Reprogramming Systems and Tools
The dual-protocol approach in the reprogramming system and tool enables continuous status checks and successful completion of reprogramming by using UDS for security and USB/Ethernet for faster data transfer, addressing communication interruptions in vehicle systems.
Patent Information
- Application Number
- JP2021059194
- Authority / Receiving Office
- JP · JP
- Patent Type
- Patents
- Current Assignee / Owner
- Filing Date
- 2021-03-31
- Publication Date
- 2024-12-25
- Estimated Expiration
- 2041-03-31
AI Technical Summary
Existing reprogramming systems face issues with communication interruptions between a reprogramming tool and target unit, leading to incomplete or failed reprogramming due to protocol restrictions, preventing continuous status checks during the process.
A reprogramming system and tool that utilize dual communication protocols: a first protocol (like UDS on CAN or LIN) for secure communication and a second protocol (like USB or Ethernet) for faster data transfer, allowing the reprogramming tool to send start and completion notifications to the target unit, enabling continuous status checks and successful reprogramming completion.
Ensures uninterrupted and successful reprogramming by allowing the reprogramming tool to receive completion notifications despite temporary communication disruptions, maintaining security and efficiency in vehicle systems.
Smart Images

Figure 0007606388000001 
Figure 0007606388000002
Abstract
Description
[Technical field]
[0001] The present invention relates to a reprogramming system and a reprogramming tool. [Background technology]
[0002] 2. Description of the Related Art In recent years, techniques have been proposed for updating programs in various electronic devices installed in a vehicle (hereinafter, also referred to as "reprogramming").
[0003] For example, Patent Document 1 describes a method of connecting an external device to a vehicle to perform reprogramming, and performing reprogramming of a control device mounted on the vehicle. [Prior art documents] [Patent documents]
[0004] [Patent Document 1] JP 2020-167573 A Summary of the Invention [Problem to be solved by the invention]
[0005] However, for example, when reprogramming is performed involving communication between a control device to be reprogrammed (hereinafter also referred to as a "unit to be reprogrammed") and an external device to perform the reprogramming (hereinafter also referred to as a "reprogramming tool"), if communication between the reprogramming tool and the unit to be reprogrammed is interrupted, for example, due to restrictions on the communication protocol, the reprogramming tool may not be able to continuously check the status of the unit to be reprogrammed while reprogramming is being performed, and reprogramming may not be performed normally.
[0006] In view of the above problems, the present invention has an object to enable normal reprogramming involving communication between a reprogramming tool and a unit to be reprogrammed, regardless of restrictions on protocols relating to communication. [Means for solving the problem]
[0007] In order to solve the above problems, a reprogramming system according to an embodiment of the present invention comprises: a storage medium storing data for reprogramming; a reprogramming target unit provided in a vehicle and connectable to the storage medium; a reprogramming tool communicatively connected to the unit to be reprogrammed; Equipped with the reprogramming tool and the unit to be reprogrammed are capable of communicating with each other via a first communication method using a first protocol; the storage medium and the unit to be reprogrammed are capable of communicating with each other by a second communication method using a second protocol different from the first protocol; The reprogramming tool transmits a start request message to the unit to be reprogrammed based on a predetermined trigger; When the reprogramming target unit receives the start request message, the reprogramming target unit transmits a start response message to the reprogramming tool, and then acquires the data for reprogramming stored in the storage medium and starts reprogramming; When the reprogramming tool receives the start response message, the reprogramming tool switches to a request reception mode in which the reprogramming tool can receive a request message from the unit to be reprogrammed; When the reprogramming target unit finishes the reprogramming, the reprogramming target unit transmits a reprogramming completion notification as the request message to the reprogramming tool; When the reprogramming tool receives the reprogramming completion notification, it ends the request receiving mode.
[0008] In order to solve the above problem, a reprogramming tool according to an embodiment of the present invention comprises: A reprogramming tool provided in a vehicle and communicatively connected to a reprogramming target unit to which a storage medium storing data for reprogramming can be connected, the reprogramming tool and the unit to be reprogrammed are capable of communicating with each other via a first communication method using a first protocol; the storage medium and the unit to be reprogrammed are capable of communicating with each other by a second communication method using a second protocol different from the first protocol; The reprogramming tool comprises: Transmitting a start request message to the unit to be reprogrammed based on a predetermined trigger; when a start response message is received from the unit to be reprogrammed as a response to the start request message, switching to a request reception mode capable of receiving a request message from the unit to be reprogrammed; When a reprogramming completion notification is received as the request message from the unit to be reprogrammed, the request reception mode is terminated. Effect of the Invention
[0009] According to the present invention, reprogramming related to communication between a reprogramming tool and a unit to be reprogrammed can be normally performed regardless of restrictions on protocols related to communication. [Brief description of the drawings]
[0010] [Figure 1] FIG. 1 is a functional block diagram for explaining a reprogramming system according to an embodiment of the present invention. [Diagram 2] FIG. 2 is a sequence diagram showing the processing of the reprogramming system according to one embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS
[0011] Hereinafter, an embodiment of the present invention will be described in detail with reference to the accompanying drawings. The specific dimensions, materials, numerical values, etc. shown in the embodiment are merely examples for facilitating understanding of the invention, and do not limit the present invention unless otherwise specified. In this specification and drawings, elements having substantially the same functions and configurations are given the same reference numerals to avoid repeated explanations, and elements not directly related to the present invention are not shown.
[0012] Fig. 1 is a functional block diagram for explaining a reprogramming system 10 according to this embodiment. As shown in Fig. 1, the reprogramming system 10 includes a storage medium 100 storing data for reprogramming, a vehicle 202 including a reprogramming target unit 200 to which the storage medium 100 can be connected, and a reprogramming tool 300 connected to the vehicle 202.
[0013] The vehicle 202 is, for example, a hybrid vehicle equipped with an engine and a motor as a driving source.
[0014] The storage medium 100 may be any medium capable of storing data for reprogramming, and specifically may be, for example, a flexible disk, a magneto-optical disk, a ROM, a CD, a DVD, a BD, a USB memory, an SD card, etc. In this embodiment, a detailed description will be given of a case where a USB memory is used as the storage medium 100.
[0015] The reprogramming target unit 200 also has one or more processors 210 and one or more memories 212 connected to the processor 210. The processor 210 includes, for example, a CPU (Central Processing Unit). The memory 212 includes, for example, a ROM (Read Only Memory) and a RAM (Random Access Memory). The ROM is a storage element that stores programs and computation parameters used by the CPU. The RAM is a storage element that temporarily stores data such as variables and parameters used in processing executed by the CPU.
[0016] Specifically, the reprogramming target unit 200 includes, for example, an engine control unit 200a that controls the engine, a motor control unit 200b that controls the motor, a battery control unit 200c that controls the battery, a wireless communication unit 200d that wirelessly communicates with a data center outside the vehicle 202, a car navigation system control unit 200e that controls the car navigation system, and an automatic driving control unit 200f that controls automatic driving of the vehicle 202.
[0017] The reprogramming tool 300 also includes one or more processors 310 and one or more memories 312 connected to the processors 310. The processor 310 includes, for example, a CPU. The memory 312 includes, for example, a ROM and a RAM.
[0018] The reprogramming tool 300 and the reprogramming target unit 200 are connected by a CAN (Controller Area Network) and communicate with each other by a first communication method 300a using a UDS (Unified Diagnostic Services) protocol (first protocol) (UDS on CAN). The UDS protocol is a diagnostic communication protocol in an ECU environment in car electronics, as defined by ISO 14229-1.
[0019] The UDS protocol complies with, for example, the standard diagnostic communication protocols of K-LINE and CAN. Note that the first communication method 300a is not limited to this, and the reprogramming tool 300 and the reprogramming target unit 200 may be connected by, for example, a Local Interconnect Network (LIN) to communicate using the UDS protocol (UDS on LIN).
[0020] In any case, it is preferable to use, for example, the UDS protocol as a communication protocol (first protocol) between the reprogramming tool 300 and the reprogramming target unit 200. The UDS protocol can be used on CAN or LIN, which are generally used by vehicle-mounted ECUs, and since there are abundant development libraries, etc., it is possible to reduce introduction costs and development costs. Furthermore, by using the UDS protocol as the first protocol, it is possible to maintain a high level of security for the vehicle 202.
[0021] The first protocol is not limited to the UDS protocol, and may be any communication protocol that has a restriction that communication is started in response to a signal from the client side. In other words, the first protocol may be any communication protocol that has a restriction that, if the reprogramming tool 300, which is the client, has not sent a request message to the unit to be reprogrammed 200, the reprogramming tool 300 is set to a normal mode in which messages from the unit to be reprogrammed 200 to the reprogramming tool 300 cannot be received. The present invention makes it possible to perform reprogramming related to communication between the reprogramming tool 300 and the unit to be reprogrammed 200, regardless of such protocol restrictions related to communication.
[0022] Furthermore, the storage medium 100 and the reprogramming target unit 200 communicate with each other through a second communication method 100a using a second protocol (e.g., USB protocol or Ethernet protocol) different from the UDS protocol (first protocol). The second communication method 100a is preferably faster than a conventional communication method using a general CAN. For example, the second communication method 100a may use USB (Universal Serial Bus) or Ethernet. In this embodiment, a case where USB is used as the second communication method 100a will be described.
[0023] In recent years, the amount of data required for reprogramming has tended to increase. Therefore, it is preferable that the second communication method 100a is faster than the first communication method 300a. On the other hand, it is preferable that the security of the vehicle 202 is the same throughout the vehicle 202.
[0024] Therefore, after performing the authentication process described below between the reprogramming tool 300 and the unit 200 to be reprogrammed, the reprogramming data stored in the storage medium 100 is accessed, thereby maintaining the same security level throughout the vehicle 202.
[0025] Here, when reprogramming related to the communication between the reprogramming tool 300 and the reprogramming target unit 200 is performed, the sequence being performed is interrupted. As described above, the first protocol has a restriction that communication can only be started from the client side, so if the sequence is interrupted, the reprogramming tool 300 cannot continuously check the state of the reprogramming target unit 200, and there is a risk that reprogramming cannot be performed normally.
[0026] Therefore, in this embodiment, the reprogramming tool 300 is configured to send a start request message to the unit 200 to be reprogrammed based on a specified trigger, as described below, and when it receives a start response message from the unit 200 to be reprogrammed in response to the start request message, it switches to a request receive mode capable of receiving a request message from the unit 200 to be reprogrammed, and when it receives a reprogramming completion notification as a request message from the unit 200 to be reprogrammed, it terminates the request receive mode.
[0027] As a result, even if a type of reprogramming is performed in which communication with the unit 200 to be reprogrammed is temporarily not possible, the reprogramming tool 300 can continuously check the status of the unit 200 to be reprogrammed and perform the reprogramming normally.
[0028] 2 is a sequence diagram according to this embodiment. Note that various processes including the processes described below can be executed by the processor 210 of the unit to be reprogrammed 200 or the processor 310 of the reprogramming tool 300. In detail, the various processes are executed by the processor 210 executing a program stored in the memory 212 of the unit to be reprogrammed 200 or the processor 310 executing a program stored in the memory 312 of the reprogramming tool 300.
[0029] Before executing reprogramming, the unit to be reprogrammed 200 first performs authentication processing (S200) on the unit to be reprogrammed to authenticate the reprogramming tool 300. This makes it possible to prevent reprogramming of the unit to be reprogrammed 200 from being performed by unauthorized means.
[0030] The reprogramming tool 300 is usually set to a normal mode in which it is not possible to receive a request message from the reprogramming target unit 200. When the reprogramming tool 300 set to the normal mode is authenticated by the reprogramming target unit 200 and the authentication process (S300) on the reprogramming tool side is completed, the reprogramming tool 300 transmits a reprogramming start request message to the reprogramming target unit 200 (S301). In other words, the reprogramming tool 300 transmits a start request message to the reprogramming target unit 200 based on a predetermined trigger.
[0031] When the reprogramming target unit 200 receives a start request message from the reprogramming tool 300, it transmits a start response message indicating that it has received the start request message to the reprogramming tool 300 (S201).
[0032] When the reprogramming tool 300 receives a start response message from the unit 200 to be reprogrammed, it switches the currently set operating mode from a normal mode in which it is unable to receive a request message from the unit 200 to a request receive mode in which it is able to receive a request message from the unit 200 to be reprogrammed (S302).
[0033] The reprogramming tool 300 waits while maintaining the request receiving mode until it receives a reprogramming completion notification, which will be described later, from the reprogramming target unit 200 .
[0034] In this way, in a reprogramming tool 300 that communicates using the UDS protocol, when it is not possible to continuously check the status of the unit 200 to be reprogrammed using CAN communication, it is possible to receive a reprogramming completion notification from the unit 200 to be reprogrammed.
[0035] Furthermore, when the reprogramming target unit 200 transmits a start response message to the reprogramming tool 300, it accesses the data for reprogramming stored in the storage medium 100 (S202).
[0036] The storage medium 100 transmits data for reprogramming to the unit to be reprogrammed 200 based on an access from the unit to be reprogrammed 200 (S100).
[0037] When the reprogramming target unit 200 receives the reprogramming data from the storage medium 100, it starts implementing reprogramming based on the received reprogramming data (S204).
[0038] When the reprogramming target unit 200 finishes the reprogramming, it transmits a reprogramming completion notification, which is a request message indicating that the reprogramming has finished, to the reprogramming tool 300 (S205).
[0039] When the reprogramming tool 300 receives a reprogramming completion notification from the reprogramming target unit 200, it ends the request reception mode (S303) and switches the currently set operation mode to the normal mode.
[0040] Thereafter, the reprogramming tool 300 performs a reprogramming tool side reprogramming end process (S304), and the reprogramming target unit 200 performs a reprogramming target unit side reprogramming end process (S206).
[0041] In the reprogramming completion process of steps S206 and S304 described above, a process is performed to verify whether the program written by the reprogramming is normal or not, and whether the reprogramming was performed by a genuine reprogramming tool 300, and an identifier indicating these verification results is written to the unit 200 to be reprogrammed.
[0042] In this way, even if a type of reprogramming is performed that temporarily disables communication with the unit 200 to be reprogrammed, the reprogramming tool 300 can receive a reprogramming completion notification, determine that reprogramming is complete, and transition to reprogramming termination processing.
[0043] As described above, the reprogramming system 10 of this embodiment includes a storage medium 100 storing data for reprogramming, a unit to be reprogrammed 200 that is provided in a vehicle 202 and to which the storage medium 100 can be connected, and a reprogramming tool 300 communicatively connected to the unit to be reprogrammed 200, the reprogramming tool 300 and the unit to be reprogrammed can communicate with each other via a first communication method 300a using a first protocol, and the storage medium 100 and the unit to be reprogrammed 200 can communicate with each other via a second communication method 100a using a second protocol different from the first protocol, and the reprogramming tool 300 opens a communication channel to the unit to be reprogrammed 200 based on a predetermined trigger. The reprogramming tool 300 sends a start request message to the reprogramming tool 300, and upon receiving the start request message, the unit to be reprogrammed 200 transmits a start response message to the reprogramming tool 300 and then retrieves the data for reprogramming stored in the storage medium 100 to start reprogramming. Upon receiving the start response message, the reprogramming tool 300 switches to a request receive mode in which it can receive a request message from the unit to be reprogrammed 200. Upon completing reprogramming, the unit to be reprogrammed 200 transmits a reprogramming completion notification as a request message to the reprogramming tool 300. Upon receiving the reprogramming completion notification, the reprogramming tool 300 terminates the request receive mode.
[0044] As described above, the reprogramming tool 300 of this embodiment is provided in a vehicle 202, and is communicatively connected to a reprogramming target unit 200 to which a storage medium 100 storing data for reprogramming can be connected, the reprogramming tool 300 and the reprogramming target unit 200 can communicate with each other via a first communication method 300a using a first protocol, and the storage medium 100 and the reprogramming target unit 200 can communicate with each other via a second communication method 100a using a second protocol different from the first protocol, the reprogramming tool 300 transmits a start request message to the reprogramming target unit 200 based on a predetermined trigger, and when it receives a start response message from the reprogramming target unit 200 in response to the start request message, it switches to a request receive mode capable of receiving a request message from the reprogramming target unit 200, and when it receives a reprogramming completion notification as a request message from the reprogramming target unit 200, it ends the request receive mode.
[0045] In the reprogramming system 10 and reprogramming tool 300 of this embodiment, even if a state occurs in which communication between the reprogramming target unit 200 and the reprogramming tool 300 is not possible while reprogramming of the reprogramming target unit 200 is being performed by reprogramming, the reprogramming tool 300 can receive a reprogramming completion notification after reprogramming is completed.
[0046] This allows the reprogramming tool 300 to determine the completion of reprogramming by the reprogramming target unit 200, and subsequently allows the reprogramming tool 300 to normally proceed to the reprogramming end process.
[0047] In this way, the reprogramming system 10 and reprogramming tool 300 of this embodiment make it possible to carry out reprogramming related to communication between the reprogramming tool 300 and the unit to be reprogrammed 200, regardless of restrictions on protocols related to communication.
[0048] In the reprogramming system 10 and the reprogramming tool 300 of this embodiment, the reprogramming tool 300 may be set to a normal mode in which a request message cannot be received before switching to the request receiving mode and after the request receiving mode is terminated. The present invention is particularly effective in the case of the reprogramming tool 300 that is normally set to the normal mode in which a request message cannot be received from the reprogramming target unit 200.
[0049] In the reprogramming system 10 and the reprogramming tool 300 of the present embodiment, the first protocol is preferably the UDS protocol. The UDS protocol can be used on CAN or LIN, which is generally used by vehicle ECUs, and has a wide variety of development libraries, making it possible to reduce introduction and development costs. In addition, by using the UDS protocol as the first protocol, it is possible to maintain a high level of security for the vehicle 202. As described above, when communication is performed using the UDS protocol, there is usually a restriction that the reprogramming tool 300 is set to a normal mode in which it is not possible to receive a request message from the reprogramming target unit 200. The present invention is particularly effective when such a restriction on the protocol related to communication occurs.
[0050] Although the embodiment of the present invention has been described above with reference to the attached drawings, it goes without saying that the present invention is not limited to such an embodiment. It is clear that a person skilled in the art can think of various modified or altered examples within the scope of the claims, and it is understood that such examples also naturally belong to the technical scope of the present invention.
[0051] In the above embodiment, the vehicle 202 is a hybrid vehicle, but the present invention is not limited to this. The present invention can be applied to various vehicle types, such as gasoline vehicles, electric vehicles (EVs), plug-in hybrid vehicles (PHEVs), and non-plug-in hybrid vehicles (hybrid vehicles). [Explanation of symbols]
[0052] 10 Reprogramming System 100 storage medium 100a Second communication method 200 Reprogramming target units 202 vehicles 300 Reprogramming Tools 300a First communication method
Claims
1. a storage medium storing data for reprogramming; a reprogramming target unit provided in a vehicle and connectable to the storage medium; a reprogramming tool communicatively connected to the unit to be reprogrammed; Equipped with the reprogramming tool and the unit to be reprogrammed can communicate with each other by a first communication method using a first protocol; the storage medium and the unit to be reprogrammed are capable of communicating with each other by a second communication method using a second protocol different from the first protocol; The reprogramming tool transmits a start request message to the unit to be reprogrammed based on a predetermined trigger; When the reprogramming target unit receives the start request message, the reprogramming target unit transmits a start response message to the reprogramming tool, and then acquires the data for reprogramming stored in the storage medium and starts reprogramming; When the reprogramming tool receives the start response message, the reprogramming tool switches to a request reception mode in which the reprogramming tool can receive a request message from the unit to be reprogrammed; When the reprogramming target unit finishes the reprogramming, the reprogramming target unit transmits a reprogramming completion notification as the request message to the reprogramming tool; The reprogramming tool, upon receiving the reprogramming completion notification, terminates the request receiving mode.
2. A reprogramming tool provided in a vehicle and communicatively connected to a reprogramming target unit to which a storage medium storing data for reprogramming can be connected, the reprogramming tool and the unit to be reprogrammed can communicate with each other by a first communication method using a first protocol; the storage medium and the unit to be reprogrammed are capable of communicating with each other by a second communication method using a second protocol different from the first protocol; The reprogramming tool comprises: Transmitting a start request message to the unit to be reprogrammed based on a predetermined trigger; when a start response message is received from the unit to be reprogrammed as a response to the start request message, switching to a request reception mode capable of receiving a request message from the unit to be reprogrammed; The reprogramming tool terminates the request receiving mode when a reprogramming completion notification is received as the request message from the unit to be reprogrammed.
3. 3. The reprogramming tool according to claim 2, wherein the reprogramming tool is set to a normal mode in which the request message cannot be received before switching to the request receiving mode and after terminating the request receiving mode.
4. The reprogramming tool of claim 2 or 3, wherein the first protocol is a UDS protocol.
Citation Information
Patent Citations
On-vehicle update device, update processing method, and update processing program
JP2019196158A
Vehicle network system
JP2020167573A
Update management method, update management device, and control program
WO2016075865A1
Method of dialogue with a computer on an on-board bus of a vehicle
WO2020259956A1
Vehicle electronic control system, vehicle master device, rewriting instruction method by specific mode, and rewriting instruction program by specific mode
WO2021039796A1
