# US 2022/0036670 A1 · Vehicle mounted update apparatus, update processing program, and program update method > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2022/0036670 A1 - Document ID: US20220036670A1 - Status: Published application - Kind: A1 - Application number: 17/280,018 - Filed: 2019-10-11 - Published: 2022-02-03 - Earliest claimed: 2018-10-16 - Assignees: Autonetworks Technologies, Ltd.; Sumitomo Wiring Systems, Ltd.; Sumitomo Electric Industries, Ltd. - Applicants: AutoNetworks Technologies, Ltd.; Sumitomo Wiring Systems, Ltd.; Sumitomo Electric Industries, Ltd. - Inventors: Naoto Kobayashi - Web page: https://patentgrep.com/patent/US20220036670A1 ## CPC - G07C 5/0816: {Indicating performance data, e.g. occurrence of a malfunction} - B60R 16/02: electric {constitutive elements} - G06F 8/65: Updates (security arrangements therefor G06F21/57) - G06F 8/71: Version control (security arrangements therefor G06F21/57); Configuration management - G06F 13/00: Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units (interface circuits for specific input/output devices G06F3/00 {; multiprogram control therefor G06F9/46}; multiprocessor systems G06F15/16 ) - G07C 5/0808: {Diagnosing performance data (testing of vehicles G01M17/00; testing of electrical installation on vehicles G01R31/005)} - G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE - B60R: VEHICLES, VEHICLE FITTINGS, OR VEHICLE PARTS, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A vehicle-mounted update apparatus obtains update information and an update program transmitted from an outer-vehicle external server, and processes updating a program of a vehicle-mounted ECU. The vehicle-mounted update apparatus includes a control unit communicably connected to the vehicle-mounted ECU and controlling transmission of the update program to the vehicle-mounted ECU. The control unit determines, based on the update information, a transmission order for which the update programs are to be transmitted to the vehicle-mounted ECU, transmits the update program corresponding to a single update of the plurality of updates to the vehicle-mounted ECU, based on the determined transmission order, determines success or failure of the single update of the vehicle-mounted ECU, and transmits the update program next in the transmission order to the update program corresponding to the single update to the vehicle-mounted ECU, if the single update is determined as having succeeded. ## Claims ### Claim 1 A vehicle-mounted update apparatus for obtaining update information regarding a plurality of updates and an update program that are transmitted from an outer-vehicle external server, and performing processing for updating a program of a vehicle-mounted ECU installed in a vehicle, the vehicle-mounted update apparatus comprising: a control unit configured to be communicably connected to the vehicle-mounted ECU and to control transmission of the update program to the vehicle-mounted ECU, wherein the control unit is configured to: determine, based on the update information, a transmission order in which update programs respectively corresponding to the plurality of updates are to be transmitted to the vehicle-mounted ECU, store, in a storage unit of the vehicle-mounted update apparatus, the determined transmission order in association with version numbers of the update programs, transmit the update program corresponding to a single update of the plurality of updates and a self-diagnosis processing program for the vehicle-mounted ECU to perform self-diagnosis processing to the vehicle-mounted ECU, based on the determined transmission order, determine success or failure of the single update of the vehicle-mounted ECU based on a result of the self-diagnosis processing performed by the vehicle-mounted ECU according to the self-diagnosis processing program, transmit the update program next in the transmission order to the update program corresponding to the single update to the vehicle-mounted ECU, if the single update is determined as having succeeded, and interrupt the plurality of updates without transmitting the update program next in order to the vehicle-mounted ECU, if the single update is determined as having failed. ### Claim 2 (canceled) ### Claim 3 (depends on 1) The vehicle-mounted update apparatus according to claim 1, wherein a storage unit of the vehicle-mounted ECU includes two storage areas for respectively storing a current version program currently being executed and an old version program previously executed, the vehicle-mounted ECU stores the update program transmitted from the control unit in the storage area in which the old version program is stored, switches the update program thus stored in the storage area as the current version program, and transmits information regarding a switch result, and the control unit determines success or failure of the single update of the vehicle-mounted ECU based on the information regarding the switch result transmitted from the vehicle-mounted ECU. ### Claim 4 (depends on 3) The vehicle-mounted update apparatus according to claim 3, wherein there are a plurality of the vehicle-mounted ECUs to which the update program corresponding to the single update is to be transmitted, and the control unit determines that the single update was successful if the switch result transmitted from all of the vehicle-mounted ECUs to which the update program corresponding to the single update is transmitted is normal. ### Claim 5 (depends on 1) The vehicle-mounted update apparatus according to claim 1, wherein a storage unit of the vehicle-mounted ECU includes two storage areas for respectively storing a current version program currently being executed and an old version program previously executed, the vehicle-mounted ECU stores the update program transmitted from the control unit in the storage area in which the old version program is stored, and transmits information regarding a result of self-diagnosis performed on the update program thus stored in the storage area, and the control unit determines success or failure of the single update of the vehicle-mounted ECU based on the information regarding the self-diagnosis result transmitted from the vehicle-mounted ECU. ### Claim 6 (depends on 5) The vehicle-mounted update apparatus according to claim 5, wherein there are a plurality of the vehicle-mounted ECUs to which the update program corresponding to the single update is to be transmitted, and the control unit determines that the single update was successful if the self-diagnosis result transmitted from all of the vehicle-mounted ECUs to which the update program corresponding to the single update was transmitted is normal. ### Claim 7 An update processing program for causing a computer to execute processing for: obtaining update information regarding a plurality of updates and an update program that are transmitted from an outer-vehicle external server; determining, based on the update information, a transmission order in which update programs respectively corresponding to the plurality of updates are to be transmitted to the vehicle-mounted ECU; storing, in a storage unit of the computer, the determined transmission order in association with version numbers of the update programs, transmitting the update program corresponding to a single update of the plurality of updates and a self-diagnosis processing program for the vehicle-mounted ECU to perform self-diagnosis processing to the vehicle-mounted ECU, based on the determined transmission order; determining success or failure of the single update of the vehicle-mounted ECU based on a result of the self-diagnosis processing performed by the vehicle-mounted ECU according to the self-diagnosis processing program; transmitting the update program next in the transmission order to the update program corresponding to the single update to the vehicle-mounted ECU, if the single update is determined as having succeeded; and interrupting the plurality of updates without transmitting the update program next in order to the vehicle-mounted ECU, if the single update is determined as having failed. ### Claim 8 A program update method comprising: obtaining update information regarding a plurality of updates and an update program that are transmitted from an outer-vehicle external server; determining, based on the update information, a transmission order in which update programs respectively corresponding to the plurality of updates are to be transmitted to the vehicle-mounted ECU; transmitting the update program corresponding to a single update of the plurality of updates and a self-diagnosis processing program for the vehicle-mounted ECU to perform self-diagnosis processing to the vehicle-mounted ECU, based on the determined transmission order; determining success or failure of the single update of the vehicle-mounted ECU based on a result of the self-diagnosis processing performed by the vehicle-mounted ECU according to the self-diagnosis processing program; transmitting the update program next in the transmission order to the update program corresponding to the single update to the vehicle-mounted ECU, if the single update is determined as having succeeded; and interrupting the plurality of updates without transmitting the update program next in order to the vehicle-mounted ECU, if the single update is determined as having failed.