Electronic control device, management system, management method, and program

Abstract

An electronic control device is provided that dynamically changes the upper limit storage capacity of specified information that is stored when a vehicle satisfies a specific condition, in accordance with the vehicle usage situation. [Solution] The electronic control device is mounted on a vehicle. The electronic control device includes a memory unit and an execution unit. The memory unit stores a maximum number of times NM that the specified information can be stored when the vehicle satisfies a specific condition RC. If the number of times the vehicle has satisfied the specific condition RC is less than the maximum number of times NM, the execution unit causes the specified information to be stored in the memory unit when the vehicle satisfies the specific condition RC. The execution unit performs processing to update the maximum number of times NM that the vehicle has satisfied the specific condition RC.

Description

[Technical Field]

[0001] The present invention relates to an electronic control device, a management system, a management method, and a program. [Background technology]

[0002] Patent Document 1 discloses an electronic control device mounted on a vehicle. The electronic control device includes a storage unit and an execution unit. The execution unit stores regulating information in the storage unit when the vehicle satisfies a specific condition. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2019-106224 Summary of the Invention [Problem to be solved by the invention]

[0004] In electronic control devices such as those described in Patent Document 1, the storage unit may have a set upper limit on storage capacity. The upper limit on storage capacity for specified information stored when a vehicle satisfies a specific condition is required to be dynamically changed in accordance with the vehicle usage situation. [Means for solving the problem]

[0005] The electronic control device for solving the above problem is an electronic control device that is mounted on a vehicle and includes: a memory unit that stores a maximum number of times that specified information can be stored when the vehicle satisfies a specific condition; and an execution unit that, if the number of times the vehicle has satisfied the specific condition is less than the maximum number of times that specified information can be stored, causes the specified information to be stored in the memory unit when the vehicle satisfies the specific condition, and the execution unit performs a process of updating the maximum number of times that specified information can be stored based on the number of times the vehicle has satisfied the specific condition.

[0006] A management system for solving the above problem includes a vehicle and a server, wherein the vehicle has an electronic control device including a memory unit that stores a plurality of specific conditions, a maximum number of times that the vehicle can store specified information associated with each of the specific conditions when the specific conditions are satisfied, which is the number of times that the vehicle can store specified information associated with each of the specific conditions when the specific conditions are satisfied, and a type of the specified information associated with the specific condition, and an execution unit that, if the number of times that the vehicle has satisfied the specific condition is less than the maximum number of times that the vehicle has satisfied the specified information, stores the specified information in the memory unit when the vehicle satisfies the specific condition and transmits driving information regarding the driving of the vehicle to the server, based on the driving information received from the vehicle, calculates the proportion of the number of times that the vehicle has satisfied each of the specific conditions to the total number of times that the vehicle has satisfied the plurality of specific conditions, and transmits the proportion of each of the specific conditions to the vehicle, and the vehicle updates the maximum number of times that the vehicle has stored specified information associated with at least one of the specific conditions based on the proportion of each of the specific conditions received from the server.

[0007] A management method for solving the above problem is a management method performed by a computer that is mounted on a vehicle and has: a memory unit that stores a maximum number of times that specified information can be stored when the vehicle satisfies a specific condition; and an execution unit that, if the number of times the vehicle has satisfied the specific condition is less than the maximum number of times that specified information can be stored, causes the specified information to be stored in the memory unit when the vehicle satisfies the specific condition, wherein the execution unit performs a process to update the maximum number of times that specified information can be stored based on the number of times the vehicle has satisfied the specific condition.

[0008] The program for solving the above problem is installed in a vehicle, stores a maximum number of times that the specified information can be stored when the vehicle satisfies a specific condition, and if the number of times that the vehicle has satisfied the specific condition is less than the maximum number of times that the specified information can be stored, causes a computer that stores the specified information when the vehicle satisfies the specific condition to execute a process to update the maximum number of times that the specified information can be stored based on the number of times that the vehicle has satisfied the specific condition. [Effects of the Invention]

[0009] According to the above-described electronic control device, management system, management method, and program, the storage limit number is updated based on the number of times the vehicle satisfies a specific condition, so that the storage limit capacity of the specified information stored when the vehicle satisfies the specific condition can be dynamically changed in accordance with the vehicle usage status. [Brief explanation of the drawings]

[0010] [Figure 1] FIG. 1 is a schematic diagram illustrating a management system according to an embodiment. [Figure 2] FIG. 2 is a schematic diagram showing a correspondence table of the embodiment. [Figure 3] FIG. 3 is a flowchart showing a series of processes including a process for storing regulating information according to the embodiment. [Figure 4] FIG. 4 is a flowchart showing a series of processes including a process for updating the upper limit number of times of storage in the embodiment. [Figure 5] FIG. 5 is a flowchart showing a series of processes including determination of exclusion conditions in this embodiment. [Figure 6] FIG. 6 is a diagram showing the correspondence table and the storage upper limit capacity before updating in the first specific example of the embodiment. [Figure 7] FIG. 7 is a diagram showing frequency information in a first specific example of the embodiment. [Figure 8] FIG. 8 is a diagram showing the correspondence table and the storage upper limit capacity after updating in the first specific example of the embodiment. [Figure 9] FIG. 9 is a diagram showing frequency information in a second specific example of the embodiment. [Figure 10] FIG. 10 is a diagram showing the correspondence table and the storage upper limit capacity after updating in the second specific example of the embodiment. [Figure 11] FIG. 11 is a schematic diagram showing an electronic control device in a modified example. DETAILED DESCRIPTION OF THE INVENTION

[0011] (One embodiment) <Overview of the management system> 1, the management system 10 includes a server 20 and a vehicle 30. The server 20 and the vehicle 30 are communicably connected to each other via an external communication network.

[0012] <Server configuration> The server 20 comprises a server communication module 21, a server execution device 22, and a server storage device 23. The server communication module 21, the server execution device 22, and the server storage device 23 can communicate with each other via a communication network within the server.

[0013] The server communication module 21 communicates with the vehicle 30 via an external communication network. The server communication module 21 receives driving information DR from the vehicle 30. The driving information DR is information related to the driving of the vehicle 30. The specific conditions RC are conditions that must be met in order for the vehicle 30 to store the stipulated information RE. Details of the specific conditions RC will be described later.

[0014] The server storage device 23 stores a calculation program P1 and a specific condition database DB. The calculation program P1 is a program that causes the server execution device 22 to execute a series of processes, including the calculation processes described below. The server execution device 22 executes the calculation program P1 stored in the server storage device 23. The server execution device 22 stores the results calculated by executing the calculation program P1 in the specific condition database DB. The specific condition database DB includes multiple specific conditions RC for each vehicle 30.

[0015] <Vehicle configuration> The vehicle 30 includes a DCM 31, a vehicle speed sensor 32, an accelerator sensor 33, a brake sensor 34, a steering sensor 35, a sonar 36, a position information acquisition system 37, a camera sensor 38, and an electronic control unit 39. The DCM 31, the vehicle speed sensor 32, the accelerator sensor 33, the brake sensor 34, the steering sensor 35, the sonar 36, the position information acquisition system 37, the camera sensor 38, and the electronic control unit 39 are connected to one another via a bus 50.

[0016] DCM is an abbreviation for Data Communication Module. The DCM 31 communicates with the server 20 via an external communication network. The vehicle speed sensor 32 detects the speed of the vehicle 30. The vehicle speed sensor 32 transmits the detected speed of the vehicle 30 to the electronic control unit 39.

[0017] The accelerator sensor 33 detects the amount of accelerator operation of the vehicle 30. The accelerator sensor 33 transmits the amount of accelerator operation of the vehicle 30 to the electronic control unit 39. The brake sensor 34 detects the amount of braking operation of the vehicle 30. The brake sensor 34 transmits the amount of braking operation of the vehicle 30 to the electronic control unit 39.

[0018] The steering sensor 35 detects the steering angle of the steering of the vehicle 30. The steering sensor 35 transmits the steering angle of the steering of the vehicle 30 to the electronic control unit 39. The sonar 36 detects other objects present around the vehicle 30. The sonar 36 also determines the type of the detected object, whether it is a preceding vehicle or not, and detects the distance between the detected object and the vehicle 30, and the distance between the detected preceding vehicle and the vehicle 30. The sonar 36 transmits the distance between the detected object and the vehicle 30, and the distance between the detected preceding vehicle and the vehicle 30 to the electronic control unit 39.

[0019] The position information acquisition system 37 detects the position information of the vehicle 30. The position information acquisition system 37 is a GPS (Global Positioning System). The position information acquisition system 37 transmits the detected position information of the vehicle 30 to the electronic control unit 39.

[0020] The camera sensor 38 captures images of objects around the vehicle 30. The camera sensor 38 transmits the captured images to the electronic control unit 39. The vehicle 30 is capable of implementing multiple functions included in an advanced driver assistance system (ADAS). The multiple functions included in the ADAS include pre-crash safety (PCS) and adaptive cruise control (ACC). Detailed explanations of specific implementation methods for each function will be omitted.

[0021] Furthermore, the execution device 40 transmits the speed of the vehicle 30 detected by the vehicle speed sensor 32 and the position information of the vehicle 30 detected by the position information acquisition system 37 from the DCM 31 to the server 20 as the driving information DR of the vehicle 30.

[0022] The electronic control unit 39 is mounted on the vehicle 30. The electronic control unit 39 is a computer. The electronic control unit 39 includes an execution unit 40, a RAM 41, and a storage device 42. The execution unit 40 performs various information processing by executing programs stored in the storage device 42. The execution unit 40 is a CPU. In this embodiment, the execution unit 40 is an execution unit.

[0023] RAM is an abbreviation for Random Access Memory. The RAM 41 is a device that the execution unit 40 can directly read from and write to. The RAM 41 is a volatile memory. The RAM 41 temporarily stores information that the execution unit 40 is processing.

[0024] The storage device 42 is a ROM (Read Only Memory). The storage device 42 is a non-volatile memory. For example, the storage device 42 is an eMMC (Embedded Multi Media Card). The eMMC is an embedded multimedia card. In other words, the storage device 42 is a flash memory.

[0025] The storage device 42 stores a storage program P2, an update program P3, and an allocation map MP. The storage device 42 also stores the number of times each specific condition RC is satisfied, as described below. In this embodiment, the storage device 42 is a storage unit. The total capacity of the storage device 42 to store the regulating information RE is 1000 MB.

[0026] The storage program P2 is a program for causing the execution device 40 to execute a series of processes including a storage process described below. The update program P3 is a program for causing the execution device 40 to execute a series of processes including an update process described below. The allocation map MP includes a correspondence table TA including a plurality of specific conditions RC, and frequency information FR. The storage upper limit number NM in the correspondence table TA is updated when the execution device 40 executes the update process.

[0027] <Corresponding table> 2, the correspondence table TA includes types of specific conditions RC and types of stipulated information RE. The types of specific conditions RC include multiple specific conditions RC. The correspondence table TA also includes a unit storage capacity MC and a maximum number of times NM that each specific condition RC can be stored.

[0028] The specific conditions RC are conditions that must be met in order to store the target stipulated information RE. The multiple specific conditions RC include a first specific condition RC1, a second specific condition RC2, a third specific condition RC3, and a fourth specific condition RC4.

[0029] In this embodiment, the specific condition RC is a condition for operating a plurality of functions included in the ADAS. For example, the first specific condition RC1 and the second specific condition RC2 are conditions for operating the PCS included in the ADAS.

[0030] Specifically, the first specific condition RC1 occurs when the accelerator operation amount is equal to or greater than a predetermined amount, and the time calculated by dividing the distance between the preceding vehicle and vehicle 30 obtained by sonar 36 by the relative speed is equal to or less than a predetermined time. The second specific condition RC2 occurs when the distance between an object detected by sonar 36 and vehicle 30 is equal to or less than a predetermined distance.

[0031] The third specific condition RC3 and the fourth specific condition RC4 are conditions for operating the ACC included in the ADAS. Specifically, the third specific condition RC3 occurs when the distance between the vehicle 30 and the preceding vehicle detected by the sonar 36 becomes equal to or shorter than a predetermined distance. The fourth specific condition RC4 occurs when the shift lever (not shown) is operated to the P range or N range position while the ACC is operating.

[0032] The stipulating information RE is linked to each of the multiple specific conditions RC. Therefore, one type of stipulating information RE is linked to one specific condition RC among the multiple specific conditions RC. The stipulating information RE is information stored by the execution device 40 when the vehicle 30 satisfies the corresponding specific condition RC through testing or simulation. The stipulating information RE includes image information IM. The image information IM is a plurality of images captured by the camera sensor 38. For example, the image information IM is a series of images in time series within a certain period of time. The stipulating information RE also includes at least one of the accelerator operation amount, the brake operation amount, the steering angle, and the position of the shift lever.

[0033] For example, the regulating information RE associated with the first specific condition RC1 is the image information IM and the accelerator operation amount. The regulating information RE associated with the second specific condition RC2 is the image information IM and the steering angle. The regulating information RE associated with the third specific condition RC3 is the image information IM and the brake operation amount. The regulating information RE associated with the fourth specific condition RC4 is the image information IM and the position of the shift lever.

[0034] A unit storage capacity MC is associated with each of the multiple specific conditions RC. The unit storage capacity MC is the capacity required to store the stipulated information RE associated with the specific condition RC once. For example, the unit storage capacity MC associated with the first specific condition RC1 is 10 MB. The unit storage capacity MC associated with the second specific condition RC2 is 20 MB. The unit storage capacity MC associated with the third specific condition RC3 is 25 MB. The unit storage capacity MC associated with the fourth specific condition RC4 is 10 MB.

[0035] The maximum number of times of storage NM is linked to each of the multiple specific conditions RC. The maximum number of times of storage NM is the number of times that the specified information RE linked to the specific condition RC can be stored. For example, the maximum number of times of storage NM linked to the first specific condition RC1 is 30 times. The maximum number of times of storage NM linked to the second specific condition RC2 is 5 times. The maximum number of times of storage NM linked to the third specific condition RC3 is 20 times. The maximum number of times of storage NM linked to the fourth specific condition RC4 is 10 times.

[0036] <Frequency Information> 1, the frequency information FR includes a ratio RA for each of the multiple specific conditions RC. The ratio RA is the ratio of the number of times the vehicle 30 has satisfied one specific condition RC to the total number of times the vehicle 30 has satisfied each of the multiple specific conditions RC.

[0037] In this embodiment, the frequency information FR is calculated by the server 20. When the server execution unit 22 receives driving information DR from the vehicle 30, it begins executing the calculation program P1. When the server execution unit 22 begins executing the calculation program P1, the server execution unit 22 first calculates the number of times each of the multiple specific conditions RC has been satisfied based on the received driving information DR. Next, the server execution unit 22 calculates the total number of times each of the multiple specific conditions RC has been satisfied. Next, the server execution unit 22 calculates a ratio RA using the number of times each of the multiple specific conditions RC has been satisfied as the numerator. Next, the server execution unit 22 stores the ratio RA calculated for each specific condition RC in the specific condition database DB. Then, the server execution unit 22 transmits information indicating the calculated ratio RA to the vehicle 30. The server execution unit 22 then terminates this series of processes.

[0038] <Vehicle Amnestics> When the power supply state of the vehicle 30 is turned on, the execution device 40 starts executing the stored program P2 for each of the plurality of specific conditions RC.

[0039] As shown in FIG. 3, when the execution device 40 starts executing the stored program P2, the execution device 40 first executes the process of step S11. In step S11, the execution device 40 determines whether the vehicle 30 has satisfied the target condition TC, which is the specific condition RC targeted by the stored program P2. If the execution device 40 determines that the target condition TC has not been satisfied (S11: NO), the execution device 40 repeats the processing of step S11. If the execution device 40 determines that the target condition TC has been satisfied (S11: YES), the execution device 40 updates the number of times the target condition TC has been satisfied, which is stored in the storage device 42. Thereafter, the execution device 40 proceeds to step S12.

[0040] In step S12, the execution device 40 determines whether the number of times the target condition TC has been satisfied is less than the upper limit number of times it can be stored NM. Specifically, the execution device 40 references the number of times each specific condition RC has been satisfied and the upper limit number of times it can be stored NM stored in the storage device 42. The execution device 40 then determines whether the number of times the target condition TC has been satisfied is less than the upper limit number of times it can be stored NM associated with the target condition TC. If the number of times the target condition TC has been satisfied is equal to or greater than the upper limit number of times it can be stored NM associated with the target condition TC (S12: NO), the execution device 40 ends this series of processes. In this case, the execution device 40 does not store the stipulated information RE associated with the target condition TC.

[0041] On the other hand, if the number of times the target condition TC has been satisfied is less than the upper limit number of times NM that is associated with the target condition TC (S12: YES), the execution device 40 proceeds to step S13. In step S13, the execution device 40 performs a storage process of the regulating information RE associated with the target condition TC. In the storage process, the execution device 40 stores the regulating information RE associated with the target condition TC in the storage device 42. Thereafter, the execution device 40 ends the current series of processes. Note that after the execution device 40 ends the series of processes, if the power state of the vehicle 30 is in the on state, the execution device 40 repeats the series of processes. On the other hand, if the power state of the vehicle 30 is in the off state, the execution device 40 does not repeat the series of processes.

[0042] <About update processing> The execution device 40 starts executing the update program P3 at a predetermined cycle, targeting a plurality of specific conditions RC stored in the correspondence table TA. When the execution device 40 executes the update program P3, the execution device 40 performs processing to update the storage upper limit number NM, thereby realizing the management method.

[0043] As shown in FIG. 4, when the execution device 40 starts executing the update program P3, the execution device 40 first performs the process of step S21. In step S21, the executing device 40 obtains a new ratio RA. Specifically, the executing device 40 transmits a request to the server 20 to transmit the ratio RA. After that, when the executing device 40 receives information indicating the new ratio RA from the server 20, the executing device 40 updates the frequency information FR to the received ratio RA. Then, the executing device 40 proceeds to step S22.

[0044] In step S22, the execution device 40 determines whether the acquired ratio RA has changed from the ratio RA included in the frequency information FR stored in the storage device 42. If the ratios RA for all specific conditions RC have not changed (S22: NO), the execution device 40 repeats the processing of step S21. If the ratio RA for any specific condition RC has changed (S22: YES), the execution device 40 proceeds to step S23.

[0045] In step S23, the execution device 40 determines whether or not there is an exclusion condition EC among the multiple specific conditions RC. The exclusion condition EC is a specific condition RC that is not to be included in the update targets of the update process when the update process is performed.

[0046] As shown in FIG. 5, when the execution device 40 starts the process of step S23, it first performs the process of step S31 for each specific condition RC. In step S31, the execution device 40 determines whether the number of times that the stipulated information RE associated with the target specific condition RC has been stored is equal to or greater than the upper limit number of times NM to store it. If the number of times that the stipulated information RE associated with the target specific condition RC has been stored is equal to or greater than the upper limit number of times NM to store it (S31: YES), the execution device 40 proceeds to step S32.

[0047] In step S32, the execution device 40 sets the target specific condition RC as an exclusion condition EC that is not subject to a change in the storage upper limit number NM through the update process. Then, the execution device 40 stores the target specific condition RC as the exclusion condition EC in the storage device 42. Thereafter, the execution device 40 ends this step S23.

[0048] On the other hand, if the number of times that the regulating information RE linked to the target specific condition RC has been stored is less than the upper limit number of times NM that it has been stored (S31: NO), the execution device 40 proceeds to step S33. In step S33, the execution device 40 does not set the target specific condition RC as an exclusion condition EC. Therefore, the execution device 40 stores the target specific condition RC as not being an exclusion condition EC in the storage device 42. Thereafter, the execution device 40 ends the processing of step S23.

[0049] The execution device 40 performs the processes of steps S31 to S33 for all of the multiple specific conditions RC. As a result, if the storage device 42 stores at least one specific condition RC as an exclusion condition EC, the execution device 40 determines that an exclusion condition EC exists. On the other hand, if the storage device 42 does not store the specific condition RC as an exclusion condition EC, the execution device 40 determines that an exclusion condition EC does not exist.

[0050] As shown in FIG. 4, if the execution device 40 determines that an exclusion condition EC exists (S23: YES), the execution device 40 proceeds to step S24. In step S24, the executing device 40 calculates an allocated capacity AC for each of all specific conditions RC, excluding the exclusion condition EC. The allocated capacity AC is the capacity that can be allocated to each specific condition RC. Specifically, the executing device 40 first calculates the sum of the values ​​obtained by multiplying the unit storage capacity MC by the storage upper limit number NM for each specific condition RC, excluding the exclusion condition EC. Next, the executing device 40 calculates the allocated capacity AC associated with each specific condition RC by multiplying the calculated sum by the ratio RA associated with each specific condition RC. After that, the executing device 40 proceeds to step S26.

[0051] On the other hand, if the executing device 40 determines that there is no exclusion condition EC (S23: NO), the executing device 40 proceeds to step S25. In step S25, the executing device 40 calculates an allocated capacity AC for all specific conditions RC. In detail, the executing device 40 calculates an allocatable capacity for each of all specific conditions RC by multiplying the unit storage capacity MC by the upper limit number of storage times NM. Next, the executing device 40 calculates the total value of each allocatable capacity. Next, the executing device 40 calculates the allocated capacity AC associated with each specific condition RC by multiplying the calculated total value by the ratio RA associated with each specific condition RC. After that, the executing device 40 proceeds to step S26.

[0052] In step S26, the execution device 40 calculates a new upper limit number of storage times NM from the allocated capacity AC. Specifically, the execution device 40 calculates the upper limit number of storage times NM associated with each specific condition RC by dividing the allocated capacity AC associated with each specific condition RC by the unit storage capacity MC associated with the same specific condition RC. Then, the execution device 40 proceeds to step S27.

[0053] In step S27, the execution device 40 performs an update process for the storage upper limit number of times NM. In the update process, the execution device 40 updates the storage upper limit number of times NM. In the update process, the execution device 40 updates the storage upper limit number of times NM associated with each of two or more specific conditions RC based on the ratio RA. Furthermore, in steps S24 and S25, the larger the ratio RA, the larger the calculated allocated capacity AC. Therefore, in step S26, for specific conditions RC with a large ratio RA, the smaller the calculated allocated capacity AC, the smaller the ratio RA. Therefore, in the update process, the execution device 40 increases the storage upper limit number of times NM associated with specific conditions RC whose ratio RA has increased compared to before the update. On the other hand, in the update process, the execution device 40 decreases the storage upper limit number of times NM associated with specific conditions RC whose ratio RA has decreased compared to before the update.

[0054] Furthermore, in the update process, when the percentage RA of the specific condition RC to be updated increases compared to before the update, the execution device 40 increases the storage upper limit number NM associated with the specific condition RC. Furthermore, in the update process, when the percentage RA of the specific condition RC to be updated decreases compared to before the update, the execution device 40 decreases the storage upper limit number NM associated with the specific condition RC. The execution device 40 then stores the new storage upper limit number NM calculated in the process of step S26 in the correspondence table TA stored in the storage device 42. The execution device 40 then terminates this series of processes. The percentage RA of each of the multiple specific conditions RC is calculated based on the number of times the respective specific condition RC is satisfied. Therefore, updating the storage upper limit number NM based on the percentage RA is equivalent to updating the storage upper limit number NM based on the number of times the specific condition RC is satisfied.

[0055] Then, in the update process of step S27, the execution device 40 sets the total capacity after update that the storage device 42 can store the regulating information RE to be equal to or less than the total capacity before update. <Operation of the embodiment> Next, a change due to the update process of the storage upper limit number NM will be described using a first and second specific examples.

[0056] <First specific example> The first specific example is an example in which the exclusion condition EC does not exist. As shown in FIG. 6, before the update, the upper limit number of storage times NM associated with the first specific condition RC1 is 30 times. The upper limit number of storage times NM associated with the second specific condition RC2 is 5 times. The upper limit number of storage times NM associated with the third specific condition RC3 is 20 times. The upper limit number of storage times NM associated with the fourth specific condition RC4 is 10 times. In addition, the unit storage capacity MC associated with the first specific condition RC1 is 10MB. The unit storage capacity MC associated with the second specific condition RC2 is 20MB. The unit storage capacity MC associated with the third specific condition RC3 is 25MB. The unit storage capacity MC associated with the fourth specific condition RC4 is 10MB.

[0057] The upper limit storage capacity CM associated with each of the multiple specific conditions RC is the upper limit capacity that can store the specified information RE associated with that specific condition RC when the corresponding specific condition RC is met. The upper limit storage capacity CM is calculated by multiplying the unit storage capacity MC associated with the corresponding specific condition RC by the upper limit storage count NM associated with the corresponding specific condition RC. Therefore, the upper limit storage capacity CM when each specific condition RC is met before the update is as follows: The upper limit storage capacity CM when the first specific condition RC1 is met is 300 MB. The upper limit storage capacity CM when the second specific condition RC2 is met is 100 MB. The upper limit storage capacity CM when the third specific condition RC3 is met is 500 MB. The upper limit storage capacity CM when the fourth specific condition RC4 is met is 100 MB.

[0058] Note that in the previous update process, i.e., before the update by the current update process, the ratios RA associated with each specific condition RC in the frequency information FR were as follows: The ratio RA of the first specific condition RC1 is 0.3. The ratio RA of the second specific condition RC2 is 0.1. The ratio RA of the third specific condition RC3 is 0.5. The ratio RA of the fourth specific condition RC4 is 0.1.

[0059] In this case, when the execution device 40 starts executing the update program P3, in the process of step S21, the execution device 40 acquires information indicating the ratio RA. Then, the execution device 40 updates the frequency information FR according to the acquired ratio RA.

[0060] As shown in FIG. 7, in the frequency information FR updated according to the acquired ratio RA, the number of times that the first specific condition RC1 has been met is 20. The number of times that the second specific condition RC2 has been met is 1. The number of times that the third specific condition RC3 has been met is 5. The number of times that the fourth specific condition RC4 has been met is 4. Therefore, the total number of times that the multiple specific conditions RC have been met is 30.

[0061] Furthermore, the ratio RA of the first specific condition RC1 is 0.67, the ratio RA of the second specific condition RC2 is 0.03, the ratio RA of the third specific condition RC3 is 0.16, and the ratio RA of the fourth specific condition RC4 is 0.13.

[0062] As shown in FIG. 8, in this case, in the processing of steps S25 and S26, the executing device 40 calculates the storage upper limit number NM associated with each specific condition RC as follows: First, the executing device 40 calculates the total allocatable capacity. The total allocatable capacity is equal to the total storage upper limit capacity CM. Therefore, the executing device 40 calculates the total allocatable capacity to be 1000 MB.

[0063] Next, the executing device 40 multiplies the total allocatable capacity by the rate RA of each specific condition RC to calculate the allocated capacity AC associated with each specific condition RC. The executing device 40 multiplies the total allocatable capacity, 1000 MB, by the rate RA of the first specific condition RC1, 0.67, to calculate the allocated capacity AC for the first specific condition RC1 as 670 MB. Next, the executing device 40 divides the allocated capacity AC of the first specific condition RC1, 670 MB, by the unit storage capacity MC associated with the first specific condition RC1, 10 MB, to calculate the upper limit number of times storage NM for the first specific condition RC1 as 67 times.

[0064] Similarly, the execution device 40 multiplies the total allocatable capacity of 1000 MB by the ratio RA of the second specific condition RC2 of 0.03 to calculate the allocated capacity AC of the second specific condition RC2 as 30 MB. Next, the execution device 40 divides the allocated capacity AC of the second specific condition RC2, 30 MB, by the unit storage capacity MC associated with the second specific condition RC2, 20 MB. The execution device 40 discards the remainder of the division result to calculate the upper limit number of times NM of storage for the second specific condition RC2 as 1.

[0065] The execution device 40 multiplies 1000 MB, the total allocatable capacity, by 0.16, the ratio RA, of the third specific condition RC3, to calculate an allocated capacity AC of 160 MB for the third specific condition RC3. Next, the execution device 40 divides 160 MB, the allocated capacity AC for the third specific condition RC3, by 25 MB, the unit storage capacity MC associated with the third specific condition RC3. The execution device 40 discards the remainder of the division result, to calculate an upper limit number of times NM for storage for the third specific condition RC3 as 6.

[0066] The execution device 40 multiplies the total allocatable capacity of 1000 MB by the ratio RA of the fourth specific condition RC4 of 0.13 to calculate the allocated capacity AC of the fourth specific condition RC4 as 130 MB. Next, the execution device 40 divides the allocated capacity AC of the fourth specific condition RC4 of 130 MB by the unit storage capacity MC associated with the fourth specific condition RC4 of 10 MB to calculate the upper limit number of times NM of storage for the fourth specific condition RC4 as 13.

[0067] The execution device 40 updates the storage upper limit number NM in the correspondence table TA to each value calculated in this manner. The execution device 40 updates the storage upper limit number NM associated with the four specific conditions RC based on the respective ratios RA of the multiple specific conditions RC. Therefore, the execution device 40 updates the storage upper limit number NM based on the number of times the vehicle 30 has satisfied each specific condition RC.

[0068] Furthermore, in the update process, the execution device 40 increases the upper limit number of times NM to be stored associated with the first specific condition RC1 and the fourth specific condition RC4, which are specific conditions RC with an increased rate RA compared to before the update process. On the other hand, in the update process, the execution device 40 decreases the upper limit number of times NM to be stored associated with the second specific condition RC2 and the third specific condition RC3, which are specific conditions RC with a decreased rate RA compared to before the update process.

[0069] In the update process, the execution device 40 sets the total capacity of the storage device 42 that can store the regulating information RE to 990 MB after the update, which is smaller than the total capacity of 1000 MB before the update.

[0070] <Second specific example> The second specific example is an example in which an exclusion condition EC exists. The correspondence table TA and the storage upper limit capacity CM before the update in the second specific example are in the same state as in the first specific example. Therefore, detailed explanations are omitted. Then, the execution device 40 executes the update program P3 to update the frequency information FR according to the obtained ratio RA.

[0071] As shown in FIG. 9, in the frequency information FR updated according to the acquired ratio RA, the number of times the first specific condition RC1 has been met is 20. The number of times the second specific condition RC2 has been met is 5. The number of times the third specific condition RC3 has been met is 5. The number of times the fourth specific condition RC4 has been met is 4. In other words, the number of times the second specific condition RC2 has been met has increased compared to before the update, and the number of times the second specific condition RC2 has been met is the same as the maximum number of times NM that can be stored associated with the second specific condition RC2.

[0072] Furthermore, the ratio RA of the first specific condition RC1 is 0.59, the ratio RA of the second specific condition RC2 is 0.15, the ratio RA of the third specific condition RC3 is 0.15, and the ratio RA of the fourth specific condition RC4 is 0.11.

[0073] In this case, in the process of step S23, the executing device 40 determines that the second specific condition RC2 exists as an exclusion condition EC. As a result, in the process of step S24, the executing device 40 calculates the allocated capacity AC for the first specific condition RC1, the third specific condition RC3, and the fourth specific condition RC4, excluding the second specific condition RC2, which is the exclusion condition EC, from among the multiple specific conditions RC.

[0074] The executing device 40 first calculates the total allocatable capacity. This total allocatable capacity is equal to the total of the storage upper limit capacity CM under the first specific condition RC1, the storage upper limit capacity CM under the third specific condition RC3, and the storage upper limit capacity CM under the fourth specific condition RC4. Therefore, the executing device 40 calculates the total allocatable capacity to be 900 MB.

[0075] Next, the execution device 40 multiplies the total allocatable capacity by the respective ratios RA of the first specific condition RC1, the third specific condition RC3, and the fourth specific condition RC4 to calculate the allocated capacity AC associated with each specific condition RC.

[0076] 10, the execution device 40 multiplies 900 MB, the total allocatable capacity, by 0.59, the ratio RA, of the first specific condition RC1, to calculate an allocated capacity AC of 531 MB for the first specific condition RC1. Next, the execution device 40 divides 531 MB, the allocated capacity AC for the first specific condition RC1, by 10 MB, the unit storage capacity MC associated with the first specific condition RC1. The execution device 40 discards the remainder of the division result to calculate an upper limit number of times NM to be stored for the first specific condition RC1 as 53.

[0077] Similarly, the execution device 40 multiplies the total allocatable capacity of 900 MB by the ratio RA of the third specific condition RC3 of 0.15 to calculate the allocated capacity AC for the third specific condition RC3 as 135 MB. Next, the execution device 40 divides the allocated capacity AC of the third specific condition RC3, 135 MB, by the unit storage capacity MC associated with the third specific condition RC3, 25 MB. The execution device 40 discards the remainder of the division result to calculate the upper limit number of times NM to be stored for the third specific condition RC3 as 5.

[0078] The execution device 40 multiplies the total allocatable capacity of 900 MB by the rate RA of the fourth specific condition RC4 of 0.11 to calculate the allocated capacity AC of the fourth specific condition RC4 as 99 MB. Next, the execution device 40 divides the allocated capacity AC of the fourth specific condition RC4 of 99 MB by the unit storage capacity MC associated with the fourth specific condition RC4 of 10 MB. The execution device 40 discards the remainder of the division result to calculate the upper limit number of times NM of storage for the fourth specific condition RC4 as 9 times.

[0079] The execution device 40 updates the storage upper limit number NM in the correspondence table TA to each value calculated in this way. The execution device 40 updates the storage upper limit number NM associated with the three specific conditions RC excluding the exclusion condition EC based on the respective proportions RA of the multiple specific conditions RC. Therefore, the execution device 40 updates the storage upper limit number NM based on the number of times the vehicle 30 has satisfied each specific condition RC.

[0080] In the update process, the execution device 40 sets the total capacity of the storage device 42 that can store the regulating information RE to 865 MB after the update, which is smaller than the total capacity of 1000 MB before the update.

[0081] <Effects of this embodiment> (1) According to the electronic control device 39, the execution device 40 updates the storage upper limit number NM based on the number of times the vehicle 30 satisfies the specific condition RC. Therefore, the storage upper limit capacity CM of the stipulated information RE stored in the storage device 42 can be dynamically changed depending on the usage status of the vehicle 30.

[0082] (2) The storage device 42 stores a plurality of specific conditions RC, the types of regulating information RE associated with each specific condition RC, and the upper limit number of times of storage NM associated with each specific condition RC. When the vehicle 30 satisfies a target condition TC, if the number of times the regulating information RE associated with the target condition TC is stored is less than the upper limit number of times of storage NM associated with the target condition TC, the execution device 40 stores the regulating information RE associated with the target condition TC in the storage device 42. The execution device 40 updates the upper limit number of times of storage NM associated with the specific condition RC based on the respective proportions RA of the plurality of specific conditions RC. Therefore, the execution device 40 can set the upper limit number of times of storage NM associated with the specific condition RC that is the target of the update process to the upper limit number of times of storage NM that corresponds to the magnitude of the proportion RA of the number of times the specific condition RC that is the target of the update process is satisfied to the total number of times the plurality of specific conditions RC are satisfied.

[0083] (3) In the update process, the execution device 40 updates the upper limit number of times NM to be stored associated with each of two or more specific conditions RC based on the ratio RA of each specific condition RC. Therefore, by updating the upper limit number of times NM to be stored associated with each of the multiple specific conditions RC, the execution device 40 can dynamically change the capacity for storing the stipulated information RE associated with each specific condition RC.

[0084] (4) In the update process, the execution device 40 increases the upper limit number of times NM to be stored associated with the specific condition RC whose rate RA has increased compared to before the update, and decreases the upper limit number of times NM to be stored associated with the specific condition RC whose rate RA has decreased compared to before the update. This allows the execution device 40 to use a breakdown of the limited total capacity of the storage device 42 to store the regulating information RE associated with the specific condition RC whose rate RA has increased. As a result, when the vehicle 30 satisfies a specific condition RC whose rate RA has increased compared to before the update, the execution device 40 can delay the timing at which the execution device 40 becomes unable to store the regulating information RE associated with the specific condition RC.

[0085] (5) In the update process, the executing device 40 sets the total capacity of the storage device 42 that can store the stipulated information RE after the update to a capacity equal to or less than the total capacity before the update. Therefore, the executing device 40 can prevent the total capacity from exceeding the upper limit due to the update process.

[0086] (6) In the update process, the execution device 40 does not include the storage limit number NM associated with the exclusion condition EC in the storage limit number NM associated with the specific condition RC that is the target of the update process. Therefore, the execution device 40 does not use the capacity already used to store the stipulated information RE when the exclusion condition EC is met as the storage capacity available in the update process. Therefore, the execution device 40 can prevent the allocation of unavailable capacity as available capacity in the update process.

[0087] (7) In the update process, when the ratio RA associated with the specific condition RC that is the target of the update process increases compared to before the update, the execution device 40 increases the upper limit number of times NM to store the specific condition RC. Also, in the update process, when the ratio RA associated with the specific condition RC that is the target of the update process decreases compared to before the update, the execution device 40 decreases the upper limit number of times NM to store the specific condition RC. Therefore, the upper limit number of times NM to store the specific condition RC can be updated in accordance with the increase or decrease in the ratio RA of the specific condition RC that is the target of the update process.

[0088] (8) The execution device 40 transmits the driving information DR to the server 20. The execution device 40 also receives information indicating the ratio RA calculated based on the driving information DR from the server 20. Since there is a limit to the capacity of the storage device 42 that can be installed in the electronic control device 39, calculating the ratio RA in the server 20 external to the vehicle 30 can prevent the burden on the electronic control device 39 from becoming excessively large.

[0089] (9) The storage device 42 is a flash memory. As in the above embodiment, when storing information, a flash memory such as an eMMC writes the information to a random area within the free space. Therefore, when using a flash memory as the storage device 42 of the electronic control device 39, it is extremely difficult to separate the storage area for each specific condition RC. Therefore, as in the above embodiment, by updating the storage upper limit number NM, the effect of (1) can be significantly achieved when applying a technique for dynamically changing the storage upper limit capacity CM.

[0090] (10) The specific condition RC is a condition for activating the function of an advanced driver assistance system installed in the vehicle 30. The advanced driver assistance system is often activated when a serious incident such as a collision occurs. In such cases, images of the surroundings of the vehicle 30 and information about the vehicle 30 when the advanced driver assistance system is activated are useful for analyzing the cause of the incident. In particular, the volume of information acquired when the advanced driver assistance system is activated is relatively large. Therefore, in order to store a huge volume of information, applying a technology for dynamically changing the storage upper limit capacity CM by updating the storage upper limit number NM, as in the above embodiment, can significantly achieve the effect of (1).

[0091] (Example of change) The above embodiment can be modified as follows: The above embodiment and the following modifications can be combined with each other within the scope of technical compatibility.

[0092] In the above embodiment, the server 20 calculates the ratio RA, but the vehicle 30 may calculate the ratio RA. In this case, the execution device 40 does not need to transmit the driving information DR to the server 20. Furthermore, the execution device 40 does not need to receive information indicating the ratio RA from the server 20. In this case, the management system 10 does not need to include the server 20.

[0093] In the example shown in FIG. 11 , the storage device 42 of the electronic control device 139 of the vehicle 30 stores a calculation program P11. By executing the calculation program P11, the execution device 40 obtains the number of times each specific condition RC is satisfied and calculates the proportion RA of each specific condition RC. Specifically, the execution device 40 determines whether or not the specific condition RC is satisfied based on the driving information DR. Next, the execution device 40 stores the number of times each specific condition RC is satisfied in the storage device 42 for each specific condition RC, thereby obtaining the number of times each specific condition RC is satisfied. Next, the execution device 40 calculates the proportion RA of each specific condition RC based on the number of times each specific condition RC is satisfied for the acquired specific condition RC. More specifically, the execution device 40 counts the number of times a positive determination is made by the processing of step S11 and calculates the proportion RA of each specific condition RC using the counted number of times.

[0094] In this case, when the electronic control device 139 acquires the ratios RA of the specific conditions RC, the vehicle 30 does not need to communicate with the server 20. Therefore, the electronic control device 139 can perform the process of updating the storage upper limit number of times NM without communicating with the server 20.

[0095] The vehicle 30 may omit some of the DCM 31, vehicle speed sensor 32, accelerator sensor 33, brake sensor 34, steering sensor 35, sonar 36, position information acquisition system 37, and camera sensor 38. The vehicle 30 may also include other sensors in addition to or instead of these. The vehicle 30 may change these sensors as appropriate in accordance with the acquired driving information DR and regulating information RE.

[0096] For example, the vehicle 30 may be equipped with a LiDAR (Light Detection and Ranging) instead of or in addition to the sonar 36. The LiDAR detects the distance to objects present around the vehicle 30.

[0097] Furthermore, for example, the position information acquisition system 37 is not limited to GPS, and may be a Global Navigation Satellite System (GNSS), a Realtime Kinematic (RTK), a LiDAR, or the like.

[0098] The electronic control device 39 may be configured as a circuit including one or more processors that execute various processes according to a computer program (software). The electronic control device 39 may also be configured as a circuit including one or more dedicated hardware circuits, such as an application-specific integrated circuit (ASIC), that execute at least some of the various processes, or a combination thereof. The processor includes a CPU and memory such as RAM and ROM. The memory stores program code or instructions configured to cause the CPU to execute processes. The memory, i.e., computer-readable medium, includes any available medium that can be accessed by a general-purpose or dedicated computer. The same applies to the server 20.

[0099] The storage device 42 does not have to be an eMMC. For example, the storage device 42 may be a solid state drive (SSD), which is a flash memory. The storage device 42 also does not have to be a flash memory. For example, the storage device 42 may be a hard disk drive (HDD) that stores information on a magnetic disk.

[0100] In the above embodiment, the storage device 42 stores the correspondence table TA and the frequency information FR, but the storage device 42 may store the correspondence table TA including the ratios RA. The storage device 42 may store the ratios RA for each of the multiple specific conditions RC in the correspondence table TA, linked to each of the multiple specific conditions RC.

[0101] The specific condition RC is not limited to the example in the above embodiment. For example, the specific condition RC may be when the brake operation amount is equal to or greater than a predetermined amount while the vehicle speed is equal to or greater than a predetermined speed. The specific condition RC does not have to be a condition for activating a function of the advanced driving assistance system. For example, the specific condition RC may be when the vehicle 30 is stopped.

[0102] The content of the regulating information RE associated with each specific condition RC is not limited to the example in the above embodiment. For example, the content of all the regulating information RE may be the same. Also, for example, all the regulating information RE may be image information IM including consecutive images within a predetermined time, but the predetermined time may be different for each piece of regulating information RE. In this case, the unit storage capacity MC of the regulating information RE may be a capacity equal to the number of images.

[0103] Since the regulating information RE is information when the specific condition RC is satisfied, the regulating information RE may include image information IM within a predetermined time period, including before and after the time when the specific condition RC is satisfied. In this case, the execution device 40 may sequentially acquire images and temporarily store them, for example, in RAM 41, and then, when the specific condition RC is satisfied, store the images within the predetermined time period from RAM 41 in the storage device 42.

[0104] The storage device 42 does not have to store multiple specific conditions RC. For example, the vehicle 30 may have a memory separate from the storage device 42, and the memory may store the contents of multiple specific conditions RC.

[0105] The storage device 42 may store the upper limit number of times NM that the stipulated information RE can be stored when one specific condition RC is satisfied. In this case, the execution device 40 may store the stipulated information RE with one specific condition RC as the target condition TC. Furthermore, the execution device 40 may update the upper limit number of times NM can be stored by increasing it as the number of times one specific condition RC is satisfied increases, provided that a data area different from the data area used for storing the stipulated information RE can be used to enable the storage process for the stipulated information RE.

[0106] In the process of updating the upper limit number of times of storage NM, the execution device 40 may change the total capacity of the storage device 42 that can store the stipulated information RE before and after the update. For example, in the process of updating the upper limit number of times of storage NM, the execution device 40 may change the total capacity after the update that can store the stipulated information RE in the storage device 42, so long as the total capacity is equal to or less than the upper limit capacity.

[0107] When the exclusion condition EC is not included in the process of updating the storage upper limit number NM, the executing device 40 may correct the percentage RA of the specific condition RC that is the target of the update process. Specifically, in the case of the second specific example described above, the executing device 40 may correct the percentage RA so that each percentage RA is equal to the percentage RA when the sum of the percentage RA of the first specific condition RC1, the percentage RA of the third specific condition RC3, and the percentage RA of the fourth specific condition RC4 is 1. In this case, it is possible to prevent excessive wasted capacity from occurring when calculating the allocated capacity AC.

[0108] If an exclusion condition EC exists, the execution device 40 may not update the storage limit number NM. In other words, the execution device 40 may update the storage limit number NM only when the exclusion condition EC does not exist in the multiple specific conditions RC.

[0109] If an exclusion condition EC exists, the execution device 40 may include the storage limit number NM associated with the exclusion condition EC in the update process of the storage limit number NM. In this case, the execution device 40 may cancel the storage process that uses the exclusion condition EC as the target condition TC.

[0110] In the process of updating the upper limit number of times of storage NM, when the proportion RA of the specific condition RC that is the target of the update process increases compared to before the update, the execution device 40 does not necessarily have to increase the upper limit number of times of storage NM that is linked to the specific condition RC. Also, in the process of updating the upper limit number of times of storage NM, when the proportion RA of the specific condition RC that is the target of the update process decreases compared to before the update, the execution device 40 does not necessarily have to decrease the upper limit number of times of storage NM that is linked to the specific condition RC.

[0111] Furthermore, in the process of updating the upper limit number of times of storage NM, the execution device 40 does not necessarily have to increase the upper limit number of times of storage NM associated with the specific condition RC for which the ratio RA has increased compared to before the update. In the process of updating the upper limit number of times of storage NM, the execution device 40 does not necessarily have to decrease the upper limit number of times of storage NM associated with the specific condition RC for which the ratio RA has decreased compared to before the update.

[0112] For example, the execution device 40 may increase and update only the upper limit number of times NM of storage associated with one specific condition RC that has the largest increase in the percentage RA of the specific condition RC since before the update, among the upper limit number of times NM of storage associated with multiple specific conditions RC that are the target of the update process. In this case, the execution device 40 may uniformly decrease and update the upper limit number of times NM of storage associated with other specific conditions RC among the multiple specific conditions RC that are the target of the update process, or may update them without increasing or decreasing them. The execution device 40 may update the upper limit number of times NM of storage associated with at least one specific condition RC based on the percentage RA of each specific condition RC. In this case, the manner in which the upper limit number of times NM of storage is changed is not limited to the example of the above embodiment.

[0113] In the process of updating the upper limit number of storage times NM, the execution device 40 does not have to update the upper limit number of storage times NM associated with each of two or more specific conditions RC based on the respective proportions RA of the specific conditions RC. For example, in the process of updating the upper limit number of storage times NM, the execution device 40 may update the upper limit number of storage times NM associated with each of two or more specific conditions RC based on the proportion RA of one specific condition RC. Also, for example, in the process of updating the upper limit number of storage times NM, the execution device 40 may update only the upper limit number of storage times NM associated with one specific condition RC.

[0114] The execution device 40 may update the upper limit number of times NM to be stored associated with the specific condition RC based on the number of times the specific condition RC is satisfied, without using the ratio RA. For example, the execution device 40 may update the upper limit number of times NM to be stored associated with the first specific condition RC1 by increasing it as the number of times the first specific condition RC1 is satisfied increases.

[0115] <Additional Notes> The technical ideas that can be understood from the above-described embodiment and modified examples will be described. [Appendix 1] An electronic control device that is mounted on a vehicle and includes: a memory unit that stores a maximum number of times that specified information can be stored when the vehicle satisfies a specific condition; and an execution unit that, if the number of times the vehicle has satisfied the specific condition is less than the maximum number of times that specified information can be stored, causes the specified information to be stored in the memory unit when the vehicle satisfies the specific condition, wherein the execution unit performs a process to update the maximum number of times that specified information can be stored based on the number of times the vehicle has satisfied the specific condition.

[0116] [Appendix 2] The electronic control device described in Appendix 1, wherein the memory unit stores a plurality of the specific conditions, the type of the stipulated information linked to each of the specific conditions, and the maximum number of times that each of the specific conditions is stored, and when the vehicle satisfies a target condition among the plurality of specific conditions, if the number of times that the vehicle has satisfied the target condition is less than the maximum number of times that each of the specific conditions is stored, the execution unit stores the stipulated information linked to the target condition in the memory unit, and in the process of updating the maximum number of times that each of the plurality of specific conditions is stored, updates the maximum number of times that each of the specific conditions is stored based on the ratio of the number of times that the vehicle has satisfied one of the specific conditions to the total number of times that the vehicle has satisfied each of the plurality of specific conditions.

[0117] [Appendix 3] In the process of updating the maximum number of times that memory can be stored, the execution unit updates the maximum number of times that memory can be stored associated with each of the two or more specific conditions based on the respective ratios of the two or more specific conditions. This is the electronic control device described in Appendix 2.

[0118] [Appendix 4] In the process of updating the maximum number of times that memory is stored, the execution unit increases the maximum number of times that memory is stored associated with the specific condition for which the ratio has increased compared to before the update, and decreases the maximum number of times that memory is stored associated with the specific condition for which the ratio has decreased compared to before the update. This is the electronic control device described in Appendix 3.

[0119] [Appendix 5] In the process of updating the maximum number of times the storage is performed, the execution unit sets the total capacity after the update that the storage unit can store the specified information to be less than or equal to the total capacity before the update.

[0120] [Appendix 6] An electronic control device as described in any one of Appendices 3 to 5, wherein when the execution unit updates the maximum number of times of storage associated with each of the two or more specific conditions, the execution unit does not include the maximum number of times of storage associated with an exclusion condition, which is a specific condition among the multiple specific conditions that has been met by the vehicle more than the maximum number of times of storage, in the maximum number of times of storage associated with each of the two or more specific conditions.

[0121] [Appendix 7] The electronic control device described in any one of Appendices 2 to 6, wherein, in the process of updating the maximum number of times of storage, the execution unit increases the maximum number of times of storage associated with the specific condition that is the target of the process of updating the maximum number of times of storage when the ratio associated with the specific condition that is the target of the process of updating the maximum number of times of storage increases compared to before the update, and decreases the maximum number of times of storage associated with the specific condition when the ratio associated with the specific condition decreases compared to before the update.

[0122] [Appendix 8] An electronic control device described in any one of Appendices 2 to 7, wherein the execution unit transmits driving information, which is information relating to the driving of the vehicle, to a server external to the vehicle, and receives information indicating the ratio calculated based on the driving information from the server.

[0123] [Appendix 9] An electronic control device described in any one of Appendices 1 to 8, wherein the execution unit determines whether the specific condition is met based on driving information, which is information about the vehicle's driving, and obtains the number of times the specific condition is met by storing the number of times the specific condition is met in the memory unit.

[0124] [Supplementary Note 10] The electronic control device according to any one of Supplementary Notes 1 to 9, wherein the storage unit is a flash memory. [Supplementary Note 11] The electronic control device according to any one of Supplementary Note 1 to Supplementary Note 10, wherein the specific condition is a condition for activating a function of an advanced driving assistance system mounted on the vehicle. [Explanation of symbols]

[0125] 10...Management system 20...Server 21...Server communication module 22...Server execution device 23...Server storage device 30...Vehicle 31…DCM 32...Vehicle speed sensor 33...Accelerator sensor 34...Brake sensor 35...Steering sensor 36...Sonar 37...Location information acquisition system 38...Camera sensor 39, 139...Electronic control device 40...Execution device 41...RAM 42...Storage device 50...Bus CM…Maximum storage capacity DB: Specific condition database DR...Driving information EC…Exclusion conditions FR...Frequency information IM...Image information MC…Memory capacity MP…Allocation Map NM…Memory limit P1...Calculation program P2...Memory Program P3…Update Program RA…Percentage RC…Specific conditions RC2…Second specific condition RC1…First specific condition RC2…Second specific condition RC3…Third specific condition RC4…4th specific condition RE…Regulations information TA...Compatible table TC...Eligible conditions

Claims

1. It is installed in the vehicle, a storage unit that stores an upper limit of the number of times that the specified information that is to be stored when the vehicle satisfies a specific condition can be stored; an execution unit that, if the number of times that the specific condition of the vehicle has been satisfied is less than the upper limit number of times that it can be stored, causes the stipulation information to be stored in the storage unit when the specific condition of the vehicle is satisfied; An electronic control device comprising: the execution unit performs processing to update the storage upper limit number of times based on the number of times the vehicle satisfies the specific condition. Electronic control unit.

2. the storage unit stores a plurality of the specific conditions, types of the regulating information associated with each of the specific conditions, and the storage limit number associated with each of the specific conditions; The execution unit: When the vehicle satisfies a target condition among the plurality of specific conditions, if the number of times the vehicle has satisfied the target condition is less than the upper limit number of times to be stored associated with the target condition, the storage unit stores the stipulation information associated with the target condition; In the process of updating the storage upper limit number of times, the storage upper limit number of times associated with one of the specific conditions is updated based on a ratio of the number of times the vehicle has satisfied one of the specific conditions to a total number of times the vehicle has satisfied each of the plurality of specific conditions. The electronic control device according to claim 1 .

3. In the process of updating the upper limit number of times of storage, the execution unit updates the upper limit number of times of storage associated with each of the two or more specific conditions based on the ratio of each of the two or more specific conditions. The electronic control device according to claim 2 .

4. In the process of updating the upper limit number of times of storing, the execution unit increases the upper limit number of times of storing associated with the specific condition in which the ratio has increased compared to before the update, and decreases the upper limit number of times of storing associated with the specific condition in which the ratio has decreased compared to before the update. The electronic control device according to claim 3 .

5. In the process of updating the storage upper limit number, the execution unit sets a total capacity after updating that is equal to or less than the total capacity before updating, with respect to a total capacity in which the storage unit can store the stipulated information. The electronic control device according to claim 4.

6. When updating the upper limit number of times of storage associated with each of the two or more specific conditions, the execution unit does not include, in the upper limit number of times of storage associated with each of the two or more specific conditions, the upper limit number of times of storage associated with an exclusion condition, which is a specific condition among the plurality of specific conditions that has been satisfied by the vehicle a number of times that is equal to or greater than the upper limit number of times of storage. The electronic control device according to claim 3 .

7. In the process of updating the upper limit number of times of storage, when the ratio associated with the specific condition that is the target of the process of updating the upper limit number of times of storage increases compared to before the update, the execution unit increases the upper limit number of times of storage that is associated with the specific condition, and when the ratio associated with the specific condition decreases compared to before the update, decreases the upper limit number of times of storage that is associated with the specific condition. The electronic control device according to claim 2 .

8. The execution unit: transmitting driving information relating to the driving of the vehicle to a server external to the vehicle; receiving information indicating the ratio calculated based on the travel information from the server; The electronic control device according to claim 2 .

9. The execution unit: determining whether the specific condition is satisfied based on driving information that is information related to the driving of the vehicle; The number of times the specific condition is satisfied is stored in the storage unit, thereby acquiring the number of times the specific condition is satisfied. The electronic control device according to claim 1 .

10. The storage unit is a flash memory. The electronic control device according to claim 1 .

11. The specific condition is a condition for activating a function of an advanced driving assistance system installed in the vehicle. The electronic control device according to claim 1 .

12. a vehicle and a server, The vehicle is a storage unit that stores a plurality of specific conditions, a storage upper limit number of times that the vehicle associated with each of the specific conditions can store regulating information when the vehicle satisfies the specific condition, and a type of the regulating information associated with the specific condition; an execution unit that, when the number of times that the specific condition of the vehicle has been satisfied is less than the upper limit number of times of storage, stores the stipulation information in the storage unit when the specific condition is satisfied by the vehicle, and transmits driving information related to the driving of the vehicle to the server; an electronic control device comprising: The server calculating a ratio of the number of times that the vehicle has satisfied one of the specific conditions to the total number of times that the vehicle has satisfied each of the plurality of specific conditions based on the driving information received from the vehicle; a management system that transmits the ratio of each of the specific conditions to the vehicle, the vehicle updates the storage limit number associated with the one specific condition based on the ratio of each of the specific conditions received from the server; Management system.

13. It is installed in the vehicle, a storage unit that stores an upper limit of the number of times that the specified information that is to be stored when the vehicle satisfies a specific condition can be stored; an execution unit that, if the number of times that the specific condition of the vehicle has been satisfied is less than the upper limit number of times that it can be stored, causes the stipulation information to be stored in the storage unit when the specific condition of the vehicle is satisfied; A management method performed by a computer having the execution unit performs a process of updating the storage upper limit number of times based on the number of times the vehicle satisfies the specific condition. Management method.

14. A program that is installed in a vehicle and stores a maximum number of times that specified information can be stored when the vehicle satisfies a specific condition, and if the number of times the vehicle has satisfied the specific condition is less than the maximum number of times that specified information can be stored, causes a computer that stores the specified information when the vehicle satisfies the specific condition to execute a process to update the maximum number of times that specified information can be stored based on the number of times the vehicle has satisfied the specific condition.

Images