Work management apparatus and work management method

Abstract

The present application provides a work management device and a work management method, which can prevent unnecessary work and unnecessary power consumption and efficiently perform downloading of update data of an electronic control device. A work management device (2) that manages work of a plurality of electronic control devices (4) mounted on a vehicle (1) includes an update management section (13) that receives a download instruction to download update data including an update program to the electronic control devices from an external device, and distributes the received update data to the electronic control devices as target devices of the download of the update data and instructs writing of the update data, and a failure diagnosis section (14) that performs failure diagnosis for the electronic control devices, and the update management section prohibits the failure diagnosis section from performing failure diagnosis when instructing writing of the update data to any electronic control device.

Description

Technical Field

[0001] This invention relates to a work management device and a work management method for managing the operation of electronic control devices mounted on a vehicle. Background Technology

[0002] Patent Document 1 discloses a vehicle electronic control system in which an onboard master unit distributes updated data received from an external device to an onboard electronic control unit and instructs it to write to memory. In this vehicle electronic control system, configuration information, including set values ​​for various parameters used for control, is stored in the non-volatile memory of the electronic control unit. The master unit obtains old configuration information from the electronic control unit being modified, and while the electronic control unit is being modified or after modification, instructs the electronic control unit to write back new configuration information obtained by processing the obtained old configuration information.

[0003] Existing technical documents

[0004] Patent Document 1: International Publication No. WO2021 / 039795 Summary of the Invention

[0005] The problem that the invention aims to solve

[0006] When downloading update programs and other update data from external devices to the vehicle's electronic control units, after starting all electronic control units according to the usual procedures performed when the vehicle is powered on, sending update data and writing instructions to the electronic control units to be updated may also start electronic control units that do not need to be started, potentially resulting in unnecessary power consumption. On the other hand, if only some electronic control units are started without following the usual procedures, it is inappropriate to detect malfunctions in the non-started electronic control units during the overall operation diagnostics that are usually performed when the electronic control units are started.

[0007] The purpose of this invention is to prevent unnecessary power consumption and unnecessary malfunction detection of the electronic control device when downloading updated data to the vehicle's electronic control device, thereby enabling efficient downloading.

[0008] Methods for solving problems

[0009] One aspect of the present invention is a work management device that manages the operation of multiple electronic control devices mounted in a vehicle. The work management device includes: an update management unit that receives from an external device located outside the vehicle a download instruction to download update data containing update programs to the electronic control devices, and distributes the received update data to the electronic control devices that are the recipients of the update data download, instructing the write of the update data; and a fault diagnosis unit that performs fault diagnosis for the electronic control devices, wherein the update management unit prevents the fault diagnosis unit from performing the fault diagnosis when instructing any of the electronic control devices to write the update data.

[0010] According to another aspect of the invention, the plurality of said electronic control devices are directly connected to the work management device in a communicable manner via a communication transmission path, or indirectly connected to the work management device in a communicable manner via the communication transmission path and other said electronic control devices. The work management device includes: a start-up management unit that manages a start-up configuration, which is information indicating the start-up order of the plurality of said electronic control devices; and a start-up unit that starts the electronic control devices. After the execution of diagnostic work is disabled, the update management unit notifies the target device to the start-up management unit based on the download instruction. The start-up management unit notifies the start-up unit of the electronic control devices that need to be started in order to establish communication between the update management unit and the target device, as well as an updated start-up configuration indicating the start-up order. The start-up unit starts the electronic control devices that need to be started according to the updated start-up configuration.

[0011] According to another aspect of the invention, after the starting unit starts the electronic control device according to the updated starting configuration, the fault diagnosis unit performs fault diagnosis on the electronic control device shown in the updated starting configuration.

[0012] According to another aspect of the present invention, a plurality of the electronic control devices, the work management device, and the communication transmission path constitute a communication network, the communication network including at least one transmission path switch for switching the connection of the communication transmission path, the start-up management unit managing a network configuration indicating the state to be set for the transmission path switch in the communication network, the start-up management unit notifying the start-up unit of an updated network configuration, the updated network configuration being the network configuration for establishing communication between the update management unit and the target device, and the start-up unit, after switching the transmission path switch according to the updated network configuration, starting the electronic control device to be started according to the updated start-up configuration.

[0013] According to another aspect of the present invention, when the writing of the update data in the target device is completed, the update management unit prohibits the fault diagnosis unit from performing the fault diagnosis, the startup management unit notifies the startup unit of the network configuration used before the update network configuration is notified to the startup unit, and the startup unit switches the transmission path switch according to the network configuration notified from the startup management unit.

[0014] Another aspect of the invention is a work management method executed by a computer of a work management device that manages the operation of multiple electronic control devices mounted in a vehicle. This work management method includes the following steps: receiving from an external device located outside the vehicle a download instruction to download update data containing update programs to the electronic control devices; prohibiting the execution of fault diagnosis for the electronic control devices; and distributing the received update data to the electronic control devices, which are the recipients of the update data download, and instructing the writing of the update data.

[0015] Invention Effects

[0016] According to the present invention, when downloading updated data to the vehicle's electronic control device, unnecessary malfunction detection of the electronic control device can be prevented, thereby preventing unnecessary power consumption and enabling efficient downloading. Attached Figure Description

[0017] Figure 1 This is a diagram illustrating the structure of a vehicle-mounted communication network that includes a work management device according to an embodiment of the present invention.

[0018] Figure 2 This is a diagram showing the structure of the work management device.

[0019] Figure 3 This is a flowchart illustrating the steps involved in operating the work management device.

[0020] Explanation of reference numerals in the attached figures

[0021] 1…Vehicle, 2…Work management device, 3…Communication network, 4, 4a, 4b, 4c, 4d, 4e, 4f, 4g, 4h, 4i…Electronic control device, 5, 5a, 5b, 5c, 5d, 5e, 5f, 5g, 5h, 5i, 5j, 5k, 5m…Communication transmission path, 6…Transmission path switch, 10…Processor, 11…Memory, 12…Communicator, 13…Update management department, 14…Fault diagnosis department, 15…Starting management department, 16…Starting department, 17…Management program. Detailed Implementation

[0022] Hereinafter, embodiments of the present invention will be described with reference to the accompanying drawings.

[0023] Figure 1 This diagram illustrates the structure of a communication network 3 mounted on a vehicle 1, including a work management device 2 according to an embodiment of the present invention. In addition to the work management device 2, the communication network 3 includes multiple electronic control devices 4a, 4b, 4c, 4d, 4e, 4f, 4g, 4h, and 4i, as well as a transmission path switch 6 (also referred to as transmission path SW6). Hereinafter, the electronic control devices 4a, 4b, 4c, 4d, 4e, 4f, 4g, 4h, and 4i will be collectively referred to as electronic control devices 4.

[0024] The transmission path switch 6 switches the connection of the communication transmission path 5 according to the instructions from the work management device 2.

[0025] Communication network 3 also includes communication transmission paths 5a, 5b, 5c, 5d, 5e, 5f, 5g, 5h, 5j, 5k, and 5m. Hereinafter, communication transmission paths 5a, 5b, 5c, 5d, 5e, 5f, 5g, 5h, 5j, 5k, and 5m will be collectively referred to as communication transmission path 5. In communication network 3, multiple electronic control devices 4 are directly connected to the work management device 2 in a communicable manner via communication transmission path 5, or indirectly connected to the work management device 2 in a communicable manner via communication transmission path 5 and other electronic control devices 4.

[0026] The work management device 2 manages the operation of multiple electronic control devices 4 mounted on the vehicle 1.

[0027] Figure 2 This diagram illustrates the structure of the work management device 2. The work management device 2 includes a processor 10, a memory 11, and a communicator 12. The memory 11 is, for example, composed of volatile and / or non-volatile semiconductor memory. The communicator 12 is a transceiver used by the work management device 2 to communicate with the electronic control device 4 and the transmission path switch 6 via the communication transmission path 5.

[0028] The processor 10 is, for example, a computer equipped with a CPU (Central Processing Unit). The processor 10 may also have a structure including a ROM (Read Only Memory) for writing programs and RAM (Random Access Memory) for temporarily storing data. Furthermore, the processor 10 includes an update management unit 13, a fault diagnosis unit 14, a startup management unit 15, and a startup unit 16 as functional elements or units.

[0029] These functional elements of the processor 10 are implemented, for example, by the processor 10, which is a computer, executing a management program 17 stored in the memory 11. The management program 17 can be pre-stored in any computer-readable storage medium. Alternatively, all or part of the aforementioned functional elements of the processor 10 can be constructed by hardware comprising one or more electronic circuit components.

[0030] The update management unit 13 receives a download instruction from an external device (e.g., a server) located outside the vehicle 1 to download update data containing an update program to the electronic control unit 4. Upon receiving the download instruction from the external device, the update management unit 13 turns on the power to the vehicle 1, distributes the received update data to the electronic control unit 4 (the device to which the update data is to be downloaded), and instructs the write of the update data.

[0031] In particular, in this embodiment, when the update management unit 13 instructs the writing of update data to any electronic control device 4, it prohibits the execution of fault diagnosis by the fault diagnosis unit 14 (described later). Therefore, when downloading update data to the electronic control device 4, unnecessary power consumption is prevented by preventing unnecessary detection of operational anomalies in the electronic control device, and the download can be performed efficiently.

[0032] In addition, after the update management unit 13 has prohibited the execution of diagnostic work, it notifies the start management unit 15, which will describe the download process later, of the object information of the target device indicated by the download based on the download instruction.

[0033] When the writing of update data in the electronic control unit 4, which is the target device, is completed, that is, when the end notification is received from the electronic control unit 4, which is the target device (described later), the update management unit 13 prohibits the fault diagnosis unit 14 from performing fault diagnosis.

[0034] The fault diagnosis unit 14 performs fault diagnosis on the electronic control device 4 when the power supply to the vehicle 1 is turned on and off.

[0035] However, when the fault diagnosis unit 14 is prohibited from performing fault diagnosis by the update management unit 13, it does not perform fault diagnosis for the electronic control device 4.

[0036] When the fault diagnosis unit 14 disables the execution of fault diagnosis from the update management unit 13, and the start-up unit 16 starts the electronic control device 4 according to the above-described update start-up configuration, the fault diagnosis unit 14 performs fault diagnosis on the electronic control device 4 shown in the above-described update start-up configuration after the start-up.

[0037] After performing fault diagnosis, the electronic control unit 4, acting as the target device, performs the writing of update data. Upon completion of the update data writing, the electronic control unit 4 sends a termination notification to the work management unit 2.

[0038] If the communicator 12 receives a termination notification from the electronic control unit 4, which is the target device, and the fault diagnosis unit 14 does not perform fault diagnosis for the electronic control unit 4 when the fault diagnosis is disabled from the update management unit 13, then the fault diagnosis unit 14 will not perform fault diagnosis for the electronic control unit 4. Furthermore, after the fault diagnosis unit 14 disables fault diagnosis upon receiving the termination notification, upon receiving a switchover completion notification (described later) from the start-up unit 16, it will disconnect the power supply to the vehicle 1 after performing fault diagnosis for the electronic control unit 4, following the usual (e.g., default) sequence.

[0039] The start-up management unit 15 manages the network configuration, which shows the state of the transmission path switch 6 in the communication network 3. Based on the object information notified from the update management unit 13, the start-up management unit 15 notifies the start-up unit 16 of the network configuration used to establish communication between the update management unit 13 and the object device, namely, the update network configuration. Thus, when downloading update data to the electronic control device 4, the start-up management unit 15 can show the start-up unit 16 the state of the transmission path switch 6 that most efficiently establishes communication between the update management unit 13 and the object device through the update network configuration.

[0040] Here, "the state of the transmission path switch 6 that enables the most efficient establishment of communication between the update management unit 13 and the target device" can be, for example, the state of the transmission path switch 6 that minimizes the number of other electronic control devices 4 through which update data passes before reaching the electronic control device 4, which is the target device, from the work management unit 2. Specifically, for example, if the transmission path switch 6 is set to connect communication transmission paths 5a and 5b as the default setting, when downloading update data to the electronic control device 4e, which is the target device, it can be specified to connect communication transmission paths 5a and 5g through the above-described update network configuration. As a result, update data can travel from the work management unit 2 to the electronic control device 4e, which is the target device, without passing through other electronic control devices 4.

[0041] Furthermore, the start-up management unit 15 manages the start-up configuration, which is information indicating the start-up sequence of multiple electronic control devices 4. In this embodiment, based on the object information notified from the update management unit 13 and referring to the aforementioned update network configuration, the start-up management unit 15 notifies the start-up unit 16 of the electronic control devices 4 that need to be started to establish communication between the update management unit 13 and the object device, as well as the start-up configuration indicating the start-up sequence of these electronic control devices 4. As a result, the start-up unit 16 will not start unnecessary electronic control devices 4, thus avoiding unnecessary power consumption and enabling efficient start-up of the electronic control devices 4 required to distribute update data to the object device.

[0042] Furthermore, when the writing of updated data in the electronic control unit 4, which is the target device, is completed, that is, when the aforementioned end notification is received from the electronic control unit 4, which is the target device, the start management unit 15 will notify the start unit 16 of the network configuration used before notifying the start unit 16 of the network configuration update.

[0043] The starting unit 16 starts the electronic control device 4. In this embodiment, after switching the transmission path switch 6 according to the updated network configuration notified by the starting management unit 15, the starting unit 16 starts the electronic control devices 4 that need to be started in sequence according to the updated starting configuration.

[0044] When the starting unit 16 has completed the starting of all the electronic control devices 4 that need to be started, it notifies the fault diagnosis unit 14 of this.

[0045] Furthermore, when the data update writing in the electronic control unit 4, which is the target device, is completed—that is, when the aforementioned completion notification is received from the electronic control unit 4, the start-up unit 16 switches the transmission path switch 6 according to the network configuration subsequently notified from the start-up management unit 15. Additionally, the start-up unit 16 starts all electronic control units 4. Then, the start-up unit 16 sends a switching completion notification to the fault diagnosis unit 14.

[0046] Therefore, when the starting unit 16 switches the transmission path switch 6 to a different state than usual during data download and update, the network structure of the communication network 3 can be returned to the original network structure when the power to the vehicle 1 is disconnected. Thus, when the power to the vehicle 1 is disconnected, the fault diagnosis unit 14 can perform fault diagnosis in the normal sequence. Furthermore, by returning to the previous network structure when the power to the vehicle 1 is disconnected, as described above, the electronic control device 4 can be started in the normal starting sequence when the power to the vehicle 1 is restored, thus enabling the vehicle 1 to be started without compromising responsiveness.

[0047] Next, the steps for operating the work management device 2 will be explained. Figure 3 This is a flowchart illustrating the processing steps in the work management device 2. Repeated execution. Figure 3 The processing.

[0048] When processing begins, the update management unit 13 determines whether a download instruction for update data has been received from an external device located outside the vehicle 1 (S100). Then, if no download instruction is received (S100, No), the update management unit 13 returns to step 100 and repeats the processing, waiting for a download instruction to be received.

[0049] On the other hand, upon receiving a download instruction (S100, Yes), the update management unit 13 disables the execution of fault diagnosis for the electronic control unit 4 by the fault diagnosis unit 14 (S102), and then turns on the power to the vehicle 1 (S104). Furthermore, the update management unit 13 notifies the start-up management unit 15 of the target device, namely the electronic control unit 4, indicating the target device for downloading update data. Based on the target information, the start-up management unit 15 notifies the start-up unit 16 of the update network configuration and update start-up configuration used to establish communication between the update management unit 13 and the target device (S106).

[0050] After switching the transmission path switch 6 based on the updated network configuration (S108), the starting unit 16 sequentially starts the electronic control device 4 based on the updated starting configuration (S110). Simultaneously with starting, the starting unit 16 transfers the updated starting configuration to the fault diagnosis unit. Next, the fault diagnosis unit 14 performs fault diagnosis on the electronic control device 4 shown in the updated starting configuration (S112).

[0051] Next, the update management unit 13 distributes the received update data to the electronic control device 4, which is the target device for downloading update data, and instructs the write of the update data (S114). Furthermore, the update management unit 13 determines whether the writing of the update data to the electronic control device 4, which is the target device, is complete (S116). Then, if the writing of the update data is not complete (S116, No), the update management unit 13 repeatedly performs step S116, waiting for the writing of the update data to be completed.

[0052] On the other hand, when the update data writing is complete (S116, Yes), the update management unit 13 prevents the fault diagnosis unit 14 from performing fault diagnosis (S118). Additionally, the start-up management unit 15 notifies the start-up unit 16 of the previous network configuration used before notifying it of the updated network configuration (S120). The start-up unit 16 switches the transmission path switch 6 according to the previous network configuration notified from the start-up management unit 15 (S122). Next, after the fault diagnosis unit 14 performs fault diagnosis on the electronic control unit 4 in the usual order (S124), it disconnects the power supply to the vehicle 1 (S126), and the process ends.

[0053] Furthermore, the present invention is not limited to the structure of the embodiments described above, and can be implemented in various ways without departing from its spirit.

[0054] The above implementation supports the following structure.

[0055] (Structure 1) A work management device that manages the operation of multiple electronic control devices mounted on a vehicle, wherein the work management device comprises: an update management unit that receives from an external device located outside the vehicle a download instruction to download update data containing update programs to the electronic control devices, and distributes the received update data to the electronic control devices that are the objects to which the update data is downloaded, thereby instructing the write of the update data; and a fault diagnosis unit that performs fault diagnosis for the electronic control devices, wherein when the update management unit instructs any of the electronic control devices to write the update data, the fault diagnosis unit prevents the fault diagnosis unit from performing the fault diagnosis.

[0056] According to the work management device of Structure 1, when downloading updated data to the electronic control device, it can prevent unnecessary abnormal detection of the electronic control device, thereby preventing unnecessary power consumption and enabling efficient downloading.

[0057] (Structure 2) The work management device of Structure 1, wherein a plurality of said electronic control devices are directly connected to the work management device in a communicable manner via a communication transmission path, or indirectly connected to the work management device in a communicable manner via the communication transmission path and other said electronic control devices. The work management device includes: a start-up management unit that manages a start-up configuration, which is information indicating the start-up order of the plurality of said electronic control devices; and a start-up unit that starts the electronic control devices. After the execution of diagnostic work is prohibited, the update management unit notifies the target device to the start-up management unit based on the download instruction. The start-up management unit notifies the start-up unit of the electronic control devices that need to be started in order to establish communication between the update management unit and the target device, as well as the updated start-up configuration indicating the start-up order. The start-up unit starts the electronic control devices that need to be started according to the updated start-up configuration.

[0058] According to the work management device of structure 2, the starting unit will not start unnecessary electronic control devices, so no unnecessary power consumption will be generated, and the electronic control devices required to distribute update data to the electronic control devices of the target device can be started efficiently.

[0059] (Structure 3) The operation management device of Structure 2, wherein after the starting unit starts the electronic control device according to the updated starting configuration, the fault diagnosis unit performs fault diagnosis on the electronic control device shown in the updated starting configuration.

[0060] According to the work management device of structure 3, the fault diagnosis unit performs fault diagnosis on the electronic control device that is actually started, thus preventing unnecessary abnormal operation detection and thus preventing unnecessary power consumption.

[0061] (Structure 4) The work management device of Structure 3, wherein a plurality of the electronic control devices, the work management device and the communication transmission path constitute a communication network, the communication network includes at least one transmission path switch for switching the connection of the communication transmission path, the start-up management unit manages the network configuration indicating the state of the transmission path switch in the communication network, the start-up management unit notifies the start-up unit of the updated network configuration, the updated network configuration is the network configuration used to establish communication between the updated management unit and the target device, and after the start-up unit switches the transmission path switch according to the updated network configuration, the start-up unit starts the electronic control device that needs to be started according to the updated start-up configuration.

[0062] According to the work management device of structure 4, the start management unit can update the network configuration, for example, enable the start management unit to realize the state of the transmission path switch 6 that can establish communication between the update management unit 13 and the target device in the most efficient way, and thus perform download more efficiently.

[0063] (Structure 5) The work management device of Structure 4, wherein, when the writing of the update data in the object device ends, the update management unit prohibits the fault diagnosis unit from performing the fault diagnosis, the start-up management unit notifies the start-up unit of the network configuration used before the update network configuration is notified to the start-up unit, and the start-up unit switches the transmission path switch according to the network configuration notified from the start-up management unit.

[0064] According to the work management device of structure 5, when the power supply of vehicle 1 is disconnected, it returns to the previous network structure. Therefore, when the power supply of vehicle 1 is turned on again, the electronic control device 4 can be started in the normal starting sequence of vehicle 1, and vehicle 1 can be started without impairing responsiveness.

[0065] (Structure 6) A work management method executed by a computer of a work management device that manages the work of multiple electronic control devices mounted on a vehicle, wherein the work management method includes the following steps: receiving from an external device located outside the vehicle a download instruction to download update data containing an update program to the electronic control device; prohibiting the execution of fault diagnosis for the electronic control device; and distributing the received update data to the electronic control device, which is the target device for downloading the update data, and instructing the writing of the update data.

[0066] According to the work management method of Structure 6, when downloading updated data to the electronic control device, unnecessary abnormal operation detection of the electronic control device can be prevented, thereby preventing unnecessary power consumption and enabling efficient downloading.

Claims

1. A work management device that manages the operation of multiple electronic control devices mounted on a vehicle, wherein, The work management device includes: The update management unit receives a download instruction from an external device located outside the vehicle to download update data containing an update program to the electronic control device, and distributes the received update data to the target device in the electronic control device to instruct the writing of the update data; The fault diagnosis unit performs fault diagnosis for the electronic control device; and The starting unit activates the electronic control device. When the update management unit instructs any of the electronic control devices to write the update data, it prevents the fault diagnosis unit from performing the fault diagnosis. When the starting unit starts the target device, the fault diagnosis unit performs fault diagnosis on the target device, and the update management unit instructs the target device to write the update data.

2. The work management device according to claim 1, wherein, The multiple electronic control devices are directly connected to the work management device in a communicable manner via communication transmission paths, or indirectly connected to the work management device via the communication transmission paths and other electronic control devices in a communicable manner. The operation management device includes a start-up management unit that manages start-up configurations, which are information indicating the start-up sequence of the plurality of electronic control devices. After disabling diagnostic work, the update management department notifies the startup management department of the target device based on the download instruction. The start-up management unit will notify the start-up unit of the electronic control device that needs to be started in order to establish communication between the update management unit and the target device, as well as the updated start-up configuration that indicates the start-up sequence. The starting unit starts the electronic control device that needs to be started according to the updated starting configuration.

3. The work management device according to claim 2, wherein, After the starting unit starts the electronic control device according to the updated starting configuration, the fault diagnosis unit performs fault diagnosis on the electronic control device shown in the updated starting configuration.

4. The work management device according to claim 3, wherein, The multiple electronic control devices, the work management device, and the communication transmission path constitute a communication network, which includes at least one transmission path switch for switching the connection of the communication transmission path. The startup management unit manages the network configuration indicating the state of the transmission path switch settings in the communication network. The startup management unit will notify the startup unit of the updated network configuration, which is the network configuration used to establish communication between the update management unit and the target device. After switching the transmission path switch according to the updated network configuration, the starting unit starts the electronic control device that needs to be started according to the updated starting configuration.

5. The work management device according to claim 4, wherein, When the writing of the updated data in the object device is completed, The update management department prohibits the fault diagnosis department from performing the fault diagnosis. The startup management unit notifies the startup unit of the network configuration used prior to notifying the startup unit of the updated network configuration. The starting unit switches the transmission path switch according to the network configuration notified by the starting management unit.

6. A work management method, wherein the work management method is executed by a computer of a work management device that manages the operation of multiple electronic control devices mounted on a vehicle, wherein, This work management method includes the following steps: The update management unit receives a download instruction from an external device located outside the vehicle to download update data containing the update program to the electronic control device; The update management department prohibits the fault diagnosis department from performing fault diagnosis on the electronic control device; The starting unit activates the object device in the electronic control unit that is the target for downloading the updated data; The fault diagnosis unit performs fault diagnosis for the target device; and The update management unit distributes the update data to the object device and instructs the writing of the update data.

Images