Toyota Jidosha Kabushiki Kaisha

Shoichi Nagamitsu

Jun Hamasaki

Tomoyasu Ishikawa

Yusuke Takatsuna

Takanori Ariga

A center configured to communicate with an OTA master and a malfunction management server includes a processor. The malfunction management server is configured to store malfunction occurrence information. The processor is configured to receive the malfunction occurrence information from the malfunction management server and an inquiry about presence or absence of an update of software of an electronic control device from the OTA master. The processor is configured to determine, when the inquiry is received, whether the vehicle that has transmitted the inquiry malfunctions based on the malfunction occurrence information. The processor is configured to restrict, when it is determined that the vehicle that has transmitted the inquiry malfunctions, execution of an update process for the software on the vehicle that has transmitted the inquiry.

Center, update control method, non-transitory storage medium, OTA master, and software update system

A center is configured to distribute, to a vehicle, update data of software of a control device mounted on the vehicle. The center includes one or more processors configured to make a determination on whether to distribute, as the update data, update software or difference data between current software and the update software based on first information on the software of the control device mounted on the vehicle. The center then transmits the determined update data to the vehicle.

Center, distribution control method, and non-transitory storage medium

A software update apparatus controls software update of an electronic control unit. The software update apparatus includes a control unit configured to, when a software update process of the electronic control unit is executed, control a timing for executing an approval request process for requesting an approval for the software update process according to the type of non-volatile memory included in an electronic control unit to be updated.

Software update apparatus, update control method, non-transitory storage medium storing update control program, server, OTA master, and center

A vehicle management server is configured to transmit, to a vehicle, an update program for updating an existing program of an electronic device mounted on the vehicle. The vehicle management server includes a communicator and a controller. The communicator is configured to communicate with the vehicle. The controller is configured to control an update process. The controller is configured to determine, depending on a type of the update program, whether to present, to a vehicle user, an indication related to the update process for the existing program using the update program, and transmit, when the controller determines to present the indication related to the update process to the vehicle user, information for causing a predetermined information terminal to display the indication related to the update process to the vehicle via the communicator.

Program update system and vehicle management server

An OTA master configured to update one or more software on in-vehicle device includes one or more processors. The OTA master is configured to connect to an in-vehicle network including the in-vehicle device and communicate with an OTA center over a network. The one or more processors are configured to, out of software groups each composed of a combination of the software of the in-vehicle device, acquire configuration information on the software group in which a change has occurred in a configuration of the combination of the software. The one or more processors are configured to send the acquired configuration information to the OTA center.

OTA master, update control method, and non-transitory storage medium

A center configured to communicate with a vehicle includes one or more processors. The processors are configured to store an update record of software of an electronic control unit mounted on the vehicle. The processors are configured to receive a current version of the software of the electronic control unit from the vehicle. The processors are configured to determine whether the received current version agrees with a version of a last update recorded in the update record. The processors are configured to transmit an error notification to the vehicle when the processors determine that the received current version does not agree with the version of the last update.

A center includes one or more processors configured to: distribute, to an OTA master, campaign data including one or more pieces of package data, each of which includes one or more pieces of update software of one or more target ECUs included in a vehicle; determine, after distributing the campaign data, whether a defect involved in an update of the one or more target ECUs is found in the one or more pieces of package data included in the campaign data; and transmit, when determining that the defect is found, an application avoidance instruction to the vehicle to which the campaign data is to be applied via the network, the application avoidance instruction instructing the OTA master not to apply a piece of package data in which the defect is found at a timing of applying the campaign data.

Center, update control method, non-transitory storage medium, and OTA master

A center includes: a storage device storing update management information including a combination of latest versions of pieces of software of first ECUs whose control functions need to be consistent with each other; and one or more processors configured to, when determining, based on the update management information and the current versions of the pieces of software of ECUs in a vehicle, that at least one of the pieces of software of the first ECUs needs to be updated, decide, as a distribution package, an one of a first difference package containing difference data between a previous version and a latest version each of all pieces of software of the first ECUs and a first total data package containing total data of the latest version of one or more pieces of software of the first ECUs that need to be updated, and transmit the distribution package to the vehicle.

A center, configured to communicate over a network with a predetermined server and an OTA master installed in a vehicle, includes a processor. The processor is configured to determine whether a command is transmittable from the center to the OTA master based on communication means information. The processor is configured to transmit, when the processor determines that the command is transmittable from the center to the OTA master, the command to the OTA master using communication means defined in the communication means information. The processor is configured to transmit, when the processor determines that the command is not transmittable from the center to the OTA master, request data to the OEM server. The request data is data for commissioning the OEM server to transmit the enabling command.

Center, update management method, and non-transitory storage medium

A server includes one or more processors configured to: perform bidirectional communication with the software update device using a first communication method; transmit information to the software update device using a second communication method different from the first communication method; and determine whether the one or more processors have received a specific request from the software update device using the first communication method, wherein the one or more processors are configured to provide a notification to the software update device using the second communication method when determining that the one or more processors have not received the specific request from the software update device.

Server, update management method, non-transitory storage medium, software update device, and system including server and software update device

A server includes: a storage unit that stores, for each of pieces of vehicle identification information that identifies a vehicle, life cycle status information indicating a distribution status of the vehicle after manufacturing, the life cycle status information being associated with the vehicle identification information; a communication unit that receives a confirmation request including the vehicle identification information from the vehicle; and a control unit that determines whether there is update data of software of the vehicle identified by the vehicle identification information included in the confirmation request when the communication unit receives the confirmation request. The control unit transmits, to the vehicle, instruction information instructing whether approval is required at a time of execution of a software update process in the vehicle, based on the life cycle status information, when determining that there is the update data of the software of the vehicle.

Growing community of inventors

Miyoshi, Japan

Shoichi Nagamitsu