JP2020064440A - Program update control device, vehicle management system, and program update control method - Google Patents

Abstract

To obtain a program update control device capable of updating a program of a device mounted on a train without affecting the train traveling control.SOLUTION: A program update control device comprises: a communication unit 1 for receiving a program update command and an update program from a ground system, wherein the program update command specifies a target device for updating a program among devices mounted in a train, wherein the update program updates the program used in the target device; and a determination unit 3 for determining whether or not the program can be updated in the target device based on a train operating state, and executing a program update process for the target device if it is determined that the program can be updated in the target device.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a program update control device mounted on a train, a vehicle management system, and a program update control method.

  Conventionally, in a train, a control program of a device mounted on the train is updated. In Patent Document 1, a program rewriting instruction device transmits a rewriting mode transition request to a device for which program rewriting is performed, causes the device for program rewriting to transition to a program rewritable mode, and then rewrites the control program. The technology is disclosed. The program rewriting instruction device confirms the communication status of the device to which the program is rewritten, and controls the rewriting of the control program according to the communication status.

JP2012-6490A

  However, in the device of the program rewriting described in Patent Document 1, when the program rewriting is performed in a state where the processing load is high under the control of the program rewriting instruction device, the processing load further increases, and the train runs or stops. There is a problem that it may affect the traveling control of the.

  The present invention has been made in view of the above, and an object thereof is to obtain a program update control device capable of updating a program of a device mounted on a train without affecting the traveling control of the train. To do.

  In order to solve the above-mentioned problems and achieve the object, the present invention is a program update control device mounted on a train, and a target device for updating a program among devices mounted on the train from a ground system. Determines whether the target device can update the program based on the specified program update command and the communication unit that receives the update program for updating the program used by the target device, and the operating status of the train However, when it is determined that the program can be updated in the target device, the determination unit that executes the program update process for the target device is provided.

  According to the present invention, the program update control device has an effect of being able to update the program of the device mounted on the train without affecting the running control of the train.

The figure which shows the structural example of the vehicle management system which concerns on Embodiment 1. Block diagram showing an example of the configuration of the program update control device according to the first embodiment The flowchart which shows the operation | movement which the program update control apparatus which concerns on Embodiment 1 controls the update of the program of the equipment mounted in the train. 4 is a flowchart showing a process in which the determination unit according to the first embodiment determines whether or not the program can be updated in the target device. The figure which shows the example at the time of comprising the processing circuit with which the program update control apparatus which concerns on Embodiment 1 is comprised with a processor and memory. The figure which shows the example at the time of comprising the processing circuit with which the program update control apparatus which concerns on Embodiment 1 is comprised by exclusive hardware. 6 is a flowchart showing a process in which the determination unit according to the second embodiment determines whether or not the program can be updated in the target device. The flowchart which shows the operation | movement which the program update control apparatus which concerns on Embodiment 3 controls the update of the program of the equipment mounted in the train. The flowchart which shows the operation | movement which the program update control apparatus which concerns on Embodiment 4 controls the update of the program of the equipment mounted in the train.

  A program update control device, a vehicle management system, and a program update control method according to an embodiment of the present invention will be described below in detail with reference to the drawings. The present invention is not limited to this embodiment.

Embodiment 1.
FIG. 1 is a diagram showing a configuration example of a vehicle management system 100 according to the first embodiment of the present invention. The vehicle management system 100 includes a train 10 and a ground system 60. The train 10 includes a vehicle 11, a vehicle 12, and a vehicle 13. Although FIG. 1 shows a case where the train 10 is a three-car train, this is an example, and the number of vehicles in the train 10 is not limited. The train 10 includes one vehicle, that is, one vehicle is operated in a single train. The vehicle 11 includes a program update control device 21, a communication terminal 31, a control central portion 41, and devices 51, 52, 53. The vehicle 12 includes a communication terminal 32 and devices 54, 55, 56. The vehicle 13 includes a communication terminal 33, a control central portion 43, and devices 57, 58, 59.

  The program update control device 21 is mounted on the train 10, and from the ground system 60, a program update command that specifies a target device for updating the program among the devices 51 to 59 mounted on the train 10, and the target device described above. Receive updates to update the programs used in. The program used in the devices 51 to 59 is, for example, a control program that controls the operation of each device, but is an example, and may be a program other than the control program. The program update control device 21 controls the update of the program in the target device designated by the program update command based on the operating state of the train 10. In the train 10, the devices that can be the target devices for updating the programs are the devices 51 to 59, but the communication terminals 31 to 33 and the control central portions 41 and 43 can also be the target devices. In FIG. 1, the train 10 includes one program update control device 21, but this is an example, and the train 10 may include a plurality of program update control devices 21. Further, the program update control device 21 is not limited to being an independent device, and may be included in, for example, the control central portions 41 and 43, or may be realized by the communication terminals 31 to 33.

  The control central parts 41 and 43 output control commands to the devices 51 to 59. Moreover, the control central parts 41 and 43 acquire the information on the operating state from the devices 51 to 59, and manage the operating state of the train 10.

  The communication terminals 31 to 33 relay the update program output from the program update control device 21, the control commands output from the control central portions 41 and 43, the operation state information output from the devices 51 to 59, and the like. The communication terminals 31 to 33 are, for example, switching hubs and routers.

  The devices 51 to 59 are mounted on the train 10 and operate in accordance with control commands from the control central parts 41 and 43. In addition, the devices 51 to 59 output information on the operating state to the control central portions 41 and 43. The devices 51 to 59 are, for example, a brake, a VVVF (Variable Voltage Variable Frequency) inverter device, a speed generator, a door, an air conditioner, a guide display device, and the like, but are not limited thereto.

  The ground system 60 updates a program update command that specifies a target device of which the program is to be updated among the devices 51 to 59 mounted on the train 10 and a program used by the above-described target device of the devices 51 to 59. To the program update control device 21 of the train 10. The ground system 60 may transmit the program update command including the update program. As shown in FIG. 1, the ground system 60 includes a communication unit 61 and a generation unit 62. The generation unit 62 generates the above-described program update command and update program. The communication unit 61 transmits the program update command and the update program generated by the generation unit 62 to the train 10. The ground system 60 may be configured to include a storage unit that stores a program update command and an update program, instead of the generation unit 62.

  The configuration of the program update control device 21 will be described. FIG. 2 is a block diagram showing a configuration example of the program update control device 21 according to the first embodiment. The program update control device 21 includes a communication unit 1, a storage unit 2, and a determination unit 3.

  The communication unit 1 is an acquisition unit that receives or acquires the above-described program update command and update program from the ground system 60. Further, the communication unit 1 transmits the update result of the program in the target device and the like to the ground system 60 under the control of the determination unit 3. The storage unit 2 stores the update program received by the communication unit 1 from the ground system 60.

  The determination unit 3 determines whether the target device designated by the program update command can update the program. Specifically, when the target device is a control system device related to at least one of running and stopping of the train 10 among the devices 51 to 59, the determination unit 3 programs the target device based on the operating state of the train 10. It is determined whether or not can be updated. The equipment of the control system is the above-mentioned brake, VVVF inverter device, or the like. The user sets in advance which of the devices 51 to 59 is a control system device and which device is a non-control system device that is not a control system. The determination unit 3 acquires information on the operating state of the train 10 from at least one of the control central units 41 and 43. The operating state of the train 10 includes the speed of the train 10, which will be described later, the driver's cab selection status, the key insertion status of the master controller installed on the train 10 cab, and the like. When determining that the program can be updated in the target device, the determination unit 3 executes the program update process for the target device.

  Next, the operation of the program update control device 21 for controlling the program update of the devices 51 to 59 mounted on the train 10 will be described. FIG. 3 is a flowchart showing an operation in which the program update control device 21 according to the first embodiment controls the update of the programs of the devices 51 to 59 mounted on the train 10.

  In the program update control device 21, the communication unit 1 receives the program update command and the update program from the ground system 60 (step S11). In the program update command, the target device for updating the program is specified. The communication unit 1 outputs a program update command to the determination unit 3 and stores the update program in the storage unit 2. The determination unit 3 determines whether the target device designated by the program update command among the devices 51 to 59 can update the program (step S12).

  The process in which the determination unit 3 determines whether the program can be updated in the target device will be described in detail. FIG. 4 is a flowchart showing a process in which the determination unit 3 according to the first embodiment determines whether or not the program can be updated in the target device. The flowchart shown in FIG. 4 shows details of the operation of step S12 of the flowchart shown in FIG.

  The determination unit 3 confirms the program update command and determines whether or not the target device for updating the program is a control system device (step S21). When the target device whose program is to be updated is a control device (step S21: Yes), the determination unit 3 acquires information on the operating state of the train 10 from the control central unit 41. The determination unit 3 confirms the speed of the train 10 based on the information on the operating state of the train 10 (step S22).

  When the speed of the train 10 is 0, that is, when the train 10 is stopped (step S22: Yes), the determination unit 3 determines whether or not the cab is selected in the train 10 based on the information on the operating state of the train 10. It is confirmed (step S23). Generally, in the example of FIG. 1, the train 10 is equipped with a driver's cab (not shown) on the vehicles 11 and 13 at both ends of the three-car train. To be selected. The method of selecting the driver's cab may use information that can determine the driver's cab used, regardless of the driver's cab selection switch.

  When the driver's cab is not selected in the train 10 (step S23: No), the determination unit 3 determines that the key of the master controller installed in the driver's cab is removed based on the information on the operating state of the train 10. It is confirmed whether or not there is (step S24). Here, the case where no driver's cab is selected is the case where none of the driver's cabs provided on the vehicles at both ends of the formation has been selected. The key removed state of the master controller indicates that the master controller cannot be used, that is, the train 10 is not in an operable state. Here, an example of confirming the key of the master controller is shown, but it may be confirmed by IC card authentication whether or not the train 10 is in an operable state.

  When the key of the master controller is in the removed state (step S24: Yes), the determination unit 3 determines that there is no possibility that the train 10 will travel, and determines that the program can be updated in the target device (step S25). Since the target device, that is, the device of the control system is assumed not to be in a high processing load when the train 10 is not likely to travel, the program can be updated in such a state. Further, the target device, that is, the device of the control system will update the program even if the processing load is high, and even if the processing load becomes higher and the normal operation is affected, the train 10 may travel. Therefore, the traveling control of the train 10 is not affected. If the target device for updating the program is not a control system device, that is, a non-control system device (step S21: No), the determining unit 3 determines that the program can be updated in the target device (step S25). ). Since the determination unit 3 does not affect the running control of the train 10 for non-control-related devices such as the guide display device, the determination unit 3 determines that the program can be updated regardless of the operating state of the train 10. .

  The determination unit 3 determines that the speed of the train 10 is not 0, that is, the train 10 is not stopped (step S22: No), the cab is selected in the train 10 (step S23: Yes), or the master. When the key of the controller is in the depressed state (step S24: No), it is determined that the train cannot be updated in the target device because the train 10 may be running or the train 10 may run (step S26). .

  Returning to the description of the flowchart in FIG. When the determination unit 3 determines that the target device whose program is to be updated can update the program (step S12: Yes), the determination unit 3 executes the program update process for the target device (step S13). Specifically, as the program update processing, the determination unit 3 outputs, to the target device, a control command that instructs the target device to update the program, and the update program stored in the storage unit 2, and the target device updates the program. Update the program using. When the target device acquires the control command and the update program from the determination unit 3, the target device updates the program of its own device using the update program. The target device outputs an update result indicating the program update success or the program update failure to the determination unit 3. The determination unit 3 transmits the update result of the target device acquired from the target device to the ground system 60 via the communication unit 1 (step S14).

  When the determination unit 3 determines that the target device that updates the program cannot update the program (step S12: No), the determination unit 3 sends a notification indicating that the target device cannot update the program via the communication unit 1. It transmits to the ground system 60 (step S15).

  As described above, when the target device whose program is to be updated is a control system device, the determination unit 3 loads the target device by the update process of the program when the train 10 is running or the train 10 may run. Therefore, the program of the target device is not updated because it may affect the normal operation, that is, the running control of the train. Note that the determination unit 3 determines that the program can be updated in the target device in the case of step S22: Yes, step S23: No, and step S24: Yes, but the present invention is not limited to this. The determination unit 3 sets one of steps S22 to S24 as a requirement, and when one requirement is satisfied, that is, step S22: Yes, step S23: No, or step S24: Yes, the target device In, it may be determined that the program can be updated. Further, the determination unit 3 may determine that the program can be updated in the target device when two of the steps S22 to S24 are set as requirements and the two requirements are satisfied. Further, the determination unit 3 may change the order of the processes of steps S22 to S24.

  Next, the hardware configuration of the program update control device 21 will be described. In the program update control device 21, the communication unit 1 is a communication device that performs wireless communication. The storage unit 2 is a memory. The determination unit 3 is realized by a processing circuit. The processing circuit may be a processor that executes a program stored in the memory and the memory, or may be dedicated hardware.

  FIG. 5 is a diagram showing an example in which the processing circuit included in the program update control device 21 according to the first embodiment is configured by a processor and a memory. When the processing circuit includes the processor 91 and the memory 92, each function of the processing circuit of the program update control device 21 is realized by software, firmware, or a combination of software and firmware. The software or firmware is described as a program and stored in the memory 92. In the processing circuit, each function is realized by the processor 91 reading and executing the program stored in the memory 92. That is, the processing circuit includes the memory 92 for storing the program that results in the processing of the program update control device 21 being executed. It can also be said that these programs cause a computer to execute the procedure and method of the program update control device 21.

  Here, the processor 91 may be a CPU (Central Processing Unit), a processing device, an arithmetic device, a microprocessor, a microcomputer, a DSP (Digital Signal Processor), or the like. The memory 92 is a nonvolatile or volatile memory such as a RAM (Random Access Memory), a ROM (Read Only Memory), a flash memory, an EPROM (Erasable Programmable ROM), or an EEPROM (registered trademark) (Electrically EPROM). A semiconductor memory, a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, a DVD (Digital Versatile Disc), or the like is applicable.

  FIG. 6 is a diagram showing an example of a case where the processing circuit included in the program update control device 21 according to the first embodiment is configured by dedicated hardware. When the processing circuit is configured by dedicated hardware, the processing circuit 93 shown in FIG. 6 is, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC (Application Specific Integrated Circuit), An FPGA (Field Programmable Gate Array) or a combination thereof is applicable. Each function of the program update control device 21 may be realized by the processing circuit 93 for each function, or each function may be collectively realized by the processing circuit 93.

  Note that each function of the program update control device 21 may be partially implemented by dedicated hardware and partially implemented by software or firmware. In this way, the processing circuit can realize each function described above by dedicated hardware, software, firmware, or a combination thereof.

  As described above, according to the present embodiment, in the program update control device 21, the determination unit 3 determines that the target device for updating the program is a control system device related to at least one of running and stopping of the train 10. In this case, it is determined whether the program can be updated in the target device based on the operating state of the train 10. Specifically, when the target device is a control device, the determination unit 3 determines that the program can be updated when the train 10 is stopped and there is no possibility that the train 10 will travel. When the target device is a control device, the determination unit 3 determines that the program cannot be updated when the train 10 is running or the train 10 may run. When it is determined that the program cannot be updated, the determination unit 3 can update the program in the target device by performing the same determination process after the train 10 stops. In this way, the program update control device 21 can update the program of the device mounted on the train 10 without affecting the travel control of the train 10.

Embodiment 2.
In the first embodiment, the determination unit 3 confirms the three items included in the information on the operating state of the train 10 and determines whether the target device that updates the program can update the program. In the second embodiment, the determination unit 3 checks the five items included in the information on the operating state of the train 10 and determines whether the target device for updating the program can update the program. In the second embodiment, the operating state of the train 10 includes, in addition to the three items described in the first embodiment, information on the operation mode of the train 10 and the insertion status of the work card in the train 10. . The part different from the first embodiment will be described.

  In the second embodiment, the configurations of vehicle management system 100 and program update control device 21 are the same as those in the first embodiment, as shown in FIGS. 1 and 2. Further, the operation of the program update control device 21 for controlling the update of the programs of the devices 51 to 59 mounted on the train 10 is also the same as that of the first embodiment as shown in FIG. In the second embodiment, the detailed operation of step S12 of the flowchart shown in FIG. 3 differs from that of the first embodiment. FIG. 7 is a flowchart showing a process in which the determination unit 3 according to the second embodiment determines whether or not the program can be updated in the target device. In the flowchart shown in FIG. 7, operations from step S21 to step S24 are the same as those in the flowchart of the first embodiment shown in FIG.

  When the key of the master controller is in the removed state (step S24: Yes), the determination unit 3 confirms whether the operation mode of the train 10 is the repair mode based on the information on the operation state of the train 10. Yes (step S31). The repair mode is a state that is set when the train 10 is inspected, repaired, or the like, and is not used for operation work.

  When the operation mode of the train 10 is the repair mode (step S31: Yes), the determination unit 3 confirms whether or not the work card is inserted in the train 10 based on the information on the operating state of the train 10 ( Step S32). The work card is a card in which information such as a train number, arrival time and departure time of each station, and the like is described, and is inserted into a predetermined position such as a driver's cab while the train 10 is in operation.

  When the work card has not been inserted (step S32: No), the determination unit 3 determines that the program can be updated in the target device because there is no possibility that the train 10 will travel (step S25). Subsequent operations are the same as those in the first embodiment.

  When the operation mode of the train 10 is not the repair mode (step S31: No) or the work card is inserted in the train 10 (step S32: Yes), the determination unit 3 is running the train 10 or the train. Assuming that 10 may travel, it is determined that the target device cannot update the program (step S26). Subsequent operations are the same as those in the first embodiment.

  In the case of step S22: Yes, step S23: No, step S24: Yes, step S31: Yes, and step S32: No, the determination unit 3 determines that the program can be updated in the target device. However, it is not limited to this. The determination unit 3 sets one of steps S22 to S24 and steps S31 to S32 as a requirement, and when one requirement is satisfied, that is, step S22: Yes, or step S23: No, or step S24: In the case of Yes, step S31: Yes, or step S32: No, it may be determined that the program can be updated in the target device. In addition, the determination unit 3 determines that the program can be updated in the target device when two or more of Step S22 to Step S24 and Step S31 to Step S32 are set as requirements and the two or more requirements are satisfied. Good. Further, the determination unit 3 may change the order of the processes of steps S22 to S24 and steps S31 to S32.

  As described above, according to the present embodiment, in the program update control device 21, the determination unit 3 can update the program in the target device by further increasing the confirmation items as compared with the first embodiment. Or not. As a result, the determination unit 3 can accurately determine that the train 10 is stopped and that the train 10 is not likely to travel, as compared with the first embodiment.

Embodiment 3.
In the first embodiment, when the determination unit 3 determines that the target device cannot update the program, it transmits a notification to that effect to the ground system 60 via the communication unit 1. In the third embodiment, when it is determined that the target device cannot update the program, the determination unit 3 performs a plurality of processes for determining whether the target device can update the program before transmitting the notification. Conduct once. The part different from the first embodiment will be described.

  In the third embodiment, the configurations of the vehicle management system 100 and the program update control device 21 are the same as in the first embodiment, as shown in FIGS. 1 and 2. In the third embodiment, the operation of the program update control device 21 for controlling the program update of the devices 51 to 59 mounted on the train 10 is different from the operation of the flowchart of the first embodiment shown in FIG. FIG. 8 is a flowchart showing an operation in which the program update control device 21 according to the third embodiment controls the update of the programs of the devices 51 to 59 mounted on the train 10. In the flowchart shown in FIG. 8, operations of steps S11 to S14 and step S15 are the same as those of the flowchart of the first embodiment shown in FIG.

  When the determination unit 3 determines that the target device that updates the program cannot update the program (step S12: No), the determination unit 3 determines whether the program can be updated by the specified number of retries, that is, the operation of step S12. It is confirmed whether or not (step S41). When the determination unit 3 has not performed the operation of step S12 for the specified number of retries (step S41: No), the determination unit 3 returns to the operation of step S12, and after the specified period has elapsed, in the target device for updating the program. Determine if the program can be updated. When the determination unit 3 has performed the operation of step S12 for the specified number of retries (step S41: Yes), the process proceeds to step S15. Subsequent operations are the same as those in the first embodiment. Although the first embodiment has been described as an example, it is an example, and the contents of the third embodiment can be applied to the second embodiment.

  As described above, according to the present embodiment, in the program update control device 21, when the determination unit 3 determines that the target device cannot update the program, whether the target device can update the program or not. It was decided to carry out the process for judging Thereby, the determination unit 3 can improve the probability of updating the program in the target device, as compared with the first and second embodiments.

Fourth Embodiment
In the first embodiment, when the determination unit 3 determines that the target device cannot update the program, it transmits a notification to that effect to the ground system 60 via the communication unit 1. In the fourth embodiment, when the determination unit 3 receives the program update command again from the ground system 60, the determination unit 3 determines whether the target device can update the program. The part different from the first embodiment will be described.

  In the fourth embodiment, the configurations of the vehicle management system 100 and the program update control device 21 are the same as those in the first embodiment, as shown in FIGS. 1 and 2. In the fourth embodiment, the operation of the program update control device 21 for controlling the program update of the devices 51 to 59 mounted on the train 10 is different from the operation of the flowchart of the first embodiment shown in FIG. FIG. 9 is a flowchart showing the operation of the program update control device 21 according to the fourth embodiment for controlling the program update of the devices 51 to 59 mounted on the train 10. In the flowchart shown in FIG. 9, operations from step S11 to step S15 are the same as those in the flowchart of the first embodiment shown in FIG.

  The determination unit 3 receives the program update command again from the ground system 60 via the communication unit 1 after the operation of step S15, that is, after transmitting the notification indicating that the target device cannot update the program. It is confirmed whether or not (step S51). For example, the determination unit 3 transmits the notification indicating that the target device cannot update the program, and then determines whether or not the program update command is received within the specified period, thereby determining the determination in step S51. I do. When the determination unit 3 does not receive the program update command (step S51: No), the operation ends. When the determination unit 3 receives the program update command (step S51: Yes), the determination unit 3 determines again whether or not the target device specified by the program update command among the devices 51 to 59 can update the program ( Step S52). In the determination unit 3, the operation content of step S52 is the same as the operation content of step S12 described above. When the determination unit 3 determines that the target device that updates the program can update the program (step S52: Yes), the determination unit 3 executes the program update process (step S13). Subsequent operations are the same as those in the first embodiment. The determination unit 3 transmits the received update program, which has been received together with the control command and the first program update command and stored in the storage unit 2, to the target device.

  When the determination unit 3 determines that the target device that updates the program cannot update the program (step S52: No), the determination unit 3 sends a notification indicating that the target device cannot update the program via the communication unit 1. It transmits to the ground system 60 (step S53). The determination unit 3 may change the content of the notification transmitted in step S52 from the content transmitted in step S15 so that it can be seen that the result is the result of reprocessing. Although the first embodiment has been described as an example, it is an example, and the contents of the fourth embodiment can be applied to the second embodiment. The contents of the fourth embodiment can also be applied to the third embodiment.

  As described above, according to the present embodiment, in the program update control device 21, the determination unit 3 transmits the notification indicating that the target device cannot update the program, and then re-executes the program from the ground system 60. When the update command is received, it is determined again whether the program can be updated in the target device. When determining that the target device can update the program, the determination unit 3 transmits the received update program to the target device together with the control command. Thereby, the determination unit 3 can improve the probability of updating the program in the target device, as compared with the first and second embodiments. Further, since the determination unit 3 does not need to retransmit the update program when the program update command is retransmitted by using the received update program, the communication traffic between the program update control device 21 and the ground system 60. Can be suppressed.

  In the first to fourth embodiments, the program update control device 21 acquires the program update command and the update program by receiving the program update command and the update program transmitted from the ground system 60. However, it is not limited to this. The program update control device 21 may acquire the update program via, for example, a storage medium brought by the user or a terminal device, and may accept the program update command by the user's operation, that is, may acquire it. Even in this case, the determination unit 3 of the program update control device 21 can determine whether the target device designated by the program update command can update the program as described above.

  The configurations shown in the above embodiments show an example of the content of the present invention, and can be combined with other known techniques, and the configurations of the configurations are possible without departing from the gist of the present invention. It is also possible to omit or change parts.

  1, 61 communication unit, 2 storage unit, 3 determination unit, 10 train, 11-13 vehicle, 21 program update control device, 31-33 communication terminal, 41, 43 control central part, 51-59 device, 60 ground system, 62 generator, 100 vehicle management system.

Claims (12)

A program update control device installed in a train,
From the ground system, a program update command that specifies a target device for updating the program among the devices mounted on the train, and a communication unit that receives the update program for updating the program used in the target device,
Based on the operating status of the train, it is determined whether the program can be updated in the target device, and when it is determined that the program can be updated in the target device, a determination to execute a program update process for the target device Department,
A program update control device comprising: When the target device is a device related to at least one of running or stopping the train,
When the operating state of the train indicates that the train is stopped, the determination unit determines that the program can be updated in the target device,
The program update control device according to claim 1, wherein When the target device is a device related to at least one of running or stopping the train,
The determining unit determines that the program can be updated in the target device when the operating state of the train indicates that the driver's cab at both ends of the train is not selected as a driver's cab to use,
The program update control device according to claim 1 or 2, characterized in that. When the target device is a device related to at least one of running or stopping the train,
The determining unit determines that the program can be updated in the target device when the operating state of the train indicates that the key of the master controller installed in the cab of the train has been removed.
The program update control device according to claim 1, wherein the program update control device is a program update control device. When the target device is a device related to at least one of running or stopping the train,
When the operation state of the train indicates that the operation mode of the train is set to the repair mode, the determination unit determines that the program can be updated in the target device,
The program update control device according to claim 1, wherein the program update control device is a program update control device. When the target device is a device related to at least one of running or stopping the train,
If the operating state of the train indicates that a work card is not inserted in the train, the determination unit determines that the program can be updated in the target device,
The program update control device according to claim 1, wherein the program update control device is a program update control device. The determination unit outputs the update program to the target device as the program update process, causes the target device to perform a program update process using the update program, and displays the update result of the program in the target device. , Transmitting to the ground system via the communication unit,
7. The program update control device according to claim 1, wherein the program update control device is a program update control device. When the determination unit determines that the target device cannot update the program, the determination unit transmits a notification indicating that the target device cannot update the program to the ground system via the communication unit,
7. The program update control device according to claim 1, wherein the program update control device is a program update control device. When the determination unit determines that the program cannot be updated in the target device, the determination unit performs a process for determining whether or not the program can be updated in the target device after a stipulated period of time, a predetermined number of times, and After performing the process a prescribed number of times, a notification indicating that the program cannot be updated in the target device is transmitted to the ground system via the communication unit,
7. The program update control device according to claim 1, wherein the program update control device is a program update control device. The determination unit, after transmitting the notification, when the program update command is acquired from the ground system via the communication unit, determines whether the program can be updated in the target device,
When it is determined that the target device can update the program, the received update program is output to the target device, and the target device performs the program update process using the update program. The program update result is transmitted to the ground system via the communication unit,
9. The program update control device according to claim 8, wherein: A program update control device according to any one of claims 1 to 10,
A program update command that specifies a target device for updating a program among devices installed in a train, and a ground system that transmits an update program for updating a program used in the target device to the train,
A vehicle management system comprising: A program update control method in a program update control device mounted on a train, comprising:
A communication unit receives, from the ground system, a program update command that specifies a target device for updating a program among the devices mounted on the train, and an update program for updating the program used in the target device. The first step,
A second step in which the determination section determines whether or not the program can be updated in the target device based on the operating state of the train;
A third step of executing a program update process for the target device when the determination unit determines that the program can be updated in the target device;
A program update control method comprising:

Images