Update information notification device, vehicle system, and update information notification program

Abstract

To appropriately notify of update information relating to an update of software according to a scene.SOLUTION: An update information notification device 7 causes a notification device to notify of update information relating to an update of software of an electronic control device to be updated when the software is updated with update software acquired from a distribution device. The update information notification device comprises: an update information acquisition section 16a that acquires update information; an occupant state identification section 16b that identifies an occupant state indicating a state of an occupant; a vehicle state identification section 16c that identifies a vehicle state indicating a state of a vehicle; an operation input identification section 16d that identifies an operation input from the occupant; and a notification control section 16e that determines a notification mode of the update information and causes the notification device to notify of the update information in accordance with the determined notification mode. When an operation input indicating a notification request of the update information is identified in a situation where it is identified that vehicle power supply is off and no occupant is present in the vehicle, the notification control section determines the notification mode of the update information in a simpler manner than when it is identified that an occupant is present in the vehicle.SELECTED DRAWING: Figure 2

Description

Technical Field

[0001] The present invention relates to an update information notification device, a vehicle system, and an update information notification program.

Background Art

[0002] Conventionally, for the purpose of, for example, improving functions or fixing bugs, there has been provided a technology for updating the software of in-vehicle electronic control units (hereinafter referred to as ECUs (Electronic Control Units)). In this technology, the server distributes the update software to the software update device, and the software update device transmits the update software to the ECU to be updated, thereby updating the software of the ECU to be updated. The software update sequentially performs the phases of a campaign notification that recommends the software update to the driver, a download phase in which the software update device acquires the update software from the server, an install phase in which the ECU to be updated writes the update software into the storage area, and an activate phase in which the ECU to be updated activates the update software. In this case, update information regarding the software update is notified to the driver or the like by displaying it on, for example, an in-vehicle display device or a portable information terminal. For example, Patent Document 1 discloses a method of varying the notification to the driver or the like based on the characteristics of the update software as a configuration for notifying the update information regarding the software update.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] Software updates are implemented in a variety of scenarios, which can be categorized into numerous types. For example, update information may be sent while the vehicle is parked. When update information is sent while parked, there is a risk that the information will be sent when there are no occupants in the vehicle, and sending a large amount of detailed update information may unnecessarily consume the vehicle's battery power. For these reasons, it is necessary to send update information appropriately according to the scenario.

[0005] The present invention has been made in view of the above circumstances, and its purpose is to provide an update information notification device, a vehicle system, and an update information notification program that can appropriately notify update information regarding software updates according to the scene. [Means for solving the problem]

[0006] According to the invention described in claim 1, the update information notification device (7) notifies the notification device of update information regarding the software update when the software of the electronic control device to be updated is updated by update software acquired from the distribution device. The update information acquisition unit (16a) acquires the update information. The occupant status identification unit (16b) identifies the occupant status indicating the status of the occupants. The vehicle status identification unit (16c) identifies the vehicle status indicating the status of the vehicle. The operation input identification unit (16d) identifies the operation input of the occupants. The notification control unit (16e) determines the notification manner of the update information and notifies the update information from the notification device according to the determined notification manner. The notification control unit determines the notification manner of the update information more simply than when the occupant status identification unit identifies that there are occupants in the vehicle, in a situation where the vehicle power is off and the occupant status identification unit identifies that there are no occupants in the vehicle, and an operation input indicating a request for notification of the update information is identified by the operation input identification unit.

[0007] When it is determined that the vehicle's power is off and there are no occupants inside, and an operation input indicating a request for update notification is detected, the notification method for the update information is determined more simply than when it is determined that there are occupants inside the vehicle, and the update information is notified according to the determined notification method. Rather than notifying the update information with a large amount of information and a detailed notification method, by notifying the update information with a small amount of information and a simple notification method, it is possible to appropriately notify software update information according to the scene.

[0008] When the vehicle's power is off and there are no occupants inside, if an operation input indicating a request for notification of update information is received, the update information can be notified in a simpler manner than when occupants are inside the vehicle, thereby preventing unnecessary power consumption of the vehicle's battery. [Brief explanation of the drawing]

[0009] [Figure 1] Functional block diagram showing the overall configuration of one embodiment [Figure 2] HCU Functional Block Diagram [Figure 3] Diagram showing the case classification table [Figure 4] Diagram showing the content of the display method [Figure 5] Diagram showing the content of the display method [Figure 6] Diagram showing the content of the display method [Figure 7] Diagram showing the content of the display method [Figure 8] Diagram showing the content of the display method [Figure 9] Diagram showing the content of the display method [Figure 10] Diagram showing the display pattern table [Figure 11] Diagram showing display patterns [Figure 12] Diagram showing display patterns [Figure 13] Diagram explaining display priority [Figure 14] Diagram explaining operation priority [Figure 15] Figure for explaining information amount [Figure 16] Flowchart showing reception determination process of update information notification signal [Figure 17] Flowchart showing reception determination process of error information notification signal [Figure 18] Flowchart showing operation determination process of simple display request [Figure 19] Figure for explaining switching to simple display [Figure 20] Figure for explaining switching to simple display [Figure 21] Figure for explaining switching to simple display [Figure 22] Figure for explaining display of meter device [Figure 23] Flowchart showing operation determination process of detailed display request [Figure 24] Figure for explaining display of reason for inability to switch to detailed display [Figure 25] Figure for explaining switching to detailed display [Figure 26] Flowchart showing operation determination process of cancellation request [Figure 27] Figure for explaining display of message indicating reason for discarding cancellation request [Figure 28] Figure for explaining display of cancellation information [Figure 29] Figure for explaining display of cancellation information [Figure 30] Flowchart showing display request determination process of update information when vehicle power is off [Figure 31] Flowchart showing vehicle power off determination process during software update

Mode for Carrying Out the Invention

[0010] Hereinafter, one embodiment will be described with reference to the drawings. The software update system 1 is configured so that the vehicle system 2 installed in the vehicle and the server 3 (corresponding to a distribution device) which functions as an OTA (Over The Air) center can communicate data via a communication network 4. The vehicle system 2 is configured so that the software update device (hereinafter referred to as a central gateway (CGW)) 5 which functions as an OTA master, a number of ECUs 6, and the HMI (Human Machine Interface) control unit (hereinafter referred to as an HCU (HMI Control Unit)) 7 (corresponding to an update information notification device) can communicate data via an in-vehicle network 8.

[0011] The in-vehicle network 8 is, for example, CAN (Controller Area Network) (registered trademark). The in-vehicle network 8 may also be FLEXRAY (registered trademark), CXPI (Clock Extension Peripheral Interface) (registered trademark), Ethernet (registered trademark), etc. In this embodiment, a configuration in which four ECUs 6 are connected to the in-vehicle network 8 is shown as an example, but the number of ECUs 6 connected to the in-vehicle network 8 is arbitrary. Also, the number of in-vehicle networks 8 is arbitrary.

[0012] ECU6s include devices that control the drivetrain, ADAS (Advanced Driving Assistant System) systems, and multimedia systems, and may become eligible for software updates due to software modifications or functional improvements. Software includes not only programs that instruct the computer on the processing procedures necessary for it to operate, but also files, data, libraries, etc. that are referenced when the program is executed. ECU6s are classified into two types based on the configuration of their software storage area: ECUs with dual-side memory (two sides for software storage) and ECUs with single-side memory (one side for software storage). Dual-side memory is sometimes called dual-bank memory, and single-side memory is sometimes called single-bank memory. HCU7s may also be eligible for software updates.

[0013] A vehicle-mounted communication device (hereinafter referred to as DCM (Data Communication Module)) 9 is connected to CGW5. DCM9 can receive update packages distributed from server 3 by wirelessly connecting to server 3 via communication network 4. The update package distributed from server 3 includes specification data that can identify the target ECU6 to be updated, and update software to be written to the target ECU6. The update software corresponds to so-called all data when the software is completely rewritten, and to so-called differential data when the software is partially rewritten. When DCM9 obtains the update package distributed from server 3, it transfers the obtained update package to CGW5.

[0014] When an update package is transferred from the DCM9, the CGW5 extracts specification data and update software from the transferred update package, identifies the target ECU6 from the extracted specification data, sends the extracted update software to the target ECU6, and also sends an update instruction to the target ECU6, causing the target ECU6 to perform the software update. In other words, the target ECU6 receives the update software and the update instruction from the CGW5, and performs the software update by writing the update software to its storage area. The manner in which the update software acquired from the server 3 via the communication network 4 is written to the target ECU6 is called wireless reprogramming. In this embodiment, a configuration in which the DCM9 is located separately from the CGW5 is illustrated, but a configuration in which the functions of the DCM9 are integrated into the CGW5 is also possible.

[0015] Furthermore, a reprogramming tool 10 (corresponding to a distribution device) is detachably connected to the in-vehicle network 8. While connected to the in-vehicle network 8, the reprogramming tool 10 distributes the update software to the target ECU 6 and sends update instructions to the target ECU 6, causing the target ECU 6 to perform the software update. That is, the target ECU 6 receives the update software and update instructions from the reprogramming tool 10 and performs the software update by writing the update software to its storage area. The manner in which the update software acquired from the reprogramming tool 10 without going through the communication network 4 is written to the target ECU 6 is called wired reprogramming. In this embodiment, a configuration in which the reprogramming tool 10 is directly connected to the in-vehicle network 8 is illustrated, but a configuration in which the reprogramming tool 10 is connected to the in-vehicle network 8 via the CGW 5 is also acceptable.

[0016] The software update process has several phases: a campaign notification phase in which Server 3 recommends updating the vehicle system 2; a download phase in which CGW5 obtains the update package from Server 3; an installation phase in which CGW5 instructs the target ECU 6 to write the update software, causing the ECU 6 to write the update software to its storage area; and an activation phase in which CGW5 instructs the target ECU 6 to activate the update software, causing the ECU 6 to activate the update software. Each phase progresses as the driver appropriately accepts each phase. CGW5 manages the software update status during each of these phases—campaign notification, download, installation, and activation—and sends an update information notification signal to HCU 7 indicating the update status.

[0017] Update information refers to various types of information related to software updates, including information that can identify the progress of the software update and the functions that will be subject to usage restrictions during the software update. For example, in the campaign notification phase, this would include the file name, file size, and function description of the updated software. For example, in the download phase, this would include information indicating the start of the download, information indicating that the download is in progress, information indicating the progress of the download as a percentage of the planned download amount, information notifying the reason for any interruption if the download is interrupted for any reason, and information indicating the completion of the download. For example, in the installation phase, this would include information indicating the start of the installation, information indicating that the installation is in progress, information indicating the progress of the installation as a percentage of the planned installation amount, information notifying the reason for any interruption if the installation is interrupted for any reason, and information indicating the completion of the installation. For example, during the activation phase, this could include information indicating the start of activation, information indicating that activation is in progress, information showing the percentage of activated data relative to the amount of data scheduled to be activated as part of the activation progress, information notifying the reason for any interruption if activation is interrupted for any reason, and information indicating the completion of activation. Furthermore, if, for example, software related to driving control is being updated, this could include information that identifies functions related to driving control that are subject to usage restrictions.

[0018] CGW5 sends an update information notification signal to HCU7 at predetermined intervals. Furthermore, if an error occurs during the software update, CGW5 sends an error information notification signal to HCU7 as an interrupt.

[0019] The HCU7 is connected to a Center Information Display (CID) 11 (equivalent to a notification device), a meter unit 12 (equivalent to a notification device), and a Head-Up Display (HUD) 13 (equivalent to a notification device). The CID is located in front of the driver's seat and displays, for example, maps used for navigation functions, camera images from parking assist functions, audio information, and air conditioning information. The meter unit 12 is located in front of the driver's seat and includes various indicators, displaying vehicle speed, shift position, fuel level, warnings, etc. The HUD 13 projects information such as vehicle speed, shift position, and route guidance onto the front windshield as a virtual image in front of the driver's seat. In addition, external devices 14 can communicate data with the vehicle system 2 by wirelessly connecting to the DCM 9 via a communication network 4. External devices 14 are portable information terminals such as smartphones and tablet devices that can be carried by occupants and can be used by occupants outside the vehicle.

[0020] When the HCU7 receives an update notification signal from the CGW5 in conjunction with a software update, it can display the update information based on that notification signal on the CID11 or the meter device 12. Displaying the update information on the meter device 12 also includes notifying the update information by lighting, flashing, or turning off an indicator. Furthermore, if the external device 14 and the DCM9 are wirelessly connected via the communication network 4, and the external device 14 and the vehicle system 2 are capable of data communication, the HCU7 can display the update information based on the update notification signal from the CGW5 in conjunction with a software update on the external device 14.

[0021] By displaying the update information on the CID 11 and the meter device 12, occupants can check various information regarding the software update while inside the vehicle. Furthermore, if the update information is displayed on the external device 14 while the occupants are using the external device 14 outside the vehicle, occupants can check various information regarding the software update even while outside the vehicle. In this embodiment, a configuration in which the update information is displayed on the CID 11, the meter device 12, and the external device 14 is illustrated, but the update information may also be displayed on the HUD 13.

[0022] The HCU7 is connected to an input unit 15 that can be operated by the occupant. The input unit 15 is, for example, the touch panel of the CID 11, the touch panel of the external device 14, or the steering wheel switches located on the steering wheel. When the input unit 15 detects an operation input from the occupant, it sends an operation input detection signal to the HCU7. The occupant can perform operation inputs regarding update information using the input unit 15. For example, if a consent screen asking for consent to download is displayed after a campaign notification, the occupant can perform an operation input to confirm whether or not to consent to the download. For example, if a consent screen asking for consent to install is displayed after the download, the occupant can perform an operation input to confirm whether or not to consent to the installation. For example, if a consent screen asking for consent to activate is displayed after installation, the occupant can perform an operation input to confirm whether or not to consent to the activation.

[0023] As shown in Figure 2, the HCU7 comprises a control unit 16 and a CAN communication unit 17. The control unit 16 is mainly composed of a microcomputer having a CPU (Central Processing Unit), ROM (Read Only Memory), RAM (Random Access Memory), and I / O (Input / Output). The control unit 16 executes processing corresponding to a control program stored in a non-transitional physical storage medium, thereby controlling the overall operation of the HCU7. The CAN communication unit 17 controls the transmission and reception of CAN signals with the in-vehicle network 8. The HCU7 is connected to a battery power supply (+B) supplied from the vehicle battery and can operate even when the vehicle power is off.

[0024] The control unit 16 comprises an update information acquisition unit 16a, an occupant status identification unit 16b, a vehicle status identification unit 16c, an operation input identification unit 16d, and a display control unit 16e (corresponding to a notification control unit). Each of these units 16a to 16e executes an update information notification program.

[0025] When the update information acquisition unit 16a receives an update information notification signal from CGW5, it acquires update information based on the received update information notification signal.

[0026] The occupant status identification unit 16b identifies the occupant status, which indicates the state of the occupants. When the occupant status identification unit 16b receives an occupant status notification signal, such as the result of analyzing an image captured by an image sensor that photographs the interior of the vehicle, the detection result of a seat sensor that detects seating, the detection result of a seat belt sensor that detects seat belt fastening, or the detection result of a biosensor that detects living beings, it identifies the occupant status based on the received occupant status notification signal. The occupant status identification unit 16b identifies the occupant status, such as whether the occupant is the driver only, whether the occupant is both the driver and a passenger, whether the occupant is only a passenger, whether the occupant is absent from the vehicle, whether the occupant has boarded, or whether the occupant has disembarked.

[0027] The vehicle status identification unit 16c identifies the vehicle status, which indicates the state of the vehicle. When the vehicle status identification unit 16c receives a vehicle status notification signal, such as the on / off state of the ignition signal, the on / off state of the accessory signal, or the on / off state of the automatic driving function, it identifies the vehicle status based on the received vehicle status notification signal. The vehicle status identification unit 16c identifies the vehicle status, such as whether the vehicle is running, stopped, or parked, or whether it is in automatic driving or manual driving mode. In this embodiment, an engine-powered vehicle is assumed, and a configuration is shown in which the vehicle is running or parked based on the on / off state of the ignition signal. However, if an electric vehicle is assumed, the vehicle may be running or parked based on the on / off state of the EV (Electric Vehicle) system.

[0028] The operation input identification unit 16d identifies the operator's operation input. When the operation input identification unit 16d receives an operation input detection signal from the operation input unit 15, it identifies the operator's operation input based on the received operation input detection signal.

[0029] The display control unit 16e determines the display mode of the update information based on the results of the occupant status identification unit 16b, the vehicle status identification unit 16c, and the operation input identification unit 16d. That is, the display control unit 16e does not display the update information in a uniform display mode, but rather displays it in different display modes depending on the occupant status, vehicle status, and the status of the occupant's operation input. Once the display control unit 16e has determined the display mode of the update information, it transmits a display instruction signal to the CID 11 or meter device 12, causing the CID 11 or meter device 12 to display the update information according to the determined display mode. Furthermore, if the vehicle system 2 and the external device 14 are capable of data communication, once the display control unit 16e has determined the display mode of the update information, it transmits a display instruction signal from the DCM 5 to the external device 14, causing the external device 14 to display the update information according to the determined display mode.

[0030] The display method of update information will now be explained. As shown in Figure 3, the display control unit 16e maintains a case classification table that classifies cases based on occupant status, vehicle status, and occupant operation input. The display control unit 16e identifies the applicable case based on the identification results of the occupant status identification unit 16b, the vehicle status identification unit 16c, and the operation input identification unit 16d. For example, if the only occupant in the vehicle is the driver, the vehicle is being driven manually, and there is operation input to CID 11, etc., the display control unit 16e identifies case 1-1. Also, for example, if the occupants in the vehicle are the driver and a passenger, the vehicle is parked, the accessories are off, and a predetermined time has elapsed since the ignition was turned off, the display control unit 16e identifies case 2-10.

[0031] The display control unit 16e pre-defines the content of the update information display format for each case classified by the case classification table, as shown in Figures 4 to 9. The content of the update information display format includes the display pattern for each phase of campaign notification, download, installation, and activation, the display priority, operation priority, and amount of displayed information when the software update targets an important function, and the display priority, operation priority, and amount of displayed information when the software update targets a non-important function.

[0032] As shown in Figure 10, the display control unit 16e maintains a display pattern table showing display patterns 1 to 5, and sets the corresponding device to either enabled or disabled. Display patterns 1 to 5 are the enabled or disabled patterns for the CID 11, meter device 12, HUD 13, and external device 14, respectively, as shown in Figures 11 to 12. The display control unit 16e displays update information on devices that are set to enabled, and does not display update information on devices that are set to disabled. Since display patterns 1, 3, and 4 enable multiple devices, selecting display patterns 1, 3, or 4 will display update information on multiple devices.

[0033] As shown in Figure 13, the display control unit 16e sets one of three priority levels (1 to 3) as the display priority. Priority 1 means "always display", priority 2 means "display if display is possible", and priority 3 means "do not display even if display is possible".

[0034] As shown in Figure 14, the display control unit 16e sets one of four priority levels (1 to 4) as the operation priority. Priority 1 means "only the driver can operate," priority 2 means "passengers can operate under certain conditions even if the driver is present," priority 3 means "passengers can operate even without the driver (for example, purchased apps and free apps can be used)," and priority 4 means "neither the driver nor any passenger can operate."

[0035] As shown in Figure 15, the display control unit 16e sets one of the information quantities 1 to 4 as the amount of information to be displayed. Information quantity 1 is "detailed explanation", information quantity 2 is "brief explanation", information quantity 3 is "icons and diagrams", and information quantity 4 is "none".

[0036] If the display control unit 16e identifies Case 1-1, for example, when the only occupant in the vehicle is the driver, the vehicle is being driven manually, and there is an operation input to the CID 11, then in the campaign notification phase, it selects display pattern 1 to enable the CID 11 and external device 14, while disabling the meter device 12 and HUD 13. In other words, the display control unit 16e displays update information related to the campaign notification on the CID 11 and external device 14. In the download phase, the display control unit 16e selects display pattern 5 to enable the CID 11, while disabling the meter device 12, HUD 13, and external device 14. In other words, the display control unit 16e displays update information related to the download on the CID 11. In the installation phase, the display control unit 16e selects display pattern 4 to enable the CID 11 and meter device 12, while disabling the HUD 13 and external device 14. In other words, the display control unit 16e displays update information related to the installation on the CID 11 and meter device 12. In the activation phase, the display control unit 16e enables the CID 11 and meter device 12 by selecting display pattern 4, while disabling the HUD 13 and external device 14. In other words, the display control unit 16e displays activation update information on the CID 11 and meter device 12.

[0037] Furthermore, if the display control unit 16e identifies case 1-1, for example, and the target of the software update is an important function, it sets the display priority to priority 2, the operation priority to priority 4, and the amount of displayed information to one of information amounts 1 to 3.

[0038] In this manner, the display control unit 16e identifies the relevant case according to the occupant status, vehicle status, and occupant's operation input, and displays the updated information according to the predefined display mode based on the identified case.

[0039] For example, when comparing Case 1-1, where the vehicle is being driven manually, with Case 1-3, where the vehicle is being driven autonomously, the download phase is defined as follows: display pattern 5 in Case 1-1 and display pattern 4 in Case 1-3. This is based on the understanding that displaying update information on the meter device 12 while the vehicle is being driven manually may interfere with the driver's operation, but displaying update information on the meter device 12 while the vehicle is being driven autonomously will not cause any problems.

[0040] Similarly, when comparing Case 1-1 and Case 1-3, for example, the priority of operations for software updates of important functions is defined as priority 4 in Case 1-1 and priority 1 in Case 1-3. This is based on the fact that allowing operations while the vehicle is being driven manually may interfere with the driver's driving, but allowing operations while the vehicle is being driven autonomously will not cause any problems.

[0041] For example, when comparing Case 1-1, where the vehicle is being driven manually, with Case 1-9, where the vehicle is parked and the driver is getting out of the vehicle, the display priority for software updates of important functions is defined as priority 2 in Case 1-1 and priority 1 in Case 1-9. This is intended to indicate that displaying update information is not mandatory when the vehicle is being driven manually, but it is mandatory when the vehicle is parked and the driver is getting out of the vehicle.

[0042] For example, when comparing Case 1-1, where the vehicle is in motion under manual control, with Case 1-5, where the vehicle is stationary, the amount of information displayed for software updates of non-essential functions may not be defined in Case 1-1, while priorities 1, 2, and 3 may be defined in Case 1-5. This definition is based on the fact that displaying a large amount of information while the vehicle is in motion under manual control may interfere with the driver's operation, but displaying a large amount of information while the vehicle is stationary does not cause any problems.

[0043] Next, the operation of the above configuration will be explained with reference to Figures 16 to 31. Here, the process of determining the display method of the update information based on the results of identifying the occupant status and the vehicle status, the process of determining the display method of the update information based on the results of identifying the operation input, and the process of displaying the update information when the vehicle power is turned off will be explained in order.

[0044] (1) A process to determine the display method of the update information based on the results of identifying the occupant status and the vehicle status (see Figures 16 to 17). Here, the process of determining whether an update information notification signal has been received and the process of determining whether an error information notification signal has been received will be explained in order.

[0045] (1-1) Reception detection process for update information notification signal (see Figure 16) The control unit 16 performs a reception determination process for the update information notification signal at predetermined intervals. When the control unit 16 starts the reception determination process for the update information notification signal, it determines whether or not it has received an update information notification signal from CGW5 (S101). If the control unit 16 determines that it has not received an update information notification signal (S101: NO), it terminates the reception determination process for the update information notification signal.

[0046] When the control unit 16 determines that it has received an update information notification signal (S101: YES), it acquires update information based on the received update information notification signal (S102, corresponding to the update information acquisition procedure). The control unit 16 identifies the occupant status based on the occupant status notification signal (S103, corresponding to the occupant status identification procedure). The control unit 16 identifies the vehicle status based on the vehicle status notification signal (S104, corresponding to the vehicle status identification procedure). The control unit 16 identifies the occupant's operation input based on the operation input detection signal (S105, corresponding to the operation input identification procedure).

[0047] The control unit 16 determines the display method of the update information based on the results of identifying the occupant status, the vehicle status, and the occupant's operation input (corresponding to S106, the notification method determination procedure). That is, the control unit 16 selects the appropriate case by referring to the case classification table shown in Figure 3. Once the control unit 16 has selected the appropriate case, it transmits a display instruction signal to the appropriate device according to the selected case, causing the update information to be displayed on the appropriate device (corresponding to S107, the notification control procedure), and terminates the update information notification signal reception determination process.

[0048] The control unit 16 identifies Case 1-1 by, for example, identifying "driver only" as the result of identifying the occupant status, identifying "vehicle in motion and being driven manually" as the result of identifying the vehicle status, and identifying "operation input made" as the result of identifying the occupant's operation input. The control unit 16 then selects display pattern 1, for example, if it is the campaign notification phase, according to the display mode corresponding to Case 1-1 shown in Figure 4, and displays the updated information regarding the campaign notification on the CID 11 and the external device 14. In other words, the driver can check the updated information regarding the campaign notification on the CID 11 and the external device 14.

[0049] When transitioning from the campaign notification phase to the download phase, the control unit 16 selects display pattern 5 and displays update information related to the download on the CID 11. That is, the driver can check the update information related to the download using the CID 11. When transitioning from the download phase to the installation phase, the control unit 16 selects display pattern 4 and displays update information related to the installation on the CID 11 and the meter device 12. That is, the driver can check the update information related to the installation using the CID 11 and the meter device 12. When transitioning from the installation phase to the activation phase, the control unit 16 continues to select display pattern 4 and displays update information related to the activation on the CID 11 and the meter device 12. That is, the driver can check the update information related to the activation using the CID 11 and the meter device 12.

[0050] The above example illustrates the case where Case 1-1 is continued from the campaign notification phase to the activation phase. However, if the control unit 16 identifies a change in occupant status, vehicle status, or occupant operation input during the period from the campaign notification phase to the activation phase, it selects a new case corresponding to that change. The control unit 16 transmits a display instruction signal to the corresponding device according to the newly selected case, causing the update information to be displayed on the corresponding device. For example, if "driver only" is identified as the result of identifying the occupant status, "stationary" is identified as the result of identifying the vehicle status, and "operation input present" is identified as the result of identifying the occupant operation input, then a new case 1-5 is identified. The control unit 16 displays the update information on the corresponding device in the display mode corresponding to Case 1-5 shown in Figure 4. In other words, the control unit 16 switches from Case 1-1 to Case 1-5 and displays the update information on the corresponding device.

[0051] (1-2) Error information notification signal reception determination process (see Figure 17) The control unit 16 performs error information notification signal reception determination processing at predetermined intervals. When the control unit 16 starts the error information notification signal reception determination processing, it determines whether or not it has received an error information notification signal from CGW5 (S111). If the control unit 16 determines that it has not received an error information notification signal (S111: NO), it terminates the error information notification signal reception determination processing.

[0052] When the control unit 16 determines that it has received an error information notification signal (S111: YES), it acquires error information based on the received error information notification signal (S112). The control unit 16 identifies the occupant status based on the occupant status notification signal (S113). The control unit 16 identifies the vehicle status based on the vehicle status notification signal (S114). The control unit 16 identifies the occupant's operation input based on the operation input detection signal (S115).

[0053] The control unit 16 determines the display method of the error information based on the results of identifying the occupant status, the vehicle status, and the occupant's operation input (S116). That is, the control unit 16 selects the appropriate case by referring to the case classification table shown in Figure 3. When the control unit 16 selects the appropriate case, it transmits a display instruction signal to the appropriate device according to the selected case, causing the error information to be displayed on the appropriate device (S117), and then terminates the error information notification signal reception determination process.

[0054] (2) A process to determine the display method of the update information based on the result of the operation input (see Figures 18 to 29). Here, the operation determination process for the simplified display request, the operation determination process for the detailed display request, and the operation determination process for the cancellation request will be explained in order.

[0055] (2-1) Operation detection process for simplified display requests (see Figures 18 to 22) For example, a driver who wants a simplified display of update information performs an operation input for a simplified display request. The control unit 16 performs an operation determination process for a simplified display request at predetermined intervals while the update information is being displayed. When the control unit 16 starts the operation determination process for a simplified display request, it determines whether or not an operation input for a simplified display request has occurred based on the operation input detection signal from the operation input unit 15 (S201). If the control unit 16 determines that no operation input for a simplified display request has occurred (S201: NO), it terminates the operation determination process for a simplified display request.

[0056] When the control unit 16 determines that an operation input for a simplified display request has occurred (S201:YES), it determines whether or not the currently displayed updated information can be switched to a simplified display (S202). When the control unit 16 determines that the currently displayed updated information cannot be switched to a simplified display (S202:NO), it does not switch the currently displayed updated information to a simplified display and terminates the operation determination process for the simplified display request. When the control unit 16 determines that the currently displayed updated information can be switched to a simplified display (S202:YES), it switches the currently displayed updated information to a simplified display (S203) and terminates the operation determination process for the simplified display request.

[0057] As shown in Figure 19, when the control unit 16 determines that it is possible to switch to a simplified display while displaying update information such as a progress bar A1 as download status and a function description A2 as update function details on CID 11, it switches to a screen that displays only the progress bar A3 as update information and a group of menu buttons A4 as information unrelated to update information. The information unrelated to update information may be other than the group of menu buttons A4, and may be, for example, a map used for the navigation function, camera images from the parking assist function, audio information related to audio, or air conditioning information related to air conditioning.

[0058] Furthermore, as shown in Figure 20, the control unit 16 also operates in the case of multiple update software, displaying only the progress bars A3 and A5 as update information for each update software, and switching to a screen that displays the menu button group A4.

[0059] Furthermore, as shown in Figure 21, the control unit 16 may switch to a screen that displays the update button A6 blinking instead of the progress bar A3 as update information, and also displays the menu button group A4.

[0060] Furthermore, as shown in Figure 22, the control unit 16 may display indicators A7 to A9 on the meter device 12, and for indicators A8 and A9 corresponding to the function whose software is being updated, it may also display the remaining time until the software update is completed.

[0061] (2-2) Operation determination process for detailed display request (see Figures 23 to 25) For example, a driver who wants to see detailed update information performs an operation input requesting detailed display. The control unit 16 performs an operation determination process for the detailed display request at predetermined intervals while the update information is being displayed. When the control unit 16 starts the operation determination process for the detailed display request, it determines whether or not an operation input for the detailed display request has occurred based on the operation input detection signal from the operation input unit 15 (S211). If the control unit 16 determines that no operation input for the detailed display request has occurred (S211: NO), it terminates the operation determination process for the detailed display request.

[0062] When the control unit 16 determines that an operation input for a detailed display request has occurred (S211: YES), it determines whether or not it is possible to switch the currently displayed update information to a detailed display (S212). When the control unit 16 determines that it is not possible to switch the currently displayed update information to a detailed display (S212: NO), it does not switch the currently displayed update information to a detailed display, displays a message indicating the reason why it is not possible to switch to a detailed display (S213), and terminates the operation determination process for the detailed display request.

[0063] If the control unit 16 determines that it is possible to switch the currently displayed update information to a detailed display (S212: YES), it identifies the occupant status based on the occupant status notification signal (S214), identifies the vehicle status based on the vehicle status notification signal (S215), identifies the occupant's operation input based on the operation input detection signal (S216), and determines the display mode of the update information based on the results of identifying the occupant status, the vehicle status, and the occupant's operation input (S217). The control unit 16 switches the currently displayed update information to a detailed display according to the determined display mode (S218), and terminates the operation determination process for the detailed display request.

[0064] As shown in Figure 24, the control unit 16 displays the updating button A6 as update information and the menu button group A4 in CID 11. If it determines that it is not possible to switch to detailed display, it does not switch the displayed update information to detailed display and displays the message A10, "Detailed display is not possible because the vehicle is in motion," indicating the reason why it is not possible to switch to detailed display.

[0065] As shown in Figure 25, when the control unit 16 displays the updating button A6 as update information and the menu button group A4 on CID 11, and determines that it is possible to switch to the detailed display, it switches to a screen that displays, for example, a progress bar A1 as the download status and a function description A2 as the update function details.

[0066] (2-3) Operation determination process for cancellation requests (see Figures 26 to 29) For example, a driver who wishes to cancel a software update performs an operation input to cancel the update. The control unit 16 performs an operation determination process for canceling the update at predetermined intervals while displaying the update information. When the control unit 16 starts the operation determination process for canceling the update, it determines whether or not an operation input for canceling the update has occurred based on the operation input detection signal from the operation input unit 15 (S221). If the control unit 16 determines that no operation input for canceling the update has occurred (S221: NO), it terminates the operation determination process for canceling the update.

[0067] When the control unit 16 determines that an operation input for a cancellation request has occurred (S221:YES), it determines whether the target of the cancellation request is an important function or not (S222). When the control unit 16 determines that an operation input for a cancellation request has occurred (S221:YES), it determines whether the target of the software update for the cancellation request is an important function or not (S222).

[0068] If the control unit 16 determines that the software update target of the cancellation request is an important function (S222: YES), it discards the cancellation request (S223). The control unit 16 displays a message indicating the reason for discarding the cancellation request (S224) and terminates the operation determination process for the cancellation request.

[0069] If the control unit 16 determines that the target of the software update for which the cancellation request is made is not an important function (S222: NO), it determines whether or not the update information is being displayed in a simplified format (S225). If the control unit 16 determines that the update information is being displayed in a simplified format (S225: YES), it displays cancellation information indicating the cancellation of the software update on the relevant device (S226), and terminates the operation determination process for the cancellation request.

[0070] If the control unit 16 determines that the update information is not being displayed in a simplified format (S225: NO), it identifies the occupant status based on the occupant status notification signal (S227), identifies the vehicle status based on the vehicle status notification signal (S228), identifies the occupant's operation input based on the operation input detection signal (S229), and determines the display format of the update information based on the results of identifying the occupant status, the vehicle status, and the occupant's operation input (S230). The control unit 16 displays cancellation information indicating the cancellation of the software update on the corresponding device according to the determined display format (S231), and terminates the operation determination process for the cancellation request. In this case, if detailed display is possible based on the results of identifying the occupant status, the vehicle status, and the occupant's operation input, the control unit 16 displays the cancellation information in detail; otherwise, it displays the cancellation information in a simplified format.

[0071] As shown in Figure 27, the control unit 16 determines, for example, that an input of the cancel button A11 has occurred, and if it determines that the target of the software update for which the cancellation request is made is an important function, it cancels the cancellation request and displays a pop-up message A12 indicating the reason for canceling the cancellation request, stating, "This is a core function of the vehicle, so the software update cannot be canceled."

[0072] As shown in Figure 28, when the control unit 16 determines that the update information is being displayed in a simplified format, it causes the device to display cancellation information indicating that the software update has been canceled. The control unit 16 displays the cancellation information, for example, by graying out the update button A6.

[0073] As shown in Figure 29, when the control unit 16 determines that the update information is not being displayed in a simplified format, it determines the display format of the update information based on the results of the occupant status identification, the vehicle status identification, and the results of the occupant's operation input identification, and displays cancellation information indicating the cancellation of the software update on the corresponding device according to the determined display format. The control unit 16 displays message A13, which indicates that the software update has been canceled, saying, "Software update canceled. To resume, please press the "Resume" button."

[0074] (3) Processing to display update information when the vehicle power is turned off (see Figures 30 to 31). Here, the processing for determining whether a request to display update information is made when the vehicle power is turned off, and the processing for determining whether the vehicle power is turned off during a software update will be explained in order.

[0075] (3-1) Determination process for displaying update information when the vehicle power is off The control unit 16 performs a process to determine whether an update information display request is made when the vehicle power is turned off, at a predetermined interval. When the control unit 16 starts the process to determine whether an update information display request is made, it identifies the occupant status based on the occupant status notification signal (S301) and determines whether an occupant is present in the vehicle (S302). If the control unit 16 determines that an occupant is present in the vehicle (S302: YES), it terminates the process to determine whether an update information display request is made when the vehicle power is turned off.

[0076] If the control unit 16 determines that there are no occupants in the vehicle, that is, that there are no occupants (S302: NO), it identifies the occupant's operation input based on the operation input detection signal (S303) and determines whether an operation input indicating a request to display update information has occurred (S304). If it determines that no operation input indicating a request to display update information has occurred (S304: NO), it terminates the process of determining the request to display update information when the vehicle power is off.

[0077] The control unit 16 determines that an operation input indicating a request to display update information has occurred (S304: YES), and determines the display method of the update information based on the results of the occupant status identification and the results of the occupant operation input identification (S305). The control unit 16 displays the update information on the corresponding device according to the determined display method (S306), and terminates the update information display request determination process when the vehicle power is off.

[0078] (3-2) Vehicle power off detection process during software update The control unit 16 performs a vehicle power off determination process during a software update at predetermined intervals. When the control unit 16 starts the vehicle power off determination process during a software update, it determines whether or not the software is being updated (S311). If the control unit 16 determines that the software is not being updated (S311: NO), it terminates the vehicle power off determination process during a software update.

[0079] If the control unit 16 determines that the software is being updated (S311:YES), it identifies the vehicle status based on the vehicle status notification signal (S312) and determines whether the vehicle power is off or not (S313). If the control unit 16 determines that the vehicle power is not off (S313:NO), it terminates the vehicle power off determination process during the software update.

[0080] If the control unit 16 determines that the vehicle power is off (S313: YES), it continues to display the update information (S314) and terminates the vehicle power off determination process during the software update.

[0081] The above example illustrates a configuration in which the update information acquisition unit 16a, occupant status identification unit 16b, vehicle status identification unit 16c, operation input identification unit 16d, and display control unit 16e are located on the HCU7. However, the functions of each unit 16a to 16e may be distributed and located on separate devices. For example, an ECU for identifying occupant status, an ECU for identifying vehicle status, and an ECU for identifying occupant operation input may be located separately, and each of these ECUs may transmit the identification results to the HCU7. Alternatively, the functions of each unit 16a to 16e may be located on the CGW5.

[0082] According to the embodiment described above, the following effects can be obtained. In the HCU7, when it is determined that the vehicle power is off and there are no occupants in the vehicle, and an operation input indicating a request to display update information is identified, the display mode of the update information is determined more simply than when it is determined that there are occupants in the vehicle, and the update information is displayed according to the determined display mode. Rather than displaying the update information in a detailed display mode with a large amount of information, by displaying the update information in a simplified display mode with a small amount of information, update information regarding software updates can be displayed appropriately according to the scene.

[0083] When the vehicle's power is off and there are no occupants inside, if an operation input indicating a request to display update information is received, the update information can be displayed in a simpler format than when occupants are inside, thereby preventing unnecessary power consumption of the vehicle's battery.

[0084] Update information is now indicated by the indicator light being turned on, blinking, or off. This allows for a simple display of update information.

[0085] Update information can now be displayed on external devices outside the vehicle. This allows occupants outside the vehicle to be notified of the update information.

[0086] If the vehicle's power is turned off during a software update, the system will continue to notify occupants of the update information. Even if the vehicle's power is turned off during a software update, the update information can still be communicated to the occupants.

[0087] This disclosure includes, in addition to the claims, the following inventions: [1] An update information notification device (7) that notifies update information regarding software updates when the software of an electronic control device to be updated is updated by update software obtained from a distribution device, An update information acquisition unit (16a) that acquires the aforementioned update information, A crew status identification unit (16b) that identifies the crew status, which indicates the condition of the crew, A vehicle condition identification unit (16c) that identifies the vehicle condition, which indicates the state of the vehicle, An operation input identification unit (16d) that identifies the operator's operation input, The system includes a notification control unit (16e) that determines the notification method for the update information and causes the notification device to notify the update information according to the determined notification method, The notification control unit is an update information notification device that, when the vehicle power supply is turned off as determined by the vehicle status determination unit and the occupant status determination unit is determined to be absent from the vehicle, and an operation input indicating a request for notification of the update information is determined by the operation input determination unit, the notification method of the update information is determined more simply than when the occupant status determination unit is determined to be absent from the vehicle.

[0088] [2] The notification device includes an indicator, The notification control unit is an update information notification device as described in [1] that notifies the update information by lighting, flashing, or turning off the indicator.

[0089] [3] The notification device includes external equipment outside the vehicle, The notification control unit causes the update information to be notified from the external device when the vehicle status identification unit identifies that the vehicle power is off and the occupant status identification unit identifies that there are no occupants in the vehicle, and the operation input identification unit identifies an operation input indicating a request for notification of the update information. (1) or (2)

[0090] [4] The notification control unit continues to notify the update information when the vehicle status identification unit determines that the vehicle power is off during the software update, as described in any one of the items [1] to [3].

[0091] This disclosure is described in accordance with the embodiments, but is not limited to those embodiments or structures. This disclosure also includes various modifications and variations within the equivalence range. In addition, various combinations and forms, as well as other combinations and forms that include only one, more, or fewer of those elements, fall within the scope and concept of this disclosure.

[0092] The control unit and its method described herein may be implemented by a dedicated computer provided by configuring a processor and memory programmed to perform one or more functions embodied by a computer program. Alternatively, the control unit and its method described herein may be implemented by a dedicated computer provided by configuring a processor by one or more dedicated hardware logic circuits. Alternatively, the control unit and its method described herein may be implemented by one or more dedicated computers configured by a combination of a processor and memory programmed to perform one or more functions and a processor configured by one or more hardware logic circuits. Furthermore, the computer program may be stored as instructions executed by the computer on a computer-readable non-transitional tangible recording medium. [Explanation of Symbols]

[0093] In the drawing, 1 is the software update system, 2 is the vehicle system, 3 is the server (distribution device), 7 is the HCU (update information notification device), 6 is the ECU (electronic control unit), 10 is the repro tool (distribution device), 11 is the CID (notification device), 12 is the meter device (notification device), 13 is the HUD (notification device), 14 is the mobile information terminal (notification device), 16 is the control unit, 16a is the update information acquisition unit, 16b is the occupant status identification unit, 16c is the vehicle status identification unit, 16d is the operation input identification unit, and 16e is the display control unit (notification control unit).

Claims

1. An update information notification device (7) that notifies update information regarding software updates when the software of an electronic control device to be updated is updated by update software obtained from a distribution device, The update information acquisition unit (16a) acquires the aforementioned update information, A crew status identification unit (16b) that identifies the crew status, which indicates the condition of the crew, A vehicle condition identification unit (16c) that identifies the vehicle condition, which indicates the state of the vehicle, An operation input identification unit (16d) that identifies the operator's operation input, The system includes a notification control unit (16e) that determines the notification method for the update information and causes the notification device to notify the update information according to the determined notification method, The notification control unit is an update information notification device that, when the vehicle power supply is turned off as determined by the vehicle status determination unit and the occupant status determination unit is determined to be absent from the vehicle, and an operation input indicating a request for notification of the update information is determined by the operation input determination unit, the notification method of the update information is determined more simply than when the occupant status determination unit is determined to be absent from the vehicle.

2. The notification device includes an indicator, The update information notification device according to claim 1, wherein the notification control unit notifies the update information by lighting, flashing, or turning off the indicator.

3. The notification device includes external equipment outside the vehicle, The update information notification device according to claim 1, wherein the notification control unit causes the update information to be notified from the external device when the vehicle status determination unit determines that the vehicle power is off and the occupant status determination unit determines that there are no occupants in the vehicle, and the operation input determination unit determines that an operation input indicating a request for notification of the update information is determined.

4. The update information notification device according to claim 1, wherein the notification control unit continues to notify the update information when the vehicle status identification unit determines that the vehicle power is off during the software update.

5. Notification devices (11-14) that notify update information regarding software updates when the software of the electronic control unit to be updated is updated by update software obtained from a distribution device, A vehicle system (2) comprising an update information notification device (7) that notifies the update information from the notification device, The update information notification device is, The update information acquisition unit (16a) acquires the aforementioned update information, A crew status identification unit (16b) that identifies the crew status, which indicates the condition of the crew, A vehicle condition identification unit (16c) that identifies the vehicle condition, which indicates the state of the vehicle, An operation input identification unit (16d) that identifies the operator's operation input, The system includes a notification control unit (16e) that determines the notification method for the update information and causes the notification device to notify the update information according to the determined notification method, The notification control unit is a vehicle system that, when the vehicle power is turned off as determined by the vehicle status determination unit and the occupant status determination unit is determined to be absent from the vehicle, and an operation input indicating a request for notification of the update information is determined by the operation input determination unit, determines the notification method of the update information more simply than when the occupant status determination unit is determined to be absent from the vehicle.

6. The control unit (16) of the update information notification device (7), which notifies update information regarding the software update when the software of the electronic control device to be updated is updated by update software obtained from the distribution device, The procedure for obtaining the aforementioned update information, A procedure for identifying the crew status, which indicates the condition of the crew, A procedure for identifying the vehicle's condition, which indicates the state of the vehicle, Operation input identification procedure to identify crew member operation input, When the vehicle power is turned off according to the vehicle status identification procedure and the occupant status identification procedure is determined, and an operation input indicating a request for notification of the update information is determined according to the operation input identification procedure, a notification manner determination procedure for determining the notification manner of the update information is determined in a simpler manner than when the occupant status identification procedure is determined to determine that an occupant is present in the vehicle; An update information notification program that executes a notification control procedure to cause the notification device to notify the update information in accordance with the notification manner determined by the notification manner determination procedure.

Images