Control device, and vehicle

Abstract

To prohibit updating of a driving support function during traveling.SOLUTION: A control device of a vehicle with a driving support function comprises: a communication unit for communicating with a server; a controlling unit for controlling a vehicle on the basis of a validated driving support function; and a detection unit for detecting a traveling state of a vehicle. When the communication unit receives update information for invalidating the driving support function from the server, during traveling of a vehicle, the controlling unit prohibits invalidation of the validated driving support function.SELECTED DRAWING: Figure 9

Description

[Technical Field]

[0001] The present invention relates to a control device and a vehicle. [Background technology]

[0002] In recent years, efforts to provide access to sustainable transportation systems that take into consideration vulnerable transport participants have been gaining momentum. Toward this goal, we are focusing on research and development into driver assistance technologies to further improve road safety and convenience. A business model is being considered that allows users to purchase desired vehicle functions (e.g., driver assistance functions) after purchasing a vehicle through over-the-air (OTA) updates, and then updates the vehicle to enable the purchased functions. These vehicle functions can be enabled or disabled by updates, for example, after a trial period has elapsed. Therefore, a server could manage information linking user information with the enabled / disabled status of vehicle functions. When the enabled / disabled status is updated, the server could send the updated information to the vehicle, enabling or disabling the vehicle's functions. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2022-57228 Summary of the Invention [Problem to be solved by the invention]

[0004] However, after the vehicle starts driving, if the trial period expires and the enable / disable information managed by the server is switched from enabled to disabled, update information that disables the driving assistance function is sent to the vehicle, and if the driving assistance function is immediately disabled while driving in accordance with that update information, it may not be desirable.

[0005] In order to solve the above-mentioned problems, the present invention aims to provide a control technology that can prohibit updating of driving assistance functions while the vehicle is in motion, thereby contributing to the development of sustainable transportation systems. [Means for solving the problem]

[0006] A control device according to one aspect of the present invention is a control device for a vehicle having a driving assistance function, comprising: a communication unit that communicates with a server; a control unit that controls the vehicle based on the enabled driving assistance function; a detection unit that detects the running state of the vehicle, When the communication unit receives update information to disable the driving assistance function from the server while the vehicle is traveling, The control unit prohibits the enabled driving assistance function from being disabled. [Effects of the Invention]

[0007] According to the present invention, it is possible to prohibit updating of driving assistance functions while the vehicle is traveling. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram showing the basic configuration of a vehicle control system. [Figure 2] FIG. 1 is a block diagram showing the basic configuration of an information terminal device. [Figure 3A] FIG. 2 is a block diagram showing the basic configuration of a server. [Figure 3B] FIG. 2 is a diagram illustrating various applications stored in a server. [Figure 4] FIG. 1 is a block diagram of a vehicle and a control device according to an embodiment. [Figure 5] FIG. 4 is a diagram showing state transitions in a driving assistance function. [Figure 6] FIG. 2 is a block diagram showing the basic configuration of a control device. [Figure 7] FIG. 3 is a diagram illustrating various applications stored in a storage unit. [Figure 8]FIG. 2 is a diagram illustrating the processing flow of the control device when starting up the vehicle V. [Figure 9] FIG. 2 is a diagram illustrating the flow of processing by the control device when the vehicle V is traveling. [Figure 10] FIG. 2 is a diagram illustrating the flow of processing by the control device when the vehicle V is traveling. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, the embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the invention according to the claims, and not all combinations of features described in the embodiments are necessarily essential to the invention. Two or more of the features described in the embodiments may be arbitrarily combined. Furthermore, the same reference numerals are used for the same or similar components, and redundant explanations will be omitted.

[0010] (Vehicle control system configuration) FIG. 1 is a diagram illustrating the basic configuration of a vehicle control system STM, which includes a vehicle V, an information terminal device TM, and a server SV. The information terminal device TM is capable of displaying (providing) content for purchasing vehicle functions for the vehicle V on a display unit. The server SV is capable of communicating with the vehicle V and the information terminal device TM, and stores information about the vehicle V and the user in an internal information storage unit (SV1 in FIG. 3A). The information storage unit SV1 of the server SV may be arranged as a storage device on a network (cloud) NET.

[0011] (Configuration of information terminal device TM) The information terminal device TM can be configured as, for example, a mobile terminal (tablet PC, smartphone, etc.) carried by a user, or an information terminal installed at a base (dealer) where the vehicle V is sold or maintained.

[0012] FIG. 2 is a block diagram showing the basic configuration of the information terminal device TM.

[0013] The display control unit TM1 can also display on the display unit content for purchasing vehicle functions (various functions related to vehicle control) of the vehicle V, and can display on the display unit of the information terminal device TM content that explains the vehicle functions and provides instructions on how to operate them. By viewing instructions (tutorials) that explain the vehicle functions provided by the content, the user can experience explanations of the various vehicle functions of the vehicle V and how to operate them.

[0014] The display control unit TM1 can display an operation input unit (icon) on the display unit for inputting instructions to purchase a vehicle function or to experience (try out) the vehicle function for free, and the user can purchase the vehicle function or experience the vehicle function for free for a certain period of time by inputting instructions from the operation input unit (icon). The communication unit TM2 transmits the instructions input from the operation input unit (icon) to the server SV.

[0015] The information terminal device TM may include an image capture processing unit TM3 and an image capture unit TM5 as functions for authenticating a user. The image capture unit TM5 (for example, an internal camera) captures an image of the user when the user inputs an instruction from the operation input unit (icon), and the image capture processing unit TM3 processes the image captured by the image capture unit TM5. The image capture processing unit TM3 can obtain image information of the user (for example, a facial image) by processing the image captured by the image capture unit TM5. The image information of the user is stored in the storage unit TM4.

[0016] When the server SV requests image information of the user, the communication unit TM2 can transmit the image information of the user stored in the storage unit TM4 to the server SV. Furthermore, when transmitting an instruction input from the operation input unit (icon) to the server SV, the communication unit TM2 may also transmit the image information of the user together with the instruction.

[0017] The information terminal device TM can be configured as a user's terminal device (tablet PC, smartphone, etc.) or a terminal device installed at a base (dealer) where the vehicle V is sold or maintained.

[0018] A user can purchase functions, for example, when purchasing a vehicle (when purchasing a new or used vehicle), or after purchasing a vehicle. For example, the purchase format may be a lump-sum purchase of vehicle functions, or a subscription format for a predetermined period of time. A trial purchase is also possible, allowing users to experience vehicle functions for free for a certain period of time. A user can select a purchase format and input instructions by operating the operation input unit (icon). The communication unit TM2 transmits the input purchase instruction to the server SV. The communication unit TM2 transmits identification information for identifying the purchase instruction (lump-sum, free trial, subscription format, etc.) to the server SV.

[0019] The user can also issue an instruction to cancel the vehicle function by operating the operation input unit (icon), and the communication unit TM2 transmits the input cancellation instruction to the server SV.

[0020] (Server SV configuration) 3A is a block diagram showing the basic configuration of the server SV. The server SV has, as its functional components, an information storage unit SV1 that stores information associating the vehicle V with the user, and a function management unit SV2 that enables or disables vehicle functions based on information transmitted from the information terminal device TM.

[0021] The information storage unit SV1 can store log information transmitted from the information terminal device TM and user image information for authentication purposes.

[0022] The function management unit SV2 generates update information for activating the vehicle function based on the purchase instruction sent from the information terminal device TM. In the initial state before the vehicle function is purchased, the vehicle function is disabled, and the vehicle function can be activated based on the update information. The update information for activating the vehicle function includes the period from the start to the end of activation (validity period). The activation period is set differently depending on the purchase format.

[0023] FIG. 3B is a diagram illustrating various applications A to C stored in the function management unit SV2 of the server SV. Applications A to C are applications corresponding to vehicle functions A to C. The update information includes the period from the start to the end of activation (validity period), and the activation period can be set to a different period depending on the user's purchase format. The enabled / disabled status of vehicle functions A to C is managed for each vehicle in which applications A to C are downloaded. The information processing unit SV4 generates update information that changes the enabled status of applications whose validity period has expired to an disabled status, and the communication unit SV3 transmits the generated update information to the vehicle V.

[0024] The communication unit SV3 transmits to the vehicle V the update information generated by the function management unit SV2.

[0025] The information processing unit SV4 of the server SV can perform various information processes based on information acquired from the information terminal device TM and the controller 1 (control device) of the vehicle V. When a vehicle function cancellation instruction is received from the information terminal device TM, it is also possible to authenticate the user by comparing the user image information received together with the cancellation instruction with the user image information stored in the information storage unit SV1.

[0026] When the function management unit SV2 receives a cancellation instruction from an authenticated user, it generates update information to disable an enabled vehicle function, and the communication unit SV3 transmits the update information generated by the function management unit SV2 to the vehicle V. When a cancellation instruction is received from the authenticated user even during the validity period, the function management unit SV2 generates update information to disable the vehicle function, and the communication unit SV3 transmits the update information generated by the function management unit SV2 to the vehicle V.

[0027] (Configuration of vehicle control device) Fig. 4 is a block diagram of a vehicle V and its controller 1 (control device) according to an embodiment. Fig. 4 shows an outline of the vehicle V in a plan view and a side view. The vehicle V in this embodiment is, as an example, a four-wheeled sedan-type passenger car, but the vehicle V is not limited to four-wheeled passenger cars and may be a saddle-type vehicle (motorcycle, motor tricycle) or a large vehicle such as a truck or bus.

[0028] The controller 1 is an electronic circuit that executes control of the vehicle V, including driving assistance. The controller 1 includes a plurality of ECUs (Electronic Control Units). The ECU includes a processor represented by a CPU (Central Processing Unit), a storage unit such as a semiconductor memory, an interface with an external device, etc. The storage unit stores programs executed by the processor and data used by the processor for processing, etc. The interfaces include an input / output interface and a communication interface. Each ECU may include a plurality of processors, a plurality of storage units, and a plurality of interfaces.

[0029] The controller 1 controls the drive (acceleration) of the vehicle V by controlling a power unit (power plant) 2. The power unit 2 is a traveling drive unit that outputs drive force to rotate the drive wheels of the vehicle V, and may include an internal combustion engine, a motor, and an automatic transmission. The motor can be used as a drive source to accelerate the vehicle V, and can also be used as a generator during deceleration, etc. (regenerative braking).

[0030] In this embodiment, the controller 1 controls the output of the internal combustion engine and the motor and changes the gear position of the automatic transmission in response to the driver's operation and vehicle speed detected by the operation detection sensor 2a provided on the accelerator pedal AP and the operation detection sensor 2b provided on the brake pedal BP. The automatic transmission is provided with a rotation speed sensor 2c that detects the rotation speed of the output shaft of the automatic transmission as a sensor that detects the running state of the vehicle V. The vehicle speed of the vehicle V can be calculated from the detection result of the rotation speed sensor 2c.

[0031] The controller 1 controls the braking (deceleration) of the vehicle V by controlling the hydraulic device 3. The driver's braking operation on the brake pedal BP is converted into hydraulic pressure in the brake master cylinder BM and transmitted to the hydraulic device 3. The hydraulic device 3 is an actuator that can control the hydraulic pressure of the hydraulic oil supplied to the brake devices 3a (e.g., disc brake devices) provided on each of the four wheels based on the hydraulic pressure transmitted from the brake master cylinder BM.

[0032] The controller 1 can control the braking of the vehicle V by controlling the driving of the solenoid valves and the like provided in the hydraulic device 3. The controller 1 can also configure an electric servo brake system by controlling the distribution of braking force by the brake device 3a and braking force by regenerative braking of the motor provided in the power unit 2. The controller 1 may also turn on the brake lamps 3b during braking.

[0033] The controller 1 controls the steering of the vehicle V by controlling the electric power steering device 4. The electric power steering device 4 includes a mechanism for steering the front wheels in response to the driver's driving operation (steering operation) with respect to the steering wheel ST. The electric power steering device 4 includes a drive unit 4a including a motor that generates a driving force (sometimes referred to as steering assist torque) for assisting the steering operation or for automatically steering the front wheels, a steering angle sensor 4b, and a torque sensor 4c that detects the steering torque borne by the driver (called steering burden torque, to be distinguished from steering assist torque).

[0034] The controller 1 controls an electric parking brake device 3c provided on the rear wheels. The electric parking brake device 3c has a mechanism for locking the rear wheels. The controller 1 can control the electric parking brake device 3c to lock and unlock the rear wheels.

[0035] The controller 1 controls an information output device 5 that notifies the interior of the vehicle of information. The information output device 5 includes, for example, an information display device 5a that notifies (displays) information to the driver by image and / or an audio output device 5b that notifies the driver by audio. The information display device 5a may be provided, for example, on an instrument panel or a steering wheel ST. The information display device 5a may be a head-up display. The information output device 5 may notify the occupant of information by vibration or light. The controller 1 also receives instruction inputs from the occupant (for example, the driver) via an input device 6. The input device 6 is arranged in a position operable by the driver, and includes, for example, a group of switches 6a through which the driver issues instructions to the vehicle V and / or a turn signal lever 6b that activates a turn signal (blinker).

[0036] The controller 1 recognizes and determines the current position and course (attitude) of the vehicle V. In this embodiment, the vehicle V is provided with a gyro sensor 7a, a GNSS (Global Navigation Satellite System) sensor 7b, and a communication unit 7c. The gyro sensor 7a detects the rotational motion (yaw rate) of the vehicle V. The GNSS sensor 7b detects the current position of the vehicle V. The communication unit 7c wirelessly communicates with a server that provides map information and traffic information to acquire this information. In this embodiment, the controller 1 determines the course of the vehicle V based on the detection results of the gyro sensor 7a and the GNSS sensor 7b, and sequentially acquires high-precision map information related to the course from the server via the communication unit 7c and stores it in a database 7d (storage unit). The vehicle V may also be provided with sensors for detecting the state of the vehicle V, such as a speed sensor that detects the speed of the vehicle V and an acceleration sensor that detects the acceleration of the vehicle V.

[0037] The controller 1 performs driving assistance for the vehicle V based on the detection results of various detection units provided in the vehicle V. The vehicle V is provided with surrounding detection units 8a to 8b, which are external sensors that detect the outside of the vehicle V (surrounding conditions), and interior detection units 9a to 9b, which are interior sensors that detect the conditions inside the vehicle V (the driver's state). The controller 1 is able to grasp the surrounding conditions of the vehicle V based on the detection results of the surrounding detection units 8a to 8b, and perform driving assistance in accordance with the surrounding conditions. Furthermore, the controller 1 is able to determine, based on the detection results of the interior detection units 9a to 9b, whether the driver is performing a predetermined operational obligation imposed on the driver when driving assistance is performed.

[0038] The surroundings detection unit 8a is an imaging device that captures images in front of the vehicle V (hereinafter, sometimes referred to as the front camera 8a), and is attached, for example, to the inside of the passenger compartment of the windshield at the front of the roof of the vehicle V. The controller 1 can extract the contours of targets and lane markings (white lines, etc.) on the road by analyzing the images captured by the front camera 8a.

[0039] The surroundings detection unit 8b is a millimeter wave radar (hereinafter, may be referred to as radar 8b), and uses radio waves to detect targets around the vehicle V, and detect (measure) the distance to the target and the direction (azimuth) of the target relative to the vehicle V. In the example shown in FIG. 4, five radars 8b are provided: one in the center of the front of the vehicle V, one at each of the left and right corners of the front, and one at each of the left and right corners of the rear.

[0040] The surrounding detection unit installed in the vehicle V is not limited to the above configuration, and the number of cameras and the number of radars may be changed, or a lidar (Light Detection and Ranging: LIDAR) may be installed to detect targets around the vehicle V.

[0041] The in-vehicle detection unit 9a is an imaging device that captures images of the interior of the vehicle (hereinafter, sometimes referred to as in-vehicle camera 9a), and is attached, for example, to the inside of the vehicle cabin at the front of the roof of the vehicle interior V. In this embodiment, the in-vehicle camera 9a is a driver monitor camera that captures images of the driver (for example, the driver's eyes and face). The controller 1 can determine the driver's line of sight and facial direction by analyzing the image (image of the driver's face) captured by the in-vehicle camera 9a.

[0042] The in-vehicle detection unit 9b is a grip sensor that detects the driver's grip of the steering wheel ST (hereinafter, may be referred to as grip sensor 9b), and is provided, for example, on at least a part of the steering wheel ST. Note that the torque sensor 4c that detects the driver's steering torque may be used as the in-vehicle detection unit.

[0043] Examples of driving assistance for the vehicle V include acceleration / deceleration assistance, lane keeping assistance, and lane change assistance. The acceleration / deceleration assistance is a driving assistance (ACC: Adaptive Cruise Control) that controls the acceleration / deceleration of the vehicle V within a predetermined vehicle speed while maintaining a distance from a preceding vehicle by controlling the power unit 2 and the hydraulic device 3. The lane keeping assistance is a driving assistance (LKAS: Lane Keeping Assist System) that keeps the vehicle V within the lane by controlling the electric power steering device 4. The lane change assistance is a driving assistance (ALC: Advanced Lane Change, ALCA: Active Lane Change Assist) that changes the driving lane of the vehicle V to an adjacent lane by controlling the electric power steering device 4. The driving assistance performed by the controller 1 may also include a collision mitigation brake, an ABS function, traction control, and / or attitude control of the vehicle V that assists in avoiding a collision with an object on the road (e.g., a pedestrian, another vehicle, or an obstacle) by controlling the hydraulic device 3.

[0044] Driving assistance (acceleration / deceleration assistance, lane keeping assistance, lane change assistance) for the vehicle V is performed in a plurality of modes including a manual driving mode, a normal assistance mode, and an extended assistance mode. Fig. 5 shows driving assistance performed in each of the manual driving mode, the normal driving mode, and the extended driving mode of this embodiment. In the manual driving mode, acceleration / deceleration assistance, lane keeping assistance, and lane change assistance are not performed, and the driver manually drives the vehicle V.

[0045] In manual driving mode, if the driver inputs an instruction to set acceleration / deceleration assist (ACC) via the input device 6 (for example, the switch group 6a), acceleration / deceleration assist is started and the system transitions from manual driving mode to normal assistance mode. In normal assistance mode, lane keeping assist (LKAS) can be executed in addition to acceleration / deceleration assist. Lane keeping assist is started when the driver inputs an instruction to set lane keeping assist via the input device 6 (for example, the switch group 6a) while acceleration / deceleration assist is set. Acceleration / deceleration assist and lane keeping assist are terminated when the driver inputs an instruction to cancel the setting via the input device 6 (for example, the switch group 6a).

[0046] In the normal assistance mode, the driver is required to perform certain actions, such as monitoring the surroundings and gripping the steering wheel. If it is determined based on the detection result of the in-vehicle detection unit 9b that the driver is not performing the certain actions, a notification is sent via the information output device 5 to urge the driver to perform the certain actions.

[0047] When driving on a specific road begins during normal assistance mode, high-precision map information is acquired by the communication unit 7c. If matching between the high-precision map information and the image captured by the front camera 8a is successful, the normal assistance mode automatically transitions to the extended assistance mode. A specific road is a road for which high-precision map information is provided, such as an expressway or a motorway. The high-precision map information includes not only standard information such as the route and location of the specific road, but also information about the detailed shape of the specific road, such as the presence or absence of curves, their curvature, the number of lanes, and the gradient of the specific road. When the normal assistance mode transitions to the extended assistance mode, the information notification device 31 provided on the steering wheel ST notifies the driver that the mode has been transitioned to the extended assistance mode, for example, by changing the light color of the information notification device 31 or by turning the light on or off.

[0048] In the extended assistance mode, acceleration / deceleration assistance (and lane keeping assistance) is performed in cooperation with highly accurate map information. For example, the controller 1 can perform more advanced acceleration / deceleration assistance than in the normal assistance mode, such as slowing down the vehicle V before a curve or before a point where the lane width decreases, or adjusting the speed of the vehicle V according to the curvature of the curve, based on the highly accurate map information. Note that in the extended assistance mode, the driver is also required to perform certain actions, such as monitoring the surroundings and holding the steering wheel, as in the normal assistance mode. If it is determined based on the detection result of the in-vehicle detection unit 9b that the driver is not performing the certain action, a notification is sent via the information output device 5 to urge the driver to perform the certain action.

[0049] Furthermore, in the extended assistance mode, lane change assistance can also be performed. In this embodiment, the lane change assistance includes system-driven lane change assistance (ALC: Advanced Lane Change), which automatically changes lanes based on the judgment of the controller 1, and driver-driven lane change assistance (ALCA: Active Lane Change Assist), which automatically changes lanes in response to an instruction input by the driver. In both the system-driven lane change assistance (ALC) and the driver-driven lane change assistance (ALCA), the driver is required to perform certain actions, such as monitoring the surroundings and holding the steering wheel, when lane change assistance is performed.

[0050] System-driven lane change assist (ALC) is initiated when the driver inputs an instruction to set ALC in the enhanced assistance mode via the input device 6 (e.g., the switch group 6a). While ALC is set, the controller 1 sequentially determines whether a lane change is necessary to arrive at a destination previously set by the driver, based on highly accurate map information (information on lane increases / decreases and branching), and automatically performs a lane change when it is determined that a lane change is necessary. While ALC is set, one or more lane changes can be performed depending on the determination of the controller 1. ALC ends when the destination is reached or when the specific road ends. ALC may also end when the driver inputs an instruction to cancel the setting via the input device 6 (e.g., the switch group 6a).

[0051] Driver-initiated lane change (ALCA) is a single lane change performed in response to a driver's instruction input, and is executed when the driver inputs an instruction to execute ALCA via the input device 6 (for example, the turn signal lever 6b) in the enhanced assistance mode. In ALCA, the driver can input an instruction for the direction of the lane change via the input device 6 (the turn signal lever 6b), and the controller 1 automatically changes the lane to an adjacent lane in the direction instructed by the driver. ALCA can also be executed when system-initiated lane change assistance (ALC) is set.

[0052] (Control device configuration) FIG. 6 is a block diagram showing the basic configuration of the controller 1 (control device). As shown in FIG. 6, detection signals from various sensors are input to the controller 1. A vehicle speed sensor 61 detects the vehicle speed of the vehicle V. A shift position sensor 62 detects the shift position of the vehicle V. A start sensor 63 detects the start or end of start of the vehicle V. The start sensor 63 detects the start or end of start of the vehicle V based on, for example, an ignition on (IG_ON) signal or an ignition off (IG_OFF) signal from the ignition device.

[0053] Note that the various sensors are not limited to the sensors 5 and 6 shown in FIG. 6, and various sensors are provided on the vehicle V, and the controller 1 can generate control signals to control the vehicle V based on the detection signals of the various sensors.

[0054] The communication unit 7c is capable of communicating with the server SV or the information processing terminal TM. In addition, the storage unit 7d stores various applications related to vehicle functions. In the initial state, the vehicle functions are disabled, and when update information is received from the server SV via the communication unit 7c, the vehicle functions are enabled based on the update information. By enabling the vehicle functions, applications corresponding to the vehicle functions can be executed, and driving assistance can be provided in the vehicle V using the applications corresponding to the vehicle functions.

[0055] 7 is a diagram illustrating various applications A to C stored in the storage unit 7d, where applications A to C are applications corresponding to vehicle functions A to C. The update information includes the period from the start to the end of activation (validity period), and the validity period is set when the vehicle function is activated in the vehicle V. The activation period can be set to a different period depending on the user's purchase format.

[0056] (Processing: Before starting the run) 8 is a diagram illustrating the flow of processing by the controller 1 (control device) before the vehicle V starts traveling. In S800, the controller 1 determines whether the vehicle V has started to start or finished starting based on the detection result of the start sensor 63. If the start has finished (S800-NO), the process returns to the determination in S800, and the same process is repeated. In the determination process of S800, if the start has started (S800-YES), the process proceeds to S810.

[0057] In S810, the controller 1 determines whether the vehicle functions A to C set in the memory unit 7d are within their validity periods. If they are outside their validity periods (S810-NO), the controller 1 disables the vehicle functions that are outside their validity periods (S840). The disabled state of the vehicle functions is maintained. On the other hand, if the determination process in S810 determines that the vehicle functions are within their validity periods (S810-YES), the controller 1 enables the vehicle functions that are within their validity periods (S830). The controller 1 becomes able to control the vehicle V based on the enabled vehicle functions.

[0058] (Processing: After starting driving) FIG. 9 is a diagram illustrating the flow of processing by the controller 1 (control device) when the vehicle V is traveling (after it starts traveling). In S900, the vehicle V is traveling. In S910, the controller 1 determines whether or not update information has been received from the server SV while the vehicle V is traveling. If update information has not been received (S910-NO), the controller 1 returns the processing to S900 and repeats the same processing. On the other hand, if update information has been received from the server SV while the vehicle V is traveling (S910-YES) in S910, the processing proceeds to S920.

[0059] In S920, the controller 1 prohibits updating of the vehicle function (updating the enable / disable status). Even if the controller 1 receives update information, the controller 1 maintains the enable / disable status at the time of vehicle startup while the vehicle V is running. In other words, the state in which the function of a specified application is provided by the enablement is maintained while the vehicle V is running.

[0060] In S930, the controller 1 determines whether the vehicle V has stopped running. The controller 1 can make this determination using at least one or a combination of various sensors, such as the vehicle speed sensor 61, the shift position sensor 62, the start sensor 63, and the parking brake sensor 64.

[0061] For example, the controller 1 can determine whether the vehicle V is in a running state or a stopped state based on a detection signal from the vehicle speed sensor 61 detecting a state in which the vehicle speed of the vehicle V has become zero. Alternatively, the controller 1 can determine whether the vehicle V is in a running state or a stopped state based on a detection signal from the shift position sensor 62 detecting a state in which the shift position has been shifted to the parking range (P).

[0062] Alternatively, the controller 1 can determine whether the vehicle V is in a running state or a stopped state based on a detection signal from the start sensor 63 that detects whether the vehicle V is in a running state or a stopped state. Alternatively, the controller 1 can determine whether the vehicle V is in a running state or a stopped state based on a detection signal from the side brake sensor 64 that detects whether the side brake of the vehicle V is operated.

[0063] That is, when at least one of the following states is detected: the vehicle speed has reached zero, the shift position has been shifted to the parking range, the start / stop of the vehicle V has been detected, and the operation of the parking brake has been detected, the controller 1 can determine that the end of traveling of the vehicle V has been detected. Note that the various sensors for determining whether the vehicle V has stopped traveling are not limited to the vehicle speed sensor 61, the shift position sensor 62, the start sensor 63, and the parking brake sensor 64, and it is possible to make the determination using at least one or a combination of the various sensors shown in FIG. 6.

[0064] In the determination process of S930, if the vehicle is not stopped (S930-NO), the process proceeds to S960, where the controller 1 maintains the update prohibition state and returns the process to S930.

[0065] In the determination process of S930, if the vehicle is stopped (S930-YES), the process proceeds to S940, where the controller 1 cancels the prohibition of updating, and the process proceeds to S950.

[0066] In S950, the controller 1 updates the enabled / disabled state of the vehicle function based on the update information received in S910. According to the controller 1 according to the embodiment, it is possible to prohibit updating of the vehicle function while the vehicle is moving.

[0067] (Modified processing) Figure 10 is a diagram showing a modification of the processing in Figure 9, and the processing with the same step numbers as in Figure 9 is the same as the processing in Figure 9. Figure 10 differs from Figure 9 in that S935 is added.

[0068] At S935 in FIG. 10, the controller 1 determines whether a predetermined time has elapsed after determining that the vehicle V has stopped traveling (YES at S930). A temporary determination that the vehicle is in a stopped state may occur due to a slight fluctuation in the signals output from various sensors or a temporary user operation. At S935 in FIG. 10, after determining that the vehicle V has stopped traveling (YES at S930), the controller 1 waits until a predetermined time has elapsed (NO at S935). After the predetermined time has elapsed (YES at S935), the controller 1 proceeds to S940. At S940, the controller 1 cancels the update prohibition. At S950, the controller 1 updates the enabled / disabled state of the vehicle function based on the update information received at S910. After detecting that the vehicle V has stopped traveling, the controller 1 prohibits the disabling of the vehicle function until a predetermined time has elapsed. After the predetermined time has elapsed, the controller 1 cancels the prohibition of the disabling and disables the vehicle function. According to a modified example of the processing, if the vehicle has been stopped for a predetermined period of time, the vehicle can be more reliably determined to be in a stopped state, the prohibition on disabling can be lifted, and the vehicle functions can be disabled.

[0069] (Summary of the embodiment) The above-described embodiments disclose at least the following control device and vehicle having the control device.

[0070] Configuration 1. A control device for a vehicle (V) having a driving assistance function, a communication unit (7c) for communicating with a server (SV); a control unit (1) that controls the vehicle based on the enabled driving assistance function; a detection unit (61 to 64) that detects the running state of the vehicle, When the communication unit (7c) receives update information for disabling the driving assistance function from the server while the vehicle is traveling, The control unit (1) prohibits the enabled driving assistance function from being disabled.

[0071] According to the control device of configuration 1, it is possible to prohibit updating of the driving assistance function while the vehicle is traveling.

[0072] Configuration 2: When the detection units (61 to 64) detect that the vehicle has finished traveling, the control unit (1) cancels the prohibition of disabling and disables the driving assistance function. Configuration 3: The detection units (61 to 64) include a vehicle speed sensor (61) that detects the vehicle speed of the vehicle (V), a shift position sensor (62) that detects the shift position of the vehicle (V), a start sensor (63) that detects the start of starting the vehicle (V) or the start / stop of starting the vehicle (V), and a side brake sensor (64) that detects whether the side brake of the vehicle (V) is in an actuated state; A state in which the vehicle speed has become zero, A state in which the shift position is shifted to the parking range, A state in which a start / stop of the vehicle is detected; When at least one of the states where the operation of the parking brake is detected is detected, the control unit (1) determines that the end of the vehicle's travel has been detected, cancels the prohibition of disabling, and disables the driving assistance function.

[0073] According to the control device of configurations 2 and 3, when the end of vehicle travel is detected, the prohibition on disabling can be lifted, and the driving assistance function can be disabled.

[0074] Configuration 4: After the end of driving of the vehicle is detected, the control unit (1) prohibits disabling of the driving assistance function until a predetermined time has elapsed, and after the predetermined time has elapsed, the control unit (1) cancels the prohibition on disabling and disables the driving assistance function.

[0075] A small fluctuation in the signals output from various sensors or a temporary operation by the user may result in a determination that the vehicle is in a stopped state. According to the control device of configuration 4, if the stopped state continues for a predetermined period of time, the control device can more stably determine that the vehicle is in a stopped state, cancel the prohibition on disabling, and disable the driving assistance function.

[0076] Configuration 5. A vehicle (V) having the control device according to any one of configurations 1 to 4.

[0077] According to the vehicle of configuration 5, it is possible to provide a vehicle having a control device that prohibits updating of the driving assistance function while the vehicle is moving.

[0078] (Other embodiments) The present invention also makes it possible to supply a program that realizes the functions of the above-described embodiments to a system or a control device that constitutes the system via a network or a storage medium, and have one or more processors in the computer of the control device read the program and execute the processing of the control device.

[0079] The invention is not limited to the above-described embodiment, and various modifications and variations are possible within the scope of the gist of the invention. [Explanation of symbols]

[0080] 1: Controller (control device), 7c: Communication unit, 7d: Storage unit, 61: Vehicle speed sensor, 62: Shift position sensor, 63: Start sensor, 64: Side brake sensor

Claims

1. A control device for a vehicle having a driving assistance function, a communication unit that communicates with the server; a control unit that controls the vehicle based on the enabled driving assistance function; a detection unit that detects the running state of the vehicle, When the communication unit receives update information to disable the driving assistance function from the server while the vehicle is traveling, The control device is characterized in that the control unit prohibits the enabled driving assistance function from being disabled.

2. The control device according to claim 1 , wherein the control unit cancels the prohibition of disabling and disables the driving assistance function when the detection unit detects that the vehicle has stopped traveling.

3. the detection unit includes a vehicle speed sensor that detects the vehicle speed of the vehicle, a shift position sensor that detects the shift position of the vehicle, a start sensor that detects the start of start of the vehicle or the start / stop of the vehicle, and a side brake sensor that detects whether the side brake of the vehicle is in an actuated state; A state in which the vehicle speed has become zero, A state in which the shift position is shifted to the parking range, A state in which a start / stop of the vehicle is detected; 3. The control device according to claim 2, wherein when at least one of the following states is detected, the control unit determines that the end of traveling of the vehicle has been detected, cancels the prohibition of disabling, and disables the driving assistance function.

4. 3. The control device according to claim 2, wherein the control unit prohibits disabling of the driving assistance function until a predetermined time has elapsed after the end of driving of the vehicle is detected, and after the predetermined time has elapsed, the control unit cancels the prohibition of disabling and disables the driving assistance function.

5. A vehicle comprising the control device according to any one of claims 1 to 4.

Images