Software update system, software update device, software update method, and program

Abstract

To provide a better software update system, software update device, software update method, and update program. [Solution] The software update system 10, if the vehicle is equipped with a shift-by-wire system that automatically sets the shift position to the parking position, performs a confirmation process to ask the user whether to authorize the electronic control unit installed in the vehicle to perform a software update process when the first predetermined condition is met. If the vehicle is not equipped with a shift-by-wire system, the confirmation process is performed when a second predetermined condition, which is different from the first predetermined condition, is met. The first predetermined condition is that the shift position is in the parking position at the time the power mode transitions to a third mode in which a third number of electrical components can operate, and the second predetermined condition is that the shift position is in the parking position at the time the power mode transitions to a second mode in which a second number of electrical components can operate.

Description

Technical Field

[0001] The present disclosure relates to a software update system, a software update device, a software update method, and a program.

Background Art

[0002] Japanese Unexamined Patent Application Publication No. 2022-180041 discloses a vehicle electronic control system. The vehicle electronic control system is a system that can update software installed in an electronic control device by OTA (Over The Air).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] There is a long-felt need for a better software update system, a better software update device, a better software update method, and a program for causing a computer to execute a better software update method.

[0005] The present disclosure aims to solve the above-described problems.

Means for Solving the Problems

[0006] A first aspect of this disclosure is a software update system comprising a vehicle and a server device capable of communicating with the vehicle via a network, the system comprising: a permission confirmation unit that performs a confirmation process to confirm with a user whether or not to permit the execution of a software update process to an electronic control device installed in the vehicle; and an update processing unit that executes the software update process when the user has granted permission to execute the software update process, wherein if the vehicle is equipped with a shift-by-wire system that automatically sets the shift position to the parking position, the permission confirmation unit performs the confirmation process when a first predetermined condition is met, and if the vehicle is not equipped with a shift-by-wire system, the permission confirmation unit performs the confirmation process when a second predetermined condition different from the first predetermined condition is met.

[0007] A second aspect of the present disclosure is a software update system comprising: a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position; and a server device capable of communicating with the vehicle via a network, the software update system comprising: a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational; a permission confirmation unit that performs a confirmation process to confirm with the user whether or not to permit the electronic control unit provided in the vehicle to execute a software update process when predetermined conditions are met at a predetermined timing; and an update processing unit that executes the software update process when the user has permitted the execution of the software update process, wherein the predetermined timing is the timing when the power mode transitions to the third mode.

[0008] A third aspect of the present disclosure is a software update system comprising: a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position; and a server device capable of communicating with the vehicle via a network, the software update system comprising: a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational; a permission confirmation unit that performs a confirmation process to confirm with the user whether or not to permit the electronic control unit provided in the vehicle to perform a software update process when predetermined conditions are met; and an update processing unit that performs the software update process when the user has permitted the execution of the software update process, wherein the predetermined conditions are conditions based on the timing when the power mode transitions to the third mode.

[0009] A fourth aspect of this disclosure is a software update device in a software update system according to the first aspect, comprising the license confirmation unit and the update processing unit.

[0010] A fifth aspect of this disclosure is a software update device in a software update system according to a second aspect, comprising the power mode switch, the license confirmation unit, and the update processing unit.

[0011] A sixth aspect of the present disclosure is a software update method for performing a software update on an electronic control device provided in a vehicle, the method comprising: a confirmation step to ask the user whether to permit the execution of the software update process when a first predetermined condition is met, if the vehicle is equipped with a shift-by-wire system that automatically sets the shift position to the parking position; a permission confirmation step to perform the confirmation process when a second predetermined condition different from the first predetermined condition is met, if the vehicle is not equipped with a shift-by-wire system; and an update process step to execute the software update process when the user has permitted the execution of the software update process.

[0012] A seventh aspect of the present disclosure is a software update method for an electronic control unit provided in a vehicle equipped with a shift-by-wire system that automatically shifts the shift position to the parking position, wherein the vehicle is equipped with a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle are operational, a second mode in which a second number of electrical components less than the first number are operational, and a third mode in which a third number of electrical components less than the second number are operational, and the method comprises: a permission confirmation step which performs a confirmation process to confirm with the user whether or not to permit the execution of the software update process when predetermined conditions are met at a predetermined timing; and an update process step which executes the software update process when the user has permitted the execution of the software update process, wherein the predetermined timing is the timing when the power mode transitions to the third mode.

[0013] An eighth aspect of the present disclosure is a software update method for an electronic control unit provided in a vehicle equipped with a shift-by-wire system that automatically shifts the shift position to the parking position, wherein the vehicle is equipped with a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle are operational, a second mode in which a second number of electrical components less than the first number are operational, and a third mode in which a third number of electrical components less than the second number are operational, and the method comprises: a permission confirmation step that confirms with the user whether or not to permit the execution of the software update process when predetermined conditions are met; and an update process step that executes the software update process when the user has permitted the execution of the software update process, wherein the predetermined conditions are conditions based on the timing when the power mode transitions to the third mode.

[0014] A ninth aspect of this disclosure is a program that causes a computer to perform the software update method according to the sixth aspect. [Effects of the Invention]

[0015] This disclosure provides a better software update system, a better software update device, a better software update method, and a program that causes a computer to execute the better software update method. [Brief explanation of the drawing]

[0016] [Figure 1] Figure 1 is a schematic diagram showing a software update system according to one embodiment. [Figure 2] Figure 2 is a flowchart of the software update process in one embodiment. [Figure 3] Figure 3 is a flowchart showing the software update process performed by a software update device in one embodiment. [Figure 4] FIG. 4 is a flowchart showing software update processing performed by a software update device in one embodiment. [Figure 5] FIG. 5 is a flowchart showing campaign application processing performed by a server device in one embodiment. [Figure 6] FIGS. 6A and 6B are diagrams for explaining the operation of a software update device in a vehicle in one embodiment. **DETAILED DESCRIPTION OF THE INVENTION**

[0017] Conventionally, software updates for electronic control units (hereinafter referred to as "ECUs") mounted in vehicles have been performed by dealers or the like. In recent years, vehicles capable of updating the software of an ECU by OTA (Over The Air) using wireless communication have been commercially available, and such vehicles can update the software of the ECU without being brought to a dealer or the like.

[0018] In the software update process by OTA, it may be necessary to restart the ECU during the process of software activation. Therefore, software activation is performed while the vehicle is parked with the drive sources such as the vehicle engine and drive motor stopped. In order to prevent the vehicle from unexpectedly moving while the software activation is being performed, it is required that the shift position be in the parking position (hereinafter referred to as "P position") as a condition for starting software activation.

[0019] While the software activation is being performed, the drive source cannot be started and the vehicle is in a state where it cannot travel. The period during which the drive source cannot be started for software activation is referred to as "downtime".

[0020] Before starting the software activation, a confirmation process is performed to ask the user whether to permit downtime. In the confirmation process, the downtime permission confirmation information is displayed on a display unit such as an in-vehicle infotainment (hereinafter referred to as IVI). The downtime permission confirmation information includes information such as the name and version of the software to be activated, and information asking for the user's permission for downtime. When the user's permission for downtime is obtained, the software activation is started. After stopping the drive source of the vehicle, it is conceivable that the user gets off the vehicle. If the user gets off the vehicle before the user's judgment on downtime is shown, the software activation cannot be started. Therefore, after the drive source of the vehicle is stopped, the confirmation process needs to be performed promptly.

[0021] Normally, when stopping the drive source of the vehicle, the user operates a shift lever or the like to change the shift position to the P position, and then the user operates a start stop switch (hereinafter referred to as SSSW) or the like to turn the vehicle power mode to IG-OFF. When the vehicle power mode becomes IG-OFF, the drive source stops.

[0022] Conventionally, when the shift position is the P position at the timing when the vehicle power mode transitions to IG-OFF, the downtime permission confirmation information is displayed on the display unit. When the shift position is not the P position at the timing when the vehicle power mode transitions to IG-OFF, it is determined that software update is not possible, and the display of the downtime permission confirmation information is not reached.

[0023] In recent years, vehicles equipped with a Shift By Wire (SBW) system have become commercially available. In vehicles equipped with an SBW system, if the user operates the SSSW to turn the vehicle's power mode to IG-OFF and the shift position is not in the P position, the SBW system will automatically set the shift position to the P position.

[0024] Therefore, many users of vehicles equipped with the SBW system do not shift to the P position when shutting off the vehicle's power source. In vehicles driven by such users, the shift position is often not in the P position when the vehicle's power mode transitions to IG-OFF. As a result, there is a risk that the software update will be deemed impossible, and the software activation will not occur frequently.

[0025] This disclosure demonstrates that software activation can be successfully performed even in vehicles equipped with an SBW system.

[0026] [One Embodiment] A software update system, software update device, software update method, and program according to one embodiment will be described below with reference to drawings. The program (computer program, computer software) according to this embodiment may also be called a computer program product. A computer program product is not limited to computer programs recorded on a recording medium, but also includes computer programs that are transmitted, distributed, or downloaded via the Internet or the like.

[0027] [Software update system configuration] Figure 1 is a schematic diagram showing a software update system 10 according to one embodiment. The software update system 10 comprises a vehicle 12 and a server device 14. The server device 14 can communicate with the vehicle 12 via a network 16.

[0028] Vehicle 12 is equipped with multiple ECUs 18. Each ECU 18 performs control to realize the driving function and other functions of vehicle 12. Each ECU 18 has an arithmetic unit 20 and a storage unit 22. The arithmetic unit 20 is a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit). At least a portion of the arithmetic unit 20 may be implemented by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field-Programmable Gate Array). At least a portion of the arithmetic unit 20 may be implemented by an electronic circuit including discrete devices.

[0029] The storage unit 22 is a computer-readable, non-transient, tangible storage medium. The storage unit 22 is composed of volatile memory (not shown) and non-volatile memory (not shown). The volatile memory is, for example, RAM (Random Access Memory). The non-volatile memory is, for example, ROM (Read Only Memory), flash memory, etc. Data is stored in the volatile memory, for example. Programs, tables, maps, etc. are stored in the non-volatile memory, for example. At least a portion of the storage unit 22 may be provided in the processor, integrated circuit, etc. mentioned above. At least a portion of the storage unit 22 may be mounted on equipment connected to the vehicle 12 by a network 16.

[0030] The vehicle 12 is equipped with a software update device 24. The software update device 24 may be configured, for example, by a CGW-ECU (Central Gateway-Electronic Control Unit). The software update device 24 has an arithmetic unit 26 and a storage unit 28. The arithmetic unit 26 is, for example, a processor such as a CPU or GPU. The arithmetic unit 26 has an information transmission unit 30, an information acquisition unit 32, a display control unit 34, a permission confirmation unit 36, a transmission request unit 38, an update processing unit 40, and a discard processing unit 42. The information transmission unit 30, information acquisition unit 32, display control unit 34, permission confirmation unit 36, transmission request unit 38, update processing unit 40, and discard processing unit 42 are realized by the execution of a program stored in the storage unit 28 in the arithmetic unit 26. At least a part of the information transmission unit 30, information acquisition unit 32, display control unit 34, permission confirmation unit 36, transmission request unit 38, update processing unit 40, and discard processing unit 42 may be realized by an integrated circuit such as an ASIC or FPGA. At least a portion of the information transmission unit 30, information acquisition unit 32, display control unit 34, permission confirmation unit 36, transmission request unit 38, update processing unit 40, and discard processing unit 42 may be implemented by electronic circuits including discrete devices.

[0031] The storage unit 28 is a computer-readable, non-transient, tangible storage medium. The storage unit 28 is composed of volatile memory (not shown) and non-volatile memory (not shown). The volatile memory is, for example, RAM. The non-volatile memory is, for example, ROM, flash memory, etc. Data is stored, for example, in the volatile memory. Programs, tables, maps, etc. are stored, for example, in the non-volatile memory. At least a portion of the storage unit 28 may be provided in the processor, integrated circuit, etc. described above. At least a portion of the storage unit 28 may be mounted on equipment connected to the vehicle 12 by a network 16. The storage unit 28 has a campaign information storage unit 44.

[0032] The software update device 24 performs the software update process for the ECU 18. The software update process includes downloading the software, installing the software, and activating the software.

[0033] Software download refers to obtaining update data transmitted from the server device 14 via the network 16 and storing it in the storage unit 28 of the software update device 24. The update data includes data such as the updated software program. The update data may also include an installer.

[0034] Software installation refers to the process of deploying the update data from the memory unit 28 to the ROM of the ECU 18. Software installation may be performed using an installer. Alternatively, software installation may be performed by copying the update data to the ROM.

[0035] Software activation refers to the process of authenticating the license of installed software. During software activation, executable files and other data used by the software before the update may be overwritten. Once software activation is complete, the ECU18 is permitted to run the software. Activation may be performed by the software update device 24 or by each ECU18.

[0036] The information transmission unit 30 transmits various information to the server device 14. The information acquisition unit 32 acquires various information transmitted from the server device 14. The display control unit 34 controls the IVI 50 (described later) to display campaign information, downtime permission confirmation information, etc., described later on the display unit 58 of the IVI 50. The permission confirmation unit 36 ​​performs a confirmation process to ask the user whether or not to perform software update processing such as software download and software activation. The transmission request unit 38 sends an update data request to the server device 14. The update data request is a signal to request the server device 14 to send update data to the software update device 24. The update processing unit 40 performs update processing for software download, software installation, and software activation. The discard processing unit 42 performs a discard process to discard acquired campaign information stored in the campaign information storage unit 44.

[0037] The software update device 24 and the ECU 18 are connected by CAN (Controller Area Network) (registered trademark) and can communicate with each other. The communication line connecting the software update device 24 and the ECU 18 is not limited to CAN; Ethernet (registered trademark) may also be used, or both CAN and Ethernet may be used. Furthermore, communication lines conforming to standards other than CAN and Ethernet may also be used.

[0038] The software update device 24 can communicate with a base station 48 connected to the network 16 via cellular communication through a Telematics Control Unit (TCU) 46. The network 16 is, for example, the Internet.

[0039] The IVI 50 is connected to the software update device 24. The IVI 50 has an arithmetic unit 52 and a storage unit 54. The arithmetic unit 52 is, for example, a processor such as a CPU or GPU.

[0040] The storage unit 54 is a computer-readable, non-transient, tangible storage medium. The storage unit 54 is composed of volatile memory (not shown) and non-volatile memory (not shown). The volatile memory is, for example, RAM. The non-volatile memory is, for example, ROM, flash memory, etc. Data is stored, for example, in the volatile memory. Programs, tables, maps, etc. are stored, for example, in the non-volatile memory. At least a portion of the storage unit 54 may be provided in the processor, integrated circuit, etc. described above. At least a portion of the storage unit 54 may be mounted on equipment connected to the vehicle 12 by a network 16.

[0041] The IVI50 provides information such as route guidance and road traffic information, as well as entertainment such as audio, DVDs, and TV tuners.

[0042] The IVI 50 has a display unit 58. The display unit 58 is installed on the dashboard of the vehicle 12 or the like. The display unit 58 is a touch panel display. The display unit 58 provides information to the user through images, text, etc., and accepts user input. The screen of the display unit 58 is liquid crystal, organic electroluminescence (organic EL), etc., and is not particularly limited. The touch panel of the display unit 58 is resistive, capacitive, etc., and is not particularly limited. Instead of the display unit 58 which is a touch panel display, a combination of a display device such as a head-up display and a pointing device such as motion capture may be used.

[0043] Vehicle 12 is equipped with SSSW60. The power mode of vehicle 12 can be switched by operating SSSW60. If vehicle 12 is an engine vehicle, the power modes are IG-ON, ACC-ON, ACC-OFF, and START. If vehicle 12 is a hybrid vehicle or an electric vehicle, the power modes are IG-ON, ACC-ON, ACC-OFF, and READY.

[0044] In IG-ON mode, all electrical components of the vehicle 12 can be used. IG-ON also corresponds to the first mode of the present invention. In ACC-ON mode, some electrical components, such as the audio system, can be used. ACC-ON corresponds to the second mode of the present invention. In ACC-OFF mode, all electrical components except for some, such as the keyless entry system, cannot be used. ACC-OFF corresponds to the third mode of the present invention. The number of electrical components that can be used in ACC-ON mode is less than the number of electrical components that can be used in IG-ON mode. The number of electrical components that can be used in ACC-OFF mode is less than the number of electrical components that can be used in ACC-ON mode. Hereafter, ACC-ON may be referred to as IG-OFF.

[0045] In START mode, the starter motor is activated to start the engine. After the engine has started, the system transitions to IG-ON. In READY mode, the drive motor is capable of operating, and the vehicle 12 can move using the drive motor. When a hybrid vehicle or electric vehicle is ready to move, the power mode is IG-ON and READY.

[0046] Vehicle 12 is equipped with a shift position sensor 62. The shift position sensor 62 detects the selected shift position. The shift position can be selected from the parking position (P position), neutral position (N position), drive position (D position), reverse position (R position), etc.

[0047] The server device 14 has an arithmetic unit 64 and a storage unit 66. The arithmetic unit 64 is, for example, a processor such as a CPU or GPU. The arithmetic unit 64 has an information acquisition unit 68 and a transmission processing unit 70. The information acquisition unit 68 and the transmission processing unit 70 are realized by the execution of a program stored in the storage unit 66 in the arithmetic unit 64. At least a part of the information acquisition unit 68 and the transmission processing unit 70 may be realized by an integrated circuit such as an ASIC or FPGA. At least a part of the information acquisition unit 68 and the transmission processing unit 70 may be realized by an electronic circuit including discrete devices.

[0048] The storage unit 66 is a computer-readable, non-transient, tangible storage medium. The storage unit 66 is composed of volatile memory (not shown) and non-volatile memory (not shown). The volatile memory is, for example, RAM. The non-volatile memory is, for example, ROM, flash memory, etc. Data is stored, for example, in the volatile memory. Programs, tables, maps, etc. are stored, for example, in the non-volatile memory. At least a portion of the storage unit 66 may be provided in the processor, integrated circuit, etc., as described above. At least a portion of the storage unit 66 may be mounted on equipment connected to the server device 14 by a network 16.

[0049] Multiple vehicles 12 are registered in the server device 14, and the server device 14 manages the software update status of the ECU 18 of each vehicle 12. The server device 14 provides update data to each vehicle 12 for updating the software of the ECU 18 of each vehicle 12.

[0050] [Software update process flow] Figure 2 is a flowchart of the software update process in one embodiment.

[0051] When a campaign is registered with the server device 14 (P1), the transmission processing unit 70 sends a configuration synchronization request to the vehicle 12's software update device 24 (P2). The campaign, along with update data for updating the ECU 18's software, is registered with the server device 14 by the ECU 18's software developer, the vehicle 12's manufacturer, etc.

[0052] When the information acquisition unit 32 of the software update device 24 acquires a configuration synchronization request (Q1), the information transmission unit 30 transmits configuration synchronization information to the server device 14 (Q2). The configuration synchronization information includes information on the unique identifier assigned to each ECU 18 of the vehicle 12, information on the software version of each ECU 18, and so on.

[0053] When the information acquisition unit 68 of the server device 14 acquires configuration synchronization information (P3), the transmission processing unit 70 transmits campaign information regarding the software update process of each ECU 18 to the software update device 24 (P4).

[0054] The information acquisition unit 32 of the software update device 24 acquires campaign information (Q3) and stores the campaign information in the campaign information storage unit 44. The display control unit 34 displays the campaign information on the display unit 58 of the IVI 50. A confirmation process is performed by the permission confirmation unit 36 ​​to ask the user whether or not to allow the software download. In this confirmation process, if the user allows the software download (Q4), the transmission request unit 38 sends an update data request to the server device 14 (Q5).

[0055] When the information acquisition unit 68 of the server device 14 acquires an update data request (P5), the transmission processing unit 70 transmits the update data to the software update device 24 (P6).

[0056] The update processing unit 40 of the software update device 24 downloads the software by acquiring update data and storing the update data in the storage unit 28 (Q6). Subsequently, the update processing unit 40 expands the update data from the storage unit 28 into the ROM of the ECU 18 and installs the software (Q7).

[0057] Before software activation begins, the authorization confirmation unit 36 ​​of the software update device 24 performs a confirmation process to ask the user whether or not to authorize downtime. If the user authorizes downtime in this confirmation process (Q8), the update processing unit 40 of the software update device 24 performs software activation on the ECU 18 (Q9).

[0058] Once the software activation of ECU18 is complete, the information transmission unit 30 sends a result log to the server device 14 (Q10). The result log includes information such as whether the software update of ECU18 was successful and the time when the activation was completed.

[0059] When the information acquisition unit 68 of the server device 14 acquires the result log (P7), the software update is completed.

[0060] [Software update process] Figures 3 and 4 are flowcharts showing the software update process performed by the software update device 24 in one embodiment. This process is executed at predetermined intervals when the state of SSSW 60 is IG-ON (or READY).

[0061] The software update process differs slightly depending on whether vehicle 12 is equipped with or without the SBW system. If vehicle 12 is not equipped with the SBW system, the software update process shown in Figure 3 is executed. On the other hand, if vehicle 12 is equipped with the SBW system, the software update process shown in Figure 4 is executed. The timing of the determination of whether the shift position in step S12 is in the P position differs between the software update process in Figure 3 and the software update process in Figure 4.

[0062] In step S1, the software update device 24 determines whether or not it has received a configuration synchronization request from the server device 14. If it is determined that a configuration synchronization request has been received (step S1: YES), the process proceeds to step S2.

[0063] In step S2, the information transmission unit 30 of the software update device 24 transmits configuration synchronization information to the server device 14. Then, the process proceeds to step S3.

[0064] In step S3, the information acquisition unit 32 of the software update device 24 acquires campaign information. After that, the process proceeds to step S5.

[0065] If it is determined in step S1 that a configuration synchronization request has not been received (step S1: NO), the process proceeds to step S4. In step S4, the software update device 24 determines whether or not there is already acquired campaign information in the campaign information storage unit 44. If it is determined that there is already acquired campaign information in the campaign information storage unit 44 (step S4: YES), the process proceeds to step S5.

[0066] In step S5, the display control unit 34 of the software update device 24 displays campaign information on the display unit 58 of the IVI 50. Then, the process proceeds to step S6.

[0067] In step S6, the license confirmation unit 36 ​​of the software update device 24 determines whether the user has authorized the download of the software. If the software download is authorized, the process proceeds to step S7.

[0068] In step S7, the transmission request unit 38 of the software update device 24 sends an update data request to the server device 14. Then, the process proceeds to step S8.

[0069] In step S8, the update processing unit 40 of the software update device 24 downloads the software. Then, the process proceeds to step S9.

[0070] In step S9, the update processing unit 40 of the software update device 24 installs the software. After that, the process proceeds to step S11.

[0071] If, in step S4 described above, it is determined that there is no campaign information already acquired in the campaign information storage unit 44 (step S4: NO), or if, in step S6 described above, the software download is rejected (step S6: NO), the process proceeds to step S10. In step S10, the update processing unit 40 of the software update device 24 determines whether or not there is already installed software. If it is determined that there is already installed software (step S10: YES), the process proceeds to step S11. If it is determined that there is no already installed software (step S10: NO), the software update process is terminated.

[0072] If vehicle 12 is not equipped with an SBW system (Figure 3), in step S11, the update processing unit 40 of the software update device 24 determines whether the power mode of vehicle 12 is IG-OFF. If it is determined that the power mode is IG-OFF (step S11: YES), the process proceeds to step S12. If it is determined that the power mode is not IG-OFF (step S11: NO), the software update process is terminated.

[0073] If vehicle 12 is equipped with an SBW system (Figure 4), in step S11, the update processing unit 40 of the software update device 24 determines whether the power mode of vehicle 12 is ACC-OFF. If it is determined that the power mode is ACC-OFF (step S11: YES), the process proceeds to step S12. If it is determined that the power mode is not ACC-OFF (step S11: NO), the software update process is terminated.

[0074] In step S12, the update processing unit 40 of the software update device 24 determines whether the shift position is the P position. If it is determined that the shift position is the P position (step S12: YES), the process proceeds to step S13.

[0075] In step S13, the display control unit 34 of the software update device 24 displays downtime permission confirmation information on the display unit 58 of the IVI 50. Then, the process proceeds to step S14.

[0076] In step S14, the authorization confirmation unit 36 ​​of the software update device 24 determines whether the user has authorized the downtime. If it is determined that the downtime has been authorized (step S14: YES), the process proceeds to step S15.

[0077] In step S15, the update processing unit 40 of the software update device 24 performs software activation. After that, the process proceeds to step S16.

[0078] In step S16, the discard processing unit 42 of the software update device 24 discards the campaign information stored in the campaign information storage unit 44.

[0079] In step S17, the update processing unit 40 of the software update device 24 creates a result log indicating that the software update was successful, and the information transmission unit 30 sends the created result log to the server device 14. After that, the software update process is terminated.

[0080] If, in step S12, it is determined that the shift position is not the P position (step S12: NO), or if, in step S14, it is determined that the downtime has been rejected (step S14: NO), the process proceeds to step S18. In step S18, the display control unit 34 of the software update device 24 displays update unavailable information on the display unit 58, indicating that the software update is not possible. The process then proceeds to step S19.

[0081] In step S19, the update processing unit 40 of the software update device 24 creates a result log indicating that the software update was unsuccessful, and the information transmission unit 30 sends the created result log to the server device 14. After that, the software update process is terminated.

[0082] [Campaign Application Process] Figure 5 is a flowchart showing the campaign application process performed by the server device 14 in one embodiment. This process is executed at predetermined intervals.

[0083] In step S21, the server device 14 determines whether the campaign has been registered. If it is determined that the campaign has been registered (step S21: YES), the process proceeds to step S23.

[0084] If it is determined that no campaign is registered (Step S21: NO), the process proceeds to Step S22. In Step S22, the server device 14 determines whether there are any campaigns for which an update data request has not yet been received. If it is determined that there are campaigns for which an update data request has not yet been received (Step S22: YES), the process proceeds to Step S23. If it is determined that there are no campaigns for which an update data request has not yet been received (Step S22: NO), the campaign application process is terminated.

[0085] In step S23, the transmission processing unit 70 of the server device 14 sends a configuration synchronization request to the vehicle 12. Then, the process proceeds to step S24.

[0086] In step S24, the information acquisition unit 68 of the server device 14 acquires configuration synchronization information from the vehicle 12. Then, the process proceeds to step S25.

[0087] In step S25, the transmission processing unit 70 of the server device 14 transmits campaign information to the vehicle 12. Then, the process proceeds to step S26.

[0088] In step S26, the server device 14 determines whether or not it has received an update data request. If it is determined that an update data request has been received (step S26: YES), the process proceeds to step S27. If it is determined that an update data request has not been received (step S26: NO), the campaign application process is terminated.

[0089] In step S27, the transmission processing unit 70 of the server device 14 transmits the update data to the vehicle 12. After that, the campaign application process is terminated.

[0090] [Regarding the operation of the software update device] Figures 6A and 6B illustrate the operation of the software update device 24 in a vehicle 12 in one embodiment. Figure 6A shows the operation of the software update device 24 in a vehicle without an SBW system. Figure 6B shows the operation of the software update device 24 in a vehicle equipped with an SBW system.

[0091] In one embodiment of the software update device 24, a confirmation process (hereinafter referred to as the "downtime permission confirmation process") is performed in the permission confirmation unit 36 ​​to confirm with the user whether or not to allow downtime before the software activation begins. By allowing downtime, the user also gives permission to perform the software activation.

[0092] In a vehicle equipped with an SBW system, the software update device 24 performs a permission confirmation process when a first predetermined condition is met. The first predetermined condition is that the shift position is in the P position at the time the power mode transitions to ACC-OFF.

[0093] In other words, in a vehicle equipped with an SBW system, the software update device 24 can also be described as performing a permission confirmation process on the permission confirmation unit 36 ​​when a predetermined condition is met at a first predetermined timing. The first predetermined timing is the timing when the power mode transitions to ACC-OFF, and the predetermined condition is that the shift position is the P position.

[0094] On the other hand, in the software update device 24 of a vehicle not equipped with an SBW system, the permission confirmation unit 36 ​​performs downtime permission confirmation processing when the second predetermined condition is met. The second predetermined condition is that the shift position is the P position at the time the power mode transitions to IG-OFF.

[0095] In other words, in a vehicle without an SBW system, the software update device 24 can also be described as performing a permission confirmation process on the permission confirmation unit 36 ​​when a predetermined condition is met at a second predetermined timing. The second predetermined timing is the timing when the power mode transitions to IG-OFF, and the predetermined condition is that the shift position is the P position.

[0096] As shown in Figure 6B, in a vehicle equipped with the SBW system, if the shift position is in a position other than the P position (for example, the N position) when the power mode of the vehicle 12 transitions to IG-OFF, the SBW system automatically switches it to the P position. After switching to the P position, the power mode of the vehicle 12 transitions to ACC-OFF.

[0097] Therefore, many users of vehicles 12 equipped with the SBW system do not shift to the P position when shutting down the vehicle's power source. If the conditions for performing downtime permission confirmation processing in vehicles equipped with the SBW system were set to the same conditions as those for performing downtime permission confirmation processing in vehicles not equipped with the SBW system, there is a risk that the software update would be deemed impossible in vehicles equipped with the SBW system, and the software activation would not occur frequently.

[0098] In this disclosure, the conditions for performing downtime permission confirmation processing in vehicles equipped with an SBW system are different from those for performing downtime permission confirmation processing in vehicles not equipped with an SBW system. Specifically, the condition for performing downtime permission confirmation processing in vehicles not equipped with an SBW system is that the shift position is in the P position when the power mode transitions to IG-OFF. In contrast, the condition for performing downtime permission confirmation processing in vehicles equipped with an SBW system is that the shift position is in the P position when the power mode transitions to ACC-OFF. As a result, even in vehicles equipped with an SBW system, the number of cases in which software updates are deemed impossible is reduced, and software activation can be performed successfully.

[0099] The following additional information is disclosed regarding the above embodiment.

[0100] (Note 1) The software update system (10) of this disclosure is a software update system comprising a vehicle (12) and a server device (14) capable of communicating with the vehicle via a network (16), and comprises: a permission confirmation unit (36) that performs a confirmation process to confirm with the user whether or not to permit the electronic control device installed in the vehicle to perform a software update process; and an update processing unit (40) that performs the software update process when the user has granted permission to perform the software update process, wherein if the vehicle is equipped with a shift-by-wire system that automatically sets the shift position to the parking position, the permission confirmation unit performs the confirmation process when a first predetermined condition is met, and if the vehicle is not equipped with a shift-by-wire system, the permission confirmation unit performs the confirmation process when a second predetermined condition different from the first predetermined condition is met. With such a configuration, even a vehicle equipped with an SBW system can be successfully activated.

[0101] (Note 2) The software update system described in Appendix 1 further includes a power mode switch that can switch the power mode of the vehicle based on user operation to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle can be operated, a second mode in which a second number of electrical components less than the first number can be operated, and a third mode in which a third number of electrical components less than the second number can be operated, wherein the first predetermined condition is that the shift position is the parking position at the time the power mode transitions to the third mode, and the second predetermined condition is that the shift position is the parking position at the time the power mode transitions to the second mode.

[0102] (Note 3) The software update system of this disclosure comprises a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position, and a server device capable of communicating with the vehicle via a network, and further comprises a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle are operational, a second mode in which a second number of electrical components less than the first number are operational, and a third mode in which a third number of electrical components less than the second number are operational, based on user operation; a permission confirmation unit that performs a confirmation process to confirm with the user whether or not to permit the electronic control unit provided on the vehicle to execute a software update process when predetermined conditions are met at a predetermined timing; and an update processing unit that executes the software update process when the user has permitted the execution of the software update process, wherein the predetermined timing is the timing when the power mode transitions to the third mode.

[0103] (Note 4) In the software update system described in Appendix 3, the predetermined condition may be that the shift position is the parking position.

[0104] (Note 5) The software update system of this disclosure comprises a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position, and a server device capable of communicating with the vehicle via a network, the software update system comprising: a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle are operational, a second mode in which a second number of electrical components less than the first number are operational, and a third mode in which a third number of electrical components less than the second number are operational; a permission confirmation unit that performs a confirmation process to confirm with the user whether or not to permit the electronic control unit provided in the vehicle to execute a software update process when predetermined conditions are met; and an update processing unit that executes the software update process when the user has permitted the execution of the software update process, wherein the predetermined conditions are conditions based on the timing when the power mode transitions to the third mode.

[0105] (Note 6) In the software update system described in Appendix 5, the predetermined condition may be that the shift position is the parking position at the time the power mode transitions to the third mode.

[0106] (Note 7) The software update device (24) of this disclosure is a software update device in the software update system described in Appendix 1 or 2, comprising the license confirmation unit and the update processing unit.

[0107] (Note 8) The software update device of this disclosure is a software update device in a software update system described in any one of appendices 3 to 6, comprising the power mode switch, the license confirmation unit, and the update processing unit.

[0108] (Note 9) The software update method of this disclosure is a software update method for performing a software update process on an electronic control device installed in a vehicle, comprising: a confirmation process to confirm with the user whether to permit the execution of the software update process when a first predetermined condition is met, if the vehicle is equipped with a shift-by-wire system that automatically sets the shift position to the parking position, if the first predetermined condition is met, if the vehicle is not equipped with a shift-by-wire system, a permission confirmation step to perform the confirmation process when a second predetermined condition different from the first predetermined condition is met, and an update process step to execute the software update process when the user has permitted the execution of the software update process.

[0109] (Note 10) In the software update method described in Appendix 9, the vehicle is equipped with a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle can be operated, a second mode in which a second number of electrical components less than the first number can be operated, and a third mode in which a third number of electrical components less than the second number can be operated, based on the operation of the user, wherein the first predetermined condition is that the shift position is the parking position at the time the power mode transitions to the third mode, and the second predetermined condition is that the shift position is the parking position at the time the power mode transitions to the second mode.

[0110] (Note 11) The software update method of this disclosure is a software update method for an electronic control unit provided in a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position, wherein the vehicle is equipped with a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle can be operated, a second mode in which a second number of electrical components less than the first number can be operated, and a third mode in which a third number of electrical components less than the second number can be operated, based on user operation, and comprises a permission confirmation step which confirms to the user whether or not to permit the execution of the software update process when predetermined conditions are met at a predetermined timing, and an update process step which executes the software update process when the user has permitted the execution of the software update process, wherein the predetermined timing is the timing when the power mode transitions to the third mode.

[0111] (Note 12) The software update method of this disclosure, in the software update method described in Appendix 11, may be such that the predetermined condition is that the shift position is the parking position.

[0112] (Note 13) The software update method of this disclosure is a software update method for an electronic control unit provided in a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position, wherein the vehicle is equipped with a power mode switch that can switch the power mode of the vehicle to at least one of a first mode in which a first number of electrical components among a plurality of electrical components mounted on the vehicle can be operated, a second mode in which a second number of electrical components less than the first number can be operated, and a third mode in which a third number of electrical components less than the second number can be operated, based on user operation, and comprises a permission confirmation step which confirms to the user whether or not to permit the execution of the software update process when predetermined conditions are met, and an update process step which executes the software update process when the user has permitted the execution of the software update process, wherein the predetermined conditions are conditions based on the timing when the power mode transitions to the third mode.

[0113] (Note 14) In the software update method described in Appendix 13, the predetermined condition may be that the shift position is the parking position at the time the power mode transitions to the third mode.

[0114] (Note 15) The program of this disclosure causes a computer to execute one of the software update methods described in any one of Appendices 9 to 14.

[0115] While this disclosure has been described in detail, it is not limited to the individual embodiments described above. These embodiments can be added, replaced, modified, partially deleted, etc., in any way that does not depart from the gist of this disclosure or from the intent of this disclosure derived from the claims and their equivalents. These embodiments can also be implemented in combination. For example, the order of operations and processes in the embodiments described above are given as examples only and are not limited thereto. The same applies when numerical values ​​or mathematical formulas are used in the description of the embodiments described above. [Explanation of Symbols]

[0116] 10…Software update system 12…Vehicle 14…Server equipment 16…Network 24...Software update device 36...License confirmation unit 40...Update Processing Unit

Claims

1. A software update system comprising a vehicle and a server device capable of communicating with the vehicle via a network, A permission confirmation unit performs a confirmation process to ask the user whether or not to grant permission to perform a software update process on the electronic control unit installed in the vehicle, If the user has authorized the execution of the software update process, an update processing unit that executes the software update process, Equipped with, If the vehicle is equipped with a shift-by-wire system that automatically shifts the shift position to the parking position, the authorization confirmation unit performs the confirmation process when the first predetermined condition is met. A software update system in which, if the vehicle is not equipped with the shift-by-wire system, the authorization confirmation unit performs the confirmation process when a second predetermined condition different from the first predetermined condition is met.

2. In the software update system described in claim 1, The vehicle is further equipped with a power mode switch that can switch the power mode of the vehicle based on user operation to at least one of the following: a first mode in which a first number of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational. The first predetermined condition is that the shift position is the parking position at the timing when the power mode transitions to the third mode. A software update system in which the second predetermined condition is that the shift position is the parking position at the time the power mode transitions to the second mode.

3. A software update system comprising a vehicle equipped with a shift-by-wire system that automatically shifts the shift position to the parking position, and a server device capable of communicating with the vehicle via a network, A power mode switch that can switch the power mode of the vehicle to at least one of the following based on user operation: a first mode in which a first number of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational. A permission confirmation unit performs a confirmation process to ask the user whether or not to authorize the execution of a software update process on the electronic control unit installed in the vehicle when predetermined conditions are met at a predetermined timing, If the user has authorized the execution of the software update process, an update processing unit that executes the software update process, Equipped with, The predetermined timing is the timing at which the power mode transitions to the third mode, in this software update system.

4. In the software update system according to claim 3, A software update system in which the predetermined condition is that the shift position is the parking position.

5. A software update system comprising a vehicle equipped with a shift-by-wire system that automatically shifts the shift position to the parking position, and a server device capable of communicating with the vehicle via a network, A power mode switch that can switch the power mode of the vehicle to at least one of the following based on user operation: a first mode in which a first number of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational. A permission confirmation unit performs a confirmation process to ask the user whether or not to authorize the execution of a software update process on the electronic control unit installed in the vehicle when predetermined conditions are met. If the user has authorized the execution of the software update process, an update processing unit that executes the software update process, Equipped with, A software update system in which the predetermined conditions are conditions based on the timing at which the power mode transitions to the third mode.

6. In the software update system according to claim 5, A software update system in which the predetermined condition is that the shift position is the parking position at the time the power mode transitions to the third mode.

7. A software update device in the software update system according to claim 1 or 2, A software update device comprising the license confirmation unit and the update processing unit.

8. A software update device in a software update system according to any one of claims 3 to 6, A software update device comprising the power mode switch, the license confirmation unit, and the update processing unit.

9. A software update method for performing a software update process on an electronic control unit installed in a vehicle, If the vehicle is equipped with a shift-by-wire system that automatically shifts the shift position to the parking position, a confirmation process is performed to ask the user whether or not to permit the execution of the software update process when a first predetermined condition is met, and if the vehicle is not equipped with a shift-by-wire system, a permission confirmation step is performed when a second predetermined condition different from the first predetermined condition is met, If the user has authorized the execution of the software update process, the update process step includes executing the software update process, A software update method having the following characteristics.

10. In the software update method described in claim 9, The vehicle is equipped with a power mode switch that allows the user to switch the power mode of the vehicle to at least one of the following: a first mode in which a first number of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational. The first predetermined condition is that the shift position is the parking position at the timing when the power mode transitions to the third mode. A software update method in which the second predetermined condition is that the shift position is the parking position at the timing when the power mode transitions to the second mode.

11. A software update method for an electronic control unit installed in a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position, The vehicle is equipped with a power mode switch that allows the user to switch the power mode of the vehicle to at least one of the following: a first mode in which a first number of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational. A permission confirmation step involves performing a confirmation process to ask the user whether or not to allow the software update process to be executed when predetermined conditions are met at a predetermined timing, If the user has authorized the execution of the software update process, the update process step includes executing the software update process, It has, A software update method in which the predetermined timing is the timing when the power mode transitions to the third mode.

12. In the software update method described in claim 11, A software update method wherein the predetermined condition is that the shift position is the parking position.

13. A software update method for an electronic control unit installed in a vehicle equipped with a shift-by-wire system that automatically sets the shift position to the parking position, The vehicle is equipped with a power mode switch that allows the user to switch the power mode of the vehicle to at least one of the following: a first mode in which a first number of electrical components mounted on the vehicle are operational; a second mode in which a second number of electrical components less than the first number are operational; and a third mode in which a third number of electrical components less than the second number are operational. A permission confirmation step involves performing a confirmation process to ask the user whether or not to allow the software update process to be executed if the predetermined conditions are met, If the user has authorized the execution of the software update process, the update process step includes executing the software update process, It has, A software update method wherein the predetermined conditions are conditions based on the timing at which the power mode transitions to the third mode.

14. In the software update method described in claim 13, A software update method in which the predetermined condition is that the shift position is the parking position at the timing when the power mode transitions to the third mode.

15. A program that causes a computer to execute the software update method described in any one of claims 9 to 14.

Images