Search

CN-116032957-B - Server, information processing system, and information processing method

CN116032957BCN 116032957 BCN116032957 BCN 116032957BCN-116032957-B

Abstract

The present disclosure relates to a server, an information processing system, and an information processing method. The vehicle as an autonomous vehicle is configured to acquire a control program of the ECU from the control center through wireless communication. The server includes a keyboard and a mouse for receiving an operation from an operation manager who manages the operation of the vehicle from outside the vehicle, a display for presenting information to the operation manager, a communication IF configured to be able to communicate with the control center, and a processor. The processor controls the display so that the update condition of the control program is prompted to the operation manager in the case where there is an updatable control program. The processor, when accepting an operation of allowing the update of the control program by the operation manager by the keyboard and the mouse, controls the communication IF so that the control center is notified of the permission of the update of the control program.

Inventors

  • Kageta Yu

Assignees

  • 丰田自动车株式会社

Dates

Publication Date
20260512
Application Date
20220914
Priority Date
20211026

Claims (12)

  1. 1. A server for managing the operation of an autonomous vehicle, wherein, The autonomous vehicle is configured to acquire a control program loaded on a control device of the autonomous vehicle from a control center through wireless communication, The server is provided with: an input device that receives an operation from an outside of the autonomous vehicle by an operation manager who manages an operation of the autonomous vehicle; The output device prompts information to the operation manager; A communication device configured to be capable of communicating with at least one of the autonomous vehicle and the control center, and A processor controlling the input device, the output device and the communication device, In the case where the control program capable of updating is present, the processor controls the output device so that the running manager is prompted with an update condition of the control program, In the case where an operation of allowing updating of the control program by the operation manager is accepted by the input means, the processor controls the communication means so that at least one of the autonomous vehicle and the control center is notified of permission to update the control program, After the control program is updated, the remote monitor is inquired about whether or not to approve the start of the travel of the automated guided vehicle after the control program is updated, the remote monitor is inquired about the change content of the control program, which is different from the operation manager, from the remote monitor, the automated guided vehicle is informed of the start permission of the travel of the vehicle when the operation of permitting the start of the travel of the automated guided vehicle by the remote monitor is accepted, and the automated guided vehicle is informed of the prohibition of the travel of the vehicle when the operation of not approving the start of the travel of the automated guided vehicle by the remote monitor is accepted, and the automated guided vehicle is prohibited from starting the travel.
  2. 2. The server of claim 1, wherein, And an authentication device configured to authenticate the operation manager, The processor controls the output device so that the update condition is prompted to the operation manager authenticated by the authentication device.
  3. 3. The server according to claim 2, wherein, The processor controls the input device so that an operation of the operation manager authenticated by the authentication device is accepted, and an operation of an operator not authenticated by the authentication device is not accepted.
  4. 4. The server according to any one of claim 1 to 3, wherein, The update condition includes a condition related to a time required for updating the control program.
  5. 5. The server according to any one of claim 1 to 3, wherein, The update condition includes a condition related to a period during which the control program can be updated.
  6. 6. The server according to any one of claim 1 to 3, wherein, The server manages operations of a plurality of vehicles each having a plurality of control devices mounted thereon, The update conditions include conditions for determining a vehicle to be updated by the control program from among the plurality of vehicles, and conditions for determining a control device to be updated by the control program from among the plurality of control devices mounted on the vehicle.
  7. 7. The server according to any one of claim 1 to 3, wherein, The update condition includes a condition related to a function of the autonomous vehicle updated by the control program.
  8. 8. The server according to any one of claim 1 to 3, wherein, The update condition includes a condition related to a function of the autonomous vehicle that is limited along with the update of the control program.
  9. 9. The server according to any one of claim 1 to 3, wherein, The update condition includes a condition related to a disclaimer of the control center for a trouble that may occur along with the update of the control program.
  10. 10. An information processing system, wherein the information processing system comprises: The server according to claim 1 to 9, and The autonomous vehicle.
  11. 11. The information handling system of claim 10, wherein, In the case where at least one of the autonomous vehicle and the control center receives a notification that update of the control program is permitted, the autonomous vehicle acquires the control program from the control center, and on the other hand, In a case where at least one of the autonomous vehicle and the control center receives a notification rejecting update of the control program, the autonomous vehicle does not acquire the control program from the control center.
  12. 12. An information processing method, in which information related to the operation of an autonomous vehicle is managed by a server, The autonomous vehicle is configured to acquire a control program loaded on a control device of the autonomous vehicle from a control center through wireless communication, The information processing method comprises the following steps: In the case where the control program that can be updated exists, the server presents an update condition of the control program to an operation manager who manages the operation of the autonomous vehicle from outside the autonomous vehicle, and In the case where the operation manager performs an operation of allowing updating of the control program, the server notifies at least one of the autonomous vehicle and the control center of allowing updating of the control program, After the control program is updated, the remote monitor is inquired about whether or not to approve the start of the travel of the automated guided vehicle after the control program is updated, the remote monitor is inquired about the change content of the control program, which is different from the operation manager, from the remote monitor, the automated guided vehicle is informed of the start permission of the travel of the vehicle when the operation of permitting the start of the travel of the automated guided vehicle by the remote monitor is accepted, and the automated guided vehicle is informed of the prohibition of the travel of the vehicle when the operation of not approving the start of the travel of the automated guided vehicle by the remote monitor is accepted, and the automated guided vehicle is prohibited from starting the travel.

Description

Server, information processing system, and information processing method Technical Field The present disclosure relates to a server and an information processing method, and more particularly, to a server that manages operation of an autonomous vehicle, an information processing system provided with the server, and an information processing method that manages information related to operation of an autonomous vehicle by the server. Background Japanese patent application laid-open publication No. 2018-132979 discloses a software update system that manages update of software of a control device mounted on a vehicle. The system updates the software by wireless communication (so-called OTA (Over The Air)). Disclosure of Invention When updating software of an electrical device such as a personal computer or a smart phone, it is generally conditioned on permission of a user. Similarly, it is considered that the control program of the control device mounted on the vehicle is updated so as to be allowed by the user in advance. The present inventors have focused on the following problems that may occur in an autonomous vehicle. In the conventional vehicle, the driver is in the vehicle cabin, and thus the driver may be allowed to update the control program. On the other hand, the autonomous vehicle can perform operation management from outside the autonomous vehicle. That is, in an autonomous vehicle, the operation manager is not necessarily in the vehicle cabin. Thus, how to obtain the permission of the update control program may become a subject. In relation to such a situation, there is no study in Japanese patent application laid-open No. 2018-132979. The present disclosure has been made to solve the above-described problems, and an object of the present disclosure is to appropriately update a control program of a control device mounted on an autonomous vehicle. (1) A server of one aspect of the present disclosure manages the operation of an autonomous vehicle. The autonomous vehicle is configured to acquire a control program to be mounted on a control device of the autonomous vehicle from a control center by wireless communication. The server includes an input device for receiving an operation from an operation manager who manages the operation of the autonomous vehicle from outside the autonomous vehicle, an output device for presenting information to the operation manager, a communication device configured to be capable of communicating with at least one of the autonomous vehicle and the control center, and a processor for controlling the input device, the output device, and the communication device. In the case where there is an updatable control program, the processor controls the output device so that the update condition of the control program is presented to the operation manager. When an operation of allowing update of the control program by the operation manager is accepted by the input device, the processor controls the communication device so that at least one of the autonomous vehicle and the control center is notified of the permission of update of the control program. (2) The server further includes an authentication device configured to authenticate the operation manager. The processor controls the output device so that the update condition is prompted to the operation manager authenticated by the authentication device. (3) The processor controls the input device so that an operation of the operation manager authenticated by the authentication device is accepted, and an operation of an operator not authenticated by the authentication device is not accepted. (4) The update condition includes a condition related to a time required for the update of the control program. (5) The update condition includes a condition related to a period during which the control program can be updated. (6) The server manages operations of a plurality of vehicles each having a plurality of control devices mounted thereon. The update condition includes a condition of the vehicle for determining an update target of the control program from among the plurality of vehicles, and includes a condition of the control device for determining an update target of the control program from among the plurality of control devices mounted on the vehicle. (7) The update condition includes a condition related to a function of the automatically driven vehicle updated by the control program. (8) The update condition includes a condition related to a function of the autonomous vehicle that is limited along with the update of the control program. (9) The update condition includes a condition related to a disclaimer of the control center for a trouble that may occur along with the update of the control program. (10) An information processing system according to another aspect of the present disclosure includes the server and an autonomous vehicle. (11) In the case where at least one of the autonomous vehicle and the control center receives a no