| CPC G06F 8/65 (2013.01) [G06F 8/60 (2013.01)] | 5 Claims |
|
1. An over-the-air (OTA) master comprising one or more processors configured to:
receive, from a center, first type update data for a first electronic control unit on which a first type non-volatile memory having one storage area is mounted, second type update data for a second electronic control unit on which a second type non-volatile memory having two storage areas is mounted, and an order of transference and activation of update data based on memory type, the first electronic control unit and the second electronic control unit being included in a plurality of electronic control units mounted on a vehicle; and
control software update for a plurality of target electronic control units of which pieces of software are to be updated among the electronic control units mounted on the vehicle, based on the first type update data, the second type update data, and the order, the software update for the target electronic control units including:
transference and activation of the second type update data to and on the target electronic control units;
transference and activation of the first type update data to and on the target electronic control units, after performing the transference and the activation of the second type update data; and
transmitting an instruction that sets a stop flag and causes the second electronic control unit on which the second type non-volatile memory is mounted to temporarily wait to start after the transference and the activation of the second type update data to and on the target electronic control units are complete and until the transference and the activation of the first type update data to and on the target electronic control units are complete such that target electronic control units start simultaneously,
wherein the second electronic control unit on which the second type non-volatile memory is mounted starts after the transference and the activation of the first type update data to and on the target electronic control units are complete, and
wherein the instruction that sets the stop flag is transmitted to the second target electronic control unit via an in-vehicle network after completion of the transference and activation of the second type update data, and the second target electronic control unit is configured to enter and remain in a temporary standby state in which execution of the updated software is suppressed, independently of a power supply state of the vehicle, until a release signal is received from the one or more processors after confirming completion of the transference and activation of the first type update data on the target electronic control units.
|