JP2017149323A - Vehicle control system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To safely update vehicle software without damaging convenience for a user.SOLUTION: A vehicle control system 100 comprises: a vehicle control device 1 mounted on a vehicle V; and an electronic key 2 and a portable machine (smartphone) 3 possessed by a user A. The vehicle control device 1 comprises a storage part which stores software for controlling a control object, and when receiving notification related to update of the software from a server 4 through the portable machine 3, the vehicle control device performs communication with the electronic key 2 and determines a location of the electronic key 2. The portable machine 3 sends a signal for requesting downloading of update software to the server 4 when it is determined that the location of the electronic key 2 is inside of the vehicle V. The vehicle control device 1 downloads the update software which is sent from the server 4, through the portable machine 3, and updates the software in the storage part.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a vehicle control system including a vehicle control device provided in a vehicle and an electronic key for communicating with the vehicle control device.

  An ECU (Electronic Control Unit) for controlling the operation of each part of the vehicle is mounted on the vehicle. A plurality of ECUs are provided depending on the control object, and each ECU incorporates software (computer program) corresponding to each control purpose. Each ECU controls a controlled object in accordance with these software. However, since the software is updated as needed, in that case, it is necessary to update the ECU software to the latest version.

  Conventionally, ECU software has been updated by physically connecting a dedicated device to a predetermined connecting portion provided in the vehicle. For example, Patent Document 1 discloses a system in which an information storage device in which update software is stored is connected to a connection unit provided in an instrument panel unit of a vehicle, and the update software is sent to the ECU via a wire. Have been described. However, in the conventional method, it is necessary to visit a dealer with a dedicated device by car when updating software, which is inconvenient for the user.

  Therefore, a method of downloading the update software from the center server to the ECU through a network is conceivable. This eliminates the need for connection of a dedicated device, makes it possible for the user to cope with software updates, and improves convenience. For example, Patent Document 2 describes a system for updating vehicle-side software by connecting a vehicle and an information providing center via a communication line and downloading update software from the information providing center via the communication line. ing.

  However, when the update software is downloaded from the center through the network, a malicious third party may download the software unintended by the user, increasing the security risk.

JP 2012-188027 A JP 2007-65856 A

  The subject of this invention is providing the vehicle control system which can update the software for vehicles safely, without impairing a user's convenience.

  A vehicle control system according to the present invention includes a vehicle control device that is mounted on a vehicle and controls the vehicle, an electronic key that is carried by a user and communicates with the vehicle control device, and that is carried by a user and communicates with the electronic key, Mobile devices that communicate with other servers. The vehicle control device has a storage unit that stores software for controlling a control target. When a notification about software update is received from a server via a portable device, the vehicle control device communicates with an electronic key. The location of the electronic key is determined. When it is determined that the location of the electronic key is in the vehicle, the portable device transmits a signal requesting to download the update software to the server. The vehicle control device downloads the update software transmitted from the server via the portable device, and updates the software in the storage unit.

  According to such a system, when the software update notification is received from the server, the location of the electronic key is determined. When the location of the electronic key is determined to be in the vehicle, the update software is updated. The download control is requested to the server, and the software of the vehicle control device is updated by the update software transmitted from the server. Therefore, only when the electronic key is in the vehicle, that is, when the user is in the vehicle, the update software is downloaded to the vehicle side. Therefore, the software unintended by the user by a malicious third party outside the vehicle. Updates can be prevented and safety is improved.

  In addition, since an electronic key is interposed between the vehicle control device and the portable device, the electronic key serves as a gateway. For this reason, even if the portable device is connected to the Internet, for example, the security on the vehicle side can be improved compared to the case where direct communication is performed between the vehicle control device and the portable device.

  In the present invention, when the vehicle control device determines that the location of the electronic key is in the vehicle, the vehicle control device transmits an intention confirmation signal for confirming to the user whether or not the user intends to update the software. May be. In this case, when receiving the intention confirmation signal, the electronic key waits for a predetermined operation by the user on the electronic key. When a predetermined operation is performed on the electronic key, the portable device transmits a signal requesting download to the server.

  In the present invention, when the location of the electronic key is determined by the electronic key itself and the location is determined to be in the vehicle, the electronic key may wait for a predetermined operation by the user. Good.

  In the present invention, the portable device may be omitted, and the vehicle control system may be configured by the vehicle control device and the electronic key. In this case, the vehicle control device includes a storage unit that stores software for controlling a control target, and a communication unit that communicates with an external server. When the communication unit receives a notification regarding software update from the server, the vehicle control device communicates with the electronic key to determine the location of the electronic key. When it is determined that the location of the electronic key is in the vehicle, the vehicle control device transmits a signal requesting to download the update software from the communication unit to the server, and the update control transmitted from the server. The software is downloaded via the communication unit, and the software in the storage unit is updated.

  In the vehicle control system including the vehicle control device and the electronic key as described above, the vehicle control device has an intention to update the software when it is determined that the location of the electronic key is in the vehicle. An intention confirmation signal for confirming with the user may be transmitted to the electronic key. Upon receiving the intention confirmation signal, the electronic key waits for a predetermined operation by the user on the electronic key, and when the predetermined operation is performed on the electronic key, the vehicle control device outputs a signal requesting download. Send to server.

  Further, in the vehicle control system including the vehicle control device and the electronic key as described above, the electronic key itself may determine the location of the electronic key.

  In the present invention, the electronic key may display for prompting the user to perform the operation until the predetermined operation is performed.

  In the present invention, the portable device may be a smartphone that communicates with the electronic key by short-range wireless communication.

  According to the present invention, the vehicle software can be safely updated without impairing the convenience of the user.

It is the schematic of the vehicle control system of 1st Embodiment. It is a block diagram of the vehicle control system of a 1st embodiment. It is a flowchart which shows the software update procedure by 1st Embodiment. It is a figure which shows the update notification screen in 1st Embodiment. It is a figure which shows the guidance screen in 1st Embodiment. It is a figure which shows the screen in process in 1st Embodiment. It is a figure which shows the completion notification screen in 1st Embodiment. It is a figure which shows the update cancellation screen in 1st Embodiment. It is a flowchart which shows the software update procedure by 2nd Embodiment. It is a flowchart which shows the software update procedure by 3rd Embodiment. It is a flowchart which shows the software update procedure by 4th Embodiment. It is the schematic of the vehicle control system of 5th Embodiment. It is a block diagram of the vehicle control system of 5th Embodiment. It is a flowchart which shows the software update procedure by 5th Embodiment. It is a figure which shows the update notification screen in 5th Embodiment. It is a figure which shows the guidance screen in 5th Embodiment. It is a figure which shows the screen in process in 5th Embodiment. It is a figure which shows the completion notification screen in 5th Embodiment. It is a figure which shows the update cancellation screen in 5th Embodiment. It is a flowchart which shows the software update procedure by 6th Embodiment. It is a flowchart which shows the software update procedure by 7th Embodiment.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. Here, the case where the software of ECU in a vehicle control apparatus is updated is mentioned as an example.

<First Embodiment>
The configuration of the vehicle control system according to the first embodiment will be described with reference to FIGS. 1 and 2.

  As shown in FIG. 1, the vehicle control system 100 of the first embodiment includes a vehicle control device 1 mounted on a vehicle V, an electronic key 2 that performs wireless communication with the vehicle control device 1, and the electronic key 2. It is comprised from the smart phone 3 which performs radio | wireless communication. The user A possesses the electronic key 2 and the smartphone 3. The user A uses the electronic key 2 and the smartphone 3 to perform software update described later. The smartphone 3 communicates with the server 4 provided in the center through a network such as the Internet. The server 4 stores software for updating the vehicle control device 1.

  Here, the smartphone 3 is an example of the “portable device” in the present invention.

  In the vehicle control system 100 of FIG. 1, downloading of update software from the server 4 is permitted or prohibited depending on the location of the electronic key 2. Although details will be described later, the outline is as follows. As shown in FIG. 1A, when the user A is in the vehicle V, that is, when the electronic key 2 is in the vehicle, the update software is downloaded from the server 4 via the smartphone 3 and the electronic key 2. It can be downloaded to the vehicle control device 1. On the other hand, as shown in FIG. 1B, when the user A gets off the vehicle V, that is, when the electronic key 2 is outside the vehicle, downloading of the update software from the server 4 is prohibited.

  As described above, the vehicle control system 100 according to the first embodiment that downloads the update software via the smartphone 3 is suitable when the data amount of the update software is small. The same applies to second to fourth embodiments described later.

  FIG. 2 shows specific configurations of the vehicle control device 1, the electronic key 2, and the smartphone 3. Hereinafter, each will be described in detail.

  The vehicle control device 1 includes a control unit 10, a storage unit 11, an LF (Low Frequency) transmission unit 12, a UHF (Ultra High Frequency) reception unit 13, and a request switch 14. The control unit 10 and the storage unit 11 constitute an entry control ECU. In addition to these, the vehicle control device 1 includes various blocks such as a car navigation device, an audio device, and a vehicle-mounted device driving unit that drives a vehicle-mounted device such as an air conditioner, and controls them. However, since it is not directly related to the present invention, the illustration is omitted. The vehicle control system 100 in FIG. 2 is also a keyless entry system that locks or unlocks the door by operating the electronic key 2, and when the user approaches or contacts the door knob, the vehicle control system 1 It is also a passive entry system that performs communication with the electronic key 2 to lock or unlock the door.

  The control unit 10 includes a CPU, and controls the operation of keyless entry and passive entry. The storage unit 11 includes a memory such as a ROM or a RAM. The storage unit 11 stores software (computer program) 11a for causing the control unit 10 to perform predetermined control. The LF transmitter 12 intermittently transmits an LF signal for confirming the location of the electronic key 2 at a predetermined cycle. The UHF receiving unit 13 receives a response signal described later transmitted from the electronic key 2. The request switch 14 constitutes a passive entry system together with the electronic key 2 and is provided in the vicinity of the knob of the door, and detects the approach or contact of the user.

  The electronic key 2 includes a control unit 20, a storage unit 21, an LF reception unit 22, a UHF transmission unit 23, a short-range wireless unit 24, an operation unit 25, and a display unit 26. Although the electronic key 2 includes other blocks, they are not shown because they are not directly related to the present invention.

  The control unit 20 includes a CPU and controls the operation of the electronic key 2. The storage unit 21 includes a memory such as a ROM or a RAM. The LF receiver 22 receives the LF signal transmitted from the LF transmitter 12 of the vehicle control device 1. The UHF transmission unit 23 transmits a response signal to be described later to the vehicle control device 1 by UHF communication. The short-range wireless unit 24 includes a short-range wireless communication circuit such as a wireless LAN or Bluetooth (registered trademark). The operation unit 25 includes a plurality of operation buttons provided on the main body of the electronic key 2. The display unit 26 includes a plurality of LEDs provided on the main body of the electronic key 2.

  The smartphone 3 includes a control unit 30, a storage unit 31, an operation unit 32, a display unit 33, a short-range wireless unit 34, a call unit 35, and a communication unit 36. The smartphone 3 includes various blocks other than these, but is not shown because it is not directly related to the present invention.

  The control unit 30 includes a CPU and controls the operation of the smartphone 3. The storage unit 31 includes a memory such as a ROM or a RAM. The operation unit 32 includes operation buttons provided on the main body of the smartphone 3 and operation buttons displayed on the display unit 33. The display unit 33 includes a liquid crystal panel provided on the main body of the smartphone 3 and a drive circuit thereof. The short-range wireless unit 34 includes a communication circuit similar to the short-range wireless unit 24 of the electronic key 2. The call unit 35 includes a speaker, a microphone, an audio circuit, and the like. The communication unit 36 includes a communication circuit that is connected to the Internet line and communicates with the server 4 (FIG. 1).

  Next, in the vehicle control system 100 having the above-described configuration, a procedure for downloading the update software from the server 4 and updating the ECU software will be described with reference to the flowchart of FIG.

  When the software update operation is completed, the server 4 delivers a notification that the software has been updated via the Internet line (step S401). Upon receiving this notification (step S301), the user's smartphone 3 displays an update notification screen 33a as shown in FIG. 4A on the display unit 33 (step S302). On this screen, a message 50a informing that updated new software is provided, an execute button 51, and a cancel button 52 are displayed. When the execute button 51 is pressed, new software can be downloaded. When the cancel button 52 is pressed, the download is stopped.

  When the user presses the execution button 51 on the update notification screen 33a (step S303; YES), the screen of the display unit 33 is switched to a guidance screen 33b as shown in FIG. 4B (step S304). When the user presses the cancel button 52 (step S303; NO), the screen of the display unit 33 is switched to an update cancel screen 33e as shown in FIG. 4E (step S322).

  4B displays a message 50b that informs the user that he / she gets on the electronic key 2 and performs a predetermined operation using the electronic key 2, and a stop button 52. When the cancel button 52 is pressed, the screen is switched to the update cancel screen 33e in FIG. 4E.

  After displaying the guidance screen 33b, the smartphone 3 transmits a signal notifying update of software from the short-range wireless unit 34 to the electronic key 2 (step S305). When the electronic key 2 receives this notification signal by the short-range wireless unit 24 (step S201), the electronic key 2 transmits the notification signal from the UHF transmission unit 23 to the vehicle control device 1 (step S202). This notification signal is received by the UHF receiver 13 of the vehicle control device 1 (step S101).

  When the vehicle control device 1 receives the software update notification signal from the electronic key 2, the vehicle control device 1 intermittently transmits an LF signal for confirming the location of the electronic key 2 from the LF transmission unit 12 at a predetermined period (step). S102). The LF signal is intermittently received at a predetermined cycle by the LF receiver 22 of the electronic key 2 (step S203).

  When the LF signal is received by the LF receiver 22, the electronic key 2 measures the strength of the LF signal at the controller 20 (step S204), and transmits a response signal including the measured value from the UHF transmitter 23 ( Step S205). This response signal is received by the UHF receiver 13 of the vehicle control device 1 (step S103).

  When the response signal is received by the UHF receiver 13, the vehicle control device 1 calculates the distance from the vehicle to the electronic key 2 based on the signal strength value included in the response signal in the controller 10. The location of the electronic key 2 is determined from the calculation result (step S104). When the electronic key 2 moves away from the vehicle, the signal strength decreases. When the electronic key 2 approaches the vehicle, the signal strength increases. Therefore, by comparing the value of the signal strength with a predetermined threshold value, the electronic key 2 is placed inside the vehicle. It can be determined whether the vehicle is outside or outside the vehicle (step S105).

  When the vehicle control device 1 determines in step S105 that the electronic key 2 is in the vehicle, that is, when it is determined that the user has boarded the vehicle, the vehicle control device 1 confirms the intention of updating the software with the user. Is transmitted from the LF transmitter 12 to the electronic key 2 (step S106). The transmitted intention confirmation signal is received by the LF receiver 22 of the electronic key 2 (step S206).

  When the LF receiving unit 22 receives the intention confirmation signal, the electronic key 2 causes the LED of the display unit 26 to blink (step S207) and performs a predetermined operation guided on the guide screen 33b of FIG. Prompt the user. This lock button is provided on the operation unit 25 of the electronic key 2. When the user presses the lock button (step S208; YES), a signal requesting to download the update software is transmitted from the short-range wireless unit 24 of the electronic key 2 to the short-range wireless unit 34 of the smartphone 3. (Step S209).

  The smartphone 3 receives the download request signal from the electronic key 2 by the short-range wireless unit 34 (step S306), and then transmits the request signal from the communication unit 36 to the server 4 through the Internet line (step S307). Thereafter, the processing screen 33c as shown in FIG. 4C is displayed on the display unit 33 (step S308). On this screen, a message 50c notifying that processing is in progress is displayed.

  When the server 4 receives the download request signal transmitted from the smartphone 3 (step S402), the server 4 transmits the update software data (hereinafter referred to as “update data”) to the smartphone 3 through the Internet line. (Step S403). The smartphone 3 receives the update data by the communication unit 36 (step S309), and then transmits the update data from the short-range wireless unit 34 to the electronic key 2 (step S310). The electronic key 2 receives the update data by the short-range wireless unit 24 (step S210), and then transmits the update data from the UHF transmission unit 23 to the vehicle control device 1 (step S211).

  In the vehicle control device 1, the update data from the electronic key 2 is received by the UHF receiving unit 13 and downloaded to the storage unit 11 of the ECU (step S107). When the download is completed, the software 11a in the storage unit 11 is updated to the downloaded new software (step S108).

  After transmitting the update data in step S310, the smartphone 3 displays a completion notification screen 33d as illustrated in FIG. 4D on the display unit 33 (step S311). On this screen, a message 50d notifying that the software update has been completed is displayed.

  According to the first embodiment described above, the vehicle control device 1 communicates with the electronic key 2 and determines the location of the electronic key 2 when notified of the software update from the server 4. When it is determined that the location of the electronic key 2 is in the vehicle V, the vehicle control device 1 requests the server 4 to download the update software via the portable device 3, and the server 4 The software 11a in the storage unit 11 is updated with the transmitted update software. Therefore, only when the electronic key 2 is in the vehicle, that is, when the user is in the vehicle V, the update software is downloaded to the vehicle side. It is possible to prevent the software update that is not performed from occurring, and the safety is improved.

  In the first embodiment, the vehicle control device 1 determines that the location of the electronic key 2 is in the vehicle, and then transmits an intention confirmation signal for confirming the user's intention to update the software. To the electronic key 2. The electronic key 2 prompts the user to perform a predetermined operation (pressing the lock button) by blinking the LED, and when the operation is performed, a download request to the server 4 is made. For this reason, since the update software is downloaded after confirming the user's update intention, the safety is further improved.

  Furthermore, since the electronic key 2 is interposed between the vehicle control device 1 and the smartphone 3, the electronic key 2 serves as a gateway. For this reason, for example, even if the smartphone 3 is connected to the Internet, it is possible to improve the security on the vehicle side as compared with the case where direct communication is performed between the vehicle control device 1 and the smartphone 3.

Second Embodiment
Next, a second embodiment of the present invention will be described. The configuration of the vehicle control system according to the second embodiment is the same as the configuration shown in FIGS. 1 and 2.

  FIG. 5 shows a software update procedure in the vehicle control system of the second embodiment. In FIG. 5, steps that perform the same processing as in FIG. 3 are given the same reference numerals. In the first embodiment, in steps S106 and S206 to S208 in FIG. 3, a signal for confirming intention is sent from the vehicle control device 1 to the electronic key 2 and the intention of the user is confirmed by the electronic key 2. In the form, these steps are omitted.

  For this reason, in FIG. 5, when it is determined that the electronic key 2 is in the vehicle in step S105, the vehicle control device 1 transmits a download request signal to the electronic key 2 (step S116). Further, when receiving the request signal (step S216), the electronic key 2 transmits a download request signal to the smartphone 3 without waiting for the user's operation (step S209). The other steps in FIG. 5 are the same as those in FIG.

  According to the second embodiment described above, as in the first embodiment, the update software is downloaded only when the electronic key 2 is in the vehicle, so that safety is improved. Further, the user's operation on the electronic key 2 becomes unnecessary, and convenience is improved. Furthermore, as in the first embodiment, the electronic key 2 serves as a gateway, so that security on the vehicle side can be improved.

<Third Embodiment>
Next, a third embodiment of the present invention will be described. The configuration of the vehicle control system according to the third embodiment is the same as the configuration shown in FIGS.

  FIG. 6 shows a software update procedure in the vehicle control system of the third embodiment. In FIG. 6, steps that perform the same processing as in FIG. In the first embodiment, in steps S103 to S105 and S205 of FIG. 3, a response signal including the signal strength measured with the electronic key 2 is sent to the vehicle control device 1 and the vehicle control device 1 determines the location of the electronic key 2. However, in the third embodiment, these steps are omitted, and the electronic key 2 itself determines the location of the electronic key 2. In the first embodiment, the intention confirmation signal is transmitted and received in steps S106 and S206 of FIG. 3, but in the third embodiment, these steps are also omitted.

  For this reason, in FIG. 6, after measuring the signal intensity in step S204, the electronic key 2 determines its own location (step S204a) and determines whether the location is in the vehicle or outside the vehicle (step S204b). If the location is in the vehicle, the process proceeds to steps S207 to S208 for confirming the user intention. The other steps in FIG. 6 are the same as those in FIG.

  According to the third embodiment described above, as in the first embodiment, the update software is downloaded only when the electronic key 2 is in the vehicle, so that safety is improved. Moreover, since transmission / reception of a response signal and a signal for intention confirmation becomes unnecessary between the vehicle control apparatus 1 and the electronic key 2, there exists an advantage which can simplify a communication procedure. Furthermore, as in the first embodiment, the electronic key 2 serves as a gateway, so that security on the vehicle side can be improved.

<Fourth embodiment>
Next, a fourth embodiment of the present invention will be described. The configuration of the vehicle control system according to the fourth embodiment is the same as the configuration shown in FIGS. 1 and 2.

  FIG. 7 shows a software update procedure in the vehicle control system of the fourth embodiment. In FIG. 7, steps that perform the same processing as in FIG. 6 are denoted by the same reference numerals. In the third embodiment, the user's intention is confirmed in steps S207 to S208 in FIG. 6, but in the fourth embodiment, these steps are omitted.

  Therefore, in FIG. 7, when it is determined in step S204b that the electronic key 2 is in the vehicle, the electronic key 2 transmits a download request signal to the smartphone 3 without waiting for the user's operation (step S209). The other steps in FIG. 7 are the same as those in FIG.

  According to the fourth embodiment described above, as in the first embodiment, the update software is downloaded only when the electronic key 2 is in the vehicle, so that safety is improved. In addition, since transmission / reception of a response signal or intention confirmation signal is not required between the vehicle control device 1 and the electronic key 2, the communication procedure can be simplified, and the user's operation on the electronic key 2 is not required. Also improves. Moreover, since the electronic key 2 plays the role of a gateway as in the first embodiment, the vehicle side security can be improved.

<Fifth Embodiment>
Next, a fifth embodiment of the present invention will be described. 8 and 9 show the configuration of the vehicle control system according to the fifth embodiment. In each figure, the same parts as those in FIGS. 1 and 2 are denoted by the same reference numerals.

  As shown in FIG. 8, the vehicle control system 200 according to the fifth embodiment includes a vehicle control device 1 mounted on a vehicle V and an electronic key 2 that performs wireless communication with the vehicle control device 1. In the fifth embodiment, the smartphone 3 of the first to fourth embodiments is not used. The electronic key 2 is possessed by the user A. User A uses this electronic key 2 to update the software. The vehicle control device 1 communicates with a server 4 provided in the center through a network such as the Internet. The server 4 stores software for updating the vehicle control device 1.

  Also in the vehicle control system 200 of FIG. 8, downloading of the update software from the server 4 is permitted or prohibited according to the location of the electronic key 2. Although details will be described later, the outline is as follows. As shown in FIG. 8A, when the user A is in the vehicle V, that is, when the electronic key 2 is in the vehicle, the update software can be downloaded from the server 4 to the vehicle control device 1. On the other hand, as shown in FIG. 8B, when the user A gets off the vehicle V, that is, when the electronic key 2 is outside the vehicle, downloading of the update software from the server 4 to the vehicle control device 1 is prohibited. Is done.

  As described above, the vehicle control system 200 according to the fifth embodiment that directly downloads the update software from the server 4 to the vehicle control device 1 without using a smartphone is suitable when the data amount of the update software is large. . The same applies to sixth and seventh embodiments described later.

  FIG. 9 shows specific configurations of the vehicle control device 1 and the electronic key 2. 9 is different from FIG. 2 in that a communication unit 15 is added to the vehicle control device 1. The communication unit 15 communicates with the server 4 through an Internet line or the like. Other configurations are the same as those of the vehicle control device 1 and the electronic key 2 of FIG.

  Next, a software update procedure in the fifth embodiment will be described with reference to the flowchart of FIG.

  When the software update operation is completed, the server 4 delivers a notification that the software has been updated via the Internet line (step S421). When the communication control unit 15 receives this notification (step S121), the vehicle control device 1 displays an update notification screen 18a as shown in FIG. 11A on the screen of a car navigation device (not shown) provided in the vehicle (step S122). ). On this screen, a message 60a informing that updated new software is provided, an execute button 61, and a cancel button 62 are displayed. When the execute button 61 is pressed, new software can be downloaded. When the cancel button 62 is pressed, the download is stopped.

  When the user presses the execution button 61 on the update notification screen 18a (step S123; YES), the screen is switched to a guidance screen 18b as shown in FIG. 11B (step S124). If the user presses the cancel button 62 (step S123; NO), the screen is switched to an update cancel screen 18e as shown in FIG. 11E (step S136).

  A message 60b informing that a predetermined operation is to be performed with the electronic key 2 and a cancel button 62 are displayed on the guidance screen 18b in FIG. 11B. When the cancel button 62 is pressed, the screen is switched to the update cancel screen 18e in FIG. 11E.

  After displaying the guidance screen 18b, the vehicle control device 1 intermittently transmits an LF signal for confirming the location of the electronic key 2 from the LF transmission unit 12 at a predetermined cycle (step S125). Since subsequent steps S126 to S129 and steps S221 to S226 are the same as steps S103 to S106 and steps S203 to S208 in FIG. 3, only a brief description will be given.

  When receiving the LF signal from the vehicle control device 1 (step S221), the electronic key 2 measures the intensity of the signal (step S222) and transmits a response signal including the measured value to the vehicle control device 1 (step S223). ). Upon receiving the response signal (step S126), the vehicle control device 1 determines the location of the electronic key 2 (step S127), and determines whether the electronic key 2 is inside or outside the vehicle (step S128). Then, if the electronic key 2 is in the vehicle, an intention confirmation signal is transmitted to the electronic key 2 (step S129). Upon receiving this signal (step S224), the electronic key 2 blinks the LED (step S225) and waits for the user to press the lock button (step S226).

  When the user presses the lock button (step S226; YES), the electronic key 2 transmits a notification signal notifying that the update has been approved from the UHF transmission unit 23 to the vehicle control device 1 (step S227). When the UHF receiver 13 receives this notification signal (step S130), the vehicle control device 1 transmits a signal requesting to download the update software to the server 4 via the communication unit 15 (step S131). Thereafter, a processing screen 18c as shown in FIG. 11C is displayed on the screen of the car navigation device of the vehicle (step S132). On this screen, a message 60c notifying that processing is in progress is displayed.

  When the server 4 receives the download request signal from the vehicle control device 1 (step S422), the server 4 transmits the update software data (update data) through the Internet line (step S423). The update data is received by the communication unit 15 of the vehicle control device 1 and downloaded to the storage unit 11 of the ECU (step S133). When the download is completed, the software 11a in the storage unit 11 is updated to the downloaded new software (step S134). Then, a completion notification screen 18d as shown in FIG. 11D is displayed on the screen of the vehicle car navigation device (step S135). On this screen, a message 60d notifying that the software update has been completed is displayed.

  According to the fifth embodiment described above, as in the first embodiment, the update software is downloaded only when the electronic key 2 is in the vehicle, so that safety is improved. Further, as in the first embodiment, the update software is downloaded after confirming the user's intention to update, and thus the safety is further improved. Furthermore, since a portable device such as a smartphone is not used, the system configuration is simplified.

<Sixth Embodiment>
Next, a sixth embodiment of the present invention will be described. The configuration of the vehicle control system according to the sixth embodiment is the same as the configuration shown in FIGS.

  FIG. 12 shows a software update procedure in the vehicle control system of the sixth embodiment. In FIG. 12, steps that perform the same processing as in FIG. In the fifth embodiment, when it is determined in step S128 of FIG. 10 that the electronic key 2 is in the vehicle, in steps S129 and S224 to S227, a signal for confirming the intention is sent from the vehicle control device 1 to the electronic key 2, Although the user's intention is confirmed with the key 2, in the sixth embodiment, these steps are omitted.

  For this reason, in FIG. 12, the vehicle control device 1 transmits a download request signal to the server 4 when it is determined in step S128 that the electronic key 2 is in the vehicle (step S131). Subsequent steps S132 to S135 and steps S422 to S423 are the same as steps S132 to S135 and steps S422 to S423 in FIG.

  According to the above-described sixth embodiment, as in the fifth embodiment, since the update software is downloaded only when the electronic key 2 is in the vehicle, safety is improved. Further, the user's operation on the electronic key 2 becomes unnecessary, and convenience is improved. Furthermore, since a portable device such as a smartphone is not used, the system configuration is simplified.

<Seventh embodiment>
Next, a seventh embodiment of the present invention will be described. The configuration of the vehicle control system according to the seventh embodiment is the same as the configuration shown in FIGS.

  FIG. 13 shows a software update procedure in the vehicle control system of the seventh embodiment. In FIG. 13, steps that perform the same processing as in FIG. In the fifth embodiment, in steps S223 and S126 to 128S of FIG. 10, a response signal including the signal strength measured with the electronic key 2 is sent to the vehicle control device 1 and the vehicle control device 1 determines the location of the electronic key 2. However, in the seventh embodiment, these steps are omitted, and the electronic key 2 itself determines the location of the electronic key 2. In the fifth embodiment, the intention confirmation signal is transmitted and received in steps S129 and S224 of FIG. 10, but in the seventh embodiment, these steps are also omitted.

  For this reason, in FIG. 13, after measuring the signal intensity in step S222, the electronic key 2 determines its own location (step S230), and determines whether the location is in the vehicle or outside the vehicle (step S231). If the location is in the vehicle (step S231; YES), the electronic key 2 transmits a notification signal indicating that the location is in the vehicle to the vehicle control device 1 (step S232). When receiving the notification signal (step S125a), the vehicle control device 1 transmits a download request signal to the server 4 (step S131). Subsequent steps S132 to S135 and steps S422 to S423 are the same as steps S132 to S135 and steps S422 to S423 in FIG.

  According to the seventh embodiment described above, as in the fifth embodiment, the update software is downloaded only when the electronic key 2 is in the vehicle, so that safety is improved. In addition, since transmission / reception of a response signal or intention confirmation signal is not required between the vehicle control device 1 and the electronic key 2, the communication procedure can be simplified, and the user's operation on the electronic key 2 is not required. Also improves. Furthermore, since a portable device such as a smartphone is not used, the system configuration is simplified.

<Other embodiments>
In addition to the above-described embodiments, the present invention can employ the following various embodiments.

  In FIGS. 3, 5, 6, and 7, the vehicle control device 1 has received the software update notification from the server 4 via the smartphone 3 and the electronic key 2, but not via the electronic key 2. A software update notification may be received directly from the smartphone 3.

  3, 6, and 10, an example in which the user's intention to update is confirmed by blinking the LED with the electronic key 2 to prompt the user's operation (steps S207 and S225). Is not limited to this. For example, instead of blinking the LED, the user's operation may be prompted by changing the emission color of the LED. Moreover, you may abbreviate | omit blinking and light emission of LED.

  In FIG. 13, when it is determined that the location of the electronic key 2 is in the vehicle, a signal notifying that is transmitted to the vehicle control device 1 (step S232), and a download request signal is sent from the vehicle control device 1 to the server 4. (Step S131), but the present invention is not limited to this. For example, a communication circuit that communicates with the server 4 may be provided in the electronic key 2, and a download request signal may be transmitted from the electronic key 2 to the server 4 when the location of the electronic key 2 is determined to be in the vehicle. Further, step S232 in FIG. 13 may be replaced with steps S225 to S227 in FIG. 10 to confirm the user's intention to update.

  In the above embodiment, the ECU software (computer program) is taken as an example of vehicle software. However, the present invention is also applicable to the case of updating software incorporated in a device other than the ECU. Can do. The software downloaded from the server 4 is not limited to a computer program, and may be map data of a car navigation device, for example.

  In the above embodiment, the smartphone 3 is exemplified as the portable device. However, instead of the smartphone, other portable phones, portable tablets, and the like may be used as the portable device.

DESCRIPTION OF SYMBOLS 1 Vehicle control apparatus 2 Electronic key 3 Smartphone (portable machine)
4 Server 11 Storage unit 11a Software 15 Communication unit 100, 200 Vehicle control system A User V Vehicle

Claims (9)

A vehicle control device mounted on the vehicle and controlling the vehicle;
An electronic key that is carried by the user and communicates with the vehicle control device;
A portable device possessed by a user and communicating with the electronic key and communicating with an external server;
The vehicle control device includes:
A storage unit storing software for controlling a control target;
Upon receiving a notification about the software update from the server via the portable device, it communicates with the electronic key to determine the location of the electronic key,
When the portable device determines that the location of the electronic key is in the vehicle, the portable device transmits a signal requesting to download the update software to the server,
The vehicle control system is characterized in that the update software transmitted from the server is downloaded via the portable device, and the software in the storage unit is updated. The vehicle control system according to claim 1,
When the vehicle control device determines that the location of the electronic key is in the vehicle, the vehicle control device transmits an intention confirmation signal to the user to confirm whether the user intends to update the software. And
When the electronic key receives the intention confirmation signal, the electronic key waits for a predetermined operation by the user on the electronic key,
The vehicle control system, wherein when the predetermined operation is performed on the electronic key, the portable device transmits a signal requesting the download to the server. A vehicle control device mounted on the vehicle and controlling the vehicle;
An electronic key that is carried by the user and communicates with the vehicle control device;
A portable device possessed by a user and communicating with the electronic key and communicating with an external server;
The vehicle control device includes:
A storage unit storing software for controlling a control target;
Upon receiving a notification about the software update from the server via the portable device, it communicates with the electronic key,
The electronic key determines the location of the electronic key based on communication with the vehicle control device,
When the portable device determines that the location of the electronic key is in the vehicle, the portable device transmits a signal requesting to download the update software to the server,
The vehicle control system is characterized in that the update software transmitted from the server is downloaded via the portable device, and the software in the storage unit is updated. In the vehicle control system according to claim 3,
When the electronic key determines that the location of the electronic key is in the vehicle, the electronic key waits for a predetermined operation by the user on the electronic key.
The vehicle control system, wherein when the predetermined operation is performed on the electronic key, the portable device transmits a signal requesting the download to the server. A vehicle control device mounted on the vehicle and controlling the vehicle;
An electronic key that is carried by the user and communicates with the vehicle control device,
The vehicle control device includes:
A storage unit storing software for controlling a control target;
A communication unit that communicates with an external server,
When the communication unit receives a notification regarding the software update from the server, it communicates with the electronic key to determine the location of the electronic key,
When it is determined that the location of the electronic key is in the vehicle, a signal requesting downloading of software for update is transmitted from the communication unit to the server,
The vehicle control system, wherein the update software transmitted from the server is downloaded via the communication unit, and the software in the storage unit is updated. The vehicle control system according to claim 5, wherein
When the vehicle control device determines that the location of the electronic key is in the vehicle, the vehicle control device transmits an intention confirmation signal to the user to confirm whether the user intends to update the software. And
When the electronic key receives the intention confirmation signal, the electronic key waits for a predetermined operation by the user on the electronic key,
The vehicle control system, wherein when the predetermined operation is performed on the electronic key, the vehicle control device transmits a signal requesting the download to the server. A vehicle control device mounted on the vehicle and controlling the vehicle;
An electronic key that is carried by the user and communicates with the vehicle control device,
The vehicle control device includes:
A storage unit storing software for controlling a control target;
A communication unit that communicates with an external server,
When the communication unit receives a notification about the software update from the server, it communicates with the electronic key,
The electronic key determines the location of the electronic key based on communication with the vehicle control device,
The vehicle control device includes:
When it is determined that the location of the electronic key is in the vehicle, a signal requesting download of software for update is transmitted from the communication unit to the server,
The vehicle control system, wherein the update software transmitted from the server is downloaded via the communication unit, and the software in the storage unit is updated. In the vehicle control system according to claim 2, claim 4 or claim 6,
The vehicle control system, wherein the electronic key performs display for prompting the user to perform the operation until the predetermined operation is performed. The vehicle control system according to any one of claims 1 to 4,
The vehicle control system, wherein the portable device is a smartphone that communicates with the electronic key by short-range wireless communication.

Images