Electronic control unit, vehicle control system, and vehicle control method
AssigneeToyota Jidosha Kabushiki Kaisha
InventorMasaki MIYAKE
Life of this patent
Estimating the term…
Abstract
An electronic control unit (ECU), a vehicle control system, and a vehicle control method are provided. The disabling process disables execution of the software stored in storage circuitry when execution circuitry is restarted during operation of the vehicle control system. In a function restricting process, when another ECU is restarted during the operation of the vehicle control system, the software stored in the storage circuitry is executed to enable one of the functions that is capable of being enabled when execution of software in the other ECU is disabled.
Claims5
An electronic control unit (ECU), the ECU being one of a plurality of ECUs that constitute a vehicle control system configured to enable a plurality of functions of a vehicle, the ECU comprising:
- storage circuitry configured to store a plurality of versions of software;
- and
- execution circuitry configured to execute the software stored in the storage circuitry,
- wherein the ECU is disposed in the vehicle and is configured to communicate with a master device disposed in the vehicle,
- wherein the execution circuitry is configured to execute:
- a suspending process that suspends execution of a corresponding function of the vehicle when the ECU including the execution circuitry is restarted during operation of the vehicle control system;
- and
- a restriction cancelling process that enables at least one of the plurality of functions that has been suspended by execution of the suspending process when the ECU receives, from the master device, information indicating a permitted version under a condition in which the corresponding function of the vehicle is suspended,
- wherein the permitted version is a version of the software that is permitted to be executed under the condition in which the corresponding function of the vehicle is suspended by executing the suspending process.
A vehicle control system, comprising:
- a master device disposed in a vehicle;
- and
- a plurality of slave electronic control units (ECUs) disposed in the vehicle,
- wherein the vehicle control system is configured to enable a plurality of functions of the vehicle,
- each of the slave ECUs comprising:
- slave storage circuitry configured to store software that enables the functions of the vehicle;
- and
- slave execution circuitry configured to execute the software stored in the slave storage circuitry,
- wherein the slave execution circuitry is configured to execute:
- a suspending process that suspends execution of a corresponding function of the vehicle when the slave execution circuitry is restarted during operation of the vehicle control system;
- and
- a function restricting process that enables one of the plurality of functions that is capable of being enabled even when execution of a corresponding function in another slave ECU is suspended in a case in which the other slave ECU is restarted during operation of the vehicle control system,
- wherein the slave ECUs are configured to communicate with the master device,
- and wherein the slave execution circuitry is further configured to execute:
- a version sending process that sends, when the slave ECU including the slave execution circuitry is started, information indicating a version of the function of the vehicle to the master device;
- the suspending process when the slave execution circuitry receives, from the master device, information indicating that the slave ECU including the slave execution circuitry has been restarted during operation of the vehicle control system after the version sending process;
- and
- the function restricting process when the slave execution circuitry receives, from the master device, information indicating that the other slave ECU has been restarted during operation of the vehicle control system,
- wherein a slave ECU that is restarted during operation of the vehicle control system is a restarted slave ECU, and
- wherein the master device includes master execution circuitry configured to enable at least one of the plurality of functions that has been suspended when the master device receives, from any of the slave ECUs, information indicating a version of the function of the vehicle during operation of the vehicle control system.
A vehicle control method, comprising:
- providing a master device disposed in a vehicle;
- providing a plurality of slave electronic control units (ECUs) disposed in the vehicle, the slave ECUs being capable of sending and receiving information to and from the master device, the master device and the slave ECUs being configured to enable a plurality of functions of the vehicle, each of the slave ECUs including storage circuitry configured to store software that enables the functions of the vehicle;
- causing, when version information indicating a version of the software is sent from any of the slave ECUs during operation of the vehicle, execution of a corresponding function of the vehicle to be suspended;
- and
- causing at least one of the plurality of functions that is capable of being enabled while the corresponding function of the vehicle is suspended to be enabled.
Dependencies are inferred from the claim text.