Abstract: In a vehicle information communication system, a center device includes an individual vehicle configuration information storage unit in which configuration information transmitted from a plurality of vehicles is stored in such a form that transmission timings are specifiable, a campaign information storage unit in which campaign identification information and target vehicle identification information for identifying data update target vehicles are stored as campaign information related to data update for vehicle. The center device refers to the campaign storage unit and the individual vehicle configuration information storage unit, and when there is no transmission of the configuration information from the target vehicle for a predetermined period of time, transmits a message for urging data update to the in-vehicle device of the target vehicle.

Abstract: A vehicle communication system is configured to receive vehicle configuration information from a vehicle and determine whether there is campaign information, generate campaign notification information for the vehicle, manage a generation state of the campaign information, and deliver the campaign notification information to the vehicle. The vehicle communication system includes a center apparatus in which an application program that implements functions employs a serverless architecture. When an in-vehicle system transmits a first request including vehicle information to the center apparatus, the center apparatus transmits an intermediate response including a job ID to the in-vehicle system. When receiving the intermediate response, the in-vehicle system transmits a response request of a final response corresponding to the first request to the center apparatus as a second request to which the job ID is assigned.

Abstract: A distribution server distributes update data of software for an in-vehicle device to vehicles via a wireless communication network. The distribution server includes a processor. The processor distributes the update data encrypted with a common key to the vehicles. The processor transmits the common key encrypted by a session key method to each of the vehicles.

Abstract: A center device that manages data to be written in an electronic control device and performs, by an application program, functions to transmit update data to a vehicle by wireless communication is provided. An application program implementing at least one of the functions adopts a serverless architecture. The application program is activated upon occurrence of an event and is dynamically allocated with a resource in an on-demand manner for execution of a code of the application program. The resource is released when the execution of the code is terminated. The center device is configured to receive vehicle configuration information and determine whether there is campaign information; generate campaign notification information; manage a generation state of the campaign notification information; and distribute the campaign notification information.

Abstract: A distribution system includes a vehicle that includes an in-vehicle network configured by in-vehicle devices, and a distribution server that distributes update data of software for the in-vehicle devices to the vehicle. Updating the software with the update data is performed on a condition that a configuration of the in-vehicle network is normal. The distribution server includes a processor and a storage unit that stores normal configuration information that indicates a normal configuration of the in-vehicle network. The vehicle transmits configuration information on the in-vehicle network to the distribution server. The processor notifies, when the configuration of the in-vehicle network is determined not to be normal, a user of the vehicle that the configuration of the in-vehicle network is not normal.

Abstract: A vehicle master device includes a rewrite target specifying unit that is configured to identify a plurality of rewrite target ECUs, a rewrite completion determination unit that is configured to determine whether a program rewrite is completed for all the plurality of rewrite target ECUs specified by the rewrite target specifying unit, an activation executable determination unit that is configured to determine whether activation is executable when the rewrite completion determination unit determines that the program rewrite is completed for all the plurality of rewrite target ECUs, and an activation request instruction unit that is configured to instruct all the plurality of rewrite target ECUs at the same time to perform the activation when the activation executable determination unit determines that activation is executable.

Abstract: An electronic control unit diagnoses the electronic control unit via wired connection or wireless from an outside of a vehicle and rewrites the electronic control unit via the wire or the wireless from the outside of the vehicle, based on a program acquired from the outside of the vehicle via the wire or the wireless.

Abstract: A first package corresponding to a first system and a second package corresponding to a second system are downloaded from a center device, and an update data is extracted from the first package and the second package. An electronic control device as a write target installs the update data and activates the update data after an install of the update data is completed. All electronic control devices as a first write target corresponding to the first system and all electronic control devices as a second write target corresponding to the second system are instructed at a same timing to activate the update data after completing the install of the update data in all the electronic control devices.

Abstract: A center device manages data to be written in an electronic control device mounted on a vehicle and performs, by an application program, a plurality of functions to transmit update data to the vehicle by wireless communication. An application program implementing at least one of the functions adopts a serverless architecture. The application program is activated upon occurrence of an event and is dynamically allocated with a resource in an on-demand manner for execution of a code of the application program. The resource allocated to the application program is released when the execution of the code is terminated.

Abstract: A vehicle master device includes a rewrite specification data acquisition unit that is configured to acquire rewrite specification data from outside, a rewrite specification data analysis unit that is configured to analyze the rewrite specification data acquired by the rewrite specification data acquisition unit, a rewrite target specifying unit that is configured to identify a rewrite target ECU and a non-rewrite target ECU based on an analysis result by the rewrite specification data analysis unit, an installability determination unit that is configured to determine whether installation is feasible for the rewrite target ECU, and a state transition control unit that is configured to control at least one non-rewrite target ECU to be in a stop state, a sleep state, or a power saving operating state when the installability determination unit determines that the installation is feasible.

Abstract: A center device includes an update data storage unit in which new data and new difference data for updating to the new data from old data are stored for, among electronic control units mounted on a vehicle, a target device targeted for data update. The center device generates, using the new data, a first verification value for verifying integrity in the vehicle, and generates, using the new difference data, a second verification value for verifying integrity of the new difference data in the vehicle. The center device generates a package including the new difference data, the first verification values and the second verification values for a plurality of the target devices. The center device generates, using the distribution package, a third verification value for verifying integrity of the distribution package in the vehicle, and transmits the distribution package along with the third verification value to the in-vehicle device.

Abstract: A center device is configured to acquire software information of an ECU from a vehicle side, determine whether availability of update data for a vehicle based on the acquired software information, and transmit the campaign information to a master device when a vehicle condition is determined to be a contion suitable for an update. The master device is configured to download a distribution package from the center device when the vehicle condition is determined to be a condition in which the distribution package is downloadable.

Abstract: A vehicle master device includes a cancellation request determination unit that is configured to determine whether a cancellation request is generated during program rewriting from an old program to a new program in response to distributing the update data to the rewrite target ECU by the update data distribution unit, a rollback method specifying unit that is configured to, when the cancellation request determination unit determines that the cancellation request is generated, specify a rollback method for returning the rewrite target ECU to a state where writing of the update data has not yet started in accordance with a memory type of the non-volatile memory of the rewrite target ECU and a data type of the update data of the new program or the old program, and a rollback execution unit that is configured to instruct the rewrite target ECU to execute a rollback according to the rollback method specified by the rollback method specifying unit and have the rewrite target ECU operate with the old program.

Abstract: In a vehicle electronic control system, an electronic control device (ECU) is configured to rewrite a program by writing the update data received from the vehicle master device in a non-volatile memory. Incomplete provisional software is written in a write area of the non-volatile memory in the ECU. The vehicle master device includes: a specific mode determination unit that is configured to determine whether a specific mode for controlling a sequence of a program update is set; and a rewrite instruction unit that is configured to instruct the rewrite target ECU to write the update data under the specific mode when the specific mode determination unit determines that the specific mode is set.

Abstract: A vehicle master device includes at least one processor that is configured to: download rewrite specification data, reprogramming data, and new configuration setting information from a center device upon determining that there is a campaign notification relating to a program update based on a notification from the center device; determine whether an application program is to be rewritten or configuration setting information is to be rewritten based on the rewrite specification data; instruct a rewrite target ECU to rewrite the application program upon determining that the application program is to be rewritten; and instruct the rewrite ECU to rewrite the configuration setting information upon determining that the configuration setting information is to be rewritten.

Abstract: A vehicle electronic control system includes a mode determination unit that is configured to determine whether a customization mode for a screen display related to an approval to a program update is set through a user's customization operation, and a screen display instruction unit that is configured to instruct the display terminal to display a progress screen of the program update according to a current update phase and a setting of the customization mode when the mode determination unit determines that the customization mode is set and instruct the display terminal to display the progress screen of the program update according to the current update phase and an initial setting when the mode determination unit determines that the customization mode is not set. The display terminal is configured to display the progress screen of the program update as instructed by the screen display instruction unit.

Abstract: A vehicle master device includes a rewrite specification data acquisition unit that is configured to acquire rewrite specification data from outside, a rewrite specification data analysis unit that is configured to analyze the rewrite specification data acquired by the rewrite specification data acquisition unit, a group generation unit that is configured to divide the plurality of rewrite target ECUs to generate a plurality of groups based on the rewrite specification data analyzed by the rewrite specification data analysis unit, and an instruction execution unit that is configured to instruct the plurality of rewrite target ECUs for each group of the plurality of groups generated by the group generation unit to perform at least one of installation, rollback, and activation.

Abstract: An electronic control system for vehicle includes a center device that manages a program update of a vehicle, and a vehicular master device that is communicable with the center device. The center device, responsive to a user giving approval for program update by using a device not being a possession owned by the user, receives approval information of the user, and stores and manages the approval information in association with vehicle information of the user. The center device transmits the approval information to the user's vehicle side. When the vehicular master device receives the approval information, the vehicular master device performs rewriting of the program.

Abstract: A display control device includes a cancellation detection unit that is configured to detect a cancellation regarding a program rewrite from first update data stored in the rewrite target ECU to second update data acquired from an external device, a write instruction unit that is configured to distribute the second update data to the rewrite target ECU and instruct the rewrite target ECU to write the second update data thereinto, and a notification instruction unit that is configured to give an instruction for notification of a progress regarding the program rewrite. The notification instruction unit is further configured to give the instruction to make the notification of the progress regarding the program rewrite in a first manner when the write instruction unit is distributing the second update data, and give the instruction to make the notification of the progress regarding the program rewrite in a second manner when the cancellation detection unit detects the cancellation.

Abstract: An electronic control unit includes a first process flag setting unit that is configured to set a first process flag indicative of a progress of a first process that is one of a series of processes related to a program rewrite, a second process flag setting unit that is configured to set a second process flag indicative of a progress of a second process that is an other of the series of processes related to the program rewrite, and a retry point specifying unit that is configured to specify, based on the first process flag and the second process flag, a retry point for resuming the program rewrite when the program rewrite is suspended. The retry point specifying unit is further configured to store an amount of the update data that has been written until the program rewrite was suspended and request the vehicle master device to transfer the update data based on the stored amount of the update data when resuming the program rewrite.