US 12,260,209 B2
In-vehicle system and control device
Kazuyoshi Shiohara, Nagoya (JP); Masaki Miyake, Toyota (JP); and Takayuki Fujimoto, Seto (JP)
Assigned to TOYOTA JIDOSHA KABUSHIKI KAISHA, Toyota (JP)
Filed by TOYOTA JIDOSHA KABUSHIKI KAISHA, Toyota (JP)
Filed on Feb. 3, 2023, as Appl. No. 18/164,181.
Claims priority of application No. 2022-059407 (JP), filed on Mar. 31, 2022.
Prior Publication US 2023/0315429 A1, Oct. 5, 2023
Int. Cl. G06F 8/65 (2018.01); G07C 5/00 (2006.01)
CPC G06F 8/65 (2013.01) [G07C 5/008 (2013.01)] 9 Claims
OG exemplary drawing
 
1. An in-vehicle system comprising
a plurality of control devices, each of which comprises at least one processor and a memory, and is configured to:
set, as a start storage area, any one of a plurality of storage areas set as storage areas that store software; and
be started using the software stored in the start storage area,
the control devices including a master control device and a slave control device,
the master control device being configured to, when software stored in a storage area different from the start storage area is updated in the slave control device, transmit, to the slave control device, a switching instruction for setting the storage area that stores the updated software as the start storage area,
the slave control device being configured to
implement, when receiving the switching instruction, setting of the start storage area at a time of a next start, and
request, at every start, the master control device to execute consistency determination processing for determining whether pieces of identification information of the software stored in the start storage area are consistent between the control devices, and
the master control device being configured to, when receiving the request for execution of the consistency determination processing from the slave control device, execute the consistency determination processing, and, after the master control device executes the consistency determination processing in response to execution of a start operation for starting the in-vehicle system, execute the consistency determination processing again upon receiving the request for the execution of the consistency determination processing from the slave control device during an operation of the in-vehicle system.