Information processing system, information processing method, and information processing program

Abstract

To improve user convenience when updating vehicle software. [Solution] When updating the software on the vehicle 10, the OTA master 11 determines whether or not the update can be started before the scheduled start time. If the OTA master 11 determines that the update cannot be started, it instructs the system to notify the user that the update will not be performed as scheduled.

Description

【Technical Field】 【0001】 The present invention relates to an information processing system, an information processing method, and an information processing program for processing information related to software updates of a vehicle. 【Background Art】 【0002】 Patent Document 1 describes an information processing system that generates an update schedule for vehicle software based on the usage status of the vehicle. 【Prior Art Documents】 【Patent Documents】 【0003】 【Patent Document 1】 Japanese Patent Application Laid-Open No. 2012-14253 【Summary of the Invention】 【Problems to be Solved by the Invention】 【0004】 Provided is an information processing system including a determination unit that determines whether or not the update can be started before a scheduled start time of software update in a vehicle, and when the determination unit determines that the update cannot be started, resetting a time different from the scheduled start time as a new scheduled start time. 【Means for Solving the Problems】 【0005】 The information processing system for solving the above problems includes a determination unit that determines whether or not the update can be started before a scheduled start time of software update in a vehicle. When the determination unit determines that the update cannot be started, this information processing system resets a time different from the scheduled start time as a new scheduled start time. 【0006】 The information processing method that solves the above problem involves a processing circuit determining whether or not the software update in the vehicle can be started before the scheduled start time, and if it is determined that the update cannot be started, resetting a time different from the scheduled start time as the new scheduled start time. 【0007】 The information processing program that solves the above problem is a program for processing information related to software updates in a vehicle, and is configured to cause a processing circuit to perform the following actions: obtain the scheduled start time of the software update; determine whether or not the update can be started before the scheduled start time; and, if it is determined that the update cannot be started, reset a time different from the scheduled start time as the new scheduled start time. [Brief explanation of the drawing] 【0008】 [Figure 1] This diagram schematically shows the configuration of one embodiment of an information processing system. [Figure 2] This is a flowchart of the notification instruction routine executed by the above information processing system. [Figure 3] This is a flowchart of the notification routine executed by the above information processing system. [Modes for carrying out the invention] 【0009】 Hereinafter, an embodiment of an information processing system, an information processing method, and an information processing program will be described in detail with reference to Figures 1 to 3. <Configuration of the information processing system> First, the configuration of the information processing system of this embodiment will be described with reference to Figure 1. The information processing system of this embodiment is a system that processes information related to software updates for the vehicle 10. 【0010】 Vehicle 10 is equipped with various ECUs (Electronic Control Units) 15 that control various parts of the vehicle 10, and an OTA master 11 that manages software updates in vehicle 10. Examples of ECUs 15 include the engine ECU, transmission ECU, brake ECU, advanced driver assistance ECU, and multimedia ECU. The OTA master 11 includes a processing circuit 12 and a storage device 13. The storage device 13 has a program for managing software updates pre-stored in it. The OTA master 11 is configured to perform processing related to software update management by having the processing circuit 12 read and execute the program stored in the storage device 13. A communication module 17 for external communication via a mobile communication network 18 is connected to the OTA master 11. Furthermore, vehicle 10 is equipped with an HMI (Human-Machine Interface) 16. The HMI 16 includes an input device that accepts operations from the occupant and an output device that presents information to the occupant using images and sound. The HMI 16 in this embodiment has a navigation function that guides the vehicle 10 along its driving route. The OTA master 11, each ECU 15, and the HMI 16 are configured to communicate with each other via the in-vehicle communication line 14. 【0011】 Software updates in vehicle 10 are performed based on update data distributed from OTA center 20 via mobile communication network 18, etc. The OTA center 20 is a server device equipped with a processing circuit 21 and a storage device 22. The OTA center 20 is configured to communicate with the outside world via the mobile communication network 18. 【0012】 The OTA center 20 is configured to communicate with the user's mobile information terminal 30 in the vehicle 10 via a mobile communication network 18, etc. The mobile information terminal 30 includes a processing circuit 31, a storage device 32, and an HMI 33. The processing circuit 31 reads and executes a program stored in the storage device 32. The program stored in the storage device 13 includes a program for vehicle management. 【0013】 <Preparation process for software update> Next, we will describe the process for preparing the vehicle 10 for a software update. Here, we will explain using the example of updating the software of one of the ECUs 15 installed in the vehicle 10. However, the target of the software update may also be other in-vehicle electronic equipment such as the HMI 16 and sensors. 【0014】 Software updates are performed after preparation is complete. Preparation for software updates involves a download phase and an installation phase. In the download phase, software update data is downloaded from the OTA center 20 to the OTA master 11. During the download phase, the OTA master 11 receives the software update data from the OTA center 20. The OTA master 11 then stores the received update data in the storage device 13. The download phase includes a series of processes related to the download, such as determining whether to proceed with the download and verifying the update data. The update data transmitted from the OTA center 20 to the OTA master 11 may include the update software, compressed data of the update software, or segmented data obtained by dividing the update software or compressed data. The update data may also include the identifier of the in-vehicle electronic device to be updated and the identifier of the software before the update. The update data is downloaded as a distribution package. The distribution package contains update data for one or more in-vehicle electronic devices. 【0015】 During the installation phase, the update software is written to the in-vehicle electronic device to be updated. In the installation phase, the OTA master 11 writes the update software to the non-volatile memory of the ECU 15 to be updated. The installation phase includes a series of processes related to installation, such as determining whether installation is feasible, transferring update data, and verifying the update software. If the update data includes the update software itself, the OTA master 11 transfers the update data to the in-vehicle electronic device to be updated during the installation phase. If the update data includes compressed data, differential data, or segmented data of the update software, a process of generating the update software from the update data is performed. This generation process may be performed by the OTA master 11 or by the in-vehicle electronic device to be updated. The generation of the update software can be done by decompressing the compressed data or assembling the differential data or segmented data. 【0016】 After the installation phase is complete, the scheduled start time for the software update is set. The scheduled start time is set, for example, in the following procedure: When the OTA master 11 is ready to update, it displays the scheduled start time setting screen on the HMI 16. When the user of the vehicle 10 sets the scheduled start time on the HMI 16 displaying the setting screen, the HMI 16 transmits the scheduled start time set by the user to the OTA master 11. The OTA master 11 stores the scheduled start time received from the HMI 16 in the storage device 13. 【0017】 The scheduled start time may be set on the mobile information terminal 30. In this case, the scheduled start time set by the user on the mobile information terminal 30 is transmitted to the OTA master 11 of the vehicle 10 via the OTA center 20. 【0018】 <Software update process> Next, we will explain the software update process. The update process is the process of switching the in-vehicle electronic device to be updated from a state where it operates using the software before the update to a state where it operates using the software after the update. 【0019】 When the scheduled start time set by the user arrives, the OTA master 11 determines whether the execution conditions for activation are met. The execution conditions are individually set for each type of in-vehicle electronic device and updated software. For example, in the case of in-vehicle electronic devices that perform control necessary for the running of the vehicle 10, such as the engine ECU, transmission ECU, brake ECU, etc., the fact that the vehicle 10 is not running is included in the execution conditions for software update. 【0020】 If the execution conditions are not met, the OTA master 11 postpones the execution of the update process and requests a re-setting of the scheduled start time. If the execution conditions are met, the OTA master 11 starts the update process. In the update process, the OTA master 11 commands the activation of the updated software for the in-vehicle electronic device to be updated. The in-vehicle electronic device to be updated performs activation in response to this command. The update process includes a series of processes related to activation, such as verification of the execution result of activation. 【0021】 <Notification instruction process> The OTA master 11 performs the notification instruction process during the period from when the scheduled start time is set until the scheduled start time arrives. In the notification instruction process, the OTA master 11 determines whether software update can be started at the scheduled start time. If the OTA master 11 determines that the update cannot be started at the scheduled start time, it instructs the user of the vehicle 10 that the update will not be started at the scheduled start time. 【0022】 Fig. 2 shows a flowchart of the notification routine executed by the OTA master 11 for the notification instruction process corresponding to the software update in which the fact that the vehicle 10 is parked is included in the execution conditions. The OTA master 11 repeatedly executes the same routine at each predetermined control cycle during the period from when the scheduled start time is set until the scheduled start time arrives. 【0023】 When this routine is started, the OTA master 11 first obtains the current time and the scheduled start time in step S100. Next, in step S110, the OTA master 11 calculates the time before a predetermined time α before the scheduled start time as the judgment start time. Then, in the following step S120, the OTA master 11 determines whether the current time is earlier than the judgment start time. If the current time is earlier than the judgment start time (S120: NO), the OTA master 11 terminates the processing of this routine for the current control cycle. On the other hand, if the current time is after the judgment start time (S120: YES), the OTA master 11 proceeds to step S130. 【0024】 In step S130, the OTA master 11 obtains the vehicle 10's driving schedule from the HMI 16. The driving schedule includes information on the end time of the drive. For example, if the HMI 16 is providing driving route guidance using its navigation function, the estimated time of arrival at the destination set by the user is used as the end time of the drive. Alternatively, the destination for the current drive may be estimated based on past driving history or the current time, and the estimated time of arrival at that destination may be calculated as the end time of the drive. 【0025】 In the following step S140, the OTA master 11 determines whether the end time of the journey is earlier than the scheduled start time. If the end time of the journey is earlier than the scheduled start time (YES), the OTA master 11 terminates the processing of this routine for the current control cycle. On the other hand, if the end time of the journey is after the scheduled start time (NO), it is expected that the vehicle 10 is in motion at the scheduled start time. In this case, the OTA master 11 proceeds to step S150. 【0026】 In step S150, the OTA master 11 sets a new scheduled start time that is a predetermined time β after the end of the journey. Even in this case, the user can manually change the scheduled start time to a different time later. 【0027】 Then, in step S160, the OTA master 11 issues a notification to the HMI 16 and then terminates the processing of this routine for the current control cycle. The notification at this time instructs the HMI 16 to be notified that it is not possible to start the software update at the start time set by the user. Along with the notification, the OTA master 11 also sends the newly set start time to the HMI 16. 【0028】 Figure 3 shows a flowchart of the notification routine that HMI 16 performs in response to the instructions in step S150 of Figure 2. Upon receiving a notification instruction from OTA master 11, HMI 16 determines in step S200 whether or not vehicle 10 is currently located on the highway. 【0029】 If vehicle 10 is not located on the highway (S200: NO), HMI 16 determines in step S210 whether vehicle 10 is stationary or not. If vehicle 10 is not stationary (NO), HMI 16 returns to step S200. On the other hand, if vehicle 10 is stationary (YES), the process proceeds to step S220. 【0030】 In step S220, the HMI 16 executes the notification instructed by the OTA master 11. Specifically, the HMI 16 displays a notification screen that includes a message indicating that the software update will not start at the user-set scheduled start time. The notification screen also displays a message indicating that the software update will start at the scheduled start time reset by the OTA master 11 in step S150 of Figure 2. 【0031】 On the other hand, if vehicle 10 is located on a highway (S200: YES), HMI 16 proceeds to step S220 regardless of whether it is stationary or not. In other words, HMI 16 issues the above notification regardless of whether vehicle 10 is stationary or not when vehicle 10 is located on a highway. 【0032】 <Effects of the Embodiment> The OTA master 11 initiates software updates for in-vehicle electronic devices at the user-set scheduled start time. However, if the conditions for executing the update are not met at the scheduled start time, the OTA master 11 suspends the software update. For example, in the case of in-vehicle electronic devices that control the driving of vehicle 10, one of the conditions for executing the software update is that vehicle 10 is not in motion. If arrival at the destination is delayed due to traffic congestion, etc., vehicle 10 may still be in motion at the scheduled start time. In such cases, the software update cannot be started at the scheduled start time. In such cases, the user's convenience may be reduced because the software update is not performed as scheduled. 【0033】 In response to this, the OTA master 11 determines whether or not the update can be started at the scheduled start time, even before the scheduled start time. If the OTA master 11 determines that the update cannot be started, it instructs the HMI 16 to notify that the software update will not be started at the scheduled start time. Therefore, the user can know in advance that the software update will not be performed as scheduled. This prevents the user from being confused after finding out that the software update will not be performed as scheduled. Furthermore, the user can take action in advance by changing the driving schedule or scheduled start time to ensure that the software update is performed. Thus, user convenience is improved. 【0034】 The operation and effects of this embodiment will now be described. (1) Users will be able to know in advance that the software update will not start at the scheduled time, thus improving user convenience. 【0035】 (2) The OTA master 11 determines whether or not the update can be started based on the vehicle 10's driving schedule. Therefore, it can accurately determine whether or not the software update, whose execution depends on the vehicle 10's driving status, can be started at the scheduled start time. 【0036】 (3) When the vehicle 10 is not located on a highway, the HMI 16 issues the above notification based on the instructions of the OTA master 11 while the vehicle 10 is stopped. Users are more likely to pay attention to the HMI 16 screen when the vehicle 10 is stopped than when it is moving. Therefore, it is easier for the user to confirm the content of the notification. 【0037】 (4) When driving on an expressway, there are few opportunities for the vehicle 10 to stop, so if the notification is issued on the condition that the vehicle is stopped, the notification may be delayed. In contrast, the HMI 16 issues the above notification based on the instructions of the OTA master 11 when the vehicle 10 is located on an expressway, regardless of whether the vehicle 10 is stopped or not. Therefore, the timing of the notification is less likely to be delayed. 【0038】 (5) The system is designed not to determine whether or not to update the scheduled start time, nor to send notifications based on the result of that determination, before a predetermined time α prior to the scheduled start time. Sending notifications too early may be bothersome to users. Also, the accuracy of determining whether or not to update the scheduled start time decreases as the time until the scheduled start time increases. For this reason, it is desirable to perform the above determination and send notifications before a predetermined time α prior to the scheduled start time. 【0039】 <Correspondence> In steps S130 and S140 of Figure 2, the OTA master 11 performs a process to determine whether or not the update can be started at the scheduled start time. In step S160 of Figure 2, the OTA master 11 also performs a process to instruct the vehicle 10 user to be notified that the update will not be started at the scheduled start time. In this embodiment, the OTA master 11 corresponds to the determination unit, the instruction unit, and the information processing system. Furthermore, the program of the OTA master 11 that executes the processing as the determination unit and instruction unit corresponds to the information processing program. 【0040】 (Other embodiments) <About the configuration of the information processing system> The information processing system may be configured so that the OTA center 20 executes part of the processing of the notification instruction routine in Figure 2. For example, the OTA master 11 executes the processing up to step S140 in Figure 2 and sends the determination result in step S140 to the OTA center 20. The OTA center 20 then executes the processing from step S150 onwards in Figure 2 based on the received determination result. At this time, the OTA center 20 issues a notification instruction in step S160 in Figure 2 to the OTA master 11 of the vehicle 10. The OTA master 11 then causes the HMI 16 to execute the notification based on that instruction. In this case, the OTA master 11 corresponds to the determination unit and the OTA center 20 corresponds to the instruction unit. In this case, the information processing system consists of the OTA master 11 and the OTA center 20. 【0041】 The information processing system may be configured so that the OTA center 20 performs all of the processing of the notification instruction routine in Figure 2. In this case, the OTA center 20 shares the scheduled start time with the OTA master 11. The OTA center 20 also obtains the driving schedule from the vehicle 10 and performs the determination in step S130. In this case as well, the OTA center 20 issues a notification instruction in step S160 of Figure 2 to the OTA master 11 of the vehicle 10. The OTA master 11 then causes the HMI 16 to execute the notification based on that instruction. In this case, the OTA center 20 corresponds to the determination unit, the instruction unit, and the information processing system. 【0042】 In some cases, the user's portable information terminal 30 is connected to the vehicle 10 via wireless communication, and the navigation function of the portable information terminal 30 is used to provide driving route guidance. In addition, the scheduled start time for software updates may be set on the portable information terminal 30. In such cases, it is possible to have the portable information terminal 30 execute the notification instruction routine shown in Figure 2. In this case, the portable information terminal 30 can issue the notification instruction in step S160 to the HMI 16 of the vehicle 10, or to its own HMI 33. In this case, the portable information terminal 30 corresponds to the determination unit, instruction unit, and information processing system. Furthermore, the program of the portable information terminal 30 for executing the process shown in Figure 2 corresponds to the information processing program. 【0043】 <About the software update process> In the above embodiment, the update software was installed before the scheduled start time. Alternatively, the installation could be performed at the scheduled start time, and the software update could begin after its completion. 【0044】 <About notification and instruction routines> The determination steps S110 and S120 in Figure 2 may be omitted. In other words, the determination in step S140 and the notification instruction in step S160 may be performed earlier than the determination start time. 【0045】 In step S160 of Figure 2, a notification instruction may be sent to the user's mobile device 30. In this case, the notification routine is executed by the mobile device 30. In this case, the notification instruction is sent from the OTA master 11 to the user's mobile device 30 via the OTA center 20. 【0046】 <About notification routines> In the above embodiment, the HMI 16 determined when to execute a notification based on instructions from the OTA master 11. Alternatively, the OTA master 11 may determine when to execute the notification and instruct the HMI 16 accordingly. For example, the OTA master 11 may perform the determinations in steps S200 and S210 and, when it determines that it is possible to execute the notification, instruct the HMI 16 to execute the notification. In this case, the HMI 16 executes the notification in response to receiving instructions from the OTA master 11. In such a case, if the vehicle 10 is not located on the highway, the OTA master 11 instructs the HMI 16 in step S160 of Figure 2 to execute the notification while the vehicle 10 is stopped. 【0047】 <Regarding the rescheduling of the start time> In the above embodiment, if the OTA master 11 determines that it cannot start the update at the scheduled start time, in step S150 of Figure 2, it resets the scheduled start time to a time after a predetermined time β from the end of the journey. The scheduled start time to be reset may be calculated by other means. For example, the scheduled start time may be reset to be delayed by one day. 【0048】 • You may require user approval to reschedule the start time. • The scheduled start time may not be automatically reset, and users may be required to do so manually. <Regarding the conditions for performing updates> In the above embodiment, the case where the execution conditions for the software update include the vehicle 10 not being in motion was explained as an example. However, failure to meet other execution conditions may prevent the software update from starting at the scheduled start time. For example, a Wi-Fi connection may be required to verify the results of the activation. In such cases, the condition that the vehicle 10 is located at a Wi-Fi access point at the scheduled start time is included in the execution conditions for the software update. Also, the in-vehicle electronic device to be updated may be a device that provides both services performed while the vehicle 10 is in motion and services performed while parked, such as parking surveillance. In such cases, unless the user stops the services performed while parked, the software update cannot be performed even after the vehicle 10 has finished driving. In this case, stopping the services performed while parked is included in the execution conditions for the software update. Furthermore, the condition that the vehicle 10 is not in motion may not be included in the execution conditions for the software update. In any case, the determination in step S140 of Figure 2 can be made by determining whether or not the execution conditions for the software update are met at the scheduled start time. 【0049】 (Additional notes) The technical concepts that can be understood from the above embodiments and modified examples are described below. [Note 1] An information processing system comprising: a determination unit that determines whether or not the update can be started at the scheduled start time, prior to the scheduled start time of the software update in the vehicle; and an instruction unit that, if the determination unit determines that the update cannot be started at the scheduled start time, instructs the vehicle user to be notified that the update will not be started at the scheduled start time. 【0050】 [Note 2] The information processing system described in [Note 1], wherein the determination unit determines whether or not the update can be started based on the vehicle's driving schedule. [Note 3] The instruction unit is the information processing system described in [Note 1] or [Note 2] that gives the instruction to carry out the notification while the vehicle is stopped. 【0051】 [Note 4] The information processing system described in [Note 3], wherein the instruction unit gives the instruction to carry out the notification even when the vehicle is not stopped, if the vehicle is located on a highway. 【0052】 [Note 5] The information processing system according to any one of [Note 1] to [Note 4], wherein the determination unit determines whether the execution conditions for the software update are met at the scheduled start time, and determines that the update cannot be started if it determines that the execution conditions are not met. 【0053】 [Note 6] An information processing method that determines whether the update can be started at the scheduled start time, prior to the scheduled start time of the software update in the vehicle, and, if the determination determines that the update cannot be started at the scheduled start time, notifies the user of the vehicle that the update will not be started at the scheduled start time. 【0054】 [Appendix 7] The information processing method described in [Appendix 6], which performs the determination based on the vehicle's driving schedule. [Appendix 8] The information processing method described in [Appendix 6] or [Appendix 7] for implementing the notification while the vehicle is stopped. 【0055】 [Note 9] The information processing method described in [Note 8] shall be implemented even when the vehicle is not stopped if the vehicle is located on an expressway. [Note 10] An information processing method according to any of [Note 6] to [Note 9], which determines whether the execution conditions for the software update are met at the scheduled start time, and determines that the update cannot be started if it is determined that the execution conditions are not met. 【0056】 [Note 11] An information processing program for processing information relating to software updates in a vehicle, configured to: obtain the scheduled start time of the software update; determine whether the update can be started at the scheduled start time before the scheduled start time; and, if it is determined that the update cannot be started at the scheduled start time, instruct the program to notify the user of the vehicle that the update will not be started at the scheduled start time. 【0057】 [Appendix 12] An information processing program as described in [Appendix 11] that obtains the driving schedule of the vehicle and determines, based on the driving schedule, whether or not the update can be started at the scheduled start time. 【0058】 [Note 13] An information processing program as described in [Note 11] or [Note 12] that gives the instruction to carry out the notification while the vehicle is stopped. [Note 14] The information processing program described in [Note 13] provides the instruction to issue the notification even when the vehicle is not stopped, if the vehicle is located on a highway. 【0059】 [Note 15] An information processing program as described in any of [Note 11] to [Note 14], which determines whether the execution conditions for the software update are met at the scheduled start time, and determines that the update cannot be started if it is determined that the execution conditions are not met. [Explanation of Symbols] 【0060】 10 vehicles 11 OTA Master 12 Processing Circuit 13 Storage device 14. In-vehicle communication lines 15 ECU 16 HMI 17. Communication Module 18 Mobile communications network 20 OTA Centers 21 Processing Circuit 22 Storage device 30. Mobile information terminals 31 Processing Circuit 32 Storage device 33 HMI

Claims

[Claim 1] The system includes a determination unit that determines whether or not the software update can be started before the scheduled start time for the update in the vehicle. If the determination unit determines that it cannot start the update, it resets the start time to a different time than the scheduled start time. Information processing system. [Claim 2] The aforementioned different time is the time one day after the scheduled start time. The information processing system according to claim 1. [Claim 3] If the determination unit determines that the update cannot be started and the vehicle user approves, the different time is reset as the new scheduled start time. The information processing system according to claim 1. [Claim 4] The aforementioned different time is the time set based on the input of the vehicle's user. The information processing system according to claim 1. [Claim 5] If the determination unit determines that it cannot start the update, it requests the vehicle user to set a different time. The information processing system according to claim 4. [Claim 6] The new scheduled start time can be set by the vehicle user to a different time after it has been reset. The information processing system according to claim 1. [Claim 7] The processing circuit, To determine whether the software update can be started before the scheduled start time for the vehicle's software update, If it is determined that the update cannot be started, the following will be performed: Information processing methods. [Claim 8] The aforementioned different time is the time one day after the scheduled start time. The information processing method according to claim 7. [Claim 9] If it is determined that the update cannot be started and the user of the vehicle approves, the processing circuit resets the different time as the new scheduled start time. The information processing method according to claim 7. [Claim 10] The aforementioned different time is the time set based on the input of the vehicle's user. The information processing method according to claim 7. [Claim 11] If the processing circuit determines that it cannot start the update, it requests the vehicle user to set a different time. The information processing method according to claim 10. [Claim 12] The new scheduled start time can be set by the vehicle user to a different time after it has been reset. The information processing method according to claim 7. [Claim 13] A program for processing information regarding software updates in a vehicle, In the processing circuit, To obtain the scheduled start time for the software update, To determine whether the update can be started before the scheduled start time, If it is determined that the update cannot be started, a different time from the previously scheduled start time will be reset as the new scheduled start time. Configured to execute Information processing program. [Claim 14] The aforementioned different time is the time one day after the scheduled start time. The information processing program according to claim 13. [Claim 15] If it is determined that the update cannot be started and the user of the vehicle approves, the processing circuit is configured to reset the different time as the new scheduled start time. The information processing program according to claim 13. [Claim 16] The aforementioned different time is the time set based on the input of the vehicle's user. The information processing program according to claim 13. [Claim 17] If the processing circuit determines that it cannot start the update, it is configured to prompt the vehicle user to set a different time. The information processing program according to claim 16. [Claim 18] The new scheduled start time is configured so that, after being reset, the user of the vehicle can set it to a different time from the new scheduled start time. The information processing program according to claim 13.

Images