JP2012155472A - Operation information management device, operation information management method, and operation information management program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a technique for writing operation information from a temporary storage part to an external storage medium to easily acquire the operation information.SOLUTION: In the operation information management method, operation information associated with operation of a management object device is acquired from the device, the operation information associated with operation of the device is stored in a temporary storage part, and the operation information associated with operation of the device in the temporary storage part is written in an operation area associated with operation of the device in an external storage medium. In storage areas in the external storage medium, the operation area is to be an invisible area and the other areas are to be visible areas.

Description

  The present invention relates to a technique for acquiring device operation information.

  In recent years, electronic devices (hereinafter referred to as in-vehicle devices) mounted on vehicles have various functions such as not only music playback but also video playback, navigation, and communication.

  If the number of functions is increased in this way, the configuration becomes complicated and an operation failure may occur due to various causes. Therefore, it is difficult to investigate the cause of the operation failure.

  Conventionally, information (operation information) that analyzes the product operation when an operation failure (error) occurs, such as error history and operation history, is stored in the nonvolatile memory as error information, and the cause is investigated based on this error information .

  However, the built-in nonvolatile memory is not sufficient because of its small storage capacity due to cost and miniaturization. For example, the time for which the operation history can be recorded may be about several minutes and cannot be recorded for a long time.

In addition, in order to view this error information, a PC (personal computer) is connected to the vehicle-mounted device and the error information is read from a nonvolatile memory, or it is written to a removable storage medium such as an SD card and read by the PC. It was.

JP 2009-186267 A JP 2001-236537 A JP 2008-269498 A Japanese Patent Laid-Open No. 7-210338 International Publication No. 2007/052535 JP 2001-229423 A

  Even if error information is written to a removable storage medium (external storage medium) at any time to analyze the cause of the malfunction, the error information contains various information, so anyone can access it freely from a security perspective. It is not desirable to be able to do that. For this reason, the function of writing error information to the external storage medium is to be performed by the maintenance person, etc., and when the malfunction is clarified, the maintenance person visits the site and moves the error information in the nonvolatile memory to the external storage medium. Operation to take home was taken.

  For this reason, it takes time for the maintenance person to go to the site to write the error information to the external storage medium, and there is a problem that the error information cannot be easily acquired.

In addition, when writing error information only when the maintenance person operates, error information exceeding the storage capacity of the built-in temporary storage unit cannot be acquired, but the vehicle-mounted device has an internal nonvolatile memory for storing error information. In this case, there is a problem that the operation history cannot be stored sufficiently. In particular, with the increase in functionality, the operation history to be stored has increased. Further, for errors that occur in combination with other operations such as deadlock, it is necessary to verify a long-time operation history.

  Therefore, it is desirable to have a configuration that can store a lot of error information, but the trouble is almost eliminated before the release, and it is very rare to use this configuration after the vehicle-mounted device is on the market, In order to acquire error information, it is useless to incorporate a large-capacity nonvolatile memory in all on-vehicle devices.

  For this reason, not only when the maintenance person operates the error information stored in the built-in nonvolatile memory, but also by writing it to an external storage medium at any time, a large amount of error information can be obtained without increasing the storage capacity of the built-in nonvolatile memory. Can be recorded.

  However, if error information is written to an external storage medium as needed, the external storage medium may be damaged if the external storage medium is removed during writing or if the voltage fluctuates due to cranking or the like. . Furthermore, in order to write error information to an external storage medium as needed, the external storage medium must always be set in the vehicle-mounted device. If the error information is written to a dedicated external storage medium, the error information is written out. Only the read / write unit (reader / writer) of the external storage medium must be provided, and the device configuration becomes redundant. For this reason, it is desirable to write error information to an external storage medium that stores map data, music data, etc., but if map data, music data, etc. and error information are mixed, map data, music data, etc. When handling, it is necessary to pay attention not to accidentally change (for example, delete) the error information, which is troublesome.

  Therefore, an object of the present invention is to provide a technique for easily acquiring operation information by writing operation information from a temporary storage unit to an external storage medium.

In order to solve the above problem, the operation information management method is:
Obtaining operation information related to the operation of the device from the device to be managed;
Storing operation information related to the operation of the device in a temporary storage unit;
Writing operation information relating to the operation of the device in the temporary storage unit to an operation area relating to the operation of the device in the external storage medium, and
Among the storage areas of the external storage medium, the operation area is set as an invisible area, and the area other than the invisible area is set as a visible area.

  In the motion information management method, the invisible area may be an area having a different format from the visible area.

  The motion information management method may write the motion information in the temporary storage unit in the invisible area of the external storage medium when a predetermined condition is satisfied.

  In the operation information management method, the device to be managed may be a vehicle device, and the predetermined condition may be a condition according to a traveling state of the vehicle.

  The operation information management method may further include a step of extracting predetermined information from operation information acquired from the managed device, and the extracted operation information may be stored in the temporary storage unit.

The operation information management device of the present invention is
An operation information acquisition unit that acquires operation information related to the operation of the device from the device to be managed;
A temporary storage unit that stores operation information related to the operation of the device;
A writing unit that writes operation information related to the operation of the device in the temporary storage unit to an operation region related to the operation of the device in the external storage medium;
With
Among the storage areas of the external storage medium, the operation area is set as an invisible area, and the area other than the invisible area is set as a visible area.

  In the motion information management apparatus, the invisible area may be an area having a different format from the visible area.

  The motion information management device may write the motion information in the temporary storage unit in the invisible area of the external storage medium when a predetermined condition is satisfied.

  In the operation information management device, the device to be managed may be a vehicle device, and the predetermined condition may be a condition according to a traveling state of the vehicle.

  The operation information management device may extract predetermined information from the operation information acquired from the managed device, and store the extracted operation information in the temporary storage unit.

  In order to solve the above problem, the present invention may be an operation information management program for causing a computer to execute the operation information management method. Further, the operation information management program may be recorded on a computer-readable recording medium. The function can be provided by causing the computer to read and execute the operation information management program of the recording medium.

  Here, the computer-readable recording medium refers to a recording medium that accumulates information such as data and programs by electrical, magnetic, optical, mechanical, or chemical action and can be read from the computer. . Examples of such a recording medium that can be removed from the computer include a flexible disk, a magneto-optical disk, a CD-ROM, a CD-R / W, a DVD, a DAT, an 8 mm tape, and a memory card.

  Further, there are a hard disk, a ROM (read only memory), and the like as a recording medium fixed to the computer.

  According to the present invention, it is possible to provide a technique for easily acquiring operation information by writing operation information from a temporary storage unit to an external storage medium.

Block diagram showing the configuration of an AVN integrated machine employing a motion information management device Hardware configuration diagram of operation information management device Functional block diagram of operation information management device Illustration of operation information management method Illustration of operation information management method The figure which shows the state of the cover which covers the connection part of the external storage medium 90 Explanatory drawing of the operation information management method of the modification 1 Explanatory drawing of processing to extract operation information Explanatory drawing of the operation information management method of the modification 2 Explanatory drawing of the operation information management method of the modification 2 Explanatory drawing of the operation information management method of the modification 3 Explanatory drawing of the operation information management method of the modification 4.

<overall structure>
First, an in-vehicle audio / visual navigation integrated machine (hereinafter referred to as an AVN integrated machine) equipped with the operation information management apparatus of the present invention will be described. The device to be managed is the AVN integrated device itself.

  FIG. 1 is a block diagram showing the configuration of an AVN integrated device.

  100 receives an input of a signal from each part of the AVN integrated machine or a connected external device, an operation instruction signal from each operating part based on a user's operation, and each part of the AVN integrated machine based on these signals, or A control unit that comprehensively controls external devices, which is configured by, for example, a microcomputer and operates according to a program stored in a memory such as a ROM.

  Reference numeral 101 denotes an external for reproducing data such as music and images recorded in the external storage medium 90, reading map data used for map display and route search in navigation, and writing data to the external storage medium 90. A medium recording / playback unit (including a writing unit) includes an interface corresponding to the external storage medium 90, a data buffer memory, a decoder for music / image data, and the like. Then, the music data / image data read from the external storage medium 90 by the external medium recording / playback unit 101 in response to a command from the control unit 100 is decoded into an audio signal / image signal by a decoder and is converted into an audio / image via the distribution circuit 108. Played.

  Further, in response to a command from the control unit 100, the external medium recording / playback unit 101 reads various data other than music data / image data, for example, map data and program upgrade data, from the external storage medium 90, and the control unit 100 reads the read data. Are used for purposes corresponding to the data, for example, for map display and route search in a navigation unit 130, which will be described later, version upgrade of programs, update of various data, and the like. As the external storage medium 90, for example, a USB memory, an SD memory card (trademark: a memory card conforming to the SD standard defined by the SD card association), or the like can be applied. In this case, the interface is a corresponding interface, that is, a USB memory interface. SD memory card interface will be applied.

  The apparatus of this embodiment is provided with an interface, a connector, a buffer memory, etc. corresponding to each so that both a USB memory and an SD memory card can be mounted. Music data and image data are stored in the USB memory. An area where a user can freely read and write with an audio device having a data writing function is provided, and music data and image data are recorded in the area. The SD memory card is provided with an area where map data can be read and written, and map data used for navigation is recorded. Note that the map data recorded on the SD memory card can be rewritten to new map data using a personal computer or the like in order to correspond to a newly created road or the like.

  Reference numeral 102 denotes a radio receiver that selectively receives a broadcast wave having a specific frequency from broadcast waves received by an antenna, demodulates and outputs an audio signal of the broadcast, and includes a tuning circuit, a demodulation / decoding circuit, and the like Is done. The radio receiving unit 102 is controlled by a control signal from the control unit 100 to perform various operations such as on / off of the radio receiving unit 102 and reception frequency selection (tuning).

Reference numeral 103 denotes a television (TV) receiver that selectively receives a broadcast wave of a specific frequency from broadcast waves received via the selector 113, demodulates it, and outputs an audio signal and an image signal of the broadcast. A demodulation circuit (data acquisition unit), a frame management circuit, a decoding circuit, and the like. Various operations such as ON / OFF of the TV receiver 103 and selection of a reception frequency (channel selection) are controlled by a control signal from the controller 100.

A disk playback unit 104 reads data stored on the disk with a pickup and outputs an audio signal and an image signal (for example, in the case of a DVD or BD (Blu-ray Disc)) based on the read data. It includes a pickup (data acquisition unit), a pickup / disk drive mechanism, a control circuit for the pickup / disk drive mechanism, a frame management circuit, a decoding circuit, and the like. The disc playback unit 104 is controlled by the control signal from the control unit 100 to perform various operations such as on / off and designation of the reading position.

  105 stores music data such as MP3 files, image data such as JPEG files, moving image data such as MPEG4, and the like on a hard disk (HD), which is a magnetic recording medium, and reads and outputs desired data from various stored data. The HD playback unit includes an HD drive, a data acquisition circuit that reads data from the HD drive, a frame management circuit, a decoding circuit, and the like. The HD playback unit 105 is controlled by the control signal from the control unit 100 to perform various operations such as on / off and selection of data to be read.

  130 displays the position of the host vehicle and the route to the destination on the map, and provides direction guidance such as a right or left turn by voice or the like at an intersection or the like, and traffic information, GPS information from the VICS information receiving unit 106 described later A navigation unit that obtains and displays own vehicle position information from the receiving unit 107 and provides route guidance to a destination. A CPU that performs various arithmetic processes for navigation and stores data for various processes. It is composed of a memory such as a RAM and the like, and its on / off and various operations are controlled in accordance with a control signal from the control unit 100.

  The navigation unit 130 is a so-called semiconductor memory map type navigation, reads map data from an external storage medium 90 connected to a connector, and uses it for map display and route search processing in the navigation function. As the external storage medium 90, a nonvolatile memory such as a flash memory such as an SD memory card is used. In addition, the navigation unit 130 is equipped with an interface capable of reading and writing data so that various data other than map data can be read and written on the external storage medium 90 according to a command from the control unit 100.

  A VICS information receiving unit 106 receives traffic information related to the traffic information communication system (VICS (registered trademark)) and outputs the received traffic information. A receiver (FM reception) receives data from the traffic information communication system. Machine, radio beacon receiver, optical beacon receiver), decoding circuit for decoding received data, and the like. Reference numeral 107 denotes a GPS information receiving unit that detects the position of the vehicle based on a GPS signal from a GPS (registered trademark) satellite and outputs the detected current location information. A GPS signal receiving circuit that receives the GPS signal; It is comprised from the calculating part which calculates the own vehicle position based on it.

  Reference numeral 119 denotes a camera that captures an image of the surroundings of the vehicle and inputs moving image data (video data and audio data) via the external audio / video input unit 118. Video data photographed by the camera 119 is displayed on the display unit 113 via the distribution circuit 108, the image adjustment circuit 109, and the image output unit 112, and is used for parking assistance or the like. The moving image data shot by the camera 119 may be recorded in the HD drive or the memory 115 in the HD playback unit 105 via the distribution circuit 108 for a drive recorder or the like.

Reference numeral 108 denotes various sources (external storage medium playback unit 101, radio reception unit 102, TV reception unit 103, disc playback unit 10) designated to be output by a control signal of the control unit 100.
4, a distribution circuit that outputs audio signals and video signals of the HD playback unit 105 and the navigation unit 130) to the audio adjustment circuit 110 and the image adjustment circuit 109, and is a switch group composed of electronic circuits such as relays or switching transistors. Composed.

  Reference numeral 109 denotes an image adjustment circuit that adjusts brightness, color tone, contrast, and the like of an input image signal according to a control signal of the control unit 100, and outputs each adjusted image signal. A memory that stores image data, an image It is composed of an arithmetic circuit such as a digital signal processor for arithmetic processing of data.

  Reference numeral 110 denotes a sound adjustment circuit that adjusts the volume and sound of an input sound signal according to a control signal of the control unit 100 and outputs the adjusted sound signal. A memory for storing sound data and arithmetic processing of image data It consists of an arithmetic circuit such as a digital signal processor, an amplification / attenuation circuit composed of transistors, resistors, capacitors, coils, etc., a resonance circuit, and the like. Reference numeral 111 denotes a speaker that outputs the audio signal input by the audio adjustment circuit 110 as audio.

  112 receives a video signal input from the image adjustment unit and a display image signal to be displayed on the display unit 113 from the control unit 100, performs processing such as image synthesis, and displays based on the processed image signal. An image output unit that drives the unit 113, for example, an image ASIC that is an arithmetic processing circuit specialized for an image that performs image processing by arithmetic processing, a video memory that stores image data for image processing / output, an image output And an image driving circuit for driving the display unit 113 based on image data stored in the video memory.

  The display unit 113 includes a touch panel 131, a liquid crystal panel 132, and a backlight 133. A video is drawn on the liquid crystal panel 132 by a video signal from the image output unit 112, and a video such as a moving image is displayed by the backlight 133 illuminating from behind. The display unit 113 displays an operation menu or the like on the liquid crystal panel 132, detects an operation selected by the user by touching the operation menu on the touch panel 131 superimposed on the liquid crystal panel 132, and detects the detected operation signal. Enter 100.

  The display unit 113 may be a flat panel display other than a liquid crystal panel, such as an organic EL display panel, a plasma display panel, a cold cathode flat panel display, or the like.

Reference numeral 114 denotes an operation unit for the user of the apparatus to perform various operations, and includes, for example, a push button switch, a rotation operation switch, a joystick, and the like. Reference numeral 115 denotes a memory (storage medium) that stores various types of data and control programs, and includes, for example, an HDD (Hard Disk Drive), a rewritable flash memory, and the like.

  116 is installed at a position away from the main body of the AVN unit installed on the instrument panel of the automobile, for example, near the armrest between the driver seat and the passenger seat, or on the steering wheel, and outputs the operation state of the input operation by the user In this example, a rotation operation, tilting operation, and pressing operation of the operation unit are detected by the remote operation unit (remote control). Such a remote operation unit is turned on / off by a rotary encoder that outputs a signal corresponding to the rotation operation amount / direction, a pressure sensor, a tilt sensor such as a joystick that outputs a signal corresponding to the tilt operation direction, and a pressing operation. It is composed of a push switch whose state changes. The operation signal detected by the remote control 116 is sent to the remote control transmission / reception unit 117 and input to the control unit 100 via the remote control transmission / reception unit 117.

  Reference numeral 120 denotes an ETC vehicle-mounted device that automatically pays a fee by communicating with a terminal on the ETC lane side in an ETC (registered trademark: Electronic Toll Collection) system.

Reference numeral 121 denotes a communication unit that communicates with other devices, and performs communication via, for example, a wireless LAN, a WiMAX (Worldwide Interoperability for Microwave Access) access network, or a mobile phone line.

<Configuration of operation information management device>
The external medium recording / reproducing unit 101 and the control unit 100 also function as a part of the operation information management apparatus 10 of the present embodiment.

  FIG. 2 is a schematic configuration diagram of the operation information management apparatus according to the present embodiment. The control unit 100 as the operation information management device 10 of this embodiment includes a CPU 1, a main memory 2, an input / output interface 3, and an auxiliary storage device 6.

  The main memory 2 is a main storage device that employs a volatile memory such as a DRAM in order to enable high-speed reading and writing from the CPU 1.

  The input / output interface 3 is an interface for inputting / outputting information between each unit of the AVN integrated device and the control unit 100.

  The auxiliary storage device 6 is a nonvolatile rewritable storage unit that stores data and programs, such as a flash memory. In the present embodiment, the non-volatile memory is referred to as a non-volatile memory 6 hereinafter.

  The CPU 1 is an arithmetic processing unit that executes processing according to a program. In the present embodiment, according to a program (operation information management program) for executing an operation information management method, an error detection unit, an operation information acquisition unit, and a write determination unit The functions of the write control unit and the format control unit are realized. FIG. 3 is a functional block diagram when the operation information management method is executed.

  The error detection unit 81 detects the occurrence of a malfunction (error) and notifies the operation information acquisition unit 82 of the occurrence. The error detection unit 81 detects an error such as a CPU exception that prevents the CPU 1 from continuing execution of an instruction (fatal error) or an error that prevents the application software from continuing the specified process, such as a communication error.

  When the occurrence of an error is notified, the operation information acquisition unit 82 acquires the operation information from the managed device and stores it in the temporary storage unit. The temporary storage unit is, for example, a nonvolatile memory 6. The temporary storage unit is not limited to the nonvolatile memory 6 and may be the main memory 2. For example, the operation information acquisition unit 82 writes the acquired operation information in an area secured as a buffer of the nonvolatile memory 6 and writes this index in the buffer management area. When the buffer becomes full, the operation information acquisition unit 82 refers to the index, and sequentially overwrites old operation information and writes new operation information.

  The devices to be managed include, for example, a camera 119, an external audio / video input unit 118, a distribution circuit 108, an external medium recording / reproducing unit 101, a radio receiving unit 102, a TV receiving unit 103, a selector 113, a disc reproducing unit 104, HD playback unit 105, navigation unit 130, VICS information reception unit 106, GPS information reception unit 107, memory 115, operation unit 114, ETC on-board unit 120, control unit 100, remote control transmission / reception unit 117, communication unit 121, audio adjustment circuit 110, an image adjustment circuit 109, an image output unit 112, and a display unit 113. The device to be managed is not limited to this, and any device that can transmit operation information to the control unit 100 may be used. The device to be managed may be a device other than the AVN integrated device as long as the operation information can be acquired by the operation information acquisition unit.

  The write determination unit 83 determines whether or not a predetermined write condition is satisfied. Here, the predetermined write condition is a condition in which, when the write control unit 84 writes operation information to the external storage medium 90, the possibility of write failure is low. For example, the condition is such that it can be determined that the non-volatile memory is not extracted or the power supply voltage is unlikely to decrease. A specific example of the write condition will be described later.

  The writing control unit 84 controls the external medium recording / reproducing unit (writing unit) 101 and operates in the non-volatile memory (temporary storage unit) 6 on the invisible area of the external storage medium 90 having the visible area and the invisible area. Information is written under predetermined conditions.

  The format control unit controls the external medium recording / reproducing unit 101 when an external storage medium 90 such as a USB memory or an SD memory card is set in the external medium recording / reproducing unit 101 and the user gives an instruction for formatting. A plurality of partitions are provided in the storage medium 90, each partition is formatted in a predetermined format, and a visible region and an invisible region are created.

  In the example of FIG. 3, the storage area of the external storage medium 90 is divided into two partitions, and one partition (partition 0) is formatted in a format generally used by a personal computer, for example, FAT (File Allocation Table) 32. And create a visible region.

  Then, the other partition (partition 1) is formatted in a special format to create an invisible area. Here, the visible area is a storage area that is formatted in a format recognized by a general computer (personal computer) used by the user. As described above, the user uses a personal computer to store music data, image data, and map data. It is an area where you can read and write freely. On the other hand, the invisible area is a storage area formatted in a format that is not recognized by a general computer used by the user, and is an area (operation area) for storing operation information.

  Note that this process does not completely make the data recorded in the invisible area visible (accessible), but invisible (inaccessible) to a user's personal computer that does not support the special format of the invisible area. In the invisible area, the own apparatus (the operation information management apparatus 10) corresponding to the format (format) of the invisible area and the computer that analyzes the operation information can access the invisible area.

  In this way, by storing operation information in an invisible area that is not recognized by the user's personal computer, it is possible to prevent the operation information from being erroneously changed (for example, deleted) when the user performs an operation on the visible area. it can.

  Therefore, the invisible area may not be accessible from the user's personal computer to the extent that the user does not change it by mistake. The difficulty level of access varies depending on the difficulty of obtaining information in the format adopted for the invisible area and the complexity of the format (which affects the difficulty of analysis), so the format adopted for the invisible area according to the desired difficulty level. Is arbitrarily determined.

  The control unit 100 as the operation information management apparatus 10 of the present embodiment shown in FIG. 2 is a computer in which the CPU 1 executes processing according to software (operation information management program). By this processing, the error detection unit 81 and the operation information The functions of the acquisition unit 82, the write determination unit 83, the write control unit 84, and the format control unit are realized, but not limited thereto, the error detection unit 81, the operation information acquisition unit 82, the write determination unit 83, the write control unit 84, An apparatus in which the function of the format control unit is realized by dedicated hardware may be used.

Here, the hardware is, for example, FPGA [Field Programmable Gate Array], AS.
It can also be realized by a circuit such as an IC [Application Specific Integrated Circuit] or an LSI [Large Scale Integration]. The hardware can also be realized by basic circuits such as an IC [Integrated Circuit], a gate array, a logic circuit, a signal processing circuit, and an analog circuit.

  As the logic circuit, for example, an AND circuit (logical product circuit), an OR circuit (logical sum circuit), a NOT circuit (negative circuit), a NAND circuit (negative logical product circuit), a NOR circuit (negative logical sum circuit), There are flip-flop circuits and counter circuits. The signal processing circuit includes a circuit that performs, for example, addition, multiplication, division, inversion, product-sum operation, differentiation, and integration on a signal value. Analog circuits include, for example, circuits that perform amplification, addition, multiplication, differentiation, and integration on signal values.

<Operation information management method>
4 and 5 are explanatory diagrams of an operation information management method executed by the control unit 100 in the AVN integrated apparatus having the above configuration. 4 and 5 show an example of how to deal with an error in which the CPU 1 cannot continue executing an instruction, that is, an error that requires a reboot of the AVN integrated device (hereinafter referred to as a fatal error). FIG. 5 is a flow of processing for saving operation information to a nonvolatile memory and rebooting when an error is detected, and FIG. 5 is a flow of processing for writing operation information from the nonvolatile memory to an external recording medium after rebooting.

  The processing in FIGS. 4 and 5 is repeatedly executed by the CPU 1 when the ignition key of the vehicle is turned on or in the ACC position and electric power is supplied.

  When the processing of FIG. 4 is started, the CPU 1 detects whether or not a fatal error has occurred in executing the instruction (S10). If a fatal error has not occurred, the process ends (S10, No), and the CPU 1 repeatedly executes the process of FIG. 4 while power is supplied while the ignition key is in the ON or ACC position. . This fatal error is an error that occurs due to a program bug, memory overflow, or the like and requires a reboot. For example, when the CPU 1 has a specification that the address must be a multiple of 2 in order to access with a 16-bit width, when an instruction is executed from an odd address or data is accessed from an odd address, division by 0 is performed. When a predetermined state such as a so-called CPU exception occurs when trying to do so, it is detected that a fatal error has occurred outside the normal operation. It should be noted that what state is detected as a fatal error is not limited to the above, but can be set according to the specifications of the CPU 1 or the like.

  When a fatal error occurs (S10, Yes), the CPU 1 analyzes the error content and identifies the type of error (S20). For example, if the address must be a multiple of 2 and an instruction is executed from an odd address, an alignment exception (instruction address error) occurs, data is accessed from an odd address, or read-only When an attempt is made to write to an area specified in the above, an address exception occurs when an attempt is made to access an area where no memory or device exists. Further, when an undefined instruction in the delay slot is executed, a slot illegal instruction exception is executed. When an undefined instruction other than the delay slot is executed, a general illegal instruction exception is set.

Next, the CPU 1 acquires log data such as an error history and an operation history as operation information from the device to be managed (S30). In the example of FIG. 4, since the management target is the control unit 100, operation information is acquired from the main memory 2 or the register of the CPU 1. The operation information acquired here is, for example, the function that executed the instruction that caused the error, the function that called it, and the function that was called before the error occurred (call). Stack), the state of the stack memory storing local variables, and the state (register state) of the stack pointer and address register.

  Further, the CPU 1 writes the acquired operation information in an area (FIG. 3) secured as a buffer of the nonvolatile memory 6, and writes this index in the buffer management area. In addition, the CPU 1 sets the fatal error occurrence flag to ON by writing the fatal error occurrence flag in a predetermined storage area such as the nonvolatile memory 6 (S40).

  Then, the CPU 1 reboots (restarts) the AVN integrated device (S50) and ends the processing of FIG.

  When the processing of FIG. 5 is started after the AVN integrated device is rebooted, the CPU 1 determines whether or not a fatal error has occurred and the operation information has been saved (while the operation information is being saved) (S60). Specifically, a predetermined area of the nonvolatile memory 6 is accessed to determine whether or not a fatal error occurrence flag is ON.

  If the operation information is being saved (S60, Yes), the CPU 1 determines whether a predetermined write condition is satisfied (S70).

  When the write condition is satisfied (S70, Yes), the CPU 1 refers to the buffer management area of the nonvolatile memory 6, reads the operation information that has not been written to the external storage medium 90 from the buffer, and writes it to the invisible area of the external storage medium 90. (S80). The operation information stored in the non-volatile memory 6 may be written to the external storage medium 90 at a time. However, the operation information stored in the buffer is divided into a plurality of blocks and written to the external storage medium 90 in units of blocks. You can go. For example, when the minimum writing unit of the external storage medium 90 is one block (one stage) and divided into a plurality of blocks (a plurality of stages) and the writing condition is satisfied in step S70, the CPU 1 stores the operation information for one block on the external storage medium. 90, the index of this block is updated to the written state, and the flow of FIG. 5 is completed. Then, the CPU 1 repeats the process of FIG. 5 and determines again whether or not the write condition is satisfied in step S70. If the write condition is satisfied, the operation information of the next block is obtained by referring to the index. It is stored in the external storage medium 90. When all the operation information is written from the buffer of the nonvolatile memory 6 to the external storage medium 90, the CPU 1 turns off the fatal error occurrence flag by deleting the fatal error occurrence flag in the predetermined area. End the flow.

  If it is determined in step S60 that the operation information is not being saved (S60, No), or if it is determined in step S70 that the write condition is not satisfied (S70, No), the process is terminated and the ignition key is pressed. The CPU 1 repeatedly executes the process of FIG. 5 while the power is supplied in the ON or ACC position.

  Here, the predetermined write condition is, for example, whether or not the cover that covers the connection portion of the external storage medium 90 in the external medium recording / reproducing unit 101 is closed, that is, whether or not the external storage medium 90 cannot be taken out. is there. FIG. 6 is a diagram illustrating a state of a cover that covers the connection portion of the external storage medium 90. In the example of FIG. 6, the display unit 113 also serves as a cover that covers the connection part (insertion opening) 71, FIG. 6A is in a closed state, and FIG. 6B is the cover. It is in an open state. In a normal state in which a navigation map is displayed on the display unit 113, that is, when the external storage medium 90 is not inserted or removed, the display unit 113 displays the front side (occupant side) of the AV integrated device as shown in FIG. Covers the display surface toward the passenger.

  When inserting / removing the external storage medium 90, the pointing member 78 hinged to the lower end of the display unit 113 protrudes forward (occupant side) together with the lower end of the display unit 113, and is rotated by the hinge (not shown). When the display unit 113 tilts backward about the moving shaft 70 and falls down with the display surface facing upward, the insertion slot (memory slot) 71 of the external storage medium 90 disposed at the back of the display unit 113 is exposed. By inserting the external storage medium 90 into the insertion slot 71, the read / write contact of the external storage medium 90 is electrically connected to the connector of the external medium recording / playback unit 101, and the external storage medium by the external medium recording / playback unit 101 It is possible to write operation information to 90 and format the external storage medium 90.

  If the display unit 113 covers the insertion slot 71 of the external storage medium 90 (FIG. 6A), the insertion slot 71 is hidden and the user pulls out the external storage medium 90 from the insertion slot 71. Therefore, even if operation information is written to the external storage medium 90, there is no possibility that the external storage medium 90 is accidentally removed and the external storage medium 90 is damaged.

  Therefore, the CPU 1 detects the open / closed state of the cover of the insertion slot 71, that is, the display unit 113 by the sensor 73, and determines that the writing condition is satisfied if the display unit 113 is in the closed state (FIG. 6A). If the display unit 113 is open (FIG. 6B), it is determined that the write condition is not satisfied.

  When the display unit (cover) 113 is closed (FIG. 6A), the back surface of the display unit 113 presses the protrusion 73A of the sensor (press switch) 73 and the display unit 113 is opened (FIG. 6). 6 (B)), since the projection 73A of the sensor 73 is released, the sensor 73 detects whether the projection 73A is pressed or released, so that the display unit (cover) 113 is opened or closed. Can be determined. The sensor 73 is not limited to the push switch, and can detect the open / closed state of the display unit (cover) 113, such as a rotary encoder that detects the opening degree of the hinge or a photo detector that detects the position of the display unit 113 or the pointing member 78. Any sensor can be used.

  Further, as the predetermined writing condition, whether to write or not may be determined depending on whether or not the traveling speed of the vehicle is equal to or higher than a threshold value.

  In other words, if the vehicle is traveling at a speed exceeding the threshold value, even if the writing of the operation information is started, cranking is performed in the middle and voltage fluctuation does not occur, and there is no problem in writing the operation information. I can judge. In other words, if the speed of the vehicle is below the threshold and writing of the operation information starts, there is a possibility that the cranking will be performed in the middle and the voltage will fluctuate greatly, and the writing may fail or the worst In this case, the external storage medium 90 may be damaged, so that it is determined that it is not suitable for writing operation information.

  Note that a plurality of threshold values and hysteresis may be provided. For example, when the threshold value is equal to or higher than the first threshold value (for example, 30 km / h) from the stop state, it is determined that writing is possible. Control that disables writing when the threshold value is less than 10 km / h is also suitable.

  The predetermined write condition is not limited to the above condition, and may be any condition that does not cause a write failure or damage to the external storage medium 90. These write conditions can be used in combination.

  Accordingly, the operation information can be safely written to the external storage medium 90 at any time, and a large amount of operation information can be acquired without being limited by the storage capacity of the nonvolatile memory 6.

  Then, when it becomes necessary to verify the malfunction of the AVN integrated device, the user sends the external storage medium 90 in which the operation information is written in the invisible area by the above-described processing to the maintenance person, so that the maintenance person can smoothly perform the malfunction. You can take action.

  If the invisible area is formatted with a specific file system different from FAT or NTFS as described above, the invisible area can be made invisible on most users' computers and access can be made difficult, thereby achieving the object. In this case, the file system (specific file system) in the invisible area may be arbitrarily set to a file system other than FAT or NTFS, such as HFS or XFS.

  Further, the file system in the visible region may be HFS or HFS + in addition to FAT and NTFS. In this case, the invisible area file system is an XFS or ZFS, for example, having a high degree of difficulty in access other than the file system in the visible area such as HFS or HFS +. As a result, the invisible region can be made invisible on the computer of more users.

  Furthermore, in addition to the above, the file system in the visible region may be JFS, XFS, ext2, ext3, ext4, ReiserFS. In this case, the file system in the invisible area is a file system having a high access difficulty other than the file system in the visible area such as JFS, XFS, ext2, ext3, ext4, ReiserFS, for example, UFS2 or ZFS.

  Note that the invisible area may be formatted in a unique format, and the operation information stored in the invisible area may be read with a dedicated tool.

<Modification 1>
FIG. 7 is an explanatory diagram of a modification of the above embodiment. In this modification, the configuration in which the operation information acquisition unit 82 (FIG. 3) extracts information with high priority from the information received from the management target device as operation information and stores the operation information in the nonvolatile memory 6 is as described above. It is different from the embodiment. Other configurations are the same.

  The processing of FIG. 7 is repeatedly executed by the CPU 1 when the ignition key of the vehicle is turned on or in the ACC position and power is supplied to the AVN integrated device of this modification.

  When the processing of FIG. 7 is started, the CPU 1 detects whether or not a fatal error has occurred in executing the instruction (S10). If a fatal error has not occurred, the process ends (S10, No), and the CPU 1 repeatedly executes the process of FIG. 7 while power is supplied while the ignition key is in the ON or ACC position. . This fatal error is an error that occurs due to a program bug, memory overflow, or the like and requires a reboot. For example, when the CPU 1 has a specification that the address must be a multiple of 2 in order to access with a 16-bit width, when an instruction is executed from an odd address or data is accessed from an odd address, division by 0 is performed. When a predetermined state such as a so-called CPU exception occurs when trying to do so, it is detected that a fatal error has occurred outside the normal operation. It should be noted that what state is detected as a fatal error is not limited to the above, but can be set according to the specifications of the CPU 1 or the like.

When a fatal error occurs (S10, Yes), the CPU 1 analyzes the error content and identifies the type of error (S20). For example, if the address must be a multiple of 2 and an instruction is executed from an odd address, an alignment exception (instruction address error) occurs, data is accessed from an odd address, or read-only When an attempt is made to write to an area specified in the above, an address exception occurs when an attempt is made to access an area where no memory or device exists. Further, when an undefined instruction in the delay slot is executed, a slot illegal instruction exception is executed. When an undefined instruction other than the delay slot is executed, a general illegal instruction exception is set.

  Next, the CPU 1 acquires log data such as an error history and an operation history from the managed device (S30). In the example of FIG. 7, since the management target is the control unit 100, log data is acquired as operation information from the main memory 2 or the register of the CPU 1.

  Further, the CPU 1 narrows down the operation information by extracting predetermined information from the operation information acquired in step S30 (S35). FIG. 8 is an explanatory diagram of processing for narrowing down the operation information. As shown in FIG. 8, the log data 61 acquired in step S30 is obtained by reading out information stored in a predetermined storage area such as a register of the CPU 1 or a kernel memory when an error occurs, and includes various information. The size is large. Therefore, the CPU 1 extracts predetermined information such as a call stack, an event state, a task state, a register state, and the like based on an ID attached to each information included in the log data 61 and sets it as extracted operation information 62.

  Here, the call stack is information indicating the history of the function that was called up until the error occurred, such as the function that executed the instruction that caused the error, the function that called it, and the function that called this function. is there.

  The event state is information such as interrupt prohibition, message, error information, and the like.

  The task state is information indicating a state such as whether the task is RUN or SLEEP.

  The register status is information indicating the register status of the CPU (CPU 1 in the case of the control unit 100) of each device.

  By extracting these pieces of information to obtain the extraction operation information 62, the amount of information stored in the nonvolatile memory 6 can be reduced to tens of times.

  Next, the CPU 1 writes the extraction operation information 62 in the area (FIG. 3) secured as the buffer of the nonvolatile memory 6 and writes this index in the buffer management area. In addition, the CPU 1 sets the fatal error occurrence flag to ON by writing the fatal error occurrence flag in a predetermined storage area such as the nonvolatile memory 6 (S40).

  Then, the CPU 1 reboots (restarts) the AVN integrated device (S50) and ends the processing of FIG.

  The process of writing the extraction operation information (operation information) from the nonvolatile memory 6 to the external storage medium 90 after rebooting the AVN integrated device is the same as FIG.

  As described above, according to the first modification, since the amount of operation information written in the built-in nonvolatile memory 6 is reduced, the time for writing from the nonvolatile memory 6 to the external storage medium 90 is shortened, and writing is performed in the middle. The possibility of interruption is reduced, and writing to the external storage medium 90 can be ensured.

Further, since the amount of motion information is reduced, the motion information for a longer time can be buffered in the non-volatile memory 6 and the data retention time becomes longer, so the vehicle speed does not increase due to traffic jams or the like. Even when there are fewer opportunities to satisfy the condition, the operation information can be reliably stored.

<Modification 2>
4 and 7, the operation information is stored in the temporary storage unit (nonvolatile memory 6) when an error occurs. In the second modification, the operation information is always stored in the temporary storage unit (nonvolatile memory 6). An example is shown in which operation information is written from the temporary storage unit to the external storage medium 90 when an error occurs.

  9 and 10 are explanatory diagrams of the operation information management method of the second modification. The processing in FIGS. 9 and 10 is repeatedly executed by the CPU 1 when the ignition key of the vehicle is turned on or in the ACC position and power is supplied to the AVN integrated device of the present modification.

  When the process of FIG. 9 is started, the CPU 1 acquires log data such as an error history and an operation history from the managed device (S30). In the example of FIG. 9, since the management target is the control unit 100, log data is acquired as operation information from the main memory 2 or the register of the CPU 1.

  Further, the CPU 1 extracts predetermined information from the operation information acquired in step S30 (S35).

  Next, the CPU 1 writes the extraction operation information 62 in the area (FIG. 3) secured as the buffer of the nonvolatile memory 6, writes this index in the buffer management area (S40A), and ends the processing in FIG.

  When the processing of FIG. 10 is started, the CPU 1 detects whether or not a fatal error has occurred in executing the instruction (S10). If a fatal error has not occurred, the process ends (S10, No), and the CPU 1 repeatedly executes the process of FIG. 10 while power is supplied while the ignition key is in the ON or ACC position. .

  When a fatal error has occurred (S10, Yes), the CPU 1 writes the fatal error occurrence flag in a predetermined storage area such as the nonvolatile memory 6 to turn on the fatal error occurrence flag (S40B).

  Then, the CPU 1 reboots (restarts) the AVN integrated device (S50) and ends the processing of FIG.

  The process of writing the extraction operation information (operation information) from the nonvolatile memory 6 to the external storage medium 90 after rebooting the AVN integrated device is the same as FIG.

  According to the second modification, since the operation information is always stored, even when the operation of the AVN integrated device becomes unstable when an error occurs, the operation information can be reliably acquired. .

  In the second modification, the operation information to be extracted and stored in the nonvolatile memory 6 in step S35 of FIG. 9 is narrowed down. However, the present invention is not limited to this, and step S35 is omitted and acquired in step S30. The operation information may be written in the nonvolatile memory 6 in step S40A.

In the second modification, when the occurrence of a fatal error is detected in step S10 of FIG. 10, the AVN integrated machine is rebooted (S50) without acquiring the operation information. Instead of this process, the process of FIG. 7 may be performed. That is, the operation information is always stored in the non-volatile memory 6 by the process of FIG. 9, and the operation information at the time of error occurrence is stored in the non-volatile memory 6 by the process of FIG.

<Modification 3>
In the third modification, when an error occurs, the presence / absence of the external storage medium 90 is determined. If there is no external storage medium 90, the operation information to be stored in the nonvolatile memory 6 is narrowed down. An example in which information is stored in the nonvolatile memory 6 without narrowing down will be described. Since other configurations are the same as those in the above-described embodiment, the same elements are denoted by the same reference numerals, and redundant description is omitted.

  FIG. 11 is an explanatory diagram of the operation information management method according to the third modification. The processing in FIG. 11 is repeatedly executed by the CPU 1 when the ignition key of the vehicle is turned on or in the ACC position and power is supplied to the AVN integrated device of the present modification.

  When the processing of FIG. 11 is started, the CPU 1 detects whether or not a fatal error has occurred in executing the instruction (S10).

  When a fatal error occurs (S10, Yes), the CPU 1 determines whether the external storage medium 90 is present, for example, the external storage medium 90 is inserted into the insertion slot 71 (FIG. 6B) of the external medium recording / playback unit 101. It is determined whether or not (S15).

  When the external storage medium 90 is present (S15, Yes), the CPU 1 analyzes the error content in the same manner as the flow of FIG. 4 (S20), acquires operation information (S30), and stores it in the nonvolatile memory 6 ( S40), the AVN integrated device is rebooted (S50).

  On the other hand, when there is no external storage medium 90 (S15, No), the CPU 1 analyzes the error content (S20), acquires operation information (S30), and narrows down to predetermined operation information, as in the flow of FIG. (S35), the data is stored in the nonvolatile memory 6 (S40), and the AVN integrated device is rebooted (S50).

  The process of writing the extraction operation information (operation information) from the nonvolatile memory 6 to the external storage medium 90 after rebooting the AVN integrated device is the same as FIG.

  As described above, according to the third modification, a large amount of operation information is stored in the external storage medium 90 via the nonvolatile memory 6 without being narrowed down when the external storage medium 90 is provided. If there is no error, the operation information required for error analysis can be narrowed down and stored in the nonvolatile memory 6. That is, an appropriate operation information management method can be selectively executed according to the presence or absence of the external storage medium 90.

<Modification 4>
FIG. 12 shows an example in which an application level error, that is, an error that does not require rebooting the AVN integrated device has occurred.

  The processing in FIG. 12 is repeatedly executed by the CPU 1 when the ignition key of the vehicle is turned on or in the ACC position and electric power is supplied.

When the process of FIG. 12 is started, the CPU 1 detects whether or not an error has occurred in executing the instruction (S110). If a fatal error has not occurred, the process is terminated (S110, No), and the CPU 1 repeatedly executes the process of FIG. 12 while power is supplied while the ignition key is in the ON or ACC position. . This error occurs due to a bug in the program, an abnormality in the input / output signal, and the like, and other processing such as acquisition and writing of operation information is possible without rebooting the AVN integrated device itself. For example, the connection between the communication unit 121 and a radio base station (not shown) cannot be established, or there is no response (acknowledgement) to the transmission signal, the broadcast wave received by the TV receiver 103 is weak, and the video cannot be decoded. When the music file format read by the medium recording / playback unit 101 does not support the decoder and cannot be played back, the CPU 1 detects it as an error. It should be noted that what kind of state is detected as an error may be arbitrarily set according to the specification of each application. Note that error detection (S110) is not included in the flow of FIG. 12, but error conditions are defined on the program of each application, and when an error occurs, the processing of FIG. It is good also as composition to do.

  When an error occurs (S110, Yes), the CPU 1 analyzes the error content and identifies the type of error (S120). For example, an error code is assigned for each error type, stored as an error table, and an error code corresponding to the error state detected in step S110 is specified from the error table.

  Next, the CPU 1 acquires log data such as an error history and an operation history as operation information from the device to be managed (S130). For example, when the management target is the control unit 100, the operation information is acquired from the main memory 2 or the register of the CPU 1. The operation information acquired here is, for example, the function that executed the instruction that caused the error, the function that called it, and the function that was called before the error occurred (call). Stack), the state of the stack memory storing local variables, and the state (register state) of the stack pointer and address register.

  Further, the CPU 1 writes the acquired operation information in the area (FIG. 3) secured as the buffer of the main memory 2, and writes this index in the buffer management area (S140). In the flow of the fourth modification, since reboot is not involved, operation information can be temporarily stored in the volatile main memory 2. For example, the minimum writing unit of the external storage medium 90 is one block (one stage), and the operation information of a plurality of blocks (a plurality of stages) is temporarily stored in the buffer of the main memory 2. If the external storage medium 90 is an SD memory card, 512 kbits are made into one block, and about 10 blocks of operation information is temporarily stored, so that about 10 hours of operation information can be stored in the main memory 2 as a temporary storage unit. it can. Also in the fourth modification, the temporary storage unit is not limited to the main memory 2 and may be the nonvolatile memory 6.

  Then, the CPU 1 determines whether or not a predetermined write condition is satisfied (S170).

When the write condition is satisfied (S170, Yes), the CPU 1 refers to the buffer management area of the main memory 2, reads the operation information of the block not written to the external storage medium 90 from the buffer, and puts it in the invisible area of the external storage medium 90. Write (S180). The operation information stored in the buffer of the main memory 2 may be written to the external storage medium 90 at a time, but may be written to the external storage medium 90 block by block. For example, when the write condition is satisfied in step S170, the CPU 1 writes the operation information for one block in the external storage medium 90, updates the index of this block to “written”, and ends the flow of FIG. Then, the CPU 1 repeats the process of FIG. 12 and determines again whether or not the write condition is satisfied in step S170. If the write condition is satisfied, the operation information of the next block is obtained by referring to the index. It is stored in the external storage medium 90. When all the operation information is written from the buffer of the main memory 2 to the external storage medium 90, the CPU 1 ends the flow of FIG.

  In the example of FIG. 12, the operation information is acquired and written in the temporary storage unit in the same manner as the processing in FIGS. 4 and 5, but the predetermined operation information is obtained from the operation information acquired in step S130 as in the processing in FIG. It is good also as a structure which extracts and narrows down.

  Further, similarly to FIG. 11, the operation information may be narrowed down when there is no external storage medium 90, and the operation information may be stored in the temporary storage unit without being narrowed down when the external storage medium 90 is present.

100 control unit 101 external medium recording / reproducing unit (writing unit)
1 CPU
2 Main memory 3 Input / output interface 6 Non-volatile memory

Claims (7)

Obtaining operation information related to the operation of the device from the device to be managed;
Storing operation information related to the operation of the device in a temporary storage unit;
Writing operation information related to the operation of the device in the temporary storage unit to an operation area related to the operation of the device in an external storage medium, and an operation information management method comprising:
A motion information management method characterized in that, among the storage areas of the external storage medium, the motion area is an invisible area and a non-visible area is a visible area.   The operation information management method according to claim 1, wherein the invisible area is an area having a format different from that of the visible area.   The operation information management method according to claim 1 or 2, wherein the operation information in the temporary storage unit is written in the invisible area of the external storage medium when a predetermined condition is satisfied.   The operation information management method according to claim 1, wherein the device to be managed is a vehicle device, and the predetermined condition is a condition according to a traveling state of the vehicle.   The operation information according to any one of claims 1 to 4, further comprising a step of extracting predetermined information from the operation information acquired from the device to be managed, and storing the extracted operation information in the temporary storage unit. Management method. An operation information acquisition unit that acquires operation information related to the operation of the device from the device to be managed;
A temporary storage unit that stores operation information related to the operation of the device;
A writing unit that writes operation information related to the operation of the device in the temporary storage unit to an operation region related to the operation of the device in the external storage medium;
An operation information management device comprising:
An operation information management apparatus characterized in that, among the storage areas of the external storage medium, the operation area is an invisible area, and a non-invisible area is a visible area. Obtaining operation information related to the operation of the device from the device to be managed;
Storing operation information related to the operation of the device in a temporary storage unit;
Writing operation information related to the operation of the device in the temporary storage unit into an operation area related to the operation of the device in the external storage medium;
Is an operation information management program for causing a computer to execute
An operation information management program characterized in that, among the storage areas of the external storage medium, the operation area is an invisible area, and a non-invisible area is a visible area.

Images