Patent Description:
PTL <NUM> discloses a rewriting system which rewrites information stored in a control unit to be rewritten from among a plurality of control units provided in a vehicle. As the system described in PTL <NUM>, for example, a system has been proposed in which software for rewriting information stored in the control unit is downloaded by wireless distribution and the information stored in the control unit provided in a vehicle is updated by using the downloaded software. According to the system as above, a user can update the information stored in the control unit without bringing the vehicle into a dealer or a service center. As a result, convenience for the user of the vehicle is improved, and loads on the dealer and the service center can be reduced.

Here, when the information stored in the control unit mounted on the vehicle is to be updated, in order to reliably complete the update of the information while safety is ensured, such a state is required that an engine of the vehicle is stopped, and electricity is supplied to the control unit. Therefore, as the system described in PTL <NUM>, for example, in the system which updates the information stored in the control unit mounted on the vehicle such as an automobile, after ignition of the vehicle is turned off, an execution control unit, which executes update of the information, is set to a state called a standby mode or a sleep mode in which an operation is performed with a low power consumption. And when the control unit, which is a target of the information update, is brought into a state capable of update, the execution control unit transfers from the state called the standby mode or the sleep mode to a state called an operation mode or a normal mode in which the operation is performed with normal power consumption, and performs the information update. The "ignition" here refers to a component which sets a conduction state of the electricity supplied to the vehicle from a battery mounted on the vehicle to on or off.

However, industrial machines such as a construction machine, an agricultural machine, a lawnmower and the like, for example, are left in a state, where an engine is stopped for a long time such as several weeks or several months, as compared with the automobiles in some cases. Therefore, there is a concern that a battery is exhausted even in a case set to a state called the standby mode or the sleep mode, in which at least either one of the control unit which performs information update and the control unit as the target of information update is operated with low power consumption. And there is a concern that the engine cannot be started when the user is to use the industrial machine.

The present invention has been made in order to solve the aforementioned problem and has an object to provide an information update system which can update information stored in a control unit mounted on an industrial machine by using an update file transmitted wirelessly while occurrence of battery exhaustion is suppressed.

The aforementioned problem is solved by an information update system according to the present invention as set out in claim <NUM>.

According to the information update system according to the present invention, the first relay is controlled by the control unit which stores information of to be updated to be connected and disconnected and switches between transmission and shut-off of the electricity supplied from the battery to the gateway and the control unit. The second relay is controlled by the gateway which executes update of the information stored in the control unit to be connected and disconnected and switches between the transmission and shut-off of the electricity supplied from the battery to the gateway and the control unit. The control unit executes the control of connecting the first relay when the ignition is set to on and of disconnecting the first relay when the ignition is set to off. As a result, when the ignition is set to off, the electricity supplied from the battery is shut off by the ignition and the first relay and is not transmitted to the gateway or the control unit through the ignition or the first relay. On the other hand, when the ignition is set to on, the gateway connects the second relay, while when the ignition is set to off, the gateway performs the information update in the state where the second relay is kept connected. That is, even when the ignition is set to off, the second relay maintains the connected state. Therefore, even when the ignition is set to off, the electricity supplied from the battery is shut off by the ignition but it is transmitted to the gateway and the control unit through the second relay. As a result, even when the ignition is set to off, the gateway can receive the update file transmitted wirelessly from the server and transmit it to the control unit and perform update of the information stored in the control unit. And the gateway executes the control of disconnecting the second relay after the update of the information stored in the control unit is finished. As a result, the electricity supplied from the battery is shut off by the second relay and is not transmitted to the gateway or the control unit through the second relay.

According to this, when the ignition is set to off, even if the gateway and the control unit are not set to the state called the standby mode, the sleep mode or the like, the gateway can perform update of the information stored in the control unit in the state where the second relay is kept connected. Therefore, even if the industrial machine is left in the state where the engine is stopped for a long time such as several weeks or several months, the information update system according to the present invention can update the information stored in the control unit mounted on the industrial machine by using the update file transmitted wirelessly from the server while occurrence of the battery exhaustion is suppressed. Moreover, since the second relay which is controlled by the gateway to be connected and disconnected is provided, the information update system according to the present invention does not need large-scale update or change of the software even when the information stored in the control unit of the industrial machine already in the market is to be updated, but the information stored in the control unit can be updated by retrofit.

In the information update system according to the present invention, the gateway is preferably characterized by acquiring an item number of the information stored in the control unit by communicating with the control unit and by confirming whether the update of the information is needed or not by wirelessly notifying the server of the item number.

According to the information update system according to the present invention, the gateway acquires the item number of the information stored in the control unit and checks whether the update of the information stored in the control unit is needed or not. Therefore, the gateway can receive the update file transmitted wirelessly from the server after confirming that the information stored in the control unit is the information to be updated. In other words, if the information stored in the control unit is not the information to be updated, the gateway can execute control of not receiving the update file transmitted wirelessly from the server. As a result, reception of an unnecessary update file transmitted wireless from the server by the gateway is suppressed, and wasteful consumption of power of the battery or wasteful consumption of a memory capacity of the gateway can be suppressed.

In the information update system according to the present invention, when the information update is not needed, the gateway is preferably characterized by executing control of disconnecting the second relay before the ignition is set to off.

According to the information update system according to the present invention, when the update of the information stored in the control unit is not needed, the gateway disconnects the second relay before the ignition is set to off. As a result, before the ignition is set to off, the electricity supplied from the battery is shut off by the second relay and is not transmitted to the gateway or the control unit through the second relay. As a result, wasteful consumption of power of the battery can be suppressed.

In the information update system according to the present invention, when the information update is needed, the gateway is preferably characterized by receiving the update file, and after the information update has been finished and after confirmation is made that the item number of the information stored in the control unit has been updated, the gateway executes control of disconnecting the second relay.

According to the information update system according to the present invention, when the update of the information stored in the control unit is needed, the gateway receives the update file transmitted wirelessly from the server. And after the update of the information stored in the control unit was finished and after it is confirmed that the item number of the information stored in the control unit was updated, the gateway disconnects the second relay. As a result, the information update system according to the present invention can update the information stored in the control unit mounted on the industrial machine by using the update file transmitted wirelessly from the server more reliably, while occurrence of battery exhaustion is suppressed.

In the information update system according to the present invention, when it cannot be confirmed that the item number of the information stored in the control unit was updated, the gateway is preferably characterized by performing the information update again.

According to the information update system according to the present invention, even when implementation of the update of the item number of the information stored in the control unit cannot be confirmed, the gateway performs the update of the information stored in the control unit again. As a result, the information update system according to the present invention can update the information stored in the control unit mounted on the industrial machine by using the update file transmitted wirelessly from the server more reliably, while occurrence of the battery exhaustion is suppressed.

According to the present invention, the information update system which can update information stored in the control unit mounted on the industrial machine by using the update file transmitted wirelessly can be provided, while occurrence of the battery exhaustion is suppressed.

Hereinafter, a preferred embodiment of the present invention will be described in detail by referring to the drawings.

Since the embodiment described below is a preferred specific example of the present invention, technically preferable various limitations are given, but the scope of the present invention is not limited to these modes unless it is particularly described that the present invention is limited in the following description. Moreover, in each of the drawings, the same signs are given to the similar constituent elements, and detailed description will be omitted as appropriate.

<FIG> is a block diagram illustrating an essential part configuration of an information update system according to an embodiment of the present invention.

The information update system <NUM> according to this embodiment includes a gateway <NUM>, an engine ECU (E-ECU: Engine-Electronic Control Unit) <NUM>, a first relay <NUM>, and a second relay <NUM> and updates information stored in the engine ECU <NUM>. The information update system <NUM> is mounted on an industrial machine such as a construction machine, an agricultural machine, a lawnmower and the like.

In the information update system <NUM> according to the present invention, the engine ECU <NUM> is a control unit which stores information to be updated and has a calculation unit <NUM>, a storage unit <NUM>, and a communication unit <NUM>. The control unit which stores the information to be updated is not limited to the engine ECU <NUM> shown in <FIG> but may be a machine ECU <NUM> shown in <FIG>. In the description of this embodiment, a case in which the control unit which stores the information to be updated is the engine ECU <NUM> will be cited as an example. That is, the engine ECU <NUM> of this embodiment is an example of the "control unit" of the present invention.

The calculation unit <NUM> executes various calculations and processing by reading out a program stored in the storage unit <NUM>. The storage unit <NUM> stores (holds in a storage) various types of software such as a program executed by the calculation unit <NUM> and data used for calculation and processing of the calculation unit <NUM>. The software stored in the storage unit <NUM> is updated by the information update system <NUM> according to this embodiment. That is, the software stored in the storage unit <NUM> is an example of the "information" of the present invention. As the storage unit <NUM>, a ROM (Read Only Memory), a RAM (Random Access Memory) and the like are cited. The communication unit <NUM> conducts communication with the gateway <NUM> and the machine ECU <NUM> via a CAN communication line and transmits/receives various types of information and various signals.

The gateway <NUM> has a calculation unit <NUM>, a storage unit <NUM>, and a communication unit <NUM>. The calculation unit <NUM> executes various calculations and processing by reading out a program stored in the storage unit <NUM>. The storage unit <NUM> stores (holds in a storage) various types of software such as a program executed by the calculation unit <NUM> and data used for calculation and processing of the calculation unit <NUM>. As the storage unit <NUM>, a ROM, a RAM and the like are cited. The communication unit <NUM> conducts communication with the engine ECU <NUM> and the machine ECU <NUM> via the CAN communication line and transmits/receives various types of information and various signals.

The gateway <NUM> receives an update file <NUM> transmitted wirelessly from a server <NUM> by the communication unit <NUM>. The update file <NUM> is a file for performing the update of the software stored in the storage unit <NUM> of the engine ECU <NUM>. As the update file <NUM>, a compressed file such as a DPK file or the like is cited, for example. The update file <NUM> is not limited to the DPK file.

The gateway <NUM> stores the update file <NUM> received by the communication unit <NUM> in the storage unit <NUM>. That is, the calculation unit <NUM> performs download of the update file <NUM> transmitted wirelessly from the server <NUM>. Then, the calculation unit <NUM> decompresses the update file <NUM> stored in the storage unit <NUM> as necessary, transmits it by the communication unit <NUM> to the engine ECU <NUM>, and performs the update of the software stored in the storage unit <NUM> of the engine ECU <NUM>. That is, the gateway <NUM> of this embodiment performs the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> by using an art of OTA (Over The Air). Details of the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> will be described later.

The machine ECU <NUM> has a calculation unit <NUM>, a storage unit <NUM>, and a communication unit <NUM>. The calculation unit <NUM> executes various calculations and processing by reading out a program stored in the storage unit <NUM>. The storage unit <NUM> stores (holds in a storage) various types of software such as a program executed by the calculation unit <NUM> and data used for calculation and processing of the calculation unit <NUM>. As the storage unit <NUM>, a ROM, a RAM and the like are cited. The communication unit <NUM> conducts communication with the engine ECU <NUM> and the gateway <NUM> via the CAN communication line and transmits/receives various types of information and various signals.

The first relay <NUM> is controlled by the engine ECU <NUM> to be connected and disconnected. In other words, the engine ECU <NUM> executes control of setting the first relay <NUM> to on (connected state) or of setting the first relay <NUM> to off (disconnected state). Then, the first relay <NUM> switches between transmission and shut-off of electricity supplied from the battery <NUM> to the gateway <NUM>, the engine ECU <NUM> and the machine ECU <NUM> by being controlled by the engine ECU <NUM> to be connected and disconnected.

The engine ECU <NUM> executes control of connecting the first relay <NUM> when an ignition <NUM> is set to on. As a result, the electricity supplied from a battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the first relay <NUM>. In this embodiment, the "ignition" is supposed to refer to a component which sets a conduction state to an industrial machine of electricity supplied from the battery <NUM> mounted on the industrial machine to on or off. Moreover, when the ignition <NUM> is set to on, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the ignition <NUM>. As described above, in the information update system <NUM> according to this embodiment, when the ignition <NUM> is set to on, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM> and the machine ECU <NUM> through the first relay <NUM> and is also transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the ignition <NUM>.

On the other hand, the engine ECU <NUM> executes control of disconnecting the first relay <NUM> when the ignition <NUM> is set to off. As a result, the electricity supplied from the battery <NUM> is shut off by the first relay <NUM> and is not transmitted to the gateway <NUM>, the engine ECU <NUM> or the machine ECU <NUM> through the first relay <NUM>. Moreover, when the ignition <NUM> is set to off, the electricity supplied from the battery <NUM> is shut off by the ignition <NUM> and is not transmitted to the gateway <NUM>, the engine ECU <NUM> or the machine ECU <NUM> through the ignition <NUM>.

The second relay <NUM> is controlled by the gateway <NUM> to be connected and disconnected. In other words, the gateway <NUM> executes control of setting the second relay <NUM> to on (connected state) or of setting the second relay <NUM> to off (disconnected state). Then, the second relay <NUM> switches between transmission and shut-off of the electricity supplied from the battery <NUM> to the gateway <NUM>, the engine ECU <NUM> and the machine ECU <NUM> by being controlled by the gateway <NUM> to be connected and disconnected.

The gateway <NUM> executes control of connecting the second relay <NUM> when the ignition <NUM> is set to on. As a result, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the second relay <NUM>. Moreover, when the ignition <NUM> is set to on, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the ignition <NUM>. As described above, in the information update system <NUM> according to this embodiment, when the ignition <NUM> is set to on, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM> and the machine ECU <NUM> through the second relay <NUM> and is also transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the ignition <NUM>.

Here, when the software stored in the control unit mounted on the vehicle is to be updated, in order to reliably complete the update of the software while safety is ensured, such a state is required that the engine of the vehicle is stopped, and the electricity is supplied to the control unit. Therefore, in the system which updates the software stored in the control unit mounted on the vehicle such as an automobile, after the ignition of the vehicle is set to off, an execution control unit which executes update of the software is set to a state called a standby mode or a sleep mode in which an operation is performed with a low power consumption in some cases. And when the control unit which is a target of the software update is brought into a state capable of update, the execution control unit transfers from the state called the standby mode or the sleep mode to a state called an operation mode or a normal mode in which the operation is performed with normal power consumption, and performs the software update in some cases.

However, industrial machines such as a construction machine, an agricultural machine, a lawnmower and the like on which the information update system <NUM> according to this embodiment is mounted are left in a state where an engine is stopped for a long time such as several weeks or several months as compared with the automobiles in some cases. Therefore, there is a concern that the battery is exhausted even in a case set to a state called the standby mode or the sleep mode in which at least either one of the gateway <NUM> and the engine ECU <NUM> is operated with low power consumption. And there is a case in which the engine cannot be started when the user is to use the industrial machine.

On the other hand, in the information update system <NUM> according to this embodiment, the gateway <NUM> performs the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> in a state where the second relay <NUM> is kept connected when the ignition <NUM> is set to off. And the gateway <NUM> executes control of disconnecting the second relay <NUM> after the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> is finished.

According to the information update system <NUM> according to this embodiment, even when the ignition <NUM> is set to off, the second relay <NUM> maintains the connected state. Therefore, even when the ignition <NUM> is set to off, the electricity supplied from the battery <NUM> is shut off by the ignition <NUM>, while it is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the second relay <NUM>. As a result, even when the ignition <NUM> is set to off, the gateway <NUM> receives the update file <NUM> transmitted wirelessly from the server <NUM> and transmits it to the engine ECU <NUM> and can perform the update of the software stored in the storage unit <NUM> of the engine ECU <NUM>. And the gateway <NUM> executes the control of disconnecting the second relay <NUM> after the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> is finished. As a result, the electricity supplied from the battery <NUM> is shut off by the second relay <NUM> and is not transmitted to the gateway <NUM>, the engine ECU <NUM> or the machine ECU <NUM> through the second relay <NUM>.

According to the above, when the ignition <NUM> is set to off, even if the gateway <NUM> and the engine ECU <NUM> are not set to the state called the standby mode or the sleep mode, the gateway <NUM> can perform the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> in the state where the second relay <NUM> is kept connected. Therefore, even if the industrial machine is left in the state where the engine is stopped for a long time such as several weeks or several months, the information update system <NUM> according to this embodiment can perform the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> mounted on the industrial machine by using the update file <NUM> transmitted wirelessly from the server <NUM>, while occurrence of the battery exhaustion is suppressed.

Moreover, since the second relay <NUM> which is controlled by the gateway <NUM> to be connected and disconnected is provided, the information update system <NUM> according to this embodiment does not need large-scale update or change of the software even when the software stored in the storage unit <NUM> of the engine ECU <NUM> of the industrial machine already in the market is to be updated, but the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> can be performed by retrofit.

Subsequently, a specific example in which the gateway <NUM> of this embodiment performs the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> will be described by referring to the drawings.

<FIG> and <FIG> are flowcharts exemplifying the specific example in which the gateway of this embodiment performs the update of the software stored in the control unit.

As described above in relation with <FIG>, in this specific example, a case in which the control unit storing the software to be updated is the engine ECU <NUM> is cited as an example.

First, at Step S11, the ignition <NUM> is set to on. As a result, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the ignition <NUM>.

Subsequently, at Step S12, the engine ECU <NUM> is started and executes control of connecting the first relay <NUM>. That is, at Step S12, the engine ECU <NUM> sets the first relay <NUM> to on (connected state). As a result, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the first relay <NUM>. Moreover, at Step S12, the gateway <NUM> is started and executes control of connecting the second relay <NUM>. That is, at Step S12, the gateway <NUM> sets the second relay <NUM> to on (connected state). As a result, the electricity supplied from the battery <NUM> is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the second relay <NUM>.

Subsequently, at Step S13, the engine ECU <NUM> and the gateway <NUM> transmit operation counters by the CAN to each other and check an operation state of the other. That is, the engine ECU <NUM> and the gateway <NUM> mutually check the started state.

Subsequently, at Step S14, the gateway <NUM> communicates with the engine ECU <NUM> by the CAN and acquires an item number of the software stored in the storage unit <NUM> of the current engine ECU <NUM>. Subsequently, at Step S15, the gateway <NUM> wirelessly notifies the server <NUM> of the item number of the software stored in the storage unit <NUM> of the current engine ECU <NUM> and checks whether the update of the software is needed or not.

Subsequently, at Step S16, the gateway <NUM> determines whether the update of the software stored in the storage unit <NUM> of the current engine ECU <NUM> is needed or not. If the update of the software is not needed (Step S16: NO), at Step S17, the gateway <NUM> executes the control of disconnecting the second relay <NUM>. That is, at Step S17, the gateway <NUM> sets the second relay <NUM> to off (disconnected state). As a result, the electricity supplied from the battery <NUM> is shut off by the second relay <NUM> and is not transmitted to the gateway <NUM>, the engine ECU <NUM> or the machine ECU <NUM> through the second relay <NUM>.

On the other hand, if the update of the software is needed (Step S16: YES), at Step S18, the gateway <NUM> makes a request to the server <NUM> for download of the update file <NUM> and receives the update file <NUM> transmitted wirelessly from the server <NUM> by the communication unit <NUM>. Then, the gateway <NUM> stores the update file <NUM> received by the communication unit <NUM> in the storage unit <NUM>. That is, at Step S18, the gateway <NUM> executes the download of the update file <NUM> transmitted wirelessly from the server <NUM>.

At Step S19 subsequent to Step S17 and Step S18, the engine ECU <NUM> executes normal control of the engine. Subsequently, at Step S21, at least either one of the gateway <NUM> and the engine ECU <NUM> determines whether the control of the engine has been finished or not. In other words, at Step S21, at least either one of the gateway <NUM> and the engine ECU <NUM> determines whether the ignition <NUM> has been set to off or not. For example, at least either one of the gateway <NUM> and the engine ECU <NUM> confirms that the control of the engine has been finished by detecting that the ignition <NUM> is set to off.

If the control of the engine has not been finished (Step S21: NO), at Step S19, the engine ECU <NUM> continuously executes the normal control of the engine. On the other hand, if the control of the engine has been finished (Step S21: YES), at Step S22, after the engine ECU <NUM> executes processing of writing down required information in the storage unit <NUM>, it sets the first relay <NUM> to off. Then, the engine ECU <NUM> notifies the gateway <NUM> that the first relay <NUM> was set to off by the CAN. That is, at Step S21, after the engine ECU <NUM> executes the processing of writing down the required information in the storage unit <NUM>, it sets the first relay <NUM> to off and notifies the gateway <NUM> that the update of the software has been enabled by the CAN.

Subsequently, at Step S23, the gateway <NUM> determines whether the software stored in the storage unit <NUM> of the current engine ECU <NUM> is to be updated or not. In other words, at Step S23, the gateway <NUM> determines whether the update file <NUM> transmitted wirelessly from the server <NUM> has been received or not. If the software is not to be updated (Step S23: NO), the operation of the information update system <NUM> ends.

On the other hand, when the software is to be updated (Step S23: YES), at Step S24, the gateway <NUM> makes a request to the engine ECU <NUM> by the CAN and notifies that the software is to be updated (that is, download of the update file <NUM>). Subsequently, at Step S25, the gateway <NUM> transmits the update file <NUM> stored in the storage unit <NUM> to the engine ECU <NUM> by the CAN and performs the update of the software stored in the storage unit <NUM> of the engine ECU <NUM>. Subsequently, at Step S26, the gateway <NUM> finishes the update of the software stored in the storage unit <NUM> of the engine ECU <NUM>.

Subsequently, at Step S27, the gateway <NUM> reads out the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> from the engine ECU <NUM> and checks whether the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> has been updated or not. Then, at Step S28, the gateway <NUM> determines whether the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> has been updated or not.

If the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> has been updated (Step S28: YES), at Step S32, the gateway <NUM> sets the second relay <NUM> to off. As a result, the electricity supplied from the battery <NUM> is shut off by the second relay <NUM> and is not transmitted to the gateway <NUM>, the engine ECU <NUM> or the machine ECU <NUM> through the second relay <NUM>.

On the other hand, if the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> has not been updated (Step S28: NO), at Step S29, the gateway <NUM> determines whether the number of times of the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> being performed is a predetermined number of more. If the number of times of the software update being performed is not more than the predetermined number of times (Step S29: NO), at Step S25, the gateway <NUM> performs the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> again.

On the other hand, if the number of times of the software update being performed is the predetermined number or more (Step S29: YES), at Step S31, the gateway <NUM> notifies the server <NUM> that the update of the software stored in the storage unit <NUM> of the engine ECU <NUM>, that is, the download of the update file <NUM> to the engine ECU <NUM> has failed. Subsequently, at Step S32, the gateway <NUM> sets the second relay <NUM> to off. Then, the operation of the information update system <NUM> is finished.

According to this specific example, even when the ignition <NUM> is set to off, the second relay <NUM> maintains the connected state until the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> is updated (Step S28: YES) or until the gateway <NUM> notifies the server <NUM> that the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> has failed (Step S31). Therefore, even when the ignition <NUM> is set to off, the electricity supplied from the battery <NUM> is shut off by the ignition <NUM>, while it is transmitted to the gateway <NUM>, the engine ECU <NUM>, and the machine ECU <NUM> through the second relay <NUM>. As a result, even when the ignition <NUM> is set to off, the gateway <NUM> transmits the update file <NUM> to the engine ECU <NUM> and can perform the update of the software stored in the storage unit <NUM> of the engine ECU <NUM>.

According to the above, when the ignition <NUM> is set to off, even if the gateway <NUM> and the engine ECU <NUM> are not set to the state called the standby mode or the sleep mode, the gateway <NUM> can perform the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> in the state where the second relay <NUM> is kept connected. Therefore, even if an industrial machine is left in the state where the engine is stopped for a long time such as several weeks or several months, the information update system <NUM> according to this embodiment can perform the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> mounted on the industrial machine by using the update file <NUM> transmitted wirelessly from the server <NUM>, while occurrence of the battery exhaustion is suppressed.

Moreover, the gateway <NUM> acquires the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> (Step S14) and checks whether the software update is needed or not (Step S15). Therefore, the gateway <NUM> can receive the update file transmitted wirelessly from the server (Step S18) after it is confirmed that the software stored in the storage unit <NUM> of the engine ECU <NUM> is the software to be updated (Step S16: YES). In other words, if the software stored in the storage unit <NUM> of the engine ECU <NUM> is not the software to be updated (Step S16: NO), the gateway <NUM> does not receive the update file <NUM> transmitted wirelessly from the server <NUM> but executes the control of disconnecting the second relay <NUM> (Step S17). As a result, reception of the unnecessary update file <NUM> by the gateway <NUM> is suppressed, and wasteful consumption of power of the battery <NUM> or wasteful consumption of the memory capacity of the storage unit <NUM> of the gateway <NUM> can be suppressed.

Moreover, as described above, if the software stored in the storage unit <NUM> of the engine ECU <NUM> is not the software to be updated (Step S16: NO), the gateway <NUM> does not receive the update file <NUM> transmitted wirelessly from the server <NUM> but executes the control of disconnecting the second relay <NUM> before the ignition <NUM> is set to off (that is, before the control of the engine is finished) (Step S17). As a result, before the ignition <NUM> is set to off, the electricity supplied from the battery <NUM> is shut off by the second relay <NUM> and is not transmitted to the gateway <NUM>, the engine ECU <NUM> or the machine ECU <NUM> through the second relay <NUM>. As a result, wasteful consumption of the power of the battery <NUM> can be suppressed.

Moreover, if the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> is needed (Step S16: YES), the gateway <NUM> receives the update file <NUM> transmitted wirelessly from the server <NUM> (Step S18). Then, after the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> was finished (Step S26), and after it is confirmed that the item number of the software was updated (Step S28: YES), the gateway <NUM> sets the second relay <NUM> to off (Step S32). As a result, the information update system <NUM> according to this embodiment can update the software stored in the storage unit <NUM> of the engine ECU <NUM> mounted on the industrial machine more reliably by using the update file <NUM> transmitted wirelessly from the server <NUM>, while occurrence of the battery exhaustion is suppressed.

Moreover, if it cannot be confirmed that the item number of the software stored in the storage unit <NUM> of the engine ECU <NUM> has been updated (Step S28: NO), the gateway <NUM> performs the update of the software stored in the storage unit <NUM> of the engine ECU <NUM> again (Step S25). As a result, the information update system <NUM> according to this embodiment can update the software stored in the storage unit <NUM> of the engine ECU <NUM> mounted on the industrial machine more reliably by using the update file <NUM> transmitted wirelessly from the server <NUM>, while occurrence of the battery exhaustion is suppressed.

The embodiment of the present invention has been described. However, the present invention is not limited to the embodiment described above but is capable of various changes within a range not departing from the scope of claims. The configuration of the aforementioned embodiment can be partially omitted or can be arbitrarily combined differently from the above.

Claim 1:
An information update system (<NUM>) updating information stored in a control unit (<NUM>; <NUM>) mounted on an industrial machine, the information update system (<NUM>) comprising:
an ignition (<NUM>) which sets a conduction state of electricity, supplied from a battery (<NUM>) mounted on the industrial machine to the industrial machine, to on or off;
a control unit (<NUM>; <NUM>) which stores the information to be updated;
characterized in that the information update system (<NUM>) further comprises:
a gateway (<NUM>) which performs the information update by receiving an update file (<NUM>) transmitted wirelessly from a server (<NUM>) and by transmitting the received update file (<NUM>) to the control unit (<NUM>; <NUM>);
a first relay (<NUM>) which is controlled by the control unit (<NUM>; <NUM>) to be connected and disconnected and switches between transmission and shut-off of the electricity supplied from the battery (<NUM>) to the gateway (<NUM>) and the control unit; and
a second relay (<NUM>) which is controlled by the gateway (<NUM>) to be connected and disconnected and switches between the transmission and the shut-off of the electricity supplied from the battery (<NUM>) to the gateway (<NUM>) and the control unit (<NUM>; <NUM>), wherein
the electricity supplied from the battery (<NUM>) is transmitted to the gateway (<NUM>) and the control unit (<NUM>; <NUM>) through the ignition (<NUM>) when the ignition (<NUM>) is set to on, and is shut off by the ignition (<NUM>) and is not transmitted to the gateway (<NUM>) and the control unit (<NUM>; <NUM>) when the ignition (<NUM>) is set to off;
the control unit (<NUM>; <NUM>) executes control of connecting the first relay (<NUM>) when the ignition (<NUM>) is set to on and of disconnecting the first relay (<NUM>) when the ignition (<NUM>) is set to off; and
the gateway (<NUM>) executes control of connecting the second relay (<NUM>) when the ignition (<NUM>) is set to on, control of performing the information update in a state where the second relay (<NUM>) is kept connected when the ignition (<NUM>) is set to off, and control of disconnecting the second relay (<NUM>) after the information update is finished.