Vehicle master device, vehicle electronic control system, activation request instruction method and computer program product

1. A vehicle master device that is configured to communicate with a rewrite target electronic control unit (ECU), acquire update data from outside, distribute the acquired update data to the rewrite target ECU, and instruct the rewrite target ECU to rewrite a program, the rewrite target ECU including a memory that stores a control program, a processor that controls an operation by performing various processes by executing the control program, and a data transfer unit that controls data communication, the vehicle master device comprising:

at least one processor; and

at least one memory storing computer program code, wherein

the computer program code is configured to, when executed by the at least one processor, cause the at least one processor to serve as:

a rewrite target specifying unit that is configured to specify a plurality of rewrite target ECUs;

a rewrite completion determination unit that is configured to determine whether a program rewrite is completed for all the plurality of rewrite target ECUs specified by the rewrite target specifying unit;

an activation executable determination unit that is configured to determine whether activation is executable when the rewrite completion determination unit determines that the program rewrite is completed for all the plurality of rewrite target ECUs; and

an activation request instruction unit that is configured to instruct all the plurality of rewrite target ECUs at the same time to perform the activation when the activation executable determination unit determines that activation is executable, wherein

the activation request instruction unit is further configured to instruct all the plurality of rewrite target ECUs at the same time to perform activation by giving an instruction for a reset request after giving an instruction for a request for switching to a new bank.

2. The vehicle master device according to claim 1 , wherein

the activation executable determination unit is further configured to determine that the activation is executable when a user makes an approval to the activation.

3. The vehicle master device according to claim 1 , wherein

the activation executable determination unit is further configured to determine that the activation is executable when a vehicle is parked.

4. The vehicle master device according to claim 1 , wherein

the activation request instruction unit is further configured to give an instruction for a software reset request as the reset request; and

in response to receiving the instruction for the software reset, each rewrite target ECU of the plurality of ECUs is reset and restarted to activate a corresponding application program.

5. The vehicle master device according to claim 1 , wherein

the activation request instruction unit is further configured to give an instruction for a power reset request as the reset request.

6. The vehicle master device according to claim 1 , wherein

the activation request instruction unit is further configured to monitor a session transition timeout after giving an instruction for a request for switching to a new bank.

7. The vehicle master device according to claim 1 , wherein

the activation request instruction unit is further configured to monitor an internal reset in each of the plurality of rewrite target ECUs after giving an instruction for a request for switching to a new bank.

8. The vehicle master device according to claim 1 , wherein

the rewrite target specifying unit is further configured to specify different types of the plurality of rewrite target ECUs that include an ECU having a single-bank memory with a single flash bank, an ECU having a single-bank suspend memory having pseudo-double flash banks, and an ECU having a double-bank memory with double substantial flash banks.

9. The vehicle master device according to claim 1 , wherein

each of the plurality of the rewrite target ECUs includes a non-volatile memory having a first storage bank and a second storage bank,

each of the plurality of the rewrite target ECUs is configured to:

receive the update data from the vehicle master device; and

rewrite a program on the second data storage bank with the received update data by writing the update data into the second data storage bank,

each of the plurality of the rewrite target ECUs includes active bank information indicating which is an active bank between the first data storage bank and the second data storage bank, wherein the active bank of a respective rewrite target ECU stores a program that is to be executed upon start of the respective rewrite target ECU, and

the activation request instruction unit is further configured to give an instruction for a request, as the request for switching to the new bank, to each of the plurality of the rewrite target ECUs to update the active bank information to indicate that the second data storage bank is the active bank.

10. The vehicle master device according to claim 1 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a first reset request for resetting software of each of the plurality of rewrite target ECUs and a second reset request for resetting power for each of the plurality of rewrite target ECUs, and

the activation request instruction unit is further configured to give an instruction for the first reset request to the first rewrite target ECU and an instruction for the second reset request to the second rewrite target ECU after giving the instruction for the request for switching to the new bank.

11. The vehicle master device according to claim 1 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a software reset request for resetting software of each of the plurality of rewrite target ECUs and a power reset request for resetting power for each of the plurality of rewrite target ECUs, and

the activation request instruction unit is further configured to:

give the instruction for the software reset request, as the reset request, to reset software of the first rewrite target ECU; and thereafter

give the instruction for the power reset request, as the reset request, to reset power for the second rewrite target ECU.

12. A vehicle electronic control system comprising:

a vehicle master device that is configured to communicate with a rewrite target electronic control unit (ECU), acquire update data from outside, distribute the acquired update data to the rewrite target ECU, and instruct the rewrite target ECU to rewrite a program; and

a plurality of EUCs that each includes a memory storing a control program, a processor controlling an operation by performing various processes by executing the control program, a data transfer unit controlling data communication, and a non-volatile memory having a first data storage bank and a second data storage bank and is configured to receive the update data from the vehicle master device and to write the received update data into the second data storage bank to rewrite a program on the second data storage bank, wherein

the vehicle master device includes:

at least one processor; and

at least one memory storing computer program code, wherein

the computer program code is configured to, when executed by the at least one processor, cause the at least one processor to serve as:

a rewrite target specifying unit that is configured to specify a plurality of rewrite target ECUs;

a rewrite completion determination unit that is configured to determine whether a program rewrite is completed for all the plurality of rewrite target ECUs specified by the rewrite target specifying unit;

an activation executable determination unit that is configured to determine whether activation is executable when the rewrite completion determination unit determines that the program rewrite is completed for all the plurality of rewrite target ECUs; and

an activation request instruction unit that is configured to instruct all the plurality of rewrite target ECUs at the same time to perform the activation when the activation executable determination unit determines that the activation is executable, wherein

the activation request instruction unit is further configured to instruct all the plurality of rewrite target ECUs at the same time to perform activation by giving an instruction for a reset request after giving an instruction for a request for switching to a new bank.

13. The vehicle electronic control system according to claim 12 , wherein

each of the plurality of the rewrite target ECUs includes a non-volatile memory having a first storage bank and a second storage bank,

each of the plurality of the rewrite target ECUs is configured to:

receive the update data from the vehicle master device; and

rewrite a program on the second data storage bank with the received update data by writing the update data into the second data storage bank,

each of the plurality of the rewrite target ECUs includes active bank information indicating which is an active bank between the first data storage bank and the second data storage bank, wherein the active bank of a respective rewrite target ECU stores a program that is to be executed upon start of the respective rewrite target ECU, and

the activation request instruction unit is further configured to give an instruction for a request, as the request for switching to the new bank, to each of the plurality of the rewrite target ECUs to update the active bank information to indicate that the second data storage bank is the active bank.

14. The vehicle electronic control system according to claim 12 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a first reset request for resetting software of each of the plurality of rewrite target ECUs and a second reset request for resetting power for each of the plurality of rewrite target ECUs, and

the activation request instruction unit is further configured to give an instruction for the first reset request to the first rewrite target ECU and an instruction for the second reset request to the second rewrite target ECU after giving the instruction for the request for switching to the new bank.

15. The vehicle electronic control system according to claim 12 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a software reset request for resetting software of each of the plurality of rewrite target ECUs and a power reset request for resetting power for each of the plurality of rewrite target ECUs, and

the activation request instruction unit is further configured to:

give the instruction for the software reset request, as the reset request, to reset software of the first rewrite target ECU; and thereafter

give the instruction for the power reset request, as the reset request, to reset power for the second rewrite target ECU.

16. An activation request instruction method for a vehicle master device that is configured to communicate with a rewrite target electronic control unit (ECU), acquire update data from outside, distribute the acquired update data to the rewrite target ECU, and instruct the rewrite target ECU to rewrite a program, the rewrite target ECU including a memory that stores a control program, a processor that controls an operation by performing various processes by executing the control program, and a data transfer unit that controls data communication, the method comprising the steps of:

specifying a plurality of rewrite target ECUs;

determining whether a program rewrite is completed for all the plurality of rewrite target ECUs;

determining whether activation is executable when the program rewrite is determined to be completed for all the plurality of rewrite target ECUs; and

instructing all the plurality of rewrite target ECUs at the same time to perform the activation when the activation is determined to be executable, wherein

the method further comprises instructing all the plurality of rewrite target ECUs at the same time to perform activation by giving an instruction for a reset request after giving an instruction for a request for switching to a new bank.

17. The activation request instruction method according to claim 16 , wherein

each of the plurality of the rewrite target ECUs includes a non-volatile memory having a first storage bank and a second storage bank,

each of the plurality of the rewrite target ECUs is configured to:

receive the update data from the vehicle master device; and

rewrite a program on the second data storage bank with the received update data by writing the update data into the second data storage bank,

each of the plurality of the rewrite target ECUs includes active bank information indicating which is an active bank between the first data storage bank and the second data storage bank, wherein the active bank of a respective rewrite target ECU stores a program that is to be executed upon start of the respective rewrite target ECU, and

the method further comprises giving an instruction for a request, as the request for switching to the new bank, to each of the plurality of the rewrite target ECUs to update the active bank information to indicate that the second data storage bank is the active bank.

18. The activation request instruction method according to claim 16 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a first reset request for resetting software of each of the plurality of rewrite target ECUs and a second reset request for resetting power for each of the plurality of rewrite target ECUs, and

the method further comprises giving an instruction for the first reset request to the first rewrite target ECU and an instruction for the second reset request to the second rewrite target ECU after giving the instruction for the request for switching to the new bank.

19. The activation request instruction method according to claim 16 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a software reset request for resetting software of each of the plurality of rewrite target ECUs and a power reset request for resetting power for each of the plurality of rewrite target ECUs, and

the method further comprises:

giving the instruction for the software reset request, as the reset request, to reset software of the first rewrite target ECU; and thereafter

giving the instruction for the power reset request, as the reset request, to reset power for the second rewrite target ECU.

20. A non-transitory, computer readable storage medium storing a computer program for a vehicle master device that includes a vehicle master processor and is configured to communicate with a rewrite target electronic control unit (ECU), acquire update data from outside, distribute the acquired update data to the rewrite target ECU, and instruct the rewrite target ECU to rewrite a program, the rewrite target ECU including a memory storing a control program, an ECU processor that control an operation by performing various processes by executing the control program, and a data transfer unit that controls data communication, the computer program comprising instructions configured to, when executed, cause the vehicle master processor to:

specify a plurality of rewrite target ECUs;

determine whether a program rewrite is completed for all the plurality of rewrite target ECUs;

determine whether activation is executable when the program rewrite is determined to be completed for all the plurality of rewrite target ECUs; and

instruct all the plurality of rewrite target ECUs at the same time to perform the activation when the activation is determined to be executable, wherein

the instructions are further configured to cause the vehicle master processor to instruct all the plurality of rewrite target ECUs at the same time to perform activation by giving an instruction for a reset request after giving an instruction for a request for switching to a new bank.

21. The storage medium according to claim 20 , wherein

each of the plurality of the rewrite target ECUs includes a non-volatile memory having a first storage bank and a second storage bank,

each of the plurality of the rewrite target ECUs is configured to:

receive the update data from the vehicle master device; and

rewrite a program on the second data storage bank with the received update data by writing the update data into the second data storage bank,

each of the plurality of the rewrite target ECUs includes active bank information indicating which is an active bank between the first data storage bank and the second data storage bank, wherein the active bank of a respective rewrite target ECU stores a program that is to be executed upon start of the respective rewrite target ECU, and

the instructions further cause the vehicle master processor to give an instruction for a request, as the request for switching to the new bank, to each of the plurality of the rewrite target ECUs to update the active bank information to indicate that the second data storage bank is the active bank.

22. The storage medium according to claim 20 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a first reset request for resetting software of each of the plurality of rewrite target ECUs and a second reset request for resetting power for each of the plurality of rewrite target ECUs, and

the instructions are further configured to cause the vehicle master processor to give an instruction for the first reset request to the first rewrite target ECU and an instruction for the second reset request to the second rewrite target ECU after giving the instruction for the request for switching to the new bank.

23. The storage medium according to claim 20 , wherein

the plurality of the rewrite target ECUs includes a first rewrite target ECU and a second rewrite target ECU,

the reset request includes a software reset request for resetting software of each of the plurality of rewrite target ECUs and a power reset request for resetting power for each of the plurality of rewrite target ECUs, and

the instructions further cause the vehicle master processor to:

give the instruction for the software reset request, as the reset request, to reset software of the first rewrite target ECU; and thereafter

give the instruction for the power reset request, as the reset request, to reset power for the second rewrite target ECU.

24. A vehicle master device that is configured to communicate with a rewrite target electronic control unit (ECU), acquire update data from outside, distribute the acquired update data to the rewrite target ECU, and instruct the rewrite target ECU to rewrite a program, the rewrite target ECU including a memory that stores a control program, a processor that controls an operation by performing various processes by executing the control program, and a data transfer unit that controls data communication, the vehicle master device comprising:

at least one processor; and

at least one memory storing computer program code, wherein

the computer program code is configured to, when executed by the at least one processor, cause the at least one processor to serve as:

a rewrite target specifying unit that is configured to specify a plurality of rewrite target ECUs;

a rewrite completion determination unit that is configured to determine whether a program rewrite is completed for all the plurality of rewrite target ECUs specified by the rewrite target specifying unit;

an activation executable determination unit that is configured to determine whether activation is executable when the rewrite completion determination unit determines that the program rewrite is completed for all the plurality of rewrite target ECUs; and

an activation request instruction unit that is configured to instruct all the plurality of rewrite target ECUs at the same time to perform the activation when the activation executable determination unit determines that activation is executable;

and wherein the activation request instruction unit is further configured to, when specification data acquired from an outside of the vehicle indicates an internal reset as an activation method for the plurality of rewrite target ECUs, monitor the internal reset without giving a reset request for resetting software after giving an instruction for a request for switching to a new bank.

25. A method for a vehicle master device that is configured to communicate with a rewrite target electronic control unit (ECU), acquire update data from outside, distribute the acquired update data to the rewrite target ECU, and instruct the rewrite target ECU to rewrite a program, the rewrite target ECU including a memory that stores a control program, a processor that controls an operation by performing various processes by executing the control program, and a data transfer unit that controls data communication, the method comprising:

specifying a plurality of rewrite target ECUs;

determining whether a program rewrite is completed for all the plurality of specified rewrite target ECUs;

determining whether activation is executable upon determining that the program rewrite is completed for all the plurality of rewrite target ECUs; and

instructing all the plurality of rewrite target ECUs at the same time to perform the activation upon determining that activation is executable, wherein

the method further comprises, when specification data acquired from an outside of the vehicle indicates an internal reset as an activation method for the plurality of rewrite target ECUs, monitoring the internal reset without giving a reset request for resetting software after giving an instruction for a request for switching to a new bank.