JP2018160208A - On-vehicle controller and program update software - Google Patents

Abstract

PROBLEM TO BE SOLVED: To shorten a difference restoration time.SOLUTION: An on-vehicle controller includes fifth difference restoration means that transmits third block difference data between a new program to be written into an update object block in a first nonvolatile memory region, i.e. an update object, and the whole of an old program in a second nonvolatile memory region to the on-vehicle controller by the block, stores the block difference data in the nonvolatile memory, and uses the third block difference data and the whole of the old program stored in the second nonvolatile memory region to restore the new program in the update object block in the first nonvolatile memory region. The on-vehicle controller repetitively executes the fifth difference restoration means and writes the restored new program into the first nonvolatile memory region.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an in-vehicle control device and program update software.

  Reprogramming the in-vehicle control device connects binary data by connecting a PC (Personal Computer) or in-vehicle writing device as a writing tool to the in-vehicle control device (ECU: Electric Control Unit) via a low-speed CAN (Controller Area Network). (New program) Writing to the flash memory of the ECU while dividing and transferring the entire program.

  For this reason, even when the update part of the new program with respect to the old program is small, the whole new program is transferred via CAN and the whole new program is written.

  Therefore, there is a problem that it takes time to write. On the other hand, the concept of reprogramming based on differences has been proposed (for example, see Patent Document 1). That is, paragraph [0019] of Patent Document 1 describes “means for creating difference data of old and new programs in block units” as one of the rewriting methods. Further, in paragraph [0064], the old program of the update target block is transferred to the SDRAM, the new program is restored to the SDRAM using the difference data and the old program, the update target block is erased, and then the new program is written. It is crowded.

  Patent Document 2 describes a software update method based on differences between mobile terminal devices. In paragraph [0015], first and second memory areas for storing a main body program including an update engine for software update are provided in the nonvolatile memory of the mobile terminal device, respectively. The difference data between the version of the main body program and the version of the new main body program is downloaded, one update engine of the first and second memory areas is expanded in the work memory area, and the update engine in the work memory area To update the main body program with the difference data, and when the update is successful, select the updated main body program as the current main body program, and when the update fails, the update engine in the working memory area The download function included in the other version and new version of the main program Download the difference data with the version of the body program, execute the update engine in the working memory area, update the body program with the difference data, and when the update is successful, use the updated body program Means for selecting as the main body program is described.

  However, it is not specified how to restore the new program by using the difference data and one main body program.

JP 2012-190075 A JP 2007-189332 A

  In-vehicle control devices are often composed of a storage device composed of a non-volatile memory of several megabytes and a small volatile memory of 1 megabyte or less. This is to realize an inexpensive in-vehicle control device by realizing the control only with the memory built in the microcomputer. For this reason, the entire new program cannot be restored to the volatile memory. Therefore, the new program is divided into a plurality of blocks, and block difference data between the new program for each block and the entire old program stored in the nonvolatile memory is generated. The new program of the block is restored from the entire old program to the volatile memory, and then the new program of the block is written to the nonvolatile memory. By repeating this restoration in units of blocks, the entire new program can be written into the nonvolatile memory, and the amount of volatile memory used can be limited to the block size.

  However, since the block difference restoration process is repeated a plurality of times for each block, there is an overhead, which causes a reduction in restoration performance.

  In order to solve the above-mentioned problem, the vehicle-mounted control device of the present invention is, as an example, a vehicle-mounted control device that can update the stored old program to the new program based on the update content provided from the writing device, A non-volatile memory having a two-surface configuration of a first non-volatile memory area and a second non-volatile memory area having a plurality of blocks for storing programs; and a volatile memory for temporarily storing data; The writing device includes third block difference data between the new program to be written to the update target block in the first nonvolatile memory area to be updated and the entire old program in the second nonvolatile memory area. Or the new program to be written to the update target block of the second nonvolatile memory area to be updated and the old program of the first nonvolatile memory area. 4th block difference data with the whole gram is transmitted to a vehicle-mounted control apparatus for every block, block difference data is stored in the volatile memory, the 3rd block difference data and the 2nd non-volatile memory area A fifth difference restoring means for restoring the new program of the block to be updated in the first nonvolatile memory area using the entire old program stored in the first non-volatile memory area; and the fourth block difference data; Sixth difference restoring means for restoring the new program of the block to be updated in the second nonvolatile memory area using the entire old program stored in the first nonvolatile memory area; And repetitively executing the fifth difference restoring means or the sixth difference restoring means to restore the restored new program to the first nonvolatile memory. Written sexual memory area or the second nonvolatile memory area.

  According to the present invention, the difference restoration time can be shortened.

1 is a schematic diagram showing an overall configuration of a vehicle according to an embodiment of the invention. It is a schematic diagram which shows the structure inside SRAM of the vehicle-mounted control apparatus shown in FIG. It is a schematic diagram which shows the structure inside the FLASH memory of the vehicle-mounted control apparatus shown in FIG. (a) Overview of generation of block difference data with header from the entire A surface program and new program for each B surface block, and (b) Generation of block difference data with header from the entire B surface program and new program for each A surface block FIG. (a) Outline of new program restoration of block B # n from entire A-side program and block difference data of B # n, (b) New block A # n from entire B-side program and block difference data of A # n It is a program restoration schematic diagram. It is a flowchart of A side update software 304A and B side update software 307. It is a figure which shows the kind of communication command which block difference data communication software receives from a vehicle-mounted writing apparatus. It is a sequence diagram of a communication command transmitted from the in-vehicle writing device 100. It is a flowchart of block difference data communication software. It is a flowchart of block difference restoration software. It is a flowchart of diagnostic software. It is a flowchart of surface switching software.

  The present embodiment provides three means for improving the performance of the block difference restoration process in the in-vehicle control device in which a program is arranged in each of the two-side configuration nonvolatile memories.

  As described above, the first block difference restoration processing performance improving means is means for restoring the new program of the block with reference to the entire old program. Of course, it is assumed that difference data for the block is generated with reference to the new program and the entire old program. In other words, the difference data generation of a block is basically based on searching for a partial instruction sequence similar to the partial instruction sequence of the new program from the old program and converting it to a short code. Can be reduced. This is possible because of the two-sided non-volatile memory. With the two-sided configuration, the old program on one side is not changed at all during the difference update. It is the other side that is updated. If it is a one-plane configuration, after restoring the new program of the block to the volatile memory, it is unavoidable to update some blocks of the old program. For this reason, the means for restoring the new program of the block with reference to the entire old program is a means due to the two-surface configuration.

  The second block difference restoration processing performance improvement unit is a data copy unit between the same blocks. If the old program of the block of the first non-volatile memory and the new program of the block of the second non-volatile memory have the same content, the differential restoration process is omitted and the old program of the block of the first non-volatile memory Can be processed at high speed by copying to the corresponding block of the second nonvolatile memory. In other words, if difference data is generated from one of the entire old program and the entire new program, the new program is written into the block after the restoration process, resulting in a reduction in efficiency.

  The third means comprises block difference data including a block difference body data and a block difference header including the block difference body data size. When the block difference data is received, the block difference data is referred to by referring to the block difference body data size in the header. If the size is not 0, the first means performs block differential restoration, and if the size is 0, the second means performs data copy between the same blocks.

  As described above, the third means is a means for adding a block difference header to the block difference main body data to restore the new program for each block at high speed by combining the first means and the second means.

  Hereinafter, the configuration and operation of a vehicle including an in-vehicle control device according to an embodiment of the present invention will be described with reference to the drawings.

The vehicle includes an in-vehicle writing device 100 (gateway) and a plurality of in-vehicle control devices 200 (200 ₁ to 200 _n ). The in-vehicle writing device 100 and the in-vehicle control device 200 communicate with each other via the in-vehicle network CAN.

  The in-vehicle control device 200 includes a microcomputer 201, various ICs (Integrated Circuits) 204 corresponding to the use of each in-vehicle control device 200, and a communication device 205 such as a CAN transceiver. The microcomputer 201 incorporates an SRAM 202 (volatile memory) and a FLASH memory 203 (nonvolatile memory).

  The configuration of the in-vehicle writing device 100 is basically the same as that of the in-vehicle control device 200, but further includes a communication device according to a network protocol outside the vehicle. That is, the in-vehicle writing device 100 includes a microcomputer 101, various ICs 104, a communication device 105 such as a CAN transceiver, and a communication device 106 according to a network protocol outside the vehicle. The microcomputer 101 includes an SRAM 102 and a FLASH memory 103.

  Next, the configuration of the SRAM 202 of the in-vehicle control device 200 will be described with reference to FIG. FIG. 2 is a schematic diagram showing an internal configuration of the SRAM 202 shown in FIG.

  The SRAM 202 includes a reception area 202a for temporarily storing difference data transmitted from the in-vehicle writing device 100, and a restoration area 202b for temporarily storing a restoration program restored using the difference data.

Next, the configuration of the FLASH memory 203 will be described with reference to FIG. FIG. 3 is a schematic diagram showing an internal configuration of the FLASH memory 203 shown in FIG. The FLASH memory 203
Consists of a first non-volatile memory 301 (A-side arrangement program), a second non-volatile memory 302 (B-side arrangement program), and a third non-volatile memory 309 (which stores a variable selectarea that indicates an execution surface) Has been.

  The first non-volatile memory 301 includes a pre-boot 303, an A-side boot 304, an A-side update software 304A, and an A-side program 305. On the other hand, the second non-volatile memory 302 (B-side arrangement program) includes a B-side boot 306, a B-side update software 307, and a B-side program 308. Here, the pre-boot 303 is equipped with an initialization program that is executed first when the vehicle-mounted control device is powered on or ignition-on, and the variable selectarea of the third nonvolatile memory 309 is initialized after initialization of the SRAM 202 or the like. With reference to the value, it branches to either the A-side boot 304 or the B-side boot 306 according to the value. That is, the select area stores surface information to be executed (A surface or B surface information). If it branches to the A-side boot 304, it performs diagnostics such as checking the sum value of the A-side program 305, and then performs initialization and various timer settings necessary for OS startup in the A-side program 305. Then, the A-plane program 305 to be updated is executed.

  Thereby, the vehicle-mounted control apparatus 200 can operate | move normally. The A-side update software 304A is a program that is executed when a software update instruction is notified during execution of the A-side program 305. The A-side update software 304A includes block difference data communication software 601, block difference restoration software 602, diagnosis software 604, and surface switching software 605 that realize the first to third means of the present invention (see FIG. 6). This is software for differentially updating the B-side program 308.

  On the other hand, when branching to the B-side boot 306 of the second non-volatile memory 302, the initial value necessary for starting up the OS in the B-side program 308 is similarly performed after performing a diagnosis such as checking the sum value of the B-side program 308. The B surface program 308 to be updated is executed by performing processing such as conversion and various timer settings.

  Thereby, the vehicle-mounted control apparatus 200 can operate | move normally. The B-side update software 307 is a program that is executed when a software update instruction is notified during execution of the B-side program 308. Similarly, the B-side update software 307 includes block difference data communication software 601, block difference restoration software 602, diagnosis software 604, and surface switching software 605 that implement the first to third means of the present invention (see FIG. 6). ), Software for differentially updating the A-side program 305.

  In the present embodiment, as an example, the size of the FLASH memory 203 is 2 MB. Here, the blocks A # n and B # n (n = 1 to 7) are the minimum erasable sizes. For example, when data is written to the block B # n, it is necessary to erase the entire block B # n before writing the data.

  Next, the outline of generation of header difference block difference data will be described with reference to FIG.

  First, (a) generation of header-added block difference data from the entire A-side program and a new program for each B-side block will be described.

  Block difference data 410 for each block B # n (n = 1 to 7) is generated from the A program 305 and the new program for each B block B # n (n = 1 to 7). The first step of generation is a data match check between the block A # n and the block B # n (n = 1 to 7). For example, if the data of A # 4 and B # 4 match, block difference data in which the block difference body data size in the block difference header 420 of B # 4 is set to 0 is generated. Of course, block difference body data is not attached.

  If the data of A # 4 and B # 4 do not match, B # 4 block difference body data 430 is generated from the entire A plane program 305 and the new program of block B # 4, and then the block of B # 4 The size is set to the block difference main body data size in the difference header 420.

  The B # 4 block difference data has been generated. By repeating this generation processing for each block, all the block difference data with header of the B-side new program 400 can be generated.

  Next, (b) generation of block difference data with a header from the entire B surface program and a new program for each A surface block will be described.

  Block difference data 450 for each block A # n (n = 1 to 7) is generated from the new program for each of the B surface program 308 and the A surface block A # n (n = 1 to 7). Similarly, the first step of generation is a data matching check between the block A # n and the block B # n (n = 1 to 7). As an example, if the data of A # 4 and B # 4 match, the block difference body data size in the block difference header 460 of A # 4 is set to 0, and the block difference data of A # 4 is generated. Of course, block difference body data is not attached.

  If the data of A # 4 and B # 4 do not match, A # 4 block difference body data 470 is generated from the entire B surface program 308 and the new program of block A # 4, and then the block of A # 4 The block difference main body data size is set in the difference header 460. The A # 4 block difference data has been generated. By repeating this generation processing for each block, all the block difference data with header of the A-side new program 440 can be generated.

  Next, the outline | summary of the 1st-3rd means which a vehicle-mounted control apparatus performs using FIG.

  The A plane arrangement program 301 is a program arranged in the first nonvolatile memory. As described above, PREBOOT that is executed first when reset or ignition is turned on, BOOT # A that is executed when the value of the variable selectarea in the third non-volatile memory is “A plane”, and first to third means It consists of DIFF # A and A-side program 305 in which update software 304A to be realized is arranged. The block difference data of block B # n is composed of a block difference header 500 of B # n and block difference body data 510 of B # n.

  The processing summary 530 of the update software 304A refers to the block difference body data size in the B # n block difference header 500 by the third means, and if the block difference body data size = 0, the block of the first nonvolatile memory A # n is copied to the block B # n of the second nonvolatile memory (second means). On the other hand, if the block difference main body data size ≠ 0, the first means uses the block difference restoring means from the entire A-side program 305 of the first nonvolatile memory and the block difference main body data 510 of B # n to use the block B # n. The new program 520 is restored. By repeating this operation for each block, the new program on the B side can be written to the second nonvolatile memory.

  Similarly, an operation for writing a new program for the A side to the first nonvolatile memory using the B side program and the A # n block difference data will be described.

  First, the B-side arrangement program 308 is a program arranged in the second nonvolatile memory. Similarly, BOOT # B executed when PREBOOT refers to the variable selectarea in the third non-volatile memory and the value is “B side”, and update software 307 for realizing the first to third means is arranged. DIFF # B, B-side program 308. The block difference data of the block A # n includes an A # n block difference header 540 and an A # n block difference body data 550.

  The processing summary 570 of the update software 307 refers to the block difference body data size in the block difference header 540 of A # n by the third means, and if the block difference body data size = 0, the block of the second nonvolatile memory B # n is copied to the block A # n of the first nonvolatile memory (second means). On the other hand, if the block difference body data size ≠ 0, the first means uses the block A # n from the entire B-side program 308 of the second non-volatile memory and the block difference body data 550 of A # n using the block difference restoration means. The new program 560 is restored. By repeating this operation for each block, a new program for the A side can be written to the first nonvolatile memory.

  The outline of the first to third means has been described above. Next, the operation will be described in detail with reference to FIGS.

  FIG. 6 is a flowchart of the A-side update software 304A and the B-side update software 307. The block difference data communication software 601 receives the block difference data transmitted from the in-vehicle writing device 100, and performs data copy processing between blocks or block difference restoration according to the value of the block difference main body data size in the block difference header. The software 602 is executed. Next, in 603, it is determined whether or not reception of all the block difference data has been completed. If no, branch to 601 and receive the next block difference data. On the other hand, if yes, since the new program has been restored to the first nonvolatile memory or the second nonvolatile memory, the diagnostic software 604 is executed to check whether the writing has been completed normally. If the diagnosis result is normal, the surface switching software 605 is executed to change the variable selectarea in the third nonvolatile memory. As described above, if the in-vehicle control device 200 is reset, PREBOOT is started, and a new program can be started with reference to the variable selectarea.

  Next, the types of communication commands transmitted from the in-vehicle writing device 100 and received by the block difference data communication software 601 will be described using FIG. 7A.

  A communication command $ 00 700 is a command for requesting a selection plane and a selection program version. From the response of this communication command, the in-vehicle writing device 100 can know whether the currently executed program is the A side or the B side. In addition, the correct block difference data can be transmitted to the in-vehicle control device 200 after confirming the program version.

  A communication command $ 10 710 is a block difference data transmission start command. This is used to notify the in-vehicle control device 200 that data transmitted after this communication command is block difference data.

  The communication command $ 20 MA MS of 720 is a command for notifying the in-vehicle control device 200 of the difference restoration target area. MA is the start address of the area, and MS is the size of the area.

  The communication command $ 30 DATA 730 is a block difference data transmission command. DATA is a block difference header and block difference body data.

A communication command $ 40 740 is a block difference data transmission end command.
Thus, one block difference data is transmitted with three communication commands 720, 730, and 740, and all the block difference data is transmitted to the in-vehicle control device 200 by repeatedly transmitting these three communication commands.

  The communication command $ 50 MAMS 750 is a diagnosis start command. MA is the start address of the diagnosis area, and MS is the size of the diagnosis area. Diagnosis is performed by checking the sum value. It is assumed that the correct sum value of the new program is written at an address determined by the new program, and the in-vehicle control device 200 knows the address.

  A communication command $ 60 760 is a surface switching instruction command. This command switches the value of variable selectarea to the opposite side.

  A sequence of communication commands transmitted by the in-vehicle writing device 100 will be described with reference to FIG. 7B.

770 transmits a communication command selection surface and a selection program version request $ 00.
As a response to the communication command $ 00, the in-vehicle control device 200 returns the selected surface and version information of the program.

  771 transmits a communication command block difference data transmission start $ 10.

  772 transmits a communication command differential restoration target area designation $ 20.

  773 transmits the communication command differential restoration target area block differential data $ 30.

  774 transmits a communication command block difference data transmission end $ 40.

  In step 775, it is determined whether the difference data of all the blocks has been transmitted. If yes, 776 is executed, and if no, 772 to 775 are repeatedly executed.

  776 transmits a communication command diagnosis start $ 50.

  777 transmits a communication command plane switching instruction $ 60.

  As described above, the in-vehicle writing device 100 can transmit the communication command to the in-vehicle control device 200.

  The block difference data communication software 601 operates upon receiving the above communication command.

  FIG. 8 is a flowchart of the block difference data communication software 601.

  At 800, a communication command CMD is received from the in-vehicle writing device 100.

  In 801, it is determined whether the communication command CMD is $ 00. If yes, 805 is executed, and if no, 810 is executed. 805 reads the value of the variable selectarea of the third nonvolatile memory and the version of the program arranged on the selectarea instruction surface, and returns it to the in-vehicle writing device 100. In 810, it is determined whether the communication command CMD is $ 10. If yes, 815 is executed, and if no, 820 is executed.

  In 815, the reception area 202a and the restoration area 202b for storing the block difference main body data are initialized.

  In 820, it is determined whether the communication command CMD is $ 20. If yes, 825 is executed, and if no, 830 is executed.

  In 825, the head address MA and the size MS of the difference restoration target area are stored.

  In 830, it is determined whether the communication command CMD is $ 30. If yes, 835 is executed, and if no, 840 is executed.

  In 835, the block difference body data in DATA is stored in the reception area 202a, and the block difference body data size in the block difference header is read and stored in the variable SIZE.

  In 840, it is determined whether the communication command CMD is $ 40. If yes, 845 is executed, and if no, 850 is executed.

  Reference numeral 845 denotes processing that realizes the first to third means. First, referring to the variable selectarea and the variable SIZE of the third non-volatile memory, a case process corresponding to the four combinations is performed.

  The first case is a case where selectarea = “A surface” and SIZE = 0. In this case, the data of the block A # n of the first nonvolatile memory is copied to the second nonvolatile memory B # n.

  The second case is a case where selectarea = “A surface” and SIZE ≠ 0. In this case, the block difference restoration software 602 is executed, and the restoration result is stored in the restoration area 202b. Further, the restoration data in the restoration area 202b is written into the block B # n (first address MA, size MS) of the second nonvolatile memory.

  The third case is a case where selectarea = “B surface” and SIZE = 0. In this case, the data of the block B # n of the second nonvolatile memory is copied to the first nonvolatile memory A # n.

  The fourth case is a case where selectarea = “B surface” and SIZE ≠ 0. In this case, the block difference restoration software 602 is executed, and the restoration result is stored in the restoration area 202b. Further, the restoration data in the restoration area 202b is written into the block A # n (first address MA, size MS) of the first nonvolatile memory.

  In 850, it is determined whether the communication command CMD is $ 50. If yes, 855 is executed, and if no, 860 is executed.

  In 855, the diagnosis area designated by the start address MA and the size MS is executed by the diagnosis software 604 to perform diagnosis using the sum value. If the diagnosis result is normal, “normal” is stored, and if the diagnosis result is abnormal, “abnormal” is stored.

  In 860, it is determined whether or not the communication command CMD is $ 60. If yes, 865 is executed, and if no, the new program based on one block difference data has been written, so the communication command processing is terminated. However, it can be seen from 603 in FIG. 6 that the block difference data communication software 601 is executed until reception of all the block difference data is completed.

  In step 865, the surface switching software 605 is executed to change the value of the variable selectarea of the third nonvolatile memory.

  FIG. 9 is a flowchart of the block difference restoration software 602.

  First, an outline of general difference generation / differential restoration software will be described. The difference generation software searches and finds a partial instruction sequence similar to the partial instruction sequence of the new program from the old program in the difference extraction processing unit, replaces the partial instruction sequence with a short code, and attaches it to the copy command. On the other hand, if a similar partial instruction sequence is not found, the partial instruction sequence is attached to the additional command. The sequence of this copy command and additional command is the difference data. Thus, the difference data is not simply a result of subtracting the old program from the new program, but is composed of columns such as a copy command and an additional command in which the similar part name sequence is replaced with a short code.

  Based on the above preparation, the operation of the block difference restoration software 602 will be described.

  900 reads a difference command from the block difference body data in the reception area 202a.

  In 910, the differential command is analyzed. In 920, it is determined whether the differential command is a copy command. If no, execute 930.

  In 930, it is determined whether the differential command is an additional command. If yes, data (partial instruction sequence) attached to the additional command in 935 is additionally written to the restoration area 202b. If no, execute 940.

  In 940, it is determined whether all the differential commands in the reception area 202a have been read. If yes, the differential restoration process is completed. If no, return to 900 and repeat the process.

  As described above, the restored program that has been differentially restored can be stored in the restored rear 202b.

  FIG. 10 is a flowchart of the diagnostic software 604.

  At 1000, the “sum value of the new program” arranged at a predetermined specific address in the new program is read and stored in the variable SUM.

  In 1010, the data of the new program written in the area of the start address MA and the size MS is added in units of 4 bytes, and the addition result is stored in the variable S.

  In 1020, a match check between the variable SUM and the variable S is performed. If they match, 1025 is executed, and if they do not match, 1030 is executed. In 1025, since the diagnosis result is normal, “normal” is stored as the diagnosis result. In 1030, since the diagnosis result is abnormal, “abnormal” is stored as the diagnosis result, and the process ends.

  FIG. 11 is a flowchart of the surface switching software 605.

  In 1100, it is determined whether the diagnosis result is “abnormal”. That is, the in-vehicle control device 200 is executed with the current program without switching to the new program.

  On the other hand, if no, 1120 is executed. In 1120, it is determined whether the current value of the variable “selectarea” is “A plane”. If yes, 1130 is executed, and if no, 1140 is executed. In 1130, the variable selectarea is changed to “B-side”. In 1140, the variable selectarea is changed to "A surface". The new program can now be executed.

100: In-vehicle writing device (gateway)
101: Microcomputer (arithmetic unit)
102 ... SRAM (volatile memory)
103 ... FLASH memory (nonvolatile memory)
104 ... Various ICs
105 ... Communication device (CAN protocol)
106: Communication device (network protocol outside the vehicle)
200: On-vehicle control device (ECU)
201: Microcomputer (arithmetic unit)
202 ... SRAM (volatile memory)
203 ... FLASH memory (nonvolatile memory)
204 ... Various ICs
205 ... Communication device (CAN protocol)
202a ... Reception area 202b ... Restore area 301 ... First nonvolatile memory (A-side arrangement program)
302 ... 2nd non-volatile memory (B surface arrangement program)
303 ... Pre-boot (a program that branches to the A or B plane with reference to the variable selectarea)
304 ... A-side boot (A-side placement program initialization processing program)
304A ... A-side update software (software for executing the first to third means)
305 ... A-side program (A-plane update target program)
306 ... B-side boot (B-side placement program initialization processing program)
307 ... B-side update software (software for executing the first to third means)
308 ... B-side program (B-side update target program)
309 ... Third nonvolatile memory (variable selectarea storage area for instructing execution surface)
400 ... B-side new program 410 ... Block difference data 420 ... Block B # n block difference header 430 ... Block B # n block difference body data 440 ... A-side new program 450 ... Block difference data 460 ... Block A # Block difference header 470 of n ... Block difference body data 500 of block A # n ... Block difference header 510 of block B # n ... Block difference body data 520 of block B # n ... New program 530 of block B # n ... A surface Process update diagram 540 of update software 304A Block difference header 550 of block A # n Block difference main body data 560 of block A # n New program 570 of block A # n Process overview diagram B-side update software 307 601 Block difference data communication software 602... Block difference restoration software 604. Diagnosis software 605. For example soft

Claims (6)

Based on the update content provided from the writing device, an in-vehicle control device capable of updating the stored old program to the new program,
A non-volatile memory having a two-surface configuration of a first non-volatile memory area and a second non-volatile memory area having a plurality of blocks for storing programs; and a volatile memory for temporarily storing data;
The writing device includes third block difference data between the new program to be written to the update target block in the first nonvolatile memory area to be updated and the entire old program in the second nonvolatile memory area. Or the fourth block difference data between the new program to be written to the update target block of the second nonvolatile memory area to be updated and the entire old program of the first nonvolatile memory area for each block. To the in-vehicle control device,
Block differential data is stored in the volatile memory, and the first nonvolatile memory area is obtained by using the third block differential data and the entire old program stored in the second nonvolatile memory area. A fifth difference restoring means for restoring the new program of the update target block;
The new program of the block to be updated in the second nonvolatile memory area is restored using the fourth block difference data and the entire old program stored in the first nonvolatile memory area. A sixth difference restoring means,
Writing the restored new program in the first nonvolatile memory area or the second nonvolatile memory area by repeatedly executing the fifth difference restoring means or the sixth difference restoring means. A vehicle-mounted control device. When the new program in the block to be updated in the first nonvolatile memory area to be updated and the old program in the second nonvolatile memory area are the same, the second nonvolatile memory A seventh copy means for copying the old program in the memory area to the update target block in the first nonvolatile memory area;
When the new program in the block to be updated in the second nonvolatile memory area to be updated and the old program in the first nonvolatile memory area are the same, the first nonvolatile memory An eighth copy means for copying the old program in the area to the block to be updated in the second nonvolatile memory area;
The in-vehicle control device according to claim 1, comprising: The third block difference data and the fourth block difference data include a block difference header part including at least presence / absence information of difference data, and a block difference body part of the difference data body,
When the difference data presence / absence information includes difference data, the fifth difference restoration unit and the sixth difference restoration unit restore the new program to the update target block,
3. The in-vehicle control according to claim 2, wherein when the difference data presence / absence information indicates that there is no difference data, the old program is copied to the update target block by the seventh difference restoring means and the eighth copying means. apparatus Based on the update content provided from the writing device, an in-vehicle control device capable of updating the stored old program to the new program,
A non-volatile memory having a two-surface configuration of a first non-volatile memory area and a second non-volatile memory area having a plurality of blocks for storing the program; and a volatile memory for temporarily storing data
Third block difference data between the new program to be written to the update target block in the first nonvolatile memory area to be updated and the entire old program in the second nonvolatile memory area, or an update target The fourth block difference data between the new program to be written to the update target block in the second non-volatile memory area and the entire old program in the first non-volatile memory area is transferred to the in-vehicle controller for each block. Send
The program update software of the in-vehicle controller stores the block difference data in the volatile memory, and uses the third block difference data and the entire old program stored in the second nonvolatile memory. A fifth difference restoring means for restoring the new program of the update target block of the first nonvolatile memory;
Using the fourth block difference data and the entire old program stored in the first nonvolatile memory, a sixth program for restoring the new program of the block to be updated in the second nonvolatile memory Differential restoration means,
The new program restored by repeatedly executing the fifth difference restoring means or the sixth difference restoring means is written into the first nonvolatile memory or the second nonvolatile memory. Program update software for in-vehicle control devices. When the new program in the block to be updated in the first nonvolatile memory area to be updated and the old program in the second nonvolatile memory area are the same, the second nonvolatile memory area A seventh copy means for copying the old program of the first non-volatile memory area to the update target block;
When the new program in the block to be updated in the second nonvolatile memory area to be updated and the old program in the first nonvolatile memory area are the same, the first nonvolatile memory area An eighth copy means for copying the old program of the second nonvolatile memory area to the update target block;
The program update software for the in-vehicle control device according to claim 4. The third block difference data and the fourth block difference data include at least a block difference header part including presence / absence information of difference data, and a block difference body part of the difference data body,
When the difference data presence / absence information includes difference data, the fifth difference restoring means and the sixth difference restoring means restore the new program to the update target block,
6. The in-vehicle control device according to claim 5, wherein when the difference data presence / absence information indicates that there is no difference data, the seventh copy unit and the eighth copy unit copy the old program to the update target block. Program update software.

Images