Search

JP-7855982-B2 - control system

JP7855982B2JP 7855982 B2JP7855982 B2JP 7855982B2JP-7855982-B2

Inventors

  • 矢船 僚一朗
  • 小堀 肇

Assignees

  • 株式会社アドヴィックス

Dates

Publication Date
20260511
Application Date
20220927

Claims (6)

  1. The system comprises an information processing device that acquires update software transmitted to the vehicle via wireless communication from outside the vehicle, and a global network that enables communication between a plurality of electronic control devices and the information processing device. A control system configured to allow updating of the software of a storage device provided in the first of the plurality of electronic control devices, It comprises a first execution device and a second execution device, When updating the software of the storage device of the first electronic control device with update software for the first electronic control device acquired by the information processing device, The information processing device divides the update software into multiple parts, and transmits the divided update software to the global network in an encrypted state. The first execution device decodes the first update split software, which is one of the update software that the information processing device has split and transmitted to the global network. The second execution device decodes the second update split software, which is one of the update software that the information processing device has split and transmitted to the global network. A control system that writes the first update partition software decoded by the first execution device and the second update partition software decoded by the second execution device to the storage device of the first electronic control unit.
  2. The first execution device is the execution device of the first electronic control unit, The second execution device is an execution device of the second electronic control unit among the plurality of electronic control units, The control system further comprises a local network for transmitting and receiving information only between the first electronic control unit and the second electronic control unit. The second execution device decodes the second update segment software received by the second electronic control unit, and transmits the decoded second update segment software to the first electronic control unit via the local network. The control system according to claim 1, wherein the first execution device performs the following: decoding of the first update split software received by the first electronic control unit, writing the decoded first update split software to the storage device, and writing the second update split software received via the local network to the storage device.
  3. The information processing device performs the following actions: transmit the first update partition software via the global network to the first electronic control unit, and transmit the second update partition software via the global network to the second electronic control unit. The control system according to claim 2, wherein the first execution device writes the first update split software that it has decoded to the storage device, and then writes the second update split software that the second electronic control device has transmitted to the first electronic control device via the local network to the storage device.
  4. After the information processing device has finished writing the second update split software to the storage device, it transmits the third update split software, which is one of the split update software programs, to the first electronic control device via the global network. The control system according to claim 3, wherein the first execution device decodes the third update split software after the writing of the second update split software to the storage device is completed, and writes the third update split software to the storage device.
  5. The information processing device transmits either the first update split software or the second update split software to the first electronic control unit via the global network. The first execution device is The first update split software received via the global network is decoded, and the first update split software is written to the storage device. The second update partition software received via the global network is transmitted to the second electronic control unit via the local network. The second update partition software received from the second electronic control unit via the local network is written to the storage device. The control system according to claim 2, wherein the second execution device decodes the second update segment software received from the first electronic control unit via the local network, and transmits the decoded second update segment software to the first electronic control unit via the local network.
  6. The first electronic control unit comprises the first execution device and the second execution device, The first execution device decodes the first update split software and writes the first update split software to the storage device. The control system according to claim 1, wherein the second execution device decodes the second update partition software and writes the second update partition software to the storage device.

Description

This invention relates to a control system installed in a vehicle. Patent Document 1 discloses a system having a function for updating the software of a storage device in an in-vehicle electronic control unit. In this system, when updating the software, a Tester is connected to an in-vehicle network to which multiple electronic control units are connected. The Tester has pre-stored update software for the electronic control unit to be updated. Therefore, when the Tester is connected to the in-vehicle network, the Tester transmits the update software to the target electronic control unit via the network. As a result, the software in the storage device of the electronic control unit is rewritten with the update software. Japanese Patent Publication No. 2018-120438 Figure 1 is a schematic diagram showing a vehicle equipped with the control system of the first embodiment and a data center located outside the vehicle.In Figure 2, (A) is a diagram showing the first half of the processing flow executed by the information processing device of the control system of the first embodiment, (B) is a diagram showing the first half of the processing flow executed by the first electronic control device of the control system, and (C) is a diagram showing the first half of the processing flow executed by the second electronic control device of the control system.In Figure 3, (A) is a diagram showing the latter half of the processing flow executed by the information processing device, (B) is a diagram showing the latter half of the processing flow executed by the first electronic control device, and (C) is a diagram showing the latter half of the processing flow executed by the second electronic control device.In Figure 4, (A) to (D) are timing charts showing the process of updating the software of the memory device provided by the first braking ECU, which corresponds to the first electronic control unit.In Figure 5, (A) is a diagram showing a part of the processing flow performed by the information processing device of the control system of the second embodiment, (B) is a diagram showing a part of the processing flow performed by the first electronic control device of the control system, and (C) is a diagram showing a part of the processing flow performed by the second electronic control device of the control system.Figure 6 is a schematic diagram showing the control system of the third embodiment.In Figure 7, (A) is a diagram showing the processing flow performed by the information processing device of the control system of the third embodiment, (B) is a diagram showing the processing flow performed by the first execution device of the first electronic control device of the control system, and (C) is a diagram showing the processing flow performed by the second execution device of the first electronic control device.Figure 8 is a schematic diagram showing the control system of the fourth embodiment.In Figure 9, (A) is a diagram showing a part of the processing flow performed by the information processing device of the control system of the fourth embodiment, (B) is a diagram showing a part of the processing flow performed by the first electronic control device of the control system, and (C) is a diagram showing a part of the processing flow performed by the second electronic control device of the control system. (First Embodiment) The first embodiment of the control system will be described below with reference to Figures 1 to 4. In this specification, the electronic control unit will be referred to as "ECU". "ECU" is an abbreviation for "Electronic Control Unit". Figure 1 illustrates a vehicle 10 and a data center 100 located outside the vehicle 10. <Data Center> The data center 100 is configured to send and receive various types of information with the vehicle 10 via the external network 200. In other words, the data center 100 sends and receives various types of information with the vehicle 10 via wireless communication. As will be explained in more detail later, vehicle 10 is equipped with multiple ECUs. When update software for updating the storage device software of any of the multiple ECUs becomes available, the data center 100 transmits the update software to vehicle 10 via the external network 200. The ECU whose software is to be updated among the multiple ECUs installed in vehicle 10 is referred to as the "ECU to be updated." <Vehicles> Vehicle 10 is equipped with a control system 15 and actuators. Vehicle 10 is equipped with a first actuator 11 and a second actuator 12 as actuators. The first actuator 11 and the second actuator 12 operate to adjust the braking force generated in vehicle 10. <Control System> The control system 15 includes a communication device 20 and an information processing device 30. The communication device 20 is a vehicle-side interface for sending and receiving information with the data center 100. The information processing device 30 is configured to communicate with the communication devi