Abstract: A vehicle master device includes at least one processor that is configured to: download rewrite specification data, reprogramming data, and new configuration setting information from a center device upon determining that there is a campaign notification relating to a program update based on a notification from the center device; determine whether an application program is to be rewritten or configuration setting information is to be rewritten based on the rewrite specification data; instruct a rewrite target ECU to rewrite the application program upon determining that the application program is to be rewritten; and instruct the rewrite ECU to rewrite the configuration setting information upon determining that the configuration setting information is to be rewritten.

Abstract: In a vehicle electronic control system, an electronic control device (ECU) is configured to rewrite a program by writing the update data received from the vehicle master device in a non-volatile memory. Incomplete provisional software is written in a write area of the non-volatile memory in the ECU. The vehicle master device includes: a specific mode determination unit that is configured to determine whether a specific mode for controlling a sequence of a program update is set; and a rewrite instruction unit that is configured to instruct the rewrite target ECU to write the update data under the specific mode when the specific mode determination unit determines that the specific mode is set.

Abstract: A vehicle information communication system includes a center apparatus and a vehicle apparatus that includes a group of electronic control units (ECUs) and that sends vehicle configuration information including configuration information on the group of ECUs mounted in the vehicle to the center apparatus via wireless communications. The center apparatus performs a first determination of whether the vehicle configuration information received from the vehicle apparatus matches approved-configuration information registered in an approved-configuration database, and performs a second determination of whether software update data for at least one ECU of the group of ECUs mounted in the vehicle exists in an update database. When both the first and second determinations are true, the center apparatus sends the software update data for at least one ECU of the group of ECUs mounted in the vehicle to the vehicle apparatus via the wireless communications.

Abstract: A user authentication apparatus includes a photographing unit which photographs a two-dimensional code displayed on a user authentication support terminal, wherein the two-dimensional code is formed by encoding at least first identification information that uniquely identifies the user, and second identification information that uniquely identifies all user authentication performed using the user authentication support terminal collectively, into the two-dimensional code, an authentication factor acquisition unit which acquires an authentication factor, a decoding unit which acquires the first identification information and the second identification information by decoding the two-dimensional code, a first identification information inquiry unit which inquires as to an existence of the first identification information by referring to a storage unit, a second identification information collation unit which, when the inquiry issued by the first identification information inquiry unit is successful, reads from t

Abstract: A vehicle information communication system includes a center apparatus and a vehicle apparatus that includes a group of electronic control units (ECUs) and that sends vehicle configuration information including configuration information on the group of ECUs mounted in the vehicle to the center apparatus via wireless communications. The center apparatus performs a first determination of whether the vehicle configuration information received from the vehicle apparatus matches approved-configuration information registered in an approved-configuration database, and performs a second determination of whether software update data for at least one ECU of the group of ECUs mounted in the vehicle exists in an update database. When both the first and second determinations are true, the center apparatus sends the software update data for at least one ECU of the group of ECUs mounted in the vehicle to the vehicle apparatus via the wireless communications.

Abstract: In a vehicle master device, a first device includes an update data acquisition unit that is configured to acquire update data, an update data distribution unit that is configured to distribute the update data acquired by the update data acquisition unit to a rewrite target ECU, a process execution request unit that is configured to request the second device to execute at least a part of a process related to verification of the update data before the update data distribution unit distributes the update data, a processing result acquisition unit that is configured to acquire a processing result from the second device, and a verification unit that is configured to verify the update data using the processing result acquired by the processing result acquisition unit.

Abstract: An electronic control unit includes an installation execution unit that operates at least one of an application program or parameter data stored in a first data storage bank serving as an active bank and rewrites a second data storage bank serving as an inactive bank by writing, to the second data storage bank, update data acquired from an external device, and an activation execution unit that switches the active bank from the first data storage bank to the second data storage bank. The installation execution unit rewrites the second data storage bank during a vehicle being travelable or parked. The activation execution unit switches the active bank from the first data storage bank to the second data storage bank during the vehicle being parked.

Abstract: A vehicle electronic control system includes a vehicle master device that is configured to instruct a rewrite target electronic control unit (ECU) to write update data received from a center device and distribute the update data to the rewrite target ECU, the rewrite target ECU that is configured to write the update data received from the vehicle master device into a non-volatile memory, and a meter device that has an indicator. The vehicle electronic control system further includes a phase specifying unit that is configured to specify a phase of a program update, a display instruction unit that is configured to instruct to display the indicator in a manner corresponding to the phase of the program update specified by the phase specifying unit, and an indicator display control unit that is configured to control to display the indicator according to an instruction from the display instruction unit.

Abstract: In a vehicle program rewrite system, a vehicle master device includes a first progress determination unit that is configured to determine a first progress related to a program rewrite, a first progress transmission unit that is configured to transmit the first progress determined by the first progress determination unit to the center device, a second progress acquisition unit that is configured to acquire a second progress related to the program rewrite from the center device, and a first display instruction unit that is configured to instruct to create a content that is displayable on a display terminal mounted in a vehicle based on the first progress determined by the first progress determination unit and the second progress acquired by the second progress acquisition unit.

Abstract: An electronic control unit includes a first process flag setting unit that is configured to set a first process flag indicative of a progress of a first process that is one of a series of processes related to a program rewrite, a second process flag setting unit that is configured to set a second process flag indicative of a progress of a second process that is an other of the series of processes related to the program rewrite, and a retry point specifying unit that is configured to specify, based on the first process flag and the second process flag, a retry point for resuming the program rewrite when the program rewrite is suspended. The retry point specifying unit is further configured to store an amount of the update data that has been written until the program rewrite was suspended and request the vehicle master device to transfer the update data based on the stored amount of the update data when resuming the program rewrite.

Abstract: A vehicle master device includes a rewrite specification data acquisition unit that is configured to acquire rewrite specification data from outside, a rewrite specification data analysis unit that is configured to analyze the rewrite specification data acquired by the rewrite specification data acquisition unit, a group generation unit that is configured to divide the plurality of rewrite target ECUs to generate a plurality of groups based on the rewrite specification data analyzed by the rewrite specification data analysis unit, and an instruction execution unit that is configured to instruct the plurality of rewrite target ECUs for each group of the plurality of groups generated by the group generation unit to perform at least one of installation, rollback, and activation.

Abstract: An electronic control unit includes an active bank information update unit that is configured to update active bank information indicative of which bank is an active bank between the first data storage bank and the second data storage bank when a program rewrite on the second data storage bank is completed and the vehicle master device gives an instruction for an activation request, an execution condition determination unit that is configured to determine whether an activation execution condition is satisfied, and an execution control unit that is configured to activate the second data storage bank as the active bank based on the active bank information after a restart when the execution condition determination unit determines that the activation execution condition is satisfied.

Abstract: An electronic control unit includes a difference data acquisition unit that is configured to acquire difference data that is data to be written into a data storage area of the electronic control unit, the difference data being a difference between old data and new data, a consistency determination unit that is configured to determine whether the difference data is consistent with the data storage area or storage data stored in the data storage area based on first determination information related to the storage data and second determination information acquired in association with the difference data, an update data restoration unit that is configured to restore update data as the new data using the difference data and the storage data when the consistency determination unit determines that the difference data is consistent, and a data writing unit that is configured to write the update data restored by the update data restoration unit into the data storage area.

Abstract: A vehicle master device is configured to acquire update data from outside and distribute the acquired update data to a rewrite target electronic control unit (ECU). The vehicle master device includes a distribution frequency specifying unit that is configured to specify a distribution frequency of the update data to the rewrite target ECU based on a correspondence relationship between a predetermined vehicle power supply state and transmission restriction information related to distribution of the update data and a vehicle power supply state during updating, and a distribution control unit that is configured to control distribution of the update data according to the distribution frequency specified by the distribution frequency specifying unit.

Abstract: A center device includes an update data storage unit in which new data and new difference data for updating to the new data from old data are stored for, among electronic control units mounted on a vehicle, a target device targeted for data update. The center device generates, using the new data, a first verification value for verifying integrity in the vehicle, and generates, using the new difference data, a second verification value for verifying integrity of the new difference data in the vehicle. The center device generates a package including the new difference data, the first verification values and the second verification values for a plurality of the target devices. The center device generates, using the distribution package, a third verification value for verifying integrity of the distribution package in the vehicle, and transmits the distribution package along with the third verification value to the in-vehicle device.

Abstract: A vehicle master device includes a decryption key storage unit that cannot be read from an outside and that stores a decryption key for generation of a security accesses key used to perform device authentication of a rewrite target electronic control unit. The vehicle master device acquires rewrite specification data from an outside, analyzes the rewrite specification data acquired, extracts a key derivation value corresponding to the rewrite target electronic control unit from an analysis result of the rewrite specification data, and by using the decryption key corresponding to the rewrite target electronic control unit stored in the decryption key storage unit, decrypts the key derivation value extracted, and generate a security accesses key.

Abstract: When configuration information regarding configurations of respective devices are received from electronic control units, the in-vehicle device generates a hash value based on data values of the configuration information, and transmits the hash value to a center device. The center device compares the hash value received from the in-vehicle device with a hash value of configuration information of the vehicle stored in a vehicle-side configuration information storage unit of the center device, and notifies the in-vehicle device of a full data transmission request for transmitting all data values of the configuration information when both of the hash values do not match each other. When the in-vehicle device is notified of the full data transmission request, the in-vehicle device transmits all of the data values of the configuration information to the center device.

Abstract: In a vehicle electronic control system, a vehicle master device includes a vehicle power determination unit that is configured to determine a vehicle power is on, a rewrite-in-progress determination unit that is configured to determine whether rewriting of a program is in progress, a first self-retention power determination unit that is configured to determine whether it is necessary to self-retain power in the vehicle slave device when the vehicle power determination unit determines that the vehicle power is off and when the rewrite-in-progress determination unit determines that rewriting of the program is in progress, and a self-retention power instruction unit that is configured to instruct the vehicle slave device to enable the first self-retention power circuit when the first self-retention power determination unit determines that it is necessary to self-retain the power in the vehicle slave device.

Abstract: A vehicle information communication system including a center device and an in-vehicle device is provided. When pieces of configuration information regarding configurations of respective devices are received from electronic control units, the in-vehicle device transmits a configuration information list including the pieces of configuration information to the center device. The center device includes a configuration information storage unit storing the configuration information list approved with respect a vehicle type, compares the configuration information list received from the in-vehicle device with the configuration information list stored in the configuration information storage unit. When the center device determines that the configuration information list received from the in-vehicle device is disapproved, the center device transmits a presence of abnormality to the in-vehicle device.

Abstract: In a vehicle electronic control system, a second device includes a transfer target file specifying unit that is configured to specify a file, as a transfer target file, including update data to be written into a third device, a first data size specifying unit that is configured to specify a first data size to acquire the transfer target file specified by the transfer target file specifying unit, and an update data distribution unit that is configured to distribute the update data to the third device using a plurality of divided files transferred from the first device. The first device includes an update data transfer unit that is configured to transfer the update data by dividing the transfer target file specified by the transfer target file specifying unit into the plurality of divided files according to the first data size specified by the first data size specifying unit, and transferring the plurality of divided files to the second device.