SOFTWARE MANAGEMENT SYSTEM FOR VEHICLE, SOFTWARE MANAGEMENT METHOD FOR VEHICLE, AND NON-TRANSITORY STORAGE MEDIUM

A software management system for a vehicle, the software management system includes: a first communication device configured to receive update data for software via a wireless local area network (LAN); a second communication device configured to receive the update data via a cellular line; and one or more electronic control units configured to determine whether a connection between the wireless LAN and the first communication device will be disconnected during reception of the update data via the wireless LAN, and, when determining that the connection between the wireless LAN and the first communication device will be disconnected, make an inquiry to a user of the vehicle regarding whether reception of the update data via the cellular line is acceptable.

CROSS-REFERENCE TO RELATED APPLICATION

This application claims priority to Japanese Patent Application No. 2023-032889 filed on Mar. 3, 2023 incorporated herein by reference in its entirety.

BACKGROUND

1. Technical Field

The disclosure relates to a software management system for a vehicle, a software management method for a vehicle, and a non-transitory storage medium.

2. Description of Related Art

In a software management system described in Japanese Patent No. 6,888,845, upon receiving a wake-up request from a wireless access point, a communication unit transitions from a sleep state to a wake-up state, and begins wireless communication with an external device. Software of electronic equipment is then updated with update data that is downloaded from the external device.

SUMMARY

When downloading update data over a cellular line causes a fee to be incurred, a user of a vehicle will be disadvantaged due to the download being performed over the cellular line without consent of the user. As a result, there is a likelihood that user convenience will deteriorate.

A software management system for a vehicle according a first aspect of the present disclosure, includes a first communication device configured to receive update data for software via a wireless LAN; a second communication device configured to receive the update data via a cellular line; and one or more electronic control units configured to determine whether a connection between the wireless LAN and the first communication device will be disconnected during reception of the update data via the wireless LAN, and, when determining that the connection between the wireless LAN and the first communication device will be disconnected, make an inquiry to a user of the vehicle regarding whether reception of the update data via the cellular line is acceptable.

A software management method according to a second aspect of the present disclosure is for a vehicle including a first communication device configured to receive update data for software via a wireless LAN and a second communication device configured to receive the update data via a cellular line. The software management method includes: determining, by one or more electronic control units, whether a connection between the wireless LAN and the first communication device will be disconnected during reception of the update data via the wireless LAN; and making, by the one or more electronic control units, an inquiry to a user of the vehicle regarding whether reception of the update data via the cellular line is acceptable, when determination is made that the connection between the wireless LAN and the first communication device will be disconnected.

A non-transitory storage medium according to a third aspect of the present disclosure stores instructions for managing software of a vehicle including a first communication device configured to receive update data for the software via a wireless LAN and a second communication device configured to receive the update data via a cellular line, the instructions being executable by one or more electronic control units and causing the electronic control units to perform functions. The functions include determining whether a connection between the wireless LAN and the first communication device will be disconnected during reception of the update data via the wireless LAN; and making an inquiry to a user of the vehicle regarding whether reception of the update data via the cellular line is acceptable, when determination is made that the connection between the wireless LAN and the first communication device will be disconnected.

When determining that the connection with the wireless LAN will be disconnected, an inquiry is made to the user of the vehicle regarding whether reception of update data via the cellular line is acceptable. Accordingly, user convenience is improved.

DETAILED DESCRIPTION OF EMBODIMENTS

Hereinafter, an embodiment of a software management system for a vehicle, a software management method for a vehicle, and a non-transitory storage medium, will be described with reference toFIGS.1and2.

Configuration of Software Management System

First, a configuration of the software management system for a vehicle, according to the present embodiment, will be described with reference toFIG.1. The software management system according to the present embodiment is a system that manages software of a vehicle10.

The vehicle10is equipped with various electronic control units (ECUs)15that control various parts of the vehicle10, and an over-the-air (OTA) master11that manages software updates in the vehicle10. Examples of the ECUs15include an engine ECU, a transmission ECU, a brake ECU, an advanced driver assistance ECU, and a multimedia ECU.

The OTA master11includes a processing circuit12and a storage device13. The storage device13stores, in advance, a program for management of software updates. The OTA master11is configured to perform processing related to management of software updates by the processing circuit12reading and executing the program stored in the storage device13.

A wireless LAN communication module17A, which is a first communication device for communicating with an external network18constructed outside of the vehicle10, is connected to the OTA master11. The wireless LAN communication module17A receives update data for software via the wireless LAN. The wireless LAN according to the present embodiment is a local area network (LAN) that performs Wi-Fi (registered trademark) communication.

Also, a cellular line communication module17B, which is a second communication device for communicating with the external network18, is connected to the OTA master11. The cellular line communication module17B receives update data for software via a cellular line, which is a mobile communication network.

The vehicle10is equipped with a human-machine interface (HMI)16. The HMI16includes an input device that receives operations from an occupant, and an output device that presents information to the occupant through images and audio. The HMI16according to the present embodiment has automotive navigation system functions for guiding over a travel route of the vehicle10. The OTA master11, the ECUs15, and the HMI16are configured to be capable of communicating with each other via in-vehicle communication lines14.

A steering wheel60of the vehicle10is provided with a steering switch62, to serve as an operation unit operated by a user. An operation state of the steering switch62is input to the OTA master11via the in-vehicle communication lines14or the like.

Software updates in the vehicle10are performed based on update data distributed from an OTA center20over the external network18, or the like. The OTA center20is a server device that includes a processing circuit21and a storage device22. The OTA center20is configured to be capable of communicating externally via the external network18.

The OTA center20is configured to be able to also mutually communicate with a mobile information terminal30of the user of the vehicle10, via the external network18or the like. The mobile information terminal30includes a processing circuit31, a storage device32, and an HMI33. The processing circuit31reads and executes programs stored in the storage device32. The programs stored in the storage device32include a program for vehicle management. The mobile information terminal30is capable of communicating with the wireless LAN communication module17A by tethering.

Preparation Processing for Software Update

Next, processing for preparing for software update in the vehicle10will be described. Here, a case in which software of one of the ECUs15installed the vehicle10is updated will be described as an example. Note, however, that objects of software updates may be in-vehicle electronic equipment other than the ECUs15, such as the HMI16, sensors, and so forth.

Software updating is performed after preparation is complete. Preparation for software update is carried out through a download phase and an installation phase. In the download phase, update data for the software is downloaded from the OTA center20to the OTA master11. In the download phase, the OTA master11receives the update data for the software from the OTA center20. The OTA master11then stores the received update data in the storage device13. The download phase includes a series of processing related to downloading, such as determining whether downloading is executable, verifying update data, and so forth. The update data transmitted from the OTA center20to the OTA master11may contain any of update software, compressed data in which the update software has been compressed, and divided data in which the update software or compressed data has been divided. Also, the update data may include an identifier of the in-vehicle electronic equipment to be updated, and an identifier of the software before the update. The update data is downloaded as a distribution package. The distribution package includes update data for one or a plurality of in-vehicle electronic equipment.

In the installation phase, updated software is written to the in-vehicle electronic equipment to be updated. In the installation phase, the OTA master11writes the update software to non-volatile memory of the ECU15to be updated. The installation phase includes a series of processing related to installation, such as determining whether installation is executable, transferring update data, verifying update software, and so forth. When the update data includes the update software itself, the OTA master11transfers the update data to the in-vehicle electronic equipment to be updated in the installation phase. When the update data includes compressed data, difference data, or divided data, of the update software, generating processing for generating update software from the update data is performed. The generating processing may be performed by the OTA master11or may be performed by the in-vehicle electronic equipment to be updated. Generating of the update software can be performed by decompressing compressed data, or assembling difference data or divided data.

After the installation phase is completed, a scheduled start time is set for the software update. Setting of the scheduled start time is performed, for example, by the following procedures. When update preparation is completed, the OTA master11causes the HMI16to display a setting screen for the scheduled start time. Upon the user of the vehicle10setting the scheduled start time at the HMI16on which the setting screen is displayed, the HMI16transmits the scheduled start time set by the user to the OTA master11. The OTA master11stores the scheduled start time received from the HMI16in the storage device13.

Such setting of the scheduled start time may be performed at the mobile information terminal30. In this case, the scheduled start time set by the user at the mobile information terminal30is transmitted to the OTA master11of the vehicle10via the OTA center20.

Update Processing for Software

Next, update processing for software will be described. The update processing is processing of switching the in-vehicle electronic equipment to be updated from a state of operating using the software before the update, to a state of operating using the software after the update.

When the scheduled start time set by the user arrives, the OTA master11determines whether execution conditions for activation are met. Execution conditions are individually set for each type of in-vehicle electronic equipment and update software. For example, in the case of in-vehicle electronic equipment such as the engine ECU, the transmission ECU, the brake ECU, or the like, that performs control necessary for the vehicle10to travel, the execution conditions for software update include that the vehicle10is not traveling.

When the execution conditions are not met, the OTA master11suspends execution of the update processing, and thereupon requests resetting of the scheduled start time. When the execution conditions are met, the OTA master11starts the update processing. During the update processing, the OTA master11instructs the in-vehicle electronic equipment to be updated to activate the updated software. The in-vehicle electronic equipment to be updated performs activation in accordance with this instruction. The update processing includes a series of processing related to activation, such as verification of execution results of activation, and so forth.

Inquiry Processing

The OTA master11executes inquiry processing while receiving update data via the wireless LAN. In the inquiry processing, the OTA master11determines whether the connection with the wireless LAN will be disconnected while receiving update data via the wireless LAN. When determining that the connection with the wireless LAN will be disconnected, the OTA master11inquires of the user of the vehicle regarding whether reception of update data via the cellular line is acceptable.

FIG.2shows a flowchart of an inquiry routine executed by the OTA master11for the inquiry processing. The OTA master11repeatedly executes the same routine at every predetermined control cycle while receiving update data via the wireless LAN. Note that hereinafter, a step number of each processing is represented by a number prefixed with the letter “S”.

When this routine starts, the OTA master11first, in S100, acquires vehicle speed of the vehicle10, a traveling area in which the vehicle10is traveling, current position information of the vehicle10, and map information of an access point for wireless LAN that is currently connected to. Also, when the update data is received via the wireless LAN by tethering the mobile information terminal30, the amount of charge of the mobile information terminal30is also acquired. The OTA master11acquires the vehicle speed based on a detection value of a vehicle speed sensor of the vehicle10, for example. The OTA master11acquires the traveling area, the position information, and the map information of the access point for wireless LAN, from the HMI16, for example. The OTA master11acquires the amount of charge of the mobile information terminal30through communication with the mobile information terminal30during tethering.

Next, the OTA master11determines whether there is a likelihood that the connection with the wireless LAN will be disconnected, based on each parameter acquired in S100(S110).

When the vehicle speed no lower than a predetermined threshold value, the OTA master11determines that there is a likelihood that the connection with the wireless LAN will be disconnected. Furthermore, depending on the traveling area of the vehicle, it is highly likely that the connection with the wireless LAN will be disconnected. Accordingly, when the position information of the vehicle10is within such a traveling area, the OTA master11determines that there is a likelihood of the connection with the wireless LAN being disconnected. Also, when the position information of the vehicle10becomes distanced from the access point for wireless LAN indicated in the map information, it is highly likely that the connection with the wireless LAN will be disconnected. Accordingly, when the position information of the vehicle10is distanced from the map information of the access point for wireless LAN by no less than a predetermined value, the OTA master11determines that there is a likelihood of the connection with the wireless LAN being disconnected. Also, when the amount of charge of the mobile information terminal30drops when reception of update data via wireless LAN is being performed by tethering of the mobile information terminal30, it is highly likely that the tethering will be interrupted, and there is a likelihood of the connection with the wireless LAN being disconnected. Accordingly, when the amount of charge of the mobile information terminal30is no greater than the predetermined value, the OTA master11determines that there is a likelihood of the connection with the wireless LAN being disconnected.

When the OTA master11determines in S110that there is a likelihood that the connection with the wireless LAN will be disconnected (YES in S110), the OTA master11determines whether the vehicle10is equipped with the steering switch62(S120). When the OTA master11determines that the steering switch62is installed (YES S120), the OTA master11advances the processing to S140.

On the other hand, when the OTA master11determines in the processing of S120that the steering switch62is not installed (NO in S120), the OTA master11determines whether the vehicle10is stopped (S130). When the OTA master11determines that the vehicle10is stopped (YES in S130), the OTA master11advances the processing to S140.

In S140, the OTA master11inquires of the user of the vehicle regarding whether reception of update data via the cellular line is acceptable (S140). For this inquiry to the user, the HMI16executes a notification instructed by the OTA master11, for example. Specifically, the HMI16displays a message on the screen, querying whether it is acceptable to switch the reception of update data from via the wireless LAN to via the cellular line.

Next, the OTA master11determines whether the user has given permission to switch the reception of update data to via the cellular line (S150). In S150, when the user has given permission to switch to via the cellular line through operation of the HMI16, the OTA master11determines that the user has given permission to switch to via the cellular line. Also, in S150, when the user has given permission to switch to via the cellular line through operation of the steering switch62, the OTA master11determines that the user has given permission to switch to via the cellular line.

When the OTA master11determines that the user has given permission (YES in S150), the OTA master11receives the update data via the cellular line communication module17B, thereby receiving the update data via the cellular line (S160). Conversely, when the OTA master11determines that the user has not given permission (NO in S150), the OTA master11receives the update data via the wireless LAN communication module17A, thereby receiving the update data via the wireless LAN (S170).

Then, when ending the processing in S160and S170, or when making a negative determination in S110, or when making a negative determination in S130, the OTA master11ends the execution of the present processing in the current control cycle.

Operations and Effects

Operations and effects of the present embodiment will be described.(1) While receiving update data for software via the wireless LAN, determination is made regarding whether the connection with the wireless LAN will be disconnected. When determining that the connection with the wireless LAN will be disconnected, inquiry is made of the user of the vehicle regarding whether reception of update data via the cellular line is acceptable. Accordingly, user convenience is improved.(2) Determination is made regarding whether the connection with the wireless LAN will be disconnected based on the vehicle speed, which pertains to the connection state of the wireless LAN. Accordingly, whether the connection with the wireless LAN will be disconnected can be appropriately determined.(3) Determination is made regarding whether the connection with the wireless LAN will be disconnected based on the traveling area of the vehicle10, which pertains to the connection state of the wireless LAN. Accordingly, whether the connection with the wireless LAN will be disconnected can be appropriately determined.(4) Determination is made regarding whether the connection with the wireless LAN will be disconnected based on the map information of the access point for wireless LAN and the position information of the vehicle10, which pertain to the connection state of the wireless LAN. Accordingly, whether the connection with the wireless LAN will be disconnected can be appropriately determined.(5) When the connection with the wireless LAN is performed by tethering the mobile information terminal30, the amount of charge of the mobile information terminal30pertains to the connection state of the wireless LAN. Accordingly, determination is made regarding whether the connection with the wireless LAN will be disconnected based on the amount of charge of the mobile information terminal30that pertains to the connection state of the wireless LAN. Accordingly, whether the connection with the wireless LAN will be disconnected can be appropriately determined.(6) When the vehicle10is stopped (YES in S130inFIG.2), the OTA master11inquires of the user of the vehicle regarding whether receiving update data via the cellular line is acceptable (S140inFIG.2). Accordingly, safety regarding vehicle operation is improved as compared to when such inquiries to the user are made while the vehicle10is traveling.(7) The steering wheel60of the vehicle10has the steering switch62that enables selection of whether receiving update data via the cellular line is acceptable. When determination is made that the vehicle10is equipped with the steering switch62(YES in S120inFIG.2), the OTA master11then makes the above-mentioned inquiry to the user without performing the processing in S130. (S140inFIG.2). Accordingly, when the vehicle10is equipped with the steering switch62, the above-described inquiry to the user is made even while the vehicle10is traveling. Now, the steering switch62can be operated while operating the steering wheel of the vehicle10, and accordingly the above inquiry to the user can be made even while the vehicle is traveling, while ensuring safety regarding vehicle operation. Thus, user convenience or the like is improved, for example.

Correlation

In S110inFIG.2, the OTA master11performs processing of determining whether the connection with the wireless LAN will be disconnected while receiving update data via the wireless LAN. Also, in S140inFIG.2, when determination is made that the connection with the wireless LAN will be disconnected, the OTA master11performs processing of inquiring of the user of the vehicle regarding whether reception of update data via the cellular line is acceptable. In the present embodiment, such an OTA master11corresponds to a determination unit, an inquiry unit, and a software management system. Also, the program of the OTA master11that executes the processing as the determination unit and the inquiry unit corresponds to a software management program.

Modifications

Note that the above embodiment can be implemented with the following modifications. The above embodiment and the following modifications can be carried out in combination with each other insofar as no technical contradiction arises.In the processing of S110shown inFIG.2, the following parameters are used to determine whether there is a likelihood that the connection with the wireless LAN will be disconnected. That is to say, the parameters are the vehicle speed of the vehicle10, the traveling area in which the vehicle10is traveling, the current position information of the vehicle10, the map information of the access point for wireless LAN that is currently connected to, and the amount of charge of the mobile information terminal30. Determination may be made regarding whether there is a likelihood that the connection with the wireless LAN will be disconnected, based on at least one of these parameters. Note that the expression “at least one” as used in the present specification means “one or more” of desired options. As an example, the expression “at least one” as used in the present specification means “only one option” or “both of the two options” when the number of options is two. As another example, the expression “at least one” as used in the present specification means “only one option” or “a combination of any two or more options” when the number of options is three or more.Parameters that are different from the above parameters may be used as parameters for determining whether there is a likelihood that the connection with the wireless LAN will be disconnected.An arrangement may be made in which the processing of S120shown inFIG.2is omitted, and when an affirmative determination is made in the processing of S110, the processing of S130is executed. In this case as well, operations and effects other than the above (7) can be obtained.An arrangement may be made in which the processing of S120and S130shown inFIG.2are omitted, and when an affirmative determination is made in the processing of S110, the processing of S140is executed. In this case as well, operations and effects other than the above (6) and (7) can be obtained.A communication standard different from Wi-Fi communication may be used as the wireless LAN.

APPENDICES

Technical ideas that can be comprehended from the above embodiment and modifications will be described.

A software management system for a vehicle includes: a first communication device configured to receive update data for software via a wireless local area network (LAN); a second communication device configured to receive the update data via a cellular line; a determination unit configured to determine whether a connection between the wireless LAN and the first communication device will be disconnected during reception of the update data via the wireless LAN; and an inquiry unit configured to, when the determination unit determines that the connection between the wireless LAN and the first communication device will be disconnected, make an inquiry to a user of the vehicle regarding whether reception of the update data via the cellular line is acceptable.

In the above aspect, the determination unit may be configured to determine whether the connection between the wireless LAN and the first communication device will be disconnected, based on speed of the vehicle.

In the above aspect, the determination unit may be configured to determine whether the connection between the wireless LAN and the first communication device will be disconnected, based on a traveling area in which the vehicle is traveling.

In the above aspect, the determination unit may be configured to determine whether the connection between the wireless LAN and the first communication device will be disconnected, based on map information of an access point for the wireless LAN and position information of the vehicle.

In the above aspect, the determination unit may be configured to determine whether the connection between the wireless LAN and the first communication device will be disconnected, based on an amount of charge of a mobile information terminal, when the connection with the wireless LAN is performed by tethering of the mobile information terminal.

In the above aspect, the inquiry unit may be configured to make the inquiry to the user while the vehicle is stopped.

In the above aspect, a steering wheel of the vehicle may include an operation unit configured to be operated to select whether the reception is acceptable. The inquiry unit may be further configured to make the inquiry to the user while the vehicle is traveling.