Center device and app distribution method

Abstract

According to one embodiment of the present disclosure, in a center device 3, a plurality of verification apps are registered in a database 33a, and the priority of verification is set for each of the verification apps. The order of distribution of the verification apps to a vehicle 200 is determined according to the priority, and a distribution unit 109 distributes the verification apps to the vehicle, according to the determined order.

Description

Center device and application distribution method CROSS-REFERENCE TO RELATED APPLICATIONS

[0001] This application is based on Japanese Application No. 2024-51547, filed on March 27, 2024, the contents of which are incorporated herein by reference.

[0002] The present disclosure relates to a center device and method for distributing application programs to a plurality of vehicles.

[0003] For example, Patent Document 1 discloses a technology for providing mobility services in which a vehicle is accessed via a network, various applications are executed using the vehicle's functions and resources, and the service provider obtains the results of the execution.

[0004] Japanese Patent Application Laid-Open No. 2023-117140

[0005] A similar service may be envisioned, for example, where an application program under development is delivered to a vehicle, and the application program is executed without the knowledge of the vehicle occupants, and the execution results are acquired and used for further program development. Such an application program is called a "verification app."

[0006] In this case, various constraints are expected on the number of verification apps that can be distributed to one vehicle. Therefore, the vehicle to which the verification app is distributed must be selected taking into consideration the development status of each verification app, the above constraints, etc. The present disclosure has been made in consideration of the above circumstances, and its purpose is to provide a center device and an application distribution method that can efficiently distribute verification apps to multiple vehicles in accordance with various situations.

[0007] According to the center device of the present disclosure, a registration table is used to register multiple verification apps, and a verification priority is set for each of the verification apps. The order in which the verification apps are distributed to vehicles is determined based on the priorities, and the distribution unit distributes the verification apps to vehicles in the determined order. This configuration allows for the distribution of appropriately selected verification apps to vehicles based on, for example, the priority of the verification apps according to their development status, thereby improving development efficiency.

[0008] Furthermore, according to the center device of the present disclosure, information on verification apps that have already been distributed to vehicles is registered in a registration table. A data collection unit collects vehicle-related data from the vehicles, and a candidate selection unit selects vehicles that are candidates for distribution of the verification app based on the vehicle-related data. When selecting the required number of vehicles required for verification from the candidate distribution vehicles, the target vehicle selection unit preferentially selects vehicles to which the verification app has not been distributed as distribution target vehicles. This allows for faster verification of the verification app to be distributed to the vehicles.

[0009] The above and other objects, features, and advantages of the present disclosure will become more apparent from the following detailed description taken in conjunction with the accompanying drawings, in which: Fig. 1 is a diagram illustrating the overall configuration of an application verification system in a first embodiment; Fig. 2 is a functional block diagram illustrating the configuration of an in-vehicle device; Fig. 3 is a functional block diagram illustrating the configuration of a center device; Fig. 4 is a diagram illustrating an overview of the application verification system; Fig. 5 is a flowchart illustrating a process for reserving distribution of a verification application according to priority; Fig. 6 is a flowchart illustrating a distribution process of verification application A; Fig. 7 is a diagram illustrating an example of vehicles to which verification application A is distributed; Fig. 8 is a screen image of a terminal device illustrating the distribution state of vehicles present in each distribution area; Fig. 9 is a screen image of a terminal device illustrating the search state for vehicles that meet distribution conditions; Fig. 10 is a screen image of a terminal device illustrating the distribution conditions, priority, verification period, number of vehicles to be distributed, status, etc. of each verification application; Fig. 11 is a screen image of a terminal device illustrating the distribution conditions, priority, verification period, number of vehicles to be distributed, status, etc. of each verification application; FIG. 12 is a sequence diagram showing an example of communication between a center device and an in-vehicle device; FIG. 13 is a flowchart showing the process of reserving distribution in accordance with the required number of vehicles to which the verification app is to be distributed in the second embodiment; FIG. 14 is a diagram (part 1) showing a specific example of a vehicle that meets the distribution conditions of verification app C; FIG. 15 is a diagram showing a vehicle to which verification app C is to be distributed in accordance with the conditions shown in FIG. 14; FIG. 16 is a diagram (part 2) showing a specific example of a vehicle that meets the distribution conditions of verification app C; FIG. 17 is a diagram showing vehicles to which verification app C is to be distributed and vehicles that are in a distribution reservation state in accordance with the conditions shown in FIG. 16; FIG. 18 is a flowchart showing the distribution process of verification app C; and FIG. 19 is a diagram showing vehicles to which verification app C is to be distributed.

[0010] First Embodiment As shown in FIG. 1 , an application verification system 1 of this embodiment includes an in-vehicle device 2 and a center device 3. The in-vehicle device 2 is mounted on a vehicle 200 and serves as a control device that mediates between the vehicle 200 and the center device 3, collecting vehicle information and controlling the vehicle. As shown in FIG. 2 , the in-vehicle device 2 includes a control unit 11, a vehicle IF unit 12, a storage unit 13, and a communication unit 14. The control unit 11 includes a CPU 21, a ROM 22, a RAM 23, etc. The vehicle IF unit 12 acquires various pieces of information from various in-vehicle devices, for example, via an in-vehicle network. In the figure, examples of these are shown as CAN data and camera data. The camera data is data of images of the surroundings of the vehicle captured by a camera (not shown). The communication unit 14 communicates between the control unit 11 and the center device 3 via wireless communication via a wide-area communication network NW (not shown).

[0011] The center device 3 is a server located in a distribution center that distributes various application programs and the like to the vehicle 200. The center device 3 acts as an intermediary between the user terminal device 5 and the in-vehicle device 2 by providing a user interface to the user terminal device 5. As shown in FIG. 3 , the center device 3 includes a control unit 31, a communication unit 32, and a storage unit 33. The communication unit 32 performs wireless communication with the in-vehicle device 2 via the wide area communication network NW. The communication unit 32 also performs wireless or wired communication with the user terminal device 5. The storage unit 33 includes a database 33a. Details of the database 33a will be described later. The control unit 31 includes a CPU 41, a ROM 42, and a RAM 43. The control unit 31 realizes various functions by the CPU 41 executing various programs stored in the ROM 42. Details of the functions of the control unit 31 will be described later.

[0012] In this embodiment, a configuration will be described for realizing a service in which resources of a vehicle 200 equipped with an on-board device 2 are loaned to a requesting party, thereby causing the vehicle 200 to execute various programs, in the application verification system 1. The resources refer to the computing resources of the CPU, and devices such as a camera and various sensors mounted on the vehicle.

[0013] 1 , the functional configuration of the center device 3 will be described. The center device 3 includes authentication and permission units 101 and 102, a user interface (hereinafter referred to as UI) 103, a data collection unit 104, a learning unit 105, a condition acquisition unit 106, a selection unit 107, a priority selection unit 108, a distribution unit 109, an operation result collection unit 110, and a deletion unit 111.

[0014] The authentication and permission unit 101 authenticates and permits access by a user to the center device 3. For example, a user accesses the center device 3 via a user terminal device 5, and causes the center device 3 to learn data stored in the database 33a and generate a learning model. The database 33a corresponding to the registration table also stores various types of distribution software, which will be described later. The user accesses the center device 3 via the user terminal device 5, requests the center device 3 to verify verification software, i.e., a verification application, and obtains the operation results of the verification application via the center device 3.

[0015] The authentication and permission unit 101 authenticates and permits access by an operator to the center device 3. The operator manages distributed software including verification apps. The distributed software is various software distributed to the in-vehicle device 2. For example, when the center device 3 receives requests to verify multiple verification apps, the operator sets priorities for the multiple verification apps via the priority selection unit 108.

[0016] The UI 103 exchanges data between the user / operator and the center device 3. The data collection unit 104 collects history data including behavior history from each of the multiple vehicles 200 via the communication unit 32 and stores the data in the database 33a. The database 33a stores each piece of history data in association with identification information of the vehicle 200 corresponding to the history data.

[0017] Next, the operation of this embodiment will be described. Unless otherwise specified, the terms "app," "distributed app," and "software" refer to the "verification app." FIG. 4 illustrates an overview of the app verification system. Modeled data is collected by extracting characteristics of people, vehicle conditions, and the environment corresponding to the operating scenario from market data. Next, from the model of each characteristic, a vehicle that meets the conditions for the verification app's functionality—that is, a vehicle that meets the verification app's distribution conditions—is selected. The distribution conditions are set by an operator or user as the conditions for a vehicle suitable for verifying the verification app. For example, distribution conditions for driving assistance software include driving in a high-traffic area, driving at night, having a driver monitoring function, and having a history of driver drowsiness detection. Furthermore, a distribution priority is determined for each verification app. The priority is determined based on the development status of each verification app. The verification app is then distributed to the selected vehicles according to the priority.

[0018] In a vehicle to which the verification app is distributed, the verification app is executed in a so-called shadow mode, without the vehicle occupants being aware of it. Machine learning (ML), for example, is applied to the execution results. Machine learning can be performed either on the vehicle side or on the center device side. In the example shown in the figure, when a verification app that uses a rain sensor is run, a "reduction scenario" is used to verify whether the rain sensor can be reduced by substituting other sensors. During this process, the learning model and trigger conditions for data collection are updated, and when these updates are detected, the verification app is re-distributed to the target vehicle. Subsequently, a cycle of machine learning of the execution results, updating of the learning model and trigger conditions, and re-distribution of the verification app is repeated during a specified verification period.

[0019] Here, a specific example of a verification app will be described. For example, a "rain sensor reduction app" aims to reduce costs by replacing the function of the rain sensor installed in the vehicle 200 with a front camera, thereby reducing the number of rain sensors. The app uses a machine learning model to verify whether raindrops can be detected from camera images. In shadow mode, the detection results of the existing rain sensor are compared with the detection results of the camera. If there is a predetermined difference between the two results, it is determined that the rain detection performance of the camera is poor. The camera images and CAN data at that time are collected and machine-learned to improve the accuracy of the model. The learned model is then redistributed to the vehicle 200, and the verification cycle for the machine learning model is carried out.

[0020] Furthermore, for example, the "autonomous driving function app" aims to verify the autonomous driving function under development in order to develop the autonomous driving function. The content of the app also uses a machine learning model for verification. In shadow mode, the accuracy of the autonomous driving function is verified by comparing the acceleration / deceleration, lane changes, etc. of the vehicle 200 determined by the autonomous driving function with the driver's operations. Then, data under conditions different from the driver's operations is collected to train a machine learning model for autonomous driving. As with the above, the learned model is redistributed to the vehicle 200, and the verification cycle of the machine learning model is carried out.

[0021] As shown in FIG. 5, when an operator or user registers an application A to be verified in the database 33a (S1), the selection unit 107 selects a vehicle to be distributed (S2). The priority selection unit 108 then sets a distribution priority for the verification application (S3). If there is no change in the priority of the verification application A and other verification applications (S4; No), the verification application to be distributed selected in step S2 is registered in a distribution reservation state (S6). If there is a change in the priority (S4; Yes), the process reselects a vehicle to be distributed in accordance with the changed priority (S5), and then proceeds to step S6. The priority can be changed by the operator or user who registered the application.

[0022] As shown in FIG. 6 , if the application with the highest priority among the applications scheduled for distribution is, for example, verification application A, the distribution procedure for verification application A is initiated (S11). Here, the database 33a is referenced to determine whether application B, which has already been distributed and has a lower priority than verification application A, exists in the vehicle to which verification application A is to be distributed (S12). If there is no verification application B, which has already been distributed and has a lower priority than verification application A (No), the distribution unit 109 distributes verification application A (S15). If there is a verification application B that has already been distributed (Yes) and that verification application B is operating in the vehicle 200 to which verification application A is to be distributed, i.e., is being verified (S13; Yes), when the operation of verification application B stops (No), the deletion unit 111 transmits a command to the in-vehicle device 2 to instruct the deletion of verification application B (S14). Then, the process proceeds to step S15.

[0023] The determination of whether the verification application B is running in step S13 and the deletion of the verification application B based on the command transmitted in step S14 are performed by the in-vehicle device 2. However, the determination in step S13 may be performed by the center device 3, provided that the vehicle information is synchronized between the in-vehicle device 2 and the center device 3 at the time of the determination.

[0024] In the case where step S12 returns "No" and the process proceeds to step S15, as shown in the example of FIG. 7, verification app A is not distributed to vehicles Nos. 1, 2, 4, and 6 to which verification app B has already been distributed, and verification app A is distributed to vehicles Nos. 3, 5, and 7 to 10 to which verification app B has not yet been distributed.

[0025] 8 to 11 are screen images of the GUI (Graphic User Interface) of the terminal device 5. Fig. 8 shows the distribution state of vehicles 200 located in various locations in a distribution area centered on the Chubu region of Japan, when the distribution software, model type and conditions, vehicle search start date, end date, model type, etc. are selected. Fig. 9 shows the search state of vehicles 200 that match the distribution conditions. In this example, distribution conditions are set for a verification application that uses the rain sensor of the vehicle 200.

[0026] FIG. 10 shows the distribution conditions, priority, verification period, number of vehicles 200 to be distributed, status, etc. of each verification app. The priority in FIG. 10 corresponds to the priority of the verification app. To change the priority using the priority selection unit 108, click the arrow button symbol in the upper right corner with a pointing device such as a mouse. FIG. 11 shows the verification status of each verification app and the distribution reservation status of a new verification app. The "distribution app" in the figure is the verification app.

[0027] As shown in Figure 12, data stored in the vehicle 200 is uploaded from the in-vehicle device 2 to the center device 3, for example, when the ignition switch is turned on. The center device 3 updates the database 33a with the uploaded data. If a verification app to be deleted exists as in step S14, the center device 3 sends a command to the vehicle 200 to delete the app. The in-vehicle device 2 then checks the operating status of the verification app to be deleted, and deletes the verification app if it is not in operation. When the center device 3 distributes the verification app to the in-vehicle device 2, the in-vehicle device 2 installs the distributed verification app.

[0028] As described above, according to this embodiment, the center device 3 registers multiple verification apps in the database 33a and sets a verification priority for each of the verification apps. The order in which the verification apps are distributed to the vehicle 200 is determined based on the priority, and the distribution unit 109 distributes the verification apps to the vehicle according to the determined order. With this configuration, it is possible to improve development efficiency by distributing an appropriately selected verification app to the vehicle 200 based on the priority, for example, depending on the development status of the verification app.

[0029] In addition, information on the verification app that has already been distributed to the vehicle 200 is registered in the database 33a. The data collection unit 104 collects vehicle-related data from the vehicle 200, and the candidate selection unit 107A selects vehicles 200 that are candidates for distribution of the verification app based on the vehicle-related data. When selecting the required number of vehicles 200 necessary for verification from the distribution candidates as distribution target vehicles, the target vehicle selection unit 107B preferentially selects vehicles 200 to which the verification app has not been distributed as distribution target vehicles. This allows for faster verification of the verification app to be distributed to the vehicle 200.

[0030] Furthermore, after the verification app B has been distributed, if a verification app A with a higher priority than the verification app B is registered in the database 33a and the vehicle 200 to which the verification app B has been distributed is selected by the target vehicle selection unit 107B as a target vehicle for the verification app A with the higher priority, the deletion unit 111 transmits to the target vehicle a command to delete the distributed verification app B. This allows for efficient use of the limited resources of the in-vehicle device 2.

[0031] Second Embodiment In the following, the same parts as those in the first embodiment are denoted by the same reference numerals and descriptions thereof will be omitted, and only differences will be described. In the second embodiment, when a verification application C having a lower priority than the already registered verification applications A and B is registered in the database 33a, the number of vehicles 200 selected is equal to or greater than the number of vehicles 200 to which the verification application C needs to be distributed.

[0032] 13, when the operator registers verification application C in the database 33a (S31), the operator selects the vehicles 200 as distribution targets, excluding vehicles 200 to which other verification applications have already been distributed or for which distribution is scheduled (S32). Then, the operator determines whether the number of selected vehicles 200 is equal to or greater than the number of vehicles to which verification application C needs to be distributed (S33). If the number is equal to or greater than the required number (Yes), verification application C is registered in a distribution-scheduled state (S34).

[0033] On the other hand, if the number of selected vehicles 200 is less than the required number (S33; No), an additional vehicle 200 with available resources is selected from among the vehicles 200 to which other verification apps have been distributed or for which distribution is scheduled (S35). Step S35 is repeatedly executed until the number of selected vehicles 200 reaches or exceeds the required number (S36; No), and when the number reaches or exceeds the required number (S36; Yes), the process proceeds to step S34.

[0034] As a specific example, consider a case where there are a total of 10 vehicles 200 and the required number of vehicles is 5, 5, and 4 for verification applications A, B, and C, respectively. As shown in Fig. 14, if there are 7 vehicles that meet the distribution conditions for verification application C and there are 4 vehicles for which verification applications A and B have not been distributed or scheduled for distribution, vehicles Nos. 1, 2, 4, and 6 are selected and scheduled for distribution, as shown in Fig. 15. In this way, if the required number of vehicles for verification application C can be secured, distribution may be performed all at once.

[0035] On the other hand, as shown in Fig. 16, if there are six vehicles that meet the distribution conditions for verification app C and three vehicles to which verification apps A and B have not been distributed or scheduled for distribution, vehicles Nos. 1, 2, and 4 are selected and scheduled for distribution, and vehicle No. 9, to which only verification app A has been distributed, is selected and scheduled for distribution as the fourth vehicle, as shown in Fig. 17. In this case, distribution may be performed to vehicles Nos. 1, 2, and 4, which can be distributed immediately, and only vehicle No. 9 may be scheduled for distribution.

[0036] 18, if the verification application C has the highest priority among the applications currently scheduled for distribution, the distribution procedure for the verification application C is initiated (S41). Here, the database 33a is referenced to determine whether a verification application with a higher priority has already been distributed or is scheduled for distribution to the vehicle to which the verification application C is to be distributed (S42). If no verification application has already been distributed or is scheduled for distribution (No), the verification application C is distributed (S43). If a verification application has already been distributed or is scheduled for distribution (Yes), the distribution reservation status of the verification application C is maintained (S44).

[0037] 19 shows a case where the result of step S42 is "No," and the verification application C is distributed to vehicles Nos. 1, 2, 4, and 6 to which the verification applications A and B, which have higher priority than the verification application C, have not been distributed or scheduled for distribution.

[0038] As described above, according to the second embodiment, when selecting vehicles to which verification app C with a lower priority is to be distributed, the target vehicle selection unit 107B preferentially selects vehicles 200 to which verification apps A and B with a higher priority than the verification app C are not distributed. If the required number of vehicles to which verification apps A and B are not distributed can be selected from the vehicles 200 to which verification apps A and B are not distributed, the distribution unit 109 distributes the verification app C. This allows verification in the vehicle 200 to begin early, even if the verification app C has a relatively lower priority.

[0039] Third Embodiment In the third embodiment, a verification app to be distributed to a vehicle 200 is selected taking into consideration the relationship between the priority of each verification app and the verification period set for each verification app. As shown in FIG. 10 , a target vehicle and a verification period are set for each verification app registered in the database 33a. The verification period is set in descending order of priority. For example, if some of the target vehicles for a low-priority verification app overlap with vehicles 200 to which a high-priority verification app has already been distributed and therefore the app cannot be distributed immediately, the verification period for the low-priority verification app may be set to a future period. Therefore, there may be vehicles 200 that have not been selected as targets for a relatively high-priority verification app or that are not scheduled to receive the verification app, and no verification period for the verification app is set for the verification app.

[0040] Below is an example of selection when the priority order of verification apps is A, B, and C. (1) After the target vehicles and verification period for verification app A have been determined, when selecting the target vehicles for verification app B, as shown in the first embodiment, the target vehicles are selected so that they do not overlap with those of verification app A as much as possible.

[0041] (2) If the target vehicles for verification apps A and B do not overlap, verification app B can be distributed immediately, so there is no problem even if the verification periods for both apps overlap. On the other hand, if the target vehicles for both apps overlap partially, verification app B will be distributed after the verification period for verification app A ends and app A is deleted from the target vehicles. In this case, the verification period for verification app B is set as a future date.

[0042] (3) In a situation where the target vehicles for verification app A and B overlap and a target for verification app C is selected, it is assumed that verification app A has already been distributed and verification app B has not yet been distributed. If the target vehicles for verification app C do not overlap with the target vehicles for verification apps A and B, verification app C can be distributed immediately. On the other hand, if the target vehicles for verification app A and verification app C overlap, verification app C needs to be distributed after the verification period for verification app A has ended. If there is an overlap with verification app B, verification app C needs to be distributed after the verification period for verification app B has ended, even if verification app B has not yet been distributed to vehicle 200.

[0043] As described above, according to the third embodiment, when selecting vehicles to which verification app C is to be distributed, the target vehicle selection unit 107B preferentially selects vehicles 200 for which verification periods for verification apps A and B, which have relatively higher priorities than verification app C, are not set. When selecting vehicles to which verification app C, which has a lower priority among verification apps A, B, and C, is to be distributed, if the required number of vehicles to which verification app C is to be distributed can be selected from vehicles 200 for which verification periods for high-priority verification apps A and B are not set, the distribution unit 109 distributes the verification app C. Therefore, the verification app C, which has a lower priority, can be distributed efficiently in consideration of the relationship between the priority of each verification app and the verification period.

[0044] In addition to the inventions described in the claims, the present invention includes the following inventions: [1] A center device (3) that distributes application programs to a plurality of vehicles (200), comprising: a registration table (33a) in which a plurality of application programs to be verified for operation on actual devices in the vehicles are registered, and assuming that the application programs are verification applications, the registration table sets a verification priority for each of the verification applications, the order in which the verification applications are distributed to the vehicles is determined according to the priority, and the center device comprises: a distribution unit (109) that distributes the verification applications to the vehicles in accordance with the determined order. [2] The registration table also registers information about verification apps that have already been distributed to the vehicle, and the center device described in [1] is equipped with: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit (107A) that selects vehicles that are candidates for distribution of the verification app based on the vehicle-related data; and a target vehicle selection unit (107B) that, when selecting the required number of vehicles required for verification from the distribution candidates as distribution target vehicles, preferentially selects vehicles to which the verification app has not been distributed as the distribution target vehicles. [3] The registration table also registers information about verification apps that have already been distributed to the vehicle, and the center device comprises: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit (107A) that selects vehicles that will be candidates for distribution of the verification app based on the vehicle-related data; a target vehicle selection unit (107B) that selects the required number of vehicles required for verification from the candidate distribution vehicles as distribution target vehicles; and a deletion unit (111) that instructs the vehicle to delete the distributed verification app, wherein after the verification app is distributed, a verification app with a higher priority than the distributed verification app is registered in the registration table, and when the target vehicle selection unit selects the vehicle to which the verification app was distributed as the distribution target vehicle for the verification app with the higher priority, the deletion unit sends a command to the distribution target vehicle to instruct it to delete the distributed verification app.[4] The registration table also registers information about the verification apps that have been distributed to the vehicles, and the center device comprises: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit (107A) that selects vehicles that are candidates for distribution of the verification app based on the vehicle-related data; and a target vehicle selection unit (107B) that selects the required number of vehicles required for verification from the candidates for distribution as distribution target vehicles, wherein when selecting the distribution target vehicles for a verification app that does not have the highest priority, the target vehicle selection unit preferentially selects vehicles to which a verification app with a relatively higher priority than the verification app has not been distributed, and if the required number of distribution target vehicles can be selected from vehicles to which the verification app with the relatively higher priority has not been distributed, the distribution unit distributes the verification app with the lower priority. [5] The center device according to any one of [1] to [4], comprising: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit that selects vehicles to be candidates for distribution of the verification app based on the vehicle-related data; and a target vehicle selection unit that selects a required number of vehicles necessary for verification from the candidate distribution vehicles as distribution target vehicles, wherein the target vehicle selection unit manages a verification period for each verification app for each vehicle, and, in selecting the distribution target vehicles for a verification app that is not the highest priority, preferentially selects vehicles for which a verification period for a verification app of a relatively higher priority than the verification app is not set. [6] The center device according to [5],[7] An application distribution method for distributing application programs to a plurality of vehicles (200), comprising: a center device (3) having a registration table (33a) in which a plurality of application programs to be verified for operation on actual devices in the vehicles are registered; when the application programs are verification applications, the registration table sets the verification priority for each of the verification applications; the application distribution method determines the order in which the verification applications are to be distributed to the vehicles according to the priority; and the verification applications are distributed to the vehicles according to the determined order.

[0045] (Other Embodiments) The verification app and its distribution conditions are not limited to the examples shown. While the present disclosure has been described with reference to examples, it is understood that the present disclosure is not limited to those examples or structures. The present disclosure also encompasses various modifications and modifications within the scope of equivalents. In addition, various combinations and forms, including only one element, more than one element, or less than one element, are also within the scope and spirit of the present disclosure.

[0046] The means and / or functions provided by each device, etc., can be provided by software recorded in a tangible memory device and a computer that executes the software, software alone, hardware alone, or a combination thereof. For example, when a control device is provided by electronic circuits that are hardware, it can be provided by digital circuits including a large number of logic circuits, or analog circuits.

[0047] The control unit and the method described herein may be implemented by a special-purpose computer configured by configuring a processor and memory programmed to perform one or more functions embodied in a computer program. Alternatively, the control unit and the method described herein may be implemented by a special-purpose computer configured by configuring a processor with one or more dedicated hardware logic circuits. Alternatively, the control unit and the method described herein may be implemented by one or more special-purpose computers configured by combining a processor and memory programmed to perform one or more functions with a processor configured with one or more hardware logic circuits. Furthermore, the computer program may be stored as instructions executed by a computer on a computer-readable non-transitory tangible storage medium.

Claims

1. A center device (3) that distributes application programs to a plurality of vehicles (200), comprising: a registration table (33a) in which a plurality of application programs to be verified for operation on actual devices in the vehicles are registered; when the application programs are referred to as verification applications, the registration table sets a verification priority for each of the verification applications; the order in which the verification applications are distributed to the vehicles is determined according to the priority; and the center device comprises a distribution unit (109) that distributes the verification applications to the vehicles in accordance with the determined order.

2. The registration table also registers information about verification apps that have already been distributed to the vehicle, and the center device described in claim 1 is equipped with: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit (107A) that selects vehicles that are candidates for distribution of the verification app based on the vehicle-related data; and a target vehicle selection unit (107B) that, when selecting the required number of vehicles required for verification from the distribution candidates as distribution target vehicles, preferentially selects vehicles to which the verification app has not been distributed as the distribution target vehicles.

3. The registration table also registers information about verification apps that have already been distributed to the vehicle, and the center device comprises: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit (107A) that selects vehicles that will be candidates for distribution of the verification app based on the vehicle-related data; a target vehicle selection unit (107B) that selects the required number of vehicles required for verification from the candidate distribution vehicles as distribution target vehicles; and a deletion unit (111) that instructs the vehicle to delete the distributed verification app, wherein after the verification app is distributed, a verification app with a higher priority than the distributed verification app is registered in the registration table, and when the target vehicle selection unit selects the vehicle to which the verification app was distributed as the distribution target vehicle for the verification app with the higher priority, the deletion unit sends a command to the distribution target vehicle to instruct it to delete the distributed verification app.

4. The registration table also registers information about verification apps that have already been distributed to the vehicle, and the center device comprises: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit (107A) that selects vehicles that are candidates for distribution of the verification app based on the vehicle-related data; and a target vehicle selection unit (107B) that selects the required number of vehicles required for verification from the candidates for distribution as distribution vehicles, wherein when selecting distribution vehicles for a verification app that does not have the highest priority, the target vehicle selection unit preferentially selects vehicles to which a verification app with a relatively higher priority than the verification app has not been distributed, and if the required number of distribution vehicles can be selected from vehicles to which the verification app with the relatively higher priority has not been distributed, the distribution unit distributes the verification app with the lower priority.

5. A center device as described in claim 1, comprising: a data collection unit (104) that collects vehicle-related data, which is information about the vehicle, from the vehicle; a candidate selection unit that selects vehicles to be candidates for distribution of the verification app based on the vehicle-related data; and a target vehicle selection unit that selects the required number of vehicles required for verification from the candidate distribution vehicles as distribution target vehicles, wherein the target vehicle selection unit manages the verification period of each verification app for each vehicle, and when selecting the distribution target vehicles for a verification app that does not have the highest priority, preferentially selects vehicles for which a verification period for a verification app that has a relatively higher priority than the verification app is not set.

6. A center device as described in claim 5, wherein when the target vehicle selection unit selects the target vehicles for delivery of the verification app that does not have the highest priority, if the required number of target vehicles can be selected from vehicles for which a verification period for the verification app with a relatively high priority is not set, the delivery unit delivers the verification app that does not have the highest priority.

7. An application distribution method for distributing application programs to a plurality of vehicles (200), comprising: a center device (3) having a registration table (33a) in which a plurality of application programs to be verified for operation on actual devices in the vehicles are registered; when the application programs are considered to be verification applications, the registration table sets a verification priority for each of the verification applications; the order in which the verification applications are distributed to the vehicles is determined according to the priority; and the verification applications are distributed to the vehicles in accordance with the determined order.

Images