Abstract: A relay device is provided. The relay device includes: an acquisition unit acquiring data necessary for an upgrade processing from an upgrading tool, which performs the upgrading processing to an ECU connected to a vehicle-mounted network; a relay unit providing the data, via the vehicle-mounted network, to a target ECU which is subject to the upgrade processing; a suspend instructing unit transmitting, via the vehicle-mounted network, a suspend command which instructs the non-target ECU to shift to a suspend state in which a transmission of other data to the non-target ECU via the vehicle-mounted network is suspended in response to a start of the upgrade processing; and a cancel instructing unit instructing, via the vehicle-mounted network, the non-target ECU to cancel the suspend state when the upgrade processing is completed.

Abstract: A data overwriting device includes an overwriting unit that overwrites a part of data stored in a memory, the part in which a difference is generated; a first writing unit that writes first information in a first storage unit when a data overwriting process is completed by the overwriting unit; a second writing unit that writes second information in a second storage unit when confirming that the part of the data overwritten by the overwriting unit includes no error; and a deleting unit that clears the first storage unit storing the first information and the second storage unit storing the second information before the overwriting unit starts executing the data overwriting process.

Abstract: A parallel process apparatus connecting electronic controllers via buses includes: a process request acceptance section that accepts process requests to the electronic controllers; and a process execution section that, while multiple process requests are simultaneously accepted, arbitrates the multiple process requests being accepted, and parallelizes multiple processes in accordance with the multiple process requests.

Abstract: A vehicle system includes: a reprogramming slave device that is an electronic control unit (hereinafter, referred to as ECU) to be a target of updating an update file of a program stored among a plurality of the ECUs; a reprogramming master device that transmits the update file to the reprogramming slave device in response to a request from a terminal operable by a vehicle user to control updating of the program stored in the reprogramming slave device; and a determination unit that determines traveling propriety of a vehicle when the update file is rewritten in the reprogramming slave device. The vehicle device functions as the reprogramming master device, and includes: an obtaining unit that obtains the traveling propriety determined by the determination unit; and a notification command unit that commands a notification medium to notify information of the traveling propriety obtained by the obtaining unit.

Abstract: A vehicle system includes: a reprogramming slave device implemented by an electronic control unit (hereinafter “ECU”) to be a target of updating an update file of a program stored among a plurality of the ECUs; a reprogramming master device that transmits the update file to the reprogramming slave device to control the update of the program stored in the reprogramming slave device according to a request from a terminal operable by a vehicle user; and a determination unit determines the progress of update processing on the update file. A vehicle device functions as the reprogramming master that includes: an obtaining unit for obtaining the progress determined by the determination unit; and a notification command unit for commanding a notification medium to notify the progress obtained by the obtaining unit.

Abstract: A vehicular system includes a master ECU, a first slave ECU, and a second slave ECU. The second slave ECU transmits a storing request to the master ECU on detection of a malfunction. The master ECU transmits a storing instruction for causing diagnostic information to be stored, on reception of the storing request. The first slave ECU generates diagnostic information on the first slave ECU, on reception of the storing instruction from the master ECU. The first slave ECU further stores the generated diagnostic information in a retention storage medium. The retention storage medium is configured to retain validity determination information in a condition where the first slave ECU is not supplied with electric power source.

Abstract: A relay device is provided. The relay device includes: an acquisition unit acquiring data necessary for an upgrade processing from an upgrading tool, which performs the upgrading processing to an ECU connected to a vehicle-mounted network; a relay unit providing the data, via the vehicle-mounted network, to a target ECU which is subject to the upgrade processing; a suspend instructing unit transmitting, via the vehicle-mounted network, a suspend command which instructs the non-target ECU to shift to a suspend state in which a transmission of other data to the non-target ECU via the vehicle-mounted network is suspended in response to a start of the upgrade processing; and a cancel instructing unit instructing, via the vehicle-mounted network, the non-target ECU to cancel the suspend state when the upgrade processing is completed.

Abstract: A gateway device includes a request receiving portion receiving, from diagnosis purpose tools, diagnosis requests for performing malfunction diagnosis to an ECU of a vehicle, an outputting portion outputting the diagnosis request to an in-vehicle LAN, a response receiving portion receiving a diagnosis response output from the ECU to the in-vehicle LAN as a response to the diagnosis request, a transmitting portion transmitting the diagnosis response to corresponding diagnosis purpose tool, and an arbitration portion.

Abstract: An in-vehicle system for communicating with an external tool for storing a tool secret key includes: a communication device; a tool key acquisition device; and a communication controller. The in-vehicle system and an external server for storing external tool information provide a vehicular communication system. The external tool information provides a tool public key and key identification information. The tool public key pairs with the tool secret key. When the external tool requests communication connection with the in-vehicle system, the tool key acquisition device transmits the key identification information to the external server, so that the tool key acquisition device acquires the tool public key from the external server. The communication controller performs cryptographic communication with the external tool using the tool public key.

Abstract: A gateway electronic control unit (ECU) includes an update condition table that indicates a vehicle load state that updates an ECU program corresponding to each of several ECUs. The gateway ECU wirelessly communicates with an external center apparatus to receive an update file. The gateway ECU uses the update condition table to determine whether the current vehicle load state equals a lightly loaded state capable of updating an ECU program or a heavily loaded state incapable of updating an ECU program. If the current vehicle load state is determined to equal the lightly loaded state, the gateway ECU updates an ECU program using the update file received from the center apparatus. If the current vehicle load state is determined to equal the heavily loaded state, the gateway ECU performs environment improvement control based on the update condition table to change the current vehicle load state to the lightly loaded state.

Abstract: A vehicular data communication system includes an authentication device for authenticating an external tool connected to a bus, an authentication control device for determining whether an external tool is authenticated by the authentication device and for setting an authenticated state to permit a data communication between the external tool and an access target ECU on the bus upon determining that the external tool is authenticated by the authentication device, and an authentication maintain device for maintaining the authenticated state within a predetermined period after the authenticated state is set by the authentication control device.

Abstract: A vehicular system includes a master ECU, a first slave ECU, and a second slave ECU. The second slave ECU transmits a storing request to the master ECU on detection of a malfunction. The master ECU transmits a storing instruction for causing diagnostic information to be stored, on reception of the storing request. The first slave ECU generates diagnostic information on the first slave ECU, on reception of the storing instruction from the master ECU. The first slave ECU further stores the generated diagnostic information in a retention storage medium. The retention storage medium is configured to retain validity determination information in a condition where the first slave ECU is not supplied with electric power source.

Abstract: A vehicle-mounted control system to prevent an execution of an improper request of a center apparatus is provided. The vehicle-mounted control system executes an impropriety determination process, which determines whether a center request signal is an improper signal, based on circumstance information representing a circumstance where a vehicle is placed. Accordingly, it may be possible to determine whether the center request signal is an improper signal transmitted by an operation of a center apparatus by an improper person. When it is determined as the improper center request signal (S2: No), a vehicle control based on the center request signal is not executed.

Abstract: A gateway device includes a request receiving portion, a request storage, a request conversion portion, a request transmitting portion, a response receiving portion, a response storage, a response conversion portion, and a response transmitting portion. When receiving, from a first diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to an ECU equipped to a vehicle, the gateway device relays a diagnosis request and a diagnosis response between the first diagnosis purpose tool and the ECU. When receiving, from a second diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to the ECU equipped to the vehicle, the gateway device relays a diagnosis request and a diagnosis response between the second diagnosis purpose tool and the ECU after converting identification informations of the diagnosis request and the diagnosis response.

Abstract: An in-vehicle system comprising a gateway between multiple networks is disclosed. One of the networks specifies that when a source apparatus connected to the one of the networks sends a request message to a destination apparatus connected to another one of the networks, the source apparatus should time-out if the source apparatus does not receive a response message within a specified time after sending the request message. Upon receipt of the request message, the gateway relays the request message to the destination apparatus and sends a wait request code to the source apparatus to instruct the source apparatus to wait by extending the specified time.

Abstract: A gateway ECU includes an update condition table that indicates a vehicle load state capable of updating an ECU program corresponding to each of several ECUs. The gateway ECU wirelessly communicates with an external center apparatus to receive an update file. The gateway ECU uses the update condition table to determine whether the current vehicle load state equals a lightly loaded state capable of updating an ECU program or a heavily loaded state incapable of updating an ECU program. If the current vehicle load state is determined to equal the lightly loaded state, the gateway ECU updates an ECU program using the update file received from the center apparatus. If the current vehicle load state is determined to equal the heavily loaded state, the gateway ECU performs environment improvement control based on the update condition table to change the current vehicle load state to the lightly loaded state.

Abstract: A gateway device includes a request receiving portion receiving, from diagnosis purpose tools, diagnosis requests for performing malfunction diagnosis to an ECU of a vehicle, an outputting portion outputting the diagnosis request to an in-vehicle LAN, a response receiving portion receiving a diagnosis response output from the ECU to the in-vehicle LAN as a response to the diagnosis request, a transmitting portion transmitting the diagnosis response to corresponding diagnosis purpose tool, and an arbitration portion.

Abstract: A gateway device includes a request receiving portion, a request storage, a request conversion portion, a request transmitting portion, a response receiving portion, a response storage, a response conversion portion, and a response transmitting portion. When receiving, from a first diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to an ECU equipped to a vehicle, the gateway device relays a diagnosis request and a diagnosis response between the first diagnosis purpose tool and the ECU. When receiving, from a second diagnosis purpose tool, a diagnosis request for performing a malfunction diagnosis to the ECU equipped to the vehicle, the gateway device relays a diagnosis request and a diagnosis response between the second diagnosis purpose tool and the ECU after converting identification informations of the diagnosis request and the diagnosis response.

Abstract: A bus monitoring security device is connected to a bus, which includes a tool side bus having a tool connection terminal and an ECU side bus. The ECU side bus is coupled with an ECU, and the tool side bus is coupled with a tool capable of communicating with the ECU via the tool connection terminal. The tool side bus and the ECU side bus are separately coupled with the bus monitoring security device. The bus monitoring security device includes: a controller for determining whether the tool being to access the ECU is connected to the ECU side bus, and for restricting transmission and reception of data between the tool and the ECU when the controller determines that the tool is connected to the ECU side bus.

Abstract: A diagnostic tool sends a request format designating a virtual address, which is different from a real address for an EEPROM. When a microcomputer determines that an address designated by the received request format is a virtual address assigned to the EEPROM, the microcomputer executes a process, which is designated by the received request format, with respect to the virtual address assigned to the EEPROM.