Software update system, software update device, software update method, and program

Abstract

A software update system (10) comprises: an acquisition unit (50) that acquires new-version software which is supplied from a server device (14) via a network (16); an end-of-driving determination unit (52) that determines that driving of a vehicle (12) by a user has ended on the basis of satisfaction of a prescribed condition; a permission confirmation unit (54) that, when driving of the vehicle (12) by a user has ended, performs a process to confirm with the user whether or not the user permits an electronic control device (42) provided in the vehicle (12) to execute software update processing; and an update control unit (56) that uses the new-version software acquired by the acquisition unit (50) to execute the software update processing.

Description

Software update system, software update device, software update method, and program 【0001】 The present disclosure relates to a software update system, a software update device, a software update method, and a program. 【0002】 Japanese Patent Application Laid-Open No. 2021-149701 discloses a software rewriting device that rewrites (updates) the software of a vehicle. The software rewriting device downloads software for rewriting from a software distribution server to the vehicle via a network. 【0003】 In recent years, vehicles that automatically transition from a driving state to a driving end state have been developed. Even in such vehicles, it is desirable to perform software updates well. 【0004】 The present disclosure aims to solve the above-described problems. 【0005】 A first aspect of the present disclosure is a software update system including a vehicle and a server device communicable with the vehicle via a network, wherein the vehicle is a smart vehicle that automatically transitions from a driving state to a driving end state, an acquisition unit that acquires new version software supplied from the server device via the network, a driving end determination unit that determines that the driving of the vehicle by the user has ended based on the establishment of a predetermined condition for determining that the driving of the vehicle by the user has ended, a permission confirmation unit that performs a process of confirming with the user whether to permit execution of a software update process on an electronic control device provided in the vehicle when the driving end determination unit determines that the driving of the vehicle by the user has ended, and an update control unit that executes the software update process using the new version software acquired by the acquisition unit when the user permits execution of the software update process. 【0006】A second aspect of the present disclosure is a software update device that performs software update processing on an electronic control device provided in a vehicle, wherein the vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state, and comprises: an acquisition unit that acquires new software supplied via a network; an operating end determination unit that determines that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle being met; an authorization confirmation unit that performs processing to confirm with the user whether or not to authorize the execution of the software update processing when the operating end determination unit determines that the user has finished operating the vehicle; and an update control unit that, when the user authorizes the execution of the software update processing, executes the software update processing using the new software acquired by the acquisition unit. 【0007】 A third aspect of the present disclosure is a software update method for performing a software update process on an electronic control device provided in a vehicle, wherein the vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state, and the method comprises: an acquisition step for acquiring a new version of software supplied via a network; an operation end determination step for determining that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle being met; an authorization confirmation step for confirming with the user whether or not to authorize the execution of the software update process when the operation end determination step determines that the user has finished operating the vehicle; and an update control step for executing the software update process using the new version of software acquired in the acquisition step when the user authorizes the execution of the software update process. 【0008】 A fourth aspect of this disclosure is a program that causes a computer to execute the software update method of the third aspect. 【0009】According to this disclosure, software updates can be performed effectively in vehicles that automatically transition from an operating state to an operation termination state. 【0010】 Figures 1A and 1B show a series of actions performed by a user in a non-smart vehicle. Figures 2A and 2B show a series of actions performed by a user in a smart vehicle. Figure 3 is a schematic diagram of the software update system. Figure 4 is a flowchart of a series of processes performed by the software update device. Figure 5 is a flowchart of the software update process. Figure 6 is a schematic diagram showing an example of a permission confirmation screen. 【0011】 This disclosure relates to a software update system, software update device, software update method, and program for updating the software of an electronic control unit installed in a smart vehicle. Before describing this disclosure, we will explain the smart vehicle that is the premise of this disclosure. 【0012】 [1 Smart Vehicles] Conventional vehicles are equipped with operating switches (operators) such as SSSW (Start Stop Switch) or IGSW (Ignition Switch). Conventional vehicles transition from a stopped state to an operating state, and from an operating state to a stopped state, by the user operating the operating switch. For example, in the case of an engine-powered vehicle, the engine is switched between starting and stopping in response to the operation of the operating switch. In the case of an electric vehicle, the electric motor is switched between starting and stopping in response to the operation of the operating switch. In this specification, conventional vehicles are referred to as non-smart vehicles. 【0013】 In recent years, smart vehicles have been developed. Smart vehicles can transition from a non-operational state to an operating state without requiring user operation of any switches, and can also transition from an operating state to a non-operational state without requiring user operation of any switches. 【0014】The differences between non-smart vehicles and smart vehicles will be explained by focusing on the user's actions towards the vehicle. Figures 1A and 1B show a series of actions performed by a user in a non-smart vehicle. Figures 2A and 2B show a series of actions performed by a user in a smart vehicle. Figures 1A and 2A show a series of actions performed by a user from boarding to starting the vehicle. Figures 1B and 2B show a series of actions performed by a user from the end of the vehicle to disembarking. In the following explanation, both non-smart vehicles and smart vehicles are assumed to be electric vehicles equipped with an SSSW and an electric motor for driving. 【0015】 As shown in Figure 1A, in a non-smart vehicle, the user unlocks the door. The user opens the door, gets in, and then closes the door. The user presses the SSSW while pressing the brake (brake operation + SSSW operation). This activates the electrical system of the non-smart vehicle, and the electric motor becomes ready to drive. In other words, the non-smart vehicle enters a driving state. The user changes the shift position from P range (parking range) to driving range by operating the shift button (shift lever) while pressing the brake (brake operation + shift operation). This enables the non-smart vehicle to drive in response to accelerator operation. 【0016】 As shown in Figure 1B, in a non-smart vehicle, the user changes the shift position from the driving range to the P range by operating the shift button (shift lever) while pressing the brake (brake operation + shift operation). Next, the user presses the SSSW while pressing the brake (brake operation + SSSW operation). This shuts down the electrical system of the non-smart vehicle, and the electric motor stops driving. In other words, the non-smart vehicle ends up in an operational state. The user opens the door, exits the vehicle, and then closes the door (door open, door closed). The user locks the door (lock). 【0017】On the other hand, as shown in Figure 2A, the series of actions performed by the user on a smart vehicle does not include the "brake operation + SSSW operation" from the series of actions shown in Figure 1A. Also, as shown in Figure 2B, the series of actions performed by the user on a smart vehicle does not include the "brake operation + SSSW operation" from the series of actions shown in Figure 1B. Thus, in a smart vehicle, the user does not need to operate any control switches at the start or end of driving. While smart vehicles offer the advantage of reduced user operation, they also present the following challenges. 【0018】 In recent years, vehicles equipped with OTA (Over The Air) functionality have become widespread. Software update devices installed in such vehicles communicate with OTA center servers via networks such as the internet to perform software update processing. As part of the software update process, the software update device performs the download, installation, and activation of the new software. 【0019】 During the activation process, the vehicle will be unusable for a certain period of time. Therefore, the software update device performs the activation process while the vehicle is stationary. In addition, the software update device will ask the user for permission before performing the activation process. 【0020】 In non-smart vehicles, the software update device determines when it is time to confirm permission for a software update process (e.g., activation) based on the operation of the control switches while the vehicle is in operation. In contrast, in smart vehicles, the user does not need to operate the control switches when the vehicle is stopped. In other words, in smart vehicles, the software update device cannot determine when it is time to confirm permission for a software update process based on the operation of the control switches. 【0021】 According to the disclosure described below, permission confirmation for software update processing can be suitably performed in a smart vehicle. 【0022】[2 Software Update System 10] Figure 3 is a schematic diagram of the software update system 10. The software update system 10 comprises a vehicle 12 and a server device 14. The vehicle 12 and the server device 14 can communicate bidirectionally via a network 16 such as the Internet. 【0023】 [2-1 Vehicle 12] Vehicle 12 is a smart vehicle that does not have operating switches such as SSSW and IGSW. However, Vehicle 12 may be a smart vehicle that is equipped with operating switches. Vehicle 12 comprises a human-machine interface unit 20 (also called HMI unit 20), a communication unit 22, a sensor unit 24, and a control unit 26. 【0024】 The HMI unit 20 may consist of an information input device 28 and an information output device 30. The information input device 28 inputs information corresponding to user operations to the control unit 26. The information input device 28 includes at least one of a user-operable control element (keyboard, pointing device, etc.) and an audio input device such as a microphone. The information input device 28 may also include a camera for detecting user gestures. The information output device 30 provides the user with information output from the control unit 26. The information output device 30 includes at least one of a display unit 32 and an audio output device including a speaker. The HMI unit 20 may also consist of a touch panel in which the pointing device (information input device 28) and the display unit 32 (information output device 30) are integrated. 【0025】 The communication unit 22 may be composed of, for example, a TCU (Telematics Control Unit). The TCU can achieve bidirectional communication with external devices (such as a server device 14) of the vehicle 12. The TCU comprises a communication circuit, a wireless communication module (integrated circuit module), and a microcontroller. The communication circuit performs bidirectional communication with the control unit 26. The wireless communication module performs bidirectional communication with external devices of the vehicle 12 via the network 16. The microcontroller performs data processing. 【0026】The sensor unit 24 may be composed of multiple sensors. For example, the sensor unit 24 may include a shift position sensor 34, a seat belt sensor 36, and a vehicle speed sensor 38. The shift position sensor 34 detects the selected shift position in the vehicle 12. The seat belt sensor 36 detects whether or not the driver's seat belt is fastened. The vehicle speed sensor 38 detects the vehicle speed of the vehicle 12. 【0027】 The control unit 26 may consist of a software update device 40 and a plurality of electronic control devices 42. The software update device 40 performs software update processing for each of the electronic control devices 42. Each of the electronic control devices 42 performs various controls of the vehicle 12. The software update device 40 and each of the electronic control devices 42 can communicate bidirectionally via an in-vehicle network 44 such as a CAN bus. 【0028】 The software update device 40 may be configured, for example, by a CGW-ECU (Central Gateway-Electronic Control Unit). The software update device 40 includes an arithmetic unit 46 and a storage unit 48. 【0029】 The arithmetic unit 46 may be composed of a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit). That is, the arithmetic unit 46 may be composed of processing circuitry. The arithmetic unit 46 includes an acquisition unit 50, an operation termination determination unit 52, a permission confirmation unit 54, and an update control unit 56. The acquisition unit 50, the operation termination determination unit 52, the permission confirmation unit 54, and the update control unit 56 may be realized by the execution of a program stored in the storage unit 48 by the arithmetic unit 46. At least a part of the arithmetic unit 46 may be realized by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field-Programmable Gate Array). At least a part of the arithmetic unit 46 may be realized by an electronic circuit including discrete devices. 【0030】The acquisition unit 50 acquires (downloads) the new version of the software distributed from the server device 14 via the network 16. The operation completion determination unit 52 determines whether predetermined conditions (also called operation completion conditions) for determining that the user has finished driving the vehicle 12 have been met. Furthermore, based on the fact that the predetermined conditions have been met, the operation completion determination unit 52 determines that the user has finished driving the vehicle 12. The permission confirmation unit 54 performs a process to confirm with the user whether or not to grant permission to the electronic control device 42 to execute the software update process. The update control unit 56 executes the software update process using the new version of the software. 【0031】 The storage unit 48 is composed of computer-readable storage media, namely volatile memory (not shown) and non-volatile memory (not shown). The volatile memory is, for example, RAM (Random Access Memory). The non-volatile memory is, for example, ROM (Read Only Memory), flash memory, etc. Data is stored in the volatile memory, for example. Programs, tables, maps, etc. are stored in the non-volatile memory, for example. At least a part of the storage unit 48 may be provided in the processor, integrated circuit, etc. mentioned above. 【0032】 The electronic control unit 42 may be configured, for example, as an ECU (Electronic Control Unit). The electronic control unit 42 includes an arithmetic unit 58 and a storage unit 60. 【0033】 The arithmetic unit 46 may be composed of a processor such as a CPU or GPU. At least a portion of the arithmetic unit 46 may be implemented by an integrated circuit such as an ASIC or FPGA. At least a portion of the arithmetic unit 46 may be implemented by an electronic circuit including discrete devices. 【0034】The storage unit 60 is composed of computer-readable storage media, namely volatile memory (not shown) and non-volatile memory (not shown). The volatile memory is, for example, RAM. The non-volatile memory is, for example, ROM, flash memory, etc. Data is stored in the volatile memory, for example. Programs, tables, maps, etc. are stored in the non-volatile memory, for example. At least a part of the storage unit 60 may be provided in the processor, integrated circuit, etc. mentioned above. 【0035】 The non-volatile memory of the storage unit 60 has multiple memory banks. New software is written to one of these memory banks. For example, new software is written to a memory bank other than the one in which the currently used software (old software) is written. 【0036】 [2-2 Server device 14] The server device 14 may be a physical server or a cloud server. The server device 14 can distribute information about software updates (new software versions, etc.) to the vehicle 12 via the network 16. 【0037】 [3. Software Update Method] Figure 4 is a flowchart of a series of processes performed by the software update device 40. Figure 5 is a flowchart of the software update process. 【0038】 The vehicle manufacturer develops a new version of the software and registers it with the server device 14. The server device 14 then distributes the registered new version of the software to the vehicle 12. 【0039】 In step S1, the acquisition unit 50 starts downloading the new software via the communication unit 22. This allows the acquisition unit 50 to acquire the new software. If the download is completed before the software update process (step S5) described later is executed, the update control unit 56 installs the downloaded new software. 【0040】In steps S2 to S4, the operation termination determination unit 52 determines whether the user has finished driving the vehicle 12. In this embodiment, the operation termination determination unit 52 determines that the user has finished driving the vehicle 12 based on the fulfillment of multiple operation termination conditions. 【0041】 In step S2, the operation termination determination unit 52 determines the current shift position. For example, the shift position sensor 34 outputs shift position information indicating the latest shift position each time the shift position is changed. The operation termination determination unit 52 stores the latest shift position information in the storage unit 48. Based on the latest shift position information stored in the storage unit 48, the operation termination determination unit 52 determines the current shift position. If the current shift position is in the P range (step S2: YES), the process proceeds to step S3. On the other hand, if the current shift position is not in the P range (step S2: NO), the process in step S2 is repeated. 【0042】 When the process moves from step S2 to step S3, the driving termination determination unit 52 determines whether the driver's seat belt is fastened. For example, the seat belt sensor 36 outputs seat belt information indicating whether the seat belt is fastened. The driving termination determination unit 52 stores the seat belt information in the storage unit 48. Based on the latest seat belt information stored in the storage unit 48, the driving termination determination unit 52 determines whether the driver's seat belt is fastened. If the driver's seat belt is not fastened (step S3: NO), the process moves to step S4. On the other hand, if the driver's seat belt is fastened (step S3: YES), the process returns to step S2. 【0043】When transitioning from step S3 to step S4, the driving end determination unit 52 determines the vehicle speed history and the current vehicle speed. For example, the vehicle speed sensor 38 outputs vehicle speed information indicating the vehicle speed. The driving end determination unit 52 stores the vehicle speed information in the storage unit 48. Based on the vehicle speed information stored in the storage unit 48, the driving end determination unit 52 determines whether there is a vehicle speed history equal to or higher than a predetermined speed threshold from the most recent driving start time point (the transition time point from the driving end state to the driving state) to the present. The speed threshold is a threshold (for example, about 15 km / h) for determining whether the vehicle 12 has actually traveled on the road. The speed threshold is stored in the storage unit 48 in advance. Further, based on the latest vehicle speed information output by the vehicle speed sensor 38, the driving end determination unit 52 determines whether the vehicle 12 is currently stopped. If there is a vehicle speed history equal to or higher than the predetermined vehicle speed and the vehicle is currently stopped (step S4: YES), the process proceeds to step S5. On the other hand, if there is no vehicle speed history equal to or higher than the predetermined vehicle speed, or if the vehicle is not currently stopped (step S4: NO), the process returns to step S2. 【0044】 When transitioning from step S4 to step S5, the software update process shown in FIG. 5 is executed. When the software update process ends, the power supply to the electrical components other than the electrical components to which power is constantly supplied is stopped. That is, the vehicle 12 enters the shutdown state. 【0045】 In the software update process shown in FIG. 5, the subsequent processes differ depending on whether the download started in step S1 of FIG. 4 has ended. 【0046】 In step S11, the permission confirmation unit 54 determines whether the download in step S1 of FIG. 4 is ongoing. If the download is ongoing (step S11: YES), the process proceeds to step S12. On the other hand, if the download has already ended (step S11: NO), the process proceeds to step S16. 【0047】When transitioning from step S11 to step S12, the permission confirmation unit 54 performs a process of confirming with the user whether to permit the continuation of the download of the new version software. When the driving end determination unit 52 determines that the driving by the user has ended, the permission confirmation unit 54 causes the display unit 32 to display a permission confirmation screen within a predetermined time (for example, within 2 seconds). FIG. 6 is a schematic diagram showing an example of the permission confirmation screen. The permission confirmation unit 54 may output, from the voice output device, a voice for confirming whether to permit the continuation of the download of the new version software together with the permission confirmation screen. 【0048】 In step S13, the permission confirmation unit 54 determines whether the user has permitted the continuation of the download of the new version software. The permission confirmation unit 54 acquires, via the information input device 28, user response information indicating the user's response to the permission confirmation in step S12. If the user permits the continuation of the download of the new version software (step S13: YES), the process proceeds to step S14. On the other hand, if the user does not permit the continuation of the download of the new version software (step S13: NO), the process proceeds to step S15. 【0049】 When transitioning from step S13 to step S14, the acquisition unit 50 continues to execute the download of the new version software. After the download is completed, the update control unit 56 executes the installation of the new version software. When the installation of the new version software is completed, the software update process ends. 【0050】 When transitioning from step S13 to step S15, the acquisition unit 50 aborts the download of the new version software. Thereby, the software update process ends. 【0051】When the process moves from step S11 to step S16, the license confirmation unit 54 performs a process to confirm with the user whether or not to authorize the activation of the new software. Within a predetermined time (for example, within 2 seconds) from the time the operation completion determination unit 52 determines that the user has finished operating the software, the license confirmation unit 54 displays the license confirmation screen on the display unit 32. The license confirmation screen may be the same as the download license confirmation screen shown in Figure 6, or it may be different. Along with the license confirmation screen, the license confirmation unit 54 may output an audio message from the audio output device to confirm whether or not to authorize the activation of the new software. 【0052】 In step S17, the license confirmation unit 54 determines whether the user has authorized the activation of the new software. The license confirmation unit 54 obtains user response information, which indicates the user's response to the license confirmation in step S16, via the information input device 28. If the user has authorized the activation of the new software (step S17: YES), the process proceeds to step S18. On the other hand, if the user has not authorized the activation of the new software (step S17: NO), the process proceeds to step S19. 【0053】 When the process moves from step S17 to step S18, the update control unit 56 activates the new software version. Once the activation of the new software version is complete, the software update process ends. 【0054】 When the process moves from step S17 to step S19, the update control unit 56 suspends the activation of the new software. This terminates the software update process. 【0055】 [4 Another Embodiment] The operation completion determination unit 52 may determine whether the user has finished driving the vehicle 12 by performing at least one of the determinations in steps S2 to S4 of Figure 4. 【0056】The driving completion determination unit 52 may determine whether the user has finished driving the vehicle 12 by performing determinations other than those in steps S2 to S4 of Figure 4. In addition, the driving completion determination unit 52 may perform determinations other than those in steps S2 to S4 of Figure 4. For example, the driving completion determination unit 52 may determine that the user has finished driving the vehicle 12 when the vehicle 12 is stopped at a predetermined location (e.g., home). In this case, the driving completion determination unit 52 obtains location information indicating the location of the vehicle 12 from a navigation device or the like. 【0057】 The operation termination determination unit 52 may change the operation termination conditions before and after the download is completed. Here, the operation termination conditions determined before the download is completed are the first operation termination conditions (first predetermined conditions), and the operation termination conditions determined after the download is completed (before activation processing) are the second operation termination conditions (second predetermined conditions). The second operation termination conditions may be stricter than the first operation termination conditions. In this case, the number of determination items for the second operation termination conditions may be greater than the number of items for the first operation termination conditions. For example, the operation termination determination unit 52 may perform one or two of steps S2 to S4 as the operation termination determination performed before the download is completed, and perform all of steps S2 to S4 as the operation termination determination performed after the download is completed. 【0058】 [5 Effects] In this embodiment, the operation termination determination unit 52 can detect the timing at which the user has finished driving the vehicle 12 (smart vehicle) based on determining whether or not predetermined conditions are met. Therefore, according to this embodiment, the permission confirmation for the software update process can be performed at a good timing in the smart vehicle. Therefore, according to this embodiment, the software update can be performed well in the smart vehicle. 【0059】 [6. Addendum] The following addendum is further disclosed with respect to the above embodiment. 【0060】(Note 1) The software update system (10) of this disclosure is a software update system comprising a vehicle (12) and a server device (14) capable of communicating with the vehicle via a network (16). The vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state. The software update system comprises: an acquisition unit (50) that acquires new software supplied from the server device via the network; an operation end determination unit (52) that determines that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle; an authorization confirmation unit (54) that, when the operation end determination unit determines that the user has finished operating the vehicle, performs a process to confirm with the user whether or not to authorize the electronic control device (42) provided in the vehicle to execute a software update process; and an update control unit (56) that, when the user authorizes the execution of the software update process, executes the software update process using the new software acquired by the acquisition unit. 【0061】 (Note 2) In the software update system described in Note 1, the vehicle does not need to be equipped with an operator for the user to switch between the driving state and the end of driving state. 【0062】 (Note 3) In the software update system described in Note 1, the predetermined conditions include conditions relating to the shift position, and the operation completion determination unit may determine that the conditions relating to the shift position have been met when the currently selected shift position is the parking range. 【0063】 (Note 4) In the software update system described in Note 1, the predetermined conditions include conditions relating to vehicle speed, and the operation termination determination unit may determine that the conditions relating to vehicle speed have been met if, after the transition from the most recent operation termination state to the operation state, the vehicle is traveling at a predetermined vehicle speed or higher, and the vehicle is currently stopped. 【0064】(Note 5) In the software update system described in Note 1, the predetermined conditions include conditions relating to the seat belt wearing status, and the driving completion determination unit may determine that the conditions relating to the seat belt have been met if the user is not wearing the seat belt. 【0065】 (Note 6) In the software update system described in Note 1, the software update process includes a download process which is a process for downloading the new version of the software, and the license confirmation unit may perform a process to confirm with the user whether or not to permit the download process. 【0066】 (Note 7) In the software update system described in Note 1, the software update process includes an activation process which is a process for activating the new version of the software installed on the electronic control unit, and the license confirmation unit may perform a process to confirm with the user whether or not to permit the activation process. 【0067】 (Note 8) In the software update system described in Note 1, the software update process includes a download process, which is a process of downloading the new version of the software, and an activation process, which is a process of activating the new version of the software installed on the electronic control unit. The license confirmation unit separately performs a process of confirming with the user whether or not to permit the download process and a process of confirming with the user whether or not to permit the activation process. The first predetermined condition, which is a predetermined condition determined by the operation termination determination unit before the license confirmation unit performs the process of confirming with the user whether or not to permit the download process, and the second predetermined condition, which is a predetermined condition determined by the operation termination determination unit before the license confirmation unit performs the process of confirming with the user whether or not to permit the activation process, may be different. 【0068】 (Note 9) In the software update system described in Note 8, the second predetermined condition may be stricter than the first predetermined condition. 【0069】(Note 10) In the software update system described in Note 8, the number of items in the second predetermined condition may be greater than the number of items in the first predetermined condition. 【0070】 (Note 11) The software update device (40) of this disclosure is a software update device that performs software update processing on an electronic control device installed in a vehicle. The vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state. The software update device includes an acquisition unit that acquires new version software supplied via a network; an operating end determination unit that determines that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle being met; an authorization confirmation unit that performs processing to confirm with the user whether or not to authorize the execution of the software update processing when the operating end determination unit determines that the user has finished operating the vehicle; and an update control unit that, when the user authorizes the execution of the software update processing, executes the software update processing using the new version software acquired by the acquisition unit. 【0071】 (Note 12) The software update method of this disclosure is a software update method that performs a software update process on an electronic control device provided in a vehicle. The vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state. The software update method comprises: an acquisition step of acquiring a new version of software supplied via a network; an operation end determination step of determining that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle being met; a permission confirmation step of confirming with the user whether or not to allow the execution of the software update process when the operation end determination step determines that the user has finished operating the vehicle; and an update control step of executing the software update process using the new version of software acquired in the acquisition step when the user has permitted the execution of the software update process. 【0072】(Note 13) The program of this disclosure causes a computer to execute the software update method described in Note 12. 【0073】 While this disclosure has been described in detail, it is not limited to the individual embodiments described above. These embodiments can be added, replaced, modified, partially deleted, etc., in any way that does not depart from the gist of this disclosure or from the intent of this disclosure derived from the claims and their equivalents. These embodiments can also be implemented in combination. For example, the order of operations and processes in the embodiments described above are given as examples only and are not limited thereto. The same applies when numerical values ​​or mathematical formulas are used in the description of the embodiments described above.

Claims

1. A software update system (10) comprising a vehicle (12) and a server device (14) capable of communicating with the vehicle via a network (16), wherein the vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state, and comprises: an acquisition unit (50) that acquires new software supplied from the server device via the network; an operation end determination unit (52) that determines that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle being met; a permission confirmation unit (54) that performs a process to confirm with the user whether or not to permit the electronic control device (42) provided in the vehicle to execute a software update process when the operation end determination unit determines that the user has finished operating the vehicle; and an update control unit (56) that executes the software update process using the new software acquired by the acquisition unit when the user permits the execution of the software update process.

2. A software update system according to claim 1, wherein the vehicle is not provided with an operator for the user to switch between a driving state and an end-of-driving state.

3. A software update system according to claim 1, wherein the predetermined conditions include conditions relating to the shift position, and the operation completion determination unit determines that the conditions relating to the shift position have been met when the currently selected shift position is the parking range.

4. A software update system according to claim 1, wherein the predetermined conditions include conditions relating to vehicle speed, and the operation termination determination unit determines that the conditions relating to vehicle speed have been met when the vehicle has been traveling at a predetermined vehicle speed or higher after transitioning from the most recent operation termination state to the operation state, and the vehicle is currently stopped.

5. A software update system according to claim 1, wherein the predetermined conditions include conditions relating to the seat belt wearing status, and the driving completion determination unit determines that the conditions relating to the seat belt have been met when the user is not wearing the seat belt.

6. A software update system according to claim 1, wherein the software update process includes a download process which is a process for downloading the new version of the software, and the license confirmation unit performs a process for confirming with the user whether or not to permit the download process.

7. A software update system according to claim 1, wherein the software update process includes an activation process which is a process for activating the new version of the software installed on the electronic control unit, and the license confirmation unit performs a process for confirming with the user whether or not to permit the activation process.

8. A software update system according to claim 1, wherein the software update process includes a download process which is a process for downloading the new version of the software, and an activation process which is a process for activating the new version of the software installed on the electronic control unit, and the license confirmation unit separately performs a process for confirming with the user whether or not to permit the download process, and a process for confirming with the user whether or not to permit the activation process, and the first predetermined condition which is a predetermined condition determined by the operation termination determination unit before the license confirmation unit performs the process for confirming with the user whether or not to permit the download process, and the second predetermined condition which is a predetermined condition determined by the operation termination determination unit before the license confirmation unit performs the process for confirming with the user whether or not to permit the activation process.

9. A software update system according to claim 8, wherein the second predetermined condition is stricter than the first predetermined condition.

10. A software update system according to claim 8, wherein the number of items of the second predetermined condition is greater than the number of items of the first predetermined condition.

11. A software update device (40) that performs software update processing on an electronic control device installed in a vehicle, wherein the vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state, and comprises: an acquisition unit that acquires new software supplied via a network; an operating end determination unit that determines that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle being met; an authorization confirmation unit that performs processing to confirm with the user whether or not to authorize the execution of the software update processing when the operating end determination unit determines that the user has finished operating the vehicle; and an update control unit that, when the user authorizes the execution of the software update processing, executes the software update processing using the new software acquired by the acquisition unit.

12. A software update method for performing a software update process on an electronic control device installed in a vehicle, wherein the vehicle is a smart vehicle that automatically transitions from an operating state to an operating end state, and comprises: an acquisition step of acquiring new software supplied via a network; an operation end determination step of determining that the user has finished operating the vehicle based on predetermined conditions for determining that the user has finished operating the vehicle being met; a permission confirmation step of confirming with the user whether or not to permit the execution of the software update process when the operation end determination step determines that the user has finished operating the vehicle; and an update control step of executing the software update process using the new software acquired in the acquisition step when the user has permitted the execution of the software update process.

13. A program that causes a computer to execute the software update method described in claim 12.

Images