Software update device, software update method, and software update system
A software update device is connected to a control device and includes an update control unit executing an update process of causing software for the control device to transit from a non-updated state to a completely updated state, a recovery control information managing unit acquiring recovery control information, and a recovery control unit executing a recovery process of causing the software to transit to the completely updated state on a basis of the recovery control information in a case where an abnormality in the update process has prevented the software from transiting to the completely updated state.
1. A software update device connected to a control device, which includes memory which is nonvolatile memory, comprising:
an update control unit executing an update process of causing software which is stored in the memory for the control device to transit from a non-updated state to a completely updated state;
a recovery control information managing unit acquiring recovery control information; and
a recovery control unit executing a recovery process of causing the software to transit to the completely updated state on a basis of the recovery control information in a case where an abnormality in the update process has prevented the software from transiting to the completely updated state, wherein
the recovery control information includes information indicative of a method for the recovery process; and
the information indicative of the method for the recovery process is determined on a basis of a configuration of the control device, wherein
the configuration of the control device is a configuration of the memory, and
the recovery control information includes Electronic Control Unit (ECU) recovery control information and the ECU recovery control information includes an ECU ID which identifies the ECU, a start timing indicative of a timing to start recovery, a display content indicative of a content displayed on a screen of a display device, a recovery method, and a recovery data which is configured to acquire additional recovery data.
2. The software update device according to claim 1 , wherein the recovery control information includes information about a timing to start the recovery process.
3. The software update device according to claim 2 , wherein the software update device is installed in a vehicle, and the recovery control information includes information indicating that the recovery process is to be started at an immediate timing in a case where the control device is a device controlling at least one of an engine and a brake.
4. The software update device according to claim 1 , wherein the recovery control information includes recovery data corresponding to the method for the recovery process.
5. The software update device according to claim 1 , wherein the software update device is connected to a display device installed in a vehicle and providing screen display, the recovery control information includes information for the screen display, and the software update device further comprises a display control unit outputting, to the display device, a signal for displaying a screen on a basis of the information for the screen display, the screen notifying an occupant in the vehicle of a function limited state of the vehicle due to the recovery process.
6. The software update device according to claim 1 , wherein the recovery process includes data about XOR among blocks in the non-updated state, and the recovery control information managing unit uses the recovery process to execute a rollback.
7. The software update device according to claim 1 , wherein the acquiring recovery control information includes acquiring the recovery control information from a target ECU.
8. The software update device according to claim 1 , wherein the recovery control information includes recovery control information for each cause of abnormality.
9. A software update method executed by a software update device connected to a control device, which is stored in the memory, the software update method comprising:
executing an update process of causing software which includes memory which is nonvolatile memory, for the control device to transit from a non-updated state to a completely updated state;
acquiring recovery control information which includes Electronic Control Unit (ECU) recovery control information; and
executing a recovery process of causing the software to transit to the completely updated state on a basis of the recovery control information in a case where an abnormality in the update process has prevented the software from transiting to the completely updated state, wherein
the recovery control information includes information indicative of a method for the recovery process,
the information indicative of the method for the recovery process is determined on a basis of a configuration of the control device,
the configuration of the control device is a configuration of the memory, and
the recovery control information includes ECU recovery control information and the ECU recovery control information includes an ECU ID which identifies the ECU, a start timing indicative of a timing to start recovery, a display content indicative of a content displayed on a screen of a display device, a recovery method, and a recovery data which is configured to acquire additional recovery data.
10. The software update method according to claim 9 , wherein the recovery control information includes information about a timing to start the recovery process.
11. The software update method according to claim 10 , wherein the software update device is installed in a vehicle, and the recovery control information includes information indicating that the recovery process is to be started at an immediate timing in a case where the control device is a device controlling at least one of an engine and a brake.
12. The software update method according to claim 9 , wherein the recovery control information includes recovery data corresponding to the method for the recovery process.
13. The software update method according to claim 9 , wherein the software update device is connected to a display device installed in a vehicle and providing screen display, the recovery control information includes information for the screen display, and the software update method further comprises: outputting, to the display device, a signal for displaying a screen on a basis of the information for the screen display, the screen notifying an occupant in the vehicle of a function limited state of the vehicle due to the recovery process.
14. The software update method according to claim 9 , wherein the recovery process includes data about XOR among blocks in the non-updated state, and the recovery control information managing unit uses the recovery process to execute a rollback.
15. The software update method according to claim 9 , wherein the acquiring recovery control information includes acquiring the recovery control information from a target ECU.
16. The software update method according to claim 9 , wherein the recovery control information includes recovery control information for each cause of abnormality.
17. A software update system comprising: the software update device according to claim 1 ; and a server transmitting the recovery control information to the software update device.