Vehicle control device and vehicle control system

Abstract

A vehicle control device (10) according to the present disclosure includes a storage unit (11b), a request receiving unit (S10), a threshold setting unit (S520, S820), and a time-out processing unit (S310, S330). The storage unit stores a data table of setting values corresponding to equipment characteristics and vehicle-state characteristics for each piece of equipment in a vehicle. The request receiving unit receives an operation request for a target piece of equipment from a service providing unit (15, 35). The threshold setting unit sets a time threshold on the basis of the setting values corresponding to the equipment characteristics of the target piece of equipment and the current vehicle-state characteristics. The time-out processing unit executes time-out processing on the basis of the set time threshold.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS

[0001] This international application claims priority based on Japanese Patent Application No. 2022-057206, filed with the Japan Patent Office on March 30, 2022, the entire contents of which are incorporated herein by reference. [Technical Field]

[0002] The present disclosure relates to a technique for performing timeout processing. [Background technology]

[0003] The remote control system described in Patent Document 1 below includes a center, a master electronic control unit (hereinafter referred to as ECU), a slave ECU, an in-vehicle device, and a mobile terminal. The master ECU operates the in-vehicle device via the slave ECU in accordance with a remote operation request from the mobile terminal via the center. After transmitting the remote operation request, the center executes a timeout process. Specifically, if there is no response from the master ECU within a predetermined time after transmitting the remote operation request, the center disconnects the wireless communication connection with the master ECU. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] Japanese Patent Application Laid-Open No. 2006-192967 Summary of the Invention

[0005] The time it takes for the master ECU to respond to a remote operation request varies depending on the characteristics of the vehicle, such as the vehicle model and the supplier of the on-board equipment. As a result of detailed consideration by the inventors, the inventors discovered a problem in that the center must acquire the vehicle characteristics from the master ECU and execute timeout processing that takes the vehicle characteristics into account. As a result, the inventors discovered a problem in that the center must execute different timeout processing for each master ECU, which reduces the versatility of the processing executed by the center.

[0006] It is desirable that the present disclosure can realize timeout processing that absorbs differences in response time that depend on vehicle characteristics.

[0007] A vehicle control device according to one aspect of the present disclosure is mounted on a vehicle and includes a storage unit, a request receiving unit, a threshold setting unit, and a timeout processing unit. The storage unit stores a data table of setting values ​​corresponding to equipment characteristics and vehicle state characteristics for each piece of equipment on the vehicle. The request receiving unit is configured to receive an operation request for target equipment from a service providing unit configured to provide a service for operating the target equipment, which is an operation target among the equipment. The threshold setting unit is configured, when the request receiving unit receives the operation request, to set a time threshold based on a setting value in the data table of the target equipment corresponding to the equipment characteristics of the target equipment and the current vehicle state characteristics. The timeout processing unit is configured to execute timeout processing based on the time threshold set by the threshold setting unit while processing in response to reception of the operation request by the request receiving unit is being executed.

[0008] The vehicle control device sets a time threshold according to the characteristics of the target equipment and the current vehicle state characteristics, and executes timeout processing based on the set time threshold. That is, the vehicle control device executes timeout processing taking into account the difference in response time due to the characteristics of the target equipment and the current vehicle state characteristics. If the vehicle control device stops processing in response to the reception of an operation request, a response is not transmitted from the vehicle control device to the service providing unit. Therefore, if the service providing unit does not receive a response from the vehicle control device within a certain period, it can determine a timeout and terminate processing in response to the transmission of the operation request. Therefore, the vehicle control device can realize timeout processing that absorbs the difference in response time due to vehicle characteristics. Ultimately, the service providing unit can realize timeout processing that is independent of vehicle characteristics.

[0009] A vehicle control system according to another aspect of the present disclosure includes a vehicle control device mounted on a vehicle and a service providing unit configured to provide a service related to the vehicle. The vehicle control device includes a memory unit, a request receiving unit, a threshold setting unit, and a first timeout processing unit. The memory unit stores a data table of setting values ​​corresponding to equipment characteristics or vehicle state characteristics for each piece of equipment on the vehicle. The request receiving unit is configured to receive an operation request for target equipment that is an operation target among the equipment from the service providing unit. When the request receiving unit receives the operation request, the threshold setting unit is configured to set a first time threshold based on a setting value corresponding to the equipment characteristics or vehicle state characteristics of the target equipment among the setting values ​​in the data table for the target equipment. The first timeout processing unit is configured to execute first timeout processing during execution of processing in response to reception of the operation request by the request receiving unit, based on the first time threshold set by the threshold setting unit. The service providing unit includes an execution unit, a request sending unit, and a second timeout processing unit. The execution unit is configured to execute an application that operates the target equipment. The request sending unit is configured to send an operation request to the vehicle control device in response to execution of the application by the execution unit. The second timeout processing unit is configured to execute second timeout processing during execution of processing in response to transmission of the operation request by the request sending unit, based on a fixed second time threshold independent of the first time threshold.

[0010] The vehicle control system provides the same effects as the vehicle control device.

[0011] Another aspect of the present disclosure is a vehicle control method that is executed by a vehicle control device that is mounted on a vehicle and has a memory unit that stores a data table of setting values ​​corresponding to equipment characteristics and vehicle state characteristics for each piece of vehicle equipment, and that receives an operation request for target equipment from a service providing unit that is configured to provide a service to operate target equipment that is the target of operation among the equipment, and in response to receiving the operation request, sets a time threshold based on a setting value from the setting value in the data table of the target equipment that corresponds to the equipment characteristics of the target equipment and the current vehicle state characteristics, and performs timeout processing based on the set time threshold while processing in response to receiving the operation request is being executed.

[0012] The vehicle control method provides the same effects as the vehicle control device.

[0013] A vehicle control method according to another aspect of the present disclosure is executed by a vehicle control system including: a vehicle control device mounted on a vehicle and storing a data table of setting values ​​corresponding to equipment characteristics or vehicle state characteristics for each piece of vehicle equipment; and a service providing unit configured to provide a service related to the vehicle. The vehicle control device receives an operation request for a target piece of equipment that is to be operated from the service providing unit. In response to receiving the operation request, the vehicle control device sets a first time threshold based on a setting value in the data table of the target equipment that corresponds to the characteristics of the target equipment or the current vehicle state characteristics, and executes a first timeout process during execution of a process in response to the reception of the operation request based on the set first time threshold. The service providing unit executes an application for operating the target equipment, transmits the operation request to the vehicle control device in response to the execution of the application, and executes a second timeout process during execution of the process in response to the transmission of the operation request based on a fixed second time threshold that is independent of the first time threshold.

[0014] The vehicle control method provides the same effects as the vehicle control device.

[0015] Another aspect of the present disclosure is a vehicle control program that causes a processing device of a vehicle control device that is mounted on a vehicle and has a memory unit that stores a data table of setting values ​​corresponding to equipment characteristics and vehicle state characteristics for each piece of vehicle equipment to receive an operation request for the target equipment from a service providing unit that is configured to provide a service to operate the target equipment that is the object of operation among the equipment, and in response to receiving the operation request, sets a time threshold based on a setting value from the setting value in the data table of the target equipment that corresponds to the equipment characteristics of the target equipment and the current vehicle state characteristics, and performs timeout processing based on the set time threshold while processing in response to receiving the operation request is being performed.

[0016] The processing device executes the vehicle control program, thereby achieving the same effects as the vehicle control device.

[0017] A vehicle control device according to another aspect of the present disclosure is mounted on a vehicle and includes a vehicle service unit and a status management unit. The vehicle service unit includes a memory unit, a first request receiving unit, a threshold setting unit, a timeout processing unit, and a first notification unit. The memory unit stores a data table of setting values ​​corresponding to equipment characteristics and vehicle status characteristics for each piece of vehicle equipment. The first request receiving unit is configured to receive an operation request for a target piece of equipment from a service providing unit. When the first request receiving unit receives an operation request, the threshold setting unit is configured to set a time threshold based on a setting value in the data table for the target equipment that corresponds to the equipment characteristics of the target equipment and the current vehicle status characteristics. The timeout processing unit is configured to execute timeout processing during execution of processing in response to reception of the operation request by the first request receiving unit, based on the time threshold set by the threshold setting unit. The first notification unit is configured to notify the service providing unit of an operation result corresponding to the operation request for the target equipment. The status management unit includes a second request receiving unit, an operation instruction unit, and a second notification unit. The second request receiving unit is configured to receive an operation request for the target equipment from the vehicle service unit. The operation instruction unit is configured to instruct the equipment management unit to operate the target equipment. The second notification unit is configured to notify the vehicle service unit of an operation status corresponding to the operation request for the target equipment.

[0018] According to the vehicle control device of the another aspect described above, the same effects as those of the vehicle control device of the one aspect of the present disclosure are achieved.

[0019] A vehicle control method according to another aspect of the present disclosure is executed by a vehicle control device equipped with a storage unit that is mounted on a vehicle and that stores a data table of setting values ​​corresponding to equipment characteristics and vehicle state characteristics for each piece of equipment of the vehicle. The vehicle control device receives an operation request for target equipment from a service providing unit that is configured to provide a service for operating the target equipment, which is an operation target among the equipment, and in response to the reception of the operation request, sets a time threshold based on a setting value among the setting values ​​in the data table of the target equipment that corresponds to the equipment characteristics of the target equipment and the current vehicle state characteristics, performs timeout processing based on the set time threshold during execution of processing in response to the reception of the operation request, instructs an equipment management unit that controls the vehicle equipment to operate the target equipment in response to the reception of the operation request, receives an operation status corresponding to the operation request for the target equipment from the equipment management unit, and notifies the service providing unit of the operation result corresponding to the operation request for the target equipment.

[0020] According to the above vehicle control method, the same effects as those of the vehicle control device according to one aspect of the present disclosure are achieved.

[0021] Another aspect of the present disclosure is a vehicle control program that causes a processing device of a vehicle control device that is mounted on a vehicle and has a memory unit that stores a data table of setting values ​​corresponding to equipment characteristics and vehicle state characteristics for each piece of vehicle equipment to receive an operation request for the target equipment from a service providing unit configured to provide a service to operate the target equipment that is the target of operation among the equipment; in response to receiving the operation request, set a time threshold based on a setting value among the setting values ​​in the data table of the target equipment that corresponds to the equipment characteristics of the target equipment and the current vehicle state characteristics; perform timeout processing based on the set time threshold while processing in response to receiving the operation request; in response to receiving the operation request, instruct an equipment management unit configured to control the vehicle equipment to operate the target equipment; receive an operation status corresponding to the operation request for the target equipment from the equipment management unit; and notify the service providing unit of the operation result corresponding to the operation request for the target equipment.

[0022] When the processing device executes the vehicle control program, the same effects as those of the vehicle control device according to one aspect of the present disclosure are achieved. [Brief explanation of the drawings]

[0023] [Figure 1] 1 is a block diagram showing a configuration of a vehicle control system according to an embodiment. [Figure 2] FIG. 2 is a block diagram showing the configuration of an ECU according to the embodiment. [Figure 3] FIG. 2 is a block diagram showing the configuration of a center according to the embodiment. [Figure 4] FIG. 2 is a sequence diagram showing a flow of basic processing executed in the vehicle control system according to the embodiment. [Figure 5] 10 is a sequence diagram showing a processing flow when an operation request to open or close a sliding door is received in the vehicle control system according to the embodiment. FIG. [Figure 6] 10 is a sequence diagram showing a processing flow in a case where a sliding door open request and an air conditioner start request conflict with each other in the vehicle control system according to the embodiment. FIG. [Figure 7] FIG. 2 is a sequence diagram showing a flow of basic processing executed in the vehicle control system according to the embodiment. [Figure 8] 10 is a flowchart illustrating a timeout process executed by a service providing unit during execution of an operation request acceptance determination in an embodiment. [Figure 9] 10 is a flowchart showing a timeout process executed by the vehicle service department during execution of an operation request acceptance determination in the embodiment. [Figure 10] 10 is a flowchart illustrating a timeout process executed by a service providing unit during execution of an execution monitoring process in an embodiment. [Figure 11] 10 is a flowchart showing a timeout process executed by a vehicle service department during execution of an execution monitoring process in an embodiment. [Figure 12]4 is an example of a data table stored in a memory of the vehicle control device according to the embodiment. [Figure 13] FIG. 10 is a sequence diagram showing a setting example for transmitting an operation result in a vehicle control system according to another embodiment. [Figure 14] FIG. 10 is a sequence diagram showing a flow of basic processing executed in a vehicle control system according to another embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0024] <1. Configuration> <1-1. System Configuration> A vehicle control system 1 according to this embodiment will be described with reference to Fig. 1. The vehicle control system 1 includes an electronic control unit (hereinafter, referred to as ECU) group 100 mounted on a vehicle such as an automobile, and a center 35. The ECU group 100 includes a plurality of ECUs. In this embodiment, the ECU group 100 includes a first ECU 10, a second ECU 15, a third ECU 20, a fourth ECU 25, a fifth ECU 30, and sixth to thirteenth ECUs 41 to 48. The members of the ECU group 100 are connected to each other via in-vehicle communication (i.e., wired communication or wireless communication). The center 35 is provided outside the vehicle, and is connected to the ECU group 100 via out-of-vehicle communication (i.e., wireless communication).

[0025] Each of the ECU group 100 and the center 35 controls the target equipment that is the target of the operation request among the equipment installed in the vehicle. Here, the equipment may include not only hardware such as sensors and actuators, but also software that realizes a certain function.

[0026] In another embodiment, the vehicle control system 1 may include the ECU group 100 but may not include the center 35. In another embodiment, the ECU group 100 may include 14 or more ECUs, or may include only 13 or fewer ECUs.

[0027] <1-2. Hardware configuration> Next, the hardware configuration of the ECU group 100 and the center 35 will be described with reference to FIGS.

[0028] Each of the ECUs 100 has a similar hardware configuration. Therefore, the configuration of the first ECU 10 will be described here as a representative. The first ECU 10 includes a microcomputer 11, a vehicle interface (hereinafter, I / F) 12, and a communication unit 13. The microcomputer 11 includes a CPU 11a, a ROM 11b, and a RAM 11c. Various functions of the first ECU 10 are realized by the CPU 11a executing a program stored in a non-transitory tangible recording medium. In this embodiment, the ROM 11b corresponds to the non-transitory tangible recording medium storing the program. Furthermore, the execution of this program causes a method corresponding to the program to be performed.

[0029] The vehicle I / F 12 connects to other ECUs and in-vehicle devices via an in-vehicle network or the like, and acquires various information from the other ECUs and in-vehicle devices. The in-vehicle network may include a Controller Area Network (hereinafter, CAN) and Ethernet. CAN is a registered trademark. Ethernet is a registered trademark.

[0030] The communication unit 13 performs data communication with the center 35 and the like via wireless communication over a wide area communication network. Note that the method of realizing the various functions of the first ECU 10 is not limited to software, and some or all of the functions may be realized using one or more hardware elements. For example, when the functions are realized by electronic circuits that are hardware, the electronic circuits may be realized by digital circuits including multiple logic circuits, analog circuits, or a combination of these.

[0031] The center 35 includes a microcomputer 36, a communication unit 37, and a storage unit 38. The microcomputer 36 includes a CPU 36a, a ROM 36b, and a RAM 36c. Various functions of the center 35 are realized by the CPU 36a executing a program stored in a non-transitory physical recording medium. In this embodiment, the ROM 36b corresponds to the non-transitory physical recording medium storing the program. Furthermore, by executing this program, a method corresponding to the program is performed.

[0032] The communication unit 37 communicates data with the ECU group 100 via a wide area communication network. The memory unit 38 is a storage device for storing vehicle data and the like provided by the ECU group 100. Note that the method for realizing the various functions of the center 35 is not limited to software, and some or all of the elements may be realized using one or more pieces of hardware. For example, when the above functions are realized by electronic circuits that are hardware, the electronic circuits may be realized by digital circuits including multiple logic circuits, analog circuits, or a combination of these.

[0033] <1-3. Functional configuration> Returning to FIG. 1, the various functions of the vehicle control system 1 will be described. The vehicle control system 1 has the functions of an equipment management unit 9 in the first layer, a status management unit 8 in the second layer, a vehicle service unit 7 in the third layer, and a service provision unit 6 in the fourth layer. The software architecture of the vehicle control system 1 is hierarchized into these four layers. These functions of the vehicle control system 1 are shared by each of the ECU group 100 and the center 35.

[0034] The equipment management unit 9 includes a plurality of control units corresponding to the equipment of the plurality of types of vehicle, such as an on-board camera, an on-board millimeter-wave radar, brakes, steering, displays, speakers, various lights, an on-board air conditioner, and an electric power seat.

[0035] Specifically, the equipment management unit 9 includes a camera control unit 91, a millimeter wave control unit 92, a brake control unit 93, a steering control unit 94, a display control unit 95, a sound control unit 96, a light control unit 97, a Heating Ventilation and Air-Conditioning (hereinafter referred to as HVAC) control unit 98, and a seat control unit 99. The vehicle equipment is individually controlled by the corresponding control unit among the control units 91 to 99.

[0036] The camera control unit 91 controls the exposure of the in-vehicle camera and acquires images captured by the in-vehicle camera. The millimeter wave control unit 92 controls the in-vehicle millimeter wave radar and acquires detection results detected by the millimeter wave radar. The brake control unit 93 controls the brakes. The steering control unit 94 controls the steering. The display control unit 95 controls displays (e.g., meters, warning lights, etc.). The sound control unit 96 controls speakers and causes them to output sounds such as warning sounds and voices. The light control unit 97 controls various lights installed in the vehicle. The HAVC control unit 98 controls the in-vehicle air conditioner. The seat control unit 99 controls the vehicle's electric power seats.

[0037] In this embodiment, the sixth ECU 91 includes a camera control unit 91, the seventh ECU 92 includes a millimeter wave control unit 92, and the eighth ECU 93 includes a brake control unit 93. The ninth ECU 44 includes a steering control unit 94, the tenth ECU 45 includes a display control unit 95, and the eleventh ECU 46 includes a sound control unit 96. The fifth ECU 30 includes a light control unit 97, the twelfth ECU 47 includes a HAVC control unit 98, and the thirteenth ECU 48 includes a seat control unit 99.

[0038] The service providing unit 6 executes application software (hereinafter referred to as apps) 61 to 64 to provide services to the user. Specifically, the service providing unit 6 provides the user with a service of indirectly sending commands to the vehicle's equipment to operate the vehicle's equipment. The commands include commands such as operation requests, commands such as arguments, function calls, etc. The commands may also include priority information indicating which command should be given priority in processing.

[0039] The applications 61 to 64 are not programs for executing processes suited to a specific vehicle model, a specific grade, etc., but are general-purpose programs for executing processes suited to many vehicle models, many grades, etc. Therefore, the applications 61 to 64 cannot specify how the vehicle controls the vehicle equipment. In other words, the applications 61 to 64 are software created without taking into consideration the characteristics of individual vehicles.

[0040] Therefore, by executing the applications 61 to 64, the service providing unit 6 generates and outputs a first command that does not specify the amount of control of a specific vehicle device, in other words, a first command that does not specify which of the control units 91 to 99 (described later) to use. That is, the service providing unit 6 generates a first command that specifies a desired abstract operation. For example, the service providing unit 6 generates a first command that specifies an operation or function name to turn on the car finder, but does not specify how to control which device, such as specifying which light to turn on among multiple lights. In another embodiment, the first command may specify a specific vehicle device. For example, the first command may specify a vehicle device and an operation, such as unlocking the driver's door.

[0041] Since the applications 61 to 64 are general-purpose programs, they can be developed by third parties and widely released. A user can install an application released by a third party into any of the ECU group 100 via a wide area communication network or the like. That is, a user can add or change the applications 61 to 64. In another embodiment, the applications 61 to 64 may be applications developed by a vehicle manufacturer or an ECU manufacturer.

[0042] In this embodiment, the first ECU 10, the second ECU 15, and the center 35 each include a service providing unit 6. The ROM 11b of the first ECU 10 stores applications 61 and 62. The ROM 11b of the second ECU 15 stores an application 63. The ROM 36b of the center 35 stores an application 64. In this embodiment, the second ECU 15 or the center 35 corresponds to the service providing unit of the present disclosure.

[0043] The vehicle service unit 7 includes a vehicle Application Programming Interface (hereinafter, API) 71. The vehicle API 71 executes processing suited to a specific vehicle model, a specific grade, etc. In other words, the vehicle API 71 executes processing that absorbs differences in vehicle model, grade, etc. so that the service providing unit 6 does not need to be aware of differences in vehicle model, grade, etc. The vehicle API 71 corresponds to an API that adapts commands handled by the service providing unit 6 to commands handled by a state management unit 8 and an equipment management unit 9, which will be described later. In this embodiment, the first ECU 10 includes the service providing unit 6 and corresponds to the vehicle control device of the present disclosure.

[0044] In this embodiment, the first ECU 10 includes a vehicle service unit 7 .

[0045] The equipment management unit 9 controls the equipment of the vehicle. Specifically, the state management unit 8 receives a first command via the vehicle API 71, generates a second command that embodies the first command, and transmits the second command to the equipment management unit 9. For example, the state management unit 8 calculates the amount of operation of an actuator, which is one of the equipment of the vehicle, and transmits a second command including the amount of operation to the equipment management unit 9. The actuator is, for example, a light, a display, a brake, a camera, etc.

[0046] More specifically, the state management unit 8 selects an optimal control unit from the control units 91 to 99 included in the equipment management unit 9 to implement an operation request (i.e., a first command) from the service providing unit 6. Then, the state management unit 8 converts the first command into a second command in a format suitable for the selected control unit, and distributes the second command to the selected control unit taking into consideration the order of transmission.

[0047] For example, if the first command is "Turn the vehicle left 200m and accelerate at 0.3G," the state management unit 8 outputs (i) a second command requesting the engine to output 1000Nm, and (ii) a second command requesting the steering to output -0.1rad.

[0048] Furthermore, when the first command is "transition to parking state," the state management unit 8 outputs (i) a second command requesting that the shift be put into P, (ii) a second command requesting that the air conditioner be turned off, (iii) a second command requesting that the windows be fully closed, and (iv) a second command requesting that the doors be locked and that the state be transitioned to parking state when the requests of (i) to (iii) are completed and there are no occupants left.

[0049] The state management unit 8 includes a motor system equipment control unit 82, a human machine interface (hereinafter referred to as HMI) state recognition unit 83, and a body system control unit 84 corresponding to the type of vehicle operation according to the type of first command. The motor system equipment control unit 82 corresponds to the vehicle's running-related operations such as turning, running, and stopping. The motor system equipment control unit 82 converts the vehicle operation request into control amounts for a brake control unit 93 and a steering control unit 94 and outputs them. The state management unit 8 is classified according to the vehicle operation that is likely to be requested by the service providing unit 6, rather than by the implementation means (e.g., control units 91 to 99) that are likely to depend on the vehicle variations. For example, a state management unit 8 is provided corresponding to each domain of the vehicle.

[0050] The HMI system state recognition unit 83 corresponds to vehicle operations related to the presentation of information to the user. Upon receiving an operation request such as an alarm, the HMI system state recognition unit 83 determines whether to issue a notification using the display control unit 95 and the sound control unit 96, and outputs a control amount. Upon receiving a first command related to the vehicle environment, the body system control unit 84 determines which of the light control unit 97, the HVAC control unit 98, and the seat control unit 99 to operate, converts it into an appropriate second command, and outputs it.

[0051] In this embodiment, the first ECU 10 includes a motor system equipment control unit 82, the fourth ECU 25 includes an HMI system state recognition unit 83, and the fourth ECU 30 includes a body system control unit 84.

[0052] Furthermore, the state management unit 8 converts the sensor data acquired from the equipment management unit 9 into a format suitable for the vehicle service unit 7, and transmits the converted data to the vehicle service unit 7. In detail, the state management unit 8 classifies the individual raw sensor data acquired by the equipment management unit 9 from the vehicle sensors into data by sensing target that is easy for the service providing unit 6 to use. Furthermore, the state management unit 8 integrates the classified data, converts it into more abstract data, and transmits it to the vehicle service unit 7.

[0053] For example, the status management unit 8 acquires individual data such as a vehicle speed of 0 km / h, a shift position of P, and no driver in the vehicle from the equipment management unit 9. Based on the acquired data, the status management unit 8 transmits data indicating that the vehicle is in a parked state to the service providing unit 6 via the vehicle service unit 7.

[0054] The state management unit 8 includes a state recognition unit 81. The state recognition unit 81 acquires sensor data from the camera control unit 91 and the millimeter wave control unit 92 and converts the data into data on the positions of vehicles and pedestrians. The state management unit 8 transmits the converted data to the vehicle service unit 7. In this embodiment, the third ECU 20 includes the state recognition unit 81.

[0055] <2. Processing> <2-1. Basic processing> Next, basic processing executed by the vehicle control system 1 will be described with reference to the sequence diagram of FIG.

[0056] In S110, the service providing unit 6 transmits an operation request to the vehicle service unit 7. Subsequently, in S10, the vehicle service unit 7 executes an operation request reception determination to determine whether each of the control units 91 to 99 is capable of receiving a first command.

[0057] Specifically, the vehicle service unit 7 determines whether the first command can be accepted based on at least one of the equipment of the vehicle, the state of the vehicle, and the syntax of the command included in the first command. Note that the equipment of the vehicle and the state of the vehicle indicate the equipment and state of the vehicle in which the vehicle control system 1 is installed.

[0058] The vehicle service unit 7 determines whether or not an operation request from the service providing unit 6 can be accepted based on, for example, the following six items.

[0059] ≪1≫ Syntax: Is there an error in the API syntax in the program? ≪2≫ Equipment information: Whether the vehicle is equipped with the equipment you want to operate ≪3≫ Operational level: Whether the target equipment you want to operate can currently accept an operation request <4> Authentication and authorization: whether the service providing unit 6 that is the requesting party is authenticated or not, and whether it has access rights to the vehicle service unit 7 or not <5> Abnormality in the vehicle service unit 7: Whether or not an abnormality (for example, data or communication abnormality, non-normal operation, etc.) has occurred in the vehicle service unit 7 <6> Cache state: whether or not a time has elapsed since the state management unit 8 determined that the first command cannot be accepted, allowing the first command to become acceptable. In <3>, "the equipment can accept an operation request" means that the operation request is within a predetermined range, or that the number of times that requests can be made within a certain period of time is within a predetermined range. However, the number of times that requests can be made refers to the number of requests received within a predetermined period of time. In addition, in <3>, an operation request that does not match the vehicle state is rejected. For example, a request to open a door is rejected when the vehicle is traveling at 100 km / h.

[0060] In <5>, whether the non-acceptance information is cached for each request source or cached regardless of the request source is changed depending on the combination of the vehicle API 71 and the non-acceptance content.

[0061] Note that a determination item may be set for each vehicle API 71 in the vehicle service unit 7. In other words, there may be items for which determination is not performed. Here, the equipment information of the vehicle, the authentication status and access right status of the service providing unit 6, the current vehicle status related to the equipment, and abnormality information of the vehicle and both service units are stored in the ROM 11b of the first ECU 10. Information to be referenced by the vehicle service unit 7 when determining whether to accept the request, such as cache status information, is also stored in the ROM 11b of the first ECU 10.

[0062] Next, in S120, the vehicle service unit 7 transmits the reception result indicating whether or not the first command can be received to the service providing unit 6. That is, the vehicle service unit 7 transmits the reception result to the service providing unit 6 before the equipment management unit 9 receives the operation instruction in S160.

[0063] The reception result includes information corresponding to the specified items. For example, the specified items include the following items <<1>> and <<2>>.

[0064] ≪1≫ Acceptance status: The execution status of the acceptance decision for the request (judging, request accepted, request rejected, timeout) <2>Reason for rejection (contents vary depending on equipment) Note that the determination in progress corresponds to a state in which it is not yet determined whether the action request can be accepted or not. Request acceptance corresponds to a state in which it has been determined that the action request can be accepted. Request rejection corresponds to a state in which it has been determined that the action request cannot be accepted. Timeout corresponds to a state in which the vehicle service unit 7 has not received a determination result on the acceptance of the action request from the status management unit 8 within a predetermined time (first time threshold, described later) since receiving the action request. In other words, the timeout may start timing from the time the vehicle service unit 7 receives the action request.

[0065] Subsequently, in S130, the vehicle service unit 7 transmits an operation request to the state management unit 8. The operation request in S130 is transmitted only when the first command can be accepted.

[0066] Next, in S20, the state management unit 8 performs operation request arbitration in response to receiving an operation request from the vehicle service unit 7. Specifically, the state management unit 8 determines whether the first command can be accepted, taking into consideration conflicts between the first command and other commands different from the first and second commands. The state management unit 8 may determine whether the first command can be accepted, taking into consideration conflicts with requests received by other APIs (e.g., other vehicle APIs) different from the API that received the request (e.g., vehicle API 71).

[0067] That is, in the above-mentioned operation request acceptance determination, the vehicle service unit 7 refers to the vehicle state, etc., and determines whether or not the operation request can be accepted, regardless of other commands. In contrast, in the operation request arbitration, the state management unit 8 determines whether or not the operation request can be accepted, taking into account conflicts with other commands, etc. If the operation request can be accepted, the state management unit 8 generates a second command that embodies the abstracted first command as an operation instruction.

[0068] The state management unit 8 determines whether or not an operation request can be accepted based on, for example, the following five items.

[0069] ≪1≫ Request priority arbitration: Whether the first command has a higher priority than requests based on other applications or user operations <2> Requester cancellation request: Whether the requester has requested a request cancellation and whether the request cancellation request is currently being processed <3> User cancellation request: Whether or not a user request to interrupt an operation has occurred <4> Request processing load overload: Whether the controlled object is receiving more requests than it can process <5> Abnormality in the status management unit 8 and the equipment management unit 9: Whether an abnormality (for example, data or communication abnormality, non-normal operation) has occurred in the status management unit 8 or the equipment management unit 9 In the case of (1), the priority is specified by the application, and the operation based on the priority is determined by the receiving side. However, the receiving side may ignore the priority specified by the application and perform processing.

[0070] For example, if the state management unit 8 receives a request to turn on the air conditioner and a request to turn on the lights, and if accepting both requests would cause the voltage to fall below a threshold that is acceptable in terms of power, it determines that the requests are unacceptable. Also, if the state management unit 8 receives a request regarding acceleration and a request regarding steering, and if a vehicle drive control amount that satisfies both requests would result in the vehicle running off the road, it determines that the requests are unacceptable. Here, information regarding the priority of the requests, information regarding request source cancellation, information regarding user cancellation, and thresholds that can be processed by the vehicle's equipment (e.g., number of requests, control amount, processing load, etc.) are stored in the ROM 11b. Information referenced by the state management unit 8 when determining whether to accept a request, such as abnormality information from the state management unit 8 and the equipment management unit 9, is also stored in the ROM 11b of the first ECU 10, the third ECU 20, the fourth ECU 25, and the fifth ECU 40.

[0071] Next, in S140, the status management unit 8 transmits the determination result (ie, the arbitration result) in S20 to the service provision unit 6 before the second command is transmitted to the equipment management unit 9.

[0072] In S150, the vehicle service unit 7 relays the arbitration result transmitted from the status management unit 8 and sends the arbitration result to the service provision unit 6.

[0073] In S160, the status management unit 8 outputs a second command (that is, an operation command) based on the first command to the control units 91 to 99 of the equipment management unit 9.

[0074] The fifth to thirteenth ECUs 30, 41 to 48 each have a ROM 11b in which an operation control program for operating the vehicle equipment is stored, and executes the operation control program in response to the second command. As a result, in S30, each of the control units 91 to 99 executes operation control of the target equipment.

[0075] In S170, each of the control units 91 to 99 sequentially and repeatedly transmits the operating status of the target equipment onto the communication line. For example, the operating status is transmitted as CAN (registered trademark) data.

[0076] In S180, the status management unit 8 receives the operating status and relays the received operating status to the vehicle service unit 7.

[0077] In S40, the vehicle service unit 7 receives the operation status transmitted from each of the control units 91 to 99 and recognizes the operation result based on the received operation status. The operation result is data indicating whether the target equipment is operating normally. The operation result is recognized based on data indicating the operation status of each of the control units 91 to 99 acquired from the communication line.

[0078] The operation result includes information corresponding to the specified items. For example, the specified items include the following items <<1>>, <<2>>, and <<3>>.

[0079] ≪1≫ Execution status: Execution status of the operation for the request (running, interrupted, completed, timed out) ≪2≫ Reason for interruption: Reason for interruption stop or interruption end (contents vary depending on equipment) ≪3≫ Operation progress: The progress of the requested operation (contents vary depending on equipment) In S190, the vehicle service unit 7 receives a plurality of operation states for the same data, and transmits the operation results to the service providing unit 6 at regular intervals and / or when a preset condition is met.

[0080] Here, the pre-set conditions are conditions that are set arbitrarily, and are met, for example, when the vehicle state changes, when the aforementioned operable level changes, when the operating state transitions from operating to stopped, or from stopped to operating, etc.

[0081] In this way, the vehicle service unit 7 transmits the operation results less frequently than receives the operation status. This reduces the processing load on the service providing unit 6. The operation results include information corresponding to the specified items. For example, the specified items include the following items <1>, <2>, and <3>.

[0082] ≪1≫ Execution status: Execution status of the operation for the request (running, interrupted, completed, timed out) ≪2≫ Reason for interruption: Reason for interruption stop or termination (contents vary depending on equipment) ≪3≫ Operation progress: The progress of the requested operation (contents vary depending on equipment) <2-2. Opening and closing of sliding doors> 5, a process for opening and closing a sliding door will be described as a specific example of a process executed by the vehicle control system 1. In this example, the service providing unit 6 includes a first service providing unit 6A and a second service providing unit 6B.

[0083] In S112, the first service providing unit 6A transmits a sliding door open request to the vehicle service unit 7, requesting that the sliding door be opened.

[0084] In S12, the vehicle service unit 7 executes the operation request acceptance determination as in S10. Here, the vehicle service unit 7 determines that the sliding door open request can be accepted, and in S122 transmits an acceptance result indicating that the first command can be accepted to the first service providing unit 6A. Subsequently, in S132, the vehicle service unit 7 transmits the sliding door open request to the status management unit 8.

[0085] In response to receiving the sliding door open request from the vehicle service unit 7, the status management unit 8 performs operation request arbitration in S22. Here, the status management unit 8 determines that the sliding door open request can be accepted. In S142, the status management unit 8 transmits an acceptance result indicating that the sliding door open request can be accepted to the first service providing unit 6A.

[0086] In S152, the vehicle service unit 7 relays the reception result to the first service providing unit 6A. In addition, in S162, the status management unit 8 outputs a second command (i.e., an instruction to open the sliding door) based on the first command to the equipment management unit 9.

[0087] In S172, the equipment management unit 9 sequentially and repeatedly transmits the operation status of the sliding door onto the communication line. The operation status here includes, for example, the position of the sliding door, whether it is opening, closing, stopped, etc.

[0088] In S182, the status management unit 8 receives the operating status and relays the received operating status to the vehicle service unit 7.

[0089] In S42, the vehicle service unit 7 receives the operation status transmitted from the equipment management unit 9 and recognizes the operation result based on the operation status. In S192, the vehicle service unit 7 transmits an operation result indicating that the sliding door is normally opening to the first service providing unit 6A, for example.

[0090] Here, it is assumed that the vehicle service department 7 receives another command while the sliding door is in the opening operation.

[0091] In S116, the second service providing unit 6B transmits a sliding door stop request to the vehicle service unit 7 to stop the sliding door. In S26, the vehicle service unit 7 executes an operation request acceptance determination. The vehicle service unit 7 performs the same determination as in S10 and determines that the request can be accepted here. Therefore, in S126, the vehicle service unit 7 transmits an acceptance result indicating that the first command can be accepted to the second service providing unit 6B. Subsequently, in S136, the vehicle service unit 7 transmits the sliding door stop request to the status management unit 8.

[0092] In response to receiving the sliding door stop request from the vehicle service department 7, the state management unit 8 performs operation request arbitration in S26. Here, the state management unit 8 determines that the sliding door stop request cannot be accepted because the already accepted sliding door open request has a higher priority.

[0093] In S146, the status management unit 8 transmits a reception result indicating that the sliding door stop request cannot be accepted to the second service providing unit 6B. In S156, the vehicle service unit 7 relays the reception result indicating that the request cannot be accepted to the second service providing unit 6B. In this case, the status management unit 8 does not output the second command (i.e., the sliding door stop command) to the equipment management unit 9.

[0094] In S43 and S44, the vehicle service unit 7 repeatedly receives the operation status transmitted from the equipment management unit 9, and recognizes the operation result based on the operation status each time.

[0095] In S193, the vehicle service unit 7 transmits an operation result, for example, indicating that the sliding door is opening normally, to the first service providing unit 6A. When the sliding door opening operation is completed, in S194 the vehicle service unit 7 transmits an operation result, for example, indicating that the sliding door opening operation has been completed normally, to the first service providing unit 6A.

[0096] <2-3. Air conditioner startup process> Next, referring to the sequence diagram of Fig. 6, we will explain the air conditioner startup process when the vehicle service unit 7 receives an air conditioner startup request while the sliding door is opening. In this example, the operation in response to the sliding door request from the first service providing unit 6A is the same as the example shown in Fig. 5.

[0097] In S117, the second service providing unit 6B transmits an air conditioner start request to the vehicle service unit 7. In S27, the vehicle service unit 7 executes the operation request acceptance determination as in S10. Here, the vehicle service unit 7 determines that the request can be accepted. Therefore, in S127, the vehicle service unit 7 transmits an acceptance result indicating that the first command can be accepted to the second service providing unit 6B. Subsequently, in S137, the vehicle service unit 7 transmits the air conditioner start request to the status management unit 8.

[0098] In response to receiving an air conditioner start request from the vehicle service unit 7, the status management unit 8 performs operation request arbitration in S27. Here, the status management unit 8 determines that the air conditioner start request cannot be accepted because the sum of the power required for the already accepted sliding door open request and the power required for the air conditioner start request exceeds the allowable power.

[0099] In S147, the status management unit 8 transmits a reception result indicating that the air conditioner start request cannot be accepted to the vehicle service unit 7. In S157, the vehicle service unit 7 relays the reception result indicating that the request cannot be accepted to the second service providing unit 6B. In this case, the status management unit 8 does not output the second command (i.e., the air conditioner start command) to the equipment management unit 9.

[0100] <2-4. Timeout processing> Next, with reference to the sequence diagram of FIG. 7, a description will be given of the timeout process when the timeout process is executed in addition to the basic process described above.

[0101] In S110, the service providing unit 6 transmits an operation request to the vehicle service unit 7. Subsequently, in S10, the vehicle service unit 7 executes an operation request reception determination to determine whether each of the control units 91 to 99 is capable of receiving a first command.

[0102] Next, in S325, the vehicle service unit 7 transmits the reception result indicating whether or not the first command can be received to the service provision unit 6. The vehicle service unit 7 repeatedly transmits the reception result to the service provision unit 6 at a specified first cycle.

[0103] In S130, if the vehicle service unit 7 is able to accept the first command, it transmits an operation request to the status management unit 8. In S300, the status management unit 8 performs an operation request acceptance determination in response to receiving the operation request from the vehicle service unit 7. The status management unit 8 determines whether the first command can be accepted, taking into account a conflict between the first command and other commands different from the first and second commands.

[0104] In S315, the status management unit 8 transmits the acceptance determination status in S300 to the service provision unit 6 before transmitting the second command to the equipment management unit 9. The acceptance determination status, like the acceptance status, includes items such as the execution status of the acceptance determination (determination in progress, request accepted, request rejected, timeout) and the reason for rejection.

[0105] In addition, in S310, the vehicle service unit 7 executes a first timeout process in response to receiving the operation request. The first timeout process is a timeout process that takes into account differences in response times of equipment due to vehicle characteristics. The timeout process includes a process of monitoring whether or not a timeout has occurred, and a process of notifying that a timeout has occurred.

[0106] The response time of vehicle equipment, from receiving an operation command to operating, may vary depending on the vehicle model and the equipment supplier. For example, the response time of equipment installed in a luxury vehicle may be shorter than the response time of equipment installed in a budget vehicle. Furthermore, even vehicles of the same model may be equipped with equipment from different suppliers. Although the response times of equipment installed in vehicles of the same model are set to fall within a predetermined range, differences may occur due to differences in suppliers.

[0107] Furthermore, even with the same equipment, the response time may vary depending on the vehicle state. For example, the response time when the vehicle is on battery power (+B) may differ from the response time when the vehicle is on accessory power (ACC). The response time when the vehicle is on ignition power (IG) may differ from the response time when the vehicle is on battery power. Furthermore, the response time when the vehicle's communication load is relatively high may differ (specifically, be longer) from the response time when the vehicle's communication load is relatively low.

[0108] If timeout processing is performed using a fixed time threshold without taking into account the vehicle characteristics described above, a timeout may be detected and the processing may be terminated if the response time of the target equipment is relatively long.

[0109] On the other hand, if a third party is permitted to develop an application to be executed by the service providing unit 6, it is difficult for the third party to develop an application that takes vehicle characteristics into consideration. It is therefore desirable to provide the third party with an application development environment that is independent of vehicle characteristics.

[0110] Therefore, at a layer below the service providing unit 6, the vehicle service unit 7 executes a first timeout process that takes into account the vehicle characteristics. Furthermore, at S320, the service providing unit 6 executes a second timeout process that is independent of the vehicle characteristics. In this embodiment, the first ECU 10 equipped with the vehicle service unit 7 executes the first timeout process. Furthermore, the second ECU 15 that executes the application 63 and that is equipped with the service providing unit 6, or the center 35 that executes the application 64 and that is equipped with the service providing unit 6, executes the second timeout process.

[0111] In S310, the vehicle service unit 7 sets a first time threshold based on a data table corresponding to the equipment characteristics and / or the vehicle state of the vehicle, and executes a first timeout process using the first time threshold. Specifically, if the vehicle service unit 7 does not receive an acceptance determination status from the status management unit 8 within the first time threshold, the vehicle service unit 7 determines a timeout and cancels or suspends the process. When the vehicle service unit 7 cancels or suspends the process, the acceptance result is no longer sent to the service provision unit 6. That is, after returning the acceptance result to the service provision unit 6 and before issuing an operation request, the vehicle service unit 7 starts timing the timeout and sets the first time threshold. Either the timing of the timeout or the setting of the first time threshold may be executed first. In another embodiment, the vehicle service unit 7 may set the first time threshold and start timing the timeout when receiving an operation request from the service provision unit 6.

[0112] In S320, the service providing unit 6 executes a second timeout process using a second time threshold. The second time threshold is preset to a value slightly larger than the first cycle. Specifically, if the service providing unit 6 does not receive an acceptance result from the vehicle service unit 7 within the second time threshold, it determines that a timeout has occurred and cancels or suspends the process. For example, the service providing unit 6 sets a second time threshold (e.g., 30 seconds) for performing a retry process, and if a timeout occurs, requests a retry from the vehicle service unit 7. After issuing an operation request to the vehicle service unit 7, the service providing unit 6 acquires the second time threshold and starts timing the timeout.

[0113] In S160, if the state management unit 8 determines that the operation request can be accepted, the state management unit 8 outputs a second command (that is, an operation instruction) based on the first command to the control units 91 to 99 of the equipment management unit 9.

[0114] In S30, each of the control units 91-99 receives an operation instruction and executes operation control of the target equipment. In S170, each of the control units 91-99 sequentially and repeatedly transmits the operation status of the target equipment onto the communication line. In S180, the status management unit 8 receives the operation status and relays the received operation status to the vehicle service unit 7.

[0115] In S330, the vehicle service unit 7 receives the operation status transmitted from each of the control units 91 to 99, and recognizes the operation result based on the received operation status. In S190, the vehicle service unit 7 receives multiple operation statuses for the same data, and transmits the operation result to the service providing unit 6 at a fixed second cycle and / or when a preset condition is met. Note that the second cycle may be different from or the same as the first cycle.

[0116] Furthermore, in S330, in response to receiving an acceptance determination status indicating acceptance possible, the vehicle service unit 7 sets a third time threshold based on the data table and executes a first timeout process using the third time threshold. Specifically, the vehicle service unit 7 starts timing the timeout and sets the third time threshold. Either timing the timeout or setting the third time threshold may be executed first. If the vehicle service unit 7 does not receive an operation status from the status management unit 8 within the third time threshold, the vehicle service unit 7 determines a timeout and cancels or suspends the process. In response to the vehicle service unit 7 canceling or suspending the process, the operation result will no longer be sent to the service providing unit 6.

[0117] In S340, the service providing unit 6 executes a second timeout process using a fourth time threshold. The fourth time threshold is preset to a value slightly larger than the second period. Specifically, the service providing unit 6 acquires the fourth time threshold and starts timing the timeout. If the service providing unit 6 does not receive an operation result from the vehicle service unit 7 within the fourth time threshold, the service providing unit 6 determines that a timeout has occurred and cancels or suspends the process. For example, the service providing unit 6 sets a fourth time threshold (e.g., one minute) for notifying the user of the occurrence of a timeout, and if a timeout has occurred, the service providing unit 6 cancels or suspends the process and notifies the user of the occurrence of the timeout.

[0118] <2-4-1. Timeout processing by the service provider during acceptance determination> Next, the second timeout process executed by the service providing unit 6 during the acceptance determination at S320 in Fig. 7 will be described in detail with reference to the flowchart in Fig. 8. The second timeout process here is executed at the stage of accepting an operation request before issuing an operation instruction to the equipment management unit 9. The service providing unit 6 starts this process in response to outputting an operation request.

[0119] First, in S400, the service providing unit 6 starts counting.

[0120] Next, in S410, the service providing unit 6 determines whether the count value is greater than a preset second time threshold. If the service providing unit 6 determines that the count value is equal to or less than the second time threshold, the process proceeds to S420. If the service providing unit 6 determines that the count value is greater than the second time threshold, the process proceeds to S460.

[0121] In S420, the service providing unit 6 determines whether or not the reception result has been received. If the service providing unit 6 determines that the reception result has been received, the process proceeds to S430, and if the service providing unit 6 determines that the reception result has not been received, the process returns to S410.

[0122] In S430, the service providing unit 6 determines whether the reception status of the received reception result is currently being determined. If the service providing unit 6 determines that the reception status is currently being determined, the process proceeds to S440. If the service providing unit 6 determines that the reception status is not currently being determined (i.e., request accepted, request rejected, or timed out), the process proceeds to S450.

[0123] In S440, the service providing unit 6 resets the count and returns to the process of S410.

[0124] In S450, the service providing unit 6 determines whether the reception status is timed out. If the service providing unit 6 determines that the reception status is timed out, the process proceeds to S460. If the service providing unit 6 determines that the reception status is not timed out (i.e., request accepted or request rejected), the process proceeds to S470.

[0125] In S460, the service providing unit 6 determines that a timeout has occurred and stops the process. That is, the service providing unit 6 determines that a timeout has occurred when its own count value becomes equal to or greater than the second threshold value and when it receives a timeout result from the vehicle service unit 7.

[0126] In S470, the service providing unit 6 ends the counting and ends this process.

[0127] <2-2-2. Timeout processing by the vehicle service department during reception determination> Next, the first timeout process executed by the vehicle service unit 7 during acceptance determination at S310 in Fig. 7 will be described in detail with reference to the flowchart in Fig. 9. The first timeout process here is executed at the stage of accepting an operation request before issuing an operation instruction to the equipment management unit 9. The vehicle service unit 7 executes the process after issuing an operation request to the status management unit 8 (S130).

[0128] First, in S500, the vehicle service unit 7 starts a first count and a second count. The value of the first count is a value for determining when to send the reception result, and the value of the second count is a value for determining a timeout.

[0129] Next, in S510, the vehicle service unit 7 acquires the characteristics of the vehicle in which the vehicle service unit 7 (i.e., the first ECU 10) is installed. The vehicle characteristics here include the characteristics of the target equipment and the current vehicle state characteristics. The characteristics of the target equipment are values ​​determined by the specifications of the equipment of the host vehicle and are stored in ROM 11b in advance. Specifically, the characteristics of the target equipment include the OEM, supplier, in-vehicle communication standard used, and the location of the service providing unit 6. The state characteristics change depending on the usage state of the vehicle, and the vehicle service unit 7 acquires the current state characteristics from the state management unit 8. Specifically, the state characteristics include the power supply state, communication load, communication means, and the source of the operation request.

[0130] Next, in S520, the vehicle service unit 7 sets a first time threshold based on the current vehicle state characteristics acquired in S510 and the data table for the target equipment. The data table is created in advance for each equipment and stored in the ROM 11b. Each data table is a table of setting values ​​corresponding to the vehicle's equipment characteristics and vehicle state characteristics. FIG. 12 shows an example of the data table. The data table for each equipment includes a first table of first setting values ​​and a second table of second setting values ​​corresponding to the equipment characteristics and state characteristics. Furthermore, the first ECU 10 updates the data table when the vehicle's equipment characteristics and / or vehicle state characteristics change. The first ECU 10 acquires a new data table from a server or a diagnostic tool external to the vehicle and stores it in the ROM 11b. For example, the first ECU 10 updates the current data table to a data table with a new time setting value in consideration of a high processing load due to the addition of new functions through a program update or deterioration of the vehicle's overall components.

[0131] Since different suppliers may supply the same equipment for the same vehicle model, vehicles of the same vehicle model may have different equipment characteristics. However, creating a data table for each vehicle increases the effort and cost, so a data table is created for each vehicle model, for example. Therefore, as shown in FIG. 12, ROM 11b stores a data table including the characteristics of equipment not installed in the host vehicle, and also stores the characteristics of equipment installed in the host vehicle (for example, equipment manufactured by Company Y shown in FIG. 12). In other words, ROM 11b stores information indicating which equipment characteristics the host vehicle corresponds to among the equipment characteristics included in the data table. If the data table includes only the characteristics of equipment installed in the host vehicle and does not include the characteristics of equipment not installed in the host vehicle, ROM 11b does not need to store the characteristics of equipment installed in the host vehicle separately from the data table.

[0132] During the acceptance determination, the vehicle service unit 7 extracts a first setting value corresponding to the equipment characteristics and the state characteristics from the first table, and sets the extracted first setting value as the first time threshold value.

[0133] Next, in S530, the vehicle service unit 7 determines whether or not an acceptance determination status has been received from the status management unit 8. If the vehicle service unit 7 determines that an acceptance determination status has not been received, it proceeds to processing of S540, and if it determines that an acceptance determination status has been received, it proceeds to processing of S580.

[0134] Next, in S540, the vehicle service unit 7 determines whether the value of the first count is greater than the first period (i.e., the reception result transmission period). If the vehicle service unit 7 determines that the value of the first count is equal to or less than the first period, it proceeds to the process of S550, and if it determines that the value of the first count is greater than the first period, it proceeds to the process of S580.

[0135] In S550, the vehicle service unit 7 determines whether the value of the second count is greater than the first time threshold. If the vehicle service unit 7 determines that the value of the second count is greater than the first time threshold, it proceeds to the process of S560, and if the vehicle service unit 7 determines that the value of the second count is equal to or less than the first time threshold, it returns to the process of S510. As a result, if the vehicle condition characteristics change during the acceptance determination, the first time threshold is changed based on the first table.

[0136] In S560, the vehicle service unit 7 requests timeout processing from the status management unit 8. As the timeout processing, the status management unit 8 cancels the operation instruction to the equipment management unit 9 and stops notification to the vehicle service unit.

[0137] Subsequently, in S570, the vehicle service unit 7 transmits a reception result indicating that the reception status is timed out to the service provision unit 6. As a result, the service provision unit 6 determines that a timeout has occurred.

[0138] On the other hand, in S580, the vehicle service department 7 resets the first count.

[0139] Next, in S590, the vehicle service unit 7 converts the latest acceptance status into an acceptance result. Specifically, the vehicle service unit 7 determines one acceptance result from the acceptance determination status received from the status management unit 8 and the acceptance determination result of the operation request determined by the vehicle service unit 7. Then, the vehicle service unit 7 converts the determined acceptance result into a format to be sent to the service providing unit 6.

[0140] Next, in S600, the vehicle service unit 7 transmits the reception result converted in S590 to the service providing unit 6.

[0141] Next, in S610, the vehicle service unit 7 determines whether the reception status of the reception result is being determined. If the vehicle service unit 7 determines that the reception status is being determined, it returns to the processing of S510, and if it determines that the reception status is not being determined, it proceeds to the processing of S620.

[0142] In S620, the vehicle service unit 7 ends the first count and the second count, and ends this process.

[0143] <2-2-3. Timeout processing by the service provider during execution monitoring processing> Next, the second timeout process executed by the service providing unit 6 during the execution monitoring process at S340 in Fig. 7 will be described in detail with reference to the flowchart in Fig. 10. The second timeout process here is executed at the execution stage of the operation request after an operation instruction is issued to the equipment management unit 9.

[0144] First, the S700 starts counting.

[0145] Next, in S710, the service providing unit 6 determines whether the count value is greater than a preset fourth time threshold. If it is determined that the count value is equal to or less than the fourth time threshold, the process proceeds to S720. If it is determined that the count value is greater than the fourth time threshold, the process proceeds to S760.

[0146] In S720, the service providing unit 6 determines whether or not the operation result has been received. If the service providing unit 6 determines that the operation result has been received, the process proceeds to S730, and if the service providing unit 6 determines that the operation result has not been received, the process returns to S710.

[0147] In S730, the service providing unit 6 determines whether the execution status of the received operation result is "running." If the service providing unit 6 determines that the execution status is "running," the process proceeds to S740. If the service providing unit 6 determines that the execution status is not "running" (i.e., "suspended, completed, or timed out"), the process proceeds to S750.

[0148] In S740, the service providing unit 6 resets the count and returns to the process of S710.

[0149] In S750, the service providing unit 6 determines whether the execution status is timed out. If the service providing unit 6 determines that the execution status is timed out, the process proceeds to S760. If the service providing unit 6 determines that the execution status is not timed out (i.e., the execution status is interrupted or completed), the process proceeds to S770.

[0150] In S760, the service providing unit 6 determines that a timeout has occurred and stops the process. That is, the service providing unit 6 determines that a timeout has occurred when its own count is equal to or greater than the fourth threshold value and when it receives a timeout result from the vehicle service unit 7.

[0151] In S770, the service providing unit 6 ends the counting and ends this process.

[0152] <2-2-4. Timeout processing by the vehicle service department during execution monitoring processing> Next, the first timeout process executed by the vehicle service unit 7 during the execution monitoring process at S330 in Fig. 7 will be described in detail with reference to the flowchart in Fig. 11. The first timeout process here is executed at the execution stage of the operation request after an operation instruction is issued to the equipment management unit 9.

[0153] First, in S800, the vehicle service unit 7 starts a first count and a second count. The value of the first count is a value for determining the timing of transmitting the operation result, and the value of the second count is a value for determining a timeout.

[0154] Next, in S810, the vehicle service unit 7 acquires the characteristics of the vehicle in the same manner as in S510.

[0155] Next, in S820, the vehicle service unit 7 extracts a second setting value corresponding to the equipment characteristics and the state characteristics from the second table, similar to S520, and sets the third time threshold value based on the extracted second setting value.

[0156] Next, in S830, the vehicle service unit 7 determines whether or not the operating status has been received from the status management unit 8. If the vehicle service unit 7 determines that the operating status has not been received, the process proceeds to S840, and if it determines that the operating status has been received, the process proceeds to S890.

[0157] Next, in S840, the vehicle service unit 7 determines whether the value of the first count is greater than the second period (i.e., the operation result transmission period). If the vehicle service unit 7 determines that the value of the first count is equal to or less than the second period, it proceeds to the processing of S850, and if it determines that the value of the first count is greater than the second period, it proceeds to the processing of S900.

[0158] In S850, the vehicle service unit 7 determines whether the value of the second count is greater than the third time threshold. If the vehicle service unit 7 determines that the value of the second count is greater than the third time threshold, the process proceeds to S860. If the vehicle service unit 7 determines that the value of the second count is equal to or less than the third time threshold, the process returns to S810. As a result, if the vehicle state characteristics change between the time when the operation request is transmitted and the time when the operation of the target equipment is completed, the second time threshold is changed based on the second table.

[0159] In S860, the vehicle service unit 7 requests the status management unit 8 to perform timeout processing.

[0160] Next, in S870, the vehicle service unit 7 transmits the operation result indicating that the execution status is timeout to the service providing unit 6. As a result, the service providing unit 6 determines that timeout has occurred.

[0161] On the other hand, in S880, the vehicle service unit 7 determines whether or not there is a change in the operating state. If the vehicle service unit 7 determines that there is a change in the operating state, it proceeds to the processing of S890, and if it determines that there is no change in the operating state, it proceeds to the processing of S900.

[0162] In S890, the vehicle service department 7 resets the first count.

[0163] Next, in S900, the vehicle service unit 7 converts the latest operating state into an operating result.

[0164] Next, in S910, the vehicle service unit 7 transmits the operation result converted in S900 to the service providing unit 6.

[0165] Next, in S920, the vehicle service unit 7 determines whether the execution state of the operation result is in execution. If the vehicle service unit 7 determines that the execution state is in execution, it returns to the processing of S810, and if it determines that the execution state is not in execution, it proceeds to the processing of S930.

[0166] In S930, the vehicle service unit 7 ends the first count and the second count, and ends this process.

[0167] <3. Effects> (1) The vehicle service unit 7 sets a first time threshold and a third time threshold according to the characteristics of the target equipment and the current vehicle state characteristics, and executes a first timeout process based on the set first time threshold and third time threshold. That is, the vehicle service unit 7 executes the timeout process taking into account the difference in response time due to the characteristics of the target equipment and the current vehicle state characteristics. If the vehicle service unit 7 cancels the process in response to the reception of an operation request, no response is transmitted from the vehicle service unit 7 to the service providing unit 6. Therefore, if the service providing unit 6 does not receive an acceptance result or an operation result from the vehicle service unit 7 in the first or second cycle, it can determine a timeout and cancel the process in response to the transmission of the operation request. Therefore, the vehicle service unit 7 can implement a timeout process that absorbs the difference in response time due to the vehicle characteristics. Consequently, the service providing unit 6 can implement a timeout process that is independent of the vehicle characteristics. The service providing unit 6 can implement the timeout process without being aware of the difference in response time due to the vehicle characteristics.

[0168] (2) While determining whether an operation request can be accepted, the service providing unit 6 can implement timeout processing that is independent of vehicle characteristics.

[0169] (3) During execution monitoring processing, the service providing unit 6 can realize timeout processing that is independent of vehicle characteristics.

[0170] (4) The vehicle service unit 7 transmits the acceptance result or operation result to the service providing unit 6 in the specified first or second cycle, and if the service providing unit 6 does not receive the acceptance result or operation result within the first or second cycle, the service providing unit 6 determines a timeout and can cancel or suspend the processing. In addition, the vehicle service unit 7 transmits a response to the service providing unit 6 when the operating status of the target equipment changes, so that the service providing unit 6 can recognize the latest operating status.

[0171] (5) By defining the items of reception results and operation results, third parties can easily develop applications for providing services to vehicle users.

[0172] (6) The vehicle state may change between the time when the operation request is received and the time when the operation of the target equipment is completed. In response to the change in the vehicle state, the vehicle service unit 7 changes the first time threshold or the third time threshold, thereby executing the first timeout process based on the first time threshold or the third time threshold according to the current vehicle state.

[0173] (7) When the equipment characteristics and / or the vehicle state characteristics for the vehicle change, the data table is updated, so that the vehicle service unit 7 can always set the first time threshold and the third time threshold according to the characteristics of the target equipment and the current vehicle state.

[0174] (Other embodiments) Although the embodiments of the present disclosure have been described above, the present disclosure is not limited to the above-described embodiments and can be implemented in various modified forms.

[0175] (a) In the above embodiment, the vehicle service unit 7 is configured to transmit the operation result to the service providing unit 6 under preset conditions in S40, but the present disclosure is not limited to this. For example, as shown in FIG. 13, the service providing unit 6 may be configured to allow the user to set how the vehicle service unit 7 transmits the operation result. Note that in FIG. 13, the operation result in FIG. 4 is expressed as availability. Availability generally refers to the resilience of a system, but here it is a concept that includes the determination results of a failure, etc., the operation results described above, etc.

[0176] The vehicle service unit 7 can employ either a Pub / Sub (Publish-Subscribe) type or a Req / Res (Request-Response) type. The Pub / Sub type is a transmission method in which data is transmitted according to settings once transmission parameters such as the availability transmission cycle and number of transmissions are registered. On the other hand, the Req / Res type is a transmission method in which data is transmitted only when a request is received.

[0177] In the case of Pub / Sub, the service providing unit 6 sets transmission parameters in advance before S40. For example, the service providing unit 6 transmits an availability distribution registration request to the vehicle service unit 7 in S210. The vehicle service unit 7 receives the availability distribution registration request and transmits the availability to the service providing unit 6 in S240 according to the settings of the transmission parameters included in the request. The vehicle service unit 7 generates the availability based on the multiple operating states transmitted by the equipment management unit 9 and the status management unit 8 in S220 and S230. At this time, the vehicle service unit 7 may determine the operable level (i.e., whether or not the first command can be received) from the operating state and change the setting of the operable level. The vehicle service unit 7 may transmit the availability when changing the setting of the operable level.

[0178] Next, in the case of the Req / Res type, for example, the service providing unit 6 transmits an availability distribution registration request to the vehicle service unit 7 in S310. The vehicle service unit 7 receives the availability distribution registration request and transmits the requested availability to the service providing unit 6 in S240. The vehicle service unit 7 generates availability upon receiving at least one of the operation states transmitted by the equipment management unit 9 and the state management unit 8 in S225 and S235. At this time, the vehicle service unit 7 may determine an operation readiness level from the operation state and transmit availability including the operation readiness level.

[0179] (b) In the above embodiment, the state management unit 8 is configured to respond with the arbitration result requested by the vehicle service unit 7. However, the present disclosure is not limited to this configuration. For example, as shown in FIG. 14 , if the state management unit 8 is configured to be unable to respond with the arbitration result requested by the vehicle service unit 7 in S20, the vehicle service unit 7 may be configured to perform the functions of the state management unit 8 in place of the state management unit 8 in S11. In this case, the vehicle service unit 7 may perform part or all of the action request arbitration (e.g., the processing of S20) using part of the arbitration result transmitted from the state management unit 8, the operating status of the state management unit 8, and the operating status transmitted from the equipment management unit 9. For example, the state management unit 8 may be configured to notify the vehicle service unit 7 of the acceptance result for the action request transmitted from the vehicle service unit 7, the operating status of the state management unit 8 itself, and the operating status of the controlled object transmitted from the equipment management unit 9. In this configuration, the above-described action request arbitration (S20, S22) may be performed by the vehicle service unit 7.

[0180] (c) In the above embodiment, the first table and the second table for each piece of equipment were tables of first and second setting values ​​corresponding to the equipment characteristics and the state characteristics of the vehicle. However, the present disclosure is not limited to this. The first and second tables stored in the ROM 11b may be tables of first and second setting values ​​corresponding to the equipment characteristics of the vehicle or vehicle characteristics, including the state characteristics of the vehicle. That is, if the first table is a table of first setting values ​​corresponding to the equipment characteristics of the vehicle, the vehicle service unit 7 may set the first threshold time threshold based on the first setting value corresponding to the equipment characteristics of the target equipment in the first table. Also, if the second table is a table of second setting values ​​corresponding to the equipment characteristics of the vehicle, the vehicle service unit 7 may set the third threshold time threshold based on the second setting value corresponding to the equipment characteristics of the target equipment in the second table. Also, if the first table is a table of first setting values ​​corresponding to the state characteristics of the vehicle, the vehicle service unit 7 may set the first threshold time threshold based on the first setting value corresponding to the current vehicle state in the first table. In addition, if the second table is a table of second set values ​​corresponding to the vehicle's condition characteristics, the vehicle service unit 7 may set the third threshold time threshold based on the second set value in the second table corresponding to the current vehicle's condition characteristics.

[0181] (d) In the above embodiment, the vehicle service unit 7 executes the first timeout process, but the state management unit 8 or the equipment management unit 9 may execute the first timeout process. That is, instead of the first ECU 10, any one of the third to thirteenth ECUs 20, 25, 30, 41 to 48 may execute the first timeout process.

[0182] (e) In the above embodiment, the first ECU 10 includes the vehicle service unit 7, and the second ECU 15 or the sensor 35 includes the service providing unit 6. However, the first ECU 10 may include both the vehicle service unit 7 and the service providing unit 6. In other words, the vehicle control device and the service providing unit of the present disclosure may be configured as the same device.

[0183] (f) Multiple functions of one component in the above embodiments may be realized by multiple components, or one function of one component may be realized by multiple components. Also, multiple functions of multiple components may be realized by one component, or one function realized by multiple components may be realized by one component. Also, part of the configuration of the above embodiments may be omitted. Also, at least part of the configuration of the above embodiments may be added to or substituted for the configuration of another of the above embodiments.

[0184] (g) In addition to the vehicle control device described above, the present disclosure can also be realized in various forms, such as a program for causing a computer to function as a vehicle control device, a non-transient physical recording medium such as a semiconductor memory on which this program is recorded, and a vehicle control method.

Claims

1. A vehicle control device (10) mounted on a vehicle, a storage unit (11b) storing a data table of setting values ​​corresponding to equipment characteristics and state characteristics of the vehicle for each equipment of the vehicle; a request receiving unit (S10) configured to receive an operation request for the target equipment from a service providing unit (10, 15, 35) configured to provide a service for operating the target equipment that is an operation target among the equipment; a threshold setting unit (S520, S820) configured to set a time threshold based on a setting value corresponding to an equipment characteristic of the target equipment and a current state characteristic of the vehicle, among the setting values ​​of the data table of the target equipment, when the request receiving unit receives the operation request; a timeout processing unit (S310, S330) configured to execute a timeout process during execution of a process in response to reception of the operation request by the request receiving unit, based on the time threshold set by the threshold setting unit; Vehicle control device.

2. The process in response to the reception of the operation request includes determining whether the operation request can be accepted; The timeout processing unit (S310) is configured to execute the timeout processing during execution of the determination. The vehicle control device according to claim 1 .

3. The process in response to the reception of the operation request includes an execution monitoring process for monitoring the execution of the target equipment in response to the operation request, The timeout processing unit (S330) is configured to execute the timeout processing during execution of the execution monitoring processing. The vehicle control device according to claim 1 or 2.

4. the timeout processing unit (S330) is configured to repeatedly transmit a response to the operation request to the service providing unit at a specified period and at a time when the state of the vehicle changes. The vehicle control device according to claim 1 or 2.

5. The response includes information corresponding to the specified item, and the information includes information regarding a timeout. The vehicle control device according to claim 4.

6. The threshold setting unit (S520, S820) is configured to change the time threshold based on the data table when a state characteristic of the vehicle changes during the period from when the request receiving unit receives the operation request to when the operation of the target equipment is completed. The vehicle control device according to claim 1 or 2.

7. an update unit (10) configured to update the data table when equipment characteristics of the vehicle and / or state characteristics of the vehicle change; The vehicle control device according to claim 1 or 2.

8. A vehicle control system (1) comprising a vehicle control device (10) mounted on a vehicle and a service providing unit (10, 15, 35) configured to provide a service related to the vehicle, The vehicle control device includes: a storage unit (11b) storing a data table of set values ​​corresponding to the vehicle characteristics including the equipment characteristics or the state characteristics of the vehicle for each equipment of the vehicle; a request receiving unit (S10) configured to receive an operation request for a target device that is an operation target among the devices from the service providing unit; a threshold setting unit (S520, S820) configured to set a first time threshold based on a setting value corresponding to the vehicle characteristics among the setting values ​​in the data table of the target equipment when the request receiving unit receives the operation request; a first timeout processing unit (S310, S330) configured to execute a first timeout processing during execution of processing in response to reception of the operation request by the request receiving unit, based on the first time threshold set by the threshold setting unit; The service providing unit: an execution unit (6) configured to execute an application that operates the target equipment; a request sending unit (S110) configured to send the operation request to the vehicle control device in response to execution of the application by the execution unit; and a second timeout processing unit (S320, S340) configured to execute a second timeout processing during execution of processing in response to transmission of the operation request by the request transmission unit, based on a second time threshold that is independent of the first time threshold and does not depend on the vehicle characteristics. Vehicle control system.

9. A vehicle control method executed by a vehicle control device (10) that is mounted on a vehicle and has a storage unit that stores a data table of setting values ​​corresponding to equipment characteristics and state characteristics of the vehicle for each piece of equipment of the vehicle, receiving an operation request for the target equipment from a service providing unit configured to provide a service for operating the target equipment that is an operation target among the equipment (S10); In response to receiving the operation request, a time threshold is set based on a setting value corresponding to the equipment characteristics of the target equipment and the current state characteristics of the vehicle among the setting values ​​of the data table of the target equipment (S520, S820); Executing a timeout process during execution of the process in response to the reception of the operation request based on the set time threshold (S310, S330); Vehicle control method.

10. A vehicle control method executed by a vehicle control system (1) including: a vehicle control device (10) mounted on a vehicle and storing a data table of setting values ​​corresponding to equipment characteristics or state characteristics of the vehicle for each piece of equipment of the vehicle; and a service providing unit (10, 15, 35) configured to provide a service related to the vehicle, The vehicle control device includes: receiving an operation request for a target device that is an operation target among the devices from the service providing unit (S10); In response to receiving the operation request, a first time threshold is set based on a setting value corresponding to the characteristics of the target equipment or the current state characteristics of the vehicle among the setting values ​​of the data table of the target equipment (S520, S820); Execute a first timeout process during execution of the process in response to the reception of the operation request based on the set first time threshold (S310, S330); The service providing unit: Execute an application that operates the target device (6); In response to the execution of the application, the operation request is transmitted to the vehicle control device (S110); a second timeout process is executed during the execution of the process in response to the transmission of the operation request, based on a fixed second time threshold independent of the first time threshold (S320, S340); Vehicle control method.

11. A processing device (11a) of a vehicle control device (10) mounted on a vehicle and including a storage unit (11b) storing a data table of setting values ​​corresponding to equipment characteristics and state characteristics of the vehicle for each equipment of the vehicle, receiving an operation request for the target equipment from a service providing unit (10, 15, 35) configured to provide a service for operating the target equipment that is an operation target among the equipment (S10); In response to receiving the operation request, setting a time threshold based on a setting value among the setting values ​​in the data table of the target equipment that corresponds to the equipment characteristics of the target equipment and the current state characteristics of the vehicle (S520, S820); Executing a timeout process during execution of the process in response to the reception of the operation request based on the set time threshold (S310, S330). Vehicle control program.

12. A vehicle control device (10) mounted on a vehicle, a vehicle service unit (7) that receives an operation request for a target equipment from a service providing unit (10, 15, 35) configured to provide a service for operating the target equipment that is an operation target among the equipment of the vehicle; a status management unit (8) that receives an operation request for the target equipment from the vehicle service unit (7) and instructs an equipment management unit configured to control equipment of the vehicle to operate the target equipment, The vehicle service department a storage unit (11b) storing a data table of setting values ​​corresponding to equipment characteristics and state characteristics of the vehicle for each equipment of the vehicle; a first request receiving unit (S110) configured to receive an operation request for the target equipment from the service providing unit; a threshold setting unit (S520, S820) configured to set a time threshold based on a setting value corresponding to an equipment characteristic of the target equipment and a current state characteristic of the vehicle, among the setting values ​​of the data table of the target equipment, when the first request receiving unit receives the operation request; a timeout processing unit (S310, S330) configured to execute a timeout process during execution of a process in response to reception of the operation request by the first request receiving unit, based on the time threshold set by the threshold setting unit; a first notification unit (S190) configured to notify the service providing unit of an operation result corresponding to the operation request for the target equipment; The state management unit a second request receiving unit (S130) configured to receive an operation request for the target equipment from the vehicle service unit; An operation instruction unit (S160) configured to instruct the equipment management unit to perform an operation on the target equipment; a second notification unit (S180) configured to notify the vehicle service unit of an operation status corresponding to an operation request for the target equipment; Vehicle control device.

13. A vehicle control method executed by a vehicle control device (10) that is mounted on a vehicle and has a storage unit (11b) that stores a data table of setting values ​​corresponding to equipment characteristics and state characteristics of the vehicle for each equipment of the vehicle, comprising: receiving an operation request for the target equipment from a service providing unit configured to provide a service for operating the target equipment that is an operation target among the equipment (S10, S300); In response to receiving the operation request, a time threshold is set based on a setting value corresponding to the equipment characteristics of the target equipment and the current state characteristics of the vehicle among the setting values ​​of the data table of the target equipment (S520, S820); Executing a timeout process during execution of the process in response to the reception of the operation request based on the set time threshold (S310, S330); In response to receiving the operation request, an equipment management unit configured to control equipment of the vehicle is instructed to operate the target equipment (S160); receiving an operation status corresponding to an operation request for the target equipment from the equipment management unit (S170); notifying the service providing unit of the operation result corresponding to the operation request for the target equipment (S190); Vehicle control method.

14. A processing device (11a) of a vehicle control device (10) mounted on a vehicle and including a storage unit (11b) storing a data table of setting values ​​corresponding to equipment characteristics and state characteristics of the vehicle for each equipment of the vehicle, receiving an operation request for the target equipment from a service providing unit configured to provide a service for operating the target equipment that is an operation target among the equipment (S10, S300); In response to receiving the operation request, setting a time threshold based on a setting value among the setting values ​​in the data table of the target equipment that corresponds to the equipment characteristics of the target equipment and the current state characteristics of the vehicle (S520, S820); Executing a timeout process during execution of the process in response to the reception of the operation request based on the set time threshold (S310, S330); In response to receiving the operation request, instruct an equipment management unit configured to control equipment of the vehicle to perform an operation on the target equipment (S160); receiving an operation status corresponding to an operation request for the target equipment from the equipment management unit (S170); notifying the service providing unit of the operation result corresponding to the operation request for the target equipment (S190); Vehicle control program.

Images