Vehicle control device

Abstract

To provide a vehicle control device that is able to prevent a vehicle power supply from being turned on during an update process of software of an electronic control unit.SOLUTION: A vehicle control device that controls a vehicle power supply, includes: an acquisition unit that acquires input information of an operation switch for transition between on and off states of the vehicle power supply; a reception unit that receives an inhibition request for inhibiting the on state of the vehicle power supply, from one or more electronic control units mounted on a vehicle; and a control unit that controls the on / off state of the vehicle power supply. When there is the inhibition request in the off state of the vehicle power supply, the control unit inhibits the transition of the vehicle power supply to the on state resulting from input of the operation switch.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present disclosure relates to a vehicle control device that controls the power supply of a vehicle.

Background Art

[0002] Patent Document 1 discloses an apparatus for managing software updates of an electronic control unit that controls the operation of devices mounted on a vehicle. In this apparatus, it is described that software updates of the electronic control unit are executed when the vehicle is parked (in a safe place for the vehicle).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] While the software of the electronic control unit is being updated during vehicle parking, if a power-on operation (such as pressing the push-start switch) is performed by a user or the like to start the vehicle system, the system start process will start in a state where the vehicle is not sufficiently prepared. In this case, there is a risk that the software update process performed so far will be wasted, or the time until the software update is completed will become longer than normal.

[0005] The present disclosure has been made in view of the above problems, and an object thereof is to provide a vehicle control device that can prevent the vehicle power supply from being turned on during the software update process of the electronic control unit.

Means for Solving the Problems

[0006] One aspect of the disclosed technology for solving the above problems is a vehicle control device that controls a vehicle power supply, including an acquisition unit that acquires input information of an operation switch for transitioning the on / off state of the vehicle power supply, a reception unit that receives a prohibition request for prohibiting the on state of the vehicle power supply from one or more electronic control units mounted on the vehicle, and a control unit that controls the on / off state of the vehicle power supply. The control unit is a vehicle control device that prohibits the transition of the vehicle power supply to the on state by the input of the operation switch when there is a prohibition request in the off state of the vehicle power supply.

Advantages of the Invention

[0007] According to the vehicle control device of the present disclosure, when there is a prohibition request from an electronic control unit in the off state of the vehicle power supply, the transition of the vehicle power supply to the on state is prohibited even if there is an input of the operation switch. By this process, if the electronic control unit that outputs the prohibition request is in the middle of software update processing, it is possible to prevent the vehicle power supply from turning on during the update.

Brief Description of the Drawings

[0008]

Figure 1

Figure 2

Figure 3

Figure 4

Embodiments for Carrying Out the Invention

[0009] When the vehicle control device of the present disclosure does not want to start the system when receiving an input to turn on the vehicle power supply by an operation switch, it prohibits the transition of the vehicle power supply to the on state. Thereby, it is possible to prevent the vehicle system from starting during the software update processing of the electronic control unit. Hereinafter, an embodiment of the present disclosure will be described in detail with reference to the drawings.

[0010] <Embodiment> [Configuration] FIG. 1 is a functional block diagram of a vehicle control device 10 and its peripheral parts according to an embodiment of the present disclosure. The functional blocks illustrated in FIG. 1 include a vehicle control device 10, an operation switch 20, a vehicle power supply unit 30, and a plurality of electronic control units 40.

[0011] The operation switch 20 is a configuration for receiving operations input by a user such as a driver of the vehicle to the vehicle. Examples of the operation switch 20 include a push-start switch button for changing the on / off state of the vehicle power supply to start or stop the vehicle system.

[0012] The vehicle power supply unit 30 is a configuration for performing operations related to controlling the on / off state of the vehicle power supply based on control (instructions) from the vehicle control device 10. The vehicle power supply unit 30 includes devices and apparatuses such as an electronic control unit (such as an HV-ECU) and relays (such as an IG-P relay, an IG-R relay, an ACC relay, a +BA relay).

[0013] The plurality of electronic control units 40 are various devices mounted on the vehicle. Each electronic control unit 40 includes a processor, a memory, an input / output interface, etc., and realizes a predetermined function by the processor reading and executing software (program) stored in the memory. Among the plurality of electronic control units 40, one or more electronic control units capable of updating software are included. The necessity of software update is determined by an in-vehicle device (not shown) that centrally manages the update instructing the electronic control unit to be updated whether there is an update.

[0014] In a series of processes related to the update of this software, the processes that affect the behavior of the vehicle are carried out when the vehicle power supply is in the off state (IG-OFF) with the vehicle system stopped, such as when the vehicle is parked, from the perspective of vehicle safety. The electronic control unit (specific electronic control unit 40) to be updated in this embodiment outputs a "prohibition request" to the vehicle control device 10 to prohibit the transition of the vehicle power supply from the off state (IG-OFF) to the on state (IG-ON) so that the software update carried out when the vehicle power supply is in the off state (IG-OFF) is not interrupted. Note that the plurality of electronic control units 40 and the vehicle control device 10 are communicably connected via an in-vehicle network 50 such as a CAN (Controller Area Network).

[0015] The vehicle control device 10 is a configuration for controlling the vehicle power supply. This vehicle control device 10 is typically configured as an electronic control unit (such as an extended body ECU) including a processor, a memory, and an input / output interface, etc., and the functions performed by the acquisition unit 11, the reception unit 12, and the control unit 13 described below can be realized by the processor reading and executing the software (program) stored in the memory.

[0016] The acquisition unit 11 acquires the input information of the operation switch 20 for transitioning the on / off state of the vehicle power supply. Examples of the input information include an electrical signal indicating that the button of the operation switch 20 has been pressed or contacted. The acquisition unit 11 determines that there has been an input operation on the operation switch 20 by detecting this electrical signal.

[0017] The reception unit 12 receives a prohibition request from one or more of the plurality of electronic control units 40 that are the targets of software update to prohibit the on state (IG-ON) of the vehicle power supply. This prohibition request may be received from all of the electronic control units 40 that are the targets of software update, or may be received only from the electronic control unit 40 whose update process execution order is the last.

[0018] The control unit 13 performs various controls regarding the on / off state of the vehicle power supply. As one of the characteristic controls executed by the control unit 13 in the present embodiment, when the vehicle power supply is in the off state (IG-OFF) such as during parking, if the reception unit 12 has received a prohibition request from one or more electronic control units 40, even if the acquisition unit 11 newly acquires (detects) the input of the operation switch 20, the control for prohibiting the transition of the vehicle power supply from the current off state (IG-OFF) to the on state (IG-ON) is included. Further, as another one of the characteristic controls executed by the control unit 13 in the present embodiment, for the electronic control unit 40 that continues to issue a prohibition request for an unnecessary period, since an abnormality such as a failure is suspected, the control for releasing the prohibition of the transition to the on state (IG-ON) of the vehicle power supply (permitting the transition of the vehicle power supply to the on state) is included. Hereinafter, these controls and the like executed by the control unit 13 will be described in detail.

[0019] [Control] Next, with further reference to FIGS. 2, 3, and 4, the control performed by the vehicle control device 10 according to an embodiment of the present disclosure will be described.

[0020] FIG. 2 is a flowchart showing the processing procedure of the power supply control executed by the vehicle control device 10 of the present embodiment. The power supply control process illustrated in this FIG. 2 is started when the vehicle power supply becomes in the off state (IG-OFF).

[0021] (Step S201) The control unit 13 of the vehicle control device 10 determines whether or not a predetermined time has elapsed since the vehicle power supply became OFF (IG-OFF). This determination is made to determine that the software update process implemented in the electronic control unit 40 has been completed after the vehicle power supply has become OFF (IG-OFF). Therefore, this predetermined time is set to an arbitrary time longer than the time required until all the software update processes of the electronic control unit 40 are completed after the vehicle power supply has become OFF (IG-OFF). That the vehicle power supply has become OFF (IG-OFF) is determined based on the input information of the operation switch 20 acquired by the acquisition unit 11 and the like.

[0022] Here, the time required until the software update process is completed is, for example, when the download of the software has been completed while the vehicle power supply is ON (IG-ON), the total time of the installation time and the activation time is the "time required until update is completed", and when the installation of the software has been completed while the vehicle power supply is ON (IG-ON), only the activation time is the "time required until update is completed".

[0023] When the control unit 13 determines that a predetermined time has elapsed since the vehicle power supply became OFF (IG-OFF) (step S201, yes), the process proceeds to step S203. On the other hand, when the control unit 13 determines that the predetermined time has not yet elapsed since the vehicle power supply became OFF (IG-OFF) (step S201, no), the process proceeds to step S202.

[0024] (Step S202) The reception unit 12 of the vehicle control device 10 determines whether or not it has received a prohibition request (hereinafter referred to as "power-on prohibition request") from the electronic control unit 40 to prohibit the ON state (IG-ON) of the vehicle power supply. This power-on prohibition request is a request to prioritize software update over vehicle system startup, and is sent from the electronic control unit 40 that has downloaded or installed software update data.

[0025] When the reception unit 12 has received a power-on prohibition request from at least one electronic control unit 40 (step S202, yes), the process proceeds to step S204. On the other hand, when the reception unit 12 has not received a power-on prohibition request from any of the electronic control units 40 (step S202, no), the process proceeds to step S203.

[0026] (Step S203) The control unit 13 of the vehicle control device 10 prohibits the vehicle power supply from being turned on (prohibits power-on). That is, even if there is an input to the operation switch 20 for instructing the system startup from a user or the like, the control unit 13 performs control to maintain the current off state (IG-OFF) without transitioning the vehicle power supply to the on state (IG-ON). Further, the control unit 13 notifies the electronic control unit 40 that sent the power-on prohibition request of the prohibition of the vehicle power-on. By this notification, the electronic control unit 40 that received the notification can complete the software update without worrying about the process being interrupted.

[0027] When the control unit 13 prohibits the vehicle power supply from being turned on (IG-ON), the process proceeds to step S201.

[0028] (Step S204) The control unit 13 of the vehicle control device 10 permits the vehicle power supply to be turned on (permits power-on). If the power-on was prohibited in step S203 above, the control unit 13 releases the prohibition of power-on. That is, in the current off state (IG-OFF) of the vehicle power supply, when there is an input to the operation switch 20 for instructing the system startup from a user or the like, the control unit 13 performs control to permit the transition of the vehicle power supply from the off state (IG-OFF) to the on state (IG-ON).

[0029] Here, when proceeding to this step S204 due to the disappearance of the power-on prohibition request from the electronic control unit 40 in the above step S202 (Case 1), based on the determination that the software update of the electronic control unit 40 has been successfully completed, the vehicle power-on is permitted.

[0030] An example of the timing chart of the power control executed by the vehicle control device 10 in this Case 1 is shown in FIG. 3. As shown in FIG. 3, when the software update is correctly implemented, the power-on is permitted during the period without the power-on prohibition request, and the power-on is prohibited during the period with the power-on prohibition request.

[0031] On the other hand, when proceeding to this step S204 due to the elapse of a predetermined time after the vehicle power becomes OFF (IG-OFF) in the above step S201 (Case 2), based on the determination that some abnormality (including the failure of the software update) has occurred in the electronic control unit 40, the vehicle power-on is permitted. In this case, although the power-on prohibition request continues to be sent from the electronic control unit 40 in which the abnormality has occurred, the control unit 13 discards this power-on prohibition request and permits the vehicle power-on in order to avoid a situation where the vehicle power cannot be turned ON (IG-ON) forever.

[0032] An example of the timing chart of the power control executed by the vehicle control device 10 in this Case 2 is shown in FIG. 4. As shown in FIG. 4, if an abnormality such as incorrect implementation of the software update occurs and the power-on prohibition request does not disappear even after a certain time has elapsed after the vehicle power becomes OFF (IG-OFF), the power-on prohibition is forcibly released and the power-on is permitted. In the case of this Case 2, the occurrence of an abnormality in the electronic control unit 40 may be notified to the user or the like using means such as display or sound.

[0033] When the control unit 13 permits the vehicle power to be turned ON (IG-ON), the process proceeds to step S205.

[0034] (Step S205) The acquisition unit 11 of the vehicle control device 10 determines whether there has been an input operation on the operation switch 20 for transitioning the on / off state of the vehicle power supply from a user or the like. When the acquisition unit 11 determines that there has been an input operation on the operation switch 20, the process proceeds to step S206 (in step S205, yes).

[0035] (Step S206) The control unit 13 of the vehicle control device 10 controls (instructs) the vehicle power supply unit 30 to transition the power supply of the vehicle from the off state (IG-OFF) to the on state (IG-ON). Thereby, the vehicle system is activated. When the power supply of the vehicle is controlled to the on state (IG-ON), this power supply control process ends.

[0036] <Function and Effect> As described above, according to the vehicle control device 10 according to an embodiment of the present disclosure, when there is a power-on prohibition request from the electronic control unit 40 in the off state (IG-OFF) of the vehicle power supply, control is performed to prohibit the transition of the vehicle power supply from the off state (IG-OFF) to the on state (IG-ON) based on the input of the operation switch 20.

[0037] By this control, for example, even if a driver or the like who overlooked "Software Update in Progress" displayed on a screen such as a vehicle information display tries to turn on the vehicle power supply (IG-ON) and performs an input operation on the operation switch 20, the vehicle power supply does not transition to the on state (IG-ON). Thereby, it is possible to avoid starting the system startup process in a state where the vehicle is not sufficiently prepared, and it is possible to surely complete the software update process being executed.

[0038] Also, according to the vehicle control device 10 according to the present embodiment, while prohibiting power-on when the vehicle power supply is in the off state (IG-OFF) and there is a power-on prohibition request, when a predetermined time has elapsed since the vehicle power supply became the off state (IG-OFF), control is performed to forcibly release the power-on prohibition regardless of the presence or absence of the power-on prohibition request and permit power-on (IG-ON) of the vehicle.

[0039] By this control, for example, even when a power-on prohibition request continues to be sent to the vehicle control device 10 due to, for example, the software update process not proceeding correctly in the electronic control unit 40, the vehicle power supply can be turned on (IG-ON) when a predetermined time has elapsed. Thereby, it is possible to avoid a situation where the vehicle power supply can never be turned on (IG-ON).

[0040] As described above, although one embodiment of the present disclosure has been described, the present disclosure can be regarded not only as the vehicle control device described above, but also as a method executed by a vehicle control device including a processor and a memory, a program of the method, a computer-readable non-transitory recording medium storing the program, or a vehicle equipped with the vehicle control device.

Industrial Applicability

[0041] The vehicle control device of the present disclosure can be used in a vehicle equipped with an electronic control unit capable of performing a software update process.

Explanation of Signs

[0042] 10 Vehicle control device 11 Acquisition unit 12 Reception unit 13 Control unit 20 Operation switch 30 Vehicle power supply unit 40 Electronic control unit 50 In-vehicle network

Claims

1. A vehicle control device that controls a vehicle power source, an acquisition unit that acquires input information of an operation switch for transitioning an on / off state of the vehicle power source; a reception unit that receives a prohibition request for prohibiting the vehicle power source from being turned on from one or more electronic control units mounted on the vehicle; A control unit that controls an on / off state of the vehicle power supply, The control unit, when the prohibition request is made while the vehicle power supply is in an off state, prohibits a transition of the vehicle power supply to an on state due to an input from the operation switch.

2. The vehicle control device according to claim 1 , wherein the control unit permits the transition of the vehicle power supply to the on state by an input from the operation switch when a predetermined time has elapsed since the vehicle power supply was transitioned to the off state.

3. The vehicle control device according to claim 2 , wherein the reception unit receives the prohibition request from a specific electronic control unit that is a target for software update, among the one or more electronic control units.

4. The vehicle control device according to claim 3 , wherein, when the control unit prohibits the transition of the vehicle power supply to the on state, the control unit notifies the specific electronic control unit that the transition of the vehicle power supply to the on state has been prohibited.

5. The vehicle control device according to claim 3 , wherein the predetermined time is set to be equal to or longer than a time required to complete the software update in the specific electronic control unit.

Images