Information processing apparatus, vehicle, information processing method, and non-transitory storage medium

Abstract

The present invention relates to an information processing apparatus configured to control a display unit configured to display information related to software update of an in-vehicle electronic device, a vehicle, an information processing method, and a non-transitory storage medium, the information processing apparatus including a circuit configured to control the display unit to display the information related to the software update of the in-vehicle electronic device. The circuit is configured to: display guidance information on the display unit under the condition that an update error in which the software update cannot be normally performed has occurred; and selecting, on the basis of the situation in which the update error has occurred, which of first guide information indicating a step for eliminating the update error that a user of the vehicle can implement by himself / herself, and second guide information indicating that the vehicle needs to be sent to a dealer, to display the display unit as the guide information.

Description

Technical Field

[0001] The present invention relates to an information processing device, a vehicle, an information processing method, and a non-transitory storage medium. Background Art

[0002] Various in-vehicle electronic devices are installed in vehicles and operate by executing software. As shown in Japanese Patent Application Laid-Open No. 2022-163396, the following OTA (Over The Air) technology is known: software of in-vehicle electronic devices is updated by software downloaded from outside the vehicle via wireless communication, thereby adding or changing vehicle functions.

[0003] Sometimes, an update error occurs that prevents the software of an in-vehicle electronic device from being updated normally. When an update error occurs, the user is confused because even if the user is simply notified of the fact that the update has failed, the user does not know how to deal with it. In particular, when the user can correct the error by himself, the user wants to know how to correct the error. On the other hand, when the user cannot correct the error by himself and needs to send the device to a dealer, the user wants to know this. Summary of the invention

[0004] An information processing device according to one embodiment of the present disclosure is configured to control a display unit that displays information related to software update of an in-vehicle electronic device, and the information processing device includes a circuit. The circuit is configured to: cause the display unit to display guidance information under a condition that an update error occurs that prevents the software update from being normally performed; and select which of the first guidance information and the second guidance information to be displayed on the display unit as the guidance information based on the condition that the update error occurs, wherein the first guidance information indicates a procedure for eliminating the update error that a user of the vehicle can perform by himself, and the second guidance information indicates that the vehicle needs to be sent to a dealer.

[0005] The circuit may be configured to select the first guidance information as the guidance information under the condition that the update error occurs due to interruption of communication of the in-vehicle electronic device.

[0006] The circuit may be configured to select the first guidance information as the guidance information when the update error occurs due to interruption of communication of the vehicle-mounted electronic device and the power of the vehicle-mounted electronic device is switched on and off in conjunction with the operation of a power switch of the vehicle.

[0007] The circuit may be configured to select the first guidance information as the guidance information under the condition that the update error occurs due to a disconnection of communication between an external distribution center configured to distribute software update data and the vehicle.

[0008] The above circuit can be configured to select the second boot information as the boot information under the condition that the above update error occurs because the electronic signature attached to the update data identified as software is not a legal signature.

[0009] The above circuit can be configured to select the second boot information as the boot information under the condition that the above update error occurs due to a hardware failure of the in-vehicle electronic device.

[0010] The above circuit can be configured to select the second boot information as the boot information under the condition that the above update error occurs again after the display of the first boot information.

[0011] A vehicle according to an embodiment of the present disclosure is equipped with the above information processing device.

[0012] An embodiment of the present disclosure is an information processing method for controlling a display unit configured to display information related to software updates of in-vehicle electronic devices. The above information processing method includes: displaying boot information under the condition that an update error occurs in which the above software update cannot be normally implemented; and selecting which of the first boot information and the second boot information to be displayed on the above display unit as the above boot information based on the situation in which the above update error occurs. The first boot information indicates a step for eliminating the above update error that can be implemented by the user of the vehicle, and the second boot information indicates that the vehicle needs to be sent to a dealer.

[0013] An embodiment of the present disclosure is a non-transitory storage medium storing instructions executable by one or more processors and causing the one or more processors to execute the following functions. The above functions include: causing a display unit configured to display information related to software updates of in-vehicle electronic devices to display boot information under the condition that an update error occurs in which the above software update cannot be normally implemented; and selecting which of the first boot information and the second boot information to be displayed on the above display unit as the above boot information based on the situation in which the above update error occurs. The first boot information indicates a step for eliminating the above update error that can be implemented by the user of the vehicle, and the second boot information indicates that the vehicle needs to be sent to a dealer.

[0014] The above information processing device, vehicle, information processing method, and non-transitory storage medium have the effect of facilitating the response to the situation where an update error occurs in the software of the in-vehicle electronic device. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Hereinafter, the features, advantages, technology, and industrial importance of exemplary embodiments of the present invention will be described with reference to the drawings. In the drawings, the same reference numerals denote the same components, where:

[0016] Figure 1 This is a diagram schematically showing the configurations of the information processing apparatus and the vehicle according to the first embodiment.

[0017] Figure 2A This is a flowchart of a display control routine for update error guidance information executed by the information processing apparatus according to the first embodiment.

[0018] Figure 2B This is a diagram showing examples of the first type of update error and the second type of update error.

[0019] Figure 3 This is a diagram showing a display example of an image presenting the first guidance information.

[0020] Figure 4 This is a diagram showing a display example of an image presenting the second guidance information. Detailed Description of the Embodiment

[0021] Hereinafter, with reference to Figures 1 to 4 one embodiment of the information processing apparatus, the vehicle, the information processing method, and the non-transitory storage medium will be described in detail.

[0022] Configurations of the Information Processing Apparatus and the Vehicle

[0023] First, with reference to Figure 1 the configurations of the information processing apparatus and the vehicle according to this embodiment will be described. As Figure 1As shown in the figure, the vehicle 10 is equipped with electronic devices such as an OTA manager 11, a DCM 12, an ADAS 13, a PCU 14, an engine ECU 15, a transmission ECU 16, a brake ECU 17, and an HMI 18. In the following description, the electronic devices mounted on the vehicle 10 are referred to as in-vehicle electronic devices. Each in-vehicle electronic device can be connected via an in-vehicle network 19 to communicate with each other. The OTA manager 11 is responsible for the management of software updates for the in-vehicle electronic devices including itself. The DCM 12 is a data communication module that provides wireless communication functions with the outside of the vehicle via a mobile communication network 20. In this embodiment, the DCM 12 undertakes the function of recording the results of self-diagnosis performed by each in-vehicle electronic device and sending them to a data center outside the vehicle. The ADAS 13 is an advanced driving assistant system that provides advanced driving assistance functions such as an automatic braking device and a device to prevent sudden starts. The PCU 14 is a power control unit that controls the power inside the vehicle. The engine ECU 15 is an electronic control unit for engine control. The transmission ECU 16 is an electronic control unit for transmission control. The brake ECU 17 is an electronic control unit for brake control. The HMI 18 is a human machine interface. The HMI 18 has an input device for accepting operations by the occupants and a display device for displaying information to the occupants through images and sounds. The HMI 18 can be configured to have a navigation function for guiding the driving route and an entertainment function for playing music and videos. These in-vehicle electronic devices each have a storage module 21 that stores software and a processor 22 that executes the software. The OTA manager 11 also has a data storage 23 that stores the updated software obtained from outside the vehicle.

[0024] A power switch 24 for switching the power supply of the vehicle 10 on and off is provided in the vehicle 10. The drive system of the vehicle 10 starts when switched from power off to power on and stops when switched from power on to power off.

[0025] The vehicle 10 is connected to an OTA server 30 via a mobile communication network 20. The OTA server 30 is a server device that distributes update data for the software of the in-vehicle electronic devices. The OTA server 30 has a storage device 31 that stores programs and data for distribution of the update data and a processor 32 that executes the distribution programs.

[0026] The OTA server 30 can communicate with the information terminal 40 of the user of the vehicle 10 via the mobile communication network 20. Examples of the information terminal 40 may include a smart phone. The information terminal 40 may also be a tablet terminal or a personal computer (PC) terminal. The information terminal 40 includes a storage device 41, a processor 42, and an HMI 43. The processor 42 reads and executes the software stored in the storage device 41. The HMI 43 includes an input device for accepting user operations and a display device for displaying information to the user. The software stored in the storage device 41 includes software that provides functions such as information confirmation and remote operation of the vehicle 10 owned by the user.

[0027] Outline of software update

[0028] Next, an outline of the software update of the in-vehicle electronic devices in the vehicle 10 will be described. The in-vehicle electronic devices to be the object of the software update include the OTA manager 11, the DCM 12, the ADAS 13, the PCU 14, the engine ECU 15, the transmission ECU 16, the brake ECU 17, and the HMI 18. The software update is performed through a download phase, an installation phase, and an activation phase.

[0029] In the download phase, the updated software is sent from the OTA server 30 to the vehicle 10. The OTA manager 11 stores the updated software received from the OTA server 30 in the data storage 23. The download phase includes a series of processes related to downloading, such as judgment of whether the download can be executed and verification of the update data. The update data is attached with an electronic signature. The update data is verified by confirming whether the electronic signature is a legal signature. The sending of the updated software from the OTA server 30 to the OTA manager 11 may include sending compressed data obtained by compressing the updated software, sending split data obtained by splitting the updated software or the compressed data, and uniformly sending the updated software of multiple in-vehicle electronic devices.

[0030] In the installation stage, the updated software is installed on the in-vehicle electronic device of the update target. In the installation stage, the OTA manager 11 installs the updated software on the storage module 21 of the in-vehicle electronic device of the update target based on the update data downloaded to the data storage 23. The installation stage includes a series of processes related to installation, such as determining whether installation can be performed, transferring the update data, and verifying the updated software. When the update data includes the updated software itself, in the installation stage, the OTA manager 11 transfers the update data to the in-vehicle electronic device of the update target. When the update data includes compressed data, delta data, or segmented data of the updated software, a generation process of the updated software from the update data is performed. The generation process can be performed by the OTA manager 11 or by the in-vehicle electronic device of the update target. The generation of the updated software can be performed by decompressing the compressed data, assembling the delta data, or segmented data. In addition, when the installation stage is completed, the updated software is invalidated.

[0031] In the activation stage, activation of the updated software, that is, validation of the updated software, is performed on the in-vehicle electronic device of the update target. The activation stage includes a series of processes related to activation, such as determining whether activation can be performed, checking the matching of the updated software, and verifying the execution result of the activation.

[0032] Display control of update error guidance information

[0033] Refer to FIG. 2 to Figure 4 describe in detail the display control of the update error guidance information executed by the OTA manager 11. This display control is a control for causing the HMI 18 to display guidance information when an update error occurs where the software update of the in-vehicle electronic device cannot be normally implemented.

[0034] Figure 2A FIG. shows the processing steps of the display control routine executed by the OTA manager 11 for the above display control. The OTA manager 11 repeatedly executes this routine at each predetermined control cycle during the implementation of the software update of the in-vehicle electronic device. The processing of this routine is performed by the processor 22 of the OTA manager 11 executing a program stored in the storage module 21.

[0035] When the OTA manager 11 starts this routine, it confirms whether an update error has occurred (S10). If no update error has occurred (No), the OTA manager 11 ends the processing of this routine in the current control cycle.

[0036] In contrast, if an update error has occurred (Yes), the OTA manager 11 obtains an error code (S12). The error code is a code indicating the situation where an update error has occurred. The error code is generated by the OTA manager 11 or the in-vehicle electronic device that has confirmed the occurrence of the update error.

[0037] Next, the OTA manager 11 determines whether the current update error corresponds to the first type of update error or the second type of update error based on the error code. Figure 2B Examples of the first type of update error and the second type of update error are shown. Classification information used in the above determination is pre-stored in the storage module 21 of the OTA manager 11. The classification information is information indicating the classification of the error code corresponding to each of the first type of update error and the second type of update error. The first type of update error is an update error that the user of the vehicle 10 may be able to eliminate by himself. The second type of update error is an update error that is difficult for the user to eliminate and requires the vehicle 10 to be stored in the dealer for repair and inspection.

[0038] The first type of update error includes update errors occurring under the following conditions (A) and (B). Condition (A) is the interruption of communication between the OTA manager 11 and the on-board electronic device to be updated. Condition (B) is the interruption of communication between the OTA server 30 and the vehicle 10. Condition (A) and condition (B) may be caused by a communication failure in the in-vehicle network 19, or a communication failure between the vehicle 10 and the mobile communication network 20 via the DCM 12. These communication failures may be eliminated by resetting the communication settings of the on-board electronic device by reconnecting the power of the vehicle 10. Reconnecting the power of the vehicle 10 here means temporarily switching the power of the vehicle 10 from on to off and then switching it back on again.

[0039] Among the on-board electronic devices, there are devices whose power is turned on and off in conjunction with the power of the vehicle 10 and devices whose power is not turned on and off. For the communication setting of the on-board electronic device whose power is turned on and off without being switched in conjunction with the power of the vehicle 10, it will not be reset even if the power of the vehicle 10 is turned on again. Therefore, when an update error caused by situation (A) occurs during the software update of such an on-board electronic device, the update error may not be eliminated by reconnecting the power of the vehicle 10. Therefore, in the case of situation (A), when the power of the on-board electronic device to be updated is turned on and off without being switched in conjunction with the operation of the power switch 24 of the vehicle 10, the update error can be classified as the second type of update error. That is, in the case where the update error occurs due to the interruption of the communication of the on-board electronic device, the update error can also be classified as the first type of update error limited to the case where the power of the on-board electronic device is turned on and off in conjunction with the operation of the power switch 24 of the vehicle 10.

[0040] The second type of update error includes update errors that occur under the following situations (C) and (D). Situation (C) is an authentication error of the electronic signature of the update data. Specifically, it is the case where it is confirmed that the electronic signature of the update data distributed from the OTA server 30 is not a legitimate signature. Situation (D) is a hardware failure of the in-vehicle electronic device to be updated. In the case of situation (C), the vehicle 10 is exposed to a cyber attack, and an illegal software update may be carried out. In the case of situation (D), the elimination of the update error requires the repair or replacement of the in-vehicle electronic device.

[0041] When the OTA manager 11 determines that the update error generated this time is the first type of update error (S14: Yes), it confirms whether this update error is a recurring error (S16). Specifically, the OTA manager 11 confirms whether the same update error has occurred before in this software update. When the OTA manager 11 determines that the update error generated this time is not a recurring error (S16: No), it causes the HMI 18 to display the first guidance information. The first guidance information is information indicating the steps for eliminating the update error that the user of the vehicle 10 can perform by themselves. For example, the steps for eliminating the update error in the cases of situations (A) and (B) are to temporarily switch off the power of the vehicle 10 and then switch it on again. After the OTA manager 11 causes the HMI 18 to display the first guidance information, it ends the processing of this routine in the current control cycle.

[0042] When the OTA manager 11 determines that the update error generated this time is the second type of update error (S14: No), it causes the HMI 18 to display the second guidance information (S20). The second guidance information is information indicating that the vehicle 10 needs to be sent to the dealership. When the OTA manager 11 determines that the update error generated this time is the first type of update error (S14: Yes), and when it is confirmed that this update error is recurring (S16: Yes), it also causes the HMI 18 to display the second guidance information (S20). After the OTA manager 11 causes the HMI 18 to display the second guidance information, it ends the processing of this routine in the current control cycle.

[0043] Figure 3 shows a display example of an image of the HMI 18 presenting the first guidance information. Figure 4 shows a display example of an image of the HMI 18 presenting the second guidance information. Figure 3 and Figure 4 The "" in indicates the value of the error code. In any image, information indicating that an update error has occurred and the error code of the generated update error are displayed. In the Figure 3 image, a message recommending to perform the vehicle 10 power-on operation again is displayed as the first guidance information. InFigure 4 The image shows a message recommending discussing with a nearby dealer as the second guidance information.

[0044] Functions and effects of the embodiment

[0045] Explain the functions and effects of this embodiment.

[0046] When an update error occurs where the software update of the in-vehicle electronic device cannot be normally implemented, the OTA manager 11 causes the HMI 18 to display guidance information. Moreover, the OTA manager 11 selects which of the first guidance information and the second guidance information to display on the HMI 18 as the guidance information based on the situation where the update error has occurred. The first guidance information is information indicating the steps for eliminating the update error that the user of the vehicle 10 can implement by themselves, and the second guidance information is information indicating that the vehicle 10 needs to be sent to a dealer.

[0047] The information processing device, vehicle, information processing method, and non-transitory storage medium of this embodiment have the following effects.

[0048] By observing the guidance information displayed on the HMI 18 when an update error occurs, the user of the vehicle 10 can confirm what kind of response is required to eliminate the update error. Therefore, the information processing device, vehicle, information processing method, and non-transitory storage medium of this embodiment have the effect of making it easier to respond when an update error occurs in the software of the in-vehicle electronic device.

[0049] When an update error classified as a first type of update error occurs, sometimes even if the elimination steps displayed as the first guidance information are implemented, the update error is not eliminated. After the recurrence of the update error in this case, even if the same elimination steps are guided, the elimination of the update error will not be achieved. In contrast, when the same update error occurs again after the display of the first guidance information, the OTA manager 11 causes the HMI 18 to display the second guidance information. Therefore, the user can confirm the appropriate response when the update error recurs without being eliminated by the guided steps.

[0050] In this embodiment, the HMI 18 is an example of a display unit configured to display information related to the software update of the in-vehicle electronic device. The OTA manager 11 is an example of an information processing device configured to control the HMI 18, which is an example of a display unit. The storage module 21 of the OTA manager 11 that stores a program for processing the display control routine of the guidance information for the update error is an example of the non-transitory storage medium of the present disclosure.

[0051] Other embodiments

[0052] The above-described embodiments can be modified and implemented as follows. The above-described embodiments and the following modification examples can be implemented in combination with each other within a technically consistent range.

[0053] In the case where an update error occurs, it is also possible to cause the information terminal 40 owned by the user to display guidance information. In this case, if an update error occurs, the OTA manager 11 sends an error code to the OTA server 30. The OTA server 30 determines whether the generated update error is a first type of update error or a second type of update error based on the received error code. Further, when it is determined that the error is a first type of update error, the OTA server 30 instructs the information terminal 40 owned by the user to display first guidance information, and when it is determined that the error is a second type of update error, the OTA server 30 instructs the information terminal 40 owned by the user to display second guidance information. At this time, the information terminal 40 is an example of the display unit of the present disclosure, and the OTA server 30 is an example of the information processing device of the present disclosure. The storage device 31 of the OTA server is an example of the non-transitory storage medium of the present disclosure.

[0054] It is also possible to display a cancellation procedure other than turning on the power of the vehicle 10 as the first guidance information. In the first type of update error, it is also possible to change the content of the cancellation procedure displayed as the first guidance information according to the generated situation.

[0055] Figure 3 and Figure 4 The images are configured to display the guidance information using text. These images may also be configured to display the guidance information using expressions other than text, such as still images and moving images.

[0056] The OTA manager 11 that manages software updates performs display control of information related to software updates. It is also possible for other in-vehicle devices to manage software updates and perform display control of information related to software updates. For example, it is possible for the in-vehicle device that is the object of software update to perform display control of the information of the HMI 18 in the first embodiment.

[0057] The information processing device disclosed in the present invention may have one or more dedicated hardware circuits including one or more processors that act according to a computer program for display control, dedicated hardware that performs at least a portion of various processes, or a circuit of a combination thereof. As dedicated hardware, for example, an integrated circuit for a specific purpose, i.e., an application-specific integrated circuit (ASIC), can be cited. The processor includes a memory such as a central processing unit (CPU), a random access memory (RAM), and a read-only memory (ROM), and the memory stores a program code or instruction configured to enable the CPU to perform processing. The memory, i.e., the storage medium, includes all available media that can be accessed by a general or dedicated computer. The information processing device disclosed in the present invention may use one or more memories.

[0058] Additional Notes

[0059] [Note 1]

[0060] An information processing device controls a display unit that displays information related to software update of an in-vehicle electronic device, wherein the following processing is performed: when an update error occurs that prevents the software update from being normally implemented, the display unit displays guidance information; and based on the situation in which the update error occurs, the display unit is selected to display, as the guidance information, first guidance information and second guidance information, wherein the first guidance information indicates steps for eliminating the update error that can be implemented by a vehicle user himself, and the second guidance information indicates that the vehicle needs to be sent to a dealer.

[0061] [Note 2]

[0062] The information processing device according to Supplementary Note 1, wherein, when the update error occurs due to a communication interruption of the in-vehicle electronic device, the guide information is selected to be the first guide information.

[0063] [Note 3]

[0064] According to the information processing device described in Note 1 or Note 2, wherein, when the update error occurs due to interruption of communication of the vehicle-mounted electronic device and the on / off of the power of the vehicle-mounted electronic device is switched in conjunction with the operation of the power switch of the vehicle, the guidance information is selected to be the first guidance information.

[0065] [Note 4]

[0066] The information processing device according to any one of Notes 1 to 3, wherein when the update error occurs due to a communication interruption between an external distribution center for distributing software update data and the vehicle, the guidance information is selected to be the first guidance information.

[0067] [Footnote 5]

[0068] An information processing apparatus according to any one of Footnotes 1 to 4, wherein, when the above update error occurs because the electronic signature attached to the update data identified as software is not a legitimate signature, the above boot information is selected to be the above second boot information.

[0069] [Footnote 6]

[0070] An information processing apparatus according to any one of Footnotes 1 to 5, wherein, when the above update error occurs due to a hardware failure of the above vehicle-mounted electronic device, the above boot information is selected to be the above second boot information.

[0071] [Footnote 7]

[0072] An information processing apparatus according to any one of Footnotes 1 to 6, wherein, when the above update error occurs again after the display of the above first boot information, the above boot information is selected to be the above second boot information.

[0073] [Footnote 8]

[0074] A vehicle, which is equipped with an information processing apparatus according to any one of Footnotes 1 to 7.

[0075] [Footnote 9]

[0076] An information processing method for controlling a display unit that displays information related to software update of a vehicle-mounted electronic device, wherein the following processing is performed: when an update error occurs in which the above software update cannot be normally implemented, the above display unit is caused to display boot information; and based on the situation where the above update error occurs, it is selected which of the above first boot information and the above second boot information is to be displayed by the above display unit as the above boot information, the above first boot information indicating a step for eliminating the above update error that can be performed by the user of the vehicle, and the above second boot information indicating that the above vehicle needs to be sent to a dealer.

[0077] [Footnote 10]

[0078] According to the information processing method described in Footnote 9, wherein, when the above update error occurs due to a communication interruption of the above vehicle-mounted electronic device, the above boot information is selected to be the above first boot information.

[0079] [Footnote 11]

[0080] According to the information processing method described in Note 9 or Note 10, when the update error occurs due to interruption of communication of the vehicle-mounted electronic device and the on / off of the power of the vehicle-mounted electronic device is switched in conjunction with the operation of the power switch of the vehicle, the guidance information is selected to be the first guidance information.

[0081] [Note 12]

[0082] According to the information processing method described in any one of Notes 9 to 11, when the update error occurs due to interruption of communication between an external distribution center for distributing software update data and the vehicle, the guidance information is selected to be the first guidance information.

[0083] [Note 13]

[0084] According to the information processing method described in any one of Notes 9 to 12, when it is confirmed that the electronic signature attached to the software update data is not a legitimate signature and this is the cause of the above-mentioned update error, it is selected to make the above-mentioned guide information the above-mentioned second guide information.

[0085] [Note 14]

[0086] The information processing method according to any one of Notes 9 to 13, wherein when the update error occurs due to a hardware failure of the vehicle-mounted electronic device, the guidance information is selected to be the second guidance information.

[0087] [Note 15]

[0088] The information processing method according to any one of Supplementary Notes 9 to 14, wherein when the update error occurs again after the first guidance information is displayed, the guidance information is selected to be the second guidance information.

[0089] [Note 16] A program executed by an information processing device that controls a display unit, the display unit displaying information related to software updates of an in-vehicle electronic device, wherein the information processing device is caused to perform the following processing: display processing for causing the display unit to display guidance information when an update error occurs that prevents normal implementation of the software update; and selection processing for selecting, based on the situation in which the update error occurs, whether to display first guidance information or second guidance information on the display unit as the guidance information, the first guidance information indicating steps for eliminating the update error that can be implemented by a user of the vehicle himself, and the second guidance information indicating that the vehicle needs to be sent to a dealer.

[0090] [Note 17]

[0091] The program according to Supplementary Note 16, wherein the selection process is a process of selecting the guidance information to be the first guidance information when the update error occurs due to a communication interruption of the in-vehicle electronic device.

[0092] [Note 18]

[0093] According to the procedure described in Note 16 or Note 17, the selection processing is to select the processing of making the guidance information the first guidance information when the update error occurs due to the interruption of communication of the vehicle-mounted electronic device and the on / off of the power of the vehicle-mounted electronic device is switched in conjunction with the operation of the power switch of the vehicle.

[0094] [Note 19]

[0095] A program according to any one of Notes 16 to 18, wherein the selection process is a process of selecting the first guidance information as the guidance information when the update error occurs due to interruption of communication between a distribution center outside the vehicle that distributes software update data and the vehicle.

[0096] [Note 20]

[0097] The program according to any one of Notes 16 to 19, wherein, when the update error occurs because the electronic signature attached to the software update data is confirmed to be not a valid signature, the guide information is selected to be the second guide information.

[0098] [Note 21]

[0099] The program according to any one of notes 16 to 20, wherein when the update error occurs due to a hardware failure of the in-vehicle electronic device, the guidance information is selected to be the second guidance information.

[0100] [Note 22]

[0101] The program according to any one of supplementary notes 16 to 21, wherein when the update error occurs again after the first guidance information is displayed, the guidance information is selected to be the second guidance information.

[0102] [Note 23]

[0103] A non-transitory storage medium storing the program described in any one of Notes 16 to 22.

Claims

1. An information processing device configured to control a display unit configured to display information related to software update of an in-vehicle electronic device, The information processing device is characterized in that A circuit is included, the circuit being configured to: Under the condition that an update error occurs that makes it impossible to normally implement the software update, the display unit displays guidance information; and Based on the situation in which the update error occurs, the display unit is caused to display either first guidance information or second guidance information as the guidance information, wherein the first guidance information indicates a procedure for eliminating the update error that a vehicle user can perform by himself, and the second guidance information indicates that the vehicle needs to be sent to a dealer.

2. The information processing device according to claim 1, characterized in that The circuit is configured to select the first guidance information as the guidance information under the condition that the update error occurs due to interruption of communication of the in-vehicle electronic device.

3. The information processing device according to claim 1, characterized in that The circuit is configured to select the first guidance information as the guidance information under the condition that the update error occurs due to communication interruption of the vehicle-mounted electronic device and the power of the vehicle-mounted electronic device is turned on and off in conjunction with the operation of a power switch of the vehicle.

4. The information processing device according to claim 1, characterized in that The circuit is configured to select the first guidance information as the guidance information under the condition that the update error occurs due to a communication interruption between an external distribution center configured to distribute software update data and the vehicle.

5. The information processing device according to claim 1, characterized in that The circuit is configured to select the second guidance information as the guidance information under the condition that the update error occurs because it is confirmed that the electronic signature attached to the software update data is not a legitimate signature.

6. The information processing device according to claim 1, characterized in that The circuit is configured to select the second guidance information as the guidance information under the condition that the update error occurs due to a hardware failure of the in-vehicle electronic device.

7. The information processing device according to claim 1, characterized in that: The circuit is configured to select the second guidance information as the guidance information if the update error occurs again after the first guidance information is displayed.

8. A vehicle, characterized in that: The information processing device comprises the information processing device according to claim 1.

9. An information processing method for controlling a display unit configured to display information related to software update of an in-vehicle electronic device, The information processing method is characterized by comprising: Under the condition that an update error occurs that makes it impossible to normally implement the software update, a guide message is displayed; and Based on the situation in which the update error occurs, the display unit is caused to display either first guidance information or second guidance information as the guidance information, wherein the first guidance information indicates a procedure for eliminating the update error that a vehicle user can perform by himself, and the second guidance information indicates that the vehicle needs to be sent to a dealer.

10. A non-transitory storage medium storing instructions executable by one or more processors and causing the one or more processors to perform the following functions, characterized in that: The features include: Under the condition that an update error that makes it impossible to normally implement the software update occurs, causing a display unit configured to display information related to the software update of the vehicle-mounted electronic device to display guidance information; and Based on the situation in which the update error occurs, the display unit is caused to display either first guidance information or second guidance information as the guidance information, wherein the first guidance information indicates a procedure for eliminating the update error that a vehicle user can perform by himself, and the second guidance information indicates that the vehicle needs to be sent to a dealer.

Images