JP2014118071A - Vehicular information processing device and program update method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a vehicular information processing device capable of updating security-related programs in the state that an anti-theft function is available even if a vehicle stops its engine or is parking.SOLUTION: A vehicular information processing device controls update of programs which are used by a controller provided in a vehicle. When information indicating that update of security-related programs is available is transmitted to the vehicle, if at least either a travel-related device or a steering-related device is in a normal lock state, the vehicular information processing device determines that update of the security-related programs is available, but on the other hand if at least either of them is not in the normal lock state, the vehicular information processing device determines that update of the security-related programs is unavailable. If it is determined that update of the security-related programs is available, the vehicular information processing device instructs the controller using the security-related programs to update the security-related programs using update programs acquired by the vehicle.

Description

  The present invention relates to a program update technique used by an in-vehicle control device.

  In an in-vehicle network such as CAN, various ECUs execute programs according to functions, and the programs are supplied to vehicles by an update program distributed from a service center that performs wireless communication with the vehicle or by a service station or the like. There is a system that rewrites the update program. Since many ECUs are executing programs while the vehicle is running, such program updates (reprogramming) can be performed when the vehicle is stopped, that is, when the ignition is off and the vehicle power is on, and there is an obstacle to running. Program update methods that do not have a problem are being studied.

  Patent Document 1 describes that when an in-vehicle device detects a stop state of an engine, an in-vehicle device update program is received from a center server, the program is updated, and then the vehicle power supply is shut off. In Patent Document 2, the integrated control device stops the vehicle when there is a rewrite request for a control program of a brake control system mounted on the vehicle through vehicle diagnosis from a maintenance service terminal connected to the vehicle network. It is described that after a braking instruction for making a state is issued, an update program is downloaded and transferred to a control device to be rewritten, and rewriting is performed. Patent Document 3 describes a vehicle control device that checks whether or not a control process is performed by a control unit while the vehicle is running, and updates the program of the control unit when the control process is not performed.

JP 2004-249914 A JP 2007-230317 A JP 2011-077946 A

  According to the conventional program update control described above, the program update is performed at a convenient timing while the engine is stopped or while the vehicle is running. Can be prevented. However, if the security program is to be updated only on condition that the vehicle stops the engine or the vehicle operates the engine in the parking state, the security program is not executed and the anti-theft device functions. Will not. Therefore, there is a risk of theft during program update.

  The present invention has been made in view of such conventional problems, and it is possible to update a security program in a state where the anti-theft function is exhibited even when the vehicle is stopped or parked. An information processing apparatus for a vehicle and a program update method are provided.

  1st aspect of this invention is the information processing apparatus for vehicles which controls the update of the program which the control apparatus with which a vehicle is equipped, Comprising: The information which shows that the update of a security system program is possible is given to a vehicle If at least one of the traveling system device and the steering system device is in a specified lock state, it is determined that the security system program can be updated, while the at least one device is in the specified state. If it is determined that the security system program cannot be updated unless it is in the locked state, and it is determined that the security system program can be updated, the security system program is updated by the update program acquired by the vehicle. An instruction is given to the control device using the security program.

  According to a second aspect of the present invention, there is provided a vehicle information processing device that controls updating of a program used by a control device provided in a vehicle, and information indicating that a security program can be updated is stored in the vehicle. A lock state detection unit that detects whether or not at least one of the traveling system device and the steering system device is in a specified locked state, and the at least one device by the lock state detection unit. Is detected as being in the specified lock state, it is determined that the security program can be updated, while the lock state detection unit does not cause the at least one device to be in the specified lock state. An update availability determination unit that determines that the security program cannot be updated, and the update availability determination unit An update instruction unit for instructing the control device using the security program to update the security program by an update program acquired by a vehicle when it is determined that the security program can be updated. It is characterized by having.

  In addition, according to a third aspect of the present invention, in the second aspect, when the update availability determination unit determines that the security program cannot be updated, the security program is not updated. It is characterized by.

  In addition, according to a fourth aspect of the present invention, in the second aspect, when the update availability determination unit determines that the security program cannot be updated, the at least one device is placed in the specified lock state. And a lock instructing unit for instructing the control to be performed.

  According to a fifth aspect of the present invention, in the fourth aspect, after the lock instructing unit gives an instruction to control the at least one device to be in the prescribed locked state, the update availability determining unit The security system program is not updated after it is determined that the security system program cannot be updated.

  According to a sixth aspect of the present invention, there is provided a program update method for controlling update of a program used by a control device provided in a vehicle, and information indicating that a security program can be updated is given to the vehicle. A step of detecting whether or not at least one of the traveling system device and the steering system device is in a prescribed locked state, and that the at least one device is in the prescribed locked state. When it is detected, it is determined that the security program can be updated. On the other hand, when it is detected that the at least one device is not in the specified lock state, the security program cannot be updated. And the update program acquired by the vehicle when it is determined that the security program can be updated. Characterized in that it comprises the steps of instructing the control unit to use the security system programmed to update the security-system program by the ram, the.

  According to the first aspect, the second aspect, or the sixth aspect, a predetermined device such as a parking lock or a steering lock is stolen even if the security program is updated while the engine of the vehicle is stopped or in a parking state. Reprogramming is performed in a state where the prevention function is exhibited. Therefore, it is possible to avoid the possibility of theft due to the security program not functioning during the program update.

  According to the third aspect, since the security program is not updated unless the anti-theft function of a predetermined device is in an effective state, an update rule that reliably gives priority to the anti-theft effect can be obtained.

  According to the fourth aspect, when the anti-theft function of a predetermined device is not in an effective state, the anti-theft function is activated, so that reprogramming is executed every opportunity that an update program can be supplied. Becomes easier.

  According to the fifth aspect, in a state where the vehicle cannot enable the anti-theft function of a predetermined device, the security system program can be executed without reprogramming to protect the vehicle from the possibility of theft. Can be prioritized.

The block diagram which shows embodiment of this invention and shows the structure of the vehicle-mounted network system provided with the 1st information processing apparatus for vehicles The flowchart explaining operation | movement of the 1st information processing apparatus for vehicles. The block diagram which shows embodiment of this invention and shows the structure of the vehicle-mounted network system provided with the 2nd information processing apparatus for vehicles Flowchart explaining operation of second information processing apparatus for vehicle

[First Embodiment]
An embodiment of the present invention will be described below with reference to the drawings.

  In FIG. 1, the structure of the vehicle-mounted network system 10 provided with the information processing apparatus for vehicles which concerns on this embodiment is shown.

  The in-vehicle network system 10 includes a communication device 1, a reprogramming ECU (vehicle information processing device) 2, a security ECU 3, a shift-by-wire (SBW) ECU 4, a parking lock device 5, a steering ECU 6, and a steering lock device 7. So that they are connected to each other. The reprogramming ECU 2, the security ECU 3, the shift-by-wire ECU 4, and the steering ECU 6 are connected to each other via a main bus A1 such as a CAN bus.

  The communication device 1 performs wireless communication with a server of a service center that is a distribution source of program update programs used by various ECUs that are control devices provided in the vehicle. The communication device 1 is connected to an internal bus A2, which will be described later, of the reprogramming ECU 2, and relays reception of a program update request from the server, downloading of an update program, and the like to the reprogramming ECU 2. Alternatively, the communication device 1 may function as a communication interface connected by wire to a terminal that supplies an update program to the vehicle at a service station or the like, or a communication interface having both a wireless function and a wired function It may be. Hereinafter, the case of wireless communication will be described as an example, but in the case of wired communication, communication described later is performed with a terminal that supplies an update program connected to the vehicle. Further, it is possible to appropriately modify the communication mode such as performing a part of communication for requesting / confirming the update program wirelessly and performing another communication unit such as supply of the update program by wire.

  The reprogramming ECU 2 includes a processor 2a, a memory 2b, and a transceiver 2c having a computer configuration so as to be connected to each other via an internal bus A2. The memory 2b includes a ROM and a RAM, and any recording medium such as a semiconductor memory, a memory card, or a disk can be used. The processor 2 cooperates with the program describing the program update procedure stored in the ROM of the memory 2b, and the anti-theft operation detection unit (lock state detection unit) 201, the software rewrite determination unit (update availability determination unit). 202 and a software rewriting tool (update instruction unit) 203 can be configured. The transceiver 2c is an interface that transmits and receives programs and data to and from the main bus A1.

  The anti-theft operation detection unit 201 detects a lock state indicating that the traveling system device or the steering device is performing an anti-theft operation. The software rewrite determination unit 202 receives the detection result of the lock state by the anti-theft operation detection unit 201 and determines that reprogramming of various ECUs, particularly the security ECU 3 is possible if it is in the lock state. It is determined that the reprogramming is not possible. When the software rewriting determination unit 202 determines that the ECU can be reprogrammed, the software rewriting tool 203 transmits an update program to the corresponding ECU to instruct rewriting.

  The reprogramming ECU 2 checks with the server of the service center via the communication device 1 at a predetermined timing whether or not there is an update program in the programs used by the various ECUs, and if there is an update program, downloads it. These are stored in a memory (not shown) connected to the main bus A1 or in the memory 2b of the reprogramming ECU 2 itself. The update program stored in the memory corresponds to the ECU via the main bus A1 at the timing described below based on the processing results by the anti-theft operation detection unit 201, the software rewrite determination unit 202, and the software rewrite tool 203. Forwarded individually.

  The security ECU 3 includes a processor 3a, a memory 3b, and a transceiver 3c having a computer configuration so as to be connected to each other via an internal bus A3. The memory 3b includes a flash ROM 301 which is a rewritable nonvolatile memory in addition to the ROM and RAM. The flash ROM 301 stores a control program for the security ECU 3 to effectively function the anti-theft device. The ROM of the memory 3b stores a start program and a rewrite program for program update (reprogramming). When the security ECU 3 receives the update program for the security ECU 3 transmitted from the reprogramming ECU 2 from the main bus A1 via the transceiver 3c, the security ECU 3 reads the activation program and the rewrite program from the ROM and stores them in the flash ROM 301. The control program is rewritten with the update program.

  The shift-by-wire ECU 4 is an ECU that electrically controls the shift position of the vehicle, and can perform parking lock control on the parking lock device 5. Further, the shift-by-wire ECU 4 can perform so-called auto parking lock (auto P) control in which the vehicle shift position is set to the parking position and the parking lock control is performed, and the vehicle power supply is turned off. When there is a parking lock instruction from the shift-by-wire ECU 4 that has received a shift operation to the parking position by the driver's engine switch, or when the auto-P control is performed from the shift-by-wire ECU 4, the parking lock device 5 Mechanical movement is locked. In addition, the parking lock device 5 releases the parking lock by the control from the shift-by-wire ECU 4 that is interlocked with the transition of the vehicle to the ignition-on state. Thus, the shift-by-wire ECU 4 controls the locked state of the traveling system device.

  The steering ECU 6 is an ECU that controls the operation of the steering system by the steer-by-wire system. The steering lock device 7 can perform steering lock control in conjunction with the transition of the vehicle to the ignition-off state. The steering lock device 7 mechanically locks the operation of the steering wheel when steering lock control is performed from the steering ECU 6. Further, the steering lock device 7 releases the steering lock by the control from the steering ECU 6 interlocked with the transition of the vehicle to the ignition-on state. Thus, the steering ECU 6 controls the locked state of the steering system device.

  Next, operations executed by the reprogramming ECU 2 by the anti-theft operation detection unit 201, the software rewrite determination unit 202, and the software rewrite tool 203 will be described using the flowchart of FIG.

  The reprogramming ECU 2 inquires at a predetermined timing to the service center server, relay server, or the like via the communication device 1 whether or not various ECU update programs exist. An individual timing suitable for each ECU may be set as the predetermined timing, and it is determined whether or not an update program exists while the vehicle power is on, including when traveling and when the vehicle is stopped. When there is an update program, a reprogramming request for each update program is returned from the server as the distribution source. Below, although the example which performs reprogramming of security ECU3 is demonstrated, you may also perform reprogramming of other ECUs according to the same procedure.

  In step S101, when the reprogramming ECU 2 receives a request for reprogramming of the security ECU 3 from the server, in step S102, the anti-theft operation detecting unit 201 uses an ignition / off operation in which the vehicle power supply is on as a process start condition. Alternatively, using the ignition on of the vehicle as a process start condition, the shift-by-wire ECU 4 is inquired to detect whether or not the parking lock device 5 is in the parking lock state. Further, the anti-theft operation detection unit 201 inquires of the steering ECU 6 and detects whether or not the steering lock device 7 is in the steering lock state when the vehicle is in an ignition-off state and in a vehicle power-on state. Both the parking lock state and the steering lock state may be detected, or only one of the predetermined ones may be detected.

  In step S102, (a) the parking lock device 5 is in a parking lock state, or (b) the steering lock device 7 is in a steering lock state, or (c) the parking lock device. And / or (d) the parking lock device 5 is in the parking lock state and the steering lock, provided that at least one of 5 is in the parking lock state and / or the steering lock device 7 is in the steering lock state. On condition that the device 7 is in the steering lock state, the software rewrite determination unit 202 determines that the security ECU 3 can be reprogrammed, and the process proceeds to step S103. Which of the above conditions (a) to (d) is adopted is arbitrary, and any one of the conditions may be determined.

  In step S103, software rewriting by the software rewriting tool 203, that is, reprogramming of the security ECU 3 is executed. In step S103, the reprogramming ECU 2 downloads the update program from the server and stores it in the memory connected to the main bus A1 or the memory 2b. This download processing may be performed immediately when a reprogramming request is made from the server, or may be performed at an arbitrary timing when the processing load during traveling is small. The software rewriting tool 203 transmits the update program stored in the memory 2b to the security ECU 3 and instructs to rewrite the program. Alternatively, the software rewriting tool 203 instructs the security ECU 3 to acquire the update program stored in the memory on the main bus A1 and rewrite the program.

  The security ECU 3 receives the update program via the transceiver 3c, starts the start program and the rewrite program stored in the ROM of the memory 3b, and rewrites the security software that is the control program stored in the flash ROM 301. As a result, reprogramming is performed in a state where anti-theft functions such as parking lock and steering lock are exhibited.

  In step S102, when the parking lock device 5 is not in the parking lock state corresponding to the conditions (a) and (d), or the steering lock device 7 corresponds to the conditions (b) and (d). If it is not in the steering lock state, or if the parking lock device 5 is not in the parking lock state and the steering lock device 7 is not in the steering lock state corresponding to the condition (c), the process proceeds to step S104. In step S104, the software rewriting by the software rewriting tool 203, that is, the reprogramming process of the security ECU 3 shown in FIG. 2 is forcibly stopped, and the security ECU 3 is not reprogrammed. Accordingly, the security system program is not updated unless the anti-theft function of a predetermined device such as the parking lock device 5 or the steering lock device 7 is in an effective state, and therefore, an update rule that ensures priority is given to the anti-theft effect. Can do.

  The above process is combined with the auto parking lock control, and after the reprogramming process is completed or if the vehicle power can be turned off when the reprogramming process is stopped, the reprogramming process is canceled. Later, the operation until the vehicle power supply is turned off may be automatically completed.

  As described above, according to the present embodiment, even if the security program is updated when the vehicle is in the engine stop state or the parking state, the anti-theft function such as the parking lock or the steering lock is displayed in a state where the anti-theft function is exhibited. Programming is done. Therefore, it is possible to avoid the possibility of theft due to the security program not functioning during the program update.

  The lock control target is not limited to the parking lock device or the steering lock device as described above, but may be any other traveling system device or steering device such as a pedal mechanism, and at the same time three or more locks are required as conditions. It is also possible to do this.

[Second Embodiment]
Another embodiment of the present invention will be described below with reference to the drawings.

  FIG. 3 shows a configuration of the in-vehicle network system 20 including the vehicle information processing apparatus according to the present embodiment.

  The in-vehicle network system 20 further includes a theft prevention operation instruction unit (lock instruction unit) 204 in the in-vehicle network system 10 of FIG. 1 in cooperation with the processor 2a of the reprogramming ECU 2 and a program describing a program update procedure. It is possible. The other members having the same reference numerals as those in FIG. 1 will be described only with respect to points that are particularly different from those in FIGS.

  The anti-theft operation instruction unit 204 indicates that the anti-theft operation detection unit 201 indicates that the parking lock device 5 is not in the parking lock state or the steering lock device 7 is not in the steering lock state, that is, the vehicle is not performing the anti-theft operation. When this is detected, the shift-by-wire ECU 4 and the steering ECU 6 are instructed to perform an anti-theft operation.

  Next, operations performed by the reprogramming ECU 2 by the anti-theft operation detection unit 201, the software rewrite determination unit 202, the software rewrite tool 203, and the anti-theft operation instruction unit 204 will be described using the flowchart of FIG.

  In step S201, when the reprogramming ECU 2 receives a request for reprogramming of the security ECU 3 from the server, in step S202, the anti-theft operation detecting unit 201 detects that the parking lock device 5 is in an ignition off state and a vehicle power on state. It is detected by inquiring to the shift-by-wire ECU 4 whether or not the parking lock state is set. Further, the anti-theft operation detection unit 201 inquires of the steering ECU 6 and detects whether or not the steering lock device 7 is in the steering lock state when the vehicle is in an ignition-off state and in a vehicle power-on state. Both the parking lock state and the steering lock state may be detected, or only one of them may be detected.

  In step S202, (a) the parking lock device 5 is in a parking lock state, or (b) the steering lock device 7 is in a steering lock state, or (c) the parking lock device. And / or (d) the parking lock device 5 is in the parking lock state and the steering lock, provided that at least one of 5 is in the parking lock state and / or the steering lock device 7 is in the steering lock state. On condition that the device 7 is in the steering lock state, the software rewrite determination unit 202 determines that the reprogramming of the security ECU 3 is possible, and proceeds to step S203. Which of the above conditions (a) to (d) is adopted is arbitrary, and any one of the conditions may be determined.

  In step S203, software rewriting by the software rewriting tool 203, that is, reprogramming of the security ECU 3 is executed. In step S203, the reprogramming ECU 2 downloads the update program from the server and stores it in the memory connected to the main bus A1 or the memory 2b. This download processing may be performed immediately when a reprogramming request is made from the server, or may be performed at an arbitrary timing when the processing load during traveling is small. The software rewriting tool 203 transmits the update program stored in the memory 2b to the security ECU 3 and instructs to rewrite the program. Alternatively, the software rewriting tool 203 instructs the security ECU 3 to acquire the update program stored in the memory on the main bus A1 and rewrite the program.

  The security ECU 3 receives the update program via the transceiver 3c, starts the start program and the rewrite program stored in the ROM of the memory 3b, and rewrites the security software that is the control program stored in the flash ROM 301. As a result, reprogramming is performed in a state where anti-theft functions such as parking lock and steering lock are exhibited.

  In step S202, when the parking lock device 5 is not in the parking lock state corresponding to the conditions (a) and (d), or the steering lock device 7 corresponds to the conditions (b) and (d). If the parking lock device 5 is not in the parking lock state and the steering lock device 7 is not in the steering lock state in response to the condition (c), or if the steering lock device 7 is not in the steering lock state, It is determined that reprogramming of the security ECU 3 is not possible, and the process proceeds to step S204.

  In step S204, the anti-theft operation instruction unit 204 instructs the shift-by-wire ECU 4 to place the parking lock device 5 in the parking lock state in response to the condition (a), or steers in response to the condition (b). The ECU 6 is instructed to put the steering lock device 7 into the steering lock state, or the shift by wire ECU 4 is instructed to put the parking lock device 5 into the parking lock state in response to the condition (c) and the steering ECU 6 is instructed. The steering lock device 7 is instructed to be in the steering lock state. Alternatively, if the parking lock device 5 is not in the parking lock state in response to the condition (d), the parking lock device 5 is locked to the shift-by-wire ECU 4. Instructs to the state, the steering lock device 7 is instructed to the steering lock device 7 and the steering locked state steering ECU6 unless the steering lock state.

  After step S204, the process proceeds to step S205. In step S205, the anti-theft operation detecting unit 201 makes an inquiry to the shift-by-wire ECU 4 to detect whether or not the parking lock device 5 is in the parking lock state, and whether or not the steering lock device 7 is in the steering lock state. Whether or not it is detected by inquiring to the steering ECU 6 is performed again corresponding to the conditions (a) to (d).

  In step S205, if the predetermined conditions (a) to (d) are satisfied, the software rewrite determination unit 202 determines that reprogramming of the security ECU 3 is possible, proceeds to step S203, and uses the software rewrite tool 203. Software rewriting, that is, reprogramming of the security ECU 3 is performed. As a result, reprogramming is performed in a state where anti-theft functions such as parking lock and steering lock are exhibited.

  On the other hand, if the predetermined conditions (a) to (d) are not satisfied in step S205, the software rewrite determination unit 202 determines that reprogramming is not possible and proceeds to step S206. As long as the software rewrite determination unit 202 determines that reprogramming is not possible, the anti-theft operation instruction unit 204 may continue to instruct parking lock or steering lock. However, after the lock instruction, the software rewrite determination unit 202 can reprogram. In step S206, the reprogramming ECU 2 determines that the reprogramming ECU 2 is not in a lockable state or cannot be reprogrammed due to an abnormality in the locking operation, etc., and the software rewriting tool 203 rewrites the software. That is, the reprogramming process of the security ECU 3 is forcibly stopped, and the reprogramming of the security ECU 3 is not performed. Thus, in a state where the anti-theft function of a predetermined device such as the parking lock device 5 or the steering lock device 7 cannot be validated, the vehicle can be executed by executing the security program without performing reprogramming. Priority can be given to protecting against theft.

  As described above, according to the present embodiment, even if the security program is updated when the vehicle is in the engine stop state or the parking state, the anti-theft function such as the parking lock or the steering lock is displayed in a state where the anti-theft function is exhibited. Programming is done. Therefore, the possibility of theft during the program update can be avoided. In addition, when the anti-theft function of a predetermined device such as the parking lock device 5 or the steering lock device 7 is not in an effective state, the anti-theft function is activated. Therefore, every time an update program is distributed from the server It becomes easy to perform reprogramming.

  Note that the above process may be combined with the auto parking lock control, and after the reprogramming process is completed, the operation until the vehicle power is turned off may be automatically completed.

  The present embodiment has been described above. It should be noted that each of the above-described embodiments can be implemented with a configuration changed without departing from the spirit of the present invention.

  The present invention is applicable to a vehicle or the like equipped with an anti-theft device.

2 Reprogramming ECU
3 Security ECU
4 Shift-by-wire ECU
5 Parking lock device 6 Steering ECU
7 Steering lock device 10, 20 In-vehicle network system 201 Anti-theft operation detection unit 202 Software rewrite determination unit 203 Software rewrite tool 301 Flash ROM

Claims (6)

An information processing device for a vehicle that controls updating of a program used by a control device provided in the vehicle,
When information indicating that the security system program can be updated is given to the vehicle, if at least one of the traveling system device and the steering system device is in a prescribed locked state, the security system program is updated. While determining that it is possible, it is determined that the security program cannot be updated unless the at least one device is in the prescribed lock state,
A vehicle characterized by instructing the control device using the security program to update the security program by an update program acquired by the vehicle when it is determined that the security program can be updated. Information processing device. An information processing device for a vehicle that controls updating of a program used by a control device provided in the vehicle,
A lock state that detects whether or not at least one of the traveling system device and the steering system device is in a prescribed locked state when information indicating that the security system program can be updated is given to the vehicle A detection unit;
When the lock state detection unit detects that the at least one device is in the specified lock state, the lock state detection unit determines that the security program can be updated, while the lock state detection unit detects the at least one An update availability determination unit that determines that the security program cannot be updated when it is detected that the device is not in the specified lock state;
When the update possibility determination unit determines that the security program can be updated, the control device that uses the security program is instructed to update the security program by an update program acquired by a vehicle. An update instruction section;
An information processing apparatus for a vehicle, comprising:   The vehicle information processing apparatus according to claim 2, wherein the security program is not updated when the update possibility determination unit determines that the security program cannot be updated.   And a lock instructing unit for instructing control to set the at least one device to the specified lock state when the update possibility determination unit determines that the security program cannot be updated. The vehicle information processing apparatus according to claim 2.   After the lock instruction unit gives an instruction to control the at least one device to be in the prescribed lock state, after the update availability determination unit determines that the security system program cannot be updated, the security system 5. The vehicle information processing apparatus according to claim 4, wherein the program is not updated. A program update method for controlling update of a program used by a control device provided in a vehicle,
Detecting whether or not at least one of the traveling system device and the steering system device is in a prescribed locked state when information indicating that the security system program can be updated is given to the vehicle; ,
When it is detected that the at least one device is in the prescribed lock state, it is determined that the security program can be updated, while the at least one device is not in the prescribed lock state. Determining that the security program cannot be updated if detected,
Instructing the control device using the security program to update the security program by an update program acquired by a vehicle when it is determined that the security program can be updated;
A program update method comprising:

Images