Update information notification device, vehicle system, and update information notification program

Abstract

An update information notification device (7) provided by the present invention notifies, from a notification device, update information relating to the update of software when the software of an electronic control device to be updated is updated by update software acquired from a distribution device. An update information notification device is provided with: an update information acquisition unit (16a) that acquires update information; an operation input determination unit (16d) that determines an operation input of the occupant; and a notification control unit (16e) that determines a notification mode of the update information and causes the update information to be notified from the notification device in accordance with the determined notification mode. The notification control unit determines a notification mode of the update information on the basis of a determination result by the operation input determination unit.

Description

[0001] Cross-references to related applications

[0002] This application is based on Japanese Patent Application No. 2023-53437, filed on March 29, 2023, the contents of which are incorporated herein by reference. Technical Field

[0003] This disclosure relates to update information notification devices, vehicle systems, and update information notification procedures. Background Technology

[0004] This invention provides a technique for updating the software of an in-vehicle electronic control unit (hereinafter referred to as an ECU (Electronic Control Unit)) for purposes such as improving functionality and fixing bugs. In this case, the software of the target ECU is updated by the software update device sending the updated software to the software update server via a server. The software update sequentially performs the following stages: a campaign notification recommending the software update to the driver; a download stage where the software update device obtains the updated software from the server; an installation stage where the target ECU writes the updated software to its storage area; and an activation stage where the target ECU activates the updated software. In this case, the driver is notified by displaying update information related to the software update on, for example, via an in-vehicle display device or a portable information terminal. For example, Patent Document 1 discloses a method for notifying the driver of update information related to the software update, where the notification to the driver varies based on the characteristics of the updated software.

[0005] Patent Document 1: Japanese Patent Application Publication No. 2021-9654.

[0006] The scenarios for software updates vary widely, and the quality of the update information requested by passengers differs depending on the scenario. For example, when an update is sent while the vehicle is in motion, the driver visually observes the update information while driving, so a simple update is expected. On the other hand, when an update is sent while the vehicle is parked, the driver visually observes the update information while not driving, so a more detailed update can be requested. Therefore, it is necessary to appropriately send update information based on the scenario. Summary of the Invention

[0007] The purpose of this disclosure is to provide appropriate notification of software update information based on the scenario.

[0008] According to one technical solution of this disclosure, an update information notification device notifies an update of information related to a software update performed by update software on the software of an electronic control device whose software is being updated, obtained from a distribution device. An update information acquisition unit acquires the update information. An operation input determination unit determines the occupant's operation input. A notification control unit determines the notification method for the update information and, according to the determined notification method, notifies the notification unit of the update information. The notification control unit determines the notification method for the update information based on the determination result of the operation input determination unit.

[0009] The notification method for software updates is determined based on the occupant's input, and the updates are delivered accordingly. There is no uniform notification method; instead, the notification method is tailored to the occupant's input, allowing for appropriate notification of software updates based on the specific scenario.

[0010] For example, when notifying drivers of updates while the vehicle is in motion, a simple notification request can be entered by the passenger, providing a concise notification method that appropriately addresses the needs of drivers who prefer simple notifications while the vehicle is in motion. Conversely, when notifying drivers of updates while the vehicle is parked, a detailed notification request can be entered by the passenger, providing a detailed notification method that appropriately addresses the needs of drivers who prefer detailed notifications while the vehicle is parked. Attached Figure Description

[0011] While referring to the appendix Figure 1 The above-mentioned objects, as well as other objects, features, and advantages of this disclosure, become clearer through the following detailed description. The accompanying drawings are shown below.

[0012] Figure 1 It is a functional block diagram that represents the overall structure of an implementation method.

[0013] Figure 2 This is the functional block diagram of the HCU.

[0014] Figure 3 This is a diagram representing a table of different situations.

[0015] Figure 4 It is a diagram that represents the content displayed.

[0016] Figure 5 It is a diagram that represents the content displayed.

[0017] Figure 6 It is a diagram that represents the content displayed.

[0018] Figure 7It is a diagram that represents the content displayed.

[0019] Figure 8 It is a diagram that represents the content displayed.

[0020] Figure 9 It is a diagram that represents the content displayed.

[0021] Figure 10 It represents a diagram that displays a pattern table.

[0022] Figure 11 It represents a diagram that displays a pattern.

[0023] Figure 12 It represents a diagram that displays a pattern.

[0024] Figure 13 This is a diagram illustrating the display priority.

[0025] Figure 14 This is a diagram illustrating the operation priority.

[0026] Figure 15 This is a diagram illustrating the amount of information displayed.

[0027] Figure 16 This is a flowchart representing the reception and processing of update information notification signals.

[0028] Figure 17 This is a flowchart illustrating the reception and processing of error message notification signals.

[0029] Figure 18 This is a flowchart representing the operation judgment and processing of a simplified display request.

[0030] Figure 19 This diagram illustrates the switching between simplified and traditional displays.

[0031] Figure 20 This diagram illustrates the switching between simplified and traditional displays.

[0032] Figure 21 This diagram illustrates the switching between simplified and traditional displays.

[0033] Figure 22 This is a diagram illustrating the display of the instrument.

[0034] Figure 23 This is a flowchart representing the operation judgment and processing of the detailed display request.

[0035] Figure 24 This is a diagram explaining why the display cannot be switched to detailed display.

[0036] Figure 25This diagram illustrates the switching between displaying detailed information.

[0037] Figure 26 This is a flowchart representing the operation determination and processing of abort requests.

[0038] Figure 27 This is a diagram illustrating the display of a message indicating the reason for abandoning the abort request.

[0039] Figure 28 This is a diagram illustrating the display of the suspension information.

[0040] Figure 29 This is a diagram illustrating the display of the suspension information.

[0041] Figure 30 This is a flowchart illustrating the process of determining and handling update information display requests when the vehicle's power is disconnected.

[0042] Figure 31 This is a flowchart illustrating the vehicle power disconnection detection and processing during a software update. Detailed Implementation

[0043] Hereinafter, one embodiment will be described with reference to the accompanying drawings. The software update system 1 is configured such that the vehicle system 2, which is installed in the vehicle, and a server 3 (equivalent to a distribution device) functioning as an OTA (Over-The-Air) center can communicate via a communication network 4. The vehicle system 2 is configured such that a software update device (hereinafter referred to as a central gateway (CGW) 5) functioning as an OTA host, multiple ECUs 6, and an HMI (Human Machine Interface) control unit (hereinafter referred to as an HCU 7, equivalent to an update information notification device) can communicate via an in-vehicle network 8.

[0044] The vehicle network 8 is, for example, CAN (Controller Area Network) (registered trademark). The vehicle network 8 can also be FLEXRAY (registered trademark), CXPI (Clock Extension Peripheral Interface) (registered trademark), Ethernet (registered trademark), etc. In this embodiment, a structure with four ECUs 6 connected to the vehicle network 8 is shown, but the number of ECUs 6 connected to the vehicle network 8 is arbitrary. Furthermore, the number of vehicle networks 8 is also arbitrary.

[0045] ECU6, for example, is a device that controls the drive system, the ADAS (Advanced Driving Assistance System), or the multimedia system. Through software modifications and functional improvements, it can become a software update target, i.e., an update target ECU6. Software includes not only programs that command the processing steps to make the computer perform actions, but also files, data, libraries, etc., referenced during program execution. Depending on the structure of the software storage area, there are ECUs with double-sided memory (software storage areas on both sides) and single-sided memory (software storage area on one side). Double-sided memory is sometimes called dual-library memory, and single-sided memory is sometimes called single-library memory. Additionally, HCU7 can also be a software update target.

[0046] A vehicle communication unit (hereinafter referred to as DCM (Data Communication Module)) 9 is connected to CGW5. DCM9 can receive update packages distributed from server 3 via a wireless connection to server 3 through communication network 4. The update package distributed from server 3 contains specification data that can determine the update target ECU6, and update software to be written to the update target ECU6. The update software is equivalent to so-called all data when the software is completely rewritten, and equivalent to so-called differential data when the software is partially rewritten. If DCM9 receives an update package distributed from server 3, it forwards the received update package to CGW5.

[0047] If CGW5 forwards an update package from DCM9, it extracts specification data and update software from the forwarded update package. Based on the extracted specification data, it determines the update target ECU6, sends the extracted update software to the update target ECU6, and sends an update instruction to the update target ECU6, causing the update target ECU6 to perform a software update. That is, the update target ECU6 performs a software update by receiving the update software and the update instruction from CGW5 and writing the update software into its storage area. The method of writing the update software obtained from server 3 via communication network 4 into the update target ECU6 is called wireless reprogramming. In this embodiment, a structure in which DCM9 and CGW5 are configured independently is shown, but a structure in which the functions of DCM9 are integrated into CGW5 is also possible.

[0048] Additionally, the reprogramming tool 10 (equivalent to a distribution device) is detachably connected to the vehicle network 8. While connected to the vehicle network 8, the reprogramming tool 10 distributes the update software to the target ECU 6 and sends an update instruction to the target ECU 6, causing the target ECU 6 to perform a software update. That is, the target ECU 6 performs a software update by receiving the update software and update instruction from the reprogramming tool 10 and writing the update software to its storage area. The method of writing the update software obtained from the reprogramming tool 10 without via the communication network 4 to the target ECU 6 is called wired reprogramming. In this embodiment, a structure in which the reprogramming tool 10 is directly connected to the vehicle network 8 is exemplified, but a structure in which the reprogramming tool 10 is connected to the vehicle network 8 via the CGW5 is also possible.

[0049] The software update process includes several phases: a campaign notification where server 3 recommends the software update to vehicle system 2; a download phase where CGW5 retrieves the update package from server 3; an installation phase where CGW5 instructs the target ECU 6 to write the update software to its storage area; and an activation phase where CGW5 instructs the target ECU 6 to activate the update software. Each phase progresses by the driver's appropriate consent. CGW5 manages the software update status during these campaign notification, download, installation, and activation phases, sending update information notification signals indicating the update status to HCU 7.

[0050] Update information refers to various information related to software updates, including the progress of the update and information that identifies features that will become usability limitations in the update. For example, during an activity notification phase, this might include the updated software's filename, file size, and feature description. During a download phase, this might include information indicating the start of the download, the progress of the download (expressed as a percentage of the total downloaded data relative to the planned download size), information explaining the reason for any interruption, and information indicating the download is complete. Similarly, during an installation phase, this might include information indicating the start of the installation, the progress of the installation (expressed as a percentage of the total installed data relative to the planned installation size), information explaining the reason for any interruption, and information indicating the installation is complete. For example, in the activation phase, this includes information indicating the start of activation, information indicating the progress of activation, information such as the amount of data that has been activated as a percentage relative to the predetermined amount of data for activation progress, information notifying the reason for any interruption if activation is interrupted for some reason, and information indicating activation completion. Additionally, in software updates related to driving control, this includes information that identifies functions that are subject to usage restrictions related to driving control.

[0051] CGW5 sends update information notification signals to HCU7 at a predetermined period. Additionally, if a software update results in an error, CGW5 interrupts the error information notification signal and sends it to HCU7 instead.

[0052] The HCU7 is connected to a central information display (CID) 11 (equivalent to a notification device), an instrument cluster 12 (equivalent to a notification device), and a head-up display (HUD) 13 (equivalent to a notification device). The CID is positioned in front of the driver's seat and displays information such as maps for navigation, camera images based on parking assist, audio information, and air conditioning information. The instrument cluster 12, also positioned in front of the driver's seat, includes various indicators displaying vehicle speed, gear position, fuel level, warnings, etc. The HUD 13 projects information such as vehicle speed, gear position, and route guidance as a virtual image in front of the driver's seat onto the windshield. Additionally, an external device 14 can wirelessly communicate with the vehicle system 2 via the communication network 4 and the DCM9. The external device 14 is a portable information terminal that can be carried by the occupant, such as a smartphone or tablet, and is a terminal that the occupant can use outside the vehicle.

[0053] If the HCU7 receives an update notification signal from the CGW5 along with a software update, it can display the update information based on the update notification signal on the CID11 and the instrument panel 12. Displaying the update information on the instrument panel 12 can also be achieved by notifying the user through the illumination, flashing, or extinguishing of an indicator. Furthermore, if the external device 14 and DCM9 are wirelessly connected via the communication network 4, and the external device 14 and vehicle system 2 can communicate via data, then when the HCU7 receives an update notification signal from the CGW5 along with a software update, it can display the update information based on the update notification signal on the external device 14.

[0054] By displaying update information on the CID11 and instrument cluster 12, occupants can check various information regarding software updates inside the vehicle. Furthermore, by displaying update information on the external device 14 when occupants are using it outside the vehicle, occupants can also check various information regarding software updates outside the vehicle. In this embodiment, a structure is illustrated where the CID11, instrument cluster 12, and external device 14 display update information, but the HUD13 could also display update information.

[0055] The HCU7 is connected to an operation input unit 15 that allows occupants to input information. The operation input unit 15 can be, for example, the touch panel of the CID11, the touch panel of the external device 14, or a steering wheel switch. If the operation input unit 15 detects occupant input, it sends an operation input detection signal to the HCU7. Occupants can input information regarding updates via the operation input unit 15. For example, if an agreement screen asking for consent to downloads is displayed after an activity notification, occupants can input whether they agree to the download. Similarly, if an agreement screen asking for consent to installation is displayed after downloading, occupants can input whether they agree to the installation. And if an agreement screen asking for consent to activation is displayed after installation, occupants can input whether they agree to activation.

[0056] like Figure 2As shown, the HCU7 includes a control unit 16 and a CAN communication unit 17. The control unit 16 is primarily composed of a microcomputer with a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), and I / O (Input / Output) components. The control unit 16 executes a control program stored on a non-transferable physical storage medium, performing corresponding processing to control all operations of the HCU7. The CAN communication unit 17 controls the transmission and reception of CAN signals with the vehicle network 8. Furthermore, the HCU7 is connected to a battery power supply (+B) from the vehicle battery, enabling operation even when the vehicle power is off.

[0057] The control unit 16 includes an update information acquisition unit 16a, an occupant status determination unit 16b, a vehicle status determination unit 16c, an operation input determination unit 16d, and a display control unit 16e (equivalent to a notification control unit). These units 16a to 16e execute update information notification procedures.

[0058] If the update information acquisition unit 16a receives an update information notification signal from CGW5, it acquires update information based on the received update information notification signal.

[0059] The occupant status determination unit 16b determines an occupant status indicating the occupant's condition. For example, if it receives occupant status notification signals such as the analysis results of images captured by image sensors inside the vehicle, the detection results of seat sensors detecting seat occupants, the detection results of seatbelt sensors detecting seatbelt wear, or the detection results of biosensors indicating the detection of living organisms, the occupant status determination unit 16b determines the occupant status based on these received occupant status notification signals. As the occupant status, the occupant status determination unit 16b determines, for example, whether the occupant is only the driver, whether the occupant is both the driver and a passenger, whether the occupant is only a passenger, whether the occupant is not in the vehicle, whether the occupant is in the vehicle, or whether the occupant has disembarked.

[0060] The vehicle state determination unit 16c determines the vehicle state, indicating the vehicle's status. For example, if the vehicle state determination unit 16c receives a vehicle state notification signal indicating the on / off state of an ignition signal, the on / off state of an accessory signal, or the on / off state of an automatic driving function, it determines the vehicle state based on the received vehicle state notification signal. As the vehicle state, the vehicle state determination unit 16c determines, for example, whether the vehicle is in motion, parked, or stationary, or whether it is in automatic or manual driving mode. In this embodiment, an example is given of a motor-driven vehicle where the on / off state of the ignition signal determines whether the vehicle is in motion or stationary. However, in the case of an electric vehicle, the on / off state of the EV (Electric Vehicle) system can also be used to determine whether the vehicle is in motion or stationary.

[0061] The operation input determination unit 16d determines the occupant's operation input. If the operation input determination unit 16d receives an operation input detection signal from the operation input unit 15, it determines the occupant's operation input based on the received operation input detection signal.

[0062] The display control unit 16e determines the display method of the update information based on the determination results of the occupant status determination unit 16b, the vehicle status determination unit 16c, and the operation input determination unit 16d. That is, the display control unit 16e does not display the update information in a uniform manner, but rather displays it in different ways depending on the occupant status, vehicle status, and the occupant's operation input. If the display control unit 16e determines the display method of the update information, it sends a display indication signal to the CID 11 and the instrument panel 12, and displays the update information on the CID 11 and the instrument panel 12 according to the determined display method. Furthermore, if the vehicle system 2 can communicate with the external device 14, the display control unit 16e sends a display indication signal from the DCM 5 to the external device 14 when determining the display method of the update information, and the external device 14 displays the update information according to the determined display method.

[0063] Explain how the updated information will be displayed. For example... Figure 3As shown, the display control unit 16e stores a situation differentiation table, which differentiates situations based on occupant status, vehicle status, and occupant operation input. The display control unit 16e determines the corresponding situation based on the determination results of the occupant status determination unit 16b, the vehicle status determination unit 16c, and the operation input determination unit 16d. For example, if the only occupant in the vehicle is the driver, the vehicle is in motion based on manual driving, and there is operation input for CID11, the display control unit 16e determines situation 1-1. Furthermore, if the occupants in the vehicle are the driver and a passenger, the vehicle is parked, accessories are off, and a predetermined time has elapsed since the ignition was disconnected, the display control unit 16e determines situation 2-10.

[0064] The display control unit 16e displays each situation distinguished by the situation classification table, such as Figures 4 to 9 As shown, the content of the predefined update information display method includes the display pattern in each stage of activity notification, download, installation and activation; the display priority, operation priority and display information volume when the software update targets an important function; and the display priority, operation priority and display information volume when the software update targets a less important function.

[0065] like Figure 10 As shown, the display control unit 16e stores a table of display patterns 1 to 5 as display patterns, and sets the corresponding machine to either active or inactive. For example... Figures 11 to 12 As shown, display patterns 1 to 5 represent the valid or invalid patterns for CID11, instrument device 12, HUD13, and external device 14, respectively. The display control unit 16e displays update information for devices set as valid and does not display update information for devices set as invalid. The display control unit 16e sets multiple devices as valid in display patterns 1, 3, and 4; therefore, if display patterns 1, 3, and 4 are selected, update information is displayed using multiple devices.

[0066] like Figure 13 As shown, the display control unit 16e sets any one of priorities 1 to 3 as the display priority. The priorities are as follows: priority 1 is "must be displayed", priority 2 is "display if it is a displayable state", and priority 3 is "do not display even if it is a displayable state".

[0067] like Figure 14As shown, the display control unit 16e sets any one of priorities 1 to 4 as the operation priority. These priorities are as follows: priority 1 is "only the driver can operate", priority 2 is "even if the driver is present, passengers can operate conditionally", priority 3 is "even if the driver is not present, passengers can operate (e.g., they can use purchased applications or free applications)", and priority 4 is "neither the driver nor passengers can operate".

[0068] like Figure 15 As shown, the display control unit 16e sets any one of information quantity 1 to 4 as the display information quantity. The information quantity is as follows: information quantity 1 is "detailed description", information quantity 2 is "brief description", information quantity 3 is "icons, diagrams", and information quantity 4 is "none".

[0069] For example, in situations where the only occupant in the vehicle is the driver, the vehicle is in motion based on manual driving, and there is operational input to CID11, etc., and scenario 1-1 is determined, during the activity notification phase, the display control unit 16e activates CID11 and external device 14 and deactivates instrument panel 12 and HUD13 by selecting display pattern 1. That is, the display control unit 16e causes CID11 and external device 14 to display updated information about the activity notification. During the download phase, the display control unit 16e activates CID11 and deactivates instrument panel 12, HUD13, and external device 14 by selecting display pattern 5. That is, the display control unit 16e causes CID11 to display updated information about the download. During the installation phase, the display control unit 16e activates CID11 and instrument panel 12 and deactivates HUD13 and external device 14 by selecting display pattern 4. That is, the display control unit 16e causes CID 11 and instrumentation device 12 to display updated information about the installation. During the activation phase, the display control unit 16e activates CID 11 and instrumentation device 12 and deactivates HUD 13 and external machine 14 by selecting display pattern 4. In other words, the display control unit 16e causes CID 11 and instrumentation device 12 to display updated information about activation.

[0070] Furthermore, if, for example, scenario 1-1 is determined, the display control unit 16e sets the display priority to priority 2, the operation priority to priority 4, and the display information quantity to any one of information quantity 1 to 3. Conversely, if, for example, scenario 1-1 is determined, the display control unit 16e sets the display priority to priority 3, and does not set the operation priority or the display information quantity.

[0071] In this way, the display control unit 16e determines the corresponding situation based on the occupant status, vehicle status, and occupant operation input, and displays updated information according to a display mode predefined based on the determined situation.

[0072] For example, comparing scenario 1-1 of a vehicle driven manually with scenario 1-3 of a vehicle driven autonomously, regarding the download phase, display pattern 5 is defined in scenario 1-1, and display pattern 4 is defined in scenario 1-3. This is defined based on the fact that if the instrument panel 12 displays update information while the vehicle is driven manually, it may hinder the driver's driving operation, but even if the instrument panel 12 displays update information while the vehicle is driven autonomously, no adverse effects will occur.

[0073] Similarly, comparing scenarios 1-1 and 1-3, the priority of software updates for important functions is defined as priority 4 in scenario 1-1 and priority 1 in scenario 1-3. This is based on the fact that allowing operation in a manually driven vehicle might hinder the driver's operation, but allowing operation in an autonomous vehicle would not cause any adverse effects.

[0074] For example, comparing scenario 1-1 of a manually driven vehicle in motion with scenario 1-9 of getting out of the vehicle while parked, the display priority for software updates of important functions is defined as priority 2 in scenario 1-1 and priority 1 in scenario 1-9. The following scenario is intentionally defined: information updates are not mandatory while the vehicle is in motion, but are mandatory when getting out of the vehicle while parked.

[0075] For example, when comparing scenario 1-1 of a manually driven vehicle in motion with scenario 1-5 of a parked vehicle, the amount of information displayed for software updates of unimportant functions can be left undefined in scenario 1-1, while priorities 1, 2, and 3 can be defined in scenario 1-5. This is based on the following principle: increasing the amount of information while the vehicle is in motion might hinder the driver's operation, but increasing the amount of information even when parked will not cause any adverse effects.

[0076] Next, refer to Figures 16 to 31 The function of the above-mentioned components will be explained. Here, we will explain in turn the processing of determining the display method of update information based on the determination results of occupant status and vehicle status, the processing of determining the display method of update information based on the determination results of operation input, and the processing of displaying update information when the vehicle power is disconnected.

[0077] (1) Processing for determining the display method of update information based on the determination results of occupant status and vehicle status (refer to) Figures 16 to 17 Here, the reception and processing of update information notification signals and error information notification signals will be explained in turn.

[0078] (1-1) Processing for receiving and determining the update information notification signal (refer to) Figure 16 )

[0079] The control unit 16 performs update information notification signal reception determination processing at a predetermined period. If the control unit 16 starts the update information notification signal reception determination processing, it determines whether an update information notification signal has been received from CGW5 (S101). If the control unit 16 determines that no update information notification signal has been received (S101: No), it ends the update information notification signal reception determination processing.

[0080] If the control unit 16 determines that an update information notification signal has been received (S101: Yes), it acquires update information based on the received update information notification signal (S102, equivalent to the update information acquisition step). The control unit 16 determines the occupant status based on the occupant status notification signal (S103, equivalent to the occupant status determination step). The control unit 16 determines the vehicle status based on the vehicle status notification signal (S104, equivalent to the vehicle status determination step). The control unit 16 determines the occupant's operation input based on the operation input detection signal (S105, equivalent to the operation input determination step).

[0081] The control unit 16 determines the display method of the updated information based on the determination results of the occupant status, the vehicle status, and the occupant's operation input (S106, equivalent to the notification method determination step). That is, the control unit 16 refers to... Figure 3 The corresponding situation is selected by distinguishing the situation shown in the situation table. If the control unit 16 selects the corresponding situation, it sends a display indication signal to the corresponding machine according to the selected situation, so that the corresponding machine displays the update information (S107, equivalent to the notification control step), and ends the reception determination processing of the update information notification signal.

[0082] Control Unit 16 according to Figure 3 The table showing the distinction between different scenarios, for example, if the determination result for the occupant status is "only the driver", the determination result for the vehicle status is "the vehicle is in motion and being manually driven", and the determination result for the occupant's operation input is "operation input exists", then scenario 1-1 is determined. Control unit 16 determines the scenario based on... Figure 4The corresponding display method for scenario 1-1 is as shown. For example, if it is the event notification stage, display pattern 1 is selected, so that CID 11 and external machine 14 display updated information about the event notification. That is, the driver can confirm the updated information about the event notification through CID 11 and external machine 14.

[0083] If the process moves from the activity notification stage to the download stage, the control unit 16 selects to display pattern 5, causing CID 11 to display updated download information. That is, the driver can confirm the updated download information via CID 11. If the process moves from the download stage to the installation stage, the control unit 16 selects to display pattern 4, causing CID 11 and the instrument panel 12 to display updated installation information. That is, the driver can confirm the updated installation information via CID 11 and the instrument panel 12. If the process moves from the installation stage to the activation stage, the control unit 16 continues to display pattern 4, causing CID 11 and the instrument panel 12 to display updated activation information. That is, the driver can confirm the updated activation information via CID 11 and the instrument panel 12.

[0084] The above illustrates the scenario 1-1, continuing from the activity notification stage to the activation stage. However, if the control unit 16 determines a change in the occupant status, vehicle status, or occupant's operation input midway between the activity notification stage and the activation stage, it selects a new scenario accordingly. The control unit 16 sends a display indication signal to the corresponding machine based on the selected new scenario, causing the corresponding machine to display updated information. For example, if the occupant status is determined to be "driver only," the vehicle status is determined to be "parked," and the occupant's operation input is determined to be "operation input present," then scenario 1-5 is newly determined. The control unit 16 then determines the scenario based on the change in the occupant status. Figure 4 The corresponding display mode in scenarios 1-5, as shown, causes the corresponding machine to display updated information. That is, the control unit 16 switches from scenario 1-1 to scenario 1-5 to cause the corresponding machine to display updated information.

[0085] (1-2) Error message notification signal reception and processing (refer to) Figure 17 )

[0086] The control unit 16 performs error information notification signal reception determination processing at a predetermined period. If the control unit 16 starts the error information notification signal reception determination processing, it determines whether an error information notification signal has been received from CGW5 (S111). If the control unit 16 determines that no error information notification signal has been received (S111: No), it ends the error information notification signal reception determination processing.

[0087] If the control unit 16 determines that an error information notification signal has been received (S111: Yes), it acquires error information based on the received error information notification signal (S112). The control unit 16 determines the occupant status based on the occupant status notification signal (S113). The control unit 16 determines the vehicle status based on the vehicle status notification signal (S114). The control unit 16 determines the occupant's operation input based on the operation input detection signal (S115).

[0088] The control unit 16 determines the display method of the error message based on the determination results of the occupant status, the vehicle status, and the occupant's operation input (S116). That is, the control unit 16 refers to... Figure 3 The corresponding situation is selected by distinguishing the situation shown in the table. If the control unit 16 selects the corresponding situation, it sends a display indication signal to the corresponding machine according to the selected situation, so that the corresponding machine displays an error message (S117) and ends the error message notification signal reception and determination process.

[0089] (2) Processing that determines the display method of updated information based on the determination result of the operation input (refer to) Figures 18 to 29 Here, the operation judgment and processing for simplified display requests, detailed display requests, and abort requests will be explained in turn.

[0090] (2-1) Simplified display request operation judgment and processing (refer to) Figures 18 to 22 )

[0091] For example, a driver who wants a simplified display of updated information inputs a simplified display request. The control unit 16 performs simplified display request operation determination processing at predetermined intervals during the updated information display. If the control unit 16 starts simplified display request operation determination processing, it determines whether a simplified display request operation input has been generated based on the operation input detection signal from the operation input unit 15 (S201). If the control unit 16 determines that no simplified display request operation input has been generated (S201: No), it ends the simplified display request operation determination processing.

[0092] If the control unit 16 determines that an operation input requesting a simplified display has been generated (S201: Yes), it determines whether the updated information on display can be switched to a simplified display (S202). If the control unit 16 determines that the updated information on display cannot be switched to a simplified display (S202: No), it does not switch the updated information on display to a simplified display and ends the operation determination process for the simplified display request. If the control unit 16 determines that the updated information on display can be switched to a simplified display (S202: Yes), it switches the updated information on display to a simplified display (S203) and ends the operation determination process for the simplified display request.

[0093] like Figure 19 As shown, in CID11, when the control unit 16 determines that it can switch to simplified display while displaying update information such as a progress bar A1 indicating download status and function description A2 indicating update function details, it switches to the following screen: only the progress bar A3 is displayed as update information, and the menu button group A4 is displayed as information unrelated to the update information. The information unrelated to the update information can also be information other than the menu button group A4, such as a map for navigation, camera images based on parking assist, audio information, or air conditioning information.

[0094] In addition, such as Figure 20 As shown, the control unit 16 also switches to the following screen when multiple software updates are being performed, displaying progress bars A3 and A5 for each software update as update information, and also displaying the menu button group A4.

[0095] In addition, such as Figure 21 As shown, the control unit 16 can also switch to the following screen, where the updating button A6 flashes instead of the progress bar A3 as update information, and the menu button group A4 is displayed.

[0096] In addition, such as Figure 22 As shown, the control unit 16 can also cause the instrument device 12 to display indicators A7 to A9. For indicators A8 and A9 that correspond to the software and the functions being updated, the remaining time until the software update is completed is displayed.

[0097] (2-2) Detailed display of the operation judgment and processing of the request (refer to) Figures 23 to 25 )

[0098] For example, a driver who wants to update the information to a more detailed display inputs a detailed display request. The control unit 16 performs a detailed display request operation determination process at predetermined intervals during the information update display. If the control unit 16 starts the detailed display request operation determination process, it determines whether a detailed display request operation input has been generated based on the operation input detection signal from the operation input unit 15 (S211). If the control unit 16 determines that no detailed display request operation input has been generated (S211: No), it ends the detailed display request operation determination process.

[0099] If the control unit 16 determines that an operation input requesting detailed display has been generated (S211: Yes), it determines whether the updated information on display can be switched to detailed display (S212). If the control unit 16 determines that the updated information on display cannot be switched to detailed display (S212: No), it does not switch the updated information on display to detailed display, displays a message indicating the reason why it cannot be switched to detailed display (S213), and ends the operation determination process for the detailed display request.

[0100] If the control unit 16 determines that it can switch the displayed updated information to detailed display (S212: Yes), it determines the occupant status based on the occupant status notification signal (S214), determines the vehicle status based on the vehicle status notification signal (S215), determines the occupant's operation input based on the operation input detection signal (S216), and determines the display mode of the updated information based on the determination results of the occupant status, the vehicle status, and the occupant's operation input (S217). The control unit 16 switches the displayed updated information to detailed display according to the determined display mode (S218) and ends the operation determination process for the detailed display request.

[0101] like Figure 24 As shown, if the control unit 16 determines that it cannot switch to detailed display while displaying the update button A6 as update information in CID11 and the menu button group A4, it will not switch the update information in the display to detailed display and will display a message A10 stating the reason why it cannot switch to detailed display: "Cannot be used for detailed display while the vehicle is in motion".

[0102] like Figure 25 As shown, if the control unit 16 determines that it can switch to detailed display while displaying the update button A6 as update information and the menu button group A4 in CID11, it switches to the following screen, which displays, for example, a progress bar A1 as download status and a function description A2 as update function details as update information.

[0103] (2-3) Operation judgment and handling of abort request (refer to) Figures 26 to 29 )

[0104] For example, a driver who wants to suspend a software update may input an operation input requesting suspension. The control unit 16 performs operation determination processing for the suspension request at predetermined intervals while displaying update information. If the control unit 16 starts the operation determination processing for the suspension request, it determines whether an operation input request for suspension has been generated based on the operation input detection signal from the operation input unit 15 (S221). If the control unit 16 determines that no operation input request for suspension has been generated (S221: No), it ends the operation determination processing for the suspension request.

[0105] If the control unit 16 determines that an operation input for an abort request has been generated (S221: Yes), it then determines whether the object of the abort request is an important function (S222). If the control unit 16 determines that an operation input for an abort request has been generated (S221: Yes), it then determines whether the object of the software update request for abort is an important function (S222).

[0106] If the control unit 16 determines that the software update requested for cancellation is an important function (S222: Yes), then it cancels the cancellation request (S223). The control unit 16 displays a message indicating the reason for canceling the cancellation request (S224) and ends the operation determination process for the cancellation request.

[0107] If the control unit 16 determines that the software update requested for suspension is not an important function (S222: No), it determines whether it is in the process of simply displaying update information (S225). If the control unit 16 determines that it is in the process of simply displaying update information (S225: Yes), it causes the corresponding machine to display suspension information indicating the suspension of the software update (S226) and ends the operation determination process of the suspension request.

[0108] If the control unit 16 determines that it is not in the process of simply displaying update information (S225: No), it determines the occupant status based on the occupant status notification signal (S227), determines the vehicle status based on the vehicle status notification signal (S228), determines the occupant's operation input based on the operation input detection signal (S229), and determines the display method of the update information based on the determination results of the occupant status, vehicle status, and occupant's operation input (S230). The control unit 16 then causes the corresponding machine to display a stop information indicating the software update has been suspended (S231) according to the determined display method, ending the operation determination process for the stop request. In this case, if the control unit 16 can perform a detailed display based on the determination results of the occupant status, vehicle status, and occupant's operation input, it will display the stop information in detail; otherwise, it will display the stop information simply.

[0109] like Figure 27 As shown, if the control unit 16 determines that an operation input of the stop button A11 has been generated, and determines that the software update requested to be stopped is an important function, then it cancels the stop request and pops up a message A12 that shows the reason for canceling the stop request: "Because it is a function that is critical to the vehicle, the software update cannot be stopped."

[0110] like Figure 28As shown, if the control unit 16 determines that it is in the process of simply displaying update information, it causes the corresponding machine to display a stop message indicating that the software update has been suspended. For example, the control unit 16 displays the stop message by graying out the update in progress button A6.

[0111] like Figure 29 As shown, if the control unit 16 determines that it is not in the process of simply displaying update information, it determines the display method of the update information based on the determination results of the occupant status, the vehicle status, and the occupant's operation input. According to the determined display method, the corresponding machine displays a stop message indicating that the software update has been aborted. The control unit 16 displays a message A13 indicating that the software update has been aborted: "Software update has been aborted. To restart, please press the 'Restart' button."

[0112] (3) Handling of displaying update information when the vehicle power is disconnected (refer to) Figures 30 to 31 Here, we will explain in turn the handling of the update information display request when the vehicle power is disconnected, and the handling of the vehicle power disconnection during software updates.

[0113] (3-1) Handling of update information display requests when vehicle power is disconnected

[0114] The control unit 16 performs display request determination processing for update information when the vehicle power is disconnected at a predetermined period. If the control unit 16 starts display request determination processing for update information, it determines the occupant status based on the occupant status notification signal (S301) and determines whether there is an occupant in the vehicle (S302). If the control unit 16 determines that there is an occupant in the vehicle (S302: Yes), it ends the display request determination processing for update information when the vehicle power is disconnected.

[0115] If the control unit 16 determines that there are no occupants in the vehicle, i.e., no occupants (S302: No), it determines the occupant's operation input based on the operation input detection signal (S303) and determines whether an operation input indicating a display request for update information has been generated (S304). If it determines that no operation input indicating a display request for update information has been generated (S304: No), it terminates the update information display request determination process when the vehicle power is disconnected.

[0116] If the control unit 16 determines that an operation input indicating a display request for update information has been generated (S304: Yes), it determines the display method of the update information based on the determination result of the occupant status and the determination result of the occupant's operation input (S305). The control unit 16 causes the corresponding machine to display the update information according to the determined display method (S306), and ends the update information display request determination process when the vehicle power is disconnected.

[0117] (3-2) Handling of vehicle power disconnection during software update

[0118] The control unit 16 performs vehicle power disconnection determination processing during software updates at a predetermined cycle. If the control unit 16 starts vehicle power disconnection determination processing during software updates, it determines whether the software update process is in progress (S311). If the control unit 16 determines that the software update process is not in progress (S311: No), it ends vehicle power disconnection determination processing during software updates.

[0119] If the control unit 16 determines that it is in the process of updating software (S311: Yes), it determines the vehicle status based on the vehicle status notification signal (S312) and determines whether the vehicle power supply is disconnected (S313). If the control unit 16 determines that the vehicle power supply is not disconnected (S313: No), it ends the vehicle power supply disconnection determination process in the software update.

[0120] If the control unit 16 determines that the vehicle power is disconnected (S313: Yes), it continues to update the information display (S314) and ends the vehicle power disconnection determination process in the software update.

[0121] The above example illustrates a structure where the update information acquisition unit 16a, occupant status determination unit 16b, vehicle status determination unit 16c, operation input determination unit 16d, and display control unit 16e are configured in the HCU7. However, the functions of each unit 16a to 16e can also be distributed across different machines. For example, a structure could be configured such that an ECU for determining occupant status, an ECU for determining vehicle status, and an ECU for determining occupant operation input are respectively configured, and each ECU sends the determination result to the HCU7. Alternatively, the functions of each unit 16a to 16e could be configured in the CGW5.

[0122] Based on the above-described embodiment, the following effects can be achieved. In the HCU7, the display method of update information is determined based on the result of the occupant's operation input, and the update information is displayed according to the determined display method. Instead of uniformly displaying update information, the display method of update information is determined and displayed based on the occupant's operation input, thereby enabling the appropriate display of software update information according to the scenario.

[0123] For example, when displaying updated information while the vehicle is in motion, passengers can input a simple display request to receive the updated information in a concise manner, appropriately addressing the needs of drivers who prefer a simple display while the vehicle is in motion. Conversely, when displaying updated information while the vehicle is parked, passengers can input a detailed display request to receive the updated information in a detailed manner, appropriately addressing the needs of drivers who prefer a detailed display while the vehicle is parked.

[0124] The display method of updated information is determined based on the results of the occupant's input and the vehicle's status. It can appropriately display updated information according to the scenario after considering the vehicle's status determination.

[0125] If the input indicates a request for simplified display of updated information, the display mode of the updated information will be switched from detailed display to simplified display while the updated information continues to be displayed. By having a driver who desires a simplified display input indicate a request for simplified display, the display mode of the updated information can be switched from detailed display to simplified display while the updated information continues to be displayed.

[0126] When the display mode of updated information is switched from detailed display to simplified display while the updated information continues to be displayed, information unrelated to the updated information is displayed simultaneously. By switching from detailed display to simplified display, unused display area can be effectively utilized.

[0127] If an operation input indicating a request for detailed display of updated information is confirmed, the display mode of the updated information is switched from simplified display to detailed display, and the display of updated information continues. By having a driver who desires a detailed display input indicate a request for detailed display, the display mode of the updated information can be switched from simplified display to detailed display, and the display of updated information can continue.

[0128] If the input indicating a software update abort request is determined, and the software update requested to be aborted is an important function, the abort request is discarded. Even if the driver who wants to abort the software update enters the input indicating abort request, if the software update requested to be aborted is an important function, the software update can continue without aborting the request.

[0129] This message displays the reason for abandoning the abort request. By displaying the reason for abandoning the abort request, the crew can be notified that the reason for abandoning the abort request has been abandoned.

[0130] If an operation input indicating a request to abort a software update is determined, and the software update requested to be aborted is not a critical function, a suspension information indicating the suspension of the software update is displayed. When a driver who desires the suspension of a software update inputs an operation requesting abort, if the software update requested to be aborted is not a critical function, the suspension of the software update can be notified to the driver by displaying the suspension information.

[0131] In addition to the description in the claims, this disclosure also includes the following disclosure.

[0132] [1] An update information notification device (7) that notifies update information from a notification device, the update information being related to a software update obtained from a distribution device when the software of an electronic control device whose update target is being updated is updated by update software, wherein the device comprises:

[0133] The update information acquisition unit (16a) acquires the aforementioned update information;

[0134] The operation input determination unit (16d) determines the occupant's operation input; and

[0135] The notification control department (16e) determines the notification method for the aforementioned updated information, and the updated information is notified from the notification department in accordance with the determined notification method.

[0136] The notification control unit determines the notification method for the updated information based on the determination result of the operation input determination unit.

[0137] [2] According to the update information notification device described in [1], wherein,

[0138] The system includes a vehicle state determination unit (16c), which determines the vehicle state representing the vehicle's state.

[0139] The notification control unit determines the notification method for the updated information based on the determination results of the operation input determination unit and the determination results of the vehicle status determination unit.

[0140] [3] The device is notified of the update information as described in [1] or [2], wherein,

[0141] When the operation input determination unit determines that the notification control unit has a simplified notification request for the updated information, the notification control unit switches the notification method of the updated information from detailed notification to simplified notification and continues to notify the updated information.

[0142] [4] An update information notification device according to any one of [1] to [3], wherein,

[0143] When the notification control unit switches the notification method for the updated information from detailed notification to simplified notification while continuing to notify the updated information, it simultaneously notifies information unrelated to the updated information.

[0144] [5] An update information notification device according to any one of [1] to [4], wherein,

[0145] When the operation input determination unit determines an operation input indicating a detailed notification request for the updated information, the notification control unit switches the notification method of the updated information from a simple notification to a detailed notification and continues to notify the updated information.

[0146] [6] An update information notification device according to any one of [1] to [5], wherein,

[0147] If the aforementioned notification control unit determines an operation input indicating a software update abort request by the aforementioned operation input determination unit, and if the software update requested for abort is an important function, the abort request will be discarded.

[0148] [7] According to the update information notification device described in [6], wherein,

[0149] The aforementioned notification control department sent a message indicating the reasons for abandoning the suspension request.

[0150] [8] An update information notification device according to any one of [1] to [7], wherein,

[0151] When the aforementioned notification control unit determines an operation input indicating a request to suspend a software update by the aforementioned operation input determination unit, and the object of the software update request to be suspended is not an important function, the unit will issue a suspension information notification indicating the suspension of the software update.

[0152] This disclosure is based on embodiments, but is not to be construed as being limited to those embodiments or constructions. This disclosure also includes various modifications and variations within the same scope. Furthermore, various combinations and methods, and further including only one element, more than one element, or less than one element, also fall within the scope and spirit of this disclosure.

[0153] The control unit and method described in this disclosure can also be implemented by a dedicated computer, which is provided by comprising a processor programmed to perform one or more functions embodied in a computer program and a memory. The control unit and method described in this disclosure can also be implemented by a dedicated computer, which is provided by comprising a processor composed of one or more dedicated hardware logic circuits. Alternatively, the control unit and method described in this disclosure can also be implemented by one or more dedicated computers, which are configured by combining a processor and memory programmed to perform one or more functions with a processor composed of one or more hardware logic circuits. Furthermore, the computer program can also be stored as instructions executable by the computer on a non-transferable tangible recording medium readable by the computer.

Claims

1. An update information notification device (7) that sends update information from a notification unit, the update information being related to a software update received from a distribution device when the software of an electronic control device to be updated is updated by update software, wherein, have: The update information acquisition unit (16a) acquires the aforementioned update information; The operation input determination unit (16d) determines the occupant's operation input; and The notification control department (16e) determines the notification method for the aforementioned updated information, and the updated information is notified from the notification department in accordance with the determined notification method. The notification control unit determines the notification method for the updated information based on the determination result of the operation input determination unit.

2. The update information notification device according to claim 1, wherein, The system includes a vehicle state determination unit (16c), which determines the vehicle state representing the vehicle's state. The notification control unit determines the notification method for the updated information based on the determination results of the operation input determination unit and the determination results of the vehicle status determination unit.

3. The update information notification device according to claim 1, wherein, When the operation input determination unit determines that the notification control unit has a simplified notification request for the updated information, the notification control unit switches the notification method of the updated information from detailed notification to simplified notification and continues to notify the updated information.

4. The update information notification device according to claim 3, wherein, When the notification control unit switches the notification method for the updated information from detailed notification to simplified notification while continuing to notify the updated information, it simultaneously notifies information unrelated to the updated information.

5. The update information notification device according to claim 1, wherein, When the operation input determination unit determines an operation input indicating a detailed notification request for the updated information, the notification control unit switches the notification method of the updated information from a simple notification to a detailed notification and continues to notify the updated information.

6. The update information notification device according to claim 1, wherein, If the aforementioned notification control unit determines an operation input indicating a software update abort request by the aforementioned operation input determination unit, and if the software update requested for abort is an important function, the abort request will be discarded.

7. The update information notification device according to claim 6, wherein, The aforementioned notification control department sent a message indicating the reasons for abandoning the suspension request.

8. The update information notification device according to claim 1, wherein, When the aforementioned notification control unit determines an operation input indicating a request to suspend a software update by the aforementioned operation input determination unit, and the object of the software update request to be suspended is not an important function, the unit will issue a suspension information notification indicating the suspension of the software update.

9. A vehicle system (2) comprising: a notification device (11-14) for notifying update information, the update information being related to a software update of an electronic control device whose software is being updated by update software, obtained from a distribution device; and an update information notification device (7) for notifying the update information from the notification device, wherein, The aforementioned update information notification device includes: The update information acquisition unit (16a) acquires the aforementioned update information; The operation input determination unit (16d) determines the occupant's operation input; and The notification control department (16e) determines the notification method for the aforementioned updated information, and the updated information is notified from the notification department in accordance with the determined notification method. The notification control unit determines the notification method for the updated information based on the determination result of the operation input determination unit.

10. An update information notification program, wherein, The update information notification device (7) sends update information from the notification unit. This update information is related to the software update when the update software updates the software of the electronic control device of the update target, which is obtained from the distribution device. The control unit (16) of the update information notification device (7) performs the following steps: The steps to obtain the updated information are as follows: The operation input determination process determines the occupant's operation input. The notification method determines the steps, and the notification method for the above-mentioned updated information is determined based on the determination result of the steps based on the above-mentioned operation input. as well as The notification control step, in accordance with the notification method determined by the notification method determination step described above, causes the updated information to be notified from the notification device.

Images