Software update system, software update device, software update method, and program

Abstract

This invention provides a software update system, a software update device, a software update method, and a program for effectively updating the software of electronic control devices installed in vehicles. [Solution] A software update system comprising a vehicle 12 and a server device capable of communicating with the vehicle 12 via a network, wherein the software update device 40 includes an update control unit 58 that performs a software update process on an electronic control device 42 provided in the vehicle 12 using new software supplied from the server device via the network, and an occupant detection unit 54 that detects whether an occupant has been left behind in the seat of the vehicle 12, and if the occupant detection unit 54 detects that an occupant has been left behind, the update control unit 58 restricts the software update process.

Description

Technical Field

[0001] The present disclosure relates to a software update system, a software update device, a software update method, and a program.

Background Art

[0002] Japanese Unexamined Patent Application Publication No. 2020-144784 discloses an in-vehicle update device that executes program update processing for an in-vehicle device.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] It is desirable to perform software update of an electronic control unit provided in a vehicle well.

[0005] The present disclosure aims to solve the above-described problems.

Means for Solving the Problems

[0006] A first aspect of the present disclosure is a software update system including a vehicle and a server device communicable with the vehicle via a network, the software update system including: an update control unit that executes software update processing for an electronic control unit provided in the vehicle using new version software supplied from the server device via the network; and a passenger detection unit that detects abandonment of a passenger on a seat of the vehicle, wherein when the passenger detection unit detects abandonment of the passenger, the update control unit restricts the software update processing.

[0007] A second aspect of the present disclosure is a software update system comprising a vehicle and a server device capable of communicating with the vehicle via a network, the system comprising: a permission confirmation unit that performs a confirmation process to confirm with the driver of the vehicle whether or not to permit an electronic control device provided in the vehicle to perform a software update process; and an update control unit that, if the driver permits the execution of the software update process, executes the software update process using new software supplied from the server device via the network, wherein if the vehicle is not equipped with an occupant detection unit for detecting whether an occupant has been left in the vehicle's seat, the permission confirmation unit completes the confirmation process by having the driver execute a permission procedure of a first complexity, and if the vehicle is equipped with an occupant detection unit, the permission confirmation unit completes the confirmation process by having the driver execute a permission procedure of a second complexity which is more complex than the first complexity.

[0008] A third aspect of this disclosure is a software update device in a software update system of the first aspect, comprising the update control unit and the occupant detection unit.

[0009] A fourth aspect of this disclosure is a software update device in a software update system of the second aspect, comprising the license confirmation unit and the update control unit.

[0010] A fifth aspect of this disclosure is a software update method comprising: an update control step of performing a software update process on an electronic control unit installed in a vehicle using new software supplied from a server device via a network; and an occupant detection step of detecting whether an occupant has been left behind in the seat of the vehicle, wherein if the occupant detection step detects that an occupant has been left behind, the update control step restricts the software update process.

[0011] A sixth aspect of the present disclosure is a software update method comprising: a permission confirmation step of performing a confirmation process to confirm with the driver of a vehicle whether or not to permit the execution of a software update process to an electronic control device provided in the vehicle; and an update control step of executing the software update process using new software supplied from a server device via a network when the driver permits the execution of the software update process, wherein if the vehicle is not provided with an occupant detection unit for detecting whether an occupant has been left in the vehicle's seat, the permission confirmation step completes the confirmation process by having the driver execute a permission procedure of a first complexity; and if the vehicle is provided with an occupant detection unit, the permission confirmation step completes the confirmation process by having the driver execute a permission procedure of a second complexity which is more complex than the first complexity.

[0012] A seventh aspect of this disclosure is a program that causes a computer to execute the software update method of the fifth or sixth aspect. [Effects of the Invention]

[0013] According to this disclosure, software updates can be performed effectively. [Brief explanation of the drawing]

[0014] [Figure 1] Figure 1 is a schematic diagram of the software update system. [Figure 2] Figure 2 is a block diagram of a vehicle equipped with an occupant detection function. [Figure 3] Figure 3 is a block diagram of a vehicle that does not have an occupant detection function. [Figure 4] Figure 4 is a flowchart of the series of processes performed in a vehicle equipped with an occupant detection function. [Figure 5] Figure 5 is a schematic diagram of the permission confirmation screen. [Figure 6] Figure 6 is a schematic diagram of the first stop confirmation screen. [Figure 7]FIG. 7 is a schematic diagram of the second stop confirmation screen. [Figure 8] FIG. 8 is a schematic diagram of the stop notification screen. [Figure 9] FIG. 9 is a schematic diagram of the update status screen. [Figure 10] FIG. 10 is a flowchart of a series of processes executed in a vehicle not equipped with an occupant detection function.

Mode for Carrying Out the Invention

[0015] Accidents caused by leaving passengers inside the vehicle have become a problem. Therefore, technologies for suppressing accidents caused by leaving passengers inside the vehicle have been developed. For example, vehicles equipped with an occupant detection device for detecting a passenger left in the rear seat have begun to spread. For example, when the driver gets off the vehicle, the occupant detection device causes a message prompting to check the rear seat to be displayed on the display unit. When the occupant detection device detects the presence of a passenger in the rear seat even though the driver has gotten off the vehicle, it sounds a siren and lights up a light. Further, when the occupant detection device detects the presence of a passenger in the rear seat even though the driver has gotten off the vehicle, it notifies a warning to the portable terminal owned by the driver via a network such as the Internet. The occupant detection device may target the entire interior of the vehicle including not only the rear seat but also the foot area of the seat for detection.

[0016] In recent years, vehicles equipped with an OTA (Over The Air) function have become widespread. The software update device provided in such a vehicle performs data communication with the server device of the OTA center via a network such as the Internet and performs software update processing. As software update processing, the software update device performs each of the processes of downloading, installing, and activating new version software.

[0017] While the software update device is executing the activation process, driving of the vehicle is disabled. That is, while the software update device is executing the activation process, running of the vehicle is disabled, and furthermore, use of each device (such as an air conditioner) provided in the vehicle is also disabled. For this reason, the software update device executes the activation process when the vehicle power switch is switched from on to off.

[0018] While the software update device is executing the activation process, use of the above-described occupant detection device is also disabled. That is, while the software update device is executing the activation process, even if an event occurs in which an occupant is left unattended in the vehicle seat, it is impossible to notify the driver and surrounding third parties.

[0019] The present disclosure described below contributes to suppressing an accident caused by an occupant being left unattended in the vehicle.

[0020] [1 Software Update System 10] FIG. 1 is a schematic configuration diagram of a software update system 10. The software update system 10 includes a plurality of vehicles 12 and a server device 14. Each vehicle 12 and the server device 14 can perform two-way communication via a network 16 such as the Internet. The plurality of vehicles 12 include a vehicle 12a having an occupant detection function and a vehicle 12b not having an occupant detection function.

[0021] [1-1 Vehicle 12a] FIG. 2 is a block diagram of a vehicle 12a having an occupant detection function. The vehicle 12a includes a human machine interface unit 20 (also referred to as an HMI unit 20), a communication unit 22, a sensor unit 24, and a control unit 26.

[0022] The HMI unit 20 may consist of an operation switch 28, an information input device 30, and an information output device 32. The operation switch 28 is a user-operable control element (button, key switch, etc.) such as an SSSW (Start Stop Switch) or IGSW (Ignition Switch). The operation switch 28 also serves as a power switch to switch the vehicle's power system on and off. The information input device 30 inputs information corresponding to user operations to the control unit 26. The information input device 30 includes at least one of a user-operable control element (keyboard, pointing device, etc.) and an audio input device such as a microphone. The information input device 30 may also include a camera for detecting user gestures. The information output device 32 provides the user with information output from the control unit 26. The information output device 32 includes at least one of a display unit 34 and an audio output device including a speaker. The HMI unit 20 may also include a touch panel in which a pointing device and a liquid crystal display are integrated.

[0023] The communication unit 22 may be composed of, for example, a TCU (Telematics Control Unit). The TCU can achieve bidirectional communication with external devices (such as a server device 14) of the vehicle 12. The TCU comprises a communication circuit, a wireless communication module (integrated circuit module), and a microcontroller. The communication circuit performs bidirectional communication with the control unit 26. The wireless communication module performs bidirectional communication with external devices of the vehicle 12 via the network 16. The microcontroller performs data processing.

[0024] The sensor unit 24 may consist of sensors for detecting whether or not an occupant is present in the seat. In this specification, the term "occupant" includes animals (pets) in addition to people. The sensor unit 24 may include, for example, a radar sensor 36. The radar sensor 36 detects the movement of the occupant in the seat. The sensor unit 24 may also include sensors other than the radar sensor 36. For example, the sensor unit 24 may include a camera and image sensor for detecting the movement of the occupant, a weight sensor for detecting the weight of the occupant, a temperature sensor for detecting the body temperature of the occupant, and so on.

[0025] The control unit 26 may consist of a software update device 40 and a plurality of electronic control devices 42. The software update device 40 performs software update processing for each electronic control device 42. Each electronic control device 42 performs various controls of the vehicle 12. The software update device 40 and each electronic control device 42 can communicate bidirectionally via an in-vehicle network 44 such as a CAN bus.

[0026] The software update device 40 may be configured, for example, by a CGW-ECU (Central Gateway-Electronic Control Unit). The software update device 40 comprises a calculation unit 46 and a storage unit 48.

[0027] The arithmetic unit 46 may be composed of a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit). In other words, the arithmetic unit 46 may be composed of processing circuitry. The arithmetic unit 46 includes an acquisition unit 50, an operation completion determination unit 52, a crew detection unit 54, a permission confirmation unit 56, and an update control unit 58. The acquisition unit 50, the operation completion determination unit 52, the crew detection unit 54, the permission confirmation unit 56, and the update control unit 58 may be realized by the execution of a program stored in the storage unit 48 by the arithmetic unit 46. At least a part of the arithmetic unit 46 may be realized by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field-Programmable Gate Array). At least a part of the arithmetic unit 46 may be realized by an electronic circuit including discrete devices.

[0028] The acquisition unit 50 acquires (downloads) the new version of the software distributed from the server device 14 via the network 16. The operation completion determination unit 52 determines whether the operation of the vehicle 12 has ended. For example, the operation completion determination unit 52 determines whether the operation switch 28 has been turned off. The occupant detection unit 54 detects whether an occupant has been left behind in the seat of the vehicle 12a based on the detection result acquired from the occupant detection device 42a. The occupant detection unit 54 can perform occupant detection in the seat regardless of whether the vehicle 12a is being driven or not. In other words, the occupant detection unit 54 can perform occupant detection in the seat regardless of whether a driver is present in the driver's seat or not. In further terms, the occupant detection unit 54 can perform occupant detection in the seat regardless of whether the operation switch 28 is on or off. The permission confirmation unit 56 performs a process to confirm with the user whether or not to grant permission to the electronic control device 42 to perform the software update process. The update control unit 58 performs the software update process on the electronic control device 42 using the new version of the software.

[0029] The storage unit 48 is composed of computer-readable storage media, namely volatile memory (not shown) and non-volatile memory (not shown). The volatile memory is, for example, RAM (Random Access Memory). The non-volatile memory is, for example, ROM (Read Only Memory) or flash memory. Data is stored in the volatile memory, for example. Programs, tables, maps, etc., are stored in the non-volatile memory, for example. At least a part of the storage unit 48 may be provided in the processor, integrated circuit, etc. mentioned above.

[0030] The electronic control unit 42 may be composed of, for example, an ECU (Electronic Control Unit). The electronic control unit 42 comprises an arithmetic unit 60 and a storage unit 62.

[0031] The arithmetic unit 46 may be composed of a processor such as a CPU or GPU. At least a portion of the arithmetic unit 46 may be implemented by an integrated circuit such as an ASIC or FPGA. At least a portion of the arithmetic unit 46 may be implemented by an electronic circuit including discrete devices.

[0032] The storage unit 62 is composed of a computer-readable storage medium, which includes a volatile memory (not shown) and a non-volatile memory (not shown). The volatile memory is, for example, RAM. The non-volatile memory is, for example, ROM, flash memory, etc. Data is stored in the volatile memory, for example. Programs, tables, maps, etc. are stored in the non-volatile memory, for example. At least a part of the storage unit 62 may be provided in the processor, integrated circuit, etc. mentioned above.

[0033] The non-volatile memory of the storage unit 62 has multiple memory banks. New software versions are written to one of these memory banks. For example, new software versions are written to a memory bank other than the one in which the currently used software (old software) is written.

[0034] The control unit 26 is equipped with an occupant detection device 42a as one of a plurality of electronic control devices 42. The occupant detection device 42a comprises a calculation unit 60a and a storage unit 62a. The calculation unit 60a performs occupant detection processing. For example, the calculation unit 60a detects whether or not an occupant is present in a seat based on information acquired from the sensor unit 24. The calculation unit 60a can detect if an occupant has been left unattended in a seat in the vehicle 12a.

[0035] The calculation unit 60a displays a message on the display unit 34 prompting the driver to check the seats when they exit the vehicle. If the calculation unit 60a detects the presence of an occupant in the seats despite the driver having exited the vehicle, it sounds the horn and turns on the lights. Furthermore, if the calculation unit 60a detects the presence of an occupant in the seats despite the driver having exited the vehicle, it notifies the driver's mobile device via the network 16 of a warning.

[0036] [1-2 Vehicle 12b] Figure 3 is a block diagram of vehicle 12b, which does not have an occupant detection function. In Figure 3, the same components as in Figure 2 are denoted by the same reference numerals. Vehicle 12b has some of the same configuration as vehicle 12a. On the other hand, vehicle 12b does not have the sensor unit 24 and occupant detection device 42a that are present in vehicle 12a. Also, the calculation unit 46 of vehicle 12b does not have the occupant detection unit 54 that is present in the calculation unit 46 of vehicle 12a. Note that vehicle 12b may have a normal occupant detection function. A normal occupant detection function is a function that detects occupants inside the vehicle only when vehicle 12b is in operation (operation switch 28 is ON).

[0037] [1-3 Server device 14] The server device 14 may be a physical server or a cloud server. The server device 14 can distribute information about software updates (such as new software versions) to the vehicle 12 via the network 16.

[0038] [2. How to update the software] The software update system 10 performs the following three characteristic processes: (Process 1) In vehicle 12a, if the occupant detection unit 54 detects that an occupant has been left behind, the update control unit 58 restricts the software update process. As an example of restricting the software update process, the update control unit 58 suspends (prohibits) the activation of the downloaded new version of the software (steps S2:YES and S11 in Figure 4, described later). (Process 2) In vehicle 12b, the authorization confirmation unit 56 completes the confirmation process by having the driver perform an authorization procedure of a first complexity. As an example of the first complexity, the authorization confirmation unit 56 has the driver perform an approval operation for the activation authorization confirmation once (step S3 in Figure 10, described later). With this authorization confirmation, the authorization confirmation unit 56 completes the confirmation process. (Process 3) In vehicle 12a, the authorization confirmation unit 56 completes the confirmation process by having the driver perform an authorization procedure of a second complexity, which is more complex than the first complexity. As an example of the second complexity, the authorization confirmation unit 56 has the driver perform an approval operation for activation authorization confirmation once (step S3 in Figure 4, described later). Furthermore, the authorization confirmation unit 56 has the driver perform approval operations for occupant detection stop confirmation multiple times (steps S5 and S7 in Figure 4, described later). With these authorization confirmations, the authorization confirmation unit 56 completes the confirmation process. The second complexity may also involve a complex operation of a button on the operation switch 28 (button operation). For example, if a normal button operation requires a continuous operation time of more than a first predetermined time but less than a second predetermined time (a short press of the button), the authorization procedure of the second complexity may include a button operation requiring an operation time of more than the second predetermined time (a long press operation). By including a more complex operation (a long press of a button) than a normal button press (a short press of a button) in the licensing procedure, the driver's intentions can be more clearly reflected.

[0039] [2-1 Downloading and Installing the New Software] The vehicle manufacturer develops new software and registers it with the server device 14. The server device 14 distributes the registered new software to each vehicle 12. While the vehicle 12 is in operation (operation switch 28 is ON), the acquisition unit 50 downloads the new software via the communication unit 22. This allows the acquisition unit 50 to acquire the new software. After the download of the new software is complete, the update control unit 58 installs the new software. After the installation of the new software is complete, the software update device 40 waits without activating until the operation of the vehicle 12 is finished.

[0040] [2-2 Processing in vehicle 12a] Figure 4 is a flowchart of a series of processes performed in a vehicle 12a equipped with an occupant detection function. The software update device 40 provided in the vehicle 12a performs the series of processes shown in Figure 4 while waiting for the activation process of the new software version to finish.

[0041] In step S1, the operation termination determination unit 52 determines whether or not the operation of vehicle 12a has ended. For example, the operation termination determination unit 52 determines that the operation of vehicle 12a has ended when it detects that the operation switch 28 of vehicle 12a has been turned off. If the operation of vehicle 12a has ended (step S1: YES), the process proceeds to step S2. On the other hand, if the operation of vehicle 12a has not ended (step S1: NO), the process of step S1 is executed again.

[0042] When the process moves from step S1 to step S2, the occupant detection unit 54 detects whether or not there is an occupant in the seat of the vehicle 12a. The occupant detection unit 54 obtains detection result information from the occupant detection device 42a indicating whether or not there is an occupant in the seat. Based on the obtained detection result information, the occupant detection unit 54 detects whether or not there is an occupant in the seat of the vehicle 12a. If there is no occupant in the seat (step S2: NO), the process moves to step S3. On the other hand, if there is an occupant in the seat (step S2: YES), the process moves to step S11. If there is an occupant in the seat, the occupant may be left behind in the seat.

[0043] When the system moves from step S2 to step S3, the authorization confirmation unit 56 performs a process to confirm with the driver whether or not to authorize the activation of the new software (activation authorization confirmation process). Within a predetermined time (for example, within 2 seconds) from the time the operation completion determination unit 52 determines that the driver has finished operating, the authorization confirmation unit 56 displays the authorization confirmation screen shown in Figure 5 on the display unit 34. In addition to displaying the authorization confirmation screen on the display unit 34, the authorization confirmation unit 56 may also output an audio message from the audio output device to confirm whether or not to authorize the activation.

[0044] When the process moves from step S3 to step S4, the license confirmation unit 56 determines whether the driver has authorized the activation of the new software. The driver, after viewing the license confirmation screen shown in Figure 5, responds to the confirmation items on the license confirmation screen via the information input device 30. The license confirmation unit 56 obtains driver response information indicating the driver's response via the information input device 30. If the driver has authorized the activation of the new software (step S4: YES), the process moves to step S5. On the other hand, if the driver has not authorized the activation of the new software (step S4: NO), the process moves to step S11.

[0045] When the system moves from step S4 to step S5, the authorization confirmation unit 56 performs a process to confirm with the driver whether or not it is OK to stop occupant detection (occupant detection stop confirmation process). The authorization confirmation unit 56 transitions the screen displayed on the display unit 34 from the authorization confirmation screen shown in Figure 5 to the first stop confirmation screen shown in Figure 6. The authorization confirmation unit 56 displays the first stop confirmation screen on the display unit 34 and may also output an audio message from the audio output device to confirm whether or not it is OK to stop occupant detection.

[0046] The first stop confirmation screen shown in Figure 6 displays multiple icons 66 indicating functions that require confirmation of whether or not to stop. Among the multiple icons 66 is icon 66a, which indicates the occupant detection function. This makes it easier for the driver to recognize that occupant detection stop confirmation is being performed.

[0047] When the process moves from step S5 to step S6, the authorization confirmation unit 56 determines whether the driver has authorized the cessation of occupant detection. The driver, after viewing the first stop confirmation screen shown in Figure 6, responds to the confirmation items on the first stop confirmation screen via the information input device 30. The authorization confirmation unit 56 obtains driver response information indicating the driver's response via the information input device 30. If the driver authorizes the cessation of occupant detection (step S6: YES), the process moves to step S7. On the other hand, if the driver does not authorize the cessation of occupant detection (step S6: NO), the process moves to step S11.

[0048] When the system moves from step S6 to step S7, the authorization confirmation unit 56 performs the occupant detection stop confirmation process again. The authorization confirmation unit 56 transitions the screen displayed on the display unit 34 from the first stop confirmation screen shown in Figure 6 to the second stop confirmation screen shown in Figure 7. The authorization confirmation unit 56 displays the second stop confirmation screen on the display unit 34 and may also output an audio message from the audio output device to confirm whether or not it is OK to stop occupant detection.

[0049] When the process moves from step S7 to step S8, the authorization confirmation unit 56 determines whether the driver has authorized the cessation of occupant detection. The driver, after viewing the second stop confirmation screen shown in Figure 7, responds to the confirmation items on the second stop confirmation screen via the information input device 30. The authorization confirmation unit 56 obtains driver response information indicating the driver's response via the information input device 30. If the driver authorizes the cessation of occupant detection (step S8: YES), the process moves to step S9. On the other hand, if the driver does not authorize the cessation of occupant detection (step S8: NO), the process moves to step S11.

[0050] When the system moves from step S8 to step S9, the update control unit 58 outputs a stop command to the occupant detection device 42a to stop occupant detection. The calculation unit 60a of the occupant detection device 42a stops occupant detection in response to the stop command. The update control unit 58 confirms that occupant detection by the occupant detection device 42a has stopped and displays the stop notification screen shown in Figure 8 on the display unit 34. The stop notification screen displays an icon 68 indicating that occupant detection has stopped. This allows the driver to visually recognize that occupant detection has stopped.

[0051] When the process moves from step S9 to step S10, the update control unit 58 activates the new software. The update control unit 58 displays the update status screen shown in Figure 9 on the display unit 34. Once the activation of the new software is complete, the series of processes shown in Figure 4 are completed.

[0052] When the process moves from any one of steps S2, S4, S6, and S8 to step S11, the update control unit 58 suspends the activation of the new software. This completes the series of processes shown in Figure 4.

[0053] Once the series of processes shown in Figure 4 is completed, the power system installed in the vehicle 12a enters a shutdown state. However, if the process in step S11 is executed, power will continue to be supplied to the equipment for occupant detection (occupant detection device 42a, radar sensor 36, etc.) even in the shutdown state.

[0054] [2-3 Processing in vehicle 12b] Figure 10 is a flowchart of a series of processes performed in a vehicle 12b that does not have an occupant detection function. The software update device 40 installed in the vehicle 12b performs the series of processes shown in Figure 10 while waiting for the activation process of the new software version to finish.

[0055] In the software update device 40 installed in the vehicle 12b, steps S1, S3, S4, S10, and S11 of the series of processes shown in Figure 4 are executed.

[0056] [3 Variations] Some functions of the control unit 26 provided in the vehicle 12 may be provided in an external device (for example, a server device 14 or other device) outside of the vehicle 12.

[0057] [4 Effects] In this disclosure, if the occupant detection unit 54 detects that an occupant has been left behind, the update control unit 58 suspends the software update process (step S2: YES, step S11 in Figure 4). According to this disclosure, it is possible to prevent the occupant detection function from shutting down due to a software update. In other words, according to this disclosure, it is possible to prevent accidents caused by occupants being left behind. As a result, according to this disclosure, software updates can be performed smoothly.

[0058] In this disclosure, in a vehicle 12b that does not have an occupant detection function, the authorization confirmation unit 56 completes the software update confirmation process by having the driver perform a simple authorization procedure (a first complexity authorization procedure) (step S3 in Figure 10). On the other hand, in a vehicle 12a that has an occupant detection function, the authorization confirmation unit 56 completes the software update confirmation process by having the driver perform a complex authorization procedure (a second complexity authorization procedure) (steps S3, S5, and S7 in Figure 4). According to this disclosure, in a vehicle 12a that has an occupant detection function, the driver can be alerted that occupant detection will stop when updating to a new software version. In addition, by including an operation that is more complex than a normal button operation (e.g., a short press of a button) in the authorization procedure (e.g., a long press of a button), the driver's intentions can be clearly reflected. As a result, drivers who get out of the vehicle will be careful not to leave occupants in the seats. In other words, according to this disclosure, accidents caused by occupants being left behind can be suppressed. As a result, according to this disclosure, software updates can be performed effectively.

[0059] [5 Note] The following additional information is disclosed regarding the above embodiment.

[0060] (Note 1) The software update system of this disclosure is a software update system (10) comprising a vehicle (12a) and a server device (14) capable of communicating with the vehicle via a network (16), the update control unit (58) which performs a software update process on an electronic control device (42) provided in the vehicle using new software supplied from the server device via the network, and an occupant detection unit (54) which detects whether an occupant has been left behind in the seat of the vehicle, wherein the update control unit restricts the software update process when the occupant detection unit detects an occupant being left behind.

[0061] (Note 2) In the software update system described in Appendix 1, the update control unit and the occupant detection unit may be provided in the vehicle.

[0062] (Note 3) In the software update system described in Appendix 1, the software update process includes an activation process which is a process for activating the new version of the software installed on the electronic control unit, and the update control unit may prohibit the activation process when the occupant detection unit detects an occupant.

[0063] (Note 4) The software update system of the present disclosure is a software update system comprising a vehicle (12a, 12b) and a server device capable of communicating with the vehicle via a network, comprising: a permission confirmation unit (56) that performs a confirmation process to confirm with the driver of the vehicle whether or not to grant permission to an electronic control device provided in the vehicle to perform a software update process; and an update control unit that, if the driver grants permission to perform the software update process, executes the software update process using new software supplied from the server device via the network, wherein if the vehicle (12b) is not equipped with an occupant detection unit for detecting whether an occupant has been left in the seat of the vehicle, the permission confirmation unit completes the confirmation process by having the driver execute a permission procedure of a first complexity, and if the vehicle (12a) is equipped with an occupant detection unit, the permission confirmation unit completes the confirmation process by having the driver execute a permission procedure of a second complexity which is more complex than the first complexity.

[0064] (Note 5) In the software update system described in Appendix 4, the authorization confirmation unit may perform a stop confirmation process to confirm with the driver whether or not to authorize the stopping of the operation of the occupant detection unit if the vehicle is equipped with the occupant detection unit.

[0065] (Note 6) In the software update system described in Appendix 5, the license confirmation unit may perform the stop confirmation process two or more times.

[0066] (Note 7) In the software update system described in Appendix 5 or 6, the software update process includes an activation process which is a process for activating the new version of the software installed on the electronic control unit, and the license confirmation unit may perform the stop confirmation process before the activation process is executed.

[0067] (Note 8) In the software update system described in any one of the appendices 5 to 7, the permission confirmation unit may display an icon (66a) on the display unit (34) indicating that occupant detection should be stopped during the stop confirmation process.

[0068] (Note 9) In the software update system described in Appendix 5, the stop confirmation process may include operations more complex than simply pressing a button briefly.

[0069] (Note 10) In the software update system described in Appendix 5, the stop confirmation process may include a long-press operation of a button.

[0070] (Note 11) A software update system as described in Appendix 5, wherein the stop confirmation process includes an operation that reflects the user's intentions.

[0071] (Note 12) The software update device of this disclosure is a software update device (40) in a software update system described in any one of appendices 1 to 3, comprising the update control unit and the occupant detection unit.

[0072] (Note 13) The software update device of this disclosure is a software update device in a software update system described in any one of appendices 4 to 8, comprising the license confirmation unit and the update control unit.

[0073] (Note 14) The software update method of this disclosure includes an update control step which executes a software update process on an electronic control unit installed in a vehicle using new software supplied from a server device via a network, and an occupant detection step which detects whether an occupant has been left behind in the seat of the vehicle, wherein if the occupant detection step detects that an occupant has been left behind, the update control step restricts the software update process.

[0074] (Note 15) The software update method of this disclosure comprises: a permission confirmation step which performs a confirmation process to confirm with the driver of the vehicle whether or not to permit the electronic control device installed in the vehicle to perform a software update process; and an update control step which, if the driver permits the software update process to be performed, executes the software update process using new software supplied from a server device via a network, wherein if the vehicle is not equipped with an occupant detection unit for detecting whether an occupant has been left in the vehicle's seat, the permission confirmation step completes the confirmation process by having the driver execute a permission procedure of a first complexity; and if the vehicle is equipped with an occupant detection unit, the permission confirmation step completes the confirmation process by having the driver execute a permission procedure of a second complexity which is more complex than the first complexity.

[0075] (Note 16) The program of this disclosure causes a computer to execute the software update method described in Appendix 14 or 15.

[0076] While this disclosure has been described in detail, it is not limited to the individual embodiments described above. These embodiments can be added, replaced, modified, partially deleted, etc., in any way that does not depart from the gist of this disclosure or from the intent of this disclosure derived from the claims and their equivalents. These embodiments can also be implemented in combination. For example, the order of operations and processes in the embodiments described above are given as examples only and are not limited thereto. The same applies when numerical values ​​or mathematical formulas are used in the description of the embodiments described above. [Explanation of Symbols]

[0077] 10…Software update system 12, 12a, 12b…Vehicles 14…Server equipment 16…Network 40...Software update device 42...Electronic control unit 54... Crew detection unit 56... Authorization confirmation unit 58...Update Control Unit 66a...Icon

Claims

1. A software update system comprising a vehicle and a server device capable of communicating with the vehicle via a network, An update control unit that performs a software update process on an electronic control unit installed in the vehicle using new software supplied from the server device via the network, An occupant detection unit that detects whether an occupant has been left unattended in the seat of the vehicle, Equipped with, A software update system in which, when the crew detection unit detects that a crew member has been left behind, the update control unit restricts the software update process.

2. In the software update system according to claim 1, The update control unit and the occupant detection unit are a software update system provided in the vehicle.

3. In the software update system according to claim 1, The software update process includes an activation process, which is a process of activating the new version of the software installed on the electronic control unit. The update control unit is a software update system that prohibits the activation process when the occupant detection unit detects an occupant.

4. A software update system comprising a vehicle and a server device capable of communicating with the vehicle via a network, A permission confirmation unit performs a confirmation process to ask the driver of the vehicle whether or not to grant permission to perform a software update process on the electronic control unit installed in the vehicle. When the driver permits the execution of the software update process, an update control unit executes the software update process using the new software supplied from the server device via the network, Equipped with, If the vehicle is not equipped with an occupant detection unit for detecting whether an occupant has been left unattended in the vehicle's seat, the authorization confirmation unit completes the confirmation process by having the driver perform the authorization procedure of the first complexity. A software update system in which, if the occupant detection unit is provided in the vehicle, the authorization confirmation unit completes the confirmation process by causing the driver to perform an authorization procedure of a second complexity, which is more complex than the first complexity.

5. In the software update system according to claim 4, The authorization confirmation unit is a software update system that, when the vehicle is equipped with the occupant detection unit, performs a stop confirmation process to confirm with the driver whether or not to authorize the occupant detection unit to stop its operation.

6. In the software update system according to claim 5, The aforementioned license confirmation unit is a software update system that performs the aforementioned stop confirmation process two or more times.

7. In the software update system according to claim 5, The software update process includes an activation process, which is a process of activating the new version of the software installed on the electronic control unit. The license confirmation unit performs the stop confirmation process before the activation process is executed in the software update system.

8. In the software update system according to claim 5, The aforementioned authorization confirmation unit is a software update system that, in the stop confirmation process, displays an icon on the display unit indicating that occupant detection should be stopped.

9. In the software update system according to claim 5, A software update system in which the stop confirmation process involves operations more complex than simply pressing a button briefly.

10. In the software update system according to claim 5, A software update system in which the stop confirmation process includes a long-press operation of a button.

11. In the software update system according to claim 5, A software update system in which the aforementioned stop confirmation process includes operations that reflect the user's intentions.

12. A software update device in a software update system according to any one of claims 1 to 3, A software update device comprising the update control unit and the occupant detection unit.

13. A software update device in a software update system according to any one of claims 4 to 8, A software update device comprising the aforementioned license confirmation unit and the aforementioned update control unit.

14. A software update control step that uses new software supplied from a server device via a network to perform a software update process on an electronic control unit installed in the vehicle, An occupant detection step for detecting that an occupant has been left behind in the seat of the vehicle, Equipped with, A software update method in which, if the crew detection step detects that a crew member has been left behind, the update control step restricts the software update process.

15. A permission confirmation step involves performing a confirmation process to ask the driver of the vehicle whether or not to grant permission to perform a software update process on the electronic control unit installed in the vehicle, If the driver permits the execution of the software update process, an update control step is performed to execute the software update process using the new software supplied from the server device via the network. Equipped with, If the vehicle is not equipped with an occupant detection unit for detecting whether an occupant has been left unattended in the vehicle's seat, the authorization confirmation step completes the confirmation process by having the driver perform the authorization procedure of the first complexity. A software update method in which, if the occupant detection unit is provided in the vehicle, the confirmation process is completed in the permission confirmation step by having the driver perform a permission procedure of a second complexity, which is more complex than the first complexity.

16. A program that causes a computer to execute the software update method described in claim 14 or 15.

Images