Data rewriting method and data rewriting system

Abstract

Data rewriting method for rewriting data stored in a control device (110) of a control system (100), wherein the control system (100) comprises: several control devices (110) in which data was stored, each forming a device for controlling an electrical component of a motor vehicle; and a first communication line (L1) connecting the multiple control devices (110) together, wherein the first communication line (L1) is used for communication to control the electrical component of the motor vehicle; characterized in that the control system (100) further comprises: a second communication line (L2) connecting the multiple control devices (110) to each other in order to safeguard the first communication line (L1), wherein the second communication line (L2) is used for communication to control the electrical component of the motor vehicle when an anomaly occurs in the first communication line (L1); and The data rewriting process includes the following steps: a connection step (S201) for connecting a rewrite device (200) in which rewrite data was stored to the second communication line (L2); and a rewrite step (S203) using the rewrite device (200) in which the data stored in the control device (110), which is to be rewritten with the rewrite data, are rewritten on the basis of the rewrite data using the second communication line (L2).

Description

Subject matter of the invention

[0001] The present invention relates to rewriting data stored in a control device to control an electrical component of a motor vehicle. State of the art

[0002] A motor vehicle is equipped with several electronic control units (ECUs) to control electrical components. These control units are interconnected via a communication line and communicate with each other to control electronic components. These control units may improve or expand the functionality of the vehicle after it has been sold, and in such cases, data such as control programs for these control units must be rewritten or modified.

[0003] By connecting a rewriting device in which rewriting data has been stored to the communication line to which these control devices are connected, either wired or wirelessly, it is possible to rewrite the data stored in these control devices based on the rewriting data (see patent literature 1 to 8). Citation list of patent literature Patent literature 1: JP 2000 - 43 654 A Patent literature 2: JP 2018 - 200 599 A Patent literature 3: DE 602 19 705 T2 Patent Literature 4: JP 2017-146 773 A Patent literature 5: JP 2016-170 740 A Patent literature 6: JP 2012-242 900 A Patent Literature 7: JP 2003-191 804 A Patent literature 8: DE 10 2015 216 121 A1

[0004] Traditionally, communication for rewriting data stored in a control unit is carried out over a communication line used for normal operations, such as controlling electrical components. Therefore, when data rewriting is performed, a communication line cannot be used for normal operations and thus cannot perform normal processing. For this reason, the rewriting process of data stored in the control unit is traditionally performed while the vehicle is parked and not in use, regardless of whether the rewriting process affects driving or not.

[0005] The present invention was conceived in view of the above circumstances, and it is an object thereof to carry out a normal working process while the data stored in the control device is being rewritten.

[0006] This task is solved using the features of independent claims. Preferred further developments are the subject of dependent claims.

[0007] According to the present invention, the rewriting of the data stored in the control device can be carried out during the execution of normal processing. Fig. Figure 1 shows a diagram representing a control system 100 according to an embodiment of the present invention; and Fig. Figure 2 shows a flowchart illustrating a method for rewriting data stored in a control device 110 according to a further embodiment of the present invention. <Steuersystem 100>

[0008] Fig. Figure 1 shows a diagram representing a control system 100 according to an embodiment of the present invention. The control system 100 comprises several control devices 110, a first communication line L1, and a second communication line L2.

[0009] Each of the multiple control devices 110 forms a device for controlling an electrical component of a vehicle and stores data, such as a control program. Each of the multiple control devices 110 is connected to the first communication line L1 and the second communication line L2 and communicates with other control devices 110 using the first communication line L1 and the second communication line L2.

[0010] Each of the multiple control devices 110 performs communication required for normal operation, such as controlling the vehicle's electrical components, using the first communication line L1. The first communication line L1 is a communication line for a protocol such as CAN (Controller Area Network), MOST (Media Oriented System Transport), or FlexRay.

[0011] The second communication line L2 serves as a backup for the first communication line L1. This means that the second communication line L2 is not used for normal processing communication if communication via the first communication line L1 is functioning normally. Instead, it is used for normal processing communication if an anomaly occurs in the first communication line L1. The second communication line L2 can use the same protocol as the first communication line L1 or a different protocol.

[0012] According to this embodiment, a rewrite device 200, in which the rewrite data is stored, is connected to the second communication line L2. Thus, the rewrite device 200 and the control device 110, which is to be rewritten with the rewrite data, communicate using the second communication line L2, and through the communication between the rewrite device 200 and the control device 110, the data stored in the control device 110 is rewritten based on the rewrite data.

[0013] For this reason, according to this embodiment, although communication for normal processing can take place between the other control devices 110 besides the control device 110 used during the rewrite using the first communication line L1, even though the data stored in the control device 110 is being rewritten, the other control devices 110 besides the control device 110 can perform normal processing during the rewrite. Thus, according to the present embodiment, the data stored in the control device 110 can be rewritten while normal processing is taking place.

[0014] The connection between the rewriting device 200 and the second communication line L2 can be wired or wireless. If the connection between the rewriting device 200 and the second communication line L2 is wired, for example, a connection unit that connects the rewriting device 200 can be connected to the second communication line L2. If the connection between the rewriting device 200 and the second communication line L2 is wireless, for example, a receiving unit that receives a signal from the rewriting device 200 can be connected to the second communication line L2.

[0015] Some of the vehicle's electrical components, such as air conditioning or audio systems, do not affect the vehicle's operation. They do not interfere with the vehicle's operation, even when not in use while driving. Therefore, rewriting the data stored in control unit 110, which controls the electrical components while driving, does not cause any problems while driving the vehicle, even if these electrical components can no longer be used.

[0016] Therefore, when connected to the second communication line L2, the rewriting device 200 can confirm whether the control device 110 to be rewritten is the one that controls the electrical components that do not affect the vehicle's operation. Then, if the control device 110 to be rewritten is indeed one that controls the electrical components that do not affect the vehicle's operation, the rewriting device 200 can rewrite the control device 110 even while the vehicle is in motion.

[0017] Furthermore, if the control device 110 to be rewritten is not a control device that does not affect the operation of the vehicle, the rewriting device 200 can check whether the vehicle is moving. If the vehicle is not moving, the rewriting device 200 performs a procedure to rewrite data stored in the control device 110. However, if the vehicle is moving, the data stored in the control device 110 must not be rewritten. That is, if the device 110 is not a control device that controls the electrical components that do not affect the operation of the vehicle, the rewriting device 200 can only rewrite the data stored in the control device 110 when the vehicle is not moving.At this point, the conversion device 200 receives the measured speed values ​​of the vehicle from the control device of the speed sensor, which is connected to the second communication line L2, and confirms, based on this measured value, whether the vehicle is moving or not.

[0018] Thus, the control unit 110, which controls the electrical components that do not affect the driving of the vehicle, can rewrite the data stored in the control device 110 even while the vehicle is driving, thereby reducing the time required for rewriting during parking and preventing battery discharge during parking.

[0019] Before the rewriting process begins, the rewriting device 200 can confirm to the user whether the rewriting process should be started or not. The rewriting device 220 communicates with the control device of a user interface, which is connected, for example, to the second communication line L2, and confirms to the user whether the rewriting process should be started or not.

[0020] This prevents the rewriting process from being carried out at a time not intended by the user. For example, this prevents the electrical components used by the user from suddenly failing due to the rewriting process. <master slave>

[0021] The tax system 100, which is in Fig. Figure 1 is configured to include a third communication line L3 and slave devices 120, which are connected to the control device 110 via the third communication line L3, wherein the slave device 120 and the control device 110, which are connected by the communication line L3, can form a subnetwork. The third communication line L3 is, for example, a communication line for protocols such as LIN (Local Interconnect Network).

[0022] Each of the multiple slave control devices 120 is connected to electrical components, such as a window regulator actuator or a window position sensor, and controls these connected electrical components. The control device 110 manages the communication with the slave device 120, which is connected via the third communication line L3. That is, if, for example, the third communication line L3 is a LIN communication line, the slave device 120 acts as a slave node, and the control device 110 acts as a master node for the slave device 120, which is connected via the third communication line L3.

[0023] If the object to be rewritten is the slave device 120, the rewriting device 200 communicates using the second communication line L2 with the control device, which is connected to the slave device 120 whose data is to be rewritten via the third communication line L3. The control device 110 also communicates via the third communication line L3 with the slave device 120 that is to be rewritten with the data. According to the present embodiment, the communication using the second communication line L2 between the rewriting device 200 and the control device 110, as well as the use of the third communication line L3 between the control device 110 and the multiple slave devices 120, enables the data stored in the multiple slave devices 120 to be rewritten based on the rewrite data.

[0024] Thus, during the rewriting process of the data stored in the slave device 120, normal processing cannot be carried out in the control device 110 and the slave device 120 within the subnetwork to which the slave device 120 belongs. However, the devices located outside this subnetwork can communicate for normal processing using the first communication line L1, and the devices outside the subnetwork can perform normal processing. Therefore, according to this embodiment, it is possible to rewrite the data stored in the slave device 120 during normal processing. <datenumschreibverfahren>

[0025] Fig. Figure 2 shows a flowchart of a method for rewriting data stored in the control device 110 according to the present embodiment. It is assumed that the rewriting device 200 predetermines the control device 110 to be rewritten. The rewriting device 200 is connected, either wired or wirelessly, to the second communication line L2, and the rewriting device 200 and the control device 110 begin communicating using the second communication line L2 (step S201). The rewriting device 200 confirms whether the control device 110 to be rewritten with the rewrite data is a control device 110 that controls the electrical components that do not affect the operation of the vehicle (step S202).If the control device 110 to be rewritten with the rewrite data is a control device 110 that controls the electrical components that do not affect the operation of the vehicle (YES in step S202), the procedure for rewriting the data stored in the control device 110 is carried out by communication between the rewrite device 200 and the control device 110 using the second communication line L2 (S203).

[0026] If the control device to be rewritten with the rewrite data is not a control device that controls the electrical components that do not affect the vehicle's operation (NO in step S202), the rewrite device 200 checks whether the vehicle is moving (S204). If the vehicle is moving (YES in step S204), the rewrite device 200 terminates the processing. In this case, this process is repeated after a predetermined period. If the vehicle is not moving (NO in step S204), the process of rewriting the data stored in the control device 110 is carried out by communication between the rewrite device 200 and the control device 110 using the second communication line L2 (S203).

[0027] The present invention has been described with reference to preferred embodiments thereof. The present invention has been described herein by means of some specific examples; however, various modifications and changes can be made to these examples without departing from the spirit and scope of the present invention as set forth in the appended claims. Reference symbol list 100 tax system 110 Control device 120 Slave Device 200 rewriting device L1 First communication line L2 Second communication line L3 Third Communication Line< / datenumschreibverfahren> < / master>

Claims

[1] Data rewriting method for rewriting data stored in a control device (110) of a control system (100), wherein the control system (100) comprises: several control devices (110) in which data was stored, each forming a device for controlling an electrical component of a motor vehicle; and a first communication line (L1) connecting the multiple control devices (110) together, wherein the first communication line (L1) is used for communication to control the electrical component of the motor vehicle; characterized by , that the tax system (100) further includes: a second communication line (L2) connecting the multiple control devices (110) to each other in order to safeguard the first communication line (L1), wherein the second communication line (L2) is used for communication to control the electrical component of the motor vehicle when an anomaly occurs in the first communication line (L1); and The data rewriting process includes the following steps: a connection step (S201) for connecting a rewrite device (200) in which rewrite data was stored to the second communication line (L2); and a rewrite step (S203) using the rewrite device (200) in which the data stored in the control device (110), which is to be rewritten with the rewrite data, are rewritten on the basis of the rewrite data using the second communication line (L2). [2] Data rewriting method according to claim 1, wherein The rewriting device (200) determines, prior to the rewriting step, based on an attribute of the control device (110) to be rewritten, whether the data can be rewritten while the motor vehicle is being driven; and if the data cannot be rewritten while the motor vehicle is in motion, furthermore determines whether the motor vehicle is moving, and prevents the execution of the rewriting step if the motor vehicle is moving. [3] Data rewriting method for rewriting data stored in a slave device (120) of a control system (100), wherein the control system (100) comprises: several control devices (110) in which data was stored, each forming a device for controlling an electrical component of a motor vehicle; and a first communication line (L1) connecting the multiple control devices (110) together, wherein the first communication line (L1) is used for communication to control the electrical component of the motor vehicle; characterized by , that the tax system (100) further includes: a second communication line (L2) that secures the multiple control devices (110) of the first communication line (L1), wherein the second communication line (L2) is used for communication to control the electrical component of the motor vehicle when an anomaly occurs in the first communication line (L1); a third communication line (L3); and several slave devices (120) in which data was stored, which are connected to any one of the control devices (110) via the third communication line (L3), wherein the communication is controlled by any one of the control devices (110); wherein The data rewriting process includes the following steps: a connection step (S201) for connecting a rewrite device (200), in which rewrite data has been stored, to the second communication line (L2); and a rewrite step (S203) to rewrite the data stored in the slave device (120) using the rewrite device (200) to rewrite it with the rewrite data using the second and third communication lines (L3). [4] Data rewriting system (100), comprising: several control devices (110) in which data were stored, each forming a device for controlling an electrical component of a motor vehicle; a first communication line (L1) connecting the multiple control devices (110) to each other, wherein the first communication line (L1) is used for communication to control the electrical component of the motor vehicle; and a rewriting device (200) in which rewriting data was stored; the data rewriting system (100) characterized by is that it also includes: a second communication line (L2) connecting the multiple control devices (110) to each other in order to secure the first communication line (L1), wherein the second communication line (L2) is used for communication to control the electrical component of the motor vehicle when an anomaly occurs in the first communication line (L1); wherein the rewrite device (200) is configured to (i) be connected to the second communication line (L2) via a wired or wireless connection and (ii) rewrite the data stored in the control device (110) to be rewritten with the rewrite data, based on the rewrite data and using the second communication line (L2). [5] Data rewriting system (100) comprising: several control devices (110) in which data was stored, each forming a device for controlling an electrical component of a motor vehicle; and a first communication line (L1) connecting the multiple control devices (110) together, wherein the first communication line (L1) is used for communication to control the electrical component of the motor vehicle; characterized by , that the data rewriting system (100) further includes: a second communication line (L2) that secures the multiple control devices (110) of the first communication line (L1), wherein the second communication line (L2) is used for communication to control the electrical component of the motor vehicle when an anomaly occurs in the first communication line (L1); a rewriting device (200) in which rewriting data was stored; a third communication line (L3); and several slave devices (120) in which data was stored, which are connected to any one of the control devices (110) via the third communication line (L3), wherein the communication is controlled by any one of the control devices (110); wherein the rewriting device (200) is configured such that it: can be connected to the second communication line (L2); and the data stored in one of the slave devices (120) is rewritten in order to rewrite it with the rewrite data using the second and third communication lines (L2, L3).

Images