Software update apparatus, software update method, non-transitory storage medium storing program, vehicle, and ota master

Patent metadata

Field	Value
Publication number	US-2022012048-A1
Application number	US-202117367972-A
Country	US
Kind code	A1
Filing date	Jul 6, 2021
Priority date	Jul 8, 2020
Publication date	Jan 13, 2022
Grant date	—

Abstract

A software update apparatus includes a communication unit that sends a request for downloading update data to a center, a storage unit that stores the downloaded update data, and a control unit that executes, based on the update data, a control for installing, or installing and activating update software on one or more target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network. The control unit acquires software versions of the electronic control units, determines whether there is a consistency in a combination of the acquired software versions, and executes, upon determining that there is an inconsistency in the combination of the acquired software versions, a process for attaining the consistency in the combination of the software versions.

First claim

What is claimed is:

1 . A software update apparatus comprising:
a communication unit configured to send a request for downloading update data to a center; a storage unit configured to store the downloaded update data; and a control unit configured to execute, based on the update data, a control for installing, or installing and activating update software on one or more target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network, wherein the control unit is configured to acquire software versions of the electronic control units, determine whether there is a consistency in a combination of the acquired software versions, and execute, upon determining that there is an inconsistency in the combination of the acquired software versions, a process for attaining the consistency in the combination of the software versions.

2 . The software update apparatus according to claim 1 , wherein the control unit is configured to restrict a predetermined operation of a vehicle, at least during the process for attaining the consistency.

3 . The software update apparatus according to claim 2 , wherein the control unit is configured to:
start a restriction on the predetermined operation of the vehicle before executing the control for installing or activating; acquire the combination of the software versions of the electronic control units after the process for attaining the consistency; and release the restriction on the predetermined operation of the vehicle when the consistency in the acquired combination is attained.

4 . The software update apparatus according to claim 1 , wherein the control unit is configured to:
specify an electronic control unit that causes the inconsistency from among the electronic control units as the process for attaining the consistency; and update software of the electronic control unit that causes the inconsistency based on data used for updating software of the electronic control unit that causes the inconsistency from among the update data.

5 . The software update apparatus according to claim 4 , wherein the control unit is configured to specify the electronic control unit that causes the inconsistency based on the combination of the software versions.

6 . The software update apparatus according to claim 1 , wherein the control unit is configured to:
specify an electronic control unit that causes the inconsistency from among the electronic control units as the process for attaining the consistency; and control the electronic control unit that causes the inconsistency such that the electronic control unit sets software before updating as an execution version.

7 . The software update apparatus according to claim 6 , wherein the control unit is configured to, in a case where the electronic control unit that causes the inconsistency stores the software before the updating, control the electronic control unit that causes the inconsistency such that the electronic control unit sets the stored software before the updating as the execution version.

8 . The software update apparatus according to claim 6 , wherein the control unit is configured to, in a case where there is the consistency in the combination of the software versions when a software version of the electronic control unit that causes the inconsistency is set as a version before the updating, control the electronic control unit that causes the inconsistency such that the electronic control unit sets the software before the updating as the execution version.

9 . The software update apparatus according to claim 1 , wherein the control unit is configured to:
when an electronic control unit that stores the software before the updating receives a designation for setting software before updating as an execution version, acquire the software versions of the electronic control units; and in a case where, in the combination of the acquired versions, there is the consistency in the combination of versions even when the software version of the designated electronic control unit is set as the software version before the updating, control the electronic control unit such that the electronic control unit sets the software before the updating as the execution version.

10 . The software update apparatus according to claim 1 , wherein a function of the control unit is implemented in software of two or more electronic control units, respectively or in software, which is separate from software to be updated, of one electronic control unit from among the electronic control units.

11 . A software update method executed by a computer of a software update apparatus, the software update method comprising:
sending a request for downloading update data to a center; storing the downloaded update data; executing, based on the update data, a control for installing, or installing and activating update software on one or more target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network; and acquiring software versions of the electronic control units, determining whether there is a consistency in a combination of the acquired software versions, and executing, upon determining that there is an inconsistency in the combination of the acquired software versions, a process for attaining the consistency in the combination of the software versions.

12 . A non-transitory storage medium storing a program executable on a computer of a software update apparatus, the program causing the computer to execute the following functions:
sending a request for downloading update data to a center; storing the downloaded update data; executing, based on the update data, a control for installing, or installing and activating update software on one or more target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network; and acquiring software versions of the electronic control units, determining whether there is a consistency in a combination of the acquired software versions, and executing, upon determining that there is an inconsistency in the combination of the acquired software versions, a process for attaining the consistency in the combination of the software versions.

13 . A vehicle comprising the software update apparatus according to claim 1 .

14 . An OTA master comprising:
a communication unit configured to send a request for downloading update data to a center; a storage unit configured to store the downloaded update data; and a control unit configured to execute, based on the update data, a control for installing, or installing and activating update software on one or more target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network, wherein the control unit is configured to acquire software versions of the electronic control units, determine whether there is a consistency in a combination of the acquired software versions, and execute, upon determining that there is an inconsistency in the combination of the acquired software versions, a process for attaining the consistency in the combination of the software versions.

15 . A software update method executed by a computer of an OTA master, the software update method comprising:
sending a request for downloading update data to a center; storing the downloaded update data; executing, based on the update data, a control for installing, or installing and activating update software on one or more target electro

Assignees

• Toyota Motor Co Ltd

Inventors

• Fukuyo Satoru
• Ishikawa Tomoyasu
• Satoh Yusuke

Classifications

• G06F8/61 Primary

  Installation · CPC title

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F8/71 Primary

  Version control (security arrangements therefor G06F21/57); Configuration management · CPC title

• G06F8/454

  Consistency (cache consistency protocols in hierarchically structured memory systems G06F12/0815) · CPC title

• G06F11/1433

  during software upgrading · CPC title