Control device, control method, and control program

Abstract

This control device has a processor installed in a moving body, and the processor downloads software from a server while in a first mode in which the server and the moving body communicate. In addition, when in a second mode in which a communication device and the moving body communicate, software downloaded to the communication device from the server is downloaded by the processor from the communication device.

Description

[Technical Field]

[0001] The present disclosure relates to a control device, a control method, and a control program. [Background technology]

[0002] Japanese Patent Publication No. 2022-016517 discloses that a server updates the autonomous driving control software of an information processing device via OTA (Over the Air) in response to a request from a service provider. Summary of the Invention [Problem to be solved by the invention]

[0003] As disclosed in the above-mentioned Japanese Patent Application Laid-Open No. 2022-016517, when OTA is performed only between a server and a vehicle, which is an example of a moving body, the vehicle's ECU (Electronic Control Unit) must access the server during OTA. In this case, for example, if the communication environment between the server and the vehicle is poor, OTA cannot be performed, and a situation may arise in which software running on the vehicle cannot be updated.

[0004] On the other hand, if the communication environment between the server and the vehicle is always good and new software is installed in the vehicle sequentially via OTA, taxis, shared cars, and other vehicles cannot be operated while the new software is being installed in the vehicle, which could result in lost business opportunities and losses.

[0005] For this reason, it is desirable to perform OTA in a more flexible manner than just OTA via access from the vehicle's ECU to a server.

[0006] The present disclosure aims to provide a control device, a control method, and a control program that enable a mobile object to download new software via another communication device without the mobile object having to directly access a server. [Means for solving the problem]

[0007] A control device according to a first aspect of the present disclosure has a processor mounted on a mobile body, and in a first mode in which a server and the mobile body communicate with each other, the processor downloads software from the server, and in a second mode in which the mobile body communicates with a communication device different from the server, the processor downloads the software downloaded from the server to the communication device from the communication device.

[0008] The control method of the second aspect includes a process in which at least one processor mounted on a mobile body downloads software from a server in a first mode in which the mobile body communicates with a server, and downloads the software downloaded from the server to the communication device in a second mode in which the mobile body communicates with a communication device different from the server, from the communication device.

[0009] The control program of the third aspect causes at least one processor mounted on a mobile body to execute processing including downloading software from a server in a first mode in which the mobile body communicates with a server, and downloading the software downloaded from the server to the communication device from the communication device in a second mode in which the mobile body communicates with a communication device different from the server. [Effects of the Invention]

[0010] The present disclosure has an advantage that new software can be downloaded to a mobile object via another communication device without the mobile object having to directly access a server. [Brief explanation of the drawings]

[0011] [Figure 1] 1 is a configuration diagram of a vehicle control system according to a first embodiment. [Figure 2]FIG. 1 is a diagram for explaining a first embodiment. [Figure 3] FIG. 2 is a configuration diagram showing the hardware configuration of each ECU according to the first embodiment. [Figure 4] 4 is a flowchart of a first control process according to the first embodiment. [Figure 5] 6 is a flowchart of a second control process according to the first embodiment. [Figure 6] 10 is a flowchart of a third control process according to the third embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0012] DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present disclosure will be described in detail below with reference to the accompanying drawings. In the following embodiments, the mobile object is a vehicle.

[0013] First Embodiment 1, a vehicle control system 10 of the first embodiment includes a server 12 and a plurality of vehicles 14X, 14A, 14B, and 14C. Each of the plurality of vehicles 14X, 14A, 14B, and 14C includes an ECU.

[0014] The server 12 and the plurality of vehicles 14X, 14A, 14B, and 14C are communicatively connected via a network 16. However, the communication environment between the server 12 and the plurality of vehicles 14X, 14A, 14B, and 14C may be poor, and each of the plurality of vehicles 14X, 14A, 14B, and 14C may be unable to communicate with the server 12. Note that, hereinafter, any one of the plurality of vehicles 14X, 14A, 14B, and 14C may also be simply referred to as "vehicle 14."

[0015] In the first embodiment, when the communication environment between the server 12 and the vehicle 14 is poor and it is difficult to perform OTA, the vehicle 14 acquires a program, which is new software, via another communication device (for example, an ECU of another vehicle, a mobile terminal, or a personal computer) other than the server 12. Examples of a poor communication environment between the server 12 and the vehicle 14 include when communication between the server 12 and the vehicle 14 is impossible or when communication takes an extremely long time.

[0016] As shown in FIG. 1, when the communication environment between the vehicle 14 and the server 12 that performs the OTA is good (hereinafter also referred to simply as "first mode"), the vehicle 14 performs the OTA with the server 12 and downloads a new program.

[0017] On the other hand, as shown in Figure 2, when the communication environment between vehicles 14A, 14B, and 14C and the server 12 that performs OTA is poor and it is difficult to perform OTA (hereinafter also referred to simply as "second mode"), a new program is downloaded from another communication device (for example, ECU 18X of vehicle 14X that has already downloaded a program from server 12).

[0018] This allows the vehicle 14 to download and install new programs to the vehicle via other communication devices even if the communication environment between the vehicle 14 and the server 12 is poor and it is difficult to perform OTA.

[0019] The first mode is a mode in which communication between the server 12 and the vehicle 14 is possible, and the second mode is a mode in which communication between the server 12 and the vehicle 14 is restricted.

[0020] In the following, an example will be described in which the other communication device is an ECU mounted on a vehicle, but the communication device is not limited to the vehicle ECU and may be any unit that has a communication function and a storage medium. For example, the other communication device may be a mobile terminal, a personal computer, or the like.

[0021] The ECU of the vehicle 14 installs or activates a new program in itself. Here, installing a program means storing the program in a non-volatile memory (not shown) and making it executable. Activating a program means enabling a function realized by executing the program.

[0022] 3 is a block diagram showing the hardware configuration of an ECU included in each of the vehicles 14X, 14A, 14B, and 14C. As shown in FIG. 3, the ECU of each of the vehicles 14X, 14A, 14B, and 14C includes a controller 40.

[0023] 3, the controller 40 includes a central processing unit (CPU) 40A, a read-only memory (ROM) 40B, a random access memory (RAM) 40C, and an input / output interface (I / O) 40D. The CPU 40A, ROM 40B, RAM 40C, and I / O 40D are connected to each other via a bus 40E. The bus 40E includes a control bus, an address bus, and a data bus. A communication unit 41 and a storage unit 42 are connected to the I / O 40D.

[0024] The communication unit 41 is an interface for performing data communication with external devices such as the server 12 and other ECUs.

[0025] The storage unit 42 is configured by, for example, a nonvolatile memory. As shown in Fig. 3, the storage unit 42 stores a control program 42A and the like.

[0026] The CPU 40A is an example of a computer. The term "computer" here refers to a processor in a broad sense, and includes a general-purpose processor (e.g., a CPU) or a dedicated processor (e.g., a graphics processing unit (GPU), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), a programmable logic device, etc.).

[0027] The control program 42A may be stored in a non-volatile non-transitory recording medium or distributed via a network and installed in the ECU as needed.

[0028] Examples of non-volatile non-transitory recording media include CD-ROMs (Compact Disc Read Only Memory), magneto-optical disks, HDDs (Hard Disk Drives), DVD-ROMs (Digital Versatile Disc Read Only Memory), flash memory, and memory cards.

[0029] The server 12 also has a hardware configuration similar to that shown in FIG.

[0030] Next, a flowchart of the first control process executed by the ECU of the vehicle 14 will be described with reference to Fig. 4. In the first mode, which indicates that the ECU of the vehicle 14 and the server 12 are in an environment where they can communicate with each other, OTA is executed between the server 12 and the ECU of the vehicle 14. Fig. 4 is a flowchart of the first control process executed by each vehicle in the first mode. Note that the following description will be given taking as an example a case where the ECU 18X of the vehicle 14X executes the first control process of Fig. 4.

[0031] In step S100, the ECU 18X of the vehicle 14X downloads a new program by OTA and temporarily stores it in its own storage unit (not shown).

[0032] In step S102, the ECU 18X of the vehicle 14X verifies the program downloaded in step S100. The program verification involves verifying whether the program is intended for the ECU 18X, whether the program operates properly, and whether the program is virus-free. The ECU 18X of the vehicle 14X then installs the verified program into itself.

[0033] In step S104, the ECU 18X of the vehicle 14X activates the new program.

[0034] The first control process shown in FIG. 4 can be executed by each of the plurality of vehicles 14X, 14A, 14B, and 14C.

[0035] Next, when the second mode is selected, which indicates that communication between the ECU of the vehicle 14 and the server 12 is restricted, the flowchart of the second control process shown in FIG. 5 is executed between the server 12 and the ECU of the vehicle 14.

[0036] In the following, an example will be described in which the vehicle 14X has already executed the flowchart of FIG. 4 and the vehicle 14A is in the second mode.

[0037] First, the ECU 18X of the vehicle 14X transmits a trigger signal indicating a trigger for updating a program to the ECU 18A of the vehicle 14A. Note that the ECU 18X of the vehicle 14X and the ECU 18A of the vehicle 14A transmit and receive data via vehicle-to-vehicle communication.

[0038] In step S200, the ECU 18A of the vehicle 14A receives a trigger signal transmitted from the ECU 18X of the vehicle 14X. The trigger signal includes version information of the new program and a group ID representing a group of vehicles into which the program should be installed. A group of vehicles is, for example, a group representing a type of vehicle or a group representing vehicles managed by the same management entity (for example, the same management company).

[0039] In step S202, the ECU 18A of the vehicle 14A determines whether the group to which the vehicle 14X belongs corresponds to the group to which the vehicle 14A belongs. For example, the ECU 18A of the vehicle 14A determines whether the group ID included in the trigger signal is the same as the group ID of the group to which the vehicle 14A belongs. If the group ID of the vehicle 14A and the group ID of the vehicle 14X are the same, the process proceeds to step S204. On the other hand, if the group ID of the vehicle 14A and the group ID of the vehicle 14X are not the same, the control process ends. In this way, the new program is installed only if the new program is intended for the vehicle.

[0040] In step S204, ECU 18A of vehicle 14A compares the version information of the new program included in the trigger signal with the version information of the program currently running on its own vehicle 14A, and determines whether the program to be installed is a newer version than the current program. If the program to be installed is a newer version than the current program, the process proceeds to step S206. On the other hand, if the program to be installed is not a newer version than the current program, the second control process ends. Therefore, the new program is installed only if the program to be installed is a newer version than the current program.

[0041] In step S206, the ECU 18A of the vehicle 14A transmits a request signal to the ECU 18X of the vehicle 14X, requesting provision of a new program.

[0042] In step S208, ECU 18A of vehicle 14A downloads a new program from vehicle 14X through vehicle-to-vehicle communication and installs the program in itself without verifying the program, because the program has already been verified in vehicle 14X.

[0043] The vehicle control system 10 of the first embodiment can be used, for example, when updating the program of a vehicle that is driven in a mine or mountainous area where the communication environment is poor.

[0044] For example, assume that each of multiple vehicles 14X, 14A, 14B, and 14C (e.g., vehicles used in a mine, etc.) is placed in an environment (e.g., a mine, etc.) where it is unable to communicate with the server 12. In this situation, one of the multiple vehicles, vehicle 14X, moves to a location where it can communicate with the server 12, and downloads, verifies, installs, and activates a new program via OTA.

[0045] After the vehicle 14X downloads the new program in a communication-enabled environment, the vehicle 14X moves to a location where the multiple vehicles 14A, 14B, and 14C are located, in other words, to a location where the vehicle 14X can communicate with each of the vehicles 14A, 14B, and 14C. The ECU 18X of the vehicle 14X then outputs a trigger signal to each of the ECUs of the multiple vehicles 14A, 14B, and 14C to notify them that the new program has been downloaded. Each of the multiple vehicles 14A, 14B, and 14C then downloads the new program via the ECU 18X of the vehicle 14X.

[0046] This means that even if the communication environment between the vehicle and the server is poor and it is difficult to perform OTA, the vehicle can obtain new programs via other communication devices.

[0047] In the above, an example was described in which vehicle 14X provides a new program to vehicles 14A, 14B, and 14C, but instead of vehicle 14X, a mobile terminal, which is a mobile communication device, may download the new program and provide the program to vehicles 14A, 14B, and 14C via the mobile terminal.

[0048] As described above, the vehicle ECU of the vehicle control system of the first embodiment has a processor mounted on the vehicle, which is an example of a mobile body, and the processor downloads a program from a storage unit (not shown) of the server in a first mode in which the server and the vehicle communicate with each other. In a second mode in which the vehicle communicates with another vehicle (or a mobile terminal, personal computer, etc.), which is an example of a mobile communication device, the processor of the vehicle ECU downloads a program that has been pre-downloaded to the other vehicle from the server to the other vehicle. This allows a new program to be downloaded to the vehicle via another communication device without the vehicle directly accessing the server. Furthermore, even if the communication environment between the vehicle and the server is poor and it is difficult to perform OTA, the vehicle can obtain a new program via another communication device.

[0049] Furthermore, when a vehicle's ECU downloads a new program from another vehicle's ECU via vehicle-to-vehicle communication and the new software has already been verified, the software verification can be omitted, allowing the installation to be carried out efficiently.

[0050] In addition, the program can be updated appropriately by downloading the program after the vehicle's ECU confirms that the program version is new.

[0051] Second Embodiment Next, a second embodiment will be described. Note that the same parts of the second embodiment as those of the first embodiment are given the same reference numerals, and detailed description thereof will be omitted. Note that the vehicle control system of the second embodiment is similar to that of the first embodiment, and detailed description thereof will be omitted. The second embodiment differs from the first embodiment in that the quality of the communication environment is not taken into consideration.

[0052] In the second embodiment, each of the vehicles belonging to the same group acquires the new program via other vehicles that have already downloaded the new program, thereby reducing simultaneous access by the vehicles to the server. Note that a group may refer to a group or vehicle type that is managed by the same management entity (e.g., a taxi company or a car sharing company).

[0053] For example, after at least one vehicle 14X (or a communication device such as a mobile terminal or personal computer) among the vehicles belonging to the same group performs OTA with the server 12 to download a new program, the other vehicles 14A, 14B, and 14C belonging to the same group acquire the new program via the vehicle 14X. This prevents multiple vehicles from accessing the server simultaneously, thereby reducing the processing load on the server. Note that the communication device that downloads the program is not limited to other vehicles, and may be any unit that has communication functions and a storage medium.

[0054] For example, suppose a taxi company manages vehicles 14X, 14A, 14B, and 14C. In this case, ECU 18X of vehicle 14X executes the control process shown in Fig. 4 above, and downloads, verifies, installs, and activates a new program via OTA with server 12.

[0055] 5 and downloads the new program via the ECU 18X of the vehicle 14X. This prevents the vehicles 14X, 14A, 14B, and 14C from accessing the server 12 all at once, thereby reducing the processing load on the server 12.

[0056] As described above, the vehicle ECU of the vehicle control system of the second embodiment has a processor mounted on the vehicle, which is an example of a mobile body, and the processor downloads a program from a memory unit (not shown) of the server in a first mode in which the server and the vehicle communicate with each other. In a second mode in which the vehicle communicates with another vehicle (or a communication device such as a mobile terminal or personal computer), which is an example of a mobile communication device, the processor of the vehicle ECU downloads a program that has been previously downloaded to the other vehicle from the server from the other vehicle. This allows a new program to be downloaded to the vehicle via another communication device without the vehicle having to directly access the server. Furthermore, the download and installation of new programs for vehicles belonging to the same group can be appropriately managed.

[0057] The second embodiment is also preferable from the viewpoint of managing the download and installation of new programs to vehicles belonging to the same group. When managing the download and installation of new programs to vehicles belonging to the same group, it may be preferable to update the programs of all vehicles at the same time as much as possible. Therefore, according to the second embodiment, it is possible to appropriately manage the download and installation of new programs to vehicles belonging to the same group.

[0058] Furthermore, while an OTA is being executed, a vehicle (e.g., a taxi or a shared car) cannot be used, which may result in a loss of business opportunities. For this reason, for example, the timing of downloading a new program in an OTA and the timing of installing the program may be separated. This can reduce losses due to missed business opportunities.

[0059] In addition, according to the vehicle control system of the second embodiment, programs are provided between vehicles belonging to the same group, so that new programs can be downloaded to the vehicle's ECU without performing OTA with the server.

[0060] <Third embodiment> Next, a third embodiment will be described. The same parts of the third embodiment as those of the first and second embodiments are designated by the same reference numerals, and detailed descriptions thereof will be omitted. Note that the configuration of the vehicle control system of the third embodiment is the same as that of the first embodiment, and detailed descriptions thereof will be omitted.

[0061] The third embodiment differs from the first and second embodiments in that the ECU of the vehicle 14 searches for target devices (e.g., a server, an ECU installed in the vehicle, a mobile terminal, a personal computer, etc.) that hold a new program to be downloaded, and acquires the new program from the searched target devices. The target devices include, for example, the server 12 and other communication devices (e.g., an ECU installed in the vehicle, a mobile terminal, a personal computer, etc.) as candidates. Note that the target device may be any unit that has a communication function and a storage medium.

[0062] Next, a flowchart of the third control process executed by the ECU 18A of the vehicle 14A will be described with reference to FIG.

[0063] In step S300, the ECU 18A of the vehicle 14A searches for a target device with which it can communicate within a predetermined range around the vehicle 14A.

[0064] In step S302, the ECU 18A of the vehicle 14A determines whether or not there is a communicable target device within a predetermined range around the vehicle 14A. If there is a communicable target device, the process proceeds to step S304. On the other hand, if there is no communicable target device, the third control process ends.

[0065] In step S304, the ECU 18A of the vehicle 14A determines whether the communicable target device holds a program of the same group as the vehicle 14A. If the communicable target device holds a program of the same group as the vehicle 14A, the process proceeds to step S306. If the communicable communication device does not hold a program of the same group as the vehicle 14A, the third control process ends.

[0066] In step S306, the ECU 18A of the vehicle 14A determines whether the searched target device holds a new program for the vehicle 14A. If the target device holds a new program for the vehicle 14A, the process proceeds to step S308. On the other hand, if the target device does not hold a new program for the vehicle 14A, the third control process ends.

[0067] In step S308, if there are multiple target devices and each of the target devices holds a new program for the vehicle 14A, the ECU 18A of the vehicle 14A selects one target device from the multiple target devices.

[0068] In step S310, the ECU 18A of the vehicle 14A transmits a request signal to the target device selected in step S308, requesting provision of a new program.

[0069] In step S312, the ECU 18A of the vehicle 14A downloads the new program through communication processing with the target device selected in step S308.

[0070] In this case, if the server 12 is included in the searched target devices, the ECU 18A of the vehicle 14A downloads a new program from the server 12 in the first mode. On the other hand, if the server 12 is not included in the searched target devices and the searched target devices are other communication devices, the ECU 18A of the vehicle 14A downloads a new program from the other communication device in the second mode.

[0071] In step S314, when installing a new program, the ECU 18A of the vehicle 14A outputs information inquiring whether or not to immediately perform the installation. Specifically, the ECU 18A of the vehicle 14A presents information inquiring whether or not to immediately perform the installation to the user of the vehicle 14A. For example, the ECU 18A of the vehicle 14A controls a display unit (not shown) or an audio output device (not shown) in the vehicle 14A to output the information inquiring whether or not to immediately perform the installation. Alternatively, the ECU 18A of the vehicle 14A may control a mobile terminal operated by the user to output the information inquiring whether or not to immediately perform the installation.

[0072] In step S316, ECU 18A of vehicle 14A receives an instruction signal input by the user and determines whether the instruction signal is an installation instruction. If the instruction signal input by the user represents an installation instruction, the process proceeds to step S318. On the other hand, if the instruction signal input by the user does not represent an installation instruction, the third control process ends. For example, the user performs an operation to instruct installation or an operation to instruct not to install in response to inquiry information displayed on a touch panel, which is an example of a display unit (not shown) in vehicle 14A.

[0073] If it is determined in step S316 that the new program will not be installed, the downloaded new program will be installed after a predetermined time has elapsed or in response to a user instruction.

[0074] In step S318, the ECU 18A of the vehicle 14A installs the new program received in step S312.

[0075] In this way, the vehicle ECU of the vehicle control system of the third embodiment searches for target devices that can communicate with the vehicle from the server and multiple other communication devices. If the searched target devices include the server, the vehicle ECU of the vehicle control system downloads a program from the server in a first mode. If the searched target devices do not include the server but are other communication devices, the vehicle ECU downloads a program from the other communication devices in a second mode. This allows the vehicle to download a new program to the vehicle via other communication devices without directly accessing the server. Furthermore, even if the communication environment between the vehicle and the server is poor and it is difficult to perform OTA, the vehicle can obtain a new program via other communication devices.

[0076] Furthermore, according to the vehicle ECU of the vehicle control system of the third embodiment, when a new program is acquired from a mobile target device (for example, the vehicle ECU, a mobile terminal, or a personal computer), the program is not installed immediately, but is installed only when permission (or instruction) is received from the user. This makes it possible to prevent a situation in which the vehicle becomes immediately unusable due to the acquisition of a new program. Specifically, a communication device having the new program is searched for and the new program is downloaded from that communication device, but the program is installed only when permission is received from the user. This makes it possible to prevent taxis or shared cars that belong to the same group from becoming immediately unusable when a new program is acquired, thereby reducing the risk of business opportunities being lost and losses occurring.

[0077] Furthermore, the present disclosure is not limited to the above-described embodiments, and various modifications and applications are possible within the scope of the gist of the present invention.

[0078] For example, although the above embodiments have been described with reference to examples in which the moving body is a vehicle, the present invention is not limited to this and may be applied to any moving body, such as a mobile robot.

[0079] Furthermore, when installing a new program, the vehicle's ECU may install a program that indicates the differences from the program already running, thereby enabling efficient program installation.

[0080] Furthermore, after downloading a new program, the vehicle ECU may cause an output device to output the time required for installation when installing the new program. For example, the vehicle ECU may control an in-vehicle display device (not shown) or an audio output device (not shown), which are examples of output devices, to output the time required for installation. Alternatively, the vehicle ECU may control a user-operated mobile terminal, which is also an example of an output device, to output the time required for installation. This allows the user to instruct the ECU whether or not to install the new program depending on the time required for installation.

[0081] Furthermore, the vehicle's ECU may be configured to assign a group ID to the vehicle. For example, the vehicle's ECU may acquire information indicating a group ID input by a user operating an in-vehicle device (not shown) or a mobile terminal (not shown), and assign the group ID to the vehicle. By allowing users to assign IDs to vehicles themselves in this way, for example, a car sharing company or a taxi company can assign the same or corresponding group IDs to multiple vehicles that they manage. This makes it easier to manage multiple vehicles. For example, as in the second embodiment, it is possible to manage multiple vehicles to which new programs are downloaded and installed.

[0082] Furthermore, when installing a new program, the ECU of the vehicle may acquire information about the vehicle's operation plan and determine whether to start installation according to the information about the vehicle's operation plan. For example, if the target vehicle is scheduled to operate from 9:00 to 17:00 Monday to Friday, the ECU of the target vehicle may install the new program avoiding those time periods. For example, if the target vehicle is a taxi or a shared car, installation may be avoided during the time periods when the target vehicle is operating. In this case, the vehicle's ECU does not immediately install a new program when it is downloaded, but rather determines whether to start the installation based on information about the vehicle's operation plan.

[0083] In addition, the configuration of the vehicle control system described in each of the above embodiments is an example, and it goes without saying that unnecessary parts may be deleted or new parts may be added within the scope of the present disclosure.

[0084] Furthermore, the processing flow of the control program described in the above embodiment (see Figures 4, 5, and 6) is also an example, and it goes without saying that unnecessary steps may be deleted, new steps may be added, or the processing order may be rearranged within the scope of the present disclosure.

[0085] The controller and method described herein may be implemented by a special-purpose computer having a processor programmed to perform one or more functions embodied in a computer program. Alternatively, the apparatus and method described herein may be implemented by a special-purpose computer having a processor configured with dedicated hardware logic circuits. Alternatively, the apparatus and method described herein may be implemented by one or more special-purpose computers configured by a combination of a processor executing a computer program and one or more hardware logic circuits. Furthermore, the computer program may be stored as instructions executed by a computer on a computer-readable non-transitory storage medium.

[0086] <Additional Notes> (Appendix 1) A processor (40) is mounted on the moving body (14A), and the processor downloading software from a server (12) in a first mode in which the server and the mobile device communicate; In a second mode in which the mobile device communicates with a communication device different from the server, the software downloaded from the server to the communication device is downloaded from the communication device. Control device (18A). (Appendix 2) The processor: searching the server and the plurality of communication devices for a target device that can communicate with the mobile object; If the server is included in the searched target devices, downloading the software from the server in the first mode; If the server is not included in the searched target devices and the searched target devices are the communication devices, download the software from the communication devices in the second mode. 10. The control device of claim 1. (Appendix 3) the first mode is a mode in which communication between the server and the mobile object is possible; The second mode is a mode in which communication between the server and the mobile object is restricted. 10. The control device according to claim 1 or 2. (Appendix 4) The processor: determining whether the discovered target device has new software for the mobile unit; transmitting a request signal to the target device determined to have new software for the mobile object, requesting provision of the new software; downloading the software from the target device; 3. The control device according to claim 2. (Appendix 5) The processor: When new software is downloaded, if an instruction signal instructing installation is received, the new software is installed; When the new software is downloaded, if an instruction signal instructing not to install the new software is received, the new software is stored in its own storage unit without being installed. The control device according to any one of Supplementary notes 1 to 4. (Appendix 6) The processor: If the communication device has performed a predetermined verification of the software, the software is installed in the mobile device without performing the predetermined verification of the software. The control device according to any one of Supplementary notes 1 to 5. (Appendix 7) The processor: downloading the software if the ID representing the group of the mobile object of the mobile object corresponds to the ID representing the group of the mobile object attached to the software; 7. The control device according to any one of Supplementary notes 1 to 6. (Appendix 8) The processor: downloading the software if the version of the software to be installed is newer than the version of the software running in an ECU (Electronic Control Unit) installed in the vehicle; The control device according to any one of Supplementary notes 1 to 7. (Appendix 9) The communication device other than the server is an ECU or a mobile terminal mounted on another mobile object. The control device according to any one of Supplementary notes 1 to 8. (Appendix 10) The processor: After downloading new software, when installing the new software, the time required for installation is output from an output device. 10. The control device according to any one of Supplementary notes 1 to 9. (Appendix 11) The processor: When installing new software, output information from an output device inquiring whether or not to install immediately. The control device according to any one of Supplementary notes 1 to 10. (Appendix 12) The processor: acquiring information representing a group ID input by a user operating a device in the mobile object or a mobile terminal, and assigning the group ID to the mobile object; The control device according to any one of Supplementary notes 1 to 11. (Appendix 13) The processor: When installing new software, it is determined whether to start the installation in accordance with an operation plan of the mobile object. The control device according to any one of Supplementary notes 1 to 12. (Appendix 14) At least one processor mounted on the mobile object downloading software from the server in a first mode in which the server and the mobile device communicate; In a second mode in which the mobile device communicates with a communication device different from the server, the software downloaded from the server to the communication device is downloaded from the communication device. A control method for executing a process including: (Appendix 15) At least one processor mounted on the mobile object, downloading software from the server in a first mode in which the server and the mobile device communicate; In a second mode in which the mobile device communicates with a communication device different from the server, the software downloaded from the server to the communication device is downloaded from the communication device. A control program (42A) for executing a process including the above.

[0087] The disclosure of Japanese Patent Application No. 2022-177569 is incorporated herein by reference in its entirety, and all documents, patent applications, and technical standards described herein are incorporated herein by reference to the same extent as if each individual document, patent application, and technical standard were specifically and individually indicated to be incorporated by reference.

Claims

1. A processor (40) mounted on the moving body (14A), the processor comprising: downloading software from a server (12) in a first mode in which the server and the mobile device communicate; In a second mode in which the mobile object communicates with a communication device different from the server, the software downloaded from the server to the communication device is downloaded from the communication device; If the communication device has performed a predetermined verification of the software, the software is installed in the mobile device without performing the predetermined verification of the software. Control device (18A).

2. The processor: searching the server and the plurality of communication devices for a target device that can communicate with the mobile object; If the server is included in the searched target devices, downloading the software from the server in the first mode; If the server is not included in the searched target devices and the searched target devices are the communication devices, downloading the software from the communication devices in the second mode. The control device according to claim 1 .

3. the first mode is a mode in which communication between the server and the mobile object is possible; the second mode is a mode in which communication between the server and the mobile device is restricted; The control device according to claim 1 or 2.

4. The processor: determining whether the discovered target device has new software for the mobile unit; transmitting a request signal to the target device determined to have new software for the mobile object, requesting provision of the new software; downloading the software from the target device; The control device according to claim 2 .

5. The processor: When new software is downloaded, if an instruction signal instructing installation is received, the new software is installed; When the new software is downloaded, if an instruction signal instructing not to install the new software is received, the new software is stored in its own storage unit without being installed. The control device according to claim 1 or 2.

6. The processor: downloading the software if the ID representing the group of the mobile object of the mobile object corresponds to the ID representing the group of the mobile object attached to the software; The control device according to claim 1 or 2.

7. The processor: downloading the software if the version of the software to be installed is newer than the version of the software running in an ECU (Electronic Control Unit) installed in the vehicle; The control device according to claim 1 or 2.

8. The communication device other than the server is an ECU or a mobile terminal mounted on another mobile object. The control device according to claim 1 or 2.

9. The processor: After downloading new software, when installing the new software, the time required for installation is output from an output device. The control device according to claim 1 or 2.

10. The processor: When installing new software, output information from an output device inquiring whether or not to install immediately. The control device according to claim 1 or 2.

11. The processor: acquiring information representing a group ID input by a user operating a device in the mobile object or a mobile terminal, and assigning the group ID to the mobile object; The control device according to claim 1 or 2.

12. The processor: When installing new software, it is determined whether to start the installation in accordance with an operation plan of the mobile object. The control device according to claim 1 or 2.

13. At least one processor mounted on the mobile object downloading software from the server in a first mode in which the server and the mobile device communicate; In a second mode in which the mobile object communicates with a communication device different from the server, the software downloaded from the server to the communication device is downloaded from the communication device; If the communication device has performed a predetermined verification of the software, the software is installed in the mobile device without performing the predetermined verification of the software. A control method for executing a process including:

14. At least one processor mounted on the mobile object, downloading software from the server in a first mode in which the server and the mobile device communicate; In a second mode in which the mobile object communicates with a communication device different from the server, the software downloaded from the server to the communication device is downloaded from the communication device; If the communication device has performed a predetermined verification of the software, the software is installed in the mobile device without performing the predetermined verification of the software. A control program (42A) for executing a process including the above.

Images