Software update system, vehicle, software update device, and software update method

Abstract

A software update system, a vehicle, a software update device, and a software update method are provided. The software update system (1) includes a vehicle (2) having an electronic control unit (27) and a server device (3) capable of communicating with the vehicle (2). The vehicle (2) includes: a software update unit (403) for updating the software (271) of the electronic control unit (27); a high-voltage battery (20) for supplying power to a high-voltage system device (25); a high-voltage system electronic control unit (27) for controlling the high-voltage system device; a low-voltage battery (22) for supplying power to a low-voltage system device (26); and a low-voltage system electronic control unit (27) for controlling the low-voltage system device. The software update unit sends a first message to the server device (3) inquiring whether there is information related to the software update, receives update software (D1) from the server device, and determines whether to transfer to activation processing based on the electronic control unit, which is the object of the update software, according to at least one of the remaining capacity of the high-voltage battery and the low-voltage battery.

Description

Technical Field

[0001] This invention relates to a software update system, a vehicle, a software update device, and a software update method. Background Technology

[0002] Previously, techniques for updating software in vehicles equipped with both high-voltage and low-voltage batteries were known. For example, Patent Document 1 discloses a technique that uses a low-voltage battery to update the program when reprogramming can be performed using a low-voltage battery, and uses a high-voltage battery to update the program when reprogramming cannot be performed using a low-voltage battery.

[0003] Existing technical documents

[0004] Patent documents

[0005] Patent Document 1: Japanese Patent Application Publication No. 2022-054890 Summary of the Invention

[0006] The problem that the invention aims to solve

[0007] Typically, software updates in vehicles involve an activation process for the updated software. This activation process requires a battery capable of handling the activation. For example, if the software to be updated is for a device associated with a low-voltage battery, it is necessary to stop the output of the low-voltage battery and perform the activation process using a high-voltage battery. Conversely, if the software to be updated is for a device associated with a high-voltage battery, it is necessary to stop the output of the high-voltage battery and perform the activation process using a low-voltage battery. However, in structures like Patent Document 1 that determine the transfer of activation based on battery capacity, the type of battery is not considered in the transfer determination. Therefore, depending on the software to be updated, the transfer determination may not be performed appropriately.

[0008] The present invention was made in view of the above circumstances, and its object is to enable appropriate transfer determination of activation processing.

[0009] Methods for solving problems

[0010] One aspect of the present invention is a software update system comprising: a vehicle having an electronic control unit; and a server device capable of communicating with the vehicle, wherein the vehicle has: a software update unit that updates the software of the electronic control unit; a high-voltage system device; a high-voltage battery that supplies power to the high-voltage system device; a high-voltage system electronic control unit that controls the high-voltage system device; a low-voltage system device; a low-voltage battery that supplies power to the low-voltage system device; and a low-voltage system electronic control unit that controls the low-voltage system device. The software update unit sends first information to the server device inquiring about the availability of information related to the software update, receives second information from the server device containing update software, and, based on the electronic control unit which is the object of the update software included in the second information, determines whether to proceed to the activation process of the update software based on at least one of the remaining capacity of the high-voltage battery and the remaining capacity of the low-voltage battery.

[0011] Invention Effects

[0012] According to one aspect of the present invention, the transfer determination of activation processing can be performed appropriately. Attached Figure Description

[0013] Figure 1 This is a diagram showing the structure of a software update system.

[0014] Figure 2 This is a diagram showing the structure of the server device.

[0015] Figure 3 This is a diagram showing the structure of the vehicle.

[0016] Figure 4 It is a timing diagram showing the operation of the software update device and the server device.

[0017] Figure 5 This is a flowchart illustrating the actions of the software update department.

[0018] Explanation of reference numerals in the attached figures

[0019] 1…Software update system, 2…Vehicle, 3…Server device, 4…Base station, 20…High-voltage battery, 21…First control circuit, 22…Low-voltage battery, 23…Second control circuit, 24…DC-DC converter, 25…High-voltage system equipment, 25A…Drive motor, 26…Low-voltage system equipment, 26A…Windshield wiper unit, 27…ECU (Electronic Control Unit), 27A…High-voltage system ECU (High-voltage system electronic control unit), 27B…Low-voltage system ECU (Low-voltage system electronic control unit) ), 28…TCU, 29…touch panel, 30…server control unit, 31…server communication unit, 40…software update device, 271…processor, 272…memory, 273…software, 300…processor, 310…memory, 311…control program, 400…processor, 401…first margin acquisition unit, 402…second margin acquisition unit, 403…software update unit, 410…memory, 411…control program, D1…update software, MA…storage area, NW…communication network. Detailed Implementation

[0020] [1. Structure of the software update system]

[0021] Figure 1 This is a diagram showing the structure of software update system 1.

[0022] The software update system 1 has a vehicle 2 and provides software 273 (see reference) executed by the ECU (Electronic Control Unit) 27 of the vehicle 2. Figure 3 The server device 3 is connected to the vehicle 2 via a communication network NW. The vehicle 2 downloads update software (hereinafter referred to as update software D1, marked "D1") from the server device 3 to update the software 273 of the ECU 27. That is, the software update system 1 enables the software 273 of the vehicle 2 to be updated via over-the-air (OTA) download.

[0023] ECU27 is an example of an "electronic control unit".

[0024] In the following description, software includes programs executed by a processor, and data that is referenced, generated, updated, deleted, etc., in association with the program. Updating software refers to the process of replacing the processor-executed software with a newer version of the software, which can be done by adding, deleting, or overwriting the software. Furthermore, software updates can also include the deletion of part or all of the processor-executed software, the installation of new software, and the deletion, addition, or overwriting of data used during software execution.

[0025] Vehicle 2 can be any type of vehicle, including four-wheeled vehicles, two-wheeled vehicles, and other types, and can also be a large vehicle, commercial vehicle, or work vehicle, etc. As an example, a four-wheeled vehicle is illustrated in this embodiment. Vehicle 2 is connected to the communication network NW wirelessly, for example, via a cellular communication base station 4. There are no restrictions on the specific type of the communication network NW. For example, the communication network NW can also include cellular communication networks, the Internet, WAN (Wide Area Network), LAN (Local Area Network), public line networks, supplier equipment, dedicated lines, base stations, etc.

[0026] Server device 3 is a computer connected to the communication network NW via a wired or wireless communication line and communicatively connected to vehicle 2. Server device 3 sends update software D1 to vehicle 2.

[0027] [2. Structure of the server device]

[0028] First, refer to Figure 2 The structure of server device 3 will be described.

[0029] Figure 2 This is a diagram showing the structure of server device 3.

[0030] The server device 3 includes a server control unit 30 and a server communication unit 31.

[0031] The server control unit 30 includes a processor 300 (CPU, Central Processing Unit), a memory 310, and interface circuits for connecting other devices and sensors. The server communication unit 31 is connected to the server control unit 30. The server control unit 30 performs various actions by reading and executing the control program 311 stored in the memory 310.

[0032] Memory 310 is a storage device for storing programs and data. Memory 310 stores control program 311 and data processed by processor 300, etc. Memory 310 has non-volatile storage areas. In addition, memory 110 has volatile storage areas, constituting the working area of ​​processor 100. For example, memory 310 includes ROM (Read Only Memory) and RAM (Random Access Memory).

[0033] The server communication unit 31 has hardware such as communication circuits and communicates with the vehicle 2 under the control of the server control unit 30.

[0034] [3. Vehicle Structure]

[0035] Figure 3 This is a diagram showing the structure of vehicle 2.

[0036] Vehicle 2 is equipped with a high-voltage battery 20, a first control circuit 21, a low-voltage battery 22, a second control circuit 23, a DC-DC converter 24, high-voltage system equipment 25, low-voltage system equipment 26, multiple ECUs 27, a TCU (Telematics Control Unit) 28, a touch panel 29, and a software update device 40.

[0037] The high-voltage battery 20 supplies power to the high-voltage system device 25. Additionally, during the activation process of the low-voltage system ECU 27B (described later), the high-voltage battery 20 supplies power to the low-voltage system ECU 27B. The power supply and charging of the high-voltage battery 20 are controlled by a first control circuit 21. The first control circuit 21 is connected to a software update device 40 and controls the power supply of the high-voltage battery 20 according to the control of the software update device 40.

[0038] The low-voltage battery 22 is a battery that supplies power to the low-voltage system device 26. Additionally, during the activation process of the high-voltage system ECU 27A (described later), the low-voltage battery 22 supplies power to the high-voltage system ECU 27A. The power supply and charging of the low-voltage battery 22 are controlled by a second control circuit 23. The second control circuit 23 is connected to a software update device 40 and controls the power supply of the low-voltage battery 22 according to the control of the software update device 40.

[0039] The high-voltage battery 20 and the low-voltage battery 22 are connected via a DC-DC converter 24. Thus, the DC-DC converter 24 can step down the power from the high-voltage battery 20 and output it to the low-voltage battery 22.

[0040] The high-voltage system device 25 is a device that operates based on electricity from the high-voltage battery 20. In this embodiment, a drive motor 25A is exemplified as the high-voltage system device 25. The drive motor 25A is a motor that operates by electricity and serves as the drive source for the vehicle 2.

[0041] The low-voltage system device 26 is a device that operates based on power from the low-voltage battery 22. In this embodiment, a windshield wiper device 26A is exemplified as the low-voltage system device 26.

[0042] The windshield wiper assembly 26A is a device that enables the windshield wipers of vehicle 2 to operate.

[0043] In this way, the high-voltage battery 20 is a battery with a higher voltage than the low-voltage battery 22. The high-voltage battery 20 supplies power to the drive motor 25A, while the low-voltage battery 22 supplies power to the windshield wiper assembly.

[0044] ECU27 is an electronic control device that controls the equipment in vehicle 2 and is connected to software update device 40. ECU27 has a processor 271 such as CPU and a memory 272. The processor 271 controls the connected equipment by reading and executing software 273 stored in memory 272.

[0045] Memory 272 is a storage device for storing programs and data. Memory 272 stores software 273, data processed by processor 271, etc. Memory 272 is a dual-module memory (so-called double-sided ROM). In addition, memory 272 may also have volatile storage areas, which constitute the working area of ​​processor 271.

[0046] In this embodiment, the vehicle 2 is equipped with a high-voltage system ECU27A and a low-voltage system ECU27B as ECU27.

[0047] The high-voltage system ECU27A is connected to the drive motor 25A and controls the drive motor 25A.

[0048] The low-voltage system ECU27B is connected to the windshield wiper unit 26A and controls the windshield wiper unit 26A.

[0049] The high-voltage system ECU27A is an example of a "high-voltage system electronic control unit". The low-voltage system ECU27B is an example of a "low-voltage system electronic control unit".

[0050] TCU28 is a communication device that conforms to the communication standard of vehicle 2 and communicates with devices other than vehicle 2. TCU28 includes, for example, an antenna, a transmitter, a receiver, etc., and communicates with server device 3 under the control of software update device 40.

[0051] The touch panel 29 consists of a display and a touch sensor, which receives touch operations and displays various information.

[0052] The software update device 40 is a device for updating the software 273 of the ECU 27. The software update device 40 includes a processor 400 such as a CPU, a memory 410, and interface circuitry for connecting other devices or sensors.

[0053] Memory 410 is a storage device for storing programs and data. Memory 410 stores control program 411, data processed by processor 400, etc. Memory 410 has non-volatile storage areas. In addition, memory 410 has volatile storage areas that constitute the working area of ​​processor 400. For example, memory 410 is composed of ROM and RAM.

[0054] The processor 400 functions as a first margin acquisition unit 401, a second margin acquisition unit 402, and a software update unit 403 by executing the control program 411.

[0055] The first margin acquisition unit 401 acquires the margin of the high-voltage battery 20. The first margin acquisition unit 401 can acquire the margin of the high-voltage battery 20 from the first control circuit 21, or it can acquire the margin of the high-voltage battery 20 by directly detecting the voltage or current of the high-voltage battery 20.

[0056] The second margin acquisition unit 402 acquires the margin of the low-voltage battery 22. The second margin acquisition unit 402 can acquire the margin of the low-voltage battery 22 from the second control circuit 23, or it can acquire the margin of the low-voltage battery 22 by directly detecting the voltage or current of the low-voltage battery 22.

[0057] The software update unit 403 updates the software 273 of the ECU 27. The software update unit 403 performs the following processes: processing to inquire whether there is any information related to the update of the software 273, processing to download the update software D1, processing to install the update software D1 on the ECU 27, and processing to activate the update software D1 on the ECU 27.

[0058] [4. Action]

[0059] Next, we will refer to Figure 4 Explain the actions of each part of the software update system 1 related to the update of software 273.

[0060] Figure 4 This is a timing diagram illustrating the operation of the software update device 40 and the server device 3.

[0061] The software update unit 403 sends an inquiry message to the server device 3 via the TCU28, which inquires whether there is any information related to the update of the software 273 (step SA1).

[0062] Asking for information is an example of "first information".

[0063] When the server control unit 30 receives an inquiry message via the server communication unit 31, it sends a first response message to the vehicle 2 (step SA2).

[0064] The first response information is information indicating a response to the information sent from vehicle 2, and is information indicating whether there is information related to the update of software 273.

[0065] The software update unit 403 receives a first response message via the TCU28. If the received first response message indicates that there is a software 273 update, the touch panel 29 displays a first screen asking the user of the vehicle 2 whether to update the software 273 (step SA3). This inquiry to the user is performed as needed. For example, in the case of a software update for the purpose of dealing with adverse situations, sometimes the update is performed without asking the user.

[0066] If an instruction to update software 273 is present in the first screen, the software update unit 403 sends the request information for updating software D1 to the server device 3 via TCU28 (step SA4).

[0067] When the server control unit 30 receives the request information via the server communication unit 31, it sends the second response information to the vehicle 2 (step SA5).

[0068] The second response information is a response to the information sent from vehicle 2, which includes the update software D1.

[0069] The second response message is an example of a "second message".

[0070] When the software update unit 403 receives the second information from the server device 3, that is, when the update software D1 is downloaded from the server device 3, it installs the downloaded update software D1 on the ECU 27 that is to be updated (step SA6).

[0071] Step SA6 is described in detail: the software update unit 403 transfers the update software D1 to the target ECU 27 and instructs the target ECU 27 to write the update software D1 into the memory 272.

[0072] As described above, the memory 272 of the ECU 27 is a dual-channel memory. Therefore, the ECU 27 can simultaneously operate according to the software 273 stored in one storage area MA of the memory 272 and write the update software D1 to the other storage area MA of the memory 272. Thus, for example, even when the vehicle 2 is in motion, the ECU 27 can write the update software D1 to the memory 272.

[0073] Next, when the ignition power to vehicle 2 is disconnected, the software update unit 403 determines whether to transfer to the activation process of the update software D1 (step SA7). This transfer determination will be described in detail in the following flowchart.

[0074] If the software update unit 403 determines that the process should be transferred to activation, the touch panel 29 displays a second screen asking whether to start the software update (step SA8).

[0075] Then, when an instruction to start software 273 updates is displayed on the second screen, the software update unit 403 instructs the ECU 27, which is to be updated with software 273, to perform activation processing (step SA9). Furthermore, during the activation processing, a time limit is set for when activation processing can be performed. Vehicle 2 cannot be used during this time limit.

[0076] Here, the activation process in ECU27 will be explained.

[0077] When ECU27 receives an instruction to perform activation processing, it performs activation processing for the update software D1. The activation processing for the update software D1 includes the following steps: setting the startup parameters of ECU27 so that when ECU27 starts, it loads the written update software D1 and begins to follow the control of the update software D1. For example, the activation processing for the update software D1 includes the following steps: making the storage area MA containing the update software D1 active as a read area, and making the storage area MA not containing the update software D1 inactive as a read area.

[0078] In addition, Figure 4 In the shown timing sequence, the software update unit 403 can also skip step SA3 and proceed to step SA4 upon receiving the first response information from the server device 3. Furthermore, in the software update system 1, steps SA2, SA3, and SA4 can also be skipped. That is, the software update unit 403 can also be structured to receive the second response information upon receiving an inquiry message.

[0079] Next, refer to Figure 5 The actions related to the transfer to activation processing in the software update unit 403 will be explained.

[0080] Figure 5 This is a flowchart illustrating the operation of the software update unit 403.

[0081] The software update unit 403 determines whether the ignition power is disconnected (step SB1). If the software update unit 403 determines that the ignition power is not disconnected (step SB1: no), it performs step SB1 again.

[0082] On the other hand, when the software update unit 403 determines that the ignition power has been disconnected (step SB1: Yes), it determines whether the ECU 27 to which the received update software D1 is intended is a high-voltage system ECU 27A or a low-voltage system ECU 27B, or both (step SB2).

[0083] In step SB2, the software update unit 403 analyzes the update software D1 and performs the determination in step SB2. Furthermore, if the second response information includes information about the ECU 27, which is the target of the update software D1, the software update unit 403 can also perform the determination in step SB2 based on the information representing that target.

[0084] When the software update unit 403 determines that the target of the software D1 update is the high-voltage system ECU 27A (step SB2: high-voltage system ECU), it determines whether to transfer to the activation process based on the remaining capacity of the low-voltage battery 22 (step SB3).

[0085] Step SB3 will be described in detail.

[0086] If the software update unit 403 determines that the remaining amount of the low-voltage battery 22 obtained by the second reserve acquisition unit 402 is above a predetermined reserve, it will proceed to the activation process. On the other hand, if the software update unit 403 determines that the remaining amount of the low-voltage battery 22 obtained by the second reserve acquisition unit 402 is below the predetermined reserve, it will not proceed to the activation process. This predetermined reserve is appropriately determined through prior testing, simulation, etc., so that the remaining amount of the low-voltage battery 22 will not be exhausted during the activation process.

[0087] If the software update unit 403 determines that the process will not proceed to the activation process (step SB3: No), it terminates the current process.

[0088] On the other hand, when the software update unit 403 determines that it is necessary to transfer to the activation process (step SB3: Yes), it sets the time limit for the activation process to be performed as a first time (step SB4). For example, 600 seconds can be taken as the first time.

[0089] Next, the software update unit 403 determines whether to start the activation process (step SB5).

[0090] Step SB5 will be described in detail.

[0091] If an activation process begins on the second screen, the software update unit 403 makes a positive determination in step SB5. On the other hand, if an activation process does not begin on the second screen, or if the time during which an activation process does not begin on the second screen is longer than a predetermined period, the software update unit 403 makes a negative determination in step SB5.

[0092] If the software update department 403 determines that the activation process should not be started (step SB5: No), the process ends.

[0093] On the other hand, when the software update unit 403 determines that activation processing has begun (step SB5: Yes), it instructs the high-voltage system ECU 27A to perform activation processing (step SB6). Furthermore, when instructing the high-voltage system ECU 27A to perform activation processing, the software update unit 403 instructs the first control circuit 21 to stop the high-voltage battery 20, and in addition, instructs the second control circuit 23 to supply power from the low-voltage battery 22 to the high-voltage system ECU 27A.

[0094] Returning to the explanation of step SB2, if the software update unit 403 determines that the target of the software D1 for updating is the low-voltage system ECU 27B (step SB2: low-voltage system ECU), it determines whether to transfer to the activation process based on the remaining capacity of the high-voltage battery 20 (step SB7).

[0095] Step SB7 is described in detail.

[0096] If the remaining capacity of the high-voltage battery 20 obtained by the first capacity acquisition unit 401 is above a predetermined capacity, the software update unit 403 determines that the process should proceed to activation. If the remaining capacity of the high-voltage battery 20 obtained by the first capacity acquisition unit 401 is below the predetermined capacity, the process should not proceed to activation. This predetermined capacity is appropriately determined through prior testing and simulation to ensure that the remaining capacity of the high-voltage battery 20 is not depleted during the activation process.

[0097] If the software update unit 403 determines that it will not proceed to the activation process (step SB7: No), it terminates this process.

[0098] On the other hand, if the software update unit 403 determines that the process should be transferred to activation processing (step SB7: Yes), it sets the activation processing time limit to a second time (step SB8). The second time is a longer time than the first time.

[0099] Next, the software update unit 403 determines whether to start the activation process (step SB9). The determination in step SB9 is performed in the same manner as in step SB5.

[0100] If the software update department 403 determines that the activation process should not be started (step SB9: No), the process ends.

[0101] On the other hand, when the software update unit 403 determines that activation processing has begun (step SB9: Yes), it instructs the low-voltage system ECU 27B to perform activation processing (step SB10). Furthermore, when instructing the low-voltage system ECU 27B to perform activation processing, the software update unit 403 instructs the second control circuit 23 to stop the low-voltage battery 22, and in addition, instructs the first control circuit 21 to supply power from the high-voltage battery 20 to the low-voltage system ECU 27B.

[0102] Returning to the explanation of step SB2, if the software update unit 403 determines that the target of the software D1 for updating is the high-voltage system ECU 27A and the low-voltage system ECU 27B (step SB2: high-voltage system ECU and low-voltage system ECU), it determines whether to transfer to the activation process based on the remaining amount of the high-voltage battery 20 and the low-voltage battery 22 (step SB11).

[0103] Step SB11 is described in detail.

[0104] If the software update unit 403 determines that the high-voltage battery 20 obtained by the first margin acquisition unit 401 is less than the specified margin, it will not be transferred to the activation process.

[0105] On the other hand, if the remaining amount of the high-voltage battery 20 obtained by the first remaining amount acquisition unit 401 is above a predetermined remaining amount, the software update unit 403 determines whether the sum of the remaining amount of the high-voltage battery 20 obtained by the first remaining amount acquisition unit 401 and the remaining amount of the low-voltage battery 22 obtained by the second remaining amount acquisition unit 402 is above a predetermined remaining amount. If the software update unit 403 determines that the sum is above the predetermined remaining amount, it determines to proceed to the activation process. On the other hand, if the software update unit 403 determines that the sum is below the predetermined remaining amount, it determines not to proceed to the activation process.

[0106] If the software update unit 403 determines that it will not proceed to the activation process (step SB11: No), it terminates this process.

[0107] On the other hand, if the software update unit 403 determines that the process should be transferred to activation processing (step SB11: Yes), it sets the activation processing time limit to a third time (step SB12). The third time is the sum of the first time and the second time.

[0108] Next, the software update unit 403 determines whether to start the activation process (step SB13). The determination in step SB13 is performed in the same manner as the determination in step SB5.

[0109] If the software update department 403 determines that the activation process should not be started (step SB13: No), the process ends.

[0110] On the other hand, when the software update unit 403 determines that the activation process has started (step SB13: Yes), it instructs the ECU27, which is the target of the software 273 update, to perform the activation process (step SB14).

[0111] Step SB14 is described in detail.

[0112] First, the software update unit 403 instructs the high-voltage system ECU 27A to perform an activation process. Then, when the activation process of the high-voltage system ECU 27A is completed, the software update unit 403 instructs the low-voltage system ECU 27B to perform an activation process.

[0113] [5. Other Implementation Methods]

[0114] The above-described implementation is merely one approach, which can be arbitrarily modified and applied.

[0115] In the above embodiment, a travel motor 25A is exemplified as the high-voltage system device 25. However, the type of high-voltage system device 25 is not limited to the travel motor 25A, and may also be a device other than the travel motor 25A. In addition, in other embodiments, the vehicle 2 may have multiple high-voltage system devices 25. In this case, the vehicle 2 has a number of "high-voltage system electronic control units" corresponding to the number of high-voltage system devices 25.

[0116] In the above embodiment, a windshield wiper unit 26B is exemplified as a low-voltage system device 26. However, the type of low-voltage system device 26 is not limited to windshield wiper unit 26B, and may also be devices other than these. In addition, in other embodiments, the vehicle 2 may have multiple low-voltage system devices 26. In this case, the vehicle 2 has a number of "low-voltage system electronic control units" corresponding to the number of low-voltage system devices 26.

[0117] Processors 271, 300, and 400 can be composed of multiple processors or a single processor. These processors can also be hardware programmed to implement the functions described above. In this case, these processors are, for example, composed of ASICs (Application Specific Integrated Circuits) or FPGAs (Field Programmable Gate Arrays).

[0118] in addition, Figure 3 The internal structure of vehicle 2 shown is an example, and the specific installation method is not particularly limited. That is, it is not necessarily necessary to install hardware corresponding to each part separately; of course, it is also possible to configure the system so that the functions of each part are implemented by a processor executing a program. In addition, some of the functions implemented by software in the above embodiments can be made into hardware, or some of the functions implemented by hardware can be implemented by software.

[0119] in addition, Figure 5 The steps shown are divided according to the main processing content, and this invention is not limited by the method of dividing the processing units or their names. It is also possible to divide the process into more step units based on the processing content. Alternatively, it is possible to divide the process into units containing more processes within a single step unit. Furthermore, the order of these steps can be appropriately changed without affecting the spirit of this invention.

[0120] Furthermore, when implementing the software update method of the software update device 40 described above using the processor 400, the program executed by the processor 400 can also be configured as a recording medium or a transmission medium for transmitting the program. That is, the control program 411 can also be implemented by recording the state of the control program 411 in a removable information recording medium. Examples of information recording media include magnetic recording media such as hard disks, optical recording media such as CDs, USB (Universal Serial Bus) memory, SSD (Solid State Drive) and other semiconductor storage devices, or other recording media can be used.

[0121] [6. Structures supported by the above embodiments]

[0122] The above implementation supports the following structures.

[0123] (Structure 1)

[0124] A software update system includes: a vehicle having an electronic control unit; and a server device capable of communicating with the vehicle, wherein the vehicle has: a software update unit that updates the software of the electronic control unit; a high-voltage system device; a high-voltage battery that supplies power to the high-voltage system device; a high-voltage system electronic control unit that controls the high-voltage system device; a low-voltage system device; a low-voltage battery that supplies power to the low-voltage system device; and a low-voltage system electronic control unit that controls the low-voltage system device. The software update unit sends first information to the server device inquiring about the availability of information related to the software update, receives second information from the server device containing update software, and, based on the electronic control unit which is the object of the update software included in the second information, determines whether to proceed to the activation process of the update software based on at least one of the remaining power of the high-voltage battery and the remaining power of the low-voltage battery.

[0125] According to the software update system of Structure 1, the remaining battery capacity corresponding to the type of electronic control unit that is the target of the software update is considered when determining the transfer decision for activation processing. Therefore, the transfer decision for activation processing can be performed appropriately.

[0126] (Structure 2)

[0127] According to the software update system of Structure 1, when the software update unit is only targeting the high-voltage system electronic control unit in the second information, it determines whether to transfer to the activation process based on the remaining capacity of the low-voltage battery.

[0128] According to the software update system of Structure 2, when the software to be updated is only the high-voltage system electronic control unit, the transfer determination for activation processing is performed considering the remaining capacity of the low-voltage battery. Therefore, when the software to be updated is the software of the high-voltage system electronic control unit, the transfer determination for activation processing can be performed appropriately.

[0129] (Structure 3)

[0130] According to the software update system of structure 2, when the software update unit determines that it is to transfer to the activation process, it sets the time limit of the activation process to a first time.

[0131] According to the software update system of Structure 3, the activation processing time limit can be set to a time corresponding to the case where the software to be updated is only the electronic control unit of a high-voltage system.

[0132] (Structure 4)

[0133] According to any one of structures 1 to 3, in a software update system, the software update unit determines whether to transfer to the activation process based on the remaining capacity of the high-voltage battery when the target of the update software included in the second information is only the low-voltage system electronic control unit.

[0134] According to the software update system in Structure 4, when the software to be updated is only the low-voltage system electronic control unit, the transfer determination for activation processing is performed considering the remaining capacity of the high-voltage battery. Therefore, when the software to be updated is the software of the low-voltage system electronic control unit, the transfer determination for activation processing can be performed appropriately.

[0135] (Structure 5)

[0136] According to the software update system of structure 4, when the software update unit determines that it is to transfer to the activation process, it sets the time limit of the activation process to a second time.

[0137] According to the software update system of structure 5, the activation processing time limit can be set to a time corresponding to the case where the software to be updated is only the low-voltage system electronic control unit.

[0138] (Structure 6)

[0139] According to the software update system of structure 5, the second time is longer than the restriction time when the object of the software update included in the second information is only the high-voltage system electronic control unit.

[0140] Typically, high-voltage batteries have a larger capacity than low-voltage batteries. Therefore, the software update system according to Structure 6 can perform activation processing on software with large data volumes while preventing the battery's remaining capacity from being depleted during the activation process.

[0141] (Structure 7)

[0142] According to any one of structures 1 to 6, in a software update system, the software update unit determines whether to transfer to the activation process based on the remaining capacity of the high-voltage battery and the remaining capacity of the low-voltage battery when the target of the update software included in the second information is the high-voltage system electronic control unit and the low-voltage system electronic control unit.

[0143] According to the software update system in Structure 7, when the software to be updated is for both the high-voltage system electronic control unit and the low-voltage system electronic control unit, the activation process transfer determination is performed considering the remaining capacity of the low-voltage and high-voltage batteries. Therefore, when the software to be updated is for both the high-voltage and low-voltage system electronic control units, the activation process transfer determination can be performed appropriately.

[0144] (Structure 8)

[0145] According to the software update system of structure 7, when the software update unit determines that it is to transfer to the activation process, it first causes the low-voltage system electronic control unit to perform the activation process, and then causes the high-voltage system electronic control unit to perform the activation process.

[0146] According to the software update system of Structure 8, since activation is first performed using a high-voltage battery, activation can then be performed using a low-voltage battery that has been charged from the high-voltage battery. Therefore, even if the remaining capacity of the low-voltage battery is insufficient to handle the activation process, activation can still be performed using the low-voltage battery.

[0147] (Structure 9)

[0148] A vehicle having an electronic control unit capable of communicating with a server device, wherein the vehicle comprises: a software update unit for updating the software of the electronic control unit; a high-voltage system device; a high-voltage battery for supplying power to the high-voltage system device; a high-voltage system electronic control unit for controlling the high-voltage system device; a low-voltage system device; a low-voltage battery for supplying power to the low-voltage system device; and a low-voltage system electronic control unit for controlling the low-voltage system device. The software update unit sends first information to the server device inquiring about the availability of information related to the software update, receives second information from the server device containing update software, and, based on the electronic control unit which is the object of the update software included in the second information, determines whether to proceed to the activation process of the update software based on at least one of the remaining power of the high-voltage battery and the remaining power of the low-voltage battery.

[0149] According to the vehicle of Structure 9, it will have the same effect as the software update system of Structure 1.

[0150] (Structure 10)

[0151] A software update device is provided in a vehicle having a high-voltage system device, a high-voltage battery supplying power to the high-voltage system device, a low-voltage system device, and a low-voltage battery supplying power to the low-voltage system device. The device updates the software of an electronic control unit in the vehicle. The software update device includes a software update unit that updates the software of both the high-voltage system electronic control unit and the low-voltage system electronic control unit. The high-voltage system electronic control unit controls the high-voltage system device, and the low-voltage system electronic control unit controls the low-voltage system device. The software update unit sends first information to a server device inquiring about the availability of information related to the software update, and receives second information containing update software from the server device. Based on the electronic control unit that is the target of the update software included in the second information, the software update unit determines whether to proceed to the activation process of the update software based on at least one of the remaining power of the high-voltage battery and the remaining power of the low-voltage battery.

[0152] The software update device of structure 10 will have the same effect as the software update system of structure 1.

[0153] (Structure 11)

[0154] A software update method is disclosed for updating the software of an electronic control unit (ECU) of a vehicle capable of communicating with a server device. The vehicle includes: a software update unit that updates the software of the ECU; a high-voltage system device; a high-voltage battery that supplies power to the high-voltage system device; a high-voltage system ECU that controls the high-voltage system device; a low-voltage system device; a low-voltage battery that supplies power to the low-voltage system device; and a low-voltage system ECU that controls the low-voltage system device. In the software update, a processor of the vehicle sends first information to the server device inquiring about the availability of information related to the software update, receives second information from the server device containing update software, and, based on the ECU, which is the target of the update software included in the second information, determines whether to proceed to the activation process of the update software based on at least one of the remaining power of the high-voltage battery and the remaining power of the low-voltage battery.

[0155] The software update method according to Structure 11 will achieve the same effect as the software update system of Structure 1.

Claims

1. A software update system comprising: a vehicle having an electronic control unit; and a server device capable of communicating with the vehicle. in, The vehicle has: The software update department updates the software of the electronic control unit; High voltage system equipment; A high-voltage battery that supplies power to the high-voltage system equipment; A high-voltage system electronic control unit, which is the electronic control unit that controls the high-voltage system equipment; Low voltage system equipment; A low-voltage battery that supplies power to the low-voltage system equipment; as well as The low-voltage system electronic control unit is the electronic control unit that controls the low-voltage system equipment. The software update unit sends a first message to the server device inquiring about the availability of information related to the software update, and receives a second message from the server device containing the software for the update. The software update unit, based on the electronic control unit which is the object of the update software included in the second information, determines whether to transfer to the activation process of the update software according to at least one of the remaining capacity of the high-voltage battery and the remaining capacity of the low-voltage battery.

2. The software update system according to claim 1, wherein, If the software update target included in the second information is only the high-voltage system electronic control unit, the software update unit determines whether to transfer to the activation process based on the remaining amount of the low-voltage battery.

3. The software update system according to claim 2, wherein, When the software update unit determines that the process should be transferred to the activation process, it sets the time limit for the activation process to a first time.

4. The software update system according to claim 1 or 2, wherein, When the software update unit is only targeting the low-voltage system electronic control unit in the second information, it determines whether to transfer to the activation process based on the remaining capacity of the high-voltage battery.

5. The software update system according to claim 4, wherein, When the software update unit determines that the process should be transferred to the activation process, it sets the time limit for the activation process to a second time.

6. The software update system according to claim 5, wherein, The second time is longer than the restriction time when the object of the software update included in the second information is only the high-voltage system electronic control unit.

7. The software update system according to claim 1, wherein, When the software update unit is assigned to the high-voltage system electronic control unit and the low-voltage system electronic control unit in the second information, it determines whether to transfer to the activation process based on the remaining capacity of the high-voltage battery and the low-voltage battery.

8. The software update system according to claim 7, wherein, When the software update unit determines that it needs to transfer to the activation process, it first causes the low-voltage system electronic control unit to perform the activation process, and then causes the high-voltage system electronic control unit to perform the activation process.

9. A vehicle having an electronic control unit and capable of communicating with a server device. in, The vehicle has: The software update department updates the software of the electronic control unit; High voltage system equipment; A high-voltage battery that supplies power to the high-voltage system equipment; A high-voltage system electronic control unit, which is the electronic control unit that controls the high-voltage system equipment; Low voltage system equipment; A low-voltage battery that supplies power to the low-voltage system equipment; as well as The low-voltage system electronic control unit is the electronic control unit that controls the low-voltage system equipment. The software update unit sends a first message to the server device inquiring about the availability of information related to the software update, and receives a second message from the server device containing the software for the update. The software update unit, based on the electronic control unit which is the object of the update software included in the second information, determines whether to transfer to the activation process of the update software according to at least one of the remaining capacity of the high-voltage battery and the remaining capacity of the low-voltage battery.

10. A software update device disposed in a vehicle for updating the software of an electronic control unit of the vehicle, the vehicle having a high-voltage system device, a high-voltage battery supplying power to the high-voltage system device, a low-voltage system device, and a low-voltage battery supplying power to the low-voltage system device. in, The software update device includes a software update unit that updates the software of the high-voltage system electronic control unit and the low-voltage system electronic control unit. The high-voltage system electronic control unit is the electronic control unit that controls the high-voltage system equipment, and the low-voltage system electronic control unit is the electronic control unit that controls the low-voltage system equipment. The software update unit sends a first message to the server device inquiring about the availability of information related to the software update, and receives a second message from the server device containing the software for the update. The software update unit, based on the electronic control unit which is the object of the update software included in the second information, determines whether to transfer to the activation process of the update software according to at least one of the remaining capacity of the high-voltage battery and the remaining capacity of the low-voltage battery.

11. A software update method for updating the software of an electronic control unit in a vehicle capable of communicating with a server device. in, The vehicle includes: a high-voltage system device; a high-voltage battery that supplies power to the high-voltage system device; a high-voltage system electronic control unit that controls the high-voltage system device; a low-voltage system device; a low-voltage battery that supplies power to the low-voltage system device; and a low-voltage system electronic control unit that controls the low-voltage system device. In the software update, The processor in the vehicle sends a first message to the server device inquiring about the availability of information related to software updates, and receives a second message from the server device containing information about the updated software. The processor, based on the electronic control unit which is the object of the update software included in the second information, determines whether to transfer to the activation process of the update software according to at least one of the remaining capacity of the high-voltage battery and the remaining capacity of the low-voltage battery.

Images