Software update apparatus, software update method, and computer program product

Abstract

A software update device, a software update method, and a computer program product are provided. The capacity of a storage used in updating software of a plurality of control devices provided in a mobile body is suppressed. The software update device (10) includes a communication unit (11), a storage unit (30), a software acquisition unit (21) that performs a software acquisition process in which new versions of software of a plurality of control devices (51, 52) mounted on a mobile body (1) are sequentially downloaded from a software provision device (110) through the communication unit (11) and saved in the storage unit (30), and a software update unit (22) that, while the software acquisition process is being performed, performs a first software update process in which the new versions of software that have been saved in the storage unit (30) are installed in the corresponding control devices (51), and the installed new versions of software are deleted from the storage unit (30).

Description

Technical Field

[0001] This invention relates to software update apparatus, software update method, and computer program product. Background Technology

[0002] Previously, technologies for supporting software updates in control devices mounted on moving bodies such as vehicles have been proposed. For example, Patent Document 1 discloses a software update device that selects either a parallel update mode in which software updates are performed on multiple electronic control devices mounted on a vehicle in parallel, or a successive update mode in which the updates are performed sequentially on multiple electronic control devices.

[0003] Existing technical documents

[0004] Patent documents

[0005] Patent Document 1: Japanese Patent Application Publication No. 2020-132026 Summary of the Invention

[0006] The problem that the invention aims to solve

[0007] Software updates for multiple control devices mounted on a mobile device are performed by storing a new version of the software downloaded from a support server or similar source in a storage unit, and then installing the new version of the software stored in the storage unit onto each control device. Therefore, depending on the number of control devices and the specifications of the software used in the control devices, the amount of data for the downloaded new version of the software is very large. Furthermore, due to the presence of a storage unit with the capacity required to store the downloaded new version of the software, there are disadvantages such as an increased storage unit size and higher storage unit costs.

[0008] This application was made in view of the above background, and its object is to provide a software update apparatus, a software update method, and a computer program product capable of suppressing the storage capacity used in updating the software of multiple control devices provided in a mobile body.

[0009] Methods for solving problems

[0010] As a first method for achieving the above-mentioned objectives, a software update apparatus is provided, comprising: a communication unit; a storage unit; a software acquisition unit that performs a software acquisition process in which new versions of software for multiple control devices mounted on a mobile body are sequentially downloaded from a software providing device via the communication unit and saved in the storage unit; and a software update unit that, while performing the software acquisition process, performs a first software update process in which the new version of software saved in the storage unit is installed on the corresponding control device, and the installed new version of software is deleted from the storage unit.

[0011] In the aforementioned software update apparatus, the plurality of control devices may include a plurality of first control devices and a plurality of second control devices. The software acquisition unit performs a first software acquisition process and a second software acquisition process as the software acquisition process. In the first software acquisition process, the communication unit sequentially downloads new versions of software for a plurality of first control devices from the software providing device and saves them in a first area of ​​the storage unit. In the second software acquisition process, the communication unit sequentially downloads new versions of software for a plurality of second control devices from the software providing device and saves them in a second area of ​​the storage unit. While the first software acquisition process is being executed, the software update unit performs the following process as the first software update process: in this process, the new version of software for the first control device that has been saved to the first area of ​​the storage unit is installed on the corresponding first control device, and the installed new version of software for the first control device is deleted from the first area of ​​the storage unit. After the second software acquisition process is completed, the software update unit performs a second software update process, in which the new version of software for the second control device saved in the second area of ​​the storage unit is installed on the corresponding second control device.

[0012] In the above-described software update device, the first control device may be configured to perform control that does not participate in the movement of the moving body, while the second control device performs control that participates in the movement of the moving body.

[0013] As a second method for achieving the above objectives, a software update method is provided, which is executed by a computer. The software update method includes: a software acquisition step, in which a software acquisition process is performed, wherein a new version of software mounted on a plurality of control devices of a mobile body is sequentially downloaded from a software providing device via a communication unit and stored in a storage unit; and a software update step, wherein while the software acquisition process is being executed, a first software update process is performed in the software update step, wherein the new version of software that has been saved to the storage unit is installed on the corresponding control device, and the installed new version of software is deleted from the storage unit.

[0014] As a third method for achieving the above objectives, a computer program product is provided, comprising a program that enables a computer to function as: a software acquisition unit that performs a software acquisition process in which new versions of software for multiple control devices of a mobile body are sequentially downloaded from a software supply device via a communication unit and stored in a storage unit; and a software update unit that, while the software acquisition process is being executed, performs a first software update process in which the new versions of software already stored in the storage unit are installed on the corresponding control devices, and the installed new versions of software are deleted from the storage unit.

[0015] Invention Effects

[0016] According to the above-mentioned software update apparatus, software update method and computer program product, it is possible to suppress the storage capacity used in updating the software of multiple control devices in a mobile body. Attached Figure Description

[0017] Figure 1 This is a structural diagram of the software update device.

[0018] Figure 2 This is a flowchart of the software update process for the first local ECU.

[0019] Figure 3 This is a diagram illustrating the download and installation process of the first local ECU software.

[0020] Figure 4 This is a flowchart of the software update process for the second local ECU.

[0021] Figure 5 This is a diagram illustrating the download and installation process for the second local ECU software.

[0022] Explanation of reference numerals in the attached figures

[0023] 1…Vehicle (mobile body), 10…Central ECU (software update device), 11…Communication unit, 20…Processor, 21…Software acquisition unit, 22…Software update unit, 30…Storage unit, 31…Program, 32…First area, 33…Second area, 41…First gateway ECU, 44…Second gateway ECU, 51a~51c…First local ECU (first control device), 52a~52c…Second local ECU (second control device), 61a~61c…On-board equipment, 62a~62c…Driving system equipment, 100…Communication network, 110…Maintenance server (software providing device), 200…Maintenance terminal (software providing device). Detailed Implementation

[0024] [1. Structure of the software update device]

[0025] Reference Figure 1 The structure of the software update device of this embodiment will be described. The software update device of this embodiment is configured as part of the function of the central ECU (Electronic Control Unit) 10 installed in the vehicle 1. The vehicle 1 is equivalent to the mobile body of this disclosure.

[0026] The central ECU 10 includes a communication unit 11, through which it communicates with the maintenance server 110 via the communication network 100. It also communicates with the maintenance terminal 200 via the communication unit 11. The maintenance server 110 and the maintenance terminal 200 are equivalent to the software providing device of this disclosure. The central ECU 10 is connected to the first gateway ECU 41 via communication line 40 and to the second gateway ECU 44 via communication line 43.

[0027] The first gateway ECU 41 is connected to three first local ECUs 51a-51c via communication line 42, and the second gateway ECU 44 is connected to three second local ECUs 52a-52c via communication line 45. The first local ECUs 51a-51c are connected to vehicle-mounted devices 61a-61c respectively, and the second local ECUs 52a-52c are connected to driving system devices 62a-62c respectively.

[0028] Hereinafter, the first local ECUs 51a to 51c will be collectively referred to as the first local ECU 51, and the vehicle-mounted devices 61a to 61c will be collectively referred to as vehicle-mounted devices 61. Furthermore, the second local ECUs 52a to 52c will be collectively referred to as the second local ECU 52, and the driving system devices 62a to 62c will be collectively referred to as driving system devices 62. The first local ECU 51 corresponds to the control device and the first control device of this disclosure, and the second local ECU 52 corresponds to the control device and the second control device of this disclosure.

[0029] The in-vehicle equipment 61 includes audio equipment, air conditioning equipment, seat heaters, and other devices that do not participate in the driving (movement) of the vehicle 1. The first local ECU 51 controls the operation of the in-vehicle equipment 61. The driving system equipment 62 includes devices involved in the driving, braking, and steering of the vehicle 1. The second local ECU 52 controls the operation of the driving system equipment 62. In addition, there can be two or more first local ECUs 51 and second local ECUs 52.

[0030] The central ECU 10 supports vehicle 1 maintenance via OTA (Over-The-Air) communication with the maintenance server 110. In this embodiment, the following process will be described: the central ECU 10 updates the software stored in the first local ECU 51 and the second local ECU 52 by downloading new versions of the software from the maintenance server 110 and installing them on the first local ECU 51 and the second local ECU 52 respectively. Alternatively, new versions of the software for the first local ECU 51 and the second local ECU 52 can also be downloaded from the maintenance terminal 200.

[0031] The central ECU 10 includes a communication unit 11, a processor 20, and a storage unit 30. The storage unit 30 stores the control program 31 for the central ECU 10. In addition, the storage unit 30 includes a first area 32 for storing new versions of the software for the first local ECU 51 and a second area 33 for storing new versions of the software for the second local ECU 52.

[0032] The processor 20 is equivalent to the computer disclosed herein. The processor 20 functions as a software acquisition unit 21 and a software update unit 22 by reading and executing program 31. The software acquisition unit 21 communicates with the maintenance server 110 or the maintenance terminal 200 to perform a first software acquisition process that sequentially downloads new versions of software for multiple first local ECUs 51 and stores them in a first area 32 of the storage unit 30, and a second software acquisition process that sequentially downloads new versions of software for multiple second local ECUs 52 and stores them in a second area 33 of the storage unit 30.

[0033] The software update unit 22 performs a first software update process, updating the software stored in the first local ECU 51 by installing a new version of the software stored in the first region 32 onto the first local ECU 51. Additionally, the software update unit 22 performs a second software update process, updating the software stored in the second local ECU 52 by installing a new version of the software stored in the second region 33 onto the second local ECU 52. Details regarding the first and second software update processes will be described later.

[0034] The processing performed by the software acquisition unit 21 is equivalent to the software acquisition step in the software update method of this disclosure, and the processing performed by the software update unit 22 is equivalent to the software update step in the software update method of this disclosure.

[0035] [2. Software update process for the first local ECU]

[0036] according to Figure 2 The flowchart shown illustrates the steps of the software update process performed by the central ECU 10 on the first local ECU 51. The central ECU 10 performs... Figure 2 The processing of step S1 to S2 in loop 1 updates the software stored in multiple first local ECUs 51.

[0037] Figure 2 Steps S10 to S13 are the first software acquisition process executed by the software acquisition unit 21. In step S10, the software acquisition unit 21 begins downloading the new version of the software for the i-th (i=1,2,…,n) first local ECU 51. Figure 1 In the example, n=3, the first local ECU 51a is the first, the first local ECU 51b is the second, and the first local ECU 51c is the third. The software acquisition unit 21 sequentially saves the data of the new version of the downloaded first local ECU 51 in the first area 32 of the storage unit 30.

[0038] In the next step S11, when the software acquisition unit 21 completes the saving of the new version of the software of the i-th first local ECU 51 to the first area 32 of the storage unit 30, the process proceeds to step S12. At this time, the software update unit 22 performs a first software update process through steps S20 and S21. In step S20, the software update unit 22 installs the new version of the software of the i-th first local ECU 51 saved in the first area 32 of the storage unit 30 to the i-th first local ECU 51 via the first gateway ECU 41, thereby updating the software saved in the i-th first local ECU 51. In the next step S21, the software update unit 22 deletes the installed new version of the software of the i-th first local ECU 51 from the first area 32 of the storage unit 30.

[0039] In step S12, the software acquisition unit 21 determines whether the download of the new version of the software for all first local ECUs 51 has been completed. Then, if the download of the new version of the software for all first local ECUs 51 has not been completed, the software acquisition unit 21 causes the process to proceed to step S13; if the download has been completed, it exits loop 1 and causes the process to proceed to step S3.

[0040] In step S13, the software acquisition unit 21 waits for free space in the first region 32 of the storage unit 30 to generate a new version of the software of the (i+1)th first local ECU 51, which is larger than the size of the software, and then executes the next cycle of loop 1. According to Figure 2 As described above, the first software acquisition process of the software acquisition unit 21 in steps S10 to S13 and the first software update process of the software update unit 22 in steps S20 and S21 are executed in parallel.

[0041] Therefore, the new version of the software of the i-th first local ECU 51 after installation will be immediately deleted from the first area 32 of the storage unit 30, and the new version of the software of the (i+1)-th first local ECU 51 will be saved in the free area of ​​the first area 32 created by the deletion.

[0042] Here, refer to Figure 3 ,against Figure 1 The three first local ECUs 51a-51c shown are based on Figure 2 The flowchart shown illustrates the usage of the first region 32 of the storage unit 30 during the software update process of the first local ECU 51. Figure 3 The diagram shows the storage unit 30's first region 32 divided into a first sub-region 32a and a second sub-region 32b for use. The third sub-region 32c is a hypothetical representation of a sub-region that is not actually needed.

[0043] exist Figure 3 In step T11, the software acquisition unit 21 downloads a new version of the software SW1a for the first first local ECU 51a and saves it in the first sub-region 32a. In step T22, the software acquisition unit 21 downloads a new version of the software SW1b for the second first local ECU 51b and saves it in the second sub-region 32b. Simultaneously, the software update unit 22 performs the parallel process of installing the new version of the software SW1a saved in the first sub-region 32a into the first first local ECU 51a.

[0044] In the next step T13, the newly installed version of software SW1a is removed from the first sub-region 32a by the software update unit 22. Additionally, the newly installed version of software SW1b, which has been saved to the second sub-region 32b, is installed on the second first local ECU 51b by the software update unit 22.

[0045] In the next step, T14, the software acquisition unit 21 downloads a new version of the software SW1c for the third first local ECU 51c and saves it in the first sub-area 32a, which was vacated during T13. Additionally, the software update unit 22 removes the new version of the software SW1b, which has been installed on the second first local ECU 51b, from the second sub-area 32b.

[0046] In the next T15, the new version of the software SW1c, which has been saved to the first sub-region 32a, is installed on the third first local ECU 51c via the software update unit 22.

[0047] like Figure 3 As shown, by executing Figure 2 The software update process of the first local ECU 51 shown can perform software update processes for three first local ECUs 51a to 51c using the first sub-region 32a and the second sub-region 32b corresponding to the quantities of the two first local ECUs 51. Therefore, it is not necessary to ensure that the third sub-region 32c corresponding to the third first local ECU 51 can suppress the capacity of the first region 32.

[0048] [3. Software update processing for the second local ECU]

[0049] according to Figure 4 The flowchart shown illustrates the steps of the software update process performed by the central ECU 10 on the second local ECU 52. The central ECU 10 performs... Figure 4 The processing of loop 2 in steps S5 to S6 and the processing of step S7 update the software stored in multiple second local ECUs 52.

[0050] Figure 4 Loop 2 in steps S5-S6 is a second software acquisition process performed by the software acquisition unit 21. In step S50, the software acquisition unit 21 begins downloading the new version of the software for the j-th (j=1,2,…,m) second local ECU 52. Figure 1 In the example, m=3, second local ECU 52a is the first, second local ECU 52b is the second, and second local ECU 52c is the third. The software acquisition unit 21 sequentially saves the downloaded new version of the software of the j-th second local ECU 52 to the second area 33 of the storage unit 30.

[0051] In the next step S51, when the software acquisition unit 21 completes the saving of the new version of the software of the j-th second local ECU 52 to the second area 33 of the storage unit 30, the processing enters the next cycle of loop 2. When the software acquisition unit 21 completes the processing of the m-th second local ECU 52, it exits loop 2 and the processing enters step S7.

[0052] Step S7 is the second software update process performed by the software update unit 22. Through the process of loop 2 described above, the software update unit 22 installs the new version of the software stored in the second area 33 of the storage unit 30 into the corresponding second local ECU 52 via the second gateway ECU 44, thereby updating the software stored in each second local ECU 52.

[0053] Here, refer to Figure 5 , for targeting Figure 1 The three second local ECUs 52a-52c shown execute... Figure 4 The usage of the second area 33 of the storage unit 30 during the software update processing of the second local ECU 52, as shown in the flowchart, will be explained. Figure 5 The image shows the second region 33 of the storage unit 30 being used by dividing it into a first sub-region 33a, a second sub-region 33b, and a third sub-region 33c.

[0054] exist Figure 5 In step T21, the software acquisition unit 21 downloads a new version of the software SW2a for the first second local ECU 52a and saves it in the first sub-area 33a. In the following step T22, the software acquisition unit 21 downloads a new version of the software SW2b for the second second local ECU 52b and saves it in the second sub-area 33b.

[0055] In the next step T23, the software acquisition unit 21 downloads a new version of the software SW2c for the third second local ECU 52c and saves it in the third sub-region 33c. In the next step T24, the software update unit 22 installs the new version of the software SW2a saved in the first sub-region 33a onto the first second local ECU 52a via the second gateway ECU 44, thereby updating the software saved in the first second local ECU 52a.

[0056] Similarly, via the software update unit 22, a new version of the software SW2b stored in the second sub-region 33b is installed on the second second local ECU 52b via the second gateway ECU 44, thereby updating the software stored in the second second local ECU 52b. Additionally, via the software update unit 22, a new version of the software SW2c stored in the third sub-region 33c is installed on the third second local ECU 52c via the second gateway ECU 44, thereby updating the software stored in the third second local ECU 52c.

[0057] like Figure 5 As shown, during execution Figure 4In the case of software update processing for the second local ECU 52 shown, it is necessary to ensure sufficient capacity in the second area 33 to store the new versions of the software for the three second local ECUs 52a to 52c. Therefore, the required capacity of the second area 33 is larger than that of the first area 32, but by separating the download and installation of the new version of the software, the reliability of software update processing stored in the second local ECU 52 can be improved. The second local ECU 52 is the ECU that controls the driving system device 62, therefore, this is effective in improving the reliability of software update processing.

[0058] [4. Other Implementation Methods]

[0059] In the above embodiments, vehicle 1 is exemplified as the mobile body of this disclosure. The mobile body of this disclosure may also be an aircraft, a ship, etc.

[0060] In the above implementation, for multiple first local ECUs 51, by... Figure 2 The flowchart shown illustrates the process of updating the software for multiple second local ECU52s via... Figure 4 The flowchart shown illustrates the process for updating the software. Alternatively, this can be done for all local ECUs. Figure 2 The flowchart shown illustrates the process of updating the software.

[0061] In the above embodiments, the first local ECU 51 (equivalent to the first control device of this disclosure) is shown as an ECU that controls the on-board equipment 61 that does not participate in the driving of the vehicle 1, and the second local ECU 52 (equivalent to the second control device of this disclosure) is shown as an ECU that controls the driving system equipment 62 that participates in the driving of the vehicle 1. In other embodiments, the first control device and the second control device of this disclosure may also be distinguished by other elements.

[0062] also, Figure 1 This is a schematic diagram illustrating the structure of the software update apparatus disclosed herein based on the main processing content for ease of understanding of the invention. The software update apparatus can also be constructed using other methods of differentiation. Furthermore, the processing of each structural element can be performed by one hardware unit or by multiple hardware units. Figure 2 , Figure 4 The processing of each structural element shown can be performed by one program or by multiple programs.

[0063] [4. Structures supported by the above embodiments]

[0064] The above implementation is a specific example of the following structure.

[0065] (Structure 1) A software update apparatus comprising: a communication unit; a storage unit; a software acquisition unit that performs a software acquisition process, wherein the communication unit sequentially downloads new versions of software from a plurality of control devices mounted on a mobile body and saves them in the storage unit; and a software update unit that, while performing the software acquisition process, performs a first software update process, wherein the first software update process installs the new version of software that has been saved to the storage unit onto the corresponding control device, and deletes the installed new version of software from the storage unit.

[0066] According to the software update device of structure 1, the storage capacity used for updating the software of multiple control devices in the mobile body can be suppressed.

[0067] (Structure 2) The software update apparatus according to claim 1, wherein the plurality of control devices includes a plurality of first control devices and a plurality of second control devices, the software acquisition unit performs a first software acquisition process and a second software acquisition process as the software acquisition process, in the first software acquisition process, the communication unit sequentially downloads new versions of software of a plurality of first control devices from the software providing device and saves them in a first area of ​​the storage unit, in the second software acquisition process, the communication unit sequentially downloads new versions of software of a plurality of second control devices from the software providing device and saves them in a second area of ​​the storage unit, while the first software acquisition process is being executed, the software update unit performs the following process as the first software update process, in which the new version of software of the first control device that has been saved to the first area of ​​the storage unit is installed on the corresponding first control device, and the installed new version of software of the first control device is deleted from the first area of ​​the storage unit, and after the second software acquisition process is completed, the software update unit performs a second software update process, in which the new version of software of the second control device that has been saved in the second area of ​​the storage unit is installed on the corresponding second control device.

[0068] According to the software update device of structure 2, for the multiple control devices provided by the mobile body, it is possible to distinguish between a first control device that prioritizes suppressing the capacity of the storage device as the object of the first software update process, and a second control device that prioritizes the reliability of the software update process as the object of the second software update process, and update the software accordingly.

[0069] (Structure 3) According to the software update device of Structure 2, wherein the first control device performs control that does not participate in the movement of the moving body, and the second control device performs control that participates in the movement of the moving body.

[0070] According to the software update device of structure 3, for a first control device that performs control that does not participate in the movement of the mobile body, a first software update process that can suppress the capacity of the storage unit can be performed; for a second control device that performs control that participates in the movement of the mobile body, a second software update process that can improve reliability can be performed.

[0071] (Structure 4) A software update method executed by a computer, the software update method comprising: a software acquisition step, wherein a software acquisition process is performed, wherein a new version of software mounted on a plurality of control devices of a mobile body is sequentially downloaded from a software providing device via a communication unit and stored in a storage unit; and a software update step, wherein while the software acquisition process is being executed, a first software update process is performed in the software update step, wherein a new version of software that has been saved to the storage unit is installed on the corresponding control device, and the installed new version of software is deleted from the storage unit.

[0072] By using a computer to execute the software update method of structure 4, the same effect as the software update device of structure 1 can be achieved.

[0073] (Structure 5) A computer program product comprising a program that enables a computer to function as: a software acquisition unit that performs a software acquisition process in which a new version of software for a plurality of control devices of a mobile body is sequentially downloaded from a software supply device via a communication unit and stored in a storage unit; and a software update unit that, while the software acquisition process is being executed, performs a first software update process in which a new version of software that has been saved to the storage unit is installed on the corresponding control device, and the installed new version of software is deleted from the storage unit.

[0074] By using a computer to execute the program of the computer program product of structure 5, the structure of the software update device of structure 1 can be realized.

Claims

1. A software update device, comprising: Ministry of Communications; Storage Department; The software acquisition unit performs software acquisition processing, in which it sequentially downloads new versions of software from the software providing device to multiple control devices mounted on the mobile body via the communication unit and saves them in the storage unit; and The software update unit, while performing the software acquisition process, performs a first software update process, in which a new version of the software that has been saved to the storage unit is installed on the corresponding control device, and the installed new version of the software is deleted from the storage unit.

2. The software update apparatus according to claim 1, wherein, The plurality of control devices includes a plurality of first control devices and a plurality of second control devices. The software acquisition unit performs a first software acquisition process and a second software acquisition process as the software acquisition process. In the first software acquisition process, multiple new versions of software for the first control device are sequentially downloaded from the software providing device via the communication unit and saved in a first area of ​​the storage unit. In the second software acquisition process, multiple new versions of software for the second control device are sequentially downloaded from the software providing device via the communication unit and saved in a second area of ​​the storage unit. While the first software acquisition process is being executed, the software update unit performs the following process as the first software update process: in this process, the new version of the software of the first control device, which has been saved to the first area of ​​the storage unit, is installed on the corresponding first control device, and the newly installed software of the first control device is deleted from the first area of ​​the storage unit. After the second software acquisition process is completed, the software update unit performs a second software update process, in which the new version of the software stored in the second area of ​​the storage unit of the second control device is installed on the corresponding second control device.

3. The software update apparatus according to claim 2, wherein, The first control device performs control that does not participate in the movement of the moving body. The second control device performs control of the movement of the moving body.

4. A software update method performed by a computer. in, The software update method includes: The software acquisition step involves performing a software acquisition process, in which a new version of the software for multiple control devices mounted on the mobile body is sequentially downloaded from the software providing device via the communication unit and saved in the storage unit. as well as In the software update step, while the software acquisition process is being executed, a first software update process is performed in the software update step. In the first software update process, the new version of the software that has been saved to the storage unit is installed on the corresponding control device, and the installed new version of the software is deleted from the storage unit.

5. A computer program product comprising a program that enables a computer to function as a component of: The software acquisition unit performs software acquisition processing, in which it sequentially downloads new versions of software for multiple control devices equipped on the mobile body from the software supply device via the communication unit and saves them in the storage unit; and The software update unit, while performing the software acquisition process, performs a first software update process, in which a new version of the software that has been saved to the storage unit is installed on the corresponding control device, and the installed new version of the software is deleted from the storage unit.

Images