| CPC G06F 8/65 (2013.01) [B60R 16/023 (2013.01); B60R 16/0231 (2013.01); B60R 16/03 (2013.01); B60W 60/001 (2020.02); G06F 3/0604 (2013.01); G06F 3/0659 (2013.01); G06F 3/0673 (2013.01); G06F 8/654 (2018.02); G06F 8/658 (2018.02); G06F 9/445 (2013.01); G06F 16/2365 (2019.01); G06F 16/2379 (2019.01); G06F 21/44 (2013.01); G06F 21/51 (2013.01); G07C 5/0808 (2013.01); H04W 4/14 (2013.01); H04W 4/48 (2018.02); G06F 2221/033 (2013.01)] | 38 Claims |

|
1. A vehicle electronic control system mounted to a vehicle, comprising:
a vehicle master device that is configured to distribute update data to a rewrite target electronic control unit (ECU); and
a plurality of vehicle slave devices physically separated from one another and connected commonly to a vehicle battery, wherein each respective vehicle slave device is the rewrite target ECU and has a first self-retention power circuit as a part of the each respective vehicle slave device, the each respective vehicle slave device being physically separated from the vehicle master device and the vehicle battery, configured to receive power from the vehicle battery, and connected to the vehicle master device via a communication bus,
the each respective vehicle slave device is in an active state by receiving the power from the vehicle battery when a vehicle power is off and the first self-retention power circuit thereof is enabled, and
the each respective vehicle slave device is in a sleep state or a stop state when the vehicle power is off and the first self-retention power circuit thereof is not enabled, wherein
the vehicle master device includes:
a vehicle power determination unit that is configured to determine whether the vehicle power is on;
a rewrite-in-progress determination unit that is configured to determine whether rewriting of a program is in progress;
a first self-retention power determination unit that is configured to determine whether it is necessary to self-retain power in the each respective vehicle slave device (i) when the vehicle power determination unit determines that the vehicle power is off, (ii) when the rewrite-in-progress determination unit determines that rewriting of the program is in progress, and (iii) the vehicle power is turned off during the rewriting of the program; and
a self-retention power instruction unit that is configured to instruct the plurality of vehicle slave devices by, on a vehicle slave device by vehicle slave device basis, instructing the each respective vehicle slave device to enable the first self-retention power circuit when the first self-retention power determination unit determines that it is necessary to self-retain the power in the each respective vehicle slave device, and
the each respective vehicle slave device includes:
an instruction determination unit that is configured to determine whether an instruction for enabling the first self-retention power circuit is given from the vehicle master device; and
a first self-retention power enabling unit that is configured to enable the first self-retention power circuit thereof when the instruction determination unit determines that the instruction for enabling the first self-retention power circuit is given.
|