Software management device, program

Claims

1. A processing unit (57b) that performs processing related to updating software used in a vehicle configured to enable autonomous driving, A software management device comprising a communication circuit (57c) for the processing unit to communicate with other devices, The aforementioned processing unit, The communication circuit receives update information for the software used in the vehicle, The state of the vehicle is obtained based on the signal received via the communication circuit, Based on the vehicle's condition and the update information, it is determined whether the software update can be initiated. Upon determining that the software update can be initiated, the system is configured to initiate the software update and to perform the following actions: The software used in the vehicle includes the software for the monitoring subsystem in the autonomous driving system. The aforementioned processing unit, If the software to be updated is software for the monitoring subsystem, determine whether the monitoring subsystem is inactive or can be shut down. A software management device that initiates a software update for the monitoring subsystem, even if the vehicle is in motion, if the monitoring subsystem is inactive or can be stopped.

2. The aforementioned processing unit, The system obtains whether the related functions, which are functions related to the software to be updated, are currently in use. The software management device according to claim 1, configured to initiate a software update when the aforementioned related function is not being used.

3. The software management device according to claim 1, which is configured to disable functions related to the software during the software update process.

4. The software used in the vehicle includes software for multiple subsystems for autonomous driving, The aforementioned processing unit, The software management device according to claim 1, which is configured to disable the automatic driving function or require the user to monitor the surroundings when updating the software of one of the multiple subsystems.

5. The aforementioned processing unit, The software management device according to claim 3 or 4, which is configured to perform a process to present to the user information indicating the length of time that a function will be unavailable if such function becomes temporarily unavailable due to the software update.

6. The vehicle includes a storage medium (571) that stores a list of software whose updates are prohibited while the vehicle is in motion, The aforementioned processing unit, If the software to be updated is included in the list, the software update will not be started while the vehicle is in motion. The software management device according to claim 1, configured to start updating the software while the vehicle is running if the software to be updated is not included in the list.

7. The vehicle includes a storage medium (571) that stores a list of software that is permitted to be updated while the vehicle is in motion, The aforementioned processing unit, If the software to be updated is included in the list, the software update will be started even if the vehicle is in motion. The software management device according to claim 1, which is configured to postpone the software update while the vehicle is running if the software to be updated is not included in the list.

8. The software used in the aforementioned Vehicle includes the software for autonomous driving, The aforementioned software for autonomous driving includes software for performing minimum-risk operations, The aforementioned processing unit, The software management device according to claim 1, wherein if the software to be updated is related to part or all of the software for performing the minimum-risk operation, the device is configured not to start updating the software during automated driving.

9. The software used in the aforementioned Vehicle includes the software for autonomous driving, The software for autonomous driving includes software for performing DDT fallback, The aforementioned processing unit, The software management device according to claim 1, wherein if the software to be updated is related to part or all of the software for performing the DDT fallback, the device is configured not to start updating the software during automated operation.

10. The software used in the aforementioned vehicle includes Autonomous Emergency Braking (AEB) software. The aforementioned processing unit, The software management device according to claim 1, wherein if the software to be updated relates to part or all of the software for the automatic emergency braking, the device is configured not to start updating the software while the vehicle is in motion.

11. The aforementioned processing unit, Receive test software delivered from the server, The aforementioned test software is installed and run on the vehicle's computer. The system transmits data indicating the operation of the test software to the server. The server receives data indicating whether or not the test software has been adopted as official software. The software management device according to claim 1, which is configured to continue using some or all of the installed test software if the test software is officially adopted.

12. The aforementioned update information includes information indicating whether it is a mandatory or optional update. The aforementioned processing unit, Upon receiving the aforementioned update information indicating that it is an optional update, the system will request the user's consent to the software update, The software management device according to claim 1, which is configured to perform the software update process without requesting consent from the user when it receives update information indicating that it is a mandatory update.

13. The software used in the vehicle includes the software for autonomous driving, The aforementioned update information includes information indicating the urgency of the update. The aforementioned processing unit, If, during autonomous driving, the system receives update information indicating that there is an urgent update for the software used for autonomous driving, it will execute a process to autonomously drive the vehicle to a parking area. The software management device according to claim 1, which is configured to initiate an emergency update of the software upon the vehicle stopping in the aforementioned parking area.

14. A processing unit (57b) that performs processing related to updating software used in a vehicle configured to enable autonomous driving, A software management device comprising a communication circuit (57c) for the processing unit to communicate with other devices, The aforementioned processing unit, The communication circuit receives update information for the software used in the vehicle, The state of the vehicle is obtained based on the signal received via the communication circuit, Based on the vehicle's condition and the update information, it is determined whether the software update can be initiated. Upon determining that the software update can be initiated, the system is configured to initiate the software update and to perform the following actions: The software used in the aforementioned Vehicle includes the software for autonomous driving, The aforementioned update information includes information indicating the urgency of the update. The aforementioned processing unit, If, during autonomous driving, the system receives update information indicating that there is an urgent update for the software used for autonomous driving, it will execute a process to autonomously drive the vehicle to a parking area. A software management device configured to initiate an emergency update of the software upon the vehicle stopping in the aforementioned parking area.

15. The software used in the vehicle includes the software for autonomous driving, The aforementioned update information includes information indicating the urgency of the update. The aforementioned processing unit, The software management device according to claim 1, which is configured to perform a request for handover of driving operations when it receives update information indicating that there is an urgent update for the software for autonomous driving during autonomous driving.

16. A processing unit (57b) that performs processing related to updating software used in a vehicle configured to enable autonomous driving, A software management device comprising a communication circuit (57c) for the processing unit to communicate with other devices, The aforementioned processing unit, The communication circuit receives update information for the software used in the vehicle, The state of the vehicle is obtained based on the signal received via the communication circuit, Based on the vehicle's condition and the update information, it is determined whether the software update can be initiated. Upon determining that the software update can be initiated, the system is configured to initiate the software update and to perform the following actions: The software used in the aforementioned Vehicle includes the software for autonomous driving, The aforementioned update information includes information indicating the urgency of the update. The aforementioned processing unit, A software management device configured to issue a request for handover of driving operations when it receives update information indicating that there is an urgent update for the software for autonomous driving during autonomous driving.

17. A program for causing a computer to perform software management related to software updates used in a vehicle configured to enable autonomous driving, To the aforementioned computer, Receiving software update information for the vehicle via a communication circuit, The state of the vehicle is obtained based on the signal received via the communication circuit, Based on the vehicle's condition and the update information, it is determined whether the software update can be initiated. Upon determining that the software update can be initiated, the software update is initiated and the following is performed: The software used in the vehicle includes the software for the monitoring subsystem in the autonomous driving system. To the aforementioned computer, If the software to be updated is software for the monitoring subsystem, determine whether the monitoring subsystem is inactive or can be shut down, A program that causes the monitoring subsystem to start a software update for the monitoring subsystem, even if the vehicle is in motion, if the monitoring subsystem is inactive or can be stopped.

18. A program for causing a computer to perform software management relating to software updates used in a vehicle configured to enable autonomous driving, To the aforementioned computer, Receiving software update information for the vehicle via a communication circuit, The state of the vehicle is obtained based on the signal received via the communication circuit, Based on the vehicle's condition and the update information, it is determined whether the software update can be initiated. Upon determining that the software update can be initiated, the software update is initiated and the following is performed: The software used in the aforementioned Vehicle includes the software for autonomous driving, The aforementioned update information includes information indicating the urgency of the update. To the aforementioned computer, A program that, while in autonomous driving mode, receives update information indicating that there is an urgent update for the software used for autonomous driving, executes a process to autonomously drive the vehicle to a parking area, and upon stopping in the parking area, initiates the urgent update of the software.

19. A program for causing a computer to perform software management relating to software updates used in a vehicle configured to enable autonomous driving, To the aforementioned computer, Receiving software update information for the vehicle via a communication circuit, The state of the vehicle is obtained based on the signal received via the communication circuit, Based on the vehicle's condition and the update information, it is determined whether the software update can be initiated. Upon determining that the software update can be initiated, the software update is initiated and the following is performed: The software used in the aforementioned Vehicle includes the software for autonomous driving, The aforementioned update information includes information indicating the urgency of the update. To the aforementioned computer, A program that, when receiving update information indicating that there is an urgent update for the software used for autonomous driving during autonomous driving, causes the program to perform a request to take over driving operations.