Update information notification device, vehicle system, and update information notification program

Abstract

To appropriately notify of update information relating to an update of software according to a scene.SOLUTION: An update information notification device 7 causes a notification device to notify of update information relating to an update of software of an electronic control device to be updated when the software is updated with update software acquired from a distribution device. The update information notification device comprises: an update information acquisition section 16a that acquires update information; an occupant state identification section 16b that identifies an occupant state indicating a state of an occupant; a vehicle state identification section 16c that identifies a vehicle state indicating a state of a vehicle; and a notification control section 16e that determines a notification mode of the update information and causes the notification device to notify of the update information in accordance with the determined notification mode. The notification control section determines the notification mode of the update information on the basis of an identification result by the occupant state identification section and an identification result by the vehicle state identification section.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to an update information notification device, a vehicle system, and an update information notification program. [Background technology]

[0002] Conventionally, a technology for updating software of an in-vehicle electronic control unit (hereinafter referred to as ECU (Electronic Control Unit)) has been provided for the purpose of, for example, improving functions or fixing bugs. In this technology, a server distributes update software to a software update device, and the software update device transmits the update software to an update target ECU, thereby updating the software of the update target ECU. The software update is sequentially carried out in a campaign notification phase that recommends software update to a driver, a download phase in which the software update device acquires the update software from a server, an installation phase in which the update target ECU writes the update software to a storage area, and an activation phase in which the update target ECU activates the update software. In this case, update information regarding the software update is notified to the driver, for example, by displaying it on an in-vehicle display device or a mobile information terminal. For example, Patent Document 1 discloses a method of differently notifying the driver, etc., based on the characteristics of the update software, as a configuration for notifying the driver, etc. of update information regarding the software update. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2021-9654 Summary of the Invention [Problem to be solved by the invention]

[0004] There are various scenes in which software updates are performed, and these are classified into many scenes. For example, update information may be notified while the vehicle is running or while the vehicle is parked. When update information is notified while the vehicle is running, there is a risk that the update information may be notified while the driver is driving, and depending on the timing of the notification and the amount of information, the driver may be distracted. On the other hand, when update information is notified while the vehicle is parked, there is a risk that the update information may be notified while no passengers are in the vehicle, and there is a risk that the power of the vehicle battery may be unnecessarily consumed. For these reasons, it is required to notify update information appropriately according to the scene.

[0005] The present invention has been made in consideration of the above-mentioned circumstances, and its object is to provide an update information notification device, a vehicle system, and an update information notification program that can appropriately notify update information regarding software updates according to the situation. [Means for solving the problem]

[0006] According to the invention recited in claim 1, the update information notification device (7) causes the notification device to notify update information relating to software updates when software of an electronic control device to be updated is updated by update software acquired from a distribution device. The update information acquisition unit (16a) acquires the update information. The occupant state identification unit (16b) identifies an occupant state indicating a state of an occupant. The vehicle state identification unit (16c) identifies a vehicle state indicating a state of the vehicle. The notification control unit (16e) determines a notification mode of the update information, and causes the notification device to notify the update information in accordance with the determined notification mode. The notification control unit determines the notification mode of the update information based on the identification result by the occupant state identification unit and the identification result by the vehicle state identification unit.

[0007] The notification mode of the update information is determined based on the results of identifying the occupant status and the vehicle status, and the update information is notified according to the determined notification mode. Instead of notifying the update information in a uniform manner, the notification mode of the update information is determined according to the occupant status and the vehicle status, and the update information related to software updates can be appropriately notified according to the situation.

[0008] For example, when notifying update information while the vehicle is traveling, notifying the update information in a detailed notification mode may attract the driver's attention, but notifying the update information in a simple notification mode with a reduced amount of information can prevent the driver from attracting attention.For example, when notifying update information while the vehicle is parked, notifying the update information in a detailed notification mode with a large amount of information may unnecessarily consume power from the vehicle battery, but notifying the update information in a simple notification mode can prevent the unnecessary consumption of power from the vehicle battery. [Brief description of the drawings]

[0009] [Figure 1] A functional block diagram showing the overall configuration of one embodiment. [Diagram 2] HCU Functional Block Diagram [Diagram 3] Diagram showing case classification table [Figure 4] FIG. 13 shows the contents of the display mode. [Diagram 5] FIG. 13 shows the contents of the display mode. [Figure 6] FIG. 13 shows the contents of the display mode. [Figure 7] FIG. 13 shows the contents of the display mode. [Figure 8] FIG. 13 shows the contents of the display mode. [Figure 9] FIG. 13 shows the contents of the display mode. [Figure 10] A diagram showing a display pattern table. [Figure 11] Diagram showing display patterns [Figure 12] Diagram showing display patterns [Figure 13]Diagram explaining display priority [Figure 14] Diagram explaining operation priority [Figure 15] A diagram explaining the amount of information displayed [Figure 16] Flowchart showing reception determination processing of an update information notification signal [Figure 17] Flowchart showing a process for determining whether an error information notification signal is received [Figure 18] Flowchart showing a simplified display request operation determination process [Figure 19] Diagram explaining switching to simple display [Figure 20] Diagram explaining switching to simple display [Figure 21] Diagram explaining switching to simple display [Figure 22] FIG. 1 is a diagram illustrating the display of a meter device. [Diagram 23] Flowchart showing operation determination processing for a detailed display request [Figure 24] A diagram explaining why switching to detailed display is not possible [Diagram 25] Diagram explaining switching to detailed display [Figure 26] Flowchart showing a process for determining whether a request for cancellation is made [Figure 27] Figure explaining the display of a message indicating the reason for abandoning the abort request [Figure 28] Illustration explaining the display of cancellation information [Figure 29] Illustration explaining the display of cancellation information [Diagram 30] Flowchart showing a display request determination process for update information when the vehicle power is off [Diagram 31] Flowchart showing a process for determining whether the vehicle power supply is off during software update DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] An embodiment will be described below with reference to the drawings. In the software update system 1, a vehicle system 2 mounted on a vehicle and a server 3 (corresponding to a distribution device) functioning as an OTA (Over The Air) center are configured to be able to communicate data via a communication network 4. In the vehicle system 2, a software update device (hereinafter referred to as a central gateway (CGW) 5 functioning as an OTA master, a number of ECUs 6, and an HMI (Human Machine Interface) control unit (hereinafter referred to as an HCU (HMI Control Unit)) 7 (corresponding to an update information notification device) are configured to be able to communicate data via an in-vehicle network 8.

[0011] The in-vehicle network 8 is, for example, a Controller Area Network (CAN) (registered trademark). The in-vehicle network 8 may be FLEXRAY (registered trademark), Clock Extension Peripheral Interface (CXPI) (registered trademark), Ethernet (registered trademark), or the like. In the present embodiment, a configuration in which four ECUs 6 are connected to the in-vehicle network 8 is illustrated, but the number of ECUs 6 connected to the in-vehicle network 8 is arbitrary. Furthermore, the number of in-vehicle networks 8 is also arbitrary.

[0012] The ECU 6 may be, for example, a device that controls a drive system, a device that controls an ADAS (Advanced Driving Assistant System), or a device that controls a multimedia system, and may be an update target ECU 6 that is a target for updating software due to software modification, function improvement, or the like. Software includes so-called programs that instruct a computer to perform a processing procedure to operate, as well as files, data, libraries, and the like that are referenced when executing a program. Depending on the configuration of the software storage area, there are ECUs with a two-sided memory that has a software storage area on two sides, and ECUs with a one-sided memory that has a software storage area on one side, as types of ECU 6. A two-sided memory may be called a dual bank memory, and a one-sided memory may be called a single bank memory. The HCU 7 may also be a target for software update.

[0013] An in-vehicle communication device (hereinafter referred to as DCM (Data Communication Module)) 9 is connected to the CGW 5. The DCM 9 is wirelessly connected to the server 3 via the communication network 4, and is thereby capable of receiving an update package distributed from the server 3. The update package distributed from the server 3 includes specification data capable of identifying the update target ECU 6, and update software to be written to the update target ECU 6. The update software corresponds to so-called total data when the software is entirely rewritten, and corresponds to so-called difference data when the software is partially rewritten. When the DCM 9 acquires the update package distributed from the server 3, it transfers the acquired update package to the CGW 5.

[0014] When the update package is transferred from the DCM 9, the CGW 5 extracts specification data and update software from the transferred update package, identifies the update target ECU 6 from the extracted specification data, transmits the extracted update software to the update target ECU 6 and transmits an update instruction to the update target ECU 6, and causes the update target ECU 6 to update the software. That is, the update target ECU 6 receives the update software and the update instruction from the CGW 5, and updates the software by writing the update software to a storage area. The mode in which the update software acquired from the server 3 via the communication network 4 is written to the update target ECU 6 is called wireless repro. In this embodiment, a configuration in which the DCM 9 is arranged separately from the CGW 5 is illustrated, but a configuration in which the function of the DCM 9 is incorporated into the CGW 5 may also be used.

[0015] A reprogramming tool 10 (corresponding to a distribution device) is detachably connected to the in-vehicle network 8. The reprogramming tool 10 distributes update software to the update target ECU 6 while connected to the in-vehicle network 8, and transmits an update instruction to the update target ECU 6, causing the update target ECU 6 to update the software. That is, the update target ECU 6 receives the update software and the update instruction from the reprogramming tool 10, and updates the software by writing the update software to a storage area. A mode in which the update software acquired from the reprogramming tool 10 without going through the communication network 4 is written to the update target ECU 6 is called a wired reprogramming. In this embodiment, a configuration in which the reprogramming tool 10 is directly connected to the in-vehicle network 8 is illustrated, but the reprogramming tool 10 may be connected to the in-vehicle network 8 via the CGW 5.

[0016] The software update phases include a campaign notification phase in which the server 3 recommends the vehicle system 2 to update the software, a download phase in which the CGW 5 obtains an update package from the server 3, an installation phase in which the CGW 5 instructs the update target ECU 6 to write the update software, and the update target ECU 6 writes the update software to a storage area, and an activation phase in which the CGW 5 instructs the update target ECU 6 to activate the update software, and the update target ECU 6 activates the update software. Each phase progresses as the driver appropriately accepts each phase. The CGW 5 manages the software update status in each of these campaign notification, download, installation, and activation phases, and transmits an update information notification signal indicating the update status to the HCU 7.

[0017] The update information is various information related to software updates, and includes information that can identify the progress of the software update, functions that are subject to usage restrictions during the software update, etc. For example, in the campaign notification phase, the update information includes the file name, file size, and function description of the update software. For example, in the download phase, the update information includes information indicating the start of downloading, information indicating that downloading is in progress, information such as a numerical value indicating the amount of data that has been downloaded as a percentage of the amount of data to be downloaded as the progress of the download, information notifying the reason for the interruption if the download is interrupted for some reason, and information indicating the completion of the download. For example, in the installation phase, the update information includes information indicating the start of installation, information indicating that installation is in progress, information such as a numerical value indicating the amount of data that has been installed as a percentage of the amount of data to be installed as the progress of the installation, information notifying the reason for the interruption if the installation is interrupted for some reason, and information indicating the completion of the installation. For example, in the activation phase, the information includes information indicating the start of activation, information indicating that activation is in progress, information such as a numerical value indicating the amount of data that has been activated as a percentage of the amount of data to be activated as the progress of activation, information notifying the reason for interruption if activation is interrupted for some reason, information indicating the completion of activation, etc. Also, in the case of software related to driving control being updated, for example, the information includes information that can identify functions, etc. that are related to driving control and are subject to usage restrictions.

[0018] The CGW 5 periodically transmits an update information notification signal to the HCU 7. Furthermore, if an error occurs during software update, the CGW 5 transmits an error information notification signal to the HCU 7 by interrupt.

[0019] A center information display (hereinafter referred to as CID (Center Information Display)) 11 (corresponding to a notification device), a meter device 12 (corresponding to a notification device), and a head-up display (hereinafter referred to as HUD (Head-Up Display)) 13 (corresponding to a notification device) are connected to the HCU 7. The CID is disposed in front of the driver's seat and displays, for example, a map used for a navigation function, a camera image by a parking assist function, audio information related to audio, and air conditioning information related to air conditioning. The meter device 12 is disposed in front of the driver's seat and includes various indicators, and displays vehicle speed, shift position, remaining fuel, warnings, and the like. The HUD 13 projects information such as vehicle speed, shift position, and route guidance on the front windshield as a virtual image in front of the driver's seat. The external device 14 is wirelessly connected to the DCM 9 via the communication network 4, and is capable of data communication with the vehicle system 2. The external device 14 is a portable information terminal such as a smartphone or tablet terminal that can be carried by the occupant, and is a terminal that the occupant can use outside the vehicle.

[0020] When the HCU 7 receives an update information notification signal from the CGW 5 in association with a software update, the HCU 7 can display update information based on the update information notification signal on the CID 11 or the meter device 12. The case of displaying the update information on the meter device 12 also includes notifying the update information by turning on, blinking, or turning off an indicator. Furthermore, when the HCU 7 receives an update information notification signal from the CGW 5 in association with a software update, the HCU 7 can display the update information based on the update information notification signal on the external device 14, so long as the external device 14 and the DCM 9 are wirelessly connected via the communication network 4 and data communication is possible between the external device 14 and the vehicle system 2.

[0021] By displaying the update information on the CID 11 and the meter device 12, the occupant can check various information related to the software update while in the vehicle. In addition, by displaying the update information on the external device 14 while the occupant is using the external device 14 outside the vehicle, the occupant can check various information related to the software update even while outside the vehicle. In the present embodiment, a configuration in which the update information is displayed on the CID 11, the meter device 12, and the external device 14 is exemplified, but the update information may be displayed on the HUD 13.

[0022] The HCU 7 is connected to an operation input unit 15 that allows the occupant to perform an operation input. The operation input unit 15 is, for example, a touch panel of the CID 11, a touch panel of the external device 14, a steering switch arranged on the steering wheel, or the like. When the operation input unit 15 detects an operation input by the occupant, it transmits an operation input detection signal to the HCU 7. The occupant can perform an operation input for the update information by the operation input unit 15. For example, if an approval screen asking for approval of download is displayed after a campaign notification, the occupant can perform an operation input of whether or not to approve the download. For example, if an approval screen asking for approval of installation is displayed after downloading, the occupant can perform an operation input of whether or not to approve the installation. For example, if an approval screen asking for approval of activation is displayed after installation, the occupant can perform an operation input of whether or not to approve the activation.

[0023] As shown in FIG. 2, the HCU 7 includes a control unit 16 and a CAN communication unit 17. The control unit 16 is mainly configured with a microcomputer having a CPU (Central Processing Unit), a ROM (Read Only Memory), a RAM (Random Access Memory), and an I / O (Input / Output). The control unit 16 executes a control program stored in a non-transient substantial storage medium to execute processing corresponding to the control program, thereby controlling the overall operation of the HCU 7. The CAN communication unit 17 controls transmission and reception of CAN signals with the in-vehicle network 8. The HCU 7 is connected to a battery power source (+B) supplied from the vehicle battery, and can operate even when the vehicle power source is off.

[0024] The control unit 16 includes an update information acquisition unit 16a, an occupant state identification unit 16b, a vehicle state identification unit 16c, an operation input identification unit 16d, and a display control unit 16e (corresponding to a notification control unit). Each of these units 16a to 16e executes an update information notification program.

[0025] When the update information acquisition unit 16a receives an update information notification signal from the CGW 5, it acquires update information based on the received update information notification signal.

[0026] The occupant state specification unit 16b specifies an occupant state indicating the state of an occupant. When the occupant state specification unit 16b receives an occupant state notification signal indicating, for example, an analysis result of an image captured by an image sensor that captures the interior of the vehicle, a detection result of a seat sensor that detects seating, a detection result of a seat belt sensor that detects fastening of a seat belt, a detection result of a biological sensor that detects a living body, or the like, the occupant state specification unit 16b specifies an occupant state based on the received occupant state notification signal. The occupant state specification unit 16b specifies, for example, whether the occupant is the driver alone, whether the occupant is a passenger together with the driver, whether the occupant is the only passenger, whether the occupant is absent from the vehicle, whether the occupant has gotten in, whether the occupant has gotten out, or the like, as the occupant state.

[0027] The vehicle state specification unit 16c specifies a vehicle state indicating the state of the vehicle. When the vehicle state specification unit 16c receives a vehicle state notification signal indicating, for example, an on / off state of an ignition signal, an on / off state of an accessory signal, an on / off state of an automatic driving function, or the like, the vehicle state specification unit 16c specifies the vehicle state based on the received vehicle state notification signal. The vehicle state specification unit 16c specifies, for example, whether the vehicle is running, stopped, or parked, whether the vehicle is in automatic driving or manual driving, or the like, as the vehicle state. In this embodiment, an engine vehicle is assumed, and a configuration is exemplified in which whether the vehicle is running or parked is specified based on the on / off state of the ignition signal, but in the case of an electric vehicle, whether the vehicle is running or parked may be specified based on the on / off state of an EV (Electric Vehicle) system.

[0028] The operation input identification unit 16d identifies an operation input by the occupant. When the operation input identification unit 16d receives an operation input detection signal from the operation input unit 15, the operation input identification unit 16d identifies the operation input by the occupant based on the received operation input detection signal.

[0029] The display control unit 16e determines the display mode of the update information based on the identification result of the occupant state identification unit 16b, the identification result of the vehicle state identification unit 16c, and the identification result of the operation input identification unit 16d. That is, the display control unit 16e does not display the update information in a uniform display mode, but displays the update information in different display modes depending on the occupant state, the vehicle state, and the operation input of the occupant. When the display control unit 16e determines the display mode of the update information, it transmits a display instruction signal to the CID 11 and the meter device 12, and displays the update information on the CID 11 and the meter device 12 according to the determined display mode. Furthermore, if the vehicle system 2 and the external device 14 are capable of data communication, when the display control unit 16e determines the display mode of the update information, it transmits a display instruction signal from the DCM 5 to the external device 14, and displays the update information on the external device 14 according to the determined display mode.

[0030] The display mode of the update information will be described. As shown in FIG. 3, the display control unit 16e holds a case classification table in which cases are classified based on the occupant state, the vehicle state, and the operation input of the occupant. The display control unit 16e identifies the corresponding case based on the identification result of the occupant state identification unit 16b, the identification result of the vehicle state identification unit 16c, and the identification result of the operation input identification unit 16d. For example, when the only occupant in the vehicle is the driver, the vehicle is being driven manually, and there is an operation input to the CID 11, etc., the display control unit 16e identifies case 1-1. Also, when the occupants in the vehicle are the driver and a passenger, the vehicle is parked, the accessories are off, and a predetermined time has passed since the ignition was turned off, the display control unit 16e identifies case 2-10.

[0031] The display control unit 16e defines in advance the contents of the display mode of the update information for each case classified by the case classification table, as shown in Fig. 4 to Fig. 9. The contents of the display mode of the update information include display patterns in each phase of campaign notification, download, installation, and activation, display priority, operation priority, and amount of display information when the target of the software update is an important function, and display priority, operation priority, and amount of display information when the target of the software update is an unimportant function.

[0032] As shown in Fig. 10, the display control unit 16e holds a display pattern table showing display patterns 1 to 5 as display patterns, and sets the corresponding devices to either enabled or disabled. As shown in Figs. 11 and 12, the display patterns 1 to 5 are patterns for enabling or disabling the CID 11, the meter device 12, the HUD 13, and the external device 14, respectively. The display control unit 16e displays update information in devices that are set to enabled, and does not display update information in devices that are set to disabled. Since the display control unit 16e sets multiple devices to enabled in the display patterns 1, 3, and 4, when the display patterns 1, 3, and 4 are selected, the display control unit 16e displays update information in multiple devices.

[0033] The display control unit 16e sets one of priorities 1 to 3 as the display priority, as shown in Fig. 13. Priority 1 means "always display", priority 2 means "display if possible", and priority 3 means "do not display even if possible".

[0034] The display control unit 16e sets one of priorities 1 to 4 as the operation priority, as shown in Fig. 14. Priority 1 means "only the driver can operate", Priority 2 means "passengers can operate under certain conditions even if the driver is present", Priority 3 means "passengers can operate even if the driver is not present (for example, purchased apps and free apps can be used)", and Priority 4 means "neither the driver nor passengers can operate".

[0035] 15, the display control unit 16e sets the amount of information to be displayed to one of amounts 1 to 4. The amount of information 1 is a "detailed explanation", the amount of information 2 is a "simple explanation", the amount of information 3 is an "icon or diagram", and the amount of information 4 is "none".

[0036] For example, when the display control unit 16e identifies case 1-1, in which the driver is the only occupant in the vehicle, the vehicle is being driven manually, and an operation input is made to the CID 11 or the like, the display control unit 16e selects display pattern 1 in the campaign notification phase to enable the CID 11 and the external device 14 and disable the meter device 12 and the HUD 13. That is, the display control unit 16e causes the CID 11 and the external device 14 to display update information related to the campaign notification. In the download phase, the display control unit 16e selects display pattern 5 to enable the CID 11 and disable the meter device 12, the HUD 13, and the external device 14. That is, the display control unit 16e causes the CID 11 to display update information related to the download. In the installation phase, the display control unit 16e selects display pattern 4 to enable the CID 11 and the meter device 12 and disable the HUD 13 and the external device 14. That is, the display control unit 16e causes the CID 11 and the meter device 12 to display update information related to the installation. In the activation phase, the display control unit 16e selects display pattern 4 to enable the CID 11 and the meter device 12 and disable the HUD 13 and the external device 14. That is, the display control unit 16e causes the CID 11 and the meter device 12 to display update information related to the activation.

[0037] Furthermore, when the display control unit 16e identifies, for example, case 1-1, if the target of the software update is an important function, it sets the display priority to priority 2, the operation priority to priority 4, and the amount of displayed information to any one of the amounts of information 1 to 3. Furthermore, when the display control unit 16e identifies, for example, case 1-1, if the target of the software update is an unimportant function, it sets the display priority to priority 3, and does not set the operation priority or the amount of displayed information.

[0038] In this way, the display control unit 16e identifies a corresponding case according to the occupant state, the vehicle state, and the occupant's operation input, and displays the update information according to a display mode predefined for the identified case.

[0039] For example, in comparing case 1-1 when the vehicle is being driven manually with case 1-3 when the vehicle is being driven automatically, display pattern 5 is defined for the download phase in case 1-1, and display pattern 4 is defined for case 1-3. This is based on the fact that while displaying update information on the meter device 12 while the vehicle is being driven manually may interfere with the driver's driving operation, displaying update information on the meter device 12 while the vehicle is being driven automatically does not cause any problems.

[0040] Similarly, for example, when comparing Case 1-1 and Case 1-3, the operational priority of software updates for important functions is defined as Priority 4 in Case 1-1, and Priority 1 in Case 1-3. This is defined on the basis that, while allowing the operation while the vehicle is being driven manually may interfere with the driver's driving operations, allowing the operation while the vehicle is being driven autonomously will not cause any problems.

[0041] For example, comparing case 1-1 when the vehicle is being driven manually with case 1-9 when the vehicle is parked and the driver gets off, the display priority of software updates for important functions is defined as priority 2 in case 1-1 and priority 1 in case 1-9. This definition is intended to make it mandatory to display update information when the vehicle is being driven manually, but mandatory to display update information when the vehicle is parked and the driver gets off.

[0042] For example, when comparing case 1-1 when the vehicle is being driven manually with case 1-5 when the vehicle is stopped, the amount of information displayed for software updates of unimportant functions may not be defined in case 1-1, and priorities 1, 2, and 3 may be defined in case 1-5. This is based on the fact that while increasing the amount of information displayed while the vehicle is being driven manually may hinder the driver's driving operations, increasing the amount of information displayed while the vehicle is stopped will not cause any problems.

[0043] Next, the operation of the above-mentioned configuration will be described with reference to Fig. 16 to Fig. 31. Here, the process of determining the display mode of the update information based on the identification result of the occupant state and the identification result of the vehicle state, the process of determining the display mode of the update information based on the identification result of the operation input, and the process of displaying the update information when the vehicle power supply is off will be sequentially described.

[0044] (1) Processing for determining the display mode of update information based on the identification results of the occupant status and the vehicle status (see Figs. 16 and 17). Here, the reception determination processing of the update information notification signal and the reception determination processing of the error information notification signal will be described in order.

[0045] (1-1) Processing to determine whether or not update information notification signal is received (see Figure 16) The control unit 16 performs a reception determination process for an update information notification signal at a predetermined cycle. When the control unit 16 starts the reception determination process for an update information notification signal, the control unit 16 determines whether or not the update information notification signal has been received from the CGW 5 (S101). When the control unit 16 determines that the update information notification signal has not been received (S101: NO), the control unit 16 ends the reception determination process for the update information notification signal.

[0046] When the control unit 16 determines that an update information notification signal has been received (S101: YES), it acquires update information based on the received update information notification signal (S102, which corresponds to an update information acquisition step). The control unit 16 identifies an occupant state based on an occupant state notification signal (S103, which corresponds to an occupant state identification step). The control unit 16 identifies a vehicle state based on a vehicle state notification signal (S104, which corresponds to a vehicle state identification step). The control unit 16 identifies an operation input by an occupant based on an operation input detection signal (S105, which corresponds to an operation input identification step).

[0047] The control unit 16 determines the display mode of the update information based on the result of identifying the occupant state, the result of identifying the vehicle state, and the result of identifying the operation input of the occupant (S106, which corresponds to the notification mode determination step). That is, the control unit 16 selects the corresponding case by referring to the case classification table shown in Fig. 3. When the control unit 16 selects the corresponding case, it transmits a display instruction signal to the corresponding device according to the selected case, causes the corresponding device to display the update information (S107, which corresponds to the notification control step), and ends the reception determination process of the update information notification signal.

[0048] The control unit 16 identifies case 1-1 by, for example, identifying "driver only" as the identified result of the occupant state, identifying "vehicle traveling and being manually driven" as the identified result of the vehicle state, and identifying "operation input present" as the identified result of the occupant's operation input, based on the case classification table shown in Fig. 3. For example, the control unit 16 selects display pattern 1 in the campaign notification phase according to the display mode corresponding to case 1-1 shown in Fig. 4, and causes CID 11 and external device 14 to display updated information regarding the campaign notification. That is, the driver can check the updated information regarding the campaign notification through CID 11 and external device 14.

[0049] When the phase shifts from the campaign notification phase to the download phase, the control unit 16 selects display pattern 5 and causes CID 11 to display update information related to download. That is, the driver can check the update information related to download from CID 11. When the phase shifts from the download phase to the installation phase, the control unit 16 selects display pattern 4 and causes CID 11 and the meter device 12 to display update information related to installation. That is, the driver can check the update information related to installation from CID 11 and the meter device 12. When the phase shifts from the installation phase to the activation phase, the control unit 16 continues to select display pattern 4 and causes CID 11 and the meter device 12 to display update information related to activation. That is, the driver can check the update information related to activation from CID 11 and the meter device 12.

[0050] The above is an example of the case where case 1-1 continues from the campaign notification phase to the activation phase, but when the control unit 16 identifies a change in the occupant state, the vehicle state, or the occupant's operation input during the period from the campaign notification phase to the activation phase, the control unit 16 selects a new case corresponding to the change. The control unit 16 transmits a display instruction signal to the corresponding device according to the selected new case, and causes the corresponding device to display the update information. For example, when "driver only" is identified as the identification result of the occupant state, "parked" is identified as the identification result of the vehicle state, and "operation input present" is identified as the identification result of the occupant's operation input, a new case 1-5 is identified. The control unit 16 causes the corresponding device to display the update information in a display mode corresponding to case 1-5 shown in FIG. 4. That is, the control unit 16 switches from case 1-1 to case 1-5 and causes the corresponding device to display the update information.

[0051] (1-2) Error information notification signal reception determination process (see Figure 17) The control unit 16 performs the reception determination process of the error information notification signal at a predetermined cycle. When the control unit 16 starts the reception determination process of the error information notification signal, it determines whether or not the error information notification signal has been received from the CGW 5 (S111). When the control unit 16 determines that the error information notification signal has not been received (S111: NO), it ends the reception determination process of the error information notification signal.

[0052] When the control unit 16 determines that an error information notification signal has been received (S111: YES), the control unit 16 acquires error information based on the received error information notification signal (S112). The control unit 16 identifies the occupant state based on the occupant state notification signal (S113). The control unit 16 identifies the vehicle state based on the vehicle state notification signal (S114). The control unit 16 identifies the operation input of the occupant based on the operation input detection signal (S115).

[0053] The control unit 16 determines the display mode of the error information based on the result of identifying the occupant state, the result of identifying the vehicle state, and the result of identifying the operation input by the occupant (S116). That is, the control unit 16 selects the corresponding case by referring to the case classification table shown in Fig. 3. When the control unit 16 selects the corresponding case, it transmits a display instruction signal to the corresponding device according to the selected case, causes the corresponding device to display the error information (S117), and ends the reception determination process of the error information notification signal.

[0054] (2) Processing for determining the display mode of update information based on the result of identifying the operation input (see Figs. 18 to 29). Here, the operation determination processing for a simple display request, the operation determination processing for a detailed display request, and the operation determination processing for a stop request will be described in order.

[0055] (2-1) Operation determination process for simplified display request (see Figures 18 to 22) For example, a driver who desires a simplified display of update information performs an operation input for a simplified display request. The control unit 16 performs an operation determination process for a simplified display request at a predetermined cycle while displaying update information. When the control unit 16 starts the operation determination process for a simplified display request, it determines whether or not an operation input for a simplified display request has occurred based on an operation input detection signal from the operation input unit 15 (S201). When the control unit 16 determines that an operation input for a simplified display request has not occurred (S201: NO), it ends the operation determination process for a simplified display request.

[0056] When the control unit 16 determines that an operation input for a simplified display request has occurred (S201: YES), it determines whether or not the displayed update information can be switched to the simplified display (S202). When the control unit 16 determines that the displayed update information cannot be switched to the simplified display (S202: NO), it does not switch the displayed update information to the simplified display and ends the operation determination process for the simplified display request. When the control unit 16 determines that the displayed update information can be switched to the simplified display (S202: YES), it switches the displayed update information to the simplified display (S203) and ends the operation determination process for the simplified display request.

[0057] 19, when the control unit 16 determines that it is possible to switch to a simplified display while displaying, for example, a progress bar A1 showing the download status and a function description A2 showing details of the update function on the CID 11 as update information, the control unit 16 switches to a screen that displays only a progress bar A3 as update information and a menu button group A4 as information unrelated to the update information. The information unrelated to the update information may be other than the menu button group A4, and may be, for example, a map used for the navigation function, a camera image from the parking assist function, audio information related to audio, air conditioning information related to air conditioning, etc.

[0058] Similarly, when there are multiple software updates, the control unit 16 switches to a screen that displays only progress bars A3 and A5 as update information for each software update and also displays a menu button group A4, as shown in FIG.

[0059] Also, as shown in FIG. 21, the control unit 16 may switch to a screen that displays a blinking updating button A6 instead of the progress bar A3 as update information, and also displays a menu button group A4.

[0060] Furthermore, as shown in FIG. 22, the control unit 16 may cause the meter device 12 to display indicators A7 to A9, and cause the indicators A8 and A9 corresponding to the functions for which software is being updated to display the remaining time until the software update is completed.

[0061] (2-2) Operation determination process for detailed display request (see Figures 23 to 25) For example, a driver who desires to display details of update information performs an operation input for a details display request. The control unit 16 performs an operation determination process for the details display request at a predetermined cycle while displaying the update information. When the control unit 16 starts the operation determination process for the details display request, it determines whether or not an operation input for the details display request has occurred based on an operation input detection signal from the operation input unit 15 (S211). When the control unit 16 determines that an operation input for the details display request has not occurred (S211: NO), it ends the operation determination process for the details display request.

[0062] When the control unit 16 determines that an operation input for a detailed display request has occurred (S211: YES), it determines whether or not the displayed update information can be switched to a detailed display (S212).When the control unit 16 determines that the displayed update information cannot be switched to a detailed display (S212: NO), it does not switch the displayed update information to a detailed display, but displays a message indicating the reason why switching to a detailed display is not possible (S213), and ends the operation determination process for the detailed display request.

[0063] When the control unit 16 determines that the displayed update information can be switched to detailed display (S212: YES), it identifies the occupant state based on the occupant state notification signal (S214), identifies the vehicle state based on the vehicle state notification signal (S215), identifies the occupant's operation input based on the operation input detection signal (S216), and determines the display mode of the update information based on the identification result of the occupant state, the identification result of the vehicle state, and the identification result of the occupant's operation input (S217). The control unit 16 switches the displayed update information to detailed display in accordance with the determined display mode (S218), and ends the operation determination process for the detailed display request.

[0064] As shown in FIG. 24, when the control unit 16 determines that it is not possible to switch to detailed display while displaying the updating button A6 as update information and the menu button group A4 on CID 11, it does not switch the displayed update information to detailed display, but displays a message A10 indicating the reason why it is not possible to switch to detailed display, saying "Detailed display is not possible because the vehicle is moving."

[0065] As shown in FIG. 25, when the control unit 16 determines that it is possible to switch to a detailed display while displaying an updating button A6 as update information and a menu button group A4 on CID 11, the control unit 16 switches to a screen that displays, for example, a progress bar A1 as the download status and a function description A2 as update function details as update information.

[0066] (2-3) Operation determination process for cancel request (see Figures 26 to 29) For example, a driver who wishes to cancel a software update performs an operation input for a cancel request. The control unit 16 performs an operation determination process for a cancel request at a predetermined cycle while displaying update information. When the control unit 16 starts the operation determination process for a cancel request, it determines whether or not an operation input for a cancel request has occurred based on an operation input detection signal from the operation input unit 15 (S221). When the control unit 16 determines that an operation input for a cancel request has not occurred (S221: NO), it ends the operation determination process for a cancel request.

[0067] When the control unit 16 determines that an operation input for a stop request has occurred (S221: YES), it determines whether the target of the stop request is an important function (S222). When the control unit 16 determines that an operation input for a stop request has occurred (S221: YES), it determines whether the target of the software update for the stop request is an important function (S222).

[0068] When the control unit 16 determines that the software update requested by the cancel request is for an important function (S222: YES), the control unit 16 discards the cancel request (S223). The control unit 16 displays a message indicating the reason for discarding the cancel request (S224), and ends the operation determination process for the cancel request.

[0069] When the control unit 16 determines that the software update requested for the cancellation is not for an important function (S222: NO), it determines whether the update information is being displayed in a simplified form (S225). When the control unit 16 determines that the update information is being displayed in a simplified form (S225: YES), it causes the corresponding device to display cancellation information indicating that the software update is being cancelled (S226), and ends the operation determination process for the cancellation request.

[0070] When the control unit 16 determines that the update information is not being displayed in a simplified manner (S225: NO), it identifies the occupant state based on the occupant state notification signal (S227), identifies the vehicle state based on the vehicle state notification signal (S228), identifies the occupant's operation input based on the operation input detection signal (S229), and determines the display mode of the update information based on the identification result of the occupant state, the identification result of the vehicle state, and the identification result of the occupant's operation input (S230). The control unit 16 displays cancellation information indicating the cancellation of the software update on the corresponding device according to the determined display mode (S231), and ends the operation determination process for the cancellation request. In this case, the control unit 16 displays the cancellation information in detail if the identification result of the occupant state, the identification result of the vehicle state, and the identification result of the occupant's operation input allows detailed display, and displays the cancellation information in a simplified manner if detailed display is not possible.

[0071] As shown in FIG. 27, when the control unit 16 determines that, for example, an operation input of the cancel button A11 has occurred and determines that the software update for which the cancel request is made is for an important function, the control unit 16 discards the cancel request and displays a pop-up message A12 indicating the reason for discarding the cancel request, stating "The software update cannot be canceled because it is a core function of the vehicle."

[0072] 28, when the control unit 16 determines that the update information is being displayed in a simplified manner, the control unit 16 causes the corresponding device to display cancellation information indicating that the software update is being cancelled. For example, the control unit 16 causes the cancellation information to be displayed by greying out the updating button A6.

[0073] 29, when the control unit 16 determines that the update information is not being displayed in a simplified manner, it determines the display mode of the update information based on the result of identifying the occupant state, the result of identifying the vehicle state, and the result of identifying the operation input by the occupant, and causes the relevant device to display cancellation information indicating the cancellation of the software update in accordance with the determined display mode. The control unit 16 causes a message A13 to be displayed indicating that the software update has been cancelled, stating "Software update has been cancelled. To resume, press the 'Resume' button."

[0074] (3) Processing for displaying update information when the vehicle power supply is off (see Figs. 30 to 31) Here, the processing for determining a display request for update information when the vehicle power supply is off and the processing for determining whether the vehicle power supply is off during software update will be described in order.

[0075] (3-1) Display request determination process for updated information when the vehicle power is off The control unit 16 performs the display request determination process for update information when the vehicle power supply is off at a predetermined cycle. When the control unit 16 starts the display request determination process for update information, it identifies the occupant state based on the occupant state notification signal (S301) and determines whether or not an occupant is present in the vehicle (S302). When the control unit 16 determines that an occupant is present in the vehicle (S302: YES), it ends the display request determination process for update information when the vehicle power supply is off.

[0076] When the control unit 16 determines that there is no occupant in the vehicle, that is, when it determines that there is no occupant in the vehicle (S302: NO), it identifies the operation input of the occupant based on the operation input detection signal (S303), and determines whether or not an operation input indicating a display request for update information has occurred (S304).When it determines that an operation input indicating a display request for update information has not occurred (S304: NO), it ends the display request determination process for update information when the vehicle power is off.

[0077] The control unit 16 determines that an operation input indicating a display request for the update information has occurred (S304: YES), and determines the display mode of the update information based on the identification result of the occupant state and the identification result of the operation input of the occupant (S305). The control unit 16 causes the corresponding device to display the update information according to the determined display mode (S306), and ends the display request determination process for the update information when the vehicle power is off.

[0078] (3-2) Vehicle power off detection process during software update The control unit 16 performs the vehicle power off determination process during software update at a predetermined cycle. When the control unit 16 starts the vehicle power off determination process during software update, it determines whether or not the software is being updated (S311). When the control unit 16 determines that the software is not being updated (S311: NO), it ends the vehicle power off determination process during software update.

[0079] When the control unit 16 determines that the software is being updated (S311: YES), it identifies the vehicle state based on the vehicle state notification signal (S312) and determines whether the vehicle power is off (S313). When the control unit 16 determines that the vehicle power is not off (S313: NO), it ends the vehicle power off determination process during the software update.

[0080] When the control unit 16 determines that the vehicle power supply is off (S313: YES), it continues to display the update information (S314) and ends the vehicle power supply off determination process during the software update.

[0081] The above has been an example of a configuration in which the update information acquisition unit 16a, the occupant state identification unit 16b, the vehicle state identification unit 16c, the operation input identification unit 16d, and the display control unit 16e are arranged in the HCU 7, but the functions of each of the units 16a to 16e may be distributed and arranged in separate devices. For example, an ECU for identifying the occupant state, an ECU for identifying the vehicle state, and an ECU for identifying the operation input of the occupant may be arranged separately, and each of these ECUs may transmit the identification results to the HCU 7. Also, a configuration in which the functions of each of the units 16a to 16e are arranged in the CGW 5 may be used.

[0082] According to the present embodiment described above, the following advantageous effects can be obtained. In the HCU 7, the display mode of the update information is determined based on the results of identifying the occupant status and the vehicle status, and the update information is displayed according to the determined display mode. Instead of displaying the update information in a uniform display mode, the display mode of the update information is determined according to the occupant status and the vehicle status, and the update information related to the software update can be displayed appropriately according to the scene.

[0083] For example, when displaying update information while the vehicle is traveling, displaying the update information in a detailed display mode may attract the driver's attention, but by reducing the amount of information and displaying the update information in a simple display mode, it is possible to avoid attracting the driver's attention.For example, when displaying update information while the vehicle is parked, displaying the update information in a detailed display mode with a large amount of information may unnecessarily consume power from the vehicle battery, but by displaying the update information in a simple display mode, it is possible to avoid unnecessarily consuming power from the vehicle battery.

[0084] The progress of the software update is displayed as the update information. For example, in the download phase, information indicating the start of download, information indicating that the download is in progress, information such as a percentage of the amount of data that has been downloaded compared to the amount of data to be downloaded as a download progress, information notifying the reason for the interruption if the download was interrupted for some reason, information indicating the completion of the download, etc. can be appropriately displayed.

[0085] Functions that are subject to usage restrictions during a software update are displayed as update information. For example, if software related to driving control is being updated, functions that are subject to usage restrictions related to driving control can be displayed. In this case, functions that are subject to usage restrictions during a software update can be displayed as icons, making it possible to easily display the functions that are subject to usage restrictions.

[0086] The vehicle state is specified as being either running, stopped or parked, and the display mode of the update information is determined based on whether the vehicle is running, stopped or parked. The display mode of the update information can be appropriately determined depending on whether the vehicle is running, stopped or parked, and the update information can be appropriately displayed depending on whether the vehicle is running, stopped or parked.

[0087] As the vehicle state, whether the vehicle is being driven manually or automatically is specified, and the display mode of the update information is determined based on whether the vehicle is being driven manually or automatically. The display mode of the update information can be appropriately determined depending on whether the vehicle is being driven manually or automatically, and the update information can be appropriately displayed depending on whether the vehicle is being driven manually or automatically.

[0088] The display mode of the update information is determined to be one of a plurality of display devices. By selecting an appropriate display device from a plurality of display devices having different layout positions and display sizes, the update information can be appropriately displayed.

[0089] The amount of information to be displayed is determined as the display mode of the update information, so that the update information can be displayed with an appropriate amount of information.

[0090] In addition to the claims, the present disclosure also includes the following inventions. [1] An update information notification device (7) that notifies update information related to software update when software of an electronic control device to be updated is updated by update software acquired from a distribution device from a notification device, an update information acquisition unit (16a) for acquiring the update information; an occupant state specifying unit (16b) for specifying an occupant state indicating a state of an occupant; a vehicle state specification unit (16c) for specifying a vehicle state indicating a state of the vehicle; a notification control unit (16e) that determines a notification mode of the update information and causes the notification device to notify the update information in accordance with the determined notification mode; The notification control unit is an update information notification device that determines a notification mode of the update information based on the identification result by the occupant state identification unit and the identification result by the vehicle state identification unit.

[0091] [2] The update information notification device according to [1], wherein the notification control unit causes the notification device to notify a progress status of a software update as the update information.

[0092] [3] The update information notification device according to [1] or [2], wherein the notification control unit notifies, from the notification device, functions that are subject to usage restrictions during a software update, as the update information.

[0093] [4] The update information notification device according to [3], wherein the notification control unit causes the notification device to notify, as the update information, of functions that are subject to usage restrictions during a software update by displaying icons.

[0094] [5] The vehicle state identification unit identifies, as the vehicle state, whether the vehicle is moving, stopped, or parked; The update information notification device according to any one of claims [1] to [4], wherein the notification control unit determines the notification mode of the update information based on whether the vehicle is moving, stopped, or parked as a result of the identification by the vehicle state identification unit.

[0095] [6] The vehicle state identification unit identifies, as the vehicle state, whether the vehicle is being driven manually or automatically, The update information notification device according to any one of claims [1] to [5], wherein the notification control unit determines the notification mode of the update information based on whether the vehicle is being driven manually or automatically as a result of the determination by the vehicle state determination unit.

[0096] [7] The update information notification device according to any one of [1] to [6], wherein the notification control unit determines one of the plurality of notification devices as a notification mode of the update information.

[0097] [8] The update information notification device according to any one of [1] to [7], wherein the notification control unit determines an amount of notification information as a notification mode of the update information.

[0098] [9] The update information notification device according to any one of claims [1] to [8], wherein the notification control unit determines the notification mode of the update information when the vehicle state identification unit identifies that the vehicle is moving to be less than the amount of notification information when the vehicle state identification unit identifies that the vehicle is stopped.

[0099]

[10] The notification control unit determines, when the occupant status identification unit identifies that there are multiple occupants, to use multiple notification devices as the notification mode of the update information.

[0100] Although the present disclosure has been described based on the embodiment, it is understood that the present disclosure is not limited to the embodiment or structure. The present disclosure also includes various modifications and modifications within the equivalent range. In addition, various combinations and forms, as well as other combinations and forms including only one element, more than one element, or less than one element, are also within the scope and concept of the present disclosure.

[0101] The control unit and the method described in the present disclosure may be realized by a special-purpose computer provided by configuring a processor and a memory programmed to execute one or more functions embodied in a computer program. Alternatively, the control unit and the method described in the present disclosure may be realized by a special-purpose computer provided by configuring a processor with one or more dedicated hardware logic circuits. Alternatively, the control unit and the method described in the present disclosure may be realized by one or more special-purpose computers configured by a combination of a processor and a memory programmed to execute one or more functions and a processor configured with one or more hardware logic circuits. Also, the computer program may be stored in a computer-readable non-transitory tangible recording medium as instructions executed by a computer. [Explanation of symbols]

[0102] In the drawings, 1 is a software update system, 2 is a vehicle system, 3 is a server (distribution device), 7 is an HCU (update information notification device), 6 is an ECU (electronic control unit), 10 is a reprogramming tool (distribution device), 11 is a CID (notification device), 12 is a meter device (notification device), 13 is a HUD (notification device), 14 is a mobile information terminal (notification device), 16 is a control unit, 16a is an update information acquisition unit, 16b is an occupant status identification unit, 16c is a vehicle status identification unit, 16d is an operation input identification unit, and 16e is a display control unit (notification control unit).

Claims

1. An update information notification device (7) that notifies update information related to software updates when software of an electronic control device to be updated is updated by update software acquired from a distribution device from a notification device, an update information acquisition unit (16a) for acquiring the update information; an occupant state specifying unit (16b) for specifying an occupant state indicating a state of an occupant; a vehicle state specification unit (16c) for specifying a vehicle state indicating a state of the vehicle; a notification control unit (16e) that determines a notification mode of the update information and causes the notification device to notify the update information in accordance with the determined notification mode; The notification control unit is an update information notification device that determines the notification mode of the update information based on a case classified by a combination of the occupant status and the vehicle status, based on the identification result by the occupant status identification unit and the identification result by the vehicle status identification unit.

2. 2. The update information notification device according to claim 1, wherein the notification control unit causes the notification device to notify a progress status of a software update as the update information.

3. 2. The update information notification device according to claim 1, wherein the notification control unit causes the notification device to notify, as the update information, of functions that are subject to usage restrictions during software update.

4. 4. The update information notification device according to claim 3, wherein the notification control unit causes the notification device to notify, as the update information, of functions that are subject to usage restrictions during software update by displaying icons.

5. The vehicle state identification unit identifies, as the vehicle state, whether the vehicle is moving, stopped, or parked; 2. The update information notification device according to claim 1, wherein the notification control unit determines a notification mode of the update information based on whether the vehicle is moving, stopped, or parked as a result of the identification by the vehicle state identification unit.

6. The vehicle state identification unit identifies, as the vehicle state, whether the vehicle is being driven manually or automatically, 2. The update information notification device according to claim 1, wherein the notification control unit determines a notification mode of the update information based on whether the vehicle is being driven manually or automatically as a result of the identification by the vehicle state identification unit.

7. The update information notification device according to claim 1 , wherein the notification control unit determines one of a plurality of the notification devices as a notification mode of the update information.

8. 2. The update information notifying device according to claim 1, wherein the notification control unit determines an amount of notification information as a notification mode of the update information.

9. 2. The update information notification device according to claim 1, wherein the notification control unit determines a notification mode of the update information when the vehicle state identification unit identifies that the vehicle is traveling to be a mode in which the amount of notification information is smaller than a mode in which the vehicle state identification unit identifies that the vehicle is stopped.

10. The update information notification device according to claim 1 , wherein the notification control unit determines a plurality of the notification devices as a notification mode of the update information when the occupant status identification unit identifies that there are a plurality of occupants.

11. A notification device (11 to 14) that notifies update information regarding software update when software of an electronic control device to be updated is updated by update software acquired from a distribution device; An update information notification device (7) that notifies the update information from the notification device, The update information notification device, an update information acquisition unit (16a) for acquiring the update information; an occupant state specification unit (16b) for specifying an occupant state indicating a state of an occupant; a vehicle state specification unit (16c) for specifying a vehicle state indicating a state of the vehicle; a notification control unit (16e) that determines a notification mode of the update information and causes the notification device to notify the update information in accordance with the determined notification mode; The notification control unit determines the notification mode of the update information based on a case classified by a combination of the occupant status and the vehicle status, based on the identification result by the occupant status identification unit and the identification result by the vehicle status identification unit.

12. A control unit (16) of an update information notification device (7) that notifies update information related to software update when software of an electronic control device to be updated is updated by update software acquired from a distribution device from a notification device, an update information acquisition step for acquiring the update information; an occupant state identification step of identifying an occupant state indicative of a state of an occupant; a vehicle state identification step of identifying a vehicle state indicative of a state of the vehicle; a notification mode determination step of determining a notification mode of the update information based on a case classified by a combination of the occupant state and the vehicle state, the combination being determined by the identification result of the occupant state identification step and the identification result of the vehicle state identification step; a notification control procedure for causing the notification device to notify the update information in accordance with the notification mode determined by the notification mode determination procedure; and an update information notification program for executing the notification control procedure.

Images