JP2010218070A - Management device - Google Patents

Abstract

A management apparatus for efficiently updating a program of a control apparatus included in a system is provided.
In a management device that manages a system that includes one or more control devices each executing a program, information on the program update capability of the one control device is obtained from at least one control device included in the system. As a program for obtaining the update information including and updating the program of the one control device, the difference between the existing program already possessed by the one control device and the update program after the update is performed Prepare a difference program. Then, based on the acquired update information, the prepared difference program is distributed to the one control device in a format corresponding to the program update capability of the one control device.
[Selection] Figure 1

Description

  The present invention relates to a management device that manages a system including one or more control devices that execute a program.

  In-vehicle devices equipped with car navigation systems have been improving in performance in recent years. In-vehicle devices have a plurality of functions such as playback of media such as DVDs and CDs, reception and playback of digital TV radio waves, in addition to a car navigation system. Along with higher performance of in-vehicle devices, there are increasing demands for higher CPU processing speed and increased memory capacity for storing software programs.

  High performance of the in-vehicle device means that the capacity of the software program is increased, that is, the software program is complicated. As software programs become more complex, the number of product evaluation man-hours for confirming hidden defects and software program quality increases. However, no matter how rigorous testing is performed, defects may occur after being marketed as a product. As a method for correcting such a problem that was not predicted before sales, upgrading a software program, etc. without bothering the user, for example, a manufacturer (for example, a vehicle equipped with an in-vehicle device) There is a method of downloading from the manufacturer's center server. Such a method is a program updating method that is adopted not only by the in-vehicle device but also by a mobile phone or the like. In this case, for example, the in-vehicle device does not bother the user by downloading the update program periodically or triggered by notification of the update program from the center server (for example, Patent Documents 1 to 3). See).

  In addition, when updating from an old program to a new program, a technique for using difference data between the old and new programs is disclosed in order to efficiently perform the update (see, for example, Patent Documents 4 and 5).

JP 2006-215958 A JP 2006-31356 A JP 2007-92621 A JP 2003-256248 A JP 2003-337723 A

  Conventionally, when a program in a control device included in a system is to be updated, a management device that manages the system acquires a differential program necessary for the update from an externally provided server, and then performs the control. An update program necessary for updating is generated by synthesizing with an existing program included in the apparatus, and distributed to the control apparatus. In this case, since the update program distributed from the management apparatus is always large, the time required for updating the control apparatus may be increased.

  SUMMARY An advantage of some aspects of the invention is that it provides a management device that efficiently updates a program of a control device included in a system.

  In order to solve the above-described problems, in the present invention, when updating a program of a control device included in the system in a management device that manages the system, the present invention is based on update information including information on the program update capability of the control device. Thus, the format of the update program distributed from the management device to the control device is adjusted to an appropriate format. By doing in this way, since the update program according to a control apparatus is prepared, the program update of a control apparatus will be performed efficiently. Details of the present invention will be described below.

  The present invention is a management device for managing a system including one or more control devices each executing a program, and the program update capability of the one control device from at least one control device included in the system An update information acquisition unit that acquires update information including information about the update program and an existing program that the one control device already has been updated as a program for updating the program that the one control device has A difference program preparation unit that prepares a difference program that is a difference from a later update program, and the difference program prepared by the difference program preparation unit in a format corresponding to the program update capability of the one control device. A delivery unit that delivers to one control device.

  In the management device, the update information acquisition unit acquires update information related to the program update capability in the control device from the control device having the program to be updated. This update information includes, for example, information such as the ability to synthesize an existing program and a difference program to generate a new update program, and the update processing speed. In some cases, the communication speed of data between the control device and the management device, version information of the program to be updated, and the like that are not directly related to the update capability may be included. In particular, information regarding whether or not the control device itself can generate a new update program using a difference program is a factor that greatly affects the program update in the control device.

  When the differential program for update is prepared by the differential program preparation unit, the distribution unit distributes the differential program. At this time, the difference program is not necessarily distributed to the control device as it is, and may be distributed in a format corresponding to the update capability of the control device based on the update information of the control device, for example. As a result, the updated control device can implement program update in accordance with its own update capability, and the program update of each control device can be efficiently performed in the entire system.

  Here, in the management device, based on the update information, the one control device determines whether or not the update program can be formed by combining the difference program with the existing program. When the determination unit is further provided, the distribution unit distributes the difference program to the one control device when the synthesis program determination unit determines that the update program can be formed. Good. As described above, when an update program can be generated by synthesizing an existing program and a difference program on the control device side, the distribution data amount can be kept small by distributing only the difference program by the distribution unit. The control device to which the difference program has been distributed generates an update program there, thereby updating its own existing program.

In the management device, based on the update information, the one control device determines whether or not the update program can be formed by combining the difference program with the existing program. In the case where the distribution unit is further provided, the distribution unit acquires the existing program included in the one control device when the synthesis possibility determination unit determines that the update program cannot be formed, and the acquired A synthesized program generated by synthesizing the existing program and the difference program may be distributed to the one control device. Thus, when it is not possible to generate an update program by synthesizing the existing program and the difference program on the control device side, the above-mentioned synthesis is performed on the management device side, and the synthesized program generated as a result of the synthesis is controlled by the control device. Deliver to. The control device that has received the post-synthesis program uses it to update its existing program. Thereby, the program update in the control apparatus which cannot respond | correspond directly to a difference program is also realizable.

  Further, in the system supported by the management device, when another control device is communicably connected to the management device via the one control device, the update information acquisition unit The update information on the control device is acquired, the difference program preparation unit prepares the difference program for the other control device, and the distribution unit receives the difference program in the other control device. If the control program cannot be combined with the existing program and the difference control program and the existing program can be combined in the control device, the difference program is distributed to the control device. You may make it do. Then, the one control device distributes the post-synthesis program generated by synthesizing the distributed difference program with the existing program of the other control device to the other control device.

  In this way, even if the other control device is not directly connected to the management device, if the program can be synthesized using the differential program in the directly connected control device, the one control device The device synthesizes programs on behalf of other control devices, and distributes them to other control devices, so that the total capacity of the programs distributed in the system can be suppressed, so an efficient program Contribute to updates.

  Further, in the management device described above, the difference program preparation unit prepares the difference program in a decrypted state, and the distribution unit stores the decrypted difference program in the program of the one control device. You may make it deliver to this one control apparatus in the format according to update capability. In other words, when the program is updated, decryption is performed in the state of the differential program prepared on the management device side, so that it is not necessary to impose the decryption processing on the control device, so that the entire system can be updated efficiently. It becomes.

  ADVANTAGE OF THE INVENTION According to this invention, the program of the control apparatus contained in a system can be updated efficiently.

It is a figure which shows the structural example of the vehicle equipment which mounts a car navigation system. It is a figure which shows the example of arrangement | positioning of the switch of a touchscreen display. It is a functional block diagram related to the program update of the slave unit in the master unit. It is a 1st functional block diagram in connection with the program update of this slave unit in a slave unit. It is a 2nd functional block diagram in connection with the program update of this slave unit in a slave unit. It is a 1st figure which shows the example of the sequence at the time of the program update process of the navigation unit which is a slave unit, and an amplifier unit. It is a 2nd figure which shows the example of the sequence at the time of the program update process of the navigation unit which is a slave unit, and an amplifier unit. It is a figure which shows the example of the update table which a master unit produces by the sequence shown to FIG. 4A and 4B.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. The configuration of the following embodiment is an exemplification, and the present invention is not limited to the configuration of the embodiment.

  FIG. 1 is a diagram illustrating a configuration example of an in-vehicle device A1 mounted on a vehicle and mounted with a car navigation system that performs navigation of the vehicle. The in-vehicle device A1 includes a master unit 1 as a management device and a plurality of slave units. As a slave unit, a navigation unit 2 that executes a navigation program, an amplifier unit 3 that controls output of a speaker 9 for supplying audio, a display unit 4 that controls a touch panel display 8, a DVD unit 5 that controls playback of a DVD, and the like. A digital TV unit 6 that controls to receive digital TV radio waves and output them to a display, a CD unit 7 that controls playback of a CD (Compact Disk), and the like. Each of these units includes a microprocessor, generally called an ECU (Electronic Control Unit). Each of these units has a program for realizing each function. Each unit shown in FIG. 1 is an example, and in-vehicle device A1 may actually include a unit (ECU) having other functions. Further, the in-vehicle device A1 may be realized as a device in which each unit is integrated, or may be configured as a system in which each unit is a separate device and each is connected by a cable. That is, each device included in the in-vehicle device A1 may be provided in the same vehicle and connected to each other and can communicate.

  The master unit 1 included in the in-vehicle device A1 has, as one of its functions, management of program update such as a control program included in each of the slave units 2 to 7 constituting the in-vehicle device A1. In each slave unit, it is necessary to update various programs used there from the viewpoint of function expansion and correction of defects, etc. Therefore, the master unit 1 has an update program necessary for this purpose arranged outside the system. It acquires from the center server 100 which is connected via radio | wireless communication. The configuration of the master unit 1 will be described below.

  The master unit 1 is a unit that manages the program update process of each slave unit. The master unit 1 includes a wireless communication interface 11, a RAM 12, a ROM 13, and a CPU 15. The wireless communication interface 11 is an interface that performs wireless communication with the center server 100 of the manufacturer of the in-vehicle device A1 or the manufacturer of the vehicle in which the in-vehicle device A1 is mounted. In addition, the master unit 1 includes an interface (not shown) that receives a remote operation signal from a remote controller or the like by a user.

  The master unit 1 downloads an update program for each slave unit from the center server 100 and stores it in the RAM 12. The master unit 1 is triggered when there is a program update request from each slave unit, periodically at a predetermined time, or when the power is turned on for the first time after downloading the update program from the center server 100. Distributes the update program to each slave unit. Details of distribution of the update program will be described later.

  In addition, the master unit 1 stores an operation screen (for example, a menu screen) and a message screen (for example, an error notification message) of the in-vehicle device A1 in the RAM 12. The master unit 1 performs a process of analyzing which switch among the switches displayed on the touch panel display 8 is pressed from the operation input position information to the touch panel display 8 and the information on the operation screen stored in the RAM 12. Do.

Further, when the process performed by the slave unit is switched to another process, the master unit 1 records the process before the switching in the RAM 12. For example, if the navigation unit 2 interrupts the route guidance to the destination while the DVD unit 5 is playing a DVD, the master unit 1 is that the DVD unit 5 is performing the DVD playback processing. Then, the playback position of the DVD at the time when the process is switched is recorded. By recording the process immediately before the current process, for example, when the route guidance process to the destination of the navigation unit 2 is completed, the master unit 1 performs the DVD playback process immediately before the route guidance process. It is possible to resume from the playback position of the DVD.

  Here, each slave unit included in the in-vehicle device A1 will be described. The navigation unit 2 is a slave unit that executes a navigation program serving as the center of the car navigation system. In addition to the microprocessor (ECU), the navigation unit 2 receives a GPS receiver that receives signals from GPS (Global Positioning System) satellites, and VICS (Vehicle Information and Communication System) information. And an interface for connecting to each of the receivers (both not shown). The navigation unit 2 holds a huge amount of road map information as a database in any of a hard disk, a DVD ROM disk, a CD ROM disk, etc. (different depending on the product, not shown), and reads it out as necessary.

  In addition, the navigation unit 2 determines the current position of the vehicle from the information from the GPS satellite and the VICS center and the road map information, the route guidance process such as the calculation of the route to the destination and the time required, the surrounding store information A search process or the like for searching is executed. The results of these processes are displayed on the touch panel display 8 or output from the speaker 9 to notify the user.

  The amplifier unit 3 performs processing for controlling output of sound from the speaker 9. The amplifier unit 3 receives an audio output instruction from a unit that executes a program including an audio output process, such as the master unit 1, the navigation unit 2, the DVD unit 5, the digital television unit 6, and the CD unit 7, and receives audio from the speaker 9. Output. In addition, the amplifier unit 3 receives a volume adjustment operation instruction (instruction input from a volume adjustment switch, a remote controller, or the like) from the user, and performs a process of adjusting the volume.

  The display unit 4 controls display of video and images on the touch panel display 8. The touch panel display 8 is a device that combines a display device such as a liquid crystal panel and a position input device such as a touch pad. The display unit 4 receives video and image display instructions from each unit that executes programs including video and image display processing such as the master unit 1, the navigation unit 2, the DVD unit 5, and the digital television unit 6, and the touch panel. Output to the display 8. The touch panel display 8 includes a so-called touch panel function that detects a change in voltage or a change in capacitance of the position input device and identifies a contact position (pressed position) by the user. Therefore, the display unit 4 performs a process of analyzing the operation input by the user from the input position of the user to the touch panel display 8 and the displayed image. The result of the analysis process is transmitted to the master unit 1, where necessary information processing is performed.

  The DVD unit 5 performs control such as DVD playback. The DVD unit 5 includes a DVD drive that accommodates a DVD in addition to a microprocessor (ECU). The DVD unit 5 reads and reproduces data recorded on the DVD set in the DVD drive. At this time, the video data is transmitted to the display unit 4 and displayed on the touch panel display 8. The audio data is transmitted to the amplifier unit 3 and output from the speaker 9. Further, the DVD unit 5 accepts an operation input (fast forward, rewind, etc.) related to reproduction of a DVD (from a remote controller, a touch panel display, etc.) by a user.

  The digital television unit 6 performs control for viewing digital terrestrial broadcasting. In addition to the microprocessor (ECU), the digital television unit 6 includes an interface connected to an antenna that receives terrestrial digital broadcast radio waves, and a tuner for terrestrial digital broadcast (none of which is shown). The digital television unit 6 decodes the received digital terrestrial broadcast radio waves into video, audio, and data broadcasts. Data relating to video and data broadcasting is transmitted to the display unit 4 and displayed on the touch panel display 8. The audio data is transmitted to the amplifier unit 3 and output from the speaker 9. The digital television unit 6 accepts an operation input (broadcast station selection, data broadcast display or non-display selection) by a user (from a remote controller, a touch panel display, or the like).

  The CD unit 7 executes a program for reproducing audio data recorded on the CD. The CD unit 7 includes a CD drive (not shown) for storing a CD in addition to a microprocessor (ECU). The CD unit 7 reads out and reproduces audio data from a CD set in the CD drive. The audio data is transmitted to the amplifier unit 3 and output from the speaker 9. The CD unit 7 receives an operation input (music selection, etc.) by a user (from a remote controller, a touch panel display, etc.).

  The processing performed by each slave unit described above is an example, and the processing performed by each slave unit may differ depending on the product specifications. In addition, the above-described enumeration of slave units is also exemplary, and the in-vehicle device A1 employs a short-range wireless communication standard such as a radio unit that receives radio, a hard disk audio unit, and BLUETOOTH (registered trademark). A communication unit for communicating with a mobile phone or the like can be mounted.

  FIG. 2 is a diagram illustrating an arrangement example of switches of the touch panel display 8. The touch panel display 8 can display a switch for operating each slave unit of the in-vehicle device A1 on the display screen. When the user presses (contacts) a switch on this screen, control of the corresponding slave unit is started. The switches on the screen shown in FIG. 2 do not correspond to all the slave units shown in FIG. 1, but are examples corresponding to some slave units.

  Details of the update of the control program of each slave unit in the in-vehicle device A1 including the slave units 2 to 7 and the master unit 1 configured as described above will be described. Each of FIG. 3A to FIG. 3C shows functional blocks that visualize the functions related to the update of the control program in the master unit 1, the navigation unit 2 as an example of the slave unit, and the amplifier unit 3 as another example. These functions are realized by executing a corresponding program in each unit. Here, the difference between the navigation unit 2 and the amplifier unit 3 that are slave units with respect to the update of the control program is that the difference program for update described later and the existing program are combined in the own unit. The navigation unit 2 is capable of synthesizing the program, and the amplifier unit 3 is not capable of synthesizing the program. . In other slave units as well, whether or not the program can be synthesized is either possible or impossible, so the following description will exemplify cases of the navigation unit 2 and the amplifier unit 3. Thus, the description of updating the control program for other slave units is omitted.

Here, FIG. 3A shows functional blocks related to program update in the master unit 1. The master unit 1 includes a slave update information acquisition unit 1a, an update determination unit 1b, a difference program acquisition unit 1c, a difference program transmission unit 1d, and an update program generation / distribution unit 1e. The slave information acquisition unit 1a acquires update information related to the program update capability of each slave unit from the slave unit (in this embodiment, the navigation unit 2 and the amplifier unit 3) whose program is updated. In this update information, in addition to the information related to the synthesis capability, version information of a program to be updated (an existing program (hereinafter referred to as “existing program”) currently held by each slave unit). And information on the baud rate between each slave unit and the master unit 1 is included. The update determination unit 1b determines whether or not to update the control program in the slave unit.

  The difference program acquisition unit 1c acquires a program necessary for the update in the form of a difference program on the master unit 1 side with respect to the slave unit determined to be required to update the control program. This difference program is formed in the form of a difference between the existing control program already possessed by the slave unit and the updated control program after the update. Thus, by updating the control program using the difference program, the amount of data transmitted and received during the update can be suppressed. Since the program update technique using the difference data is a conventional technique, a detailed description thereof will be omitted.

  The difference program transmission unit 1d distributes the difference program as a program for the update to the slave unit that updates the control program. On the other hand, the update program generation / distribution unit 1e is generated by synthesizing the difference program and the existing control program of the slave unit as the update program for the slave unit that updates the control program. Distribute updates. In the master unit 1, a program for updating in the one slave unit is distributed to one slave unit by one of the functional units of the differential program distribution unit 1d and the update program distribution unit 1e. It will be.

  Next, FIG. 3B shows functional blocks related to program update in the navigation unit 2 which is a slave unit. The navigation unit 2 is a slave unit having the above-described combining capability. The navigation unit 2 includes a slave update information transmission unit 2a, a difference program reception unit 2b, and an update program generation unit 2c. The slave update information transmission unit 2a transmits the update information of the navigation unit 2 in response to a request from the slave update information acquisition unit 1a. The difference program receiving unit 2b receives the difference program distributed from the difference program distribution unit 1d. The update program generation unit 2c synthesizes the received difference program and the existing program already possessed by the navigation unit 2 itself to generate an update program.

  Next, FIG. 3C shows functional blocks related to program update in the amplifier unit 3 which is a slave unit. The amplifier unit 3 is a slave unit that does not have the above-described combining capability. The amplifier unit 3 includes a slave update information transmission unit 3a, an existing program transmission unit 3b, and an update program reception unit 3c. The slave update information transmission unit 3a transmits the update information of the amplifier unit 3 in response to a request from the slave update information acquisition unit 1a. The existing program transmission unit 3b transmits the existing program of the amplifier unit 3 to the update program generation / distribution unit 1e. The update program receiving unit 3c receives the update program distributed from the update program generation / distribution unit 1e.

In the in-vehicle device A1 including the master unit 1, the navigation unit 2, and the amplifier unit 3 configured as described above, the update of the control program in the navigation unit 2 and the amplifier unit 3 is executed according to the flow shown in FIGS. 4A and 4B. The First, in S201, the master unit 1 determines whether to start updating the control program of each slave unit. In the present embodiment, in the vehicle on which the in-vehicle device A1 is mounted, the timing when the ignition is turned on, or a predetermined time (for example, a predetermined day every month determined using a timer built in the master unit 1) ) Or not. Next, in S202, the master unit 1 inquires the center server 100 about the latest version information of the control program of the slave unit (navigation unit 2, amplifier unit 3, etc.) managed by the master unit 1. Is called. In response to the inquiry from the master unit 1, the center server 100 returns the version information regarding the control program recorded in the server to the master unit 1. In this embodiment, in response to a single inquiry from the master unit 1, the center server 100 collectively returns version information regarding all slave units included in the in-vehicle device A1, but the master unit 1 The center server 100 may inquire about the slave unit and return the version information about the specific slave unit in response thereto.

  As described above, the latest version information of the control program is exchanged between the master unit 1 and the center server 100, while the master unit 1 inquires each slave unit about the update information that it has (S203). Processing). In response to this inquiry, the navigation unit 2 transmits its own update information to the master unit 1 (processing of S301), and the amplifier unit 3 transmits its own update information to the master unit 1 (processing of S401). . In this series of flows, update processing of each slave unit by the master unit 1 is executed by the slave update information acquisition unit 1a, and transmission processing of each update information by the navigation unit 2 and the amplifier unit 3 is performed by the slave unit. It is executed by the update information transmission units 2a and 3a.

By the processing so far, the master unit 1 acquires the latest version information regarding the control programs of the navigation unit 2 and the amplifier unit 3 and the update information of these units. Therefore, in the process of S204, an update table for updating the control program is created based on the acquired information. FIG. 5 shows an example of this update table. The fields of the update table include an identification ID corresponding to each slave unit, the current version and the latest version of the control program, the presence / absence of program synthesis capability of each slave unit, and the baud rate. In FIG. 5, a column corresponding to each slave unit shown in FIG. 1 is provided, but for simplicity of description, a column corresponding to the navigation unit 2 (a column in which the slave unit ID is represented by NAVI_FTEN05). Only the column corresponding to the amplifier unit 3 (the column in which the slave unit ID is represented by AMP_FTEN01) describes data. Thereafter, based on this update table, the master unit 1 controls the program update of each slave unit.

  When the process of S204 ends, the process proceeds to S205. In S205, the master unit 1 determines whether or not there is a need to update the program in each slave unit based on the update table. The determination process is executed by the update determination unit 1b. Specifically, each field of the current version and the latest version in the update table is compared, and if the current version is not the latest version, it is determined that the program needs to be updated. When it is determined that updating is necessary, the processing from S206 onward is performed. It should be noted that when the processing after S206 is performed, it is confirmed whether or not the user can actually perform the program update after the determination that the update is necessary is made in S205 as well as the update determination in S205. There may be a process to do. In this case, a confirmation message is displayed on the touch panel display 8 via the display unit 4. In the present embodiment, as shown in FIG. 5, since the current version of both the navigation unit 2 and the amplifier unit 3 is not the latest version, it is determined that each unit needs to be updated.

Next, when it is determined in S206 that the program needs to be updated, the master unit 1 requests the center server 100 for a differential program necessary for updating the program of each slave unit (processing of S206). ). In response to this request, the center server 100 transmits the necessary difference program to the master unit 1 (processing of S102), and the master unit 1 acquires the difference program (processing of S207). At this time, the master unit 1 requests the difference program for the slave units that need to be updated in a lump to the center server 100, and obtains them collectively from there. In this series of flows, the differential program acquisition process by the master unit 1 is executed by the differential program acquisition unit 1c.

  Thereafter, the master unit 1 performs a decoding process for the necessary difference programs received in a batch (the process of S208). The difference program transmitted from the center server 100 is subjected to encryption processing for communication safety. Therefore, in S208, the decryption processing of the entire encrypted difference program is collectively performed on the master unit 1 side in advance, so that the subsequent decryption processing in each slave unit can be omitted. Thus, it is possible to efficiently update the program of the entire system of the in-vehicle device A1. After the process of S208, the processes after S209 are performed.

  In S209, the program distributed to the slave unit is switched based on whether or not the slave unit determined to require updating of the program in S205 has the combining capability. When the slave unit is provided with the synthesis capability (in the present embodiment, the navigation unit 2 has the synthesis capability), the process proceeds from S209 to S210, and the difference program distribution unit 1d of the master unit 1 performs the processing. The program necessary for updating the program of the navigation unit 2 is distributed in the form of a differential program. The distributed difference program is received by the difference program receiving unit 2b of the navigation unit 2 (the process of S302), and further, the update program generating unit 2c that exhibits the synthesizing capability is used and the existing difference program in the navigation unit 2 is existing. Synthesis with the program is performed, a final update program is generated, and program update of the navigation unit 2 is executed (processing of S303).

  On the other hand, if the slave unit does not have the combining capability (in this embodiment, the amplifier unit 3 does not have the combining capability), the process proceeds from S209 to S211 and the amplifier unit 3 A request is made to transmit the existing program of the amplifier unit 3 to the master unit 1. In response to this request, the amplifier unit 3 prepares to transmit its existing program to the master unit 1, but before that, the master unit 1 that issued the request is a valid unit as a transmission destination. Is confirmed (processing of S402). Specifically, the confirmation is performed based on whether or not the identification number possessed by the master unit 1 is a number recognized by the amplifier unit 3. When the validity of the master unit 1 that issued the request is confirmed, the existing program transmission unit 3b of the amplifier unit 3 transmits the existing program owned by itself to the master unit 1 (processing of S403).

  The master unit 1 that has received the existing program of the amplifier unit 3 synthesizes the differential program for the amplifier unit 3 acquired from the center server 100 and the existing program, and generates a new update program for the amplifier unit 3. (S212). That is, in place of the amplifier unit 3 that does not have the difference program synthesis capability, the master unit 1 performs program synthesis required for updating. Thereafter, the generated update program is distributed to the amplifier unit 3 by the process of S213, and the amplifier unit 3 that receives the update program rewrites the existing program of the program and the distributed update program. The update is completed in the amplifier unit 3. In this series of flows, the processing of S212 and S213 related to the center unit 1 is executed by the update program generation / distribution unit 1e, and the processing of S404 related to the amplifier unit 3 is executed by the update program receiving unit 3c.

Further, the distribution of the difference program or update program from the master unit 1 to each slave unit shown in S210 and S213 is performed based on the baud rate of each slave unit in the update list shown in FIG. Specifically, the difference program or update program to be distributed is divided and distributed for each baud rate of each slave unit. Thereby, smooth and reliable program distribution is ensured.

  As described above, according to the program update method for each slave unit described above, the format of the program distributed from the center unit 1 is switched to an appropriate format based on the presence / absence of the synthesis capability of the slave units. In other words, when the slave unit to be updated has the synthesis capability, the amount of data to be distributed is suppressed by leaving the generation of the final update program to the slave unit side. If the target slave unit does not have the synthesis capability, the final update program is generated on the master unit 1 side, so that the program can be updated reliably and the slave unit according to the user's request Realization of higher functionality and function correction contributes to efficient program update as a whole of the vehicle-mounted device A1.

<Other examples>
In the above example of program update, an example of program update in a slave unit that is connected to the master unit 1 so as to be directly communicable is shown. For example, the update may be performed by a slave unit or a control device that is not connected so as to be communicable and has a program to be updated that is further communicably connected to such a slave unit. For example, in the in-vehicle device A1 shown in FIG. 1, when a control unit that exhibits some function different from the control function by the display unit 4 is incorporated on the touch panel display 8 and the program for the control unit is updated, this touch panel is used. The display 8 corresponds to another form of program update.

  In such a form, the touch panel display 8 can communicate with the master unit 1 via the display unit 4. Here, the update information that the touch panel display 8 has is collected with respect to the master unit 1 and reflected in the update list, as in the control flow shown in FIG. 4A. Then, when the touch panel display 8 itself has the above composition capability, only the difference program for the touch panel display 8 is distributed to the touch panel display 8 as in the process of S210. On the other hand, even if the touch panel display 8 itself does not have the above-mentioned combining ability, the master unit 1 can be used if the display unit 4 located upstream of the touch panel display 8 has the combining ability. Distributes the difference program for the touch panel display 8 to the display unit 4, and synthesizes the difference program and the existing program acquired from the touch panel display 8 to generate an update program for the touch panel display 8. May be. That is, it is not always necessary for the master unit 1 to perform program synthesis in place of the slave unit to be updated, and program synthesis may be entrusted to a slave unit other than the slave unit as a proxy. By doing in this way, the load of the master unit 1 which manages the program update of the whole vehicle equipment A1 can be distributed, so that the efficiency of the program update as a whole system is achieved. Therefore, even if the display unit 4 does not have the synthesis capability, for example, if the DVD unit 5 has the synthesis capability, the DVD unit 5 may perform program synthesis for the touch panel display 8. Good.

DESCRIPTION OF SYMBOLS 1 ... Master unit 2 ... Navi unit 3 ... Amplifier unit 4 ... Display unit 5 ... DVD unit 6 ... Digital television unit 7 ... CD unit 8 ... Touch panel display 9 ... Speaker 11 ... Wireless communication interface 12 ... RAM
13 ... ROM
15 ... CPU
100: Center server A1: In-vehicle device

Claims (5)

A management device that manages a system including one or more control devices each executing a program,
An update information acquisition unit that acquires update information including information related to the update capability of the program of the one control device from at least one control device included in the system;
As a program for updating the program of the one control device, a difference for preparing a difference program that is a difference between the existing program already possessed by the one control device and the update program after the update is performed. A program preparation department;
A delivery unit for delivering the difference program prepared by the difference program preparation unit to the one control device in a format corresponding to the update capability of the program of the one control device;
A management device comprising: Based on the update information, the one control device further comprises a combination availability determination unit that determines whether the update program can be formed by combining the difference program with the existing program,
The distribution unit distributes the difference program to the one control device when the synthesis program determination unit determines that the update program can be formed.
The management apparatus according to claim 1. Based on the update information, the one control device further comprises a combination availability determination unit that determines whether the update program can be formed by combining the difference program with the existing program,
When the distribution unit determines that the update program cannot be formed by the composition determination unit, the distribution unit acquires the existing program included in the one control device, and the acquired existing program and the difference program Delivering the synthesized program generated by synthesizing to the one control device;
The management apparatus according to claim 1. In the system, when another control device is communicably connected to the management device via the one control device,
The update information acquisition unit acquires the update information related to the other control device,
The difference program preparation unit prepares the difference program for the other control device,
The distribution unit cannot synthesize the difference program with the existing program of the other control device in the other control device, and does not synthesize the difference program with the existing program in the one control device. If possible, distribute the difference program to the one control device;
In the one control apparatus, the post-synthesis program generated by synthesizing the distributed program distributed with the existing program of the other control apparatus is distributed to the other control apparatus.
The management apparatus according to claim 1. The difference program preparation unit prepares the difference program in a decrypted state,
The distribution unit distributes the decrypted difference program to the one control device in a format according to the update capability of the program of the one control device.
The management apparatus as described in any one of Claims 1-4.

Images