JP2021077319A - Program update system and vehicle management server - Google Patents

Abstract

To provide a program update system and a vehicle management server that can reduce botheration and anxiety felt by vehicle users.SOLUTION: A vehicle management server transmits an update program for updating an existing program of an electronic apparatus mounted on a vehicle to the vehicle. The vehicle management server includes: a communication unit that communicates with the vehicle; and a control unit that controls an update process. The control unit determines whether to present a display related to the update process of the existing program by the update program to a vehicle user according to a type of the update program, and transmits information for causing a predetermined information terminal to display the display related to the update process determined to be presented to the vehicle user to the vehicle via the communication unit.SELECTED DRAWING: Figure 1

Description

The present disclosure relates to a system for updating a program of an electronic device mounted on a vehicle or the like and a vehicle management server included in the system.

The vehicle is equipped with a plurality of electronic devices called ECUs (Electronic Control Units). An in-vehicle device such as an ECU includes a control unit such as one or more CPUs and a storage unit that stores one or more programs executed by the control units, and executes each function. In order to improve the functions of electronic devices, it has been proposed to rewrite and update the program stored in the storage unit to a newer version. In particular, it has been proposed that the vehicle receives the program update data from an external server by wireless communication so that the program can be updated without going to a maintenance shop or the like.

Patent Document 1 discloses a program update system for updating a program mounted on an ECU mounted on a vehicle. In this system, the management device manages version information and update files for each vehicle ID, so if the program implemented in the ECU is not the latest version based on the vehicle ID sent from the ECU. As long as it is, the distribution efficiency is improved by sending the update file to the ECU.

Japanese Unexamined Patent Publication No. 2011-148398

Regardless of the content updated by the update program, the update status (completion notification and permission request) for vehicle users and occupants (hereinafter referred to as "vehicle users") is displayed in accordance with the progress of the update process. If this happens, the vehicle user may feel annoyed. On the other hand, if the update status is not displayed to the vehicle user regardless of the progress of the update process, the vehicle user may feel uneasy.

The present disclosure has been made in view of the above problems, and an object of the present disclosure is to provide a program update system and a vehicle management server that can reduce anxiety and anxiety felt by a vehicle user.

In order to solve the above problems, one aspect of the disclosed technology is a vehicle management server that transmits an update program for updating an existing program of an electronic device mounted on the vehicle to the vehicle, and communicates with the vehicle. It includes a communication unit and a control unit that controls the update process, and the control unit determines whether or not to present to the vehicle user a display regarding the update process of the existing program by the update program according to the type of the update program. Then, information for displaying the display related to the update process determined to be presented to the vehicle user on the predetermined information terminal is transmitted to the vehicle via the communication unit.

In addition, another aspect of the disclosed technology is a vehicle, a vehicle management server that communicates with the vehicle, and a vehicle management server that transmits an update program for updating an existing program of an electronic device mounted on the vehicle to the vehicle. A program update system that includes a communicable information terminal, and the vehicle management server determines whether or not to present to the vehicle user a display regarding the update process of the existing program by the update program according to the type of the update program. Information for displaying the display regarding the update process determined and determined to be presented to the vehicle user on the information terminal is transmitted to the vehicle.

According to the program update system and the vehicle management server of the present disclosure technology, it is possible to reduce the anxiety and anxiety felt by the vehicle user.

The figure which shows the configuration example of the program update system which concerns on one Embodiment A diagram showing an example of an update scenario stored in the storage unit of the vehicle management server. Flowchart of the process of selecting the update scenario to be linked to the update program performed by the control unit of the vehicle management server

The program update system related to the present disclosure technology preliminarily sends a plurality of update scenarios (completion notifications and permission requests) that define update events (completion notifications and permission requests) for displaying an update status display on an information terminal based on the type of update program and the like. Keep it. When updating the program, the server sends information to the vehicle to display the display corresponding to the update event defined in the update scenario associated with the update program on the information terminal. As a result, the anxiety and anxiety felt by the vehicle user regarding the display of the update status in the program update process is reduced.

<Embodiment>
Hereinafter, an embodiment of the disclosed technology will be described in detail with reference to the drawings.

[Constitution]
FIG. 1 is a diagram showing a configuration example of a program update system according to an embodiment. The program update system 10 illustrated in FIG. 1 includes a vehicle 100, a vehicle management server 200, and a mobile device 300. The vehicle 100 includes a communication device 110, a plurality of electronic devices 120, and a display device 130. The number of electronic devices 120 is not limited.

The communication device 110, the plurality of electronic devices 120, and the display device 130 are communicably connected via an in-vehicle network such as CAN (Controller Area Network). Further, the communication device 110 is a data communication module (DCM) or the like, and is connected so as to be able to communicate with an external device such as a vehicle management server 200 or a mobile device 300 via a wireless network such as 4G or Wi-Fi. There is.

The vehicle management server 200 is a server that manages an update program necessary for updating an existing program of the electronic device 120 mounted on the vehicle 100. The vehicle management server 200 includes a communication unit 210, a storage unit 220, and a control unit 230. The communication unit 210 wirelessly communicates with the communication device 110 of the vehicle 100, accepts inquiries about updates from the vehicle 100, downloads the update program to the vehicle 100, and the like. The storage unit 220 stores an update program and an update scenario necessary for updating an existing program of the electronic device 120. The update scenario is information that defines notifications and requests (described later) that are update events displayed regarding the update process, such as an update status indicating the progress of the program update process, depending on the type of the update program. It is linked to the update program. The control unit 230 controls the vehicle management server 200 including the update process. The control unit 230 can determine, for example, whether or not to present a display regarding each update status to the vehicle user for each of the plurality of update statuses according to the type of the update program. In the present embodiment, the control unit 230 determines the display regarding the update status to be presented to the vehicle user by selecting the update scenario according to the type of the update program from the storage unit 220.

FIG. 2 is a diagram showing an example of an update scenario stored in the storage unit 220 of the vehicle management server 200. In the example of FIG. 2, the content updated by the update program, which is the type of the update program (update content), the urgency determined in advance based on the content and importance of the update program (with the urgency of the update), and the use of the vehicle. Nine update scenarios that define update events are defined based on whether or not an automatic update is set by a person (automatic update setting).

The update event is information for displaying the display corresponding to the event on the screen of the information terminal having the display screen. The information terminal in this embodiment is a display device 130 and a mobile device 300. As an example of this update event, (1) an update start notification for notifying that the update process of the update program is started, and (2) permission for the vehicle user to download the update program from the vehicle management server 200 to the electronic device 120. Data DL permission request to request, (3) Data DL completion notification notifying that the update program has been downloaded from the vehicle management server 200 to the electronic device 120, (4) Starting the update process of the existing program using the update program. Start-up preparation completion notification to notify that the preparation is completed, (5) Start-up permission request to ask the vehicle user for permission to start the update process of the existing program using the update program (that is, the control content is switched), (6) An update completion notification for notifying that the update process of the existing program using the update program has been completed can be exemplified. For the update event, notifications and permission requests other than the above may be specified as appropriate. For example, a notification indicating the existence of a program to be updated, which is shown before the update start notification, and a request for permission to start the update by the update program, which indicate the progress of the update process, can be mentioned.

As an example, the update content, which is one of the types of the update program, is the content of changing the control specification of the actuator included in the vehicle 100 (update scenarios 1 to 8) and the content of not changing the control specification of the actuator provided in the vehicle 100 (update scenario 1 to 8). It is classified into update scenario 9) and.

The contents of changing the control specifications of the actuator included in the vehicle 100 (update scenarios 1 to 8) are, for example, the operation of the equipment related to the behavior of the vehicle (the distance between the own vehicle and the preceding vehicle in driving support, the operation of the automatic brake). Vehicle users, such as those that change the timing (timing, operating amount, etc.) and the operation of the equipment installed in the vehicle (automatic sliding door opening / closing speed, automatic headlight lighting start time / lighting end time, etc.) Is the content that can recognize the change before and after updating the program. The content of changing the control specifications of the actuator included in the vehicle 100 is to add a new function that has not been installed in the vehicle 100 so far, and in principle, permission is required from the vehicle user of the vehicle 100 for the update. The contents (update scenarios 1 to 4) and the functions already installed in the vehicle 100 are improved, and measures and countermeasures for the existing functions are added. It can be classified into contents that do not require permission (update scenarios 5 to 8).

On the other hand, the content that does not change the control specifications of the actuator included in the vehicle 100 (update scenario 9) is, for example, the act of a function of automatically collecting the traveling data of the vehicle and transmitting it to a predetermined data center (of the collected data). It is the content that the vehicle user cannot recognize the change before and after updating the program, such as the one that changes the type and the upload timing of the collected data. The program of the content (update scenario 9) that does not change the control specifications of the actuator included in the vehicle 100 does not affect the vehicle user or the running of the vehicle. Regardless, it is defined so that the vehicle user can be updated without displaying any notification or permission request as an update event.

As an example, the urgency of update, which is one of the types of update programs, is one in which the urgency of update is relatively low (update scenarios 1 and 5) and one in which the urgency of update is relatively high (update scenario). It is divided into 2, 3, 6, 7). Those with a relatively low urgency of updating are defined so that the updating can be performed while displaying all notifications to the vehicle user in the updating process of the program. On the other hand, those with a relatively high degree of urgency of updating are further classified into two types according to which process during the update process the update event information is displayed to the vehicle user.

The first category, in which the urgency of the update is relatively high, is to display the information of the update event that requests permission and / or notifies the download process of the update program (update scenarios 2 and 6). The update event of the first category is, for example, an update program for which the vehicle user wants to confirm in advance whether or not data may be written to the vehicle 100 or for the vehicle user to be notified that the download of the update program is completed. Can be applied to. For example, an update program in which the amount of data is enormous and communication costs and communication times are long can be exemplified.

The second category, in which the urgency of the update is relatively high, is to display the information of the update event that requests permission and / or notifies the activation process of the downloaded update program (update scenarios 3 and 7). This second category update event is, for example, an update program that wants to notify the vehicle user that the vehicle control will be changed or to confirm to the vehicle user in advance whether or not the vehicle control may be changed. Can be applied to. For example, an update program related to changes in vehicle behavior and ride quality can be exemplified.

The automatic update setting is an item that can be arbitrarily set by the vehicle user provided in the vehicle 100 in advance. When automatic update is set to none (OFF), during the program update process from the update start notification to the update completion notification, the program is updated based on the update scenario defined according to the urgency of the update described above. Is implemented (update scenarios 1-3, 5-7). On the other hand, when automatic update is set to ON, the update event for the vehicle user is supported during the program update process from the update start notification to the update completion notification regardless of the urgency of the update. It is defined so that the update can be performed without displaying (update scenarios 4 and 8).

As an example, the electronic device 120 is a device called an ECU (Electronic Control Unit) that performs various controls of the vehicle 100. The electronic device 120 stores one or more programs executed by a control unit (not shown) such as a CPU in a storage unit (not shown) such as a RAM. The electronic device 120 communicates with the vehicle management server 200 by using the wireless communication function of the communication device 110. The electronic device 120 updates the stored current program based on the update program received from the vehicle management server 200. It should be noted that all the electronic devices 120 of the vehicle 100 do not have to be such program-updatable devices.

The display device 130 is an information terminal provided with a display screen for displaying information on update events related to the program update process in the electronic device 120. The display device 130 gives an instruction to display the update event transmitted from the electronic device 120 via the in-vehicle network, or an instruction to display the update event transmitted from the vehicle management server 200 via the wireless network. Display the screen of the predetermined notification or permission request based on. Examples of the display device 130 include a multi-information display and a car navigation device mounted on the vehicle 100.

The mobile device 300 is an information terminal provided with a display screen that receives and displays information on an update event related to a program update process in the electronic device 120 via the communication device 110. The mobile device 300 is instructed to display a display corresponding to an update event transmitted from the electronic device 120 via the wireless network, or an instruction to display a display corresponding to the update event transmitted from the vehicle management server 200 via the wireless network. Display the screen of the predetermined notification or permission request based on. As the mobile device 300, a general-purpose device such as a smartphone, a tablet device, or a personal computer owned by a vehicle user of the vehicle 100 can be exemplified.

In the program update system 10 of FIG. 1, the display device 130 and the mobile device 300 are included in the configuration as information terminals for displaying the information of the update event related to the program update process in the electronic device 120, but only one of the configurations is included. It may be. Further, if the information of the update event can be displayed and presented to the vehicle user, a configuration other than the display device 130 and the mobile device 300 may be included as the information terminal. Further, the display device 130 and the mobile device 300 may be instructed to display the update event information by the electronic device 120 performing the update, or the update status is appropriately received from the electronic device 120 performing the update. Then, the vehicle management server 200 may perform the operation.

[control]
Further referring to FIG. 3, a process executed by the vehicle management server 200 in the above-mentioned program update system 10 will be described. FIG. 3 is a flowchart showing a procedure of a process of selecting an update scenario associated with an update program performed by the control unit 230 of the vehicle management server 200 according to the present embodiment.

The process shown in FIG. 3 is started when, for example, the vehicle 100 inquires of the vehicle management server 200 whether or not there is a program update regarding the update program stored in the storage unit 220 by the vehicle management server 200.

Step S301: The control unit 230 of the vehicle management server 200 determines whether or not the update program of the inquired vehicle 100 changes the control specifications of the actuator included in the vehicle 100. If the update program is the content to change the control specifications of the actuator (step S301, yes), the process proceeds to step S302, and if the update program is not the content to change the control specifications of the actuator (step S301, yes). No), the process proceeds to step S307.

Step S302: The control unit 230 of the vehicle management server 200 determines whether or not the automatic update by the vehicle user is set in the vehicle 100. The information on whether or not the automatic update is set may be included in the inquiry for the presence or absence of the program update by the vehicle 100 and transmitted to the vehicle management server 200, or the vehicle management server 200 may send the information to the vehicle management server 200 after receiving the inquiry. You may request 100 to acquire it. If automatic update is set (step S302, yes), the process proceeds to step S306, and if automatic update is not set (step S302, no), the process proceeds to step S303.

Step S303: The control unit 230 of the vehicle management server 200 determines whether or not the update content of the update program is the content of adding a new function to the vehicle. If the update content is a function addition (step S303, yes), the process proceeds to step S304, and if the update content is not a function addition (step S303, no), the process proceeds to step S305.

Step S304: The control unit 230 of the vehicle management server 200 selects an update scenario according to the urgency of updating the update program. In the present embodiment, one of the update scenarios 1, 2, and 3 of FIG. 2 in which the update event is “notified and with permission request” is selected. By this selection, as the update status, the content of presenting at least one of the data DL permission request and the activation permission request to the vehicle user is determined. When the update scenario is selected, the update scenario selected in this step S304 is associated with the update program, and this process ends.

Step S305: The control unit 230 of the vehicle management server 200 selects an update scenario according to the urgency of updating the update program. In the present embodiment, one of the update scenarios 5, 6 and 7 of FIG. 2 in which the update event is "notified and no permission request" is selected. By this selection, the content that does not present both the data DL permission request and the activation permission request to the vehicle user is determined as the update status. When the update scenario is selected, the update scenario selected in this step S305 is associated with the update program, and this process ends.

Step S306: The control unit 230 of the vehicle management server 200 selects the update scenario 4 or 8 of FIG. 2 in which the update event is only the “update start notification and update completion notification”. By this selection, as the update status, the content of presenting only the update start notification and the update completion notification to the vehicle user is determined. When the update scenario is selected, the update scenario selected in this step S306 is associated with the update program, and this process ends.

Step S307: The control unit 230 of the vehicle management server 200 selects the update scenario 9 of FIG. 2 in which the update event is “no notification and no permission request”. By this selection, the update status is determined so that neither notification nor permission request is presented to the vehicle user. When the update scenario is selected, the update scenario selected in this step S307 is associated with the update program, and this process ends.

In the update process of the update program associated with the update scenario, the vehicle management server 200 relates to the update status that presents the display corresponding to the update event defined in the update scenario associated with the update program to the vehicle user. As a display, information for displaying on the display device 130 and / or the communication device 110 is transmitted to the vehicle 100. For example, the vehicle management server 200 transmits an update scenario to the vehicle 100 together with the update program, and the electronic device 120 that receives the update scenario receives a predetermined notification and / or according to the update scenario according to the progress of the update process of the update program. Alternatively, the permission request can be displayed on the display device 130 and / or displayed on the mobile device 300 via the communication device 110 or the vehicle management server 200. Alternatively, the vehicle management server 200 receives the progress status of the update process of the update program from the electronic device 120 at any time, and sends a predetermined notification and / or a permission request according to the update scenario according to the progress of the communication device 110. It can be displayed on the display device 130 and / or displayed on the mobile device 300 via the display device 130.

In the present embodiment, an update scenario is defined in the case where the update program is downloaded from the vehicle management server 200 to the vehicle 100 by wireless communication and the update process of the existing program is performed. However, an update scenario for updating an existing program may be further defined by using an update program that needs to be updated at a maintenance shop such as a dealer. In such a case, since the worker of the maintenance shop or the like performs the update process, the vehicle user generally does not need to grasp the progress of the update process each time. Therefore, as the update scenario, for example, only the update start notification can be defined as the update event, or only the update completion notification can be defined.

Further, in the present embodiment, the control unit 230 selects the update scenario for the update program not only according to the characteristics of the update program but also according to the individual situation of the vehicle such as the mileage of the vehicle acquired from the vehicle and the manufacturing time of parts. It may be done based on.

Further, in the present embodiment, the control unit 230 may further control various displays in relation to the above-mentioned update scenario or separately from the update scenario based on the characteristics of the update program. For example, when the update program is a program having the following characteristics (1) to (3), the control unit 230 acquires information indicating that fact from the vehicle management server 200, and the information terminal (display device 130). , The mobile device 300) may be displayed. In this case, for example, it is preferable that the information terminal (display device 130, mobile device 300) displays information in a manner of preferentially notifying the user prior to the update process so that the user can be surely recognized.
(1) A program that is obliged to notify the user that the program will be updated by law.
(2) A program in which individual setting values are reset to the vehicle, such as user-customized settings, which has a relatively large effect on convenience.
(3) An update program that is relatively large in size, requires a certain amount of time for the update process, requires a long-term stop in the garage, etc. for the update process, and has a relatively large impact on convenience.

Further, in the present embodiment, for example, in the update scenarios 4 and 8, the update start notification may include a notification indicating that the update is forcibly executed without the consent of the user. Further, in this case, it is preferable that the information terminal (display device 130, mobile device 300) displays the information in a manner of preferentially notifying the user so that the user can be surely recognized. Further, the display for the notification of the forced execution of the update process may be performed independently of the display for the notification of the start of the update.

[Action / Effect]
As described above, according to the program update system 10 according to the embodiment of the disclosed technology, the update content by the update program, the update event (completion notification or permission request) to be displayed based on the urgency of the update, and the vehicle. A plurality of update scenarios that define the presence / absence of automatic update settings by the user are stored in advance in the vehicle management server 200. Then, when updating the existing program of the electronic device 120, the display regarding the update status presented to the vehicle user determined according to the type of the update program, that is, the update event defined in the update scenario associated with the update program. Information for displaying the display corresponding to the above on the information terminal (display device 130, mobile device 300) is transmitted from the vehicle management server 200 to the vehicle 100.

By this process, the update status to be displayed on the information terminal such as the display device 130 or the mobile device 300 can be preferably set according to the type of the update program or the like. Therefore, it is possible to reduce the anxiety and anxiety felt by the vehicle user regarding the display of the update status in the program update process.

Although one embodiment of the present disclosure technology has been described above, the present disclosure technology can read not only the program update system and the vehicle management server, but also the update program transmission method, the control program of the method, and the computer that stores the control program. It can be regarded as a non-temporary storage medium, a vehicle equipped with a program update system, and the like.

The disclosed technology is useful for a program update system for electronic devices mounted on a vehicle or the like and a vehicle management server included in the system.

10 Program update system 100 Vehicle 110 Communication device 120 Electronic device 130 Display device 200 Vehicle management server 210 Communication unit 220 Storage unit 230 Control unit 300 Mobile device

Claims (7)

A vehicle management server that sends an update program for updating an existing program of an electronic device mounted on a vehicle to the vehicle.
A communication unit that communicates with the vehicle
It is equipped with a control unit that controls the update process.
The control unit
Depending on the type of the update program, it is determined whether or not to present the display regarding the update process of the existing program by the update program to the vehicle user.
Information for displaying the display related to the update process determined to be presented to the vehicle user on the predetermined information terminal is transmitted to the vehicle via the communication unit.
Vehicle management server. When the update program is a type of content that changes the control specifications of the actuator included in the vehicle, the control unit determines to present the display regarding the update process to the vehicle user.
The vehicle management server according to claim 1. The control unit determines that when the update program is of a type that does not change the control specifications of the actuator included in the vehicle, the display regarding the update process is not presented to the vehicle user.
The vehicle management server according to claim 1. The display related to the update process is a notification of the start of the update process of the existing program by the update program, a request for permission to download the update program from the vehicle management server to the electronic device, and a display from the vehicle management server to the electronic device. Notification of completion of download of the update program, notification of completion of preparation for activation of the update process of the existing program by the update program, permission request for activation of the update process of the existing program by the update program, permission request for activation of the update process of the existing program by the update program, Includes notification of completion of update processing and notification of forced execution of update processing of the existing program by the update program.
The vehicle management server according to any one of claims 1 to 3. The control unit
When information indicating that the permission for automatic update by the vehicle user is not set is received from the vehicle via the communication unit,
When the update program adds a predetermined function to the vehicle and changes the control specifications of the actuator included in the vehicle, at least one of the license requests is made by the vehicle user. Decided to present to
When the update program is other than adding a predetermined function to the vehicle and is a type of content for changing the control specifications of the actuator included in the vehicle, the permission request is presented to the vehicle user. Decide not to
The vehicle management server according to claim 4. When the control unit receives information from the vehicle indicating that the permission for automatic update by the vehicle user is set via the communication unit, the control unit notifies the start of the update process and the completion notification of the update process. Decide to present only to the vehicle user,
The vehicle management server according to claim 4. With the vehicle
A vehicle management server that communicates with the vehicle and sends an update program to the vehicle for updating an existing program of an electronic device mounted on the vehicle.
A program update system including an information terminal capable of communicating with the vehicle management server.
The vehicle management server
Depending on the type of the update program, it is determined whether or not to present the display regarding the update process of the existing program by the update program to the vehicle user.
Information for displaying the display related to the update process determined to be presented to the vehicle user on the information terminal is transmitted to the vehicle.
Program update system.

Images