[go: up one dir, main page]

WO2018189951A1 - Dispositif de relais, procédé de relais et programme informatique - Google Patents

Dispositif de relais, procédé de relais et programme informatique Download PDF

Info

Publication number
WO2018189951A1
WO2018189951A1 PCT/JP2017/044758 JP2017044758W WO2018189951A1 WO 2018189951 A1 WO2018189951 A1 WO 2018189951A1 JP 2017044758 W JP2017044758 W JP 2017044758W WO 2018189951 A1 WO2018189951 A1 WO 2018189951A1
Authority
WO
WIPO (PCT)
Prior art keywords
abnormality
communication
vehicle
relay device
server
Prior art date
Application number
PCT/JP2017/044758
Other languages
English (en)
Japanese (ja)
Inventor
中野　貴之
Original Assignee
住友電気工業株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 住友電気工業株式会社 filed Critical 住友電気工業株式会社
Publication of WO2018189951A1 publication Critical patent/WO2018189951A1/fr

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/07—Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/14—Error detection or correction of the data by redundancy in operation
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F13/00—Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates

Definitions

  • the present invention relates to a relay device, a relay method, and a computer program.
  • This application claims priority based on Japanese Patent Application No. 2017-078812 filed on Apr. 12, 2017, and incorporates all the description content described in the above Japanese application.
  • ECUs Electronic Control Units
  • the types of ECUs include, for example, those related to the traveling system that controls the engine, brakes, EPS (Electric Power Steering), etc.
  • body-type ECUs that control the turning on / off of lights and the sounding of alarm devices
  • meter-type ECUs that control the operation of meters arranged near the driver's seat.
  • the ECU is configured by an arithmetic processing device such as a microcomputer, and the control of the in-vehicle device is realized by reading and executing a control program stored in a ROM (Read Only Memory).
  • the ECU control program may differ depending on the destination, grade, etc. of the vehicle, and it is necessary to rewrite the old version control program to the new version control program in response to the upgrade of the control program. Further, it is necessary to rewrite data necessary for execution of the control program such as map information and control parameters.
  • Patent Document 1 discloses a technique (online update function) for downloading an update program from a server via a network and updating the program.
  • the relay device is a relay device belonging to the in-vehicle network including the in-vehicle control device, and the update program for the in-vehicle control device transferred from the relay device to the in-vehicle control device is transmitted via wireless communication to the server A control unit that determines the reception timing of the update program according to the presence or absence of a communication abnormality that can occur from the server to the relay device, and if there is an abnormality, the type of the communication abnormality, Is provided.
  • the relay method is a relay device that belongs to an in-vehicle network that includes an in-vehicle control device, receives an update program for the in-vehicle control device transmitted from the server, and transfers the update program to the in-vehicle control device.
  • a method for receiving an update program from a server via wireless communication whether there is a communication abnormality that may occur from the server to the relay device, and if there is an abnormality, depending on the type of the communication abnormality And determining the reception timing of the update program.
  • the computer program is a computer program for causing a computer to function as a relay device belonging to an in-vehicle network including the in-vehicle control device, and the in-vehicle control device transfers the computer from the relay device to the in-vehicle control device.
  • the communication unit that receives the update program for the control device from the server via wireless communication the presence or absence of a communication abnormality that may occur from the server to the relay device, and the type of the communication abnormality if there is an abnormality
  • a control unit that determines the reception timing of the update program.
  • FIG. 1 is an overall configuration diagram of a program update system.
  • FIG. 2 is a block diagram showing the internal configuration of the gateway.
  • FIG. 3 is a block diagram showing an internal configuration of the ECU.
  • FIG. 4 is a block diagram showing the internal configuration of the management server.
  • FIG. 5 is a sequence diagram showing an example of the flow of online update of the control program executed in the program update system.
  • FIG. 6 is a flowchart showing specific contents of the DL control processing in the program update system according to the first embodiment.
  • FIG. 7 is a flowchart showing an example of the specifying process in step S107 of FIG.
  • FIG. 8 is a diagram illustrating an example of network information.
  • FIG. 9 is a diagram illustrating an example of a correspondence relationship between the type of abnormality and the reception timing.
  • FIG. 10 is a diagram illustrating an example of a travel model.
  • An object of an aspect of the present disclosure is to provide a relay device, a relay method, and a computer program capable of taking appropriate measures for receiving from a server an update program to be transferred to an in-vehicle control device according to a communication situation Is to provide.
  • the relay device included in the present embodiment is a relay device belonging to the in-vehicle network including the in-vehicle control device, and updates the in-vehicle control device update program transferred from the relay device to the in-vehicle control device via wireless communication.
  • Control that determines the reception timing of the update program according to the communication unit that receives from the server, the presence or absence of a communication abnormality that may occur from the server to the relay device, and the type of the communication abnormality if there is an abnormality A section.
  • reception timing is determined according to the presence or absence of a communication abnormality that can occur from the server to the relay device, and if there is an abnormality, the reception timing is determined after the abnormality is resolved.
  • An update program can be received from the server while avoiding abnormalities. Thereby, the update program can be reliably received from the server, and can be transferred to the in-vehicle control device.
  • the control unit delays the reception timing until the detected communication abnormality is resolved. Thereby, it is possible to receive the update program from the server while avoiding the abnormality. For this reason, the update program can be reliably received from the server and can be transferred to the in-vehicle control device.
  • the control unit causes the communication unit to transmit a transmission request for the update program to the server.
  • the update program can be received from the server corresponding to the transmission request. For this reason, the update program can be reliably received from the server and can be transferred to the in-vehicle control device.
  • the communication abnormality includes at least one of the following first to third abnormality.
  • First abnormality Communication failure on the server side
  • Second abnormality Communication failure due to congestion of wireless communication
  • Third abnormality Communication failure on the vehicle side
  • the relay device can identify the type of communication abnormality, The timing at which the communication abnormality is resolved with high accuracy can be determined as the reception timing.
  • the update program can be reliably received from the server, and can be transferred to the in-vehicle control device.
  • the communication unit can receive the first information indicating the occurrence period of the first abnormality, and the control unit detects the presence or absence of the first abnormality based on the received first information. To do. By detecting the presence or absence of the first abnormality using the first information, the presence or absence of the first abnormality can be identified easily and accurately.
  • the communication unit can receive the second information indicating the occurrence period of the second abnormality, and the control unit detects the presence or absence of the second abnormality based on the received second information. To do. Thereby, the presence or absence of the second abnormality can be specified easily and accurately.
  • the communication unit can receive the third information indicating the position of the vehicle on which the relay device is mounted from any of the in-vehicle control devices, and the control unit is based on the received third information.
  • the presence or absence of the third abnormality is detected. Thereby, the presence or absence of the third abnormality can be specified easily and accurately.
  • the control unit determines whether or not to delay the reception timing when the required time for receiving all the update programs is equal to or greater than a predetermined threshold.
  • a predetermined threshold In a state where the communication state from the server to the relay device is bad, the communication speed is slow, so that the time required to receive all the update programs increases. Therefore, by comparing the required time and the threshold, it is possible to easily detect the presence or absence of communication abnormality from the server to the relay device.
  • the control unit can receive vehicle information indicating whether or not the vehicle on which the relay device is mounted is in operation from any of the in-vehicle control devices. In the case of representing inside, it is determined whether or not to delay the reception timing. Thereby, the update program can be received from the server while the vehicle is in operation. Therefore, it becomes easy to update the control program while driving the vehicle, and the convenience for the user can be improved.
  • the relay method included in the present embodiment is a method for receiving the update program from the server and transferring it to the in-vehicle control device in the relay device according to any one of (1) to (9). .
  • Such a relay method has the same effects as the relay devices (1) to (9).
  • a computer program included in the present embodiment causes a computer to function as the relay device described in any one of (1) to (9). Such a computer program has the same effects as those of the relay devices (1) to (9).
  • FIG. 1 is an overall configuration diagram of a program update system according to an embodiment.
  • the program update system of this embodiment includes a vehicle 1, a management server 5, and a DL (download) server 6 that can communicate via a wide area communication network 2.
  • the management server 5 manages update information of the vehicle 1.
  • the DL server 6 stores an update program.
  • the management server 5 and the DL server 6 are operated by, for example, a car manufacturer of the vehicle 1 and can communicate with a large number of vehicles 1 owned by users who are registered as members in advance.
  • the vehicle 1 includes an in-vehicle network (communication network) 4 including a plurality of ECUs 30 connected by in-vehicle communication lines and a gateway 10, a wireless communication unit 15, and various in-vehicle devices controlled by the ECUs 30 (not shown). )) And are installed.
  • an in-vehicle network (communication network) 4 including a plurality of ECUs 30 connected by in-vehicle communication lines and a gateway 10, a wireless communication unit 15, and various in-vehicle devices controlled by the ECUs 30 (not shown). ))
  • the gateway 10 relays communication between the communication groups.
  • the wireless communication unit 15 is communicably connected to a wide area communication network 2 such as a mobile phone network, and is connected to the gateway 10 via an in-vehicle communication line.
  • the gateway 10 transmits information received by the wireless communication unit 15 from the external devices such as the management server 5 and the DL server 6 through the wide area communication network 2 to the ECU 30 via the in-vehicle communication line.
  • the gateway 10 transmits information acquired from the ECU 30 to the wireless communication unit 15, and the wireless communication unit 15 transmits the information to an external device such as the management server 5.
  • ECU30 transmits / receives information via an in-vehicle communication line.
  • the wireless communication unit 15 mounted on the vehicle 1 in addition to the in-vehicle dedicated communication terminal, devices such as a mobile phone, a smartphone, a tablet terminal, and a notebook computer (Personal Computer) owned by the user can be considered.
  • the gateway 10 communicates with an external device via the wireless communication unit 15 is illustrated, but when the gateway 10 has a wireless communication function, the gateway 10 itself is a management server 5 or the like. It is good also as a structure which performs wireless communication with an external apparatus.
  • the management server 5 and the DL server 6 are configured as separate servers, but these servers 5 and 6 may be configured as one server device. Further, both the management server 5 and the DL server 6 may be composed of a plurality of devices.
  • FIG. 2 is a block diagram showing the internal configuration of the gateway 10.
  • the gateway 10 includes a CPU 11, a RAM (Random Access Memory) 12, a storage unit 13, an in-vehicle communication unit 14, and the like.
  • the gateway 10 is connected via the wireless communication unit 15 and the in-vehicle communication line, but these may be configured by a single device.
  • the CPU 11 causes the gateway 10 to function as a relay device for various types of information by reading one or more programs stored in the storage unit 13 into the RAM 12 and executing them.
  • the CPU 11 can execute a plurality of programs in parallel, for example, by switching and executing a plurality of programs in a time division manner.
  • the CPU 11 may represent a plurality of CPU groups. In this case, the functions realized by the CPU 11 are realized by the cooperation of a plurality of CPU groups.
  • the RAM 12 is composed of a memory element such as SRAM (Static RAM) or DRAM (Dynamic RAM), and temporarily stores a program executed by the CPU 11, data necessary for execution, and the like.
  • the computer program realized by the CPU 11 can be transferred while being recorded on a known recording medium such as a CD-ROM or DVD-ROM, or can be transferred by information transmission from a computer device such as a server computer.
  • the transfer (transmission) of data from the upper apparatus to the lower apparatus is also referred to as “downloading”.
  • the storage unit 13 includes a nonvolatile memory element such as a flash memory or an EEPROM.
  • the storage unit 13 stores a program executed by the CPU 11 and data necessary for the execution, and stores an update program for each ECU 30 to be downloaded received from the DL server 6.
  • a plurality of ECUs 30 are connected to the in-vehicle communication unit 14 via an in-vehicle communication line disposed in the vehicle 1.
  • the in-vehicle communication unit 14 communicates with the ECU 30 according to, for example, a CAN (Controller Area Network) standard.
  • the communication standard adopted by the in-vehicle communication unit 14 is not limited to CAN, but is CANFD (CAN with Flexible Data Rate), LIN (Local Interconnect Network), Ethernet (registered trademark), or MOST (Media Oriented Systems Transport: MOST is a registered trademark). Or the like.
  • Some in-vehicle communication lines may include different communication standards.
  • the in-vehicle communication unit 14 transmits the information given from the CPU 11 to the target ECU 30 and gives the information received from the ECU 30 to the CPU 11.
  • the in-vehicle communication unit 14 may perform communication according to other communication standards used for the in-vehicle network 4 as well as the above communication standards.
  • the wireless communication unit 15 includes a wireless communication device including an antenna and a communication circuit that performs transmission / reception of a wireless signal from the antenna.
  • the wireless communication unit 15 can communicate with an external device by being connected to a wide area communication network 2 such as a mobile phone network.
  • the wireless communication unit 15 transmits information given from the CPU 11 to an external device such as the management server 5 via the wide area communication network 2 formed by a base station (not shown), and receives information received from the external device to the CPU 11. give.
  • a wired communication unit that functions as a relay device in the vehicle 1 may be employed.
  • the wired communication unit has a connector to which a communication cable conforming to a standard such as USB (Universal Serial Bus) or RS232C is connected, and performs wired communication with another communication device connected via the communication cable.
  • a communication cable conforming to a standard such as USB (Universal Serial Bus) or RS232C is connected
  • RS232C Universal Serial Bus
  • the outside of the vehicle depends on the communication path of the outside device ⁇ another communication device ⁇ the wired communication unit ⁇ the gateway 10.
  • the apparatus and the gateway 10 can communicate with each other.
  • FIG. 3 is a block diagram showing an internal configuration of the ECU 30.
  • the ECU 30 includes a CPU 31, a RAM 32, a storage unit 33, a communication unit 34, and the like.
  • the ECU 30 is an in-vehicle control device that individually controls target devices mounted on the vehicle 1. Examples of the ECU 30 include a power supply control ECU, an engine control ECU, a steering control ECU, and a door lock control ECU.
  • the CPU 31 controls the operation of the target device that it is in charge of by reading one or more programs stored in advance in the storage unit 33 into the RAM 32 and executing them.
  • the CPU 31 may also represent a plurality of CPU groups, and the control by the CPU 31 may be control by cooperation of a plurality of CPU groups.
  • the RAM 32 is configured by a memory element such as SRAM or DRAM, and temporarily stores programs executed by the CPU 31, data necessary for execution, and the like.
  • the storage unit 33 is configured by a nonvolatile memory element such as a flash memory or an EEPROM, or a magnetic storage device such as a hard disk.
  • the storage unit 33 stores a program that the CPU 31 reads and executes.
  • the information stored in the storage unit 33 includes, for example, a computer program (hereinafter referred to as “control program”) for causing the CPU 31 to execute information processing for controlling a target device that is a control target in the vehicle, a parameter, Data used when the program is executed, such as map information, is included.
  • the communication unit 34 is connected to the gateway 10 via an in-vehicle communication line disposed in the vehicle 1.
  • the communication unit 34 communicates with the gateway 10 according to a standard such as CAN, Ethernet, or MOST.
  • the communication unit 34 transmits the information given from the CPU 31 to the gateway 10 and gives the information received from the gateway 10 to the CPU 31.
  • the communication unit 34 may communicate according to other communication standards used for the in-vehicle network, in addition to the above communication standards.
  • the CPU 31 of the ECU 30 includes an activation unit 35 that switches the control mode by the CPU 31 to either “normal mode” or “reprogramming mode” (hereinafter also referred to as “repro mode”).
  • the normal mode is a control mode in which the CPU 31 of the ECU 30 executes an original control for the target device (for example, engine control for the fuel engine, door lock control for the door lock motor, etc.).
  • the reprogramming mode is a control mode in which a control program used for controlling the target device is updated. That is, the reprogramming mode is a control mode in which the CPU 31 erases or rewrites data of the control program in the ROM area of the storage unit 33. Only in this control mode, the CPU 31 can update the control program stored in the ROM area of the storage unit 33 to a new version.
  • the activation unit 35 When the CPU 31 writes the new version of the control program in the storage unit 33 in the repro mode, the activation unit 35 once restarts (resets) the ECU 30 and executes the verify process on the storage area in which the new version of the control program is written. .
  • the activation unit 35 causes the CPU 31 to operate according to the updated control program after the above-described verification processing is completed. Downloading an update program from the DL server 6 to the ECU 30 via the gateway 10 and updating the control program using the update program is also referred to as online update.
  • FIG. 4 is a block diagram showing the internal configuration of the management server 5.
  • the management server 5 includes a CPU 51, a ROM 52, a RAM 53, a storage unit 54, a communication unit 55, and the like.
  • the CPU 51 reads out one or more programs stored in advance in the ROM 52 to the RAM 53 and executes them, thereby controlling the operation of each hardware and causing the management server 5 to function as an external device that can communicate with the gateway 10.
  • the CPU 51 may also represent a plurality of CPU groups, and the functions realized by the CPU 51 may be realized by the cooperation of a plurality of CPU groups.
  • the RAM 53 is configured by a memory element such as SRAM or DRAM, and temporarily stores programs executed by the CPU 51 and data necessary for execution.
  • the storage unit 54 includes a nonvolatile memory element such as a flash memory or an EEPROM, or a magnetic storage device such as a hard disk.
  • the communication unit 55 includes a communication device that executes communication processing in accordance with a predetermined communication standard, and is connected to the wide area communication network 2 such as a mobile phone network to execute the communication processing.
  • the communication unit 55 transmits the information given from the CPU 51 to the external device via the wide area communication network 2 and gives the information received via the wide area communication network 2 to the CPU 51.
  • FIG. 5 is a sequence diagram showing an example of an online update flow of the control program executed in the program update system of the present embodiment.
  • One or a plurality of update programs are stored in the DL server 6.
  • the management server 5 determines the timing for updating the control program of the ECU of the vehicle 1 for the vehicle 1 registered in advance.
  • the update timing may be set by, for example, the car manufacturer of the vehicle 1.
  • the control program includes not only the program itself but also data used when executing the program, such as parameters and map information. These are represented as “control programs”. Therefore, the update program includes not only a program for updating the program but also data for updating data used when the program is executed.
  • step S1 the management server 5 notifies the gateway 10 of the corresponding vehicle 1 of the update (step S1).
  • step 1 update information such as the storage destination URL of the update program and the size of the update program is sent from the management server 5 to the gateway 10 together with the download request.
  • the gateway 10 that has received the update notification from the management server 5 executes a download (DL) control process (step S2).
  • the DL control process includes a process of detecting the presence or absence of a communication abnormality that may occur in downloading an update program from the DL server 6 to the gateway 10 (detection process). Further, the DL control process includes a process of specifying the type of detected communication abnormality (identification process).
  • the DL control process includes a process for receiving the update program at the timing (reception timing) of receiving the update program from the DL server 6 (download process).
  • the download process includes a process (decision process) for determining the reception timing according to the type of communication abnormality when a communication abnormality is detected. The DL control process will be described later.
  • the gateway 10 transmits a download request for downloading the update program to the DL server 6 at the reception timing (step S3). Thereby, the update program is transmitted from the DL server 6 at the timing, and is received by the gateway 10.
  • the DL server 6 requested to download from the gateway 10 transmits the update program to be downloaded to the gateway 10 and requests the control program to be updated (step S4).
  • the gateway 10 When the gateway 10 receives the update program transmitted from the DL server 6 by the wireless communication unit 15, the gateway 10 transfers the update program to the target ECU 30 and requests an update of the control program (step S5).
  • the gateway 10 may transfer the update program by receiving an update permission from the user.
  • the target ECU 30 that has received the update program deploys the update program in accordance with a request from the gateway 10 and updates the control program (step S6).
  • the target ECU 30 notifies the gateway 10 of the update completion (step S7).
  • the gateway 10 Upon receiving this notification, the gateway 10 notifies the DL server 6 of the update completion (step S8).
  • CPU 11 of gateway 10 includes a detection processing unit 111 and a download (DL) control unit 112 as functions for executing the DL control processing. These functions are functions realized in the CPU 11 when the CPU 11 reads and executes one or more programs stored in the storage unit 13. However, at least a part of the functions may be realized by hardware such as an electronic circuit.
  • the function of the CPU 11 represented by the detection processing unit 111 executes a detection process. Specifically, the detection processing unit 111 determines whether there is a communication abnormality that may occur from the DL server 6 to the gateway 10 based on an estimated required time (assumed time) T for receiving all the update programs. Detect.
  • the communication abnormality includes a state in which communication is impossible and a state in which the communication state is worse than normal even though communication is possible.
  • the state where the communication state is bad includes a state where the communication speed is slower than the prescribed speed, a state where the occupation rate of the communication line exceeds the prescribed occupation rate, and the like.
  • the detection processing unit 111 calculates an estimated time T.
  • the assumed time T indicates the time from when the DL server 6 starts transmitting the update program until the gateway 10 completes reception.
  • the size X is acquired from, for example, an update notification from the management server 5.
  • the communication speed V is measured using, for example, a ping command that is a command using an echo command of ICMP (Internet Control Message Protocol).
  • the detection processing unit 111 outputs a ping command to other devices connected to the target communication line, and measures the response time for the command to obtain the communication speed V.
  • the detection processing unit 111 stores in advance the minimum communication speed when there is no communication abnormality as the threshold Th1, and compares the communication speed V with the threshold Th1. When it is determined that there is a communication abnormality, the reception timing is determined according to the type of the communication abnormality. For this reason, the detection processing unit 111 executes a specific process when the result of the detection process is a communication abnormality.
  • the communication abnormality is a first abnormality (abnormality A) that is a communication failure on the DL server 6 side, and wireless communication included in communication via the wide area communication network 2 from the DL server 6 to the gateway 10.
  • the detection processing unit 111 specifies the type of detected communication abnormality by specifying the presence or absence of each of the abnormalities A to C. The specific process will be described later.
  • the detection processing unit 111 stores in advance the longest required time when there is no communication abnormality as the threshold Th2, and compares the calculated estimated time T with the threshold Th2.
  • the detection processing unit 111 determines that there is no influence on the processing even if the processing requiring communication is simultaneously present in another device.
  • the detection processing unit 111 determines that there is a possibility of causing a failure in the processing that requires communication in the other device. In this case, the priority of the process of downloading the target update program is lowered.
  • the function of the CPU 11 represented by the DL control unit 112 executes a download process. Specifically, the DL control unit 112 executes a process for receiving the update program from the DL server 6 at the reception timing. For this purpose, the DL control unit 112 executes a determination process to determine the reception timing.
  • the determination process is a process of determining the reception timing according to the presence or absence of a communication abnormality and, if there is an abnormality, the type of the communication abnormality. Specifically, when there is no abnormality, the DL control unit 112 determines the timing (first timing) received from the management server 5 as the reception timing. Then, processing for receiving the update program from the DL server 6 is executed at the first timing.
  • the DL control unit 112 determines a timing (second timing) corresponding to the type of communication abnormality identified by the identifying process as the reception timing. And the process for receiving the program for an update from DL server 6 is performed at a 2nd timing. And download starts at the second timing.
  • the second timing is the timing after the communication abnormality is resolved. Therefore, determining the second timing as the reception timing means delaying the reception timing until the communication abnormality is resolved.
  • the DL control unit 112 stores a correspondence relationship between the type of communication abnormality and the reception timing (second timing) in advance in order to specify the second timing.
  • the correspondence relationship is a timing at which the abnormality is predicted to be resolved for each type of communication abnormality. The determination process using the correspondence will be described later.
  • the DL control unit 112 determines whether or not the vehicle 1 is in operation at the first timing.
  • the DL control unit 112 executes detection processing and determination processing to set the second timing. The reception timing is determined.
  • the DL control unit 112 is driven by an ECU 30 that controls a drive system such as an engine, for example, vehicle information indicating whether or not the vehicle 1 is in operation. Is determined based on the vehicle information.
  • FIG. 6 is a flowchart showing specific contents of the DL control processing in the program update system according to the present embodiment.
  • the processing shown in the flowchart of FIG. 6 is performed by the CPU 11 of the gateway 10 by reading one or more programs stored in the storage unit 13 onto the RAM 12 and executing them, thereby executing the detection processing unit 111 and the DL control unit 112. It is executed by realizing the function.
  • the processing in FIG. 5 is repeatedly executed at a predetermined timing such as a predetermined time interval while the CPU 11 is activated.
  • CPU 11 determines whether or not download of the update program is requested from management server 5 (step S101). When no download is requested from the management server 5 (NO in step S101), the series of operations is terminated.
  • step S101 When download is requested from the management server 5 (YES in step S101), the CPU 11 measures the communication speed V (step S103). Then, the CPU 11 compares the communication speed V with the threshold value Th1 (step S105).
  • step S105 When the communication speed V is smaller than the threshold Th1 (V ⁇ Th1) (YES in step S105), that is, when it is determined that there is a communication abnormality based on the communication speed V, the CPU 11 performs a specific process (step S107). Execute. The specifying process in step S107 will be specifically described later.
  • step S113 the CPU 11 refers to the correspondence relationship between the type of communication abnormality stored in advance and the second timing, specifies the second timing according to the type of abnormality, and determines the reception timing. The process of step S113 will be specifically described later.
  • the CPU 11 uses the timing (first timing) at which the download of the update program is requested from the management server 5 as the reception timing. Decide and execute the download process (step S111).
  • step S105 When the communication speed V is equal to or higher than the threshold Th1 (V ⁇ Th1) (NO in step S105), that is, when it is determined that there is no communication abnormality based on the communication speed V, the CPU 11 performs a detection process (steps S115 and 117). ). That is, the CPU 11 calculates the estimated time T (step S115). Then, the CPU 11 compares the calculated estimated time T with the threshold value Th2 (step S117).
  • step S111 If the estimated time T is equal to or less than the threshold Th2 (T ⁇ Th2) (NO in step S117), the CPU 11 executes a download process (step S111).
  • step S117 If the estimated time T is greater than the threshold Th2 (T> Th2) (YES in step S117), the CPU 11 lowers the priority of the update program download process (step S119).
  • FIG. 7 is a flowchart showing an example of the specifying process in step S107 of FIG.
  • the CPU 11 specifies whether or not there is a communication failure (abnormality C) in the wireless communication unit 15 (step S201).
  • the CPU 11 can perform communication by the wireless communication unit 15 depending on whether or not the current position of the vehicle 1 on which the gateway 10 is mounted is included in a dead area where the communication state by the wireless communication unit 15 is poor. It is determined whether or not it is in a state.
  • the current position of the vehicle 1 can be acquired as follows, for example. That is, the CPU 11 acquires position information (third information) indicating the current position of the vehicle 1 from the ECU 30 that controls an in-vehicle device that is a navigation device (not shown). Alternatively, the CPU 11 may acquire position information (third information) from the ECU 30 that controls an in-vehicle device that can communicate with a GPS (Global Positioning System).
  • position information third information
  • GPS Global Positioning System
  • the CPU 11 acquires an area map including the dead area.
  • the area map is information indicating, for example, the communication strength at the position or range for each position or range.
  • the area map is assumed to be generated by a communication company that manages wireless communication performed by the wireless communication unit 15 and provided on a website or the like.
  • CPU11 can memorize
  • the CPU 11 specifies that there is no abnormality C, and then communicates with the DL server 6 via a communication failure (abnormality A) and / or the wide area communication network 2.
  • a communication failure abnormality A
  • / or the wide area communication network 2 The presence or absence of a communication failure (abnormality B) due to congestion of wireless communication included in the transmitted communication is specified.
  • the CPU 11 requests a response to the DL server 6 using a ping command (step S203).
  • the CPU 11 measures the response time RT from the DL server 6. Further, the CPU 11 stores in advance the response time from the DL server 6 when there is no abnormality in the wireless communication via the wide area communication network 2 as the threshold value Rth. Then, the CPU 11 identifies the presence or absence of abnormality A and / or abnormality B by comparing the response time RT and the threshold value Rth.
  • the CPU 11 When the response time RT is shorter than the threshold value Rth (RT ⁇ Rth) (NO in step S205), the CPU 11 specifies that there is no abnormality A and abnormality B, and specifies the abnormality type identification result as “no abnormality”. Return (step S207).
  • the CPU 11 When there is no response from the DL server 6 or when there is a response, if the response time RT is longer than the threshold value Rth (RT> Rth) (YES in step S205), the CPU 11 Specify that there is at least one. Therefore, the CPU 11 refers to information (server information: first information) related to the communication state of the DL server 6 in order to identify the presence or absence of abnormality A (step S209).
  • server information first information
  • the server information includes information indicating a period during which the communication function of the DL server 6 is not complete, that is, an occurrence period of the abnormality A (first period).
  • the first period is, for example, a date / time or a time zone in which a communication failure is scheduled due to maintenance or the like.
  • the server information is assumed to be generated by a car manufacturer or the like that operates the DL server 6 and provided on a website or the like.
  • the CPU 11 determines whether or not there is an abnormality A by determining whether or not the determination time belongs to the first period indicated in the server information (step S211).
  • the CPU 11 identifies that there is an abnormality A and determines the type of abnormality. Is returned as “abnormal A detection” (step S213).
  • the CPU 11 specifies that there is no abnormality A.
  • the CPU 11 refers to information (network information: second information) relating to the communication state of communication via the wide area communication network 2 in order to identify the presence or absence of abnormality B (step S215).
  • the network information includes information indicating a communication failure occurrence period due to wireless communication congestion, that is, an abnormality B occurrence period (second period).
  • the network information is, for example, statistical information (network statistical information) of communication volume for each predetermined unit period such as a day of the week and a time zone.
  • the network statistical information is assumed to be generated by a communication company that provides wireless communication via the wide area communication network 2 and provided on a website or the like, for example.
  • FIG. 8 is a diagram showing an example of network information, and represents statistical information on the traffic volume per hour.
  • a congestion state occurs and a time zone (congestion time zone) is shown, and further, the congestion state time zone shows the degree of congestion in two stages (congestion and most congestion). .
  • the CPU 11 determines whether or not there is an abnormality B by determining whether or not the determination time belongs to the second period indicated in the network statistical information (step S217).
  • the network information By using the network information to identify the presence / absence of abnormality B, the presence / absence of abnormality B can be identified easily and accurately.
  • the network information includes, for example, the prediction of the congestion state for each predetermined period, the measured value of the current communication speed for each measurement position, the presence / absence of the current communication failure, the maintenance, etc. It may be a scheduled time when a communication failure occurs, a date and time of an event that may cause a communication failure, a combination thereof, or the like.
  • the CPU 11 specifies that there is an abnormality B, and specifies the abnormality type specification result. Return “abnormality B detection” (step S219).
  • the CPU 11 specifies that there is no abnormality B. In this case, none of the abnormalities A to C is specified, and the types of communication abnormalities cannot be specified among these types. Therefore, the CPU 11 returns “unknown” as the result of specifying the type of abnormality (step S221).
  • the CPU 11 specifies that there is an abnormality C, and returns the result of specifying the type of abnormality as “abnormal C detection” (step S223). ).
  • FIG. 9 is a diagram illustrating an example of a correspondence relationship between the type of communication abnormality and the reception timing.
  • each of the specific results in the specific process is classified into five cases of cases 1 to 5, and the second timing determined as the reception timing in each case is defined.
  • the second timing is a timing at which elimination of the specified type of abnormality is predicted.
  • Case 1 is a case in which none of the abnormalities A to C is specified, and the specific result of the type of abnormality is “no abnormality” (step S207 in FIG. 7).
  • the reception timing is not delayed from the timing notified from the management server 5. Therefore, in this case, the reception timing is determined as the first timing.
  • Case 2 is a case where abnormality A is present and abnormality C is identified as none, presence / absence of abnormality B is not identified, and the identification result of the type of abnormality is “abnormality A” (step S213 in FIG. 7). ).
  • the second timing is specified based on the server information. Specifically, the CPU 11 specifies the timing that does not belong to the first period indicated in the server information as the second timing. Since the timing A that does not belong to the first period is predicted that the abnormality A has been eliminated, it is highly likely that the update program will be successfully received by determining the second timing as the reception timing.
  • Case 3 is a case in which neither abnormality A nor abnormality C is present and abnormality B is specified, and the abnormality type identification result is “abnormality B” (step S219 in FIG. 7).
  • the second timing is specified based on the network statistical information (FIG. 8). Specifically, the CPU 11 specifies a timing that does not belong to the second period indicated in the network statistical information as the second timing. Since the timing that does not belong to the second period is predicted that the abnormality B has been eliminated, the possibility of success in receiving the update program is increased by determining the second timing as the reception timing.
  • Case 4 is a case where abnormality C is identified as being present, presence / absence is not identified for abnormality A and abnormality B, and the abnormality type identification result is “abnormal C” (step S207 in FIG. 7).
  • the timing after movement of the vehicle 1 is specified as the second timing.
  • the CPU 11 specifies the timing at which the movement of the vehicle 1 is predicted as the second timing.
  • the wireless communication unit 15 moves away from the dead area and can communicate. Therefore, since the timing after the movement is predicted that the abnormality C has been eliminated, it is highly likely that the update program will be successfully received by determining the second timing as the reception timing.
  • the CPU 11 acquires a travel model based on the travel history of the vehicle 1 and predicts a travel route from the travel model.
  • FIG. 10 is an example of a travel model.
  • the travel history is, for example, the travel position (for example, latitude / longitude) of the vehicle 1 and the travel state (running, stopped, etc.) for each predetermined period such as day of the week, time, etc. Is obtained by statistical processing.
  • the statistical process is a process for determining a position and a traveling state that are most likely to travel every predetermined period and determining the traveling position and the traveling state in the period.
  • the travel history in the commuting time zone indicates the travel route from home to the office.
  • the method of statistical processing is not limited to a specific method, and any method can be adopted.
  • the CPU 11 predicts the travel route indicated by the travel model as the travel route of the vehicle 1.
  • the CPU 11 compares the predicted travel route with the area map, reads the timing to escape from the insensitive area that currently belongs in the predicted travel route, and determines the timing as the second timing.
  • the CPU 11 may acquire a travel route of the vehicle 1 from the navigation device by communicating with a navigation device (not shown) mounted on the vehicle 1.
  • the travel route generated by the navigation device includes the travel route and the time until the vehicle passes each position.
  • the CPU 11 may specify the second timing by predicting the travel route generated by the navigation device as the travel route of the vehicle 1 and comparing it with the area map.
  • Case 5 is a case where abnormality C is specified as none, abnormality A and abnormality B are not specified, and the specification result of the type of abnormality is “unknown” (step S221 in FIG. 7).
  • the timing after a predetermined period from the time of determination is specified as the second timing. If the type of abnormality is unknown, a temporary communication failure is included. In that case, there is a possibility that the state is removed after that timing. Therefore, by determining the second timing after a predetermined period from the determination time as the reception timing, there is a high possibility that the update program will be successfully received.
  • the reception timing is determined according to the type of communication abnormality. Specifically, the reception timing is delayed until the timing at which the communication abnormality is predicted to be resolved. Therefore, there is a high possibility that the update program will be successfully received.
  • the second timing can be specified in accordance with the presence / absence of each, that is, the cause of the abnormality. Therefore, the possibility that the communication abnormality is eliminated at the second timing can be increased, and the second timing can be specified as early as possible. That is, it is possible to increase the possibility of successful reception of the update program and to receive the update program at an early stage.
  • the DL control process is performed when the management server 5 receives a notification of downloading the update program during the operation of the vehicle 1.
  • This increases the possibility of successfully receiving the update program during the operation of the vehicle 1. Therefore, there is a high possibility that the control program can be updated while the vehicle 1 is in operation. This reduces the need for the user to stop the vehicle 1 and update the control program in the repro mode, or to store the vehicle 1 in a dealer and request an update of the control program. Therefore, user convenience can be improved.
  • a large-scale (large) update program is distributed, it is possible to prevent the communication band from being compressed by downloading the update program in advance, and to respond to communication requests from other devices. It can respond in real time.
  • step S107 a specific process
  • step S109 If no communication abnormality is detected at the second timing (YES in step S109), the previously detected communication abnormality is resolved by delaying the reception timing to the second timing. In this case, the CPU 11 transmits an update program transmission request to the DL server 6 at the second timing (step S111).
  • step S109 If further communication abnormality is detected at the second timing (NO in step S109), the previously detected communication abnormality has not been solved yet, or a new communication abnormality has occurred. In this case (NO in step S109).
  • the CPU 11 further executes a determination process (step S113) to delay the communication timing.
  • step S117 If the estimated time T at the second timing is greater than the threshold Th2 (T> Th2) (YES in step S117), the CPU 11 lowers the priority of the update program download process (step S119).
  • the disclosed features are realized by one or more modules.
  • the feature can be realized by a circuit element or other hardware module, by a software module that defines processing for realizing the feature, or by a combination of a hardware module and a software module.
  • a program that is a combination of one or more software modules for causing a computer to execute the above-described operation.
  • a program is recorded on a computer-readable recording medium such as a flexible disk attached to the computer, a CD-ROM (Compact Disk-Read Only Memory), a ROM, a RAM, and a memory card, and provided as a program product. You can also.
  • the program can be provided by being recorded on a recording medium such as a hard disk built in the computer.
  • a program can also be provided by downloading via a network.
  • the program according to the present disclosure is a program module that is provided as a part of a computer operating system (OS) and calls necessary modules in a predetermined arrangement at a predetermined timing to execute processing. Also good. In that case, the program itself does not include the module, and the process is executed in cooperation with the OS. Such a program that does not include a module may also be included in the program according to the present disclosure.
  • OS computer operating system
  • the program according to the present disclosure may be provided by being incorporated in a part of another program. Even in this case, the program itself does not include the module included in the other program, and the process is executed in cooperation with the other program.
  • a program incorporated in such another program may also be included in the program according to the present disclosure.
  • the provided program product is installed in a program storage unit such as a hard disk and executed.
  • the program product includes the program itself and a recording medium on which the program is recorded.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Quality & Reliability (AREA)
  • Computer Security & Cryptography (AREA)
  • Stored Programmes (AREA)
  • Information Transfer Between Computers (AREA)

Abstract

L'invention concerne un dispositif de relais qui est une partie d'un réseau embarqué ayant un dispositif de commande installé dans un véhicule, ledit dispositif de relais comprenant : une unité de communication qui reçoit, à partir d'un serveur par l'intermédiaire d'une communication sans fil, un programme de mise à jour pour le dispositif de commande installé dans un véhicule à transférer du dispositif de relais au dispositif de commande installé dans un véhicule; et une unité de commande qui détermine la synchronisation selon laquelle le programme de mise à jour est reçu, selon que toute erreur de communication pourrait avoir lieu entre le serveur et le dispositif de relais et le type de ladite erreur de communication devrait exister une occurrence de celle-ci.
PCT/JP2017/044758 2017-04-12 2017-12-13 Dispositif de relais, procédé de relais et programme informatique WO2018189951A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2017078812 2017-04-12
JP2017-078812 2017-04-12

Publications (1)

Publication Number Publication Date
WO2018189951A1 true WO2018189951A1 (fr) 2018-10-18

Family

ID=63792343

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2017/044758 WO2018189951A1 (fr) 2017-04-12 2017-12-13 Dispositif de relais, procédé de relais et programme informatique

Country Status (1)

Country Link
WO (1) WO2018189951A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114600438A (zh) * 2019-11-13 2022-06-07 株式会社自动网络技术研究所 车载中继装置及信息处理方法
WO2025032786A1 (fr) * 2023-08-09 2025-02-13 日立Astemo株式会社 Système de véhicule

Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2006209530A (ja) * 2005-01-28 2006-08-10 Alpine Electronics Inc 情報処理装置、ナビゲーション装置、情報処理方法およびプログラム
JP2007036762A (ja) * 2005-07-28 2007-02-08 Noritz Corp 情報通信システム及び情報端末装置
JP2013050865A (ja) * 2011-08-31 2013-03-14 Brother Ind Ltd 画像処理装置
JP2013167956A (ja) * 2012-02-14 2013-08-29 Kddi Corp 通信システム、通信方法、通信プログラムおよび通信装置
WO2016190377A1 (fr) * 2015-05-26 2016-12-01 京セラ株式会社 Dispositif de mise à jour de logiciel, système de mise à jour de logiciel, et procédé de mise à jour de logiciel
JP2017027484A (ja) * 2015-07-27 2017-02-02 富士通フロンテック株式会社 ダウンロード処理プログラム、端末装置及びダウンロード方法

Patent Citations (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2006209530A (ja) * 2005-01-28 2006-08-10 Alpine Electronics Inc 情報処理装置、ナビゲーション装置、情報処理方法およびプログラム
JP2007036762A (ja) * 2005-07-28 2007-02-08 Noritz Corp 情報通信システム及び情報端末装置
JP2013050865A (ja) * 2011-08-31 2013-03-14 Brother Ind Ltd 画像処理装置
JP2013167956A (ja) * 2012-02-14 2013-08-29 Kddi Corp 通信システム、通信方法、通信プログラムおよび通信装置
WO2016190377A1 (fr) * 2015-05-26 2016-12-01 京セラ株式会社 Dispositif de mise à jour de logiciel, système de mise à jour de logiciel, et procédé de mise à jour de logiciel
JP2017027484A (ja) * 2015-07-27 2017-02-02 富士通フロンテック株式会社 ダウンロード処理プログラム、端末装置及びダウンロード方法

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114600438A (zh) * 2019-11-13 2022-06-07 株式会社自动网络技术研究所 车载中继装置及信息处理方法
WO2025032786A1 (fr) * 2023-08-09 2025-02-13 日立Astemo株式会社 Système de véhicule

Similar Documents

Publication Publication Date Title
JP6519708B2 (ja) 制御装置、プログラム更新方法、およびコンピュータプログラム
JP6525105B2 (ja) 制御装置、プログラム更新方法、およびコンピュータプログラム
US10915310B2 (en) Control apparatus, program updating method, and computer program
US20200215930A1 (en) Control apparatus, control method, and computer program
WO2018079004A1 (fr) Dispositif de commande, procédé de mise à jour de programmes, programme informatique
US10625754B2 (en) Control apparatus, control method, and computer program
US11704104B2 (en) Control apparatus, control method, and computer program
US10970063B2 (en) Relay apparatus, transfer method, and computer program
WO2017149821A1 (fr) Dispositif de commande, procédé de mise à jour de programme, et programme informatique
US20190129710A1 (en) Control apparatus, method for determining whether or not a control program is updatable, and computer program
US11340891B2 (en) Control device, control method, and computer program
JP6358286B2 (ja) 制御装置、プログラム更新方法、およびコンピュータプログラム
JP2018005894A (ja) プログラム配信システム、サーバ、プログラム配信方法、およびコンピュータプログラム
WO2017221436A1 (fr) Dispositif de relais, procédé de relais et programme informatique
JPWO2018185994A1 (ja) 制御装置、転送方法、およびコンピュータプログラム
JP6394678B2 (ja) 制御装置、制御プログラムの更新可否の決定方法、及びコンピュータプログラム
JP2017228103A (ja) 制御装置、プログラム配信方法、およびコンピュータプログラム
WO2018189951A1 (fr) Dispositif de relais, procédé de relais et programme informatique
WO2020054622A1 (fr) Dispositif central, système de distribution de données de reprogrammation et programme de création de plan de distribution de données de reprogrammation
JP6973120B2 (ja) なりすまし検出装置、検出方法、およびコンピュータプログラム
WO2017209049A1 (fr) Système de distribution de programme, serveur, procédé de distribution de programme et programme informatique
WO2017149827A1 (fr) Dispositif de commande, procédé de fourniture de programme, et programme informatique
CN120051763A (zh) 更新管理装置、车载系统、控制方法及计算机程序

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17905322

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17905322

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: JP