Control apparatus, control method, and storage medium

Abstract

To provide a control device or the like capable of appropriately determining whether or not to permit a control request from each of a plurality of applications to the same vehicle device.SOLUTION: The control apparatus 20 is a control apparatus that is installed in the vehicle 1, the vehicle 1 having a plurality of applications that control vehicle devices of the vehicle 1, the control apparatus 20 including an acquisition unit 21 that acquires a control request for a vehicle device from each of the plurality of applications, and a determination unit 22 that, when the control request for the vehicle device from each of the plurality of applications satisfies a predetermined condition, determines whether or not the control request of each of the plurality of applications is possible, based on the control request of each of the plurality of applications that satisfies the predetermined condition.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates to a control device, a control method, and a program to be mounted on a vehicle. [Background technology]

[0002] Patent Document 1 discloses a mobile terminal device that determines that functions such as email, camera photography, television, and the Internet, which require the use of the eyes (vision) and fingers (operation), are dangerous operations for the user when the mobile terminal device is used while walking, and can suppress the display of these functions on the display unit. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2014-220636 Summary of the Invention [Problem to be solved by the invention]

[0004] Incidentally, it is assumed that multiple applications in a vehicle control the same vehicle device. In this case, even if a single application does not cause an unsafe state in the vehicle, the vehicle may become dangerous when multiple applications control the same vehicle device. Therefore, when multiple applications control the same vehicle device, it is desirable to appropriately determine whether or not to allow control. However, Patent Document 1 does not disclose any technology related to multiple applications controlling the same device.

[0005] Therefore, the present disclosure provides a control device, a control method, and a program that can appropriately determine whether to permit control requests from multiple applications to the same vehicle device. [Means for solving the problem]

[0006] A control device according to one aspect of the present disclosure is a control device mounted on a vehicle, the vehicle having a plurality of applications that control vehicle devices of the vehicle, and including an acquisition unit that acquires control requests from each of the plurality of applications to the vehicle devices, and a judgment unit that, when the control requests from each of the plurality of applications to the vehicle devices satisfy a predetermined condition, determines whether or not to grant the control requests from each of the plurality of applications based on the control requests from each of the plurality of applications that satisfy the predetermined condition.

[0007] A control method according to one aspect of the present disclosure is a control method executed by a control device mounted on a vehicle, wherein the vehicle has a plurality of applications that control vehicle devices of the vehicle, and obtains control requests for the vehicle devices from each of the plurality of applications, and if the control requests for the vehicle devices from each of the plurality of applications satisfy a predetermined condition, determines whether or not to grant the control requests for each of the plurality of applications based on the control requests for each of the plurality of applications that satisfy the predetermined condition.

[0008] A program according to one aspect of the present disclosure is a program for causing a computer to execute the above control method. [Effects of the Invention]

[0009] According to one aspect of the present disclosure, it is possible to realize a control device or the like that can appropriately determine whether to permit control requests from multiple applications to the same vehicle device. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is a block diagram showing the configuration of a vehicle including a control device according to an embodiment. [Figure 2] FIG. 2 is a flowchart showing the operation of the control device according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0011] (Background to this disclosure) Before describing the embodiments of the present disclosure, the background to the present disclosure will be described.

[0012] In the future, it is expected that functions will be able to be added to vehicles by user applications, as with smartphones. In other words, it is expected that control of vehicle devices will be released to user applications. The released functions may not be functions that are directly related to the life or death of vehicle occupants. Hereinafter, applications (application programs) will also be referred to as apps, and user applications will also be referred to as user apps.

[0013] A user application is an application that is different from an application (system application) that is pre-installed in a vehicle. User applications include, for example, applications that become executable by a user operation (or contract), and applications installed by a user. A user application may, for example, be an application that can execute functions with higher performance than those that a system application can execute. A user application is an application that controls a vehicle device that is the target of control by a system application, instead of the system application or together with the system application. Hereinafter, a system application will also be referred to as a system application.

[0014] As described above, it is assumed that multiple applications are running in a vehicle (e.g., in an ECU). In this case, overlapping control requests from the multiple applications to the same vehicle device may occur. Overlapping control requests refers to a state in which two control requests are executed simultaneously. For example, this may mean that one control request is executed while another control request is being received, or that multiple control requests to the same vehicle device are received simultaneously (or within a short period of time). When control requests from multiple applications to a single vehicle device overlap, depending on the combination of applications, the operation of the vehicle device may become unstable, putting the vehicle in a dangerous state. Therefore, from the perspective of ensuring vehicle safety, it is desirable to appropriately determine whether to permit control requests from multiple applications to the same vehicle device. However, Patent Document 1 does not disclose such a technology.

[0015] Therefore, the present inventors have conducted extensive research into a control device etc. that can appropriately determine whether to permit control requests from multiple applications to the same vehicle device, and have devised the following control device etc. Specifically, the present inventors have devised a control device etc. that can permit or block at least one control request depending on whether a combination of the operations of multiple apps would put the vehicle in a dangerous state.

[0016] Hereinafter, the embodiments will be specifically described with reference to the drawings.

[0017] The embodiments described below are all comprehensive or specific examples. The numerical values, shapes, components, component placement and connection configurations, steps, and step order shown in the following embodiments are merely examples and are not intended to limit the present disclosure. Furthermore, among the components in the following embodiments, components not described in independent claims are described as optional components.

[0018] Furthermore, each figure is a schematic diagram and is not necessarily an exact illustration. Therefore, for example, the scales of the figures do not necessarily match. Furthermore, in each figure, substantially the same components are given the same reference numerals, and redundant explanations are omitted or simplified.

[0019] Furthermore, in this specification, terms indicating relationships between elements such as "simultaneity," as well as numerical values ​​and numerical ranges, are not expressions that express only the strict meaning, but are expressions that also include a substantially equivalent range, for example, a difference of about several percent (or about 10%).

[0020] Furthermore, in this specification, ordinal numbers such as "first" and "second" do not refer to the number or order of components unless otherwise specified, but are used for the purpose of avoiding confusion and distinguishing between components of the same type.

[0021] (Embodiment) The control device according to this embodiment will be described below with reference to FIGS.

[0022] [1. Control device configuration] First, the configuration of a vehicle having a control device according to this embodiment will be described with reference to Fig. 1. Fig. 1 is a block diagram showing the configuration of a vehicle 1 including a control device 20 according to this embodiment. Note that Fig. 1 shows an exemplary functional configuration of the control device 20, and the functional configuration of the control device 20 is not limited to that shown in Fig. 1.

[0023] 1, the vehicle 1 includes an ECU (Electronic Control Unit) 100, a first vehicle device 200A, a second vehicle device 200B, and a third vehicle device 200C. The number of vehicle devices included in the vehicle 1 is not limited to three, and may be one or more.

[0024] The ECU 100 is an in-vehicle ECU mounted on the vehicle 1, and controls vehicle devices (equipment) equipped in the vehicle 1. The ECU 100 is a device including, for example, a processor (microprocessor), digital circuits such as memory, analog circuits, communication circuits, etc. The memory is a ROM (Read Only Memory), RAM (Random Access Memory), etc., and can store a control program (computer program) executed by the processor. For example, the processor operates in accordance with the control program (computer program), causing the ECU 100 to realize various functions. This control program includes the above-mentioned user applications and system applications.

[0025] Note that a plurality of ECUs 100 are mounted on the vehicle 1. For example, the plurality of ECUs 100 can communicate with each other via an in-vehicle communication network (more specifically, a bus to which each of the ECUs 100 is connected). At least one of the plurality of ECUs 100 may have the configuration shown in FIG. 1.

[0026] The ECU 100 may be an ECU (a so-called zone ECU) that is arranged in the vehicle 1 and controls vehicle devices in the area where it is arranged, or may be a central ECU that integrates multiple ECUs (a so-called integrated ECU).The integrated ECU is an ECU that integrates functions that were previously separated and installed in multiple ECUs in order to solve the problem of increasing development time or cost as in-vehicle systems become more complex, and is an ECU that uses virtualization technology to operate multiple virtual computers (virtual machines: VMs) on one ECU.

[0027] The ECU 100 functions as a control device that controls vehicle devices by executing at least one of an installed system application and a user application. The ECU 100 includes a first processing unit 10A, a second processing unit 10B, a third processing unit 10C, and a control device 20. The number of user applications included in the ECU 100 is not limited to three, but may be two or more. In the following, an example will be described in which each of the first processing unit 10A, the second processing unit 10B, and the third processing unit 10C is a processing unit that executes a user application. The ECU 100 may further include a processing unit (not shown) that executes a system application.

[0028] The first processing unit 10A, the second processing unit 10B, and the third processing unit 10C are processing units that execute user applications different from system applications. Specifically, the first processing unit 10A is a processing unit that executes a first user application (the first user application shown in FIG. 1), the second processing unit 10B is a processing unit that executes a second user application (the second user application shown in FIG. 1), and the third processing unit 10C is a processing unit that executes a third user application (the third user application shown in FIG. 1).

[0029] The user application is, for example, an application created by a business operator different from the manufacturer of the system application. The first processing unit 10A, the second processing unit 10B, and the third processing unit 10C are configured to be able to control vehicle devices of the vehicle 1 by executing the user application. The first processing unit 10A, the second processing unit 10B, and the third processing unit 10C output a control request to the control device 20 to request control of the vehicle devices of the vehicle 1, and can control the vehicle devices when the control request is permitted by the control device 20. The control request includes identification information (e.g., an ID) indicating the vehicle device to be controlled and control content. The first user application is an example of a first application, and the second user application is an example of a second application. The first user application, the second user application, and the third user application are examples of multiple applications.

[0030] The first processing unit 10A, the second processing unit 10B, and the third processing unit 10C have the function of controlling the same vehicle device. Note that the first processing unit 10A, the second processing unit 10B, and the third processing unit 10C may also have the function of controlling different vehicle devices.

[0031] In this way, the ECU 100 according to this embodiment is configured to allow a plurality of user applications to run on it, in other words, the vehicle 1 has a plurality of user applications that control one vehicle device.

[0032] The control device 20 is a processing device that monitors (behavior monitors) control of vehicle devices from multiple user applications, and determines whether to permit control requests from at least two of the first processing unit 10A, the second processing unit 10B, and the third processing unit 10C based on the control requests from the at least two processing units. The control device 20 includes an acquisition unit 21 and a determination unit 22. Note that, hereinafter, a control request output by the first processing unit 10A executing a first user application will also be referred to as a control request from the first user application, and a control request output by the second processing unit 10B executing a second user application will also be referred to as a control request from the second user application.

[0033] The acquisition unit 21 is a communication interface that acquires control requests to a vehicle device from the first user application, the second user application, and the third user application. The acquisition unit 21 acquires, for example, control requests to the same vehicle device from at least two of the first user application, the second user application, and the third user application. The acquisition unit 21 is configured to include, for example, a communication circuit (or a communication module).

[0034] The determination unit 22 determines whether to permit control requests from multiple user applications to a vehicle device based on the control requests of each of the multiple user applications. The determination unit 22 determines whether to permit each of the control requests of the multiple user applications based on whether executing each of the control requests of the multiple user applications will put the vehicle 1 in a dangerous state (e.g., the vehicle 1's driving will be in a dangerous state). For example, when it is predicted that executing each of the control requests of the multiple user applications will put the vehicle 1 in a dangerous state, the determination unit 22 determines not to permit a control request from at least one of the multiple user applications. When it is predicted that executing each of the control requests of the multiple user applications will put the vehicle 1 in a dangerous state, the determination unit 22 may determine not to permit each of the multiple control requests, or may determine to permit one or more of the multiple control requests based on a predetermined priority according to the user application or the control content. The determination method by the determination unit 22 will be described in detail later.

[0035] The first vehicle device 200A, the second vehicle device 200B, and the third vehicle device 200C are in-vehicle devices communicatively connected to the ECU 100 via an in-vehicle communication network and controlled by the ECU 100. The first vehicle device 200A, the second vehicle device 200B, and the third vehicle device 200C are physical devices mounted on the vehicle 1. The first vehicle device 200A, the second vehicle device 200B, and the third vehicle device 200C are display devices, sound output devices, interior lights, notification devices, etc. The display devices may be, for example, a display device included in a car navigation system or a rearview monitor. The sound output devices may be, for example, a sound output device included in a car navigation system or audio equipment. Furthermore, the first vehicle device 200A, the second vehicle device 200B, and the third vehicle device 200C may be lights (e.g., headlights), electronic mirrors, power windows, air conditioners, locking / unlocking devices, etc.

[0036] [2. Operation of the control device] Next, the operation of the control device 20 configured as above will be described with reference to Fig. 2. Fig. 2 is a flowchart showing the operation (control method) of the control device 20 according to this embodiment.

[0037] 2, the acquisition unit 21 acquires a control request for a vehicle device from a user application (S10). The acquisition unit 21 can acquire a control request from each of a first user application, a second user application, and a third user application. Note that the acquisition unit 21 may also acquire a control request from a system application in step S10.

[0038] Next, the determination unit 22 determines whether or not control requests for the vehicle device have been received from multiple applications (here, user applications) (S20). In step S20, the determination unit 22 determines YES when at least one of the following conditions is met: when the acquisition unit 21 receives a control request for the vehicle device from another user application different from one user application while the vehicle device is executing a control request from the one user application; when the acquisition unit 21 receives control requests for the same vehicle device from each of multiple user applications within a predetermined time; or when the acquisition unit 21 receives control requests for the same vehicle device from multiple user applications a predetermined number of times or more within a predetermined time. A determination of YES in step S20 corresponds to satisfaction of a predetermined condition.

[0039] Next, when the determination unit 22 determines that it has received control requests for the vehicle device from multiple apps (here, multiple user apps) (YES in S20), it determines whether or not the vehicle 1 is safe based on the control requests for the vehicle device from the multiple apps (here, user apps) (S30). The determination unit 22 integrates the control requests from the multiple apps to determine whether or not the vehicle 1 is safe. When the determination unit 22 determines that it has not received control requests for the vehicle device from multiple apps (NO in S20), for example, when it has received a control request from only one user app for the vehicle device, it proceeds to step S40.

[0040] Here, a specific example of the determination by the determination unit 22 as to whether it is safe or not will be illustrated.

[0041] For example, when the acquisition unit 21 acquires a control request for a vehicle device from another user application different from a user application while the vehicle device is executing a control request from the user application, the determination unit 22 may determine not to permit the acquired control request for the vehicle device if a predetermined condition is satisfied. For example, if the vehicle device is a presentation device such as a display device or a sound output device, and a control request including presenting second information different from the first information is executed while presenting first information (e.g., while displaying or outputting sound), the presented content may be difficult to confirm, and the information may not be properly conveyed to the driver, which may put the vehicle 1 in a dangerous state. Taking a sound output device as an example, for example, if audio information alerting a danger is overwritten by a user application that performs general streaming correction, the audio alerting a danger may become difficult to hear.

[0042] If the vehicle device is a display device, each of the multiple user applications has a function to control the display of a screen that is viewed by the driver of vehicle 1, and if the vehicle device is a sound output device, each of the multiple user applications has a function to control sound output in vehicle 1.

[0043] Specifically, when a control request from a second user application is acquired while the first vehicle device 200A is executing a control request from a first user application, the determination unit 22 may determine that a predetermined condition is satisfied if the control target included in the control request is the first vehicle device 200A, and may determine not to permit the control request to the vehicle device. Note that if the background color and the display color are similar in multiple control requests, the displays may cancel each other out, making the presented content difficult to see. Therefore, if the background color and the display color are similar, the vehicle 1 may be determined to be unsafe (e.g., at least one of the multiple control requests to the vehicle device is not permitted). For example, when control requests to control screen display are acquired from each of multiple user applications, the determination unit 22 may determine not to permit at least one of the control requests from each of the multiple user applications. Furthermore, when control requests to control audio output are acquired from each of multiple user applications, the determination unit 22 may determine not to permit at least one of the control requests from each of the multiple user applications.

[0044] Furthermore, for example, when the acquisition unit 21 acquires control requests to the same vehicle device from multiple user applications within a predetermined time (for example, simultaneously), for example, when a predetermined condition is satisfied, the determination unit 22 may determine not to permit at least one of the multiple control requests to the vehicle device acquired within the predetermined time. For example, if the vehicle device is a presentation device such as a display device or a sound output device, and a control request to present first information and a control request to present second information different from the first information are executed within a predetermined time (for example, simultaneously), it may be difficult to confirm the presented content, and the information may not be properly conveyed to the driver, which may put the vehicle 1 in a dangerous state.

[0045] Specifically, the determination unit 22 may determine that a predetermined condition is satisfied when the time difference between the acquisition times of multiple control requests for the same vehicle device is within a predetermined time, and may determine that at least one of the multiple control requests is not permitted. Here, the predetermined time is set in advance. For example, when the determination unit 22 receives multiple control requests for the same vehicle device simultaneously (i.e., the predetermined time is substantially zero), the determination unit 22 may determine that the vehicle 1 is not safe (e.g., not permit at least one of the multiple control requests for the vehicle device).

[0046] Furthermore, for example, when the acquisition unit 21 acquires control requests from multiple user applications to the same vehicle device a predetermined number of times or more within a predetermined time, for example, when a predetermined condition is satisfied, the determination unit 22 may determine not to permit at least one of the multiple control requests to the vehicle device acquired a predetermined number of times or more within a predetermined time. For example, if the vehicle device is a display device and the multiple control requests are to notify (display) some information, if the display is switched in a short time depending on the combination of user applications, the driver's attention may be distracted, and the vehicle 1 may be put in a dangerous state.

[0047] When the vehicle device is a device having a notification function such as a display device, each of the multiple user applications has a function of controlling notifications to the driver of the vehicle 1.

[0048] Specifically, the determination unit 22 may count the number of control requests for the same vehicle device received within a predetermined time, determine whether the number of times counted within the predetermined time is equal to or greater than a predetermined number, and determine to not permit at least one of the control requests if the number of times is equal to or greater than the predetermined number. The predetermined time here is set in advance.

[0049] The determination unit 22 may also determine whether to grant each of the control requests of the multiple user applications based on the control content of each of the control requests of the multiple user applications. That is, the determination unit 22 may determine whether to grant a control request when a predetermined condition is satisfied and another condition is also satisfied. For example, the determination unit 22 may determine not to grant at least one of the multiple control requests when the multiple control content conflicts with each other. For example, when the vehicle device is an interior light, the determination unit 22 may determine not to grant at least one of the multiple control requests when the multiple control content includes a control content to turn on the interior light and a control content to turn off the interior light. This is because if the combination of the multiple user applications causes the interior light to repeatedly turn on and off, it becomes difficult for the driver to see ahead, which may put the vehicle 1 in a dangerous state. Note that when the vehicle device is an interior light, the determination unit 22 may determine to grant multiple control requests when the multiple control content includes only one of a control content to turn on the interior light and a control content to turn off the interior light. Furthermore, the control content to turn on the light is, for example, an example of control content to brighten the interior light, and the control content to turn off the light is, for example, an example of control content to dim the interior light.

[0050] When the vehicle device is an interior light, each of the plurality of user applications has a function of controlling at least one of turning on and off the interior light of the vehicle 1.

[0051] Furthermore, for example, if the vehicle device is a display device, the determination unit 22 may determine not to permit at least one of the multiple control requests when each of the multiple control requests is to change the theme color of the display device's screen or to change the display content. This is because if the color scheme changes multiple times in a short period of time, the display may become difficult to see due to the relationship with the display color, making it difficult for the driver to check the display content, which may put the vehicle 1 in a dangerous state. Note that the screen theme is a function that allows the user to customize, for example, the desktop wallpaper, accent color, sound, and mouse cursor design all at once, and is an example of a function possessed by a user application.

[0052] Next, when the determination unit 22 determines that the vehicle 1 is safe based on the plurality of control requests (YES in S30), it determines to permit the control request of the vehicle device (S40) and outputs the control request to the vehicle device to be controlled. For example, the determination unit 22 transfers the control request to the vehicle device to be controlled.

[0053] As a result, if the vehicle 1 is safe, the control request from the user application is executed in the vehicle device to be controlled. This makes it possible to improve the user value provided by the user application while ensuring the safety of the vehicle 1. Note that a determination of YES in step S30 means that the vehicle 1 is determined to be safe.

[0054] Furthermore, when the determination unit 22 determines that the vehicle 1 is not safe (is unsafe) based on the multiple control requests (NO in S30), it determines that the control request for the vehicle device is not permitted (S50) and does not output the control request to the vehicle device to be controlled. In other words, the determination unit 22 prohibits the output of the control request to the vehicle device to be controlled.

[0055] Note that, for example, when multiple control requests are received simultaneously, the determination unit 22 may determine in step S50 to permit only some of the control requests. For example, the determination unit 22 may determine to permit one control request that is prioritized among the multiple control requests. Which control request is to be prioritized may be set in advance. For example, a control request that notifies an alarm or a control request from a user application that has a function to notify an alarm may be prioritized. This can further increase the user value compared to when none of the multiple control requests are permitted.

[0056] In this way, the control device 20 monitors control requests from multiple user applications to vehicle devices, and when multiple user applications make control requests to the same vehicle device, the control device 20 can determine whether to grant the control requests based on the safety of the vehicle 1. When it is predicted that the vehicle 1 will be in a dangerous state, at least some of the control requests from the multiple user applications are not executed, thereby ensuring the safety of the vehicle 1.

[0057] (Other embodiments) Although the control device according to one or more aspects has been described above based on the embodiments, the present disclosure is not limited to these embodiments. As long as it does not deviate from the spirit of the present disclosure, various modifications conceivable by a person skilled in the art to the present embodiments and embodiments constructed by combining components of different embodiments may also be included in the present disclosure.

[0058] For example, in the above embodiment, an example has been described in which the vehicle 1 includes one ECU 100. However, the vehicle 1 may include a plurality of ECUs 100. For example, the first processing unit 10A included in the first ECU may control a vehicle device that is a control target of a second ECU different from the first ECU via the control device 20. For example, a user application may be capable of controlling a vehicle device that is a control target of a second ECU different from the installed first ECU. In this case, the control device of the second ECU may execute the determinations of steps S20 and S30 based on, for example, a control request from the first ECU and a control request from the user application of the second ECU.

[0059] Furthermore, for example, in the above embodiment, the processing of steps S20 and S30 is performed in response to multiple control requests from a user application, but this is not limited to this. For example, the processing of steps S20 and S30 may be performed in response to multiple control requests from a system application, or the processing of steps S20 and S30 may be performed in response to control requests from both the system application and the user application.

[0060] In the above embodiments, each component may be configured with dedicated hardware, or may be realized by executing a software program suitable for each component. Each component may be realized by a program execution unit such as a CPU or processor reading and executing a software program recorded on a recording medium such as a hard disk or semiconductor memory.

[0061] The order in which the steps in the flowchart are executed is merely an example for specifically explaining the present disclosure, and an order other than the above may be used. Also, some of the steps may be executed simultaneously (in parallel) with other steps, or some of the steps may not be executed.

[0062] The division of functional blocks in the block diagram is an example, and multiple functional blocks may be realized as a single functional block, one functional block may be divided into multiple blocks, or some functions may be moved to another functional block.Furthermore, the functions of multiple functional blocks having similar functions may be processed in parallel or in time-sharing by a single piece of hardware or software.

[0063] Furthermore, the control device 20 according to the above embodiment may be realized as a single device or may be realized by multiple devices. When the control device 20 is realized by multiple devices, the components of the control device 20 may be distributed in any manner among the multiple devices. When the control device 20 is realized by multiple devices, the communication method between the multiple devices is not particularly limited, and may be wireless communication or wired communication. Furthermore, wireless communication and wired communication may be combined between the devices.

[0064] Furthermore, each component described in the above embodiments may be implemented as software or, typically, as an LSI, which is an integrated circuit. These components may be individually integrated into a single chip, or some or all of them may be integrated into a single chip. While LSI is used here, it may also be referred to as an IC, system LSI, super LSI, or ultra LSI depending on the level of integration. Furthermore, the integration method is not limited to LSI; it may be implemented using a dedicated circuit (a general-purpose circuit that executes a dedicated program) or a general-purpose processor. It is also possible to use a field programmable gate array (FPGA), which can be programmed after LSI fabrication, or a reconfigurable processor, which allows the connection or settings of circuit cells within an LSI to be reconfigured. Furthermore, if an integrated circuit technology that can replace LSI emerges due to advances in semiconductor technology or a derivative technology, that technology may naturally be used to integrate the components.

[0065] A system LSI is an ultra-multifunctional LSI manufactured by integrating multiple processing units on a single chip, and is specifically a computer system consisting of a microprocessor, ROM, RAM, etc. The ROM stores computer programs. The system LSI achieves its functions when the microprocessor operates in accordance with the computer programs.

[0066] Furthermore, one aspect of the present disclosure may be a computer program that causes a computer to execute each of the characteristic steps included in the control method shown in FIG.

[0067] Furthermore, for example, the program may be a program to be executed by a computer. Another aspect of the present disclosure may be a computer-readable non-transitory recording medium on which such a program is recorded. For example, such a program may be recorded on a recording medium and distributed or circulated. For example, the distributed program may be installed in a device having another processor, and the program may be executed by the processor, thereby causing the device to perform each of the above processes.

[0068] (Addendum) The above description of the embodiments discloses the following techniques.

[0069] (Technology 1) A control device (20) is mounted on a vehicle, the vehicle having a plurality of applications that control vehicle devices of the vehicle, and including an acquisition unit that acquires control requests from each of the plurality of applications to the vehicle devices, and a judgment unit that, when the control requests from each of the plurality of applications to the vehicle devices satisfy predetermined conditions, determines whether or not to grant the control requests from each of the plurality of applications based on the control requests from each of the plurality of applications that satisfy the predetermined conditions.

[0070] As a result, when a predetermined condition is satisfied, it is possible to determine whether to permit the multiple control requests using the multiple control requests that satisfy the predetermined condition. That is, it is possible to make a determination as to whether to permit the multiple control requests according to the multiple control requests. Therefore, it is possible to appropriately determine whether to permit the control requests from multiple applications to the same vehicle device.

[0071] (Technology 2) The determination unit is a control device 20 of technology 1 that determines whether or not to grant a control request for each of the plurality of applications based on whether or not the vehicle will be in a dangerous state if the control request for each of the plurality of applications is executed.

[0072] This allows the determination of whether to permit a control request from a user application depending on whether a combination of multiple control requests will put the vehicle in a dangerous state. Therefore, for example, not permitting a control request can prevent the vehicle from being put in a dangerous state, making it possible to appropriately determine whether to permit a control request from a user application to a vehicle device.

[0073] (Technology 3) The determination unit is a control device 20 of Technology 2 that determines not to permit at least one control request among the control requests of the plurality of applications when executing the control requests of the plurality of applications would put the vehicle in a dangerous state.

[0074] This means that at least one of the control requests will not be permitted if the vehicle is in a dangerous state, making it possible to appropriately determine whether to permit a control request from the perspective of more reliably ensuring the safety of the vehicle.

[0075] (Technology 4) The determination unit is the control device 20 according to any one of techniques 1 to 3, which determines whether or not to grant a control request for each of the plurality of applications based on the control content of the control request for each of the plurality of applications.

[0076] This makes it possible to determine whether to permit a control request from an application depending on the control content. For example, if a combination of control content puts the vehicle in a dangerous state, it is possible to deny the control request. Therefore, from the perspective of further ensuring the safety of the vehicle, it is possible to more appropriately determine whether to permit a control request.

[0077] (Technology 5) The control device 20 of any one of techniques 1 to 4, wherein the plurality of applications include a first application and a second application, and the predetermined condition includes the acquisition unit acquiring a control request from the second application to the vehicle device while the vehicle device is executing a control request from the first application.

[0078] This makes it possible to prevent a control request from the second application from being executed while a control request from the first application is being executed. That is, it is possible to prevent the vehicle from being put into a dangerous state due to two control requests being executed simultaneously. Therefore, it is possible to appropriately determine whether or not to permit a control request from the perspective of preventing the vehicle from being put into a dangerous state.

[0079] (Technology 6) In the control device 20 according to any one of techniques 1 to 5, the predetermined condition includes that the acquisition unit acquires a control request from each of the plurality of applications to the vehicle device within a predetermined time.

[0080] This makes it possible to prevent multiple control requests for vehicle devices from being executed within a predetermined time, thereby making it possible to appropriately determine whether to permit a control request from the viewpoint of preventing the vehicle from being put into a dangerous state.

[0081] (Technology 7) In the control device 20 according to any one of techniques 1 to 6, the predetermined condition includes that the acquisition unit acquires control requests from the plurality of applications to the vehicle device a predetermined number of times or more within a predetermined time period.

[0082] This makes it possible to prevent all of the acquired control requests from being executed when a predetermined number of applications or more are acquired within a predetermined time, thereby making it possible to appropriately determine whether to permit a control request from the viewpoint of preventing the vehicle from being put into a dangerous state.

[0083] (Technology 8) The control device 20 is any one of techniques 1 to 7, wherein each of the plurality of applications has a function of controlling the display of a screen to be viewed by a driver of the vehicle, and the judgment unit, when a control request to control the display of the screen is acquired from each of the plurality of applications, judges that at least one of the control requests of each of the plurality of applications is not permitted.

[0084] This makes it possible to prevent the display from becoming difficult to see due to the execution of control requests from multiple applications.

[0085] (Technology 9) The control device 20 is any one of techniques 1 to 8, wherein each of the plurality of applications has a function of controlling audio output in the vehicle, and the judgment unit, when a control request to control audio output is obtained from each of the plurality of applications, judges that at least one of the control requests of each of the plurality of applications is not permitted.

[0086] This makes it possible to prevent the sound from becoming difficult to hear due to the execution of control requests from multiple applications.

[0087] (Technology 10) The control device 20 is any one of techniques 1 to 9, wherein each of the plurality of applications has a function of controlling the turning on and off of interior lights of the vehicle, and the judgment unit, when a control request to control the turning on and off of the interior lights is obtained from each of the plurality of applications, judges that at least one of the control requests of each of the plurality of applications is not permitted.

[0088] This prevents the interior light from being frequently turned on and off, making it difficult for the user to see ahead.

[0089] (Technology 11) The control device 20 is any one of techniques 1 to 10, wherein each of the plurality of applications has a function of controlling notifications to a driver of the vehicle, and the judgment unit judges that at least one of the control requests of the plurality of applications is not permitted if a control request to control the notification is obtained a predetermined number of times or more within a predetermined time.

[0090] This prevents the user from being distracted from driving by checking notifications from multiple applications.

[0091] (Technology 12) A control method executed by a control device mounted on a vehicle, the vehicle having a plurality of applications that control vehicle devices of the vehicle, acquiring a control request for the vehicle device from each of the plurality of applications, and, if the control request for the vehicle device from each of the plurality of applications satisfies a predetermined condition, determining whether or not to grant the control request for each of the plurality of applications based on the control request for each of the plurality of applications that satisfies the predetermined condition.

[0092] This provides the same effects as the above-described control device.

[0093] (Technology 13) This is a program for executing the control method of Technology 12.

[0094] This provides the same effects as the above-described control device.

[0095] These general or specific aspects may be realized as a system, a method, an integrated circuit, a computer program, or a non-transitory recording medium such as a computer-readable CD-ROM, or as any combination of the system, method, integrated circuit, computer program, or recording medium. The program may be pre-stored in the recording medium, or may be supplied to the recording medium via a wide area communication network including the Internet. [Industrial Applicability]

[0096] The present disclosure is useful for a control device or the like mounted on a vehicle. [Explanation of symbols]

[0097] 1 vehicle 10A First processing section 10B Second processing section 10C Third Processing Section 20 Control device 21 Acquisition Department 22 Judgment Department 100 ECU 200A First vehicle device 200B Second vehicle device 200C Third vehicle device

Claims

1. A control device mounted on a vehicle, the vehicle having a plurality of applications that control vehicle devices of the vehicle; an acquisition unit that acquires a control request for the vehicle device from each of the plurality of applications; a determination unit that, when a control request from each of the plurality of applications to the vehicle device satisfies a predetermined condition, determines whether or not to grant the control request for each of the plurality of applications based on the control request for each of the plurality of applications that satisfies the predetermined condition. Control device.

2. The determination unit determines whether or not to grant a control request for each of the plurality of applications based on whether or not the vehicle will be in a dangerous state if the control request for each of the plurality of applications is executed. The control device according to claim 1 .

3. The determination unit determines not to permit at least one of the control requests of the plurality of applications when the execution of the control requests of the plurality of applications puts the vehicle in a dangerous state. The control device according to claim 2 .

4. The determination unit further determines whether or not a control request for each of the plurality of applications is permitted based on the control content of the control request for each of the plurality of applications. The control device according to any one of claims 1 to 3.

5. the plurality of applications include a first application and a second application; The predetermined condition includes that the acquisition unit acquires a control request from the second application to the vehicle device while the vehicle device is executing a control request from the first application. The control device according to any one of claims 1 to 3.

6. The predetermined condition includes that the acquisition unit acquires a control request for the vehicle device from each of the plurality of applications within a predetermined time. The control device according to any one of claims 1 to 3.

7. The predetermined condition includes that the acquisition unit acquires control requests from the plurality of applications to the vehicle device a predetermined number of times or more within a predetermined time period. The control device according to any one of claims 1 to 3.

8. each of the plurality of applications has a function of controlling the display of a screen to be viewed by a driver of the vehicle; When a control request for controlling the display of the screen is acquired from each of the plurality of applications, the determination unit determines that at least one of the control requests for each of the plurality of applications is not permitted. The control device according to any one of claims 1 to 3.

9. each of the plurality of applications has a function of controlling audio output in the vehicle; When a control request for controlling audio output is acquired from each of the plurality of applications, the determination unit determines that at least one of the control requests for controlling audio output from each of the plurality of applications is not permitted. The control device according to any one of claims 1 to 3.

10. each of the plurality of applications has a function of controlling turning on and off an interior light of the vehicle; When a control request for controlling turning on and off the interior light is acquired from each of the plurality of applications, the determination unit determines not to permit at least one of the control requests from each of the plurality of applications. The control device according to any one of claims 1 to 3.

11. each of the plurality of applications has a function of controlling a notification to a driver of the vehicle; The determination unit determines that at least one of the control requests for controlling the notification from the plurality of applications is not permitted when the control request is received a predetermined number of times or more within a predetermined time period. The control device according to any one of claims 1 to 3.

12. A control method executed by a control device mounted on a vehicle, the vehicle having a plurality of applications that control vehicle devices of the vehicle; obtaining a control request for the vehicle device from each of the plurality of applications; If a control request from each of the plurality of applications to the vehicle device satisfies a predetermined condition, whether or not to grant the control request from each of the plurality of applications is determined based on the control request from each of the plurality of applications that satisfies the predetermined condition. Control method.

13. A program for causing a computer to execute the control method according to claim 12.

Images