WO2019116896A1 - 車載更新装置、プログラム及び、プログラム又はデータの更新方法 - Google Patents

車載更新装置、プログラム及び、プログラム又はデータの更新方法 Download PDF

Info

Publication number
WO2019116896A1
WO2019116896A1 PCT/JP2018/043818 JP2018043818W WO2019116896A1 WO 2019116896 A1 WO2019116896 A1 WO 2019116896A1 JP 2018043818 W JP2018043818 W JP 2018043818W WO 2019116896 A1 WO2019116896 A1 WO 2019116896A1
Authority
WO
WIPO (PCT)
Prior art keywords
program
data
vehicle
unit
update
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/JP2018/043818
Other languages
English (en)
French (fr)
Japanese (ja)
Inventor
太郎 板津
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Sumitomo Wiring Systems Ltd
AutoNetworks Technologies Ltd
Sumitomo Electric Industries Ltd
Original Assignee
Sumitomo Wiring Systems Ltd
AutoNetworks Technologies Ltd
Sumitomo Electric Industries Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sumitomo Wiring Systems Ltd, AutoNetworks Technologies Ltd, Sumitomo Electric Industries Ltd filed Critical Sumitomo Wiring Systems Ltd
Priority to US16/771,122 priority Critical patent/US20210255845A1/en
Priority to DE112018006323.2T priority patent/DE112018006323T5/de
Priority to CN201880075452.2A priority patent/CN111656317A/zh
Publication of WO2019116896A1 publication Critical patent/WO2019116896A1/ja
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates

Definitions

  • the present disclosure relates to an onboard update device, a program, and a method of updating a program or data.
  • This application claims the priority based on Japanese Patent Application No. 2017-237191 filed on Dec. 11, 2017, and incorporates all the contents described in the Japanese application.
  • the vehicle is equipped with an ECU (Electronic Control Unit) for controlling in-vehicle devices such as a power train system such as engine control and a body system such as air conditioner control.
  • the ECU includes an arithmetic processing unit such as an MPU, a rewritable non-volatile storage unit such as a RAM, and a communication unit for communicating with another ECU, and reads and executes a control program stored in the storage unit. , To control in-vehicle devices.
  • the vehicle is equipped with a communication device having a wireless communication function, and communicates with a program providing device connected to a network outside the vehicle via the communication device, and the control program of the ECU from the program providing device Can be downloaded (received), and the control program of the ECU can be updated.
  • the updating device (relaying device) described in Patent Document 1 adds a new control program (new data) for updating and a control program stored in the current ECU. It is assumed that the control program (current data) of the same version is downloaded.
  • An on-vehicle updating device is an on-vehicle updating device that performs processing for updating a program or data of an on-vehicle ECU, and a receiving unit that receives update information related to updating of the program or data;
  • An acquisition unit for acquiring the program or data from the provision device for providing the program or data based on the update information received by the reception unit, and storing the current program or data acquired from the in-vehicle ECU in a predetermined storage area
  • a transmitter configured to transmit the program or data acquired by the acquisition unit to the in-vehicle ECU after the storage unit stores the current program or data.
  • FIG. 1 is a schematic view showing a configuration of an on-vehicle update system according to a first embodiment.
  • FIG. 1 is a block diagram showing a configuration of an on-vehicle update device and the like according to a first embodiment.
  • 5 is a flowchart showing processing of a control unit according to the first embodiment.
  • 7 is a flowchart showing processing of a control unit according to the second embodiment.
  • FIG. 7 is a block diagram showing the configuration of an on-vehicle update device and the like according to a third embodiment. It is a flowchart which shows the process of the control part which concerns on Embodiment 3.
  • FIG. 1 is a schematic view showing a configuration of an on-vehicle update system according to a first embodiment.
  • FIG. 1 is a block diagram showing a configuration of an on-vehicle update device and the like according to a first embodiment.
  • 5 is a flowchart showing processing of a control unit according to the first embodiment.
  • 7 is
  • the update device of Patent Document 1 has a problem that communication traffic increases and communication cost and processing time increase because new data and current data are received from the program providing device.
  • An object of the present disclosure is to provide an on-vehicle update device and the like capable of suppressing communication traffic and efficiently updating a program of the on-vehicle ECU.
  • An on-vehicle updating device is a vehicle-mounted updating device that performs processing for updating a program or data of an on-vehicle ECU, and a receiving unit that receives update information related to updating of the program or data
  • An acquiring unit for acquiring the program or data from a providing apparatus for providing the program or data based on the update information received by the receiving unit; and a predetermined storage of the current program or data acquired from the in-vehicle ECU
  • a transmitting unit that transmits the program or data acquired by the acquisition unit to the on-vehicle ECU after the storage unit stores the current program or data.
  • the on-vehicle update device transmits the acquired program or data to the on-vehicle ECU after storing the current program or data of the on-vehicle ECU to be updated in a predetermined storage area. Therefore, it is not necessary to obtain the current program or data of the on-vehicle ECU to be updated from the providing device, and the communication cost and the processing time can be reduced.
  • a load detection unit for detecting the load of the in-vehicle ECU or the load of the in-vehicle network for communicating with the in-vehicle ECU, and the storage unit detects the load detected by the load detection unit is equal to or less than a predetermined value.
  • the present program or data is stored in the storage area.
  • the load detected by the load detection unit when the load detected by the load detection unit is equal to or less than a predetermined value, the current program or data is stored in the storage area. Therefore, when the load is high, the load for storing the current program or data can be further suppressed, and the processing for storing the current program or data in the storage area can be reliably performed.
  • the storage unit stores the current program or data.
  • the storage unit resumes the storage of the current program or data when the load is not higher than the predetermined value after the suspension.
  • the process of storing the current program or data is interrupted.
  • the load can be reduced.
  • the process of storing the current program or data is resumed, so the process of storing the current program or data in the storage area is reliably completed. It can be done.
  • the transmitting unit includes a deleting unit that deletes the current program or data stored in the storage area after transmitting the program or data to the on-vehicle ECU.
  • the current program or data stored in the storage area is deleted, so that the possibility of the program or data leaking can be reduced.
  • the storage area is preferably provided in a relay apparatus for communicating with the providing apparatus.
  • the storage area is provided in the relay apparatus for communicating with the providing apparatus, the storage area of the relay apparatus can be effectively used.
  • the storage area is provided in a second on-vehicle ECU having a storage area for backup.
  • the storage area is provided in the second on-vehicle ECU having the storage area for backup, the storage area for backup of the second on-vehicle ECU can be effectively used.
  • a program receives, from a providing apparatus, a computer that receives update information related to program or data update and provides the program or data based on the received update information. And stores the current program or data acquired from the on-board ECU to be updated in a predetermined storage area, stores the current program or data, and transmits the acquired program or data to the on-board ECU Run the process.
  • the computer can function as the on-vehicle update device according to one aspect of the present disclosure.
  • a method of updating a program or data includes the steps of: providing the program or data from the providing device that receives the update information related to the update of the program or data; Alternatively, after acquiring data, storing the current program or data acquired from the on-vehicle ECU to be updated in a predetermined storage area and storing the current program or data, the acquired program or data is stored in the on-vehicle ECU Send.
  • the acquired program or data is transmitted to the in-vehicle ECU. Therefore, it is not necessary to acquire the current program or data of the on-vehicle ECU to be updated from the provision device, and it is possible to provide a program or data update method that can reduce communication cost and processing time.
  • FIG. 1 is a schematic view showing the configuration of the in-vehicle update system S according to the first embodiment.
  • the on-vehicle update system S includes the external communication device 1 and the on-vehicle update device 2 mounted on the vehicle C, and the program or data acquired from the program providing device S1 connected via the external network N is mounted on the vehicle C To the first on-board ECU 3 (Electronic Control Unit).
  • ECU 3 Electronic Control Unit
  • the program providing device S1 is, for example, a computer such as a server connected to an outside network N such as the Internet or a public network.
  • the program providing device S1 stores a program or data for controlling the first on-vehicle ECU 3 created by a manufacturer or the like of the first on-vehicle ECU 3.
  • the program or data is transmitted to the vehicle C as described later, and is used to update the program or data of the first on-vehicle ECU 3 mounted on the vehicle C.
  • the vehicle C is equipped with the external communication device 1, the on-vehicle update device 2, and a plurality of first on-vehicle ECUs 3 for controlling various on-vehicle devices.
  • the out-of-vehicle communication device 1, the in-vehicle update device 2, and the first in-vehicle ECU 3 are communicably connected by the in-vehicle LAN 4.
  • FIG. 2 is a block diagram showing the configuration of the on-vehicle update device 2 and the like according to the first embodiment.
  • the on-vehicle update device 2 includes a control unit 20, a storage unit 21, and an in-vehicle communication unit 23.
  • the on-vehicle updating device 2 can acquire the program or data received from the program providing device S1 by wireless communication via the in-vehicle communication device 1 via the in-vehicle LAN 4 and transmit the program or data to the predetermined first on-vehicle ECU 3 It is configured.
  • the in-vehicle updating device 2 is, for example, a central gateway (CGW / relay) that controls segments of a system of a plurality of first in-vehicle ECUs 3 such as a control system, a safety system, and a body system.
  • the on-vehicle update device 2 may be a body ECU that controls the entire vehicle C.
  • the control unit 20 is configured by a CPU (Central Processing Unit) or an MPU (Micro Processing Unit) or the like, and reads and executes control programs and data stored in advance in the storage unit 21 to execute various control processes and Arithmetic processing and the like are performed.
  • the control unit 20 functions as a load detection unit or a deletion unit by executing the control program.
  • the control unit 20 functions as a reception unit and an acquisition unit via the outside-vehicle communication device 1 or the in-vehicle communication unit 23.
  • the control unit 20 functions as a transmission unit through the in-vehicle communication unit 23.
  • the storage unit 21 is configured of a volatile memory element such as RAM (Random Access Memory) or a non-volatile memory element such as ROM (Read Only Memory), EEPROM (Electrically Erasable Programmable ROM), or flash memory.
  • RAM Random Access Memory
  • ROM Read Only Memory
  • EEPROM Electrical Erasable Programmable ROM
  • flash memory flash memory.
  • a control program and data to be referred to at the time of processing are stored in advance.
  • the control program stored in the storage unit 21 may store the control program read from the recording medium 22 readable by the on-vehicle updating device 2.
  • the control program may be downloaded from an external computer (not shown) connected to a communication network (not shown) and stored in the storage unit 21.
  • the storage unit 21 stores the acquired program or data.
  • the in-vehicle communication unit 23 is an input / output interface using a communication protocol such as CAN (Control Area Network), LIN (Local Interconnect Network) or Ethernet (registered trademark), and the outside-vehicle communication device 1 connected to the in-vehicle LAN 4 It mutually communicates with in-vehicle devices such as the first in-vehicle ECU 3 and the like.
  • CAN Controller Area Network
  • LIN Local Interconnect Network
  • Ethernet registered trademark
  • the control unit 20 and the storage unit 21 may be distributed to a plurality of in-vehicle devices such as a CGW and a body ECU, and may function by communicating with each other and cooperating or cooperating.
  • the outside-of-vehicle communication device 1 includes an outside-of-vehicle communication unit 11 and an in-vehicle communication unit 12.
  • the external communication unit 11 is an input / output interface for wireless communication using a mobile communication protocol such as 3G, LTE, 4G or WiFi, and provides a program via an external network such as a public network or the Internet. It communicates with the device S1.
  • the in-vehicle communication unit 12 has the same function as the in-vehicle communication unit 23 of the in-vehicle update device 2, and mutually communicates with the in-vehicle update device 2 and the like via the in-vehicle LAN 4.
  • the out-vehicle communication device 1 is a separate device from the in-vehicle update device 2 and these devices are communicably connected by the in-vehicle LAN 4, but the present invention is not limited thereto.
  • the out-of-vehicle communication device 1 may be built in the in-vehicle update device 2 as a component of the in-vehicle update device 2.
  • the first on-vehicle ECU 3 includes a storage unit 31, a control unit 30, and an in-vehicle communication unit 32.
  • the storage unit 31 is configured of a volatile memory element such as RAM (Random Access Memory) or a non-volatile memory element such as ROM (Read Only Memory), EEPROM (Electrically Erasable Programmable ROM), or flash memory.
  • RAM Random Access Memory
  • ROM Read Only Memory
  • EEPROM Electrically Erasable Programmable ROM
  • flash memory flash memory.
  • the program or data of the first on-vehicle ECU 3 is stored. This program or data is an object to be updated by the on-vehicle update device 2.
  • the storage capacity of the storage unit 31 is set based on the size of the program or data. Therefore, the storage unit 31 has a storage area for storing the program or data, but does not have a storage area for backing up the program or data.
  • the control unit 30 is configured by a CPU (Central Processing Unit) or MPU (Micro Processing Unit) or the like, reads out and executes programs and data stored in advance in the storage unit 31 and performs control processing etc. 1)
  • the on-vehicle device including the on-vehicle ECU 3 or the actuator is controlled.
  • the control unit 30 acquires the program or data transmitted from the on-vehicle updating device 2 and updates the program or data from the current program or data stored in the storage unit 31 to the acquired program or data. I do.
  • the control unit 30 transmits the program or data stored in the storage unit 31 to the in-vehicle update device 2 based on an instruction from the in-vehicle update device 2.
  • the in-vehicle communication unit 32 has the same function as the in-vehicle communication unit 23 of the in-vehicle update device 2, and mutually communicates with the in-vehicle update device 2 and the like via the in-vehicle LAN 4.
  • FIG. 3 is a flowchart showing processing of the control unit 20 according to the first embodiment.
  • the control unit 20 of the in-vehicle updating device 2 periodically or non-periodically communicates with the program providing device S1 via the outside-vehicle communication device 1 to execute the following processing.
  • the control unit 20 acquires update information on the update of the program and the like of the first on-vehicle ECU 3 to be updated (S11). With this update information, when a new program (update program, etc.) for updating the program, etc. of the first on-vehicle ECU 3 is prepared in the program providing device S1, the update information, etc. is notified being prepared. It is information.
  • the control unit 20 communicates with the program providing device S1 via the external communication device 1, and acquires update information such as a program of the first on-vehicle ECU 3. Communication between the control unit 20 and the program providing device S1 is performed, for example, by periodically accessing (polling) the program providing device S1 by the control unit 20 to confirm the presence or absence of the update information. Alternatively, the control unit 20 may acquire update information such as a program by receiving a notification regarding update information from the program providing device S1.
  • the control unit 20 acquires the program and the like (new program and the like) of the first on-vehicle ECU 3 from the program providing device S1 (S12).
  • the new program or the like is a program or the like (update program or the like) for updating the program or the like of the first on-vehicle ECU 3 by being applied to the first on-vehicle ECU 3 to be updated.
  • the control unit 20 stores the acquired new program in the storage unit 21.
  • the control unit 20 detects a load of the control unit 20 of the first on-vehicle ECU 3 or a load such as a network load of the in-vehicle LAN 4 for communicating with the first on-vehicle ECU 3 in parallel with the process of S12 (S111). In order to detect this load, the control unit 20 generates a sub process. Alternatively, a process for detecting a load may be activated in advance to perform processing by creating a process for detecting a load in advance and performing inter-process communication such as sending a signal to the process. It is also good.
  • the control unit 20 determines whether the detected load is equal to or less than a predetermined value (S112).
  • a predetermined value S112
  • the control unit 20 communicates with the first on-vehicle ECU 3 via the in-vehicle communication unit 23 and processes of the control unit 30 such as MPU of the first on-vehicle ECU 3 Detect the load.
  • the control unit 20 monitors the traffic and the like of the in-vehicle LAN 4 and detects the load based on the usage rate of the network and the like.
  • the predetermined value is appropriately determined based on, for example, the frequency performance of the control unit 20 such as the MPU of the first on-vehicle ECU 3 or the bandwidth of the in-vehicle LAN 4 and the like.
  • the control unit 20 acquires and acquires a program or the like (current program or the like) currently applied to the first onboard ECU 3 from the first onboard ECU3.
  • the current program and the like are stored in the storage unit 21 (S113).
  • the control unit 20 acquires the current program or the like from the first in-vehicle ECU 3 or stores the current program or the like in the storage unit 21, control is performed even if the ignition power supply of the vehicle C is turned off.
  • the unit 20 continues the process of acquiring the current program or the like or storing the same in the storage unit 21.
  • the control unit 20 determines whether the storage of the current program or the like which is a sub process is completed (S13). When the storage of the current program or the like (S113) is completed, the control unit 20 performs the determination, for example, based on the signal transmitted by the sub process. Alternatively, the control unit 20 may perform the determination by reading the current program stored in the storage unit 21.
  • control unit 20 When the storage of the current program or the like is not completed (S13: NO), the control unit 20 performs loop processing to make the determination of S13 again. When performing the loop process, the control unit 20 may execute a standby process (sleep) for a predetermined time.
  • control unit 20 When the storage of the current program or the like is completed (S13: YES), the control unit 20 reads the new program or the like stored in the storage unit 21 and transmits the new program to the first on-vehicle ECU 3 via the in-vehicle communication unit 23. Send etc.
  • the control unit 20 determines whether the first in-vehicle ECU 3 to which the new program or the like has been transmitted has normally completed the update processing by the new program or the like (S15).
  • the first on-vehicle ECU 3 is configured to receive the transmitted new program etc. and overwrite the current program etc. stored in the storage unit 31 to update the current program etc. to the new program etc. . Therefore, the control unit 20 communicates with the first on-vehicle ECU 3 to determine whether the update processing has ended normally.
  • the control unit 20 notifies the program providing device S1 of the update success via the external communication device 1 (S16).
  • the control unit 20 may further notify the operator of the vehicle C of the update success via a notification unit (not shown) such as a speaker or a display provided in the vehicle.
  • the control unit 20 If the update processing has not ended normally (S15: YES), that is, if the update processing has ended abnormally, the control unit 20 reads the current program etc. stored in the storage unit 21 and transmits it to the first onboard ECU 3 A program etc. are transmitted (S151).
  • the control unit 20 determines whether or not the first on-vehicle ECU 3 to which the present program and the like have been transmitted has normally ended the return processing according to the present program and the like (S152).
  • the first on-vehicle ECU 3 is configured to receive the transmitted current program and the like, and to restore the state to which the current program and the like have been applied from the state where it is going to be updated to a new program and the like. Therefore, for example, by communicating with the first onboard ECU 3, the control unit 20 determines whether or not the return processing has ended normally.
  • the control unit 20 notifies the program providing device S1 of update failure via the external communication device 1 (S153).
  • the control unit 20 may further notify the operator of the vehicle C of the update failure via a notification unit (not shown) such as a speaker or a display provided in the vehicle.
  • the notification of the update failure means that although the update to the new program or the like has failed, the return processing to be returned to the current program or the like has succeeded.
  • the control unit 20 determines whether the return process has been performed a predetermined number of times (S1521).
  • the counting of the number of times is performed, for example, by setting an initial value and performing counter processing to increase the initial value according to the number of times of looping (the number of retries).
  • the control unit 20 counts the number of retries of the return process, and determines whether the number of retries has reached a predetermined number.
  • the predetermined number of times is set, for example, as about five times.
  • control unit 20 When the return processing has not been executed a predetermined number of times (S1521: NO), the control unit 20 performs loop processing to execute the processing of S151 again.
  • the control unit 20 notifies the program providing device S1 of return failure via the external communication device 1 (S1522).
  • the control unit 20 may further notify the operator of the vehicle C of a return failure via a notification unit (not shown) such as a speaker or a display provided in the vehicle.
  • the notification of the return processing means that the update to the new program or the like fails and the processing to return to the current program or the like also fails.
  • control unit 20 erases the current program and the like stored in the storage unit 21 (S17).
  • the control unit 20 detects the load of the first on-vehicle ECU 3 to be updated or the load of the in-vehicle LAN 4 for communicating with the first on-vehicle ECU 3, and when the load is equal to or less than a predetermined value Are stored in the storage unit 21. Therefore, when the load is high, the load for storing the current program or data can be further suppressed, and the processing for storing the current program or data in the storage unit 21 can be reliably performed.
  • control unit 20 After acquiring the update information, the control unit 20 performs the process of acquiring a new program or the like from the program providing device S1 and the process of acquiring the current program or the like from the first on-vehicle ECU 3 in parallel. Therefore, the processing time can be shortened.
  • the process of acquiring the new program and the like from the program providing device S1 and the process of acquiring the current program and the like from the first on-vehicle ECU 3 are performed in parallel.
  • the control unit 20 may acquire the current program or the like from the first on-vehicle ECU 3 after acquiring the new program or the like from the program providing device S1.
  • the control unit 20 may acquire a new program or the like from the program providing device S1 after acquiring the current program or the like from the first on-vehicle ECU 3.
  • FIG. 4 is a flowchart showing processing of the control unit 20 according to the second embodiment.
  • the control unit 20 of the on-vehicle update device 2 according to the second embodiment detects the load even while storing the current program etc., and interrupts the processing when the load is no more than the predetermined value.
  • the control unit 20 acquires and acquires a program or the like (current program or the like) currently applied to the first onboard ECU 3 from the first onboard ECU3.
  • the current program and the like are stored in the storage unit 21 in block units (S213).
  • a block is data obtained by dividing the current program or the like by a predetermined data size.
  • the control unit 20 may extract a separator included in the current program or the like, and divide the current program or the like into a block based on the separator.
  • the control unit 20 determines whether the stored block is the last block (S214). When the stored block is not the last block (S214: NO), the control unit 20 performs the load of the control unit 30 of the first on-vehicle ECU 3 or the in-vehicle LAN 4 for communicating with the first on-vehicle ECU 3 as in the process of S211. A load such as a network load is detected (S215).
  • the control unit 20 determines whether the detected load is equal to or less than a predetermined value (S216). If the detected load is not equal to or less than the predetermined value (S216: NO), that is, if the load is larger than the predetermined value, the control unit 20 interrupts the process of storing the current program and the like (S217). The control unit 20 interrupts the communication for acquiring the current program and the like from the first on-vehicle ECU 3. After performing these interruptions, the control unit 20 performs loop processing to execute the processing of S215 again. The control unit 20 continues the process of detecting the load by performing this loop process.
  • the control unit 20 performs loop processing to execute the processing of 213 again. If the communication with the first in-vehicle ECU 3 and the process of storing the current program are interrupted, the process of storing the current program, etc. with the first in-vehicle ECU 3 is resumed by executing the process of 213 again. (S213).
  • control unit 20 determines that the storage of the current program or the like is completed (S23: YES), and performs the processing of S24 and on, as in the first embodiment. .
  • the control unit 20 may generate a sub-process for monitoring the load of the first in-vehicle ECU 3 and the in-vehicle LAN 4 in parallel with the process of acquiring the current program and the like from the first in-vehicle ECU 3 and storing the current program and the like in the storage unit 21.
  • the control unit 20 monitors the load by the generated sub-process, and performs inter-process communication such as transmitting a signal to the process storing the current program or the like when the load is greater than or less than the predetermined value. , Or the process of storing the current program or the like may be interrupted or resumed.
  • FIG. 5 is a schematic view showing the configuration of the in-vehicle update system S according to the third embodiment.
  • FIG. 6 is a flowchart showing processing of the control unit 20 according to the third embodiment.
  • the control unit 20 of the in-vehicle updating device 2 according to the third embodiment is different from that of the first embodiment in that the current program and the like of the first in-vehicle ECU 3 are stored in the storage unit 51 of the second in-vehicle ECU 5. The following mainly describes the differences.
  • the in-vehicle update system S includes the outside-vehicle communication device 1, the in-vehicle update device 2, and the first in-vehicle ECU 3 as in the first embodiment, and further includes the second in-vehicle ECU 5.
  • the second on-vehicle ECU 5 includes a storage unit 51, a control unit 50, and an in-vehicle communication unit 52.
  • the storage unit 51 is configured of a volatile memory device such as a random access memory (RAM) or a non-volatile memory device such as a read only memory (ROM), an electrically erasable programmable ROM (EEPROM), or a flash memory.
  • RAM random access memory
  • ROM read only memory
  • EEPROM electrically erasable programmable ROM
  • flash memory a flash memory.
  • the storage capacity of the storage unit 51 includes a capacity for storing a backup of a program or data, in addition to a capacity for storing a program or data. Accordingly, the storage unit 51 includes a storage area (backup area) for backing up the program or data, in addition to the storage area in which the program or data is stored.
  • the control unit 50 is configured by a CPU (Central Processing Unit) or MPU (Micro Processing Unit) or the like, reads out and executes programs and data stored in advance in the storage unit 51, and performs control processing etc. 2)
  • the on-vehicle device or actuator including the on-vehicle ECU 5 is controlled.
  • the control unit 50 stores the current program and the like of the first in-vehicle ECU 3 transmitted from the in-vehicle update device 2 in the backup area of the storage unit 51.
  • the in-vehicle communication unit 52 has the same function as the in-vehicle communication unit 23 of the in-vehicle update device 2, and mutually communicates with the in-vehicle update device 2 and the like via the in-vehicle LAN 44.
  • the control unit 20 detects a load such as a load of the control unit 30 of the first on-vehicle ECU 3, a load of the control unit 50 of the second on-vehicle ECU 5, or a network load of the in-vehicle LAN 4 for communicating with these on-vehicle ECUs (S311) .
  • the load of the second in-vehicle ECU 5 is detected in the same manner as the load of the first in-vehicle ECU 3 in the first embodiment.
  • control unit 20 determines whether the load is equal to or less than a predetermined value (S312). If the detected load is not equal to or less than the predetermined value (S312: NO), that is, if the detected load is larger than the predetermined value, loop processing is performed to execute the process of S311 again.
  • the control unit 20 acquires and acquires a program etc. (current program etc.) currently applied to the first on-vehicle ECU 3 from the first on-vehicle ECU 3
  • the current program and the like are transmitted to the second on-vehicle ECU 5 (S313).
  • the second on-vehicle ECU 5 is configured to receive the transmitted current program and the like, and store the current program and the like in a backup area in the storage unit 51 of the second on-vehicle ECU 5.
  • the control unit 20 communicates with the second on-vehicle ECU 5 to confirm that the current program or the like is stored in the storage unit 51 (backup area) of the second on-vehicle ECU 5 (S314).
  • the control unit 20 executes the processes of S33 to S35 as in the first embodiment.
  • the control unit 20 acquires the current program and the like from the second in-vehicle ECU 5, and transmits the current program and the like to the first in-vehicle ECU 3 S351).
  • the control unit 20 notifies the program providing device S1 as in the case of S16, S153, and S1522 of the first embodiment, and then deletes the current program and the like stored in the storage unit 51 of the second onboard ECU 5 (S37). ).
  • the control unit 20 communicates with the second on-vehicle ECU 5 and outputs an instruction to delete the current program and the like to the second on-vehicle ECU 5.
  • the second on-vehicle ECU 5 deletes the current program and the like stored in the backup area of the storage unit 51 based on the instruction of the control unit 20.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Stored Programmes (AREA)
  • Information Transfer Between Computers (AREA)
PCT/JP2018/043818 2017-12-11 2018-11-28 車載更新装置、プログラム及び、プログラム又はデータの更新方法 Ceased WO2019116896A1 (ja)

Priority Applications (3)

Application Number Priority Date Filing Date Title
US16/771,122 US20210255845A1 (en) 2017-12-11 2018-11-28 On-board update apparatus, program, and method for updating program or data
DE112018006323.2T DE112018006323T5 (de) 2017-12-11 2018-11-28 Bordeigenes Aktualisierungsgerät, Programm und Verfahren zum Aktualisieren eines Programms oder von Daten
CN201880075452.2A CN111656317A (zh) 2017-12-11 2018-11-28 车载更新装置、程序、及程序或数据的更新方法

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2017237191A JP6958308B2 (ja) 2017-12-11 2017-12-11 車載更新装置、プログラム及び、プログラム又はデータの更新方法
JP2017-237191 2017-12-11

Publications (1)

Publication Number Publication Date
WO2019116896A1 true WO2019116896A1 (ja) 2019-06-20

Family

ID=66820818

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2018/043818 Ceased WO2019116896A1 (ja) 2017-12-11 2018-11-28 車載更新装置、プログラム及び、プログラム又はデータの更新方法

Country Status (5)

Country Link
US (1) US20210255845A1 (https=)
JP (1) JP6958308B2 (https=)
CN (1) CN111656317A (https=)
DE (1) DE112018006323T5 (https=)
WO (1) WO2019116896A1 (https=)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022003418A1 (en) * 2020-06-29 2022-01-06 Aurora Labs Ltd. Efficient controller data generation and extraction

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110780434B (zh) 2018-07-27 2022-04-05 精工爱普生株式会社 投射光学系统和投射型图像显示装置
JP7218623B2 (ja) * 2019-03-08 2023-02-07 住友電装株式会社 車載更新装置、更新処理システム、更新処理方法及びコンピュータプログラム
JP2021056656A (ja) * 2019-09-27 2021-04-08 株式会社アドヴィックス 車両リプログラミングシステム
JP7298427B2 (ja) * 2019-10-07 2023-06-27 トヨタ自動車株式会社 プログラム更新システムおよびプログラム更新方法
CN110908696B (zh) * 2019-11-21 2021-02-23 安徽江淮汽车集团股份有限公司 汽车彩屏仪表远程升级方法、装置、设备及存储介质
JP7392544B2 (ja) * 2020-03-26 2023-12-06 住友電装株式会社 車載ｅｃｕ、プログラム及び情報処理方法
JP7359096B2 (ja) * 2020-07-27 2023-10-11 トヨタ自動車株式会社 車両用制御装置
JP2023071280A (ja) * 2021-11-11 2023-05-23 トヨタ自動車株式会社 車両および車両の制御方法
JP7815964B2 (ja) * 2022-04-21 2026-02-18 株式会社デンソー 電子制御装置

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012103181A (ja) * 2010-11-12 2012-05-31 Clarion Co Ltd 車載機のオンライン更新方法
JP2014029619A (ja) * 2012-07-31 2014-02-13 Auto Network Gijutsu Kenkyusho:Kk 制御システム及びプログラム更新方法
WO2015159815A1 (ja) * 2014-04-16 2015-10-22 クラリオン株式会社 データ配信システム、制御サーバ及びデータ配信方法
JP2017097851A (ja) * 2015-11-13 2017-06-01 株式会社東芝 中継装置、中継方法およびプログラム
JP2017157004A (ja) * 2016-03-02 2017-09-07 住友電気工業株式会社 プログラム更新システム、プログラム更新方法及びコンピュータプログラム

Family Cites Families (14)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2006287738A (ja) * 2005-04-01 2006-10-19 Fujitsu Ten Ltd ネットワークシステム
JP4974706B2 (ja) * 2007-02-27 2012-07-11 株式会社オートネットワーク技術研究所 車載通信装置及び車載通信システム
JP2009053920A (ja) * 2007-08-27 2009-03-12 Auto Network Gijutsu Kenkyusho:Kk 車載用電子制御ユニットのプログラム管理システム
JP2012218467A (ja) * 2011-04-04 2012-11-12 Denso Corp 電子制御装置
US8745614B2 (en) * 2011-05-13 2014-06-03 Lsi Corporation Method and system for firmware upgrade of a storage subsystem hosted in a storage virtualization environment
WO2013136496A1 (ja) * 2012-03-15 2013-09-19 トヨタ自動車 株式会社 通信装置及び通信方法
JP5741511B2 (ja) * 2012-04-05 2015-07-01 株式会社デンソー フリーズフレームデータ記憶システム
JP2013246718A (ja) * 2012-05-28 2013-12-09 Auto Network Gijutsu Kenkyusho:Kk 制御システム及びプログラム更新方法
JP2014182571A (ja) * 2013-03-19 2014-09-29 Denso Corp 車載電子制御装置のプログラム書換システム及び車載中継装置
JP6024564B2 (ja) * 2013-03-28 2016-11-16 株式会社オートネットワーク技術研究所 車載通信システム
WO2015194406A1 (ja) * 2014-06-18 2015-12-23 日立オートモティブシステムズ株式会社 車載プログラム書込み装置
WO2015194652A1 (ja) * 2014-06-19 2015-12-23 日立オートモティブシステムズ株式会社 車載プログラム書込み装置
JP6464777B2 (ja) * 2015-01-30 2019-02-06 富士通株式会社 情報処理装置及びプログラム
US10437680B2 (en) * 2015-11-13 2019-10-08 Kabushiki Kaisha Toshiba Relay apparatus, relay method, and computer program product

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012103181A (ja) * 2010-11-12 2012-05-31 Clarion Co Ltd 車載機のオンライン更新方法
JP2014029619A (ja) * 2012-07-31 2014-02-13 Auto Network Gijutsu Kenkyusho:Kk 制御システム及びプログラム更新方法
WO2015159815A1 (ja) * 2014-04-16 2015-10-22 クラリオン株式会社 データ配信システム、制御サーバ及びデータ配信方法
JP2017097851A (ja) * 2015-11-13 2017-06-01 株式会社東芝 中継装置、中継方法およびプログラム
JP2017157004A (ja) * 2016-03-02 2017-09-07 住友電気工業株式会社 プログラム更新システム、プログラム更新方法及びコンピュータプログラム

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2022003418A1 (en) * 2020-06-29 2022-01-06 Aurora Labs Ltd. Efficient controller data generation and extraction
US11726443B2 (en) 2020-06-29 2023-08-15 Aurora Labs Ltd. Efficient controller data generation and extraction
US12147208B2 (en) 2020-06-29 2024-11-19 Aurora Labs Ltd. Efficient controller data generation and extraction

Also Published As

Publication number Publication date
CN111656317A (zh) 2020-09-11
US20210255845A1 (en) 2021-08-19
JP2019105945A (ja) 2019-06-27
JP6958308B2 (ja) 2021-11-02
DE112018006323T5 (de) 2020-08-27

Similar Documents

Publication Publication Date Title
WO2019116896A1 (ja) 車載更新装置、プログラム及び、プログラム又はデータの更新方法
JP6780724B2 (ja) 車載更新装置、更新処理プログラム及び、プログラムの更新方法
JP7160111B2 (ja) 監視装置、監視プログラム及び監視方法
US11967188B2 (en) Vehicle mounted update apparatus, update processing program, and program update method
JP6525109B2 (ja) 制御装置、転送方法、およびコンピュータプログラム
JP6486484B2 (ja) 車載制御装置、および車載制御装置の情報更新システム
WO2020179592A1 (ja) 車載更新装置、更新処理プログラム及び、プログラムの更新方法
CN112004729A (zh) 具有高冗余的车辆的实时远程控制
CN112770940A (zh) 车载更新装置、更新处理程序、程序的更新方法及车载更新系统
CN112698851B (zh) 程序更新系统、程序传送装置和程序传送方法
WO2018070156A1 (ja) ソフトウェア更新装置、ソフトウェア更新方法、ソフトウェア更新システム
US9288637B2 (en) Mobile router network with valet mode function
JP7331818B2 (ja) 車載更新装置、更新処理プログラム及び、プログラムの更新方法
JP4487007B2 (ja) 車載プログラムの書き換え制御システム
JP7310570B2 (ja) 車載更新装置、プログラム及び、プログラムの更新方法
US20120322462A1 (en) Method for providing a valet mode in a vehicle
JP7184225B1 (ja) 車載装置、プログラム及び情報処理方法
US9100789B2 (en) Vehicle with valet mode
US9148758B2 (en) Valet mode application
US9078097B2 (en) Mobile router with valet mode
WO2024219242A1 (ja) 冗長系ｅｃｕ、プログラム、及び情報処理方法
JP7722200B2 (ja) 中継装置、プログラム及び、プログラムの更新方法
CN121000737A (zh) 数据写入方法、装置、电子设备、存储介质及程序产品
JP2023085002A (ja) 車載装置、プログラム、プログラムの更新方法、及び車載更新システム

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 18888912

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 18888912

Country of ref document: EP

Kind code of ref document: A1