US 12,411,680 B2
Control system, control device, control program update method, and non-transitory storage medium
Tomoki Shibutani, Nisshin (JP); Keita Kinoshita, Toyota (JP); Kazuyoshi Shiohara, Nagoya (JP); and Masaki Miyake, Toyota (JP)
Assigned to TOYOTA JIDOSHA KABUSHIKI KAISHA, Toyota (JP)
Filed by TOYOTA JIDOSHA KABUSHIKI KAISHA, Toyota (JP)
Filed on May 15, 2023, as Appl. No. 18/317,135.
Claims priority of application No. 2022-108367 (JP), filed on Jul. 5, 2022.
Prior Publication US 2024/0012634 A1, Jan. 11, 2024
Int. Cl. G06F 9/445 (2018.01); G06F 8/61 (2018.01); G06F 8/65 (2018.01); G06F 8/71 (2018.01); H04L 67/125 (2022.01)
CPC G06F 8/65 (2013.01) [G06F 8/61 (2013.01); G06F 8/71 (2013.01); H04L 67/125 (2013.01)] 9 Claims
OG exemplary drawing
 
1. A control system comprising a plurality of control devices, each of the control devices including a plurality of storage areas, each of the control devices being configured to:
execute a control program stored in a first storage area set as an execution storage area, the first storage area being any storage area among the plurality of storage areas;
execute a switching preparation in synchronization with other control devices of the plurality of control devices, the switching preparation being performed when each of the control devices updates the control program in a state in which an updated version of the control program has been installed on a writing plane of each of the control devices, the writing plane being a second storage area other than the first storage area, the switching preparation being a preparation for a setting of the writing plane as the execution storage area;
initiate a synchronized shutdown of all of the control devices only after each one of the control devices has completed the switching preparation; and
set the writing plane as the execution storage area at a next startup only when all the control devices are shut down in a state in which the switching preparation has been completed in all the control devices,
wherein the control devices include a first control device, a second control device, and a third control device,
wherein the first control device is configured to
receive a shutdown request from a user,
when the updated versions of the control programs are installed in all the first control device, the second control device, and the third control device at a time of reception of the shutdown request by the first control device, transmit a switching instruction to each of the second control device and the third control device, and
start the switching preparation after the switching instruction is transmitted, and
wherein each of the second control device and the third control device is configured to start the switching preparation when the switching instruction is received.