Program rewriting system and program rewriting method
AssigneeMitsubishi Electric Corporation
InventorToshinori Matsui
Life of this patent
Estimating the term…
Abstract
Each of a plurality of type 2 nodes stores one of divisional programs, which are created as parts of a rewriting program for rewriting a program for determining the operation of a type 1 node, by dividing the rewriting program in a manner that allows a partial overlap in data between a divisional program stored in the type 2 node and a divisional program stored in another type 2 node. When divisional programs to the type 1 node are transmittable, each type 2 node transmits the divisional program stored in its own node to the type 1 node via a first network. The type 1 node rewrites a part that corresponds to the received divisional program, and uses the overlapping data to verify whether or not the divisional programs rewritten are the same.
Claims21
A program rewriting system comprising:
- a type 1 node that is a type 1 electronic control unit (ECU) and a plurality of type 2 nodes that are a plurality of type 2 ECUs, the type 1 node and the type 2 nodes being communicably connected with each other via a first network, wherein
- the type 1 node comprises:
- a first recording area for storing a type 1 program that determines operations of the type 1 node;
- and
- a processor programmed to:
- responsive to receiving a divisional program from one of the type 2 nodes:
- determine whether any part of the type 1 program stored in the first recording area that has already been rewritten corresponds to any part of the received divisional program;
- and
- in a case that an already-rewritten part of the type 1 program that is stored in the first recording area corresponds to an overlapping part of the received divisional program:
- execute rewriting of at least part of the contents of the type 1 program stored in the first recording area that corresponds to the received divisional program, the at least part of the contents of the type 1 program that are rewritten excluding the already-rewritten part, which is excluded from the executed rewriting;
- and
- perform verification on the already-rewritten part to determine if there is a problem by verifying whether or not contents of the already-rewritten part of the type 1 program stored in the first recording area that corresponds to the overlapping part of the received divisional program is identical with contents of the corresponding overlapping part of the received divisional program, and
- each of the type 2 nodes comprise:
- a second recording area for storing one of at least two divisional programs that are each parts of the type 1 rewriting program for rewriting the type 1 program and that each include contents that partially overlap with contents of another one of the at least two divisional programs, the another one of the at least two divisional programs being stored in another one of the type 2 nodes.
A program rewriting method for rewriting a type 1 program for determining operation of a type 1 node that is a type 1 electronic control unit (ECU) in a system comprising the type 1 node and a plurality of type 2 nodes that are a plurality of type 2 ECUs, the type 1 node and the type 2 nodes being communicably connected with each other via a first network, the program rewriting method comprising:
- storing, by each of the type 2 nodes, one of at least two divisional programs that each include parts of a type 1 rewriting program for rewriting the type 1 program and that each include contents that partially overlap with contents of another one of the at least two divisional programs;
- transmitting, by each of the type 2 nodes, via the first network, the respective one of the at least two divisional programs stored in the type 2 node to the type 1 node:
- and
- responsive to receiving a divisional program from one of the type 2 nodes:
- determining, by the type 1 node, whether any part of the type 1 program stored in the first recording area that has already been rewritten corresponds to any part of the received divisional program;
- and
- in a case that an already-rewritten part of the type 1 program that is stored in the first recording area corresponds to an overlapping part of the received divisional program:
- executing rewriting, by the type 1 node, of at least part of the contents of the type 1 program stored in the first recording area that corresponds to the received divisional program, the at least part of the contents of the type 1 program that are rewritten excluding the already-rewritten part, which is excluded from the executed rewriting;
- and
- performing verification, by the type 1 node, on the already-rewritten part to determine if there is a problem by verifying whether or not contents of the already-rewritten part of the type 1 program stored in the first recording area that corresponds to the overlapping part of the received divisional program is identical with contents of the corresponding overlapping part of the received divisional program.
Dependencies are inferred from the claim text.