On-vehicle device, vehicle, control method, and non-transitory recording medium

Abstract

The present disclosure provides an on-vehicle device, a vehicle, a control method, and a non-transitory recording medium. The on-vehicle device includes: a recording unit that records a control program and an application program in the on-vehicle device mounted on the vehicle, wherein the control program is a program recorded in a first recording medium that implements processing for controlling the on-vehicle device, and the application program is a program recorded in a second recording medium different from the first recording medium that implements processing on the on-vehicle device; an acquisition unit that acquires an update package containing at least one of a first program that updates the control program and a second program that updates the application program; and an update unit that updates the control program and the application program based on the acquired update package.

Description

Technical Field

[0001] The present disclosure relates to an in-vehicle device for updating a program for controlling a vehicle, a vehicle, a control method, and a non-transitory recording medium having the in-vehicle program recorded thereon. Background Art

[0002] Japanese Patent Application Laid-Open No. 2021-048495 discloses an in-vehicle update device that updates a program or data of an in-vehicle device mounted on a vehicle.

[0003] In-vehicle devices may include a control program for controlling the in-vehicle device and an application program for operating the in-vehicle device.

[0004] However, if the control program and the application program are recorded on different recording media, the control program and the application program will be updated at different times, and thus the program updates may not always be performed efficiently. Summary of the Invention

[0005] An object of the present disclosure is to provide an in-vehicle device, a vehicle, a control method, and a non-transitory recording medium recording an in-vehicle program, which are capable of efficiently updating a program.

[0006] The vehicle-mounted device of the first embodiment includes: a recording unit, which records a control program and an application program in the vehicle-mounted device installed on the vehicle, wherein the control program is a program recorded in a first recording medium for implementing processing to control the vehicle-mounted device, and the application program is a program recorded in a second recording medium different from the first recording medium for implementing processing on the vehicle-mounted device; an acquisition unit, which acquires an update package containing at least one of a first program for updating the control program and a second program for updating the application program; and an update unit, which implements the update of the control program and the application program based on the acquired update package.

[0007] The in-vehicle device of the first embodiment obtains an update package including at least one of a control program for controlling the in-vehicle device and an application program for executing processing on the in-vehicle device, and updates the control program and application program recorded in the in-vehicle device based on the update package.

[0008] That is, according to this in-vehicle device, by acquiring the update package, the control program and the application program are updated at the same time, thereby enabling efficient program updates.

[0009] The in-vehicle device of the second embodiment is the in-vehicle device of the first embodiment, wherein the update unit transmits the third program to the other in-vehicle device and updates the other program when the update package further includes a third program for updating other programs stored in other in-vehicle devices.

[0010] According to the in-vehicle device of the second aspect, the program of the in-vehicle device on the vehicle can be updated at the same opportunity.

[0011] The in-vehicle device according to a third aspect is the in-vehicle device according to the first aspect or the second aspect, wherein the acquisition unit acquires the update package via wireless communication.

[0012] According to the third-party in-vehicle device, the update package can be easily acquired.

[0013] The fourth mode of the vehicle-mounted device is a vehicle-mounted device of any one of the first to third modes, wherein the recording unit records the control program before the update and the control program after the update as the control program in the first recording medium, and the updating unit uses a flag to manage the update of the control program.

[0014] According to the in-vehicle device of the fourth aspect, even when the update fails, it is possible to return to the control program before the update.

[0015] A vehicle according to a fifth aspect includes: the in-vehicle device according to any one of the first to fourth aspects; and one or more other in-vehicle devices connected to the in-vehicle device.

[0016] According to the vehicle of the fifth aspect, it is possible to update the program of the vehicle-mounted device mounted on the vehicle.

[0017] The control method of the sixth mode is to record a control program and an application program in a vehicle-mounted device installed on a vehicle, wherein the control program is a program recorded in a first recording medium for implementing processing to control the vehicle-mounted device, and the application program is a program recorded in a second recording medium different from the first recording medium for implementing processing on the vehicle-mounted device, obtain an update package containing at least one of a first program for updating the control program and a second program for updating the application program, and implement updates to the control program and the application program based on the obtained update package.

[0018] According to the control method of the sixth aspect, an update package containing at least one of a control program for controlling an onboard device and an application program for executing processing on the onboard device is obtained, and the control program and application program stored in the onboard device are updated based on the update package. In other words, according to this control method, the control program and application program are updated simultaneously by obtaining the update package. This allows for efficient program updates.

[0019] A seventh embodiment relates to a non-transitory recording medium having an in-vehicle program recorded thereon. The in-vehicle program causes a computer to execute the following processing: recording a control program and an application program in an in-vehicle device mounted on a vehicle, wherein the control program is a program recorded on a first recording medium that performs processing for controlling the in-vehicle device, and the application program is a program recorded on a second recording medium different from the first recording medium that performs processing on the in-vehicle device; obtaining an update package containing at least one of the first program that updates the control program and the second program that updates the application program; and updating the control program and the application program based on the obtained update package.

[0020] A computer executing an in-vehicle program recorded on a non-transitory recording medium according to the seventh embodiment updates the control program and application program recorded on an in-vehicle device. The computer obtains an update package containing at least one of the control program for controlling the in-vehicle device and the application program for executing processing on the in-vehicle device, and updates the control program and application program recorded on the in-vehicle device based on the update package. In other words, the computer executing the in-vehicle program obtains the update package, thereby simultaneously updating the control program and application program. This allows for efficient program updates.

[0021] According to the present disclosure, it is possible to efficiently update a program. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] Exemplary embodiments of the present invention will be described in detail based on the following drawings, in which:

[0023] Figure 1 A diagram showing a schematic configuration of an in-vehicle system according to each embodiment.

[0024] Figure 2 It is a block diagram showing a structure for explaining the functions of the vehicle-mounted system according to each embodiment.

[0025] Figure 3 A block diagram showing the hardware configuration of a vehicle according to each embodiment.

[0026] Figure 4It is a block diagram showing the functional structure of the vehicle-mounted device according to each embodiment.

[0027] Figure 5 This is a data flow diagram showing an example of the flow of data in processing executed in the vehicle-mounted device according to each embodiment.

[0028] Figure 6 This is a flowchart showing the flow of a process for updating a program executed in the vehicle-mounted device according to the first embodiment.

[0029] Figure 7 This is a flowchart showing the flow of a process for updating a program executed in the vehicle-mounted device according to the second embodiment. DETAILED DESCRIPTION

[0030] [First embodiment]

[0031] An in-vehicle system including a vehicle equipped with the in-vehicle device of the present disclosure and a center server will be described. The in-vehicle system updates the control program and application program stored in the in-vehicle device using an update package obtained from the center server.

[0032] (Overall structure)

[0033] like Figure 1 As shown, the vehicle-mounted system 10 according to the embodiment of the present disclosure includes a vehicle 12 and a center server 30. The vehicle 12 is equipped with a vehicle-mounted device 20 as a vehicle-mounted apparatus, and the vehicle-mounted device 20 is connected to the center server 30 via a network N.

[0034] The vehicle-mounted device 20 obtains an update package (OTA: Over the Air) from a center server 30 via a network N, such as a wireless communication network, that contains a control program for controlling the vehicle-mounted device 20 and an application program that performs processing on the vehicle-mounted device. The vehicle-mounted device 20 uses the control program and application program included in the obtained update package to update the various programs stored in the vehicle-mounted device 20. Here, the vehicle-mounted device 20 is an example of an "in-vehicle device." Furthermore, the control program included in the update package is an example of a "first program," and the application program included in the update package is an example of a "second program."

[0035] As an example, Figure 2 As shown, the vehicle-mounted device 20 includes a CPU (Central Processing Unit) 20A, a ROM (Read Only Memory) 20B, and a memory 20D, which will be described later. Here, the ROM 20B is an example of a "first recording medium," and the memory 20D is an example of a "second recording medium."

[0036] The CPU 20A mounted on the vehicle-mounted device 20 functions as an OTA client 40, a UCM (Update and Configuration Management) main controller 41, and a UCM sub-controller 42. The ROM 20B stores a control program 110 described below, and the memory 20D stores an application program 130 described below.

[0037] like Figure 2 As shown, the OTA client 40 obtains the update package from the central server 30 and inputs it to the UCM main controller 41. The UCM main controller 41 manages the updating of programs related to the ECU (Electronic Control Unit) installed in the vehicle 12, while the UCM sub-controller 42 manages the updating of programs in the vehicle-mounted device 20. The UCM main controller 41 distributes and updates the programs contained in the input update package.

[0038] For example, if the update package includes the control program 110 and application program 130 described later, each program is imported into the UCM sub-controller 42. The UCM sub-controller 42 uses the acquired control program 110 and application program 130 to update the control program 110 stored in the ROM 20B and the application program 130 stored in the memory 20D in the vehicle-mounted device 20. Furthermore, if the update package includes a program related to an ECU other than the vehicle-mounted device 20 (hereinafter referred to as "another program"), the UCM main controller 41 distributes the other program to the other ECU and updates it.

[0039] In addition, although Figure 1 as well as Figure 2 While the illustration shows one vehicle 12 including an onboard device 20 for one center server 30, the number of vehicles 12, onboard devices 20, and center servers 30 is not limited to this. Furthermore, this embodiment describes a method in which the onboard device 20 obtains update packages using wireless communication. However, this is not limiting. Update packages can also be obtained via an interface. For example, update packages can be obtained from an external storage device such as an SD (Secure Digital) memory card or USB (Universal Serial Bus) memory device via an interface.

[0040] (vehicle)

[0041] like Figure 3As shown, the vehicle 12 according to the present embodiment is configured to include an on-vehicle device 20 , a plurality of ECUs 22 , and a plurality of on-vehicle equipment 24 .

[0042] The vehicle-mounted device 20 includes a CPU 20A, a ROM 20B, a RAM (Random Access Memory) 20C, a memory 20D, an in-vehicle communication interface 20E, and a wireless communication interface 20F. The CPU 20A, ROM 20B, RAM 20C, memory 20D, in-vehicle communication interface 20E, and wireless communication interface 20F are interconnected via an internal bus 20G so as to be able to communicate with each other.

[0043] The CPU 20A is a central processing unit and executes various programs or controls various components. Specifically, the CPU 20A reads programs from the ROM 20B and executes the programs using the RAM 20C as a work area.

[0044] ROM 20B stores various programs and data. In this embodiment, ROM 20B stores an in-vehicle program 100 for updating various programs. As the in-vehicle program 100 executes, the in-vehicle device 20 obtains an update package and performs the process of updating the control program 110 and application program 130, described below. ROM 20B also stores the control program 110 for controlling the in-vehicle device 20 and a control flag 120 indicating which control program 110 is currently being executed. RAM 20C serves as a workspace for temporarily storing programs and data.

[0045] The storage device 20D, which serves as a memory, is comprised of an HDD (Hard Disk Drive), an SSD (Solid State Drive), or an eMMC (Embedded Multi Media Card), and stores various programs and data. In this embodiment, the storage device 20D stores an application 130 and an update package 140.

[0046] The in-vehicle communication I / F 20E is an interface for connecting to each ECU 22. This interface uses the communication standard defined by the CAN communication protocol. The in-vehicle communication I / F 20E is connected to the external bus 20H.

[0047] The wireless communication I / F 20F is a wireless communication module for communicating with the center server 30. This wireless communication module uses a communication standard such as 5G, LTE, or Wi-Fi (registered trademark). The wireless communication I / F 20F is connected to a network N.

[0048] The ECU 22 is an electronic control module for controlling the onboard devices 24 installed in the vehicle 12. Examples of the ECU 22 include an ADAS (Advanced Driver Assistance System) ECU, a steering ECU, and an engine ECU. Each ECU 22 stores a program for controlling the connected onboard device 24 (hereinafter referred to as an "other program") and executes this other program to control the connected onboard device 24. The ECU 22 is an example of an "other onboard device."

[0049] like Figure 4 As shown, in the vehicle-mounted device 20 of the present embodiment, the CPU 20A functions as an acquisition unit 200 , an update unit 210 , and a recording unit 220 by executing the vehicle-mounted program 100 .

[0050] The acquisition unit 200 has the function of acquiring the update package 140 from the center server 30 and acquiring the control flag 120 from the ROM 20B. Here, the update package 140 includes at least one of the control program 110 and the application program 130. In this embodiment, the update package 140 includes at least one of the control program 110 and the application program 130. However, this is not limiting. The update package 140 may also include other programs.

[0051] The update unit 210 has a function of updating various programs based on the programs included in the update package 140. Specifically, if the control program 110 is included in the acquired update package 140, the update unit 210 uses the control program 110 to update the control program 110 stored in the ROM 20B. The update unit 210 updates the control program 110 by referring to the acquired control flag 120.

[0052] Here, the ROM 20B involved in this embodiment records the control program 110 currently being executed and the control program 110 of the previous generation of the currently executed control program 110. Furthermore, the control flag 120 indicates the recording area where the currently executed control program 110 is recorded. Specifically, the ROM 20B has two recording areas: recording area A and recording area B. The control flag 120 indicates the recording area where the currently executed control program 110 is recorded. For example, if the control flag 120 is "0," it indicates that the currently executed control program 110 is recorded in recording area A, while if the control flag 120 is "1," it indicates that the currently executed control program 110 is recorded in recording area B. Hereinafter, the recording area where the currently executed control program 110 is recorded is referred to as the "startup surface," and the recording area where a control program 110 different from the currently executed control program 110 and to be updated is recorded is referred to as the "update surface." In other words, the control flag 120 indicates the startup surface. Here, the control program on the startup page is an example of a “control program after updating,” and the control program on the update page is an example of a “control program before updating.”

[0053] When updating the control program 110, the update unit 210 updates the control program 110 recorded in an update surface different from the activation surface indicated by the control flag 120. For example, when the control flag 120 is "0," the update surface is "recording area B," and therefore, the update unit 210 updates the control program 110 recorded in recording area B. When the control flag 120 is "1," the update surface is "recording area A," and therefore, the update unit 210 updates the control program 110 recorded in recording area A.

[0054] Furthermore, the update unit 210 has a function of updating the control flag 120 after updating the control program 110. Specifically, after updating the control program 110, the update unit 210 updates the control flag 120 to "1" if the control flag 120 is "0," and updates the control flag 120 to "0" if the control flag 120 is "1."

[0055] Furthermore, when the update package 140 includes the application 130, the update unit 210 updates the application 130 stored in the memory 20D using the application 130. Furthermore, when the update package 140 includes another program, the update unit 210 transmits the other program to the ECU 22 associated with the other program and updates the other program.

[0056] The recording unit 220 has a function of recording the updated control program 110 in the ROM 20B and recording the updated application program 130 in the memory 20D. The recording unit 220 also records the acquired update package 140 in the memory 20D.

[0057] Next, before explaining the function of the vehicle-mounted system 10, Figure 5 The flow of data in the vehicle-mounted device 20 as the vehicle-mounted apparatus will be described. Figure 5 1 is a data flow diagram showing an example of the flow of data in the vehicle-mounted device 20 .

[0058] Figure 5 The acquisition unit 200 shown is Figure 2 The acquisition unit 200 acquires the update package 140 including the control program 110 and the application 130 from the center server 30 and inputs it to the update unit 210. In addition, the acquisition unit 200 acquires the control flag 120 from the recording unit 220 and inputs it to the update unit 210.

[0059] Figure 5 The updating unit 210 is shown as Figure 2 The update unit 210 uses the program included in the input update package 140 to update the control program 110 and the application program 130 recorded in the recording unit 220 .

[0060] When updating the control program 110, the update unit 210 updates the update-side control program 110A based on the input control flag 120. For example, after updating the update-side control program 110A, the update unit 210 updates the control flag 120 to indicate the update-side control program 110A. By updating the control flag 120, the startup-side control program 110B, which has not been updated, will be updated during the next update.

[0061] (Control process)

[0062] The flow of processing executed by the vehicle-mounted system 10 of this embodiment is described using Figure 6 The processing in the vehicle-mounted device 20 is executed by the CPU 20A of the vehicle-mounted device 20 functioning as the acquisition unit 200, the update unit 210, and the recording unit 220. Figure 6 The update process shown is executed, for example, when an instruction to execute a process of updating each program is input.

[0063] In step S101, the CPU 20A determines whether the update package 140 has been acquired from the center server 30. If the update package 140 has been acquired (step S101: Yes), the CPU 20A proceeds to step S102. On the other hand, if the update package 140 has not been acquired (step S101: No), the CPU 20A waits until the update package 140 is acquired.

[0064] In step S102, CPU 20A determines whether the acquired update package 140 includes the control program 110. If the control program 110 is included (step S102: Yes), CPU 20A proceeds to step S103. On the other hand, if the control program 110 is not included (step S102: No), CPU 20A proceeds to step S107.

[0065] In step S103 , the CPU 20A obtains the control flag 120 from the ROM 20B.

[0066] In step S104 , the CPU 20A obtains the control program 110 from the update package 140 .

[0067] In step S105 , the CPU 20A uses the acquired control program 110 to update the control program 110 recorded on the update surface in the ROM 20B.

[0068] In step S106 , the CPU 20A updates the control flag 120 .

[0069] In step S107, CPU 20A determines whether the acquired update package 140 includes the application 130. If the application 130 is included (step S107: Yes), CPU 20A proceeds to step S108. On the other hand, if the application 130 is not included (step S107: No), CPU 20A proceeds to step S110.

[0070] In step S108 , the CPU 20A obtains the application 130 from the update package 140 .

[0071] In step S109 , the CPU 20A uses the acquired application 130 to update the application 130 recorded in the memory 20D.

[0072] In step S110 , the CPU 20A determines whether the update process has been completed. If the process has been completed (step S110 : Yes), the CPU 20A completes the process. On the other hand, if the process has not been completed (step S110 : No), the CPU 20A proceeds to step S101 .

[0073] (Summary of the First Embodiment)

[0074] The vehicle-mounted device 20 of the present embodiment obtains the update package 140 and updates the control program 110 and the application program 130 according to the programs included in the obtained update package.

[0075] As described above, according to this embodiment, it is possible to efficiently update a program.

[0076] [Second embodiment]

[0077] In the first embodiment, a method of updating the control program 110 and the application program 130 recorded in the vehicle-mounted device 20 is described. In the second embodiment, a method of updating other programs recorded in the ECU 22 is described.

[0078] In addition, due to the structure of the vehicle-mounted system involved in this embodiment (see Figure 1 as well as Figure 2 ), an example of the hardware structure of the vehicle 12 (refer to Figure 3 ), an example of the functional structure of the vehicle-mounted device 20 (see Figure 4 ), and an example of data flow (see Figure 5 ) is the same as the first embodiment, and therefore the description thereof is omitted. Below, the differences from the first embodiment are described. In addition, the same symbols are used for the same structures, and the description thereof is omitted.

[0079] The update package 140 according to the present embodiment also includes other programs recorded in the ECU 22 , and the vehicle-mounted device 20 updates the other programs recorded in the ECU 22 using the update package 140 .

[0080] (Control process)

[0081] The flow of processing executed by the vehicle-mounted system 10 of this embodiment is described using Figure 7 The processing in the vehicle-mounted device 20 is executed by the CPU 20A of the vehicle-mounted device 20 functioning as the acquisition unit 200, the update unit 210, and the recording unit 220. Figure 7 The update process shown is executed when an instruction to execute the process of updating each program is input, for example. Figure 7 In the Figure 6 The update shown processes the same steps, marked with Figure 6 The same symbols are used and their descriptions are omitted.

[0082] In step S111, the CPU 20A determines whether the acquired update package 140 includes other programs stored in the ECU 22. If other programs are included (step S111: Yes), the CPU 20A proceeds to step S112. On the other hand, if other programs are not included (step S111: No), the CPU 20A proceeds to step S110.

[0083] In step S112 , the CPU 20A obtains other programs from the update package 140 .

[0084] In step S113 , the CPU 20A transmits the acquired other programs to the ECU 22 , and updates the other programs recorded in the ECU 22 .

[0085] (Summary of the Second Embodiment)

[0086] The vehicle-mounted device 20 of the present embodiment acquires the update package 140 , and updates other programs recorded in the ECU 22 based on the other programs included in the acquired update package 140 .

[0087] As described above, according to this embodiment, it is possible to efficiently update a program.

[0088] [Remark]

[0089] Furthermore, in the above embodiment, the method of updating each program upon receiving update package 140 has been described. However, this is not limiting. The timing of updating each program may also be controlled. For example, after receiving update package 140, each program included in update package 140 may be updated when the engine, etc., is stopped and vehicle 12 is parked.

[0090] Furthermore, in the above embodiment, the control program 110 recorded in the recording area is updated based on the control flag 120 stored in the ROM 20B. However, this is not limiting. The application 130 can also be updated based on the control flag. For example, the storage 20D includes multiple recording areas and flags indicating the activation side, and the application 130 is recorded in each recording area. The update unit 210 can also determine the update side in the storage 20D based on the flag and update the application 130 on the update side.

[0091] In addition, in the above-mentioned embodiment, various processes executed by CPU20A reading software (program) can also be executed by various processors other than the CPU. As processors in this case, FPGA (Field-Programmable Gate Array) and other PLD (Programmable Logic Device) whose circuit structure can be changed after manufacturing, and ASIC (Application Specific Integrated Circuit) are exemplified as dedicated circuits of processors having circuit structures specially designed to execute specific processes. In addition, each of the above-mentioned processes can be executed by one of these various processors, or by a combination of two or more processors of the same type or different types (for example, multiple FPGAs, and a combination of a CPU and an FPGA, etc.). In addition, the hardware structure of these various processors is more specifically a circuit composed of a combination of circuit elements such as semiconductor elements.

[0092] Furthermore, in the above embodiment, each program is described as being pre-stored (installed) in a non-temporary recording medium that is readable by a computer. For example, the vehicle-mounted program 100 in the vehicle-mounted device 20 is pre-stored in the ROM 20B. However, this is not limiting, and each program may also be provided in the form of being recorded in a non-temporary recording medium such as a CD-ROM (Compact Disc Read Only Memory), a DVD-ROM (Digital Versatile Disc Read Only Memory), or a USB (Universal Serial Bus) memory. Furthermore, the program may also be downloaded from an external device via a network.

[0093] The processing flow described in the above embodiment is an example, and unnecessary steps may be deleted, new steps may be added, or the processing order may be changed without departing from the scope of the present invention.

Claims

1. A vehicle-mounted device comprising: A recording unit that records a control program and an application program in the vehicle-mounted device mounted on the vehicle, wherein The control program is a program recorded in a first recording medium for executing a process for controlling the vehicle-mounted device, and the application program is a program recorded in a second recording medium different from the first recording medium for executing a process on the vehicle-mounted device; an acquisition unit configured to acquire an update package including at least one of a first program for updating the control program and a second program for updating the application program; an updating unit that updates the control program and the application program based on the acquired update package, The recording section records the control program currently being executed in the second recording area, and records a control program of a generation previous to the control program currently being executed in the first recording area as the control program in the first recording medium, The updating unit updates the control program of a generation previous to the control program currently being executed when the flag indicates the first recording area, and updates the control program currently being executed when the flag indicates the second recording area.

2. The vehicle-mounted device according to claim 1, wherein When the update package further includes a third program for updating another program stored in another in-vehicle device, the update unit transmits the third program to the other in-vehicle device and updates the other program.

3. The vehicle-mounted device according to claim 1 or claim 2, wherein: The acquisition unit acquires the update package via wireless communication.

4. A vehicle comprising: The vehicle-mounted device according to any one of claims 1 to 3; and One or more other vehicle-mounted devices connected to the vehicle-mounted device.

5. The vehicle according to claim 4, wherein: When the engine is stopped after the update package is acquired, the in-vehicle device updates the control program and the application program using the acquired update package.

6. A control method, wherein a computer executes the following processing: The processing is: A control program and an application program are recorded in an on-vehicle device mounted on a vehicle, wherein the control program is a program recorded in a first recording medium for executing a process for controlling the on-vehicle device, and the application program is a program recorded in a second recording medium different from the first recording medium for executing a process on the on-vehicle device; obtaining an update package including at least one of a first program for updating the control program and a second program for updating the application program; implementing updates of the control program and the application program according to the obtained update package; recording a control program currently being executed in a second recording area, and recording a control program of a generation preceding the control program currently being executed in the first recording area as the control program in the first recording medium; When the flag indicates the first recording area, the control program of the previous generation of the control program currently being executed is updated, and when the flag indicates the second recording area, the control program currently being executed is updated.

7. A non-transitory recording medium having recorded thereon an in-vehicle program for causing a computer to execute the following processing: The processing is: A control program and an application program are recorded in an on-vehicle device mounted on a vehicle, wherein the control program is a program recorded in a first recording medium for executing a process for controlling the on-vehicle device, and the application program is a program recorded in a second recording medium different from the first recording medium for executing a process on the on-vehicle device; obtaining an update package including at least one of a first program for updating the control program and a second program for updating the application program; implementing updates of the control program and the application program according to the obtained update package; recording a control program currently being executed in a second recording area, and recording a control program of a generation preceding the control program currently being executed in the first recording area as the control program in the first recording medium; When the flag indicates the first recording area, the control program of the previous generation of the control program currently being executed is updated, and when the flag indicates the second recording area, the control program currently being executed is updated.

Images