| 摘要 |
PROBLEM TO BE SOLVED: To provide a control system capable of safely being restored at a time of a failure of program update, even with a simplified structure of a control device, and a program update method.SOLUTION: When receiving a program update request from a diagnostic device 3, a control unit 10a of an ECU 1a transmits a control program 12a stored in a storage unit 11a from a communication unit 14a to an ECU 1b. Then, the ECU 1b receives the control program 12a and stores the program in a storage unit 11b. It causes an old program to be saved in the ECU 1b. The control unit 10a of the ECU 1a receives a new computer program from the diagnostic device 3 and updates a computer program in the storage unit 11a. When the update fails, the control unit 10a of the ECU 1a transmits a program transmission request to the ECU 1b and receives the control program 12a that has been saved in the ECU 1b so as to store the program in the storage unit 11a again. |
