Software updating apparatus and software updating method

Patent metadata

Field	Value
Publication number	US-10514900-B2
Application number	US-201615545949-A
Country	US
Kind code	B2
Filing date	Feb 10, 2016
Priority date	Mar 16, 2015
Publication date	Dec 24, 2019
Grant date	Dec 24, 2019

Abstract

Provided is a software updating apparatus that can flexibly respond to various situations, including update capacity and use cases of each ECU, in a case of updating control information of a plurality of ECUs. Update control information necessary for update processing, including update data to be newly applied to an ECU, is received from a server and control of the update processing is performed based on the received update control information.

First claim

The invention claimed is:

1. A software updating apparatus that is connected to a server and a plurality of control apparatuses and performs transmission and reception of data, the software updating apparatus comprising:
a hardware control unit coupled to a hardware memory, the hardware control unit involving one or more physical hardware processors, the hardware control unit configured to:
receive update control information, which includes update data for each of the plurality of control apparatuses and identification information for identifying an application method for applying the update data to the each of the plurality of control apparatuses, from the server;
transmit the update data to be applied, for each of the plurality of control apparatuses; and
control the plurality of control apparatuses via a communication unit such that the update data is applied based on the identification information;
wherein the update control information comprises, for each of the plurality of control apparatuses, update data and Electronic Control Unit (ECU) information utilized in applying the update data to the each of the control apparatuses, the ECU update information comprising application method identified by the identification information indicating any one of a full update, a difference update, and a compression and decompression update of the each of the plurality of control apparatuses;
wherein, upon sending a data transfer request instructing start of transfer of the update data to the ECU to be updated, the hardware control unit is configured to set the data transfer request in an application system according to the application method,
wherein the application method corresponding to the full update comprises block erasing of a Read Only Memory (ROM) corresponding to write addresses associated with the update data for the each of the control apparatuses;
wherein the application method corresponding to the difference update comprises caching of the update data by the each of the plurality of control apparatuses, a restoration process of the update data, a verification process of the update data and block erasing of the ROM upon confirmation by the verification process of the update data;
wherein the application method corresponding to the compression and decompression update comprises caching of the update data by the each of the plurality of control apparatuses, block erasing of the ROM corresponding to write addresses associated with the update data for the each of the control apparatuses, and a restoration process of the update data.

2. The software updating apparatus according to claim 1 ,
wherein the application method identified by the identification information is designated in the unit of a logical block of a nonvolatile memory that stores software of the each of the plurality of control apparatuses.

3. The software updating apparatus according to claim 1 ,
wherein the hardware control unit gives erasing instruction of a nonvolatile memory of the each of the plurality of control apparatuses after transmitting the update data to the control apparatus to which the update data is to be applied in a case where the identification information indicates the difference update.

4. The software updating apparatus according to claim 1 ,
wherein the hardware control unit transmits the update data to the each of the plurality of control apparatuses after giving erasing instruction of a nonvolatile memory of the each of the plurality of control apparatuses to which the update data is to be applied in a case where the identification information indicates the full update.

5. The software updating apparatus according to claim 1 ,
wherein the update control information includes power consumption information necessary for applying the update data to the each of the plurality of control apparatuses, and
the hardware control unit controls the plurality of control apparatuses based on a result of comparison between a battery level of a vehicle, which is acquired via the communication unit, and the power consumption information.

6. The software updating apparatus according to claim 1 ,
wherein the update control information further comprises preprocessing information commonly applied to the plurality of control apparatuses;
wherein the preprocessing information comprises user permission necessity indicating whether it is necessary to execute user consent acquisition processing when executing a software update by over the air (OTA);
wherein the hardware control unit is configured to judge processing based on the user permission necessity;
wherein when the user permission necessity indicates that user consent acquisition is necessary, the hardware control unit transmits a user conformation request to a human machine interface (HMI).

7. The software updating apparatus according to claim 1 ,
wherein the ECU update information includes identification information for uniquely identifying the control apparatus on an in-car network;
wherein the hardware control unit transmits and receives data to and from the control apparatus based on the identification information for uniquely identifying the control apparatus on the in-car network.

8. The software updating apparatus according to claim 1 ,
wherein the ECU update information comprises a start condition, under which update processing can be started; and
wherein if a state of a vehicle does not meet the start condition, the hardware control unit configures a human machine interface (HMI) to display a condition of the state of the vehicle and instructions to handle the state of the vehicle.

9. A software updating method for performing transmission and reception of data to and from a plurality of control apparatuses, the software updating method comprising:
a first communication step of receiving update control information, which includes update data for each of the plurality of control apparatuses and identification information for identifying an application method for applying the update data to the control apparatus, from the server;
a second communication step of transmitting the update data to be applied, for each of the plurality of control apparatuses; and
an update control step of controlling the plurality of control apparatuses such that the update data is applied based on the identification information;
wherein the update control information comprises, for each of the plurality of control apparatuses, update data and Electronic Control Unit (ECU) information utilized in applying the update data to the each of the control apparatuses, the ECU update information comprising application method identified by the identification information indicating any one of a full update, a difference update, and a compression and decompression update of the each of the plurality of control apparatuses;
a setting data transfer request step of, upon sending a data transfer request instructing start of transfer of the update data to the ECU to be updated, setting the data transfer request in an application system according to the application method;
wherein the application method corresponding to the full update comprises block erasing of a Read Only Memory (ROM) corresponding to write addresses associated with the update data for the each of the plurality of control apparatuses;
wherein the application method corresponding to the difference update comprises caching of the update data by the each of the plurality of control apparatuses, a restoration process of the update data, a verification process of the update data and block erasing of the ROM upon confirmation by the verification process of the update data;
wherein the application method corresponding to the compression and decompression u

Assignees

• Hitachi Automotive Systems Ltd

Inventors

• Teraoka Hidetoshi
• Kurosawa Kenichi
• Nakahara Fumiharu

Classifications

• B60R16/02

  electric {constitutive elements} · CPC title

• G06F11/00

  Error detection; Error correction; Monitoring (error detection, correction or monitoring in information storage based on relative movement between record carrier and transducer G11B20/18; monitoring, i.e. supervising the progress of recording or reproducing G11B27/36; in static stores G11C29/00) · CPC title

• G06F9/445

  Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04L67/12

  specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks · CPC title