WO2018088505A1

WO2018088505A1 - In-vehicle update system, in-vehicle update apparatus, and gateway

Info

Publication number: WO2018088505A1
Application number: PCT/JP2017/040528
Authority: WO
Inventors: 卓大齋藤
Original assignee: 株式会社オートネットワーク技術研究所; 住友電装株式会社; 住友電気工業株式会社
Priority date: 2016-11-11
Filing date: 2017-11-10
Publication date: 2018-05-17
Also published as: JP2018076040A

Abstract

Provided are an in-vehicle update system, in-vehicle update apparatus, and gateway capable of preventing the update processing of an in-vehicle device from adversely affecting the operation of other devices. An in-vehicle update system according to an embodiment comprises an in-vehicle device which periodically transmits data to communication wires arranged in a vehicle, and an in-vehicle update apparatus which is connected to the communication wires and performs the update processing of a program stored in the storage unit of the in-vehicle device. This in-vehicle update system is equipped with a substituting unit that, if the in-vehicle update apparatus performs the update processing, substitutes the periodic data transmission by the in-vehicle device. This in-vehicle update system may be equipped with a data storage unit which stores data for substitute transmission, and the substituting unit may periodically transmit the data stored in the data storage unit. This in-vehicle update system may be equipped with a data acquisition unit which acquires the data periodically transmitted by the in-vehicle device, and the data storage unit may store the data acquired by the data acquisition unit.

Description

In-vehicle update system, in-vehicle update device, and gateway

The present invention relates to an in-vehicle update system for updating a program of an in-vehicle device mounted on a vehicle, and an in-vehicle update device and a gateway constituting the system.

Conventionally, in-vehicle devices such as a plurality of ECUs (Electronic Control Units) are mounted on a vehicle, and a plurality of ECUs are connected via a communication line such as a CAN (Controller Area Network) bus to transmit and receive information to and from each other. Is possible. Each ECU reads and executes a program stored in a storage unit such as a flash memory or an EEPROM (ElectricallyrasErasable Programmable Read Only Memory) by a processing device such as a CPU (Central Processing Unit), thereby performing various control such as vehicle control Is being processed. The program or data stored in the storage unit of the ECU needs to be updated to be rewritten with a new program or data, for example, when it becomes necessary to add a function, correct a defect, or upgrade a version. In this case, an update program or data is transmitted to the ECU to be updated by a communication line.

In Patent Document 1, when the program is updated after the driver gets off while the engine is running, the program update device monitors the vehicle state and transmits monitoring information to the center. A program update system for monitoring has been proposed.

JP 2011-70287 A

For example, when a plurality of in-vehicle devices mounted on the vehicle are performing normal operations, such as when the vehicle engine is operating or the ignition switch is on, a program for any in-vehicle device It is possible to update However, during the update process, the target in-vehicle device cannot perform normal operations. Some in-vehicle devices regularly transmit data such as sensor detection results at regular intervals. When such an in-vehicle device update process is performed, the in-vehicle device cannot transmit data, and periodic data transmission is interrupted. When other in-vehicle devices that receive and process data that is sent periodically do not receive this data, it is determined that an abnormality such as a failure has occurred in the in-vehicle device that sent the data. There is a possibility of performing processing such as shifting from the operation mode to the emergency operation mode. When one in-vehicle device shifts to the emergency operation mode, another in-vehicle device shifts to the emergency operation mode along with this, and there is a possibility that traveling of the vehicle cannot be continued.

The present invention has been made in view of such circumstances, and an object of the present invention is to provide an in-vehicle update capable of preventing an in-vehicle device update process from adversely affecting the operation of other in-vehicle devices. It is to provide a system, an in-vehicle update device, and a gateway.

An in-vehicle update system according to the present invention includes an in-vehicle device that periodically transmits data to a communication line arranged in a vehicle, and an update process of a program that is connected to the communication line and stored in a storage unit of the in-vehicle device. An in-vehicle update system comprising: an in-vehicle update device that performs an update process when the in-vehicle update device performs the update process.

The in-vehicle update system according to the present invention includes a data storage unit that stores data for alternative transmission, and the alternative unit periodically transmits data stored in the data storage unit. .

The in-vehicle update system according to the present invention includes a data acquisition unit that acquires data periodically transmitted by the in-vehicle device, and the data storage unit stores the data acquired by the data acquisition unit. And

The in-vehicle update system according to the present invention further includes a cycle storage unit that stores a cycle in which periodic data transmission by the in-vehicle device is to be performed, and the substitute unit transmits data at a cycle stored in the cycle storage unit. It is characterized by performing.

Further, the in-vehicle update system according to the present invention is characterized in that the in-vehicle update device includes the substitution unit, the data storage unit, the data acquisition unit, and the periodic storage unit.

In the in-vehicle update system according to the present invention, the in-vehicle update device is a gateway having a relay unit that relays data transmission / reception between communication lines by connecting a plurality of communication lines including the communication lines. And

The in-vehicle update system according to the present invention includes a relay unit that connects a plurality of communication lines including the communication line and relays data transmission / reception between the communication lines, the alternative unit, the data storage unit, and the data acquisition And a gateway having the period storage unit.

Further, the in-vehicle update system according to the present invention is characterized in that the gateway performs data transmission by the alternative unit to the plurality of communication lines.

Further, the in-vehicle update device according to the present invention is an in-vehicle update device that performs an update process of a program stored in a storage unit of an in-vehicle device that periodically transmits data to a communication line arranged in the vehicle, the update In the case of performing processing, an alternative unit for substituting regular data transmission by the in-vehicle device is provided.

In addition, the gateway according to the present invention provides a relay unit that relays data transmission / reception between a plurality of communication lines, and an in-vehicle device that updates the program stored in the storage unit of the in-vehicle device. And an alternative unit for substituting for periodic data transmission.

In the present invention, when performing an update process for an in-vehicle device that periodically transmits data, another device substitutes the periodic data transmission for the in-vehicle device. As a result, the in-vehicle device that is not the target of the update process can receive the alternative transmission data even when the update process of the in-vehicle device that is the update process is being performed. It is not determined that an abnormality has occurred in the device, and normal processing can be continued.
The apparatus that performs the alternative transmission includes various apparatuses such as an in-vehicle update apparatus that performs an update process, a gateway that relays data transmission / reception between communication lines, or an in-vehicle apparatus that is different from the in-vehicle apparatus that is an update process target. Can be adopted. Furthermore, it is good also as a structure which the apparatus which has the function of a vehicle-mounted update apparatus and a gateway performs alternative transmission. When the gateway substitutes for periodic data transmission, it is preferable to transmit data to a plurality of communication lines connected to the gateway.

In the present invention, the alternative transmission data is stored in the data storage unit, and the data read from the data storage unit is periodically transmitted to perform the alternative transmission. The data stored in the data storage unit can be data determined in advance at the design stage of the system.
Or it can also be set as the structure which acquires the data which the vehicle equipment of update process object transmits regularly, and memorize | stores it in a data storage part.
As a result, periodic data transmission by the in-vehicle device subject to update processing can be easily replaced.

In the present invention, the period of data transmission for each in-vehicle device is stored in the cycle storage unit for the in-vehicle device that performs periodic data transmission and can be the target of update processing. When performing alternative transmission along with the update process, the data transmission cycle of the in-vehicle device to be updated is read from the cycle storage unit, and data transmission is performed at the read cycle. Thereby, the periodic data transmission by the in-vehicle device subject to update processing can be easily replaced.

In the case of the present invention, when performing update processing of an in-vehicle device that periodically transmits data, the configuration is such that the periodic data transmission of the in-vehicle device is replaced by another device, so that the update processing is performed. Since the in-vehicle device that is not the target can receive the alternative transmission data, it is not determined that an abnormality has occurred in the in-vehicle device subject to the update process, and normal processing can be continued. Therefore, the present invention can prevent the update processing of the in-vehicle device from adversely affecting the operation of other in-vehicle devices.

It is a block diagram which shows the structure of the vehicle-mounted update system which concerns on this Embodiment. It is a schematic diagram for demonstrating the regular data transmission by ECU. It is a schematic diagram for demonstrating alternative transmission by a gateway. It is a block diagram which shows the structure of the gateway which concerns on this Embodiment. It is a flowchart which shows the procedure of the update process which the gateway concerning this Embodiment performs. It is a flowchart which shows the procedure of the update process which the gateway concerning this Embodiment performs. It is a schematic diagram for demonstrating the structure of the vehicle-mounted update system which concerns on the modification 1. FIG. It is a schematic diagram for demonstrating the structure of the vehicle-mounted update system which concerns on the modification 2. FIG. It is a schematic diagram for demonstrating the structure of the vehicle-mounted update system which concerns on the modification 3. FIG. It is a schematic diagram for demonstrating the structure of the vehicle-mounted update system which concerns on the modification 4.

FIG. 1 is a block diagram showing a configuration of an in-vehicle update system according to the present embodiment. The in-vehicle update system 100 according to the present embodiment includes a plurality of ECUs 11 to 14, a wireless communication device 18, and a gateway 20 mounted on the vehicle 1, and a server device 9 installed outside the vehicle 1. Yes. The two

ECUs

11 and 12 and the gateway 20 are connected via a common communication line 1a and can transmit and receive data to and from each other. The two

ECUs

13 and 14 and the gateway 20 are connected via a common communication line 1b and can transmit and receive data to and from each other. In addition, the wireless communication device 18 and the gateway 20 are connected via the communication line 1c and can transmit and receive data to and from each other.

The ECUs 11 to 14 are, for example, an ECU that controls the operation of the engine of the vehicle 1, an ECU that controls the locking / unlocking of the door, an ECU that controls the turning on / off of the light, an ECU that controls the operation of the airbag, and an ABS. Various ECUs such as an ECU that controls the operation of (Antilock Brake System) may be included. Each of the ECUs 11 to 14 periodically performs data transmission for notifying the other ECUs 11 to 14 of the detection result of the sensor that it has, for example, and performs control processing based on data received from the other ECUs 11 to 14. .

The gateway 20 performs a process of relaying data transmission / reception between the

communication lines

1a and 1b. When the gateway 20 receives data transmitted from the

ECU

11 or 12 via the communication line 1a, the gateway 20 transmits this data from the communication line 1b to the

ECUs

13 and 14. Further, when the gateway 20 receives data transmitted from the

ECU

13 or 14 via the communication line 1b, the gateway 20 transmits this data from the communication line 1a to the

ECUs

11 and 12. Thereby, the ECUs 11 to 14 can transmit and receive data to and from each other via the

communication lines

1a and 1b and the gateway 20.

The wireless communication device 18 has a function of performing communication via a wireless network such as a mobile phone communication network or a wireless LAN (Local Area Network), and communicates with the server apparatus 9 installed outside the vehicle 1. It can be carried out. The gateway 20 is connected to the wireless communication device 18 via the communication line 1 c, and can exchange data with the server device 9 outside the vehicle 1 via the wireless communication device 18. The gateway 20 can relay data transmission / reception between the ECUs 11 to 14 in the vehicle 1 and the server device 9 outside the vehicle 1 as necessary. In the present embodiment, the gateway 20 is configured to communicate with the server device 9 outside the vehicle 1 via the wireless communication device 18, but the present invention is not limited to this, and the gateway 20 has a wireless communication function. And it is good also as a structure which communicates with the server apparatus 9 directly.

The server device 9 is a device that is operated and managed by a manufacturer or sales company of the vehicle 1, for example, and is installed at a suitable location outside the vehicle 1. The server device 9 manages the version of a program executed by various in-vehicle devices mounted on the vehicle 1. When a program upgrade or the like occurs, the server device 9 transmits a program for updating to the vehicle 1 and performs a process of updating the program of the target in-vehicle device mounted on the vehicle 1.

In the in-vehicle update system 100 according to the present embodiment, the gateway 20 performs a process for updating the programs of the ECUs 11 to 14. The gateway 20 determines whether it is necessary to update the programs of the ECUs 11 to 14 to the server device 9 via the wireless communication device 18 when the engine of the vehicle 1 is operating (when the ignition switch is on). Make an inquiry. The gateway 20 makes an inquiry to the server device 9 at a predetermined timing, for example, every day, every week, every month, or whenever the ignition switch is turned on. In response to this inquiry, the server device 9 determines whether or not the program update of the ECUs 11 to 14 mounted on the inquiry-source vehicle 1 is necessary, and transmits the update program to the vehicle 1 when the update is necessary. To do. When the gateway 20 receives the update program from the server device 9, the gateway 20 performs the update process by transmitting the received update program to the ECUs 11 to 14 to be updated.

When the ECUs 11 to 14 to be updated receive the update program from the gateway 20, the update processing is performed by overwriting the program stored in its own storage unit with the received update program. At this time, the ECUs 11 to 14 to be updated cannot perform normal control processing or the like, and cannot perform regular data transmission. FIG. 2 is a schematic diagram for explaining periodic data transmission by the ECUs 11 to 14. In FIG. 2, the ECU 11 periodically transmits data, and the ECUs 12 to 14 receive this data and perform processing. The ECU 11 transmits data to the communication line 1a at a predetermined cycle of, for example, several microseconds to several seconds. Data transmitted from the ECU 11 to the communication line 1a is received by the ECU 12 and the gateway 20 connected to the same communication line 1a. The gateway 20 relays the data by transmitting the received data from the other communication line 1b. Data transmitted from the gateway 20 to the communication line 1b is received by the

ECUs

13 and 14 connected to the same communication line 1b.

Here, for example, when the ECU 11 is subject to the update process, the ECU 11 cannot periodically transmit data, and the data that should be periodically transmitted from the ECU 11 is not received by the other ECUs 12 to 14. . In such a case, the ECUs 12 to 14 may determine that an abnormality has occurred in the ECU 11 and stop processing.

Therefore, in the in-vehicle update system 100 according to the present embodiment, the gateway 20 periodically transmits data in place of the ECU 11. FIG. 3 is a schematic diagram for explaining alternative transmission by the gateway 20. The gateway 20 that has received the update program for performing the update process of the ECU 11 from the server device 9 receives data periodically transmitted by the ECU 11 before transmitting the update program to the ECU 11 to be updated, The received data is stored as substitute data. Thereafter, the gateway 20 starts the update process of the ECU 11 and starts transmitting the update program acquired from the server device 9 to the ECU 11.

Further, the gateway 20 performs alternative transmission of the ECU 11 in parallel with transmission of the update program. The gateway 20 transmits the stored substitute data from both the

communication lines

1a and 1b at a periodic data transmission cycle of the ECU 11. The alternative transmission data from the gateway 20 is received by the ECU 12 connected to the communication line 1a and the

ECUs

13 and 14 connected to the communication line 1b.

FIG. 4 is a block diagram showing a configuration of the gateway 20 according to the present embodiment. The gateway 20 according to the present embodiment includes a processing unit 21, a storage unit 22, three in-vehicle communication units 23a to 23c, and the like. The processing unit 21 is configured by using an arithmetic processing device such as a CPU (Central Processing Unit) or an MPU (Micro-Processing Unit), for example, and a program (not shown) stored in the storage unit 22 or a ROM (Read Only Memory). Various operations related to the relay process and the update process are performed by reading and executing (omitted). For example, the processing unit 21 relays data transmission / reception between the

communication lines

1a and 1b arranged in the vehicle 1, downloads a program for updating the ECUs 11 to 14 from the server device 9 outside the vehicle 1, and The downloaded update program is transmitted to the ECUs 11 to 14 to perform processing for updating the program. Further, in the present embodiment, the processing unit 21 performs a process of substituting the periodic data transmission of the ECUs 11 to 14 to be updated when performing the update process.

The storage unit 22 is configured by using a non-volatile memory element such as a flash memory or an EEPROM (Electrically Erasable Programmable Read Only Memory). The storage unit 22 stores a program executed by the processing unit 21 and data necessary for executing the program. In the present embodiment, the storage unit 22 stores an update program 22a, replacement data 22b, period information 22c, and the like. The storage unit 22 may store data generated in the course of processing by the processing unit 21.

The update program 22a is a program acquired by the gateway 20 from the server device 9, and is a program used for update processing of the ECUs 11-14. The gateway 20 temporarily stores the update program acquired from the server device 9 in the storage unit 22, reads the update program 22a from the storage unit 22 and transmits it to the ECUs 11 to 14 to be updated when performing update processing. .

The replacement data 22b is data that is periodically transmitted instead of the ECUs 11 to 14 to be updated when the gateway 20 performs the updating process of the ECUs 11 to 14. Before starting the update process of the ECUs 11 to 14, the gateway 20 receives data periodically transmitted by the ECUs 11 to 14 to be updated, and stores the received data in the storage unit 22 as substitute data 22b.

The cycle information 22c stores the data transmission cycle for the ECUs 11 to 14 that can be updated. The gateway 20 acquires the data transmission cycle of the ECUs 11 to 14 to be updated from the cycle information 22c, and transmits the substitute data 22b in this cycle.

The in-vehicle communication units 23a to 23b are respectively connected to the communication lines 1a to 1c constituting the in-vehicle network provided in the vehicle 1, and transmit / receive data according to a communication protocol such as CAN (Controller Area Network). The in-vehicle communication units 23a to 23b convert the data provided from the processing unit 21 into electrical signals and output the signals to the communication lines 1a to 1c to transmit information, and also sample the potentials of the communication lines 1a to 1c. Data is received by acquisition, and the received data is given to the processing unit 21. As a result, the gateway 20 can transmit and receive data to and from the ECUs 11 to 14 and the wireless communication device 18 mounted on the vehicle 1. In this embodiment, the in-vehicle communication unit 23a transmits and receives data to and from the

ECUs

11 and 12 via the communication line 1a, and the in-vehicle communication unit 23b transmits and receives data to and from the

ECUs

13 and 14 via the communication line 1b. The in-vehicle communication unit 23c performs data transmission / reception with the wireless communication device 18 via the communication line 1c.

In addition, the processing unit 21 executes a program stored in the storage unit 22 or the ROM, so that the relay processing unit 21a, the update processing unit 21b, the alternative data acquisition processing unit 21c, the data transmission alternative processing unit 21d, and the like. Is realized as a software-like functional block. The relay processing unit 21a performs processing for relaying data between the

communication lines

1a and 1b by transmitting data received by one of the in-

vehicle communication units

23a and 23b from the other. Further, the relay processing unit 21a transmits the data received by the in-

vehicle communication units

23a and 23b from the in-vehicle communication unit 23c to the wireless communication device 18, and the data received by the in-vehicle communication unit 23c from the in-

vehicle communication units

23a and 23b. By transmitting, communication inside and outside the vehicle 1 can be relayed.

The update processing unit 21b performs processing for updating a program stored in a storage unit of various in-vehicle devices (ECUs 11 to 14 in the present embodiment) mounted on the vehicle 1. The update processing unit 21b communicates with the server device 9 outside the vehicle via the wireless communication device 18 while the engine of the vehicle 1 is operating, and updates the program for all on-vehicle devices that may be updated. Performs processing to inquire about existence. When the response that the update process needs to be performed is given from the server device 9, the update processing unit 21 b acquires the update program necessary for the update process from the server device 9 and stores it in the storage unit 22. After that, the update processing unit 21b performs the update process by reading the update program 22a stored in the storage unit 22 and transmitting it to the in-vehicle device that is the target of the update process when the predetermined timing for performing the update process is reached. .

The replacement data acquisition processing unit 21c is data that is periodically transmitted by the ECUs 11 to 14 to be updated after the update processing unit 21b acquires the update program 22a from the server device 9 and stores it in the storage unit 22. Process to get. For example, when the ECU 11 is the target of the update process, the substitute data acquisition processing unit 21c monitors data transmitted from the ECU 11 to the communication line 1a by the in-vehicle communication unit 23a, and receives this data when receiving desired data. The data is stored in the storage unit 22 as substitute data 22b. The received data is transmitted from another in-vehicle communication unit 23b by the relay processing unit 21a, and data is relayed.

In the present embodiment, the update processing unit 21b starts the update process after the replacement data acquisition processing unit 21c completes the acquisition of the replacement data 22b. At this time, the update processing unit 21b notifies the update target ECUs 11 to 14 that update processing is performed, for example, before the update target ECUs 11 to 14 perform the next periodic data transmission. The ECUs 11 to 14 to be updated that have received this notification stop their normal processing and wait for transmission of the update program from the gateway 20. Thereafter, the update processing unit 21b of the gateway 20 divides the update program 22a into predetermined data sizes and sequentially transmits them to the update target ECUs 11 to 14, and the update target ECUs 11 to 14 that have received them are stored in their storage units. The program is updated by overwriting the update program 22a.

The data transmission substitution processing unit 21d periodically transmits data in place of the ECUs 11 to 14 to be updated. The data transmission substitution processing unit 21d acquires a periodic data transmission cycle by the ECUs 11 to 14 to be updated based on the cycle information 22c stored in the storage unit 22. The data transmission substitution processing unit 21d is stored in the storage unit 22 at the transmission cycle acquired from the cycle information 22c, starting from the timing at which the substitution data acquisition processing unit 21c receives data from the ECUs 11 to 14 to be updated. The substitute data 22b is transmitted from the in-

vehicle communication units

23a and 23b. The data transmission substitution processing unit 21d completes the updating of the programs of the ECUs 11 to 14 to be updated, and when the restart of the ECUs 11 to 14 is completed and the periodic data transmission can be resumed. , Stop alternate transmission.

5 and 6 are flowcharts showing the procedure of the update process performed by the gateway 20 according to this embodiment. The update processing unit 21b of the processing unit 21 of the gateway 20 according to the present embodiment determines whether or not the timing for inquiring the server device 9 about whether or not to update the program has been reached during the engine operation of the vehicle 1 ( Step S1). When the inquiry timing has not been reached (S1: NO), the update processing unit 21b waits until the inquiry timing is reached. When the inquiry timing is reached (S1: YES), the update processing unit 21b needs to update the programs of the ECUs 11 to 14 mounted on the vehicle 1 to the server device 9 via the wireless communication device 18. An inquiry about whether or not is made (step S2). The update processing unit 21b determines whether or not it is necessary to update the programs of the ECUs 11 to 14 based on the response from the server device 9 transmitted in response to this inquiry (step S3). When the update is not necessary (S3: NO), the update processing unit 21b ends the process.

When the update is necessary (S3: YES), the update processing unit 21b communicates with the server device 9 via the wireless communication device 18, and an update program necessary for performing update processing from the server device 9 is obtained. Obtain (step S4). The update processing unit 21b determines whether or not acquisition of all necessary update programs has been completed (step S5). When the acquisition has not been completed (S5: NO), the update processing unit 21b returns the process to step S4 and continues to acquire the update program. When acquisition is completed (S5: YES), the update process part 21b advances a process to step S6.

After completing the acquisition of the update program, the replacement data acquisition processing unit 21c of the processing unit 21 receives the data periodically transmitted by the ECUs 11 to 14 to be updated by the in-

vehicle communication units

23a and 23b, thereby replacing the replacement data. Is stored in the storage unit 22 (step S6). The data transmission alternative processing unit 21d of the processing unit 21 reads the cycle information 22c stored in the storage unit 22 (step S7), and acquires the periodic data transmission cycle of the ECUs 11 to 14 to be updated. The data transmission substitution processing unit 21d starts substitution transmission for transmitting the substitution data 22b stored in the storage unit 22 in step S6 at a cycle based on the cycle information 22c read in step S7 (step S8).

Thereafter, the update processing unit 21b of the processing unit 21 transmits the update program 22a stored in the storage unit 22 to the ECUs 11 to 14 to be updated by the in-

vehicle communication unit

23a or 23b (step S9). The update processing unit 21b determines whether or not the transmission of the update program 22a has been completed and the update of the programs of the ECUs 11 to 14 to be updated has been completed (step S10). If the update has not been completed (S10: NO), the update processing unit 21b returns the process to step S9, and continues to transmit the update program 22a. When the update is completed (S10: YES), the data transmission alternative processing unit 21d of the processing unit 21 stops the alternative transmission (step S11) and ends the process.

In the in-vehicle update system 100 according to the present embodiment having the above-described configuration, the ECUs 11 to 14 mounted on the vehicle 1 perform normal operations such as when the engine of the vehicle 1 is operating or the ignition switch is on. At this time, update processing of the programs stored in the storage units of these ECUs 11 to 14 is performed. When performing update processing of the ECUs 11 to 14 that perform periodic data transmission, the gateway 20 substitutes periodic data transmission by the ECUs 11 to 14 to be updated. At this time, the gateway 20 transmits the substitute data to all the

communication lines

1a and 1b to which the other ECUs 11 to 14 that require data periodically transmitted by the ECUs 11 to 14 to be updated are connected. Do. As a result, even when the update process of the ECUs 11 to 14 to be updated is performed and the periodic data transmission is not performed, the ECUs 11 to 14 that are not the target of the update process receive the data that the gateway 20 transmits alternatively. can do. Therefore, it is possible to prevent the ECUs 11 to 14 that are not the target of the update process from determining that an abnormality has occurred in the ECUs 11 to 14 that are performing the update process, and continue normal processing by the ECUs 11 to 14 that are not the target of the update process. Can be done.

Further, before starting the update process, the gateway 20 acquires data periodically transmitted by the ECUs 11 to 14 to be updated and stores the data in the storage unit 22 as substitute data 22b. The gateway 20 performs substitute transmission by reading the substitute data 22b stored in the storage unit 22 and periodically sending it. As a result, the gateway 20 can easily and reliably replace the periodic data transmission of the ECUs 11 to 14 to be updated.

Further, the gateway 20 periodically transmits data and stores the periodic data transmission cycle in the storage unit 22 as the cycle information 22c for the ECUs 11 to 14 that can be the target of the update process. When performing alternative transmission along with the update process, the gateway 20 acquires the data transmission cycle of the ECUs 11 to 14 to be updated from the cycle information 22c stored in the storage unit 22, and stores it in the storage unit 22 at this cycle. The stored substitute data 22b is transmitted. As a result, the gateway 20 can easily and reliably replace the periodic data transmission of the ECUs 11 to 14 to be updated.

In the present embodiment, the gateway 20 is configured to acquire data periodically transmitted by the ECUs 11 to 14 to be updated when performing update processing and store the data in the storage unit 22 as substitute data 22b. It is not limited to. For example, for each ECU 11 to 14 that can be updated, data used for alternative transmission may be prepared in advance and stored in the storage unit 22 as alternative data 22b. The gateway 20 may perform a process of changing the substitute data 22b stored in the storage unit 22 each time the substitute transmission is performed.

Further, although the gateway 20 is configured to determine the period for performing alternative transmission based on the period information 22c stored in advance in the storage unit 22, the present invention is not limited to this. For example, the gateway 20 receives the data periodically transmitted by the ECUs 11 to 14 to be updated a plurality of times before performing the update process, and determines the period for performing the alternative transmission by calculating the period of receiving these data. It is good also as a structure.

Further, although the gateway 20 is configured to perform the update process of the programs of the ECUs 11 to 14 and the alternative transmission process during the update together with the relay process of communication, the present invention is not limited to this. Various configurations may be adopted as to which apparatus mounted on the vehicle 1 performs the program update process and the alternative transmission process being updated. Although some modifications are shown below, the configuration of the in-vehicle update system 100 is not limited to these modifications.

(Modification 1)
FIG. 7 is a schematic diagram for explaining the configuration of the in-vehicle update system 100 according to the first modification. The in-vehicle update system 100 according to the first modification includes an in-vehicle update device 130 that performs update processing instead of the gateway 20 performing update processing of the programs of the ECUs 11 to 14. The in-vehicle update device 130 is connected to the communication line 1a, for example, acquires an update program from the server device 9 outside the vehicle 1 via the gateway 20 and the wireless communication device 18, and performs update processing of the program of the ECU 11. . Moreover, the vehicle-mounted update apparatus 130 which concerns on the modification 1 performs alternative transmission of the data which ECU11 of update object transmits regularly while performing the update process. The data transmitted by the in-vehicle update device 130 as a substitute is received by the ECU 12 connected to the communication line 1a and also received by the gateway 20, transmitted to the communication line 1b via the gateway 20, and connected to the communication line 1b. Received by the

ECUs

13 and 14.

(Modification 2)
FIG. 8 is a schematic diagram for explaining a configuration of the in-vehicle update system 100 according to the second modification. Similar to the in-vehicle update system 100 according to the first modification, the in-vehicle update system 100 according to the second modification includes an in-vehicle update device 130 that performs an update process of the ECUs 11 to 14. However, the in-vehicle updating apparatus 130 according to the modification 2 does not perform alternative transmission of data periodically transmitted by the ECUs 11 to 14 to be updated, and the gateway 20 performs alternative transmission. As described above, the update process of the ECUs 11 to 14 and the alternative transmission process during the update process may be performed by different devices. In the case of such a configuration, for example, the in-vehicle update device 130 can give an instruction to perform alternative transmission to the gateway 20 before starting the update process, and the gateway 20 can perform the alternative transmission based on this instruction.

(Modification 3)
FIG. 9 is a schematic diagram for explaining the configuration of the in-vehicle update system 100 according to the third modification. Similar to the in-vehicle update system 100 according to the first and second modifications, the in-vehicle update system 100 according to the third modification includes an in-vehicle update device 130 that performs an update process of the ECUs 11 to 14. However, the in-vehicle update device 130 and the gateway 20 according to the modification 3 do not perform alternative transmission of data periodically transmitted by the ECUs 11 to 14 to be updated, and the ECU 12 that is not the target of update processing performs the alternative transmission. In this case, the ECU 12 that performs the alternative transmission is an ECU that does not perform the program update process, or when the ECU 12 performs the update process, another

ECU

11, 13, or 14 performs the alternative transmission. Can do.

(Modification 4)
FIG. 10 is a schematic diagram for explaining the configuration of the in-vehicle update system 100 according to the modification 4. Similar to the in-vehicle update system 100 according to the first to third modifications, the in-vehicle update system 100 according to the fourth modification includes an in-vehicle update device 130 that performs an update process of the ECUs 11 to 14. Further, in the in-vehicle update system 100 according to the modification 4, when the in-vehicle update device 130 performs the update process of the ECUs 11 to 14, the alternative transmission device 140 that performs the alternative transmission of data periodically transmitted by the ECUs 11 to 14 to be updated. It has. The alternative transmission device 140 is connected to the communication line 1b, for example, and performs alternative transmission in response to an instruction from the in-vehicle update device 130.

DESCRIPTION OF SYMBOLS 1 Vehicle 1a-1c Communication line 9 Server apparatus 11-14 ECU (vehicle equipment)
18 Wireless communication device 20 Gateway (in-vehicle update device)
21 processing section 21a relay processing section (relay section)
21b Update processing unit 21c Replacement data acquisition processing unit (data acquisition unit)
21d Data transmission substitution processing part (substitution part)
22 storage unit (data storage unit, cycle storage unit)

22a Update program

22b Replacement data

22c Period information 23a to 23c In-vehicle communication unit 100 In-vehicle update system 130 In-vehicle update device 140 Alternative transmission device

Claims

In-vehicle update comprising: an in-vehicle device that periodically transmits data to a communication line arranged in a vehicle; and an in-vehicle update device that is connected to the communication line and performs an update process of a program stored in a storage unit of the in-vehicle device A system,
An in-vehicle update system comprising an alternative unit that substitutes for periodic data transmission by the in-vehicle device when the in-vehicle update device performs the update process.
A data storage unit for storing data for alternative transmission;
The in-vehicle update system according to claim 1, wherein the substitute unit periodically transmits data stored in the data storage unit.
A data acquisition unit for acquiring data that the in-vehicle device periodically transmits;
The in-vehicle update system according to claim 2, wherein the data storage unit stores data acquired by the data acquisition unit.
A cycle storage unit that stores a cycle for performing periodic data transmission by the in-vehicle device,
The in-vehicle update system according to claim 3, wherein the substitution unit performs data transmission at a cycle stored in the cycle storage unit.
The in-vehicle update system according to claim 4, wherein the in-vehicle update device includes the substitution unit, the data storage unit, the data acquisition unit, and the periodic storage unit.
The in-vehicle update system according to claim 5, wherein the in-vehicle update device is a gateway having a relay unit to which a plurality of communication lines including the communication line are connected to relay data transmission / reception between the communication lines. .
A plurality of communication lines including the communication line are connected, and a relay unit that relays data transmission / reception between the communication lines,
The in-vehicle update system according to claim 4, further comprising a gateway having the substitution unit, the data storage unit, the data acquisition unit, and the cycle storage unit.
The in-vehicle update system according to claim 6 or 7, wherein the gateway performs data transmission by the alternative unit with respect to the plurality of communication lines.
An in-vehicle update device that performs update processing of a program stored in a storage unit of an in-vehicle device that periodically transmits data to a communication line arranged in a vehicle,
An in-vehicle updating apparatus comprising an alternative unit that substitutes for periodic data transmission by the in-vehicle device when performing the updating process.
A relay unit for relaying data transmission / reception between a plurality of communication lines;
A gateway comprising: an alternative unit that replaces periodic data transmission by the in-vehicle device when the in-vehicle update device performs an update process of a program stored in a storage unit of the in-vehicle device.