US 11,656,771 B2
Electronic control unit, vehicle electronic control system, activation execution control method and computer program product
Yuzo Harata, Kariya (JP); Kazuhiro Uehara, Kariya (JP); Mitsuyoshi Natsume, Kariya (JP); and Takuya Kawasaki, Kariya (JP)
Assigned to DENSO CORPORATION, Kariya (JP)
Filed by DENSO CORPORATION, Kariya (JP)
Filed on Feb. 8, 2021, as Appl. No. 17/170,104.
Application 17/170,104 is a continuation of application No. PCT/JP2019/031453, filed on Aug. 8, 2019.
Claims priority of application No. JP2018-151423 (JP), filed on Aug. 10, 2018; and application No. JP2019-129961 (JP), filed on Jul. 12, 2019.
Prior Publication US 2021/0165585 A1, Jun. 3, 2021
Int. Cl. G06F 3/06 (2006.01); B60W 60/00 (2020.01); B60R 16/023 (2006.01); G06F 8/65 (2018.01); G06F 8/71 (2018.01)
CPC G06F 3/0625 (2013.01) [B60R 16/0231 (2013.01); B60W 60/001 (2020.02); G06F 3/0653 (2013.01); G06F 3/0679 (2013.01); G06F 8/65 (2013.01); G06F 8/71 (2013.01)] 6 Claims
OG exemplary drawing
 
1. An electronic control unit, comprising:
a non-volatile memory that has a double bank structure with a first data storage bank and a second data storage bank, the electronic control unit configured to receive update data from a vehicle master device and to write the received update data into the second data storage bank to rewrite a program on the second data storage bank while executing a program on the first data storage bank; and
at least one processor programmed to:
update active bank information indicative of which bank is an active bank between the first data storage bank and the second data storage bank when the vehicle master device gives an instruction for an activation request to activate the second storage bank and the program rewrite on the second data storage bank is completed,
determine whether an activation execution condition is satisfied;
activate the second data storage bank as the active bank based on the active bank information after restarting the electronic control unit when determining that the activation execution condition is satisfied; and
notify the vehicle master device of a negative response as notification information when the vehicle master device gives the instruction for an activation request but at least one of two conditions (1) the program rewrite on the second data storage bank is completed and (2) data verification regarding the rewriting is positive is not met.