Denso Corporation

Toyota Jidosha Kabushiki Kaisha

Mitsuyoshi Natsume

Yuzo Harata

Kazuhiro Uehara

Takuya Kawasaki

Masaaki Abe

Yasuyuki Takahashi

Satoshi Suzuki

Tomohisa Kishigami

Naoki Taki

Nao Sakurai

Taiji Abe

Sho Nakamura

Naoji Kaneko

Akito Adachi

Keizoh Kawaguchi

Tatsuya Kato

Shouichirou Hanai

Masakazu Doi

Yoichi Fujita

Takeshi Enosaki

Fusayoshi Katou

Masahiko Tanaka

Hiroyuki Kishi

Reiko Mitsuhashi

Hideto Naitou

In a vehicle electronic control system, a second device includes a transfer target file specifying unit that is configured to specify a file, as a transfer target file, including update data to be written into a third device, a first data size specifying unit that is configured to specify a first data size to acquire the transfer target file specified by the transfer target file specifying unit, and an update data distribution unit that is configured to distribute the update data to the third device using a plurality of divided files transferred from the first device. The first device includes an update data transfer unit that is configured to transfer the update data by dividing the transfer target file specified by the transfer target file specifying unit into the plurality of divided files according to the first data size specified by the first data size specifying unit, and transferring the plurality of divided files to the second device.

Vehicle electronic control system, file transfer control method, computer program product and data structure of specification data

In a vehicle master device, a first device includes an update data acquisition unit that is configured to acquire update data, an update data distribution unit that is configured to distribute the update data acquired by the update data acquisition unit to a rewrite target ECU, a process execution request unit that is configured to request the second device to execute at least a part of a process related to verification of the update data before the update data distribution unit distributes the update data, a processing result acquisition unit that is configured to acquire a processing result from the second device, and a verification unit that is configured to verify the update data using the processing result acquired by the processing result acquisition unit.

Vehicle master device, update data verification method and computer program product

In a vehicle program rewrite system, a vehicle master device includes a first progress determination unit that is configured to determine a first progress related to a program rewrite, a first progress transmission unit that is configured to transmit the first progress determined by the first progress determination unit to the center device, a second progress acquisition unit that is configured to acquire a second progress related to the program rewrite from the center device, and a first display instruction unit that is configured to instruct to create a content that is displayable on a display terminal mounted in a vehicle based on the first progress determined by the first progress determination unit and the second progress acquired by the second progress acquisition unit.

Vehicle program rewrite system, vehicle master device, progress synchronization method and computer program product

An electronic control unit diagnoses the electronic control unit via wired connection or wireless from an outside of a vehicle and rewrites the electronic control unit via the wire or the wireless from the outside of the vehicle, based on a program acquired from the outside of the vehicle via the wire or the wireless.

Electronic control unit and non-transitory computer readable medium storing session establishment program

A vehicle master device includes a rewrite target specifying unit that is configured to identify a plurality of rewrite target ECUs, a rewrite completion determination unit that is configured to determine whether a program rewrite is completed for all the plurality of rewrite target ECUs specified by the rewrite target specifying unit, an activation executable determination unit that is configured to determine whether activation is executable when the rewrite completion determination unit determines that the program rewrite is completed for all the plurality of rewrite target ECUs, and an activation request instruction unit that is configured to instruct all the plurality of rewrite target ECUs at the same time to perform the activation when the activation executable determination unit determines that activation is executable.

Vehicle master device, vehicle electronic control system, activation request instruction method and computer program product

A vehicle master device includes a rewrite specification data acquisition unit that is configured to acquire rewrite specification data from outside, a rewrite specification data analysis unit that is configured to analyze the rewrite specification data acquired by the rewrite specification data acquisition unit, a rewrite target specifying unit that is configured to identify a rewrite target ECU and a non-rewrite target ECU based on an analysis result by the rewrite specification data analysis unit, an installability determination unit that is configured to determine whether installation is feasible for the rewrite target ECU, and a state transition control unit that is configured to control at least one non-rewrite target ECU to be in a stop state, a sleep state, or a power saving operating state when the installability determination unit determines that the installation is feasible.

Vehicle master device, non-rewrite target power supply administration method and computer program product

A center device is configured to acquire software information of an ECU from a vehicle side, determine whether availability of update data for a vehicle based on the acquired software information, and transmit the campaign information to a master device when a vehicle condition is determined to be a contion suitable for an update. The master device is configured to download a distribution package from the center device when the vehicle condition is determined to be a condition in which the distribution package is downloadable.

Vehicle electronic control system, distribution package download determination method and computer program product

A vehicle master device includes a cancellation request determination unit that is configured to determine whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU by the update data distribution unit, a rollback method specifying unit that is configured to, when the cancellation request determination unit determines that the cancellation request is generated, specify a rollback method for returning the rewrite target ECU to a state where writing of the update data has not yet started in accordance with a memory type of the non-volatile memory of the rewrite target ECU and a data type of the update data of the new program or the old program, and a rollback execution unit that is configured to instruct the rewrite target ECU to execute a rollback according to the rollback method specified by the rollback method specifying unit and have the rewrite target ECU operate with the old program.

Vehicle master device, control method for executing rollback, computer program product for executing rollback and data structure of specification data

A vehicle electronic control system includes a mode determination unit that is configured to determine whether a customization mode for a screen display related to an approval to a program update is set through a user's customization operation, and a screen display instruction unit that is configured to instruct the display terminal to display a progress screen of the program update according to a current update phase and a setting of the customization mode when the mode determination unit determines that the customization mode is set and instruct the display terminal to display the progress screen of the program update according to the current update phase and an initial setting when the mode determination unit determines that the customization mode is not set. The display terminal is configured to display the progress screen of the program update as instructed by the screen display instruction unit.

Vehicle electronic control system, progress screen display control method and computer program product

A vehicle master device includes a rewrite specification data acquisition unit that is configured to acquire rewrite specification data from outside, a rewrite specification data analysis unit that is configured to analyze the rewrite specification data acquired by the rewrite specification data acquisition unit, a group generation unit that is configured to divide the plurality of rewrite target ECUs to generate a plurality of groups based on the rewrite specification data analyzed by the rewrite specification data analysis unit, and an instruction execution unit that is configured to instruct the plurality of rewrite target ECUs for each group of the plurality of groups generated by the group generation unit to perform at least one of installation, rollback, and activation.

Vehicle master device, rewrite target group administration method, computer program product and data structure of specification data

An electronic control system for vehicle includes a center device that manages a program update of a vehicle, and a vehicular master device that is communicable with the center device. The center device, responsive to a user giving approval for program update by using a device not being a possession owned by the user, receives approval information of the user, and stores and manages the approval information in association with vehicle information of the user. The center device transmits the approval information to the user's vehicle side. When the vehicular master device receives the approval information, the vehicular master device performs rewriting of the program.

Electronic control system for vehicle, program update approval determination method and program update approval determination program

A display control device includes a cancellation detection unit that is configured to detect a cancellation regarding a program rewrite from first update data stored in the rewrite target ECU to second update data acquired from an external device, a write instruction unit that is configured to distribute the second update data to the rewrite target ECU and instruct the rewrite target ECU to write the second update data thereinto, and a notification instruction unit that is configured to give an instruction for notification of a progress regarding the program rewrite. The notification instruction unit is further configured to give the instruction to make the notification of the progress regarding the program rewrite in a first manner when the write instruction unit is distributing the second update data, and give the instruction to make the notification of the progress regarding the program rewrite in a second manner when the cancellation detection unit detects the cancellation. The write instruction unit is further configured to continue distributing the second update data when the cancellation detection unit detects the cancellation during distribution of the second update data by the rewrite instruction unit.

Display control device, rewrite progress display control method and computer program product

An electronic control unit includes a first process flag setting unit that is configured to set a first process flag indicative of a progress of a first process that is one of a series of processes related to a program rewrite, a second process flag setting unit that is configured to set a second process flag indicative of a progress of a second process that is an other of the series of processes related to the program rewrite, and a retry point specifying unit that is configured to specify, based on the first process flag and the second process flag, a retry point for resuming the program rewrite when the program rewrite is suspended. The retry point specifying unit is further configured to store an amount of the update data that has been written until the program rewrite was suspended and request the vehicle master device to transfer the update data based on the stored amount of the update data when resuming the program rewrite.

Electronic control unit, retry point specifying method and computer program product for specifying retry point

In a vehicle electronic control system, a center device includes an update data storage unit that stores update data for rewrite targets. Program rewriting to rewrite target electronic control units is one campaign. The center device includes a display control information storage unit that stores display control information necessary to display information related to the campaign on a vehicle side. The center device transmits the update data stored in the update data storage unit and the display control information stored in the display control information storage unit to a vehicle master device.

Vehicle electronic control system, center device, vehicle master device, display control information transmission control method, display control information reception control method, display control information transmission control program, and display control information reception control program

A vehicle master device includes a decryption key storage unit that cannot be read from an outside and that stores a decryption key for generation of a security accesses key used to perform device authentication of a rewrite target electronic control unit. The vehicle master device acquires rewrite specification data from an outside, analyzes the rewrite specification data acquired, extracts a key derivation value corresponding to the rewrite target electronic control unit from an analysis result of the rewrite specification data, and by using the decryption key corresponding to the rewrite target electronic control unit stored in the decryption key storage unit, decrypts the key derivation value extracted, and generate a security accesses key.

Growing community of inventors

Hekinan, Japan

Mitsuyoshi Natsume