Vehicle master device, control method for executing rollback, computer program product for executing rollback and data structure of specification data

A vehicle master device, comprising:

• an update data acquisition unit that is configured to acquire update data from outside;
• an update data distribution unit that is configured to distribute the update data acquired by the update data acquisition unit to a rewrite target electronic control unit (ECU) having a non-volatile memory with one or more program storage banks;
• a cancellation request determination unit that is configured to determine whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU by the update data distribution unit;
• and
• a rollback execution unit that is configured to, when the cancellation request determination unit determines that the cancellation request is generated:
• continue distributing the update data of the new program until completion of rewriting, instruct the rewrite target ECU to write the update data of the old program, and have the rewrite target ECU operate with the old program, when the one or more program storage banks is a single-bank;
• and
• continue distributing the update data of the new program until completion of rewriting and have the rewrite target ECU operate with the program stored in an active bank when the one or more program storage banks are two or more banks including the active bank and an inactive bank into which the new program is written.

A control method for executing a rollback executed in

• a vehicle master device that is configured to acquire update data from outside and distribute the acquired update data to a rewrite target electronic control unit (ECU) having a non-volatile memory with one or more program storage banks, the control method comprising the steps of:
• determining whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU;
• specifying a rollback method for returning the rewrite target ECU to a state where writing of the update data to the target ECU has not yest started in accordance with a memory type of the non-volatile memory of the target ECU and a data type of the update data of a new program or an old program when the cancellation request is determined to be generated;
• and
• instructing the rewrite target ECU to execute the rollback according to the specified rollback method and having the rewrite target ECU operate with the old program.

A control method for executing a rollback executed in

• a vehicle master device that is configured to acquire update data from outside and distribute the acquired update data to a rewrite target electronic control unit (ECU) having a non-volatile memory with one or more program storage banks, the control method comprising the steps of:
• determining whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU;
• and
• when the cancellation request is determined to be generated:
• continuing distributing the update data of the new program until completion of rewriting, instructing the target ECU to write the update data of the old program, and having the target ECU operate with the old program, when the one or more program storage banks is a single-bank;
• and
• continuing distributing the update data of the new program until completion of rewriting and having the target ECU operate with a program stored in an active bank when the one or more program storage banks are two or more banks having the active bank and a non-active bank into which the new program is written.

A non-transitory, computer readable tangible storage medium storing a computer program product for executing a rollback for a vehicle master device that includes a processor and is configured to acquire update data from outside and distribute the acquired update data to a target electronic control unit (ECU) having a non-volatile memory with one or more program storage banks, the computer program comprising instructions configured to, when executed, cause the processor to:

• determine whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU;
• specify a rollback method for returning the target ECU to a state where writing of the update data to the target ECU has not yet started in accordance with a memory type of the non-volatile memory of the target ECU and a data type of the update data of a new program or an old program when the cancellation request is determined to be generated;
• and
• instruct the target ECU to execute a rollback according to the specified rollback method;
• and
• have the target ECU operate with the old program.

A non-transitory, computer readable tangible storage medium storing a computer program for executing a rollback for a vehicle master device that includes a processor and is configured to acquire update data from outside and distribute the acquired update data to a rewrite target electronic control unit (ECU) having a non-volatile memory with one or more program storage banks, the computer program comprising instructions configured to, when executed, cause the processor to:

• determine whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU;
• and
• when the cancellation request is determined to be generated,
• continue distributing the update data of the new program until completion of rewriting, instruct the rewrite target ECU to write the update data of the old program, and have the rewrite target ECU operate with the old program, when the one or more program storage bank is a single-bank;
• and
• continue distributing the update data of the new program until completion of rewriting and have the rewrite target ECU operate with a program stored in an active bank when the one or more program storage banks are two or more banks having the active bank and a non-active bank into which the new program is written.

A data structure of specification data for a program update, the data structure stored on a non-transitory storage medium and used for a computer having:

• an update data distribution unit that is configured to distribute update data to a rewrite target electronic control unit (ECU);
• and
• a rollback executing unit that is configured to:
• instruct the rewrite target ECU to perform a rollback;
• and
• have the rewrite target ECU operate with an old program, the data structure further comprising:
• device identification information that identifies the rewrite target ECU;
• and
• a memory type of a non-volatile memory of the rewrite target ECU identified by the device identification information, wherein
• the memory type of the rewrite target ECU identified by the device identification information is used to:
• specify a rollback method suitable for the memory type;
• and
• distribute the update data of a new program or the old program according to the specified rollback method.