Control system, mobile object, control method and computer-readable storage medium

1 . A control system, comprising:

an Electronic Control Unit (ECU) configured to control a mobile object;

at least one processor; and

a communication interface configured to receive,

wherein

the communication interface is configured to receive an update program of the ECU from an external apparatus, and

the at least one processor is configured to

update the ECU the update program;

perform control to acquire a user instruction indicating that the update of the ECU with the update program is not executed;

determine whether an updatable condition is satisfied, which is a determination condition for determining whether the mobile object is in an updatable state or not, based on at least either of a driveline state of the mobile object or an opening or closing state of a door installed in the mobile object; and

update the ECU with the update program on a condition that the updatable condition is satisfied when the user instruction has not been acquired.

2 . The control system according to claim 1 , wherein the at least one processor is configured to update the ECU with the update program when the user instruction has not been acquired before a predetermined time elapses after a notification to a user regarding the update of the ECU has been executed.

3 . The control system according to claim 2 , wherein the predetermined time is from 30 seconds to 600 seconds.

4 . The control system according to claim 3 , wherein the predetermined time is within 300 seconds.

5 . The control system according to claim 3 , wherein the at least one processor is further configured to control a notification to the user regarding the update of the ECU.

6 . The control system according to claim 3 , wherein the at least one processor is configured not to update the ECU with the update program when the updatable condition has not been satisfied before the predetermined time elapses.

7 . The control system according to claim 3 , wherein

a notification to the user includes a notification for letting a user to select whether to execute the update of the ECU; and

the at least one processor is configured to update the ECU with the update program before the predetermined time elapses when a user instruction indicating to execute the update of the ECU is acquired.

8 . The control system according to claim 2 , wherein the at least one processor is further configured to control a notification to the user regarding the update of the ECU.

9 . The control system according to claim 8 , wherein the at least one processor is configured to executes a notification to the user on a condition that the updatable condition is satisfied.

10 . The control system according to claim 2 , wherein the at least one processor is configured not to update the ECU with the update program when the updatable condition has not been satisfied before the predetermined time elapses.

11 . The control system according to claim 2 , wherein

a notification to the user includes a notification for letting a user to select whether to execute the update of the ECU; and

the at least one processor is configured to update the ECU with the update program before the predetermined time elapses when a user instruction indicating to execute the update of the ECU is acquired.

12 . The control system according to claim 2 , wherein

the state of the driveline includes at least either of

a moving speed of the mobile object;

a state of a drive apparatus of the mobile object; and

a state of a gearbox included in the mobile object.

13 . The control system according to claim 1 , wherein

the state of the driveline includes at least either of

a moving speed of the mobile object;

a state of a drive apparatus of the mobile object; and

a state of a gearbox included in the mobile object.

14 . The control system according to claim 13 , wherein

the updatable condition includes that

the moving speed is 0;

the drive apparatus is at standstill;

a shift lever operating the gearbox is in a position that fixes a gear included in the gearbox; and

the door is in a closed state.

15 . The control system according to claim 13 , wherein

the door includes an opening and closing cover for maintenance included in the mobile object.

16 . The control system according to claim 15 , wherein

the mobile object is a vehicle;

the door includes at least one of a bonnet hood and a fuel supply port lid; and

the drive apparatus is an engine or a power unit.

17 . A mobile object comprising the control system according to claim 1 .

18 . The mobile object according to claim 17 , wherein the mobile object is a vehicle.

19 . A control method, comprising:

receiving, by a communication interface, an update program of a mobile object control unit configured to control a mobile object, from an external apparatus;

performing control, by at least one processor, to acquire a user instruction indicating that the update of the mobile object control unit with the update program is not executed; and

determining, by the at least one processor, whether an updatable condition is satisfied, which is a determination condition for determining whether the mobile object is in an updatable state or not, based on at least either of a driveline state of the mobile object or an opening or closing state of a door installed in the mobile object; and

updating, by the at least one processor, the mobile object control unit with the update program on a condition that the updatable condition is satisfied when the user instruction has not been acquired.

20 . A computer readable storage medium, which is a non-transitory computer-readable storage medium having stored therein a program that, when executed by a computer including at least one processor and a communication interface, causes the computer to

operate, by using the at least one processor, a mobile object control unit configured to control a mobile object;

receive, by using the communication interface, an update program of the mobile object control unit from an external apparatus, and update, by using the at least one processor, the mobile object control unit with the update program;

perform control, by using the at least one processor, to acquire a user instruction indicating that the update of the mobile object control unit with the update program is not executed; and

determine, by using at least one processor, whether an updatable condition is satisfied, which is a determination condition for determining whether the mobile object is in an updatable state or not, based on at least either of a driveline state of the mobile object or an opening or closing state of a door installed in the mobile object, and

update, by at least one processor, the mobile object control unit with the update program on a condition that the updatable condition is satisfied when the user instruction has not been acquired.