JP2018036745A - Update device for software and update method for software - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent software from being updated against an intention of an operator.SOLUTION: A determination part 1331 is configured to, when at least one of the start and stop of an engine 170 occurs, determine whether or not an update program is stored in a storage part 132. A display part 111 is configured to, when it is determined that the update program is stored in the storage part 132 by the determination part 1331, display an update notification to promote the update of the update program. An operation part 112 is configured to receive an instruction indicating whether or not to permit the update of the software input by an operator on the basis of the update notification. An update processing part 1332 is configured to, only when the operation part 112 receives the instruction to permit the update of the software, update the software by the update program.SELECTED DRAWING: Figure 2

Description

  The present invention relates to a technique for updating software of a work machine.

  In recent years, a technique for distributing a software update program to a remote work machine using a communication line and causing the work machine to update the software is known.

  In Patent Document 1, when the work vehicle 11 enters a predetermined state, the work vehicle 11 inquires the management station 14 about the presence or absence of the latest control program, the management station 14 searches for the latest control program, and the latest control. If there is a program, the management station 14 distributes the latest control program to the work vehicle 11, and the work vehicle 11 discloses a technique for rewriting software.

JP 2002-268906 A

  However, in Patent Document 1, the engine starting time is adopted as a specific state. For this reason, Patent Document 1 has a problem that rewriting of the latest control program is started against the intention of the operator who wants to start work immediately after the engine is started. As a result, Patent Document 1 has a problem that it cannot meet the demand of a pilot who desires to start work immediately after the engine is started.

  Furthermore, in Patent Document 1, since the latest control program is automatically updated, it is not possible to meet the demand of a driver who does not want to update the latest control program.

  An object of the present invention is to provide a software update device that prevents software update from being performed against the intention of the operator.

One aspect of the present invention is an update device that is installed in a work machine including an engine and updates software of the work machine,
A storage unit capable of storing an update program for updating the software;
A determination unit that determines whether or not the update program is stored in the storage unit when at least one of start and stop of the engine occurs;
If the determination unit determines that the update program is stored in the storage unit, a display unit that displays an update notification that prompts the update of the update program;
An operation unit that receives an instruction indicating whether or not to update the software input based on the update notification;
An update processing unit that updates the software with the update program only when the operation unit receives an instruction to permit the software update.

  According to this aspect, when at least one of engine start and stop is detected, if an update program is stored in the storage unit, an update notification that prompts the update of the update program is displayed. As a result, it is possible to prevent the update notification from being displayed during work, and to display the update notification at a safe timing without diverting the driver's consciousness. In addition, since the software is updated only when the operation unit accepts an instruction to permit software update from the pilot, the pilot can update the software in anticipation of non-working and control the driver while working. The software can be prevented from being updated against the intention of the user. Furthermore, since the software is not updated if the update disapproval is selected, the driver can immediately start work and can respond to the request of the driver who does not want to update the software.

  The said aspect WHEREIN: When the said update program is transmitted from the server connected via the communication line, you may further provide the communication part which receives the said update program and preserve | saves it in the said memory | storage part.

  According to this aspect, it is possible to cause the work machine to acquire the update program without having to go to the work site and perform the software update work.

  In the above aspect, the communication unit may always receive the update program regardless of the operating state of the work machine.

  According to this aspect, it is possible to cause the work machine to acquire the update program at an arbitrary timing regardless of the operating state of the work machine. Therefore, by having the work machine acquire the update program in advance before starting the update process, there is no need to acquire the update program when executing the update process, and the time required for the update process can be shortened. Furthermore, by having the work machine acquire the update program in advance before the start of the update process, the work machine can execute the update process even if the communication connection between the work machine and the server is interrupted during the update process.

  In the above aspect, the update processing unit prohibits the update process when the engine is automatically stopped.

  According to this aspect, since the software update process is not started when the engine is automatically stopped due to an idle stop or the like, a software malfunction caused by the start of the engine after the idle stop is canceled by the operator's operation during the update process. Can be prevented.

  In the above aspect, the update processing unit may update the software after detecting a stop operation of the engine from the driver when the operation unit receives an instruction to permit the software update. .

  According to this aspect, when the operation unit receives an instruction to permit software update from the operator of the work machine, update processing of the update program is not performed until an engine stop operation is performed from the operator. Therefore, it is possible to prevent update processing from being performed during work.

  In the above aspect, when the update of the software is completed, the display unit may display a completion notification indicating that the update of the software is completed when the engine is started next time.

  According to this aspect, since the completion notification is displayed at the next engine start, even if the pilot leaves the work machine without waiting for the end of the update process, the situation in which the completion notification cannot be notified to the pilot is avoided. it can.

  In the above aspect, the update processing unit erases the update program from the storage unit and the update process is not performed when the number of inputs of the instruction for disabling the software update reaches a specified value. This may be notified to the server.

  In this aspect, the software update process is not executed when the number of instructions for disabling software update reaches a specified value. Therefore, the intention of the pilot who does not want to update the software can be respected. Further, since the server is notified that the update process has not been performed, the server administrator can recognize the operator's preference. Further, when the server receives this notification from a large number of work devices, the server administrator can obtain statistical information indicating the usefulness of the update program. In addition, when the number of inputs of the instruction for disabling update reaches a specified value, the update program is deleted from the storage unit, so that the free space in the storage unit can be secured.

Another aspect of the present invention is a software update method for updating software of a work machine including an engine,
A determination step of determining whether or not an update program for updating the software is stored in the storage unit when at least one of starting and stopping of the engine occurs;
When it is determined in the determination step that the update program is stored in the storage unit, a display step of displaying an update notification for prompting the update of the update program on the display unit;
An accepting step in which the operation unit accepts an instruction indicating whether or not to update the software input based on the update notification;
The receiving step includes an updating step of updating the software with the update program only when the operation unit receives an instruction to permit updating of the software.

  According to the present invention, it is possible to display the presence of an update program at a safe timing, and to prevent the software from being updated against the intention of the operator.

It is a figure which shows the whole structure of the crane with which the update apparatus by embodiment of this invention was applied. It is a block diagram which shows the structure of the update apparatus which concerns on embodiment of this invention. It is a sequence diagram which shows the process of an update apparatus and a server at the time of employ | adopting pattern P1. It is a flowchart which shows the process of the update apparatus at the time of employ | adopting pattern P1. It is a sequence diagram which shows the process of an update apparatus and a server at the time of employ | adopting pattern P2. It is a flowchart which shows the process of the update apparatus at the time of employ | adopting the pattern P2. It is a sequence diagram which shows the process of an update apparatus and a server at the time of employ | adopting pattern P3. It is a flowchart which shows the process of the update apparatus at the time of employ | adopting pattern P3. It is a sequence diagram which shows the process of the update apparatus at the time of employ | adopting pattern P1 'and a server. It is a sequence diagram which shows the process of the update apparatus at the time of employ | adopting pattern P2 'and a server. It is a sequence diagram which shows the process of the update apparatus at the time of employ | adopting pattern P3 'and a server.

<Work machine>
FIG. 1 is a diagram showing an overall configuration of a crane 2 to which an updating device 1 according to an embodiment of the present invention is applied. The crane 2 includes a self-propelled lower traveling body 40 and an upper revolving body 46 mounted on the lower traveling body 40 so as to be able to turn around the vertical axis.

  The upper swing body 46 is provided with a working device 50 for performing crane work. The working device 50 includes a boom 51 as a hoisting member, a mast 52, a gantry 53, a mast side spreader 55, a gantry side spreader 56, a hoisting winch 61, a hoisting winch 62, a hook device 64, and a suspension. It has a rope 66, a undulating rope 67, and a guy line 68.

  The boom 51 is attached to the front part of the upper swing body 46 so that it can be raised and lowered. A top sheave 51 a is provided on the front side of the tip of the boom 51.

  The mast 52 is provided at a position behind the boom 51 in the upper swing body 46. The mast 52 is provided so as to be rotatable about the lower end portion as a fulcrum. A mast side spreader 55 is provided at the upper end of the mast 52. The tip of the mast 52 is connected to the tip of the boom 51 via a guy line 68.

  The gantry 53 is erected at a position further rearward of the mast 52 in the upper swing body 46, that is, at the rear portion of the upper swing body 46. A gantry spreader 56 is provided at the upper end of the gantry 53.

  The hoisting winch 61 winds and unwinds the hook device 64 and the suspended load 100 suspended by the hook device 64 by rotating the hoisting drum 61 a to wind and feed the suspension rope 66. .

  The hoisting winch 62 draws the mast side spreader 55 toward the gantry side spreader 56 side by rotating the hoisting drum 62 a and winding up the hoisting rope 67. As a result, the mast 52 rotates rearward, pulls the tip of the boom 51 rearward via the guy line 68, and raises the boom 51. Further, the hoisting winch 62 rotates the hoisting drum 62 a and feeds the hoisting rope 67 to move the mast side spreader 55 away from the gantry side spreader 56 forward. Thereby, the mast 52 rotates forward and causes the boom 51 to fall. A cabin 46a on which a driver gets is provided in front of the upper swing body 46.

<Block diagram>
FIG. 2 is a block diagram showing a configuration of the update device 1 according to the embodiment of the present invention. The update device 1 includes a display device 110, an overload prevention device 120, a data logger 130, a first controller 140, a second controller 150, and an engine controller 160. The overload prevention device 120, the data logger 130, the first controller 140, and the second controller 140 are connected to be communicable with each other via the bus line L1. The overload prevention device 120, the first controller 140, the second controller 150, and the engine controller 160 are connected to be communicable with each other via the bus line L2.

  As the bus lines L1 and L2, a bus line that conforms to a communication standard of CAN (Controller Area Network) which is an in-vehicle network is employed. However, this is an example, and if a network other than CAN is adopted as the in-vehicle network, bus lines compliant with the communication standard of the network are adopted as the bus lines L1 and L2. Here, in order to avoid direct communication between the data logger 130 and the engine controller 160, two bus lines L1 and L2 are employed. However, this is only an example, and the overload prevention device 120, the data logger 130, the first controller 140, the second controller 150, and the engine controller 160 may be connected to each other via a single bus line.

  The display device 110 and the overload prevention device 120 are connected by, for example, a communication line L3 conforming to the RS-232C standard.

  The display device 110 is provided in a cabin 46a on which the operator of the crane 2 is boarded. The display device 110 includes a display unit 111 and an operation unit 112. The display unit 111 includes a display device such as a liquid crystal panel or an organic EL panel, for example, and displays an update notification that prompts the update program to be updated. The operation unit 112 is configured by a touch panel or a physical switch attached to the display unit 111, and receives an instruction indicating whether or not the software can be updated, which is input to the pilot based on the update notification.

  The overload prevention device 120 is configured by a computer having the same configuration as a data logger described later, and prevents the load applied to the work device 50 from being overloaded during crane work.

  The data logger 130 is configured by a computer including a first communication unit 131, a storage unit 132, a CPU 133, a ROM 134, a RAM 135, and a second communication unit 136. The first communication unit to the second communication unit 136 are connected via an internal bus.

  The first communication unit 131 includes a communication circuit that complies with the communication standard of the communication line NT, and communicates with the server 200 via the communication line NT.

  When a software update program is transmitted from the server 200, the first communication unit 131 receives the update program and stores it in the storage unit 132. Since the data logger 130 is supplied with power even when the engine 170 is key-off, the first communication unit 131 always receives the update program and stores it in the storage unit 132 regardless of the operating state of the crane 2. be able to.

  The storage unit 132 is configured by a rewritable nonvolatile storage device, for example, and stores an update program. The storage unit 132 may be configured by a recording medium (for example, a flash memory or an SD card) that can be attached to and detached from the main body of the data logger 130. The update program is a program for upgrading the software stored in the ROM 134.

  The CPU 133 executes software stored in the ROM 134 and realizes the function of the data logger 130. The CPU 133 includes a determination unit 1331 and an update processing unit 1332.

  The determination unit 1331 determines whether or not the update program is stored in the storage unit 132 when one of the start and stop of the engine 170 occurs. If the determination unit 1331 determines that the update program is stored in the storage unit 132, the determination unit 1331 instructs the overload prevention device 120 to display an update notification that prompts the update program to be updated on the display unit 111.

  The update processing unit 1332 updates the software stored in the ROM 134 with the update program when the instruction indicating whether or not the software update accepted by the operation unit 112 is an instruction to permit the update. On the other hand, the update processing unit 1332 does not update the software stored in the ROM 134 with the update program when the instruction indicating whether or not to update the software received by the operation unit 112 is an instruction for disabling the update. When the operation unit 112 is input to indicate whether updating is possible, the display device 110 transmits a notification indicating the input to the data logger 130 via the overload prevention device 120.

  The ROM 134 is configured by a rewritable nonvolatile storage device, and stores software executed by the CPU 133. As the software, a control program that causes a computer to function as the data logger 130 can be employed. Further, the ROM 134 stores an operation history of the crane 2. The RAM 135 is a working memory for the CPU 133.

  The second communication unit 136 includes a communication circuit that complies with the communication standards of the bus lines L1 and L2, acquires operation information flowing through the bus lines L1 and L2, and stores the operation information in the ROM 134 as an operation history. The operation history stored in the ROM 134 includes an operation history related to the hoisting winch 61 and an operation history related to the undulating winch 62.

  For example, the first controller 140 is configured by a computer having the same configuration as the data logger 130 and controls the hoisting winch 61. The first controller 140 periodically outputs the operation information of the hoisting winch 61 to the bus line L1 and the bus line L2.

  The second controller 150 is configured by a computer having the same configuration as that of the data logger 130, for example, and controls the undulating winch 62. The second controller 150 periodically outputs operation information of the hoisting winch 62 to the bus line L1 and the bus line L2.

  The engine controller 160 is configured by a computer having the same configuration as that of the data logger 130, for example, and controls the engine 170 of the crane 2. The engine controller 160 outputs a key-on notification to the bus line L2 when an operation for key-on of the engine 170 is input by the operator. The engine controller 160 outputs a key-off notification to the bus line L2 when an operation for keying off the engine 170 is input by the operator. The key-on notification and key-off notification output to the bus line L2 are output to the bus line L1 by the overload prevention device 120, the first controller 140, or the second controller 150. Accordingly, the overload prevention device 120, the data logger 130, the first controller 140, and the second controller 150 can acquire the key-on notification or key-off notification output to the bus line L1, and can detect the key-on or key-off of the engine 170. .

  The engine 170 drives a hydraulic pump constituting the crane 2 and causes the crane 2 to perform a hydraulic operation.

  The server 200 includes one or more computers, and transmits an update program to the data logger 130 of the one or more cranes 2 via the communication line NT. The server 200 provides various services to one or more cranes 2 and manages operation information of the one or more cranes 2.

  The communication line NT is constituted by, for example, at least one of a satellite communication network, a mobile phone communication network, and an Internet communication network.

<Processing>
The update device 1 updates the software by performing any one of the following patterns P1 to P3. First, the pattern P1 will be described.

<Pattern P1>
FIG. 3 is a sequence diagram showing processing of the update device 1 and the server 200 when the pattern P1 is adopted. The pattern P1 is a method of displaying an update notification for prompting software update at the time of key-on, and displaying a permission question for inquiring the operator whether update is possible. In S <b> 1, the server 200 transmits a request command for requesting the data logger 130 to transmit the update program. When receiving the request command, the first communication unit 131 of the data logger 130 transmits an ACK signal indicating that the request command has been successfully received to the server 200.

  In S <b> 2, the first communication unit 131 of the data logger 130 transmits an update program acquisition request to the server 200, and the server 200 transmits the update program to the data logger 130. In S <b> 3, the first communication unit 131 of the data logger 130 stores the update program in the storage unit 132.

  At time T1, engine 170 is keyed on by the operator. In S <b> 4, the determination unit 1331 of the data logger 130 detects key-on and determines whether or not the update program is stored in the storage unit 132. Here, since the update program is stored, the determination unit 1331 transmits an update command to the overload prevention device 120 using the second communication unit 136. The overload prevention device 120 that has received the update command transmits an ACK signal indicating that the update command has been successfully received to the data logger 130. The update command is a command for notifying the overload prevention device 120 that the update program is stored in the storage unit 132.

  In S <b> 5, the overload prevention device 120 transmits an update notification to the display device 110. In S6, the display unit 111 of the display device 110 displays an update notification. The update notification includes, for example, a message such as “There is an update program”.

  In S <b> 7, the overload prevention device 120 transmits to the display device 110 a permission question that inquires the operator of whether or not software can be updated. In S8, the display unit 111 of the display device 110 displays a permission question. The permission question includes, for example, a “Yes” button that permits software update and a “No” button that does not allow software update, and the operator selects one of the buttons.

  In S <b> 9, the operation unit 112 of the display device 110 receives the selection result for the permission question and transmits it to the overload prevention device 120. In S10, the overload prevention device 120 transmits the selection result to the data logger 130, and the update processing unit 1332 of the data logger 130 sends an ACK signal indicating that the selection result has been successfully received to the overload prevention device 120. Send.

  At time T2, engine 170 is keyed off by the operator. In S <b> 11, the update processing unit 1332 of the data logger 130 detects a key-off, and executes update processing for updating the software stored in the ROM 134 with the update program.

  In S <b> 12, the update processing unit 1332 of the data logger 130 transmits an update result indicating that the update processing has ended to the server 200 using the first communication unit 131. The server 200 that has received the update result transmits an ACK signal indicating that the update result has been successfully received to the data logger 130.

  At time T3, the engine 170 is keyed on by the operator. In S <b> 13, the update processing unit 1332 of the data logger 130 detects key-on and transmits a completion notification indicating the completion of the update process to the overload prevention device 120 using the second communication unit 136. The overload prevention device 120 transmits an ACK signal indicating that the completion notification has been successfully received to the data logger 130.

  In S <b> 14, the overload prevention device 120 transmits a completion notification to the display device 110. In S15, the display unit 111 of the display device 110 displays a completion notification. The completion notification includes, for example, a message such as “Program update has been completed”. In S <b> 16, the display device 110 transmits an ACK signal indicating that the completion notification has been successfully received to the overload prevention device 120.

  FIG. 4 is a flowchart showing the processing of the update device 1 when the pattern P1 is adopted. First, the determination unit 1331 of the data logger 130 detects key-on of the engine 170 (S401). Next, if the update program is not stored in the storage unit 132 (NO in S402), the determination unit 1331 advances the process to S403, and if the update program is stored in the storage unit 132 (YES in S402). The process proceeds to S404.

  Here, when the determination unit 1331 stores the update program in the storage unit 132, the determination unit 1331 stores a storage flag indicating that in the storage unit 132. Then, the determination unit 1331 refers to the storage unit 132 at the time of key-off (time T1), and determines that there is an update program (YES in S402) if the storage flag is stored.

  In S403, the update processing unit 1332 ends the process when detecting the key-off of the engine 170. In S404, the overload prevention device 120 causes the display unit 111 to display an update notification. Next, the overload prevention device 120 displays a permission question on the display unit 111 (S405).

  Next, the operation unit 112 of the display device 110 receives an input of a selection result from the operator (S406). Next, the operation of the crane 2 is finished, and the update processing unit 1332 of the data logger 130 detects the key-off of the engine 170 (S407). Next, if the selection result indicates that the update is permitted (YES in S408), the update processing unit 1332 executes the update process (S410). When the update process ends, the update processing unit 1332 deletes the update program from the storage unit 132 (S411), and the process ends. Thereby, the free capacity of the storage unit 132 is secured.

  On the other hand, if the selection result indicates non-permission of update (NO in S408), the update processing unit 1332 performs the process if the number of times non-permission has been selected has not reached the specified value (NO in S409). The process returns to S401 and again waits for key-on. On the other hand, if the number of times disapproval has been selected has reached the specified value (YES in S409), the update processing unit 1332 deletes the update program from the storage unit 132 (S411) and ends the process. In this case, it is considered that the driver does not want to update the software, and the software update process is not executed.

  Even when the software is not updated, the update processing unit 1332 transmits a completion notification indicating that the software has not been updated using the first communication unit 131 to the server 200 as in the case of the update. The server 200 stores the completion notification in association with the identification information of the crane 2. Thereby, the administrator of the server 200 can recognize whether or not the operator of the corresponding crane 2 wants to update the software. Further, the server 200 accumulates completion notifications from a large number of cranes 2, so that the administrator of the server 200 can obtain statistical information indicating the usefulness of the update program.

  In the pattern P1, update processing is performed at the time of key-off (time T2), and completion notification is performed at the next key-on (time T3). Therefore, even if the operator leaves the crane 2 without waiting for the end of the update process after the key-off, the operator can recognize that the software has been updated at the next key-on.

  In the example of FIG. 3, the process of saving the update program is executed during key-off (S1 to S3), but the process of saving the update program (S1 to S3) may be executed during key-on. In this case, the next key-on time is the time T1 shown in FIG. 3, and the processing after S4 is executed.

<Pattern P2>
Next, the pattern P2 will be described. FIG. 5 is a sequence diagram showing processing of the update device 1 and the server 200 when the pattern P2 is adopted. The pattern P2 is a technique for displaying an update notification when the key is turned on and displaying a permission question when the key is turned off.

  In FIG. 5, the same processes as those in FIG. 3 are denoted by the same reference numerals and description thereof is omitted. In FIG. 3, a series of processes (S4 to S6) related to update notification and a series of processes (S7 to S10) related to the permission question are executed at the time of key-on (time T1).

  In FIG. 5, after the update notification is displayed (S6), the engine 170 is keyed off (time T21) by the operator. Then, at the time of key-off (time T21), a series of processes (S7 to S10) related to the permission question and a series of processes (S11 to S12) related to the update process are executed.

  FIG. 6 is a flowchart showing processing of the update device 1 when the pattern P2 is adopted. In FIG. 6, the same processes as those in FIG. 4 are denoted by the same reference numerals, and description thereof is omitted. In S601 following S404, the overload prevention device 120 detects key-off after the work of the crane 2 is completed. Next, the overload prevention device 120 displays a permission question on the display unit 111 (S602). Next, the operation unit 112 receives an input of a selection result from the operator (S603). Thereafter, the same processing as S408 in FIG. 4 is performed.

  In the pattern P2, only the update notification is displayed at the time of key-on (time T1), and the display of the permission question and the update process are performed at the time of key-off (time T21). Therefore, the operator can start work quickly at the time of key-on (time T1). Further, as in the case of the pattern P1, the update process completion notification is displayed at the time of key-on (time T3), so the operator leaves the crane 2 without waiting for the completion of the update process at the time of key-off (time T21). However, it can be recognized that the software has been updated at the next key-on (time T3).

  In the example of FIG. 5, the process of saving the update program is executed during key-off (S1 to S3), but the process of saving the update program (S1 to S3) may be executed during key-on. In this case, the next key-on time is the time T1 shown in FIG. 5, and the processing after S4 is executed.

<Pattern P3>
Next, the pattern P3 will be described. FIG. 7 is a sequence diagram showing processing of the update device 1 and the server 200 when the pattern P3 is adopted. The pattern P3 is a technique for displaying an update notification at the time of key-off and receiving selection of update processing. In FIG. 7, the same processes as those in FIG. 3 are denoted by the same reference numerals and description thereof is omitted.

  In FIG. 3, a series of processing (S1 to S3) related to saving of the update program is executed before key-on (time T1). In FIG. 7, a series of processing (S1 to S3) related to saving of the update program is executed before key-off (time T1).

  In FIG. 3, a series of processing (S4 to S10) for displaying an update notification and a permission question is executed at the time of key-on (time T1) after storing the update program (S3), and at the time of key-off (time T2). ), A series of processes (S11 to S12) related to the update process were executed. In FIG. 7, a series of processes (S4 to S10) for displaying an update notification and a permission question at the time of key-off (time T1) after storing the update program (S3), and a series of processes (S11 to S11) regarding the update process S12) is executed.

  Then, at the next key-on (time T2), similarly to FIG. 3, the processing of S13 to S16 is executed, and a completion notification is displayed.

  FIG. 8 is a flowchart showing the processing of the update device 1 when the pattern P3 is adopted. In FIG. 8, the same processes as those in FIG. 4 are denoted by the same reference numerals, and description thereof is omitted. In S801 following YES in S402, the overload prevention device 120 detects key-off after the work of the crane 2 is completed. Thereafter, the processing of S404 to S406 is executed in the same manner as in FIG. 4, but in FIG. 8, since key-off is performed in S801, S407 (detection of key-off) in FIG. 4 is omitted.

  In the pattern P3, update notification display, permission question display, and update processing are performed at the time of key-off (time T1). Therefore, the operator can start work immediately upon key-on.

  In the example of FIG. 7, the process of saving the update program is executed during key-on (S1 to S3), but the process of saving the update program (S1 to S3) may be executed during key-off. In this case, the next key-off time is time T1 shown in FIG. 7, and the processing after S4 is executed.

<Pattern P1 ′>
Next, a pattern P1 ′ that is a modification of the pattern P1 will be described. FIG. 9 is a sequence diagram showing processing of the update device 1 and the server 200 when the pattern P1 ′ is adopted. The pattern P1 ′ is characterized in that the update process is not executed when the engine 170 is automatically stopped. The automatic stop includes an emergency stop of the engine 170, an engine stall (engine stall), and an idle stop of the engine 170. That is, the automatic stop of the engine 170 corresponds to the stop of the engine 170 other than the stop of the engine 170 based on the intention of the operator.

  For example, when the crane 2 is likely to come into contact with an obstacle, the engine controller 160 may stop the engine 170 in an emergency to prevent contact. Further, if the suspended load of the crane 2 is excessive, the load on the engine 170 may be excessive and engine stall may occur. It is predicted that the crane 2 is not in a normal state at the time of emergency stop and engine stall of the engine 170. In this case, by not performing the update process by the update device 1, the operator can immediately take measures to make the crane 2 operable.

  Further, the engine controller 160 has a so-called idle stop function that automatically stops the engine 170 if the crane 2 is not working during key-on.

  If the software update process is started during the idle stop, the data logger 130 may malfunction if the idle stop is canceled and the engine 170 is started by the operator's operation during the update process. Since the update device 1 does not execute the update process at the time of automatic stop, the malfunction of the data logger 130 can be avoided.

  In the example of FIG. 9, the engine 170 is automatically stopped in SA following S10. In this case, the update processing unit 1332 of the data logger 130 does not perform the update process (S11) even if the automatic stop of the engine 170 is detected. The update processing unit 1332 starts the update process (S11) on condition that the key-off (time T2) is detected.

<Pattern P2 ′>
Next, a pattern P2 ′ that is a modification of the pattern P2 will be described. FIG. 10 is a sequence diagram showing processing of the update device 1 and the server 200 when the pattern P2 ′ is adopted. The pattern P2 ′ is characterized in that the update process is not executed when the engine 170 is automatically stopped.

  In the example of FIG. 10, the engine 170 is automatically stopped in SA following S6. In this case, even if the update processing unit 1332 of the data logger 130 detects the automatic stop of the engine 170, the update processing unit 1332 does not execute the processes after S7 and does not perform the update process (S11). The update processing unit 1332 performs the process after S7 on the condition that the key-off (time T21) is detected, and performs the update process (S11).

<Pattern P3 ′>
Next, a pattern P3 ′ that is a modification of the pattern P3 will be described. FIG. 11 is a sequence diagram showing processing of the update device 1 and the server 200 when the pattern P3 ′ is adopted. The pattern P3 ′ is characterized in that the update process is not executed when the engine 170 is automatically stopped.

  In the example of FIG. 11, the engine 170 is automatically stopped in SA following S3. In this case, even if the update processing unit 1332 of the data logger 130 detects the automatic stop of the engine 170, the update processing unit 1332 does not execute the processes after S4 and does not perform the update process (S11). The update processing unit 1332 executes the processes after S4 and performs the update process (S11) on condition that the key-off (time T1) is detected.

<Summary>
Thus, according to the update device 1, when the key-on of the engine 170 is detected (patterns P1, P2) or the key-off of the engine 170 is detected (pattern P3), the update program is stored in the storage unit 132. If so, an update notification prompting the update of the update program is displayed. As a result, it is possible to prevent the update notification from being displayed during work, and to display the update notification at a safe timing without diverting the driver's consciousness.

  In addition, since the software is updated only when the operation unit 112 receives an instruction for permitting the software update from the pilot, the pilot can update the software in anticipation of non-working, and during the work It is possible to prevent the software from being updated against the operator's intention. Furthermore, since the software is not updated if the update disapproval is selected, the driver can immediately start work and can respond to the request of the driver who does not want to update the software.

  Further, according to the update device 1, the update program is transmitted from the server 200 to the crane 2. Therefore, the maintenance program of the crane 2 can make the crane 2 obtain the update program without going to the site and performing the software update operation.

  Since the data logger 130 can receive the update program even if the crane 2 is keyed off, the crane 2 can acquire the update program at an arbitrary timing. Further, by causing the crane 2 to acquire the update program in advance, the time required for acquiring the update program at the time of update can be omitted, and the time required for the update process can be shortened.

<Modification>
(1) In the above embodiment, the update program is transmitted from the server 200 to the data logger 130. The present invention is not limited to this, and the update program may be stored in the storage unit 132 in advance at the time of factory shipment of the crane 2 or before factory shipment. In this case, the processing of S1 to S3 is omitted in FIGS. When the patterns P1, P2 (or P1 ′, P2 ′) are employed, the time when the engine 170 is first turned on after shipment from the factory is time T1 in FIGS. 3 and 4 (or FIGS. 9 and 10), and S4 The subsequent processing may be executed. Further, when the pattern P3 (or P3 ′) is adopted, the time when the engine 170 is keyed off for the first time after shipment from the factory is time T1 in FIG. 11, and the processing after S4 may be executed.

  (2) In the above embodiment, the update notification is displayed at the time of key-on or key-off. The present invention is not limited to this, and the update notification may be displayed both at the time of key-on and at the time of key-off. For example, the update notification may be displayed again before S7 shown in FIG.

  (3) In the above embodiment, the software of the data logger 130 is an update target, but this is an example, and the software of the first controller 140, the second controller 150, or the engine controller 160 is the update target. May be. In this case, the software is a program that causes the computer to function as the first controller 140, the second controller 150, or the engine controller 160.

  (4) In the above-described embodiment, the determination unit 1331 and the update processing unit 1332 are included in a device (data logger 130) that is a software update target, but this is an example, and a device that is a software update target. Other devices (overload prevention device 120, first controller 140, second controller 150, or engine controller 160) may be included.

  (5) In the above embodiment, a crane is employed as an example of a work machine. However, the present invention is not limited to this, and a construction machine other than a crane such as an excavator or a dump truck may be employed as the work machine.

  (6) In the above embodiment, the data logger 130 is connected to the display device 110 via the overload prevention device 120. However, the present invention is not limited to this, and the data logger 130 may be directly connected to the display device 110. Good. In this case, the determination unit 1331 may display the permission notification on the display unit 111 without using the overload prevention device 120. Further, the update processing unit 1332 may directly detect that an instruction indicating whether updating is possible is input from the operation unit 112 without using the overload prevention device 120.

  (7) The software may be an application program instead of a control program. In this case, in the above aspect (1), it is possible to employ an aspect in which a plurality of application programs are stored in the storage unit 132 at the time of factory shipment, and the operator selects installation of an arbitrary application program at the time of key-on.

NT communication line 1 update device 2 crane 40 lower traveling body 46 upper turning body 50 working device 110 display device 111 display unit 112 operation unit 120 overload prevention device 130 data logger 131 first communication unit 132 ROM
132 storage unit 133 CPU
1331 Determination unit 1332 Update processing unit 134 ROM
135 RAM
136 Second communication unit 140 First controller 150 Second controller 160 Engine controller 170 Engine 200 Server

Claims (8)

An update device mounted on a work machine including an engine and updating software of the work machine,
A storage unit capable of storing an update program for updating the software;
A determination unit that determines whether or not the update program is stored in the storage unit when at least one of start and stop of the engine occurs;
If the determination unit determines that the update program is stored in the storage unit, a display unit that displays an update notification that prompts the update of the update program;
An operation unit that receives an instruction indicating whether or not to update the software input based on the update notification;
A software update apparatus comprising: an update processing unit that updates the software with the update program only when the operation unit receives an instruction to permit the software update.   The software update apparatus according to claim 1, further comprising a communication unit that receives the update program and stores the update program in the storage unit when the update program is transmitted from a server connected via a communication line.   The software update apparatus according to claim 2, wherein the communication unit always receives the update program regardless of an operating state of the work machine.   The software update apparatus according to claim 1, wherein the update processing unit prohibits the update process when the engine is automatically stopped.   5. The update processing unit according to claim 1, wherein, when the operation unit receives an instruction to permit the software update, the update processing unit executes the software update after detecting a stop operation of the engine from the operator. 6. A software update device according to any one of the above.   The software update device according to claim 5, wherein when the software update is completed, the display unit displays a completion notification indicating that the software update is completed when the engine is started next time.   The update processing unit deletes the update program from the storage unit when the input count of an instruction for disabling the software update reaches a specified value, and indicates that the update process has not been performed. The software updating apparatus according to claim 2, wherein the software updating apparatus is notified to. A software update method for updating software of a work machine including an engine,
A determination step of determining whether or not an update program for updating the software is stored in the storage unit when at least one of starting and stopping of the engine occurs;
When it is determined in the determination step that the update program is stored in the storage unit, a display step of displaying an update notification for prompting the update of the update program on the display unit;
An accepting step in which the operation unit accepts an instruction indicating whether or not to update the software input based on the update notification;
A software update method comprising: an update step of updating the software with the update program only when the operation unit receives an instruction to permit the software update in the reception step.

Images