KR20240037099A - Electronic control unit for update and Vehicle having the same - Google Patents

Abstract

The present invention discloses an electronic control device for updating software of a plurality of controllers provided in a vehicle and a vehicle having the same.
The electronic control device is transmitting data for software update of a plurality of controllers to a plurality of controllers. If the transmission of software update data is interrupted due to power fluctuation, it checks the device turn of the controller for which transmission was interrupted, and when power is restored, the electronic control device checks the device turn of the controller for which transmission was interrupted. Resume transmission of software update data based on the confirmed device rotation of the controller.
During the transmission of software update data, if the transmission of software update data is interrupted due to power fluctuations, the electronic control device checks the frame turn in which transmission was interrupted, and when power is restored, the software update data is transferred based on the confirmed frame turn. Let the transmission resume

Description

Electronic control unit for update and Vehicle having the same}

The present invention relates to an electronic control device for wirelessly updating software and a vehicle having the same.

In addition to basic driving functions, the vehicle performs additional functions for user convenience such as audio functions, video functions, navigation functions, air conditioning functions, seat heating functions, and communication functions with external terminals. of loads, and further includes a plurality of controllers for controlling the operation of the plurality of loads.

These vehicles receive software (S/W) setting information or tuning information of multiple controllers transmitted from a cloud server through a wireless communication network, allowing updates during or after driving without visiting an offline business location such as a repair shop. We are providing OTA (Over-the-Air) service that can be performed. Through this, the vehicle can improve the functions of multiple controllers or perform new functions.

When performing an OTA service, the vehicle downloads and stores software to be updated while driving the vehicle, and updates multiple controllers using the stored software when the vehicle is completed.

In this case, if the vehicle's ignition is changed to the ON state within a certain period of time after the vehicle's ignition is turned off, there is a problem that it takes a lot of time to collect version information depending on the number of multiple controllers in the vehicle and the number of options for each controller. there was.

Additionally, when transmitting stored software to multiple controllers after turning off the vehicle's ignition, if the vehicle's battery power is reset or the engine is turned on again, the software to be updated must be retransmitted to multiple controllers from the beginning, so the software must be reinstalled. There was a problem with it taking a lot of time to transmit.

As such, there has been a problem in the past where the time required to perform OTA becomes excessively long depending on whether the vehicle's battery is supplied and whether the ignition is turned on or off.

One aspect is that when updating the software of a plurality of controllers, if the transmission of software update data is interrupted in response to power fluctuations or the software update of the plurality of controllers is interrupted, the device rotation of the interrupted controller is checked and response to power recovery is performed. Provided is an electronic control device for update that resumes transmission of software update data or resumes update based on the confirmed device rotation of the controller, and a vehicle having the same.

Another aspect is that when updating the software of any one controller, if the transmission of software update data is interrupted or the update is stopped in response to power fluctuations, the interrupted frame turn is checked, and the software is updated based on the frame turn confirmed in response to power recovery. Provided is an electronic control device for updating that resumes transmission of update data or resumes updating, and a vehicle having the same.

An electronic control device for updating according to one aspect includes a communication unit that communicates with a server, an input unit, and a plurality of controllers; a memory that stores data for software update of a plurality of controllers received through a server; And when a vehicle start-up signal is received through the input unit, the software update data of the plurality of controllers stored based on the preset device rotation of the plurality of controllers is being transmitted to the plurality of controllers, and the software update data is transmitted to the plurality of controllers due to power fluctuations. When power is restored after transmission is interrupted, it includes a processor that controls the communication unit to resume transmission of software update data based on the device turn of the controller where transmission of software update data was interrupted.

The processor of the electronic control device for update according to one aspect determines a power change when a vehicle start-off signal is received through the input unit while transmitting data for software update to a plurality of controllers, and starts the vehicle through the input unit. When the on signal is re-received, it is judged as power recovery.

The processor of the electronic control device for update according to one aspect determines a power change when a battery reset signal is received through a communication unit while transmitting data for software update to a plurality of controllers.

According to one aspect, the processor of the electronic control device for update controls the communication unit to receive data for software update of a plurality of controllers from the server when a vehicle start-up signal is received through the input unit and updates the software of the received plurality of controllers. Controls memory to store data.

According to one aspect, the processor of the electronic control device for update may provide version information of the software of the plurality of controllers when the ignition on signal is received after the time counted from the off point when the ignition off signal of the vehicle is received exceeds the reference time. If a start-on signal is received within a reference time from the off point, the collection of software version information of a plurality of controllers is skipped. The version information of the software of the plurality of controllers is information for determining whether a software update of the plurality of controllers is necessary.

The processor of the electronic control device for update according to one aspect checks the replacement times of each of the plurality of controllers and sets the shortest replacement time among the confirmed replacement times as the reference time.

The processor of the electronic control device for update according to one aspect checks the time required for manual updating of a plurality of controllers, and sets the shortest time required among the confirmed times as the reference time.

The processor of the electronic control device for update according to one aspect controls software update of a plurality of controllers based on software update data of the plurality of controllers when a start-off signal is received through an input unit, and while controlling the software update, When the software update is interrupted by reception of the ignition on signal, the device cycle of the controller where the update was interrupted is checked, and when the ignition off signal is received again, the software update is resumed based on the confirmed device cycle of the controller.

According to one aspect, the processor of the electronic control device for update sets a frame turn for each frame of software update data of a plurality of controllers, controls the software update of each controller based on the set frame turn, and controls the software update. When a start-up signal is received during update control, the frame turn at which the software update was interrupted is checked, and when the start-off signal is received again, the software update is resumed based on the confirmed frame turn.

According to one aspect, the processor of the electronic control device for update sets a frame turn for each frame of software update data to be transmitted to each of a plurality of controllers, and sends the software update data to each of the controllers based on the set frame turn. Controls the communication unit to transmit data, and if transmission of software update data is interrupted due to power fluctuation while transmitting software update data to any one of the plurality of controllers, check the frame turn at which transmission was interrupted. , When power is restored, the communication unit is controlled to resume transmission of software update data based on the confirmed frame turn.

An electronic control device for updating according to another aspect includes a communication unit that communicates with a server, an input unit, and a controller; A memory that stores data for software update of the controller received through the server; And when the start-up signal is received through the input unit, the software update data is transmitted based on a preset frame turn. If the power is restored after the software update data is interrupted due to power fluctuations, the software update data is transmitted. It includes a processor that controls the communication unit to resume transmission of software update data based on the interrupted frame turn.

According to another aspect, the processor of the electronic control device for update determines a power change when a vehicle start-off signal or a battery reset signal is received through the input unit, and restores power when the vehicle start-on signal is re-received through the input unit. It is judged by

According to another aspect, the processor of the electronic control device for update controls the communication unit to receive data for software update of the controller from the server when a vehicle start-up signal is received through the input unit and stores the received data for software update of the controller. Control the memory to

According to another aspect, the processor of the electronic control device for update collects version information of the software of the controller when the ignition on signal is received after the time counted from the off point when the vehicle ignition off signal is received exceeds the reference time, and , if the start-on signal is received within the reference time from the off point, the collection of version information of the controller software is skipped.

According to another aspect, the processor of the electronic control device for update controls the software update of the controller based on a set frame turn when a ignition off signal is received through the input unit, and when a ignition on signal is received during control of the software update, the processor controls the software update. The frame turn in which the update was interrupted is checked, and when the ignition off signal is received again, the software update is controlled to resume based on the confirmed frame turn.

A vehicle according to another aspect includes a communication unit that communicates with a server; An input unit that receives a ignition on signal or a ignition off signal; a plurality of controllers each storing software for performing at least one function; And when a ignition on signal is received, software update data of a plurality of controllers is received and stored through the server, and when a ignition off signal is received, software is stored in a plurality of controllers using the stored software update data of the plurality of controllers. Includes an electronic control device that controls the update. When an ignition off signal is received, the electronic control device of the vehicle transmits the stored software update data of the plurality of controllers to each of the plurality of controllers based on the preset device rotation of the plurality of controllers, and transmits the software update data to the plurality of controllers while transmitting the software update data. , When power is restored after a power change, transmission of data for software update is resumed based on the device rotation of the controller where transmission was interrupted.

The electronic control device of the vehicle determines a power change when an ignition-off signal or a battery reset signal is received, and determines a power recovery when the ignition-off signal is received again.

The electronic control device of the vehicle collects software version information of a plurality of controllers when the ignition on signal is received after the time counted from the off point when the ignition off signal is received exceeds the standard time, and within the reference time from the off point. When a start-up signal is received, the collection of software version information of a plurality of controllers is skipped.

The electronic control device of the vehicle sets a frame rotation for each frame of software update data to be transmitted to each of the plurality of controllers, transmits the software update data to each controller based on the set frame rotation, and transmits the software update data to each of the controllers. While transmitting data for software update to any one of the controllers, if the transmission of data for software update is interrupted due to power fluctuation, the frame turn in which transmission was interrupted is checked, and when power is restored, the frame turn is checked based on the confirmed frame turn. Resume transmission of data for software update.

While controlling the software update of a plurality of controllers, the electronic control device of the vehicle checks the device rotation of the controller for which the update was interrupted when the software update is interrupted by reception of the ignition on signal, and when the ignition off signal is received again, the confirmed controller Controls to resume software update based on the device cycle.

The electronic control device of the vehicle sets a frame turn for each frame of software update data of a plurality of controllers, and when a start-up signal is received while controlling the software update of a plurality of controllers, it checks the frame turn at which the software update is stopped. And, when the start-off signal is received again, the software update is controlled to resume based on the confirmed frame turn.

The present invention can minimize the time required for wireless update by minimizing the learning time for collecting version information of multiple controllers. Through this, the present invention can provide an environment that can actively release wireless updates.

The present invention prevents the update of a plurality of controllers from restarting from the beginning due to power fluctuations such as battery reset or ignition on/off while transmitting (BackgroundSend) data for software update or updating the software of a plurality of controllers. By preventing this, over-the-air updates (OTA) can be performed quickly and reliably.

The present invention can prevent an increase in cost by performing updates wirelessly without additional configuration of hardware.

The present invention can improve the quality and marketability of vehicles, further increase user satisfaction, and improve user convenience.

1 is a configuration diagram of a vehicle according to an embodiment.
FIG. 2 is a control configuration diagram of a plurality of devices in the vehicle shown in FIG. 1.
FIG. 3 is a control configuration diagram of the electronic control device in the vehicle shown in FIG. 1.
Figure 4 is an example of collection of software version information of an electronic control device according to an embodiment.
Figure 5 is a flowchart of transmission of data for software update of an electronic control device according to an embodiment.
Figure 6 is an example of device turn setting of an electronic control device according to an embodiment.
Figure 7 is an example of frame turn setting of an electronic control device according to an embodiment.
8 is a flowchart of update control of an electronic control device according to an embodiment.

Like reference numerals refer to like elements throughout the specification. This specification does not describe all elements of the embodiments, and general content or overlapping content between the embodiments in the technical field to which the present invention pertains is omitted. The terms 'unit, device, and apparatus' used in the specification may be implemented as software or hardware, and depending on embodiments, a plurality of 'units, devices, and apparatus' may be implemented as one component, or a single 'unit' may be implemented as a single component. It is also possible for ', device, or apparatus' to include multiple components.

Throughout the specification, when a part is said to be “connected” to another part, this includes not only direct connection but also indirect connection, and indirect connection includes connection through a wireless communication network. do.

Additionally, when it is said that a part "includes" a certain component, this does not mean that other components are excluded, but that it can further include other components, unless specifically stated to the contrary.

Throughout the specification, when a member is said to be located “on” another member, this includes not only cases where a member is in contact with another member, but also cases where another member exists between the two members.

Terms such as first, second, third, fourth, and fifth are used to distinguish one component from another component, and the components are not limited by the above-mentioned terms.

Singular expressions include plural expressions unless the context clearly makes an exception.

The identification code for each step is used for convenience of explanation. The identification code does not explain the order of each step, and each step may be performed differently from the specified order unless a specific order is clearly stated in the context. there is.

Hereinafter, the operating principle and embodiments of the present invention will be described with reference to the attached drawings.

FIG. 1 is a configuration diagram of a vehicle according to an embodiment, FIG. 2 is a control configuration diagram of a plurality of devices in the vehicle shown in FIG. 1, and FIG. 3 is a control configuration diagram of an electronic control device in the vehicle shown in FIG. 1. .

As shown in FIG. 1, the vehicle 1 includes a plurality of devices 100 (110, 120, 130, 140, 150), a central communication device 200 that communicates with the plurality of devices 100, and , and includes an electronic control device 300 that communicates with at least one of a plurality of devices through a central communication device 200.

Each of the plurality of devices 100: 110, 120, 130, 140, and 150 may perform at least one function. Functions performed in each device may be different.

It is also possible for at least one device to perform a new function that is different from a predetermined function.

A plurality of devices (100: 110, 120, 130, 140, 150) communicate with each other using communication devices provided therein, and can transmit and receive various messages to perform at least one function during communication. there is.

A plurality of devices are provided on the exterior of the vehicle body to easily view surrounding information while keeping an eye on the front view, and provide signals to other vehicles and pedestrians, lamps that perform communication functions, and signals from GPS satellites, broadcasting stations, etc. An antenna for receiving and performing a wireless vehicle network (V2X: Vehicle to everything) such as communication with other vehicles (V2V) and communication with infrastructure (V2I), a cluster provided inside the vehicle body, audio equipment, and air A head unit that receives the operation commands of the harmony unit and displays operation information, an AVN (Audio Video Navigation) terminal that performs audio functions, video functions, and navigation functions, and provides information about the surrounding situation of the vehicle for the user's safety and convenience. At least one camera that collects images, a head-up display (HUD) that projects navigation information on the front window glass so that navigation information corresponding to the navigation function is displayed on the front window glass, and a driver assistance device (ADAS: Advanced Driver Assistance) System) may include at least two devices.

A plurality of devices include an input unit, a display unit, a shift lever, a parking button (EPB button) that receives an operation command of an electronic parking brake device (not shown), a power unit, a steering unit, a braking unit for applying braking force to the wheels, It may further include various electronic devices such as a suspension device for adjusting the vehicle's suspension and a battery management device for managing the battery.

Here, the battery management device 420 (see FIG. 3) can monitor the charging state of the battery 430 (see FIG. 3) and output a separation signal when the battery is separated from the vehicle. A connection signal can be output when connected to a vehicle.

When the battery management device 420 (see FIG. 3) receives the disconnection signal of the battery 430 (see FIG. 3), it can transmit the disconnection signal to the electronic control device 300 through the central communication device 200, and connect the battery. When the signal is received, the connection signal can be transmitted to the electronic control device 300 through the central communication device 200.

Here, the battery 430 can perform charging and discharging. The battery 430 can supply power to various devices such as a plurality of devices 100, the central communication device 200, and the electronic control device 300 provided in the vehicle, and can also supply driving power for the vehicle.

The plurality of devices may further include a detection device such as a wheel speed sensor, an acceleration sensor, a steering angle sensor, a rain sensor, a yaw sensor, a pressure sensor, an obstacle sensor, etc.

A plurality of devices include a warning system that outputs warning information in a dangerous situation so that the driver is aware of the risk of an accident, and a braking system when another vehicle is within a certain distance from the vehicle in front of the vehicle. An Automatic Emergency Braking System (AEBS) that operates and reduces engine output to perform emergency braking, an airbag control device, and a vehicle stability control device that controls the vehicle's posture when accelerating or cornering the vehicle. (ESC: Electronic Stability Control), a tire pressure monitoring system (TPMS), and an Anti-lock Brake System (ABS) to prevent the wheels from locking during sudden braking.

Here, the warning devices include a Lane Departure Warning System (LDWS) that notifies the driver of leaving his or her own lane, a drowsiness warning device that notifies that the driver is drowsy, and the risk of collision with other vehicles located in the lanes to the left and right of the driver's own lane. A blind spot warning system (BSW, BSA or BSD) that alerts you of a collision warning system (Forward Collision Warning System: FCWS, Back Warning System: BWS) that alerts you of the risk of collision with other vehicles located in front and behind your own lane. may include.

A plurality of devices, but not limited to the devices described above.

As shown in Figure 2, each device (110, 120, 130, 140, 150) is a communication device (111, 121, 131, 141) that performs communication with the electronic control device 300 and at least one other device. , 151) and controllers (112, 122, 132, 142, 152) that generate control signals based on messages received through communication devices (111, 121, 131, 141, 151) and internal software. It may include loads (113, 123, 133, 143) that operate in response to the control signal, and memories (114, 124, 134, 144, 145) that store identification information of other devices.

Each controller (112, 122, 132, 142, 152) can also control each communication device to transmit a message corresponding to the control signal to another device.

Each controller (112, 122, 132, 142, 152) receives software update data transmitted from the electronic control device 300, and uses the received software update data to update each memory (114, 124, 134, 144, You can update software stored in 145).

It is also possible for memories 114, 124, 134, 144, and 145 to be provided inside each controller (112, 122, 132, 142, and 152).

Each controller (112, 122, 132, 142, 152) may be provided separately from the memory (114, 124, 134, 144, 154).

Some of the controllers, such as the first, second, third, and fourth controllers 112, 122, 132, and 142 among the plurality of controllers, may be load controllers that control the operation of a load that performs at least one function. Among the plurality of controllers, the remaining controllers, such as the fifth controller 152, may be controllers for generating and transmitting control signals to enable other functions to be performed on loads provided in other devices.

Software for controlling the function of the load of each device may be stored in the memories 114, 124, 134, 144, and 145 of each device. This software may be updated.

A plurality of devices will be described in more detail using examples.

Taking a plurality of devices as an example, the first device 110 may be an AVN terminal, the second device 120 may be a head-up display, the third device 130 may be a cluster, and the fourth device 140 may be a head unit, and the fifth device 150 may be a driving assistance device.

The first device 110 may include a first communication device 111, a first controller 112, a first load 113, and a first memory 114.

The first communication device 111 can communicate with the electronic control device 300 and communication devices provided in the second, third, fourth, and fifth devices 120, 130, 140, and 150.

The first controller 112 controls at least one of the audio function and the video function based on the input information input to the input unit, or the input information input to the input unit and the information detected by at least one detection device (i.e., sensor). The navigation function is controlled based on the detection information, and the operation of at least one of the display unit and the speaker is controlled to output information about at least one function being performed through the display unit and the speaker.

The first controller 112 can also control the display unit to display information received through the fourth device 140. Here, the information received through the fourth device 140 may be an image of the exterior of the vehicle.

The first controller 112 may receive software update data transmitted through the electronic control device 300, store the received software update data in the first memory, and store the software stored in the first memory. Software stored in the first memory 114 can be updated using the update data.

The first load 113 includes at least one of an input unit, a display unit, and a speaker, operates at least one of the display unit and the speaker based on a control signal from the first controller 112, and transmits the input information input to the input unit to the first load 113. transmitted to the controller 112.

The first memory 114 may store the source IP address of the first device 110 and the identification information and IP address of another device that communicates with the first device 110.

The first memory 114 may store software that allows at least one function to be performed through the operation of the first load 113 and may store version information of the stored software.

For example, the first memory 114 may store software for performing audio, video, and navigation functions.

When a plurality of functions are performed through the operation of the first load 113, the first memory 114 may store a plurality of software corresponding to the plurality of functions and version information corresponding to the plurality of software. .

The first memory 114 may store software update data received in response to a control command from the first controller 112.

The first memory 114 may include a plurality of storage areas. In this case, the first memory 114 may store software in the first area and the received software update data in the second area.

The first memory 114 may delete software stored in the first area in response to completion of the update, store software update data in the first area, and delete software update data stored in the second area to create an empty area. You can change it.

The first memory 114 may store version information of updated software.

The second device 120 may include a second communication device 121, a second controller 122, a second load 123, and a second memory 124.

The second communication device 121 may communicate with the first communication device 111 of the first device 110. In addition, the second communication device 121 is also capable of communicating with at least one communication device among the electronic control device 300 and the third, fourth, and fifth devices 130, 140, and 150.

The second controller 122 may control the display of route guidance information based on input information (eg, message) input from the AVN terminal.

The second controller 122 may receive software update data transmitted through the electronic control device 300, store the received software update data in the second memory, and store the software stored in the second memory. Software stored in the second memory 124 can be updated using the update data.

The second load 123 may be a display module. The display module displays route information and reflects the displayed route information to be projected onto the front window glass.

The second memory 124 may store identification information and IP addresses of other devices that communicate with the second device 120 and may store identification information of the electronic control device 300 .

The second memory 124 may store software that allows at least one function to be performed through the operation of the second load 123 and may store version information of the stored software.

For example, the second memory 124 may store software to perform a function of displaying route information.

When a plurality of functions are performed through the operation of the second load 123, the second memory 124 may store a plurality of software corresponding to the plurality of functions and version information corresponding to the plurality of software. .

The second memory 124 may store software update data received in response to a control command from the second controller 122.

The second memory 124 may include a plurality of storage areas. In this case, the second memory 124 may store software in the first area and store received software update data in the second area.

The second memory 124 may delete the software stored in the first area in response to completion of the update, store software update data in the first area, and delete the software update data stored in the second area to create an empty area. You can change it.

The second memory 124 may store version information of updated software.

The third device 130 may include a third communication device 131, a third controller 132, a third load 133, and a third memory 134.

The third communication device 131 communicates with the electronic control device 300 and the communication devices of the first and fourth devices 110 and 140. In addition, the third communication device 131 is also capable of communicating with at least one communication device among the second and fifth devices 120 and 150.

The third controller 132 controls to display information such as a tachometer, speedometer, coolant temperature gauge, and fuel gauge in a dial manner based on detection information detected by at least one detection device (i.e., sensor), and displays a direction change indicator lamp. , controls the on/off of high beam indicator lamps, various warning lamps, and shift lever indicator lamps, and controls the odometer, odometer, etc. to be displayed in text.

The third load 133 includes a lamp, a display unit (eg, LCD), and a dial-type gauge.

The third load 133 turns the lamp on and off based on the control signal from the third controller 132, displays characters on the display, and moves the gauge needle.

The third memory 134 may store the source IP address of the third device, and may store identification information and IP addresses of the electronic control device 300 and other devices that communicate with the third device.

The third controller 132 can receive software update data transmitted through the electronic control device 300, store the received software update data in the third memory, and store the software stored in the third memory. Software stored in the third memory 134 can be updated using the update data.

The third memory 134 can store software that allows at least one function to be performed through the operation of the third load 133 and can store version information of the stored software.

For example, the third memory 134 may store software to perform notification functions, such as a lamp on/off function, a character display function, and a gauge needle movement function.

When a plurality of functions are performed through the operation of the third load 123, the third memory 134 may store a plurality of software corresponding to the plurality of functions, and version information corresponding to the plurality of software. .

The third memory 134 may store software update data received in response to a control command from the third controller 132.

The third memory 134 may include a plurality of storage areas. In this case, the third memory 134 may store software in the first area and the received software update data in the second area.

The third memory 134 may delete the software stored in the first area in response to completion of the update, store software update data in the first area, and delete the software update data stored in the second area to create an empty area. You can change it.

The third memory 134 may store version information of updated software.

The fourth device 140 may include a fourth communication device 141, a fourth controller 142, a fourth load 143, and a fourth memory 144.

The fourth communication device 141 communicates with the first and third communication devices of the first and third devices 110 and 130. The fourth communication device 141 is also capable of communicating with at least one of the second and fifth devices 120 and 150.

The fourth controller 142 controls the input information input to the input unit to be transmitted to the AVN terminal or to the cluster and operates at least one of an audio function, a radio function, an air conditioning function, and a heating function based on the input information input to the input unit. The operation of the display unit is controlled to display information about the function being performed through the display unit, and when the user terminal is connected to the communication terminal, it is also possible to control communication with the user terminal.

The fourth controller 142 can receive software update data transmitted through the electronic control device 300 and store the received software update data in the fourth memory, and the fourth memory 144 The software stored in the fourth memory 144 can be updated using the software update data stored in .

The fourth load 143 may include an input unit, a display unit, and a communication terminal provided in the head unit.

Here, the input unit can receive user input.

The input unit 410 (see FIG. 3) can receive a ignition on signal and an ignition off signal. When the ignition on signal is received, the input unit may transmit the ignition on signal to the electronic control device 300 through the central communication device 200, and when the ignition off signal is received, the ignition off signal may be transmitted to the electronic control device 300 through the central communication device 200. It can be transmitted to the control device 300.

Here, the ignition on signal is also called a key on signal, and the ignition off signal is also called a key off signal.

The fourth memory 144 may store the source IP address of the fourth device, the identification information and IP address of another device that communicates with the fourth device, and the identification information and IP address of the electronic control device 300. You can save the address.

The fourth memory 144 can store software that allows at least one function to be performed through the operation of the fourth load 143 and can store version information of the stored software.

When a plurality of functions are performed through the operation of the fourth load 143, the fourth memory 144 may store a plurality of software corresponding to the plurality of functions, and version information corresponding to the plurality of software. .

The fourth memory 144 may store software update data received in response to a control command from the fourth controller 142.

The fourth memory 144 may include a plurality of storage areas. In this case, the fourth memory 144 may store software in the first area and the received software update data in the second area.

The fourth memory 144 may delete the software stored in the first area in response to completion of the update, store software update data in the first area, and delete the software update data stored in the second area to create an empty area. You can change it.

The fourth memory 144 may store version information of updated software.

The fifth device 150 may include a fifth communication device 151, a fifth controller 152, and a fifth memory 154.

The fifth communication device 151 communicates with the communication device of the first device 110. In addition, the fifth communication device 151 is also capable of communicating with at least one communication device among the first, second, third, and fourth devices (120, 130, 140, and 150) and the electronic control device 300.

When an image is received through at least one camera, the fifth controller 152 controls the received image to be transmitted to the AVN terminal.

The fifth controller 152 can receive software update data transmitted through the electronic control device 300 and store the received software update data in the fifth memory, and the fifth memory 154 The software stored in the fifth memory 154 can be updated using the software update data stored in .

The fifth memory 154 stores the source IP address of the fifth device 150 and the identification information and IP address of another device that communicates with the fifth device.

The fifth memory 154 can also store identification information and IP address of the electronic control device 300.

The fifth memory 154 can store software that allows at least one function to be performed through the operation of the first load 113 and can store version information of the stored software.

When a plurality of functions are performed in the first load 113 through control of the fifth controller 152, the fifth memory 154 corresponds to a plurality of software and a plurality of software respectively corresponding to the plurality of functions. You can save version information.

The fifth memory 154 may store software update data received in response to a control command from the fifth controller 152.

The fifth memory 154 may include a plurality of storage areas. In this case, the fifth memory 154 may store software in the first area and the received software update data in the second area.

The fifth memory 154 may delete the software stored in the first area in response to completion of the update, store software update data in the first area, and delete the software update data stored in the second area to create an empty area. You can change it.

The fifth memory 154 may store version information of updated software.

As such, at least one device 150 among the plurality of devices generates a control signal based on a communication device 151 that performs communication with another device, a message received through the communication device 151, and internal software. a controller 152 that controls the communication device to transmit a message corresponding to the generated control signal to another device, and a memory that stores the identification information of the other device to transmit the message for each identification information of the message and stores the destination IP address. It is also possible to include (154).

As another example, the fifth device 150 controls the operation of the engine controller (ECU: Engine Control Unit), the motor controller (MCU: Motor Control Unit), and the actuator, which control the operation of the generator and the engine, so that the clutch is in the open state. Alternatively, it may be a hybrid controller (HCU: HEV Control Unit) that outputs a control signal to a local controller (LCU: Local Control Unit) that puts it in a closed state. That is, a device including a communication device, a controller, and a memory may be used for communication, It may be a hybrid controller with the function of storing and outputting control signals to another controller.

The controller of each device includes a memory (not shown) that stores data for an algorithm for controlling the operation of components within the device or software that reproduces the algorithm, and a processor that performs the above operations using the data stored in the memory. It can be implemented as (not shown). At this time, the memory and processor may each be implemented as separate chips. Alternatively, the memory and processor may be implemented as a single chip.

The memory of each device consists of non-volatile memory elements such as cache, read only memory (ROM), programmable ROM (PROM), erasable programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), and flash memory, or RAM (RAM). It may be implemented as at least one of a volatile memory device such as Random Access Memory (Random Access Memory) or a storage medium such as a hard disk drive (HDD) or CD-ROM, but is not limited thereto.

The central communication device 200 controls communication between a plurality of devices 110, 120, 130, 140, and 150, and controls communication between at least one of the plurality of devices and the electronic control device 300. .

When transmitting a message from one of the plurality of devices 110, 120, 130, and 140 to at least one other device, the central communication device 200 may set a message transmission path to at least one other device.

When controlling communication between at least one device and the electronic control device, the central communication device 200 may transmit software update data stored in the electronic control device 300 to the at least one device, and the electronic control device 300 ) update control command can be transmitted to at least one device.

The central communication device 200 can also transmit version information of software stored in the memory of a plurality of devices to the electronic control device 300.

The central communication device 200 can communicate with the server 2 and transmit software update data and version information transmitted from the server 2 to the electronic control device 300.

Here, the server 2 can store software update data and version information for each controller, and transmit the stored software update data and version information for each controller to the vehicle 1 in response to a request from the vehicle 1.

The server 2 may be a server of a vehicle manufacturer or a server of a maintenance center.

The central communication device 200 may include one or more components that enable communication between internal components of the vehicle and communication with external devices, for example, among a short-range communication module, a wired communication module, and a wireless communication module. It can contain at least one. Here, the external device may include a server 2 and a user terminal (not shown).

The short-range communication module transmits signals using a wireless communication network at a short distance, such as a Bluetooth module, infrared communication module, RFID (Radio Frequency Identification) communication module, WLAN (Wireless Local Access Network) communication module, NFC communication module, and Zigbee communication module. It may include various short-range communication modules that transmit and receive.

Wired communication modules include a variety of wired communication modules, such as Controller Area Network (CAN) communication modules, Local Area Network (LAN) modules, Wide Area Network (WAN) modules, or Value Added Network (VAN) modules. In addition to communication modules, various cable communications such as USB (Universal Serial Bus), HDMI (High Definition Multimedia Interface), DVI (Digital Visual Interface), RS-232 (recommended standard232), power line communication, or POTS (plain old telephone service) Can contain modules.

In addition to Wi-Fi modules and WiBro (Wireless broadband) modules, wireless communication modules include GSM (global System for Mobile Communication), CDMA (Code Division Multiple Access), WCDMA (Wideband Code Division Multiple Access), and UMTS (universal mobile telecommunications system). ), TDMA (Time Division Multiple Access), and LTE (Long Term Evolution) may include a wireless communication module that supports various wireless communication methods.

The central communication device 200 relays communication between at least two devices. For example, the central communication device 200 transmits and receives control signals between different controllers through wires. These communication devices may include gateways.

Among wired communication modules, the can communication module will be explained as an example.

The CAN communication module transmits a control signal to at least one of at least one controller, an electronic device, and a detection device through two communication lines, a high line and a low line, and can transmit thousands of signals per second when transmitting a signal.

These CAN communication modules can be divided into low-speed CAN communication modules and high-speed CAN communication modules depending on the communication speed at which control signals are transmitted and received.

Here, the low-speed CAN communication module may be a CAN communication module with a communication speed less than the standard speed, and the high-speed CAN communication module may be a CAN communication module with a communication speed greater than the standard speed.

The low-speed CAN communication module may include a Multimedia Controller Area Network (M-CAN) communication module and a Body Controller Area Network (B-CAN) communication module that transmits and receives signals for operating various electronic devices. there is.

The high-speed CAN communication module is a power train CAN (P-CAN: Power Train Controller Area Network) communication module that transmits and receives signals to control the power train, stability control (ABS, active suspension, etc.), and shifting functions in real time, and the chassis can It may include a (C-CAN: Chassis Controller Area Network) communication module and a diagnostic CAN (D-CAN) communication module for diagnosing errors.

The electronic control device 300 receives software update data and version information for each controller from the server 2, stores the received software update data and version information for each controller, and stores the stored software update data and version for each controller. Information can be transmitted to each of the controllers of a plurality of devices.

The electronic control device 300 can control the update of software that reproduces the algorithms of the controllers 112, 122, 132, 142, and 152 provided in each of the plurality of devices.

The electronic control device 300 collects the version information of the software of the controllers 112, 122, 132, 142, and 152 of the plurality of devices, and Based on the version information and the version information of the software update data for each controller received from the server 2, it is determined whether an update is necessary for each of the plurality of controllers, and the update of at least one controller determined to need an update is performed. You can control it.

Referring to FIG. 3, the configuration of the electronic control device 300 will be described in more detail.

As shown in FIG. 3, the electronic control device 300 includes a communication unit 310, a processor 320, and a memory 330.

The communication unit 310 may communicate with at least one device among the plurality of devices 110, 120, 130, 140, and 150 through the central communication device 200.

Performing communication with at least one device may include communicating with at least one controller through a communication device provided in the at least one device.

The communication unit 310 communicates with the server 2, the input unit 410, the battery management device 420, and a plurality of controllers 112, 122, 132, 142, and 152 through the central communication device 200. You can.

The communication unit 310 may transmit software update data and version information of a plurality of controllers received through the server 2 to the processor 320 .

The communication unit 310 may request a plurality of devices to provide software version information in response to a control command from the processor 320.

The communication unit 310 may receive version information of software of the controllers transmitted from a plurality of devices, and transmit the version information of the software of the controllers stored in each memory of the plurality of devices to the processor 320 .

When a ignition-on signal is received, the communication unit 310 may transmit the received ignition-on signal to the processor 320, and when a ignition-off signal is received, the communication unit 310 may transmit the received ignition-off signal to the processor 320.

When the battery disconnection and connection signals are received, the communication unit 310 may transmit the received battery disconnection and connection signals to the processor 320.

The connection signal received after receiving the battery disconnection signal may be a battery reset signal.

When a start-up signal is received, the processor 320 controls the reception of data for software update of a plurality of controllers 112, 122, 132, 142, and 152 from the server 2, and at least one of the plurality of controllers When data for software update of a controller is received, the received data for software update of at least one controller may be stored.

When a start-off signal is received, the processor 320 may control the reception and storage of software update data of the plurality of controllers 112, 122, 132, 142, and 152 from the server 2.

The processor 320 may check the replacement times of each of the plurality of controllers 112, 122, 132, 142, and 152 and set the shortest replacement time among the confirmed replacement times as the reference time.

The processor 320 may check the time required for manual updating of the plurality of controllers 112, 122, 132, 142, and 152, and set the shortest time required among the confirmed times as the reference time.

The processor 320 may set the shorter of the confirmed replacement times and the shortest replacement time as the reference time.

The processor 320 may check the replacement time of the battery 430 based on the disconnection signal and connection signal of the battery 320, and may set a reference time based on the confirmed replacement time of the battery 430. Here, the battery replacement time may be the time between the time the battery is disconnected and the time it is connected.

The processor 320 counts the time between the time when the vehicle's engine is turned off and the time when the vehicle's engine is turned on, and stores the counted time. If the number of stored times of the counted time is a preset number, the average time of the counted time It is also possible to obtain and set the obtained average time as the reference time.

As shown in FIG. 4, the processor 320 determines that the vehicle is in an ignition-off state when the ignition-off signal (IG_Off) is received, and counts the off-time from the ignition-off point when the vehicle ignition-off signal is received.

When the counted off time (Toff) elapses the reference time (Tr), the processor 320 determines whether the ignition on signal (IG-On) has been received, and when it is determined that the ignition on signal has been received, the processor 320 determines whether the ignition on signal has been received. Version information is collected and the collected software version information of the plurality of controllers is stored in the memory 330.

That is, the processor 320 collects software version information of the plurality of controllers 112, 122, 132, 142, and 152 when an ignition on signal is received after a reference time has elapsed from the time the vehicle's ignition is turned off.

Software version information of the plurality of controllers 112, 122, 132, 142, and 152 may be information stored in memories provided in each of the plurality of devices.

The software version information of the plurality of controllers (112, 122, 132, 142, and 152) is used as information to determine whether a software update of the plurality of controllers (112, 122, 132, 142, and 152) is necessary. It can be.

Each controller may have one or more software. A plurality of software for reproducing a plurality of functions performed in one controller may include respective version information.

As shown in FIG. 4, the processor 320 collects and stores software version information of a plurality of controllers 112, 122, 132, 142, and 152, and when the vehicle ignition off signal (IG_Off) is If it is determined that the vehicle's ignition-off signal has been received, the off time is counted from the ignition-off point when the vehicle's ignition-off signal is received. If it is determined that the ignition-on signal (IG_On) is received before the counted off time (Toff) has elapsed the reference time (Tr), the vehicle's ignition-off signal is received. The collection of software version information of the controllers 112, 122, 132, 142, and 152 can be skipped.

That is, the processor 320 collects and stores software version information of the plurality of controllers 112, 122, 132, 142, and 152, and when it is determined that the vehicle ignition-off signal has been received, the vehicle ignition-off signal is Check the received ignition-off time, and if it is determined that the ignition-on signal has been received within a reference time from the confirmed ignition-off time, skip the collection of version information of the plurality of controllers (112, 122, 132, 142, 152). can do.

When the processor 320 determines that a battery reset signal has been received, the processor 320 may check the time at which the battery was reset, and if it determines that the confirmed time exceeds the reference time, it may collect version information of a plurality of controllers.

The processor 320 collects and stores software version information of a plurality of controllers 112, 122, 132, 142, and 152, and when it is determined that a battery reset signal has been received, it checks the time when the battery was reset and If it is determined that the checked time is within the standard time, the collection of version information of a plurality of controllers can be skipped.

Through this, the number of times to collect software version information of a plurality of controllers (112, 122, 132, 142, 152) can be reduced, and the software version of a plurality of controllers (112, 122, 132, 142, 152) can be collected. The time required to collect information can be minimized.

The processor 320 skips the collection of software version information of the plurality of controllers 112, 122, 132, 142, and 152, and stores the plurality of controllers 112, The update of the plurality of controllers 112, 122, 132, 142, and 152 can be controlled using the software version information of the software 122, 132, 142, and 152.

The processor 320 collects the version information of the software of the plurality of controllers 112, 122, 132, 142, and 152 and the software version information of the plurality of controllers 112, 122, 132, 142, and 152 transmitted from the server 2. You can compare software version information, check the controller whose software version transmitted from the server is higher than the collected software version, and control the update of the software of the confirmed controller.

For example, if the version of the software of the first controller stored in the first memory of the first device is version 1.1 and the version of the software update data of the first controller received from the server is version 1.6, the processor 320 1It may be determined that the controller needs to be updated.

On the other hand, if the version of the software of the first controller stored in the first memory of the first device is version 1.1 and the version of the software update data of the first controller received from the server is version 1.1, the processor 320 It may be judged that updating is unnecessary.

The processor 320 may update software for at least one of the plurality of controllers 112, 122, 132, 142, and 152.

The memory 330 may store version information of software of each controller stored in each memory of a plurality of devices in response to a control command of the processor 320.

The memory 330 may store data and version information for software updates of a plurality of controllers received through the server 2.

The memory 330 is also capable of deleting software update data and version information of a plurality of controllers stored in response to a control command of the processor 320.

The control configuration and control sequence of the processor 320 that updates the software of the plurality of controllers 112, 122, 132, 142, and 152 will be described in more detail with reference to FIGS. 5 to 8.

FIG. 5 is a flowchart of transmission of data for software update of an electronic control device according to an embodiment, FIG. 6 is an exemplary device turn setting diagram of an electronic control device according to an embodiment, and FIG. 7 is a frame of an electronic control device according to an embodiment. This is an example of a turn setting, and Figure 8 is an update control flowchart of an electronic control device according to an embodiment.

Here, the rounds are also called phases.

When a start-up signal is received (501), the processor 320 sets the device rotation of a plurality of controllers (502) and selects a plurality of controllers (112, 112, The communication unit 310 may be controlled to transmit the software update data of 122, 132, 142, and 152 to the plurality of controllers 112, 122, 132, 142, and 152, respectively, sequentially (503).

The processor 320 transmits data for software update of the plurality of controllers (112, 122, 132, 142, and 152) and It is determined whether the transmission has been completed, and if it is determined that the transmission is not completed, it is continuously determined whether there is a power change (505). If it is determined that a power change has occurred, the transmission of the software update data is stopped.

That is, the processor 320 sequentially updates software update data of the plurality of controllers 112, 122, 132, 142, and 152 stored in the memory 330 to the plurality of controllers 112, 122, 132, 142, and 152. If a power change occurs during transmission, the transmission of software update data is stopped (506), and the device turn of the controller where transmission was stopped is checked and stored (507).

The processor 320 determines whether power has been restored (508), and if it is determined that power has been restored, checks the stored device turn (509), checks the controller for which the confirmed device turn is set, and retransmits the software update data from the confirmed controller (509). 510), the communication unit 310 can be controlled.

The case where software update data is transmitted to all of a plurality of controllers will be described as an example.

As shown in FIG. 6, the processor 320 configures the first controller 112 with device number 1, the second controller 122 with device number 2, the third controller 132 with device number 3, and the fourth controller ( Device number 4 is set in 142) and device number 5 is set in the fifth controller (152).

The processor 320 transmits the first software update data to the first controller 112 set to device number 1, and when the transmission of the first software update data is completed, to the second controller 122 set to device number 2. The data for the second software update is transmitted, and when the transmission of the data for the second software update is completed, the data for the third software update is transmitted to the third controller 132 with device turn 3 set, and the data for the third software update is transmitted. When the transmission is completed, the fourth software update data is transmitted to the fourth controller 142 set to device turn 4, and when the transmission of the fourth software update data is completed, it is sent to the fifth controller 152 set to device turn 5. 5 When the software update data is transmitted and the 5th software update data is completed, it is determined that the transmission of all software update data has been completed, and the transmission of the software update data is terminated.

If the processor 320 determines that a power change has occurred while transmitting the fourth software update data to the fourth controller 142 with device turn 4 set, the processor 320 stops transmitting the fourth software update data and reports that the power has been restored. If determined, check the device turn 4 of the interrupted controller, resume transmission of the fourth software update data to the fourth controller 142 with device turn 4 set, and when the transmission of the fourth software update data is completed, the device turn 4 The fifth software update data is transmitted to the fifth controller 145 set to 5, and when the fifth software update data transmission is completed, the software update data transmission can be terminated.

The processor 320 may determine that the power has changed when a battery disconnection signal is received through the communication unit 310 while transmitting software update data.

The processor 320 may determine that power has been restored when a battery connection signal is received while transmission of data for software update is interrupted.

If a reset signal from the battery is received while transmission of software update data is interrupted, the processor 320 may determine power recovery after a power change.

The processor 320 may determine that the power has changed when a start-off signal is received while transmitting software update data.

The processor 320 may determine that power has been restored when the start-up signal is re-received while the transmission of data for software update is interrupted.

The processor 320 can also set the device rotation of a plurality of controllers based on the execution time when the update is performed. Here, the execution time for performing the update may be an average of past execution times for each controller.

The processor 320 may also set the device rotation of a plurality of controllers based on communication possibilities for diagnosis. Communication possibilities for diagnosis can be obtained based on past diagnosis history.

When the processor 320 sequentially transmits software update data to a plurality of controllers based on the device rotation of the plurality of controllers, the processor 320 sets a frame rotation for the software update data to be transmitted to each controller and matches the set frame rotation. Based on this, data for software update can be transmitted. This will be explained with reference to FIG. 7 .

As shown in FIG. 7, the first software update data to be transmitted to the first controller 112 is divided into data frames 11 and 12, and the second software update data to be transmitted to the second controller 122 is data frame 21. The data for the third software update to be transmitted to the third controller 132 is divided into data frames 31 and 32, and the data for the fourth software update to be transmitted to the fourth controller 142 is divided into data frame 41, Assume that the fourth software update data to be transmitted to the fifth controller 152 is divided into data frames 51, 52, and 53.

At this time, the processor 320 sets frame number (FP) 1 to data frame 11, sets frame number (FP) 2 to data frame 12, sets frame number (FP) 3 to data frame 21, and sets data frame number (FP) 3 to data frame 11. Set frame count (FP) 4 for data frame 31, set frame count (FP) 5 for data frame 32, set frame count (FP) 6 for data frame 41, and set frame count (FP) for data frame 51. You can set 7, set frame count (FP) 8 in data frame 52, and set frame count (FP) 9 in data frame 53.

When transmitting data for the first software update to the first controller 112, the processor 320 transmits data frame 11 with frame turn (FP) 1 set, and when transmission of data frame 11 is completed, frame turn (FP) 2 The set data frame 12 is transmitted, and when transmission of data frame 12 is completed, transmission of the second software update data is controlled to the second controller 122.

When transmitting data for a second software update to the second controller 122, the processor 320 transmits data frame 21 with a frame turn (FP) set to 3, and when transmission of data frame 21 is completed, the third controller 132 Controls the transmission of data for third-party software updates.

When transmitting data for third software update to the third controller 132, the processor 320 transmits data frame 31 with frame number (FP) 4 set, and when transmission of data frame 31 is completed, frame number FP (FP) 5. The set data frame 32 is transmitted, and when the transmission of data frame 32 is completed, transmission of the fourth software update data is controlled to the fourth controller 142.

In this way, the processor 320 can transmit data for a fourth software update to the fourth controller 142 and transmit data for a fifth software update to the fifth controller 142.

If a power fluctuation occurs during transmission of data frame 32 with frame number (FP) 5 set, the processor 320 stops transmission of data frame 32 with frame number (FP) 5 set and checks frame number 5 for which transmission was interrupted. .

When the power is restored, the processor 320 checks the frame number 5 whose transmission was interrupted and resumes transmission of the data frame 32 in which the confirmed frame number 5 is set. When the transmission of the data frame 32 is completed, the fourth message is sent to the fourth controller 142. Controls transmission of data for software updates.

When transmitting software update data to one controller, the processor 320 divides the software update data into data frames, sets a frame turn for each divided data frame, and then sequentially sends the data frames based on the set frame turn. The communication unit 310 can be controlled to transmit.

As shown in FIG. 8, the processor 320 determines whether an ignition off signal has been received while transmitting all software update data to the plurality of controllers 112, 122, 132, 142, and 152 (511). ), and when it is determined that a start-off signal has been received, the device rotation of a plurality of controllers is set (512).

The device cycle for update control and the device cycle for transmitting software update data may be the same or different.

The processor 320 may sequentially control software updates of the plurality of controllers (513) based on the device rotation of the plurality of controllers (112, 122, 132, 142, and 152).

The processor 320 determines whether the update is complete while controlling the update of the plurality of controllers 112, 122, 132, 142, and 152 (514), and if it is determined that the update is not completed, it periodically sends a start-up signal. Reception can be determined (515).

If it is determined that data is not complete, the processor 320 may periodically determine whether a battery reset signal is received.

If the processor 320 determines that a start-up signal has been received while controlling the software update, the processor 320 controls the interruption of the software update, and checks and stores the time of the controller in which the update was interrupted (516).

The processor 320 determines whether an ignition off signal is received while the update is stopped (517).

When the processor 320 determines that a start-off signal has been received, the processor 320 checks the stored device turn (518), checks the controller for which the confirmed device turn is set, and resumes the software update starting from the confirmed controller (519). These will be described with reference to FIG. 5 .

The processor 320 controls the update of the first controller 112 set to device cycle 1, and when the update of the first controller is completed, it controls the update of the second controller 122 set to device cycle 2, and the second controller When the update of is completed, the update of the third controller 132 set to device turn 3 is controlled, and when the update of the third controller is completed, the update of the fourth controller 142 set to device turn 4 is controlled, and the fourth controller When the update is completed, the update of the fifth controller 152 set to device number 5 is controlled, and when the update of the fifth controller is completed, the update control for the plurality of controllers is terminated.

The processor 320 stops the update when a start-up signal is received during update control of the fourth controller 142 with device cycle 4 set, and checks and stores the cycle of the controller for which the update was stopped.

When a start-off signal is received while the update is stopped, the processor 320 checks the device turn stored when the update was stopped, checks the controller for which the confirmed device turn is set, and controls the update again from the confirmed controller. That is, if the confirmed device cycle is 4, the processor 320 controls the update of the fourth controller 142 set to device cycle 4, and when the update of the fourth controller is completed, the processor 320 controls the update of the fifth controller 152 set to device cycle 5. The update is controlled, and when the update of the fifth controller is completed, the update control for the plurality of controllers is terminated.

When sequentially transmitting updates to a plurality of controllers based on the device rotation of the plurality of controllers, the processor 320 sets a frame rotation for the software update data to be transmitted to each controller, and updates based on the set frame rotation. You can control it. This is explained with reference to FIG. 7 .

As shown in FIG. 7, when controlling the update of the first controller 112, the processor 320 controls the update using data frame 11 with frame turn (FP) 1 set, and the update using data frame 11 is performed. Once completed, the update is controlled using data frame 12 with frame turn (FP) 2 set, and when the update using data frame 12 is completed, the update of the second controller 122 is controlled.

When controlling the update of the second controller 122, the processor 320 controls the update using the data frame 21 with frame number (FP) 3 set, and when the update using the data frame 21 is completed, the update of the third controller 132 is performed. Control updates.

In this way, the processor 320 can control updates of the third, fourth, and fifth controllers 132, 142, and 152.

When a start-up signal is received during update control using the data frame 32 with a frame number (FP) 5 set, the processor 320 stops the update using the data frame 32 with a frame number (FP) 5 set and returns the frame for which the update was stopped. Check and save episode 5.

When power is restored, the processor 320 checks the frame number stored when the update was interrupted, that is, checks frame number 5 and controls the update using data frame 32 in which the confirmed frame number 5 is set.

In this way, when the update using the data frame 32 is completed, the processor 320 controls the update of the fourth controller 142 using the data frame 41 and the fifth controller using the data frames 51, 52, and 53. Controls the update of (152).

It is also possible for each controller, while receiving and storing data for software update, to sequentially perform updates based on a set number of rounds when an ignition off signal is received.

For example, the first controller set to device turn 1 performs an update using the first software update data when a start-off signal is received, and when the update is completed, it sends an update completion signal to the second controller set to device turn 2. Can be transmitted.

The second controller performs an update using the second software update data, and when the update is completed, it can transmit an update completion signal to the third controller with device turn 3 set. In this way, the third, fourth, and fifth controllers can sequentially perform updates.

Each controller receives and stores software update data, and when an ignition off signal is received, each controller divides the software update data into one or two or more data frames, and the divided data frames set the frame number and set the frame number. It is also possible to perform updates sequentially based on frame rotation.

For example, the first controller performs an update using data frame 11 with frame number 1 set, and when the update is completed using data frame 11, it performs the update using data frame 12 with frame number 2 set, When the update is completed, an update completion signal can be transmitted to the second controller.

Thereafter, when an update completion signal is received from the first controller, the second controller performs an update using data frame 21 with frame number 3 set, and when the update is completed, the update completion signal can be transmitted to the third controller.

In this way, the third controller can perform an update using data frames 31 and 32, the fourth controller can perform an update using data frames 41, and the fifth controller can perform updates using data frames 51, 52, You can perform an update using 53.

Each controller may stop the update when a start-up signal or a battery disconnection signal is received while performing the update, and check and store the frame turn at which the update was stopped.

Afterwards, each controller can determine whether to stop the update when the ignition off signal is received again or the battery connection signal (i.e., reset signal) is received.

In this case, the controller in which the update has been stopped can check the frame turn in which the update has been stopped and perform the update using the confirmed frame turn.

For example, when a start-up signal is received while performing an update using data frame 21 in the third controller, the third controller stops the update, checks and stores frame turn 3 for which the update was stopped, and receives a start-up off signal. When received, frame turn 3 where the update has been stopped is checked and update is performed using data frame 21 in which frame turn 3 is set. When the update is completed, an update completion signal can be transmitted to the fourth controller.

At least one component may be added or deleted in response to the performance of the components of the battery management system shown in FIGS. 1, 2, and 3. Additionally, it will be easily understood by those skilled in the art that the mutual positions of the components may be changed in response to the performance or structure of the system.

Meanwhile, each component shown in FIGS. 1, 2, and 3 refers to software and/or hardware components such as Field Programmable Gate Array (FPGA) and Application Specific Integrated Circuit (ASIC).

Meanwhile, the disclosed embodiments may be implemented in the form of a recording medium that stores instructions executable by a computer. Instructions may be stored in the form of software code and, when executed by a processor, may create software modules to perform operations of the disclosed embodiments. The recording medium may be implemented as a computer-readable recording medium.

Computer-readable recording media include all types of recording media storing instructions that can be decoded by a computer. For example, there may be read only memory (ROM), random access memory (RAM), magnetic tape, magnetic disk, flash memory, optical data storage device, etc. I

As described above, the disclosed embodiments have been described with reference to the attached drawings. Those skilled in the art will understand that the present invention may be formed in a form different from the disclosed embodiments without changing the technical idea or essential features of the present invention. It will be understood that the present invention can be practiced. The disclosed embodiments are illustrative and should not be construed as limiting.

1: vehicle
110: first device
120: Second device
130: Third device
140: Fourth device
150: Fifth device
200: central communication device
300: electronic control device

Claims (21)

a communication unit that communicates with a server, an input unit, and a plurality of controllers;
a memory that stores software update data for a plurality of controllers received through the server; and
When a vehicle start-up signal is received through the input unit, the stored software update data of the plurality of controllers is transmitted to the plurality of controllers based on the preset device rotation of the plurality of controllers, and the software update data is transmitted to the plurality of controllers due to power fluctuations. When the power is restored after data transmission is interrupted, comprising a processor that controls the communication unit to resume transmission of the software update data based on the device rotation of the controller where transmission of the software update data was interrupted, Electronic control unit for updates. The method of claim 1, wherein the processor:
While transmitting the software update data to the plurality of controllers, if a vehicle ignition-off signal is received through the input unit, it is determined as a power change, and if a vehicle ignition-on signal is re-received through the input unit, it is determined as power recovery. Electronic control unit for updating. The method of claim 1, wherein the processor:
An electronic control device for an update that determines a power change when a battery reset signal is received through the communication unit while transmitting the software update data to the plurality of controllers. The method of claim 1, wherein the processor:
When a vehicle start-up signal is received through the input unit, the communication unit is controlled to receive software update data for the plurality of controllers from the server, and the memory is controlled to store the received software update data for the plurality of controllers. Electronic control unit for updating. The method of claim 1, wherein the processor:
When the ignition on signal is received after the time counted from the off point when the vehicle ignition off signal is received exceeds the reference time, the version information of the software of the plurality of controllers is collected, and within the reference time from the off point When a start-up signal is received, the collection of software version information of the plurality of controllers is skipped,
The version information of the software of the plurality of controllers is information for determining whether a software update of the plurality of controllers is necessary. The method of claim 5, wherein the processor:
An electronic control device for updating, which checks the replacement times of each of the plurality of controllers and sets the shortest replacement time among the confirmed replacement times as a reference time. The method of claim 5, wherein the processor:
An electronic control device for updating, wherein the time required for manual updating of the plurality of controllers is confirmed, and the shortest time required among the confirmed time points is set as a reference time. The method of claim 1, wherein the processor:
When a ignition off signal is received through the input unit, software update of the plurality of controllers is controlled based on software update data of the plurality of controllers, and during control of the software update, software is updated by receiving the ignition on signal. When the update is interrupted, the device cycle of the controller whose update was interrupted is confirmed, and when the ignition off signal is re-received, the software update is resumed based on the confirmed device cycle of the controller. The method of claim 8, wherein the processor:
A frame turn is set for each frame of software update data of the plurality of controllers, software update of each controller is controlled based on the set frame turn, and when the start-up signal is received during the control of the software update, An electronic control device for updating, which determines the frame turn in which software update was interrupted, and resumes software update based on the confirmed frame turn when the ignition off signal is re-received. The method of claim 1, wherein the processor:
Setting a frame turn for each frame of software update data to be transmitted to each of the plurality of controllers, and controlling the communication unit to transmit software update data to each controller based on the set frame turn,
While transmitting software update data to any one of the plurality of controllers, if transmission of the software update data is interrupted due to power fluctuation, the frame turn in which transmission was interrupted is checked, and when the power is restored, the frame turn is checked. An electronic control device for updating, controlling the communication unit to resume transmission of software update data based on the confirmed frame turn. A communication unit that communicates with the server, input unit, and controller;
a memory that stores data for software update of the controller received through the server; and
When a start-up signal is received through the input unit, while transmitting the software update data based on a preset frame turn, transmission of the software update data is interrupted due to power fluctuation, and when the power is restored, the software update data is transmitted. An electronic control device for updating, comprising a processor that controls the communication unit to resume transmission of software update data based on the frame turn in which transmission of the data was interrupted. The method of claim 11, wherein the processor:
An electronic control device for updating that determines a power change when a vehicle start-off signal or a battery reset signal is received through the input unit, and determines power recovery when a vehicle start-up signal is received again through the input unit. The method of claim 11, wherein the processor:
When a vehicle start-up signal is received through the input unit, the communication unit is controlled to receive software update data of the controller from the server, and the memory is controlled to store the received software update data of the controller. Electronic control unit for. The method of claim 11, wherein the processor:
If the start-on signal is received after the time counted from the off point when the vehicle's start-off signal is received exceeds the reference time, the version information of the software of the controller is collected, and the ignition is turned on within the reference time from the off point. An electronic control device for updating that skips collecting version information of software of the controller when a signal is received. The method of claim 11, wherein the processor:
When a ignition off signal is received through the input unit, the software update of the controller is controlled based on the set frame turn, and when the ignition on signal is received during control of the software update, the frame turn at which the software update is stopped is checked, and , An electronic control device for updating that controls to resume software update based on the confirmed frame turn when the ignition off signal is re-received. A communication unit that communicates with the server;
An input unit that receives a ignition on signal or a ignition off signal;
a plurality of controllers each storing software for performing at least one function; and
When the ignition on signal is received, software update data for a plurality of controllers is received and stored through the server, and when the ignition off signal is received, the stored software update data for the plurality of controllers is used to update the plurality of controllers. comprising an electronic control device that controls updates of software stored in the
When the ignition off signal is received, the electronic control device transmits the stored software update data of the plurality of controllers to each of the plurality of controllers based on a preset device rotation of the plurality of controllers, and transmits the software update data to the plurality of controllers. During transmission, when the power is restored after a power change, transmission of data for software update is resumed based on the device rotation of the controller where transmission was interrupted. The method of claim 16, wherein the electronic control device:
A vehicle that determines the power change when the ignition-off signal or the battery reset signal is received, and determines power recovery when the ignition-off signal is received again. 17. The method of claim 16, wherein the electronic control device:
If the ignition on signal is received after the time counted from the off point when the ignition off signal is received exceeds the reference time, version information of the software of the plurality of controllers is collected, and the ignition is turned on within the reference time from the off point. A vehicle that skips collecting version information of software of the plurality of controllers when a signal is received. The method of claim 16, wherein the electronic control device:
A frame turn is set for each frame of software update data to be transmitted to each of the plurality of controllers, software update data is transmitted to each controller based on the set frame turn, and one of the plurality of controllers During transmission of software update data to one controller, if the transmission of the software update data is interrupted due to the power change, the frame turn in which transmission was interrupted is checked, and when the power is restored, the frame turn is determined based on the confirmed frame turn. Vehicle resuming transmission of data for software updates. The method of claim 16, wherein the electronic control device:
During control of the software update of the plurality of controllers, if the software update is interrupted by reception of the ignition on signal, the device rotation of the controller for which the update was interrupted is confirmed, and if the ignition off signal is received again, the device rotation of the confirmed controller Controlling the vehicle to resume software updates based on The method of claim 16, wherein the electronic control device:
A frame turn is set for each frame of software update data of the plurality of controllers, and when the start-up signal is received while controlling the software update of the plurality of controllers, the frame turn at which the software update is stopped is confirmed, and the start-up is performed. A vehicle that controls to resume software update based on the confirmed frame turn when the off signal is re-received.

Images