Master device, data distribution system, and update control program

Abstract

The present application provides a master device (3) comprising: a download execution unit (9a) configured to download a first data package corresponding to a first system and a second data package corresponding to a second system from a center device; an update data extraction unit (9b) configured to extract update data from the first data package and the second data package; an installation instruction unit (9c) configured to instruct an electronic control device of a writing target to install the update data; and an activation instruction unit (9d) configured to instruct the electronic control device of the writing target to activate the update data when the installation of the update data is completed in the electronic control device of the writing target. When the installation of the update data is completed in all first electronic control devices of first writing targets corresponding to the first system and all second electronic control devices of second writing targets corresponding to the second system, the activation instruction unit instructs all the first electronic control devices and all the second electronic control devices to activate the update data at the same timing.

Description

[0001] Cross-references to related applications

[0002] This application is based on Japanese Patent Application No. 2020-26298, filed on February 19, 2020, the contents of which are incorporated herein by reference. Technical Field

[0003] This disclosure relates to the main device, the data distribution system, and the update control program. Background Technology

[0004] In recent years, with the diversification of vehicle control functions such as driver assistance and autonomous driving, the scale of vehicle control and diagnostic programs in electronic control units (hereinafter referred to as ECUs) has increased. Furthermore, with version upgrades due to functional improvements, the opportunity to rewrite (reprogram) ECU programs is also increasing. On the other hand, with the development of communication networks, vehicle-to-everything (V2X) technology is becoming more widespread. Based on this situation, for example, Patent Document 1 proposes a technology where a master device, acting as a relay, is installed on the vehicle side. This master device transfers update data downloaded from a central device to the target ECU, thereby updating the target ECU's program via OTA (Over-The-Air).

[0005] Patent Document 1: Japanese Patent Application Publication No. 2016-224898

[0006] In the technology of updating programs, after the data packet is downloaded from the central device to the master device, during the process of updating the program written to the target ECU, a situation may occur where the vehicle cannot operate. It is desirable to minimize such inconvenience to the user. Summary of the Invention

[0007] The purpose of this disclosure is to appropriately reduce situations where vehicles cannot be moved.

[0008] According to one embodiment of this disclosure, the download execution unit downloads a first data packet corresponding to the first system and a second data packet corresponding to the second system from the central device. If the first and second data packets are downloaded by the download execution unit, the update data extraction unit extracts update data from the first and second data packets. If the update data is extracted by the update data extraction unit, the installation instruction unit instructs the electronic control device of the writing target to install the extracted update data. After the update data is installed in the electronic control device of the writing target, the activation instruction unit instructs the electronic control device of the writing target to activate the update data. After the update data is installed in all the electronic control devices of the first writing targets corresponding to the first system and all the electronic control devices of the second writing targets corresponding to the second system, the activation instruction unit instructs all the electronic control devices of the first writing targets and all the electronic control devices of the second writing targets to activate the update data at the same time.

[0009] If the electronic control devices for all first write objects and all second write objects are instructed to activate update data at different time intervals, and the first system and the second system are updated at different time intervals, a situation where the vehicle cannot operate will occur each time. However, if the update data is activated at the same time interval and the first system and the second system are updated at the same time interval, the situation where the vehicle cannot operate can be appropriately reduced. Attached Figure Description

[0010] The above-mentioned objects, as well as other objects, features, and advantages of this disclosure, will become clearer from the following detailed description with reference to the accompanying drawings.

[0011] Figure 1 It is a diagram showing the overall structure of a system in one implementation method.

[0012] Figure 2 This is one of the graphs representing the dependencies between the system and the write object ECU.

[0013] Figure 3 This is a diagram (Part Two) showing the dependency relationship between the system and the ECU being written to.

[0014] Figure 4 This is one of the flowcharts representing the download process.

[0015] Figure 5 This is a flowchart (part two) illustrating the installation instruction processing.

[0016] Figure 6 This is a flowchart (Part 3) representing the activation instruction processing.

[0017] Figure 7 This is a diagram showing the memory structure of the ECU.

[0018] Figure 8 It is a timing diagram (one of them).

[0019] Figure 9 This is one of the diagrams illustrating the installation and activation process.

[0020] Figure 10 This is one of the diagrams representing the methods of version upgrades.

[0021] Figure 11 This is a timing diagram (Part Two).

[0022] Figure 12 This is a diagram (Part Two) illustrating the installation and activation process.

[0023] Figure 13 This is a diagram illustrating the method of version upgrade (Part Two).

[0024] Figure 14 This is a diagram showing the memory structure of the ECU.

[0025] Figure 15 This is a timing diagram (Part 3). Detailed Implementation

[0026] Hereinafter, one embodiment will be described with reference to the accompanying drawings. The data distribution system 1 is a vehicle electronic control system comprising a central device 2, a main device 3 mounted in the vehicle, and an electronic control unit (hereinafter referred to as ECU (Electronic Control Unit)) 4, and is a system capable of rewriting vehicle control, diagnostic, and other applications installed on the ECU 4. In this embodiment, an example is shown where the ECU 4 rewrites the application by writing a reprogrammed program as update data to the memory; however, it can also be applied to rewriting application data used in applications, such as control parameters used by the ECU 4 or map data used in map applications. That is, the update data includes reprogrammed programs, control parameters, application data, etc. The ECU 4 to which the update data is written is, for example, each ECU 4 controlling the body system, each ECU 4 controlling the driving system, and each ECU 4 controlling the multimedia system.

[0027] The main unit 3 and multiple ECUs 4 are connected via bus 5. Bus 5 may be, for example, CAN (Controller Area Network), LIN (Local Interconnect Network), CXPI (Clock Extension Peripheral Interface), FlexRay, MOST (Media Oriented Systems Transport), etc. These buses use different communication protocols, have different communication speeds, and different signal formats.

[0028] The central device 2 includes a data packet generation unit 6, a data packet storage unit 7, and a data packet distribution unit 8. If update data is registered, the data packet generation unit 6 packages the registered update data and generates a data packet, which is then stored in the data packet storage unit 7. The data packet distribution unit 8 reads the data packet stored in the data packet storage unit 7 and, for example, wirelessly connects to the main device 3 via a wide-area communication line consisting of a 3G line, 4G line, etc., thereby distributing the read data packet from the data packet distribution unit 8 to the main device 3.

[0029] The main device 3 has a memory with a specified storage capacity. If a data packet is downloaded from the data distribution device 2, the downloaded data packet is temporarily stored in the memory. If the installation conditions for the write target ECU4 described later are met, the main device 3 reads the data packet stored in the memory, unpacks the read data packet, extracts the update data, and transfers the extracted update data to the write target ECU4.

[0030] The main unit 3 includes a control unit 9, a data communication unit 10, and a data transfer unit 11. The control unit 9 is composed of a microcomputer with a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), and I / O (Input / Output). The microcomputer executes a computer program stored in a non-transferable physical storage medium to perform corresponding processing and control all operations of the central unit 2. The computer program executed by the microcomputer includes an update control program. The control unit 9 includes a download execution unit 9a, an update data extraction unit 9b, an installation instruction unit 9c, an activation instruction unit 9d, an update data deletion unit 9e, and a structure information notification unit 9f.

[0031] Download execution unit 9a receives data packets distributed from central device 2 via data communication unit 10 and downloads the data packets from central device 2. If a data packet is downloaded via download execution unit 9a, update data extraction unit 9b unpacks the downloaded data packet and extracts update data. Furthermore, the data packet may be a compressed file, such as a zip file.

[0032] If the installation conditions for the write target ECU4 are met, the installation instruction unit 9c instructs the write target ECU4 to install, causing the write target ECU4 to install updated data. Installation conditions include, for example, user consent to installation, the vehicle status being installable, the write target ECU4 being installable, and the updated data being normal data. Specifically, the installation instruction unit 9c determines that the vehicle status is installable, for example, by determining that the remaining battery capacity of the vehicle battery is above a specified capacity or by determining that the environment is not improper. The installation instruction unit 9c determines that the write target ECU4 is installable, for example, by determining that the memory structure of the write target ECU4 is normal or by determining that the communication load of the bus 5 is less than a specified level. The installation instruction unit 9c determines that the updated data is normal data, for example, by determining that the updated data has not been tampered with or corrupted.

[0033] If the update data is installed in the write target ECU4, the activation instruction unit 9d instructs the write target ECU4 to activate the installed update data and causes the write target ECU4 to activate the update data. Activation conditions include, for example, the user consenting to activation, the vehicle being in an activatable state, and the write target ECU4 being in an activatable state.

[0034] Specifically, the activation indicator 9d determines that the vehicle is in an activatable state, for example, by determining that the vehicle is parked or that the remaining capacity of the vehicle battery is above a specified level. The activation indicator 9d also determines that the target ECU4 is in an activatable state, for example, by determining that the update data written to the memory of the target ECU4 is normal.

[0035] If the activation update data is completed in the write target ECU4, the update data deletion unit 9e deletes the update data transferred to the write target ECU4. If the activation update data is completed in the write target ECU4, the structure information notification unit 9f sends the structure information from the data communication unit 10 to the central device 2. If the central device 2 receives the structure information sent from the main device 3, it registers the received structure information in the vehicle information database that manages the system and ECU4 version for each vehicle, thereby ensuring that the system and ECU4 version managed in this device are consistent with the actual system and ECU4 version on the vehicle side.

[0036] Central device 2 notifies the user of the program update activity by distributing activity information to main device 3. Upon the user's consent to download, a data packet containing the updated data is distributed to main device 3. Main device 3 uses the activity information to notify the user of additional function information and allows the user to choose whether to proceed with the download. If main device 3 detects that the user has consented to download, it notifies central device 2 of this. Main device 3 downloads the data packet distributed from central device 2. The data packet distributed from central device 2 to main device 3 corresponds to a system. A system refers to a collection of control units or functions, such as the control system of an acceleration system, the control system of a braking system, the control system of a steering system, etc., and is composed of one or more ECUs 4. In this case, when updating the program of one system, one data packet is included in one activity; conversely, when updating the program of multiple systems simultaneously, multiple data packets are included in one activity. Since each case is defined by a single activity message, by having the user consent to download, not only can a program update of one system be performed, but also multiple system updates can be performed simultaneously.

[0037] The relationship between the system corresponding to the data packet and the write object ECU4 is explained. When an activity contains multiple data packets, there are cases where the write object ECU4 is not shared among the multiple systems corresponding to those multiple data packets, and cases where it is shared. Figure 2 An example is shown where no write object ECU4 is shared among multiple systems. System (1) involves write objects ECUs (A) to (C), and system (2) involves write objects ECUs (D) to (F). Since systems (1) and (2) do not share any write object ECU4, they are not dependent on each other. Because there is no dependency between systems (1) and (2), the write objects ECUs (A) to (C) of system (1) and the write objects ECUs (D) to (F) of system (2) can be activated independently. That is, even if only system (1) is a new version and system (2) is still an old version, it does not affect vehicle control. Furthermore, systems (1) and (2) can be activated at different times, and systems (1) and (2) can also be activated simultaneously.

[0038] Figure 3An example is given where a write object ECU4 is shared across multiple systems. System (1) involves write objects ECUs (A) to (C), system (2) involves write objects ECUs (C) and (D), and system (3) involves write objects ECUs (E) and (F). Systems (1) and (3) do not share any write object ECU4 and therefore have no dependency relationship. Similarly, systems (2) and (3) do not share any write object ECU4 and therefore have no dependency relationship. On the other hand, systems (1) and (2) have a dependency relationship because they share write object ECU (C). In this case, because there is a dependency relationship between systems (1) and (2), unlike the case where there is no dependency relationship, the write objects ECUs (A) to (D) constituting systems (1) and (2) need to be activated simultaneously.

[0039] Therefore, the central device 2 treats systems (1) and (2) as a single system (X), and packages the update data of the write targets ECUs (A) to (D) to generate data packet 1. Additionally, for system (3) which has no dependency on other systems, the central device 2 packages the update data of the write targets ECUs (E) and (F) to generate data packet 2. Since systems (X) and (3) have no dependency, they can be activated at different times, or simultaneously. The central device 2 stores a table that determines which ECU belongs to each system. When a dependent system becomes an update target, it treats these dependent systems as a single system and generates a data packet through the data packet generation unit 6.

[0040] In this case, the central device 2 stores data packets 1 and 2 in the data packet storage unit 7. As part of the program update activity, the central device 2 sets up data packets 1 and 2, reads them from the data packet storage unit 7, and distributes them from the data packet distribution unit 8 to the main device 3. The central device 2 generates data packets and sets up the activity in this way without creating dependencies. The above example illustrates a case where the write object ECU4 shared across multiple systems is a single entity, but the same applies when multiple write objects ECU4 are shared across multiple systems.

[0041] Furthermore, when a system involves more than one write target ECU4, if the activation update data is completed in all write target ECU4s involved in the system, then the software of that write target ECU4 is upgraded, and the system involved in that write target ECU4 is also upgraded. That is, the write target ECU4 is upgraded on a system-by-system basis.

[0042] ECU4 has a memory for storing control programs and data. There are two types of memory installed in ECU4: double-sided memory and single-sided memory. Double-sided memory has two sides that serve as program writing areas. Therefore, one side can be used as the program execution side, and the other side as the program rewriting side. While the vehicle is moving, the program stored on the execution side is executed, and the program on the rewriting side is rewritten while vehicle control is being performed. In other words, ECU4 equipped with double-sided memory can install and update data not only when the vehicle is stationary but also while it is in motion.

[0043] In contrast, single-sided memory, because it has a write area for a program on one side or on two virtual sides, differs from double-sided memory in that one side cannot be used as the program execution side and the other as the program rewriting side. Therefore, it cannot execute programs stored on the execution side for vehicle control or rewrite programs on the rewriting side while the vehicle is in motion. That is, ECU4 equipped with single-sided memory can only install update data when the vehicle is stationary; it cannot install update data while the vehicle is in motion. Furthermore, the effective activation of the written update data for either single-sided or double-sided memory ECUs is performed when the vehicle is stationary.

[0044] Next, refer to Figures 4 to 15 The function of the above structure will be explained. In the main unit 3, the control unit 9 performs in parallel the download process of the data packet downloaded from the central unit 2 and the installation instruction process of instructing the target ECU 4 to install update data. If the installation instruction process ends, the activation instruction process of instructing the target ECU 4 to activate update data will be performed. Each process will be explained in turn below.

[0045] (1) Download Processing

[0046] If the control unit 9 starts download processing, it refers to the activity information distributed from the central device 2, determines the data packet to be downloaded (S1), sends the download request of the determined data packet to the central device 2, and downloads the file corresponding to the determined data packet from the central device 2 (S2). If the control unit 9 downloads the file corresponding to the data packet from the central device 2, it stores the file corresponding to the downloaded data packet in the memory (S3).

[0047] Control unit 9 determines whether there are any remaining data packets to be downloaded (S4). If it determines that there are remaining data packets to be downloaded, meaning that all files corresponding to the data packets to be downloaded have not been downloaded (S4: Yes), it returns to step S1 and repeats the steps after step S1. If it determines that there are no remaining data packets to be downloaded, meaning that all files corresponding to the data packets to be downloaded have been downloaded (S4: No), control unit 9 ends the download process. Furthermore, control unit 9 may also send a download request for the next data packet 2 to central device 2 at the moment the download of data packet 1 is completed, and begin the installation instruction processing for the update data corresponding to data packet 1. If so, downloading data packet 2 from central device 2 and writing the update data corresponding to data packet 1 into target ECU 4 can be performed in parallel.

[0048] (2) Installation instructions

[0049] If the data packet download is complete, the control unit 9 begins installation instruction processing. Here, the premise is that the vehicle is in motion. If the control unit 9 begins installation instruction processing, it determines the data packet to be installed (S11) and identifies all write-target ECU4s involved in the determined data packet (S12). The control unit 9 selects the write-target ECU4 to be installed from among the identified write-target ECU4s (S13) and determines whether the memory structure of the selected write-target ECU4 is a double-sided memory or a single-sided memory (S14). If it is determined that the memory structure of the selected write-target ECU4 is a double-sided memory (S14: Yes), the control unit 9 instructs the selected write-target ECU4 to install update data, causing the selected write-target ECU4 to perform the update data installation (S15, equivalent to the installation instruction step).

[0050] If the control unit 9 receives an installation completion notification from the write target ECU4 that indicates the installation update data, and determines that the installation has been completed in the write target ECU4 that indicates the installation update data (S16: Yes), then it determines whether there are any remaining write target ECU4s that can be installed (S17). If it is determined that there are any remaining write target ECU4s that can be installed (S17: Yes), the control unit 9 returns to step S13 above and repeats the steps after step S13.

[0051] If it is determined that there are no remaining write objects ECU4 for installation (S17: No), the control unit 9 determines whether there are remaining data packets for installation (S18). If it is determined that there are remaining data packets for installation (S18: Yes), the control unit 9 returns to step S11 above and repeats the steps after step S11. If it is determined that there are no remaining data packets for installation (S18: No), the control unit 9 ends the installation instruction processing.

[0052] Since the control unit 9 instructs installation updates to ECU4 (which has a double-sided memory structure) during installation instruction processing while the vehicle is in motion, but not to ECU4 with a single-sided memory structure, it instructs to update the installation data when the vehicle is stationary, taking the opportunity of moving the vehicle from a moving position to a parked position. Furthermore, when installation instruction processing is performed while the vehicle is parked, the control unit 9 instructs installation updates to all ECU4 (which has a single-sided memory structure) during installation instruction processing, regardless of the memory structure.

[0053] (3) Activation Indicator Processing

[0054] If the vehicle moves from a moving position to a parked position, the control unit 9 begins activation instruction processing. Moving the vehicle from a moving position to a parked position is equivalent to a change in the vehicle's state to a predetermined state. If the control unit 9 begins activation instruction processing, it determines whether the installation update data has been completed in all write-target ECU4s that are to be installed (S21). That is, the control unit 9 determines whether the update data contained in all data packets corresponding to the activity has been installed. If the control unit 9 receives an installation completion notification from all write-target ECU4s that are to be installed, and determines that the installation update data has been completed in all write-target ECU4s that are to be installed (S21: Yes), it instructs all write-target ECU4s that have completed the installation update data to activate the update data, causing the write-target ECU4 to simultaneously activate the update data (S22, equivalent to the activation instruction step).

[0055] If the control unit 9 receives an activation completion notification from all write target ECU4 that have indicated activation update data, it determines that activation has been completed in all write target ECU4 that have indicated activation update data (S23: Yes), then notifies the central device 2 of the structure information (S24), deletes the update data (S25), and ends the activation instruction process.

[0056] If a more detailed explanation is required, such as Figure 7 As shown, the cases where the write objects ECUs (A), (B), (D), and (E) have a structure with double-sided memory 4a, and the write objects ECUs (C) and (F) have a structure with single-sided memory 4b will be explained.

[0057] If the dependency relationship between the systems (1) and (2) corresponding to the data packets downloaded from the central device 2 to the main device 3 is Figure 2 The situation shown is as follows: Figure 8 and Figure 9As shown, during vehicle operation, the control unit 9 first downloads data packet 1 (PKG1) corresponding to system (1). Then, in parallel with downloading data packet 2 (PKG2) corresponding to system (2), the control unit 9 sequentially instructs the target ECUs (A) and (B) to install update data (S31-S32). After completing the download of data packet 2 corresponding to system (2), the control unit 9 sequentially instructs the target ECUs (D) and (E) to install update data (S33-S34).

[0058] If the vehicle is moved from a moving position to a parked position, the control unit 9 sequentially instructs the ECUs (C) and (F) to install update data (S35-S36), and simultaneously instructs the ECUs (A) to (F) to activate update data (S37). That is, the control unit 9 simultaneously instructs the ECUs (A) to (C) involved in system (1) and the ECUs (D) to (F) involved in system (2) to activate update data. Figure 8 and Figure 9 In the example, system (1) is equivalent to the first system, the write target ECU (A) to (C) is equivalent to the electronic control device of the first write target, system (2) is equivalent to the second system, and the write target ECU (D) to (F) is equivalent to the electronic control device of the second write target.

[0059] like Figure 10 As shown, if, for example, the software version of the written objects ECU (A) to (C) is upgraded from "1.0" to "1.1", and the software version of the written objects ECU (D) to (F) is upgraded from "2.0" to "2.1", then both system (1) and system (2) will be upgraded simultaneously.

[0060] Furthermore, if the dependency relationship between the systems (1) to (3) corresponding to the data packets downloaded from the central device 2 to the main device 3 is Figure 3 The situation shown is as follows: Figure 11 and Figure 12 As shown, during vehicle operation, the control unit 9 first downloads the data packet X (PKGX) corresponding to the system (X). Then, in parallel with downloading the data packet 3 (PKG3) corresponding to the system (3), the control unit 9 sequentially instructs the target ECUs (A), (B), and (D) to install update data (S41-S43). After completing the download of the data packet 3 corresponding to the system (3), the control unit 9 instructs the target ECU (E) to install update data (S44).

[0061] If the vehicle is moved from a moving position to a parked position, the control unit 9 sequentially instructs the target ECUs (C) and (F) to install update data (S45-S46), and simultaneously instructs the target ECUs (A) to (F) to activate update data (S47). That is, the control unit 9 simultaneously instructs the target ECUs (A) to (D) involved in system (X) and the target ECUs (E) and (F) involved in system (3) to activate update data. Figure 11 and Figure 12 In the example, system (X) is equivalent to the first system, the write target ECU (A) to (D) are equivalent to the electronic control devices of the first write target, system (3) is equivalent to the second system, and the write target ECU (E) and (F) are equivalent to the electronic control devices of the second write target.

[0062] like Figure 13 As shown, if system (X) upgrades its version because, for example, the software version of object ECU (A) and (B) is upgraded from "1.0" to "1.1", the software version of object ECU (C) is upgraded from "1.0" to "1.2", and the software version of object ECU (D) is upgraded from "1.1" to "1.2", and system (3) upgrades its version because the software version of object ECU (E) and (F) is upgraded from "2.0" to "2.1", then system (X) and system (3) upgrade their versions simultaneously.

[0063] Furthermore, the above example illustrates a scenario where an activity contains two data packets and two systems are simultaneously upgrading. However, the number of data packets contained in an activity, and the number of systems simultaneously upgrading, are arbitrary. Additionally, the number of write objects (ECU4) involved in a system is also arbitrary.

[0064] Next, as Figure 14 As shown, the case where the write targets ECU(A) to (F) have a structure with a double-sided memory 4a will be explained. In this case, as Figure 15As shown, while the vehicle is in motion, the control unit 9 first downloads the data packet X corresponding to system (X). Then, in parallel with downloading the data packet 3 corresponding to system (3), the control unit 9 sequentially instructs the write target ECUs (A) to (D) to install update data. After completing the download of the data packet 3 corresponding to system (3), the control unit 9 instructs the write target ECUs (E) and (F) to install update data. Here, for example, if the vehicle is immediately moved from driving to parking after receiving the installation completion notification from the write target ECU (E), the control unit 9 stops installing update data and does not install update data on the write target ECU (F). Since the installation update data is not completed in the write target ECU (F), the control unit 9 does not instruct the activation of update data. That is, even if the installation update data is completed in the write target ECUs (A) to (D) involved in system (X), if the installation update data is not completed in any write target ECU involved in system (3), the control unit 9 does not instruct the activation of update data even when the vehicle is parked.

[0065] In this scenario, at the start of activation, it is assumed that a message such as "Activating a new program from now on, therefore the vehicle cannot be driven for N minutes" is reported to the user and the activation is executed. If the data update is activated at different time points in system (X) and system (3), the aforementioned message needs to be reported each time, resulting in a period during which the vehicle cannot be driven due to activation. In contrast, if the data update is activated at the same time point in system (X) and system (3), the aforementioned message only needs to be reported once, reducing the period during which the vehicle cannot be driven due to activation compared to the case of activation at different time points.

[0066] In the structure described above, the structure of the control unit 9 sequentially downloading multiple data packets from the central device 2 during the download process has been explained. However, since, as described above, the data packets being downloaded have no dependencies, multiple data packets can also be downloaded from the central device 2 in parallel. Figure 2 In the example, data packet 1 corresponding to system (1) and data packet 2 corresponding to system (2) can also be downloaded in parallel. Figure 3 In the example, data packets X corresponding to system (X) and data packets 3 corresponding to system (3) can also be downloaded in parallel.

[0067] As explained above, the following effects can be achieved according to this embodiment.

[0068] In the main device 3, after the update data is installed in all the write-object ECU4 corresponding to the first system and all the write-object ECU4 corresponding to the second system, the update data is activated at the same time for all the write-object ECU4 corresponding to the first system and all the write-object ECU4 corresponding to the second system. If the update data is activated and updated for multiple systems at different time points, a situation where the vehicle cannot operate will occur each time. However, by activating and updating the update data at the same time point, the situation where the vehicle cannot operate can be appropriately reduced.

[0069] In the main device 3, when the vehicle moves from a moving position to a parked position, update data is activated for all write-object ECU4 corresponding to the first system and all write-object ECU4 corresponding to the second system at the same time interval. This allows for program updates to be performed at the time the vehicle moves from a moving position to a parked position.

[0070] In the main unit 3, the update data is instructed to be installed on the target ECU 4 in parallel with downloading the data package from the central unit 2. Compared to the structure where the update data is instructed to be installed on the target ECU 4 after the data package download is completed, the time required from the start of data package download to the completion of activation can be shortened.

[0071] In the main device 3, multiple data packets are downloaded in parallel from the central device 2. This reduces the time from the start of downloading multiple data packets from the central device 2 to completion.

[0072] In the main device 3, for the write target ECU4 with a double-sided memory structure, update data is instructed to be installed on the write target ECU4 while it is in motion or parked. By instructing the installation of update data while the vehicle is in motion, and not instructing the installation of update data while the vehicle is parked, the update data can be quickly activated when the vehicle is moved from a moving position to a parked position.

[0073] In the main device 3, for the write target ECU4 with a single-sided memory structure, when the vehicle is stationary, the device is instructed to install update data. When the vehicle is in motion, the device is not instructed to install update data, thus ensuring the safety of vehicle control and other aspects.

[0074] In the main unit 3, after activation is completed in all written target ECUs 4, the updated data is deleted. For example, assuming that installation is instructed again if activation is not completed properly, by maintaining the updated data until activation is complete, it is possible to prevent a backlash to the download.

[0075] In the main unit 3, after activation is completed in all written target ECUs 4, structural information is notified to the central unit 2. By notifying the central unit 2 of the structural information, the system and ECU 4 versions managed by the central unit 2 can be made consistent with the actual system and ECU 4 versions on the vehicle side.

[0076] This disclosure is described based on embodiments, but should be understood as not being limited to those embodiments or structures. This disclosure also includes various modifications and equivalent variations. Furthermore, various combinations and methods, including only one element, one or more, or one or fewer of these elements, are also included within the scope and spirit of this disclosure.

[0077] The control unit and method described in this disclosure can also be implemented using a dedicated computer, which is provided by comprising a processor and memory programmed to perform one or more functions embodied in a computer program. Alternatively, the control unit and method described in this disclosure can also be implemented using a dedicated computer provided by employing one or more dedicated hardware logic circuits to construct a processor. Alternatively, the control unit and method described in this disclosure can also be implemented using one or more dedicated computers, which are composed of a combination of a processor and memory programmed to perform one or more functions, and a processor composed of one or more hardware logic circuits. Furthermore, the computer program can also be stored as instructions executable by the computer on a computer-readable non-transferable tangible recording medium.

[0078] The main device 3 may also have a structure that includes: a DCM (Data Communication Module) for storing data packets downloaded from the central device 2, and a CGW (Central Gateway) for indicating the installation and activation of updated data.

[0079] Alternatively, it can be a structure where an external storage device is provided separately from the main device 3, and the data packets distributed from the central device 2 to the main device 3 are temporarily stored in the external storage device.

[0080] In the central device 2, an example is shown of a structure that combines data packets in a way that does not create dependencies to generate and distribute activities. However, it is also possible to have a structure in the main device 3 that determines the dependencies of data packets downloaded from the central device 2 by enabling the main device 3 to determine the dependencies of the data packets.

Claims

1. A main device comprising: The download execution unit downloads the first data packet corresponding to the first system and the second data packet corresponding to the second system from the central device; The update data extraction unit extracts update data from the first data packet and the second data packet downloaded by the download execution unit. The installation instruction unit instructs the electronic control device of the object to install the update data extracted by the update data extraction unit mentioned above; as well as The activation indicator, after the update data has been installed in the electronic control device of the object being written, instructs the electronic control device of the object to activate the update data. After completing the installation and update data in the electronic control devices of all first write targets corresponding to the first system, the installation instruction unit completes the installation and update data in the electronic control devices of all second write targets corresponding to the second system before activating the update data in the electronic control devices of the first write targets. After the update data has been installed in all the electronic control devices of the first write objects corresponding to the first system and all the electronic control devices of the second write objects corresponding to the second system, the activation instruction unit instructs the electronic control devices of all the first write objects and all the electronic control devices of the second write objects to activate the update data at the same time interval. The device includes a structural information notification unit that notifies the aforementioned central device of structural information. Once activation is completed in the electronic control devices of all the first write objects and all the electronic control devices of the second write objects, the structure information notification unit notifies the central device of the structure information.

2. The main device according to claim 1, wherein, After the update data is installed in the electronic control devices of all first write objects corresponding to the first system and all second write objects corresponding to the second system, the activation instruction unit, taking the change of vehicle status as a predetermined state as the trigger, instructs the electronic control devices of all first write objects and all second write objects to activate the update data at the same time interval.

3. The main device according to claim 1, wherein, The aforementioned installation instruction unit and the aforementioned download execution unit download the aforementioned first data packet and the aforementioned second data packet from the aforementioned central device in parallel, and instruct the electronic control device of the writing target to install update data.

4. The main device according to claim 1, wherein, The aforementioned download execution unit downloads the aforementioned first data packet and the aforementioned second data packet in parallel from the aforementioned central device.

5. The main device according to claim 1, wherein, The aforementioned installation instruction unit instructs the electronic control device that has a double-sided memory structure to install and update data while the device is in motion or parked.

6. The main device according to claim 1, wherein, The aforementioned installation instruction unit instructs the electronic control device that is a single-sided memory structure to install update data during shutdown.

7. The main device according to claim 1, wherein, It has an update data deletion unit that deletes the updated data. After activation is completed in the electronic control devices of all the first write objects and all the electronic control devices of the second write objects, the update data deletion unit deletes the update data extracted by the update data extraction unit.

8. The main device according to any one of claims 1 to 7, wherein, The aforementioned download execution unit receives activity information corresponding to the first data packet and the second data packet, and downloads the first data packet and the second data packet from the aforementioned central device on the condition that consent has been given to the update regarding the use of the first data packet and the second data packet.

9. The main device according to claim 1, wherein, The aforementioned central device generates a first system, which comprises multiple systems with interdependent relationships. The aforementioned central device generates a second system, which is independent of the first system.

10. A data distribution system comprising: a central device for distributing a first data packet corresponding to a first system and a second data packet corresponding to a second system to a master device; a master device for downloading the first data packet and the second data packet from the central device and transferring updated data extracted from the downloaded data packet to an electronic control device for writing; and an electronic control device for writing the updated data transferred from the master device to a memory, wherein... The aforementioned central device includes: The data packet storage unit stores the first data packet and the second data packet generated in a manner in which the first system and the second system become independent; and The data packet distribution unit reads the first data packet and the second data packet stored in the data packet storage unit, and distributes the read first data packet and the second data packet to the master device. The aforementioned main device includes: The download execution unit downloads the first data packet and the second data packet from the central device; The update data extraction unit extracts update data from the first data packet and the second data packet downloaded by the download execution unit. The installation instruction unit instructs the electronic control device of the object to install the update data extracted by the update data extraction unit described above. as well as The activation indicator, after the update data has been installed in the electronic control device of the object being written, instructs the electronic control device of the object to activate the update data. After completing the installation and update data in the electronic control devices of all first write targets corresponding to the first system, the installation instruction unit completes the installation and update data in the electronic control devices of all second write targets corresponding to the second system before activating the update data in the electronic control devices of the first write targets. After the update data has been installed in all the electronic control devices of the first write objects corresponding to the first system and all the electronic control devices of the second write objects corresponding to the second system, the activation instruction unit instructs the electronic control devices of all the first write objects and all the electronic control devices of the second write objects to activate the update data at the same time interval. The device includes a structural information notification unit that notifies the aforementioned central device of structural information. Once activation is completed in the electronic control devices of all the first write objects and all the electronic control devices of the second write objects, the structure information notification unit notifies the central device of the structure information.

11. The data distribution system according to claim 10, wherein, The aforementioned central device includes a data packet generation unit. When a system with a dependency relationship becomes the object of an update, the data packet generation unit generates a data packet for these multiple systems with a dependency relationship as a single system.

12. The data distribution system according to claim 10, wherein, The aforementioned central device generates a first system, which comprises multiple systems with interdependent relationships.

13. A persistent tangible computer-readable medium comprising a computer-executed command that causes a control unit of a master device to perform the following steps: downloading a first data packet corresponding to a first system and a second data packet corresponding to a second system from a central device, and extracting update data from the downloaded first data packet and the second data packet. The installation instruction steps instruct the electronic control devices of all first write objects corresponding to the first system and all second write objects corresponding to the second system to install and update data; and The activation instruction step involves, after the update data is installed in the electronic control devices of all first write objects corresponding to the first system, and before activating the update data in the electronic control devices of the first write objects, installing the update data in the electronic control devices of all second write objects corresponding to the second system. After the update data is installed in both the electronic control devices of the first and second write objects, the activation instruction for the update data is given to both the electronic control devices of the first and second write objects at the same time interval. Once activation is completed in the electronic control devices of all the first write objects and all the electronic control devices of the second write objects, the structure information is notified to the central device.

Images