Abstract: A vehicle control system includes a vehicle control unit which includes a non-volatile program storage unit and controls a function unit installed in a vehicle by executing a program stored in the program storage unit and a master control unit which is connected with the vehicle control unit, and the master control unit includes a non-volatile master storage unit, stores writing data for writing the program to the program storage unit in the master storage unit, transmits a wake-up request to the vehicle control unit, instructs the vehicle control unit which responds to the wake-up request to make transition to a first mode as an action mode for program writing, and executes a writing process of writing the program to the program storage unit provided to the vehicle control unit, on which transition to the first mode occurs, based on the writing data.

Abstract: A vehicle control system includes plural vehicle control units and a master control unit which is connected with the plural vehicle control units to be capable of communication, the vehicle control unit includes a non-volatile program storage unit that has: a rewritable program storage area which stores a program for controlling a function unit installed in a vehicle; and an information storage area which stores attribute information corresponding to an attribute of the vehicle control unit, the master control unit includes a non-volatile master storage unit which stores writing data for writing the program to the program storage unit, and the writing data include vehicle control unit information for performing communication by designating the vehicle control unit and the attribute information of the vehicle control unit.

Abstract: A vehicle control system includes a vehicle control unit which includes a first memory and controls a function unit installed in a vehicle by executing a program stored in the memory and a master control unit which is connected with the vehicle control unit, and the master control unit includes a second memory, stores writing data for writing the program to the first memory in the second memory, is capable of executing a writing process of writing the program to the first memory provided to the vehicle control unit based on the writing data, selects a processing target control unit, which is set as a target of the writing process, from plural vehicle control units based on a predetermined selection condition, transmits a wake-up request to the processing target control unit, and subsequently performs the writing process for the processing target control unit.

Abstract: A vehicle manufacturing method includes a placement step of placing, in a vehicle, a vehicle control unit and a master control unit, the vehicle control unit including a non-volatile program storage unit and controlling a function unit installed in the vehicle by executing a program stored in the program storage unit, a wire-connection step of connecting the master control unit with plural vehicle control units by a communication wire, and a writing step of executing a writing process of writing the program to the program storage unit for the vehicle control unit which is connected with the master control unit by the communication wire.

Abstract: An OTA manager, when an activation switch of a vehicle is OFF, transmits a unique identifier of each electronic control unit acquired before the activation switch was switched from ON to OFF to an OTA server via a communication line and receives update data from the OTA server via the communication line, and after the activation switch was switched from OFF to ON, the OTA manager makes a comparison between the identifiers transmitted to the OTA server before the activation switch was switched from OFF to ON and the identifiers acquired after the activation switch was switched from OFF to ON.

Abstract: A software update device is provided with an update control unit that that performs a software update using a new software version supplied over a network. If a software update is to be performed for a first electronic control device and a second electronic control device that operates in cooperation with the first electronic control device, the update control unit performs the software update for the first electronic control device such that the first electronic control device after the software update has been performed is capable of selectively executing the operation logic of a first new software version and the operation logic of a first old software version.

Abstract: A software update device is provided with an update control unit that performs a software update using a new software version supplied over a network. The update control unit installs a first new software version on a first electronic control device prior to installing a second new software version on a second electronic control device, and activates the first new software version installed on the first electronic control device either after activation of the second new software version installed on the second electronic control device has started or after it is ascertained that activation of the second new software version installed on the second electronic control device has been normally completed.

Abstract: A software update device is provided with an update control unit that performs a software update using a new software version supplied over a network. The update control unit installs a first new software version on a first electronic control device prior to installing a second new software version on a second electronic control device, and activates the first new software version installed on the first electronic control device either after activation of the second new software version installed on the second electronic control device has started or after it is ascertained that activation of the second new software version installed on the second electronic control device has been normally completed.

Abstract: A program update control apparatus includes an obtaining unit configured to obtain a communication traffic volume on a first communication network to which a plurality of control units are connected, a rewrite control unit configured to transmit first rewrite data for performing rewrite of a program of a first control unit to the first control unit through the first communication network to perform control to rewrite the program of the first control unit, and a determination unit configured to determine, based on the communication traffic volume on the first communication network, a data volume of the first rewrite data per unit time which is transmitted by the rewrite control unit to the first control unit through the first communication network such that the communication traffic volume on the first communication network at a time when the rewrite control unit transmits the first rewrite data is to be a predetermined value.

Abstract: A program update control apparatus comprises a rewriting control unit for performing control over rewriting of a program executed by a mobile object control unit for controlling at least part of a mobile object with a new program, a retrieving unit for retrieving information related to the new program and a power amount required for the rewriting from an external apparatus, and a power source information retrieving unit for retrieving a remaining capacity of a battery of the mobile object used for the rewriting, wherein the rewriting control unit starts the rewriting based on information related to a power amount required for the rewriting, the power source information retrieving unit retrieves a remaining capacity of the battery during the rewriting, and the rewriting control unit determines whether to continue the rewriting based on a remaining capacity of the battery retrieved and the power amount required for the rewriting.

Abstract: A program update control apparatus comprises a rewriting control unit configured to perform control of rewriting a program, which is executed by a mobile object control unit configured to control at least a part of a mobile object, to a new program; and an acquisition unit configured to acquire the new program from an external apparatus, wherein the rewriting control unit is configured: before starting the rewriting, to request a user to consent to execution of the rewriting, and to hold consent information, which indicates that the user has consented to execution of the rewriting, and when activated in response to a power supply being on, to cause the rewriting to be executed without requesting the user to consent to execution of the rewriting, on the condition that the consent information is held.

Abstract: A communication apparatus is provided in a movable object, and communicates with an external server. The communication apparatus includes a communication control unit for controlling communication with the server, and controlling communication with a movable object control unit controlling the movable object and communication with an update control unit controlling program update of the movable object control unit. The communication control unit performs, when control on the movable object control unit is to be performed from the server, control to receive a first startup request and a command for the movable object control unit from the server, start up and control the movable object control unit, and performs, when control related to program update of the movable object control unit is to be performed from the server, control to receive a second startup request for the update control unit from the server, and start up the update control unit.

Abstract: A software update device is provided with an update control unit that that performs a software update using a new software version supplied over a network. If a software update is to be performed for a first electronic control device and a second electronic control device that operates in cooperation with the first electronic control device, the update control unit performs the software update for the first electronic control device such that the first electronic control device after the software update has been performed is capable of selectively executing the operation logic of a first new software version and the operation logic of a first old software version.

Abstract: The control system comprises: a mobile object control unit configured to control a mobile object; an update control unit configured to control reception of an update program for the mobile object control unit from an external device and to control an update of the mobile object control unit with the update program; and a notification control unit configured to notify a user of information on a function to be limited in the mobile object that occurs during the update of the mobile object control unit, wherein, for the update program, identification information is given for identifying a function to be limited in the mobile object during the update of the mobile object control unit with the update program, and the notification control unit, based on the identification information given to the update program, controls notification to the user of the information on the function to be limited.

Abstract: Provided is a control system, including: an acquisition unit, configured to acquire, from an mobile object, version information of each of a plurality of programs for controlling each of a plurality of mobile object control units included in the mobile object; a storage control unit, configured to store the acquired version information; a selection unit, configured to select an update program of at least one mobile object control unit among the plurality of mobile object control units; and an output control unit, configured to output the selected update program to the mobile object, wherein the selection unit is configured to select update program of at least one mobile object control unit among a plurality of mobile object control units included in the mobile object, based on the newly acquired version information, when the newly acquired version information newly acquired is not consistent with the stored version information.

Abstract: A control system includes a movable object control unit configured to control a movable object, an update control unit configured to control a program update of the movable object control unit, and a communication path that is a path for the movable object control unit and the update control unit to perform an information communication, a path that is connected to an external diagnosis apparatus configured to perform a diagnosis of the movable object control unit and used for transmitting information of the movable object to the external diagnosis apparatus and the communication path are at least partially in common, and the control system includes a restriction control unit configured to restrict, when the program update and the diagnosis of the movable object control unit by the external diagnosis apparatus are to be performed, one of the diagnosis by the external diagnosis apparatus and the program update.

Abstract: Provided is a control system, including: a mobile object control unit configured to control a mobile object; an update control unit configured to receive an update program of the mobile object control unit from an external apparatus, and update the mobile object control unit with the update program; an instruction acquisition control unit configured to perform control to acquire a user instruction indicating that the update of the mobile object control unit with the update program is not executed; and a determination unit configured to determine whether an updatable condition is satisfied, which is a determination condition for determining the mobile object is in an updatable state or not, based on at least either of a driveline state of the mobile object or an opening or closing state of a door installed in the mobile object.

Abstract: A software updating apparatus includes an update control section that performs a software update for each of a plurality of electronic control units mounted in a vehicle, by using new versions of software supplied via a network, and an update mode determining section that selectively determines an update mode used when performing the software update, from among a parallel update mode and a serial update mode. The update control section performs the software update for each of the plurality of electronic control units based on the update mode determined by the update mode determining section.

Abstract: An OTA manager, when an activation switch of a vehicle is OFF, transmits a unique identifier of each electronic control unit acquired before the activation switch was switched from ON to OFF to an OTA server via a communication line and receives update data from the OTA server via the communication line, and after the activation switch was switched from OFF to ON, the OTA manager makes a comparison between the identifiers transmitted to the OTA server before the activation switch was switched from OFF to ON and the identifiers acquired after the activation switch was switched from OFF to ON.

Abstract: A software updating device according to an aspect includes: an apparatus controller in which software for controlling at least some of apparatuses mounted in a vehicle is installed; a communicator configured to communicate with an external device; an update controller configured to update the software installed in the apparatus controller according to communication with the external device through the communicator; and a communication state manager configured to manage a communication state between the communicator and the external device, wherein the update controller curbs communication in states other than a predetermined communication state on the basis of a communication history managed by the communication state manager.