JP2021086496A - Electronic control device - Google Patents

Abstract

To provide an electronic control device capable of reducing power consumption during update of a program.SOLUTION: In an electronic control device 13, a vehicle control unit 131 executes a vehicle control program 41 used for control of a vehicle. A storage device 138 includes a normally usage area for storing the vehicle control program 41, and an update usage area for storing an updated program 42 of the vehicle control program 41. A program acquisition unit 132 acquires the updated program 42 via a communication device mounted on the vehicle and writes it on the update usage area. A time zone specifying unit 134 specifies an update time zone where the vehicle control program 41 can be updated. A program updating unit 132 rewrites the vehicle control program 41 stored in the normally usage area with the updated program 42 stored in the update usage area in the specified update time zone.SELECTED DRAWING: Figure 2

Description

The present invention relates to an electronic control device mounted on a vehicle.

An electronic control unit (ECU) mounted on a vehicle includes a storage device for storing a program. The electronic control device controls the vehicle by executing a program stored in the storage device.

An electronic control device that updates a program updated in a storage device is known. For example, the electronic control device according to Patent Document 1 acquires an update program transmitted from an external center by wireless communication, and rewrites the program stored in the storage device at a preset time zone with the acquired update program.

However, the electronic control device according to Patent Document 1 is a relay device that relays communication between the external center and the in-vehicle control device during the period from the start to the end of updating the program stored in the storage device. connect. As a result, the power consumption when updating the program increases.

International Publication No. 2015/194652

An object of the present invention is to provide an electronic control device capable of reducing power consumption when updating a program.

The first invention is a vehicle control device, which includes a vehicle control unit, a storage device, a program acquisition unit, a time zone identification unit, and a program update unit. The vehicle control unit executes a vehicle control program used to control the vehicle. The storage device includes a first storage area for storing the vehicle control program and a second storage area for storing the update program of the vehicle control program stored in the first storage area. The program acquisition unit acquires the update program via the communication device mounted on the vehicle and writes it in the second storage area. The time zone specifying unit specifies an update time zone in which the stored vehicle control program can be updated. The program update unit rewrites the stored vehicle control program to the update program stored in the second storage area in the update time zone specified by the time zone identification unit.

According to the first invention, the program update unit can update the vehicle control program stored in the first storage area without communicating with the external device. Therefore, the first invention can reduce the power consumption at the time of updating the program.

The second invention is the first invention, and further includes a time determination unit and an activation request unit. The time determination unit determines the update start time for starting the update of the stored vehicle control program based on the specified update time zone. The start request unit requests the power management device that manages the power supply mounted on the vehicle to start from the update start time determined by the time determination unit. When the program update unit receives power at the update start time, the program update unit rewrites the stored vehicle control program to the stored update program.

According to the second invention, the electronic control device can be turned off until the update of the vehicle control program is started. Therefore, the second invention can reduce the power consumption until the program update is started.

The third invention is the second invention, and further includes an update determination unit. The update determination unit determines whether or not the vehicle control program can be updated based on the state of the vehicle when the electric power is supplied at the update start time.

According to the third invention, when the vehicle is used, the update of the vehicle control program can be stopped.

The fourth invention includes a first storage area for storing a vehicle control program used for controlling a vehicle, and a second storage area for storing an update program of the vehicle control program stored in the first storage area. This is a program updating method in which an electronic control device including a storage device updates a vehicle control program stored in the first storage area. The fourth invention includes a) step, b) step, c) step, and d) step. a) The step acquires the update program via the communication device mounted on the vehicle. b) The step writes the acquired update program to the second storage area. c) The step identifies an update time zone during which the stored vehicle control program can be updated. d) The step rewrites the stored vehicle control program with the update program stored in the second storage area in the specified update time zone.

The fourth invention is used in the first invention.

The present invention can provide an electronic control device capable of reducing power consumption when updating a program.

It is a functional block diagram which shows the structure of the update system which concerns on one Embodiment of this invention. It is a functional block diagram which shows the structure of the electronic control apparatus shown in FIG. It is a block diagram which shows the hardware composition of the electronic control apparatus shown in FIG. It is a figure which shows an example of the allocation of the storage area in the storage device shown in FIG. It is a sequence diagram which shows the operation of the update system shown in FIG. It is a flowchart of the update preparation process shown in FIG. It is a flowchart of the program update process shown in FIG.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. The same or corresponding parts in the drawings are designated by the same reference numerals and the description thereof will not be repeated.

[1. Constitution]
[1.1. Configuration of update system 100]
FIG. 1 is a functional block diagram showing a configuration of an update system 100 according to an embodiment of the present invention. With reference to FIG. 1, the update system 100 updates the vehicle control program executed by each of the electronic control units (ECUs) 13 mounted on the vehicle 10. The vehicle 10 is, for example, an automobile.

The update system 100 includes a communication device 11, a central gateway 12, a plurality of electronic control devices 13, a battery management device 14, a position acquisition device 15, a battery 16, an ignition switch 17, a bus 18, and a server 21. And. Of the configurations shown in FIG. 1, the configurations other than the server 21 are mounted on the vehicle 10.

The server 21 is managed by the manufacturer of the vehicle 10. The server 21 provides an update program for a vehicle control program executed by at least one of the plurality of electronic control devices 13.

The communication device 11 wirelessly communicates with the server 21. For example, a fifth generation mobile communication system is used for communication between the communication device 11 and the server 21. The communication device 11 relays the communication between the central gateway 12 and the server 21.

The central gateway 12 communicates with the server 21 via the communication device 11. When the electronic control device 13 of one of the plurality of electronic control devices 13 is designated by the server 21, the central gateway 12 acquires an update program corresponding to the designated electronic control device 13 from the server 21. The central gateway 12 transmits the acquired update program to the designated electronic control device 13.

In the following description, the central gateway 12 will be simply referred to as "gateway 12".

Each of the electronic control devices 13 forms an in-vehicle network by connecting to the gateway 12 via the bus 18. For example, CAN (Controller Area Network) is used as a communication protocol for an in-vehicle network.

Each of the electronic control devices 13 executes a vehicle control program to control various functions of the vehicle 10, such as a light, an engine, and a power steering device. The vehicle control program differs depending on the control target of each electronic control device 13.

The battery management device 14 manages the battery 16 mounted on the vehicle 10. The battery management device 14 is one of the electronic control devices 13 mounted on the vehicle 10.

The position acquisition device 15 receives a signal from a GPS (Global Positioning System) satellite and identifies the position of the vehicle 10 based on the received signal. The position acquisition device 15 generates position information 32 indicating the specified position, and transmits the generated position information 32 to the electronic control device 13. The position acquisition device 15 is one of the electronic control devices 13 mounted on the vehicle 10.

The battery 16 is a power source for the vehicle 10 and supplies electric power to each of the electronic control device 13, the battery management device 14, and the position acquisition device 15. Although not shown in FIG. 1, the communication device 11 and the gateway 12 also receive power from the battery 16. The battery 16 supplies electric power to a supply destination designated by the battery management device 14.

The ignition switch 17 changes the level of the ignition signal 31 indicating on / off of the ignition switch 17 according to the operation of the driver of the vehicle 10. The ignition signal 31 is supplied to the battery management device 14.

The bus 18 connects the gateway 12 to the electronic control device 13. The electronic control device 13 may include a plurality of buses 18. In this case, the gateway 12 relays communication between two electronic control devices 13 connected to different buses 18.

[1.2. Configuration of electronic control device 13]
FIG. 2 is a functional block diagram showing the configuration of the electronic control device 13 shown in FIG. The configuration of the plurality of electronic control devices 13 shown in FIG. 1 is common.

With reference to FIG. 2, the electronic control device 13 includes a vehicle control unit 131, a program acquisition unit 132, a program update unit 133, a time zone identification unit 134, a time determination unit 135, and an activation request unit 136. It includes an update determination unit 137 and a storage device 138.

The vehicle control unit 131 controls the vehicle 10 by executing the vehicle control program 41 stored in the storage device 138. The vehicle control program 41 differs depending on each control target of the electronic control device 13.

The program acquisition unit 132 acquires the update program 42 from the server 21 via the communication device 11 and the gateway 12, and stores the acquired update program 42 in the storage device 138. The update program 42 is an improved program of the vehicle control program 41 stored in the storage device 138.

The program acquisition unit 132 authenticates the server 21 before acquiring the update program 42. The program acquisition unit 132 transmits the random number 51 to the server 21. The program acquisition unit 132 receives the authentication key 52 generated based on the random number 51 from the server 21, and authenticates the server 21 based on the received authentication key 52.

The program update unit 133 rewrites the vehicle control program 41 stored in the storage device 138 with the update program 42 stored in the storage device 138. As a result, the vehicle control program 41 stored in the storage device 138 is updated.

The time zone specifying unit 134 acquires the ignition signal 31 from the battery management device 14 via the bus 18, and acquires the position information 32 from the position acquisition device 15 via the bus 18. The time zone specifying unit 134 specifies the update time zone based on the acquired ignition signal 31 and the position information 32, and generates the time zone information 33 indicating the specified time zone. The update time zone indicates a time zone in which the vehicle control program 41 stored in the storage device 18 can be updated.

The time zone information unit 135 receives the time zone information 33 from the time zone identification unit 134, and determines the update start time for updating the vehicle control program 41 stored in the storage device 138 based on the received time zone information 33. .. The time determination unit 135 generates update time information 34 indicating the determined update start time.

The activation request unit 136 receives the update time information 34 from the time determination unit 135. The start request unit 136 transmits the start request 35 including the received update time information 34 to the battery management device 14, thereby informing the battery management device 14 that the power supply is started at the time indicated by the update time information 34. Request.

When the update program 42 is stored in the storage device 138, the update determination unit 137 determines whether or not the vehicle control program 41 can be updated based on the ignition signal 31 acquired from the battery management device 14. When the update determination unit 137 determines that the vehicle control program 41 can be updated, the update determination unit 137 instructs the program update unit 133 to update the vehicle control program 41.

The storage device 138 is a non-volatile storage device, for example, a flash memory. The storage device 138 stores the vehicle control program 41, the update program 42, the reprogramming control program 43, and the acquisition program 44. The reprogramming control program 43 is a program for updating the vehicle control program 41 stored in the storage device 138. Is executed. The acquisition program 44 is a program for acquiring the update program 42 from the server 21.

FIG. 3 is a block diagram showing a hardware configuration of the electronic control device 13 shown in FIG. With reference to FIG. 3, the electronic control device 13 includes a CPU (Central Processing Unit) 201, a RAM (Random Access Memory) 202, a bus interface 203, an output interface 204, a bus 205, and a storage device 138. Be prepared.

The CPU 201 executes a program loaded in the RAM 202 to control the electronic control device 13. The RAM 202 is the main memory of the electronic control device 13.

When the CPU 201 executes the vehicle control program 41 loaded in the RAM 202, the CPU 201 operates as the vehicle control unit 131. When the CPU 201 executes the reprogramming control program 43 loaded in the RAM 202, the CPU 201 operates as the program update unit 133. The update program 42 is not executed by the CPU 201 in parallel with the vehicle control program 41. When the CPU 201 executes the acquisition program 44 loaded in the RAM 202, the CPU 201 operates as a program acquisition unit 132, a time zone identification unit 134, a time determination unit 135, and a start request unit 136.

The bus interface 203 is connected to the bus 18 shown in FIG. 1 and transmits / receives data to / from the gateway 12 and other electronic control devices 13. The output interface 204 outputs a control signal to a controlled object (for example, an engine or the like) of the electronic control device 13. The bus 205 connects the CPU 201, the RAM 202, the bus interface 203, and the output interface 204.

[1.4. Storage Allocation]
FIG. 4 is a diagram showing an example of allocation of the storage area 50 in the storage device 138 shown in FIG. With reference to FIG. 4, the storage area 50 includes a code flash area 51 and a data flash area 52.

The code flash area 51 is an area for storing a program executed by the CPU 201. The vehicle control program 41, the update program 42, and the reprogramming control program 43 are written in the code flash area 51.

The code flash area 51 is divided into a normal use area 511 and an update use area 512.

The normal use area 511 stores a program executed in the normal mode in which the electronic control device 13 controls the vehicle 10. Therefore, the vehicle control program 41 is written in the normal use area 511. Since the update program 42 is acquired when the electronic control device 13 operates in the normal mode, the acquisition program 44 is used in the normal mode. Therefore, the acquisition program 44 is stored in the normal use area 511.

The update use area 512 stores the program used for updating the vehicle control program 41 written in the normal use area 511. That is, the update program 42 and the reprogramming control program 43 are written in the update use area 512.

The data flash area 52 is an area for writing various data when the CPU 201 executes a program.

[2. action mode]
The operation mode of the electronic control device 13 will be described. The electronic control device 13 operates in the normal mode or the update mode.

As described above, the electronic control device 13 controls the vehicle 10 in the normal mode. The vehicle control program 41 can be executed in the normal mode. When the electronic control device 13 acquires the update program 42 in the normal mode, the electronic control device 13 executes the acquisition program 44. The electronic control device 13 accesses the normal use area 511 but does not access the update use area 512 in the normal mode.

In the update mode, the electronic control device 13 executes the reprogramming control program 43 written in the update use area 512 to update the vehicle control program 41 written in the normal use area 511. In the update mode, execution of the program written in the normal use area 511 is not permitted.

[3. Operation of update system 100]
[3.1. Send Updates]
FIG. 5 is a sequence diagram showing the operation of the update system 100 shown in FIG. With reference to FIG. 5, the update system 100 executes steps S11 to S20 to supply the update program 42 from the server 21 to the electronic control device 13 via the gateway 12.

The communication device 11 does not execute the process related to the update of the vehicle control program 41 in addition to relaying the communication between the gateway 12 and the server 21. Therefore, in FIG. 5, the display of the communication device 11 is omitted.

The server 21 transmits a vehicle information acquisition request to the gateway 12 in order to determine whether or not the electronic control device 13 that executes the vehicle control program 41 to be updated is mounted on the vehicle 10 (step S11). Hereinafter, the electronic control device 13 that executes the vehicle control program 41 to be updated will be referred to as "target ECU 13".

When the gateway 12 receives the vehicle information acquisition request, the gateway 12 transmits the vehicle information regarding the vehicle 10 to the server 21 (step S12). The vehicle information includes information that identifies each of the plurality of electronic control devices 13 mounted on the vehicle 10. The vehicle information is preset in the gateway 12. Alternatively, each time the gateway 12 receives a vehicle information acquisition request, information identifying each of the electronic control devices 13 may be acquired from each of the electronic control devices 13.

The server 21 determines whether or not the vehicle 10 is equipped with the target ECU 13 based on the vehicle information received from the gateway 12. When the vehicle 10 is equipped with the target ECU 13, the server 21 determines to update the vehicle control program 41 executed by the target ECU 13.

The server 21 notifies the gateway 12 that the update program 42 for the target ECU 13 is transmitted (step S13). The gateway 12 notifies the target ECU 13 that the update program 42 will be transmitted after the session is established (step S14). A session is then established between the gateway 12 and the server 21 (step S15). The procedure for establishing a session is not particularly limited.

Upon receiving the notification in step S14, the target ECU 13 starts the acquisition program 44. As a result, the CPU 201 of the target ECU 13 operates as the program acquisition unit 132. The server 21 is authenticated by the target ECU 13 (steps S16 to S18).

The program acquisition unit 132 transmits a random number 51 used for authentication of the server 21 to the server 21 (step S16). Specifically, the program acquisition unit 132 generates a random number 51 and transmits the generated random number 51 to the gateway 12 via the bus 18. The gateway 12 transmits the random number 51 received from the target ECU 13 to the server 21 using the session established in step S14.

The server 21 generates the authentication key 52 using the random number 51 received from the gateway 12. The server 21 transmits the generated authentication key 52 to the target ECU 13 (step S17). Specifically, the server 21 transmits the generated authentication key 52 to the gateway 12 using the session established in step S14. The gateway 12 transmits the authentication key 52 received from the server 21 to the target ECU 13 via the bus 18.

In the target ECU 13, the program acquisition unit 132 authenticates the server 21 by using the authentication key 52 received from the server 21 (step S18). Specifically, the program acquisition unit 132 generates an authentication key using the random number 51 transmitted in step S16, and compares the generated authentication key with the authentication key 52 received from the server 21. The program acquisition unit 132 determines the validity of the server 21 based on the comparison result of the authentication keys.

When the program acquisition unit 132 can confirm the validity of the server 21, the program acquisition unit 132 requests the server 21 to transmit the update program 42 (step S19). Specifically, when the gateway 12 receives the transmission request of the update program 42 from the target ECU 13, the gateway 12 transmits the received transmission request to the server 21 using the session established in step S14.

When the server 21 receives the transmission request of the update program 42, the server 21 transmits the update program 42 to the target ECU 13 (step S20). Specifically, the server 21 transmits the update program 42 to the gateway 12 using the session established in step S14. The gateway 12 transmits the update program 42 received from the server 21 to the target ECU 13 via the bus 18.

The program acquisition unit 132 stores the update program 42 transmitted in step S20 in the update use area 512 in the storage device 138 (step S21). Although not shown in FIG. 5, the program acquisition unit 132 notifies the gateway 12 that the update program 42 has been received after the storage of the update program 42 is completed. Upon receiving the notification from the program acquisition unit 132, the gateway 12 disconnects the session established between the gateway 12 and the server 21.

The target ECU 13 executes a preparatory process for updating the vehicle control program 41 after storing the update program 42 in the update use area 512 (step S22). Although the details will be described later, the update start time of the vehicle control program 41 is set in the preparation process (step S22).

After that, when the driver of the vehicle 10 turns off the ignition switch 17, the power of the electronic control device 13 shown in FIG. 1 is turned off (step S23). The target ECU 13 is activated at the update start time set in step S22 (step S24). The activation of the target ECU 13 at the update start time will be described later.

The target ECU 13 updates the vehicle control program 41 written in the normal use area 511 by using the update program 42 written in the update use area 512 (step S25). Details of step S25 will be described later.

[3.2. Update preparation (step S22)]
FIG. 6 is a flowchart of the update preparation process (step S22) shown in FIG. The update preparation process (step S22) executed by the target ECU 13 will be described with reference to FIG. When the update program 42 is stored in the update use area 512, the target ECU 13 starts the process shown in FIG.

In the target ECU 13, the time zone specifying unit 134 specifies the update time zone (step S221). The update time zone is a time zone in which the vehicle control program 41 written in the normal use area 511 can be updated. At least one update time zone may be specified. The time zone specifying unit 134 outputs the time zone information 33 indicating the specified update time zone to the time zone determining unit 135.

For example, the update time zone is specified based on the history of the level change of the ignition signal 31. Specifically, the time zone specifying unit 134 identifies a candidate time zone that is the time when the ignition switch 17 is off and is longer than the time required to update the vehicle control program 41. When the appearance frequency of the candidate time zone exceeds a predetermined threshold value, the time zone specifying unit 134 determines the specified candidate time zone as the update time zone.

The time zone specifying unit 134 may specify the update time zone based on not only the level change of the ignition signal 31 but also the position information 32 acquired from the position acquisition device 15. For example, the time zone specifying unit 134 determines whether or not the vehicle 10 is stopped at a preset position based on the position information 32. The preset position is, for example, a position registered by the owner of the vehicle 10 as a storage location for the vehicle 10. The time zone specifying unit 134 determines the candidate time zone in which the vehicle 10 is stopped at a preset position as the update time zone.

The time zone specifying unit 134 may specify the update time zone even when the update program 42 is not stored in the update use area 512.

When the time zone information 33 is received from the time zone specifying unit 134, the time zone information unit 135 determines the update start time based on the update time zone included in the received time zone information 33 (step S222).

For example, the time determination unit 135 selects the time zone in which the ignition switch 17 is most frequently turned off from the specified update time zones, and determines the start time of the selected update time zone as the update start time. Alternatively, the time determination unit 135 may determine the start time of the update time zone closest to the current time as the update start time. The time determination unit 135 determines the time at which the selected update time zone starts as the update start time. The time determination unit 135 outputs the update time information 34 including the determined update start time to the start request unit 136.

The start request unit 136 requests the battery management device 14 to start at the update start time determined in step S222 (step S223). Specifically, the start request unit 136 transmits a start request 35 including the determined update start time to the battery management device 14.

When the start request 35 is received from the start request unit 136, the battery management device 14 sets the update start time included in the received start request 35 in a timer (not shown). After setting the update start time in the timer, the battery management device 14 transmits a setting completion notification indicating that the setting for starting the target ECU 13 is completed to the start request unit 136.

When the start request unit 136 receives the setting completion notification from the battery management device 14, the target ECU 13 determines that the update preparation is completed, and ends the process shown in FIG.

After that, when the driver of the vehicle 10 turns off the ignition switch 17, the power of the electronic control device 13 shown in FIG. 1 is turned off (step S23 shown in FIG. 5). When the ignition switch 17 is turned off, the battery management device 14 determines whether or not the update start time is set in the timer. When the update start time is set in the timer, the battery management device 14 shifts to the sleep mode instead of turning off the power completely. In the sleep mode, the battery management device 14 continues the operation of the timer for which the update start time is set.

[3.3. Update of vehicle control program 41]
Assuming that the ignition switch 17 is off at the update start time, the update of the vehicle control program 41 (step S25) will be described in detail.

The battery management device 14 is activated when the current time reaches the update start time, and controls the battery 16 so that the battery 16 supplies electric power to the target ECU 13. The target ECU 13 is activated by receiving the power supply from the battery 16 (step S24 shown in FIG. 5), and starts the program update (step S25).

At the update start time, the battery 16 does not supply electric power to the on-board equipment of the vehicle 10 other than the target ECU 13. This is because the ignition switch 17 is turned off.

FIG. 7 is a flowchart of the program update process (step S25) shown in FIG. With reference to FIG. 7, the update determination unit 137 determines whether or not the ignition switch 17 is off (step S251).

When the ignition switch 17 is on (No in step S251), the update determination unit 137 determines that the vehicle control program 41 cannot be updated. The fact that the ignition switch 17 is on indicates that the vehicle 10 is in use.

In this case, the update determination unit 137 instructs the time determination unit 135 to determine a new update start time. The time determination unit 135 determines a new update start time of the update determination unit 137 based on the instruction of the update determination unit 137 (step S257). The start request unit 136 transmits a start request including the newly determined update start time to the battery management device 14 (step S258). Steps S257 and S258 are the same as steps S222 and S223 shown in FIG. This makes it possible to prevent the vehicle control program 41 from being updated while the vehicle 10 is in use.

When the ignition switch 17 is off (Yes in step S251), it is considered that the vehicle 10 is not in use because the target ECU 13 is activated even though the ignition switch 17 is off. In this case, the update determination unit 137 determines that the vehicle control program 41 can be updated.

Since the update determination unit 137 has determined that the vehicle control program 41 can be updated, the target ECU 13 shifts from the normal mode to the update mode (step S252). The target ECU 13 is reset as the mode shifts to the update mode. Specifically, the vehicle control unit 131 stops operating, and the program update unit 133 starts controlling the target ECU 13. The program update unit 133 prohibits the execution of the vehicle control program 41. In other words, the vehicle control program 41 ends and the reprogramming control program 43 starts.

The program update unit 133 deletes the vehicle control program 41 stored in the normal use area 511 (step S253). The program update unit 133 writes the update program 42 stored in the update use area 512 into the normal use area 511 (step S254). As a result, the vehicle control program 41 stored in the normal use area 511 is updated. Although not shown in FIG. 7, the program update unit 133 deletes the update program 42 stored in the update use area 512.

After the end of step S254, the target ECU 13 shifts from the update mode to the normal mode (step S255). The target ECU 13 is reset again with the transition to the normal mode. Specifically, the reprogramming control program 43 is stopped, and the updated vehicle control program 41 is started.

The vehicle control unit 131 turns off the target ECU 13 (step S256) and ends the process shown in FIG. 7.

As described above, the electronic control device 13 acquires the update program 42 from the server 21, and stores the acquired update program 42 in the storage device 138. The electronic control device 13 specifies an update time zone in which the vehicle control program 41 can be updated, and rewrites the vehicle control program 41 to the update program 42 in the specified update time zone. The electronic control device 13 does not have to communicate with other devices such as the gateway 12 when the vehicle control program 41 is updated. Therefore, the electronic control device 13 can reduce the power consumption when the vehicle control program 41 is updated.

Further, the electronic control device 13 independently updates the vehicle control program 41 without cooperating with other devices. Therefore, the plurality of electronic control devices 13 included in the vehicle 10 can update the vehicle control program 41 in parallel. The update time of the plurality of vehicle control programs 41 corresponding to each of the plurality of electronic control devices 13 can be shortened.

Further, the electronic control device 13 determines the update start time based on the update time zone, and requests the battery monitoring device 14 to start the power supply at the determined update start time. As a result, the electronic control device 13 can be turned off until the update of the vehicle control program 41 is started, so that the power consumption can be further reduced.

[Modification example]
In the above embodiment, the example in which the electronic control device 13 includes the update determination unit 137 has been described, but the present invention is not limited to this. The electronic control device 13 does not have to include the update determination unit 137. The electronic control device 13 may start updating the vehicle control program 41 when the current time reaches the update start time.

In the above embodiment, the example in which the electronic control device 13 includes the time determination unit 135 and the activation request unit 136 has been described, but the present invention is not limited to this. The electronic control device 13 may be turned on until the current time reaches the update time zone specified by the time zone specifying unit 134.

In the above embodiment, an example in which the time zone specifying unit 134 specifies the update time zone based on the ignition signal 31 and the position information 32 has been described, but the present invention is not limited to this. The method by which the time zone specifying unit 134 specifies the update time zone is not particularly limited.

Further, in the above embodiment, the electronic control device 13 may be individually integrated into one chip by a semiconductor device such as LSI (Large Scale Integration), or may be integrated into one chip so as to include a part or all of the electronic control device 13. Good. Although it is referred to as an LSI here, it may be referred to as an IC (Integrated Circuit), a system LSI, a super LSI, or an ultra LSI depending on the degree of integration.

Further, the execution order of the processing methods in the above-described embodiment is not limited to the description of the above-described embodiment, and the execution order may be changed without departing from the gist of the invention.

A computer program that causes a computer to perform the above-mentioned method and a computer-readable recording medium that records the program are included in the scope of the present invention. Here, examples of computer-readable recording media include flexible disks, hard disks, CD-ROMs, MOs, DVDs, DVD-ROMs, DVD-RAMs, large-capacity DVDs, next-generation DVDs, and semiconductor memories. ..

Although the embodiments of the present invention have been described above, the above-described embodiments are merely examples for carrying out the present invention. Therefore, the present invention is not limited to the above-described embodiment, and the above-described embodiment can be appropriately modified and implemented within a range that does not deviate from the gist thereof.

100 Update system 10 Vehicle 11 Communication device 12 Central gateway 13 Electronic control device 21 Server 131 Vehicle control unit 132 Program acquisition unit 133 Program update unit 134 Time zone identification unit 135 Time determination unit 136 Start request unit 137 Update judgment unit

Claims (4)

A vehicle control unit that executes a vehicle control program used to control a vehicle,
A storage device including a first storage area for storing the vehicle control program and a second storage area for storing an update program of the vehicle control program stored in the first storage area.
A program acquisition unit that acquires the update program via a communication device mounted on the vehicle and writes it to the second storage area.
A time zone specifying unit that specifies an update time zone in which the stored vehicle control program can be updated, and
An electronic control device including a program update unit that rewrites the stored vehicle control program to an update program stored in the second storage area in an update time zone specified by the time zone specifying unit. The electronic control device according to claim 1, further
Based on the specified update time zone, a time determination unit that determines an update start time for starting the update of the stored vehicle control program, and a time determination unit.
A start request unit that requests the power management device that manages the power supply mounted on the vehicle to start from the update start time determined by the time determination unit.
The program update unit is an electronic control device that rewrites the stored vehicle control program to the stored update program when power is supplied at the update start time. The electronic control device according to claim 2, further
An electronic control device including an update determination unit that determines whether or not the vehicle control program can be updated based on the state of the vehicle when electric power is supplied at the update start time. An electronic device including a first storage area for storing a vehicle control program used for controlling a vehicle and a second storage area for storing an update program of the vehicle control program stored in the first storage area. A method of updating a program in which the control device updates the vehicle control program stored in the first storage area.
The step of acquiring the update program via the communication device mounted on the vehicle, and
A step of writing the acquired update program to the second storage area, and
A step of identifying an update time zone in which the stored vehicle control program can be updated, and
A program update method comprising a step of rewriting the stored vehicle control program with an update program stored in the second storage area in the specified update time zone.

Images