Refrigerator

Abstract

To provide a refrigerator capable of appropriately performing control related to update.SOLUTION: A refrigerator includes an electric component, a first controller, a storage device, and a second controller. The first controller can output a control instruction to control the electric component. The storage device is provided inside or outside the first controller to store information for serving control by the first controller. The second controller can control the electric component on the basis of the control instruction from the first controller. The second controller maintains the control over the electric component in the case that the information stored in the storage device is updated by updating information acquired from the outside, and also stops operation of the electric component in the case that the signal from the first controller is not received even after a prescribed upper limit time set in accordance with an update time of the information exceeds.SELECTED DRAWING: Figure 9

Description

[Technical Field]

[0001] An embodiment of the present invention relates to a refrigerator. [Background technology]

[0002] A refrigerator has been proposed in which software used to control electrical appliances can be updated. Such a refrigerator is expected to more appropriately perform update-related control. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2018-146178 Summary of the Invention [Problem to be solved by the invention]

[0004] The problem to be solved by the present invention is to provide a refrigerator capable of appropriately performing control related to updates. [Means for solving the problem]

[0005] A refrigerator according to an embodiment includes electrical components, a first control device, a storage device, and a second control device. The first control device is capable of outputting control instructions for controlling the electrical components. The storage device is provided inside or outside the first control device and stores information to be used for control by the first control device. The second control device is capable of controlling the electrical components based on control instructions from the first control device. When the information stored in the storage device is updated with update information acquired from outside, the second control device maintains control of the electrical components and stops operation of the electrical components when a signal from the first control device is not received for a predetermined upper limit time period set corresponding to the update of the information. [Brief explanation of the drawings]

[0006] [Figure 1] 1 is a diagram showing a home appliance management system including a refrigerator according to an embodiment. [Figure 2] FIG. 1 is a front view showing a refrigerator according to an embodiment. [Figure 3] FIG. 1 is a cross-sectional view showing a refrigerator according to an embodiment. [Figure 4] FIG. 2 is a block diagram showing the functional configuration of the refrigerator according to the embodiment. [Figure 5] 1 is a diagram showing a configuration of a refrigeration cycle device of a refrigerator according to an embodiment; [Figure 6] FIG. 2 is a block diagram showing the functional configuration of a main microcomputer according to the embodiment. [Figure 7] FIG. 2 is a block diagram showing the functional configuration of a sub-microcomputer according to the embodiment. [Figure 8] FIG. 2 is a block diagram illustrating a functional configuration of an IO expander according to the embodiment. [Figure 9] FIG. 2 is a diagram showing an example of the flow of a control method for a refrigerator according to an embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0007] A refrigerator according to an embodiment will be described below with reference to the drawings. In the following description, components having the same or similar functions are designated by the same reference numerals. Duplicate descriptions of those components may be omitted. In this application, "based on XX" means "based on at least XX" and may include a case where the refrigerator is based on another element in addition to XX. Furthermore, "based on XX" is not limited to a case where the refrigerator is based directly on XX, but may also include a case where the refrigerator is based on XX after calculation or processing. In this application, "XX or YY" is not limited to either XX or YY, but may include both XX and YY. This also applies when there are three or more optional elements. XX and YY are any element (e.g., any information). In this application, control other than the information update period (described later, when control is performed by the main microcomputer 410) may be referred to as "normal control."

[0008] In this application, "acquire" is not limited to actively acquiring by sending a transmission request, but may also include passively receiving information transmitted from another device. Furthermore, "acquire" is not limited to directly acquiring target information (information to be acquired) from outside, but may also include performing calculations or processing on information obtained from outside to generate target information.

[0009] (Embodiment) <1. Overall structure> Fig. 1 is a diagram showing a home appliance management system 1 including a refrigerator 100 according to an embodiment. The home appliance management system 1 includes, for example, one or more refrigerators 100 and a server 200. The network NW described below can be, for example, the Internet, a cellular network, a Wi-Fi network, a low power wide area network (LPWA), a wide area network (WAN), a local area network (LAN), or other public or dedicated lines.

[0010] (refrigerator) The refrigerator 100 is an electrical appliance (home appliance) that is primarily used at home. The refrigerator 100 is placed in the residence of a user U. The refrigerator 100 is connected to a network NW via, for example, a wireless router WR and a modem M that are installed in the same residence as the refrigerator 100. The refrigerator 100 can communicate with a server 200 via the network NW. The content described below is not limited to the refrigerator 100, but can also be applied to other home appliances (such as a clothes disposal machine, an air conditioner, a cooking appliance, a rice cooker, a coffee maker, a water disposal device, a garbage disposal machine, an electric vacuum cleaner, or an iron).

[0011] (server) Server 200 is a management server that manages refrigerator 100. Server 200 is configured with one or more server devices (for example, cloud servers). Server 200 can communicate with refrigerator 100 via network NW. Server 200 may include an information processing unit that performs edge computing or fog computing, such as an information processing unit included in a router in network NW. Server 200 is not limited to a cloud server and may be a computer in the residence of user U, a home router, or the like.

[0012] A terminal device (not shown) used by an operator of a program provider is communicably connected to server 200. Various update programs (update information SA) provided by program providers are stored in server 200. Program providers are, for example, but are not limited to, manufacturers that manufacture and sell refrigerators or program provider companies that provide programs.

[0013] <2. Refrigerator> Next, the refrigerator 100 will be described. Fig. 2 is a front view showing refrigerator 100. Fig. 3 is a cross-sectional view showing refrigerator 100. As shown in Figs. 2 and 3, refrigerator 100 includes, for example, refrigerator body 101. Refrigerator body 101 includes housing 10 and a plurality of doors 20.

[0014] A plurality of storage compartments 11 are provided inside the housing 10. The plurality of storage compartments 11 include, for example, a refrigerator compartment 11A, a chilled compartment 11Aa, a vegetable compartment 11B, an ice-making compartment 11C, a small freezer compartment 11D, and a main freezer compartment 11E. For ease of explanation, the "small freezer compartment 11D" and the "main freezer compartment 11E" will be collectively referred to as the "freezer compartment 11F" below. Note that the storage compartments of the refrigerator 100 may alternatively or additionally include a partial compartment cooled to a partial temperature zone with an average temperature of approximately -3°C, or a temperature-switchable compartment with switchable temperature zones.

[0015] The openings of the multiple storage compartments 11 are openably and closably closed by multiple doors 20. The multiple doors 20 include left and right refrigerator compartment doors 20Aa and 20Ab that close the opening of refrigerator compartment 11A, vegetable compartment door 20B that closes the opening of vegetable compartment 11B, ice compartment door 20C that closes the opening of ice compartment 11C, small freezer compartment door 20D that closes the opening of small freezer compartment 11D, and main freezer compartment door 20E that closes the opening of main freezer compartment 11E.

[0016] 4 is a block diagram showing the functional configuration of the refrigerator 100. As shown in FIG. 4, the refrigerator 100 includes, for example, a plurality of electric components 60 and a control unit 400.

[0017] The plurality of electric components 60 are included in refrigerator main body 101. The plurality of electric components 60 operate under the control of control unit 400. In this embodiment, the electric components 60 include, for example, a compressor 61, a refrigeration blower 62, a freezer blower 63, a condenser blower 64, an electric three-way valve 65, a defrost heater 80, a vegetable compartment heater 81, a water supply port heater 82, a vertical partition heater 83, an interior light 84, an operation panel 85, a photocatalytic LED 86, a water supply motor 89, an ice tray motor 88, a touch sensor 90, and a damper 91.

[0018] FIG. 5 is a diagram showing the configuration of the refrigeration cycle device CD of the refrigerator 100. 5, the compressor 61, the refrigeration blower 62, the freezing blower 63, the condenser blower 64, and the motor-operated three-way valve 65 constitute a part of the refrigeration cycle device CD that cools each storage chamber 11. The refrigeration cycle device CD is realized by connecting the compressor 61, the condenser 71, the dryer 72, the motor-operated three-way valve 65, the refrigeration cooler 73, the freezing cooler 74, and the like in a circular arrangement in the order of refrigerant flow.

[0019] Compressor 61 is provided, for example, in a machine room at the bottom of refrigerator 100. Compressor 61 compresses refrigerant gas used to cool each storage compartment 11. For example, a condenser 71 and a dryer 72 are connected in this order to a high-pressure discharge port of compressor 61 via a connecting pipe 76.

[0020] Condenser 71 condenses the refrigerant gas from compressor 61 by dissipating heat. Condenser blower 64 sends air from the room in which refrigerator 100 is installed to condenser 71. Dryer 72 removes impurities such as dirt and moisture from the refrigerant that has passed through condenser 71. Motorized three-way valve 65 is connected to the discharge side of dryer 72. Motorized three-way valve 65 has one inlet to which dryer 72 is connected and two outlets. One of the two outlets of motorized three-way valve 65 is connected to refrigeration cooler 73. Refrigeration cooler 73 is connected to compressor 61 via refrigeration-side suction pipe 77, which is a connecting pipe. The other of the two outlets of motorized three-way valve 65 is connected to freezing cooler 74. Refrigeration cooler 74 is connected to compressor 61 via refrigeration-side suction pipe 78, which is a connecting pipe.

[0021] The refrigerant circulating through the refrigeration cycle device CD is compressed by the compressor 61 to become a high-temperature, high-pressure gaseous refrigerant. This gaseous refrigerant dissipates heat in the condenser 71 to become a medium-temperature, high-pressure liquid refrigerant. The liquid refrigerant then passes through the dryer 72 to remove impurities such as dirt and moisture, and is then sent through the motor-operated three-way valve 65 to the refrigeration cooler 73 (or the freezing cooler 74). The liquid refrigerant evaporates as it passes through the refrigeration cooler 73 (or the freezing cooler 74), thereby cooling the refrigeration cooler 73 (or the freezing cooler 74). The low-temperature, low-pressure gaseous refrigerant then flows into the refrigeration-side suction pipe 77 (or the freezing-side suction pipe 78). This refrigerant gas passes through the suction pipe 77 (or the suction pipe 78) and is sucked back into the compressor 61, completing the refrigerant circulation.

[0022] As shown in Fig. 3, refrigerant compressed by compressor 61 is supplied to refrigerant cooler 73, which cools the air in refrigerant compartment 11A, chilled compartment 11Aa, and vegetable compartment 11B. Refrigerant blower 62 sends the air in refrigerant compartment 11A, chilled compartment 11Aa, and vegetable compartment 11B to refrigerant cooler 73. The air in refrigerant compartment 11A, chilled compartment 11Aa, and vegetable compartment 11B is cooled by refrigerant cooler 73. The cooled air cooled by refrigerant cooler 73 is blown out into refrigerant compartment 11A, chilled compartment 11Aa, and vegetable compartment 11B. This cools refrigerant compartment 11A, chilled compartment 11Aa, and vegetable compartment 11B.

[0023] Freezer cooler 74 is supplied with refrigerant compressed by compressor 61 and cools the air in ice making compartment 11C, small freezer compartment 11D, and main freezer compartment 11E. Freezer blower 63 sends the air in ice making compartment 11C, small freezer compartment 11D, and main freezer compartment 11E to freezer cooler 74. In this way, ice making compartment 11C, small freezer compartment 11D, and main freezer compartment 11E are cooled by freezer cooler 74. The cooled cold air flows into ice making compartment 11C, small freezer compartment 11D, and main freezer compartment 11E. In this way, ice making compartment 11C, small freezer compartment 11D, and main freezer compartment 11E are cooled.

[0024] Defrost heater 80 is provided in freezer cooler 74. Defrost heater 80 melts frost formed on freezer cooler 74. Crisper heater 81 is provided at the bottom of crisper 11B. Crisper heater 81 prevents the inside of crisper 11B from being excessively cooled by cold heat from ice-making compartment 11C and small freezer compartment 11D below crisper 11B. Vertical partition heater 83 prevents condensation on vertical partition plate 15 provided in refrigerator compartment 11A.

[0025] The interior lights 84 are provided at a plurality of locations within the plurality of storage compartments 11 to illuminate the interiors of the storage compartments 11. The operation panel 85 is provided on, for example, the refrigerator compartment door 20Aa. The operation panel 85 is an operation unit that accepts operations from the user U. The operation panel 85 includes one or more of an operation button, a switch, a dial, a touch panel, or the like. The operation panel 85 accepts operations from the user U that are related to the control of the refrigerator 100, for example.

[0026] The photocatalytic LED 86 (see FIG. 4) sterilizes and / or deodorizes the air in the storage compartment 11 by photocatalytic action caused by shining light onto a photocatalyst provided in the storage compartment. Water supply motor 89 supplies water to ice making tray 18 (see FIG. 3) through a water supply port from a tank provided inside refrigerator body 101. Ice making tray motor 88 rotates ice making tray 18 inside ice making compartment 11C, and drops ice made in ice making tray 18 into tray 19 provided at the bottom of ice making compartment 11C.

[0027] The touch sensor 90 is provided, for example, on the front surface of the refrigerator compartment doors 20Aa, 20Ab. The touch sensor 90 is an electrostatic touch sensor, and when a user touches or brings a finger or the like into proximity with the touch sensor 90, the refrigerator compartment doors 20Aa, 20Ab are automatically opened by an actuator (for example, a solenoid provided behind the refrigerator compartment doors 20Aa, 20Ab) that can move the refrigerator compartment doors 20Aa, 20Ab. Damper 91 is provided in a flow path through which cold air flows after passing through refrigeration cooler 73 or refrigeration cooler 74 due to the wind generated by refrigeration blower 62 or refrigeration blower 63. Damper 91 adjusts the amount of cold air sent into storage chamber 11 by adjusting its opening degree.

[0028] The control unit 400 (see FIG. 4) comprehensively controls the entire refrigerator 100. The control unit 400 includes, for example, a main microcomputer 410, a sub-microcomputer 420, a communication module 430, and an IO expander (input / output control device) 440. The main microcomputer 410 is an example of a "first control device." The sub-microcomputer 420 is an example of a "second control device." The IO expander 440 is another example of a "second control device."

[0029] The main microcomputer 410 includes one or more processors 411 such as a CPU (Central Processing Unit) and a storage device 412 such as a RAM (Random Access Memory), a ROM (Read Only Memory), an EEPROM (Electrically Erasable Programmable ROM), or an SSD (Solid State Drive). The main microcomputer 410 controls the operation of each part of the refrigerator 100 by executing a program P stored in the storage device 412. The storage device 412 that stores the program P may be included in the main microcomputer 410 or may be provided separately from the main microcomputer 410. The program P is software for controlling each electrical component 60 of the refrigerator 100. For example, program P is software for controlling one or more of compressor 61, refrigeration blower 62, freezer blower 63, condenser blower 64, motorized three-way valve 65, defrost heater 80, vegetable compartment heater 81, water inlet heater 82, vertical partition heater 83, interior light 84, operation panel 85, photocatalytic LED 86, water supply motor 89, ice tray motor 88, touch sensor 90, and damper 91. Program P is an example of information provided for control by main microcomputer 410.

[0030] The main microcomputer 410 outputs control instructions for controlling the electrical component 60. In this application, "outputting control instructions for controlling the electrical component" is not limited to outputting control instructions directly to the electrical component, but may also apply to outputting control instructions to another control device that controls the electrical component.

[0031] In this embodiment, the main microcomputer 410 outputs control instructions for controlling the compressor 61, defrost heater 80, crisper heater 81, water supply port heater 82, and vertical partition heater 83 to the sub-microcomputer 420 that controls these electrical components 60. Also, in this embodiment, the main microcomputer 410 outputs control instructions for controlling the refrigerator blower 62, freezer blower 63, condenser blower 64, electric three-way valve 65, interior light 84, operation panel 85, photocatalytic LED 86, water supply motor 89, ice tray motor 88, touch sensor 90, and damper 91 directly to each of these electrical components 60. Note that main microcomputer 410 may output control instructions for controlling refrigerator blower 62, freezer blower 63, condenser blower 64, electric three-way valve 65, interior light 84, operation panel 85, photocatalytic LED 86, water supply motor 89, ice tray motor 88, touch sensor 90, and damper 91 to IO expander 440 that controls these electrical components 60. The "control instruction" referred to in this application is not limited to a command, and may also be a signal defined by a voltage level that is an H level or an L level.

[0032] In this embodiment, the main microcomputer 410 communicates with the sub-microcomputer 420 at a predetermined cycle (e.g., 500 ms). The main microcomputer 410 monitors whether a signal is received from the sub-microcomputer 420 within a predetermined determination period (e.g., 5 seconds, which is 10 times the predetermined cycle). If the main microcomputer 410 does not receive a signal from the sub-microcomputer 420 within the predetermined determination period (e.g., 5 seconds, which is 10 times the predetermined cycle), i.e., if communication is interrupted, the main microcomputer 410 determines that an abnormality has occurred in the sub-microcomputer 420. In this case, the main microcomputer 410 stops outputting, to the sub-microcomputer 420, a control instruction for controlling the electrical component 60, which is the control target of the sub-microcomputer 420.

[0033] The sub-microcomputer 420 is communicatively connected to the main microcomputer 410. The sub-microcomputer 420 includes one or more processors 421, such as a CPU, and a storage unit 422, such as a RAM, a ROM, an EEPROM, or an SSD. The sub-microcomputer 420 controls some of the multiple electrical components 60 based on a subprogram SP stored in the storage unit 422 and commands (control instructions) from the main microcomputer 410. For example, the sub-microcomputer 420 controls the compressor 61, the defrost heater 80, the vegetable compartment heater 81, the water supply port heater 82, and the vertical partition heater 83. In addition, instead of the aforementioned electrical component 60, the sub-microcomputer 420 may control one or more of the refrigeration blower 62, the freezer blower 63, the condenser blower 64, the electric three-way valve 65, the interior light 84, the operation panel 85, the photocatalytic LED 86, the water supply motor 89, the ice tray motor 88, the touch sensor 90, and the damper 91.

[0034] In this embodiment, the sub-microcomputer 420 communicates with the main microcomputer 410 at a predetermined cycle (e.g., 500 ms). The sub-microcomputer 420 monitors whether a signal is received from the main microcomputer 410 within a predetermined determination time (e.g., 5 seconds, which is 10 times the predetermined cycle). If the sub-microcomputer 420 does not receive a signal from the main microcomputer 410 within the predetermined determination time (e.g., 5 seconds, which is 10 times the predetermined cycle), i.e., if communication is interrupted, the sub-microcomputer 420 determines that an abnormality has occurred in the main microcomputer 410. In this case, the sub-microcomputer 420 stops outputting control instructions to the electrical component 60 that is the control target of the sub-microcomputer 420, and stops the operation of the electrical component 60 that is the control target of the sub-microcomputer 420.

[0035] The communication module 430 is, for example, a wireless LAN module, and communicates with the server 200 via the network NW. The communication module 430 acquires update information SA for updating the program P stored in the storage device 412 of the main microcomputer 410 from an external source (for example, the server 200). The communication module 430 is an example of an "information acquisition unit."

[0036] The IO expander 440 is communicatively connected to, for example, the communication module 430 and the main microcomputer 410. The IO expander 440 is a semiconductor device that can expand the input / output ports of the main microcomputer 410 by being connected to the main microcomputer 410. The IO expander 440 can control some of the multiple electrical components 60, for example, based on an internal circuit of the IO expander 440 and a command (control instruction) from the main microcomputer 410. For example, the IO expander 440 may control one or more of the refrigerator blower 62, the freezer blower 63, the condenser blower 64, the motorized three-way valve 65, the interior light 84, the operation panel 85, the photocatalytic LED 86, the water supply motor 89, the ice tray motor 88, the touch sensor 90, and the damper 91.

[0037] The IO expander 440 is, for example, an event-driven device. When the IO expander 440 receives a predetermined control instruction (first instruction) from the main microcomputer 410 for a certain electric component 60, the IO expander 440 controls the electric component 60 based on the predetermined control instruction that it received earlier until it receives another control instruction (second instruction) from the main microcomputer 410, even if it does not receive the predetermined control instruction from the main microcomputer 410 thereafter.

[0038] In this embodiment, the main microcomputer 410 and the IO expander 440 are connected via an OR circuit (including a wired OR) to the electrical component 60 that is the control target of the IO expander 440. That is, if at least one of a control instruction from the main microcomputer 410 and a control instruction from the IO expander 440 is present, the electrical component 60 can operate based on that control instruction.

[0039] In the control unit 400, under normal circumstances (except when updating information, which will be described in detail later), the main microcomputer 410 controls all of the multiple electrical components 60. Of the multiple electrical components 60, the compressor 61, defrost heater 80, vegetable compartment heater 81, water supply port heater 82, and vertical partition heater 83, which consume large amounts of power, are controlled by a sub-microcomputer 420 that operates based on commands from the main microcomputer 410. The remaining electrical components 60, namely, the refrigerator blower 62, the freezer blower 63, the condenser blower 64, the electric three-way valve 65, the interior light 84, the operation panel 85, the photocatalytic LED 86, the water supply motor 89, the ice tray motor 88, the touch sensor 90, and the damper 91, are controlled based on direct commands from the main microcomputer 410.

[0040] Furthermore, by communicating with the server 200, the control unit 400 can acquire from the server 200 an update program (update information SA) for updating the program P (information used to control the multiple electric components 60) stored in the storage device 412. When the control unit 400 acquires the update program, the control unit 400 updates the existing program P stored in the storage device 412 with the update program (for example, replaces the program P stored in the storage device 412 with a new program P included in the update information SA).

[0041] In this application, "update" is not limited to updating an existing program P (e.g., replacing an existing program P with a new version of the program P), but may also refer to adding another program (e.g., a subprogram such as a plug-in) that is used in conjunction with the existing program P while retaining the existing program P.

[0042] The control unit 400 stops the main microcomputer 410 during an information update in which the program P stored in the storage device 412 is updated with an update program. That is, the control unit 400 stops the control of the multiple electrical components 60 by the main microcomputer 410 during an information update in which the program P stored in the storage device 412 is updated with an update program. In this embodiment, the control unit 400 causes the sub-microcomputer 420 and the IO expander 440 to control the multiple electrical components 60 instead of the main microcomputer 410 during the information update. That is, the control unit 400 maintains control of the multiple electrical components 60 by the sub-microcomputer 420 and the IO expander 440 while the main microcomputer 410 is stopped. Note that, for convenience of explanation, hereinafter, updating the program P stored in the storage device 412 with the update program (update information SA) may be referred to as an "information update."

[0043] During information update, while main microcomputer 410 is stopped, sub-microcomputer 420 maintains control of compressor 61, defrost heater 80, vegetable compartment heater 81, water supply port heater 82, and vertical partition heater 83. During information update, while main microcomputer 410 is stopped, IO expander 440 maintains control of refrigerator blower 62, freezer blower 63, condenser blower 64, motorized three-way valve 65, interior light 84, operation panel 85, photocatalytic LED 86, water supply motor 89, ice tray motor 88, touch sensor 90, and damper 91.

[0044] In this embodiment, even if the main microcomputer 410 is stopped during information update, the sub-microcomputer 420 and the IO expander 440 maintain control of each electrical component 60 until a predetermined upper limit time set in advance for the information update is exceeded. For example, during information update, the sub-microcomputer 420 and the IO expander 440 maintain control of each electrical component 60 so as to maintain the state of each electrical component 60 at the start of the information update (e.g., the state of the electrical component 60 based on the control instruction last received from the main microcomputer 410). For example, the sub-microcomputer 420 and the IO expander 440 perform simpler control than the control performed by the main microcomputer 410. For example, the control performed by the main microcomputer 410 is based on the detection results of the state of the refrigerator 100 (e.g., the temperature of the storage compartment 11) by various sensors. On the other hand, the control by the sub-microcomputer 420 and the IO expander 440 involves maintaining the drive amount of the electrical component 60 the same as when the information update started, controlling the electrical component 60 with a drive amount that is variable within a certain range (for example, a drive amount that is variable depending on the elapsed time), or controlling the electrical component 60 with a preset drive amount or a preset drive time.

[0045] In this application, "maintaining the state of the electrical component at the start of the information update" means that the electrical component 60 that was operating at the start of the information update continues to operate, and the electrical component 60 that was stopped at the start of the information update continues to be stopped. In this application, "maintaining the state of the electrical component at the start of the information update" is not limited to maintaining the same operation content for the electrical component 60 that was operating at the start of the information update, but may also include continuing operation by changing the operation content based on the passage of time or other information (for example, the detection results of a sensor) (for example, continuing operation while reducing the drive amount compared to when the information update started).

[0046] The predetermined upper limit time is set to, for example, 10 seconds to 40 minutes depending on the situation. The predetermined upper limit time is longer than the predetermined determination time (for example, 5 seconds). In this embodiment, when performing an information update, the main microcomputer 410 outputs a predetermined signal (for example, a signal instructing the maintenance of the state of the electrical components 60) to the sub-microcomputer 420 in response to the information update. When the sub-microcomputer 420 receives the predetermined signal from the main microcomputer 410, even if the sub-microcomputer 420 does not receive a signal from the main microcomputer 410 for longer than the predetermined determination time (for example, 5 seconds) (if communication remains interrupted), the sub-microcomputer 420 does not determine that an abnormality has occurred in the main microcomputer 410 and continues to control each electrical component 60 until the predetermined upper limit time (for example, 10 seconds) is exceeded. If the sub-microcomputer 420 does not receive a signal from the main microcomputer 410 for more than the above-mentioned predetermined upper limit time (for example, 10 seconds) (if communication remains interrupted), it determines that an abnormality has occurred in the main microcomputer 410 and stops the operation of the electrical component 60 that is the control target of the sub-microcomputer 420. For example, it stops the output of a control signal from the sub-microcomputer 420 to the electrical component 60.

[0047] On the other hand, when the main microcomputer 410 resumes operation after the information update, it resumes communication with the sub-microcomputer 420 at the predetermined cycle. If this communication is resumed within the predetermined upper limit time (e.g., 10 seconds), the sub-microcomputer 420 continues to maintain control of the electrical component 60. For example, the sub-microcomputer 420 maintains control of the electrical component 60 both before and after the information update. Alternatively / in addition to this, when the main microcomputer 410 resumes operation after the information update, it may send a signal to the sub-microcomputer 420 to cancel the maintenance of the state of the electrical component 60 (a signal instructing the sub-microcomputer 420 to control the electrical component 60 under the control of the main microcomputer 410).

[0048] Here, for example, once compressor 61 is stopped, a protection period (about six minutes) is required for the stopped state to continue before it can be restarted. Therefore, if compressor 61 is stopped during an information update, and door 20 is opened or closed or hot ingredients are added to storage compartment 11 during the information update, compressor 61 may not be able to start immediately, which may cause the temperature of storage compartment 11 to rise. However, in this embodiment, sub-microcomputer 420 maintains control of electrical components 60 (e.g., compressor 61) both before and after the information update. Therefore, even if door 20 is opened or closed or hot ingredients are added to storage compartment 11 during the information update, it is easier to maintain a low temperature in storage compartment 11.

[0049] In this embodiment, the IO expander 440 includes, for example, a timer. When performing information update, the main microcomputer 410 outputs a predetermined signal to the IO expander 440 that is set in advance in response to the information update. When the IO expander 440 receives the predetermined signal from the main microcomputer 410, the IO expander 440 maintains control of each electrical component 60 until the predetermined upper limit time (e.g., 10 seconds) is exceeded. When the IO expander 440 does not receive a new signal from the main microcomputer 410 for the predetermined upper limit time (e.g., 10 seconds) to be exceeded, the IO expander 440 determines that an abnormality has occurred in the main microcomputer 410 and stops the operation of the electrical component 60 that is the target of control by the IO expander 440. For example, the IO expander 440 stops outputting a control signal to the electrical component 60.

[0050] On the other hand, when the main microcomputer 410 resumes operation after the information update, it outputs a predetermined signal indicating that the operation of the main microcomputer 410 has resumed normally (a control instruction for the main microcomputer 410 to resume control of the electrical component 60) to the IO expander 440. When the IO expander 440 receives a predetermined signal indicating that the operation has resumed normally from the main microcomputer 410 within the above-mentioned predetermined upper limit time (for example, 10 seconds), the IO expander 440 continues to maintain control of the electrical component 60. For example, the IO expander 440 maintains control of the electrical component 60 both before and after the information update.

[0051] Alternatively, the IO expander 440 may not include a timer. When the IO expander 440 does not receive a new signal from the outside, the IO expander 440 may maintain control of the electrical component 60 based on the control instruction last received from the main microcomputer 410. In this case, time management may be performed by the server 200. For example, the server 200 communicates with the main microcomputer 410 at a predetermined interval via the communication module 430. When updating information, the main microcomputer 410 outputs a predetermined signal to the server 200 in response to the information update. When the server 200 receives the predetermined signal from the main microcomputer 410, even if the server 200 does not receive a signal from the main microcomputer 410 for a predetermined determination time (e.g., 5 seconds) or longer (when communication remains interrupted), the server 200 may wait until the predetermined upper limit time (e.g., 10 seconds) is exceeded without determining that an abnormality has occurred in the main microcomputer 410. Then, if the server 200 does not receive a signal from the main microcomputer 410 for more than the above-mentioned predetermined upper limit time (for example, 10 seconds) (if communication remains interrupted), the server 200 may determine that an abnormality has occurred in the main microcomputer 410, and output a control signal to the IO expander 440 via the communication module 430 to stop the operation of the electrical component 60 that is the control target by the IO expander 440. When the IO expander 440 receives a control signal to stop the operation of the electrical component 60 that is the control target from the server 200, the IO expander 440 stops the operation of the electrical component 60 that is the control target by the IO expander 440. For example, the IO expander 440 stops output of the control signal to the electrical component 60.

[0052] Alternatively, instead of the above example, when the main microcomputer 410 resumes operation after updating the information, it may not be necessary to output a predetermined signal indicating that the operation of the main microcomputer 410 has resumed normally to the IO expander 440. When the main microcomputer 410 resumes operation after updating the information, it may output a control signal for controlling the electric component 60 (a control instruction for resuming control of the electric component 60 by the main microcomputer 410) directly to the electric component 60 via, for example, the OR circuit described above. In this case, even if the output of the control signal from the IO expander 440 to the electric component 60 is stopped in response to the lapse of the predetermined upper limit time, control of the electric component 60 is maintained based on the control instruction received directly from the main microcomputer 410.

[0053] Also, instead of / in addition to the above example, when the main microcontroller 410 resumes operation after updating the information, it may send a signal to the IO expander 440 to release the maintenance of the state of the electrical component 60 (a signal instructing the IO expander 440 to control the electrical component 60 under the control of the main microcontroller 410, or a signal indicating that the main microcontroller 410 will directly control the electrical component 60).

[0054] In this embodiment, the sub-microcomputer 420 and the IO expander 440 have upper limit time management units (e.g., upper limit time management units 426 and 446) that manage the length of the predetermined upper limit time. The upper limit time management units can set (change) the length of the predetermined upper limit time based on the state of each electrical component 60 at the start of the information update.

[0055] As an example, the electrical component 60 can operate in a first operating state and a second operating state in which a larger current flows than in the first operating state. When the electrical component 60 is in the second operating state, the upper limit time management unit sets the length of the predetermined upper limit time to be shorter than when the electrical component 60 is in the first operating state. As a result, when the electrical component 60 is in the second operating state, the operation of the electrical component 60 can be terminated earlier in response to the occurrence of an abnormality in the main microcomputer 410. Some other examples will be described later.

[0056] FIG. 6 is a block diagram showing the functional configuration of the main microcomputer 410. 6, main microcomputer 410 includes, for example, information acquisition unit 413, component control unit 414, update processing unit 415, and signal input / output unit 416. Information acquisition unit 413, component control unit 414, update processing unit 415, and signal input / output unit 416 are each realized by processor 411 executing program P. Program P is, for example, a program that realizes firmware for refrigerator 100. However, program P is not limited to the above example, and may be a subprogram for realizing a specific function in refrigerator 100.

[0057] The information acquisition unit 413 acquires various information from the server 200 by communicating with the server 200. In this embodiment, if an update program UP (update information SA) for updating a program P (described later) exists in the server 200, the information acquisition unit 413 acquires the update program UP from the server 200.

[0058] The component control unit 414 controls each of the plurality of electric components 60. The component control unit 414 controls each electric component 60 based on, for example, detection results of various sensors provided in the refrigerator 100 and various operation modes, setting values, threshold values, etc. stored in advance in the storage device 412. The component control unit 414 also stores information indicating the operation states of the plurality of electric components 60 in the storage device 412.

[0059] The update processing unit 415 acquires an update program UP for updating the program P from the server 200 via the information acquisition unit 413. When the update program UP for updating the program P is acquired from the server 200, the update processing unit 415 updates the program P using the acquired update program UP. The update processing unit 415 rewrites the program P stored in the storage device 412 with the newly acquired update program UP.

[0060] When updating the program P using the acquired update program UP, the update processing unit 415 outputs a predetermined command (a predetermined control signal) to the sub-microcomputer 420 and the IO expander 440 so that at least some of the multiple electrical components 60 are controlled by the sub-microcomputer 420 and the IO expander 440.

[0061] FIG. 7 is a block diagram showing the functional configuration of the sub-microcomputer. 7, the sub-microcomputer 420 functionally includes, for example, a signal input / output unit 423, a component control unit 424, an update component control unit 425, and an upper limit time management unit 426. The signal input / output unit 423, the component control unit 424, and the update component control unit 425 are each realized by the processor 421 executing a sub-program SP stored in the storage unit 422.

[0062] The signal input / output unit 423 performs input and output of signals to and from the main microcomputer 410 (communication with the main microcomputer 410).

[0063] The component control unit 424 normally controls each of the plurality of electric components 60. The component control unit 424 controls the compressor 61, the defrost heater 80, the vegetable compartment heater 81, the water supply port heater 82, and the vertical partition heater 83 based on a command (control signal) output from the main microcomputer 410.

[0064] When updating information in main microcomputer 410, component control unit 425 controls compressor 61, defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83 based on information indicating the state of each electrical component 60 (the state at the start of the update) notified from main microcomputer 410. For example, when updating information, component control unit 425 maintains the states of compressor 61, defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83 at the start of control by sub-microcomputer 420.

[0065] If the time during which the sub-microcomputer 420 controls the electric component 60 exceeds a predetermined upper limit time T during information update, the upper limit time management unit 426 stops the operation of the electric component 60 controlled by the sub-microcomputer 420. Furthermore, the upper limit time management unit 426 can set the upper limit time T based on the state of the electric component 60 when updating to the update program UP during information update. In other words, the upper limit time management unit 426 can set (change) the length of the upper limit time T based on the state of the electric component 60 at the start of the information update.

[0066] For example, when a defrosting operation of refrigerator 100 is being performed at the start of information update, upper limit time management unit 426 sets upper limit time T to be shorter than a reference upper limit time T. For example, upper limit time management unit 426 sets upper limit time T to be shorter than a case where control other than the defrosting operation (e.g., all control other than the defrosting operation) is being performed. A case where a defrosting operation of refrigerator 100 is being performed is, for example, a case where defrost heater 80 is in a heating state, or a case where refrigerant blower 62 is driven without using the defrost heater and no refrigerant is supplied to cooler 73. A case where control other than the defrosting operation is being performed is, for example, a case where cooling control is being performed to lower the temperature of storage compartment 11. By setting upper limit time T to be shorter when a defrosting operation is being performed (e.g., shorter than the reference upper limit time T), if an abnormality occurs in main microcomputer 410, it is possible to shorten the time during which storage compartment 11 is not cooled (e.g., the time during which the temperature of storage compartment 11 rises) when an abnormality occurs in main microcomputer 410.

[0067] For example, when cooling control is being performed to lower the temperature of storage compartment 11 of refrigerator 100 at the start of information update, upper limit time management unit 426 sets upper limit time T to be longer than reference upper limit time T. For example, upper limit time management unit 426 sets upper limit time T to be longer than when control other than cooling control to lower the temperature of storage compartment 11 is being performed (for example, all control other than cooling control). By setting upper limit time T to be longer when cooling control is being performed (for example, setting it to be longer than reference upper limit time T), if an abnormality occurs in main microcomputer 410, it is possible to extend the time for which cooling of storage compartment 11 continues even when an abnormality occurs in main microcomputer 410.

[0068] FIG. 8 is a block diagram showing the functional configuration of the IO expander 440. As shown in FIG. 8, the IO expander 440 functionally includes a signal input / output unit 443, an update component control unit 445, and an upper limit time management unit 446 (timer). Each of the signal input / output unit 443, the component control unit 444, the update component control unit 445, and the upper limit time management unit 446 can be realized by settings from another component, such as the main microcomputer 410, the communication module 430, or the server 200. Note that one or more of the signal input / output unit 443, the update component control unit 445, and the upper limit time management unit 446 may be realized by an internal circuit provided in the IO expander 440.

[0069] The signal input / output unit 443 performs input / output of signals to and from the main microcomputer 410 and the communication module 430 (communication with the main microcomputer 410 and the communication module 430).

[0070] When updating information in main microcomputer 410, update-time component control unit 445 controls each of refrigerator blower 62, freezer blower 63, condenser blower 64, motorized three-way valve 65, interior light 84, operation panel 85, photocatalytic LED 86, water supply motor 89, ice tray motor 88, touch sensor 90, and damper 91, based on information indicating the state of each electrical component 60 (e.g., the state at the start of the information update) notified from main microcomputer 410. When updating information, update-time component control unit 445 maintains the states of refrigerator blower 62, freezer blower 63, condenser blower 64, motorized three-way valve 65, interior light 84, operation panel 85, photocatalytic LED 86, water supply motor 89, ice tray motor 88, touch sensor 90, and damper 91.

[0071] If the time period during which the IO expander 440 controls the electrical component 60 exceeds a predetermined upper limit time T during information update, the upper limit time management unit 446 stops the operation of the electrical component 60 controlled by the IO expander 440. Furthermore, the upper limit time management unit 446 can set the upper limit time T based on the state of the electrical component 60 when updating to the update program UP during information update. In other words, the upper limit time management unit 446 can set (change) the length of the upper limit time T based on the state of the electrical component 60 at the start of the information update.

[0072] Furthermore, the server 200 or the communication module 430 may be used instead of the update-time component control unit 445 and the upper limit time management unit 446. In this case, the upper limit time T is notified from the main microcomputer 410 to the server 200 or the communication module 430, and when the upper limit time T is reached in the server 200 or the communication module 430, the server 200 or the communication module 430 sets the component control unit 444 to stop the operation of the electric component 60.

[0073] For example, when a defrosting operation of refrigerator 100 is being performed at the start of information update, upper limit time management unit 446 sets upper limit time T to be shorter than a reference upper limit time T. For example, upper limit time management unit 446 sets upper limit time T to be shorter than when a control other than the defrosting operation (for example, all control other than the defrosting operation) is being performed. The case where a defrosting operation of refrigerator 100 is being performed is, for example, when defrost heater 80 is in a heating state, or when refrigerant blower 62 is driven without using the defrost heater and without supplying refrigerant to cooler 73.

[0074] For example, when cooling control to lower the temperature of storage compartment 11 of refrigerator 100 is being performed at the start of information update, upper limit time management unit 446 sets upper limit time T to be longer than the reference upper limit time T. For example, upper limit time management unit 446 sets upper limit time T to be longer than when control other than cooling control to lower the temperature of storage compartment 11 (for example, all control other than cooling control) is being performed.

[0075] <5. Control flow related to program updates> Next, the control flow related to program updates will be described. 9 is a diagram showing an example of a control flow related to updating a program. First, the information acquisition unit 413 determines whether or not an update program UP for updating the program P exists in the server 200 (S101).

[0076] If the update program UP for updating the program P exists in the server 200, the information acquisition unit 413 acquires the update program UP from the server 200 (S102). The information acquisition unit 413 downloads the update program UP from the server 200 to the refrigerator 100 via the network NW.

[0077] When the download of the update program UP from the server 200 is complete, the update processing unit 415 outputs a notification to the sub-microcomputer 420 and the IO expander 440 indicating that an information update of the program P to the update program UP will begin (S103). At this time, the main microcomputer 410 notifies the sub-microcomputer 420 and the IO expander 440 of the operating status at that time (at the start of control) of each electrical component 60 controlled by the sub-microcomputer 420 and the IO expander 440 during the information update.

[0078] After outputting a notification indicating that the information update of the program P to the update program UP has begun, the main microcomputer 410 begins updating the information of the program P to the update program UP (S104). The update processing unit 415 rewrites the program P stored in the storage device 412 to the update program UP.

[0079] Meanwhile, the signal input / output unit 423 of the sub-microcomputer 420 and the signal input / output unit 443 of the IO expander 440 receive an input of a notification indicating the start of an information update (S201). When the signal input / output units 423, 443 receive the input of the notification indicating the start of an information update, the update-time component control units 425, 445 start controlling each electrical component 60 based on information indicating the operating state of each electrical component 60 notified by the main microcomputer 410 during information update by the main microcomputer 410 (S202). For example, the update-time component control unit 425 of the sub-microcomputer 420 maintains the operating states of the compressor 61, the defrost heater 80, the vegetable compartment heater 81, the water supply port heater 82, and the vertical partition heater 83 at the time of the start of control by the sub-microcomputer 420, based on the operating states of each electrical component 60 notified by the main microcomputer 410. For example, the update component control unit 445 of the IO expander 440 maintains the operating states of the refrigerator blower 62, the freezer blower 63, the condenser blower 64, the electric three-way valve 65, the interior light 84, the operation panel 85, the photocatalytic LED 86, the water supply motor 89, the ice tray motor 88, the touch sensor 90, and the damper 91, based on the operating states of each electrical component 60 notified by the main microcomputer 410.

[0080] During information update, if the time during which the sub-microcomputer 420 and the IO expander 440 control the electrical component 60 exceeds a predetermined upper limit time T until the information update is completed, the upper limit time management units 426, 446 stop the operation of the electrical component 60 controlled by the sub-microcomputer 420 and the IO expander 440 (S203). In this case, if the time during which the sub-microcomputer 420 and the IO expander 440 control the electrical component 60 exceeds the upper limit time T, the upper limit time management units 426, 446 issue a notification to notify of an abnormality.

[0081] In this embodiment, at least one of the sub-microcomputer 420 and the IO expander 440 is communicably connected to the operation panel 85, the buzzer, the audio output unit, or the communication module 430 without going through the main microcomputer 410. The abnormality can be notified, for example, by displaying a message on the operation panel 85, sounding a warning sound from the buzzer, issuing a voice notification from the audio output unit, or sending a message to the terminal device of the user U via the server 200. Note that in this embodiment, the upper limit time management units 426 and 446 can set the upper limit time T based on the operating state of the electrical component 60 when the update to the update program UP is started.

[0082] When the information update of the program P to the update program UP is completed, the update processing unit 415 of the main microcomputer 410 outputs a notification indicating that the update is complete to the sub-microcomputer 420 and the IO expander 440 (S105).

[0083] Signal input / output unit 423 of sub-microcomputer 420 and signal input / output unit 443 of IO expander 440 receive an input of a notification indicating that the update has been completed (S204). When signal input / output units 423, 443 receive an input of a notification indicating that the update has been completed, update component control units 425, 445 terminate control of each electric component 60 and return to a state in which main microcomputer 410 controls each electric component 60 (S205). As a result, refrigerator 100 operates in a state in which the operation of each electric component 60 is controlled based on the updated update program UP.

[0084] <Specific example of control of electrical component 60 by sub-microcomputer and IO expander> (Example 1) In step S201, when the sub-microcomputer 420 controls the compressor 61 during information update, the sub-microcomputer 420 maintains the rotation speed of the compressor 61. In this case, the rotation speed of the compressor 61 may be maintained at the rotation speed of the compressor 61 when the information update is started, or may be set to a rotation speed lower than the rotation speed of the compressor 61 when the information update is started. However, if the compressor 61 is stopped when the information update is started, the compressor 61 is maintained in a stopped state during the information update.

[0085] Then, in step S202, if the upper limit time T is exceeded during the information update, the sub-microcomputer 420 stops the operation of the compressor 61. This prevents the inside of the storage chamber 11 from being excessively cooled during the information update. Here, if cooling control is being performed to lower the temperature of the storage chamber 11 when the update starts, the upper limit time T may be set longer than when control other than cooling control is being performed.

[0086] The compressor 61 may be controlled as follows. The second control device (e.g., the sub-microcomputer 420) determines whether the compressor 61 is in operation at the start of the information update. If the compressor 61 is in an operating state at the start of the information update, the second control device (e.g., the sub-microcomputer 420) acquires information related to the operating time (elapsed time) since the compressor 61 entered the operating state from the main microcomputer 410. The second control device (e.g., the sub-microcomputer 420) may then determine the remaining time for which the compressor 61 will continue to be operated based on the difference between a predetermined fixed time and the operating time since the compressor 61 entered the operating state. When the determined remaining time for which the compressor 61 will continue to be operated has elapsed, the second control device (e.g., the sub-microcomputer 420) may stop control of the compressor even if the time is less than the predetermined upper limit time T. The fixed time may be set based on statistical information of past operations (e.g., an average value during normal control). On the other hand, the second control device (e.g., sub-microcomputer 420) may stop control of compressor 61 if the above-mentioned predetermined upper limit time T elapses before the determined remaining time for continuing the driving state of compressor 61 elapses.

[0087] Alternatively or additionally to the above example, compressor 61 may be controlled as follows. For example, sub-microcomputer 420 determines the drive amount (operating frequency) of compressor 61 at the start of information updating based on information stored in memory 422 of sub-microcomputer 420 or a control instruction received from main microcomputer 410 before the start of information updating. Here, the drive amount (operating frequency) of compressor 61 is classified into, for example, a low rotation state intended to maintain the temperature of storage compartment 11, a high rotation state intended to rapidly cool storage compartment 11, and a medium rotation state that is a state between the high rotation state and the low rotation state. The medium rotation state is realized, for example, during the transition from the high rotation state to the low rotation state.

[0088] When the compressor 61 is operating at a low speed at the start of an information update, the upper limit time management unit 426 of the sub-microcomputer 420 sets a relatively long first upper limit time (e.g., 20 minutes) as the predetermined upper limit time T. This is because, when the compressor 61 is operating at a low speed, the adverse effects of continuing to operate the compressor 61 for a long period of time are small. On the other hand, when the compressor 61 is operating at a high speed at the start of an information update, the upper limit time management unit 426 of the sub-microcomputer 420 sets a second upper limit time (e.g., 10 minutes) that is shorter than the first upper limit time as the predetermined upper limit time T. This is because, when the compressor 61 is operating at a high speed, the adverse effects of continuing to operate the compressor 61 for a long period of time are large, but a certain amount of time is necessary for the purpose of rapid cooling. When the compressor 61 is operating at a medium speed at the start of an information update, the upper limit time management unit 426 of the sub-microcomputer 420 sets a third upper limit time as the predetermined upper limit time T. The third upper limit time may be the same as the second upper limit time, or may be shorter than the second upper limit time (for example, 5 minutes). This is because, when the compressor 61 is in a medium rotation speed state, the adverse effects are significant if the compressor 61 is driven for a long period of time, and the purpose of rapid cooling is being achieved.

[0089] (Example 2) In step S201, when updating information, if sub-microcomputer 420 controls defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83, sub-microcomputer 420 maintains defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83 in the ON state. However, if defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83 are stopped when updating information starts, defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83 are maintained in the stopped state when updating information.

[0090] Then, in step S202, if the upper limit time T is exceeded when updating the information, sub-microcomputer 420 stops the operation of defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83. This prevents excessive heating by defrost heater 80, crisper heater 81, water inlet heater 82, and vertical partition heater 83 when updating the information.

[0091] The defrost heater 80, the vegetable compartment heater 81, the water supply port heater 82, and the vertical partition heater 83 (hereinafter, simply referred to as "heaters") may be controlled as follows: The second control device (e.g., sub-microcomputer 420) determines whether the heater is in the ON state at the start of the information update. If the heater is in the ON state at the start of the information update, the second control device (e.g., sub-microcomputer 420) acquires information related to the operating time (elapsed time) since the heater was turned on from the main microcomputer 410. The second control device (e.g., sub-microcomputer 420) then determines the remaining time for which the heater will remain in the ON state based on the difference between a predetermined fixed time and the operating time since the heater was turned on. If the determined remaining time for which the heater will remain in the ON state has elapsed, the second control device (e.g., sub-microcomputer 420) may stop control of the heater even if it is less than the predetermined upper limit time T. The fixed time may be set based on statistical information from past operation (e.g., an average value during normal control). On the other hand, the second control device (for example, sub-microcomputer 420) may stop controlling the heater if the predetermined upper limit time T elapses before the determined remaining time for continuing the heater in the ON state elapses.

[0092] (Example 3) In step S201, when the IO expander 440 controls the refrigeration fan 62, the freezer fan 63, and the condenser fan 64 during information update, the IO expander 440 maintains the power supply and rotation speed control state to the refrigeration fan 62, the freezer fan 63, and the condenser fan 64. However, if the refrigeration fan 62, the freezer fan 63, and the condenser fan 64 are stopped when the information update starts, the IO expander 440 maintains the stopped state of the refrigeration fan 62, the freezer fan 63, and the condenser fan 64 during information update.

[0093] Then, in step S202, if the upper limit time T is exceeded during information update, the IO expander 440 stops the operation of the refrigeration fan 62, the freezer fan 63, and the condenser fan 64. This prevents excessive heat exchange in the refrigeration cooler 73, the freezer cooler 74, and the condenser 71 caused by the refrigeration fan 62, the freezer fan 63, and the condenser fan 64 during information update.

[0094] The refrigeration blower 62, the freezer blower 63, and the condenser blower 64 (hereinafter, simply referred to as "blowers") may be controlled as follows: The second control device (e.g., the IO expander 440) determines whether the blowers are in an operating state at the start of an information update. If the blowers are in an operating state at the start of an information update, the second control device (e.g., the IO expander 440) acquires information related to the operating time (elapsed time) since the blowers entered an operating state from the main microcomputer 410. The second control device (e.g., the sub-microcomputer 420) then determines the remaining time for which the blowers will continue to be in an operating state based on the difference between a predetermined fixed time and the operating time since the heater was turned on. If the determined remaining time for which the blowers will continue to be in an operating state has elapsed, the second control device (e.g., the IO expander 440) may stop control of the blowers even if the time is shorter than the predetermined upper limit time T. The fixed time may be set based on statistical information of past operations (e.g., an average value during normal control). On the other hand, the second control device (for example, the IO expander 440) may stop controlling the fan if the above-mentioned predetermined upper limit time T has elapsed before the determined remaining time for continuing the fan driving state has elapsed.

[0095] Alternatively or additionally to the above example, the fan may be controlled as follows. For example, the IO expander 440 determines the drive amount (rotation speed) of the fan at the start of the information update based on a control instruction received from the main microcomputer 410 before the information update starts. Here, the drive amount (rotation speed) of the fan is classified into, for example, a low-speed state aimed at maintaining the temperature of the storage compartment 11, a high-speed state aimed at quickly cooling the storage compartment 11, and a medium-speed state that is a state between the high-speed state and the low-speed state. The medium-speed state is realized, for example, during the transition from the high-speed state to the low-speed state.

[0096] When the fan is driven at a low speed at the start of an information update, the upper limit time management unit 446 of the IO expander 440 sets a relatively long first upper limit time (e.g., 20 minutes) as the predetermined upper limit time T. This is because, when the fan is driven at a low speed, the adverse effects are small even if the fan continues to be driven for a long time. On the other hand, when the fan is driven at a high speed at the start of an information update, the upper limit time management unit 446 of the IO expander 440 sets a second upper limit time (e.g., 10 minutes) that is shorter than the first upper limit time as the predetermined upper limit time T. This is because, when the fan is driven at a high speed, the adverse effects are large if the fan is driven for a long time, but a certain amount of time is necessary for the purpose of rapid cooling. When the fan is driven at a medium speed at the start of an information update, the upper limit time management unit 446 of the IO expander 440 sets a third upper limit time as the predetermined upper limit time T. The third upper limit time may be the same as the second upper limit time, or may be shorter than the second upper limit time (for example, 5 minutes). This is because, when the fan is driven at a medium speed, continuing to drive the fan for a long period of time has a significant adverse effect, and the purpose of rapid cooling is being achieved.

[0097] (Example 4) In step S201, when the IO expander 440 controls the motorized three-way valve 65 during information update, the IO expander 440 maintains the state of the motorized three-way valve 65 at the time when the information update is started. This maintains the refrigerant path in the refrigeration cycle device CD, and the refrigerated or cooled state in the storage chamber 11 is maintained.

[0098] (Example 5) In step S201, when the IO expander 440 controls the interior light 84 during information update, the IO expander 440 may maintain the interior light 84 in an ON state. Here, during normal control, the main microcomputer 410 turns on the interior light 84 when the door open sensor detects that the door 20 has been opened. On the other hand, when information update is performed, the main microcomputer 410 turns on the interior light 84 when the door 20 is not opened (when the door open sensor detects that the door 20 is closed), and then stops to start the information update. In this case, the IO expander 440 maintains the interior light 84 in an ON state regardless of whether the door 20 is open or closed. Therefore, even if the user U opens the door 20 during information update (while the main microcomputer 410 is stopped), the interior light 84 remains ON, allowing the user U to clearly see the inside of the storage compartment 11. In this way, the interior light 84 can illuminate the inside of the storage compartment 11 even during information update. Then, in step S202, if the upper limit time T is exceeded when updating the information, the IO expander 440 turns off the interior light 84.

[0099] (Example 6) In step S201, if IO expander 440 controls operation panel 85 during information update, IO expander 440 may maintain power supply to operation panel 85. In this case, operation panel 85 remains in a state where it can accept external input operations from the user. However, operation panel 85 suppresses output of at least a portion of the externally accepted operation input to main microcomputer 410 during information update. For example, operation panel 85 does not notify main microcomputer 410 of control signals for controlling each electrical component 60 of refrigerator 100 in response to external input operations at that time. Operation panel 85 stores the content of the external input operation during information update in a storage unit provided in operation panel 85. Then, after the information update is completed, the content of the external input operation during information update may be notified to main microcomputer 410.

[0100] (Example 7) In step S201, when the IO expander 440 controls the photocatalyst LED 86 during information update, the IO expander 440 may maintain the light-emitting state of the photocatalyst LED 86. For example, when information update is performed, the photocatalyst LED 86 is turned on and then stopped to start the information update, regardless of the state of the refrigerator 100 (for example, when a predetermined condition for emitting light from the photocatalyst LED 86 under normal control is not satisfied). In this case, the IO expander 440 maintains the light-emitting state of the photocatalyst LED 86 regardless of the state of the refrigerator 100. Then, in step S202, when the upper limit time T is exceeded during information update, the IO expander 440 turns off the photocatalyst LED 86. In this way, the photocatalyst LED 86 can sterilize and deodorize the inside of the storage compartment 11 even during information update.

[0101] (Example 8) In step S201, when IO expander 440 controls water supply motor 89 and ice tray motor 88 during information update, IO expander 440 may be configured to suppress the rotation of water supply motor 89 and ice tray motor 88. Furthermore, if water supply motor 89 and ice tray motor 88 are rotating when information update starts, information update may be started after water supply motor 89 and ice tray motor 88 have rotated.

[0102] (Example 9) In step S201, when the IO expander 440 controls the touch sensor 90 during information update, the IO expander 440 may maintain power supply to the touch sensor 90. However, in this embodiment, the actuators provided on the refrigerator compartment doors 20Aa, 20Ab are not operated during information update. Therefore, during information update, the IO expander 440 may notify that the automated operation of the refrigerator compartment doors 20Aa, 20Ab by the touch sensor 90 is disabled, for example, by displaying information on the operation panel 85 or by turning off lamps (not shown) provided on the refrigerator compartment doors 20Aa, 20Ab.

[0103] In this embodiment, refrigerator 100 includes, as one of electrical components 60, an operation component (e.g., touch sensor 90) that can respond to an operation by user U even without a control instruction from main microcomputer 410, sub-microcomputer 420, or IO expander 440. Touch sensor 90 can respond to an operation by user U even without a control instruction from main microcomputer 410, sub-microcomputer 420, or IO expander 440, for example, by having a microcomputer inside touch sensor 90. In this embodiment, sub-microcomputer 420 or IO expander 440 stops the operation component when program P stored in storage device 412 is updated with update information SA obtained from the outside, and resumes operation of electrical component 60 when a control instruction is output from main microcomputer 410, sub-microcomputer 420, or IO expander 440 after the information is updated.

[0104] (Example 10) In step S201, when updating information, if the IO expander 440 controls the damper 91 provided in the flow path through which the cold air that has passed through the refrigeration cooler 73 and the refrigeration cooler 74 flows by the wind generated by the refrigeration blower 62 and the freezing blower 63, the IO expander 440 may maintain the opening of the damper 91. This allows the cooling state inside the storage room 11 to be maintained when updating information.

[0105] <6. Advantages> As a comparative example, consider a refrigerator in which all controls are stopped when updating information. In such a refrigerator, for example, control is stopped to update information after cooling (supercooling) the storage compartment in advance to prevent the temperature from rising during the period when control is stopped. However, in such a refrigerator, the temperature of the storage compartment may rise if the door is opened or closed or if hot food ingredients are placed in the storage compartment during information updating. Furthermore, power consumption may increase when supercooling is performed.

[0106] On the other hand, in this embodiment, when updating information stored in storage device 412 with update program UP, sub-microcomputer 420 and IO expander 440 control multiple electrical components 60 instead of main microcomputer 410, so that updating to update program UP can be performed while continuing the operation of multiple electrical components 60 provided in refrigerator 100. Therefore, even if door 20 is opened or closed or hot foodstuffs are placed in storage compartment 11 during information updating, it becomes easier to maintain a low temperature in storage compartment 11. Furthermore, there is less need for supercooling, which can improve power consumption.

[0107] Furthermore, in this embodiment, if the update to the update program UP is not completed within upper limit time T for some reason and the time during which sub-microcomputer 420 and IO expander 440 control electric component 60 exceeds predetermined upper limit time T, the operation of electric component 60 controlled by sub-microcomputer 420 and IO expander 440 can be stopped. Therefore, it is possible to more appropriately perform control related to the update of refrigerator 100.

[0108] Although several embodiments and modifications have been described above, the embodiments and modifications are not limited to the above-described examples. For example, two or more embodiments or modifications may be realized in combination with each other.

[0109] Below are some refrigerators, refrigerator control methods, and programs. [1]: Electrical components and a first control device capable of outputting a control instruction for controlling the electrical component; a storage device provided inside or outside the first control device, in which information to be used for control by the first control device is stored; a second control device capable of controlling the electrical component based on a control instruction from the first control device; Equipped with the second control device maintains control of the electrical component when the information stored in the storage device is updated with update information acquired from outside, and stops operation of the electrical component when no signal is received from the first control device for a predetermined upper limit time set corresponding to the time of updating the information. refrigerator.

[0110] According to this configuration, when updating information stored in the storage device using update information, the update can be performed using the update information while operating the electric components using the second control device instead of the first control device. Also, if the update using the update information does not finish within the upper limit time for some reason and the time spent controlling the electric components by the second control device exceeds the predetermined upper limit time, the operation of the electric components controlled by the second control device can be stopped. This can further improve the convenience of the refrigerator.

[0111] [2]: In the refrigerator according to [1], When the second control device does not receive a control instruction from the first control device when the information is updated, the second control device maintains the state of the electrical component at the start of the update until the predetermined upper limit time is exceeded.

[0112] According to this configuration, the state of the electric component 60 at the start of the information update is maintained until the upper limit time is exceeded, so that the electric component 60 can continue to operate in the same state as before the information update.

[0113] [3]: In the refrigerator according to [1] or [2], The upper limit time management unit can set the length of the upper limit time based on the state of the electrical component at the start of information update.

[0114] According to this configuration, the upper limit time is set based on the state of the electrical component 60 when the update is started, so that the operation of the electrical component 60 can be continued until an appropriate time (or terminated early at an appropriate time) depending on the state of the electrical component 60.

[0115] [4]: In the refrigerator according to [3], When a defrosting operation is being performed at the start of the update, the upper limit time management unit sets the upper limit time to be shorter than when control other than the defrosting operation is being performed.

[0116] With this configuration, when a defrosting operation is being performed when updating is started, the upper limit time is shortened compared to when a control other than the defrosting operation is being performed, so that the operation of the electric components can be stopped earlier if an abnormality occurs in the first control device, thereby preventing the temperature inside the refrigerator from easily rising.

[0117] [5]: In the refrigerator according to [3] or [4], When a defrosting operation of the refrigerator is being performed at the start of the update, the upper limit time management unit sets the upper limit time to be shorter than when control other than the defrosting operation is being performed.

[0118] According to this configuration, when cooling control is being performed to lower the temperature of the storage compartment of the refrigerator body when updating is started, the upper limit time is made longer than when other control other than cooling control is being performed, making it easier to maintain a cooled state of the temperature of the storage compartment.

[0119] [6]: In the refrigerator according to any one of [1] to [5], When the information is updated, if the second control device does not receive a signal from the first control device for the upper limit time, the second control device issues a notification to notify of an abnormality.

[0120] According to this configuration, if the time during which the second control device controls the electrical component 60 exceeds the upper limit time, an abnormality is reported, so that the user can recognize that some abnormality has occurred in the information update.

[0121] [7]: In the refrigerator according to any one of [1] to [6], During normal control in which the first control device performs control using the information stored in the storage device, the second control device communicates with the first control device at a predetermined period, and stops the operation of the electrical component if communication with the first control device is interrupted beyond a predetermined judgment time, and the upper limit time set in response to the information update is set to a time longer than the judgment time.

[0122] According to this configuration, it becomes easier to ensure a long predetermined upper limit time for the second control device that communicates with the first control device at a predetermined cycle.

[0123] [8]: In the refrigerator according to any one of [1] to [6], During normal control in which the first control device performs control using the information stored in the storage device, when the second control device receives a first instruction from the first control device, it controls the electrical component based on the first instruction until it receives a second instruction from the first control device, and when the update is completed, the first control device outputs a control instruction to resume control of the electrical component.

[0124] According to this configuration, it becomes easier to ensure a long predetermined upper limit time for the second control device that performs control based on a previously received control instruction until a new control instruction is received.

[0125] [9] The device further includes an operating component that can respond to user operations even without control instructions from the first control device and the second control device, and the second control device stops the operating component when the information stored in the storage device is updated by update information obtained from the outside, and resumes operation of the electrical component when it receives a signal from the first control device after the information has been updated.

[0126] According to this configuration, by stopping the operation of the operation components at the time of information update when the information stored in the storage device is updated with the update information, the user can easily notice that at least some of the functions of the refrigerator are unavailable.

[0127] Although several embodiments of the present invention have been described, these embodiments are presented as examples and are not intended to limit the scope of the invention. These embodiments can be implemented in various other forms, and various omissions, substitutions, and modifications can be made without departing from the spirit of the invention. These embodiments and their modifications are included within the scope and spirit of the invention, as well as within the scope of the invention described in the claims and their equivalents. [Explanation of symbols]

[0128] 100...refrigerator, 101...refrigerator main body, 400...control unit, 410...main microcomputer (first control device), 412...storage device, 413...information acquisition unit, 420...sub-microcomputer (second control device), 426...upper limit time management unit, 440...IO expander (second control device), 446...upper limit time management unit, P...program, UP...update program (update information).

Claims

1. Electrical components and a first control device capable of outputting a control instruction for controlling the electrical component; a storage device provided inside or outside the first control device, in which information to be used for control by the first control device is stored; a second control device capable of controlling the electrical component based on a control instruction from the first control device; Equipped with the second control device maintains control of the electrical component when the information stored in the storage device is updated with update information acquired from the outside, and stops operation of the electrical component when no signal is received from the first control device for a predetermined upper limit time set corresponding to the time of updating the information. refrigerator.

2. When the second control device does not receive a control instruction from the first control device when the information is updated, the second control device maintains the state of the electrical component at the start of the update until the predetermined upper limit time is exceeded. The refrigerator according to claim 1.

3. an upper limit time management unit that manages the length of the upper limit time, the upper limit time management unit is capable of setting the length of the upper limit time based on the state of the electrical component at the start of the update. The refrigerator according to claim 1 or 2.

4. When a defrosting operation of the refrigerator is being performed at the start of the update, the upper limit time management unit sets the upper limit time to be shorter than when control other than the defrosting operation is being performed. The refrigerator according to claim 3.

5. the upper limit time management unit sets the upper limit time longer when cooling control for lowering a temperature of a storage compartment of the refrigerator is being performed at the start of the update than when control other than the cooling control is being performed; The refrigerator according to claim 3.

6. When the second control device does not receive a signal from the first control device for more than the upper limit time when the information is updated, the second control device issues a notification to notify of an abnormality. The refrigerator according to claim 1 or 2.

7. During normal control in which the first control device performs control using the information stored in the storage device, the second control device communicates with the first control device at a predetermined cycle, and stops operation of the electrical component when communication with the first control device is interrupted beyond a predetermined determination time, the upper limit time set in response to the information update is set to a time longer than the determination time; The refrigerator according to claim 1 or 2.

8. During normal control in which the first control device performs control using the information stored in the storage device, when the second control device receives a first instruction from the first control device, the second control device controls the electric component based on the first instruction until it receives a second instruction from the first control device; When the update is completed, the first control device outputs a control instruction to resume control of the electrical component. The refrigerator according to claim 1 or 2.

9. further comprising an operation component that can respond to a user's operation even without a control instruction from the first control device and the second control device; the second control device stops the operation component when the information stored in the storage device is updated with update information acquired from the outside, and resumes operation of the electrical component when a signal is received from the first control device or the second control device after the information is updated; The refrigerator according to claim 1 or 2.

Images