Motion control device and motion control method

The operation management device optimizes startup and fault diagnosis sequences to address inefficiencies in vehicle electronic control systems, ensuring efficient update data downloading while minimizing power consumption and abnormality detection.

JP7853112B2Active Publication Date: 2026-04-28HONDA MOTOR CO LTD
View PDF 3 Cites 0 Cited by

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
HONDA MOTOR CO LTD
Filing Date
2022-02-15
Publication Date
2026-04-28

AI Technical Summary

Technical Problem

Existing vehicle electronic control systems face inefficiencies in update data downloading, leading to unnecessary power consumption and detection of operational abnormalities due to improper startup and fault diagnosis sequences.

Method used

An operation management device that manages the startup and fault diagnosis of multiple electronic control units, prohibiting unnecessary diagnostics and optimizing startup sequences to minimize power consumption and abnormality detection during updates.

Benefits of technology

Enables efficient update data downloading by preventing unnecessary power consumption and operational abnormalities in vehicle electronic control units.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007853112000001
    Figure 0007853112000001
  • Figure 0007853112000002
    Figure 0007853112000002
  • Figure 0007853112000003
    Figure 0007853112000003
Patent Text Reader

Abstract

To make it possible to perform down-load efficiently by preventing occurrence of unnecessary operation and unnecessary power consumption at down-load of update data by an electronic control device.SOLUTION: An operation management device 2, which manages operation of a plurality of electronic control devices 4 installed in a vehicle 1, includes: an update management unit 13 which receives down-load instruction for update data containing an update program to an electronic control device from an external device, distributes the received update data to an electronic control device being an object device of down-load of the update data, and instructs the electronic control device to write the update data; and a failure diagnosis unit 14 which executes failure diagnosis for the electronic control device. When instructing writing of the update data to any of the electronic control devices, the update management unit prohibits the failure diagnosis unit from executing failure diagnosis.SELECTED DRAWING: Figure 2
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to an operation management device for managing the operation of an electronic control device mounted on a vehicle, and an operation management method.

Background Art

[0002] Patent Document 1 discloses a vehicle electronic control system in which an in-vehicle master device distributes update data received from an external device to an in-vehicle electronic control device and instructs writing to a memory. In this vehicle electronic control system, configuration information is stored as information on set values including various parameters used for control in the non-volatile memory of the electronic control device. The master device acquires old configuration information from the electronic control device to be rewritten, and when the electronic control device to be rewritten is in the process of or after rewriting the program, instructs the electronic control device to be rewritten to rewrite back the new configuration information obtained by processing the acquired old configuration information.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] When downloading update data, such as program updates, from an external device to an in-vehicle electronic control unit, if all electronic control units are started according to the usual procedure when the vehicle is powered on, and then the update data is sent to the target electronic control unit to write the update, even electronic control units that do not need to be started will be started, potentially resulting in wasted power consumption. On the other hand, if only some of the electronic control units are started without following the usual procedure, then during the operational diagnosis of all electronic control units that is normally performed when the electronic control units are started, malfunctions will be detected in the electronic control units that were not started, which is inconvenient.

[0005] The objective of the present invention is to enable efficient downloading of update data to an in-vehicle electronic control unit by preventing unnecessary power consumption and detection of unnecessary operational abnormalities in the electronic control unit. [Means for solving the problem]

[0006] One aspect of the present invention is an operation management device for managing the operation of a plurality of electronic control devices mounted on a vehicle, which receives a download instruction for update data, including an update program for the electronic control devices, from an external device located outside the vehicle. Among the aforementioned electronic control devices Target devices for downloading the aforementioned update data Place The update management unit distributes the received update data and instructs the writing of the update data, and the fault diagnosis unit performs fault diagnosis on the electronic control unit, A startup unit for activating the aforementioned electronic control device, The update management unit is equipped with, After receiving the aforementioned download instruction, and before turning on the power of the vehicle, The fault diagnosis unit Give instructions Disable the execution of fault diagnosis. death , When the startup unit starts the target device, the fault diagnosis unit performs fault diagnosis on the target device, and the update management unit instructs the target device to write the update data. It is a motion management device. According to another aspect of the present invention, each of the plurality of electronic control devices is directly and communicably connected to the operation management device by a communication transmission line, or is indirectly and communicably connected to the operation management device via the communication transmission line and other electronic control devices, and a startup management device manages a startup configuration which is information indicating the startup order of the plurality of electronic control devices. department In preparation for this, the update management unit shall, The aforementioned fault diagnosis After prohibiting the execution of the download, the target device is notified to the startup management unit based on the download instruction, the startup management unit notifies the startup unit of the electronic control device that needs to be started in order to establish communication between the update management unit and the target device, and the startup configuration which is the startup configuration indicating the startup order, and the startup unit, in accordance with the update startup configuration, In order to establish communication between the update management unit and the target device The electronic control unit that needs to be started is activated. According to another aspect of the present invention, the fault diagnosis unit is configured such that the startup unit follows the updated startup configuration. In order to establish communication between the update management unit and the target device, the following is required to start up After starting the electronic control unit, a fault diagnosis is performed on the electronic control unit as indicated in the updated startup configuration. According to another aspect of the present invention, a plurality of the electronic control devices, the operation management device, and the communication transmission path constitute a communication network, the communication network includes at least one transmission path switch for switching the connection of the communication transmission path, the startup management unit manages a network configuration indicating the state to be set on the transmission path switch in the communication network, the startup management unit notifies the startup unit of an updated network configuration which is the network configuration for establishing communication between the update management unit and the target device, the startup unit switches the transmission path switch according to the updated network configuration, and then, according to the updated startup configuration, In order to establish communication between the update management unit and the target device The electronic control unit that needs to be started is activated. According to another aspect of the present invention, when the writing of the update data is completed in the target device, the update management unit prohibits the fault diagnosis unit from performing the fault diagnosis, the startup management unit notifies the startup unit of the network configuration that was used before notifying the startup unit of the update network configuration, and the startup unit switches the transmission path switch according to the network configuration notified by the startup management unit. Another aspect of the present invention is an operation management method performed by a computer of an operation management device that manages the operation of a plurality of electronic control devices mounted on a vehicle, The Update Management Department, The steps include receiving a download instruction for update data, including an update program for the electronic control unit, from an external device located outside the vehicle, In the receiving step, after the download instruction is received, the update management unit, before turning on the vehicle's power, communicates to the fault diagnosis unit: A step of prohibiting the execution of fault diagnosis for the aforementioned electronic control device, The startup unit starts the target device among the electronic control devices that is subject to the download of the update data; the fault diagnosis unit performs a fault diagnosis on the target device; and the update management unit distributes the update data to the target device and instructs it to write the update data. Includes Mu This is a method of managing production. [Effects of the Invention]

[0007] According to the present invention, when downloading update data to an in-vehicle electronic control unit, it is possible to prevent the detection of unnecessary operational abnormalities in the electronic control unit, thereby preventing unnecessary power consumption and enabling efficient download. [Brief explanation of the drawing]

[0008] [Figure 1] This figure shows the configuration of an in-vehicle communication network, including a motion management device according to one embodiment of the present invention. [Figure 2] This diagram shows the configuration of the motion control device. [Figure 3] This is a flowchart illustrating the operating procedure of the motion management device. [Modes for carrying out the invention]

[0009] Embodiments of the present invention will be described below with reference to the drawings. Figure 1 shows the configuration of a communication network 3 mounted on a vehicle 1, which includes an operation management device 2 according to one embodiment of the present invention. The communication network 3 includes the operation management device 2, as well as a plurality of electronic control devices 4a, 4b, 4c, 4d, 4e, 4f, 4g, 4h, 4i, and a transmission line switch 6 (also referred to as transmission line SW6). Hereinafter, the electronic control devices 4a, 4b, 4c, 4d, 4e, 4f, 4g, 4h, 4i will be collectively referred to as the electronic control device 4. The transmission line switch 6 switches the connection of the communication transmission line 5 according to instructions from the operation management device 2.

[0010] The communication network 3 also includes communication transmission lines 5a, 5b, 5c, 5d, 5e, 5f, 5g, 5h, 5j, 5k, 5m. Hereinafter, the communication transmission lines 5a, 5b, 5c, 5d, 5e, 5f, 5g, 5h, 5j, 5k, 5m are also collectively referred to as the communication transmission line 5. In the communication network 3, each of the plurality of electronic control devices 4 is directly communicably connected to the operation management device via the communication transmission line 5, or is indirectly communicably connected to the operation management device 2 via the communication transmission line 5 and other electronic control devices 4.

[0011] The operation management device 2 manages the operations of the plurality of electronic control devices 4 mounted on the vehicle 1. FIG. 2 is a diagram showing the configuration of the operation management device 2. The operation management device 2 includes a processor 10, a memory 11, and a communicator 12. The memory 11 is composed of, for example, a volatile and / or non-volatile semiconductor memory. The communicator 12 is a transceiver for the operation management device 2 to communicate with the electronic control device 4 and the transmission line switch 6 via the communication transmission line 5.

[0012] The processor 10 is, for example, a computer including a CPU (Central Processing Unit) or the like. The processor 10 may have a configuration including a ROM (Read Only Memory) in which a program is written, a RAM (Random Access Memory) for temporarily storing data, and the like. And the processor 10 includes an update management unit 13, a failure diagnosis unit 14, a startup management unit 15, and a startup unit 16 as functional elements or functional units.

[0013] These functional elements included in the processor 10 are realized, for example, when the processor 10, which is a computer, executes a management program 17 stored in the memory 11. The management program 17 can be stored in any computer-readable storage medium. Instead of this, all or part of the above functional elements included in the processor 10 may be configured by hardware including one or more electronic circuit components.

[0014] The update management unit 13 receives a download instruction for update data including an update program to the electronic control device 4 from an external device (for example, a server) outside the vehicle 1. When the update management unit 13 receives the download instruction from the external device, it turns on the power of the vehicle 1 and distributes the received update data to the electronic control device 4 which is the target device for the download of the update data and instructs the writing of the update data.

[0015] In particular, in the present embodiment, when the update management unit 13 instructs the writing of update data to any of the electronic control devices 4, it prohibits the execution of fault diagnosis for the fault diagnosis unit 14 described later. Thereby, when downloading the update data to the electronic control device 4, it is possible to prevent the detection of unnecessary operation abnormalities in the electronic control device and the occurrence of unnecessary power consumption, and to perform the above download efficiently.

[0016] Further, after prohibiting the execution of the diagnosis operation, the update management unit 13 notifies the start management unit 15 described later of the target information indicating the target device for the download based on the download instruction. When the writing of the update data is completed in the electronic control device 4 which is the target device, that is, when the update management unit 13 receives an end notification (described later) from the electronic control device 4 which is the target device, it prohibits the execution of fault diagnosis for the fault diagnosis unit 14.

[0017] The fault diagnosis unit 14 executes fault diagnosis for the electronic control device 4 when the power of the vehicle 1 is turned on and off. However, the fault diagnosis unit 14 does not execute fault diagnosis for the electronic control device 4 when the execution of fault diagnosis is prohibited by the update management unit 13.

[0018] If the update management unit 13 prohibits the fault diagnosis unit 14 from performing a fault diagnosis, and the startup unit 16 starts the electronic control unit 4 according to the update startup configuration, the fault diagnosis unit 14 will perform a fault diagnosis for the electronic control unit 4 as indicated in the update startup configuration after the startup.

[0019] The target device, the electronic control unit 4, performs update data writing after fault diagnosis is completed. When the electronic control unit 4 has finished writing the update data, it sends a completion notification to the operation management device 2.

[0020] When the communication device 12 receives a termination notification from the target device, the electronic control unit 4, and the update management unit 13 prohibits the fault diagnosis unit 14 from performing the fault diagnosis, the fault diagnosis unit 14 will not perform the fault diagnosis for the electronic control unit 4. Furthermore, if the fault diagnosis unit 14 is prohibited from performing the fault diagnosis upon receiving the termination notification, and then receives a switchover completion notification (described later) from the startup unit 16, it will perform the fault diagnosis for the electronic control unit 4 according to the normal (for example, default) sequence, and then turn off the power to the vehicle 1.

[0021] The startup management unit 15 manages the network configuration that indicates the state to be set for the transmission path switch 6 in the communication network 3. Based on the target information notified by the update management unit 13, the startup management unit 15 notifies the startup unit 16 of the update network configuration, which is the network configuration for establishing communication between the update management unit 13 and the target device. As a result, when downloading update data to the electronic control device 4, the startup management unit 15 can indicate to the startup unit 16, via the update network configuration, the state of the transmission path switch 6 that allows for the most efficient establishment of communication between the update management unit 13 and the target device.

[0022] Here, the “state of the transmission path switch 6 that can establish communication between the update management unit 13 and the target device most efficiently” may be, for example, a state of the transmission path switch 6 that minimizes the number of other electronic control devices 4 through which the update data passes before reaching the target device, the electronic control device 4, from the operation management device 2. Specifically, for example, if the transmission path switch 6 is set to connect communication transmission paths 5a and 5b as its default setting, and update data is downloaded with the electronic control device 4e as the target device, then according to the update network configuration, communication transmission paths 5a and 5b g It may be specified that the two are connected. This allows the update data to start from the operation management device 2 and reach the target device, the electronic control unit 4e, without passing through other electronic control units 4.

[0023] Furthermore, the startup management unit 15 manages the startup configuration, which is information indicating the startup order of multiple electronic control devices 4. In this embodiment, based on the target information notified by the update management unit 13, the startup management unit 15 refers to the update network configuration and notifies the startup unit 16 of the update startup configuration, which is the startup configuration indicating the electronic control devices 4 that need to be started in order to establish communication between the update management unit 13 and the target device, and the startup order of those electronic control devices 4. As a result, the startup unit 16 can efficiently start up the electronic control devices 4 necessary for distributing update data to the target device electronic control devices 4 without starting up unnecessary electronic control devices 4, and therefore without generating unnecessary power consumption.

[0024] Furthermore, when the electronic control unit 4, which is the target device, has finished writing the update data, that is, when the startup management unit 15 receives the completion notification from the electronic control unit 4, it notifies the startup unit 16 of the network configuration that was used before notifying the startup unit 16 of the updated network configuration.

[0025] The startup unit 16 starts up the electronic control unit 4. In this embodiment, the startup unit 16 switches the transmission path switch 6 according to the updated network configuration notified by the startup management unit 15, and then sequentially starts up the electronic control units 4 that need to be started according to the updated startup configuration. When the startup unit 16 has finished starting up all the electronic control devices 4 that need to be started, it notifies the fault diagnosis unit 14 of this fact.

[0026] Furthermore, when the update data writing is completed in the target device, the electronic control unit 4, that is, when the startup unit 16 receives the completion notification from the target device, the electronic control unit 4, it switches the transmission path switch 6 according to the network configuration notified by the startup management unit 15 thereafter. The startup unit 16 also starts up all electronic control units 4. Then, the startup unit 16 sends a switching completion notification to the fault diagnosis unit 14.

[0027] As a result, if the startup unit 16 switches the transmission path switch 6 to change the network configuration of the communication network 3 to a state different from the normal state when downloading update data, it can return to the original network configuration when the vehicle 1 is powered off. Therefore, when the vehicle 1 is powered off, the fault diagnosis unit 14 can perform fault diagnosis according to the normal sequence. Furthermore, by returning to the previous network configuration when the vehicle 1 is powered off as described above, when the vehicle 1 is powered on again, the electronic control unit 4 can be started according to the normal startup sequence of the vehicle 1, so the vehicle 1 can be started without compromising responsiveness.

[0028] Next, the operation procedure of the motion management device 2 will be explained. Figure 3 is a flowchart showing the processing procedure in the motion management device 2. The processing in Figure 3 is executed repeatedly.

[0029] When processing begins, the update management unit 13 determines whether or not it has received a download instruction for update data from an external device located outside the vehicle 1 (S100). If it does not receive a download instruction (S100, NO), the update management unit 13 returns to step 100 and repeats the process, waiting for a download instruction to be received.

[0030] On the other hand, when a download instruction is received (S100, YES), the update management unit 13 prohibits the fault diagnosis unit 14 from performing a fault diagnosis on the electronic control unit 4 (S102), and then turns on the power to the vehicle 1 (S104). The update management unit 13 also notifies the startup management unit 15 of the target information indicating the electronic control unit 4, which is the target device for downloading the update data. Based on the target information, the startup management unit 15 notifies the startup unit 16 of the update network configuration and update startup configuration for establishing communication between the update management unit 13 and the target device (S106).

[0031] The startup unit 16 switches the transmission path switch 6 based on the updated network configuration (S108), and then sequentially starts up the electronic control unit 4 based on the updated startup configuration (S110). Simultaneously with the startup execution, the startup unit 16 passes the updated startup configuration to the fault diagnosis unit. Subsequently, the fault diagnosis unit 14 performs a fault diagnosis for the electronic control unit 4 as indicated in the updated startup configuration (S112).

[0032] Next, the update management unit 13 distributes the received update data to the electronic control unit 4, which is the target device for downloading the update data, and instructs it to write the update data (S114). The update management unit 13 also determines whether or not the writing of the update data has been completed in the electronic control unit 4 (S116). If the writing of the update data has not been completed (S116, NO), the update management unit 13 repeats the process in step S116 and waits for the writing of the update data to be completed.

[0033] On the other hand, when the writing of the update data is complete (S116, YES), the update management unit 13 prohibits the fault diagnosis unit 14 from performing fault diagnosis (S118). The startup management unit 15 also notifies the startup unit 16 of the previous network configuration that was used before notifying the startup unit 16 of the updated network configuration (S120). The startup unit 16 switches the transmission line switch 6 according to the previous network configuration notified by the startup management unit 15 (S122). Subsequently, the fault diagnosis unit 14 performs fault diagnosis of the electronic control unit 4 according to the normal sequence (S124), then turns off the power to the vehicle 1 (S126), and this process ends.

[0034] It should be noted that the present invention is not limited to the configuration of the embodiments described above, and can be implemented in various forms without departing from the spirit of the invention.

[0035] The embodiments described above support the following configurations.

[0036] (Configuration 1) An operation management device for managing the operation of a plurality of electronic control devices mounted on a vehicle, comprising: an update management unit that receives a download instruction for update data, including an update program for the electronic control devices, from an external device located outside the vehicle, and distributes the received update data to the electronic control device which is the target device for the download of the update data and instructs it to write the update data; and a fault diagnosis unit that performs fault diagnosis on the electronic control devices, wherein when the update management unit instructs any of the electronic control devices to write the update data, it prohibits the fault diagnosis unit from performing the fault diagnosis. According to the operation management device of Configuration 1, when downloading update data to the electronic control device, it is possible to prevent the detection of unnecessary operational abnormalities in the electronic control device, thereby preventing unnecessary power consumption and enabling efficient download.

[0037] (Configuration 2) The operation management device according to Configuration 1, wherein each of the plurality of electronic control devices is directly connected to the operation management device via a communication transmission line, or is indirectly connected to the operation management device via the communication transmission line and other electronic control devices, and comprises a startup management unit that manages a startup configuration which is information indicating the startup order of the plurality of electronic control devices, and a startup unit that starts the electronic control devices, wherein the update management unit prohibits the execution of diagnostic operations and, based on the download instruction, notifies the startup management unit of the target device, the startup management unit notifies the startup unit of the updated startup configuration which is the startup configuration indicating the order in which the electronic control devices need to be started in order to establish communication between the update management unit and the target device, and the startup unit starts the electronic control devices that need to be started according to the updated startup configuration. According to the operation management device of Configuration 2, the startup unit can efficiently start up the electronic control devices necessary for distributing update data to the target electronic control devices without starting up unnecessary electronic control devices, and therefore without generating unnecessary power consumption.

[0038] (Configuration 3) The operation management device according to Configuration 2, wherein the fault diagnosis unit performs a fault diagnosis for the electronic control device shown in the updated startup configuration after the startup unit starts the electronic control device according to the updated startup configuration. According to the operation management device of configuration 3, the fault diagnosis unit performs fault diagnosis on the electronic control device that has actually been started, thus preventing the detection of unnecessary operational abnormalities and preventing unnecessary power consumption.

[0039] (Configuration 4) The operation management device according to Configuration 3, wherein a plurality of the electronic control devices, the operation management device, and the communication transmission path constitute a communication network, the communication network includes at least one transmission path switch for switching the connection of the communication transmission path, the startup management unit manages a network configuration indicating the state to be set on the transmission path switch in the communication network, the startup management unit notifies the startup unit of an updated network configuration which is the network configuration for establishing communication between the update management unit and the target device, and the startup unit switches the transmission path switch according to the updated network configuration, and then starts up the electronic control device that needs to be started according to the updated startup configuration. According to the operation management device of Configuration 4, the startup management unit can, through the update network configuration, enable the startup unit to realize a state of the transmission path switch 6 that allows for the most efficient establishment of communication between the update management unit 13 and the target device, thereby enabling even more efficient downloads.

[0040] (Configuration 5) The operation management device according to Configuration 4, wherein when the writing of the update data is completed in the target device, the update management unit prohibits the fault diagnosis unit from performing the fault diagnosis, the startup management unit notifies the startup unit of the network configuration that was used before notifying the startup unit of the update network configuration, and the startup unit switches the transmission path switch according to the network configuration notified by the startup management unit. According to the operation management device of configuration 5, when the power of vehicle 1 is turned off, the previous network configuration is restored. Therefore, when the power of vehicle 1 is turned on again, the electronic control unit 4 can be started according to the normal startup sequence of vehicle 1, and vehicle 1 can be started without compromising responsiveness.

[0041] (Configuration 6) An operation management method performed by a computer of an operation management device that manages the operation of a plurality of electronic control devices mounted on a vehicle, the operation management method comprising: receiving an instruction from an external device located outside the vehicle to download update data including an update program for the electronic control devices; prohibiting the execution of fault diagnosis for the electronic control devices; and distributing the received update data to the electronic control devices that are the target devices for the download of the update data and instructing them to write the update data. According to the operation management method of Configuration 6, when downloading update data to the electronic control unit, it is possible to prevent the detection of unnecessary operational abnormalities in the electronic control unit, thereby preventing unnecessary power consumption and enabling efficient download. [Explanation of Symbols]

[0042] 1...Vehicle, 2...Operation management device, 3...Communication network, 4, 4a, 4b, 4c, 4d, 4e, 4f, 4g, 4h, 4i...Electronic control device, 5, 5a, 5b, 5c, 5d, 5e, 5f, 5g, 5h, 5i, 5j, 5k, 5m...Communication transmission line, 6...Transmission line switch, 10...Processor, 11...Memory, 12...Communicator, 13...Update management unit, 14...Fault diagnosis unit, 15...Startup management unit, 16...Startup unit, 17...Management program.

Claims

1. An operation management device that manages the operation of multiple electronic control devices mounted on a vehicle, An update management unit receives a download instruction for update data, including an update program for the electronic control unit, from an external device located outside the vehicle, and distributes the received update data to the electronic control unit that is the target of the update data download, instructing it to write the update data. A fault diagnosis unit that performs fault diagnosis on the aforementioned electronic control unit, A startup unit for activating the aforementioned electronic control device, Equipped with, After receiving the download instruction, the update management unit instructs the fault diagnosis unit to prohibit the execution of fault diagnosis before turning on the vehicle's power. When the startup unit starts the target device, the fault diagnosis unit performs fault diagnosis on the target device, and the update management unit instructs the target device to write the update data. Operation management device.

2. Each of the multiple electronic control devices is either directly connected to the operation management device via a communication transmission line, or indirectly connected to the operation management device via the communication transmission line and other electronic control devices, It includes a startup management unit that manages startup configurations, which are information indicating the startup order of multiple electronic control devices. After prohibiting the execution of the fault diagnosis, the update management unit notifies the startup management unit of the target device based on the download instruction. The startup management unit notifies the startup unit of the electronic control device that needs to be started in order to establish communication between the update management unit and the target device, and the update startup configuration which indicates the startup order. The startup unit starts the electronic control device that is necessary to start in order to establish communication between the update management unit and the target device, in accordance with the update startup configuration. The operation management device according to claim 1.

3. The fault diagnosis unit performs a fault diagnosis on the electronic control device as indicated in the update startup configuration after the startup unit has started the electronic control device that is required to be started in order to establish communication between the update management unit and the target device according to the update startup configuration. The operation management device according to claim 2.

4. Multiple electronic control devices, the operation management device, and the communication transmission path constitute a communication network, and the communication network includes at least one transmission path switch for switching the connection of the communication transmission path. The startup management unit manages the network configuration that indicates the state to be set on the transmission path switch in the communication network, The startup management unit notifies the startup unit of the update network configuration, which is the network configuration for establishing communication between the update management unit and the target device. The startup unit, after switching the transmission path switch according to the update network configuration, starts the electronic control device that is necessary to start in order to establish communication between the update management unit and the target device, according to the update startup configuration. The operation management device according to claim 3.

5. When the writing of the update data to the target device is completed, The update management unit prohibits the fault diagnosis unit from performing the fault diagnosis. The startup management unit notifies the startup unit of the network configuration that was used before notifying the startup unit of the updated network configuration. The startup unit switches the transmission path switch according to the network configuration notified by the startup management unit. The operation management device according to claim 4.

6. A method of operation management performed by a computer in an operation management device that manages the operation of multiple electronic control devices mounted on a vehicle, The update management unit receives a download instruction for update data, including an update program for the electronic control unit, from an external device located outside the vehicle. The update management unit, in the receiving step, after receiving the download instruction and before turning on the vehicle's power, includes the step of prohibiting the fault diagnosis unit from performing a fault diagnosis on the electronic control unit, The startup unit performs the steps of starting the target device among the electronic control devices that is subject to the download of the update data, The fault diagnosis unit performs a fault diagnosis on the target device, The update management unit distributes the update data to the target device and instructs it to write the update data; A method for managing operations, including the operation management method.

Citation Information

Patent Citations

  • Program rewriting system

    JP2006082648A

  • On-vehicle control unit

    JP2007011734A

  • Vehicle electronic control system, vehicle master device, rewriting instruction method by writing back config information, and rewriting instruction program by writing back config information

    WO2021039795A1