WO2018025685A1 - 車載更新装置、車載更新システム及び通信装置の更新方法 - Google Patents

車載更新装置、車載更新システム及び通信装置の更新方法 Download PDF

Info

Publication number
WO2018025685A1
WO2018025685A1 PCT/JP2017/026642 JP2017026642W WO2018025685A1 WO 2018025685 A1 WO2018025685 A1 WO 2018025685A1 JP 2017026642 W JP2017026642 W JP 2017026642W WO 2018025685 A1 WO2018025685 A1 WO 2018025685A1
Authority
WO
WIPO (PCT)
Prior art keywords
update
program
communication
vehicle
unit
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/JP2017/026642
Other languages
English (en)
French (fr)
Japanese (ja)
Inventor
博志 立石
浩史 上田
井上　雅之
友洋 水谷
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sumitomo Wiring Systems Ltd
AutoNetworks Technologies Ltd
Sumitomo Electric Industries Ltd
Original Assignee
Sumitomo Wiring Systems Ltd
AutoNetworks Technologies Ltd
Sumitomo Electric Industries Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sumitomo Wiring Systems Ltd, AutoNetworks Technologies Ltd, Sumitomo Electric Industries Ltd filed Critical Sumitomo Wiring Systems Ltd
Priority to CN201780043856.9A priority Critical patent/CN109478155B/zh
Priority to US16/322,552 priority patent/US20200183674A1/en
Priority to DE112017003929.0T priority patent/DE112017003929T8/de
Publication of WO2018025685A1 publication Critical patent/WO2018025685A1/ja
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60R—VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR
    • B60R16/00—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for
    • B60R16/02—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements
    • B60R16/023—Electric or fluid circuits specially adapted for vehicles and not otherwise provided for; Arrangement of elements of electric or fluid circuits specially adapted for vehicles and not otherwise provided for electric constitutive elements for transmission of signals between vehicle parts or subsystems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14—Error detection or correction of the data by redundancy in operation
    • G06F11/1402—Saving, restoring, recovering or retrying
    • G06F11/1415—Saving, restoring, recovering or retrying at system level
    • G06F11/1433—Saving, restoring, recovering or retrying at system level during software upgrading
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G06F8/654—Updates using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 

Definitions

  • the present invention relates to an in-vehicle update device, an in-vehicle update system, and a communication device update method for updating a program or data of a communication device mounted on a vehicle.
  • a vehicle is equipped with a plurality of communication devices such as an ECU (Electronic Control Unit), and the plurality of ECUs are connected via a communication line such as a CAN (Controller Area Network) bus to transmit / receive information to / from each other.
  • a communication line such as a CAN (Controller Area Network) bus to transmit / receive information to / from each other.
  • Each ECU reads and executes a program stored in a storage unit such as a flash memory or an EEPROM (ElectricallyrasErasable Programmable Read Only Memory) by a processing device such as a CPU (Central Processing Unit), thereby performing various control such as vehicle control Is being processed.
  • a storage unit such as a flash memory or an EEPROM (ElectricallyrasErasable Programmable Read Only Memory)
  • CPU Central Processing Unit
  • the program or data stored in the storage unit of the ECU needs to be updated to be rewritten with a new program or data, for example, when it becomes necessary to add a function, correct a defect, or upgrade a version.
  • an update program or data is transmitted to the ECU to be updated by a communication line.
  • an update control program for a control device to be updated means for calculating a digest value related to the update control program, means for determining whether or not the operation of the updated control device is normal, and a determination result
  • the control device receives update data including a computer program that implements a means for responding to the program, updates the control program with the update control program included in the received update data, and executes the computer program to perform an operation after the update.
  • a program update system capable of verifying the validity of program update by determining whether or not the program is normal.
  • the program or data update process is not necessarily performed only by one communication device mounted on the vehicle. For example, when a format change or ID change of a message transmitted / received between a plurality of communication devices is performed, an update process needs to be performed for all communication devices that transmit / receive this message. In such a case, update processing of a plurality of communication devices is performed simultaneously or sequentially in the vehicle, but the start and completion timings of the update processing differ for each communication device. For this reason, for example, when communication is performed between a communication device for which update processing has been completed and a communication device for which update processing has not been completed, there is a possibility that a failure may occur in either communication device or both communication devices. is there.
  • the present invention has been made in view of such circumstances, and an object of the present invention is to update an in-vehicle update device, an in-vehicle update system, and a communication device that can perform update processing related to a plurality of communication devices without any problems. It is to provide a method.
  • An in-vehicle update device includes an in-vehicle communication unit that performs communication with a plurality of communication devices mounted on a vehicle, and performs a process of updating a program or data stored in a storage unit of the communication device.
  • an in-vehicle communication unit that performs communication with a plurality of communication devices mounted on a vehicle, and performs a process of updating a program or data stored in a storage unit of the communication device.
  • a prohibition processing unit that performs processing for prohibiting communication with another communication device by a communication device, and an update information acquired by the update information acquisition unit to the update target communication device after the prohibition processing unit prohibits communication.
  • An update information transmitting unit that performs processing for transmitting the program or data at the in-vehicle communication unit, and a completion determination for determining whether the update of the program or data by the communication device to be updated is completed. And when the completion determination unit determines that the update by all the update target communication devices has been completed, the prohibition is performed to cancel the prohibition of communication with the other communication devices by the update target communication device And a release processing unit.
  • the in-vehicle update device includes a pre-update information acquisition unit that performs a process of acquiring a pre-update program or data stored in the storage unit by the update target communication device, and the pre-update information acquisition
  • a pre-update information storage unit that stores a program or data acquired by the unit, and the pre-update information storage unit stores the program or data until the completion determination unit determines that the update by the communication device to be updated is completed. It is characterized by memorizing.
  • the in-vehicle update device includes a failure determination unit that determines whether or not the update process by the update target communication device has failed, and the failure determination unit that has failed to update by the update target communication device.
  • a pre-update information transmitting unit that performs processing for transmitting the program or data stored in the pre-update information storage unit to the communication device to be updated is provided.
  • the vehicle-mounted update apparatus which concerns on this invention is provided with the IG state acquisition part which acquires the state of the IG (ignition) signal of the said vehicle,
  • the said information acquisition part for update is updated when the said IG signal is an ON state
  • the update information transmission unit performs an update program or data when the IG signal is in an off state or when the IG signal changes from an off state to an on state. A process of transmitting data is performed.
  • the vehicle-mounted update apparatus which concerns on this invention is equipped with the battery information acquisition part which acquires the information which concerns on the remaining amount of the battery of the said vehicle,
  • the said information transmission part for update is the remaining amount of the battery which the battery information acquisition part acquired In response to this, it is determined whether the transmission process is performed when the IG signal is in an off state or when the IG signal changes from an off state to an on state.
  • the in-vehicle update device includes a time information acquisition unit that acquires information related to time, and the update information transmission unit performs transmission processing according to the information acquired by the time information acquisition unit.
  • the in-vehicle update system includes a plurality of communication devices mounted on a vehicle and an in-vehicle communication unit that performs communication with the communication device, and a program stored in a storage unit of the communication device.
  • an in-vehicle update system comprising an in-vehicle update device that performs a process of updating data, wherein the in-vehicle update device performs an update program or data acquisition process from an apparatus outside the vehicle.
  • a prohibition processing unit that performs processing for prohibiting communication with other communication devices by the communication device to be updated, and the prohibition processing unit prohibits communication.
  • an update information transmission unit that performs processing for transmitting the update program or data acquired by the update information acquisition unit to the update target communication device using the in-vehicle communication unit, and the update target communication unit.
  • the completion determination unit determines whether or not the update of the program or data by the device is completed, and the completion determination unit determines that the update by all the communication devices to be updated is completed
  • the update target A prohibition release processing unit that performs processing for canceling prohibition of communication with another communication device by the communication device, and the communication device performs processing for receiving an update program or data from the in-vehicle update device
  • the storage unit of the communication device includes at least a first area for storing a program or data before update and a second area for storing a program or data for update.
  • the update processing unit of the communication device stores the update program or data received by the update information receiving unit in the second area, and all the update program or data is stored in the second area.
  • the program or data before update stored in the first area is invalidated.
  • the communication device update method is a communication device update method for updating a program or data stored in a storage unit of a communication device mounted on a vehicle, wherein the communication device is updated from a device outside the vehicle. If there is a plurality of communication devices to be updated, the communication device to be updated is prohibited from communicating with other communication devices, and after the communication is prohibited, the update target The acquired update program or data is transmitted to the communication device, it is determined whether the update of the program or data by the update target communication device is completed, and the update by all the update target communication devices is completed. If it is determined that the communication device is updated, the communication device to be updated is released from the prohibition of communication with another communication device.
  • the in-vehicle update device performs update processing of programs or data of a plurality of communication devices mounted on the vehicle.
  • the in-vehicle update device acquires an update program or data from a server device or the like installed outside the vehicle.
  • the in-vehicle update device acquires an update program or data for each communication device.
  • a plurality of communication devices may be updated using one update program or data.
  • the in-vehicle update device prohibits communication with another communication device by the update target communication device before starting the update processing of each communication device.
  • the in-vehicle update device transmits an update program or data to the update target communication device.
  • the communication device that has received the update program or data from the in-vehicle update device updates the program or data by storing it in the storage unit.
  • the in-vehicle update device determines that the update process has been completed for all the communication devices to be updated, the in-vehicle update device cancels the communication prohibition for these communication devices. With this cancellation, the communication device that has completed the program or data update process starts communication with another communication device.
  • the in-vehicle update device acquires the pre-update program or data stored in the storage unit of the update target communication device and stores it until the update processing of the communication device is completed.
  • the in-vehicle update device transmits the stored pre-update program or data to this communication device.
  • the communication apparatus which failed in the update process can acquire the program or data before an update from a vehicle-mounted update apparatus, and can return to the previous state.
  • the in-vehicle update device acquires the state of the IG (ignition) signal of the vehicle, and performs processing for acquiring a program or data from a device outside the vehicle when the IG signal is on.
  • the in-vehicle update device performs update processing of the communication device using the acquired program or data when the IG signal is in the off state or when the IG signal is changed from the off state to the on state.
  • the in-vehicle update device can acquire a program or data from the external device when the vehicle engine or the like can be expected and sufficient power supply can be expected, and when the vehicle is not running or the vehicle is
  • the update process of the communication device can be performed before the start of traveling.
  • the in-vehicle update device acquires information related to the remaining battery level of the vehicle, and the communication device is either in the case where the IG signal is in the off state or the IG signal is changed from the off state to the on state. Whether to perform the update process is determined according to the remaining battery level. For example, the in-vehicle update device performs update processing when the IG signal is in an off state if the battery level is high, and performs update processing when the IG signal changes from the off state to the on state if the battery level is low. Thereby, for example, it is possible to prevent the battery from running out during the update process.
  • the in-vehicle update device acquires time information and performs update processing according to the time information. For example, the in-vehicle update device performs the update process at a time when the user is highly likely not to use the vehicle, such as at 3 am. Thereby, when the update process of a communication apparatus is performed, possibility that a user will try to use a vehicle can be reduced.
  • the storage unit of each communication device is provided with at least a first area for storing the program or data before update and a second area for storing the program or data for update.
  • the storage unit of each communication device has a storage area in which at least two sets of programs or data can be stored.
  • the communication device that has received the update program or data transmitted by the in-vehicle update device for the update process is different from the region (first region) in which the program or data before update is stored (second region).
  • the update program or data received is stored in (region). That is, in each communication device, the program or data for update is stored in the storage unit without being overwritten with the program or data before update.
  • Each communication device can complete the update process by invalidating the program or data before update and enabling the program or data for update after storing the update program or data. Thereby, the communication device that has failed in the update process can maintain the state before the update by the program or data before the update remaining in the first area.
  • FIG. 2 is a block diagram showing a configuration of an ECU 2.
  • FIG. It is a block diagram which shows the structure of a gateway. It is a flowchart which shows the procedure of the update process which a gateway performs. It is a flowchart which shows the procedure of the update process which ECU performs.
  • 10 is a flowchart illustrating a procedure of update processing performed by a gateway according to the second embodiment. It is a flowchart which shows the procedure of the update process which ECU which concerns on Embodiment 2 performs.
  • FIG. 10 is a schematic diagram for explaining an update process performed by an ECU according to a third embodiment.
  • 14 is a flowchart illustrating a procedure of update processing performed by a gateway of the in-vehicle update system according to the fourth embodiment.
  • FIG. 1 is a schematic diagram showing a configuration of an in-vehicle update system according to the present embodiment.
  • a plurality of ECUs (Electronic Control Units) 2 mounted on a vehicle 1 communicate with each other via communication lines 1 a and 1 b and a gateway 10 arranged in the vehicle 1. It is a system to do.
  • the gateway 10 corresponds to an in-vehicle update device
  • the ECU 2 corresponds to a communication device.
  • the system configuration is such that two ECUs 2 are connected to the communication line 1a in the vehicle, three ECUs 2 are connected to the communication line 1b, and the two communication lines 1a and 1b are connected to the gateway 10,
  • the gateway 10 relays communication between the communication lines 1a and 1b, so that data can be transmitted and received between all the ECUs 2.
  • the wireless communication device 3 is connected to the gateway 10 via the communication line 1c, and the gateway 10 is installed outside the vehicle 1 via the wireless communication device 3. 9 can be communicated.
  • An IG signal is input to the gateway 10 from the IG switch 4 of the vehicle 1, and a detection result is input from the remaining amount detection unit 6 that detects the remaining capacity of the battery 5 of the vehicle 1.
  • the ECU 2 includes, for example, an ECU that controls the operation of the engine of the vehicle 1, an ECU that controls the locking / unlocking of the door, an ECU that controls the turning on / off of the light, an ECU that controls the operation of the airbag, and an ABS (Antilock Various ECUs such as an ECU for controlling the operation of the Brake System may be included.
  • Each ECU 2 is connected to a communication line 1a or 1b arranged in the vehicle 1, and can transmit and receive data to and from another ECU 2 and the gateway 10 via the communication lines 1a and 1b.
  • the wireless communication device 3 can transmit and receive information to and from the server device 9 by performing wireless communication such as a mobile phone communication network or a wireless LAN (Local Area Network).
  • the wireless communication device 3 is connected to the gateway 10 via the communication line 1c, and can transmit / receive information to / from the gateway 10 by wired communication.
  • the wireless communication device 3 can relay communication between the gateway 10 and the server device 9, transmits data given from the gateway 10 to the server device 9, and transmits data received from the server device 9 to the gateway Give to 10.
  • the gateway 10 is connected to a plurality of communication lines 1a to 1c constituting the in-vehicle network of the vehicle 1, and performs a process of relaying data transmission / reception between the communication lines.
  • the gateway 10 has three communication lines 1a to 1c, that is, a first communication line 1a to which two ECUs 2 are connected, a second communication line 1b to which three ECUs 2 are connected, and a wireless communication.
  • a third communication line 1c to which the communication device 3 is connected is connected.
  • the gateway 10 relays data by transmitting data received from any one of the communication lines 1a to 1c to the other communication lines 1a to 1c.
  • the IG switch 4 is a switch for the user to start the engine of the vehicle 1 and the like, and is switched to two states of on / off.
  • the IG signal indicates the state of the IG switch 4
  • IG ON is a state in which a prime mover such as the engine of the vehicle 1 is operating, and power is generated by an alternator or the like
  • IG OFF is In this state, the prime mover of the vehicle 1 is stopped and no power generation is performed.
  • the remaining amount detection unit 6 detects the amount of electric power stored in the battery 2 based on the voltage value of the output terminal of the battery 5 and / or the integrated value of the input / output current amount.
  • the server device 9 manages and stores programs and data executed by the ECU 2 mounted on the vehicle 1. In response to an inquiry from the vehicle 1, the server device 9 notifies whether or not the program needs to be updated, and distributes the update program and data to the vehicle 1 when the update is necessary. Process.
  • FIG. 2 is a block diagram showing the configuration of the ECU 2.
  • the ECU 2 includes a processing unit 21, a storage unit 22, a communication unit 23, and the like.
  • the processing unit 21 is configured by using an arithmetic processing device such as a CPU (Central Processing Unit) or an MPU (Micro-Processing Unit), for example, and by reading and executing the program 22a stored in the storage unit 22, Perform arithmetic processing.
  • the contents of the program 22a stored in the storage unit 22 are different for each ECU 2.
  • the storage unit 22 is configured by using a non-volatile memory element such as a flash memory or an EEPROM (Electrically Erasable Programmable Read Only Memory).
  • the storage unit 22 stores a program 22a executed by the processing unit 21 and data necessary for executing the program 22a.
  • program 22a may include the program 22a and data necessary for executing the program 22a.
  • the communication unit 23 is connected to the communication line 1a or 1b constituting the in-vehicle network, and transmits and receives data according to a communication protocol such as CAN (Controller (Area Network).
  • the communication unit 23 converts the data provided from the processing unit 21 into an electrical signal and outputs the signal to the communication line 1a or 1b to transmit the data, and also obtains the potential of the communication line 1a or 1b by sampling.
  • the data is received by, and the received data is given to the processing unit 21.
  • the processing unit 21 of the ECU 2 is provided with an update information receiving unit 21a and an update processing unit 21b.
  • the update information receiving unit 21 a and the update processing unit 21 b are functional blocks for updating the program 22 a stored in the storage unit 22.
  • the update information receiving unit 21a and the update processing unit 21b are software functional blocks realized by the processing unit 21 executing a program (not shown) that is different from the program 22a to be updated. is there.
  • the update information receiving unit 21a receives an update program transmitted via the communication line 1a or 1b by the communication unit 23, and stores the received update program in a buffer memory (not shown) or the like. Perform the process.
  • the update processing unit 21b performs a process of updating the program 22a by storing the update program stored in the buffer memory or the like in the storage unit 22 (overwriting the program 22a before the update).
  • FIG. 3 is a block diagram showing the configuration of the gateway 10.
  • the gateway 10 includes a processing unit 11, a storage unit 12, three in-vehicle communication units 13, and the like.
  • the processing unit 11 is configured using, for example, an arithmetic processing device such as a CPU or MPU, and reads out and executes a program stored in the storage unit 12 or a ROM (Read Only Memory) (not shown), thereby performing various arithmetic processing. I do.
  • the processing unit 11 performs a processing for relaying data transmission / reception between the communication lines 1a to 1c of the in-vehicle network and an arithmetic processing necessary for an update processing of the ECU 2.
  • the IG signal supplied from the IG switch 4 of the vehicle 1 and the remaining capacity of the battery 5 detected by the remaining amount detection unit 6 are input to the processing unit 11.
  • the IG signal and / or the remaining capacity may be input to the gateway 10 by in-vehicle communication using the communication lines 1a to 1c.
  • the storage unit 12 is configured using a non-volatile memory element such as a flash memory or an EEPROM.
  • the storage unit 12 stores, for example, a program executed by the processing unit 11 and data necessary for executing the program.
  • the storage unit 12 stores data generated in the course of processing by the processing unit 11.
  • the in-vehicle communication unit 13 is connected to the communication lines 1a to 1c constituting the in-vehicle network, and transmits and receives data according to a communication protocol such as CAN.
  • the in-vehicle communication unit 13 transmits information by converting the data supplied from the processing unit 11 into an electrical signal and outputs the signal to the communication lines 1a to 1c, and samples and acquires the potentials of the communication lines 1a to 1c. Thus, the data is received and the received data is given to the processing unit 11.
  • the three in-vehicle communication units 13 included in the gateway 10 may perform communication according to different communication protocols.
  • the processing unit 11 executes a program stored in the storage unit 12 or the ROM, so that the update information acquisition unit 11a, the prohibition processing unit 11b, the update information transmission unit 11c, the completion determination unit 11d, and the prohibition are performed.
  • the cancellation processing unit 11e and the like are realized as software functional blocks.
  • the update information acquisition unit 11a communicates with the server device 9 via the wireless communication device 3 at a predetermined timing, and inquires whether or not the program 22a of the ECU 2 mounted on the vehicle 1 needs to be updated.
  • the predetermined timing for inquiring whether update is necessary may be a predetermined cycle, for example, every day or every week, or may be, for example, every time the IG switch 4 is switched from the off state to the on state.
  • the update information acquisition unit 11a transmits the program and data required for the update from the server device 9 via the wireless communication device 3 (hereinafter simply referred to as update). (Referred to as a program for use) and stored in the storage unit 12. At this time, the update information acquisition unit 11a acquires the update program for all ECUs 2 that need to be updated.
  • the prohibition processing unit 11b instructs the in-vehicle communication unit 13 to prohibit communication with other ECUs 2 with respect to one or a plurality of ECUs 2 to be subjected to the update process before performing the update process of the program 22a of the ECU 2.
  • the ECU 2 that has received a communication prohibition command from the gateway 10 does not communicate with other ECUs 2 until it receives a communication prohibition release command from the gateway 10.
  • the ECU 2 can perform communication necessary for the update process, for example, communication with the gateway 10 even after receiving a communication prohibition command.
  • the update information transmission unit 11c After the transmission of the communication prohibition instruction by the prohibition processing unit 11b is completed, the update information transmission unit 11c reads the update program acquired from the server device 9 and stored in the storage unit 22, and the read update program Is transmitted to the ECU 2 to be updated. When there are a plurality of ECUs 2 to be updated, the update information transmitting unit 11c transmits the update program in an appropriate order, and transmits the update programs for all the ECUs 2 to be updated. .
  • the ECU 2 that has received the update program from the gateway 10 updates the program 22a by overwriting the pre-update program 22a stored in the storage unit 22 with the received update program.
  • the ECU 2 notifies the gateway 10 of the completion when the update of the program 22a in the storage unit 22 is completed.
  • the completion determination unit 11d of the processing unit 11 of the gateway 10 receives the update completion notification from the ECU 2 at the in-vehicle communication unit 13, and determines whether or not the update completion notification has been received from all the ECUs 2 to be subjected to the update process. Then, it is determined whether or not the update process has been completed.
  • the prohibition release processing unit 11e transmits a command for canceling the communication prohibition to the ECU 2 that has prohibited communication.
  • the ECU 2 that has received the communication prohibition release command from the gateway 10 can start communication with other ECUs 2.
  • FIG. 4 is a flowchart showing the procedure of the update process performed by the gateway 10.
  • the update information acquisition unit 11a of the processing unit 11 of the gateway 10 makes a timing for inquiring the server device 9 about whether or not there is an update, for example, a predetermined engine has passed since the previous inquiry or the IG switch 4 is turned off. It is determined whether or not a timing such as a change from the state to the on state has been reached (step S1). If it is not the inquiry timing (S1: NO), the update information acquisition unit 11a waits until the inquiry timing is reached.
  • the update information acquisition unit 11a updates the program 22a of the ECU 2 mounted on the vehicle 1 to the server device 9 outside the vehicle by wireless communication via the wireless communication device 3.
  • the presence or absence is inquired (step S2).
  • the update information acquisition unit 11a determines whether or not the program 22a has been updated (step S3).
  • the update information acquisition unit 11a returns the process to step S1. If there is an update of the program 22a (S3: YES), the update information acquisition unit 11a requests the server device 9 to transmit the update program by wireless communication via the wireless communication device 3, and as a response to this request.
  • the update program is acquired (step S4).
  • the prohibition processing unit 11b of the processing unit 10 issues a communication prohibition command for prohibiting communication with the other ECU 2 to the ECU 2 that is the target of the update processing. 13 (step S5).
  • the update information transmitting unit 11c of the processing unit 11 transmits the update program acquired from the server device 9 and stored in the storage unit 12 to the ECU 2 to be subjected to the update process (step S6).
  • the update information transmitting unit 11c may transmit the plurality of update programs in any order. , May be transmitted in parallel.
  • the completion determination unit 11d of the processing unit 11 determines whether or not the update processing of all the ECUs 2 has been completed depending on whether or not notification of update completion has been received from all the ECUs 2 to be subjected to the update processing ( Step S7).
  • the completion determination unit 11d waits until the update process of all ECUs 2 is completed.
  • the prohibition cancellation processing unit 11e of the processing unit 11 cancels the communication prohibition instruction to the ECU 2 that has transmitted the communication prohibition instruction in step S5. Is transmitted (step S8), and the process is terminated.
  • FIG. 5 is a flowchart showing the procedure of the update process performed by the ECU 2.
  • the processing unit 21 of the ECU 2 determines whether the communication unit 23 has received a communication prohibition command from the gateway 10 (step S10). When the communication prohibition command has not been received (S10: NO), the processing unit 21 stands by until the communication prohibition command is received. When the communication prohibition command is received (S10: YES), the processing unit 12 prohibits communication with the other ECU 2 by the communication unit 23 (step S11).
  • the update information receiving unit 21a of the processing unit 21 determines whether or not the update program transmitted from the gateway 10 has been received by the communication unit 23 (step S12).
  • the update program has not been received (S12: NO)
  • the update information receiving unit 21a waits until the update program is received.
  • the update program is received (S12: YES)
  • the update information receiving unit 21a temporarily stores the received update program in a buffer or the like.
  • the update processing unit 21b of the processing unit 21 performs update processing of the program 22a by storing (overwriting) the received update program in the storage unit 22 (step S13).
  • the update processing unit 21b determines whether or not the update of the program 22a has been completed (step S14). If the update has not been completed (S14: NO), the update processing unit 21b returns the process to step S13 and continues the update process.
  • the processing unit 21 transmits an update completion notification to the gateway 10 through the communication unit 23 (step S15).
  • the processing unit 21 determines whether or not the communication prohibition release command from the gateway 10 has been received by the communication unit 23 (step S16).
  • the processing unit 21 stands by until the communication prohibition release command is received.
  • the processing unit 21 cancels the communication prohibition, starts communication with another ECU 2 (step S17), and ends the process.
  • the gateway 10 performs the update process of the programs 22a (programs or data) of the plurality of ECUs 2 mounted on the vehicle 1.
  • the gateway 10 acquires an update program (update program or data) from the server device 9 outside the vehicle by wireless communication via the wireless communication device 3.
  • the gateway 10 acquires an update program for each ECU 2.
  • the structure which can perform the update process of several ECU2 using one update program may be sufficient.
  • the gateway 10 transmits the communication prohibition instruction to the ECU 2 to be updated before starting the updating process of each ECU 2. Communication with the other ECU 2 by the ECU 2 is prohibited. However, communication necessary for the update process, that is, communication between the ECU 2 to be updated and the gateway 10 may not be prohibited. Further, the communication of the ECU 2 that is not the update target may not be prohibited. After transmitting the communication prohibition command, the gateway 10 transmits the update program acquired from the server device 9 to the ECU 2 that is the target of the update process. The ECU 2 that has received the update program from the gateway 10 stores (overwrites) this in the storage unit 22 to update the program 22a.
  • the gateway 10 determines that the update processing of all the ECUs 2 to be updated has been completed, the gateway 10 cancels the communication prohibition by transmitting a communication prohibition cancel command to these ECUs 2. By this cancellation, the ECU 2 that has completed the update process of the program 22a starts communication with the other ECUs 2.
  • the gateway 10 mounted on the vehicle 1 acquires the update program from the server device 9 and transmits the update program to each ECU 2, that is, the gateway 10 serves as the in-vehicle update device.
  • the gateway 10 serves as the in-vehicle update device.
  • Any ECU 2, wireless communication device 3, or other in-vehicle device may perform processing as the in-vehicle update device.
  • the update program is acquired from the server device 9 outside the vehicle by wireless communication, but is not limited thereto.
  • the update program may be acquired by the gateway 10 reading a recording medium on which the update program is recorded.
  • the communication device to be updated is the ECU 2, the present invention is not limited to this, and various communication devices other than the ECU 2 may be the target of the update process.
  • Communication performed between the gateway 10 and the ECU 2 in the vehicle 1 may be wireless communication instead of wired communication.
  • the input of the IG signal from the IG switch 4 to the gateway 10 and the input of the remaining amount detection result of the battery 5 from the remaining amount detection unit 6 to the gateway 10 are always necessary. is not.
  • Embodiment 2 The in-vehicle update system according to Embodiment 2 has a configuration in which the gateway 10 backs up the program 22a before update in preparation for failure of the update process in each ECU 2. For example, when the remaining amount of the battery 5 is remarkably lowered during the update process, when a problem occurs in the communication between the gateway 10 and the ECU 2 during the update process and the update program disappears, or during the update process When the operation of the ECU 2 is stopped, the update process may fail.
  • the gateway 10 of the in-vehicle update system transmits a communication prohibition command to the ECU 2 that is the target of the update process, and then transmits the program 22a stored in the storage unit 22 to the ECU 2 as a gateway.
  • An instruction to send to 10 is given.
  • the ECU 2 that has received this transmission command reads the program 22 a from the storage unit 22 and transmits it to the gateway 10.
  • the gateway 10 receives the program 22a transmitted from the ECU 2 and stores it in the storage unit 12, thereby backing up the program 22a before update. After completing the backup of the program 22a for all the ECUs 2 subject to the update process, the gateway 10 transmits the update program acquired from the server device 9 to the ECU 2 that is the update process target, and is updated in each ECU 2. Let the process do.
  • the gateway 10 determines whether or not a failure has occurred in the update process in each ECU 2.
  • the gateway 10 determines that the update process has failed, for example, when it receives a notification from the ECU 2 that the update process has failed, or when it has not received a notification of update completion from the ECU 2 even after a predetermined time has elapsed. be able to.
  • the gateway 10 interrupts the update process of the ECU 2 and loads the pre-update program 22a backed up in the storage unit 12. It transmits to each ECU2, and all ECU2 of update process object is returned to the state before update process. After the return process is completed for all the ECUs 2, the gateway 10 transmits a communication prohibition release command.
  • the gateway 10 may perform the update process again at an arbitrary timing thereafter.
  • the gateway 10 may perform update processing from the stage of acquiring the update program from the server device 9, and updates stored in the storage unit 12 without acquiring the update program from the server device 9.
  • the update process may be performed using a program for the use.
  • the gateway 10 retains the pre-update program 22a acquired from the ECU 2 and stored in the storage unit 12 in the storage unit 12 at least until the update process is completed, and an arbitrary after the update process is completed. It may be deleted from the storage unit 12 at the timing.
  • FIG. 6 is a flowchart showing a procedure of update processing performed by the gateway 10 according to the second embodiment.
  • the process for acquiring the update program from the server device 9 (steps S1 to S4 in the flowchart of FIG. 4) is omitted, and the process from the transmission of the communication prohibition command to the ECU 2 is illustrated.
  • the prohibition processing unit 11b of the processing unit 11 of the gateway 10 that has completed the acquisition of the update program from the server device 9 issues a communication prohibition command for prohibiting communication with other ECUs 2 to the ECU 2 that is the target of the update processing. Then, in-vehicle communication unit 13 transmits (step S21).
  • the processing unit 11 gives a transmission request for the program 22a stored in the storage unit 22 to the ECU 2 that is the target of the update process (step S22).
  • the processing unit 11 receives the pre-update program 22a transmitted from each ECU 2 in response to this transmission request by the in-vehicle communication unit 13 and stores it in the storage unit 12, and all the ECUs 2 subjected to the update process. It is determined whether or not the reception of the pre-update program 22a has been completed (step S23). When the reception of the program 22a before the update has not been completed (S23: NO), the processing unit 11 waits until the reception is completed.
  • the update information transmission unit 11c of the processing unit 11 acquires the update program acquired from the server device 9 and stored in the storage unit 12. It transmits with respect to ECU2 used as the object of an update process (step S24).
  • the completion determination unit 11d of the processing unit 11 determines whether or not the update processing of all the ECUs 2 has been completed depending on whether or not notification of update completion has been received from all the ECUs 2 to be subjected to the update processing ( Step S25).
  • the prohibition cancellation processing unit 11e of the processing unit 11 cancels the communication prohibition command to the ECU 2 that has transmitted the communication prohibition command in step S21. Is transmitted (step S30), and the process is terminated.
  • the processing unit 11 When the update process of all the ECUs 2 has not been completed (S25: NO), the processing unit 11 has failed in the update process depending on whether or not an update failure notification has been received from any ECU 2 to be updated. It is determined whether or not (step S26). If the update process has not failed (S26: NO), the processing unit 11 returns the process to step S25. When the update process has failed (S26: YES), the processing unit 11 transmits an instruction to stop the update process to all the ECUs 2 to be updated (step S27). Next, the processing unit 11 reads the pre-update program 22a stored in the storage unit 12 and transmits it to the original ECU 2 (step S28).
  • Step S29 the processing unit 11 of the gateway 10 determines whether or not the return process of all the ECUs 2 has been completed depending on whether or not the notification of the return completion has been received from all the ECUs 2.
  • Step S29 the processing unit 11 stands by until the return processing is completed.
  • the prohibition cancellation processing unit 11e of the processing unit 11 cancels communication prohibition to the ECU 2 that has transmitted the communication prohibition command in step S21. Is transmitted (step S30), and the process is terminated.
  • FIG. 7 is a flowchart showing a procedure of update processing performed by the ECU 2 according to the second embodiment.
  • the processing until the update program is received from the gateway 10 (steps S10 to S12 in the flowchart of FIG. 5) is omitted, and the ECU 2 starts the update process using the received update program.
  • the processing from the point of time is shown.
  • the update processing unit 21b of the processing unit 21 of the ECU 2 that has received the update program transmitted from the gateway 10 performs update processing of the program 22a by storing (overwriting) the received update program in the storage unit 22 ( Step S41).
  • the update processing unit 21b determines whether or not the update of the program 22a has been completed (step S42).
  • the processing unit 21 transmits an update completion notification to the gateway 10 through the communication unit 23 (step S43), and the process proceeds to step S51.
  • step S44 determines whether or not the update process has failed.
  • step S45 the processing unit 21 notifies the gateway 10 of the update process failure (step S45), and the process proceeds to step S48.
  • step S46 determines whether or not an instruction to stop the update process has been received from the gateway 10 (step S46).
  • step S46 the processing unit 21 returns the process to step S41.
  • the processing unit 21 stops the update process (step S47), and advances the process to step S48.
  • the processing unit 21 determines whether or not the pre-update program 22a is received from the gateway 10 (step S48). When the pre-update program 22a has not been received (S48: NO), the processing unit 21 waits until the pre-update program 22a is received. When the pre-update program 22a is received (S48: YES), the processing unit 21 performs a return process by storing (overwriting) the received pre-update program 22a in the storage unit 22 (step S49). The processing unit 21 determines whether or not the return process has been completed (step S50). When the return process has not been completed (S50: NO), the processing unit 21 returns the process to step S49 and continues the return process.
  • the processing unit 21 determines whether or not the communication unit 23 has received a communication prohibition release command from the gateway 10 (step S51). When the communication prohibition release command has not been received (S51: NO), the processing unit 21 stands by until a communication prohibition release command is received. When the communication prohibition release command is received (S51: YES), the processing unit 21 cancels the communication prohibition, starts communication with the other ECU 2 (step S52), and ends the process.
  • the in-vehicle update system includes the storage unit until the gateway 10 acquires the pre-update program 22a stored in the storage unit 22 by the ECU 2 to be updated and the update process of the ECU 2 is completed. 12 is stored.
  • the gateway 10 transmits the stored pre-update program 22a to the ECU 2.
  • ECU2 which failed in the update process can acquire the program 22a before the update from the gateway 10, and can return to the state before performing the update process.
  • the gateway 10 immediately after the update process of the ECU 2 fails, the gateway 10 starts the return process by sending the program 22a before the update, but the present invention is not limited to this.
  • the gateway 10 may wait for the return process until a predetermined timing, for example, when the IG switch 4 next changes from the off state to the on state.
  • the gateway 10 may repeat the update process several times when the update process fails, and may start the return process when the update process still does not succeed.
  • the in-vehicle update system according to Embodiment 3 has a configuration in which each ECU 2 holds the program 22a before update and performs a return process when the update process fails.
  • FIG. 8 is a schematic diagram for explaining an update process performed by the ECU 2 according to the third embodiment.
  • the storage unit 22 of the ECU 2 according to Embodiment 3 has a storage capacity sufficient to store at least two sets of programs 22a. In the example shown in the upper part of FIG.
  • the storage unit 22 includes a program 22a and a free area 22b having a capacity comparable to that of the program 22a. At this time, the program 22a stored in the storage unit 22 is validated, and the processing unit 21 reads and executes the program 22a.
  • the ECU 2 When the update program is received from the gateway 10, the ECU 2 stores the received update program 22a in the empty area 22b of the storage unit 22 without overwriting the program 22a before the update. If the update program 22a can be stored in the storage unit 22 without error, the ECU 2 invalidates the pre-update program 22a and validates the newly stored update program 22a. Complete the process. Thereafter, the processing unit 21 of the ECU 2 reads and executes the validated update program 22a.
  • the invalidated program 22a before update may be erased at some timing, for example, and remains in the storage unit 22 without being erased, for example, and is treated as a free area 22b in the next update process. Also good.
  • the ECU 2 stops the update process by maintaining the pre-update program 22a in a valid state. To do.
  • the ECU 2 notifies the gateway 10 that the update process has failed.
  • the gateway 10 gives an instruction to stop the update process to the plurality of ECUs 2 that have been the targets of the update process.
  • the ECU 2 that has received this cancellation instruction validates the program 22a before update stored in the storage unit 22 and updates the newly stored update program even when its own update process has been normally completed. By invalidating 22a, the state before the update process is restored.
  • the storage unit 22 of the ECU 2 stores an area (first area) for storing the program 22a before update and an area (first area) for storing the program 22a for update. 2 region). That is, each ECU 2 has a storage area in which at least two sets of programs 22a can be stored.
  • the ECU 2 that has received the update program 22a transmitted by the gateway 10 for the update process stores the received update program 22a in a region different from the region in which the program 22a before update is stored. That is, in the ECU 2, the update program 22 a is stored in the storage unit 22 without being overwritten with the program 22 a before being updated.
  • Each ECU 2 can complete the updating process by invalidating the program 22a before updating and enabling the updating program 22a after storing the updating program 22a in the storage unit 22.
  • the ECU 2 can maintain the state before the update process by validating the pre-update program 22a left in the storage unit 22.
  • the configuration of the second embodiment and the configuration of the third embodiment are merged.
  • the ECU 2 having a sufficient storage capacity in the storage unit 22 adopts the configuration of the third embodiment, and the ECU 2 that is not so.
  • the configuration of the second embodiment may be adopted for the gateway 10 to back up the program 22a before the update.
  • the in-vehicle update system according to the first embodiment described above is configured to start the update process of the ECU 2 immediately after the gateway 10 acquires the update program from the server device 9, but is not limited thereto.
  • the gateway 10 acquires an update program from the server device 9 and stores it in the storage unit 12, and the update program is subject to update processing at a predetermined timing thereafter.
  • the update process is started by starting transmission to the ECU 2.
  • the gateway 10 of the in-vehicle update system according to Embodiment 4 communicates with the server device 9 via the wireless communication device 3 when the state of the IG switch 4 of the vehicle 1 is on, and whether or not there is an update And the update program is acquired.
  • the gateway 10 that has completed the acquisition of the update program from the server device 9 then reaches the predetermined time (for example, 3 am) and the update unit stored in the storage unit 12 when the IG switch 4 is off.
  • the program is transmitted to the ECU 2 to be updated, and the updating process of the ECU 2 is started.
  • the processing unit 11 of the gateway 10 according to the fourth embodiment has a clock function for measuring time, or has a function of receiving a GPS (Global Positioning System) signal and acquiring the time. ing.
  • the predetermined time at which the update process is started can be configured such that the user of the vehicle 1 sets a favorite time (for example, a time when there is a high possibility that the vehicle 1 will not be used).
  • the gateway 10 and the ECU 2 consume the electric power stored in the battery 5.
  • the electric power stored in the battery 5 is consumed by the update process of the ECU 2, for example, when the IG switch 4 is next switched from the off state to the on state, the electric power necessary to start the engine of the vehicle 1 is obtained.
  • the battery 5 may not be left. Therefore, in the in-vehicle update system according to the fourth embodiment, the remaining amount detection unit 6 detects the amount of power stored in the battery 5 and notifies the gateway 10 thereof.
  • the gateway 10 determines whether or not the remaining amount of the battery 5 exceeds the threshold when the IG switch 4 is off and reaches a predetermined time. Only when the remaining amount exceeds the threshold, the gateway 10 updates the ECU 2. Start.
  • the gateway 10 When the remaining amount of the battery 5 does not exceed the threshold value, the gateway 10 does not perform the update process of the ECU 2 at this timing.
  • the gateway 10 transmits the update program stored in the storage unit 12 to the ECU 2 that is the target of the update process, and starts the update process of the ECU 2.
  • FIG. 9 is a flowchart showing a procedure of update processing performed by the gateway 10 of the in-vehicle update system according to the fourth embodiment.
  • the gateway 10 completes the acquisition of the update program from the server device 9 and starts transmitting it to the ECU 2, that is, steps S4 and S5 in the flowchart shown in FIG. The processes performed during this period are illustrated, and the other processes (the processes of steps S1 to S4 and the processes of S5 to S8 in FIG. 4) are not shown.
  • the processing unit 11 of the gateway 10 that has completed the acquisition of the update program from the server device 9 acquires the IG signal from the IG switch 4 (step S61).
  • the processing unit 11 determines whether or not the acquired IG signal is in an off state (step S62). When the IG signal is not in the off state (S62: NO), the processing unit 11 returns the process to step S61.
  • the processing unit 11 acquires time based on, for example, a clock function possessed by itself (step S63). The processing unit 11 determines whether or not the acquired time has reached a predetermined time such as 3 am (step S64). When the predetermined time has not been reached (S64: NO), the processing unit 11 returns the process to step S61.
  • the processing unit 11 acquires the remaining amount of the battery 5 detected by the remaining amount detecting unit 6 (step S65). The processing unit 11 determines whether or not the acquired remaining amount of the battery 5 exceeds a threshold value such as 50% (step S66). When the remaining amount of the battery 5 exceeds the threshold (S66: YES), the processing unit 11 starts the update process for the ECU 2 to be updated (step S69), and ends the process.
  • a threshold value such as 50%
  • the processing unit 11 acquires an IG signal indicating the state of the IG switch 4 of the vehicle 1 (step S67). The processing unit 11 determines whether or not the IG switch 4 is on based on the acquired IG signal (step S68). When the IG switch 4 is not in the on state (S68: NO), the processing unit 11 waits until the IG switch 4 changes to the on state. When the IG switch 4 is in the on state (S68: YES), the processing unit 11 starts an update process for the ECU 2 to be updated (step S69) and ends the process.
  • the gateway 10 acquires an IG signal indicating the state of the IG switch 4 of the vehicle 1 and is updated from the server device 9 outside the vehicle when the IG signal is in the on state.
  • the gateway 10 performs the update process of the ECU 2 using the acquired update program when the IG signal is in the off state or when the IG signal is changed from the off state to the on state.
  • the gateway 10 can acquire an update program from the server device 9 when the engine of the vehicle 1 operates and a sufficient power supply can be expected, and when the vehicle 1 is not running or the vehicle
  • the ECU 2 can be updated before the vehicle starts traveling.
  • the gateway 10 acquires the information regarding the remaining amount of the battery 5 of the vehicle 1 from the remaining amount detection unit 6, and when the IG signal is in the off state or when the IG signal changes from the off state to the on state. It is determined according to the remaining amount of the battery 5 which ECU 2 is to be updated. For example, the gateway 10 performs update processing when the IG signal is in an off state if the remaining battery level is greater than the threshold, and updates when the IG signal changes from the off state to the on state if the remaining battery level is less than the threshold. I do. Thereby, for example, it is possible to prevent a problem that the battery runs out in the middle of the update process, or that the engine of the vehicle 1 cannot be started due to a decrease in the remaining battery level.
  • the gateway 10 acquires time information based on the clock function of the processing unit 11 and updates the ECU 2 according to the time information. For example, the gateway 10 performs the update process at a time when the user is unlikely to use the vehicle 1 such as 3:00 am. Thereby, when the update process of ECU2 is performed, possibility that a user will use vehicle 1 can be reduced.
  • the gateway 10 starts the update process of the ECU 2 when the IG switch 4 is off and the predetermined time is reached.
  • the present invention is not limited to this.
  • the gateway 10 does not determine the condition at a predetermined time, and when the IG switch 4 is turned off or when the IG switch 4 is turned off and a predetermined time has elapsed, the ECU 10 performs the update process of the ECU 2. You may start.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Security & Cryptography (AREA)
  • Mechanical Engineering (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Quality & Reliability (AREA)
  • Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Stored Programmes (AREA)
  • Information Transfer Between Computers (AREA)
PCT/JP2017/026642 2016-08-05 2017-07-24 車載更新装置、車載更新システム及び通信装置の更新方法 Ceased WO2018025685A1 (ja)

Priority Applications (3)

Application Number Priority Date Filing Date Title
CN201780043856.9A CN109478155B (zh) 2016-08-05 2017-07-24 车载更新装置、车载更新系统及通信装置的更新方法
US16/322,552 US20200183674A1 (en) 2016-08-05 2017-07-24 On-board update device, on-board update system, and communication device update method
DE112017003929.0T DE112017003929T8 (de) 2016-08-05 2017-07-24 Bordeigene Aktualisierungsvorrichtung, bordeigenes Aktualisierungssystem und Kommunikationsvorrichtungsaktualisierungsverfahren

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2016-154465 2016-08-05
JP2016154465A JP6665728B2 (ja) 2016-08-05 2016-08-05 車載更新装置、車載更新システム及び通信装置の更新方法

Publications (1)

Publication Number Publication Date
WO2018025685A1 true WO2018025685A1 (ja) 2018-02-08

Family

ID=61073455

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2017/026642 Ceased WO2018025685A1 (ja) 2016-08-05 2017-07-24 車載更新装置、車載更新システム及び通信装置の更新方法

Country Status (5)

Country Link
US (1) US20200183674A1 (enExample)
JP (1) JP6665728B2 (enExample)
CN (1) CN109478155B (enExample)
DE (1) DE112017003929T8 (enExample)
WO (1) WO2018025685A1 (enExample)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018187860A1 (en) * 2017-04-13 2018-10-18 Blackberry Limited Program release packages including program updates
CN109117313A (zh) * 2018-08-28 2019-01-01 成都信息工程大学 一种带隔离灾备管控机制的车辆智慧安全网关及管控方法
WO2021106604A1 (ja) * 2019-11-28 2021-06-03 株式会社オートネットワーク技術研究所 車載中継装置、プログラム及び中継方法

Families Citing this family (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20190155598A1 (en) * 2017-11-17 2019-05-23 Apple Inc. Techniques for updating a file using a multi-version patch file
US11449329B2 (en) 2018-02-16 2022-09-20 Hitachi Astemo, Ltd. Vehicle control device and program update system
WO2019187391A1 (ja) * 2018-03-26 2019-10-03 住友電気工業株式会社 制御装置、プログラム更新方法、コンピュータプログラム、プログラム送付方法、及びリムーバブルメディア
DE102019202681A1 (de) * 2018-03-29 2019-10-02 Robert Bosch Gmbh Steuergerät
JP7077751B2 (ja) * 2018-04-27 2022-05-31 株式会社デンソー プログラム更新装置、プログラム更新システム及びプログラム更新方法
JP7124627B2 (ja) * 2018-10-16 2022-08-24 株式会社オートネットワーク技術研究所 車載更新装置、更新処理プログラム及び、プログラムの更新方法
JP6943903B2 (ja) * 2019-02-22 2021-10-06 本田技研工業株式会社 ソフトウェア更新装置、車両及びソフトウェア更新方法
JP6832374B2 (ja) 2019-02-22 2021-02-24 本田技研工業株式会社 ソフトウェア更新装置、車両及びソフトウェア更新方法
JP7212736B2 (ja) * 2019-02-22 2023-01-25 本田技研工業株式会社 ソフトウェア更新装置、車両及びソフトウェア更新方法
JP7454554B2 (ja) * 2019-04-01 2024-03-22 パナソニックホールディングス株式会社 栽培制御システム、栽培制御装置、栽培制御方法及び栽培制御プログラム
JP7310642B2 (ja) * 2020-02-20 2023-07-19 株式会社オートネットワーク技術研究所 車載ｅｃｕ、プログラム及び情報処理方法
EP4122773B1 (en) * 2020-03-18 2025-01-22 Nissan Motor Co., Ltd. Software update device, software update method, and software update processing program
CN115298065B (zh) * 2020-03-18 2025-07-11 日产自动车株式会社 软件更新装置、软件的更新方法以及软件更新处理程序
JP7375643B2 (ja) * 2020-03-23 2023-11-08 株式会社オートネットワーク技術研究所 車載情報処理装置、制御方法及びコンピュータプログラム
JP7327242B2 (ja) * 2020-03-26 2023-08-16 株式会社オートネットワーク技術研究所 車載中継装置、情報処理方法及びプログラム
JP7367626B2 (ja) * 2020-07-08 2023-10-24 トヨタ自動車株式会社 ソフトウェア更新装置、方法、プログラムおよび車両
JP7327325B2 (ja) * 2020-08-31 2023-08-16 トヨタ自動車株式会社 車載機器、情報生成方法、情報生成プログラム、および、車両
CN112579135A (zh) * 2020-12-22 2021-03-30 潍柴动力股份有限公司 用于车辆控制单元的刷写控制方法、系统及车辆
CN113162796B (zh) * 2021-02-24 2023-05-16 北京经纬恒润科技股份有限公司 一种设备更新方法、装置及设备更新系统
JP2022135545A (ja) * 2021-03-05 2022-09-15 トヨタ自動車株式会社 車載装置、情報処理装置、ダウンロード実行可否判定方法、プログラム、記録媒体
CN113259249B (zh) * 2021-04-22 2023-04-07 东风柳州汽车有限公司 一种网关程序初始化方法、装置及存储介质
US20220024472A1 (en) * 2021-07-07 2022-01-27 Toyota Jidosha Kabushiki Kaisha Control apparatus for vehicle
CN113656056B (zh) * 2021-08-26 2024-02-23 长春捷翼汽车科技股份有限公司 充电座和充电座升级的方法、装置、设备、存储介质
JP7779112B2 (ja) * 2021-12-01 2025-12-03 株式会社アイシン 車両用プログラム書換システムおよびシフト装置
US20230421615A1 (en) * 2022-06-28 2023-12-28 Rockwell Automation Technologies, Inc. Systems and methods for automatically deploying security updates in an operations technology network
CN117032174B (zh) * 2023-08-18 2025-08-22 赛力斯汽车有限公司 基于车载网关的控制方法、装置及计算机可读存储介质
WO2025238697A1 (ja) * 2024-05-14 2025-11-20 日産自動車株式会社 ソフトウェア管理方法およびソフトウェア管理システム

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012091755A (ja) * 2010-10-29 2012-05-17 Honda Motor Co Ltd 車両用プログラム書換えシステム
JP2016188017A (ja) * 2015-03-30 2016-11-04 本田技研工業株式会社 プログラム書換装置及びプログラム書換方法

Family Cites Families (42)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10158988A1 (de) * 2001-11-30 2003-06-12 Bosch Gmbh Robert Schnittstellenbaustein in einem Fahrzeug
JP2005196568A (ja) * 2004-01-08 2005-07-21 Denso Corp 車両の部品管理方法及び装置、車両の部品管理データ更新方法及び装置、並びに車両部品管理センタ
US7676804B2 (en) * 2004-05-20 2010-03-09 Caterpillar Inc. Systems and method for remotely modifying software on a work machine
JP2006203392A (ja) * 2005-01-19 2006-08-03 Hitachi Ltd ソフトウェア無線装置及び車載情報システム
US20070112773A1 (en) * 2005-11-14 2007-05-17 John Joyce Method for assuring flash programming integrity
US20090300595A1 (en) * 2008-05-30 2009-12-03 Ise Corporation System and Method for Remotely Updating Control Software in a Vehicle With an Electric Drive System
KR101360705B1 (ko) * 2011-09-22 2014-02-07 기아자동차주식회사 차량 업그레이드 시스템 및 그 방법
US20130200991A1 (en) * 2011-11-16 2013-08-08 Flextronics Ap, Llc On board vehicle media controller
US8949823B2 (en) * 2011-11-16 2015-02-03 Flextronics Ap, Llc On board vehicle installation supervisor
US20140309893A1 (en) * 2013-04-15 2014-10-16 Flextronics Ap, Llc Health statistics and communications of associated vehicle users
JP6135151B2 (ja) * 2012-05-23 2017-05-31 株式会社デンソー アプリケーション更新システム
US8819662B2 (en) * 2012-06-11 2014-08-26 Sony Corporation Device and method for time notification for updating software
JP5708940B2 (ja) * 2012-08-22 2015-04-30 トヨタ自動車株式会社 情報管理装置、情報通信システム
KR20140038160A (ko) * 2012-09-20 2014-03-28 한국전자통신연구원 Ａｕｔｏｓａｒ 기반 시스템의 ｅｃｕ 업데이트 방법 및 ｅｃｕ 업데이트 장치
US8813061B2 (en) * 2012-10-17 2014-08-19 Movimento Group Module updating device
US9128798B2 (en) * 2012-10-17 2015-09-08 Movimento Group Module updating device
JP6056424B2 (ja) * 2012-11-29 2017-01-11 株式会社デンソー 車載プログラム更新装置
JP5900390B2 (ja) * 2013-01-31 2016-04-06 株式会社オートネットワーク技術研究所 アクセス制限装置、車載通信システム及び通信制限方法
JP6024564B2 (ja) * 2013-03-28 2016-11-16 株式会社オートネットワーク技術研究所 車載通信システム
JP6335063B2 (ja) * 2013-08-05 2018-05-30 ハーマン インターナショナル インダストリーズ インコーポレイテッド 車載コンピューティングシステムのためのシステムおよび方法
US9910660B2 (en) * 2013-08-05 2018-03-06 Harman International Industries, Incorporated Operating system replacement for in-vehicle computing system
JP5864510B2 (ja) * 2013-10-18 2016-02-17 富士通株式会社 修正プログラム確認方法、修正プログラム確認プログラム、及び情報処理装置
US8830913B1 (en) * 2013-11-13 2014-09-09 Google Inc. Location-based software updates
JP5949732B2 (ja) 2013-11-27 2016-07-13 株式会社オートネットワーク技術研究所 プログラム更新システム及びプログラム更新方法
US20160196132A1 (en) * 2014-07-07 2016-07-07 Symphony Teleca Corporation Remote Embedded Device Update Platform Apparatuses, Methods and Systems
CN104216745A (zh) * 2014-08-29 2014-12-17 万向钱潮股份有限公司 一种半主动悬架ecu控制器软件在线升级系统与方法
EP3412514B1 (en) * 2014-11-12 2019-12-04 Panasonic Intellectual Property Corporation of America Update management method, update management device, and control program
US9639344B2 (en) * 2014-12-11 2017-05-02 Ford Global Technologies, Llc Telematics update software compatibility
US10500955B2 (en) * 2014-12-30 2019-12-10 Visteon Global Technologies, Inc. Automatic upgrade of a vehicle-based processor based on a physical component change
US9841970B2 (en) * 2015-01-13 2017-12-12 Ford Global Technologies, Llc Vehicle control update methods and systems
WO2016117212A1 (ja) * 2015-01-23 2016-07-28 コベルコ建機株式会社 制御手段及びこれを備えた車載プログラムの書き換え装置並びに車載プログラムの書き換え方法
US10162625B2 (en) * 2015-04-14 2018-12-25 Ford Global Technologies, Llc Vehicle control storage methods and systems
US9836300B2 (en) * 2015-06-16 2017-12-05 Lear Corporation Method for updating vehicle ECUs using differential update packages
JP6476091B2 (ja) * 2015-08-21 2019-02-27 ルネサスエレクトロニクス株式会社 無線通信装置、制御方法、及び無線通信システム
DE102015221330A1 (de) * 2015-10-30 2017-05-04 Robert Bosch Gmbh Verfahren und Vorrichtung zum robusten Aktualisieren von Firmware eines Fahrzeuges über eine Luftschnittstelle
JP6805559B2 (ja) * 2016-06-09 2020-12-23 株式会社デンソー リプログマスタ
DE102016210661A1 (de) * 2016-06-15 2017-12-21 Continental Automotive Gmbh Stromsparendes Speicherkonzept für Elektronikmodule in einem Kraftfahrzeug
US10042629B2 (en) * 2016-07-28 2018-08-07 GM Global Technology Operations LLC Remote vehicle update installation scheduling
DE112016007088B4 (de) * 2016-08-24 2022-10-27 Mitsubishi Electric Corporation Kommunikationssystem und Kommunikationssteuerverfahren
JP6690500B2 (ja) * 2016-10-31 2020-04-28 株式会社オートネットワーク技術研究所 車載更新システム及び車載更新装置
JP2018095066A (ja) * 2016-12-13 2018-06-21 株式会社オートネットワーク技術研究所 車載電力供給システム、リレーボックス及びリレー制御装置
US10353696B2 (en) * 2017-04-13 2019-07-16 Blackberry Limited Program release packages including program updates

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012091755A (ja) * 2010-10-29 2012-05-17 Honda Motor Co Ltd 車両用プログラム書換えシステム
JP2016188017A (ja) * 2015-03-30 2016-11-04 本田技研工業株式会社 プログラム書換装置及びプログラム書換方法

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2018187860A1 (en) * 2017-04-13 2018-10-18 Blackberry Limited Program release packages including program updates
US10353696B2 (en) 2017-04-13 2019-07-16 Blackberry Limited Program release packages including program updates
CN109117313A (zh) * 2018-08-28 2019-01-01 成都信息工程大学 一种带隔离灾备管控机制的车辆智慧安全网关及管控方法
CN109117313B (zh) * 2018-08-28 2022-03-18 成都信息工程大学 一种带隔离灾备管控机制的车辆智慧安全网关及管控方法
WO2021106604A1 (ja) * 2019-11-28 2021-06-03 株式会社オートネットワーク技術研究所 車載中継装置、プログラム及び中継方法
JP2021087138A (ja) * 2019-11-28 2021-06-03 株式会社オートネットワーク技術研究所 車載中継装置、プログラム及び中継方法

Also Published As

Publication number Publication date
CN109478155B (zh) 2022-03-22
JP6665728B2 (ja) 2020-03-13
DE112017003929T5 (de) 2019-04-18
JP2018020718A (ja) 2018-02-08
CN109478155A (zh) 2019-03-15
US20200183674A1 (en) 2020-06-11
DE112017003929T8 (de) 2019-06-19

Similar Documents

Publication Publication Date Title
WO2018025685A1 (ja) 車載更新装置、車載更新システム及び通信装置の更新方法
CN107531198B (zh) 程序改写装置和程序改写方法
US20190250902A1 (en) On-board update system, on-board update device, and communication device update method
US20200215930A1 (en) Control apparatus, control method, and computer program
US11807176B2 (en) On-board communication device, on-board communication system, and specific processing prohibition method for a vehicle
JP6428652B2 (ja) 車載更新装置、更新システム及び更新処理プログラム
US10625754B2 (en) Control apparatus, control method, and computer program
JP6060782B2 (ja) 中継装置
JP2017215890A (ja) 中継装置、プログラム更新システム、およびプログラム更新方法
US20200057628A1 (en) Control apparatus, transfer method, and computer program
JP2020152154A (ja) 車載更新装置、更新処理プログラム及び、プログラムの更新方法
CN112136106B (zh) 电子控制装置以及存储介质
JP2018181377A (ja) 中継装置、プログラム更新システム、およびプログラム更新方法
JP6147791B2 (ja) プログラム書換装置及びプログラム書換方法
JP2016188022A (ja) プログラム書換装置及びプログラム書換方法
WO2018043107A1 (ja) 車載更新装置及び車載更新システム
JP2018181376A (ja) 中継装置、プログラム更新システム、およびプログラム更新方法
JP6147790B2 (ja) プログラム書換装置及びプログラム書換方法
JP7331818B2 (ja) 車載更新装置、更新処理プログラム及び、プログラムの更新方法
JP2009087107A (ja) 車両用制御システム
KR101008542B1 (ko) 서버의 스위칭 제어장치
CN119072679A (zh) 车载装置、计算机程序和程序更新方法
JP7211189B2 (ja) 更新処理システム及び更新処理方法
JP2019074847A (ja) 電子制御装置
JP2020189586A (ja) データ書換方法、及びデータ書換システム

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17836791

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 17836791

Country of ref document: EP

Kind code of ref document: A1