Vehicle program update management system and method thereof, and reprogramming terminal

Abstract

The present invention provides a vehicle program update management system and method thereof, and a reprogramming terminal, which manage program updates for multiple control devices mounted on a vehicle. The vehicle program update management system comprises: a first server that manages a program structure that is a combination of multiple programs; a second server that manages multiple update programs for multiple programs; and a reprogramming terminal that is connected to the multiple control devices in a wired manner and performs information processing for program updates.

Description

Technical Field

[0001] The present invention relates to a vehicle program update management system, a reprogramming terminal, and a vehicle program update management method for managing program updates for an electronic control device mounted on a vehicle. Background Art

[0002] In recent years, vehicles are being connected to the Internet using wireless technology. Interconnection is expected to enable comfortable applications such as autonomous driving in the future, but on the other hand, it increases the security risk of vehicle attacks through the Internet. Many electronic control devices are used in current vehicles, and the programs (software) used to control these electronic control devices need to be updated with additional functions and corrections. Program update management is directly related to vehicle safety, so restrictions based on laws and regulations of international standards and specifications are applied. In this restriction, thorough update management is required for programs, and the update history management of programs is required both in the case of wired connection and in the case of wireless connection.

[0003] Prior art literature

[0004] Patent Document 1:

[0005] Japanese Patent Publication No. 2020-96321 Summary of the invention

[0006] Problems to be solved by the invention

[0007] Patent document 1 discloses the following technology: in order to prevent the rewriting of programs by malicious third parties, it is determined whether the update device connected to the vehicle is an authenticated update device even outside the network service area. However, even if the update device is authenticated, there is still the following problem: if there is a possibility that the program or the rewriting command of the program is stolen from the update device and changed, it is difficult to protect the safety of the vehicle. In addition, in the past, the update of the program of the vehicle's control device was uniformly performed by distributing recording media such as CD-ROMs (Compact Disc Read Only Memory) recording the update program to sales stores and dealers that perform program update operations, but when each vehicle performs a program update based on a wireless connection, there are differences in the update history of the programs for multiple control devices possessed by each vehicle, so there is a problem of not being suitable for unified program updates.

[0008] The present invention has been made in view of the above background, and an object of the present invention is to provide a vehicle program update management system, a reprogramming terminal, and a program update management method for managing program updates of a plurality of control devices mounted on a vehicle.

[0009] Means for solving problems

[0010] As a method for achieving the above-mentioned purpose, a vehicle program update management system is provided, which performs update management on multiple programs respectively maintained and executed by multiple control devices mounted on a vehicle, and is characterized in that the vehicle program update management system comprises: a first server, which manages a program structure which is a combination of the multiple programs; a second server, which manages multiple update programs for the multiple programs; and a reprogramming terminal, which is a device connected to the multiple control devices in a wired manner to perform information processing for updating the programs, the reprogramming terminal having an update information acquisition unit, which acquires update information about the multiple programs respectively installed in the multiple control devices mounted on the vehicle from the vehicle. , the first server comprises: a determination unit, which determines the program structure required for the vehicle based on the update information; a reprogramming information generation unit, which generates information about the update program required for the vehicle, i.e., reprogramming information, based on the determination; and an installation command generation unit, which generates installation command information, which is information about commands for causing the multiple control devices to install the update programs. The reprogramming terminal also comprises: an update program acquisition unit, which acquires the multiple update programs from the second server based on the reprogramming information; a command acquisition unit, which acquires the installation command information; and a writing unit, which writes the acquired multiple update programs into the multiple control devices respectively based on the installation command information.

[0011] In the above-mentioned vehicle program update management system, it can also be configured that at least one of the program structure, the update program and the installation command information is stored in a volatile storage unit of the reprogramming terminal, rather than in a non-volatile storage unit of the reprogramming terminal.

[0012] As another method for achieving the above-mentioned purpose, there can be cited a reprogramming terminal, which is connected to a plurality of control devices mounted on a vehicle in a wired manner, and performs information processing for updating a plurality of programs respectively maintained and executed by the plurality of control devices, and is characterized in that the reprogramming terminal comprises: an update information acquisition unit, which acquires update information about the plurality of programs respectively installed in the plurality of control devices; an update program acquisition unit, which acquires the plurality of update programs from a second server that manages a plurality of update programs for the plurality of programs; a command acquisition unit, which acquires installation command information about a command to install the update program in the plurality of control devices from a first server that manages a program structure that is a combination of the plurality of programs; and a writing unit, which writes the acquired plurality of update programs respectively into the plurality of control devices based on the installation command information.

[0013] In addition, as another method for achieving the above-mentioned purpose, a vehicle program update management method is provided, which performs update management on multiple programs respectively maintained and executed by multiple control devices installed in a vehicle, and is characterized in that the vehicle program update management method has: a first step of managing a program structure as a combination of the multiple programs; a second step of managing multiple update programs for the multiple programs; and a reprogramming step, in which information processing for updating the programs is performed by a device connected to the multiple control devices in a wired manner, and the reprogramming step includes an update information acquisition step, in which update information about the multiple programs respectively installed in the multiple control devices installed in the vehicle is obtained from the vehicle. New information, the first step includes: a determination step, based on the update information, determining the program structure required for the vehicle; a reprogramming information generating step, based on the determination, generating information about the update program required for the vehicle, i.e., reprogramming information; and an installation command generating step, generating installation command information, which is information about commands to install the update program into the multiple control devices, the reprogramming step also includes: an update program obtaining step, based on the reprogramming information, obtaining the multiple update programs; a command obtaining step, obtaining the installation command information; and a writing step, based on the installation command information, writing the obtained multiple update programs into the multiple control devices respectively.

[0014] Effects of the Invention

[0015] In an update terminal located in a sales store or repair shop that uses a wired connection to update the program in the vehicle control device, the update program and the installation command are not stored in a non-volatile recording medium. Therefore, the security risk of leaking the update program and the installation command and performing reverse engineering can be reduced. In addition, the following effect is achieved: the latest installation command can be easily deployed without changing the update software of the update terminal on the market, and the update operation can be reliably performed. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1 This is a diagram for explaining program update in a vehicle.

[0017] Figure 2 It is a structural diagram of a reprogramming terminal and a control device of a vehicle.

[0018] Figure 3 is a functional block diagram of the reprogramming terminal.

[0019] Figure 4 is a functional block diagram of the first server.

[0020] Figure 5 It is a flow chart of vehicle program update management.

[0021] Description of Reference Numerals

[0022] 1 Vehicle Program Update Management System

[0023] 5 First Server

[0024] 10 Second Server

[0025] 30 Wireless Publishing Server

[0026] 50 Connecting device

[0027] 51 Control Department

[0028] 52 Vehicle side interface

[0029] 53 External Interface

[0030] 54 Display

[0031] 55 Input

[0032] 61 Cable

[0033] 62 Cable

[0034] 100 Vehicle Control Devices

[0035] 101 Vehicle Equipment

[0036] 102 Bus

[0037] 110 Management ECU

[0038] 121 DLC

[0039] 122 TCU

[0040] 123 GPS Unit

[0041] 124 USB connector

[0042] 125 Input

[0043] 126 Output

[0044] 131 IVI system

[0045] 133 Gear Shift ECU

[0046] 134 Steering ECU

[0047] 135 Instrument ECU

[0048] 141 SW-IVI

[0049] 142 SW-EG

[0050] 143 SW-SF

[0051] 144 SW-ST

[0052] 145 SW-MT

[0053] 152 Engine

[0054] 153 Gear shifter

[0055] 154 Steering device

[0056] 155 Instrument

[0057] 200 Repair PC

[0058] 201 Control Department

[0059] 210 processor

[0060] 220 Storage

[0061] 221 Volatile storage unit

[0062] 222 Non-volatile storage unit

[0063] 223 Ministry of Communications

[0064] 224 Input

[0065] 225 Display

[0066] 231 Update Information Acquisition Department

[0067] 232 Update program acquisition unit

[0068] 233 Order Acquisition Department

[0069] 234 Writing Department

[0070] 235 Interface

[0071] 241 Judgment Department

[0072] 242 Reprogramming information generation unit

[0073] 243 Installation command generation unit

[0074] 244 Program Structure Management Department

[0075] 300 Reprogramming Terminal

[0076] B Base Station

[0077] V Vehicle

[0078] N Communication Network DETAILED DESCRIPTION

[0079] Hereinafter, the embodiments are described in detail with reference to the accompanying drawings. However, sometimes excessive detailed descriptions are omitted. For example, sometimes detailed descriptions of well-known matters or repeated descriptions of substantially the same structures are omitted. This is to avoid the following description from becoming too lengthy and to make it easy for those skilled in the art to understand.

[0080] In addition, the drawings and the following description are provided to enable those skilled in the art to fully understand the contents of the present disclosure, and are not intended to limit the subject matter described in the claims.

[0081] [1-1. Configuration of Vehicle Program Update Management System of First Embodiment]

[0082] Figure 1 1 is an explanatory diagram of a program update in a vehicle V. When the vehicle V is adapted to program updates based on wireless communication, that is, when program updates of a control device based on OTA (Over The Air) are possible, an update program is distributed to the vehicle V from a wireless distribution server 30 via a network N and a base station B, and the program is updated. At this time, the program update history is managed by the first server 5 in association with the vehicle identification number of the vehicle V.

[0083] In this specification, a vehicle refers to a mobile body such as a four-wheeled vehicle or a two-wheeled vehicle. The mobile body may have a drive system including an internal combustion engine using a combustible fuel, or may be driven by other energy sources such as electric energy stored in a battery or hydrogen energy.

[0084] The vehicle program update management system 1 involved in this embodiment manages the updates of multiple programs respectively maintained and executed by multiple control devices mounted on the vehicle V, and comprises: a first server 5, which manages the program structure as a combination of multiple programs; a second server 10, which manages multiple update programs for multiple programs; and a reprogramming terminal 300, which is a device connected to multiple control devices by wire to perform information processing for program updates. The reprogramming terminal 300 includes a maintenance PC (personal computer) 200 and a connecting device 50. The connecting device 50 can be a VCI (Veicle Control Interface: vehicle-mounted fault diagnosis device). The first server 5 and the second server 10 are information processing devices that perform information processing, information provision, and information storage, and can be specifically computers. The first server 5, the second server 10, and the reprogramming terminal 300 exchange information via a network.

[0085] In a vehicle sales store, a maintenance factory, etc., the program is updated through a wired connection. In this case, the update history of the program is also managed by the first server 5. The maintenance PC 200 and the connection device 50 are connected through a wired connection unit, specifically, a cable 62, and the connection device 50 and the vehicle control device 100 are also connected through a wired connection unit, specifically, a cable 61. Specifically, the cable used for the wired connection may also be, for example, a USB cable. Of course, the cable may also have an OBD (OBD: On-Board Diagnostics: vehicle-mounted diagnostic system) connector that is generally used when connecting the vehicle to an on-board fault diagnostic device.

[0086] Figure 2 1 is a structural diagram of a reprogramming terminal 300 included in the vehicle program update management system 1 of the first embodiment and a vehicle control device 100 of the vehicle V. The reprogramming terminal 300 includes a maintenance PC 200 and a connection device 50. The maintenance PC 200 is an information processing device as follows: it has a communication unit 223 for communicating with the first server 5 and the like through a network N, an input unit 224 to which information is input, a display unit 225 for displaying information through images and the like, a control unit 201 for controlling the maintenance PC 200 as a whole, and an interface 235 for transmitting and receiving information with the connection device 50. The control unit 201 includes a processor 210 for performing information processing and a storage unit 220 for storing information. The storage unit 220 includes: a volatile storage unit 221 that loses storage when power supply is interrupted; and a non-volatile storage unit 222 that retains storage even when power supply is not available. The processor 210 is, for example, a CPU (Central Processing Unit), and the volatile storage unit 221 is, for example, a RAM (Random Access Memory). In addition, the nonvolatile storage unit 222 may be, for example, a ROM (Read Only Memory), a HDD (Hard Disk Drive), or an SSD (Solid State Drive).

[0087] The connection device 50 is provided between the reprogramming terminal 300 and the vehicle control device 100, and includes a control unit 51 for performing control, an input unit 55 for receiving information, a display unit 54 for outputting information, an external interface 53 which is an interface for transmitting and receiving information with the maintenance PC 200, and a vehicle-side interface 52 which is used for transmitting and receiving information with the vehicle control device 100. The connection device 50 may be a VCI (Veicle Control Interface: vehicle-mounted fault diagnosis device).

[0088] The vehicle control device 100 includes: a DLC (Data Link Coupler) 121 which is a connector connected to the connection device 50 via a cable 61; an onboard device 101; a management ECU 110 which manages individual ECUs (Electronic Control Units) which are information processing devices that control various devices provided in the vehicle V; an input unit 125 to which information is input; and an output unit 126 to which information is output. The input unit 125 may be a touch panel in an onboard IVI (In-Vehicle Infotainment) system. The output unit 126 may be an image display device provided in the IVI or an image display device provided in the instrument part. The output unit 126 may be provided in the dashboard of the driver's seat, for example. Specifically, the output unit 126 may also be configured as a so-called multi-information display (MID: Multi Information Display) assembled in the dashboard. The output unit 126 may include a speaker that outputs sound. In addition, the output unit 126 may also include a hazard warning light.

[0089] The vehicle-mounted device 101 is configured to include a plurality of devices mounted on the vehicle and an electronic control unit (ECU: Electronic Control Unit) for controlling them. As a device, for example, a TCU (Telematics Control Unit: Telematics Control Unit) 122 for wireless communication may be included. In addition, an IVI (In-Vehicle Infotainment) system 131 for providing information to the occupants of the vehicle, an engine ECU 132 for controlling an engine 152, a shift ECU 133 for controlling a shift device 153, a steering ECU 134 for controlling a steering device 154, and an instrument ECU 135 for controlling an instrument 155 may also be included. Each ECU is connected to the management ECU 110 via the bus 102 to transmit and receive information. Here, the engine 152 may be not only a drive system including an internal combustion engine, but also an electrically driven motor or the like.

[0090] The IVI system 131 implements its functions by executing software (program) SW~IVI 141, the engine ECU 132 implements its functions by executing software SW~EG 142, the shift ECU 133 implements its functions by executing software SW~SF 143, the steering ECU 134 implements its functions by executing software SW~ST 144, and the meter ECU 135 implements its functions by executing SW~MT 145. The software is updated by the vehicle program update management system 1 via a wired connection using a cable 61.

[0091] Specifically, the ECU is a computer having a processor such as a CPU, a ROM with an execution program written therein, an SSD (Solid State Drive), a RAM for temporarily storing data for controlling the device, and the like. Specifically, the ECU as a computer executes a program received from the second server 10 via the maintenance PC 200, thereby controlling the device included in the vehicle-mounted device 101. Alternatively, or on the basis of the above-mentioned ECUs, all or part of the above-mentioned ECUs may be respectively constituted by hardware including one or more electronic circuit components. The detailed operation of the vehicle program update management system 1 will be described later. Figure 5 is described in.

[0092] Figure 3 This is a functional block diagram of the reprogramming terminal 300. The reprogramming terminal 300 is a device that is wiredly connected to a plurality of control devices (ECUs) mounted on the vehicle V and performs information processing for updating a plurality of programs respectively maintained and executed by the plurality of control devices. The reprogramming terminal 300 comprises: an update information acquisition unit 231 that acquires update information for a plurality of programs respectively installed in a plurality of control devices; an update program acquisition unit 232 that acquires a plurality of update programs from a second server 10 that manages a plurality of update programs for a plurality of programs; a command acquisition unit 233 that acquires installation command information for commands for installing update programs in a plurality of control devices from a first server 5; and a writing unit 234 that writes the acquired plurality of update programs respectively into the plurality of control devices based on the installation command information.

[0093] Figure 4 It is a functional block diagram of the first server 5. The first server 5 manages a program structure that is a combination of a plurality of programs for realizing the functions of each control unit (ECU) in the vehicle control device 100. Specifically, the version of each program is managed so as to be the most suitable program structure for each vehicle V. In addition, the program structure may also be associated with the vehicle identification number of each vehicle V. Specifically, the first server 5 includes a program structure management unit 244 that historically manages the program structure of each ECU installed in the vehicle control device 100 and sets it to a state in compliance with laws and regulations. At this time, preferably, the first server 5 also obtains information about the program structure of each vehicle updated via OTA from the wireless publishing server 30.

[0094] The first server 5 obtains the update information of the program for the vehicle V obtained from the reprogramming terminal 300. The first server 5 also includes: a determination unit 241 that determines the program structure required for each vehicle V based on the update information; a reprogramming information generation unit 242 that generates information about the update program required for the vehicle based on the determination, i.e., reprogramming information; and an installation command generation unit 243 that generates information about a command to install the update program in a plurality of control devices, i.e., installation command information.

[0095] In addition, the first server 5 is an information processing device or computer having a processor for performing information processing and a storage unit for storing information, and is connected to the wireless publishing server 30, the second server 10, and the reprogramming terminal 300 via the network N to transmit and receive information. The second server 10 is also a similar information processing device or computer. The second server 10 stores and manages multiple update programs for each of multiple programs that implement the functions of the control unit (ECU) included in the vehicle-mounted device 101. The operations of the first server 5, the second server 10, and the reprogramming terminal 300 of the vehicle program update management system 1 will be described later. Figure 5 Detailed description in.

[0096] [1-2. Operation of the vehicle program update management system]

[0097] Figure 5 This is a flowchart of program update management by the vehicle program update management system 1 according to the first embodiment.

[0098] When a person who performs a program update operation instructs the program update from the input unit 224 or the input unit 55 of the reprogramming terminal 300, the reprogramming terminal 300 makes an update information request to the vehicle control device 100 of the vehicle V, and the update information request requests the transmission of update information for multiple programs respectively installed in each control device (step S1). The vehicle control device 100 that receives the update information request transmits the update information for each program to the reprogramming terminal 300. Then, the reprogramming terminal 300 transmits the obtained update information to the first server 5 (step S2). The first server 5 manages the obtained update information in the program structure management unit 244 in association with the vehicle identification number. Specifically, the update history of the program is maintained.

[0099] Next, the first server 5 determines the program structure required for the vehicle V that is the object of the program update in the determination unit 241 based on the update information obtained from the reprogramming terminal 300. Then, the reprogramming information generation unit 242 generates information about the update program required for the vehicle V, i.e., reprogramming information, based on the determination (step S3). Specifically, the vehicle V can generate a list of update programs required for the program update. Next, the first server 5 sends the reprogramming information to the reprogramming terminal 300. The reprogramming terminal 300 that has obtained the reprogramming information requests the second server 10 to update the program based on the reprogramming information (step S4). The second server 10 receives the update program request from the reprogramming terminal 300 and sends the update program to the reprogramming terminal 300.

[0100] In addition, the first server 5 generates installation command information, which is information about a command to install the update program in a plurality of control devices of the vehicle V, through the installation command generation unit 243 (step S5). Then, the first server 5 sends the installation command information to the reprogramming terminal 300. The reprogramming terminal 300 obtains the update program through the update program acquisition unit 232. In addition, the reprogramming terminal 300 obtains the installation command information through the command acquisition unit 233. Then, the reprogramming terminal 300 writes the update program to each control device of the vehicle control device 100 in the writing unit 234 based on the installation command information.

[0101] At this time, the reprogramming terminal 300 stores the installation command information and the update program in the volatile storage unit 221, but does not store them in the nonvolatile storage unit 222. The reprogramming terminal 300 realizes the program update of the vehicle control device 100 in the vehicle V through the above operations.

[0102] [2-1. Configuration of reprogramming terminal according to second embodiment]

[0103] The reprogramming terminal 300 of the second embodiment is a device that is connected by wire to a plurality of control units (ECUs) mounted on a vehicle V, and performs information processing for updating a plurality of programs respectively maintained and executed by the plurality of control units. It comprises: an update information acquisition unit 231 for acquiring update information for a plurality of programs respectively installed in a plurality of control units; an update program acquisition unit 232 for acquiring a plurality of update programs from a second server that manages a plurality of update programs for a plurality of programs; a command acquisition unit 233 for acquiring installation command information regarding commands for installing update programs in a plurality of control units from a first server; and a writing unit 234 for writing the acquired plurality of update programs respectively into a plurality of control units based on the installation command information. The physical structure of the reprogramming terminal 300 is the same as that of the reprogramming terminal 300 included in the vehicle program update management system 1 of the first embodiment, and therefore a detailed description thereof is omitted (refer to FIG. 2 ). Figure 2 ).

[0104] [2-2. Actions of reprogramming terminal]

[0105] The operation of the reprogramming terminal 300 of the second embodiment is similar to the operation of the reprogramming terminal 300 included in the vehicle program update management system 1 of the first embodiment (see Figure 5 ) are the same, so the detailed description is omitted.

[0106] [3. Program update management method according to the third embodiment]

[0107] The program update management method involved in the third embodiment is a vehicle program update management method for performing update management on multiple programs respectively maintained and executed by multiple control devices mounted on a vehicle V, comprising: a first step of managing a program structure as a combination of multiple programs; a second step of managing multiple update programs for multiple programs; and a reprogramming step, in which a device connected to the multiple control devices in a wired manner performs information processing for program update, the reprogramming step having an update information acquisition step, in which update information about multiple programs respectively installed in multiple control devices mounted on the vehicle is acquired from the vehicle, the first step comprising: a determination step, based on the update information, determining the program structure required for the vehicle; a reprogramming information generation step, based on the determination, generating information about the update program required for the vehicle, namely, reprogramming information; and an installation command generation step, generating information about a command to install the update program in multiple control devices, namely, installation command information, the reprogramming step also comprising: an update program acquisition step, based on the reprogramming information, acquiring multiple update programs; a command acquisition step, acquiring installation command information; and a writing step, based on the installation command information, writing the acquired multiple update programs into the multiple control devices respectively.

[0108] [4. Other embodiments]

[0109] In the above embodiment, an example is shown in which the writing unit 234 of the reprogramming terminal 300 installs the update program to the individual control device (ECU), but the writing can also be performed by the first server 5. In this case, it can also be considered that the first server 5 performs the action of obtaining the update program from the second server 10. In addition, as another variant embodiment, the management ECU 110 of the vehicle control device 100 can also obtain and write the update program. In this case, the reprogramming terminal 300 can also be a method of not retaining the installation command information and the update program, but only transferring the information.

[0110] [5. Structure supported by the above-mentioned embodiments]

[0111] The above-mentioned embodiment supports the following structure.

[0112] (Structure 1) A vehicle program update management system 1, which manages the update of multiple programs respectively maintained and executed by multiple control devices mounted on a vehicle, is characterized in that the vehicle program update management system 1 comprises: a first server 5, which manages a program structure which is a combination of the multiple programs; a second server 10, which manages multiple update programs for the multiple programs; and a reprogramming terminal 300, which is a device connected to the multiple control devices in a wired manner to perform information processing for updating the programs, the reprogramming terminal 300 has an update information acquisition unit 231, which acquires update information about the multiple programs respectively installed in the multiple control devices mounted on the vehicle V from the vehicle V, The first server 5 comprises: a determination unit 241, which determines the program structure required for the vehicle based on the update information; a reprogramming information generating unit 242, which generates information about the update program required for the vehicle, i.e., reprogramming information, based on the determination; and an installation command generating unit 243, which generates information about a command for causing the multiple control devices to install the update program, i.e., installation command information. The reprogramming terminal 300 also comprises: an update program acquisition unit 232, which acquires the multiple update programs from the second server 10 based on the reprogramming information; a command acquisition unit 233, which acquires the installation command information; and a writing unit 234, which writes the acquired multiple update programs into the multiple control devices respectively based on the installation command information.

[0113] According to the vehicle program update management system of structure 1, the risk of reverse engineering, analysis, etc. can be reduced by configuring all the writing software stored / installed in the PC and the program for generating the writing command for the updating operation in an external server. In addition, the latest update command can be applied at any time without the need to update the software for the program update in the market. In addition, the program update history can be appropriately managed for each vehicle.

[0114] (Structure 2) The vehicle program update management system according to Structure 1 is characterized in that at least one of the program structure, the update program and the installation command information is maintained in a volatile storage unit 221 of the reprogramming terminal 300, and is not maintained in a non-volatile storage unit 222 of the reprogramming terminal 300.

[0115] According to the vehicle program update management system of structure 2, the program and command written into the vehicle control device can be treated as memory on the volatile memory. Since the program and command information are not stored on the non-volatile recording medium such as HDD and SSD on the market, the risk of leakage of confidential information is reduced.

[0116] (Structure 3) A reprogramming terminal, which is connected to a plurality of control devices mounted on a vehicle by wired means, and performs information processing for updating a plurality of programs respectively maintained and executed by the plurality of control devices, characterized in that it comprises: an update information acquisition unit 231, which acquires update information about the plurality of programs respectively installed in the plurality of control devices; an update program acquisition unit 232, which acquires the plurality of update programs from a second server 10 that manages a plurality of update programs for the plurality of programs; a command acquisition unit 233, which acquires installation command information about a command to install the update programs in the plurality of control devices from a first server 5 that manages a combination of the plurality of programs, i.e., a program structure; and a writing unit 234, which writes the acquired plurality of update programs respectively into the plurality of control devices based on the installation command information.

[0117] According to the reprogramming terminal of configuration 3, the risk of reverse engineering, analysis, etc. can be reduced by placing all the writing software and programs for generating writing commands stored / installed in the PC for the previous update work in an external server. In addition, the latest update commands can be applied at any time without the need to update the software for market program updates. In addition, the program update history can be appropriately managed for each vehicle.

[0118] (Structure 4) A vehicle program update management method, which performs update management on multiple programs respectively maintained and executed by multiple control devices mounted on a vehicle, characterized in that the vehicle program update management method comprises: a first step of managing a program structure which is a combination of the multiple programs; a second step of managing multiple update programs for the multiple programs; and a reprogramming step, in which information processing for updating the programs is performed by a device connected to the multiple control devices in a wired manner, the reprogramming step includes an update information acquisition step, in which update information about the multiple programs respectively installed in the multiple control devices mounted on the vehicle is acquired from the vehicle, the first The steps include: a determination step, determining the program structure required for the vehicle based on the update information; a reprogramming information generation step, generating information about the update program required for the vehicle, i.e., reprogramming information, based on the determination; and an installation command generation step, generating installation command information, which is information about commands to install the update program in the multiple control devices. The reprogramming step also includes: an update program acquisition step, acquiring the multiple update programs based on the reprogramming information; a command acquisition step, acquiring the installation command information; and a writing step, writing the multiple update programs acquired into the multiple control devices respectively based on the installation command information.

[0119] According to the vehicle program update management method of configuration 4, the risk of reverse engineering, analysis, etc. can be reduced by configuring all the writing software stored / installed in the PC and the program for generating the writing command for the update operation in an external server. In addition, there is no need to update the software for the program update in the market, and the latest update command can be applied at any time. In addition, the program update history can be appropriately managed for each vehicle.

[0120] As described above, the embodiments are described as examples of the technology disclosed in this application. However, the technology in the present disclosure is not limited thereto, and can also be applied to embodiments that have been changed, replaced, added, omitted, etc. In addition, each structural element described in the above embodiment can also be combined to form a new embodiment.

[0121] For example, Figure 5 The step units of the control actions shown are divided according to the main processing contents in order to facilitate the understanding of the actions of the various parts of the vehicle program update management system 1. The present invention is not limited by the method or name of the division of the processing units. Depending on the processing contents, it can also be divided into more step units. In addition, it can also be divided in a way that one step unit contains more processing. In addition, the order of the steps can also be appropriately changed within the scope that does not hinder the main purpose of the present invention.

Claims

1. A vehicle program update management system, which manages the update of a plurality of programs respectively maintained and executed by a plurality of control devices mounted on a vehicle, characterized in that: The vehicle program update management system has: a first server that manages a program structure that is a combination of the plurality of programs; a second server that manages a plurality of update programs for the plurality of programs; as well as a reprogramming terminal connected to the plurality of control devices in a wired manner to perform information processing for updating the program, The reprogramming terminal includes an update information acquisition unit that acquires, from the vehicle, update information about the plurality of programs respectively installed in the plurality of control devices mounted on the vehicle. The first server has: a determination unit that determines the program structure required for the vehicle based on the update information; a reprogramming information generating unit that generates information about the update program required for the vehicle, that is, reprogramming information, based on the determination; as well as an installation command generating unit configured to generate installation command information, the installation command information being information on a command for installing the update program in the plurality of control devices; The reprogramming terminal also has: an update program acquisition unit that acquires the plurality of update programs from the second server based on the reprogramming information; a command acquisition unit, which acquires the installation command information; as well as A writing unit writes the acquired plurality of update programs into the plurality of control devices, respectively, based on the installation command information.

2. The vehicle program update management system according to claim 1, characterized in that: At least one of the program structure, the update program, and the installation command information is stored in a volatile storage unit of the reprogramming terminal, and is not stored in a nonvolatile storage unit of the reprogramming terminal.

3. A reprogramming terminal connected to a plurality of control devices mounted on a vehicle by wired means, and performing information processing for updating a plurality of programs respectively maintained and executed by the plurality of control devices, characterized in that: The reprogramming terminal has: an update information acquisition unit that acquires update information about the plurality of programs respectively installed in the plurality of control devices; an update program acquisition unit that acquires, from a first server that manages a program structure that is a combination of the plurality of programs, reprogramming information that is information about an update program required for the vehicle and determined from the program structure required for the vehicle based on the update information, and acquires the plurality of update programs from a second server that manages a plurality of update programs for the plurality of programs based on the reprogramming information; a command acquisition unit that acquires, from the first server, installation command information regarding a command for installing the update program in the plurality of control devices; as well as A writing unit writes the acquired plurality of update programs into the plurality of control devices, respectively, based on the installation command information.

4. A vehicle program update management method, which performs update management on a plurality of programs respectively maintained and executed by a plurality of control devices mounted on a vehicle, characterized in that: The vehicle program update management method has the following features: A first step is to manage a program structure which is a combination of the plurality of programs; A second step is to manage a plurality of update programs for the plurality of programs; as well as a reprogramming step in which a device connected to the plurality of control devices in a wired manner performs information processing for updating the program, The reprogramming step includes an update information acquisition step of acquiring update information about the plurality of programs respectively installed in the plurality of control devices mounted on the vehicle from the vehicle, The first step includes: A determination step of determining the program structure required for the vehicle based on the update information; a reprogramming information generating step of generating information about the update program required for the vehicle, that is, reprogramming information, based on the determination; and An installation command generating step of generating installation command information, the installation command information being information about a command for installing the update program in the plurality of control devices, The reprogramming step further comprises: an update program acquisition step of acquiring the plurality of update programs based on the reprogramming information; A command acquisition step, acquiring the installation command information; and A writing step of writing the plurality of update programs obtained into the plurality of control devices respectively based on the installation command information.

Images