JP6782654B2 - In-vehicle control device and program update software - Google Patents

Description

The present invention relates to an in-vehicle control device and program update software.

In conventional reprogramming, a PC (Personal Computer) as a program writing device and an in-vehicle control device (ECU: Engine Control Unit) are connected via a low-speed CAN (Controller Area Network), and a load module (new program) is divided. Writing to the flash memory of the ECU while transferring.

Further, even when the update part of the new program with respect to the old program is small, the entire new program is transferred via CAN and the entire new program is written.

Therefore, there is a problem that it takes time to write. On the other hand, the concept of differential reprogramming has been conventionally proposed (see, for example, Patent Document 1). That is, in paragraph [0019] of Patent Document 1, "means for creating difference data of old and new programs in block units" is described as one of the rewriting methods. Further, in paragraph [0064], the old program of the update target block is transferred to the SDRAM, the new program is restored to the SDRAM using the difference data and the old program, the update target block is erased, and then the new program is written. It is crowded.

Japanese Unexamined Patent Publication No. 2012-190075

In the technique of Patent Document 1, the old program of the block to be updated, the difference data, and all the restored new programs are arranged on the RAM. As a result, in principle, differential restoration cannot be performed with an in-vehicle control device using a microcomputer having a built-in flash memory composed of blocks larger than the RAM capacity.

Therefore, an object of the present invention is to enable an in-vehicle control device that does not have a difference update function to be capable of difference update.

In order to solve the above problems, the in-vehicle control device of the present invention is, for example, in an in-vehicle control device including a non-volatile memory composed of a plurality of blocks in which an executable program is arranged, a volatile memory, and a full-text update means. , The full-text update means is activated, a restoration program having a differential restoration means and a decompression restoration means is written to the first specific block of the non-volatile memory, and the restoration program is activated. Using the difference data between the executable program and the new executable program for each block and the execution program arranged in the non-volatile memory, the new executable program in the block is differentially restored to obtain the above. By repeating writing to the second specific block of the non-volatile memory and copying the data of the second specific block to the block, the first specific block and the block different from the second specific block are repeated. A new executable program is written to, the compressed data of the new executable program in the second specific block is decompressed and restored, and the decompressed and restored program is written to the second specific block. The executable program is updated to the new executable program by invoking the full-text update means and writing the new executable program in the first specific block into the first specific block. To do.

According to the present invention, an in-vehicle control device that does not have a difference update function can be made capable of difference update.

It is a schematic diagram which shows the flash memory configuration and operation outline of the existing in-vehicle control device. It is a schematic diagram which shows the whole structure of a program writing device and an in-vehicle control device. It is a schematic diagram which shows the internal structure of the SRAM of the vehicle-mounted control device shown in FIG. 2A. It is a schematic diagram which shows the internal structure of the FLASH memory of the vehicle-mounted control device shown in FIG. 2A. The configuration of the boot part and the application part, and the application head block and temporary block are described. It is an overall block diagram of the difference update software of an existing in-vehicle control device. It is an overall configuration diagram of the restoration recovery software. It is a figure which shows the type of the communication command received from a program writing device. It is a flowchart of the communication command issued by the program writing device to the in-vehicle control device. It is a flowchart of the difference communication software. It is a flowchart of the restoration software. It is a flowchart of the difference restoration software. It is a flowchart of the decompression / restoration software.

The existing in-vehicle control device boots at least initialization software such as a microcomputer, full-text update communication software sent from the program rewrite device, full-text communication software that communicates full-text data, flash writing software, and full-text update software using full-text data. It is assumed that the program or data to be updated is placed in the flash memory area called the application part.

The flash memory configuration and operation of the existing in-vehicle control device, which is a prerequisite, will be described with reference to FIG.

210 is a boot part and 220 is an application part. In the existing in-vehicle control device, when a reset occurs due to power-on or ignition ON, the initialization software in the boot unit is executed. The initialization software initializes the RAM, diagnoses the program arranged in the application unit 220, and if there is no abnormality, branches to the application head 230 indicating the head of the application unit 220 instructed by 250. In FIG. 1, the application head 230 exists at a position in the middle of the application unit 220, but the position may be free. Of course, information indicating the position of the top 230 of the application may be stored in a predetermined position. As described above, the first important point is that there is a predetermined provision for branching from the boot part to the program of the application part.

The program of the application unit 220 is executed in this way, but the second point is that there is a provision for branching from the program of the application unit 220 to the full-text update software. That is, when a communication command indicating the start of full-text update is received from the program writing device during program execution, the program of the application unit 220 puts the in-vehicle control device in a safe state, and then the boot unit 210 instructed by 260. Branches to the first 240 of the full-text update software. The full-text update software can wait for an instruction from the program writing device by initializing the communication software so that it can receive the communication command for full-text update. Of course, information indicating the position of the head 240 of the full-text update software may be stored in a predetermined position. As described above, the second important point is that there is a predetermined provision for branching from the program of the application unit 220 to the full-text update software of the boot unit. It is premised that the existing in-vehicle control device has the first regulation and the second regulation in this way.

In this embodiment, the old program of the application unit 220 is updated to the new program by the difference updating means of the existing in-vehicle control device configured in the following three phases by utilizing the first rule and the second rule.

The first phase is a means for downloading and resetting the restoration / recovery software to the block including the application head 230 (referred to as the application head block) by using the full-text update software to the existing in-vehicle control device. Here, the restoration / recovery software uses the difference communication means for receiving the difference update communication command and the block difference data for each block from the program writing device, and the new program of the block from the received block difference data and the old program of the application unit 220. The software includes a restoration means for restoring and a writing means for writing a new program of the restored block to the block of the application unit 220.

In the second phase, the restoration / recovery software is started after the initialization software of the boot unit is executed. The restoration / recovery software first initializes the difference communication means and sets the program writing device, the difference update communication command, and the block difference data for each block to be receivable. After that, the new program of the block is restored from the block difference data received by the restoration means and the old program of the application unit 220, and written to the maximum size block (referred to as a temporary block) in the application unit 220. .. Next, the data of the temporary block is copied to the block by using a writing means. In this way, each block of the application unit 220 can be updated to the new program by repeating the above process each time the block difference data is received. However, the above-mentioned application head block and temporary block have not been updated to the new program yet.

First, the reason for selecting the temporary block will be described.

An object of this embodiment is to enable differential update of a large block of flash memory even with a small SRAM capacity. In this case, the new program of the block cannot be temporarily saved in SRAM. Further, since the differential update of the block restores the new program of the block with reference to the old program, the old program of the block cannot be deleted until the restoration is completed. For the above reasons, the maximum size block of the application unit 220 is set as the temporary block instead of the SRAM. This makes it possible to differentially update a large block of flash memory even with a small SRAM capacity.

Next, the means for updating the temporary block to be executed after the differential update will be described. The temporary block was used as a work memory for temporarily storing a new program of the block when the difference of another block was updated. For this reason, the original old program has been destroyed. Therefore, the update of the temporary block is realized by the full-text update or the compressed update instead of the differential update. That is, after the differential update of other blocks, the new program of the temporary block may be received from the program writing device as full-text data, and the new program may be written to the temporary block. Similarly, the block compressed data of the new program of the temporary block may be received from the program writing device, the block compressed data may be decompressed by using the restoration means, and the new program may be written to the temporary block. However, the restoration means needs to have a difference restoration function using the block difference data and a decompression function for decompressing the block compressed data.

As described above, after the update of the temporary block is completed, the communication command indicating the start of full-text update is received from the program writing device. As described above, the restoration / recovery software of the application unit 220 branches to the head 240 of the full-text update software of the boot unit 210 instructed by 260 after the in-vehicle control device is put into a safe state.

The rest is the update of the first block of the application. This is done in the third phase.

The third phase is a means for downloading a new program of the block to a block (application head block) including the full text update software head 240 of the boot unit 210 by using the full text update software to the existing in-vehicle control device. By executing this method, we were able to write a new program in the first block of the application.

By the difference updating means of the existing in-vehicle control device configured in the above 1st to 3rd phases, all the blocks of the application unit 220 could be rewritten to the new program.

In-vehicle control devices using a microcomputer with a built-in flash memory composed of blocks larger than the RAM capacity can be differentially updated.

In addition, there is another big effect. Even if the capacity of the in-vehicle battery runs out during the difference update in the second phase and an unexpected event such as a power failure occurs, the block that was in the middle of the difference update can be retried. During the differential update of the second phase, the block is not updated, and a new program restored to the temporary block is written. Therefore, the old program of the block remains as it is. Therefore, even if the power is cut off at this point, the new program can be restored to the temporary block by referring to the old program again after the power is restored. Also, even if the power is cut off while erasing the block and copying from the temporary block to the block after the restoration of the new program to the temporary block is completed, the new program remains in the temporary block, so the power supply After recovery, the new program of the temporary block can be written to the block again. Further, since the update of the temporary block performed after the differential update of the second phase uses the full text data or the compressed data of the new program, it can be updated to the new program even if the old program is destroyed. Further, since the update of the first phase and the third phase is an update based on full-text data, it is naturally possible to retry.

As described above, the difference updating means of the existing in-vehicle control device has an advantage that even if an abnormality such as a power failure occurs, it can be restored halfway from the block being updated by retrying after the power is restored.

Further, the temporary block may be composed of a plurality of small blocks. Further, if the problem of power failure can be solved and the RAM has a certain size, it may be arranged in the RAM.

The figure shows an embodiment of the difference update means of the existing in-vehicle control device which enables the difference update in the in-vehicle control device having the software update means based on the full text data and having the flash memory composed of a small capacity RAM and a large block. 2 to FIG. 11 will be described in detail.

First, the overall configuration of the system will be described with reference to FIG. 2A. FIG. 2A is a schematic view showing the overall configuration of the system according to the embodiment of the present invention.

Program writing device 100 includes a plurality of vehicle-mounted control unit ₂₀₀ (200 1 ~200 _n). The program writing device 100 and the vehicle-mounted control device 200 communicate with each other via the vehicle-mounted network CAN.

The in-vehicle control device 200 includes a microcomputer 201, various ICs (Integrated Circuits) 204 according to the application of each in-vehicle control device 200, and a communication device 205 such as a CAN transceiver. The microcomputer 201 has a SRAM 202 (volatile memory) and a FLASH memory 203 (nonvolatile memory).

The configuration of the program writing device 100 is basically the same as the configuration of the in-vehicle control device 200, but a communication device corresponding to the protocol of the network outside the vehicle is further provided. That is, the program writing device 100 includes a microcomputer 101, various ICs 104, a communication device 105 such as a CAN transceiver, and a communication device 106 according to the protocol of the network outside the vehicle. The microcomputer 101 has a SRAM 102 and a FLASH memory 103 built-in.

Next, the configuration of the SRAM 202 of the in-vehicle control device 200 will be described with reference to FIG. 2B. FIG. 2B is a schematic view showing the internal configuration of SRAM 202 shown in FIG. 2A.

The SRAM 202 includes a reception area 202a for temporarily storing the reception data from the program writing device 100. In the present embodiment, as an example, the size of the SRAM 202 is 128 kB, and the size of the reception area 202a is 64 kB.

Next, the configuration of the FLASH memory 203 will be described with reference to FIG. FIG. 3 is a schematic view showing the internal configuration of the FLASH memory 203 shown in FIG. 2A.

The FLASH memory 203 is composed of blocks of a plurality of sizes. In the present embodiment, as an example, the size of the FLASH memory 203 is 2 MB. The boot unit 210 is equipped with initialization software such as a microcomputer, full-text communication software for communicating full-text update communication commands and full-text data with the program writing device 100, flash writing software, and full-text update software using full-text data. The application unit 220 is composed of blocks B # 1 to B # 7, and the application head block 300 for downloading the restoration / recovery software in the first phase is a 128 kB block B # 2. The temporary block 310 used in the second phase is block B # 7 of 256 kB. As described by the means of the present invention, the temporary block 310 is selected from the blocks B # 7 having the maximum size among the blocks in the application unit 220. Further, it will be described in this embodiment that the maximum size of the block of the application unit 220 of the flash memory is 256 kB while the SRAM 202 is 128 kB, and the difference can be updated even with the SRAM capacity smaller than the block size. .. The FLASH memory 203 is composed of two types of blocks, 128 kB and 256 kB. A block is the smallest unit for erasing data. For example, when writing 4 kB data to a 128 kB block, it is necessary to erase the 128 kB data and then write the 4 kB data.

FIG. 4 is a flowchart of the difference update software 400 of the existing in-vehicle control device of the present invention. In the first phase 410, the full-text update software of the boot unit 210 is started, and the restoration / recovery software is downloaded and written to the application head block B # 2.

In the second phase 420, the downloaded restoration / recovery software is started, the block B # n (n = 1, 3, 4, 5, 6) of the application unit 220 is differentially updated in block units, and the block is newly updated. I'm writing a program. Furthermore, the new program is restored by the compression update that decompresses the compressed data of the temporary block B # 7, and the new program is written to the temporary block B # 7.

In the third phase 430, the full-text update software of the boot unit 210 is started, and a new program of the block is written in the application head block B # 2.

In the above three phases, the application unit 220 was able to update to the new program.

Hereinafter, although it will be described in detail, since the processing of the first phase and the third phase is performed by the existing full-text update software, the operation of the restoration / recovery software of the second phase will be mainly described.

FIG. 5 shows the configuration of the restoration / recovery software 500.

The difference restoration software 500 restores a new program using the difference communication software 501 that realizes the difference communication means that communicates with the program writing device 100 via the network, the restoration software 502 that realizes the restoration means, and the block difference data. It consists of differential restoration software 503 that realizes differential restoration means, decompression / restoration software 504 that realizes decompression / restoration means that restores a new program from compressed data, and writing software 505 that realizes writing means that stores data in flash memory. ing.

FIG. 6 shows the types of communication commands transmitted from the vehicle-mounted writing device 100 to the vehicle-mounted control device 200.

Reference numeral 600 is a communication command of $ 10 indicating the start of program update.

610 is a communication command $ 20 that specifies the update target block B # n (n = 1,2,3,4,5,6,7). Here, KD indicates information indicating the data type of the transmission data, MA indicates the start address of the update target block, and MS indicates the size of the update target block. The data type KD can indicate that the transmitted data is differential data or compressed data.

Reference numeral 620 is a communication command of $ 30 in which the transmission data of the block to be updated is attached to the communication command. Here, DATA is transmission data, and is differential data or compressed data.

Reference numeral 630 is a communication command of $ 40 indicating that the data transmission to the update target block is completed.

640 is a communication command $ 50 indicating the end of program update.
FIG. 7 shows a flowchart in which the program writing device 100 transmits a communication command using the above communication commands.

The 700 sends a communication command "program update start" $ 10.

710 transmits a communication command "designation of block to be updated" of $ 20. The data type KD, the start address MA of the block to be updated, and the size MS are also transmitted.

720 transmits the communication command "transmission data for update target block" $ 20. The transmission data is block difference data or compressed data.

730 transmits the communication command "data transmission completed to the update target block" $ 40.

In 740, it is checked whether the data of all blocks except the application head block # B2 has been transmitted, and if no, the process returns to 710 and the data transmission of the next update target block is repeated.

On the other hand, if yes, the communication command "program update end" $ 50 is sent at 750 to end.

In this way, data transmission to the update target block is realized by repeating 710 to 730.

FIG. 8 is a flowchart of the differential communication software 501 in which the vehicle-mounted control device 200 receives a communication command.

Reference numeral 800 is an operation of receiving the communication command CMD.

810 determines whether the communication command CMD is $ 10, executes 815 if yes, and executes 820 if no. In 815, since the program update is started from now on, the reception area 202a is initialized.

820 determines whether the communication command CMD is $ 20, executes 825 if yes, and executes 830 if no. In 825, the data type KD of the received data, the start address MA of the block to be restored, and the size MS are stored. Further, the temporary block B # 7 is erased.

830 determines whether the communication command CMD is $ 30, executes 835 if yes, and executes 840 if no. At 835, the received data DATA is stored in the reception area 202a.

840 determines if the communication command CMD is $ 40, executes 845 if yes, and executes 850 if no. At 845, the restoration software 502 is executed using the difference data or the compressed data stored in the reception area 202a. 850 ends the processing of the communication command CMD.

FIG. 9 is a flowchart of the restoration software 502.

The 900 determines whether the data type KD is "difference data", executes 910 if yes, and executes 930 if no because KD is "compressed data". The 930 executes the decompression / restoration software 504 and ends. 910 executes the difference restoration software 503 and stores the restoration result in the temporary block 310 B # 7. The 920 executes the writing software 505, copies the data of the temporary block 310 B # 7 to the update target block of the start address MA and the size MS, and ends.

The difference restoration software 503 and the decompression restoration software 504 will be described with reference to FIGS. 10 and 11.

FIG. 10 is a flowchart of the difference restoration software 503.

First, an overview of general difference generation / difference restoration software will be described. The difference generation software searches the old program for a sub-command sequence similar to the sub-command sequence of the new program in the difference extraction processing unit, finds it, replaces the sub-command sequence with a short code, and attaches it to the copy command. On the other hand, if a similar sub-instruction sequence is not found, the sub-instruction sequence is attached to the additional command. The columns of this copy command and the additional command are the difference data. In this way, the difference data is not simply the result of subtracting the old program from the new program, but is composed of columns such as copy commands and additional commands in which the similar subname string is replaced with a short code.

Based on the above preparations, the operation of the difference restoration software 503 will be described.

1000 reads the difference data of the reception area 202a.

1010 is an analysis of the difference command.

1020 determines whether the diff command is a copy command, executes 1025 if yes, and executes 1030 if no. The 1025 writes the partial instruction sequence of the old program to the temporary block 310 B # 7.

1030 determines if the diff command is an additional command, executes 1035 if yes, and executes no rose 1040 if yes.

The 1035 executes 1040 by adding the data attached to the additional command to the temporary block 310 B # 7.

1040 determines whether all the difference data has been read, and if yes, ends the difference restoration process 503. If no, branches to 1000, reads the next difference command from the difference data, and repeats 1010 to 1040.

With the above, the new program of the update target block can be differentially restored to the temporary block 310 B # 7.

FIG. 11 is a flowchart of the decompression / restoration software 504.
First, the compression / decompression software will be described. The compression software searches the program for a sub-instruction sequence similar to the sub-instruction sequence in the program, finds it, replaces the sub-instruction sequence with a short code, and attaches it to the copy command. On the other hand, if a similar sub-instruction sequence is not found, the sub-instruction sequence is attached to the additional command. The sequence of this copy command and additional command is the compressed data. In this way, the compressed data is composed of columns such as copy commands and additional commands in which similar subname strings are replaced with short codes.

Based on the above preparations, the operation of the decompression / restoration software 504 will be described.

The 1100 first erases the temporary block 310 B # 7.

1110 reads the compressed data from the reception area 202a.

1120 parses the compression command.

The 1130 determines if the compression command is a copy command and executes 1135 if yes and 1140 if no.

1135 writes the partial instruction sequence in the compressed data to the temporary block 310 B # 7.

1140 determines if the compression command is an additional command and executes 1145 if yes and 1150 if no.

The 1145 adds the data attached to the additional command to the temporary block 310 B # 7 and executes 1150.

1150 determines whether all the compressed data has been read, and if yes, terminates the decompression / restoration process 504. If no, branches to 1110, reads the next compression command from the compressed data, and repeats 1110-1050.

With the above, the new program of the block B # 7 can be decompressed and restored to the temporary block.

100 ... Program writing device 101 ... Microcomputer of program writing device 102 ... SRAM (volatile memory) of program writing device
103 ... FLASH (nonvolatile memory) of the program writing device
104 ... Various ICs of the program writing device
105 ... In-vehicle communication device 106 of the program writing device ... External communication device 200 of the program writing device ... In-vehicle control device 201 ... In-vehicle control device microcomputer 202 ... In-vehicle control device SRAM (volatile memory)
202a ... Reception area 203 ... FLASH (nonvolatile memory) of the in-vehicle control device
204 ... Various ICs for in-vehicle control devices
205 ... In-vehicle communication device 210 of the in-vehicle control device ... FLASH boot part 220 ... FLASH application part 230 ... App head 240 ... Full text update software head 250 ... Branch from boot part to app part 260 ... From app part to boot part Branch 300 ... App head block 310 ... Temporary block 400 ... Difference update software 500 for existing in-vehicle control device ... Restore recovery software 501 ... Difference communication software 502 ... Restore software 503 ... Difference restore software 504 ... Decompression / restore software 505 ... Writing software

Claims (12)

In an in-vehicle control device equipped with a non-volatile memory composed of a plurality of blocks in which an executable program is arranged, a volatile memory, and a full-text update means.
The full-text update means is activated, and a restoration program provided with the differential restoration means and the decompression restoration means is written to the first specific block of the non-volatile memory.
When the restoration program is started, the restoration program uses the difference data for each block of the executable program and the new executable program, and the execution program arranged in the non-volatile memory of the block. The new executable program is differentially restored and written to the second specific block of the non-volatile memory.
By repeating copying the data of the second specific block to the block, a new executable program is written in the block different from the first specific block and the second specific block. The compressed data of the new executable program in the second specific block is decompressed and restored, and the decompressed and restored program is written to the second specific block.
By activating the full-text update means and writing the new executable program of the first specific block into the first specific block, the executable program becomes a new executable program. An in-vehicle control device characterized by being updated. The vehicle-mounted control device according to claim 1, wherein the second specific block is a block having the maximum size of the non-volatile memory. The vehicle-mounted control device according to claim 1, wherein the second specific block is composed of a plurality of blocks of the non-volatile memory. In an in-vehicle control device equipped with a non-volatile memory composed of a plurality of blocks in which an executable program is arranged, a volatile memory, and a full-text update means.
The full-text update means is activated, and a restoration program provided with the differential restoration means is written to the first specific block of the non-volatile memory.
When the restoration program is started, the restoration program uses the difference data for each block of the executable program and the new executable program, and the execution program arranged in the non-volatile memory of the block. The new executable program is differentially restored and written to the volatile memory.
By repeating copying the data in the volatile memory to the block, a new executable program is written in the block different from the first specific block.
By activating the full-text update means and writing the new executable program of the first specific block into the first specific block, the executable program becomes a new executable program. An in-vehicle control device characterized by being updated. In car mounting control device according to claim 1,
It said first particular block and the second particular block car mounting control device, characterized in that disposed on the same surface of the non-volatile memory. In an in-vehicle control device equipped with a non-volatile memory composed of a plurality of blocks in which an executable program is arranged, a volatile memory, and a full-text update means.
The full-text update means is activated, and a restoration program provided with the differential restoration means is written to the first specific block of the non-volatile memory.
When the restoration program is started, the restoration program uses the difference data for each block of the executable program and the new executable program, and the execution program arranged in the non-volatile memory to block the block. The new executable program of the above is differentially restored and written to the second specific block of the non-volatile memory.
By repeating copying the data of the second specific block to the block, a new executable program is written in the block different from the first specific block and the second specific block.
Writing the new executable program of the second specific block to the second specific block,
By activating the full-text update means and writing the new executable program of the first specific block into the first specific block, the executable program becomes a new executable program. An in-vehicle control device characterized by being updated. In an in-vehicle control device equipped with a non-volatile memory composed of a plurality of blocks in which an executable program is arranged, a volatile memory, and a full-text update means.
The full-text update means is activated, and a restoration program provided with the differential restoration means and the decompression restoration means is written to the first specific block of the non-volatile memory.
When the restoration program is started, the restoration program uses the difference data for each block of the executable program and the new executable program, and the execution program arranged in the non-volatile memory to block the block. The new executable program of the above is differentially restored and written to the second specific block of the non-volatile memory.
By repeating copying the data of the second specific block to the block, a new executable program is written in the block different from the first specific block and the second specific block.
The compressed data of the new executable program of the second specific block is decompressed and restored, and the decompressed and restored program is written to the second specific block.
By activating the full-text update means and writing the new executable program of the first specific block into the first specific block, the executable program becomes a new executable program. Program update software for in-vehicle control devices, which is characterized by updating. The program update software for an in-vehicle control device according to claim 7, wherein the second specific block is a block having the maximum size of the non-volatile memory. The program update software for an in-vehicle control device according to claim 7, wherein the second specific block is composed of a plurality of blocks of the non-volatile memory. In an in-vehicle control device equipped with a non-volatile memory composed of a plurality of blocks in which an executable program is arranged, a volatile memory, and a full-text update means.
The full-text update means is activated, and a restoration program provided with the differential restoration means is written to the first specific block of the non-volatile memory.
When the restoration program is started, the restoration program uses the difference data for each block of the executable program and the new executable program, and the execution program arranged in the non-volatile memory to block the block. The new executable program is differentially restored and written to the volatile memory.
By repeating copying the data in the volatile memory to the block, a new executable program is written in the blocks other than the first specific block.
By activating the full-text update means and writing the new executable program of the first specific block into the first specific block, the executable program becomes a new executable program. Program update software for in-vehicle control devices, which is characterized by updating. The program update software for an in-vehicle control device according to claim 7.
It said first particular block及beauty said second particular block is mounted control device of a program update software being disposed on the same surface of the non-volatile memory. In an in-vehicle control device equipped with a non-volatile memory composed of a plurality of blocks in which an executable program is arranged, a volatile memory, and a full-text update means.
The full-text update means is activated, and a restoration program provided with the differential restoration means is written to the first specific block of the non-volatile memory.
When the restoration program is started, the restoration program uses the difference data for each block of the executable program and the new executable program, and the execution program arranged in the non-volatile memory to block the block. The new executable program is differentially restored and written to the second specific block of the non-volatile memory.
By repeating copying the data of the second specific block to the block, a new executable program is written in the block different from the first specific block and the second specific block.
Writing the new executable program of the second specific block to the second specific block,
By activating the full-text update means and writing the new executable program of the first specific block into the first specific block, the executable program becomes a new executable program. Program update software for in-vehicle control devices, which is characterized by updating.

Images