WO2018079280A1

WO2018079280A1 - In-vehicle updating system and in-vehicle updating device

Info

Publication number: WO2018079280A1
Application number: PCT/JP2017/036981
Authority: WO
Inventors: 聡一中村
Original assignee: 株式会社オートネットワーク技術研究所; 住友電装株式会社; 住友電気工業株式会社
Priority date: 2016-10-31
Filing date: 2017-10-12
Publication date: 2018-05-03
Also published as: JP2018074799A

Abstract

Provided are an in-vehicle updating system and an in-vehicle updating device capable of preventing a battery from running out in association with update processing of an in-vehicle device. The in-vehicle updating system according to the present embodiment is provided with: an in-vehicle device supplied with power from one or more of a plurality of batteries mounted on a vehicle and operating by executing a program stored in a storage unit; and an in-vehicle updating device performing processing for updating the program stored in the storage unit of the in-vehicle device. The in-vehicle updating system is further provided with: a plurality of switching units for separately switching between the energizaton and the de-energization of power supply paths from the plurality of batteries to the in-vehicle device; a plurality of detection units for detecting the respective amounts of power stored in the plurality of batteries; and a switching control processing unit for, when the in-vehicle updating device performs update processing of the in-vehicle device, controlling the energizaton and the de-energization of the plurality of switching units on the basis of the detection results of the detection units.

Description

In-vehicle update system and in-vehicle update device

The present invention relates to an in-vehicle update system and an in-vehicle update device for updating a program of an in-vehicle device mounted on a vehicle.

Conventionally, in-vehicle devices such as a plurality of ECUs (Electronic Control Units) are mounted on a vehicle, and a plurality of ECUs are connected via a communication line such as a CAN (Controller Area Network) bus to transmit and receive information to and from each other. Is possible. Each ECU reads and executes a program stored in a storage unit such as a flash memory or an EEPROM (ElectricallyrasErasable Programmable Read Only Memory) by a processing device such as a CPU (Central Processing Unit), thereby performing various control such as vehicle control Is being processed. The program or data stored in the storage unit of the ECU needs to be updated to be rewritten with a new program or data, for example, when it becomes necessary to add a function, correct a defect, or upgrade a version. In this case, an update program or data is transmitted to the ECU to be updated by a communication line.

In Patent Document 1, when the program is updated after the driver gets off while the engine is running, the program update device monitors the vehicle state and transmits monitoring information to the center. A program update system for monitoring has been proposed.

JP 2011-70287 A

In the program update system described in Patent Document 1, the program is updated while the vehicle engine is running. However, it may be desired to update the program while the engine is stopped, which is likely to prevent the user from using the vehicle. When updating the program while the engine is stopped, it is necessary to operate the ECU to be updated using the electric power stored in the vehicle battery. For this reason, if the stored power amount of the battery is remarkably reduced by performing the update process, there is a possibility that the next engine start cannot be performed.

The present invention has been made in view of such circumstances, and an object of the present invention is to provide an in-vehicle update system and an in-vehicle update device that can suppress battery exhaustion associated with an update process of an in-vehicle device. .

An in-vehicle update system according to the present invention includes an in-vehicle device that is supplied with electric power from one or a plurality of batteries mounted on a vehicle and operates by executing a program stored in a storage unit, An in-vehicle update system comprising: an in-vehicle update device that performs a process of updating a program stored in the storage unit of the in-vehicle device, wherein energization / interruption of a power supply path from the plurality of batteries to the in-vehicle device is individually performed A plurality of switching units to be switched, a plurality of detection units that respectively detect the stored power amounts of the plurality of batteries, and when the in-vehicle update device performs update processing of the in-vehicle device, based on the detection result of the detection unit A switching control processing unit that controls energization / shut-off of the plurality of switching units, and the switching control processing unit is configured such that the stored power amount among the stored power amounts detected by the detection unit is Also it switched from many battery energized power supply path to the vehicle device, and switches from the battery other than the amount accumulated power highest battery cutoff state power supply path to the vehicle device.

Further, in the in-vehicle update system according to the present invention, the switching control processing unit gives priority to a battery whose stored power amount detected by the detection unit exceeds a threshold, and energizes a power supply path from the battery to the in-vehicle device. It is characterized by switching to a state.

Moreover, the in-vehicle update system according to the present invention is characterized in that the in-vehicle update device includes the switching control processing unit.

The in-vehicle update system according to the present invention further includes a switching control device having a communication unit that communicates with the in-vehicle update device and the switching control processing unit, and the switching control device is configured to transmit the switching control device by the communication unit. Control by the switching control processing unit is performed according to a command received from the in-vehicle update device.

Further, in the in-vehicle update system according to the present invention, the plurality of batteries are a first battery and a second battery, the in-vehicle device is supplied with electric power from the first battery, and the in-vehicle update device includes the first battery Power is supplied from one battery and the second battery, a first power supply path from the first battery to the in-vehicle device and the in-vehicle update device, and a second power supply from the second battery to the in-vehicle update device A plurality of switching units, a first switching unit that switches between energization / interruption provided on the first power supply path and an energization / interruption provided on the second power supply path. A second switching unit, a third switching unit that is provided between the first power supply path and the second power supply path and switches between energization / cutoff between the two paths, and the plurality of detection units are First A first detection unit for detecting a stored power amount of the battery and a second detection unit for detecting a stored power amount of the second battery, wherein the switching control processing unit is configured to update the in-vehicle device by the in-vehicle update device. When performing processing, based on the detection results of the first detection unit and the second detection unit, controlling energization / cutoff of the first switching unit, the second switching unit, and the third switching unit. Features.

Further, in the in-vehicle update system according to the present invention, when the switching control processing unit has a stored power amount detected by the first detection unit larger than a stored power amount detected by the second detection unit, the first control unit Accumulated power detected by the second detection unit with the first switching unit in the energized state, the second switching unit and the third switching unit in the cut-off state, and the accumulated power amount detected by the first detection unit When the amount is smaller than the amount, the first switching unit is turned off, and the second switching unit and the third switching unit are turned on.

Further, in the in-vehicle update system according to the present invention, the plurality of batteries are a first battery and a second battery, and the in-vehicle device is supplied with power from either the first battery or the second battery, The in-vehicle update device is supplied with electric power from the first battery and the second battery, a first power supply path from the first battery to the in-vehicle update device, and a first power supply path from the second battery to the in-vehicle update device. Two power supply paths, and the plurality of switching sections include a first switching section that switches between energization / cutoff provided on the first power supply path and an energization / switch provided on the second power supply path. A third switching unit configured to switch between energization / shutoff between the first power supply path and the second power supply path, wherein the plurality of switching units are provided between the first power supply path and the second power supply path. A first detector that detects the amount of stored power of the first battery, and a second detector that detects the amount of stored power of the second battery, wherein the in-vehicle device includes the first power supply path and the first A connection information storage unit that stores which of the two power supply paths is connected, and the switching control processing unit, when the in-vehicle update device performs the update process of the in-vehicle device, Based on the detection result of the second detection unit and the information stored in the connection information storage unit, energization / cutoff of the first switching unit, the second switching unit, and the third switching unit is controlled. And

Further, in the in-vehicle update system according to the present invention, the switching control processing unit is configured to supply power to the plurality of switching units after the update processing by the in-vehicle update device is completed until the vehicle engine is started. It is characterized by maintaining a shut-off state.

Further, the in-vehicle update device according to the present invention is an in-vehicle device that operates by executing a program that is supplied with power from one or a plurality of batteries out of a plurality of batteries mounted on a vehicle and stored in a storage unit. A vehicle-mounted update device that performs a process of updating a program stored in the storage unit, and a detection result acquisition unit that acquires a detection result from a plurality of detection units that respectively detect the stored power amounts of the plurality of batteries; A plurality of switching units that individually switch energization / cutoff of the power supply path from the plurality of batteries to the in-vehicle device based on the detection result acquired by the detection result acquisition unit when performing the update process of the in-vehicle device; A switching control processing unit that performs processing related to switching control, wherein the switching control processing unit starts from a battery having the largest amount of stored power among the stored power amounts detected by the detection unit. Switching power supply path to the serial-vehicle device energized, and switches from the battery other than the amount accumulated power highest battery cutoff state power supply path to the vehicle device.

The present invention is intended for a vehicle on which a plurality of batteries are mounted, and an in-vehicle device that is an object of update processing is configured to be able to receive power supply from a plurality of batteries mounted on the vehicle. The power supply path from each battery to the in-vehicle device is provided with a switching unit such as a switch or a relay that can be switched between energization / cutoff individually. Also, the amount of stored power in each battery is detected. The stored power amount of the battery to be detected may be a power amount expressed in units such as watt hours (Wh), for example, and may be expressed as a ratio such as SOC (State Of Charge). Also good. When the in-vehicle update device performs the update processing of the in-vehicle device, the switching control of energization / interruption of each switching unit is performed based on the detected accumulated power amount of each battery. Thereby, for example, an update process corresponding to the accumulated power amount of each battery can be realized, such as not using a battery whose accumulated power amount is reduced for the update process, and it is possible to contribute to the suppression of battery exhaustion.

In the present invention, a battery with a large amount of stored power is given priority, and the power supply path from this battery to the in-vehicle device is set to the energized state. For example, it is possible to select a predetermined number of batteries from the plurality of batteries mounted on the vehicle in the descending order of the stored power amount, and to set the power supply path from the selected predetermined number of batteries to the in-vehicle device in an energized state.
Moreover, it is good also considering the electric power supply path | route from any one battery with the largest stored electric energy to vehicle equipment as an energization state.
As a result, the power of the battery with a large amount of stored power can be supplied to the in-vehicle device subject to the update process to perform the update process, and the stored power amount of the battery with a small amount of stored power can be prevented from further decreasing. .

Also, in the present invention, it is determined whether or not the stored power amount of each battery exceeds a predetermined threshold value. The threshold value is determined in advance at the system design stage or the like based on, for example, the amount of power required to perform the update processing of the in-vehicle device and the amount of power required to start the engine of the vehicle. For example, among a plurality of batteries mounted on a vehicle, a predetermined number of batteries are selected in descending order of the stored power amount from those whose stored power amount exceeds a threshold, and power is supplied from the selected predetermined number of batteries to the in-vehicle device. The path can be energized. Thereby, it is possible to prevent the stored power amount of the battery from being significantly reduced by performing the update process.

In the present invention, the in-vehicle update device that performs the update process of the in-vehicle device performs control to switch energization / interruption of a plurality of switching units provided in the power supply path from each battery to the in-vehicle device. Thereby, control of a switching part is easily realizable according to update processing.

Moreover, in this invention, the switching control apparatus which performs control which switches electricity supply / cutoff of the several switching part provided in the electric power supply path | route from each battery to vehicle equipment is provided separately from a vehicle update apparatus. The in-vehicle update device and the switching control device have a function of performing communication according to a standard such as CAN (Controller Area Network), and can transmit and receive information to and from each other. The in-vehicle updating device gives a switching command of the switching unit to the switching control device when performing the update process, and the switching control device performs switching control of the switching unit according to the switching command.
In the configuration in which the in-vehicle update device performs the switching control of the switching unit, the in-vehicle update device needs to perform the switching control of the switching unit even when the update process is not performed. By adopting a configuration in which the switching control device performs switching control of the switching unit, it is not necessary for the in-vehicle updating device to perform switching control of the switching unit when update processing is not performed, and in-vehicle updating by introducing the configuration of the present invention. The complexity of the apparatus can be suppressed.

Further, in the present invention, a vehicle on which two batteries, a first battery and a second battery, are mounted, an in-vehicle device to be subjected to update processing receives power supply from the first battery, It is assumed that the power supply operates from the first battery and the second battery. A first switching unit is provided in the first power supply path from the first battery to the in-vehicle device and the in-vehicle updating device, and a second switching unit is provided in the second power supply path from the second battery to the in-vehicle updating device. . Furthermore, in the present invention, a third switching unit that switches between energization / cutoff between both paths is provided between the first power supply path and the second power supply path. Thereby, since the 1st electric power supply path and the 2nd electric power supply path can be connected by making the 3rd switching part into an energized state, it is the 2nd battery to the in-vehicle apparatus connected to the 1st electric power supply path. It becomes possible to supply the electric power. In addition, when the in-vehicle update device detects the stored power amounts of the first battery and the second battery and performs the update process of the in-vehicle device, the first switching unit and the second switching unit based on the detection result of the stored power amount. And switching control of the third switching unit. Thereby, for example, an update process corresponding to the accumulated power amount of each battery can be realized, such as not using a battery whose accumulated power amount is reduced for the update process, and it is possible to contribute to the suppression of battery exhaustion.

Further, in the present invention, when the stored power amount of the first battery is larger than the stored power amount of the second battery, the first switching unit is turned on, and the second switching unit and the third switching unit are turned off. Thus, power is supplied from the first battery to the in-vehicle device. On the other hand, when the stored power amount of the first battery is smaller than the stored power amount of the second battery, the first switching unit is turned off, and the second switching unit and the third switching unit are turned on. Thus, power is supplied from the second battery to the in-vehicle device. As a result, the battery power with a large amount of stored power can be supplied to the in-vehicle device that is the target of the update process and the update process can be performed, and the stored power amount of the battery with a small amount of stored power can be prevented from further decreasing. .

In the present invention, there is a possibility that the in-vehicle device that is the target of the update process is connected to either the first power supply path or the second power supply path. Therefore, it is stored as connection information whether the in-vehicle device that can be the target of the update process is connected to the first power supply path or the second power supply path. After determining whether to use the first battery or the second battery for the update process based on the stored power amount, the power supply path to which the battery used for the update process is connected and the in-vehicle device to be updated are connected. When the power supply path is different, the power is supplied from the battery to the in-vehicle device to be updated by switching the third switch to the energized state.

In the case of the present invention, when the in-vehicle update device performs the update processing of the in-vehicle device, the switching unit provided in each power supply path from the plurality of batteries to the in-vehicle device based on the stored power amount of the plurality of batteries. By adopting a configuration that performs switching control of energization / interruption of the battery, it is possible to realize an update process according to the amount of stored electric power of each battery, and to suppress battery exhaustion accompanying the update process of the in-vehicle device.

It is a block diagram which shows the structure of the vehicle-mounted update system which concerns on Embodiment 1. FIG. It is a block diagram which shows the structure of a gateway. It is a block diagram which shows the structure of body ECU. It is a flowchart which shows the procedure of the process which the gateway which concerns on this Embodiment performs. It is a block diagram which shows the structure of the vehicle-mounted update system which concerns on Embodiment 2. FIG. 10 is a flowchart illustrating a procedure of processing performed by a gateway according to the second embodiment. 10 is a flowchart illustrating a procedure of processing performed by a gateway according to the second embodiment.

(Embodiment 1)
FIG. 1 is a block diagram showing the configuration of the in-vehicle update system according to the first embodiment. In the figure, 1 indicated by a broken line is a vehicle, and the vehicle 1 is provided with an in-vehicle update system 1a having a first battery 11, a second battery 12, a gateway 13, an ECU 14, a body ECU 15, and the like. In this figure, the power supply path 3 is indicated by a thick solid line, the signal lines 4a to 4c for transmitting control signals and the like are indicated by thin solid lines, the communication line 2 constituting the in-vehicle network is indicated by a one-dot chain line, and wireless communication is performed. It is indicated by a two-dot chain line. The first battery 11 and the second battery 12 are devices that accumulate electric power generated by an alternator (not shown) during engine operation of the vehicle 1, and are configured using a battery such as a lead storage battery or a lithium ion battery, for example. can do. The first battery 11 and the second battery 12 can supply the accumulated power to the gateway 13, the ECU 14, the body ECU 15, and the like mounted on the vehicle 1 while the engine of the vehicle 1 is stopped. The first battery 11 and the second battery 12 are connected to in-vehicle devices such as the gateway 13, the ECU 14, and the body ECU 15 through the power supply path 3 configured using a power line or the like in the vehicle 1.

In the present embodiment, it is assumed that the first battery 11 and the second battery 12 are the same device having the same amount of power that can be stored. However, the 1st battery 11 and the 2nd battery 12 may be the structures from which the electric energy which can be stored differs. Moreover, the 1st battery 11 and the 2nd battery 12 may be comprised using different apparatuses, such as making the 1st battery 11 into a lead storage battery and making the 2nd battery 12 into a lithium ion battery, for example.

The gateway 13 is a device that performs processing for relaying message transmission / reception between the communication lines 2 by connecting a plurality of communication lines 2 constituting the in-vehicle network of the vehicle 1. However, in FIG. 1, only one communication line 2 that connects the gateway 13, the ECU 14, and the body ECU 15 is shown by a one-dot chain line, and the other communication lines are not shown. Further, the gateway 13 has a function of performing communication via a wireless network such as a cellular phone communication network or a wireless LAN (Local Area Network), for example, and thereby communicates with the server device 9 installed outside the vehicle 1. It can be performed. Thereby, the gateway 13 can relay communication inside and outside the vehicle 1. Instead of the gateway 13 having a wireless communication function, a configuration may be adopted in which the vehicle 1 is provided with a wireless communication device that performs wireless communication, and the gateway 13 communicates with the server device 9 via the wireless communication device.

In the present embodiment, the gateway 13 has a function as an in-vehicle update device that updates a program or data (hereinafter simply referred to as a program) stored in a memory of an in-vehicle device such as the ECU 14 mounted on the vehicle 1. ing. The gateway 13 communicates with the server device 9 outside the vehicle while the engine of the vehicle 1 is operating, and inquires whether or not the program of the in-vehicle device such as the ECU 14 mounted on the vehicle 1 needs to be updated. If necessary, download the update program and store it. When the gateway 13 reaches a predetermined update timing, for example, after a predetermined time has elapsed since the engine of the vehicle 1 is stopped, the gateway 13 updates the stored update program to the ECU 14 to be updated. Process.

The ECU 14 may include various ECUs such as an ECU that controls the operation of the engine of the vehicle 1, an ECU that controls the operation of the airbag, and an ECU that controls the operation of an ABS (Antilock Brake System). The ECU 14 performs various processes by executing a program stored in an internal memory or the like by a CPU (Central Processing Unit) or the like. In the present embodiment, the ECU 14 is an ECU that can be an object of update processing for updating a program stored in a memory or the like.

The body ECU 15 is an ECU that controls, for example, locking / unlocking the door of the vehicle 1 and controlling lighting on / off of the light. Further, in the present embodiment, the body ECU 15 performs control to switch which power of the first battery 11 or the second battery 12 is supplied to the in-vehicle device such as the gateway 13 and the ECU 14 when the engine of the vehicle 1 is stopped. The vehicle 1 is provided with a first switch 21 for energizing / cutting off the first battery 11 with respect to the power supply path 3 and a second switch 22 for energizing / cutting off the second battery 12 with respect to the power supply path 3. It has been. The first switch 21 and the second switch 22 are switched between energization / cutoff according to a control signal given from the body ECU 15 via the

signal lines

4a and 4b. The first switch 21 and the second switch 22 are configured using, for example, a mechanical relay or a semiconductor element.

For example, when the engine of the vehicle 1 is operating, the body ECU 15 switches both the first switch 21 and the second switch 22 to the energized state. As a result, power is supplied from the alternator of the vehicle 1 connected to the power supply path 3 to the first battery 11 and the second battery 12, and the power is accumulated in the first battery 11 and the second battery 12. When the engine of the vehicle 1 is stopped, the body ECU 15 sets one of the first switch 21 and the second switch 22 in an energized state and the other in a cut-off state, so that the first battery 11 and the second battery 12 are turned off. Electric power is supplied from either one to in-vehicle devices such as the gateway 13 and the ECU 14. In the present embodiment, the first battery 11 is used as a main battery, and the second battery 12 is used as a sub battery. When the engine of the vehicle 1 is stopped, the body ECU 15 sets the first switch 21 in the energized state and sets the second switch 22 in the cut-off state to supply the electric power of the first battery 11 to the in-vehicle device.

In the in-vehicle update system 1a according to the present embodiment, a first power amount detection unit 23 that detects the amount of power stored in the first battery 11 and a second power that detects the amount of power stored in the second battery 12. The amount detection unit 24 is provided, and the detection results of the first power amount detection unit 23 and the second power amount detection unit 24 are input to the gateway 13 via the

signal lines

4c and 4d. For example, the first power amount detection unit 23 and the second power amount detection unit 24 are provided at or near the input / output terminal of the battery, detect the amount of current input to and output from the input / output terminal, and an integrated value of the current amount The amount of stored power can be calculated by calculating. Further, for example, the first power amount detection unit 23 and the second power amount detection unit 24 may be configured to detect the voltage value of the input / output terminal of the battery and calculate the accumulated power amount from the voltage value. In the case of such a configuration, the first power amount detection unit 23 and the second power amount detection unit 24 simply input the detected current value or voltage value to the gateway 13, and the gateway 13 is based on the current value or voltage value. In other words, the storage power amount of the first battery 11 and the second battery 12 may be calculated.

In the present embodiment, the stored power amounts of the first battery 11 and the second battery 12 are detected as so-called SOC. That is, the ratio [%] of the amount of power stored at that time to the amount of power stored when the battery is fully charged is treated as the stored power amount of the first battery 11 and the second battery 12. However, for example, the configuration may be such that the amount of power expressed in watt hours (Wh) is detected as the amount of stored power in the first battery 11 and the second battery 12.

The gateway 13 according to the present embodiment starts the program update process of the ECU 14 when the predetermined update timing is reached while the engine of the vehicle 1 is stopped. However, the gateway 13 checks the stored electric energy of the first battery 11 and the second battery 12 before starting the update process. The gateway 13 determines whether or not each of the first battery 11 and the second battery 12 exceeds a threshold value. For example, in the present embodiment, the gateway 13 does not perform the update process when either the stored power amount of the first battery 11 or the stored power amount of the second battery 12 does not exceed 90%. When at least one of the stored power amount of the first battery 11 and the stored power amount of the second battery 12 exceeds 90%, the gateway 13 performs an update process.

Further, the gateway 13 compares the stored power amount of the first battery 11 with the stored power amount of the second battery 12, and performs update processing using a battery having a large stored power amount. When the stored power amount of the first battery 11 is larger than the stored power amount of the second battery 12, the gateway 13 sends a switch command to the body ECU 15 to switch the first switch 21 to the energized state and the second switch 22 to the cut-off state. Give through the network. In response to this switching command, the body ECU 15 turns on the first switch 21 and turns off the second switch 22, whereby the electric power stored in the first battery 11 is supplied to the gateway 13, the ECU 14, and the like. After the switching control by the body ECU 15 is completed, the gateway 13 performs a program update process of the ECU 14.

When the stored power amount of the first battery 11 is smaller than the stored power amount of the second battery 12, the gateway 13 issues a switching command to the body ECU 15 to switch the first switch 21 to the cutoff state and the second switch 22 to the energized state. Give through the network. By this switching command, the body ECU 15 turns off the first switch 21 and turns on the second switch 22, so that the electric power stored in the second battery 12 is supplied to the gateway 13, the ECU 14, and the like. After the switching control by the body ECU 15 is completed, the gateway 13 performs a program update process of the ECU 14.

After completion of the update process, the gateway 13 gives the body ECU 15 a command for canceling the switching command. The body ECU 15 maintains the current energized state and sets the first switch 21 and the second switch 22 to the energized state after the next engine start.

Note that the threshold at which the gateway 13 compares the stored power amount of the first battery 11 and the stored power amount of the second battery 12 may be a fixed value, but the content of the update process target (for example, the update target device) The number may vary depending on the number of Further, the threshold value for comparing with the stored power amount of the first battery 11 and the threshold value for comparing with the stored power amount of the second battery 12 may be different values.

In the present embodiment, the stored power amount of the first battery 11 and the stored power amount of the second battery 12 are simply compared, but the present invention is not limited to this. For example, when the amount of power that can be stored in the first battery 11 and the amount of power that can be stored in the second battery 12 are different, a configuration may be adopted in which weighting based on the amount of power that can be stored is weighted to compare the stored power amount. .

FIG. 2 is a block diagram showing the configuration of the gateway 13. However, in FIG. 2, functional blocks related to the update process of the gateway 13 are illustrated, and functional blocks related to the communication relay process are not shown. The gateway 13 according to the present embodiment includes a processing unit 31, a storage unit 32, a detection result input unit 33, an in-vehicle communication unit 34, an out-of-vehicle communication unit 35, and the like. The processing unit 31 is configured by using an arithmetic processing unit such as a CPU (Central Processing Unit) or an MPU (Micro-Processing Unit), for example, and a program (not shown) stored in the storage unit 32 or a ROM (Read Only Memory). Various operations related to the relay process and the update process are performed by reading and executing (omitted). For example, the processing unit 31 performs a process of downloading an update program for the ECU 14 from the server device 9 outside the vehicle, a process for updating the program by transmitting the downloaded update program to the ECU 14, and the like. Further, in the present embodiment, the processing unit 31 performs switching control processing of the first switch 21 and the second switch 22 based on the stored electric energy of the first battery 11 and the second battery 12 when performing the update processing.

The storage unit 32 is configured using a nonvolatile memory element such as a flash memory or an EEPROM (ElectricallyrErasable Programmable Read Only Memory). The storage unit 32 stores a program executed by the processing unit 31 and data necessary for the execution of the program, and also stores an update program 32 a used for updating the ECU 14. The storage unit 32 may store data generated in the course of processing by the processing unit 31.

The detection result input unit 33 is connected to the first power amount detection unit 23 and the second power amount detection unit 24 via the

signal lines

4c and 4d, and stores the stored power amount of the first battery 11 and the second battery 12. A detection result (or a detection result such as a current value or a voltage value for calculating the stored power amount) is input. When the detection result is input as an analog signal, the detection result input unit 33 converts the digital signal into digital data by sampling and acquiring the input signal, and gives the detection result of the converted digital value to the processing unit 31. When the detection result is input as a digital signal, the detection result input unit 33 provides the processing unit 31 with digital data corresponding to the input signal.

The in-vehicle communication unit 34 is connected to the communication line 2 constituting the in-vehicle network provided in the vehicle 1 and transmits and receives data according to a communication protocol such as CAN (Controller Area Network). The in-vehicle communication unit 34 transmits information by converting the data given from the processing unit 31 into an electrical signal and outputs the signal to the communication line 2, and also samples and acquires the potential of the communication line 2 to obtain the data. The received data is given to the processing unit 31. Thereby, the gateway 13 can transmit and receive data between the ECU 14 and the body ECU 15 mounted on the vehicle 1. Further, the gateway 13 includes a plurality of in-vehicle communication units 34, and relays data by transmitting data received by one in-vehicle communication unit 34 from another in-vehicle communication unit 34.

The vehicle exterior communication unit 35 communicates with the server device 9 outside the vehicle by using, for example, a mobile phone communication network or a wireless LAN. The out-of-vehicle communication unit 35 transmits data by outputting a radio signal obtained by modulating data provided from the processing unit 31 from the antenna, and processes the data obtained by demodulating the radio signal received by the antenna. Give to. In the present embodiment, the gateway 13 directly performs wireless communication with the outside of the vehicle, but is not limited thereto. A wireless communication device can be mounted on the vehicle 1 separately from the gateway 13 and can communicate with each other by connecting the gateway 13 and the wireless communication device via the communication line 2 constituting the in-vehicle network or a dedicated communication line. The configuration may be such that the gateway 13 communicates with the server device 9 outside the vehicle via the wireless communication device.

In addition, the processing unit 31 executes a program stored in the storage unit 32 or the ROM, so that the detection result acquisition unit 31a, the switching control processing unit 31b, the update processing unit 31c, and the like are realized as software functional blocks. Is done. The detection result acquisition unit 31a receives the detection result input from the first power amount detection unit 23 and the second power amount detection unit 24 to the detection result input unit 33 when the predetermined update timing is reached after the engine of the vehicle 1 is stopped. Process to get. The detection result acquisition unit 31a performs a process of comparing the acquired stored power amount of the first battery 11 and the stored power amount of the second battery 12 with a predetermined threshold value. In addition, the detection result acquisition unit 31a performs a process of comparing the stored power amount of the first battery 11 and the stored power amount of the second battery 12.

The switching control processing unit 31b performs energization / interruption switching processing of the first switch 21 and the second switch 22 based on the comparison result of the stored electric energy by the detection result acquisition unit 31a. Note that if both the stored power amount of the first battery 11 and the stored power amount of the second battery 12 do not exceed the threshold value, the gateway 13 stops the update process. When the stored power amount of the first battery 11 exceeds the threshold value and the stored power amount of the second battery 12 does not exceed the threshold value, the switching control processing unit 31b determines to perform the update process using the first battery 11, A switching command to turn on the first switch 21 and turn off the second switch 22 is transmitted to the body ECU 15. When the stored power amount of the first battery 11 does not exceed the threshold value and the stored power amount of the second battery 12 exceeds the threshold value, the switching control processing unit 31b determines to perform the update process using the second battery 12, A switching command for setting the first switch 21 to the cutoff state and the second switch 22 to be energized is transmitted to the body ECU 15.

When the stored power amount of the first battery 11 and the stored power amount of the second battery 12 both exceed the threshold, the switching control processing unit 31b determines whether the stored power amount of the first battery 11 and the stored power amount of the second battery 12 Based on the comparison result, it is determined that the update process is performed using the battery with the larger amount of stored power. When the stored power amount of the first battery 11 is greater than the stored power amount of the second battery 12, the switching control processing unit 31b determines that the update process is performed using the first battery 11, and the first switch 21 is energized. And a switching command to turn off the second switch 22 is transmitted to the body ECU 15. When the stored power amount of the first battery 11 is smaller than the stored power amount of the second battery 12, the switching control processing unit 31b determines that the update process is performed using the second battery 12, and the first switch 21 is turned off. Then, a switching command for energizing the second switch 22 is transmitted to the body ECU 15.

The update processing unit 31c performs processing for updating a program stored in a storage unit of various in-vehicle devices (ECU 14 in the present embodiment) mounted on the vehicle 1. The update processing unit 31 c communicates with the server device 9 outside the vehicle while the engine of the vehicle 1 is operating, and performs a process of inquiring whether there is a program update for all in-vehicle devices that may be updated. When the response that the update process needs to be performed is given from the server device 9, the update processing unit 31 c acquires the update program necessary for the update process from the server device 9 and stores it in the storage unit 32. When the predetermined timing for performing the update process is reached after the engine of the vehicle 1 is stopped, the update processing unit 31c reads the update program 32a stored in the storage unit 32 and becomes the target of the update process. Update processing is performed by transmitting to the device.

FIG. 3 is a block diagram showing the configuration of the body ECU 15. In FIG. 3, functional blocks relating to the switching control of the first switch 21 and the second switch 22 of the body ECU 15 are illustrated, and illustrations of blocks relating to other functions are omitted. The body ECU 15 according to the present embodiment includes a processing unit 51, a storage unit 52, an in-vehicle communication unit 53, a control signal output unit 54, and the like. The processing unit 51 is configured using, for example, an arithmetic processing device such as a CPU or MPU, and reads and executes a program (not shown) stored in the storage unit 52 or the ROM, thereby executing the first switch 21 and Various arithmetic processes related to switching control of the second switch 22 and the like are performed. The storage unit 52 is configured using a nonvolatile memory element such as a flash memory or an EEPROM. The storage unit 52 stores a program executed by the processing unit 51, data necessary for executing the program, and the like. The storage unit 52 may store data generated in the course of processing by the processing unit 51.

The in-vehicle communication unit 53 is connected to the communication line 2 constituting the in-vehicle network provided in the vehicle 1 and transmits / receives data according to a communication protocol such as CAN. The in-vehicle communication unit 53 transmits information by converting the data provided from the processing unit 51 into an electric signal and outputs the electric signal to the communication line 2, and also samples and acquires the data by sampling the potential of the communication line 2. The received data is given to the processing unit 51. As a result, the body ECU 15 can transmit and receive data to and from the gateway 13 and ECU 14 mounted on the vehicle 1. The control signal output unit 54 is connected to the first switch 21 and the second switch 22 via the

signal lines

4a and 4b, respectively, and receives a control signal for switching energization / cutoff of these switches in response to an instruction from the processing unit 51. Output.

In the processing unit 51, the switching control processing unit 51b is realized as a software functional block by executing a program stored in the storage unit 52 or the ROM. When the in-vehicle communication unit 53 receives a switching command from the gateway 13, the switching control processing unit 51 a causes the control signal output unit 54 to switch the first switch so that the switching state specified by the switching command is established. 21 and a process of outputting a control signal to the second switch 22 is performed. In addition, the switching control processing unit 51a performs a process of appropriately switching between energization / cutoff of the first switch 21 and the second switch 22 according to the operating state of the engine of the vehicle 1 or the state of the ignition switch.

FIG. 4 is a flowchart showing a procedure of processing performed by the gateway 13 according to the present embodiment. Note that the processing shown in this flowchart starts from a state after the gateway 13 completes the acquisition of the update program necessary for the update processing from the server device 9 and the engine of the vehicle 1 is stopped. The update processing unit 31c of the processing unit 31 of the gateway 13 determines whether or not a predetermined timing for performing the program update processing of the ECU 14 has been reached (step S1). As the predetermined update timing, for example, a predetermined time such as 11:00 pm, or a timing after two hours have elapsed since the ignition switch is switched to the off state can be employed. The update timing may be determined by the user. When the update timing has not been reached (S1: NO), the update processing unit 31c waits until the update timing is reached.

When the update timing is reached (S1: YES), the detection result acquisition unit 31a of the processing unit 31 outputs a signal input to the detection result input unit 33 from the first power amount detection unit 23 and the second power amount detection unit 24. Based on this, the detection result of the stored power amount of the first battery 11 and the detection result of the stored power amount of the second battery 12 are acquired (step S2). Next, the detection result acquisition unit 31a determines whether or not the accumulated power amount of the first battery 11 acquired in step S2 exceeds a predetermined threshold (step S3). When the stored power amount of the first battery 11 exceeds the threshold value (S3: YES), the detection result acquisition unit 31a determines whether or not the stored power amount of the second battery 12 acquired in step S2 exceeds a predetermined threshold value. Determine (step S4). When the accumulated power amount of the second battery 12 exceeds the threshold value (S4: YES), that is, when both the accumulated power amounts of the first battery 11 and the second battery 12 exceed the threshold value, the detection result acquisition unit 31a It is further determined whether or not the stored power amount of 11 exceeds the stored power amount of the second battery 12 (step S5).

When the stored power amount of the first battery 11 exceeds the stored power amount of the second battery 12 (S5: YES), the switching control processing unit 51a sets the first switch 21 in the energized state and sets the second switch 22 in the cut-off state. Therefore, a switch switching command is transmitted to the body ECU 15 (step S7). Similarly, when the stored power amount of the second battery 12 does not exceed the threshold value in step S4 (S4: NO), the switching control processing unit 51a sets the first switch 21 in the energized state and shuts off the second switch 22. In order to enter the state, a switch switching command is transmitted to the body ECU 15 (step S7). After completing the switching of the first switch 21 and the second switch 22 in step S7, the update processing unit 31c reads the update program 32a stored in the storage unit 32 and transmits it to the ECU 14 to be updated by the in-vehicle communication unit 34. Thus, an update process is performed (step S9), and the process ends.

When the stored power amount of the first battery 11 does not exceed the stored power amount of the second battery 12 in step S5 (S5: NO), the switching control processing unit 51a sets the first switch 21 to the shut-off state and sets the second switch A switch switching command is transmitted to the body ECU 15 in order to set 22 to an energized state (step S8). When the stored power amount of the first battery 11 does not exceed the threshold value in step S3 (S3: NO), the detection result acquisition unit 31a determines that the stored power amount of the second battery 12 acquired in step S2 is a predetermined threshold value. It is determined whether or not (step S6). When the stored power amount of the second battery 12 exceeds the threshold (S6: YES), the switching control processing unit 51a instructs the body ECU 15 to turn off the first switch 21 and turn on the second switch 22. The switch change command is transmitted (step S8). After completing the switching of the first switch 21 and the second switch 22 in step S8, the update processing unit 31c reads the update program 32a stored in the storage unit 32 and transmits it to the ECU 14 to be updated by the in-vehicle communication unit 34. Thus, an update process is performed (step S9), and the process ends.

Further, when the accumulated power amount of the second battery 12 does not exceed the threshold value in step S6 (S6: NO), that is, when both the accumulated power amounts of the first battery 11 and the second battery 12 do not exceed the threshold value, the processing unit 31. Finishes the process without performing the program update process of the ECU 14.

The in-vehicle update system 1a according to the present embodiment having the above-described configuration targets the vehicle 1 on which two batteries of the first battery 11 and the second battery 12 are mounted, and the ECU 14 that is the target of the update process is the first battery. In this configuration, power can be supplied from both the battery 11 and the second battery 12. The power supply path 3 from the first battery 11 and the second battery 12 to the ECU 14 is provided with a first switch 21 and a second switch 22 that can be switched between energization / cutoff. In addition, a first power amount detection unit 23 and a second power amount detection unit 24 that detect the stored power amount of the first battery 11 and the second battery 12 are provided, and the gateway 13 performs a program update process of the ECU 14. On / off switching control of the first switch 21 and the second switch 22 is performed based on the detected accumulated electric energy of the first battery 11 and the second battery 12. Thereby, for example, an update process corresponding to the stored power amount of each battery can be realized, such as not using a battery whose stored power amount is reduced in the update process, and it is possible to contribute to the suppression of battery power up of the vehicle 1.

Further, the gateway 13 gives priority to a battery with a large amount of stored power, and performs switching control of the first switch 21 and the second switch 22 so that the power supply path from the battery to the ECU 14 is energized. The gateway 13 may set the power supply path from the battery having the largest amount of stored power to the ECU 14 in an energized state. That is, the gateway 13 performs switching control of the first switch 21 and the second switch 22 so as to supply the electric power of the battery having a large amount of accumulated electric power among the first battery 11 and the second battery 12 to the ECU 14 that is an object of the update process. I do. Thereby, the power of the battery with a large amount of stored power can be supplied to the ECU 14 to be updated, and the update process can be performed, and the stored power amount of the battery with a small amount of stored power can be prevented from further decreasing.

In the present embodiment, the first battery 11 and the second battery 12 are mounted on the vehicle 1. However, the present invention is not limited to this, and three or more batteries are mounted on the vehicle 1. It is good as composition. In the case of this configuration, for example, the gateway 13 acquires the stored power amount of each battery, and connects each battery to the power supply path so as to supply power from the one battery having the largest stored power amount to the ECU 14 to be updated. It can be set as the structure which switches electricity supply / cut-off of switching parts, such as a switch to perform or a relay. Further, for example, the gateway 13 may be configured to select a predetermined number of batteries in descending order of the amount of stored power, and to put the power supply path from the selected battery to the ECU 14 to be updated into an energized state.

Further, the gateway 13 determines whether or not the stored power amount of the first battery 11 and the second battery 12 exceeds a predetermined threshold value. The gateway 13 selects a battery to be used for the update process from among those whose stored power amount exceeds the threshold value. If any of the batteries does not exceed the threshold, the gateway 13 stops the update process. Thereby, it is possible to prevent the stored power amount of the first battery 11 and the second battery 12 from being significantly reduced by the gateway 13 performing the update process.

Further, the in-vehicle update system 1a includes a body ECU 15 that performs control to switch energization / cutoff of the first switch 21 and the second switch 22 provided in the power supply path 3 from the first battery 11 and the second battery 12 to the ECU 14. This configuration is provided separately from the gateway 13 that performs the update process. The gateway 13 and the body ECU 15 can exchange data with each other via the communication line 2. The gateway 13 gives a switching command for the first switch 21 and the second switch 22 to the body ECU 15 when performing the update process, and the body ECU 15 performs switching control for the first switch 21 and the second switch 22 in accordance with the switching command. . As a result, the body ECU 15 can perform the switching control of the first switch 21 and the second switch 22 when the update process is not performed, and the gateway 13 is configured to perform the control of the first switch 21 and the second switch 22 other than the update process. There is no need to perform switching control.

However, the in-vehicle update system 1a may realize a device that performs an update process for in-vehicle devices and a device that performs switching control of the first switch 21 and the second switch 22 as one device. For example, the gateway 13 may be configured to output a control signal for switching energization / cutoff of the first switch 21 and the second switch 22. Further, for example, the body ECU 15 may be configured to update the program of the ECU 14.

In the present embodiment, the gateway 13 performs the update process of the ECU 14 and the like, but the present invention is not limited to this. Another device mounted on the vehicle 1 may be configured to perform the update process. The system configuration shown in FIG. 1 is an example, and the present invention is not limited to this. Further, although the body ECU 15 performs the switching control of the first switch 21 and the second switch 22, it is not limited to this. Another device mounted on the vehicle 1 may be configured to perform switching control of the first switch 21 and the second switch 22.

(Embodiment 2)
FIG. 5 is a block diagram showing a configuration of the in-vehicle update system 1a according to the second embodiment. In the in-vehicle update system 1a according to the second embodiment, the vehicle 1 includes a first power supply path 3a to which power is supplied from the first battery 11 and a second power supply path 3b to which power is supplied from the second battery. This is a separate configuration. The in-vehicle update system 1a includes a first switch 21 that connects the first battery 11 to the first power supply path 3a, and a second switch 22 that connects the second battery 12 to the second power supply path 3b. The body ECU 15 controls energization / cutoff of the first switch 21 and the second switch 22.

The gateway 13 and the body ECU 15 are connected to both the first power supply path 3 a and the second power supply path 3 b, and can receive power supply from either the first battery 11 or the second battery 12. On the other hand, the ECU 14 is connected only to the first power supply path 3 a, is not connected to the second power supply path 3 b, and operates by supplying power from the first battery 11.

In such a system configuration having power supply paths divided into two systems, in the in-vehicle update system 1a according to the present embodiment, the third switch that connects the first power supply path 3a and the second power supply path 3b. 123, and the body ECU 15 performs energization / cutoff switching control of the third switch 123. Accordingly, the body ECU 15 can supply the electric power of the second battery 12 to the ECU 14 by switching both the second switch 22 and the third switch 123 to the energized state.

When the gateway 13 according to the second embodiment reaches a predetermined update timing when the engine of the vehicle 1 is stopped, the gateway 13 stores the stored power amounts of the first battery 11 and the second battery 12 in the first power amount detection unit 23 and the first power amount detection unit 23. 2 Obtained from the electric energy detection unit 24. The gateway 13 compares the acquired stored power amount with a threshold value and compares the two acquired stored power amounts, and supplies power to the ECU 14 from either the first battery 11 or the second battery 12 during the update process. Determine whether to perform. Since these determination methods are the same as the determination method in the first embodiment, the details are omitted.

If the stored power amount of the first battery 11 is larger than the stored power amount of the second battery 12 and it is determined that the update process is performed using the first battery 11, the gateway 13 sets the first switch 21 in the energized state, A switching command to turn off the 2 switch 22 and the third switch 123 is given to the body ECU 15. When it is determined that the first battery 11 is used for the update process, and the in-vehicle device that is the object of the update process is connected to the second power supply path 3b, the gateway 13 switches the first switch 21 and the third switch 123. A switching command for setting the energized state and turning off the second switch may be given to the body ECU 15.

When it is determined that the stored power amount of the first battery 11 is less than the stored power amount of the second battery 12 and the update process is performed using the second battery 12, the gateway 13 sets the first switch 21 in the cutoff state, A switching command for energizing the second switch 22 and the third switch 123 is given to the body ECU 15. It is determined that the second battery 12 is used for the update process, the in-vehicle device that is the target of the update process is connected to the second power supply path 3b, and the in-vehicle device that is the target of the update process is connected to the first power supply path 3a. If not, the gateway 13 may give a switching command to the body ECU 15 to turn off the first switch 21 and the third switch 123 and turn on the second switch 22.

For this reason, the gateway 13 stores information for determining whether the in-vehicle device that can be updated is connected to the first power supply path 3a or the second power supply path 3b. This information may be stored as connection information in advance in the storage unit 32 of the gateway 13, for example, or connection information may be acquired from the server device 9, for example. The gateway 13 energizes the third switch 123 when the power supply path to which the in-vehicle device to be updated is connected is different from the power supply path to which the battery determined to be used for the update process based on the stored power amount is connected. A switching command for setting the state may be given to the body ECU 15.

In the present embodiment, the third switch 123 may be switched to the energized state when performing the update process, but is controlled by the body ECU 15 to maintain the shut-off state at times other than the update process. Therefore, the third switch 123 may be configured such that the gateway 13 directly performs energization / cutoff switching control. However, the third switch 123 may perform control to switch to the energized state other than the update process.

6 and 7 are flowcharts showing a procedure of processing performed by the gateway 13 according to the second embodiment. The process shown in this flowchart is performed in place of steps S7 and S8 in the process performed by the gateway 13 according to the first embodiment shown in FIG. For this reason, the gateway 13 according to the second embodiment performs the same processing for steps S1 to S6 and S9 in the flowchart of FIG. 4, performs the processing of steps S21 to S24 of FIG. 6 instead of step S7, and executes step S8. Instead, the processing of steps S31 to S34 in FIG. 7 is performed.

When it is determined that the update process is performed using the first battery 11 based on the stored power amount of the first battery 11 and the stored power amount of the second battery 12 (S4: NO or S5: YES in FIG. 4), The switching control processing unit 31b of the processing unit 31 of the gateway 13 according to Embodiment 2 reads the connection information stored in the storage unit 32 (step S21). The connection information describes whether the in-vehicle device mounted on the vehicle 1 is connected to the first power supply path 3a or the second power supply path 3b. Based on the read connection information, the switching control processing unit 31b determines whether or not an in-vehicle device (at least one in-vehicle device when there are a plurality of devices) to be updated is connected to the second power supply path 3b. Is determined (step S22). When the in-vehicle device to be updated is connected to the second power supply path 3b (S22: YES), the switching control processing unit 31b sets the first switch 21 in the energized state, sets the second switch 22 in the cut-off state, 3 In order to put the switch 123 in the energized state, a switch switching command is transmitted to the body ECU 15 (step S23), and the process proceeds to step S9 in FIG. On the other hand, when the in-vehicle device to be updated is not connected to the second power supply path 3b (S22: NO), the switching control processing unit 31b sets the first switch 21 in the energized state and turns the second switch 22 on. A switch switching command is transmitted to the body ECU 15 (step S24), and the process proceeds to step S9 in FIG.

Similarly, when it is determined that the update process is performed using the second battery 12 based on the stored power amount of the first battery 11 and the stored power amount of the second battery 12 (S5: NO or S6 in FIG. 4: YES), the switching control processing unit 31b reads the connection information stored in the storage unit 32 (step S31). Based on the read connection information, the switching control processing unit 31b determines whether or not the in-vehicle device to be updated is connected to the first power supply path 3a (Step S32). When the in-vehicle device to be updated is connected to the first power supply path 3a (S32: YES), the switching control processing unit 31b sets the first switch 21 to the cut-off state, the second switch 22 to the energized state, 3 In order to put the switch 123 in the energized state, a switch switching command is transmitted to the body ECU 15 (step S33), and the process proceeds to step S9 in FIG. On the other hand, when the in-vehicle device to be updated is not connected to the first power supply path 3a (S32: NO), the switching control processing unit 31b sets the first switch 21 to the cut-off state and switches the second switch 22 to the first power supply path 3a. In order to switch to the energized state and turn off the third switch 123, a switch switching command is transmitted to the body ECU 15 (step S34), and the process proceeds to step S9 in FIG.

In the vehicle-mounted update system 1a according to the second embodiment configured as described above, in the vehicle 1 in which the first battery 11 and the second battery 12 are mounted, the ECU 14 that is the target of the update process supplies power from the first battery 11. The gateway 13 that performs the receiving and updating process operates by receiving power supply from the first battery 11 and the second battery 12. A first switch 21 is provided in the first power supply path 3 a from the first battery 11 to the ECU 14 and the gateway 13, and a second switch 22 is provided in the second power supply path 3 b from the second battery 12 to the gateway 13. It has been. Furthermore, a third switch 123 is provided between the first power supply path 3a and the second power supply path 3b to switch between energization / cutoff of both paths. Accordingly, the first power supply path 3a and the second power supply path 3b can be connected by switching the third switch 123 to the energized state, and therefore the ECU 14 connected to the first power supply path 3a 2 The power of the battery 12 can be supplied.

Further, the gateway 13 according to the second embodiment sets the first switch 21 in the energized state when the accumulated power amount of the first battery 11 is larger than the accumulated power amount of the second battery 12, and the second switch 22 and the third switch The switch 123 is turned off to supply power from the first battery 11 to the ECU 14. On the other hand, when the stored power amount of the first battery 11 is smaller than the stored power amount of the second battery 12, the gateway 13 turns off the first switch 21, and the second switch 22 and the third switch 123. Is supplied to the ECU 14 from the second battery 12. Thereby, the power of the battery with a large amount of stored power can be supplied to the ECU 14 to be updated, and the update process can be performed, and the stored power amount of the battery with a small amount of stored power can be prevented from further decreasing.

Also, there is a possibility that the in-vehicle device that can be the target of the update process is connected to either the first power supply path 3a or the second power supply path 3b. Therefore, the gateway 13 stores in the storage unit 32, as connection information, which of the first power supply path 3a and the second power supply path 3b is connected to the in-vehicle device that can be the target of the update process. After determining which of the first battery 11 or the second battery 12 is to be used for the update process based on the accumulated power amount, the gateway 13 determines the power supply path to which the battery used for the update process is connected and the target of the update process. When the power supply path to which the in-vehicle device is connected is different, by switching the third switch 123 to the energized state, power is supplied from the battery to the in-vehicle device subject to the update process, and the update process can be performed. .

In the second embodiment, the first battery 11 and the second battery 12 are mounted on the vehicle 1 and two power supply paths, the first power supply path 3a and the second power supply path 3b, are provided. However, the present invention is not limited to this, and a configuration may be adopted in which three or more batteries are mounted and three or more power supply paths are provided. In this case, a plurality of third switches 123 for connecting / blocking between the plurality of power supply paths are provided, and the power supply path to which the battery used for the update process is connected and the in-vehicle device to be updated are connected. The power supply path may be connected by turning off any of the third switches 123. For example, when three batteries are mounted on the vehicle 1 and three power supply paths are provided, a first third switch 123 is provided between the first power supply path and the second power supply path, and the second power supply path and A second third switch 123 may be provided between the third power supply paths, and a third third switch 123 may be provided between the third power supply path and the first power supply path.

Moreover, since the other structure of the vehicle-mounted update system 1a which concerns on Embodiment 2 is the same as that of the vehicle-mounted update system 1a which concerns on Embodiment 1, the same code | symbol is attached | subjected to the same location and detailed description is abbreviate | omitted. To do.

DESCRIPTION OF SYMBOLS 1 Vehicle 1a Car-mounted update system 2 Communication line 3 Electric power supply path 3a 1st electric power supply path (electric power supply path)
3b Second power supply path (power supply path)
4a to 4c Signal line 9 Server device 11 First battery (battery)
12 Second battery (battery)
13 Gateway (in-vehicle update device)
14 ECU (on-vehicle equipment)
15 Body ECU (switching control device)
21 1st switch (switching part)
22 Second switch (switching unit)
23 1st electric energy detection part (detection part)
24 2nd electric energy detection part (detection part)
Reference Signs List 31 processing unit 31a detection result acquisition unit 31b switching control processing unit 31c update processing unit 32 storage unit 32a update program 33 detection result input unit 34 in-vehicle communication unit 35 outside communication unit 51 processing unit 51a switching control processing unit 52 storage unit 53 in vehicle Communication unit 54 Control signal output unit 123 Third switch (switching unit)

Claims

Power is supplied from one or more of the plurality of batteries mounted on the vehicle, and the vehicle-mounted device operates by executing the program stored in the storage unit, and is stored in the storage unit of the vehicle-mounted device An in-vehicle update system provided with an in-vehicle update device that performs processing to update the program,
A plurality of switching units that individually switch energization / cutoff of the power supply path from the plurality of batteries to the in-vehicle device;
A plurality of detection units for respectively detecting the stored power amounts of the plurality of batteries;
A switching control processing unit that controls energization / cutoff of the plurality of switching units based on a detection result of the detection unit when the in-vehicle updating device performs an update process of the in-vehicle device; and
The switching control processing unit switches the power supply path from the battery having the largest stored power amount to the in-vehicle device among the stored power amounts detected by the detecting unit to the energized state, except for the battery having the largest stored power amount A vehicle-mounted update system characterized in that the power supply path from the battery to the vehicle-mounted device is switched to a cutoff state.
The switch control processing unit preferentially switches a power supply path from the battery to the in-vehicle device to an energized state with priority given to a battery whose accumulated power amount detected by the detection unit exceeds a threshold value. The in-vehicle update system described in 1.
The in-vehicle update system according to claim 1 or 2, wherein the in-vehicle update device includes the switching control processing unit.
A switching control device having a communication unit that communicates with the in-vehicle update device and the switching control processing unit;
The in-vehicle update system according to claim 1 or 2, wherein the switching control device performs control by the switching control processing unit in accordance with a command received from the in-vehicle updating device by the communication unit.
The plurality of batteries are a first battery and a second battery,
The in-vehicle device is supplied with power from the first battery,
The in-vehicle update device is supplied with power from the first battery and the second battery,
A first power supply path from the first battery to the in-vehicle device and the in-vehicle update device; and a second power supply path from the second battery to the in-vehicle update device;
The plurality of switching units are
A first switching unit that switches between energization / cutoff provided on the first power supply path;
A second switching unit for switching energization / cutoff provided on the second power supply path;
A third switching unit that is provided between the first power supply path and the second power supply path and switches between energization / cutoff between the two paths;
The plurality of detection units are:
A first detector for detecting the amount of stored power in the first battery;
A second detector that detects the amount of power stored in the second battery;
The switching control processing unit, when the in-vehicle update device performs update processing of the in-vehicle device, based on detection results of the first detection unit and the second detection unit, the first switching unit, the second The in-vehicle update system according to any one of claims 1 to 4, wherein energization / cutoff of the switching unit and the third switching unit is controlled.
The switching control processing unit
When the stored power amount detected by the first detection unit is larger than the stored power amount detected by the second detection unit, the first switching unit is turned on, and the second switching unit and the second switching unit 3 Set the switching part to the shut-off state,
When the stored power amount detected by the first detection unit is smaller than the stored power amount detected by the second detection unit, the first switching unit is turned off, and the second switching unit and the second switching unit The in-vehicle update system according to claim 5, wherein the 3 switching unit is energized.
The plurality of batteries are a first battery and a second battery,
The in-vehicle device is supplied with power from either the first battery or the second battery,
The in-vehicle update device is supplied with power from the first battery and the second battery,
A first power supply path from the first battery to the in-vehicle update device; and a second power supply path from the second battery to the in-vehicle update device;
The plurality of switching units are
A first switching unit that switches between energization / cutoff provided on the first power supply path;
A second switching unit that switches between energization / cutoff provided on the second power supply path;
The plurality of switching units are
A third switching unit that is provided between the first power supply path and the second power supply path and switches between energization / cutoff between the two paths;
A first detector for detecting the amount of stored power in the first battery;
A second detector that detects the amount of power stored in the second battery;
A connection information storage unit for storing whether the in-vehicle device is connected to the first power supply path or the second power supply path;
The switching control processing unit is based on detection results of the first detection unit and the second detection unit and information stored in the connection information storage unit when the in-vehicle update device performs update processing of the in-vehicle device. The in-vehicle update system according to any one of claims 1 to 4, wherein energization / cutoff of the first switching unit, the second switching unit, and the third switching unit is controlled.
The switching control processing unit maintains a state of energization / cutoff of the plurality of switching units from the completion of the update process by the in-vehicle update device until the engine of the vehicle is started. The in-vehicle update system according to any one of claims 1 to 7.
The program stored in the storage unit of the in-vehicle device that operates by executing the program stored in the storage unit by supplying power from one or more of the plurality of batteries mounted on the vehicle is updated. An in-vehicle update device that performs processing,
A detection result acquisition unit that acquires detection results from a plurality of detection units that respectively detect the stored power amounts of the plurality of batteries;
A plurality of switching units that individually switch energization / cutoff of power supply paths from the plurality of batteries to the in-vehicle device based on the detection result acquired by the detection result acquisition unit when performing the update process of the in-vehicle device A switching control processing unit for performing processing related to the switching control of
The switching control processing unit switches the power supply path from the battery having the largest stored power amount to the in-vehicle device among the stored power amounts detected by the detecting unit to the energized state, except for the battery having the largest stored power amount An in-vehicle update device, wherein the power supply path from the battery to the in-vehicle device is switched to a cut-off state.