JP7161971B2 - SOFTWARE UPDATE DEVICE, SOFTWARE UPDATE SYSTEM, AND SOFTWARE UPDATE METHOD - Google Patents

Description

The present invention relates to a software update device, software update system, and software update method.

BACKGROUND ART In recent years, techniques for notifying vehicle owners of various types of information have been known (for example, Patent Literature 1 and Patent Literature 2).

JP 2015-129753 A JP 2017-097620 A

Here, when various kinds of information are notified to both a notification function unit such as a vehicle display and a speaker, and a terminal device possessed by the vehicle owner, the vehicle owner may feel annoyed by the notification. . However, with the conventional technology, it has not been possible to appropriately notify the owner of the vehicle according to the situation.

The present invention has been made in consideration of such circumstances, and provides a software update device, a software update system, and a software update method that can appropriately notify the owner of the vehicle according to the situation. One of the purposes is to

A software update device, a software update system, and a software update method according to the present invention employ the following configuration.
(1): A software update device according to one aspect of the present invention is a software update device mounted on a vehicle, and includes a communication unit that communicates with at least another device including a terminal device of a user of the vehicle; an operation detection unit that detects that the vehicle is in operation; a notification unit that is mounted on the vehicle and notifies an occupant of the vehicle of information; a notification control unit for controlling notification of information, wherein the notification control unit notifies the occupant of the updated information to the notification unit when the operation detection unit detects that the vehicle is in motion. In addition, the communication unit does not transmit the update information to the terminal device owned by the occupant of the vehicle.

(2): In the aspect (1) above, when the motion detection unit detects that the vehicle is not in motion, the communication unit causes the notification unit to notify the update information. and causing the communication unit to transmit the update information to a terminal device possessed by an occupant of the vehicle.

(3): A software update device according to an aspect of the present invention is a software update device mounted on a vehicle, and includes a communication unit that communicates with at least another device including a terminal device of a user of the vehicle; A terminal device detection unit that detects that a terminal device possessed by an occupant is present in the vehicle interior of the vehicle, a notification unit that is mounted on the vehicle and notifies the occupant of the vehicle of various information, and the communication in the on-vehicle device a notification control unit for controlling notification of update information indicating that there is an update of software via the unit, wherein the notification control unit detects that the terminal device is present in the vehicle interior by the terminal device detection unit. When it is detected, the notification unit performs processing for notifying the passenger of the update information, and the communication unit does not transmit the update information to the terminal device owned by the passenger of the vehicle.

(4): In the above aspect (3), the terminal device detection unit uses short-range wireless communication with the terminal device, or based on the position information of the vehicle and the position information of the terminal device, It detects that the terminal device exists in the vehicle interior of the vehicle.

(5): In the aspect (3) or (4) above, after a predetermined time has passed since it was detected that the terminal device does not exist in the vehicle interior, the communication unit Then, the update information is transmitted to the terminal device.

(6): In any one aspect of (1) to (5) above, when the notification control unit transmits the update information to the terminal device, the notification unit transmits the update information to the It does not allow the process of notifying the passenger.

(7): In any one aspect of (1) to (6) above, further comprising a locking state detection unit that detects a locking state of the vehicle, wherein the notification control unit causes the locking state detection unit to detect the When it is detected that the vehicle is unlocked, the communication unit does not transmit the update information to the terminal device, or the notification unit does not perform processing to notify the passenger of the update information. In this case, the communication unit is caused to transmit the update information to the terminal device.

(8): In any one aspect of the above (1) to (7), the notification control unit transmits the update information to the communication unit when the notification unit is in a state in which notification cannot be performed. This is to be transmitted to the terminal device.

(9): A software update system according to an aspect of the present invention is a software update system comprising the software update device according to any one of (1) to (7) above and an agent device, the agent device comprising: comprises a recognition unit that recognizes an occupant present in the vehicle; a display control unit that displays an image of an agent that communicates with the occupant on a display unit mounted in the vehicle; an agent function unit that provides services including voice responses, and the notification control unit sits in the driver's seat based on the recognition result of the recognition unit and the information of the terminal device of the passenger who uses the vehicle. The terminal device of the passenger seated in the driver's seat is specified, and the communication unit does not transmit the update information to the terminal device of the passenger seated in the driver's seat, and the terminal device of the passenger seated in the seat other than the driver's seat The update information is transmitted to the terminal device, the agent function unit notifies the passenger to whom the update information is transmitted, that the update information is transmitted, and the display control unit causes the agent The agent image is displayed on the display section according to the notification from the function section.

(10): A software update method according to an aspect of the present invention includes a notification unit that notifies an occupant of a vehicle of various types of information, and a computer that realizes a software update device mounted on the vehicle is used at least for the use of the vehicle. communicates with another device including a terminal device of a third party, detects that the vehicle is in operation, controls notification of update information indicating that there is an update of software via communication in on-vehicle equipment, and the vehicle detects that the vehicle is in operation When the operation is detected, the notification unit is caused to perform processing for notifying the passenger of the update information, and the update information is not transmitted to the terminal device possessed by the passenger of the vehicle.

(11): A software update method according to an aspect of the present invention includes a notification unit that notifies an occupant of a vehicle of various types of information, and a computer that realizes a software update device mounted on the vehicle is configured to at least use the vehicle. Communicate with other devices including the terminal device of the passenger, detect that the terminal device possessed by the passenger of the vehicle is present in the cabin of the vehicle, and indicate that there is an update of the software in the vehicle-mounted device via communication. When it is detected that the terminal device exists in the vehicle interior by controlling the notification of update information, the notification unit performs processing for notifying the passenger of the update information, and the update information is transmitted to the passenger in the vehicle. The information is not transmitted to the terminal device owned by the passenger.

(12): A software update device according to an aspect of the present invention includes an acquisition unit that acquires in-operation information indicating that a vehicle is in operation, and an in-vehicle device that indicates that there is an update of software via communication. a communication unit that transmits update information, wherein the communication unit transmits the update information to a notification control unit that controls notification of the vehicle when the information during operation is acquired by the acquisition unit; The update information is not transmitted to the terminal device owned by the passenger of the vehicle.

According to (1) to (12), appropriate notification can be made according to the situation of the vehicle owner.

According to (2), it is possible to appropriately notify in accordance with the timing when the vehicle operates.

According to (3) to (5), it is possible to notify by an appropriate notification means according to the location of the owner.

According to (6), it is possible to make the notification less annoying.

According to (7), the second and subsequent notifications can be made by appropriate means.

According to (8), appropriate notification can be made according to the state of the notification means.

According to (9), it is possible to notify the passenger in an easy-to-understand manner.

1 is a diagram showing an example configuration of a software update system 1 including a software update device 100 according to the first embodiment; FIG. 1 is a diagram showing an example configuration of a software update device 100 according to a first embodiment; FIG. It is a figure which shows an example of the content of the terminal device information 122 which concerns on 1st Embodiment. 4 is a diagram showing an example of notification of update information in HMI 101. FIG. 4 is a diagram showing an example of notification of update information in terminal device 300. FIG. It is a flowchart which shows an example of the notification process based on whether the vehicle M is operating. It is a flowchart which shows an example of the notification process based on whether the vehicle M is operating. FIG. 8 is a diagram showing another example of notification of update information in the HMI 101; FIG. 10 is a diagram showing another example of notification of update information in the terminal device 300. FIG. FIG. 10 is a flowchart showing an example of notification processing when notification has already been made; FIG. 4 is a flow chart showing an example of notification processing for the terminal device 300. FIG. 6 is a flow chart showing an example of notification processing when the HMI 101 fails. FIG. 10 is a diagram showing an example of the configuration of a software update system 1a including a software update device 100a according to a second embodiment; FIG. 11 is a diagram showing an example of the configuration of a software update device 100a according to a second embodiment; FIG. It is a figure which shows an example of the content of the terminal device information 122a which concerns on 2nd Embodiment. FIG. 2 is a diagram illustrating an example of service provision by an agent; 4 is a flowchart showing an example of notification processing to the owner of the vehicle M recognized by the recognition unit 116. FIG. FIG. 11 is a diagram showing an example of a configuration of a distribution server device 200a according to a modified example;

<First embodiment>
Hereinafter, embodiments of a software update device, a software update system, and a software update method of the present invention will be described with reference to the drawings.

[Overview of Software Update System 1]
FIG. 1 is a diagram showing an example configuration of a software update system 1 including a software update device 100 according to the first embodiment. The software update system 1 includes, for example, a software update device 100, a distribution server device 200, and a terminal device 300. Software update device 100, distribution server device 200, and terminal device 300 can communicate with each other via network NW. It includes cellular networks, Wi-Fi networks, Bluetooth (registered trademark), the Internet, WANs (Wide Area Networks), LANs (Local Area Networks), public lines, provider devices, leased lines, wireless base stations, and the like. Also, these components may perform wireless communication directly without going through the network NW.

The software update device 100 is a device mounted on the vehicle M. As shown in FIG. For example, when the software update device 100 receives information (hereinafter referred to as update information) indicating that there is an update of software in on-vehicle equipment of the vehicle M via the network NW from the distribution server device 200 described later, the software update device 100 Processing is performed to notify the crew or the owner of the vehicle M that there is a software update. Software is, for example, software used in an ECU (Electronic Control Unit) that controls in-vehicle equipment. In the following description, when the occupant of the vehicle M and the owner of the vehicle M are not distinguished, they are referred to as "the owner of the vehicle M". In addition, the owner of the vehicle M is not limited to one person, and may be plural persons. For example, if the vehicle M is a family car, the owners of the vehicle M may be all family members. The owner of the vehicle M is an example of the "user of the vehicle."

The software update device 100 includes an HMI (Human Machine Interface) 101. The HMI 101 presents various types of information to the user of the vehicle M and receives an input operation by the user. The HMI 101 includes, for example, various display units, speakers, buzzers, touch panels, switches, ignition keys, and the like. The HMI 101 notifies the occupants of the vehicle M of the update information by displaying an image indicating that the software has been updated on the display unit and outputting a sound indicating that the software has been updated from the speaker. do. The HMI 101 is an example of a "notification unit".

Further, when the owner of the vehicle M approves the update of the software in response to the notification, the software update device 100 receives the update software from the distribution server device 200 described later, and adds the software of the in-vehicle device to the received update software. Update (update).

The distribution server device 200 transmits update information to the software update device 100 when there is an update of software via the network NW in the in-vehicle equipment of the vehicle M. FIG. For example, when the owner of the vehicle M approves the software update in response to the notification from the software update device 100, the distribution server device 200 sends the information (updated software, etc.) used for updating in the software update device 100 to the network. Transmit via NW.

The terminal device 300 is a terminal device owned by the owner of the vehicle M, such as a smart phone, a tablet terminal, or a personal computer. Under the control of the software update device 100, the terminal device 300 displays an image indicating that there is a software update on the display unit, and outputs a sound indicating that there is a software update from the speaker. , the owner of the vehicle M who owns the terminal device 300 is notified of the update information.

In the following description, when the HMI 101 and the terminal device 300 are not distinguished in the process of notifying update information, they are also referred to as "notifying means".

[Configuration of software update device 100]
FIG. 2 is a diagram showing an example of the configuration of the software update device 100 according to the first embodiment. The software update device 100 includes an HMI 101, a communication section 102, a control section 110, and a storage section 120, for example.

The communication unit 102 includes, for example, a communication interface such as NIC. The communication unit 102 communicates with the distribution server device 200, the terminal device 300, or the like via the network NW.

The control unit 110 includes, for example, a motion detection unit 111, a terminal device detection unit 112, a locking state detection unit 113, a notification control unit 114, and an update unit 115.

The constituent elements of the control unit 110 are realized by executing a program stored in the storage unit 120 by a processor such as a CPU (Central Processing Unit), for example. Some or all of the components of the control unit 110 are hardware such as LSI (Large Scale Integration), ASIC (Application Specific Integrated Circuit), FPGA (Field-Programmable Gate Array), or GPU (Graphics Processing Unit). (circuitry), or by cooperation of software and hardware.

The storage unit 120 is implemented by a storage device such as a HDD (Hard Disc Drive), a flash memory, an EEPROM (Electrically Erasable Programmable Read Only Memory), a ROM (Read Only Memory), and a RAM (Random Access Memory). The storage unit 120 stores terminal device information 122 in addition to various programs such as firmware and application programs.

FIG. 3 is a diagram showing an example of the content of the terminal device information 122 according to the first embodiment. The terminal device information 122 includes, for example, information that can identify the owner of the vehicle M (hereinafter referred to as owner identification information), and information that is used when the software update device 100 transmits various information to the terminal device 300 owned by the owner of the vehicle M. Information to be used (hereinafter referred to as terminal information contact information) is information associated with each other. The owner identification information may be, for example, a code for each owner of the vehicle M or the name of the owner of the vehicle M. FIG. The terminal information contact information is, for example, the telephone number and mail address of the terminal device 300 .

Returning to FIG. 2, the motion detection unit 111 detects, for example, that the vehicle M is in motion. The fact that the vehicle M is in operation includes the fact that the vehicle M is running, that the vehicle M is stopped in a state in which it can run, that the main switch of the vehicle M is in an ON state, etc. ( That is, at least the ignition key is in the ON state). The operation detection unit 111 detects that the vehicle M is in operation when the ignition key is in the ON state, and detects that the vehicle M is not in operation when the ignition key is in the OFF state. Note that the operation detection unit 111 determines that the vehicle M is in operation when the HMI 101 or the like is in the ON state (for example, the ACC (Accessory) power supply is in the ON state) even if the ignition key is in the OFF state. It may be detected that the vehicle M is not in operation when the HMI 101 and the like are in the OFF state.

The terminal device detection unit 112 detects, for example, that the terminal device 300 owned by the owner of the vehicle M is present inside the vehicle M. The terminal device detection unit 112 acquires information indicating the position of the vehicle M from, for example, a function unit of the vehicle M that specifies the position of the vehicle M. Also, the terminal device detection unit 112 acquires information indicating the position of the terminal device 300 from the terminal device 300 indicated in the terminal device information 122 . In this case, the terminal device 300 has a functional unit that identifies the position of the terminal device 300 . When the position of the vehicle M and the position of the terminal device 300 match based on the acquired information, the terminal device detection unit 112 detects that the terminal device 300 exists in the vehicle interior of the vehicle M, and detects the position of the vehicle M. and the position of the terminal device 300 do not match, it is detected that the terminal device 300 does not exist in the vehicle interior of the vehicle M. A functional unit that identifies the position of the vehicle M and a functional unit that identifies the position of the terminal device 300 are implemented by, for example, a GNSS (Global Navigation Satellite System) receiver or the like.

Note that the terminal device detection unit 112 detects whether the terminal device 300 is in the vehicle interior of the vehicle M based on whether or not the communication unit 102 and the terminal device 300 are capable of short-range wireless communication such as Wi-Fi network and Bluetooth. may be detected to exist. In this case, the terminal device detection unit 112 detects that the terminal device 300 is present in the vehicle interior of the vehicle M when the communication unit 102 and the terminal device 300 are capable of short-range wireless communication, and the communication unit 102, The terminal device 300 detects that the terminal device 300 does not exist in the vehicle interior of the vehicle M when short-range wireless communication is not possible.

The locked state detection unit 113 detects the locked state of the doors provided in the vehicle M (that is, whether the doors are locked or unlocked). The locked state detection unit 113 detects the locked state by, for example, acquiring information indicating the locked state of the doors provided in the vehicle M from a door lock device of the vehicle M that the vehicle M has.

The notification control unit 114 controls notification of update information, for example. For example, when the notification control unit 114 receives update information from the distribution server device 200, based on the detection result of at least one of the operation detection unit 111, the terminal device detection unit 112, and the locking state detection unit 113, At least one of the HMI 101 and the terminal device 300 is notified of the update information.

When the owner of the vehicle M approves the update of the software in response to notification by at least one of the HMI 101 and the terminal device 300 under the control of the notification control unit 114, the update unit 115 updates the distribution server device 200. receive the update software from, and update the software of the in-vehicle device to the received update software. Generally, the vehicle M cannot be operated for a predetermined period of time during which the updating unit 115 updates the software. The predetermined period of time is, for example, several [minutes] to several tens of [minutes].

[Example of notification in HMI 101]
FIG. 4 is a diagram showing an example of notification of update information in the HMI 101. As shown in FIG. For example, the notification control unit 114 controls the HMI 101 to display a notification image including a message MS1 inquiring whether the owner of the vehicle M approves the software update while notifying that there is a software update. display on the display. The message MS1 is, for example, a message such as "There is a software update. Do you want to update?" The notification image also includes a button B1 for accepting the software update and a button B2 for not accepting the software update. The owner of the vehicle M selects whether or not to approve the software update by operating the button B1 or button B2 of the notification image displayed on the HMI 101 .

[Example of Notification in Terminal Device 300]
FIG. 5 is a diagram showing an example of notification of update information in the terminal device 300. As shown in FIG. The notification control unit 114 , for example, controls the communication unit 102 to transmit update information to the terminal device 300 . The terminal device 300 generates the notification image described above based on the update information received from the notification control unit 114 and displays it on the display unit. The processing of accepting the update of the software is the same as the processing of the HMI 101, so the explanation is omitted.

Note that the notification control unit 114 may transmit a notification image to the terminal device 300 instead of the update information. In this case, the terminal device 300 causes the display unit to display the received notification image.

Here, if the notification control unit 114 notifies both the HMI 101 and the terminal device 300 of the update information, the owner of the vehicle M may find the notification annoying. In addition, when the vehicle M is in operation and the owner of the vehicle M is driving the vehicle M, if the terminal device 300 is notified of the update information, the owner of the vehicle M can use the terminal device 300 Notifications can get distracting. In order to suppress such a state, the notification control unit 114 controls notification of update information based on various detection results. In the following, update information notification processing related to the notification control unit 114 will be described.

[Operation Flow: Notification Processing Based on Whether Vehicle M is in Operation]
FIG. 6 is a flowchart showing an example of notification processing based on whether the vehicle M is in motion. The flowchart of FIG. 6 is repeatedly executed at predetermined time intervals. The predetermined time interval is, for example, a time interval (for example, one day to several days) suitable for checking whether or not update information has been transmitted from distribution server device 200 . First, the notification control unit 114 determines whether update information has been received from the distribution server device 200 (that is, whether there is software update) (step S100). The notification control unit 114 waits until it determines that there is software update. When the notification control unit 114 determines that the software has been updated, the notification control unit 114 determines whether or not the detection result of the operation detection unit 111 indicates that the vehicle M is operating (step S102). When the detection result of the motion detection unit 111 indicates that the vehicle M is moving, the notification control unit 114 causes the HMI 101 to notify the update information, and does not cause the communication unit 102 to transmit the update information to the terminal device 300. (Prohibit) (step S104). When the detection result of the motion detection unit 111 indicates that the vehicle M is not moving, the notification control unit 114 causes the HMI 101 to notify the update information, and transmits the update information to the terminal device 300 through the communication unit 102 . (step S106).

Accordingly, when the vehicle M is in operation and it is estimated that the owner of the vehicle M is in the vehicle M, the notification control unit 114 causes only the HMI 101 to notify the update information, and the terminal device 300 update information, and the owner of the vehicle M does not feel that the notification is bothersome. In addition, the notification control unit 114 can prevent the owner of the vehicle M from being distracted by the notification of the terminal device 300 .

In addition, in the process of step S106 described above, the HMI 101 performs the process (standby) of notifying the update information based on the control of the notification control unit 114, but since the vehicle M is not operating, the HMI 101 actually displays the notification image. The next operation timing of the vehicle M is displayed in the part. Therefore, in the case of the above-described processing, the notification control unit 114 first causes the terminal device 300 to notify the update information, and informs the owner of the vehicle M of the update of the software in advance. At some time (that is, at the next operation timing of the vehicle M), the HMI 101 is again notified of the update information. Thereby, the notification control part 114 can notify by an appropriate notification means according to the position of the owner of the vehicle M. FIG.

[Operation Flow: Notification Processing Based on Whether Terminal Device 300 Exists in Vehicle M]
FIG. 7 is a flowchart showing an example of notification processing based on whether the vehicle M is in motion. The flowchart of FIG. 7 is repeatedly executed at predetermined time intervals. Hereinafter, the same step numbers are assigned to the same processes as those described above, and the description thereof is omitted.

When the notification control unit 114 determines that the software has been updated, the notification control unit 114 determines whether or not the detection result of the terminal device detection unit 112 indicates that the terminal device 300 of the owner of the vehicle M is present in the vehicle interior of the vehicle M. Determine (step S202).

When the detection result of the terminal device detection unit 112 indicates that the terminal device 300 of the owner of the vehicle M is present in the vehicle interior of the vehicle M, the notification control unit 114 causes the HMI 101 to notify update information, and the communication unit 102 is prohibited from transmitting update information to the terminal device 300 (step S204).

When the detection result of the terminal device detection unit 112 indicates that the terminal device 300 of the owner of the vehicle M does not exist in the vehicle interior of the vehicle M, the notification control unit 114 determines that the terminal device 300 does not exist by the terminal device detection unit 112. It waits for a predetermined time after the detection of this (step S206). The notification control unit 114 causes the HMI 101 to notify update information after a predetermined time has passed since the detection result of the terminal device detection unit 112 indicates that the terminal device 300 does not exist in the vehicle interior of the vehicle M, and the communication unit 102 to transmit update information to the terminal device 300 (step S208).

Accordingly, when the vehicle M is in operation and it is estimated that the owner of the vehicle M is in the vehicle M, the notification control unit 114 causes only the HMI 101 to notify the update information, and the terminal device 300 update information, and the owner of the vehicle M does not feel that the notification is bothersome. In addition, the notification control unit 114 can prevent the owner of the vehicle M from being distracted by the notification of the terminal device 300 . In addition, the notification control unit 114 can prevent the owner of the vehicle M from forgetting the notification and thereby preventing the update of the software from being stopped. Further, the updating unit 115 prompts the update of the software at the timing when the owner of the vehicle M does not use the vehicle M by notifying the terminal device 300 of the update information at the timing when the owner of the vehicle M leaves the vehicle M. It is possible to prevent the owner of the vehicle M from being unable to use the vehicle M due to software update.

[Other examples of notifications]
A case will be described below in which the notification screen includes an option to withhold acceptance of software update. FIG. 8 is a diagram showing another example of notification of update information in the HMI 101. As shown in FIG. FIG. 9 is a diagram showing another example of notification of update information in the terminal device 300. As shown in FIG. The notification images shown in FIGS. 8 and 9 include a button B1 for accepting the software update, a button B2 for not accepting the software update, and a button B3 for suspending the acceptance of the software update. The owner of the vehicle M selects to accept the software update, not to accept the software update, or to suspend the software update by selecting buttons B1 to B3 of the notification image shown on the HMI 101. .

[Operation flow: Example of notification processing when notification has already been sent]
FIG. 10 is a flowchart showing an example of notification processing when notification has already been made. The flowchart of FIG. 10 is repeatedly executed at predetermined time intervals. The predetermined time interval is, for example, a time interval (for example, several days to ten and several days) at which the owner of the vehicle M does not feel annoyed by the notification.

First, the notification control unit 114 determines whether or not the update unit 115 has updated the software related to certain update information received from the distribution server device 200 (step S300). If the notification control unit 114 determines that the update unit 115 has updated the software related to the update information, the notification control unit 114 ends the process. When the notification control unit 114 determines that the software update related to certain update information has not been performed by the update unit 115, the notification control unit 114 determines whether or not the update information has already been transmitted to the terminal device 300 by the communication unit 102. (step S302). A case where the update unit 115 has not updated the software related to certain update information means, for example, that the owner of the vehicle M suspends the update of the software in response to a notification from the HMI 101 or the terminal device 300. is selected. When the notification control unit 114 determines that the communication unit 102 has already transmitted the update information to the terminal device 300, the notification control unit 114 does not cause the communication unit 102 to transmit the notification related to the update information to the terminal device 300 ( prohibited) (step S304). If the notification control unit 114 determines that the communication unit 102 has not already transmitted the update information to the terminal device 300, the notification control unit 114 causes the communication unit 102 to transmit the update information to the terminal device 300 (step S306). ).

Accordingly, the notification control unit 114 can prevent the owner of the vehicle M from feeling annoyed by the notification that is sent to the terminal device 300 many times. As a result, the notification control unit 114 can appropriately notify the owner of the vehicle M about the second and subsequent notifications once performed in the HMI 101 so that the owner of the vehicle M does not forget.

In the above description, the case where the flowchart of FIG. 10 is repeatedly executed at time intervals such that the owner of the vehicle M does not feel annoyed by the notification has been described, but the present invention is not limited to this. For example, the flowchart of FIG. 10 may be repeatedly executed at short time intervals such that the owner of the vehicle M finds the notification annoying when not updating the software affects the operation of the vehicle M.

[Operation Flow: Timing of Notification to Terminal Device 300]
FIG. 11 is a flowchart showing an example of notification processing for the terminal device 300. As shown in FIG. The flow chart of FIG. 11 shows that when the notification control unit 114 determines to cause the communication unit 102 to transmit update information to the terminal device 300 in the processing of steps S106, S208, and S306, the above-described step numbers It is a flow chart executed in the.

First, the notification control unit 114 determines whether or not the detection result of the locked state detection unit 113 indicates that the doors provided in the vehicle M are locked (step S400). If the detection result of the locked state detection unit 113 determines that the door is not locked, the notification control unit 114 waits until the door is locked. When the notification control unit 114 determines that the detection result of the locking state detection unit 113 indicates that the door is locked, the detection result of the locking state detection unit 113 indicates that the door is unlocked (the door is unlocked). (step S402). When the detection result of the locked state detection unit 113 determines that the door is not unlocked (that is, is locked), the notification control unit 114 waits until the door is unlocked. When the notification control unit 114 determines that the detection result of the locked state detection unit 113 indicates that the door is unlocked, the notification control unit 114 causes the communication unit 102 to transmit update information to the terminal device 300 (step S404). .

As a result, the notification control unit 114 notifies the terminal device 300 at the timing when the door is unlocked (that is, at the timing when the owner of the vehicle M gets into the vehicle M), so that the software can prompt the update of Further, the updating unit 115 can update the software at the timing when the owner of the vehicle M does not use the vehicle M by prompting the update of the software at the timing of getting off the vehicle. A situation in which the vehicle M cannot be used can be prevented from occurring.

[Operation flow: notification when HMI 101 fails]
FIG. 12 is a flowchart showing an example of notification processing when the HMI 101 fails. The flowchart of FIG. 12 is repeatedly executed at all times or at predetermined time intervals. The notification control unit 114 determines whether the HMI 101 can be used (step S500). For example, the notification control unit 114 determines that the HMI 101 cannot be used when the HMI 101 cannot be recognized or when the owner of the vehicle M inputs an input indicating that the HMI 101 is out of order. , it is determined that the HMI 101 is usable. When the notification control unit 114 determines that the HMI 101 cannot be used, subsequent notifications are made only to the terminal device 300, and the HMI 101 is prohibited from being notified (step S502). Thereby, the notification control unit 114 can appropriately perform notification according to the state of the notification means.

<Second embodiment>
A second embodiment will be described below with reference to the drawings. In the first embodiment described above, the case where the HMI 101 makes a notification using an image or sound has been described. In contrast, the second embodiment differs from the above-described first embodiment in that notification is performed using the agent function. In the following, differences from the first embodiment will be mainly described, and descriptions of points common to the second embodiment will be omitted. In addition, in description of 2nd Embodiment, the same code|symbol is attached|subjected about the structure similar to 1st Embodiment, and description is abbreviate|omitted.

[Overview of Software Update System 1a]
FIG. 13 is a diagram showing an example of the configuration of a software update system 1a including a software update device 100a according to the second embodiment. The software update system 1a includes, for example, a software update device 100a, a distribution server device 200, a terminal device 300, and an agent server device 400. Software update device 100a, distribution server device 200, terminal device 300, and agent server device 400 can communicate with each other via network NW. It includes cellular networks, Wi-Fi networks, Bluetooth, Internet, WAN, LAN, public lines, provider equipment, leased lines, wireless base stations, and the like. Also, these components may perform wireless communication directly without going through the network NW.

The agent server device 400 software updates information (hereinafter referred to as a voice stream) obtained by performing acoustic processing on the voice representing the utterance of the occupant of the vehicle M acquired by a microphone (not shown) provided in the vehicle M, for example. Receive from device 100a. The agent server device 400 recognizes the meaning of the voice indicated by the received voice stream, and provides the software update device 100 with an answer according to the recognized meaning. The answer may be a voice output by the HMI 101 or a command for instructing the operation of the in-vehicle device of the vehicle M. FIG.

[Configuration of software update device 100a]
FIG. 14 is a diagram showing an example of the configuration of the software update device 100a according to the second embodiment. The software update device 100a includes, for example, an HMI 101, a communication section 102, a control section 110a, and a storage section 120a.

The control unit 110a includes, for example, an operation detection unit 111, a terminal device detection unit 112, a locking state detection unit 113, a notification control unit 114, an update unit 115, a recognition unit 116, an agent function unit 117, and a display unit. A control unit 118 and an audio control unit 119 are provided.

The constituent elements of the control unit 110a are implemented, for example, by a processor such as a CPU executing a program stored in the storage unit 120a. Some or all of the components of the control unit 110a may be implemented by hardware (circuit units) such as LSI, ASIC, FPGA, or GPU, or may be implemented by cooperation of software and hardware. good too.

The storage unit 120a is implemented by, for example, a storage device such as an HDD, flash memory, EEPROM, ROM, and RAM. The storage unit 120a stores terminal device information 122a in addition to various programs such as firmware and application programs.

FIG. 15 is a diagram showing an example of the content of terminal device information 122a according to the second embodiment. The terminal device information 122a is, for example, information in which owner identification information, terminal information contact information, and information indicating characteristics of the owner of the vehicle M (hereinafter referred to as characteristic information) are associated with each other. The feature information is, for example, feature information of the owner's face of the vehicle M derived by face recognition processing or the like.

Returning to FIG. 14, the recognizing unit 116, based on an image generated by an in-vehicle camera (not shown) provided in the vehicle interior of the vehicle M capturing an occupant of the vehicle M and the terminal device information 122a, The occupants present in the vehicle M are recognized. For example, the recognition unit 116 performs face recognition processing on an image generated by an in-vehicle camera, and acquires facial feature information of the occupant of the vehicle M. Then, when the acquired feature information of the face matches the feature information indicated in the terminal device information 122a, the recognition unit 116 recognizes that the owner of the vehicle M associated with the feature information is present in the vehicle interior of the vehicle M. Then recognize. Further, the recognition unit 116 recognizes the seated position of the owner of the vehicle M recognized as being present in the vehicle M based on the image generated by the vehicle interior camera. The seating position is represented by, for example, whether it is the driver's seat or another seat.

The agent function unit 117, for example, cooperates with the agent server device 400 to cause an agent to appear, and provides services including voice responses in response to the utterances of the occupants of the vehicle M. FIG. The agent function unit 117 transmits the voice stream to the agent server device 400, and transmits the acquired answer to the occupants instructed by the notification control unit 114 among the occupants recognized as being present in the vehicle M by the recognition unit 116. offer.

For example, the display control unit 118 generates an image of an anthropomorphic agent (hereinafter referred to as an agent image) that communicates with a passenger in the vehicle in accordance with an instruction from the agent function unit 117, and displays the generated agent image. is displayed on the display unit of the HMI 101 . An agent image is, for example, an image of a mode of speaking to a passenger. The agent image may include, for example, a face image that allows at least the viewer (passenger) to recognize the facial expression and facial orientation. For example, the agent image may include parts simulating eyes and nose in the face area, and the facial expression and facial orientation may be recognized based on the positions of the parts in the face area. The agent image is an image that the viewer feels stereoscopically and recognizes the face orientation of the agent by including the head image in the three-dimensional space. The agent image may include an image of the agent's body (torso, limbs, etc.) in which the agent's actions, behavior, posture, etc. are recognized. Also, the agent image may be an animation image.

For example, the voice control unit 119 causes the speaker of the HMI 101 to output a voice indicating the answer in accordance with an instruction from the agent function unit 117 . For example, the vehicle M includes, in addition to the HMI 101, a speaker unit having a plurality of speakers. Control may be performed to localize the sound image of the agent's voice at a position corresponding to the display position of the image. The position corresponding to the display position of the agent image is, for example, the position where the passenger is expected to feel that the agent image is speaking the agent voice. ~3 [cm]). Further, the localization of the sound image means that the spatial position of the sound source sensed by the occupant of the vehicle M is determined, for example, by adjusting the volume of the sound transmitted to the left and right ears of the occupant.

FIG. 16 is a diagram showing an example of service provision by an agent. In FIG. 16, the notification image includes the agent image IME. When there are multiple passengers recognized by the recognition unit 116, the notification control unit 114 notifies the owner of the vehicle M who is seated in a seat other than the driver's seat that there is a software update. The agent function unit 117 is instructed to provide a message (hereinafter referred to as message MS2) inquiring whether the owner of the vehicle M approves of software update. The message MS2 is, for example, ``Mr. It may be a message including a text calling on the owner. Further, when the occupants recognized by the recognizing unit 116 are only the occupants sitting in the driver's seat, the notification control unit 114 instructs the agent function unit 117 to provide the message MS2 to the occupants. do.

The display control unit 118 and the voice control unit 119 change the orientation of the agent image IME for the owner of the vehicle M instructed by the agent function unit 117, and voice the message MS2 to the owner of the vehicle M. Output SD.

Further, when the owner of the vehicle M responds to the options indicated by the buttons B1 to B3 by speaking, the agent function unit 117 transmits a voice stream indicating the speaking to the agent server device 400. FIG. Based on the response received from the agent server device 400, the update unit 115 updates the software or suspends the update of the software.

[Operation Flow: Notification Processing for Owner of Recognized Vehicle M]
FIG. 17 is a flow chart showing an example of notification processing to the owner of the vehicle M recognized by the recognition unit 116 . The flowchart of FIG. 17 is repeatedly executed at predetermined time intervals. The predetermined time interval is, for example, a time interval (for example, one day to several days) suitable for checking whether or not update information has been transmitted from distribution server device 200 . Hereinafter, the same step numbers are assigned to the same processes as those described above, and the description thereof is omitted.

When the notification control unit 114 determines that the software has been updated, the recognition unit 116 determines whether or not there are a plurality of occupants of the recognized vehicle M (step S600). When the occupants recognized by the recognizing unit 116 are determined to be only the occupants sitting in the driver's seat, the notification control unit 114 controls the agent function unit 117 to provide updated information to the occupants. to notify the update information to the HMI 101, but not to transmit the update information to the terminal device 300 (prohibited) from the communication unit 102 (step S602).

If the recognition unit 116 determines that there are a plurality of occupants of the vehicle M, it identifies the occupants seated in the seats other than the driver's seat (step S604). The notification control unit 114 instructs the agent function unit 117 to notify the update information to the HMI 101 so as to provide update information to the passenger identified by the recognition unit 116 , while the notification control unit 114 instructs the communication unit 102 to provide update information to the identified passenger. The update information is transmitted to the terminal device 300 of (the owner of the vehicle M) (step S606).

As a result, when it is estimated that only one owner of the vehicle M is in the vehicle M, the notification control unit 114 notifies only the HMI 101 of the update information and notifies the terminal device 300 of the update information. It is possible to prevent the owner of the vehicle M from feeling annoyed by the notification. In addition, the notification control unit 114 can prevent the owner of the vehicle M from being distracted by the notification of the terminal device 300 .

Further, as a result, when it is estimated that the owner of the vehicle M is in (the driver's seat of) the vehicle M, the notification control unit 114 causes only the HMI 101 to notify the update information, and the terminal device 300 It is possible to prevent the owner of the vehicle M from feeling annoyed by the notification without notifying the update information. In addition, the notification control unit 114 can prevent the owner of the vehicle M from being distracted by the notification of the terminal device 300 . In addition, when it is estimated that a plurality of owners of the vehicle M are riding in the vehicle M, the notification control unit 114 notifies the HMI 101 of the update information, but the vehicle is seated in a seat other than the driver's seat. By notifying the terminal device 300 of the owner of M, the owner of the vehicle M sitting in the driver's seat can be prevented from being distracted by the notification of the terminal device 300 .

Further, the notification control unit 114 instructs the agent function unit 117 to notify the owner of the vehicle M of the update information by means of the agent image IME, so that the notification can be made in an easy-to-understand manner.

[Modification: Other configurations of software update system 1]
Modifications of the embodiment will be described below with reference to the drawings. In the modified example, a case will be described in which some of the functions installed in the software update devices 100 and 100a of the embodiment are possessed by other devices that are not installed in the vehicle. In the following, differences from the first embodiment will be mainly described, and descriptions of points common to the second embodiment will be omitted. In addition, in description of 2nd Embodiment, the same code|symbol is attached|subjected about the structure similar to 1st Embodiment, and description is abbreviate|omitted.

FIG. 18 is a diagram showing an example of a configuration of a distribution server device 200a according to a modification. A case where some of the functions installed in the software update devices 100 and 100a are installed in the distribution server device 200 will be described below. The distribution server device 200 includes a communication unit 202, a control unit 210, and a storage unit 220, for example.

The communication unit 202 includes, for example, a communication interface such as NIC. The communication unit 202 communicates with the software update device 100, the terminal device 300, or the like via the network NW.

The control unit 210 includes an acquisition unit 211 and a notification control unit 114, for example. The constituent elements of the control unit 210 are realized by, for example, executing a program stored in the storage unit 220 by a processor such as a CPU. Also, some or all of the components of the control unit 110 may be implemented by hardware (circuit units) such as LSI, ASIC, FPGA, or GPU, or may be implemented by cooperation of software and hardware. good too.

The storage unit 220 is implemented by, for example, a storage device such as an HDD, flash memory, EEPROM, ROM, and RAM. The storage unit 220 stores terminal device information 122 (or terminal device information 122a) in addition to various programs such as firmware and application programs.

The acquisition unit 211 acquires various information related to notification control of the notification control unit 114 from the software update devices 100 and 100a. The various information is, for example, at least one of the detection result of the motion detection unit 111, the detection result of the terminal device detection unit 112, the detection result of the locking state detection unit 113, and the recognition result of the recognition unit 116. The notification control unit 114 controls notification from the HMI 101 (or the HMI 101 via the agent function unit 117 ) and notification from the terminal device 300 based on the information acquired by the acquisition unit 211 and the terminal device information 122 . The process of causing the notification control unit 114 to notify the HMI 101 and the terminal device 300 is the same as the above-described process, so the description is omitted.

As a result, the distribution server device 200a of the modified example can collectively control notifications related to software updates of a plurality of vehicles M. FIG.

As described above, the mode for carrying out the present invention has been described using the embodiments, but the present invention is not limited to such embodiments at all, and various modifications and replacements can be made without departing from the scope of the present invention. can be added.

Reference Signs List 1, 1a... Software update system 100, 100a... Software update device 102... Communication unit 110, 110a... Control unit 111... Operation detection unit 112... Terminal device detection unit 113... Locked state detection unit 114... Notification control unit 115 Update unit 116 Recognition unit 117 Agent function unit 118 Display control unit 119 Audio control unit 120, 120a Storage unit 122, 122a Terminal device information 200, 200a ... distribution server device, 202 ... communication unit, 210 ... control unit, 211 ... acquisition unit, 220 ... storage unit, 300 ... terminal device, 400 ... agent server device, IME ... agent image, M ... vehicle

Claims (10)

A software update device installed in a vehicle,
a communication unit that communicates with other devices including at least a terminal device of a user of the vehicle;
a motion detection unit that detects that the vehicle is in motion;
a notification unit mounted on the vehicle and configured to notify a user of the vehicle of information;
A notification control unit that controls notification of update information indicating that there is an update of software via the communication unit in the in-vehicle device,
The notification control unit
When the motion detection unit detects that the vehicle is in motion, the notification unit performs processing for notifying the user of the vehicle of the update information, and the communication unit receives the update information. without transmitting to the terminal device owned by the user of the vehicle,
The communication unit
When the operation detection unit detects that the vehicle is not in operation, the notification unit notifies the update information, and the user of the vehicle has the update information in the communication unit. send to the terminal device,
Software update device. A software update device installed in a vehicle,
a communication unit that communicates with other devices including at least a terminal device of a user of the vehicle;
a terminal device detection unit that detects that a terminal device possessed by a user of the vehicle is present in the interior of the vehicle;
a notification unit mounted on the vehicle and configured to notify a user of the vehicle of various types of information;
A notification control unit that controls notification of update information indicating that there is an update of software via the communication unit in the in-vehicle device,
The notification control unit
When the terminal device detection unit detects that the terminal device is present in the vehicle interior, the notification unit performs processing for notifying the user of the vehicle of the update information, and the communication unit includes: without transmitting the update information to a terminal device owned by a user of the vehicle;
The notification control unit causes the communication unit to transmit the update information to the terminal device after a predetermined time has elapsed since it was detected that the terminal device does not exist in the vehicle interior.
Software update device. The terminal device detection unit detects whether the terminal device is present in the vehicle interior of the vehicle using short-range wireless communication with the terminal device or based on the position information of the vehicle and the position information of the terminal device. to detect that
3. The software updating device according to claim 2 . When the update information is transmitted to the terminal device, the notification control unit causes the notification unit to perform processing for notifying the user of the vehicle of the update information.
4. The software updating device according to claim 2 or 3 . further comprising a locked state detection unit that detects a locked state of the vehicle;
The notification control unit
When the locked state detection unit detects that the vehicle is unlocked, the communication unit does not transmit the update information to the terminal device, or the notification unit transmits the update information to the vehicle. causing the communication unit to transmit the update information to the terminal device when the process of notifying the user is not performed;
The software update device according to any one of claims 1 to 4 . The notification control unit causes the communication unit to transmit the update information to the terminal device when the notification unit is in a state where the notification cannot be performed.
The software update device according to any one of claims 1 to 5 . A software update system comprising the software update device according to any one of claims 1 to 6 and an agent device,
The agent device
a recognition unit that recognizes a user of the vehicle present in the vehicle;
a display control unit for displaying an image of an agent communicating with a user of the vehicle on a display unit mounted on the vehicle;
an agent function unit that provides a service including a response by voice according to the voice of the user of the vehicle ;
The notification control unit
identifying the terminal device of the user of the vehicle seated in the driver's seat based on the recognition result of the recognition unit and the information of the terminal device of the user of the vehicle;
The communication unit does not transmit the update information to the terminal device of the user of the vehicle sitting in the driver's seat, and the terminal device of the user of the vehicle sitting in a seat other than the driver's seat. to send the update information to
The agent function unit notifies a user of the vehicle to which the update information is transmitted that the update information will be transmitted;
The display control unit causes the display unit to display the agent image in response to a notification from the agent function unit.
Software update system. A computer equipped with a notification unit for notifying a user of the vehicle of various types of information and realizing a software update device mounted on the vehicle,
Communicate with other devices including at least a terminal device of a user of the vehicle;
detecting that the vehicle is in motion;
Controlling notification of update information indicating that there is a software update via communication in the in-vehicle device,
When it is detected that the vehicle is in operation, the notification unit is caused to perform processing for notifying the user of the vehicle of the update information, and the update information is sent to a terminal device owned by the user of the vehicle. do not send
When it is detected that the vehicle is not in operation, performing processing for notifying the update information to the notification unit and transmitting the update information to a terminal device owned by a user of the vehicle;
Software update method. A computer equipped with a notification unit for notifying a user of the vehicle of various types of information and realizing a software update device mounted on the vehicle,
Communicate with other devices including at least a terminal device of a user of the vehicle;
Detecting that a terminal device owned by a user of the vehicle is present in the vehicle interior,
Controlling notification of update information indicating that there is a software update via communication in the in-vehicle device,
When it is detected that the terminal device exists in the vehicle interior, the notification unit performs processing for notifying the user of the vehicle of the update information, and a terminal owned by the user of the vehicle with the update information. Do not let the device transmit
transmitting the update information to the terminal device after a predetermined time has elapsed since it was detected that the terminal device does not exist in the vehicle interior;
Software update method. an acquisition unit that acquires in-operation information indicating that the vehicle is in operation;
a communication unit that transmits update information indicating that there is a software update via communication in the in-vehicle device,
The communication unit
when the information during operation is acquired by the acquisition unit, the update information is transmitted to a notification control unit that controls notification of the vehicle;
without transmitting the update information to the terminal device owned by the user of the vehicle;
When the operating information is not acquired by the acquisition unit, the update information is transmitted to the notification control unit, and the update information is transmitted to a terminal device owned by a user of the vehicle.
Software update device.

Images