Vehicle-mounted data rewriting control system

• US 20070005204A1
• Filed: 06/29/2006
• Published: 01/04/2007
• Est. Priority Date: 06/30/2005
• Status: Abandoned Application

• Current Assignee: DENSO Corporation
• Original Assignee: DENSO Corporation
• Inventors: Okada, Kazunori, Yamamoto, Satoshi, Nishiseko, Takafumi, Takasu, Zen
• Application Number:
  US11/476,635
• Publication Number:
  US 20070005204A1
• Time in Patent Office: Days
• US Class Current: 701/35
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A vehicle-mounted data rewriting control system includes a master control system. In rewriting data in electronic control systems, the master control unit first obtains through radio communication rewrite data from an external management center which holds and manages VIN codes of vehicles and version information of control programs. The supplied data are temporarily stored in a memory unit of the master control system, and the stored rewrite data are determined for their properness. By using the stored rewrite data, the data in the electronic control systems are rewritten on condition that the rewrite data stored in the memory unit are proper.

Claims

1. A vehicle-mounted data rewriting control system, which is constructed as to rewrite, based upon rewrite data supplied from an external unit through radio communication, at least either a control program or control data for controlling vehicle-mounted equipment stored in a rewritable region of a nonvolatile memory, comprising:

storage means for temporarily storing the rewrite data at time of rewriting at least either the control program or the control data;

determining means for determining properness of the rewrite data stored in the storage means; and

rewrite control means for rewriting at least either the control program or the control data by using the rewrite data on condition that the rewrite data stored in the storage means are determined by the determining means to be proper.

2. The control system according to claim 1, wherein:

the determining means determines the properness of the rewrite data based upon checking verification of the rewrite data stored in the storage means and of verification data corresponding to the rewrite data.

3. The control system according to claim 2, wherein:

the verification is checked at the external unit based upon the rewrite data stored in the storage means and sent back; and

the determining means determines the properness of the rewrite data stored in the storage means based upon information transmitted from the external unit as a result of checking the verification.

4. The control system according to claim 2, wherein:

the verification is checked based upon the rewrite data stored in the storage means and upon the data transmitted again from the external unit as corresponding to the data; and

the determining means determines the properness of the rewrite data stored in the storage means by making a direct reference to a result of checking the verification.

5. The control system according to claim 3, wherein:

the communication with the external unit is a packet communication, and the verification is checked in a unit of data that are divided in a unit of packet.

6. The control system according to claim 3, wherein:

the verification is checked in a unit of a data length of the rewrite data stored in the storage means.

7. The control system according to claim 1, wherein:

a state of feeding electric power from a vehicle-mounted battery is maintained for a period of time necessary for data communication based upon a turn-off of a key switch of the vehicle during communication with the external unit.

8. The control system according to claim 1, further comprising:

means for holding, in a nonvolatile memory, history information representing interruption of electric power based on the interruption of electric power during the communication with the external unit.

9. The control system according to claim 8, further comprising:

means for deleting the data stored in the storage means and for receiving again the deleted data based on the history information held in the nonvolatile memory when the key switch of the vehicle is turned on.

10. The control system according to claim 1, further comprising:

a timer for automatically starting a data rewriting control operation based on elapse of a preset timer time,

wherein, when the data rewriting control operation is started by the timer, the rewrite control means rewrites at least either the control program or the control data on condition that the rewrite data stored in the storage means are determined to be proper.

11. The control system according to claim 1, further comprising:

reporting means for reporting a user of state of waiting for rewriting of either the control program or the control data by the rewrite control means based on the rewrite data stored in the storage means that are determined to be proper,

wherein the rewrite control means rewrites at least either the control program or the control data based on a reported operation for instructing the rewriting of at least either the control program or the control data.

12. The control system according to claim 11, wherein:

when at least either the control program or the control data has not been rewritten by the rewrite control means, the reporting means issues the notice again at least either when the key switch of the vehicle is turned off or when the key switch is turned on.

13. The control system according to claim 11, wherein:

when the rewriting of at least either the control program or the control data is instructed, the reporting means further issues the notice requesting to inhibit the operation of a vehicle engine.

14. The control system according to claim 11, further comprising:

a timer of which a timer time is set based on a notice from the reporting means that execution of rewriting is standing by and which automatically operates data rewriting control operation based on elapse of the preset timer time,

wherein, when the data rewriting control operation is started by the timer, the rewrite control means rewrites at least either the control program or the control data on condition that the rewrite data stored in the storage means are determined to be proper.

15. The control system according to claim 14, wherein:

a diagnosis of a trouble in vehicle-mounted equipment is inhibited, when the rewrite data stored in the storage means are determined to be proper at a moment when the data rewriting control operation is started by the timer.

16. The control system according to claim 14, wherein:

when a cancel of the rewriting of at least either the control program or the control data is instructed in response to the notice of the reporting means that the execution of rewriting is standing by, the rewrite control means postpones the rewriting of at least either the control program or the control data started by the timer.

17. The control system according to claim 11, wherein:

the reporting means issues the notice by transmitting a mail to a cell phone that has been registered in advance.

18. The control system according to claim 11, wherein:

the reporting means issues the notice through a display on a screen of a navigation system.

19. The control system according to claim 1, wherein:

in rewriting at least either the control program or the control data by the rewrite control means, it is determined for start whether a state of the vehicle is suited for rewriting at least either the control program or the control data; and

the rewrite control means starts rewriting at least either the control program or the control data by using the rewrite data stored in the storage means when it is determined that the vehicle is in the state suited for rewriting.

20. The control system according to claim 19, wherein:

the rewrite control means determines a start based upon whether a logical AND conditions including that a preset time has been elapsed from a moment when a rotational speed has become 0 accompanying a halt of operation of a vehicle engine and a voltage of a vehicle-mounted battery is larger than a preset lower-limit value; and

it is determined that the state is suited for the rewriting when the logical AND conditions are satisfied.

21. The control system according to claim 1, wherein:

a plurality of electronic control systems is provided to execute data rewrite control operation in a divided manner, the plurality of electronic control systems being connected to each other through a communication bus that constitutes a LAN in the vehicle; and

any one of the electronic control systems is provided with, in addition to the storage means, communication means for communication with the external unit.