estimée par l'unité d'estimation de quantité d'énergie électrique requise; la quantité d'énergie électrique acquise par l'unité d'acquisition de quantité d'énergie électrique de batterie; et la priorité du programme de mise à jour ou des données acquises par l'unité d'acquisition d'informations de mise à jour.
PCT/JP2017/029285 2016-08-30 2017-08-14 Dispositif de mise à jour embarqué et système de mise à jour de embarqué WO2018043107A1 (fr)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN201780052273.2A CN109643253A (zh) 2016-08-30 2017-08-14 车载更新装置以及车载更新系统
US16/327,998 US11029935B2 (en) 2016-08-30 2017-08-14 On-board update device and on-board update system
DE112017004311.5T DE112017004311T5 (de) 2016-08-30 2017-08-14 Bordeigene Aktualisierungsvorrichtung und bordeigenes Aktualisierungssystem

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
JP2016-168382 2016-08-30
JP2016168382 2016-08-30
JP2017056007A JP6696468B2 (ja) 2016-08-30 2017-03-22 車載更新装置及び車載更新システム
JP2017-056007 2017-03-22

Publications (1)

Publication Number Publication Date
WO2018043107A1 true WO2018043107A1 (fr) 2018-03-08

Family

ID=61300777

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2017/029285 WO2018043107A1 (fr) 2016-08-30 2017-08-14 Dispositif de mise à jour embarqué et système de mise à jour de embarqué

Country Status (1)

Country Link
WO (1) WO2018043107A1 (fr)

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018187860A1 (fr) * 2017-04-13 2018-10-18 Blackberry Limited Progiciels de diffusion de programmes comprenant des mises à jour de programmes
JP2020164113A (ja) * 2019-03-29 2020-10-08 マツダ株式会社 自動車用演算装置
CN113168382A (zh) * 2018-11-28 2021-07-23 株式会社自动网络技术研究所 监视装置、监视程序及监视方法
CN113168314A (zh) * 2018-12-04 2021-07-23 三菱电机株式会社 更新管理装置、更新管理系统及更新管理方法
US11458863B2 (en) * 2020-09-28 2022-10-04 Subaru Corporation Vehicle

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2011000894A (ja) * 2009-06-16 2011-01-06 Fujitsu Ten Ltd 制御装置及び制御方法
JP2013084143A (ja) * 2011-10-11 2013-05-09 Denso Corp 車載通信機

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2011000894A (ja) * 2009-06-16 2011-01-06 Fujitsu Ten Ltd 制御装置及び制御方法
JP2013084143A (ja) * 2011-10-11 2013-05-09 Denso Corp 車載通信機

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018187860A1 (fr) * 2017-04-13 2018-10-18 Blackberry Limited Progiciels de diffusion de programmes comprenant des mises à jour de programmes
US10353696B2 (en) 2017-04-13 2019-07-16 Blackberry Limited Program release packages including program updates
CN113168382A (zh) * 2018-11-28 2021-07-23 株式会社自动网络技术研究所 监视装置、监视程序及监视方法
CN113168314A (zh) * 2018-12-04 2021-07-23 三菱电机株式会社 更新管理装置、更新管理系统及更新管理方法
CN113168314B (zh) * 2018-12-04 2023-11-10 三菱电机株式会社 更新管理装置、更新管理系统及更新管理方法
JP2020164113A (ja) * 2019-03-29 2020-10-08 マツダ株式会社 自動車用演算装置
WO2020203023A1 (fr) * 2019-03-29 2020-10-08 マツダ株式会社 Dispositif d'opération arithmétique d'automobile
JP7238547B2 (ja) 2019-03-29 2023-03-14 マツダ株式会社 自動車用演算装置
US11458863B2 (en) * 2020-09-28 2022-10-04 Subaru Corporation Vehicle

Similar Documents

Publication Publication Date Title
JP6696468B2 (ja) 車載更新装置及び車載更新システム
WO2018043107A1 (fr) Dispositif de mise à jour embarqué et système de mise à jour de embarqué
JP6665728B2 (ja) 車載更新装置、車載更新システム及び通信装置の更新方法
CN109643254B (zh) 车载更新系统、车载更新装置及通信装置的更新方法
WO2018117016A1 (fr) Dispositif de mise à jour à bord de véhicule, système de mise à jour et dispositif de communication portatif
US11354112B2 (en) On-board update device, update process method, and update process program
WO2017119345A1 (fr) Dispositif de mise à jour embarqué dans une voiture, système de mise à jour et programme de mise à jour
EP3933576A1 (fr) Serveur, procédé de gestion, support de stockage non transitoire, dispositif de mise à jour de logiciel, centre, et liaison radio
JP2019168977A (ja) プログラム更新システム、プログラム更新方法及びコンピュータプログラム
US10625754B2 (en) Control apparatus, control method, and computer program
WO2019202965A1 (fr) Dispositif de mise à jour embarqué, système de mise à jour embarqué, procédé de traitement de mise à jour et programme de traitement de mise à jour
CN110753905B (zh) 控制装置、控制方法和计算机程序
US20240069906A1 (en) Server, software update system, distribution method, and non-transitory storage medium
JP2014204315A (ja) 中継装置
US11449329B2 (en) Vehicle control device and program update system
JP6631676B2 (ja) 車載更新装置、更新システム及び更新処理プログラム
JP2019074847A (ja) 電子制御装置
CN112363744A (zh) 一种行车记录仪固件升级方法、系统及存储介质
JP2020021506A (ja) 電子制御装置及びセッション確立プログラム
JP2020155026A (ja) 車載更新装置、更新処理システム、更新処理方法及び処理プログラム
JP2019192027A (ja) 車両用ソフトウェア配信システム、車両用ソフトウェア配信装置、配信指示装置、車載通信装置、車両用ソフトウェア配信方法及びコンピュータプログラム
KR20220139152A (ko) 차량의 업데이트 관리 장치, 그것의 동작 방법 및 차량
JP2010097283A (ja) 制御装置及びコンピュータプログラム

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17846115

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 17846115

Country of ref document: EP

Kind code of ref document: A1