Information processing apparatus, information processing method, and system

Abstract

The present disclosure relates to an information processing apparatus, an information processing method, and a system. An object of the present disclosure is to provide a technology capable of making the display content of a monitor provided to an autonomous travel vehicle consistent with the display content of a monitor for remotely monitoring the operation of the autonomous travel vehicle. The information processing apparatus receives a completion notification indicating that the update of first software that controls the display of a first monitor provided to an autonomous travel vehicle is completed. Then, the information processing apparatus updates second software that controls the display of a second monitor for remotely monitoring the operation of the autonomous travel vehicle, with the reception of the completion notification as a trigger.

Description

Technical Field

[0001] This disclosure relates to technologies for remotely monitoring the operation of autonomous vehicles. Background Technology

[0002] Reference 1 discloses a system for updating software in vehicle-mounted devices using OTA (Over-The-Air) updates. In the system disclosed in Reference 1, the server distributes the updated software to the vehicle according to the priority of the software updates.

[0003] Existing technical documents

[0004] Patent documents

[0005] Patent Document 1: Japanese Patent Application Publication No. 2018-132979 Summary of the Invention

[0006] The purpose of this disclosure is to provide a technique that enables the display content of a monitor installed on an autonomous vehicle to be consistent with the display content of a monitor used for remotely monitoring the operation of the autonomous vehicle.

[0007] The information processing apparatus according to the first aspect of this disclosure includes a control unit that performs:

[0008] Receive a completion notification indicating that the update of the first software controlling the display on the first monitor installed on the autonomous vehicle is complete; and

[0009] Upon receiving the completion notification, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle is updated.

[0010] The information processing methods involved in the second aspect of this disclosure include:

[0011] Receive a completion notification indicating that the update of the first software controlling the display on the first monitor installed on the autonomous vehicle is complete; and

[0012] Upon receiving the completion notification, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle is updated.

[0013] The systems involved in the third approach of this disclosure include:

[0014] The on-board unit sends a completion notification indicating that the update of the first software controlling the display of the first monitor installed on the autonomous vehicle is complete; and

[0015] The information processing device includes a control unit that executes second software to control the display of a second monitor used for remotely monitoring the operation of the autonomous vehicle, triggered by receiving the completion notification from the vehicle-mounted device.

[0016] According to this disclosure, it is possible to make the display content of a monitor installed on an autonomous vehicle consistent with the display content of a monitor used for remotely monitoring the operation of the autonomous vehicle. Attached Figure Description

[0017] Figure 1 This is a diagram showing the general structure of a vehicle management system.

[0018] Figure 2 It is a block diagram that roughly shows the hardware structure of the vehicle and the monitoring server.

[0019] Figure 3 This is a block diagram that roughly illustrates an example of the functional structure of a monitoring server.

[0020] Figure 4 This is a flowchart illustrating the process of instructing the handling.

[0021] Figure 5 It is a sequence diagram used to illustrate the execution order of the updates of the first software and the second software.

[0022] Symbol Explanation

[0023] 1: Vehicle Management System; 100: Vehicle; 101: Central ECU; 102: Communication Module; 103: First Monitor; 1031: Monitor ECU; 104: Camera; 200: Monitoring Server; 201: Processor; 202: Main Storage Unit; 203: Auxiliary Storage Unit; 204: Communication Interface; 205: Second Monitor; 300: Distribution Server. Detailed Implementation

[0024] In an autonomous vehicle, a monitor (first monitor) is installed to display the vehicle's status. Additionally, when remotely monitoring the autonomous vehicle's operation, its status is also displayed on a monitor located outside the vehicle (second monitor). In order to ensure that the status of the autonomous vehicle, which can be monitored remotely based on the display on the first monitor, is also accessible, it is required that the content displayed on the first monitor be consistent with the content displayed on the second monitor.

[0025] However, if the software controlling the display of the first monitor (the first software) is updated, the content displayed on the first monitor sometimes changes. Therefore, in order to make the content displayed on the first monitor consistent with the content displayed on the second monitor, and to match the update of the first software, the software controlling the display of the second monitor (the second software) also needs to be updated.

[0026] Therefore, in the information processing apparatus of this disclosure, the control unit receives a completion notification indicating that the update of the first software is complete. Then, the control unit updates the second software upon receiving the completion notification. Accordingly, the second software can be updated in accordance with the timing of the update of the first software in the autonomous vehicle. Therefore, even if the display content of the first monitor changes in conjunction with the update of the first software, the display content of the second monitor can also change in accordance with that change. Thus, even if the first software is updated, the display content of the first monitor can be made consistent with the display content of the second monitor.

[0027] Hereinafter, specific embodiments of the present disclosure will be described with reference to the accompanying drawings. Unless otherwise specified, the dimensions, materials, shapes, and relative arrangements of the structural components described in these embodiments are not intended to limit the technical scope of the present disclosure to these.

[0028] <Implementation Method>

[0029] (System Architecture)

[0030] Figure 1 This is a diagram illustrating the general structure of a vehicle management system. Vehicle management system 1 is a system for managing vehicle 100. Vehicle 100 is an autonomous vehicle. That is, vehicle 100 is a vehicle capable of autonomously driving according to a provided operating plan even without a driver. However, the operation of vehicle 100 is monitored remotely by a monitor. Monitoring server 200 is a server used to remotely monitor the operation of vehicle 100. Distribution server 300 is a server that distributes various software required for the autonomous driving of vehicle 100 to vehicle 100 for driving or operational management.

[0031] In the vehicle management system 1, vehicle 100, monitoring server 200, and distribution server 300 are interconnected via network N1. Network N1 can be, for example, a WAN (Wide Area Network) such as the Internet or a telephone communication network such as a mobile phone.

[0032] Figure 2This is a block diagram that schematically illustrates the hardware structure of the vehicle 100 and the monitoring server 200. The vehicle 100 includes a central ECU (Electronic Control Unit) 101, a communication module 102, a first monitor 103, and a camera 104. The central ECU 101 is a computer that centrally controls the various ECUs used to control the various equipment installed in the vehicle 100. The communication module 102 is a communication device used to connect the vehicle 100 to the network N1. The communication module 102 uses predetermined wireless communication standards such as 3G (3rd Generation) or LTE (Long Term Evolution) to communicate with the monitoring server 200 and the distribution server 300 via the network N1.

[0033] The first monitor 103 is a display device used to display the status of the vehicle 100 inside the vehicle. Examples of the status of the vehicle 100 displayed on the first monitor 103 include the vehicle 100's speed, the illumination of the direction indicator, the illumination of the headlights, various warning lights (such as the battery level warning light, the half-door warning light, and the brake warning light), and various indicator lights (such as the slippage indicator light and the safety indicator light). Furthermore, if the vehicle 100 can switch between a driver-driven driving mode and an autonomous driving mode, the driving mode of the vehicle 100 can also be displayed on the first monitor 103 as the status of the vehicle 100. By displaying the status of the vehicle 100 on the first monitor 103, people inside the vehicle (e.g., personnel supporting the operation of the vehicle 100 inside the vehicle) can monitor the status of the vehicle 100.

[0034] Furthermore, the first monitor 103 includes a monitor ECU 1031. The monitor ECU 1031 is a computer that controls the first monitor 103. The monitor ECU 1031 controls the display content on the first monitor 103 by executing first software stored in the storage unit of the first monitor 103. Therefore, the display content on the first monitor 103 is determined according to the content of the first software.

[0035] Camera 104 is a camera used to photograph the interior of vehicle 100. Camera 104 can photograph images displayed on the first monitor 103. Furthermore, within vehicle 100, the central ECU 101, communication module 102, first monitor 103, and camera 104 can communicate with each other using a predetermined in-vehicle communication standard. Examples of predetermined in-vehicle communication standards include CAN (Controller Area Network) or LIN (Local Interconnect Network).

[0036] The monitoring server 200 is a computer having a processor 201, main storage 202, secondary storage 203, communication interface (communication I / F) 204, and a second monitor 205. The processor 201 is, for example, a CPU (Central Processing Unit) or a DSP (Digital Signal Processor). The main storage 202 is, for example, RAM (Random Access Memory). The secondary storage 203 is, for example, ROM (Read Only Memory), HDD (Hard Disk Drive), or flash memory. Additionally, the secondary storage 203 may include a removable medium (portable recording medium). Here, the removable medium is, for example, a USB flash drive, SD card, CD-ROM, DVD, or Blu-ray disc. The secondary storage 203 stores the operating system (OS), various programs, and various information tables, etc. Furthermore, the processor 201 loads the program stored in the auxiliary storage unit 203 into the main storage unit 202 and executes it, thereby realizing various controls for monitoring the operation of the vehicle 100.

[0037] Communication I / F204 is an interface used to connect monitoring server 200 to network N1. Communication I / F204 is, for example, a LAN (Local Area Network) interface board or a wireless communication circuit for wireless communication.

[0038] The second monitor 205 is a display device for remotely monitoring the status of vehicle 100. The second monitor 205 displays the status of vehicle 100 in the same way as the first monitor 103 installed on vehicle 100. Information indicating the status of vehicle 100 is transmitted from vehicle 100 to monitoring server 200 via network N1. Furthermore, in vehicle 100, central ECU 101 instructs communication module 102 to send information indicating the status of vehicle 100 to monitoring server 200. The transmission of information indicating the status of vehicle 100 from vehicle 100 to monitoring server 200 is performed periodically at predetermined intervals. Then, the second monitor 205 displays the status of vehicle 100 received from vehicle 100. The status of vehicle 100 is displayed on the second monitor 205, allowing the monitor to understand the status of vehicle 100. Additionally, processor 201 controls the display content on the second monitor 205 by executing second software. Therefore, the display content on the second monitor 205 is determined based on the content of the second software.

[0039] Furthermore, some or all of the functions of the monitoring server 200 can also be implemented using hardware circuits such as ASICs or FPGAs. Additionally, the monitoring server 200 does not necessarily need to be implemented using a single physical structure; it can also be composed of multiple cooperating computers. Furthermore, in this embodiment, the monitoring server 200 is equivalent to the "information processing device" of this disclosure.

[0040] (Software update)

[0041] As described above, in vehicle 100, monitor ECU 1031 controls the display content on first monitor 103 by executing first software. However, sometimes it is necessary to update the first software stored in the storage unit of first monitor 103. In this case, data for updating the first software (hereinafter sometimes referred to as "first data") is distributed from distribution server 300 to vehicle 100. In vehicle 100, the first data distributed from distribution server 300 is received by communication module 102. Then, central ECU 101 instructs monitor ECU 1031 to execute an update of the first software based on the first data.

[0042] At this time, due to the update of the first software, the display content of the first monitor 103 sometimes changes. Here, in order to remotely monitor the status of the vehicle 100 using the second monitor 205 of the monitoring server 200, the display content of the second monitor 205 must be consistent with the display content of the first monitor 103. Therefore, when the display content of the first monitor 103 changes, the display content of the second monitor 205 needs to change accordingly. Thus, when the first software in the vehicle 100 is updated, the second software controlling the display content of the second monitor 205 in the monitoring server 200 also needs to be updated accordingly.

[0043] Therefore, when the first software is updated, data for updating the second software (hereinafter sometimes referred to as "second data") is prepared in advance. To ensure that the display content of the second monitor 205 after the second software update matches the display content of the first monitor 103 after the first software update, the content of the second data corresponds to the content of the first data. The prepared second data is stored in the auxiliary storage unit 203 of the monitoring server 200. Then, the processor 201 reads the second data from the auxiliary storage unit 203 and executes the second software update. Furthermore, details regarding the execution order of the updates to the first and second software will be described later.

[0044] (Functional Structure)

[0045] Next, according to Figure 3 This describes the functional structure of the monitoring server 200. Figure 3This is a block diagram that roughly illustrates an example of the functional structure of the monitoring server 200.

[0046] The monitoring server 200 includes a control unit 210, a communication unit 220, a second data storage unit 230, and a schedule database (schedule DB) 240 as functional units. The communication unit 220 has the function of connecting the monitoring server 200 to a network. The communication unit 220 can be implemented via communication I / F 204.

[0047] The control unit 210 has the function of performing arithmetic processing for controlling the monitoring server 200. The control unit 210 can be implemented by the processor 201. The second data storage unit 230 stores second data prepared for updating the second software. The operation schedule DB 240 stores the operation schedule of the vehicle 100. Here, the operation schedule of the vehicle 100 also includes a schedule of the periods when the vehicle 100 stops operating. The second data storage unit 230 and the operation schedule DB 240 can be implemented by the auxiliary storage unit 203.

[0048] Furthermore, the control unit 210, as a functional unit, includes an instruction unit 2101 and an update execution unit 2102. The instruction unit 2101 has the function of instructing the vehicle 100 on the execution period for updating the first software. That is, when an update of the first software in the vehicle 100 is required, the monitoring server 200 determines the execution period for the update. Then, the monitoring server 200 instructs the vehicle 100 on the execution period for the first software update. Additionally, before the execution period for the first software update determined in the monitoring server 200, second data for updating the second software is prepared and input into the second data storage unit 230. Furthermore, the update execution unit 2102 has the function of performing the update of the second software based on the second data. Details regarding the processes performed by the instruction unit 2101 and the update execution unit 2102 will be described later.

[0049] (Instructions for processing)

[0050] Next, according to Figure 4 This describes the instruction processing performed in the monitoring server 200. The instruction processing is the process performed to instruct the vehicle 100 on the execution period of the first software update. Figure 4 This is a flowchart illustrating the process of instruction processing. This process is executed by the instruction unit 2101 in the control unit 210.

[0051] As described above, in the vehicle management system 1, when the first software is updated in the vehicle 100, the first data is distributed to the vehicle 100 from the distribution server 300. Here, before distributing the first data to the vehicle 100, the distribution server 300 first sends information about the period during which the first data can be distributed (hereinafter, sometimes referred to as "distribution period information") to the monitoring server 200. In the monitoring server 200, the communication unit 220 receives the distribution period information sent from the distribution server 300. In the monitoring server 200, when the distribution period information is received from the distribution server 300, the instruction unit 2101 executes the command. Figure 4 The process is shown below.

[0052] exist Figure 4 In the illustrated process, in S101, the distribution period information received by the communication unit 220 is obtained. Next, in S102, the operating schedule of vehicle 100 stored in the operating schedule DB240 is obtained.

[0053] Next, in S103, the execution period for updating the first software is determined based on the distribution period information obtained in S101 and the operation schedule obtained in S102. Specifically, the execution period for updating the first software is selected as a period after the period during which the distribution of the first data from the distribution server 300 is possible, and during the period when the operation of the vehicle 100 is scheduled to stop. By setting the execution period for updating the first software to such a period, the first software can be updated during the period when the vehicle 100 is not in operation.

[0054] Next, in S104, instruction information indicating the execution period of the first software update determined in S103 is sent to vehicle 100. At this time, the instruction information is sent from communication unit 220 to vehicle 100. Then, in vehicle 100, the sent instruction information is received by communication module 102. Thus, in vehicle 100, central ECU 101 is able to determine the period when the first software update should be performed.

[0055] (Update execution order)

[0056] Next, according to Figure 5 This describes the order in which the first software update is performed in vehicle 100 and the second software update is performed in monitoring server 200. Figure 5 It is a sequence diagram used to illustrate the execution order of the updates of the first software and the second software.

[0057] In vehicle 100, when the execution period for the first software update, indicated by the instruction information received from monitoring server 200, arrives, a request message for sending update data is sent to distribution server 300 (S10). This request message is sent by the central ECU 101 instructing the communication module 102 to send it. When the distribution server 300 receives the request message from vehicle 100, it sends first data to vehicle 100 (S11). In vehicle 100, when the first data is received by communication module 102, the central ECU 101 instructs the monitoring ECU 1031 to execute the first software update based on the first data. Thus, the update of the first software stored in the storage unit of the first monitor 103 is executed (S12).

[0058] Subsequently, when the update of the first software in vehicle 100 is completed, a completion notification is sent from vehicle 100 to monitoring server 200 (S13). The completion notification is information used to notify that the update of the first software is complete. The sending of this completion notification is performed by instructing the central ECU 101 to send it to communication module 102.

[0059] In the monitoring server 200, the communication unit 220 receives a completion notification sent from the vehicle 100. When the communication unit 220 receives the completion notification, the update execution unit 2102 of the control unit 210 executes processing for updating the second software. Specifically, the update execution unit 2102 reads the second data stored in the second data storage unit 230 (S14). Then, the update execution unit 2102 executes an update of the second software based on the read second data (S15). Thus, the second software is updated in the monitoring server 200.

[0060] According to the above sequence, the second software is updated in the monitoring server 200 upon receiving a completion notification from the vehicle 100. This allows the second software to be updated in a timeframe that matches the timing of the first software update in the vehicle 100. Therefore, even if the display content of the first monitor 103 changes in conjunction with the update of the first software, the display content of the second monitor 205 can also change accordingly. Thus, even if the first software is updated, the display content of the first monitor 103 can be made consistent with the display content of the second monitor 205.

[0061] Furthermore, in the case of updating both the first and second software, it is also considered to perform the update of the first software after the update of the second software is completed, in the reverse order of the above-described embodiments. However, in the vehicle 100, compared to the monitoring server 200, there is a higher possibility of certain malfunctions occurring during the reception of data for software updates or during the execution of software updates. Therefore, by performing the update of the second software after the update of the first software is completed, as in the above-described embodiments, it is possible to make the display content of the first monitor 103 and the display content of the second monitor 205 more quickly synchronize.

[0062] (Variation Example 1)

[0063] In vehicle 100, sometimes even if the first software is updated, the display content of the first monitor 103 does not change before and after the update is performed. For example, if the update of the first software is a formal display change in the first monitor 103 (e.g., a change in the shape of the display markers or a change in the font of the displayed characters), then the display content of the first monitor 103 itself does not change before and after the update is performed. In such cases, it is not necessary to update the second software to match the update of the first software.

[0064] Therefore, when receiving distribution period information from the distribution server 300, the monitoring server 200 can also receive information related to the update content of the first software. Then, the monitoring server 200 can execute the update of the second software only if the update content of the first software meets predetermined conditions, according to the execution order in the above embodiment, triggered by receiving a completion notification from the vehicle 100. Here, predetermined conditions refer to conditions that determine whether the update content of the first software is such that the display content of the first monitor 103 changes along with the update.

[0065] The control unit 210 determines whether the content of the update to the first software meets predetermined conditions. As shown in the example above, if the content of the update to the first software is a change in the form of the display on the first monitor 103, it is determined that the content of the update to the first software does not meet the predetermined conditions.

[0066] Accordingly, it is possible to suppress unnecessary updates of the second software that accompany the updates of the first software.

[0067] (Variation Example 2)

[0068] As described above, in vehicle 100, camera 104 can capture images displayed on first monitor 103. Therefore, in vehicle 100, after the first software update is completed, camera 104 can also capture images displayed on first monitor 103. The image data captured by camera 104 can then be sent to monitoring server 200. Accordingly, a monitor remotely monitoring the operation of vehicle 100 using monitoring server 200 can confirm the content displayed on first monitor 103 after the first software update.

[0069] <Other Implementation Methods>

[0070] The above-described embodiments are merely examples, and this disclosure can be appropriately modified and implemented without departing from its essence. Furthermore, the processes and methods described in this disclosure can be freely combined and implemented as long as they do not create technical contradictions.

[0071] Furthermore, a process described as being performed by one device can also be executed by multiple devices. Alternatively, a process described as being performed by different devices can also be executed by one device. In a computer system, the hardware architecture (server architecture) used to implement each function can be flexibly changed.

[0072] This disclosure can also be implemented by providing a computer program with the functions described in the above embodiments to a computer, which has one or more processors that read and execute the program. Such a computer program can be provided to the computer either via a non-transitory computer-readable storage medium connectable to the computer's system bus or via a network. Non-transitory computer-readable storage media include, for example, any type of disk suitable for storing electronic commands, such as a disk (floppy disk, hard disk drive (HDD), etc.), an optical disk (CD-ROM, DVD, Blu-ray disc, etc.), a read-only memory (ROM), a random access memory (RAM), an EPROM, an EEPROM, a magnetic card, a flash memory, or an optical card.

Claims

1. An information processing apparatus comprising a control unit, the control unit performing: Receive information relating to updates to the first software that controls the display of the first monitor installed on the autonomous vehicle; Receive a completion notification indicating that the update of the first software controlling the display of the first monitor set on the autonomous vehicle is complete; Determine whether the received information related to the update content of the first software meets a predetermined condition, wherein the predetermined condition is that it can be determined that the update content of the first software is the content that changes the display content of the first monitor in conjunction with the update. If the information received regarding the content of the first software update does not meet the predetermined conditions, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle will not be updated. as well as If the information received relates to the content of the update of the first software meets the predetermined conditions, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle is updated, triggered by receiving the completion notification.

2. The information processing apparatus according to claim 1, wherein, The first monitor and the second monitor are monitors that display the status of the autonomous vehicle.

3. The information processing apparatus according to claim 1 or 2, wherein, The control unit receives the completion notification from the autonomous vehicle.

4. The information processing apparatus according to claim 1 or 2, wherein, The control unit, triggered by receiving the completion notification, retrieves data from the storage unit for updating the second software, which corresponds to the update content of the first software, and executes the update of the second software based on the retrieved data.

5. The information processing apparatus according to claim 1 or 2, wherein, The control unit further performs: Instruct the autonomous vehicle on the execution period for updating the first software in the autonomous vehicle.

6. The information processing apparatus according to claim 5, wherein, The control unit further performs: The execution period for updating the first software in the autonomous vehicle is determined based on the distribution period of the data that can be distributed for updating the first software and the operating schedule of the autonomous vehicle.

7. The information processing apparatus according to claim 6, wherein, The control unit further performs: The distribution server receives information related to the distribution period from the data used to update the first software to the autonomous vehicle.

8. An information processing method, comprising: Receive information relating to updates to the first software that controls the display of the first monitor installed on the autonomous vehicle; Receive a completion notification indicating that the update of the first software controlling the display on the first monitor set on the autonomous vehicle is complete; Determine whether the received information related to the update content of the first software meets a predetermined condition, wherein the predetermined condition is that it can be determined that the update content of the first software is the content that changes the display content of the first monitor in conjunction with the update. If the information received regarding the content of the first software update does not meet the predetermined conditions, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle will not be updated. as well as If the information received relates to the content of the update of the first software meets the predetermined conditions, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle is updated, triggered by receiving the completion notification.

9. The information processing method according to claim 8, wherein, The first monitor and the second monitor are monitors that display the status of the autonomous vehicle.

10. The information processing method according to claim 8 or 9, wherein, Receive the completion notification from the autonomous vehicle.

11. The information processing method according to claim 8 or 9, wherein, Upon receiving the completion notification, the system retrieves update data for the second software from the storage unit, which corresponds to the update content of the first software, and performs the update of the second software based on the retrieved data.

12. The information processing method according to claim 8 or 9, wherein, Further implementation: Instruct the autonomous vehicle on the execution period for updating the first software in the autonomous vehicle.

13. The information processing method according to claim 12, wherein, Further implementation: The execution period for updating the first software in the autonomous vehicle is determined based on the distribution period of the data that can be distributed for updating the first software and the operating schedule of the autonomous vehicle.

14. The information processing method according to claim 13, wherein, Further implementation: The distribution server receives information related to the distribution period from the data used to update the first software to the autonomous vehicle.

15. A system comprising: The vehicle-mounted device sends a completion notification indicating that the update of the first software controlling the display of the first monitor installed on the autonomous vehicle is complete. as well as Information processing device, equipped with a control unit The control unit performs the following: Receive information relating to updates to the first software that controls the display of the first monitor installed on the autonomous vehicle; Determine whether the received information related to the update content of the first software meets a predetermined condition, wherein the predetermined condition is that it can be determined that the update content of the first software is the content that changes the display content of the first monitor in conjunction with the update. If the information received regarding the content of the first software update does not meet the predetermined conditions, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle will not be updated. as well as If the information received relates to the content of the update of the first software meets the predetermined conditions, the second software that controls the display of the second monitor used for remotely monitoring the operation of the autonomous vehicle is updated, triggered by receiving the completion notification from the vehicle-mounted device.

16. The system according to claim 15, wherein, The first monitor and the second monitor are monitors that display the status of the autonomous vehicle.

17. The system according to claim 15 or 16, wherein, In the information processing device, The control unit, triggered by receiving the completion notification, retrieves data from the storage unit for updating the second software, which corresponds to the update content of the first software, and executes the update of the second software based on the retrieved data.

18. The system according to claim 15 or 16, wherein, In the information processing device, The control unit further performs the following: sending instruction information indicating the execution period of the update of the first software in the autonomous vehicle to the on-board device.

Images