JP5387495B2 - Electronic control device for vehicle - Google Patents

Description

  The present invention relates to an electronic control device for a vehicle configured to be capable of data communication with an external diagnostic device.

  In a vehicle maintenance factory or the like, an external diagnostic device for connecting to an electronic control device mounted on a vehicle and performing a fault diagnosis is used. The external diagnostic device can transmit various processing requests to an electronic control device connected so as to be capable of data communication, and the electronic control device executes processing according to the processing request. For example, a request such as a process of reading or erasing a fault code stored in the electronic control device, a process of initializing the electronic control device, or the like is made. Then, the electronic control unit stores the content of the processing request transmitted from the external diagnostic device so that it can be confirmed later whether or not an illegal processing according to the processing request from the external diagnostic device has been performed. It has a function.

  By the way, conventionally, when data is backed up, a technology is known that reduces the amount of data to be backed up by only backing up the changed portion from the data that was previously backed up (see, for example, Patent Document 1).

JP-A-57-90770

  However, in the electronic control device mounted on the vehicle, the amount of data to be stored can be reduced by storing the contents of the processing request transmitted from the external diagnostic device using the technique described in Patent Document 1. Even so, its storage capacity is limited. For this reason, when the amount of stored data increases and there is no storable area, there arises a problem that even if there is an unauthorized processing request thereafter, the contents of the processing request cannot be stored.

  The present invention has been made in view of these problems, and an object of the present invention is to provide a technique capable of reliably storing the contents of a processing request transmitted from an external diagnostic apparatus.

  The vehicle electronic control device according to claim 1, which has been made to achieve the above object, is configured to be capable of data communication with an external diagnostic device that diagnoses a vehicle failure, and responds to a processing request from the external diagnostic device. When the processing request information generating means receives the processing request from the external diagnostic device, the processing request instruction information indicating the processing request from the external diagnostic device and the processing request are received. External diagnosis processing request information including related information and additional information added to the processing request instruction information is created. Then, the in-device storage means compares the external diagnostic process request information created by the process request information creating means with the comparison information set for comparison with the external diagnostic process request information. Of these, the difference between the external diagnosis processing request information and the comparison information is stored in an in-device storage medium that is a storage medium provided in the vehicle electronic control device.

  The difference stored in the in-device storage medium is also transferred when the transfer part remaining amount that is the remaining storage amount that can store the different portion in the in-device storage medium is equal to or less than a predetermined transfer determination amount set in advance. At least a part of the part is transferred to an external storage unit that stores the different part in an external storage medium that is a storage medium provided outside the vehicle electronic control unit. Then, the deletion unit deletes the different part transferred by the transfer unit from the different parts stored in the internal storage medium from the internal storage medium.

  In the vehicle electronic control apparatus configured as described above, only the difference between the external diagnosis process request information and the comparison information among the external diagnosis process request information created by the process request information creating means is stored in the internal storage medium. Since the data is stored, the amount of data stored in the in-device storage medium can be reduced.

  Further, when the remaining difference storage remaining amount in the internal storage medium is equal to or less than the predetermined transfer determination amount, after transferring at least a part of the different storage stored in the internal storage medium to the external storage means, Delete from the internal storage medium. For this reason, the area for storing the external diagnosis processing request information does not disappear in the in-device storage medium. Therefore, it is possible to suppress the occurrence of a situation in which external diagnosis processing request information that is highly required to be stored in the internal storage medium cannot be stored due to a shortage of storage capacity of the internal storage medium.

  Further, in the vehicle electronic control device according to claim 1, as described in claim 2, the transfer means can store a different part in the internal storage medium, and a predetermined storage remaining amount is preset. When the transfer determination amount is less than or equal to the transfer determination amount, notification of remaining amount reduction information indicating that fact is sent to the storage device outside the device, and after that, when a transfer request command requesting transfer of the difference portion is received from the storage device outside the device, Transfer to external storage means, transfer confirmation means confirms whether or not the difference part has been successfully transferred after the transfer means has transferred the difference part, and deletion means transfers that the difference part has been successfully transferred After the confirmation by the confirmation unit, the different part may be deleted from the internal storage medium.

  In the vehicular electronic control device configured as described above, when a transfer request command for requesting transfer of a different portion is received from the external storage device, the different portion is transferred to the external storage device. Therefore, the vehicular electronic control device can transfer the different part to the external storage unit when the different part can be stored in the external storage unit. Therefore, it is possible to suppress the occurrence of a situation where the different part is wastedly transmitted to the external storage unit when the different part cannot be stored in the external storage unit.

  Furthermore, the vehicle electronic control device deletes the different portion from the in-device storage medium after confirming whether or not the different portion has been normally transferred. For this reason, although the transferred different part is not stored in the external storage means, it is possible to suppress the occurrence of a situation in which the different part is deleted from the internal storage medium.

  Further, in the vehicle electronic control device according to claim 1 or 2, the importance according to the degree of necessity of the external diagnosis processing request information is added to the external diagnosis processing request information as described in claim 3. May be given.

  In the vehicle electronic control device configured as described above, external diagnosis processing request information for prohibiting deletion, external diagnosis processing request information that does not need to be stored, and the like are easily determined based on the assigned importance. be able to. As a result, it is possible to suppress the occurrence of a situation in which external diagnostic processing request information that should not be deleted is deleted, and to improve the safety in storing external diagnostic processing request information. In addition, it is possible to suppress the occurrence of a situation in which external diagnosis processing request information that does not need to be stored is stored in the in-device storage medium, thereby saving resources in the in-device storage medium.

  Further, in the vehicle electronic control device according to claim 3, as described in claim 4, the first importance degree calculating means calculates the importance based on the state of the vehicle electronic control device. May be.

  In the vehicular electronic control device configured as described above, the importance can be set based on the state of the vehicular electronic control device. For example, if there is a processing request from an external diagnostic device while the vehicle electronic control device detects an abnormality, the abnormality information stored in the vehicle electronic control device may be deleted. It is better to increase the importance.

  Further, in the vehicle electronic control device according to claim 3 or claim 4, as described in claim 5, the processing request information creation means needs the importance given to the external diagnosis processing request information. When the degree of importance is lower than a predetermined determination importance level set in advance, the type or number of additional information given to the external diagnosis processing request information may be changed according to the difference partial storage remaining amount. .

  The vehicular electronic control device configured as described above can reduce the additional information given to the external diagnosis processing request information with low importance when the difference partial storage remaining amount is small. As a result, it is possible to suppress the occurrence of a situation in which external diagnostic processing request information with high importance cannot be stored, and to effectively use the resources of the internal storage medium.

  Further, in the vehicle electronic control device according to any one of claims 3 to 5, as described in claim 6, the in-device storage means has a predetermined difference storage remaining amount set in advance. When the amount is less than or equal to the storage determination amount, storage of external diagnosis processing request information whose importance is lower than a predetermined predetermined storage determination importance may be prohibited.

  In the vehicular electronic control device configured as described above, since the less important external diagnosis processing request information is stored, the difference partial storage remaining amount is reduced, and the high importance external diagnosis processing request information cannot be stored. Occurrence can be suppressed and resources of the storage medium in the apparatus can be effectively used.

  Further, in the vehicle electronic control device according to any one of claims 3 to 6, as described in claim 7, the second importance degree calculation means includes the external diagnostic device and the vehicle electronic control. Based on the importance calculation condition from the connection to the device until the external diagnostic device transmits the processing request, the importance assigned to the external diagnosis processing request information corresponding to the processing request is calculated, Whether or not to execute the process according to the processing request may be determined according to the importance calculated by the second importance calculating means.

  In the vehicle electronic control device configured as described above, processing corresponding to the processing request is performed based on the situation from when the external diagnostic device is connected to the vehicle electronic control device until the external diagnostic device transmits the processing request. Can be determined. For example, if an external diagnostic device is connected under conditions that cannot be considered during normal use, such as operation at midnight or operation outside the country, unauthorized modification of the vehicle electronic control device is prohibited by prohibiting specific processing requests. Can be suppressed.

  Further, in the vehicle electronic control device according to any one of claims 1 to 7, as described in claim 8, the comparison information is frequently requested from an external diagnostic device. Processing request instruction information indicating a preset processing request may be included.

In the vehicle electronic control device configured as described above, the difference between the external diagnosis processing request information and the comparison information is reduced, and the amount of data stored in the internal storage medium can be reduced.
Further, in the vehicle electronic control device according to any one of claims 1 to 8, as described in claim 9, the processing request information creation means is added according to the difference partial storage remaining amount. The type or number of information may be changed.

  In the vehicle electronic control device configured as described above, it is possible to reduce the additional information given to the external diagnosis processing request information when the difference partial storage remaining amount decreases. For this reason, it is possible to suppress the occurrence of a situation in which the external diagnosis processing request information that needs to be stored cannot be stored due to a shortage of the difference partial storage remaining amount, and the resources of the storage medium in the apparatus can be effectively used.

  Further, in the vehicle electronic control device according to any one of claims 1 to 9, as described in claim 10, the transfer means includes an external diagnostic device connected to the vehicle electronic control device. In this case, the different part may be transmitted to the external diagnostic apparatus, and the different part may be transferred to the external storage unit via the data communication function of the external diagnostic apparatus.

  In the vehicular electronic control device configured as described above, even if the vehicle does not have means for transferring the different portion to the external storage device, the external portion is used to remove the different portion from the device. It can be transferred to the storage means.

It is a block diagram which shows the structure of the electronic control apparatus 1 of 1st Embodiment, and a figure which shows the data structure of operation history information. It is a flowchart which shows the request reception process of 1st Embodiment. It is a flowchart which shows an additional information acquisition process. It is a flowchart which shows operation history creation processing. It is a flowchart which shows operation history comparison processing. It is a flowchart which shows an operation history storage process. It is a flowchart which shows operation history reading processing. It is a flowchart which shows a memory remaining amount warning notification process. It is a flowchart which shows the center communication reception process of 1st Embodiment. It is a flowchart which shows an operation history transfer process. It is a flowchart which shows a transfer confirmation process. It is a figure which shows the data structure of the storage area 22 for storage data this time. It is a figure explaining the compression method of operation history information. 4 is a diagram showing a data structure of information stored in an operation history storage area 23. FIG. It is a block diagram which shows the structure of the electronic controller 1 of 2nd Embodiment, and the figure which shows the data structure of an importance table. It is a flowchart which shows the process at the time of the request | requirement reception of 2nd Embodiment. It is a flowchart which shows importance calculation processing. It is a flowchart which shows a memory | storage destination determination process. It is a flowchart which shows the operation history storage process with importance. It is a flowchart which shows the operation history reading process with importance. It is a flowchart which shows the center communication reception process of 2nd Embodiment. It is a flowchart which shows the operation history transfer process with importance. It is a flowchart which shows the transfer confirmation process with importance. It is a figure which shows an importance calculation table and a storage area setting table.

(First embodiment)
A first embodiment of the present invention will be described below with reference to the drawings.
FIG. 1A is a block diagram showing the configuration of the electronic control device 1 of the first embodiment, and FIG. 1B is a diagram showing the data structure of operation history information.

  The electronic control device 1 is mounted on a vehicle. As shown in FIG. 1A, an external connection device 3 mounted on the vehicle, a wireless communication device 4 mounted on the vehicle, and an in-vehicle LAN 5 are used. Connected for data communication.

  The electronic control unit 1 includes a CPU 11 that executes processing based on a predetermined processing program, a ROM 12 that stores various processing programs, a RAM 13 that stores various data, and data that is stored even when power is not supplied. , An SRAM 14 that is a volatile memory configured to be constantly supplied with a voltage from a vehicle battery (not shown), and a communication interface (hereinafter referred to as a communication I / F) that connects the CPU 11 to the in-vehicle LAN 5. 16).

The SRAM 15 is provided with a comparison target data storage area 21, a current storage data storage area 22, and an operation history storage area 23.
The external connection device 3 is connected to the in-vehicle LAN 5, and connects a vehicle failure diagnosis device (so-called diagnostic tester) 6 to the electronic control device 1 via the in-vehicle LAN 5 so that data communication is possible.

The wireless communication device 4 transmits and receives various types of information by wireless communication with an external device installed outside the vehicle.
Here, the operation history information stored in the operation history storage area 23 of the electronic control device 1 includes a header part, an additional information part, and an operation content part as shown in FIG. .

The header part is the head of each operation history information, and is fixed-length data indicating which data is compressed.
The additional information section stores additional information (for example, the date, time, and operator who operated the failure diagnosis device 6) to be stored together with the operation details of the failure diagnosis device 6. Each additional information is fixed length data.

  In the operation content section, operation content information indicating the operation content of the failure diagnosis apparatus 6 is stored. Each operation content information is fixed-length data. Note that the operation content section can store the operation content divided into hierarchies such as major classification, middle classification, and minor classification.

  The electronic control unit 1 executes a request reception process that is executed when a request from the failure diagnosis apparatus 6 is received, and a center communication reception process that is executed when data is received from the remote center 100 (described later).

  First, a procedure of request reception processing executed by the CPU 11 of the electronic control device 1 will be described with reference to FIG. FIG. 2 is a flowchart showing a request reception process. The request reception process is a process executed when various requests are received from the failure diagnosis apparatus 6 via the in-vehicle LAN 5.

When this request reception process is executed, the CPU 11 first executes an additional information acquisition process (described later) in S10, and further executes an operation history creation process (described later) in S20.
In S30, it is determined whether or not comparison target data is stored in the comparison target data storage area 21, that is, whether or not the comparison target data storage area 21 is empty. Here, when the comparison target data is not stored (S30: YES), the process proceeds to S50. On the other hand, when the comparison target data is stored in the comparison target data storage area 21 (S30: NO), an operation history comparison process (described later) is executed in S40, and the process proceeds to S50.

  In S50, an operation history storage process (described later) is executed. In S60, it is determined whether or not the content of the request from the failure diagnosis apparatus 6 is “operation history read”. If the requested content is “read operation history” (S60: YES), an operation history read process (described later) is executed in S70, and the process proceeds to S90. On the other hand, when the request content is not “read operation history” (S60: NO), the process according to the request content is performed in S80, and the process proceeds to S90.

  In S90, it is determined whether or not the remaining storage capacity of the operation history storage area 23 is equal to or less than a preset notification determination amount. If the remaining storage capacity is greater than the notification determination amount (S90: NO), the request reception process is terminated. On the other hand, if the remaining storage capacity is equal to or less than the notification determination amount (S90: YES), a remaining memory warning notification process (described later) is executed in S100, and the request reception process ends.

Next, the procedure of additional information acquisition processing executed in S10 will be described with reference to FIG. FIG. 3 is a flowchart showing additional information acquisition processing.
When this additional information acquisition process is executed, the CPU 11 first acquires additional information from data held in the electronic control unit 1 in S210. For example, current location information is acquired from a GPS receiver (not shown) mounted on the vehicle. In S220, additional information is acquired from the data received from the failure diagnosis apparatus 6. For example, information indicating date, time, and worker is acquired. In S230, additional information is acquired from another electronic control device (not shown) connected via the in-vehicle LAN 5. For example, when the electronic control device 1 does not have absolute time information, the absolute time information is acquired. Then, the additional information acquisition process ends.

Next, the procedure of the operation history creation process executed in S20 will be described with reference to FIG. FIG. 4 is a flowchart showing the operation history creation process.
When this operation history creation processing is executed, the CPU 11 first writes an operation history comparison result in which all bits are 1 at the beginning of the current storage data storage area 22 in S310 (current storage data DN1 in FIG. 12). See). In S320, the additional information acquired in the additional information acquisition process in S10 is written in the area after the operation history comparison result (see current storage data DN2, DN3, DN4 in FIG. 12). In S330, the request content received from the failure diagnosis apparatus 6 is written as operation content information in the area behind the additional information (see current storage data DN5 and DN6 in FIG. 12). Then, the operation history creation process ends. The current storage data DN1 to DN6 stored in the current storage data storage area 22 are collectively referred to as current storage data.

Next, the procedure of the operation history comparison process executed in S40 will be described with reference to FIG. FIG. 5 is a flowchart showing the operation history comparison process.
When the operation history comparison process is executed, the CPU 11 first acquires comparison target data from the comparison target data storage area 21 in S410. In S420, the current storage data is acquired from the current storage data storage area 22.

  Then, in S430, it is determined whether there is data that has not been compared between the comparison target data and the current stored data (hereinafter referred to as uncompared data). If there is no uncompared data (S430: NO), the operation history comparison process is terminated. On the other hand, when there is uncompared data (S430: YES), in S440, data to be compared is acquired from the comparison target data and the current storage data.

  Thereafter, in S450, it is determined whether or not the acquired data is the same value. If the data is not the same value (S450: NO), the process proceeds to S430 and the above-described processing is repeated. On the other hand, when the data is the same value (S450: YES), in S460, the bit corresponding to the compared data is set to 0 in the operation history comparison result (current storage data DN1) in the current storage data storage area 22. Set. Then, the process proceeds to S430, and the above process is repeated.

Next, the procedure of the operation history storage process executed in S50 will be described with reference to FIG. FIG. 6 is a flowchart showing the operation history storage process.
When this operation history storage process is executed, first, in S510, the CPU 11 stores the operation history comparison result (current storage data DN1) from the current storage data storage area 22 and the data of which the operation history comparison result bit is 1. get. Thereafter, in S520, the data acquired in S510 (operation history comparison result and data whose bit is 1) is stored in the operation history storage area 23.

  In step S530, the additional information and the operation content information stored in the storage area for stored data 22 are overwritten and stored in the comparison target data storage area 21, and the operation history storage process is terminated. Hereinafter, extracting only data that is not the same value as the comparison target data from the currently stored data is referred to as compression. Restoring compressed data to the original data is called decompression.

  For example, as shown in FIG. 13, the operation history information Ip created last time is compared with the operation history information In created this time, and the header, date, time, worker, operation content 1, and operation content 2 are Since the date, worker, and operation content 1 are the same, only the header, time, and operation content 2 of the operation history information In created this time are stored (see the compressed operation history information Ic in FIG. 13). ). Thereby, the amount of stored data can be reduced.

  When the previously created operation history information Ip is the first data stored in the operation history storage area 23, as shown in FIG. 14A, the header of the operation history information Ip includes all bits. The operation history comparison result in which is 1 is written, and all of the header, date, time, operator, operation content 1 and operation content 2 are stored. Then, when the operation history information In created next and the operation history information Ip are compared, the date, the operator, and the operation content 1 are the same. For this reason, only the header, the time, and the operation content 2 are extracted from the operation history information In, and the extracted data is stored as the compressed operation history information Ic. In the header of the operation history information Ic, an operation history comparison result (that is, 01001) indicating that the date, the worker, and the operation content 1 are the same and the others are different is written.

  Since each data of the operation history information has a fixed length, the capacity of the stored operation history information can be calculated from the operation history comparison result. That is, as shown in FIG. 14B, the data lengths of the header, date, time, worker, operation content 1 and operation content 2 are 1 byte, 1 byte, 2 bytes, 2 bytes, 1 byte, Since it is 2 bytes, the operation history comparison result written in the header of the operation history information Ip is “11111”, so the capacity of the operation history information Ip is calculated as 9 bytes. Further, since the operation history comparison result written in the header of the compressed operation history information Ic is “01001”, it is calculated as 5 bytes.

Next, the procedure of the operation history reading process executed in S70 will be described with reference to FIG. FIG. 7 is a flowchart showing the operation history reading process.
When this operation history reading process is executed, the CPU 11 first acquires operation history information stored at the head of the operation history storage area 23 in S610. The operation history information is stored at the top of the operation history storage area 23 and is not compressed.

  In step S620, it is determined whether all the operation history information stored in the operation history storage area 23 has been decompressed. If all the operation history information has not been decompressed (S620: NO), the operation history information stored next is acquired from the operation history storage area 23 in S630. The operation history information acquired here is in a compressed state.

  In step S640, the operation history information (compression) acquired in step S630 is decompressed. Specifically, since the operation history information (compression) acquired in S630 is a difference from the operation history information stored immediately before, different data compared to the operation history information decompressed in S640 last time. Is added to the operation history information (compression) acquired in S630. Thereafter, the process proceeds to S630, and the above-described processing is repeated.

  On the other hand, if all of the operation history information has been decompressed (S620: YES), all of the decompressed operation history information is transmitted to the failure diagnosis apparatus 6 in S650, and the operation history reading process is terminated.

Next, the procedure of the remaining memory warning processing executed in S100 will be described with reference to FIG. FIG. 8 is a flowchart showing the remaining memory warning notification process.
When this memory remaining amount warning notification process is executed, the CPU 11 first shows memory remaining amount warning information indicating that the remaining amount of storage in the operation history storage area 23 is low and the identification number of the electronic control unit in S710. The device identification information is transmitted to the wireless communication device 4 to the remote center 100 installed outside the vehicle. In step S720, the contents indicating “waiting for transfer request” are overwritten and stored in the remote communication waiting state storage area provided in advance in the RAM 13 to indicate the state waiting for communication with the remote center 100. Then, the remaining memory warning notification process is terminated.

  Next, the procedure of center communication reception processing executed by the CPU 11 of the electronic control unit 1 will be described with reference to FIG. FIG. 9 is a flowchart showing processing at the time of center communication reception. This center communication reception process is a process executed when data is received from the remote center 100.

  When the center communication reception process is executed, the CPU 11 first determines in S810 whether the data received from the remote center 100 is an operation history transfer request. If it is an operation history transfer request (S810: YES), an operation history transfer process (described later) is executed in S820, and the center communication reception process ends.

  On the other hand, if it is not an operation history transfer request (S810: NO), it is determined that the code is an error correction code, a transfer confirmation process (described later) is executed in S830, and the center communication reception process is terminated.

Next, the procedure of the operation history transfer process executed in S820 will be described with reference to FIG. FIG. 10 is a flowchart showing the operation history transfer process.
When this operation history transfer process is executed, the CPU 11 first determines in S910 whether or not the content indicating “waiting for transfer request” is stored in the remote communication wait state storage area. That is, it is determined whether or not the remote communication waiting state is “waiting for transfer request”. If the remote communication waiting state is “waiting for transfer request” (S910: YES), all the operation history information stored in the operation history storage area 23 is transferred to the wireless communication device 4 in S920. Then, the data is transmitted to the remote center 100 installed outside the vehicle. In S930, the contents indicating "Waiting for error correction code" are overwritten and stored in the remote communication wait state storage area. Then, the operation history transfer process ends. On the other hand, when the remote communication waiting state is not “waiting for transfer request” (S910: NO), the operation history transfer process is terminated.

Next, the procedure of the transfer confirmation process executed in S830 will be described with reference to FIG. FIG. 11 is a flowchart showing the transfer confirmation process.
When this transfer confirmation process is executed, the CPU 11 first determines in S1010 whether or not the content indicating “Waiting for error correction code” is stored in the remote communication wait state storage area. That is, it is determined whether the remote communication waiting state is “waiting for error correction code”. If the remote communication wait state is “waiting for error correction code” (S1010: YES), the error correction code transmitted by the remote center 100 is acquired in S1020. In S1030, the contents indicating “None” are overwritten and stored in the remote communication waiting state storage area. Thereafter, in S1040, an error correction code of the operation history information stored in the operation history storage area 23 is calculated.

  In S1050, it is determined whether or not the error correction code value acquired in S1020 matches the error correction code value calculated in S1040. If the error correction code values match (S1050: YES), all the operation history information stored in the operation history storage area 23 is deleted in S1060, and the comparison target is obtained in S1070. The operation history information stored in the data storage area 21 is deleted, and the transfer confirmation process ends.

  On the other hand, if the error correction code values do not match (S1050: NO), all of the operation history information stored in the operation history storage area 23 is transferred again to the remote center 100 in the wireless communication device 4 in S1080. Send it. In S1090, the contents indicating “Waiting for error correction code” are overwritten and stored in the remote communication waiting state storage area. Then, the transfer confirmation process ends.

  In the electronic control device 1 configured as described above, when a processing request is received from the failure diagnosis device 6, operation history information including a header portion, an additional information portion, and an operation content portion is created (S20).

  Then, the generated operation history information is compared with the comparison target data, and the difference between the operation history information and the comparison target data in the operation history information is stored in the operation history of the SRAM 15 provided in the electronic control unit 1. Store in the area 23 (S520).

  When the remaining storage capacity of the operation history storage area 23 is equal to or less than the notification determination amount (S90: YES), all of the operation history information stored in the operation history storage area 23 is transferred to the remote center installed outside the vehicle. 100 (S920). Then, the transferred operation history information is deleted from the operation history storage area 23 of the SRAM 15 (S1060).

  Thereby, only the difference between the operation history information and the comparison target data in the created operation history information is stored in the operation history storage area 23 of the SRAM 15, so that the amount of data stored in the operation history storage area 23 of the SRAM 15 is reduced. Can be reduced.

  Furthermore, when the remaining storage capacity of the operation history storage area 23 is equal to or less than the notification determination amount, the operation history information is transferred from the operation history storage area 23 after the operation history information is transferred to the remote center 100, and therefore the operation history storage is performed. In the area 23, the area for storing the operation history information is not lost. Therefore, it is possible to suppress the occurrence of a situation in which operation history information that is highly required to be stored in the operation history storage area 23 cannot be stored due to a lack of storage capacity in the operation history storage area 23.

  Further, the deletion of the operation history information cannot be executed directly by the operator, but is performed by self-determination of the electronic control device 1. For this reason, it is possible to suppress the occurrence of a situation in which operation history information that should not be deleted is deleted due to carelessness of the operator. Furthermore, since the operation history information is stored in the electronic control unit 1, it is not necessary to hold the vehicle operation history information at each maintenance factory, and the vehicle operation history information can be shared between the maintenance shops. .

  Further, when the storage remaining amount in the operation history storage area 23 becomes equal to or less than the notification determination amount, the remaining memory warning information indicating that the remaining storage amount in the operation history storage area 23 is low is notified to the remote center 100 (S710). When the operation history transfer request is received from the remote center 100, the operation history information is transferred to the remote center 100 (S920). After that, it is confirmed that the operation history information has been normally transferred (S1050: YES). The transferred operation history information is deleted from the operation history storage area 23 of the SRAM 15 (S1060).

  Thus, when the operation history transfer request is received from the remote center 100, the operation history information is transferred to the remote center 100. Therefore, the electronic control apparatus 1 can store the operation history information in the remote center 100. The operation history information can be transferred to the remote center 100. Therefore, it is possible to suppress the occurrence of a situation where the operation history information is wastedly transmitted to the remote center 100 when the operation history information cannot be stored in the remote center 100.

  Further, after confirming whether or not the operation history information has been normally transferred, the electronic control apparatus 1 deletes the operation history information from the operation history storage area 23 of the SRAM 15, so that the transferred operation history information is transmitted to the remote center 100. It is possible to suppress the occurrence of a situation where the operation history information is deleted from the operation history storage area 23 even though it is not stored.

  Further, the additional information and the operation content information stored in the storage data storage area 22 this time are overwritten and stored in the comparison target data storage area 21 (S530). That is, the data indicating the request content received last time from the failure diagnosis apparatus 6 is set as comparison target data for comparison with the currently stored data. Thus, when one worker repeatedly operates the failure diagnosis device 6 and inputs various processing requests on the same day, the date of the additional information matches the worker in the comparison between the currently stored data and the comparison target data. The frequency increases, and the compression rate of the data stored this time can be improved.

  In the embodiment described above, the electronic control device 1 is the vehicle electronic control device according to the present invention, the failure diagnosis device 6 is the external diagnosis device according to the present invention, the processing at S20 is the processing request information creating means according to the present invention, and the processing at S520 is In-device storage means in the present invention, the process in S920 is the transfer means in the present invention, the process in S1060 is the delete means in the present invention, the process in S1050 is the transfer confirmation means in the present invention, and the remote center 100 is the external storage medium in the present invention. And storage means outside the apparatus.

  The operation content information is processing request instruction information in the present invention, the operation history information is external diagnostic processing request information in the present invention, the comparison target data is comparison information in the present invention, and the operation history storage area 23 of the SRAM 15 is an apparatus in the present invention. The internal storage medium and the notification determination amount are the predetermined transfer determination amount in the present invention.

(Second Embodiment)
The second embodiment of the present invention will be described below. In the second embodiment, only parts different from the first embodiment will be described.

  The electronic control device 1 of the second embodiment is the same as that of the first embodiment except that the configurations of the EEPROM 14 and the SRAM 15 are changed, and the request reception process and the center communication reception process are changed.

FIG. 15A is a block diagram showing the configuration of the electronic control device 1 of the second embodiment, and FIG. 15B is a diagram showing the data structure of the importance level table.
As shown in FIG. 15A, the EEPROM 14 in the electronic control device 1 of the second embodiment is provided with an operation history storage area 41 and an importance level table 42. The importance level table 42 describes the importance levels corresponding to the request contents received from the failure diagnosis apparatus 6. In the importance level table 42, as shown in FIG. 15B, the contents of the request include “data read”, “active test”, “failure code erase”, “controller initialization”, and “reprogramming”. The level of importance corresponding to these requirements is described. In addition, it shows that importance is so high that the number of importance is large. Further, “calculation” described in the importance column indicates that the importance is calculated based on the calculation described later. Since “reprogramming” is a requirement related to laws and regulations, the importance is increased in consideration of the possibility of violation of laws and regulations.

  In addition, as shown in FIG. 15A, the SRAM 15 has a storage area 51 for current storage data, a medium importance storage area 52, a small importance storage area 53, a normal storage area 54, and an EEPROM comparison target data storage area. 55 is provided. The medium importance storage area 52, the small importance storage area 53, and the normal storage area 54 are each composed of a comparison target data storage area 61 and an operation history storage area 62.

Next, a procedure of request reception processing according to the second embodiment will be described with reference to FIG. FIG. 16 is a flowchart illustrating a request reception process according to the second embodiment.
The request reception process of the second embodiment is the same as that of the first embodiment except that the processes of S50 and S70 are omitted and the processes of S12, S14, S52, S62, and S72 are added. .

That is, when the processing of S10 is completed, importance calculation processing (described later) is executed in S12, storage destination determination processing (described later) is further executed in S14, and the process proceeds to S20.
Further, when the comparison target data is not stored in S30 (S30: YES), or when the process of S40 is completed, an operation history storage process with importance (described later) is executed in S52, and the process proceeds to S60. Transition.

  If the requested content is not “read operation history” at S60 (S60: NO), it is determined at S62 whether the importance is less than 6. If the importance is less than 6 (S62: YES), the process proceeds to S80. On the other hand, when the importance is 6 or more (S62: NO), the process proceeds to S90.

If the requested content is “read operation history” in S60 (S60: YES), an operation history reading process with importance (described later) is executed in S72, and the process proceeds to S90.
Next, the importance calculation process executed in S12 will be described with reference to FIG. FIG. 17 is a flowchart showing importance calculation processing.

  When this importance calculation processing is executed, the CPU 11 first extracts the importance according to the request content from the failure diagnosis apparatus 6 with reference to the importance table 42 in S1210. Then, the extracted importance is overwritten and stored in the importance storage area provided in advance in the RAM 13 in order to indicate the contents of the importance.

  Thereafter, in S1220, it is determined whether or not the content indicating “calculation” is stored in the importance storage area. Here, when the content indicating “calculation” is not stored in the importance storage area (S1220: NO), the importance calculation processing ends. On the other hand, when the content indicating “calculation” is stored in the importance storage area (S1220: YES), in S1230, the current time is within the business time (for example, 9:00 to 18:00 in this embodiment). Judge whether there is.

  If the current time is within business time (S1230: YES), the process proceeds to S1250. On the other hand, when the current time is outside the business time (S1230: NO), 1 is added to the importance stored in the importance storage area in S1240. That is, it is determined that the degree of importance is high in a non-normal use time zone such as midnight. Then, the process proceeds to S1250. However, since the contents indicating “calculation” are stored in the importance storage area at this time, the contents indicating that the importance is 1 are overwritten and stored in the importance storage area.

  Then, when the flow shifts to S1250, it is determined whether or not the current location is in the sales country and in the store. If the current location is within the sales country and within the sales store (S1250: YES), the process proceeds to S1290. On the other hand, if the current location is in the sales country and not in the sales store (S1250: NO), it is determined in S1260 whether the current location is in the sales country.

  Here, if the current location is within the country of sale (S1260: YES), 1 is added to the importance stored in the importance storage area in S1270, and the flow proceeds to S1290. For example, when the content indicating that the importance is 1 is stored in the importance storage area, the content indicating that the importance is 2 is overwritten and stored in the importance storage area. However, when the content indicating “calculation” is stored in the importance storage area, the content indicating that the importance is 1 is overwritten and stored in the importance storage area.

  On the other hand, if the current location is not within the country of sale (S1260: NO), 5 is added to the importance stored in the importance storage area in S1280, and the flow proceeds to S1290. For example, when the content indicating that the importance is 1 is stored in the importance storage area, the content indicating that the importance is 6 is overwritten and stored in the importance storage area. However, when the content indicating “calculation” is stored in the importance storage area, the content indicating that the importance is 5 is overwritten and stored in the importance storage area.

  Then, when the flow shifts to S1290, it is determined whether or not the vehicle state is normal. If the vehicle state is normal (S1290: YES), the process proceeds to S1310. On the other hand, if the vehicle state is not normal (S1290: NO), 1 is added to the importance stored in the importance storage area in S1300, and the process proceeds to S1310. However, when the content indicating “calculation” is stored in the importance storage area, the content indicating that the importance is 1 is overwritten and stored in the importance storage area.

  In S1310, it is determined whether or not the worker is a person registered in the failure diagnosis apparatus 6. If the worker is a registered person (S1310: YES), the importance level calculation process is terminated. On the other hand, when the worker is not a registered person (S1310: NO), in S1320, 1 is added to the importance stored in the importance storage area, and the importance calculation processing is terminated. However, when the content indicating “calculation” is stored in the importance storage area, the content indicating that the importance is 1 is overwritten and stored in the importance storage area.

Next, the procedure of the storage destination determination process executed in S14 will be described with reference to FIG. FIG. 18 is a flowchart showing the storage destination determination process.
When this storage destination determination process is executed, the CPU 11 first determines in S1410 whether or not the importance stored in the importance storage area is less than 5. If the importance is less than 5 (S1410: YES), the process proceeds to S1430. On the other hand, if the degree of importance is 5 or more (S1410: NO), the content indicating “EEPROM” is overwritten and stored in the storage destination storage area provided in advance in the RAM 13 to indicate the storage destination in S1420. Then, the storage destination determination process ends.

  In S1430, it is determined whether or not the importance stored in the importance storage area is less than 3. If the importance is less than 3 (S1430: YES), the process proceeds to S1450. On the other hand, when the importance is 3 or more (S1430: NO), the content indicating “medium importance area” in the storage destination storage area provided in advance in RAM 13 to indicate the storage destination in S1440. Is overwritten and stored, and the storage destination determination process ends.

  In S1450, it is determined whether the importance stored in the importance storage area is less than 1. Here, when the importance is 1 or more (S1450: NO), in S1460, the “small importance area” is indicated in the storage destination storage area provided in advance in the RAM 13 to indicate the storage destination. The contents are overwritten and stored, and the storage destination determination process ends. On the other hand, when the importance is less than 1 (S1450: YES), in S1470, the storage destination storage area provided in advance in the RAM 13 to indicate the storage destination is overwritten with the contents indicating “normal area”. Store, and the storage destination determination process ends.

Next, the procedure of the operation history storing process with importance executed in S52 will be described with reference to FIG. FIG. 19 is a flowchart showing the operation history storing process with importance.
When the operation history storage process with importance is executed, the CPU 11 first determines in S1510 whether or not the content indicating “EEPROM” is stored in the storage destination storage area. Here, when the content indicating “EEPROM” is not stored (S1510: NO), the content indicating any one of “medium importance area”, “small importance area”, and “normal area” Is stored, and in step S1520, the operation history comparison result and the data of which the operation history comparison result bit is 1 are acquired from the current storage data storage area 51. Thereafter, in S1530, the data acquired in S1520 (operation history comparison result and data whose bit is 1) is stored in the operation history storage area 62 of the storage destination stored in the storage destination storage area. For example, when the content indicating the “small importance area” is stored in the storage destination storage area, it is stored in the operation history storage area 62 of the small importance storage area 53.

  In S1540, the additional information and operation content information stored in the storage data storage area 51 this time are overwritten and stored in the comparison target data storage area 61 stored in the storage destination storage area. Then, the operation history storing process with importance is finished.

  If the content indicating “EEPROM” is stored in S1510 (S1510: YES), the operation history comparison result and the operation history comparison result bits from the current storage data storage area 51 are stored in S1550. 1 data is acquired. Thereafter, in S 1560, the data acquired in S 1550 (operation history comparison result and data in which the bit is 1) is stored in the operation history storage area 41 of the EEPROM 14.

  In S1570, the additional information and the operation content information stored in the storage data storage area 51 this time are overwritten and stored in the EEPROM comparison target data storage area 55 of the SRAM 15, and the operation history storage process with importance is performed. finish.

Next, the procedure of the operation history reading process with importance executed in S72 will be described with reference to FIG. FIG. 20 is a flowchart showing the operation history reading process with importance.
When the operation history reading process with importance is executed, the CPU 11 first, in S1610, indicates the “normal area” in the reference storage destination storage area provided in advance in the RAM 13 to indicate the reference storage destination. Is overwritten. Thereafter, in S1620, the operation history information stored at the head of the operation history storage area of the reference storage destination stored in the reference storage destination storage area is acquired. For example, when the reference storage destination is “normal area”, the information is acquired from the operation history storage area 62 of the small importance storage area 53, and when the reference storage destination is “EEPROM”, the operation history storage of the EEPROM 14 is stored. Obtained from area 41. Note that the operation history information is stored at the head of the operation history storage area and is not compressed.

  In S1630, it is determined whether all the operation history information stored in the operation history storage area of the reference storage destination stored in the reference storage destination storage area has been decompressed. If all of the operation history information has not been decompressed (S1630: NO), in S1640, the operation history information stored next is acquired from the operation history storage area of the reference storage destination. In S1650, the operation history information (compression) acquired in S1640 is decompressed. Thereafter, the process proceeds to S1630, and the above-described processing is repeated.

  On the other hand, when all of the operation history information has been decompressed (S1630: YES), in S1660, all storage destinations, that is, EEPROM 14, medium importance storage area 52, small importance storage area 53, and normal storage are stored. It is determined whether or not the operation history information has been decompressed in all the areas 54. If the operation history information is not decompressed at all the storage destinations (S1660: NO), the reference storage destination storage area is overwritten with the contents indicating the storage area having the next highest importance in S1670. To do. For example, when the contents indicating “medium importance area” are stored in the reference storage destination storage area, the contents indicating “EEPROM” are overwritten and stored. Thereafter, the process proceeds to S1630, and the above-described processing is repeated.

  If the operation history information is decompressed at all storage destinations at S1660 (S1660: YES), all of the decompressed operation history information is transmitted to the failure diagnosis apparatus 6 at S1680, and the operation history with importance is added. The reading process ends.

Next, the procedure of the center communication reception process of the second embodiment will be described with reference to FIG. FIG. 21 is a flowchart showing the center communication reception process of the second embodiment.
The center communication reception process of the second embodiment is the same as that of the first embodiment except that the processes of S820 and S830 are omitted and the processes of S822 and S832 are added.

  That is, when the data received from the remote center 100 is an operation history transfer request in S810 (S810: YES), an operation history transfer process with importance (described later) is executed in S822 to receive center communication. End time processing. On the other hand, if it is not an operation history transfer request (S810: NO), in S832, a transfer confirmation process with importance (described later) is executed, and the center communication reception process ends.

Next, the procedure of the operation history transfer process with importance executed in S822 will be described with reference to FIG. FIG. 22 is a flowchart showing operation history transfer processing with importance.
When the operation history transfer process with importance is executed, the CPU 11 first determines in S1810 whether or not the content indicating “waiting for transfer request” is stored in the remote communication wait state storage area. That is, it is determined whether or not the remote communication waiting state is “waiting for transfer request”. If the remote communication waiting state is not “waiting for transfer request” (S1810: NO), the operation history transfer process with importance is terminated. On the other hand, when the remote communication waiting state is “waiting for transfer request” (S1810: YES), the contents indicating “normal area” are overwritten and stored in the reference storage destination storage area in S1820.

  In S1830, all the operation history information stored in the operation history storage area of the reference storage destination stored in the reference storage destination storage area is acquired. Thereafter, in S1840, it is determined whether or not the operation history information has been acquired in all of the storage destinations, that is, the EEPROM 14, the medium importance storage area 52, the small importance storage area 53, and the normal storage area 54. If the operation history information has not been acquired at all storage destinations (S1840: NO), the reference storage destination storage area is overwritten with the content indicating the next most important storage area at S1850. To do. Thereafter, the process proceeds to S1830, and the above-described processing is repeated.

  If operation history information has been acquired at all storage destinations at S1840 (S1840: YES), all of the operation history information stored in the operation history storage area at all storage destinations at S1860 The wireless communication device 4 is transmitted to the remote center 100 installed outside the vehicle. In S1870, the contents indicating "Waiting for error correction code" are overwritten and stored in the remote communication wait state storage area. Then, the operation history transfer process with importance is terminated.

Next, the procedure of the transfer confirmation process with importance executed in S832 will be described with reference to FIG. FIG. 23 is a flowchart showing transfer confirmation processing with importance.
The transfer confirmation process with importance is the same as the transfer confirmation process of the first embodiment except that the process of S1060 to S1090 is omitted and the process of S1910 to S1980 is added.

  That is, in S1050, if the error correction code values do not match (S1050: NO), the operation stored in the operation history storage area in all storage destinations is performed in S1910 in the same manner as in S1860. Send all history information again. In S1920, the contents indicating “Waiting for error correction code” are overwritten and stored in the remote communication wait state storage area. Then, the transfer confirmation process with importance is terminated. On the other hand, if the error correction code values match (S1050: YES), the contents indicating “normal area” are overwritten and stored in the reference storage destination storage area in S1930.

  In S1940, it is determined whether the importance of the reference storage destination stored in the reference storage destination storage area is less than medium. That is, it is determined whether the reference storage destination is the “small importance area” or the “normal area”. Here, when the importance of the reference storage destination is medium or higher, that is, when the reference storage destination is “EEPROM” or “medium importance area” (S1940: NO), the process proceeds to S1970.

  On the other hand, when the importance of the reference storage destination is less than medium (S1940: YES), in S1950, all the operation history information stored in the operation history storage area of the reference storage destination is deleted, and S1960. Then, the operation history information stored in the comparison target data storage area of the reference storage destination is deleted, and the process proceeds to S1970.

  Then, in S1970, it is determined whether or not the content indicating “EEPROM” is stored in the reference storage destination storage area. Here, if the content indicating “EEPROM” is not stored (S1970: NO), it is determined that the importance of the reference storage destination is not the maximum, and in S1980, the reference storage destination storage area is next stored. The contents indicating the storage area with high importance are overwritten and stored. Thereafter, the process proceeds to S1830, and the above-described processing is repeated. On the other hand, when the content indicating “EEPROM” is stored (S1970: YES), the transfer confirmation process with importance is terminated.

  In the electronic control device 1 configured as described above, importance is given to the operation history information. 24A to 24D are diagrams illustrating importance calculation tables that define importance calculation conditions. FIG. 24E is a diagram showing a storage area setting table showing the correspondence between importance and storage destination storage areas.

  As shown in FIG. 15B, when the requested contents are “data read”, “active test”, and “reprogramming”, the importance is set to 0, 0, 5 (S1210). On the other hand, when the request contents are “failure code deletion” and “control device initialization”, the request contents are calculated based on the importance calculation tables shown in FIGS. 24A to 24D (S1230 to S1320).

  First, as shown in FIG. 24A, the importance level is maintained when the current time is within the business time, while the importance level is incremented by 1 when the current time is outside the business time. Also, as shown in FIG. 24B, the importance level is maintained when the current location is in the sales country and in the sales store, and the importance level is incremented by 1 when the current location is in the sales location and outside the sales store. If the current location is outside the country of sale, 5 is added to the importance. As shown in FIG. 24C, the importance is maintained when the vehicle is in a normal state, while the importance is incremented by 1 when the vehicle is in an abnormal state. As shown in FIG. 24D, the importance level is maintained when the worker has been registered, while the importance level is incremented by 1 when the worker is not registered (guest account). .

  As shown in FIG. 24E, the storage destination when the importance is 0 is the normal storage area 54, the storage destination when the importance is 1-2 is the small importance storage area 53, and the importance is The storage destination in the case of 3 to 4 is set in the medium importance storage area 52, and the storage destination in the case of the importance of 5 or more is set in the EEPROM 14.

  Thereby, based on the assigned importance, it is possible to easily determine operation history information that prohibits deletion, operation history information that does not need to be stored, and the like. For this reason, generation | occurrence | production of the situation that the operation history information which should not be deleted will be suppressed, and the safety | security in storage of operation history information can be improved. Further, it is possible to suppress the occurrence of a situation in which operation history information that does not need to be stored is stored in the EEPROM 14 and the SRAM 15, and save resources of the EEPROM 14 and the SRAM 15.

  Further, depending on the importance of the operation history information, the operation history is stored in any of the operation history storage area 41 of the EEPROM 14, the medium importance storage area 52 of the SRAM 15, the small importance storage area 53 of the SRAM 15, and the normal storage area 54 of the SRAM 15. Information is stored (S1410 to S1470). Thereby, an access right can be set for each storage area, and an unauthorized operation by an unauthorized operator can be suppressed. In addition, it is possible to perform flexible management of storage medium resources, such as transferring operation history information for each area and providing a storage area that cannot be transferred.

  Further, the operation history information is deleted for each storage area (S1950). Since storage areas are distinguished according to importance, when deleting operation history information according to importance, it is possible to perform deletion processing for each storage area at once, and to delete operation history information. It can be simplified.

  Further, based on the importance calculation condition from when the failure diagnosis device 6 is connected to the electronic control device 1 until the failure diagnosis device 6 transmits a processing request (in this embodiment, “whether the current time is within the business time or not. ”,“ Whether the current location is in the sales country ”, and“ Whether the current location is in the store ”), calculate the importance (S1230 to S1280), and respond to the processing request according to the importance It is determined whether or not to execute the process (S62). As a result, if the fault diagnosis device 6 is connected under circumstances that cannot be considered in normal use, such as operation at midnight or operation outside the country, the electronic control device 1 is illegally prohibited by prohibiting a specific processing request. Remodeling can be suppressed.

  The operation history information stored in the operation history storage area 41 of the EEPROM 14 is configured not to be deleted (S1940 to S1950). As a result, the operation history information stored in the EEPROM 14 can be information that should not be deleted but must be left in the vehicle.

  In the embodiment described above, the processing of S1290 and S1300 is the first importance calculation means in the present invention, the processing of S1230 to S1280 is the second importance calculation means in the present invention, and the processing of S62 is the processing execution means in the present invention. is there.

As mentioned above, although one Example of this invention was described, this invention is not limited to the said Example, As long as it belongs to the technical scope of this invention, a various form can be taken.
For example, in the above-described embodiment, the data indicating the request content received last time from the failure diagnosis apparatus 6 is used as comparison target data for comparison with the currently stored data. However, the comparison target data may be set in advance so that the same comparison target data is always used. For example, additional information that is frequently used is included as comparison target data. As a result, the portion of the additional information that is frequently used in the comparison target data is frequently matched with the currently stored data, and the compression rate of the currently stored data can be improved. In addition, as additional information with high utilization frequency, the worker of the dealer who purchased the vehicle is mentioned, for example.

  Further, the comparison target data may include data indicating a request content set in advance assuming that the frequency requested from the failure diagnosis apparatus 6 is high. Thereby, the difference between the current storage data and the comparison target data is reduced, and the amount of data stored in the SRAM 15 can be reduced.

  In the above embodiment, the operation history information is stored in the SRAM 15 provided in the electronic control unit 1. However, the operation history information may be stored in a storage medium provided outside the electronic control device 1 (for example, a hard disk drive of a car navigation device). Since the hard disk drive has a large storage capacity, a large amount of operation history information can be stored. Alternatively, when an electronic control device other than the electronic control device 1 is connected to the electronic control device 1 via the in-vehicle LAN 5 so that data communication is possible, the operation history information is stored in the other electronic control device. May be. Thereby, more operation history information can be memorize | stored compared with the case where only the electronic control apparatus 1 is used.

  In the above-described embodiment, the operation history information stored in the operation history storage area 23 is deleted when the remaining storage capacity of the operation history storage area 23 is equal to or less than the notification determination amount. However, the type or number of additional information may be changed according to the remaining storage capacity of the operation history storage area 23. Thereby, when the remaining storage capacity of the operation history storage area 23 is reduced, it is possible to reduce the additional information given to the operation history information. For this reason, it is possible to suppress the occurrence of a situation in which operation history information that needs to be stored cannot be stored due to a shortage of remaining storage capacity in the operation history storage area 23, and resources of the SRAM 15 can be effectively used.

  Furthermore, for the operation history information whose importance is lower than a predetermined determination importance, the type or number of additional information may be changed according to the remaining storage capacity of the operation history storage area 23. Thereby, when the remaining storage capacity of the operation history storage area 23 is reduced, it is possible to reduce the additional information given to the operation history information with low importance. Thereby, generation | occurrence | production of the condition that operation history information with high importance cannot be memorize | stored can be suppressed, and the resource of SRAM15 can be used effectively.

  In addition, when the remaining storage capacity of the operation history storage area 23 decreases, it may be prohibited to store operation history information with low importance in the operation history storage area 23. As a result, since the operation history information with low importance is stored, the remaining amount of storage in the operation history storage area 23 is reduced, and the occurrence of the situation where operation history information with high importance cannot be stored is suppressed, and the resources of the SRAM 15 are made effective Can be used.

  Further, when the operation history storage area 23 has a small remaining storage capacity, when the operation history information having a high importance level is newly stored in the operation history storage area 23, the low importance level already stored in the operation history storage area 23 is stored. The operation history information may be deleted, and the operation history information with high importance may be stored in the deleted area. Thereby, the operation history information with higher importance can be preferentially stored in the SRAM 15 than the operation history information with lower importance.

  In the above embodiment, the operation history information is stored in one place. However, the same operation history information may be stored in a plurality of locations. By storing the same operation history information in two places, whether or not there is a difference is checked. If there is a difference, it is determined that an abnormality has occurred in storing the operation history information. Further, by storing the same operation history information at three or more locations, if there is a difference between one operation history information and the other remaining operation history information, the contents of one operation history information are stored. By changing to the content of other remaining operation history information, one certain operation history information can be corrected.

  In the above embodiment, the operation history information is wirelessly transmitted to the remote center 100 installed outside the vehicle. However, in this wireless transmission, the operation history information may be encrypted and transmitted. Thereby, it can suppress that operation history information is read illegally by the third party.

  In the above-described embodiment, the wireless communication device 4 mounted on the vehicle transmits the operation history information to the remote center 100 wirelessly. However, after the operation history information is transmitted to the failure diagnosis device 6 via the in-vehicle LAN 5, the operation history information may be wirelessly transmitted to the remote center 100 using the wireless communication function of the failure diagnosis device 6. As a result, even if the vehicle does not have a means for transferring the operation history information to the remote center 100, it is possible to transfer the operation history information to the remote center 100 by using the failure diagnosis device 6.

  In the second embodiment, the importance level table 42 includes “data read”, “active test”, “fault code erase”, “controller initialization”, and “reprogramming” as request contents. (See FIG. 15B). However, these request contents may be increased or decreased according to the functions implemented by the failure diagnosis apparatus 6.

  Moreover, in the said 2nd Embodiment, when importance was less than 6, what performed the process according to a process request was shown (refer S62). However, the determination value of the importance level (“6” in the second embodiment) is not fixed, and may be determined based on the importance level according to the request content.

  In the second embodiment, the calculation of the importance based on the current time, the current location, the vehicle state, and the worker is shown. However, the importance may be calculated based on the type of the failure diagnosis device 6. For example, when the failure diagnosis apparatus 6 is not a regular product, the importance is increased.

  Further, the importance may be calculated based on the version of the failure diagnosis apparatus 6. For example, the failure diagnosis apparatus 6 with an old version may not be able to perform operations that are possible with the new version.

  In the second embodiment, the importance level is calculated based on whether the worker is a person registered in the failure diagnosis apparatus 6 or not. However, the degree of importance may be calculated based on whether or not the worker's account or dealer is the same as the previous one. For example, if the worker's account is different from the previous one, the importance is increased. Further, the importance level may be calculated based on the skill level of the worker. For example, the failure diagnosis device 6 is provided with a table indicating the correspondence between the worker and the skill level thereof, and the skill level of the worker is transmitted to the electronic control device 1 by referring to this table. And based on this skill level, the electronic control apparatus 1 makes importance low, so that skill level is high. Thereby, the importance in the situation where an unexpected operation is likely to occur can be increased, and the occurrence of a situation where the operation history information is not stored when an unexpected operation is performed can be suppressed.

  Further, the importance may be calculated based on the time required for the operation on the failure diagnosis apparatus 6. For example, when an operation has been performed longer than a predetermined time set in advance, it is determined that an unspecified operation has been performed during the operation, and the importance is increased.

  Further, the importance may be calculated based on the operation order for the failure diagnosis apparatus 6. For example, when an operation other than the preset operation order is performed, the importance is increased because the possibility of an unauthorized operation is high.

  Moreover, you may make it calculate importance based on the kind of object which the failure diagnosis apparatus 6 transmits a request | requirement. For example, when a request is transmitted to an electronic control device that controls a control target that has a large influence on the vehicle, such as an electronic control device that controls an engine, the degree of importance is increased.

  DESCRIPTION OF SYMBOLS 1 ... Electronic control apparatus, 3 ... External connection apparatus, 4 ... Wireless communication apparatus, 5 ... In-vehicle LAN, 6 ... Failure diagnosis apparatus, 11 ... CPU, 12 ... ROM, 13 ... RAM, 14 ... EEPROM, 15 ... SRAM, 16 ... Communication I / F, 21 ... Comparison data storage area, 22 ... Current storage data storage area, 23 ... Operation history storage area, 41 ... Operation history storage area, 42 ... Importance table, 51 ... Current storage data Storage area 52 ... Medium importance storage area 53 ... Small importance storage area 54 ... Normal storage area 55 ... EEPROM comparison target data storage area 61 ... Comparison target data storage area 62 ... Operation history storage area , 100: Remote center

Claims (10)

An electronic control device for a vehicle configured to perform data communication with an external diagnostic device that performs a failure diagnosis of a vehicle, and executes processing according to a processing request from the external diagnostic device,
When the processing request is received from the external diagnostic device, processing request instruction information indicating the processing request from the external diagnostic device, additional information that is information related to the processing request and added to the processing request instruction information, Processing request information creating means for creating external diagnosis processing request information comprising:
The external diagnostic processing request information created by the processing request information creating means is compared with the comparison information set for comparison with the external diagnostic processing request information. Of the external diagnostic processing request information, In-device storage means for storing a difference between the external diagnosis processing request information and the comparison information in an in-device storage medium that is a storage medium provided in the vehicular electronic control device;
The difference portion stored in the internal storage medium when the remaining difference storage remaining amount, which is the remaining storage amount that can store the different portion in the internal storage medium, is equal to or less than a predetermined transfer determination amount set in advance. Transfer means for transferring at least a part of the difference to an external storage means for storing the different part in an external storage medium that is a storage medium provided outside the vehicle electronic control device;
An electronic control apparatus for a vehicle, comprising: a deleting unit that deletes the different part transferred by the transfer unit from the different part stored in the internal storage medium from the internal storage medium. . When the remaining storage capacity capable of storing the different portion in the internal storage medium is equal to or less than a predetermined transfer determination amount set in advance, the transfer means stores remaining amount reduction information indicating that fact to the external storage means And then receiving a transfer request command for requesting transfer of the different part from the external storage means, transferring the different part to the external storage means,
A transfer confirmation means for confirming whether or not the difference portion has been normally transferred after the transfer means has transferred the difference portion;
2. The vehicle electronic device according to claim 1, wherein the deleting unit deletes the different part from the in-device storage medium after the transfer confirmation unit confirms that the different part has been normally transferred. Control device. The vehicle electronic control device according to claim 1, wherein the external diagnostic process request information is given a degree of importance corresponding to a degree of necessity of the external diagnostic process request information. The vehicular electronic control device according to claim 3, further comprising a first importance level calculating unit that calculates the importance level based on a state of the vehicular electronic control device. The processing request information creation means includes:
When the importance assigned to the external diagnosis processing request information is lower than a predetermined determination importance set in advance as a low necessity level, the external diagnosis processing is performed according to the difference partial storage remaining amount. The vehicle electronic control device according to claim 3 or 4, wherein the type or number of the additional information given to the request information is changed. The in-device storage means is
When the difference partial storage remaining amount is equal to or less than a predetermined storage determination amount set in advance, storage of the external diagnosis processing request information whose importance is lower than a predetermined storage determination importance set in advance is prohibited. The vehicular electronic control device according to any one of claims 3 to 5. Based on the importance calculation condition from when the external diagnostic device is connected to the vehicle electronic control device to when the external diagnostic device transmits the processing request, the external diagnostic processing request information corresponding to the processing request A second importance calculating means for calculating the given importance,
The process execution means which determines whether the process according to the said process request is performed according to the said importance calculated by the said 2nd importance calculation means is provided. The claim 3 characterized by the above-mentioned. The vehicle electronic control device according to any one of 6. The comparison information is
The vehicle electronics according to any one of claims 1 to 7, further comprising processing request instruction information indicating a processing request that is set in advance as one that is frequently requested from the external diagnostic device. Control device. The processing request information creation means includes:
The vehicle electronic control device according to any one of claims 1 to 8, wherein the type or number of the additional information is changed in accordance with the difference partial storage remaining amount. The transfer means includes
When the external diagnostic device is connected to the vehicle electronic control device, the difference is transmitted to the external diagnostic device, and the difference is removed from the device via the data communication function of the external diagnostic device. It transfers to a memory | storage means. The vehicle electronic control apparatus of any one of Claims 1-9 characterized by the above-mentioned.