WO2019146169A1

WO2019146169A1 - Control device, control method, and computer program

Info

Publication number: WO2019146169A1
Application number: PCT/JP2018/037567
Authority: WO
Inventors: 山下　哲生
Original assignee: 住友電気工業株式会社
Priority date: 2018-01-26
Filing date: 2018-10-09
Publication date: 2019-08-01

Abstract

A control device that comprises a power source control part that individually controls the power supplied to a plurality of onboard control devices that belong to an in-vehicle communication network; and a specification part that specifies, from among the plurality of onboard control devices, a target device that is to execute update processing that is for updating a control program for the device. The power source control part causes power to be supplied to the specified target device and lowers the amount of power that is supplied to at least one of the plurality of onboard control devices that is not the target device below the amount of power at which control program update processing can be executed at said onboard control device.

Description

Control device, control method, and computer program

The present invention relates to a control device, a control method, and a computer program. This application claims the priority based on Japanese Patent Application No. 2018-011755 filed on Jan. 26, 2018, and incorporates all the contents described in the aforementioned Japanese application.

2. Description of the Related Art In recent years, in the technical field of automobiles, vehicles are becoming more sophisticated, and various in-vehicle devices are mounted on the vehicles. Therefore, a large number of so-called ECUs (Electronic Control Units), which are control devices for controlling each on-vehicle device, are mounted on the vehicle.
The types of ECUs include, for example, those related to a travel system that controls the engine, brakes, EPS (Electric Power Steering), etc. in response to accelerator, brake, and steering wheel operations, and in-vehicle lighting and head in response to switch operations by occupants. There are a body system ECU that controls lighting / extinguishing of a light and sounding of an alarm device, and a meter system ECU that controls the operation of meters disposed near the driver's seat.

Generally, the ECU is configured by an arithmetic processing unit such as a microcomputer, and the control of the on-vehicle device is realized by reading and executing the control program stored in a ROM (Read Only Memory).
The control program of the ECU needs to rewrite the control program of the old version to the control program of the new version in response to the version upgrade. Further, it is also necessary to rewrite data necessary for executing the control program, such as map information and control parameters.

For example, Patent Document 1 discloses a technology (on-line update function) of downloading an update program via a network and updating an ECU control program. In the technique of Patent Document 1, in order to prevent the operation of the vehicle device from being performed during the update of the control program in the ECU, the vehicle is stopped and the update is executed in a state where the user gets off the vehicle.

JP, 2013-2958, A

A control device according to an aspect of the present disclosure includes a power supply control unit that individually controls power supply to a plurality of on-board control devices belonging to a communication network in the vehicle, and a control of the own device among the plurality of on-vehicle control devices. A specifying unit that specifies a target device that is an on-board control device that executes update processing for updating a program, the power control unit causes the specified target device to be supplied with power, and the plurality of power control units The amount of electric power supplied to at least one in-vehicle control device other than the target device among the in-vehicle control devices of the above-mentioned in-vehicle control devices is smaller than the amount of electric energy which can execute the process of updating the control program in the in-vehicle control device.

Further, a control method according to an aspect of the present disclosure is a method of controlling power supply to a plurality of in-vehicle control devices belonging to a communication network in a vehicle, which is one of the plurality of in-vehicle control devices. A step of specifying a target device that is an on-board control device that executes a control program update process, supplying power to the specified target device, and of the plurality of on-vehicle control devices other than the target device And D. reducing the amount of power supplied to the at least one in-vehicle control device from the amount of power that can be updated in the control program in the in-vehicle control device.

Further, a computer program according to an aspect of the present disclosure is a computer program for causing a computer to function as a control device that controls power supply to a plurality of on-vehicle control devices belonging to a communication network in a vehicle, A power supply control unit individually controlling power supply to the plurality of in-vehicle control devices; and a target device as the in-vehicle control device executing an update process of a control program of the own device among the plurality of in-vehicle control devices The power supply control unit causes the specified target device to supply power and at least one on-vehicle control of the plurality of on-vehicle control devices other than the target device. The amount of power supplied to the device is made smaller than the amount of power that can be updated in the control program in the onboard control device.

The present disclosure can not only be realized as a control device including such a characteristic control unit, a control method having such characteristic processing as a step, and a computer program for causing a computer to execute such a step. The present invention can be realized as a semiconductor integrated circuit that realizes part or all of the control device.

BRIEF DESCRIPTION OF THE DRAWINGS It is the schematic showing the structure of the vehicle concerning embodiment. It is a block diagram which shows the internal structure of a relay apparatus. It is a block diagram which shows the internal structure of a power supply control apparatus. It is a flowchart showing the flow of power supply control processing.

<Issues the present disclosure is trying to solve>
It is necessary to supply power to the ECU that executes the control program update process. In the vehicle of Patent Document 1, since the ECU that executes the update process and the other ECUs are connected to the battery, another ECU that does not need to supply power in order to supply power to the ECU that performs the update process. Power is also supplied. As a result, power consumption will increase more than necessary.

The present disclosure aims to provide a control device capable of suppressing the amount of power consumption at the time of update processing of a control program of an on-vehicle control device, a control method thereof, and a computer program.

<Effect of the present disclosure>
According to the present disclosure, it is possible to reduce the amount of power consumption at the time of the process of updating the control program of the in-vehicle control device.

<Overview of Embodiments of the Present Invention>
Hereinafter, the outline of the embodiment of the present invention will be listed and described.
(1) The control device according to the present embodiment includes a power supply control unit that individually controls power supply to a plurality of in-vehicle control devices belonging to a communication network in the vehicle, and a self-device of the plurality of in-vehicle control devices. A specifying unit that specifies a target device that is an on-vehicle control device that executes update processing for updating a control program, the power control unit causes the specified target device to be supplied with power, and The amount of electric power supplied to at least one in-vehicle control device other than the target device among the plurality of in-vehicle control devices is set smaller than the amount of electric power that can be executed to update the control program in the in-vehicle control device.
By enabling individual control of power supply to a plurality of in-vehicle control devices, power is supplied to the target device, and at least one in-vehicle control device other than the target device among the plurality of in-vehicle control devices It is possible to perform power supply control in which the amount of power supplied is smaller than the amount of power that can be updated in the control program in the on-vehicle control device. By performing such power supply control, the vehicle carries out the updating process compared to the case where the power of the electric energy that can execute the updating process is supplied to all the on-vehicle control devices when performing the updating process. Power consumption can be reduced.

(2) Further, in the control device according to the present embodiment, the amount of power supplied to at least one in-vehicle control device other than the target device can be the amount of power that can be updated in the control program in the in-vehicle control device. The period to be less may include a period from the identification of the target device to the end of the update process in the target device.
As a result, the power consumption in the period from the specification of the target device to the end of the update processing in the target device is suppressed, and the power consumption in the update processing of the control program of the target device can be reliably suppressed.

(3) Further, in the control device according to the present embodiment, the power control unit may stop the power supply to at least one on-vehicle control device other than the target device.
Thereby, the power consumption in the update process can be further suppressed.

(4) Further, in the control device according to the present embodiment, the power supply control unit may stop the power supply to all the on-vehicle control devices other than the target device among the plurality of on-vehicle control devices. .
As a result, the power consumption in the update process can be significantly reduced.

(5) Further, in the control device according to the present embodiment, the control device further includes a monitoring unit that monitors at least one of a power abnormality and a communication abnormality of the target device during update processing, and the power control unit The power supply to the target device may be stopped when a power abnormality or a communication abnormality of the target device is detected during the update process.
By stopping the power supply to the target device in which the power abnormality or the communication abnormality is detected during the update processing, the update processing in the target device can be interrupted.

(6) Further, in the control device according to the present embodiment, the control device may further include an update control unit that instructs the target device to execute the update process.
Thereby, the control device can also control the update process in the target device.

(7) The control method according to the present embodiment is a method of controlling power supply to a plurality of in-vehicle control devices belonging to a communication network in a car, and a control program of the own device among the plurality of in-vehicle control devices Identifying a target device that is an in-vehicle control device that executes the update process, and supplying power to the identified target device, and at least one of the plurality of in-vehicle control devices other than the target device And reducing the amount of power supplied to the in-vehicle control device of the table to be smaller than the amount of power that can be updated in the control program in the in-vehicle control device.
By enabling individual control of power supply to a plurality of in-vehicle control devices, power is supplied to the target device, and at least one in-vehicle control device other than the target device among the plurality of in-vehicle control devices It is possible to perform power supply control in which the amount of power supplied is smaller than the amount of power that can be updated in the control program in the on-vehicle control device. By performing such power supply control, the vehicle carries out the updating process compared to the case where the power of the electric energy that can execute the updating process is supplied to all the on-vehicle control devices when performing the updating process. Power consumption can be reduced.

(8) A computer program according to the present embodiment is a computer program for causing a computer to function as a control device for controlling power supply to a plurality of on-vehicle control devices belonging to a communication network in a car, the computer A power control unit individually controlling power supply to a plurality of in-vehicle control devices, and a target device which is an in-vehicle control device executing an update process of a control program of the own device among the plurality of in-vehicle control devices The power supply control unit causes the specified target device to supply power to at least one on-vehicle control device other than the target device among the plurality of on-vehicle control devices. The amount of power supplied is made smaller than the amount of power that can be updated in the control program in the in-vehicle control device.
By enabling individual control of power supply to a plurality of in-vehicle control devices, power is supplied to the target device, and at least one in-vehicle control device other than the target device among the plurality of in-vehicle control devices It is possible to perform power supply control in which the amount of power supplied is smaller than the amount of power that can be updated in the control program in the on-vehicle control device. By performing such power supply control, the vehicle carries out the updating process compared to the case where the power of the electric energy that can execute the updating process is supplied to all the on-vehicle control devices when performing the updating process. Power consumption can be reduced.

<Details of the Embodiment of the Present Invention>
The details of the embodiments of the present invention will be described below with reference to the drawings. Note that at least a part of the embodiments described below may be arbitrarily combined. In the following description, the same parts and components are denoted by the same reference numerals. Their names and functions are also the same. Therefore, these descriptions will not be repeated.

[Vehicle configuration]
FIG. 1 is a schematic view showing the configuration of a vehicle according to the first embodiment.
Referring to FIG. 1, a vehicle 1 according to the present embodiment includes an on-vehicle communication device 15 for communicating with an external device, a plurality of ECUs (Electronic Control Units) 30A, 30B, 30C,. The relay apparatus 10 which is ECU which relays communication with several ECU30A, 30B, 30C, ..., the battery 40 which supplies electric power to these, and the power supply control apparatus 20 are included. The plurality of

ECUs

30A, 30B, 30C,... When the plurality of ECUs 30 are distinguished from one another, they are also expressed as ECU-1, ECU-2, ECU-3,. The battery 40 may be composed of a main battery and a sub battery.

Each of the ECUs 30 is connected by an in-vehicle communication line 16 terminating in the relay device 10 to configure the in-vehicle communication network 4 together with the relay device 10. Communication network 4 is formed of a bus-type communication network (for example, CAN (Controller Area Network)) that enables communication among ECUs 30. In a network of this communication scheme, information is stored and transmitted in a format called a data frame.

The communication network 4 is not limited to CAN, but also to communication standards such as LIN (Local Interconnect Network), CANFD (CAN with Flexible Data Rate), Ethernet (registered trademark), or MOST (Media Oriented Systems Transport: MOST is a registered trademark). It may be a network to be adopted.

For example, the ECU 30 controls an engine, a brake, an EPS (Electric Power Steering), etc. in response to operations of an accelerator, a brake, and a steering wheel, and turns on / off interior lighting and headlights according to switch operation. And the body system ECU that controls the sounding of the alarm device and the like, and the meter system ECU that controls the operation of meters disposed near the driver's seat.

The relay device 10 is further connected to the in-vehicle communication device 15 via a communication line of a predetermined standard. Alternatively, the relay device 10 may be equipped with the in-vehicle communication device 15. The in-vehicle communication device 15 wirelessly communicates with an external device via the wide area communication network 2 such as the Internet. The external device is, for example, the server 5 that stores the update program of the ECU 30. Alternatively, the in-vehicle communication device 15 may have a plug (not shown), and may communicate with an external device connected to the plug in a wired manner. The in-vehicle communication device 15 may be a device owned by a user, such as a mobile phone, a smartphone, a tablet terminal, or a notebook personal computer (PC).

The relay device 10 relays the information received by the in-vehicle communication device 15 from the device outside the vehicle to the ECU 30. The relay device 10 also relays the information received from the ECU 30 to the in-vehicle communication device 15. The in-vehicle communication device 15 wirelessly transmits the relayed information to the external device.

The battery 40 is connected to the power control device 20 through the power line 18, and the power control device 20 is connected to the

ECUs

30A, 30B, 30C,... Through the

power lines

17A, 17B, 17C,. The

power lines

17A, 17B, 17C,...

Relay device 10 is further connected to power supply control device 20 via in-vehicle communication line 16. Alternatively, the relay device 10 may have the power control device 20 mounted thereon. The power supply control device 20 controls the power supply from the battery 40 to the ECU 30.

[Configuration of Relay Device]
FIG. 2 is a block diagram showing an internal configuration of the relay device 10. As shown in FIG.
As shown in FIG. 2, the relay device 10 includes a control unit 11, a storage unit 12, an in-vehicle communication unit 13, and the like.

The control unit 11 of the relay device 10 includes a CPU (Central Processing Unit). The CPU of the control unit 11 has a function of reading out one or more programs stored in the storage unit 12 and executing various processes.
The CPU of the control unit 11 can execute a plurality of programs in parallel by switching and executing a plurality of programs in time division, for example.

The CPU of the control unit 11 includes one or more large scale integrated circuits (LSI). In a CPU including a plurality of LSIs, the plurality of LSIs cooperate to realize the function of the CPU.

The computer program executed by the CPU of the control unit 11 can be transferred while being recorded on a recording medium such as a CD-ROM or a DVD-ROM, or can be transferred by downloading from a computer device such as a server computer. .

The storage unit 12 is formed of a non-volatile memory element such as a flash memory or an EEPROM (Electrically Erasable Programmable Read Only Memory).
The storage unit 12 has a storage area for storing a program executed by the CPU of the control unit 11 or data required for the execution.

An in-vehicle communication line 16 is connected to the in-vehicle communication unit 13. The in-vehicle communication unit 13 includes a communication device that communicates with the ECU 30 in accordance with a predetermined communication standard such as CAN.
The in-vehicle communication unit 13 transmits the information given from the CPU of the control unit 11 to the predetermined ECU 30, and the ECU 30 gives the information of the transmission source to the CPU of the control unit 11.

The in-vehicle communication device 15 is a wireless communication device including an antenna and a communication circuit that executes transmission and reception of a wireless signal from the antenna. The in-vehicle communication device 15 can communicate with an external device by being connected to a wide area communication network 2 such as a cellular phone network.
The in-vehicle communication device 15 transmits the information given from the CPU of the control unit 11 to an external device such as the server 5 via the wide area communication network 2 formed by a base station (not shown) and also receives the information received from the external device To the CPU of the control unit 11.

[Configuration of Power Control Device]
FIG. 3 is a block diagram showing an internal configuration of the power supply control device 20. As shown in FIG.
As shown in FIG. 3, the power supply control device 20 includes a control unit 21, a storage unit 22, an in-vehicle communication unit 23, and the like.

The control unit 21 of the power supply control device 20 includes a CPU. The CPU of the control unit 21 has a function of reading one or a plurality of programs stored in the storage unit 22 and executing various processes.
The CPU of the control unit 21 can execute a plurality of programs in parallel by switching and executing a plurality of programs in time division, for example.

The CPU of the control unit 21 includes one or more large scale integrated circuits (LSI). In a CPU including a plurality of LSIs, the plurality of LSIs cooperate to realize the function of the CPU.

The computer program executed by the CPU of the control unit 21 can be transferred while being recorded on a recording medium such as a CD-ROM or a DVD-ROM, or can be transferred by downloading from a computer device such as a server computer. .

The storage unit 22 is formed of a non-volatile memory element such as a flash memory or an EEPROM.
The storage unit 22 has a storage area for storing a program executed by the CPU of the control unit 21 and data necessary for the execution.

An in-vehicle communication line 16 is connected to the in-vehicle communication unit 23. The in-vehicle communication unit 23 includes a communication device that communicates with the relay device 10 in accordance with a predetermined communication standard such as CAN.
The in-vehicle communication unit 23 transmits information given from the CPU of the control unit 21 to a predetermined relay device 10, and the relay device 10 gives information on the transmission source to the CPU of the control unit 21.

The power supply control device 20 is further connected to the main switch 25 connected to the battery 40 via the power line 18 and to the first individual switch 27A connected to the ECU 30A via the power line 17A and the ECU 30B via the power line 17B. And the third individual switches 27C,... Connected to the second individual switch 27B and the ECU 30C via the power line 17C, and the

individual switches

27A, 27B, 27C,... Are batteries via the main switch 25 and the power line 18, respectively. It is connected with 40. The

individual switches

27A, 27B, 27C,...

The main switch 25 and the individual switch 27 are circuits having a function of permitting or blocking the power supply, and include, for example, a transistor, a field effect transistor (FET), and a relay circuit.

Power supply control device 20 further includes a first drive circuit 24 for driving main switch 25 and a second drive circuit 26 for independently driving each individual switch 27. The

drive circuits

24 and 26 are connected to the control unit 21 and drive the main switch 25 and the individual switch 27 according to the control of the control unit 21.

Driving of the main switch 25 is to switch the ON state or the OFF state to the other state. The first drive circuit 24 switches the main switch 25 from the ON state to the OFF state or from the OFF state to the ON state in accordance with a control signal from the CPU of the control unit 21. Therefore, the main switch 25 takes one of the ON state and the OFF state.

The driving of the individual switches 27 is, as an example, switching the ON state or the OFF state to the other state independently of each other. The second drive circuit 26 individually switches the individual switches 27 from the ON state to the OFF state or from the OFF state to the ON state in accordance with a control signal from the CPU of the control unit 21. Therefore, the

individual switches

27A, 27B, and 27C corresponding to the

ECUs

30A, 30B, and 30C can have the following combinations of ON and OFF states.
1) ECU 30A (ON), ECU 30B (ON), ECU 30C (ON)
2) ECU 30A (ON), ECU 30B (ON), ECU 30C (OFF)
3) ECU 30A (ON), ECU 30B (OFF), ECU 30C (ON)
4) ECU 30A (ON), ECU 30B (OFF), ECU 30C (OFF)
5) ECU 30A (OFF), ECU 30B (ON), ECU 30C (ON)
6) ECU 30A (OFF), ECU 30B (ON), ECU 30C (OFF)
7) ECU 30A (OFF), ECU 30B (OFF), ECU 30C (ON)
8) ECU 30A (OFF), ECU 30B (OFF), ECU 30C (OFF)

When the main switch 25 is in the ON state, power is supplied from the battery 40 only to the ECU 30 in which the individual switch 27 is in the ON state. Electric power is supplied to ECU30A, 30B, 30C in said 1). In the above 2), the electric power is supplied to the

ECUs

30A and 30B and is not supplied to the ECU 30C.

When the main switch 25 is in the OFF state, power is not supplied from the battery 40 to all the ECUs 30 regardless of the state of the individual switch 27.

The vehicle 1 is provided with a power switch (not shown) that can be operated by the user (driver), and the control unit 21 causes the first drive circuit 24 to switch the main switch 25 when the power is turned on. Turn it on. In addition, when the power-off operation is performed, the main switch 25 is turned off in the first drive circuit 24.
Further, the control unit 21 executes a power control process to be described later, and individually drives the individual switches 27 according to the process.

[Power control process]
The control program of the ECU 30 is updated at a predetermined timing. The relay device 10 relays the update program received by the in-vehicle communication device 15 from the external device to the ECU 30 (hereinafter, referred to as target ECU) that executes the update process, and instructs execution of the update process. The control unit 11 of the relay device 10 includes an update control unit 111 that is a function of causing the target ECU to execute the update process (FIG. 2). This function is mainly realized by the CPU when the CPU of the control unit 11 reads and executes the program stored in the storage unit 12.

In the present embodiment, the update process is performed while the vehicle 1 is stopped with the main switch 25 ON. Therefore, the control unit 21 of the power supply control device 20 performs the power supply control process for supplying power to the necessary part at the time of the update process.

Referring to FIG. 3, control unit 21 of power supply control device 20 has power supply control unit 211 and identification unit 212 as a function for executing power supply control processing. These functions are mainly realized by the CPU when the CPU of the control unit 21 reads and executes the program stored in the storage unit 22.

The identifying unit 212 executes a identifying process for identifying the target ECU for which the updating process has been requested. The identification process includes a process of analyzing the content of data included in the communication frame transmitted by the in-vehicle communication line 16 and received by the in-vehicle communication unit 23. The identifying unit 212 identifies an ECU (target ECU) that executes the update process by the above analysis.

The power supply control unit 211 executes processing to individually switch the on / off state of the individual switch 27 based on the identification result of the identification unit 212. In the first embodiment, only the individual switch 27 of the target ECU is switched from the OFF state to the ON state.

Preferably, the control unit 21 of the power supply control device 20 further includes a monitoring unit 213. The monitoring unit 213 monitors power abnormality in the target ECU. The power abnormality includes that the voltage of the target ECU is out of the normal range and that the current value flowing through the target ECU is out of the normal range. Preferably, the monitoring unit 213 further monitors communication abnormality in the target ECU. The communication abnormality to be monitored is a communication abnormality between the target ECU and another ECU (for example, the relay device 10). The communication abnormality includes that the communication is completely shut off and that the amount of communication is smaller than a threshold. The monitoring unit 213 detects the presence or absence of an abnormality based on, for example, the voltage value, the current value, the amount of change of the voltage value, the combination thereof, and the like of the target ECU.

FIG. 4 is a flowchart showing the flow of the power control process performed by the control unit 21. The control unit 21 of the power supply control device 20 executes the processing shown in the flowchart of FIG. 4 by reading and executing the program stored in the storage unit 12. The control unit 21 of the power supply control device 20 repeatedly executes the power supply control process shown in FIG. 4 while the vehicle 1 is stopped.

Referring to FIG. 4, control unit 21 monitors whether or not there is a request for execution of the update process to ECU 30. There are various requests for update processing, such as those made from the relay device 10 to the ECU 30 and those made from the server 5 or the like to the ECU 30, and the control unit 21 determines whether the request is made to the ECU 30 Determine if The determination method is not limited to a specific method. For example, the communication frame transmitted to the communication network 4 may be monitored to determine whether it contains data for requesting the ECU 30 to update. If there is a request for update processing (YES in step S101), the control unit 21 performs the following operation.

That is, the control unit 21 specifies the target ECU for which the update process has been requested (step S103). Then, the control unit 21 turns on only the individual switch 27 of the target ECU (step S105). For example, when the target ECU is specified as the ECU 30A in step S103, the control unit 21 keeps only the first individual switch 27A in the ON state and keeps the other individual switches 27B, 27C,. As a result, power is supplied only to the target ECU that executes the update process among the plurality of ECUs 30, and power is not supplied to the other ECUs 30. As a result, in the target ECU, the supplied electric power is consumed to execute the update process, and the consumption of the other ECUs 30 not performing the update process is suppressed.

Preferably, the control unit 21 monitors the completion of the update process in the target ECU. The control unit 21 receives the communication frame transmitted by the in-vehicle communication line 16 by the in-vehicle communication unit 23, and analyzes the content of the data included in the frame to notify the relay device 10 of the update completion from the target ECU. Monitor if there is. If the notification of the update completion has been received (YES in step S107), the control unit 21 turns off the individual switch 27 of the target ECU (step S111). Thus, when the update process is completed in the target ECU, the power supply to the ECU is stopped.

There is no notification of the completion of the update, and even during the update process (ON in step S107), the control unit 21 detects the power abnormality in the target ECU (YES in step S109), the individual switch 27 of the target ECU is turned OFF. The state is set (step S111). The control unit 21 similarly sets the individual switch 27 of the target ECU to the OFF state also when detecting a communication abnormality in the target ECU instead of or in addition to the power abnormality in the target ECU. As a result, the power supply to the target ECU is stopped. Therefore, the update process is interrupted.

At this time, when the relay device 10 requests the next ECU to execute the update process, the update process of the next ECU is started. Therefore, turning off the individual switch 27 of the target ECU being subjected to the update process in step S111 means interrupting the update process in the ECU and starting the update process in the next ECU.

[Effect of the First Embodiment]
The vehicle 1 according to the first embodiment has an individual switch 27 for each ECU 30, and the power control device 20 independently switches ON / OFF of the individual switch 27 for each ECU 30. As a result, in the update process executed while the vehicle is stopped, power can be supplied only to the target ECU and power can not be supplied to any ECU 30 other than the target ECU.

In a vehicle that does not have the individual switch 27, power is supplied to all ECUs when the update process is performed while the vehicle is stopped. As a result, unnecessary power consumption occurs in ECUs other than the target ECU. On the other hand, in the vehicle 1 according to the first embodiment, since the unnecessary power consumption does not occur, the power consumption in the updating process can be suppressed.

Further, in the vehicle 1 according to the first embodiment, when the power supply control device 20 detects the power abnormality and / or the communication abnormality of the target ECU in the updating process, the individual switch 27 of the target ECU is turned off. Thereby, the power supply to the target ECU in which the power abnormality and / or the communication abnormality have occurred is stopped. As a result, the update processing in the target ECU in which the power abnormality and / or the communication abnormality have occurred is interrupted.

Second Embodiment
In the second embodiment, the power supply control device 20 is turned on so that the individual switch 27 of at least one of the ECUs 30 other than the target ECU 30 is turned off when executing the update process while the vehicle is stopped. The individual switch 27 to be in the state may be determined. That is, in the second embodiment, the ECU for which the individual switch 27 is turned on is not limited to only the target ECU (for example, ECU 30A), and the number of ECUs 30 (for example,

ECUs

30A and 30B) is smaller than all the ECUs 30A to 30C. The individual switches (27A, 27B) may be turned on. Thereby, in the update process executed while the vehicle is stopped, power can be prevented from being supplied to at least one ECU 30 other than the target ECU.

As a result, although the power saving effect is smaller than that of the first embodiment in which the power is not supplied to any ECU 30 other than the target ECU, the power consumption is suppressed more than the case where the power is supplied to all the ECUs during the update process. be able to.

Third Embodiment
The driving of the individual switch 27 may include adjustment of the amount of power supplied. In this case, the individual switch 27 has a function of changing the amount of power supplied to the ECU 30. As one example, the individual switch 27 includes a variable resistor, and the second drive circuit 26 changes the resistance value of the individual switch 27. Thus, the amount of power supplied to the ECU 30 is adjusted.

In the third embodiment, the power supply control device 20 controls the amount of electric power supplied to the ECUs 30 other than the target ECU or at least one of the ECUs 30 other than the target ECU from the amount of electric power supplied at normal times Also less. The amount of power supplied at normal times refers to the amount of power that can be updated in the ECU. As a result, power consumption can be suppressed more than when normal power is supplied to all ECUs at the time of update processing.

Fourth Embodiment
The power supply control device 20 may be an ECU that executes power supply control. For example, power supply control device 20 may be a body ECU. Alternatively, the power control device 20 may be included in the relay device 10. In that case, the control unit 21 of the power supply control device 20 may include the update control unit 111.

The disclosed features are realized by one or more modules. For example, the feature can be realized by a circuit element or other hardware module, a software module that defines a process for realizing the feature, or a combination of a hardware module and a software module.

The program may be provided as a program that is a combination of one or more software modules for causing a computer to execute the above-described operations. Such a program is provided as a program product by recording it on a computer readable recording medium such as a flexible disk attached to a computer, a CD-ROM (Compact Disk-Read Only Memory), a ROM, a RAM and a memory card. It can also be done. Alternatively, the program can be provided by being recorded in a recording medium such as a hard disk built in the computer. Also, the program can be provided by downloading via a network.

Note that the program according to the present disclosure is to call a necessary module among program modules provided as a part of an operating system (OS) of a computer in a predetermined arrangement at a predetermined timing to execute processing. It is also good. In that case, the program itself does not include the above module, and the processing is executed in cooperation with the OS. Programs not including such modules may also be included in the programs according to the present disclosure.

Also, the program according to the present disclosure may be provided by being incorporated into a part of another program. Also in this case, the program itself does not include a module included in the other program, and the process is executed in cooperation with the other program. Programs incorporated into such other programs may also be included in the programs according to the present disclosure. The provided program product is installed and executed in a program storage unit such as a hard disk. The program product includes the program itself and a recording medium in which the program is recorded.

It should be understood that the embodiments disclosed herein are illustrative and non-restrictive in every respect. The scope of the present invention is shown not by the above description but by the scope of claims, and is intended to include all modifications within the scope and meaning equivalent to the scope of claims.

Reference Signs List 1 vehicle 2 wide area communication network 4 communication network 5 server 10 relay device 11 control unit 12 storage unit 13 in-vehicle communication unit 15 in-vehicle communication unit 16 in-vehicle communication line 17 in-vehicle communication line 17 17A, 17B, 17C power line 18 power line 20 power control unit 21 control unit 22 Storage unit 23 In-vehicle communication unit 24 First drive circuit 25 Main switch 26 Second drive circuit 27 Individual switch 27A First individual switch 27B Second individual switch 27C Third

individual switch

30, 30A, 30B, 30C ECU
40 Battery 111 Update Control Unit 211 Power Supply Control Unit 212 Identification Unit 213 Monitoring Unit

Claims

A power control unit individually controlling power supply to a plurality of on-vehicle control devices belonging to a communication network in the vehicle;
And a specification unit that specifies a target device that is an on-vehicle control device that executes an update process for updating a control program of the own device among the plurality of on-vehicle control devices,
The power supply control unit supplies power to the specified target device, and the amount of power supplied to at least one on-vehicle control device other than the target device among the plurality of on-vehicle control devices is A control device that reduces the amount of power that can be updated in a control program in the onboard control device.
A period after which the amount of power supplied to at least one in-vehicle control device other than the target device is smaller than the amount of power that can be updated in the control program in the in-vehicle control device Including a period until the end of the update process in the target device,
The control device according to claim 1.
The control device according to claim 1, wherein the power supply control unit stops the power supply to at least one on-vehicle control device other than the target device.
The control device according to claim 3, wherein the power supply control unit stops the power supply to all the on-vehicle control devices other than the target device among the plurality of on-vehicle control devices.
The monitoring apparatus further includes a monitoring unit that monitors at least one of a power abnormality and a communication abnormality of the target device being updated.
The control device according to claim 3 or 4, wherein the power supply control unit stops the power supply to the target device when the power abnormality or the communication abnormality of the target device is detected during the updating process.
The control device according to any one of claims 1 to 5, further comprising an update control unit that instructs the target device to execute the update process.
A method of controlling power supply to a plurality of in-vehicle control devices belonging to a communication network in a vehicle, comprising:
Identifying a target device that is an on-vehicle control device that executes an update process of a control program of the own device among the plurality of on-vehicle control devices;
Power is supplied to the specified target device, and the amount of power supplied to at least one on-vehicle control device other than the target device among the plurality of on-vehicle control devices is controlled by the on-vehicle control device And d) reducing the amount of power that the program update process can execute.
A computer program for causing a computer to function as a control device that controls power supply to a plurality of in-vehicle control devices belonging to a communication network in a car,
The computer,
A power control unit individually controlling power supply to the plurality of in-vehicle control devices;
Among the plurality of in-vehicle control devices, the control unit functions as an identifying unit that identifies a target device that is an in-vehicle control device that executes update processing of a control program of the own device.
The power supply control unit supplies electric power to the specified target device, and the amount of power supplied to at least one on-vehicle control device other than the target device among the plurality of on-vehicle control devices is A computer program for reducing the amount of power that can be executed to update the control program in the onboard control device.