JP2004199490A - Rewriting control device of onboard program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To save continuous vehicle state data on a memory of an onboard controller, when rewriting an onboard program. <P>SOLUTION: The vehicle state data 60d required to be inherited in rewrite processing such as an accumulated operation hours or a past error history are evacuated from a data area 23b of a RAM 23 to a storage medium of a rewrite exclusive server, and written back to the original data area 23b after finish of the rewrite processing. The data area 23b after evacuation of the vehicle state data 60d is used as a buffer area of a new onboard program 60. Otherwise, the vehicle state data 60d in the data area 23b are evacuated to another storage area 23a or another storage medium. Otherwise, the vehicle state data 60d are evacuated to a storage medium in another controller other than an information collection controller of a construction machine. The vehicle state data 60d are evacuated to a storage medium in an external rewrite exclusive server of the construction machine. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to an apparatus for performing control for rewriting an in-vehicle program.
[0002]
[Prior art]
Recently developed construction machines collect vehicle status information (hereinafter referred to as vehicle status data) such as the current position of the vehicle body, the time value of the service meter (cumulative operating time), and the history of past errors that occurred in the vehicle body. Various controllers such as a controller are mounted. A CPU is provided in such an in-vehicle controller, which executes arithmetic processing according to an in-vehicle program stored in an EEPROM (electrically erasable ROM) such as a flash memory, collects vehicle state data, and communicates with external devices. Performs processing such as transmission and reception. For example, a vehicle-mounted controller and an external server are communicably connected via communication means such as the Internet, and vehicle state data collected by the vehicle-mounted controller is transmitted to the server. Alternatively, a service person goes to the construction machine, connects a personal computer to the onboard controller, and takes in the vehicle state data into the personal computer.
[0003]
When the in-vehicle program is upgraded or when it is desired to change a threshold value for determining an abnormality such as an error for each vehicle, the old in-vehicle program stored in the flash memory needs to be rewritten with a new in-vehicle program.
[0004]
(Prior art 1)
Patent Document 1 (Japanese Patent Application Laid-Open No. H10-212739) relates to a construction machine, which includes a controller for collecting operation data and a monitoring device having a function as a server at a remote location. The invention describes that a monitoring device is connected by a communication device, and an operation data processing program in an operation data collection controller is rewritten in response to a request from the monitoring device. That is, when a new operating data processing program is sent from the monitoring device, the rewriting control program is started on the ROM of the operating data collection controller in the construction machine, the rewriting process is started, and the new operating data processing program is temporarily stored in the RAM. Is stored in Then, the new operation data processing program is transferred from the RAM to the EEPROM, and the system control right is transferred to the new operation data processing program.
[0005]
[Problems to be solved by the invention]
Of the vehicle status data collected in the construction equipment, the time value (accumulated operating time) of the service meter and the past error history that occurred in the vehicle are continuous data that must not be reset during the rewriting process. is there.
[0006]
In addition, the RAM, which is the internal memory of the in-vehicle controller, often has a small capacity. Although this RAM is designed with an allowance for the data capacity, the amount of code increases due to the subsequent addition of functions, so that the capacity of the RAM that can be used as a work area or a temporary area decreases with the addition of functions. For this reason, when rewriting a new in-vehicle program, the new in-vehicle program is temporarily stored in the work area of the RAM. May not be reliably buffered.
[0007]
In this regard, Patent Literature 1 describes that a new operation data processing program is temporarily stored in the RAM, but at this time, how the continuous operation data stored in the same RAM is stored in the RAM. There is no description about whether to leave.
[0008]
The present invention has been made in view of such a situation, and it has been made possible to reliably store continuous vehicle state data that must not be reset when rewriting an in-vehicle program in a memory of an in-vehicle controller. It is an object of the present invention to reliably perform a process of rewriting a large-capacity in-vehicle program on a small-capacity memory of a controller.
[0009]
Means, actions, and effects for solving the problem
The first invention is
A data area for storing vehicle state data is provided in a storage medium (23) of the vehicle-mounted controller (20) in the vehicle (50),
When a command to rewrite a new in-vehicle program is given from the outside, the vehicle state data stored in the storage medium (23) is stored in a storage area different from the data area of the storage medium (23) or in the storage medium (23). ), Save it by writing it to another storage medium, and execute a rewriting process to rewrite it with a new in-vehicle program.
When the rewriting process is completed, a process of writing back the saved vehicle state data to the original data area of the storage medium (23) of the on-vehicle controller (20) is performed.
It is a rewrite control device for an in-vehicle program.
[0010]
The second invention is based on the first invention,
The write destination for saving vehicle state data is
The storage medium (23), which is a storage area different from the data area (23a) or a storage medium different from the storage medium (23), and is provided in the on-vehicle controller (20). A storage medium provided outside the vehicle-mounted controller (20) or a vehicle-mounted controller (20) in the vehicle (50) which is provided outside the vehicle (50) and communicating means (15, 8). , 9, 10, 11) is a storage medium in a server (3) communicably connected by
It is characterized by.
[0011]
The third invention is the first or second invention,
Using the data area (23a) of the storage medium (23) as a buffer area of the in-vehicle program while the vehicle state data is being saved.
It is characterized by.
[0012]
According to the first invention and the second invention, as shown in FIG. 3B, the time value (accumulated operation time) of the service meter SMR and the past error history generated in the vehicle body are reset during the rewriting process. The vehicle state data 60d to be inherited is saved from the data area 23b of the RAM 23 to, for example, a storage medium of the dedicated rewriting server 3 during the rewriting process, and after the rewriting process is completed as shown in FIG. Since the data is written back to the original data area 23b, the vehicle state data 60d to be inherited can be reliably left in the memory of the information collection controller 20.
[0013]
According to the third aspect, as shown in FIG. 3C, the data area 23b after the vehicle state data 60d is saved is used as a buffer area for a new in-vehicle program 60. The large-capacity in-vehicle program 60 can be reliably buffered on the small-capacity memory in the controller 20, and the rewriting process can be reliably performed.
[0014]
In the first invention, as shown in FIG. 5A, the vehicle state data 60d in the data area 23b is saved in another storage area 23a or another storage medium.
[0015]
In the second invention, the vehicle state data 60d is saved to a storage medium outside the information collection controller 20 of the construction machine 50, for example, a storage medium in a controller such as another communication controller 30 in the vehicle body, the engine controller 40, or the like. In addition, the vehicle state data 60d is evacuated to the storage medium of the rewritable server 3 outside the construction machine 50. This is applied to a case where the in-vehicle program 60 in the construction machine 50 is remotely rewritten via a communication unit in response to a request from the server 3.
[0016]
When the old in-vehicle program 60 'is rewritten with the new in-vehicle program 60, the address of the vehicle state data 60d may be changed. Therefore, while the vehicle state data 60d is being saved to the rewrite-only server 3, a process of rewriting the vehicle state data 60d, such as changing the address of the vehicle state data 60d so as to correspond to the new in-vehicle program 60, is performed. Alternatively, the rewritten vehicle state data 60d may be written back to the original data area 23b of the RAM 23.
[0017]
BEST MODE FOR CARRYING OUT THE INVENTION
FIG. 1 shows the overall apparatus configuration of the embodiment. In the following embodiment, a construction machine 50 is assumed as a vehicle, and a case is assumed in which the in-vehicle program 60 in the construction machine 50 is remotely rewritten in response to a request from the rewrite server 3.
[0018]
In the system of this embodiment, the construction machine 50 communicates with the normal operation server 2 and the dedicated rewrite server 3 via communication means (wireless communication 11, antenna 10, dedicated line 9, terrestrial base station 8, dedicated lines 14, 15). They are connected to each other so that they can be sent and received freely.
[0019]
The normal operation server 2 is located in the intranet 4 and is connected to the Internet 7. Thereby, the normal operation server 2 functions as a server for each client terminal of the Internet 7 and the intranet 4. The normal operation server 2 is provided with an IP address “ID1” which is an ID (server identification ID) for identifying itself in the network. The construction machine 50 is equipped with a communication terminal (communication controller 30), which will be described later, which can communicate with the normal operation server 2, and this communication terminal is assigned an IP address "ID3" corresponding to the server identification ID "ID1". (See FIG. 10).
[0020]
The rewritable server 3 is located in the intranet 5 and is connected to the Internet 7. Thus, the rewrite-only server 3 functions as a server for each client terminal of the Internet 7 and the intranet 5. This rewrite-only server 3 is given an IP address “ID2” which is an ID (server identification ID) for identifying itself in the network. The construction machine 50 is equipped with a communication terminal (communication controller 30), which will be described later, capable of communicating with the rewrite-only server 3, and this communication terminal is assigned an IP address "ID4" corresponding to the server identification ID "ID2". (See FIG. 10).
[0021]
The same applies to the correspondence between other construction machines and the server.
[0022]
FIG. 10 shows the correspondence between a plurality of construction machines 50, 50a, 50b,...
[0023]
The communication terminal in the construction machine 50a is assigned an IP address “ID5” corresponding to the server identification ID “ID1” of the normal operation server 2 and corresponds to the server identification ID “ID2” of the rewritable server 3. The IP address “ID6” is assigned.
[0024]
The communication terminal in the construction machine 50b is assigned an IP address “ID7” corresponding to the server identification ID “ID1” of the normal operation server 2 and corresponds to the server identification ID “ID2” of the rewrite-only server 3. IP address “ID8” is assigned.
[0025]
The server and communication terminal specified by each ID1, ID3, ID5, ID7,... Constitute one intranet 4.
[0026]
The servers and communication terminals specified by ID2, ID4, ID6, ID8,... Constitute one intranet 5.
[0027]
A communication controller 30 having a built-in wireless device for packet data communication is provided in the vehicle body of the construction machine 50. Wireless communication 11 by packet communication is performed between the antenna 31 of the communication controller 30 and the terrestrial antenna 10. The antenna 10 is connected to a terrestrial base station 8 via a dedicated line 9. The terrestrial base station 10 is, for example, a mobile phone base station. The terrestrial base station 10 is connected to intranets 4 and 5 via dedicated lines 14 and 15, respectively.
[0028]
In the vehicle body of the construction machine 50, in addition to the communication controller 30, controllers such as the information collection controller 20 and the engine controller 40 are provided. These controllers communicate with each other in accordance with a predetermined communication protocol. They are communicably connected to each other by a line 51.
[0029]
In each part of the vehicle body of the construction machine 50, a cooling water for the engine 57, a voltage of the battery 53, a GPS sensor, and the like are arranged, and these sensors constitute a sensor group 52. The GPS sensor receives a radio wave transmitted from a GPS satellite and detects the absolute position of its own construction machine 50. A calendar and a timer are provided in the vehicle body of the construction machine 50. The calendar and timer measure the year, month, day, and time (hour, minute, second). A service meter SMR is provided in the vehicle body of the construction machine 50. The service meter SMR measures the cumulative operation time of the engine 57.
[0030]
In the information collection controller 20, a CPU 21, a flash memory 22, and a random access memory (RAM) 23 are mutually connected via a bus line 24 so that data can be freely input and output. The flash memory 22 is a type of EEPROM (electrically erasable ROM). Further, an EEPROM such as a flash memory may be used instead of the RAM 23. The vehicle-mounted program 60 is stored in a predetermined storage area of the flash memory 22 as described later. In a predetermined storage area of the flash memory 22, a rewrite control program 61 for performing a rewrite process for rewriting the in-vehicle program 60 as described later is stored.
[0031]
The CPU 21 performs arithmetic processing according to the in-vehicle program 60 and generates vehicle state data. The vehicle state data is stored in the data area of the RAM 23.
[0032]
For example, when the start lock is set to be valid, a calendar, a time value of a timer, and the like are acquired, and when the set start lock time period is reached, a start lock setting command is output, and a start lock described below is performed and a start lock is performed. When the time is outside the time zone, a process of outputting a start lock release command is performed.
[0033]
The following vehicle state data is stored in the data area of the RAM 23.
[0034]
-Your own IP address (ID3, ID4)
・ Current version of in-vehicle program 60
Opening inspection completion information that the opening inspection of the communication terminal (communication controller 30) has been completed
・ Model, model, machine number of construction machine 50
・ Time value of service meter SMR (cumulative operating time)
・ Current terminal voltage of battery 53 (battery terminal voltage information)
・ Cooling water temperature
-The current absolute position of the vehicle detected by the GPS sensor (absolute position information)
・ A history of error codes generated in the vehicle
Key switch information indicating whether the key switch 54 is currently turned on (is in the ACC position)
・ Start-up lock information such as whether the current start-up lock is valid or invalid, and the currently set start-up lock time zone
The bus line 24 is connected to the service meter SMR and the sensor group 52 outside the information collection controller 20 via an interface, and the bus line 24 is connected to the in-vehicle communication line 51 outside the controller 20 via the interface. .
[0035]
In the present embodiment, the communication controller 30 and the information collection controller 20 are provided separately, and the IP addresses “ID3” and “ID4” of the communication controller 30 as communication terminals are set in the information collection controller 20. The functions of the communication controller 30 as the communication terminal and the information collection controller 20 may be achieved by one controller.
[0036]
A starting lock circuit 55 is incorporated in the vehicle body of the construction machine 50.
[0037]
The start lock circuit 55 is constituted by a relay or the like and is interposed between the key switch 54 and a starter 56 for starting the engine 57. The power supply of the starter 56 is a battery 53 mounted on the vehicle.
[0038]
When the start lock setting command is output from the engine controller 40, the relay of the start lock circuit 55 is energized to enter the start lock setting state. That is, even if the key switch 54 is turned on (ACC position), the terminal voltage of the battery 53 is not applied to the starter 56. As a result, the starter 56 becomes inoperable and the engine 57 cannot be started. On the other hand, when a start lock release command is output from the engine controller 40, the relay of the start lock circuit 55 is deenergized and the start lock is released. That is, when the key switch 54 is turned on (ACC position), the starter 56 operates and the engine 57 can be started. The start lock setting command and the start lock release command are given from the information collection controller 20 to the engine controller 40 via the in-vehicle communication line 51 in accordance with the in-vehicle program 60. The start lock setting command and the start lock release command are output from the information collection controller 20 when the start lock is currently set to “valid”. Whether or not the start lock time zone has been entered is determined based on the values of the calendar and the timer in the information collection controller 20.
[0039]
The information that the key switch 54 is turned on (is in the ACC position) is taken into the information collection controller 20 from the engine controller 40 via the vehicle body communication line 51.
[0040]
-Server switching control
The normal operation server 2 manages vehicle state data in a plurality of construction machines including the construction machine 50.
[0041]
The rewrite-only server 3 is a server that remotely rewrites the in-vehicle program 60.
[0042]
The normal operation server 2 has a master file 6. The latest vehicle state data taken into the normal operation server 2 is stored in the master file 6.
[0043]
On the other hand, the rewritable server 3 has a master file 6 '. The storage data of the master file 6 in the normal operation server 2 is taken into the rewritable server 3 via the Internet 7, and the same storage contents as the master file 6, that is, a master file 6 'as a "replica" is created.
[0044]
Next, with reference to FIG. 8, a description will be given of control of connection switching with which server the construction machine 50 establishes a connection.
[0045]
In the initial state, the vehicle controller 20 of the construction machine 50 has its own IP address “ID3” corresponding to the server identification ID “ID1” of the normal operation server 2 set to “valid”. The own IP address “ID4” corresponding to the server identification ID “ID2” is set to “invalid” (normal operation mode). The data “ID3” of the own IP address set as “valid” by the information collection controller 20 is taken into the communication controller 30 from the information collection controller 20 via the in-vehicle communication line 51.
[0046]
When a command for requesting vehicle state data of the construction machine 50 from the normal operation server 2 is transmitted to the construction machine 50 as the wireless communication 11 via the dedicated line 14, the terrestrial base station 8, the dedicated line 9, and the antenna 10, The data is received by the antenna 31 of the construction machine 50, and this data is taken into the communication controller 30. The data transmitted from the normal operation server 2 includes the server identification ID “ID1”. Since the communication controller 30 is currently set with the IP address “ID3” and the received data includes the server identification ID “ID1”, the two correspond (“ID1” and “ID3”). It is determined that the network is the same network), the communication connection is established, and the vehicle state data can be transmitted from the construction machine 50 side (determination YES in step 401 in FIG. 8).
[0047]
Therefore, a command for requesting vehicle state data is fetched from the communication controller 30 into the information collection controller 20 via the vehicle body communication line 51. For example, when a command requesting the current time value of the service meter SMR is taken into the information collection controller 20, the current time value of the service meter SMR stored in the data area of the RAM 23 is transmitted from the information collection controller 20 to the vehicle body communication line. The data is taken into the communication controller 30 via the communication controller 51, transmitted as radio communication 11 from the antenna 31 of the communication controller 30, and transmitted to the normal operation server 2 via the antenna 10, the dedicated line 9, the terrestrial base station 8, and the dedicated line 14 It is captured.
[0048]
Similarly, when the command for setting the start lock information such as the start lock validity, invalidity, and start lock time zone is transmitted from the normal operation server 2 to the construction machine 50, the start lock commanded to the information collection controller 20 is similarly issued. Information is set.
[0049]
Note that a similar command may be given from each client terminal of the normal operation server 2 to the construction machine 50 via the normal operation server 2.
[0050]
When a specific event occurs in the construction machine 50, such as when a specific abnormality occurs or at a specific time, the details of the abnormality stored in the RAM 23 at the time of the event and the vehicle to be transmitted periodically State data and the like are taken into the communication controller 30 from the information collection controller 20 via the vehicle body communication line 51, and transmitted as wireless communication 11 from the antenna 31 of the communication controller 30 (automatic transmission). The automatically transmitted vehicle state data is taken into the normal operation server 2 via the antenna 10, the dedicated line 9, the terrestrial base station 8, and the dedicated line 14.
[0051]
The vehicle status data of the construction machine 50 taken into the normal operation server 2 is obtained by accessing the normal operation server 2 from each client terminal connected to the network belonging to the normal operation server 2, ie, the Internet 7 and the intranet 4. It is displayed on the display screen of the client terminal.
[0052]
The latest vehicle state data taken into the normal operation server 2 is stored in the master file 6 as well as in the master file 6 'via the Internet 7 (step 405 in FIG. 8).
[0053]
When the in-vehicle program 60 'is upgraded, or when it is desired to change the threshold for generating an error code or determining an abnormality for each construction machine, the old in-vehicle program 60' stored in the flash memory 22 is replaced with a new in-vehicle program. Rewritten into the program 60. In the following description, a dash is given to the old in-vehicle program 60 to distinguish it from the new in-vehicle program 60.
[0054]
When a command to rewrite the in-vehicle program 60 of the construction machine 50 is transmitted from the rewrite dedicated server 3 to the construction machine 50 as the wireless communication 11 via the dedicated line 15, the terrestrial base station 8, the dedicated line 9, and the antenna 10, The data is received by the antenna 31 of 50, and this data is taken into the communication controller 30.
[0055]
The data transmitted from the rewrite-only server 3 includes the server identification ID “ID2”. In the communication controller 30, the IP address “ID3” is currently set, and the received data includes the server identification ID “ID2”. Therefore, the two do not correspond (“ID2” and “ID3”). It is determined that they are not the same network), and the communication connection is disconnected (NO in step 401 in FIG. 8).
[0056]
Information that the communication connection has been disconnected due to the mismatch of the IDs is taken into the information collection controller 20 from the communication controller 30 via the in-vehicle communication line 51. In response, the information collection controller 20 switches its own IP address “ID4” corresponding to the server identification ID “ID2” of the rewrite-only server 3 to “valid”, and the server identification ID “ID1” of the normal operation server 2. Is switched to “invalid” (rewrite mode). The data “ID4” of the own IP address set as “valid” by the information collection controller 20 is taken into the communication controller 30 from the information collection controller 20 via the in-vehicle communication line 51 (step 402 in FIG. 8). .
[0057]
The rewrite-only server 3 transmits the rewrite command to the construction machine 50 again in response to the disconnection of the communication connection. The data transmitted from the rewrite-only server 3 includes the server identification ID “ID2”. Since the communication controller 30 is currently set with the IP address “ID4” and the received data includes the server identification ID “ID2”, both correspond (“ID2” and “ID4”). It is determined that the network is the same network) and a communication connection is established (determination YES in step 403 of FIG. 8).
[0058]
Thereafter, a process of rewriting the in-vehicle program 60 is performed by the information collection controller 20 in response to a command from the rewrite-only server 3 on the assumption that certain conditions are cleared (step 404 in FIG. 8).
[0059]
As described above, according to the present embodiment, the communication connection can be switched between the construction machine 50 and each of the servers such as the normal operation server 2 and the rewrite-only server 3. For this reason, as shown in FIG. 10, when a large number of construction machines 50, 50a, 50b,... Exist, a communication connection between a certain construction machine and the normal operation server 2 is established to perform the normal operation processing. Then, a communication connection between the other construction machine and the rewrite-only server 3 can be established to perform the rewrite process. For this reason, the communication path is not occupied by a heavy load on the server or transmission of a program having a large data amount, and data transmission and reception between the server and many construction machines are performed stably.
[0060]
FIG. 2 shows a procedure of a process of rewriting the in-vehicle program 60 in response to a command from the rewrite-only server 3.
[0061]
・ Return control to normal operation mode
As shown in FIG. 2, when a communication connection is established between the construction machine 50 and the rewritable server 3 in step 403 in FIG. 8 (step 101 in FIG. 2), a timer is set in the information collection controller 20 and the timer is set. The task is executed (steps 102, 108, 109).
[0062]
Here, the set time of the timer is set to a time T that allows for the time required for the rewriting process.
[0063]
The information collection controller 20 operates in a multitask, and the timer task operates independently of another task, that is, the rewriting task (steps 103 to 107). Therefore, even if another task goes out of control, the timer task operates reliably, and the old in-vehicle program 60 'can be started by the self-reset process (step 109).
[0064]
When the rewriting task (steps 103 to 107) ends normally, the timer is cleared before the set time T has elapsed, and the timer is rewritten with the new in-vehicle program 60.
[0065]
On the other hand, if a communication error or a hang-up occurs during the rewriting task (steps 103 to 107), the rewriting process will not end even if the timer exceeds the set time T (determination YES in step 108), and the reset is performed. The process is executed, and the old in-vehicle program 60 'is started.
[0066]
Further, the communication state between the construction machine 50 and the server is switched from the rewrite mode to the normal operation mode. That is, the information collection controller 20 returns its own IP address “ID4” corresponding to the server identification ID “ID2” of the rewrite-only server 3 to “invalid” and corresponds to the server identification ID “ID1” of the normal operation server 2. The own IP address “ID3” is returned to “valid” (normal operation mode). The data “ID3” of the own IP address set as “valid” by the information collection controller 20 is taken into the communication controller 30 from the information collection controller 20 via the in-vehicle communication line 51. For this reason, the communication connection between the normal operation server 2 and the construction machine 50 becomes possible thereafter, and the normal operation process can be performed (step 109).
[0067]
As described above, according to the present embodiment, even if an error such as a communication error or a hang-up occurs during the rewriting process, the old in-vehicle program 60 'is reliably started and the information collection controller 20 is started. Function can be maintained. Therefore, normal operation processing can be reliably performed, and it is possible to prevent a reduction in work efficiency due to the malfunction of the information collection controller 20. When the set time T of the timer elapses, the mode shifts from the rewrite mode to the normal operation mode. Therefore, the communication path for the rewrite process is prevented from being occupied for a long time, and the communication for the normal operation process is secured. As a result, it is possible to prevent trouble in normal operation processing.
[0068]
・ Check processing of vehicle state data
When the communication connection between the dedicated server for rewriting 3 and the communication controller 30 of the construction machine 50 is established at step 101 in FIG. 2, the rewriting command transmitted from the dedicated server for rewriting 3 sends the communication line 30 from the communication controller 30 to the communication line 51 inside the vehicle body. Via the information collection controller 20 via
[0069]
When the information collection controller 20 receives the rewrite command, in the next step 103, a process of checking the current vehicle state data is executed. In the next step 104, the rewrite process of the in-vehicle program 60 is performed according to the check result. A determination process of whether or not to execute (whether or not rewriting process is possible) is performed.
[0070]
The check processing and the judgment processing in steps 103 and 104 are performed by the rewrite-only server 3. That is, when receiving the rewrite command, the information collection controller 20 transmits vehicle state data to be checked from the information collection controller 20 to the communication controller 30 via the vehicle body communication line 51. For this reason, the vehicle state data to be checked is transmitted from the antenna 31 of the communication controller 30 as the wireless communication 11, and is taken into the rewritable server 3 via the antenna 10, the dedicated line 9, the terrestrial base station 8, and the dedicated line 15.
[0071]
The rewrite-only server 3 checks the received vehicle state data, and determines that the rewrite process should be executed on condition that all of the following conditions are satisfied.
[0072]
1) Start lock is not on
2) The construction machine 50 is not in operation
3) The current old in-vehicle program 60 'is the version to be rewritten.
The reason why the “start lock is not locked” in the above 1) is set as a condition for executing the rewriting process because the information collection controller 20 may not function during the rewriting process, and the information collection controller 20 may not function. This may result in failure to output a command to release the start lock. The construction machine 50 is often operated under severe conditions. For example, if the starting lock cannot be released in a situation where the surroundings of the construction machine are cliffs or collapsed objects, the construction machine 50 may be exposed to danger. become.
[0073]
The determination that “the start lock is not being performed” is made based on the start lock information stored in the information collection controller 20. For example, when the start lock is set to “invalid”, if the start lock is “valid” and the current time is outside the start lock time zone, it is determined that “the start lock is not being performed”.
[0074]
The condition that the construction machine 50 is not operating in the above 2) is used as a condition of the rewriting process because the new in-vehicle program 60 is being transmitted to the operating construction machine 50 and depending on the operating state (for example, running). This is because the communication may be interrupted or the communication may become unstable, and the rewriting process may not end normally.
[0075]
“The construction machine 50 is not operating” is determined based on the key switch information stored in the information collection controller 20. For example, when the key switch 54 is off (ACC position off), it is determined that "the construction machine 50 is not operating". Whether or not the construction machine 50 is operating can also be determined by detecting the terminal voltage of the alternator or detecting the number of revolutions of the engine 57.
[0076]
The condition 3) "the current old in-vehicle program 60 'is the version to be rewritten" is a condition because it is not necessary to perform the rewriting process. As described above, the current version of the in-vehicle program is stored in the information collection controller 20 as vehicle state data.
[0077]
In addition, the following conditions may be appropriately added.
[0078]
4) Being a communication terminal (communication controller 30) for which station opening inspection has been completed
5) Battery terminal voltage is within normal range
6) The construction machine 50 is located in a place where the wireless communication 11 can be performed stably or in a safe place.
The condition 4) “the communication terminal (communication controller 30) for which the station opening inspection has been completed” is a condition because the server is not ready to manage the construction machine 50.
[0079]
The condition that “the battery terminal voltage is in the normal range” in 5) above is that the CPU 21 of the information collection controller 20 can operate stably if the terminal voltage of the battery 53 is out of the normal range. This is because the rewriting process may not be completed normally. “The battery terminal voltage is within the normal range” is determined based on the battery terminal voltage information stored in the information collection controller 20.
[0080]
The condition 6) that “the construction machine 50 is located in a place where the wireless communication 11 can be stably performed or in a safe place” is a condition that the new in-vehicle program 60 is transmitted to the construction machine 50 during the transmission. This is because there is a risk that communication may be interrupted or communication may become unstable, and the rewriting process may not end normally. Further, even if the controller does not function, the safety of the construction machine 50 is ensured. “The construction machine 50 is located in a place where the wireless communication 11 can be performed stably or in a safe place” is determined based on the absolute position information stored in the information collection controller 20.
[0081]
It is to be noted that, not all conditions 1) to 6) are satisfied, but any one or a combination of two or more of the conditions 1) to 6) may be set as the conditions for executing the rewriting process. Good.
[0082]
The rewrite-only server 3 refers to the vehicle state data stored in the information collection controller 20 to determine whether or not the rewrite process can be executed. However, the master file 6 'includes the latest vehicle of the construction machine 50. Since the state data is stored, it may be determined whether or not the rewriting process can be executed by referring to the vehicle state data stored in the master file 6 '. Alternatively, it may be determined whether or not the rewriting process can be performed by referring to the vehicle state data stored in the information collection controller 20 and the vehicle state data stored in the master file 6 '.
[0083]
FIG. 7 shows a procedure of a process of verifying both the vehicle state data stored in the information collection controller 20 and the vehicle state data stored in the master file 6 'when both are referred to.
[0084]
That is, when a communication connection between the server 3 for exclusive use of rewriting and the communication controller 30 of the construction machine 50 is established (step 301), the vehicle state data to be checked inside the information collection controller 20 is sent from the construction machine 50 to the server 3 exclusively for rewriting. It is transmitted and acquired by the rewrite-only server 3 (step 302). On the other hand, the rewritable server 3 acquires the same vehicle state data to be checked by referring to the master file 6 '. The vehicle state data acquired in advance with reference to the master file 6 'is compared with the vehicle state data acquired from inside the information collection controller 20 (step 303), and whether or not both are the same is determined. Is determined. For example, it is determined whether the data of the master file 6 'and the data inside the information collection controller 20 are the same for the start lock information (step 304).
[0085]
As a result, if they are the same (determination Y in step 304), the check processing in step 103 in FIG. 2 is executed, and the rewrite permission / inhibition determination processing in step 104 in FIG. 305). However, if they are not the same (determination N in step 305), the subsequent check processing and rewrite permission / inhibition determination processing are interrupted, and processing for analyzing the cause of the difference in data is executed (step 306).
[0086]
If the rewrite-only server 3 determines that the rewrite process should be executed (determination YES in step 104 of FIG. 2), the rewrite-only server 3 transmits the data to that effect to the construction machine 50, and thereafter collects information. The controller 20 rewrites the old in-vehicle program 60 'with the new in-vehicle program 60 and executes it (steps 105, 106, 107). However, if the rewrite-only server 3 determines that the rewrite process should not be executed (NO in step 104 in FIG. 2), the data is transmitted from the rewrite-only server 3 to the construction machine 50 to collect information. Captured by the controller 20. In response to this, the information collection controller 20 executes a reset process and activates the old in-vehicle program 60 ', as in the case where the timer has exceeded the set time T. Further, the communication state between the construction machine 50 and the server is switched from the rewrite mode to the normal operation mode. For this reason, the communication connection between the normal operation server 2 and the construction machine 50 becomes possible thereafter, and the normal operation process can be performed (step 109).
[0087]
As described above, according to the present embodiment, the vehicle state data is checked in advance in the rewriting process, so that a situation in which the rewriting process does not end normally or a dangerous state can be avoided in advance. it can. In particular, it is possible to avoid a situation in which the information collection controller 20 does not function in the startup locked state, so that a situation in which the operation rate decreases can be avoided in advance.
[0088]
・ Rewrite processing (evacuation processing of vehicle state data)
Next, the rewriting process of steps 105, 106, and 107 in FIG. 2 will be described with reference to FIG. 2 and FIG. FIGS. 3A to 3F show transitions of the states of the flash memory 22 and the RAM 23.
[0089]
3A shows the states of the flash memory 22 and the RAM 23 before rewriting. As shown in FIG. 3A, the in-vehicle program 60 'is stored in the program area of the flash memory 22. Note that a rewrite control program 61 is stored in a storage area (not shown) of the flash memory 22.
[0090]
The rewrite control program 61 is a program that performs a process of rewriting an old in-vehicle program 60 ′ with a new in-vehicle program 60.
[0091]
The RAM 23 includes work areas 23a and 23c and a data area 23b in which vehicle state data 60d is stored. The work areas 23a and 23c are empty capacity areas.
[0092]
When the rewrite-only server 3 determines that the rewrite process should be performed (YES in step 104 in FIG. 2), the data to that effect is sent from the rewrite-only server 3 to the dedicated line 15, the terrestrial base station 8, The information is transmitted to the construction machine 50 as wireless communication 11 via the line 9 and the antenna 10, received by the antenna 31 of the construction machine 50, and taken into the information collection controller 20 from the communication controller 30 via the in-vehicle communication line 51. In response to this, the CPU 21 of the information collection controller 20 reads the vehicle state data 60d from the data area 23b of the RAM 23 as shown in FIG. 30. Therefore, the vehicle state data 60d is transmitted as the wireless communication 11 from the antenna 31 of the communication controller 30, and is taken into the rewrite server 3 via the antenna 10, the dedicated line 9, the terrestrial base station 8, and the dedicated line 15.
[0093]
The rewrite-only server 3 stores the vehicle state data 60d in a predetermined storage medium in the server 3 and saves it (step 105 in FIG. 2).
[0094]
When the vehicle state data 60 d is saved in the dedicated rewriting server 3, a new in-vehicle program 60 is sent from the dedicated rewriting server 3 to the construction machine as the wireless communication 11 via the dedicated line 15, the terrestrial base station 8, the dedicated line 9, and the antenna 10. The data is transmitted to the antenna 50 of the construction machine 50 and received by the communication controller 30 via the in-vehicle communication line 51 into the information collection controller 20. In response to this, the CPU 21 of the information collection controller 20 temporarily buffers the received new in-vehicle program 60 in the temporary area 23d of the RAM 23 as shown in FIG. This temporary area 23d includes not only the work areas 23a and 23c but also the data area 23b. That is, the capacity of the new vehicle-mounted program 60 is often large enough to correspond to the entire area of the RAM 23. However, the vehicle state data 60d is saved so that the data area 23b can be used as a buffer area of the new vehicle-mounted program 60. Therefore, a large-capacity new in-vehicle program 60 can be reliably buffered on the RAM 23.
[0095]
The rewrite control program 61 stored in the flash memory 22 is copied to a predetermined storage area of the RAM 23, whereby the system control is transferred to the copied rewrite control program 61 on the RAM 23. It becomes. Therefore, as shown in FIG. 3D, the old in-vehicle program 60 'in the flash memory 22 is rewritten by the new in-vehicle program 60 in the RAM 23 according to the write control program 61 in the RAM 23. That is, after performing a CRC check on the new vehicle-mounted program 60 buffered in the temporary area 23d of the RAM 23, the new vehicle-mounted program 60 is copied to the program area of the flash memory 22, that is, the area where the old vehicle-mounted program 60 'is stored. The old in-vehicle program 60 'is rewritten with the new in-vehicle program 60 (step 106 in FIG. 2).
[0096]
When the new in-vehicle program 60 is copied to the flash memory 22 as shown in FIG. 3 (e), data to that effect is transmitted from the information collection controller 20 to the communication controller 30 via the vehicle body communication line 51. The data is transmitted as the wireless communication 11 from the antenna 31 of the server 30, and is taken into the rewrite server 3 via the antenna 10, the dedicated line 9, the terrestrial base station 8, and the dedicated line 15.
[0097]
In response to this, the rewrite-only server 3 receives the vehicle status data 60 d saved in the storage medium and transmits it to the construction machine 50 as the wireless communication 11 via the dedicated line 15, the terrestrial base station 8, the dedicated line 9, and the antenna 10. Send. The vehicle state data 60d is received by the antenna 31 of the construction machine 50, and taken into the information collection controller 20 from the communication controller 30 via the in-vehicle communication line 51. In response to this, the CPU 21 of the information collection controller 20 performs a process of writing back the received vehicle state data 60d to the original data area 23b of the RAM 23 as shown in FIG.
[0098]
When the rewriting process ends, the CPU 21 performs a self-reset process. As a result, the system control right is transferred to the flash memory 22, the flash memory 22 enters the normal mode, and a new in-vehicle program 60 stored in the program area of the flash memory 22 is activated.
[0099]
By the way, when the old in-vehicle program 60 'is rewritten to the new in-vehicle program 60, the address of the vehicle state data 60d may be changed. Therefore, while the vehicle state data 60d is being evacuated to the rewrite-only server 3, a process of rewriting the vehicle state data 60d is performed by changing the address of the vehicle state data 60d so as to correspond to the new in-vehicle program 60. The vehicle state data 60d may be written back to the original data area 23b of the RAM 23.
[0100]
As described above, according to the present embodiment, the vehicle state data 60d that should not be reset during the rewriting process, such as the time value (accumulated operating time) of the service meter SMR and the past error history generated in the vehicle body, must be inherited. During the rewriting process, the vehicle state data 60d to be inherited is saved from the data area 23b of the RAM 23 to the storage medium of the dedicated rewriting server 3 and written back to the original data area 23b after the rewriting processing is completed. The information can be reliably left on the memory of the information collection controller 20. Further, since the data area 23b after saving the vehicle state data 60d is used as a buffer area for the new in-vehicle program 60, the large-capacity in-vehicle program 60 can be stored on a small-capacity memory in the information collection controller 20. Buffering can be performed reliably, and rewriting processing can be performed reliably.
[0101]
In the above-described embodiment, the vehicle state data 60d is saved in the storage medium of the dedicated rewrite server 3 outside the construction machine 50, but the vehicle state data is stored in another storage area or another storage medium during the rewrite processing. As long as the data 60d can be saved, the data 60d may be saved inside the construction machine 50.
[0102]
FIG. 5 shows a state transition of the memory when the vehicle state data 60d is saved in another storage area on the same RAM 23. Hereinafter, FIG. 5 will be described with reference to the flowchart of FIG.
[0103]
That is, as shown in FIG. 5A, the vehicle state data 60d stored in the data area 23b of the RAM 23 is copied and saved in the last storage area 23e of the RAM 23 (Step 201 in FIG. 6). Next, as shown in FIG. 5B, the new in-vehicle program 60 received from the rewrite-only server 3 is temporarily buffered in the temporary area 23d including the data area 23b (Step 202 in FIG. 6).
[0104]
Next, as shown in FIG. 5C, the new in-vehicle program 60 buffered in the temporary area 23d of the RAM 23 is copied to the program area of the flash memory 22 (Step 203 in FIG. 6). After this rewriting process, the new in-vehicle program 60 remaining in the temporary area 23d on the RAM 23 is cleared (step 204).
[0105]
Next, as shown in FIG. 5D, the vehicle state data 60d saved in the last storage area 23e of the RAM 23 is written back to the data area 23b, which is the original normal position of the RAM 23 (see FIG. 6). Step 205). After the writing back, the vehicle state data 60d remaining in the last storage area 23e of the RAM 23 is cleared (step 206).
[0106]
Note that the clear processing in steps 204 and 206 may be performed as needed, and the program and data may be left without being cleared.
[0107]
In FIG. 5, the vehicle state data 60d is saved in another storage area on the RAM 23 which is the same storage medium. However, the vehicle state data 60d may be saved in a storage medium different from the RAM 23 in the vehicle body in the same manner. . For example, as shown in FIG. 1, the construction machine 50 includes a controller such as a communication controller 30 and an engine controller 40 in addition to the information collection controller 20. Therefore, at the time of the rewriting process, the vehicle state data 60d is saved from the information collection controller 20 to the storage medium in another controller via the in-vehicle communication line 51, and after the rewriting process is completed, the other controller sends the vehicle state data 60d to the information collection controller 20. The vehicle state data 60d may be written back to the original data area 23b on the RAM 23.
[0108]
In the above-described embodiment, the vehicle state data 60d is saved in another storage area. However, the vehicle state data 60d only needs to be reset during the rewriting process, and does not necessarily need to be saved in another area.
[0109]
That is, as shown in FIG. 4, the data area 23b of the RAM 23 is set as a non-overwritable area, and the temporary area 23d of the RAM 23 is set as an overwritable area. Therefore, the new in-vehicle program 60 transmitted from the rewritable server 3 is temporarily buffered in the overwritable temporary area 23b, but is not buffered in the overwritable data area 23b. This prevents a situation in which the vehicle state data 60d stored in the data area 23b is reset during the rewriting process.
[0110]
In the embodiment described above, the case where the normal operation process and the rewrite process are performed on each of the two servers has been described. However, the normal operation process and the rewrite process may be performed on one server. For example, the normal operation server 2 may perform not only the normal operation processing but also the rewriting processing.
[0111]
FIG. 9 shows a processing procedure for switching between the normal operation mode and the rewrite mode between the normal operation server 2 and the construction machine 50.
[0112]
In this case, two transport layer protocols of UDP and TCP are prepared as a communication protocol between the application program on the normal operation server 2 side and the application program on the construction machine 50 side.
[0113]
Therefore, when data is transmitted from the normal operation server 2 according to the UDP communication protocol, the communication controller 30 of the construction machine 50 establishes a connection with the UDP application program, and connects with the other TCP application program. Is invalidated (determination Y in step 501). In response to this, the communication controller 30 of the construction machine 50 determines that the operation mode is the normal operation mode, and thereafter executes the normal operation processing via the information collection controller 20 (step 503). On the other hand, when data is transmitted from the normal operation server 2 according to the TCP communication protocol, the communication controller 30 of the construction machine 50 establishes a connection with the TCP application program, and establishes a connection with the other UDP application program. Is invalidated (judgment Y in step 502). In response to this, the communication controller 30 of the construction machine 50 determines that the mode is the rewrite mode, and thereafter executes the rewrite process via the information collection controller 20 (step 504).
[0114]
When two servers are provided, it is also possible to use one server mainly and use the other server as a spare server. For example, the server performs the normal operation process and the rewrite process on one side, but when the server is being maintained, the other spare server may be operated to perform the normal operation process and the rewrite process. In this case also, the switching of the communication connection between the two servers and the construction machine can apply the method of the above-described embodiment.
[0115]
Further, in the present embodiment, the construction machine 50 is assumed as a vehicle, but the present invention can be applied to a case where an in-vehicle program of an arbitrary vehicle such as a general automobile is rewritten.
[Brief description of the drawings]
FIG. 1 is a diagram illustrating an overall configuration of a system according to an embodiment.
FIG. 2 is a diagram illustrating a procedure of a rewriting process according to the embodiment;
FIGS. 3A to 3F are diagrams showing state transitions of a flash memory and a RAM.
FIG. 4 is a diagram showing a data area in which overwriting is impossible.
FIGS. 5A to 5D are diagrams showing state transitions of a flash memory and a RAM.
FIG. 6 is a diagram depicting a processing procedure when data is saved;
FIG. 7 is a diagram illustrating a processing procedure when performing verification with a master file;
FIG. 8 is a diagram illustrating a procedure of a server switching process;
FIG. 9 is a diagram illustrating a procedure of a switching process between a normal operation mode and a rewrite mode;
FIG. 10 is a diagram illustrating a correspondence relationship between a server and a construction machine.
[Explanation of symbols]
2 Normal operation server
3 Rewrite only server
4,5 intranet
6, 6 'master file
7 Internet
8 Terrestrial base station
9, 14, 15 Dedicated line
10 Antenna
11 Wireless communication
20 Information collection controller
21 CPU
22 Flash memory
23 RAM
30 Communication controller
50 Construction machinery

Claims (3)

A data area for storing vehicle state data is provided in a storage medium (23) of the vehicle-mounted controller (20) in the vehicle (50),
When a command to rewrite a new in-vehicle program is given from the outside, the vehicle state data stored in the storage medium (23) is stored in a storage area different from the data area of the storage medium (23) or in the storage medium (23). ), Save it by writing it to another storage medium, and execute a rewriting process to rewrite it with a new in-vehicle program.
An in-vehicle program rewrite control device, which performs a process of writing back the saved vehicle state data to the original data area of the storage medium (23) of the on-vehicle controller (20) when the rewriting process ends. The write destination for saving vehicle state data is
The storage medium (23), which is a storage area different from the data area (23a) or a storage medium different from the storage medium (23), and is provided in the on-vehicle controller (20). A storage medium provided outside the vehicle-mounted controller (20) or a storage medium provided outside the vehicle (50) and communicating with the vehicle-mounted controller (20) in the vehicle (50). 2. The rewrite control device for an in-vehicle program according to claim 1, wherein the rewrite control device is a storage medium in a server (3) that is communicably connected by (9, 10, 11, 11). 3. The vehicle-mounted program rewriting control device according to claim 1, wherein the data area (23a) of the storage medium (23) is used as a buffer area of the vehicle-mounted program while the vehicle state data is being saved. .

Images