Electronic control device, reprogram execution method, and non-transitory computer readable storage medium

A reprogram execution method in an electronic control device that executes reprogramming by instructing an electronic control unit as a reprogram target to write an update program, the reprogram execution method comprising:

• acquiring a manifest file defined by Adaptive platform of Automotive Open System Architecture (AUTOSAR Adaptive platform);
• acquiring an update program for an electronic control unit that conforms to the AUTOSAR Adaptive Platform;
• and
• executing the reprogramming according to a machine state;
• wherein:
• the manifest file defines, for each electronic control unit or virtual machine subject to reprogramming, a plurality of machine states including at least a startup state, a shutdown state, a restart state, a normal state, and a reprogram state, as well as a plurality of function groups, each function group including one or more applications;
• a first function group of the plurality of function groups includes at least one to application that is permitted to be reprogrammed while a vehicle drive mechanism is running;
• a second function group of the plurality of function groups includes at least one application that is not related to the reprogramming;
• each of the first function group and the second function group has an activation state and a stop state;
• in the reprogram state, which is defined by the manifest file, only an application relating to the reprogramming is operated and an application relating to vehicle driving or navigation is not operated;
• the reprogram execution method further comprising:
• acquiring the update program from an update program distribution source via wireless communication or wired communication;
• when the update program is acquired via the wireless communication:
• determining, based on the vehicle drive mechanism and vehicle speed, whether a function other than a reprogram function can be stopped;
• determining that the function other than the reprogram function can be stopped upon determining that the vehicle drive mechanism is stopped or the vehicle speed is below a predetermined value;
• instructing a state transition to the reprogram state and a state transition to the stop state for the application belonging to the second function group in accordance with the manifest file upon determining that the function other than the reprogram function can be stopped;
• and starting the reprogramming;
• and
• when the update program is acquired via the wired communication:
• instructing, without determining a state of the vehicle drive mechanism and the vehicle speed, a state transition to the reprogram state, and a state transition to the stop state for the application belonging to the second function group in accordance with the manifest file;
• and starting the reprogramming.

A non-transitory tangible computer readable storage medium comprising instructions being executed by a control unit of an electronic control device that executes reprogramming by instructing an electronic control unit as a reprogram target to write an update program, the instructions including:

• acquiring a manifest file defined by Adaptive platform of Automotive Open System Architecture (AUTOSAR Adaptive platform);
• acquiring an update program for an electronic control unit that conforms to the AUTOSAR Adaptive Platform;
• and
• executing the reprogramming according to a machine state;
• the manifest file defines, for each electronic control unit or virtual machine subject to reprogramming, a plurality of machine states including at least a startup state, a shutdown state, a restart state, a normal state, and a reprogram state, as well as a plurality of function groups, each function group including one or more applications;
• wherein:
• a first function group of the plurality of function groups includes at least one an application that is permitted to be reprogrammed while a vehicle drive mechanism is running;
• a second function group of the plurality of function groups includes at least one application that is not related to the reprogramming;
• each of the first function group and the second function group has an activation state and a stop state;
• in the reprogram state, which is defined by the manifest file, only an application relating to the reprogramming is operated and an application relating to vehicle driving or navigation is not operated;
• the instructions further comprising:
• acquiring the update program from an update program distribution source via wireless communication or wired communication;
• when the update program is acquired via the wireless communication:
• determining, based on the vehicle drive mechanism and vehicle speed, whether a function other than a reprogram function can be stopped;
• determining that the function other than the reprogram function can be stopped upon determining that the vehicle drive mechanism is stopped or the vehicle speed is below a predetermined value;
• instructing a state transition to the reprogram state and a state transition to the stop state for the application belonging to the second function group in accordance with the manifest file upon determining that the function other than the reprogram function can be stopped;
• and starting the reprogramming;
• and
• when the update program is acquired via the wired communication:
• instructing, without determining a state of the vehicle drive mechanism and the vehicle speed, a state transition to the reprogram state, and a state transition to the stop state for the application belonging to the second function group in accordance with the manifest file;
• and starting the reprogramming.