Vehicle

Abstract

To execute reprogramming under conditions that require the use of an electronic device.SOLUTION: A target unit memory includes a first memory region that stores an application for operating a target unit. A central unit memory includes a second memory region for temporarily storing at least a part of the application stored in the first memory region. A target unit processors performs update processing which causes the second memory region to store at least a part of the application stored in the first memory region, disables the at least a part of the application stored in the first memory region, and writes an updated application to the first memory region based on update data transferred from a communication unit. A central unit processor operates at least a part of functions of the target unit using the application stored in the second memory region, at least during a period from the start to the completion of the update processing.SELECTED DRAWING: Figure 8

Description

[Technical Field]

[0001] The present invention relates to a vehicle. [Background technology]

[0002] In recent years, techniques have been proposed for updating programs in various electronic devices installed in a vehicle (hereinafter also referred to as "reprogramming").

[0003] For example, Patent Document 1 discloses a vehicle that can be reprogrammed using update data received via wireless communication. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Publication No. 2019-064424 Summary of the Invention [Problem to be solved by the invention]

[0005] Conventionally, the electronic device being reprogrammed cannot be used while reprogramming is in progress, which has led to the problem that it is not possible to reprogram various electronic devices related to the vehicle's operation in situations where the electronic devices need to be used, such as while the vehicle is running.

[0006] The present invention aims to make it possible to reprogram an electronic device in a situation where the electronic device needs to be used. [Means for solving the problem]

[0007] In order to solve the above problem, a vehicle according to one embodiment of the present invention comprises: a target unit mounted on the vehicle, the target unit having one or more target unit processors and one or more target unit memories coupled to the target unit processors; a communication unit provided in the vehicle, the communication unit having one or more communication unit processors and one or more communication unit memories connected to the communication unit processors; a central unit provided in the vehicle, the central unit having one or more central unit processors and one or more central unit memories connected to the central unit processors; Equipped with The target unit memory includes: a first storage area in which an application for operating the target unit is stored; The central unit memory includes: a second storage area for temporarily storing at least a part of the application stored in the first storage area; The communication unit processor transferring update data acquired from outside the vehicle via wireless communication to the target unit via the central unit; Perform a process including The target unit processor: storing at least a part of the application stored in the first storage area in the second storage area; Disabling at least a portion of the application stored in the first storage area; executing an update process to write the updated application into the first storage area based on the update data transferred from the communication unit; Perform a process including The central unit processor Operate at least a part of the functions of the target unit by the application stored in the second storage area at least during the period from the start to the end of the execution of the update process; Execute the process including. [Effects of the Invention]

[0008] According to the present invention, it is possible to reprogram an electronic device while the electronic device is in use. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a functional block diagram for explaining a vehicle according to an embodiment of the present invention. [Figure 2] FIG. 2 is a first conceptual diagram according to one embodiment of the present invention. [Figure 3] FIG. 3 is a second conceptual diagram according to one embodiment of the present invention. [Figure 4] FIG. 4 is a diagram illustrating an example of the save target designation information according to an embodiment of the present invention. [Figure 5] FIG. 5 is a diagram illustrating an example of a function executed by an application according to an embodiment of the present invention. [Figure 6] FIG. 6 is a third conceptual diagram according to one embodiment of the present invention. [Figure 7] FIG. 7 is a fourth conceptual diagram according to one embodiment of the present invention. [Figure 8] FIG. 8 is a first sequence diagram illustrating the flow of processing according to one embodiment of the present invention. [Figure 9] FIG. 9 is a second sequence diagram illustrating the flow of processing according to one embodiment of the present invention. DETAILED DESCRIPTION OF THE INVENTION

[0010] Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings. Specific dimensions, materials, numerical values, etc. shown in the embodiments are merely examples for facilitating understanding of the invention and do not limit the present invention unless otherwise specified. In this specification and drawings, elements having substantially the same functions and configurations are designated by the same reference numerals to avoid redundant explanation, and elements not directly related to the present invention are not shown.

[0011] FIG. 1 is a functional block diagram illustrating a vehicle 100 according to this embodiment. As shown in FIG. 1, the vehicle 100 includes a communication unit 120, a central unit 140, a first target unit 160, a second target unit 170, a first functional unit 180, and a second functional unit 190. The vehicle 100 is, for example, a hybrid vehicle equipped with an engine and a motor as driving sources. However, the present invention can be applied to various vehicle types, such as gasoline-powered vehicles, electric vehicles (EVs), plug-in hybrid vehicles (PHEVs), and non-plug-in hybrid vehicles (hybrid vehicles).

[0012] 1, the communication unit 120 includes one or more processors 121 and one or more memories 122 connected to the processors 121. The processor 121 includes, for example, a CPU (Central Processing Unit). The memory 122 includes a ROM (Read Only Memory) in which programs and the like are stored, and a RAM (Random Access Memory) as a work area. The processor 121 of the communication unit 120 works in cooperation with the programs stored in the memory 122 to wirelessly communicate with the external device 200 via the communication network N.

[0013] The external device 200 has a function of distributing update information necessary for updating programs for controlling various electronic devices mounted on the vehicle 100 (hereinafter, sometimes referred to as "reprogramming"). The update information includes, for example, information specifying a target unit to be reprogrammed and information on an update program used in the reprogramming. Note that in the present embodiment, the case where two types of target units, the first target unit 160 and the second target unit 170, are provided as target units to be reprogrammed has been described, but this is not limited thereto. For example, the number of target units may be one or three or more. These target units may be, for example, an engine control unit that controls the engine, a motor control unit that controls the motor, a battery control unit that controls the battery, a wiper control unit that controls the wipers, a light control unit that controls the lights, a speedometer control unit that displays the speedometer, a car navigation system control unit that controls the car navigation system, an autonomous driving control unit that controls autonomous driving of the vehicle 100, etc.

[0014] The communication network N is a wireless communication network for connecting the vehicle 100 and the external device 200 so that they can communicate with each other. The communication network N is configured with various networks, such as a satellite communication network, a mobile phone network, the Internet, a local area network (LAN), a wide area network (WAN), and other dedicated line networks. In order to connect the vehicle 100 and the external device 200 so that they can communicate with each other wirelessly, at least a part of the communication network N includes a wireless network. However, the communication network N may also include a wired network as part of it. Furthermore, the vehicle 100 and the external device 200 may be connected to each other so that they can communicate with each other directly without using the communication network N, by using short-range wireless communication such as Bluetooth.

[0015] 1, the central unit 140 includes one or more processors 141 and one or more memories 142 connected to the processor 141. The processor 141 includes, for example, a CPU. The memory 142 includes a ROM in which programs and the like are stored and a RAM as a work area. The processor 141 of the central unit 140 functions as a so-called gateway that relays communications between various electronic devices mounted on the vehicle 100 in cooperation with the programs stored in the memory 142. Specifically, for example, the processor 141 of the central unit 140 has a function of relaying communications between the communication unit 120 and various target units. The processor 141 of the central unit 140 also has a function of relaying communications between various target units.

[0016] 1, the first target unit 160 includes one or more processors 161 and one or more memories 162 connected to the processors 161. The second target unit 170 includes one or more processors 171 and one or more memories 172 connected to the processors 171. The processors 161 and 171 include, for example, a CPU. The memories 162 and 172 include a ROM in which programs and the like are stored, and a RAM as a work area.

[0017] The processor 161 of the first target unit 160 has a function of controlling various electronic devices mounted on the vehicle 100 in cooperation with a program stored in the memory 162. Specifically, the processor 161 of the first target unit 160 controls, for example, a first functional unit 180 connected to the first target unit 160. Similarly, the processor 171 of the second target unit 170 has a function of controlling various electronic devices mounted on the vehicle 100 in cooperation with a program stored in the memory 172. Specifically, the processor 171 of the second target unit 170 controls, for example, a second functional unit 190 connected to the second target unit 170.

[0018] The following describes a case where reprogramming is performed on the first target unit 160. FIG. 2 is a first conceptual diagram according to one embodiment of the present invention. FIG. 3 is a second conceptual diagram according to one embodiment of the present invention. As shown in FIG. 2, the memory 142 of the central unit 140 is provided with a software storage area 142a and a backup storage area 142b. The software storage area 142a stores data for various software required for the operation of the central unit 140 itself. Specifically, as shown in FIG. 2, the software storage area 142a stores a central unit application 143, central unit middleware 144, and central unit firmware 145. Note that while FIG. 2 illustrates a case where one central unit application 143 is stored in the software storage area 142a, in reality, multiple central unit applications 143 are stored in the software storage area 142a.

[0019] 2, the memory 162 of the first target unit 160 is provided with a software storage area 162a and an update information storage area 162b. The software storage area 162a stores data for various software required for the operation of the first target unit 160 itself. Specifically, as shown in FIG. 2, the software storage area 162a stores a first target unit application 163, first target unit middleware 164, and first target unit firmware 165. Note that while FIG. 2 illustrates a case in which one first target unit application 163 is stored in the software storage area 142a, in reality, multiple first target unit applications 163 are stored in the software storage area 162a.

[0020] An application is specialized software for realizing various functions. Firmware is software for directly controlling various hardware components on an electronic device. Middleware is software that acts as an intermediate between an application and firmware. In this embodiment, applications are the subject of reprogramming, while middleware and firmware are excluded from the subject of reprogramming.

[0021] For example, when controlling hardware such as windshield wipers or lights, the application executes calculations to derive various pieces of information necessary for controlling the hardware. Based on the various pieces of information derived by the application, the middleware requests the firmware to execute the hardware control. The firmware accesses the hardware components and controls input / output, and actually operates the hardware. In other words, the access to the hardware components and the input / output control are executed by the firmware, not the application or middleware.

[0022] Before reprogramming is performed, the software storage area 162a stores the pre-update first target unit application 163, as shown in Fig. 2. Then, as shown in Fig. 3, the first target unit application 163a, which is at least a part or all of the pre-update first target unit application 163, is saved to the save storage area 142b. Saving the application essentially means copying or transferring at least a part or all of the pre-update first target unit application 163 to the save storage area 142b.

[0023] 4 is a diagram illustrating an example of the evacuation target designation information according to one embodiment of the present invention. The evacuation target designation information is stored in the memory 142 of the central unit 140, and evacuation target designation information corresponding to each of all target units mounted on the vehicle 100 is provided. However, when reprogramming is performed, the evacuation target designation information for the target units to be reprogrammed may be downloaded from the external device 200.

[0024] FIG. 4 shows the save target designation information corresponding to the first target unit 160. As shown in FIG. 4, the save target designation information includes information indicating whether or not to designate an application type for each of all application types provided in the target unit to be reprogrammed as a save target. FIG. 4 shows a case in which the first target unit application 163 includes five applications, application A to application E, and only application A is set as a save target. However, the number of applications set as a save target is not limited to this. For example, two or more applications may be set as a save target. Furthermore, all applications provided in the target unit to be reprogrammed may be set as a save target.

[0025] 3, when the first target unit application 163a is saved to the save memory area 142b, the pre-update first target unit application 163 stored in the software memory area 162a is disabled. At this time, the first target unit middleware 164 and the first target unit firmware 165 are not disabled but remain enabled. Note that the pre-update first target unit application 163 may be disabled by clearing various data related to the pre-update first target unit application 163, for example, by overwriting it with a predetermined value such as "0." Alternatively, the pre-update first target unit application 163 may be disabled by making the pre-update first target unit application 163 unusable without clearing various data related to the pre-update first target unit application 163.

[0026] Then, the first target unit application 163a saved in the save memory area 142b is enabled. When the first target unit application 163a is enabled, the central unit 140 can make the first target unit application 163a function. In this case, the first target unit application 163a functioning by the central unit 140 cooperates with the first target unit middleware 164 and the first target unit firmware 165 functioning by the first target unit 160 to operate the first functional unit 180. However, the first target unit application 163a functioning by the central unit 140, the central unit middleware 144, and the central unit firmware 145 may cooperate to issue a predetermined instruction to the first target unit middleware 164 and the first target unit firmware 165 functioning by the first target unit 160 to operate the first functional unit 180.

[0027] FIG. 5 is a diagram illustrating an example of a function executed by an application according to an embodiment of the present invention. For example, suppose that the first target unit 160 controls switching of the display mode of the speedometer. In this case, for example, suppose that application A displays the speedometer in an analog mode as shown in FIG. 5A. Also, suppose that application B displays the speedometer in a digital mode as shown in FIG. 5B. Also, suppose that applications C to E display the speedometer in other display modes. In this case, only application A, which is responsible for the function of displaying the speedometer in the analog mode as shown in FIG. 5A, is saved to the save memory area 142b. In other words, the central unit 140 takes over at least a part of the function of controlling the applications of the first target unit 160.

[0028] Specifically, various calculation processes are executed in the first target unit application 163a of the central unit 140, and various information derived by the calculation processes is output to the first target unit middleware 164. The first target unit middleware 164 then requests the first target unit firmware 165 to execute speedometer display control. The first target unit firmware 165 then accesses the hardware portion for executing speedometer display control and controls input / output, thereby actually operating the hardware. In this way, the first target unit middleware 164 and the first target unit firmware 165 remain enabled without being disabled, so that the central unit 140 can substitute for at least a part of the function of controlling the application of the first target unit 160.

[0029] As described above, by saving at least a part of an application, it is possible to shorten the time required to save the application. In addition, it is possible to reduce the storage capacity of the save memory area 142b for saving the application, which makes it possible to reduce costs.

[0030] Furthermore, as described above, the central unit 140 has a function of relaying communication between target units. In this embodiment, for example, when various communications are performed from the second target unit 170 to the first target unit 160, various pieces of information transmitted from the second target unit 170 are normally transmitted to the first target unit 160 via the central unit 140. Then, various pieces of information generated in the first target unit 160 are transmitted to the second target unit 170 via the central unit 140, thereby making a response.

[0031] As described above, assume that various information is transmitted from the second target unit 170 to the first target unit 160 while the central unit 140 is taking over at least a portion of the function of controlling the application of the first target unit 160. In this case, the central unit 140 does not relay the various information to the first target unit 160, but instead acts on behalf of the first target unit 160, operates the first target unit application 163a to generate the various information, and transmits the generated various information to the second target unit 170. In this way, the central unit 140 responds on behalf of the first target unit 160. Each target unit has a function for detecting an error if another target unit with which it is to communicate does not respond. As described above, by having the central unit 140 respond on behalf of the target unit to be reprogrammed, it is possible to reduce the risk of the other target unit detecting an error in the target unit to be reprogrammed.

[0032] Fig. 6 is a third conceptual diagram according to an embodiment of the present invention. Fig. 7 is a fourth conceptual diagram according to an embodiment of the present invention. As shown in Fig. 6, when the saving of the first target unit application 163a is completed, update data 166 acquired from the external device 200 via the communication unit 120 is stored in the update information storage area 162b. Specifically, the communication unit 120 acquires the update data 166 from the external device 200 via the communication network N. The communication unit 120 then transfers the acquired update data 166 to the first target unit 160 via the central unit 140. The first target unit 160 stores the transferred first target unit 160 in the update information storage area 162b.

[0033] Then, as shown in FIG. 7, the first target unit 160 executes reprogramming based on the update data 166 stored in the update information storage area 162b.

[0034] As a result, the updated first target unit application 163b is stored in the software storage area 162a. When the updated first target unit application 163b is stored in the software storage area 162a, the first target unit application 163a in the save storage area 142b is disabled, as shown in FIG. 7. Then, the updated first target unit application 163b is enabled. Also, the update data 166 is disabled. In this way, even a target unit that performs functions related to the traveling of the vehicle 100 can be reprogrammed while the vehicle 100 is traveling.

[0035] Furthermore, in this embodiment, the case where the first target unit 160 is reprogrammed has been described in detail. However, when the second target unit 170 is reprogrammed, at least a portion of the applications of the second target unit 170 is similarly saved to the save memory area 142b. In other words, the save memory area 142b can be said to be shared by multiple target units. By providing the save memory area 142b for saving applications in the central unit 140 having a gateway function, it is possible to reduce costs compared to providing a memory area for saving applications in each target unit. Various processes for implementing the above functions are described below.

[0036] 8 is a first sequence diagram illustrating a processing flow according to an embodiment of the present invention. Note that various processes including the processes described below can be executed by the processor 121 of the communication unit 120, the processor 141 of the central unit 140, and the processor 161 of the first target unit 160.

[0037] 8, in the first target unit 160, the first target unit application 163 executes a first process (S100-1). In the first process, a calculation process is executed to derive various pieces of information necessary for controlling the hardware, and the various pieces of information derived by the calculation process are output to the first target unit middleware 164.

[0038] Furthermore, the first target unit middleware 164 and first target unit firmware 165 of the first target unit 160 execute a second process based on the various information derived by the first process (S100-2). In the second process, the first target unit middleware 164 requests the first target unit firmware 165 to execute hardware control. Then, the first target unit firmware 165 accesses the first functional unit 180 and controls input / output, thereby actually operating the first functional unit 180.

[0039] The central unit 140 transmits information capable of identifying the type of application to be saved to the first target unit 160 based on the save target designation information (FIG. 4) corresponding to the first target unit 160 (S200-1). The first target unit 160 transmits various information related to the application designated based on the received information to the central unit 140 (S100-3). That is, the first target unit 160 transmits at least some of the multiple applications included in the first target unit application 163 to the central unit 140. When the saving of the applications is complete, the central unit 140 enables the first target unit application 163a (S200-2).

[0040] Furthermore, when the first target unit application 163a is enabled by the central unit 140, the first target unit 160 disables the pre-update first target unit application 163 (S100-4). At this time, the first target unit 160 does not disable the first target unit middleware 164 and the first target unit firmware 165 stored in the software storage area 162a, but keeps them enabled.

[0041] Furthermore, by doing as described above, it is possible to transition from the pre-update first target unit application 163 to the saved first target unit application 163a without any time gap.

[0042] Then, the central unit 140 executes an alternative first process (S200-3). In the alternative first process, the central unit 140 executes the same process as the first process (S100-1) on behalf of the first target unit 160. Then, the central unit 140 outputs various information derived by the alternative first process to the middleware 164 for the first target unit.

[0043] The first target unit middleware 164 and the first target unit firmware 165 of the first target unit 160 execute the second process based on the various information derived by the above-mentioned alternative first process (S100-2). In this way, even if the pre-update first target unit application 163 is in a disabled state, it is possible to operate the first function unit 180.

[0044] Furthermore, the communication unit 120 receives update data 166 from the external device 200 via the communication network N (S300-1). Then, the communication unit 120 transfers the received update data 166 to the first target unit 160 via the central unit 140 (S300-2). The central unit 140 executes a relay process to transmit the update data 166 received from the communication unit 120 to the first target unit 160 (S200-4). Then, the first target unit 160 stores the update data 166 received from the communication unit 120 via the central unit 140 in the update information storage area 162b (S100-5).

[0045] Furthermore, the first target unit 160 executes reprogramming based on the update data 166 stored in the update information storage area 162b (S100-6). As a result, the updated first target unit application 163b is stored in the software storage area 162a. When the updated first target unit application 163b is stored in the software storage area 162a and the execution of reprogramming is completed, the first target unit 160 activates the updated first target unit application 163b (S100-7).

[0046] Thereafter, the central unit 140 invalidates the first target unit application 163a in the save memory area 142b (S200-5). In this way, it is possible to perform the transition from the first target unit application 163a in the save memory area 142b to the updated first target unit application 163b without any time gap.

[0047] 9 is a second sequence diagram illustrating a processing flow according to an embodiment of the present invention. Note that various processes, including those described below, can be executed by processor 141 of central unit 140, processor 161 of first target unit 160, and processor 171 of second target unit 170.

[0048] During normal operation, that is, while the central unit 140 is not taking over the function of controlling an application of the first target unit 160, the second target unit 170 executes a communication process to transmit predetermined information to the first target unit 160 via the central unit 140, as shown in the upper part of FIG. 9 (S400-10). In this case, the central unit 140 executes a relay process to transmit the predetermined information received from the second target unit 170 to the first target unit 160 (S200-10). The first target unit 160 then executes a response process to generate various information in response to the received predetermined information and transmit the generated various information to the second target unit 170 via the central unit 140 (S100-10). The second target unit 170 executes a predetermined process based on the various information received from the first target unit 160 via the central unit 140 (S400-11). The predetermined process includes an error detection process that can detect an error when the various information is not normally received from the first target unit 160.

[0049] 9, while the central unit 140 is taking over the function of controlling an application of the first target unit 160, the second target unit 170 executes a communication process to transmit predetermined information to the first target unit 160 via the central unit 140 (S400-10). In this case, the central unit 140 does not execute a relay process, but instead executes a proxy response process to generate various information on behalf of the first target unit 160 and transmit the generated various information to the second target unit 170 (S200-20). When the second target unit 170 receives the various information generated by the central unit 140, it regards the various information as having been received from the first target unit 160 and executes a predetermined process (S400-11). In this case, the various information is regarded as having been received normally from the first target unit 160, and the second target unit 170 does not detect an error. This makes it possible to reduce the risk of an error being unintentionally detected when reprogramming is performed while the vehicle 100 is running.

[0050] As described above, the vehicle 100 according to this embodiment includes a target unit (first target unit 160) provided in the vehicle 100, the target unit having one or more target unit processors (processor 161) and one or more target unit memories (memories 162) connected to the target unit processor (processor 161). The vehicle 100 also includes a communication unit 120 provided in the vehicle 100, the communication unit having one or more communication unit processors (processor 121) and one or more communication unit memories (memories 122) connected to the communication unit processor (processor 121). The vehicle 100 also includes a central unit 140 provided in the vehicle 100, the central unit having one or more central unit processors (processor 141) and one or more central unit memories (memories 142) connected to the central unit processor (processor 141). The target unit memory (memory 162) has a first storage area (software storage area 162a) in which an application (first target unit application 163) for operating the target unit (first target unit 160) is stored. The central unit memory (memory 142) has a second storage area (saving storage area 142b) for temporarily storing at least a part of the application (first target unit application 163) stored in the first storage area (software storage area 162a). The communication unit processor (processor 121) executes processing including transferring update data 166 acquired from outside the vehicle 100 via wireless communication to the target unit (first target unit 160) via the central unit 140 (steps S300-1 and S300-2, for example, in the above embodiment). The target unit processor (processor 161) executes processing including storing at least a part of the application (first target unit application 163) stored in the first storage area (software storage area 162a) in the second storage area (step S100-3, for example, in the above embodiment).The target unit processor (processor 161) executes processing including invalidating at least a part of the application (first target unit application 163) stored in the first storage area (software storage area 162a) (step S100-4, for example, in the above embodiment). The target unit processor (processor 161) executes processing including executing an update process of writing an updated application (first target unit application 163a) to the first storage area (software storage area 162a) based on the update data 166 transferred from the communication unit 120 (step S100-6, for example, in the above embodiment). The central unit processor (processor 141) executes processing including operating at least a part of the functions of the target unit (first target unit 160) using the application (first target unit application 163a) stored in the second storage area (saving storage area 142b) at least during the period from the start to the end of the execution of the update process (step S200-3, for example, in the above embodiment).

[0051] In the vehicle 100 of this embodiment, even if the target unit is responsible for functions related to the driving of the vehicle 100, it is possible to reprogram various electronic devices related to the driving of the vehicle 100 in situations where the use of electronic devices is required, such as while the vehicle 100 is driving.

[0052] The central unit processor (processor 141) may be able to operate a peripheral device (first function unit 180) connected to the target unit (first target unit 160) via the target unit (first target unit 160) using an application (first target unit application 163a) stored in the second storage area (saving storage area 142b) (in the above embodiment, as an example, step S200-3). Furthermore, when disabling at least a part of the application (first target unit application 163) stored in the first storage area (software storage area 162a), the target unit processor (processor 161) may maintain predetermined software (first target unit middleware 164 and first target unit firmware 165) for operating a peripheral device connected to the target unit (in the above embodiment, as an example, step S100-4).

[0053] By doing this, even if the application 163 for the first target unit before the update is disabled, it is possible to operate the first functional unit 180, so it is possible to reprogram various electronic devices related to the operation of the vehicle 100 in situations where the use of electronic devices is required, such as while the vehicle 100 is running.

[0054] The vehicle 100 may also include a detection unit (second target unit 170) having one or more detection unit processors (processor 171) and one or more detection unit memories (memories 172) connected to the detection unit processor (processor 171). The detection unit processor (processor 171) may consider the functions of the target unit (first target unit 160) to be operating normally when at least some of the functions of the target unit (first target unit 160) are operating by the central unit processor (processor 141) (in the above embodiment, as an example, step S400-11).

[0055] This makes it possible to reduce the risk of unintentional error detection when reprogramming is performed while the vehicle 100 is running. Note that, although the above embodiment shows a case where the target unit is capable of performing error detection, a dedicated unit for performing error detection may also be provided.

[0056] While the embodiments and modifications of the present invention have been described above with reference to the accompanying drawings, it goes without saying that the present invention is not limited to these embodiments and modifications. It is clear that a person skilled in the art can conceive of various modifications or alterations within the scope of the claims, and it is understood that these modifications also fall within the technical scope of the present invention.

[0057] The series of processes performed by the vehicle 100 according to the above embodiment may be implemented using software, hardware, or a combination of software and hardware. The programs constituting the software are stored in advance in, for example, a non-transitory storage medium provided inside or outside each device. The programs are then read from, for example, a non-transitory storage medium (for example, a ROM) to a transitory storage medium (for example, a RAM) and executed by a processor such as a CPU.

[0058] Furthermore, according to the above embodiment, it is possible to provide a program for executing the processing of each function of the vehicle 100. Furthermore, it is also possible to provide a non-transitory computer-readable recording medium storing the program. The non-transitory recording medium may be, for example, a disk-type recording medium such as an optical disk, a magnetic disk, or a magneto-optical disk, or may be a semiconductor memory such as a flash memory or a USB memory. [Explanation of symbols]

[0059] 100 vehicles 120 Communication Unit 121 Processor (Communication Unit Processor) 122 Memory (Communication Unit Memory) 140 Central Unit 141 Processor (Central Unit Processor) 142 Memory (Central Unit Memory) 142b Evacuation storage area (second storage area) 160 First Target Unit (Target Unit) 161 processors (target unit processors) 162 Memory (target unit memory) 162a Software storage area (first storage area) 163 Application for first target unit (application) 163a Application for first target unit (Application) 163b Application for First Target Unit (Updated Application) 164 Middleware for the first target unit 165 Firmware for the first target unit 166 Update Data 170 Second target unit (detection unit) 171 Processor (Detection Unit Processor) 172 memory (detection unit memory) 180 First Functional Unit (Peripheral Equipment)

Claims

1. a target unit provided in a vehicle, the target unit having one or more target unit processors and one or more target unit memories connected to the target unit processors; a communication unit provided in the vehicle, the communication unit having one or more communication unit processors and one or more communication unit memories connected to the communication unit processors; a central unit provided in the vehicle, the central unit having one or more central unit processors and one or more central unit memories connected to the central unit processors; Equipped with The target unit memory includes: a first storage area in which an application for operating the target unit is stored; The central unit memory includes: a second storage area for temporarily storing at least a part of the application stored in the first storage area; The communication unit processor transferring update data acquired from outside the vehicle via wireless communication to the target unit via the central unit; Perform a process including The target unit processor: storing at least a part of the application stored in the first storage area in the second storage area; Disabling at least a portion of the application stored in the first storage area; executing an update process to write an updated application into the first storage area based on the update data transferred from the communication unit; Perform a process including The central unit processor operating at least a part of the functions of the target unit by the application stored in the second storage area at least during a period from the start to the end of the execution of the update process; A vehicle that performs processing including

2. The central unit processor The application stored in the second storage area can operate a peripheral device connected to the target unit via the target unit, The target unit processor: The vehicle according to claim 1 , wherein when at least a portion of the applications stored in the first storage area is disabled, predetermined software for operating the peripheral devices connected to the target unit is maintained.

3. a detection unit provided on the vehicle, the detection unit having one or more detection unit processors and one or more detection unit memories connected to the detection unit processors; Preparation, The detection unit processor When at least a part of the functions of the target unit is operated by the central unit processor, the functions of the target unit are considered to be operating normally; 3. A vehicle according to claim 1 or 2.

Images