Patent Application
20200406842
The present invention relates to vehicle control apparatuses in which a main electronic control unit mediates data communication between an external device and a sub electronic control unit, and relates to methods for rewriting programs therefor.
Patent Document 1 discloses a program rewriting method in which a program rewriting device communicates, via a gateway electronic control unit (gateway ECU), with another electronic control unit to perform a program rewrite of said another electronic control unit.
Patent Document 1: JP 2016-188022 A
When an external device communicates, via an electronic control unit having a gateway means, with another electronic control unit, the communication is performed via the communication network between the external device and the gateway electronic control unit, and via the communication network between the gateway electronic control unit and said another electronic control unit. This may cause timeout due to the difference in communication method between the two communication networks.
The present invention has been made in view of such conventional circumstances, and an object of the present invention is to provide a vehicle control apparatus, and a method for rewriting a program therefor, capable of preventing timeout in the communication mediated by a gateway electronic control unit.
According to one aspect of the present invention, a main electronic control unit that mediates data communication between an external device and a sub electronic control unit outputs a signal for preventing timeout to at least one of the external device and the sub electronic control unit.
According to the present invention, it is possible for the main electronic control unit to prevent timeout in the communication mediated by the main electronic control unit.
Hereinbelow, an embodiment of a vehicle control apparatus and a method for rewriting a program therefor, according to the present invention, will be described with reference to the accompanying drawings.
In
For example, main electronic control unit 200 is provided with a CPU 201, a storage medium 202, such as a ROM and a RAM, and an interface unit 203 for communication with an external device.
Sub electronic control units 300A, 300B, and 300C are provided with CPUs 301a, 301b, and 301c, and storage media 302a, 302b, and 302c, such as ROMs and RAMs, respectively.
Examples of sub electronic control units 300A, 300B, and 300C include: an engine control module (ECM) that controls fuel supply and ignition in an engine (internal combustion engine) mounted on a vehicle 500; a body control module (BCM) that controls various electric components of vehicle 500, such as an auto lighting system and a door lock system; an ABS control unit (ABS-C/U) that electronically controls the braking force of the brake system of vehicle 500; and an AV control unit (AV-C/U) including an AM/FM electronic tuner, a CD/DVD drive, etc.
Herein, each sub electronic control unit 300A, 300B, 300C does not have a function or a device that directly communicates with an external device of vehicle control apparatus 100 in an in-vehicle state.
Network 400 sends and receives various types of information based on multiple communication protocols of a controller area network (CAN), a local interconnect network (LIN), etc.
In vehicle control apparatus 100 having the foregoing configuration, a rewrite operation of the program data of sub electronic control unit 300A, 300B, 300C, using a rewriting tool 600 (external tool), which is an external device, is performed by a gateway method in which main electronic control unit 200 provided with interface unit 203 for communication with the external device is used as a gateway, to provide communication between rewriting tool 600 and rewrite-target sub electronic control unit 300A, 300B, 300C.
Rewriting tool 600 includes a personal computer in which software for rewriting the program data of sub electronic control unit 300A, 300B, 300C is incorporated. Rewriting tool 600 is provided with a storage medium 601, such as a hard disk that stores program data for rewrite (application program, etc.), and a communication circuit 602 for providing communication with main electronic control unit 200.
Rewriting tool 600 achieves mutual communication (wired communication) with main electronic control unit 200 by connecting a harness to a diagnostic device connector 800 (OBD connector), or the like, provided in vehicle control apparatus 100 during the rewrite operation, so as to transfer the program data stored in storage medium 601 to rewrite-target sub electronic control unit 300A, 300B, 300C, via main electronic control unit 200.
An operator who operates rewriting tool 600 can interactively issue an instruction to rewriting tool 600 using a keyboard and a liquid crystal screen provided in the personal computer.
As shown in
That is, in one aspect shown in
Herein, rewriting tool 600 is able to access virtual memory areas 202a, 202b, and 202c, similarly to calibration area 202e and program area 202d. Virtual memory areas 202a, 202b, and 202c temporarily store program data for the rewrite (rewrite data) of rewrite-target sub electronic control units 300A, 300B, and 300C, respectively.
Main electronic control unit 200 transfers the program data stored in virtual memory areas 202a, 202b, and 202c, to corresponding, rewrite-target sub electronic control units 300A, 300B, and 300C, and mediates data communication between rewriting tool 600 and sub electronic control units 300A, 300B, 300C.
In this way, main electronic control unit 200 has a function serving as a gateway means that mediates data communication between rewriting tool 600 and rewrite-target sub electronic control unit 300A, 300B, 300C.
In a system shown in
Herein, the timeout is to automatically stop a communication process when communication does not start or is not completed within a certain period of time.
In
Then, sub electronic control unit 300A, 300B, 300C, which has received the first rewrite request, performs a rewriting process based on the first rewrite request, and then, sends a first reply to main electronic control unit 200. Main electronic control unit 200 has the first reply subjected to hardware processing and software processing, and then transfers the first reply to rewriting tool 600.
Upon receiving the first reply, rewriting tool 600 determines that a condition for sending a second rewrite request is satisfied, outputs the second rewrite request to main electronic control unit 200, and waits for sub electronic control unit 300A, 300B, 300C to send back a second reply via main electronic control unit 200.
In this way, rewriting tool 600 sends program data for the rewrite to sub electronic control unit 300A, 300B, 300C, by outputting a rewrite request, and then when receiving a reply to the rewrite request, outputting a next rewrite request, and repeating this processing thereafter.
Herein, the communication between rewriting tool 600 and main electronic control unit 200 is performed at high speed, whereas the communication between main electronic control unit 200 and sub electronic control unit 300A, 300B, 300C is performed at low or medium speed, so that communication time takes longer. Furthermore, since main electronic control unit 200 is used as a gateway, it takes time to process the rewrite request and reply in main electronic control unit 200.
For these reasons, there is a possibility that a specified period of time elapses after output of a rewrite request but before receipt of a reply to the rewrite request in rewriting tool 600, so that timeout occurs, that is, rewriting tool 600 stops communicating (i.e., stops sending rewrite data).
Thus, main electronic control unit 200 has a function (communication maintaining means) that outputs a signal for preventing timeout when functioning as a gateway, in other words, a signal for preventing communication interruption.
In the system of
Main electronic control unit 200 executes a process of outputting the BUSY signal to rewriting tool 600 when a predetermined certain period of time has elapsed after rewriting tool 600 sends a rewrite request. Furthermore, main electronic control unit 200 executes a process of absorbing a new rewrite request from rewriting tool 600 during a period from the output of the BUSY signal to rewriting tool 600 until transfer of a reply to rewriting tool 600.
It should be noted that the BUSY signal is a signal indicating that the process based on the previous rewrite request has not been completed and a new request is not accepted.
Thus, outputting the BUSY signal from main electronic control unit 200 to rewriting tool 600 causes rewriting tool 600 to recognize that the process based on the request is in progress, and thus, it is possible to prevent timeout.
That is, even when the communication speed between main electronic control unit 200 and sub electronic control unit 300A, 300B, 300C is less than that between rewriting tool 600 and main electronic control unit 200, and even if it takes time for main electronic control unit 200 to perform the communication mediation process, it is possible to prevent timeout in rewriting tool 600, and it is possible to have rewriting tool 600 continue the rewriting process of the program data of sub electronic control unit 300A, 300B, 300C.
Contrary to the systems of
That is, when the communication between main electronic control unit 200 and sub electronic control unit 300A, 300B, 300C is high speed communication, and the communication between rewriting tool 600 and main electronic control unit 200 is low or medium speed communication, it takes a longer time to communicate between rewriting tool 600 and main electronic control unit 200. Furthermore, it takes time for main electronic control unit 200 to process a rewrite request and a reply (mediation process). This may increase a period from output of a reply from sub electronic control unit 300A, 300B, 300C until receipt of a next rewrite request. There is a possibility that sub electronic control unit 300A, 300B, 300C will stop communication due to the timeout.
Thus, main electronic control unit 200 outputs a communication maintaining signal, serving as a signal for preventing timeout, at regular intervals to rewrite-target sub electronic control unit 300A, 300B, 300C, during a period from when sub electronic control unit 300A, 300B, 300C outputs a reply until a next rewrite request is transferred to sub electronic control unit 300A, 300B, 300C.
Herein, the communication maintaining signal is a signal indicating that transmission of a new request is delayed.
Thus, sub electronic control unit 300A, 300B, 300C is able to maintain communication and prevent timeout during a period from output of a reply until receipt of a next rewrite request.
Although
In
Here, main electronic control unit 200 identifies the communication protocol of a connected device in a higher layer (rewriting tool 600) and connected devices in a lower layer (sub electronic control units 300A, 300B, 300C), and performs a timeout preventing operation (signal outputting process to prevent timeout) depending on combination of the upper layer device and the lower layer devices.
For example, in a case in which the communication between main electronic control unit 200 and rewriting tool 600 is high speed communication, and a rewrite-target electronic control unit is sub electronic control unit 300C, which communicates at a low speed, or sub electronic control unit 300B, which communicates at a medium speed, main electronic control unit 200 outputs a BUSY signal, serving as a signal for preventing timeout, to rewriting tool 600 when a certain period of time has elapsed after main electronic control unit 200 receives a rewrite request, as shown in
This makes it possible to prevent timeout in rewriting tool 600, even if it takes time to receive a reply after the output of the rewrite request.
On the other hand, in a case in which the communication between main electronic control unit 200 and rewriting tool 600 is low or medium speed communication, and an electronic control unit, that is, a target of a program data rewrite, is sub electronic control unit 300A, which communicates at high speed, main electronic control unit 200 outputs a communication maintaining signal, serving as a signal for preventing timeout, to sub electronic control unit 300A during a period from receipt of a reply from sub electronic control unit 300A until transfer of a next rewrite request to sub electronic control unit 300A, as shown in
This makes it possible to prevent the timeout in sub electronic control unit 300A, even if it takes time to receive the next rewrite request after output of the reply.
It should be noted that the communication between rewriting tool 600 and main electronic control unit 200 is not limited to wired communication, and main electronic control unit 200 may achieve similar advantageous effects by performing an outputting process of a signal for preventing timeout through wireless communication.
Security electronic control unit 700 has a function of performing wireless communication externally, and a function of preventing unauthorized data transmission to sub electronic control units 300A, 300B, and 300C, via network 400.
In the program rewrite of sub electronic control unit 300A, 300B, 300C, wireless communication is performed between rewriting tool 600, which has a wireless communication function, and security electronic control unit 700. Main electronic control unit 200 receives a signal from rewriting tool 600 via security electronic control unit 700, and outputs a signal to rewriting tool 600 via security electronic control unit 700.
Thus, even when security electronic control unit 700 and rewriting tool 600 communicate wirelessly, it is possible for main electronic control unit 200 to identify the communication protocol of a connected device in a higher layer (rewriting tool 600) and connected devices in a lower layer (sub electronic control units 300A, 300B, 300C), and to perform a timeout preventing operation (signal outputting process to prevent timeout) depending on combination of the upper layer device and the lower layer devices.
In the system of
In such a system, sub electronic control unit 300A, 300B, 300C performs a process of outputting a reply to rewriting tool 600 when receiving a rewrite request from rewriting tool 600 via main electronic control unit 200.
Then, sub electronic control unit 300A, 300B, 300C performs the rewriting process before receiving a next rewrite request, and then, when outputting a reply to the next rewrite request to rewriting tool 600, sub electronic control unit 300A, 300B, 300C sends a signal indicating the result of the rewriting process performed based on the rewrite request, to rewriting tool 600 together with the reply.
In this case, since sub electronic control unit 300A, 300B, 300C outputs, to rewriting tool 600, a reply to the rewrite request without waiting for the completion of the rewriting process performed based on the rewrite request, it is possible to prevent a specified period of time from elapsing after the output of the rewrite request before receipt of a reply in rewriting tool 600, and thus, it is possible to prevent timeout.
Furthermore, since sub electronic control unit 300A, 300B, 300C performs the rewriting process based on the rewrite request in a period from receipt of a rewrite request until receipt of a next rewrite request, it is possible to ensure, as a time for performing the rewriting process, a period of time substantially equal to the cycle of inputs of rewrite requests, which is longer than the period from receipt of a rewrite request until output of a reply to the rewrite request.
Thus, in the foregoing configuration, it is possible to continuously perform the rewriting process by rewriting tool 600, without outputting a signal for preventing timeout in main electronic control unit 200.
In the system configuration of
Then, as the rewriting process, rewriting tool 600 first loads the rewrite data of sub electronic control unit 300A, 300B, 300C into storage medium 202 (RAM) of main electronic control unit 200.
That is, a process in which rewriting tool 600 outputs a rewrite request to main electronic control unit 200, and then main electronic control unit 200 loads the rewrite request into its own storage medium 202 (RAM) and sends back a reply (loading result) to rewriting tool 600, is repeated. Thereby, the rewrite data of sub electronic control unit 300A, 300B, 300C is loaded into storage medium 202 (RAM) of main electronic control unit 200.
After the entire rewrite data is loaded into the storage medium 202 (RAM) of main electronic control unit 200, main electronic control unit 200 starts communicating with sub electronic control unit 300A, 300B, 300C in response to a rewrite trigger, to perform a rewrite of the program data of sub electronic control unit 300A, 300B, 300C.
For example, the rewrite trigger may be configured to be given from rewriting tool 600 to main electronic control unit 200. Alternatively, when main electronic control unit 200 has a power maintaining function (self-shutoff function), a signal of the power switch of main electronic control unit 200 (switching from ON to OFF) may be used as a rewrite trigger signal.
Main electronic control unit 200, which has received the rewrite trigger, outputs a rewrite request to rewrite-target sub electronic control unit 300A, 300B, 300C, and then when receiving a reply from sub electronic control unit 300A, 300B, 300C, outputs a next rewrite request. This operation is repeated to perform the rewrite of the program data of rewrite-target sub electronic control unit 300A, 300B, 300C.
Furthermore, in order to prevent occurrence of timeout in rewriting tool 600, main electronic control unit 200 outputs a BUSY signal to rewriting tool 600 at regular intervals while communicating with rewrite-target sub electronic control unit 300A, 300B, 300C, to have the rewriting process performed.
On the other hand, rewriting tool 600 is in a standby state waiting for completion of the rewrite (i.e., in a state in which the communication is interrupted) while main electronic control unit 200 and sub electronic control unit 300A, 300B, 300C communicate to perform the rewrite. Then, when rewriting tool 600 receives a rewrite completion signal output from rewrite-target sub electronic control unit 300A, 300B, 300C, via main electronic control unit 200, the rewriting process is terminated.
Rewriting tool 600 may be turned off without waiting for the completion of the program data rewrite of sub electronic control unit 300A, 300B, 300C. In other words, the communication between rewriting tool 600 and main electronic control unit 200 may be stopped, and rewriting tool 600 may receive the result of the rewriting process from main electronic control unit 200, when rewriting tool 600 is activated next time.
Furthermore, if the program data rewrite of sub electronic control unit 300A, 300B, 300C fails, main electronic control unit 200 may output a rewrite request again.
The technical concepts described in the above embodiment may be used in combination as necessary, as long as no conflict arises.
Although the present invention is described in detail with reference to the preferred embodiment, it is apparent that one skilled in the art may make various modifications based on the fundamental technical concepts and teachings of the present invention.
For example, when main electronic control unit 200 has a function of wirelessly communicating externally, main electronic control unit 200 may wirelessly communicate directly with rewriting tool 600, to mediate the data communication between rewriting tool 600 and sub electronic control units 300A, 300B, and 300C.
Furthermore, security electronic control unit 700 that wirelessly communicates with rewriting tool 600 may communicate directly with sub electronic control units 300A, 300B, and 300C via network 400, to mediate the data communication between rewriting tool 600 and sub electronic control units 300A, 300B, and 300C.
Hereinbelow, the technical concept understood from the foregoing embodiment will be described.
According to an aspect, a vehicle control apparatus comprises:
a main electronic control unit; and
a sub electronic control unit capable of mutual communication with the main electronic control unit,
wherein the main electronic control unit comprises:
a gateway means that mediates data communication between an external device and the sub electronic control unit;
a communication method identifying means that identifies a communication method used in communication with the external device, and a communication method used in communication with the sub electronic control unit; and
a communication maintaining means that selects one of the external device and the sub electronic control unit based on the identified communication method identified by the communication method identifying means, and outputs, to the selected one, a signal for preventing timeout in data communication between the external device and the sub electronic control unit.
Furthermore, according to an aspect, the vehicle control apparatus comprises:
a main electronic control unit; and
a sub electronic control unit capable of mutual communication with the main electronic control unit,
wherein the main electronic control unit comprises:
a gateway means that mediates data communication between an external device and the sub electronic control unit; and
a communication maintaining means that outputs a BUSY signal to the external device at regular intervals during a period from receipt of a request signal output from the external device until receipt of a reply signal output from the sub electronic control unit in response to the request signal, when a communication speed between the external device and the main electronic control unit is greater than a communication speed between the main electronic control unit and the sub electronic control unit.
Furthermore, according to an aspect, the vehicle control apparatus comprises:
a main electronic control unit; and
a sub electronic control unit capable of mutual communication with the main electronic control unit,
wherein the main electronic control unit comprises:
a gateway means that mediates data communication between an external device and the sub electronic control unit; and
a communication maintaining means that outputs a communication maintaining signal to the sub electronic control unit at regular intervals during a period from receipt of a reply signal output from the sub electronic control unit until receipt of a request signal output from the external device, when a communication speed between the external device and the main electronic control unit is less than a communication speed between the main electronic control unit and the sub electronic control unit.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2017-105866 | May 2017 | JP | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/JP2018/011164 | 3/20/2018 | WO | 00 |
