Recording method, recording device, and electronic control unit
By recording a flag in the electronic control unit's memory to track replacement history during factory shipment, the method ensures tamper-proof reliability of vehicle data without additional factory equipment changes.
Patent Information
- Authority / Receiving Office
- JP · JP
- Patent Type
- Applications
- Current Assignee / Owner
- SUBARU CORP
- Filing Date
- 2024-12-12
- Publication Date
- 2026-06-24
AI Technical Summary
Conventional methods for recording the replacement history of electronic control units in vehicles fail to ensure tamper-proof reliability of vehicle data, allowing for potential tampering after replacement.
A method and device that record a flag in the electronic control unit's memory to indicate whether it has been replaced, using a detection operation during factory shipment to rewrite the flag from 'replaced' to 'unreplaced', ensuring the flag is non-rewritable except during a final inspection.
Ensures the reliability of vehicle data by accurately tracking replacement history post-factory shipment, preventing tampering and reducing the need for additional factory modifications.
Smart Images

Figure 2026103035000001_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to a recording method, a recording apparatus, and an electronic control unit.
Background Art
[0002] Conventionally, a technique for grasping the replacement history of an electronic control unit that can be mounted on a vehicle has been known.
[0003] For example, in Patent Document 1, in an in-vehicle electronic control unit that stores vehicle-specific information in a non-volatile memory, when replacing the electronic control unit, means for newly writing the vehicle-specific information read from the electronic control unit before replacement into the non-volatile memory, and means for writing the replacement history of the electronic control unit into the same non-volatile memory following the writing of the vehicle-specific information are provided. An in-vehicle electronic control unit is disclosed.
Prior Art Documents
Patent Documents
[0004]
Patent Document 1
Summary of the Invention
Problems to be Solved by the Invention
[0005] According to the conventional technology as disclosed in Patent Document 1, when replacing the electronic control unit at a repair shop or the like, the vehicle-specific information read from the electronic control unit before replacement is carried over, and the replacement history is written into the electronic control unit after replacement. However, in the conventional technology, when writing the replacement history of the electronic control unit at a repair shop or the like, it is impossible to completely eliminate the possibility of tampering with vehicle data such as lifetime values. Therefore, if the electronic control unit is once replaced after the vehicle is shipped from the factory, there is a problem that the reliability of the tamper resistance of the vehicle data decreases.
[0006] In light of these circumstances, the purpose of this disclosure is to provide a technology that ensures reliability regarding the tamper-proof nature of vehicle data by appropriately understanding the replacement history of electronic control units after a vehicle leaves the factory. [Means for solving the problem]
[0007] A recording method according to one embodiment of the present disclosure is a method for recording a flag used by a computer to determine the replacement history of an electronically controlled unit that can be mounted on a vehicle, and includes detecting an operation performed by the electronically controlled unit when the vehicle is shipped from the factory, and, upon detecting the operation, recording an unreplaced flag in the memory of the electronically controlled unit indicating that the electronically controlled unit has not been replaced.
[0008] A recording device according to one embodiment of the present disclosure is a flag recording device used to determine the replacement history of an electronic control unit that can be mounted on a vehicle, comprising one or more processors and one or more memories connected to the one or more processors in a communicative manner, wherein the one or more processors detect an operation performed by the electronic control unit when the vehicle is shipped from the factory, and upon detecting such operation, records an unreplaced flag indicating that the electronic control unit has not been replaced in a memory provided in the electronic control unit.
[0009] An electronic control unit according to one embodiment of the present disclosure is an electronic control unit that can be mounted on a vehicle, wherein the memory of the electronic control unit records either a replaced flag indicating that the electronic control unit has been replaced or an unreplaced flag indicating that the electronic control unit has not been replaced, and the replaced flag can be rewritten to the unreplaced flag triggered by an operation performed by the electronic control unit when the vehicle is shipped from the factory. [Effects of the Invention]
[0010] According to one embodiment of the present disclosure, by appropriately understanding the replacement history of electronic control units after the vehicle leaves the factory, it is possible to ensure the reliability of the tamper-proof nature of vehicle data. [Brief explanation of the drawing]
[0011] [Figure 1] This is a schematic diagram showing the general configuration of a vehicle equipped with an electronic control unit according to one embodiment of the present disclosure. [Figure 2] This is a block diagram showing an example configuration of an electronic control unit according to one embodiment of the present disclosure. [Figure 3] This is a block diagram showing an example configuration of a recording device according to one embodiment of the present disclosure. [Figure 4] This figure illustrates an example of the progression of flags recorded in an electronic control unit according to one embodiment of the present disclosure. [Figure 5] This is a flowchart illustrating an example of operation of a recording device according to one embodiment of the present disclosure. [Modes for carrying out the invention]
[0012] Preferred embodiments of this disclosure will be described in detail below with reference to the attached drawings. In this specification and the drawings, components having substantially the same functional configuration are denoted by the same reference numerals, and redundant descriptions will be omitted.
[0013] (1. Vehicles) Referring to Figure 1, vehicle 10 is an automobile equipped with an internal combustion engine, such as a gasoline engine or a diesel engine, as the power source 1. However, vehicle 10 is not limited to these, and may also be an electric vehicle equipped with a drive motor as the power source 1. Examples of electric vehicles include BEV (Battery Electric Vehicle), HEV (Hybrid Electric Vehicle), PHEV (Plug-in Hybrid Electric Vehicle), and FCEV (Fuel Cell Electric Vehicle).
[0014] The vehicle 10 is configured as a four-wheel automobile that transmits the driving torque output from the driving power source 1 to the wheels. Note that the combination of drive wheels and the driving method are not particularly limited, and the vehicle 10 may be a front-wheel drive vehicle, a rear-wheel drive vehicle, or a four-wheel drive vehicle. Further, when the vehicle 10 is configured as an electric vehicle, it may be an electric vehicle equipped with drive motors corresponding to each wheel.
[0015] The vehicle 10 includes at least the above-described driving power source 1, brake devices 2LF, 2RF, 2LR, 2RR, and an electric steering device 3.
[0016] The driving power source 1 outputs a driving torque that is transmitted to the front-wheel drive shaft 5F via a transmission (not shown) and a differential mechanism 4. The driving of the driving power source 1 and the transmission is controlled by an electronic control unit 20 described later.
[0017] The brake devices 2LF, 2RF, 2LR, 2RR apply braking force to the respective wheels. The brake devices 2LF, 2RF, 2LR, 2RR may be, for example, hydraulic brake devices. In this case, the driving of the hydraulic unit 6 is controlled by the electronic control unit 20, whereby the hydraulic pressure supplied to each of the brake devices 2LF, 2RF, 2LR, 2RR is adjusted. Note that when the vehicle 10 is configured as an electric vehicle, the brake devices 2LF, 2RF, 2LR, 2RR may be used in combination with regenerative braking by the drive motor as the driving power source 1.
[0018] The electric steering device 3 is provided on the front-wheel drive shaft 5F. The electric steering device 3 includes an electric motor (not shown) and a gear mechanism (not shown), and adjusts the steering angle of the front wheels by being controlled by the electronic control unit 20. The electronic control unit 20 controls the electric steering device 3 based on the steering angle of the steering wheel 7 by the driver.
[0019] (2. Electronic Control Unit) In the example shown in Figure 1, the electronic control unit 20 includes an engine control unit 20a, a steering control unit 20b, a brake control unit 20c, and a vehicle control unit 20d. The engine control unit 20a is connected to the internal combustion engine as the power source 1. The steering control unit 20b is connected to the electric steering device 3. The brake control unit 20c is connected to the brake devices 2LF, 2RF, 2LR, and 2RR via a hydraulic unit 6. The vehicle control unit 20d is connected to each of the control units, the engine control unit 20a, the steering control unit 20b, and the brake control unit 20c, via an in-vehicle network such as a CAN (Controller Area Network). The vehicle control unit 20d outputs control signals to each of the control units, the engine control unit 20a, the steering control unit 20b, and the brake control unit 20c.
[0020] The vehicle control unit 20d is connected to an accelerator sensor 31, which detects the amount of operation of the accelerator pedal (not shown), via an in-vehicle network such as CAN. The vehicle control unit 20d is also connected to a brake sensor 32, which detects the amount of operation of the brake pedal (not shown), via an in-vehicle network such as CAN. The vehicle control unit 20d is also connected to a vehicle speed sensor 33, which detects the vehicle speed of the vehicle 10, via an in-vehicle network such as CAN. The vehicle control unit 20d is also connected to an acceleration sensor 34, which detects the acceleration of the vehicle 10, via an in-vehicle network such as CAN. The vehicle control unit 20d is also connected to a steering angle sensor 35, which detects the steering angle of the steering wheel 7, via an in-vehicle network such as CAN.
[0021] The vehicle control unit 20d sets the operation target of the drive power source 1 based on the input information from the accelerator sensor 31, the vehicle speed sensor 33, the acceleration sensor 34, etc. Then, the vehicle control unit 20d generates a control signal corresponding to the set operation target and outputs it to the engine control unit 20a. Also, the vehicle control unit 20d sets the operation target of the electric steering device 3 based on the input information from the vehicle speed sensor 33, the acceleration sensor 34, the steering angle sensor 35, etc. Then, the vehicle control unit 20d generates a control signal corresponding to the set operation target and outputs it to the steering control unit 20b. Further, the vehicle control unit 20d sets the operation target of the brake device 2 based on the input information from the brake sensor 32, the vehicle speed sensor 33, the acceleration sensor 34, etc. Then, the vehicle control unit 20d generates a control signal corresponding to the set operation target and outputs it to the brake control unit 20c. When the vehicle 10 is configured to be capable of executing automatic driving control, the steering control unit 20b can control the electric steering device 3 based on a steering angle or a steering angular velocity appropriately set using a known or arbitrary automatic driving technology during the execution of the automatic driving control.
[0022] However, the electronic control unit 20 in this disclosure is not limited to the control unit described above, and any control unit for controlling the vehicle 10 can be adopted. For example, if the vehicle 10 is configured as an electric vehicle, the electronic control unit 20 may further include a motor control unit (not shown) connected to a drive motor as a drive power source 1, in place of or in addition to the engine control unit 20a. In this case, the electronic control unit 20 may further include a battery control unit (not shown) connected to a drive battery capable of supplying power to the drive motor as a drive power source 1. The electronic control unit 20 may also further include a driver assistance control unit (not shown) that assists the driver in operating the vehicle 10. In this case, the driver assistance control unit performs driver assistance control, such as detecting the distance between the vehicle 10 and a preceding vehicle, based on image data from an external camera (not shown) mounted on the vehicle 10 or distance data from a distance measuring sensor (not shown) such as LiDAR (Light Detection And Ranging).
[0023] Referring to Figure 2, the electronic control unit 20 includes a microcontroller 21. The microcontroller 21 incorporates a processor 22 and a main memory 23 that is communicatively connected to the processor 22. The main memory 23 stores a program for operating the electronic control unit 20, and this program is executed by the processor 22. Specifically, the electronic control unit 20 is configured to operate in multiple sessions, and the program stored in the main memory 23 enables operation in each session and transitions between sessions. While not particularly limited, examples of multiple sessions include a startup session, a reprogramming session, a service function operation session, and a final inspection session for the vehicle 10. The number of processors 22 and main memory 23 incorporated into the microcontroller 21 is arbitrary.
[0024] The electronic control unit 20 includes a microcontroller 21, an input circuit 24, a drive circuit 25, a communication circuit 26, a memory 27, and a power supply circuit 28. The input circuit 24 is a circuit for converting signals input from various sensors mounted on the vehicle 10 into signals that can be input to the microcontroller 21. The drive circuit 25 is a circuit for generating drive signals for various in-vehicle equipment mounted on the vehicle 10 based on signals output from the microcontroller 21. The communication circuit 26 is a circuit for converting signals output from the microcontroller 21 into communication signals for other control units. The communication circuit 26 is also a circuit for converting communication signals received from other control units into signals that can be input to the microcontroller 21. The memory 27 is composed of non-volatile memory such as flash memory, and although details will be described later, it stores a flag used to determine the replacement history of the electronic control unit 20. In addition to the flag, various other data may be stored in the memory 27, but these are stored in a different memory area from the memory area where the flag is recorded. The power supply circuit 28 is a circuit for supplying voltage from a low-voltage power supply (e.g., a 12V power supply) mounted on the vehicle 10 to the microcontroller 21, input circuit 24, drive circuit 25, communication circuit 26, and memory 27, etc. The electronic control unit 20 is equipped with an optional connector terminal (not shown) for connecting the recording device 40, which will be described later, and an optional connector terminal (not shown) for connecting the function checker.
[0025] (3. Recording device) Referring to Figure 3, the recording device 40 according to this embodiment will be described in detail. The recording device 40 may be configured as a terminal device used by an operator in the final inspection process of the vehicle 10 on the production line of the vehicle 10, and is connected to an electronic control unit 20 mounted on the vehicle 10.
[0026] (3-1. Example of recording device configuration) The recording device 40 functions as a computer for recording flags used to determine the replacement history of the electronic control unit 20 that can be mounted on the vehicle 10, by having one or more CPUs (Central Processing Units) or other processors execute a computer program. The computer program is a program that causes the processor to execute the operations that the recording device 40 should perform, which will be described later. The computer program executed by the processor may be recorded on a recording medium that functions as a storage unit 42, which will be described later, or on a recording medium built into the recording device 40 or on any external recording medium that can be attached to the recording device 40.
[0027] The recording medium for storing computer programs may include magnetic media such as hard disks, floppy disks, and magnetic tapes; optical recording media such as CD-ROMs, DVDs, and Blu-ray®; magneto-optical media such as floppy disks; memory elements such as RAM and ROM; flash memory such as USB memory and SSDs; and other media capable of storing programs.
[0028] The recording device 40 comprises at least a processing unit 41 and a storage unit 42. The recording device 40 also includes a connector terminal (not shown) for connecting to a connector terminal of the electronic control unit 20, for example, in the final inspection process of the vehicle 10 on the production line of the vehicle 10.
[0029] The processing unit 41 comprises one or more processors such as a CPU and various peripheral components. Part or all of the processing unit 41 may consist of updatable components such as firmware, or it may be a program module that is executed by instructions from the CPU or the like.
[0030] The memory unit 42 is composed of one or more memory elements such as RAM or ROM that are connected to the processing unit 41 in a communicative manner. However, the type and number of memory units 42 are not particularly limited. The memory unit 42 stores information such as computer programs executed by the processing unit 41, various parameters used in arithmetic processing, detection data, and calculation results.
[0031] (3-2. Functional Configuration of the Processing Unit) The functional configuration of the processing unit 41 of the recording device 40 will now be described. The processing unit 41 comprises a detection unit 411 and a recording unit 412. The detection unit 411 and the recording unit 412 are functions realized by the execution of a computer program by one or more processors such as a CPU. However, some or all of the detection unit 411 and the recording unit 412 may be configured using analog circuits.
[0032] (Detection unit) The detection unit 411 detects the operations performed by the electronic control unit 20 when the vehicle 10 is shipped from the factory (hereinafter sometimes referred to as "factory shipment operations"). Specifically, the detection unit 411 may, for example, detect the operation in which the electronic control unit 20 transitions to the final inspection session based on the final inspection signal output from the function checker during the final inspection process of the vehicle 10 as a factory shipment operation, or it may detect that the final inspection session has been successfully completed as a factory shipment operation. When the electronic control unit 20 receives the final inspection signal from the function checker, it transitions to the final inspection session according to the program stored in the main memory 23 shown in Figure 2. However, this disclosure is not limited thereto, and the electronic control unit 20 may be configured to transition to the final inspection session when it receives the final inspection signal from the function checker and recognizes that a fuse for identifying that the vehicle 10 is on the production line has been inserted in a predetermined location in the fuse box provided in the vehicle 10, in order to avoid unintended operations.
[0033] The final inspection signal is any signal used to check whether the electronic control unit 20 mounted on the vehicle 10 is functioning correctly. For example, a signal used for line-end air purge control (request to stop misfire diagnosis) is exemplified as a final inspection signal for a vehicle 10 equipped with an internal combustion engine as a power source 1. However, the final inspection signal in this disclosure is not limited to this, and any signal used for the final inspection of the vehicle 10, including electric vehicles, can be adopted.
[0034] (Records Department) When the detection unit 411 detects the factory default operation, the recording unit 412 records an "unreplaced" flag, indicating that the electronic control unit 20 has not been replaced, in the memory 27 of the electronic control unit 20 shown in Figure 2.
[0035] Here, a replaced flag indicating that the electronic control unit 20 has been replaced may be pre-recorded in a memory area 27 of the electronic control unit 20 that is not rewritable except when the detection unit 411 detects factory default operation. In this case, once the replaced flag is recorded in the memory 27, the electronic control unit 20 is configured to allow rewriting of the memory area where the replaced flag is pre-recorded only when it receives a final inspection signal output from the function checker. That is, once the replaced flag is recorded in the memory 27, the electronic control unit 20 is configured to prohibit rewriting of the memory area where the replaced flag is pre-recorded except when it receives a final inspection signal output from the function checker. Therefore, the electronic control unit 20 will only allow rewriting of the memory area where the replaced flag is pre-recorded when it transitions to the final inspection session. The timing for pre-recording the replaced flag may be, for example, during the manufacturing process of the electronic control unit 20 itself, but this disclosure is not limited to this, and may be anytime before the final inspection process of the vehicle 10.
[0036] When the detection unit 411 detects the factory default operation, the recording unit 412 overwrites the pre-recorded replaced flag with an unreplaced flag, thereby recording the unreplaced flag in the memory 27 of the electronic control unit 20. Specifically, when the detection unit 411 detects the factory default operation, the recording unit 412 overwrites the pre-recorded replaced flag with an unreplaced flag in a memory area permitted for rewriting by the electronic control unit 20, thereby recording the unreplaced flag. The unreplaced flag recorded by the recording unit 412 is recorded in a non-rewritable memory area of the memory 27 of the electronic control unit 20 and cannot be erased.
[0037] Referring to Figure 4, when an electronic control unit 20 with a replaced flag (e.g., xECUCHANGE=1) pre-recorded is installed in the vehicle 10 at the vehicle 10 production plant and undergoes the factory shipping operations described above, the unreplaced flag (e.g., xECUCHANGE=0) is recorded in the memory 27 of the electronic control unit 20. On the other hand, if the electronic control unit 20 is put on the market without undergoing the factory shipping operations described above, the pre-recorded replaced flag (e.g., xECUCHANGE=1) remains recorded in the memory 27 of the electronic control unit 20. In other words, the memory 27 of the electronic control unit 20 will record either the replaced flag (e.g., xECUCHANGE=1) indicating that the electronic control unit 20 has been replaced, or the unreplaced flag (e.g., xECUCHANGE=0) indicating that the electronic control unit 20 has not been replaced. Therefore, after the vehicle 10 leaves the factory, an operator can access the memory 27 of the electronic control unit 20 installed in the vehicle 10 using a known or arbitrary external diagnostic device and diagnose the flags recorded in the memory 27, thereby appropriately understanding the replacement history of the electronic control unit 20. For example, if the electronic control unit 20 installed in the vehicle 10 after leaving the factory is replaced at a repair shop or the like, the replaced electronic control unit 20 will have a replaced flag (e.g., xECUCHANGE=1) recorded in it.
[0038] (3-3. Examples of recording device operation) Referring to Figure 5, an example of the operation of the recording device 40 according to this embodiment will be explained in accordance with the flowchart. Note that this example of operation is an example of the recording method according to this disclosure.
[0039] In step S10, an electronic control unit 20 is prepared, with a replaced flag pre-recorded in memory 27, indicating that the electronic control unit 20 has been replaced. In Figure 5, ECU is an abbreviation for Electronic Control Unit. The replaced flag is configured to be rewritable to an unreplaced flag, indicating that the electronic control unit 20 has not been replaced, triggered by an operation performed by the electronic control unit 20 when the vehicle 10 is shipped from the factory in step S11. The process then proceeds to step S11.
[0040] In step S11, the recording unit 412 of the processing unit 41 determines whether the detection unit 411 has detected the operation performed by the electronic control unit 20 when the vehicle 10 is shipped from the factory (i.e., the "factory shipment operation" described above). If it is determined that the factory shipment operation has been detected (step S11: YES), the process proceeds to step S12.
[0041] In step S12, the recording unit 412 of the processing unit 41 overwrites the replaced flag, which was previously recorded in the electronic control unit 20 in step S10, with the unreplaced flag. The process then terminates. As a result, the memory 27 of the electronic control unit 20 records the unreplaced flag, indicating that the electronic control unit 20 has not been replaced.
[0042] On the other hand, if it is determined that the factory default operation has not been detected (step S11: NO), the process terminates. As a result, the memory 27 of the electronic control unit 20 retains the replaced flag, indicating that the electronic control unit 20 has been replaced.
[0043] (4. Summary) As described above, the processing unit 41 of the recording device 40 according to this embodiment records a flag used to determine the replacement history of the electronic control unit 20 for the electronic control unit 20 in which a replaced flag indicating that the electronic control unit 20 has been replaced has been pre-recorded in the memory 27. That is, when the processing unit 41 of the recording device 40 detects an operation performed by the electronic control unit 20 when the vehicle 10 is shipped from the factory, it rewrites the replaced flag pre-recorded in the memory 27 of the electronic control unit 20 to an unreplaced flag indicating that the electronic control unit 20 has not been replaced.
[0044] With this configuration, the memory 27 of the electronic control unit 20 installed in the vehicle 10 after it has left the factory will record an "unreplaced" flag indicating that the electronic control unit 20 has not been replaced. On the other hand, the memory 27 of an electronic control unit 20 that is sold on the market independently of the vehicle 10 after it has left the factory will record a "replaced" flag indicating that the electronic control unit 20 has been replaced. Therefore, by diagnosing the flags recorded in the memory 27 of the electronic control unit 20 installed in the vehicle 10, it is possible to appropriately determine whether or not the electronic control unit 20 has been replaced after the vehicle 10 has left the factory. Thus, by appropriately understanding the replacement history of the electronic control unit 20 after the vehicle 10 has left the factory, the reliability of the vehicle data's resistance to tampering can be ensured.
[0045] Furthermore, according to this embodiment, a flag used to determine the replacement history of the electronic control unit 20 is recorded, triggered by an operation performed by the electronic control unit 20 when the vehicle 10 is shipped from the factory. Therefore, there is no need to carry out new modifications to factory equipment, and costs can be reduced in order to properly understand the replacement history of the electronic control unit 20.
[0046] While preferred embodiments of the present disclosure have been described in detail above with reference to the attached drawings, the present disclosure is not limited to such examples. It is clear to any person with ordinary skill in the art to which the present disclosure belongs that various modifications or alterations can be conceived within the scope of the technical idea described in the claims, and these will naturally also be understood to fall within the technical scope of the present disclosure. For example, the functions, etc., included in each component or step, etc., can be rearranged in a logically consistent manner, and multiple components or steps, etc., can be combined into one or divided into two.
[0047] In the embodiment described above, the case in which the replaced flag is pre-recorded in memory 27 was explained, but the replaced flag is optional. That is, as long as the unreplaced flag is recorded in the memory 27 of the electronic control unit 20 triggered by an operation performed by the electronic control unit 20 when the vehicle 10 is shipped from the factory, and the unreplaced flag is distinguishable from other information recorded in memory 27, it is not necessarily required that the replaced flag be pre-recorded in the memory 27 of the electronic control unit 20.
[0048] Furthermore, although the recording device 40 was described in the above-described embodiment as being connected to a connector terminal of the electronic control unit 20, it may also be configured as a program stored in the main memory 23 that is executed as a function of the electronic control unit 20.
[0049] Furthermore, the technology disclosed herein can also be realized as the electronic control unit 20 in the above-described embodiment, the vehicle 10 equipped with the electronic control unit 20 in the above-described embodiment, a computer program that causes the computer to function as the recording device 40 in the above-described embodiment, and a non-temporary tangible recording medium on which the computer program is recorded. [Explanation of Symbols]
[0050] 10: Vehicle, 20: Electronic control unit, 21: Microcontroller, 22: Processor, 23: Main memory, 24: Input circuit, 25: Drive circuit, 26: Communication circuit, 27: Memory, 28: Power supply circuit, 40: Recording device, 41: Processing unit, 411: Detection unit, 412: Recording unit, 42: Storage unit
Claims
1. A method for recording flags used by a computer to determine the replacement history of an electronically controlled unit that can be mounted on a vehicle, To detect the operations performed by the electronic control unit when the vehicle is shipped from the factory, Upon detecting the aforementioned operation, the electronic control unit records an "unreplaced" flag in its memory, indicating that the electronic control unit has not been replaced. Recording method.
2. A replacement flag indicating that the electronic control unit has been replaced is pre-recorded in a memory area that cannot be rewritten except when the aforementioned operation is detected. The recording method according to claim 1.
3. When the computer detects the operation, it further includes recording the un-replaced flag in the memory by rewriting the replaced flag to the un-replaced flag. The recording method according to claim 2.
4. A flag recording device used to determine the replacement history of an electronic control unit that can be mounted on a vehicle, It comprises one or more processors and one or more memories connected to the one or more processors in a communicative manner, The aforementioned one or more processors The operation performed by the electronic control unit when the vehicle is shipped from the factory is detected, Upon detecting the aforementioned operation, an "unreplaced" flag indicating that the electronic control unit has not been replaced is recorded in the memory of the electronic control unit. Recording device.
5. An electronic control unit that can be mounted on a vehicle, The memory of the electronic control unit records either a replaced flag indicating that the electronic control unit has been replaced, or an unreplaced flag indicating that the electronic control unit has not been replaced. The replaced flag can be rewritten to the not replaced flag triggered by an operation performed by the electronic control unit when the vehicle is shipped from the factory. Electronic control unit.