Software update apparatus, software update method, non-transitory storage medium storing program, vehicle, and OTA master

1. A software update method executed by a computer of a software update apparatus, the software update method comprising:

sending a request for downloading update data to a center;

storing the downloaded update data;

determining whether a vehicle is stopped and is able to be maintained in a stopped state; and

executing, based on the update data, a control for installing update software on one or more dual bank target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network, and executing the control for installing the update software to one or more single bank target electronic control units after a determination result is positive and after installing the updated software in the one or more dual bank target electronic control units.

2. A software update apparatus comprising:

a transmitter/receiver configured to send a request for downloading update data to a center;

a memory configured to store the downloaded update data; and

an electronic control unit that is configured to:

install, based on the update data, update software on one or more dual bank target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network; and

determine whether a vehicle is stopped and is able to be maintained in a stopped state, after installing the updated software in the one or more dual bank target electronic control units,

wherein the electronic control unit is configured to, when a determination result of the electronic control unit is positive, install the update software to one or more single bank target electronic control units.

3. The software update apparatus according to claim 2 , wherein the electronic control unit is configured to, based on a state of surroundings of the vehicle, determine whether the vehicle is able to be maintained in the stopped state.

4. The software update apparatus according to claim 3 , wherein the electronic control unit is configured to determine that the vehicle is able to be maintained in the stopped state when detecting absence of a person or an object within the surroundings of the vehicle as the state.

5. The software update apparatus according to claim 3 , wherein the electronic control unit is configured to determine that the vehicle is able to be maintained in the stopped state when detecting no movement of a person or an object within the surroundings of the vehicle as the state.

6. The software update apparatus according to claim 3 , wherein the electronic control unit is configured to detect the state using a sensor included in the vehicle.

7. The software update apparatus according to claim 3 , wherein the electronic control unit is configured to detect the state using wireless communication with another vehicle.

8. The software update apparatus according to claim 3 , wherein the electronic control unit is configured to detect the state using wireless communication with a device provided on a road.

9. The software update apparatus according to claim 2 , wherein the electronic control unit is configured to, upon receiving a notification from the center using wireless communication that the center has determined that the vehicle is able to be maintained in the stopped state based on a current position of the vehicle, determine that the vehicle is able to be maintained in the stopped state.

10. The software update apparatus according to claim 2 , wherein the electronic control unit is configured to determine that the vehicle is able to be maintained in the stopped state when detecting connection between a cable and the vehicle.

11. The software update apparatus according to claim 2 , wherein the electronic control unit is configured to, before restricting operations of the target electronic control units, execute at least one of turning off power of the vehicle, setting a shift position to parking, and causing a power source to stop generation of driving force.

12. A vehicle comprising the software update apparatus according to claim 2 .

13. A non-transitory storage medium storing a program executable on a computer of a software update apparatus, the program causing the computer to execute the following functions:

sending a request for downloading update data to a center;

storing the downloaded update data;

determining whether a vehicle is stopped and is able to be maintained in a stopped state: and

executing, based on the update data, a control for installing update software on one or more dual bank target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network, and executing the control for installing the update software to one or more single bank target electronic control units when a determination result is positive and after installing the updated software in the one or more dual bank target electronic control units.

14. An Over The Air (OTA) master comprising:

a transmitter/receiver configured to send a request for downloading update data to a center;

a memory configured to store the downloaded update data;

an electronic control unit that is configured to:

install, based on the update data, a control for installing update software on one or more dual bank target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network; and

determine whether a vehicle is stopped and is able to be maintained in a stopped state, after installing the updated software in the one or more dual bank target electronic control units,

wherein the electronic is configured to, when a determination result of the electronic control unit is positive, install the update software to one or more single bank target electronic control units.

15. A software update method executed by a computer of an Over The Air (OTA) master, the software update method comprising:

sending a request for downloading update data to a center;

storing the downloaded update data;

determining whether a vehicle is stopped and is able to be maintained in a stopped state; and

executing, based on the update data, a control for installing update software on one or more dual bank target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network, and executing the control for installing the update software to one or more single bank target electronic control units after a determination result is positive and after installing the updated software in the one or more dual bank target electronic control units.

16. A non-transitory storage medium storing a program executable on a computer of an Over The Air (OTA) master, the program causing the computer to execute the following functions:

sending a request for downloading update data to a center;

storing the downloaded update data;

determining whether a vehicle is stopped and is able to be maintained in a stopped state; and

executing, based on the update data, a control for installing update software on one or more dual bank target electronic control units from among a plurality of electronic control units connected to each other via an in-vehicle network, and executing the control for installing the update software to one or more single bank target electronic control units when a determination result is positive and after installing the updated software in the one or more dual bank target electronic control units.