Abstract:
In a vehicle master device, a first device includes an update data acquisition unit that is configured to acquire update data, an update data distribution unit that is configured to distribute the update data acquired by the update data acquisition unit to a rewrite target ECU, a process execution request unit that is configured to request the second device to execute at least a part of a process related to verification of the update data before the update data distribution unit distributes the update data, a processing result acquisition unit that is configured to acquire a processing result from the second device, and a verification unit that is configured to verify the update data using the processing result acquired by the processing result acquisition unit.
Abstract:
A vehicle master device is configured to acquire update data from outside and distribute the acquired update data to a rewrite target electronic control unit (ECU). The vehicle master device includes a distribution frequency specifying unit that is configured to specify a distribution frequency of the update data to the rewrite target ECU based on a correspondence relationship between a predetermined vehicle power supply state and transmission restriction information related to distribution of the update data and a vehicle power supply state during updating, and a distribution control unit that is configured to control distribution of the update data according to the distribution frequency specified by the distribution frequency specifying unit.
Abstract:
A vehicle master device includes a rewrite specification data acquisition unit that is configured to acquire rewrite specification data from outside, a rewrite specification data analysis unit that is configured to analyze the rewrite specification data acquired by the rewrite specification data acquisition unit, a group generation unit that is configured to divide the plurality of rewrite target ECUs to generate a plurality of groups based on the rewrite specification data analyzed by the rewrite specification data analysis unit, and an instruction execution unit that is configured to instruct the plurality of rewrite target ECUs for each group of the plurality of groups generated by the group generation unit to perform at least one of installation, rollback, and activation.
Abstract:
An electronic control unit includes an active bank information update unit that is configured to update active bank information indicative of which bank is an active bank between the first data storage bank and the second data storage bank when a program rewrite on the second data storage bank is completed and the vehicle master device gives an instruction for an activation request, an execution condition determination unit that is configured to determine whether an activation execution condition is satisfied, and an execution control unit that is configured to activate the second data storage bank as the active bank based on the active bank information after a restart when the execution condition determination unit determines that the activation execution condition is satisfied.
Abstract:
A vehicle master device includes a decryption key storage unit that cannot be read from an outside and that stores a decryption key for generation of a security accesses key used to perform device authentication of a rewrite target electronic control unit. The vehicle master device acquires rewrite specification data from an outside, analyzes the rewrite specification data acquired, extracts a key derivation value corresponding to the rewrite target electronic control unit from an analysis result of the rewrite specification data, and by using the decryption key corresponding to the rewrite target electronic control unit stored in the decryption key storage unit, decrypts the key derivation value extracted, and generate a security accesses key.
Abstract:
A vehicular system includes a master ECU, a first slave ECU, and a second slave ECU. The second slave ECU transmits a storing request to the master ECU on detection of a malfunction. The master ECU transmits a storing instruction for causing diagnostic information to be stored, on reception of the storing request. The first slave ECU generates diagnostic information on the first slave ECU, on reception of the storing instruction from the master ECU. The first slave ECU further stores the generated diagnostic information in a retention storage medium. The retention storage medium is configured to retain validity determination information in a condition where the first slave ECU is not supplied with electric power source.
Abstract:
An electronic control unit diagnoses the electronic control unit via wired connection or wireless from an outside of a vehicle and rewrites the electronic control unit via the wire or the wireless from the outside of the vehicle, based on a program acquired from the outside of the vehicle via the wire or the wireless.
Abstract:
In a vehicle master device, a first device includes an update data acquisition unit that is configured to acquire update data, an update data distribution unit that is configured to distribute the update data acquired by the update data acquisition unit to a rewrite target ECU, a process execution request unit that is configured to request the second device to execute at least a part of a process related to verification of the update data before the update data distribution unit distributes the update data, a processing result acquisition unit that is configured to acquire a processing result from the second device, and a verification unit that is configured to verify the update data using the processing result acquired by the processing result acquisition unit.
Abstract:
An electronic control unit includes an installation execution unit that operates at least one of an application program or parameter data stored in a first data storage bank serving as an active bank and rewrites a second data storage bank serving as an inactive bank by writing, to the second data storage bank, update data acquired from an external device, and an activation execution unit that switches the active bank from the first data storage bank to the second data storage bank. The installation execution unit rewrites the second data storage bank during a vehicle being travelable or parked. The activation execution unit switches the active bank from the first data storage bank to the second data storage bank during the vehicle being parked.
Abstract:
An electronic control unit includes a difference data acquisition unit that is configured to acquire difference data that is data to be written into a data storage area of the electronic control unit, the difference data being a difference between old data and new data, a consistency determination unit that is configured to determine whether the difference data is consistent with the data storage area or storage data stored in the data storage area based on first determination information related to the storage data and second determination information acquired in association with the difference data, an update data restoration unit that is configured to restore update data as the new data using the difference data and the storage data when the consistency determination unit determines that the difference data is consistent, and a data writing unit that is configured to write the update data restored by the update data restoration unit into the data storage area.