JP2013086530A - Law verification system of application for vehicle - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a law verification system of an application for vehicle that can maintain appropriateness of an application program for vehicle through a so-called dynamic law verification.SOLUTION: A meter control device 120 configuring a vehicle 100 is provided with a law verification mode-operating module 124 for operating in a mode for verifying law compliance relating to the application program for vehicle based on a law verification setting file 125 which is updated corresponding to the concerned laws. The law verification mode-operating module 124 verifies whether an operation result of the application program for vehicle delivered from a managing center 200 is compliant to the prescribed laws. Further, the law verification mode-operating module 124 verifies whether result of the application program for vehicle is compliant to the prescribed laws when the laws to which compliance is required changes by moving to a traveling area with different laws or amending the laws.

Description

  The present invention relates to a regulation verification system for a vehicle application that is useful when applied to verification of legal compliance for the operation result of a vehicle application installed in an in-vehicle device mounted on a vehicle.

  In general, various application programs for vehicles are installed in in-vehicle devices such as information terminals such as navigation systems mounted on vehicles and in-vehicle control devices that control various devices. Various processes such as vehicle control are performed.

  Recently, a system for managing such a program at a center and distributing it to a vehicle has been developed. In this system, a program for adding to or updating an in-vehicle device is distributed from the center to the in-vehicle device. Then, when such a program is installed in the in-vehicle device, a function that can be executed by the in-vehicle device is added, or a program installed in advance in the in-vehicle device is updated.

  On the other hand, when the program distributed from the center to the in-vehicle device is not adapted to the operating environment such as the memory and central processing unit (CPU) provided in the in-vehicle device, the program cannot be properly executed on the in-vehicle device. In addition, some programs that can be added and updated later in this way, for example, display an image or text that draws the driver's attention on a display device provided in the passenger compartment. If a simple image or text is displayed on the display device, there is a risk of inconvenience such as hindering the driver's vehicle operation. That is, there are not a few programs that are not suitable for execution depending on the operating environment of the in-vehicle device and the traveling state of the vehicle.

  Therefore, for example, in the system described in Patent Document 1, when distributing a program such as a vehicle application program, the program distributed to the in-vehicle device is adapted to the operating environment, that is, the memory or the central processing unit provided in the in-vehicle device. I am trying to verify that. As a result, the operation-verified program is distributed to the in-vehicle device, and the reliability of the execution is ensured. In the system described in Patent Document 1, attribute information including the operation conditions and processing contents is associated with a program distributed from the center, and the program associated with the attribute information is distributed to the vehicle-mounted device. Then, in an in-vehicle device to which such a program is distributed, it is determined whether the operating condition of the program is satisfied based on attribute information associated with the program, and only a program that conforms to the operating condition is determined based on the determination result. Execute. As a result, for example, when attribute information such as “running” as the operation condition of the program and “program execution stop” as the processing content are associated, the state of the vehicle changes from the stop state to the running state. Program execution will be interrupted. That is, while the vehicle is running, the execution of the program that hinders the driver's vehicle operation is suppressed.

Japanese Patent Laying-Open No. 2005-075314

  By the way, for example, an application program that changes the display mode of a vehicle instrument panel needs to display various information in a mode that complies with laws and regulations. Need to be verified. Therefore, usually, for example, in the creation stage and distribution stage of an application program, the application program and its operation results are verified to comply with various laws and regulations in each country. It is also envisaged that the vehicle moves to an area with different regulations. In such a case, even when the application program is installed on the vehicle-mounted device, even if it complies with the law, it will not meet the law later or dynamically, and the appropriateness as the application program for the vehicle will be maintained. It becomes difficult.

  Even if the system described in Patent Document 1 can be adapted to the operating environment or verified as an application program, the verified application program and its operation results are always in compliance with the laws and regulations required there. Not necessarily.

  The present invention has been made in view of such circumstances, and the purpose of the present invention is to regulate vehicle application regulations that can maintain their appropriateness through dynamic legal verification of operation results of vehicle applications. To provide a verification system.

Hereinafter, means for solving the above-described problems and the effects thereof will be described.
The invention described in claim 1 is a vehicle application legal verification system that verifies compliance with the legal regulations stipulated with respect to the operation result of the vehicle application program installed in the vehicle-mounted device mounted on the vehicle, A regulation verification mode operation unit that operates in a mode for verifying whether or not the regulation prescribed for the operation result of the vehicle application program is based on the regulation data updated in accordance with the relevant regulation; The gist is to provide.

  According to the said structure, it is verified by the said regulation verification mode operation | movement part whether the regulation prescribed | regulated with respect to the operation result of the application program for vehicles is compliant. For this reason, it becomes possible to verify the compliance of the vehicle application program on the vehicle side, and whether or not the operation result of the program conforms to the law even after the vehicle application program is once installed in the in-vehicle device. This can be verified on the vehicle side. As a result, even if the laws and regulations to be complied with are changed, it is possible to determine whether or not the laws are compliant with the vehicle alone through the verification.

  Generally, verification of a vehicle application program is performed on the provider side of the program. In this case, simulation is performed on a system such as a hardware-in-the-loop system (HILS), for example, assuming the environment of the entire in-vehicle system including the in-vehicle device as well as the in-vehicle device alone in which the vehicle application program is installed. . However, it is not feasible to reproduce an extremely complicated vehicle environment and to reproduce such an in-vehicle environment for each regulation. On the other hand, according to the above configuration, since the legal compliance verification is performed by the legal verification mode operation unit on the operation result of the vehicle application executed on the actual vehicle, the vehicle application program providing side verifies There is no need to prepare the necessary vehicle environment. Moreover, according to the said structure, since the verification of the operation result of a vehicle application can be performed on an actual vehicle, it becomes possible to verify a vehicle application under the actual vehicle environment. This also improves the verification accuracy while reducing the verification load on the vehicle application provider side.

  According to a second aspect of the present invention, there is provided a vehicle application legal verification system according to the first aspect, wherein a normal mode operation unit that processes a vehicle application program verified in compliance with the legal regulations, and a process of the vehicle application program. An operation control unit that distributes the subject to the normal mode operation unit and the legal verification mode operation unit, and the operation control unit is added to the unverified vehicle application program and the in-vehicle device when the vehicle application program is distributed. The gist is to distribute the installed vehicle application program to the regulation verification mode operation unit.

  According to the above configuration, the processing subject of the vehicular application program is selectively distributed to the normal mode operating unit and the legal verification mode operating unit according to the presence or absence of the verification. Then, the vehicle application program is processed by the assigned operation units. For this reason, when a program or the like for updating an already installed vehicle application program is newly acquired, the installed vehicle application program can be continuously executed by the normal mode operation unit. . In parallel with this, the operation result of the newly acquired vehicle application program is verified by the legal verification mode operation unit, so that the operation result of the unverified vehicle application program is applied after verification. It will be verified under an operating environment that approximates the environment. Accordingly, it is possible to verify the operation result of the newly acquired program in parallel with the operation of the verified vehicle application program installed in the in-vehicle device.

  According to a third aspect of the present invention, in the legal verification system for a vehicle application according to the first or second aspect, the legal verification mode operation unit moves the vehicle on which the vehicle-mounted device is mounted to a traveling area with different legal regulations. The gist is to verify, based on the legal data, whether or not the legal regulations prescribed for the operation result of the vehicle application program are in compliance.

  The regulations stipulated for the operation results of the vehicle application program tend to be different for each traveling area, such as a state or a country. Therefore, when a vehicle moves between such travel areas, even if the operation result of the vehicle application program has been in compliance with the law, the travel area after the movement may not comply with the law.

  In this regard, according to the above configuration, every time the vehicle moves to a travel area with different regulations, the regulation verification mode operation unit verifies whether the operation result of the vehicle application program is compliant with regulations. For this reason, the operation results of the program are verified at a highly probable timing when the laws and regulations to be changed are changed, and the operation results of the vehicle application program can be verified with the minimum number of times. It becomes.

  According to a fourth aspect of the present invention, in the vehicle application legal verification system according to any one of the first to third aspects, the legal verification mode operation unit verifies the legal compliance related to the vehicle application program. The gist is to perform verification at regular timing and at least one of verification based on legal information acquired through at least one of road-to-vehicle communication and vehicle-to-vehicle communication.

  For example, even in the same traveling area, the regulations applied in the traveling area may be changed by the revision of the regulations. In this case, even if the operation result of the vehicular application program has been in compliance with the laws and regulations up to now, it may become impossible to comply with the laws later as the laws and regulations are revised.

  In this respect, according to the above configuration, the legal compliance mode is verified at regular intervals by the legal verification mode operation unit, so that even if the legal regulations are revised, the operation results of the vehicle application program are revised. It will be verified whether or not it is compliant. In addition, if the legal compliance is regularly verified in this way, even if the vehicle moves to a travel area with different regulations, the operation result of the vehicle application program is verified through the periodic verification. Become. Accordingly, it is possible to maintain the appropriateness for a long time through periodic verification of the operation result of the vehicle application program.

  Further, according to the above configuration, for example, by obtaining legal information indicating that the legal regulations have been revised through vehicle-to-vehicle communication or road-to-vehicle communication, the operation result of the vehicle application program conforms to the revised regulations. It is possible to verify whether or not the laws are revised. For this reason, even if a vehicle moves to a travel area with different laws and regulations, the legal information indicating the laws and regulations applicable to the travel area is obtained through vehicle-to-vehicle communication or road-to-vehicle communication. It becomes possible to determine whether the operation result of the application program needs to be verified. As a result, it is possible to flexibly verify whether the operation result of the vehicle application program complies with laws and regulations that are dynamically changed by the travel area or revision.

  According to a fifth aspect of the present invention, in the vehicle application legal verification system according to any one of the first to fourth aspects, the vehicle-mounted device controls a display mode of a display unit mounted on the vehicle. A display-system in-vehicle control device, the display-system in-vehicle control device includes a normal drawing area in which an image to be displayed is drawn based on a vehicle application program that has been verified in compliance with regulations, and a non-compliance with regulations. The gist of the invention is to provide a drawing memory including a verification drawing area in which an image to be displayed is drawn based on the verification vehicle application program and used for the verification.

  Laws and regulations stipulated for vehicular applications are often stipulated with respect to the display mode of a display unit visually recognized by a driver, such as an instrument panel on which the traveling speed of a vehicle is displayed. An image displayed on such a display unit is normally displayed on the display unit by being drawn in the drawing memory.

  Therefore, as described above, an image to be displayed is drawn in a normal drawing area based on a vehicle application program that has been verified in compliance with laws and regulations, and the image drawn in this drawing area is displayed on the display unit. At the same time, an image to be displayed based on an unverified vehicle application program that complies with laws and regulations is drawn in a drawing memory for verification and verified. Thereby, only the image based on the vehicle application program verified according to the regulations is displayed on the display unit, and the image based on the unverified vehicle application program is not displayed. That is, even when the operation result of the unverified vehicle application program is being verified, an image based on the verified vehicle application program is displayed on the display unit, and the original display function of the display unit is maintained. It becomes possible. As a result, an image based on an unverified vehicle application program is verified under a drawing memory of a display-system in-vehicle control device, that is, an operating environment common to the operating environment of the verified vehicle application program. Become so. Therefore, it is possible to draw an image to be displayed in the drawing memory in accordance with various signals actually input to the in-vehicle control device of the display system, and the image displayed as the operation result of the unverified vehicle application program Verification can be performed under an actual operating environment.

  The invention described in claim 6 is the vehicle application legal verification system according to claim 5, wherein the in-vehicle device further includes a drive system in-vehicle control device for controlling a drive device mounted in the vehicle. The on-vehicle control device for the drive system detects a vehicle operation by a driver and controls the drive device according to the detected vehicle operation, and detects and detects a vehicle operation by the driver. A driving control unit for verification that outputs a signal corresponding to the operated vehicle to the vehicle-mounted control device of the display system, and the vehicle-mounted control device of the display system is controlled by the vehicle-mounted control device of the drive system The gist of the present invention is to display the driving state on the display unit.

  In general, for example, an in-vehicle control device for a display system that controls a display unit such as a speedometer that displays the traveling speed of a vehicle is an in-vehicle control device that controls an engine of the vehicle or an in-vehicle control device that receives a detection value of a vehicle speed sensor. The display mode of the display unit is changed based on a signal input from an in-vehicle control device such as a drive system. That is, in order to verify the display mode of the display unit controlled by such a display-system vehicle-mounted control device, a signal output from the drive-system vehicle-mounted control device is often required. On the other hand, the signal output from the in-vehicle control device of the drive system reflects the running state of the vehicle that changes when the accelerator pedal or the brake pedal is depressed, and the display is controlled according to such a signal. The display mode of the part also reflects the traveling state of the vehicle. For this reason, in order to verify the display mode of the display unit controlled by the in-vehicle control device of the display system on an actual vehicle, it is necessary to cause the driver to perform various vehicle operations. The vehicle will run and stop according to the driver's vehicle operation.

  In this regard, as in the above configuration, when verifying the operation result of the vehicle application program, if the signal corresponding to the vehicle operation by the driver is output from the drive control unit for verification to the in-vehicle control device of the display system, Even if the vehicle is not operated according to the vehicle operation, a signal corresponding to the vehicle operation by the driver can be input to the in-vehicle control device of the display system. In the display system, the display mode of the display unit can be controlled in accordance with the vehicle operation performed by the driver by processing the vehicle application program based on the signal input from the in-vehicle control device of the drive system. Become. For this reason, it becomes possible to verify the display mode of the display unit that changes as the operation result of the vehicle application program without causing the vehicle to travel, and the operation result of the unverified vehicle application program while the vehicle is stopped. Can be verified. As a result, the degree of freedom for verifying the operation result of the vehicle application program can be improved.

  A seventh aspect of the present invention is the vehicle application legal verification system according to any one of the first to sixth aspects, wherein the legal verification mode operation unit is processed through execution of the vehicle application program. In addition, referring to the legal verification setting file in which the verification contents to be verified in the verification items subject to legal verification are separately associated with the application program for the vehicle, the legal verification setting file The gist is to verify the verification items for the application program for each vehicle for each verification content through reference.

There are various functions realized by the vehicle application program, and the laws and regulations stipulated in these programs and functions are various.
In this regard, according to the above-described configuration, the operation result of the vehicle application program is verified through reference to the above-mentioned legal verification setting file, so that each verification content to be verified for each vehicle application program is accurately verified. Thus, the operation result of the vehicle application program can be verified with high accuracy.

  The invention described in claim 8 is the vehicle application legal verification system according to any one of claims 1 to 7, wherein the vehicle application program is distributed from a management center that manages the vehicle application program. The main point is that

  As described above, the present invention is particularly effective when applied to the verification of the operation result of the vehicle application program distributed from the management center. In this case, for example, in a situation where the vehicle is used. In addition, the operation result of the vehicle application program can be verified. As a result, it is possible to immediately verify the operation result of the vehicle application program distributed from the management center and to execute the program that has been confirmed to be compliant with the regulations on the in-vehicle device.

The block diagram which shows the schematic structure about 1st Embodiment of the regulation verification system of the application for vehicles concerning this invention. The figure which shows an example of the registration content of the setting file for legal verification. The figure which shows an example of schematic structure of the meter display which comprises a display apparatus. The figure which shows an example of the diagnostic displayed on a meter display. The flowchart which shows an example of the legal verification procedure of the operation result of the application program for vehicles of the embodiment. The figure which shows an example of the verification timing of the operation result of the application program for vehicles. The flowchart which shows an example of the re-verification procedure of the operation result of the application program for vehicles. The block diagram which shows the schematic structure about 2nd Embodiment of the regulation verification system of the application for vehicles concerning this invention. The flowchart which shows an example of the re-verification procedure of the application for vehicles about other embodiment of the regulation verification system of the application for vehicles concerning the present invention. The block diagram which shows the schematic structure about other embodiment of the legal verification system of the application for vehicles concerning this invention. The figure which shows an example of schematic structure of the meter display to which this system is applied about other embodiment of the regulation verification system of the application for vehicles concerning this invention.

(First embodiment)
DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS A first embodiment that embodies a legal verification system for a vehicle application according to the present invention will be described below with reference to FIGS. The legal verification system of the present embodiment is intended for a program that can change the display mode displayed on the instrument panel provided in the vehicle, for example, as a vehicle application program. This is to verify whether or not the laws and regulations prescribed for the operation result are compliant.

  As shown in FIG. 1, the vehicle 100 according to the present embodiment acquires a vehicle application program executed on an in-vehicle device such as an in-vehicle control device constituting the vehicle 100 from the management center 200. That is, when the vehicle application program is distributed by the center communication device 201 provided in the management center 200, the vehicle application program is received by the in-vehicle communication device 101 mounted on the vehicle 100. In the present embodiment, it is verified on the vehicle 100 whether or not the operation results of the acquired vehicle application program comply with the laws and regulations prescribed in advance for them.

  In addition, in-vehicle communication device 101 of the present embodiment performs vehicle-to-vehicle communication with other vehicle running around vehicle 100 and road-to-vehicle communication with a roadside communication device provided on the road, in addition to management center 200. . And the vehicle-mounted communication apparatus 101 acquires the revision information which shows the presence or absence of revision of the law applied to the operation result of the application program for vehicles through such vehicle-to-vehicle communication or road-to-vehicle communication. The revision information is distributed from, for example, a road traffic information center that manages road traffic information, and is distributed to each vehicle traveling on the road through road-to-vehicle communication or the like.

  The vehicle 100 also includes an engine control device 110 that constitutes an in-vehicle control device of a drive system that controls an engine that is a drive device mounted on the vehicle 100, for example. In addition, the vehicle 100, for example, based on a signal output from the engine control device 110, information indicating the driving state of the vehicle 100 such as the engine speed and the traveling speed of the vehicle 100 is displayed on an instrument panel provided in the vehicle interior. A meter control device 120 constituting an in-vehicle control device of a display system for displaying is provided.

  Such in-vehicle control devices such as the engine control device 110 and the meter control device 120 are electrically connected by a bus 130 constituting a control area network, for example. Then, signals are exchanged between the control devices such as the engine control device 110 and the meter control device 120 via the bus 130, thereby controlling the traveling state of the vehicle 100 and displaying the instrument panel. Aspect is controlled.

  In addition, the vehicle application program distributed from the management center 200 is acquired by the in-vehicle communication device 101, and the acquired vehicle application program is transmitted to the in-vehicle control device that is the processing entity via the bus 130. In the present embodiment, the engine control device 110 and the meter control device 120 constitute an in-vehicle device.

  Although not shown, the engine control device 110 is connected to an accelerator sensor that detects an accelerator opening that changes when an accelerator pedal is depressed by a driver, for example. And the engine control apparatus 110 controls an engine based on signals, such as a detection result of this accelerator sensor.

  The engine control device 110 according to the present embodiment includes an operation control unit 111 that switches the processing subject of the vehicle application program according to the verification status of the vehicle application program executed by the meter control device 120, for example. . The operation control unit 111 outputs a signal input from an accelerator sensor or the like to a drive control unit 112 that performs engine drive control based on the signal.

  When a signal indicating the detection result of the accelerator sensor or the like is input from the operation control unit 111, the drive control unit 112 calculates a control amount for controlling the engine in accordance with this signal, and the engine is controlled based on the calculation result. Control. Thus, for example, when the accelerator pedal is depressed by the driver, control is performed to drive or stop the engine according to the accelerator opening. In addition, the drive control unit 112 transmits a signal indicating the calculated engine control amount to the meter control device 120 via the communication unit 113 and the bus 130.

  The meter control device 120 includes an application execution unit 121 that executes a vehicle application program distributed from the management center 200. Further, the meter control device 120 includes a communication unit 127 that exchanges signals with each on-vehicle control device including the engine control device 110. The communication unit 127 acquires, for example, the latitude and longitude information output from the GPS 150 that detects the absolute position of the vehicle 100 via the bus 130 in addition to the signals output from the in-vehicle control devices.

  Among them, the application execution unit 121 is distributed from a vehicle application program installed in the meter control device 120 or the management center 200 based on a signal indicating the engine control amount input from the engine control device 110. Process vehicle application programs. Moreover, the application execution part 121 draws the image content displayed on the meter display 140 which comprises a display part on the drawing memory 126 by processing a vehicle application program. Note that, for example, diagnostic data indicating the state of the vehicle 100 and a signal indicating the state of the winker are input to the application execution unit 121 from various vehicle-mounted control devices and the like.

  The application execution unit 121 includes an operation control unit 122 that switches the processing subject according to the verification status of the vehicle application program distributed from the management center 200 and the acquisition mode of the vehicle application program.

  When the vehicle application program distributed from the management center 200 is a program P1 verified by the management center 200 to comply with the regulations, the operation control unit 122 uses the verified program P1 as its processing subject. Is output to the normal mode operation unit 123. The operation control unit 122 also outputs the program to the normal mode operation unit 123 when the vehicle application program to be executed is a program installed in the meter control device 120 when the vehicle 100 is initially shipped. Furthermore, the operation control unit 122 acquires the detection result of the GPS 150 via the communication unit 127, and monitors the traveling area of the vehicle 100 based on the acquired detection result.

  On the other hand, when the vehicular application program distributed from the management center 200 is the unverified program P2 that has not been verified by the management center 200 in compliance with laws and regulations, the operation control unit 122 processes the unverified program P2. The data is output to the main legal verification mode operation unit 124.

  Of these, when the verified program P1 or a program installed at the time of initial shipment is input from the operation control unit 122, the normal mode operation unit 123 processes the program to display the meter display 140 based on the program. The image content indicating the diagnosis to be displayed is drawn in the normal drawing area 126 a constituting the drawing memory 126. When the image content is drawn in the normal drawing area 126a, the drawn content is visually displayed on the meter display 140. Thereby, for example, information indicating the engine speed controlled by the meter control device 120, the traveling speed of the vehicle 100, and the like is displayed on the meter display 140.

  On the other hand, when the unverified program P2 is input from the operation control unit 122, the legal verification mode operation unit 124 verifies whether the operation result of the unverified program P2 conforms to a predetermined legal rule. At the time of this verification, the legal verification mode operation unit 124 processes the unverified program P2 to draw the image content based on the program P2 in the verification drawing area 126b constituting the drawing memory 126.

  The legal verification mode operation unit 124 of the present embodiment, when verifying the unverified program P2, creates a legal verification setting file 125 in which verification targets, verification items, verification contents, and the like are associated with vehicle application programs. Use.

  The legal verification setting file 125 according to the present embodiment is held in, for example, the meter control device 120 that performs verification of the vehicle application program. For example, when the vehicle application program is distributed from the management center 200, the legal verification setting file 125 is newly distributed from the management center 200 or the like. Further, the regulation verification setting file 125 is acquired through communication with the management center 200 or the like, for example, when a regulation is revised or when a travel area such as a country and a state in which the vehicle 100 travels changes. Thereby, the regulation verification setting file 125 is updated as appropriate so as to correspond to the latest regulation applicable to the travel area of the vehicle 100. In this embodiment, the regulation verification setting file 125 corresponds to the regulation data.

  When the legal verification mode operation unit 124 draws the image data based on the unverified program P2 in the verification drawing area 126b, the contents drawn in the verification drawing area 126b are registered in the legal verification setting file 125. Verify based on content. Then, for example, the legal verification mode operation unit 124 updates the verification status of the verified program P2 from “unverified” to “verified”. As a result of such verification, for the vehicle application program that has been verified not to comply with the regulations, for example, the execution on the meter control device 120 is restricted, and the fact that it does not comply with the regulations is indicated in the vehicle 100. It is displayed on the provided display device or the like. Then, a program for updating the vehicle application program and a program replacing the vehicle application program are acquired from the management center 200.

Next, an example of the legal verification setting file 125 according to this embodiment will be described with reference to FIGS.
As shown in FIG. 2, the legal verification setting file 125 includes a speedometer 141, a warning light 142, a blinker 143, and the like that configure the meter display 140 illustrated in FIG. 3 to display the traveling speed of the vehicle 100. In addition to the display components, verification items to be verified and verification contents indicating operation regulations corresponding to the regulations are registered. In addition, in the legal verification setting file 125, a drawing layout definition of drawing contents drawn based on the vehicle application program, drawing components, verification data for pattern matching, and the like are registered. In addition, the display mode by this display component is controlled through execution of the vehicle application program.

  As shown in FIG. 2, in the regulation verification setting file 125, in the speedometer 141, “vehicle speed” used when executing the vehicle application program is registered as a verification item. Further, as a verification content, it is registered that the needle of the speedometer 141 whose display mode is controlled by the vehicle application program shows a correct value according to the vehicle speed, and whether or not the error is within a predetermined range. Yes.

  In the warning light 142, for example, as illustrated in FIG. 4, “diag data” used for execution of the vehicle application program is registered as a verification item. Further, as the verification contents of the warning lamp 142, as illustrated in FIG. 2, is a warning mark corresponding to the diagnosis data displayed at a specified position in the meter display 140 according to the state of the vehicle 100? No is registered.

  Further, in the winker 143, for example, a “winker state” used when executing the vehicle application program is registered as a verification item. As the verification contents of the winker 143, it is registered whether or not the winker mark indicating the lighting state of the winker 143 is turned on according to the state of the winker 143.

  In addition, in the legal verification setting file 125, such display parts, verification items, and verification contents are registered separately for each vehicle application program, for example, and the verification items and verification contents are different for each traveling area. It has become.

  2 is verified based on the drawing contents drawn in the drawing area for verification 126b. Such verification is performed based on the traveling speed of the vehicle 100 and the use state of the blinker 143, which are changed by the vehicle operation by the driver of the vehicle 100. In other words, legal compliance verification is appropriately performed when the vehicle 100 is traveling on a road under vehicle operation by a driver. However, even in this case, the verification of the unverified program P2 is performed in parallel with the execution of the verified program P1. That is, the meter display 140 displays the contents drawn based on the vehicle application program in which the traveling speed of the vehicle 100, the use state of the blinker 143, the diagnosis, and the like have been verified.

The operation of the vehicle application legal verification system of the present embodiment will be described below with reference to FIG.
As shown in FIG. 5, when the unverified program P2 is distributed from the management center 200, the unverified program P2 is activated by the application execution unit 121 (step S01).

  Next, the legal verification mode operation unit 124 is activated and the legal verification setting file 125 is read (step S02). Then, the drawing content based on the unverified program P2 is drawn in the verification drawing area 126b (step S03).

  In this way, the drawing content drawn in the verification drawing area 126b is verified for each verification item registered in the legal verification setting file 125 illustrated in FIG. 2 (step S04). Thereby, for example, when diagnostic data indicating that an abnormality has occurred in the vehicle 100 is input to the application execution unit 121, the warning mark illustrated in FIG. 4 is displayed in the verification drawing area 126b through the execution of the vehicle application program. It is verified whether or not it is drawn on the screen. Further, for example, the warning mark drawn in the verification drawing area 126b is pattern-matched with the verification data registered in the legal verification setting file 125, thereby the warning mark drawn in the verification drawing area 126b. It is verified whether or not conforms to the mark that complies with the regulations.

  Then, the state of the unverified program P2 to be verified is updated from “unverified” to “verified”. Further, the verified program P1 conforming to the regulations is executed by the normal mode operation unit 123, and the drawing contents based on the program P1 are drawn in the normal drawing area 126a and displayed on the meter display 140. The Rukoto.

Next, the verification timing of the vehicle application program will be described with reference to FIGS.
As shown in FIG. 6, in the present embodiment, for example, the timing at which the vehicle 100 acquires the unverified program P2 distributed from the management center 200 is defined as the verification timing of the operation result of the program.

  In addition, it is assumed that the verified program P1 that has been verified to comply with the regulations can no longer comply with the regulations as the travel area of the vehicle 100 and the regulations are revised.

  Therefore, in the present embodiment, when the vehicle 100 moves to a travel area such as a country or a state with different regulations, for example, the verified program P1 once verified to comply with the regulations is also moved. It is verified whether it complies with the laws and regulations applicable to the subsequent driving area. Note that whether or not the travel area of the vehicle 100 has changed is determined based on, for example, the latitude and longitude information of the vehicle 100 output from the GPS 150.

  Further, in the present embodiment, as shown in FIG. 6, even when the regulation prescribed for the operation result of the vehicle application program is revised, the verified program P1 conforms to the revised regulation. It is verified whether or not. Whether or not the regulations have been revised is determined based on the regulations information acquired through, for example, vehicle-to-vehicle communication or road-to-vehicle communication.

  Next, as shown in FIG. 7 as an example of the procedure for re-verifying the operation result of the vehicle application program, first, in step S11, the vehicle 100 moves to a travel area with different laws and regulations applied to the operation result of the vehicle application program. It is determined whether or not.

  When it is determined that the vehicle 100 has moved to a traveling area with different regulations, the operation result of the vehicle application program is re-verified based on the regulations applied to the traveling area (steps S11: YES, S13). . When re-verifying the operation result of the vehicle application program, the regulation verification setting file 125 corresponding to the traveling area is acquired through communication with the management center 200 or the like. Then, the operation result of the vehicular application program is re-verified using the legality verification setting file 125.

  On the other hand, if it is determined that the travel area of the vehicle 100 has not changed (step S11: NO), the law applied to the travel area is determined based on the legal information acquired through vehicle-to-vehicle communication or road-to-vehicle communication. It is determined whether or not it has been revised after the verification of the operation result of the application program for use (step S12).

  When it is determined that the regulations have been revised (step S12: YES), a regulation verification setting file 125 corresponding to the revised regulations is acquired, and based on the acquired regulation verification setting file 125, The operation result of the vehicle application program is re-verified (step S13).

  In this way, each time the country or state in which the vehicle 100 travels changes as the vehicle 100 moves, and whenever the laws and regulations applied to the operation results of the vehicle application program are revised, the legal verification setting file 125 is updated. Is reacquired, and verification-compliant revalidation is executed based on the legal verification setting file 125.

As described above, the vehicle application regulation verification system according to the present embodiment provides the following effects.
(1) The vehicle 100 is provided with a legal verification mode operation unit 124 that operates in a mode for verifying whether or not the legal related to the operation result of the vehicle application program is compliant. For this reason, it becomes possible to verify compliance with regulations on the vehicle 100 side, and even after a program for executing a vehicle application is once installed in the meter control device 120 or the like, the operation result of the vehicle application program is not regulated. It is possible to verify on the vehicle 100 side whether or not it is compliant. As a result, even if the regulations stipulated for the operation result of the vehicle application program are changed, it is possible to determine whether the vehicle 100 is compliant or not by verifying the operation result of the program. This also verifies the compliance of the operation result of the vehicular application executed on the vehicle 100 that actually travels on the road by the legal verification mode operation unit 124, so that the operation result can be verified. It is not necessary to reproduce the vehicle environment, and the verification accuracy can be improved while reducing the verification load complying with the regulations.

  (2) a normal mode operation unit 123 that processes a vehicle application program that has been verified to comply with regulations, and an operation control unit 122 that distributes the processing subject of the vehicle application program to the normal mode operation unit 123 and the legal verification mode operation unit 124; Is provided in the meter control device 120. The unverified program P2 distributed from the management center 200 as a program to be additionally installed is distributed to the legal verification mode operation unit 124. Thereby, while the operation of the verified program P1 installed in the meter control device 120 is secured by the normal mode operation unit 123, the operation result of the newly acquired unverified program P2 is verified in parallel with this. This can be performed by the regulation verification mode operation unit 124.

  (3) Verification of compliance with the regulations regarding the operation results of the vehicle application program is performed each time the vehicle 100 moves to a travel area with different regulations. For this reason, when the vehicle 100 moves to a travel area with different laws and regulations, it is verified whether or not the laws and regulations that should be complied with in the travel area after movement are verified, and the appropriateness thereof is verified. As a result, the operation result of the vehicular application program is verified at a timing that is likely to change the laws and regulations, and the operation result of the vehicular application program can be verified with the minimum number of times. Become.

  (4) The operation result of the vehicle application program is verified based on the legal information acquired through road-to-vehicle communication and vehicle-to-vehicle communication. For this reason, it becomes possible to determine the necessity of the verification regarding the operation result of the vehicle application program based on the legal information. As a result, it is possible to flexibly verify whether the operation result of the vehicle application program complies with laws and regulations that are dynamically changed by the travel area or revision.

  (5) As the on-vehicle device, the meter control device 120 that controls the display mode of the meter display 140 mounted on the vehicle 100 is targeted. The drawing memory 126 constituting the meter control device 120 has a normal drawing area 126a in which an image to be displayed based on a legally compliant verified vehicle application program P1 is drawn, and a legally compliant unverified vehicle. A verification drawing area 126b used to verify an image to be displayed based on the application program P2 is provided. As a result, even when the unverified program P2 is being verified, an image based on the verified program P1 is displayed on the meter display 140, and the original display function of the meter display 140 can be maintained. . As a result, the image based on the unverified program P2 is verified under an operating environment common to the operating environment of the verified program P1, such as the drawing memory 126. Therefore, it is possible to cause the drawing memory 126 to draw an image to be displayed in accordance with various signals actually input to the meter control device 120. Verification of the unverified program P2, and consequently processing results of the unverified program P2 Can be verified under the actual operating environment.

  (6) As the legal data, the legal verification setting file 125 in which the verification contents to be verified in the verification items to be verified is associated with the vehicle application program. The verification items for the application program for each vehicle are verified for each verification content through reference to the legal verification setting file 125. As a result, each verification content to be verified for each vehicle application program can be verified accurately, and the vehicle application program can be verified accurately. In addition, this makes it possible for the legal verification mode operation unit 124 to grasp verification items and verification contents simply by referring to the legal verification setting file 125, and to hold data indicating the verification items and verification contents. There is no. In addition, as a result, it is possible to perform verification based on the laws and regulations that are to be complied with each time and region, as long as the legal verification setting file 125 is updated according to the laws and regulations to be followed. Can be performed more flexibly.

  (7) As the vehicle application program, the verified program P1 and the unverified program P2 distributed from the management center 200 are targeted. For this reason, even when a vehicle application program is added or updated later in each vehicle-mounted control device or the like, it becomes possible to perform legal compliance verification on the vehicle 100 side. As a result, it is possible to favorably ensure the appropriateness of the operation result of the vehicle application program that is added or updated later, and as a result, the degree of freedom for distribution of the vehicle application program is increased. become.

(Second Embodiment)
Next, a second embodiment of the vehicle application legal verification system according to the present invention will be described with reference to FIG. 8 corresponding to FIG. 1 with a focus on differences from the first embodiment. The description will be given with reference. The vehicle application legal verification system according to the present embodiment has the same basic configuration as that of the first embodiment, and FIG. 8 is substantially the same as that of the first embodiment. Elements are denoted by the same reference numerals, and duplicate descriptions are omitted.

  As shown in FIG. 8, the engine control device 110A of the present embodiment outputs a signal for verification of the vehicle application program by the normal drive control unit 114 that performs normal drive control and the legal verification mode operation unit 124. A verification drive control unit 115 is provided.

  In the present embodiment, the verification of the operation result of the unverified program P2 is performed in a state where the vehicle 100 is stopped without running, for example, in a facility of the development side of the vehicle 100 or a dealer.

  Further, in the present embodiment, when verifying the operation result of the vehicle application program, for example, the accelerator pedal or the brake pedal required for verifying the operation result of the vehicle application program, the steering operation, and the winker 143 Information for guiding various vehicle operations such as the lighting operation of is displayed on a display device provided inside the vehicle 100. Then, vehicle operation by the driver of the vehicle 100 is performed according to information displayed on the display device, and detection values of various sensors and the like that change in accordance with the vehicle operation are used to verify the operation result of the vehicle application program. .

  The operation control unit 111 according to the present embodiment switches the processing subject of the vehicular application program according to the verification status of the vehicular application program executed by the meter control device 120, for example.

  The operation control unit 111 outputs a signal input from an accelerator sensor or the like to the normal drive control unit 114 when the operation result of the vehicle application program is not verified by the meter control device 120. On the other hand, when the operation result of the vehicle application program by the meter control device 120 is being verified, the operation control unit 111 outputs a signal input from an accelerator sensor or the like to the verification drive control unit 115.

  Among these, when a signal indicating the detection result of the accelerator sensor or the like is input from the operation control unit 111, the normal drive control unit 114 calculates a control amount for controlling the engine in accordance with this signal, and performs this calculation. The engine is controlled based on the result. Further, the normal drive control unit 114 transmits a signal indicating the calculated engine control amount to the meter control device 120 via the communication unit 113 and the bus 130.

  On the other hand, when a signal indicating the detection result of the accelerator sensor or the like is input from the operation control unit 111 along with the verification of the operation result of the vehicle application program, the verification drive control unit 115 should be controlled according to this signal. A signal indicating the engine control amount is generated. Then, the verification drive control unit 115 transmits a signal indicating the control amount to the meter control device 120 via the communication unit 113 and the bus 130. In this case, the verification drive control unit 115 only transmits a signal indicating the engine control amount to the meter control device 120, and does not control the engine based on the control amount. Thereby, when the transmission destination of the signal of the accelerator sensor or the like is switched from the drive control unit 112 to the verification drive control unit 115, even if the accelerator pedal is depressed by the driver, the signal indicating the depression amount of the accelerator pedal. Is transmitted to the meter control device 120, and the vehicle 100 does not travel.

  In the meter control device 120 of the present embodiment, when a vehicle operation is performed by the driver when verifying the operation result of the vehicle application program, a signal that changes according to the vehicle operation is input from the verification drive control unit 115. The

  Then, in the application execution unit 121 configuring the meter control device 120, the unverified program P2 is executed based on the signal input from the verification drive control unit 115. Next, drawing contents indicating the traveling speed of the vehicle 100, the lighting state of the blinker 143, and the like are drawn in the verification drawing area 126b based on the program, and the drawing contents are verified.

  As described above, according to the regulation verification system for a vehicle application according to the present embodiment, the effects (1) to (7) can be obtained, and the following effects can be further obtained.

  (8) A normal drive control unit 114 that detects a vehicle operation by a driver and controls the engine according to the detected vehicle operation in an engine control device 110 that constitutes an in-vehicle control device of a drive system, and a vehicle operation by a driver And a verification drive control unit 115 that outputs a signal corresponding to the detected vehicle operation to the meter control device 120. Then, the driving state of the engine controlled by the engine control device 110 is displayed on the meter display 140. For this reason, it is possible to verify the display mode of the display unit that changes as the operation result of the vehicle application program without driving the vehicle, and it is possible to verify compliance with laws and regulations with the vehicle 100 stopped. It becomes. As a result, the degree of freedom for verification of compliance with laws and regulations can be improved.

(Other embodiments)
In addition, each said embodiment can also be implemented with the following forms.
The vehicle application program is distributed by the management center 200, and the vehicle application program distributed by the management center 200 is acquired by the vehicle 100. The vehicle application program to be verified is not limited to this, and is acquired by wired communication from an information terminal connected to a data link connector (DLC) provided inside the vehicle 100, for example. There may be. Even in this case, it is possible to obtain the effect according to the above (7).

  In the legal verification setting file 125, “vehicle speed”, “diagonal data on / off”, and “winker state” are registered as verification items of the vehicle application program, and verification contents corresponding to them are registered. Not limited to this, the verification items of the vehicle application program include, for example, an engine rotation speed, a remaining amount of fuel, an outside air temperature, an eco-drive indicator, an odometer, and an element indicating on / off of a driving support system. It may be. In this case, as the verification contents, for example, whether the engine rotation speed and the remaining fuel consumption displayed on the meter display 140 indicate appropriate values, and the positions where the display positions of these elements are defined. It is registered whether or not it is displayed on the screen.

  The above-mentioned regulation verification setting file 125 is held in the meter control device 120 as a separate body from the regulation verification mode operation unit 124 using the regulation verification setting file 125. Not limited to this, the legal verification setting file 125 may be omitted, and the legal verification data indicating the verification items and verification contents may be stored in the legal verification mode operation unit 124.

  The drawing memory 126 of the meter control device 120 is based on a normal drawing area 126a in which an image to be displayed is drawn based on a verified vehicle application program complying with regulations, and an unverified vehicle application program complying with regulations. An image to be displayed is drawn and configured by a verification drawing area 126b used for the verification. However, the drawing memory 126 may be configured only by the normal drawing area 126a, and the drawing contents drawn in the normal drawing area 126a may be verified.

  ・ Regulation information will be obtained through road-to-vehicle communication and vehicle-to-vehicle communication. Not only this but regulation information may be acquired by communication of either one of road-to-vehicle communication and vehicle-to-vehicle communication. In addition, the management center 200 may manage the legal information, and the legal information may be distributed to the management center 200.

  -Re-verification regarding the operation result of the verified program P1 is performed when the vehicle 100 is changed in the travel area where the laws and regulations are changed and when the laws and regulations to be complied with are revised. Furthermore, for example, as illustrated in FIG. 9 as step S14 in FIG. 9 as a diagram corresponding to FIG. 7, for example, after a predetermined period such as several months or years has passed after verification regarding the operation result of the vehicle application program, The operation result of the vehicle application program may be verified. In other words, legal compliance verification may be performed periodically. Further, the re-verification of the operation result of the vehicle application program may be performed only when the travel area of the vehicle 100 changes. Similarly, the re-verification of the operation result of the vehicular application program may be performed only when the legal information whose laws are revised is acquired. Similarly, the re-verification of the operation result of the vehicle application program may be performed only when a predetermined period has elapsed. In addition, the re-verification of the vehicle application program may be performed every time the program is started, and the verification timing can be appropriately changed.

  In the first embodiment, the meter control device 120 is provided with the legal verification mode operation unit 124 for verifying the operation result of the vehicle application program. Furthermore, in the second embodiment, the engine control device 110 is provided with the verification drive control unit 115 for verifying the operation result of the vehicle application program. The present invention is not limited to this, and as shown in FIG. 10, for example, as shown in FIG. A function of outputting only a signal for verifying the operation result of the vehicle application program according to the vehicle operation may be provided. That is, the in-vehicle control device 160 has verified the operation result of the vehicle application program executed by the control unit 161 that controls the control target device according to the detection results of various sensors, for example, the meter control device 120. A mode determination unit 165 that determines whether or not, and a communication unit 166 that communicates with the meter control device 120 and the like. In addition, the control unit 161 switches the operation control unit 162 that switches the output destination of the signals indicating the detection results of various sensors to the normal control unit 163 and the verification control unit 164 according to the determination result of the mode determination unit 165. Prepare. When the determination result of the mode determination unit 165 indicates that the operation result of the vehicle application program has not been verified, the operation control unit 162 outputs a signal indicating the detection result of various sensors or the like to the normal control unit 163. Output to. Then, the normal control unit 163 obtains a control amount for controlling the device to be controlled based on the input signal, and controls the device to be controlled according to the obtained control amount. Further, the normal control unit 163 outputs, for example, a signal indicating the obtained control amount to the meter display 140 that reflects the content indicated by the signal on the meter display 140. On the other hand, when the determination result of the mode determination unit 165 indicates that the operation result of the vehicle application program is being verified, the operation control unit 162 controls a signal indicating the detection result of various sensors or the like for verification. To the unit 164. Then, the verification control unit 164 obtains a control amount for controlling the device to be controlled based on the input signal, outputs the obtained control amount to the meter display 140, and controls the device to be controlled. Do not do. According to such a configuration, it is possible to generate verification signals and data used for verification of the operation result of the vehicle application program by more in-vehicle control devices. Accordingly, it is possible to verify the operation result of the vehicle application program using various signals and data for various items without causing the vehicle 100 to travel.

  The in-vehicle device includes a normal mode operation unit 123 and an operation control unit 122 that distributes the processing subject of the vehicle application program to the normal mode operation unit 123 and the legal verification mode operation unit 124. Then, the unverified vehicle application program and the vehicle application program additionally installed in the vehicle-mounted device are distributed to the legal verification mode operation unit 124. Not limited to this, the operation control unit 122 is omitted, all the vehicle application programs are processed by the regulation verification mode operation unit 124, and the vehicle application program processed by the regulation verification mode operation unit 124 is processed in the normal mode. You may make it make the operation | movement part 123 process. In short, any application program for vehicles executed on the vehicle-mounted device may be verified by the legal verification mode operation unit 124.

  The vehicle application program is distributed from one management center 200. Furthermore, as shown in FIG. 10 as a diagram corresponding to FIG. 1, the vehicle application program is distributed by a plurality of management centers 200, 210, and 220, and distributed from these management centers 200, 210, and 220. The vehicle application program may be verified.

  -As the vehicle application program, a program capable of changing the display mode displayed on the meter display 140 was used. However, the present invention is not limited to this, and the vehicle application program may change the display mode of the display device constituting the navigation system mounted on the vehicle 100, for example. Further, for example, as shown in FIG. 11 as a diagram corresponding to FIG. 3, when the display mode of the image 144 captured by the in-vehicle camera is controlled by the vehicle application program, for example, The program may be verified. That is, for example, when the vehicle 100 is equipped with a periphery monitoring system that monitors the traveling environment, the vehicle-mounted control device that processes the image data captured by the vehicle-mounted camera using the vehicle application program installed in advance is the vehicle-mounted control device. It becomes. Then, it is verified whether or not the display mode of the image 144 displayed on the meter display 140A through the execution of the vehicle application program installed in the in-vehicle control device complies with the regulations. Further, as the vehicle application program, for example, a voice guidance mode such as a route by a navigation system may be changed. In addition, any application program for a vehicle may be used as long as it is installed in a vehicle-mounted device such as a vehicle-mounted control device mounted on the vehicle 100 to realize a specific function. Further, the object of the legal compliance verification may be the vehicle application program itself or only the operation result of the program. In short, the present invention can be applied as long as it verifies the regulations prescribed for the vehicle application program and its operation result.

  DESCRIPTION OF SYMBOLS 100 ... Vehicle, 101 ... In-vehicle communication apparatus, 110, 110A ... Engine control apparatus, 111 ... Operation control part, 112 ... Drive control part, 113 ... Communication part, 114 ... Normal drive control part, 115 ... Verification drive control part 120 ... Meter control device 121 ... Application execution unit 122 ... Operation control unit 123 ... Normal mode operation unit 124 ... Regulation verification mode operation unit 125 ... Regulation verification setting file 126 ... Drawing memory 126a ... Normal Drawing area, 126b ... drawing area for verification, 127 ... communication unit, 130 ... bus, 140, 140A ... meter display, 141 ... speedometer, 142 ... warning light, 143 ... blinker, 144 ... image displayed on meter display , 150... GPS, 160... On-vehicle control device, 161... Control unit, 162. Control unit, 164 ... control unit for verification, 165 ... mode determination unit, 166 ... communication unit, 200 ... management center, 201 ... center communication device, 210, 220 ... management center, P1 ... verified program, P2 ... unverified program .

Claims (8)

A vehicle application legal verification system that verifies compliance with the legal regulations stipulated for the operation results of a vehicle application program installed in an in-vehicle device mounted on a vehicle,
A regulation verification mode operation unit that operates in a mode for verifying whether or not the regulation prescribed for the operation result of the vehicle application program is based on the regulation data updated in accordance with the relevant regulation; A legal verification system for a vehicle application characterized by comprising: The vehicle application legal verification system according to claim 1,
A normal mode operation unit that processes a vehicle application program that has been verified to comply with regulations, and an operation control unit that distributes the processing subject of the vehicle application program to the normal mode operation unit and the legal verification mode operation unit,
The operation control unit distributes an unverified vehicle application program and a vehicle application program additionally installed in an in-vehicle device to the legal verification mode operation unit when distributing the vehicle application program. Application legal verification system. Whether the regulation verification mode operation unit complies with the regulations prescribed for the operation result of the vehicle application program each time the vehicle on which the vehicle-mounted device is mounted moves to a travel area with different regulations. The legal verification system for a vehicle application according to claim 1 or 2, wherein the verification is performed based on the legal data. The regulation verification mode operation unit is based on regulation information obtained through verification at regular timing, and at least one of road-to-vehicle communication and vehicle-to-vehicle communication, for verification of compliance with the regulations relating to the vehicle application program. The legal verification system for a vehicle application according to any one of claims 1 to 3, wherein the verification is performed as at least one of verification. The vehicle-mounted device includes a display-system vehicle-mounted control device that controls the display mode of the display unit mounted on the vehicle,
The display-based in-vehicle control device displays a normal drawing area where an image to be displayed is drawn based on a legally compliant verified vehicle application program and a legally compliant unverified vehicle application program. The legal verification system for a vehicle application according to any one of claims 1 to 4, further comprising: a drawing memory including a verification drawing area in which a power image is drawn and used for verification thereof. The in-vehicle device further includes an in-vehicle control device of a drive system that controls a drive device mounted on the vehicle,
The in-vehicle control device of the drive system detects a vehicle operation by a driver and detects a vehicle operation by a driver by detecting a vehicle operation by a driver and a normal drive control unit that controls the drive device according to the detected vehicle operation. A drive control unit for verification that outputs a signal according to vehicle operation to the vehicle-mounted control device of the display system,
6. The vehicle application regulation verification system according to claim 5, wherein the display-system in-vehicle control device displays a driving state of a driving device controlled by the drive-system in-vehicle control device on the display unit. The legal verification mode operation unit is processed through the execution of the application program for the vehicle, and the verification contents to be verified in the verification items to be verified by the legal regulations are associated with the vehicle application program separately. The verification setting file is referred to as the legal data, and the verification items for the application program for each vehicle are verified for each verification content through the reference of the legal verification setting file. Legal verification system for listed vehicle applications. The legal application verification system for a vehicle application according to any one of claims 1 to 7, wherein the vehicle application program is distributed from a management center that manages the vehicle application program.

Images