Control device, control method, and recording medium

A control device constituting a system of a vehicle, the control device comprising a central processing unit (CPU) configured to:

• store software for executing a predetermined process, the predetermined process including a first process for implementing a first function of the vehicle in cooperation with another control device constituting the system, the control device and the other control device each being configured to update software at startup when software update is available;
• execute the software;
• execute a startup check process before execution of the software at the startup of the control device, the startup check process including,
• transmitting information about the software to the other control device,
• receiving a first signal indicating a result of a check process executed by the other control device using the information about the software, the check process being a process for checking software consistency between the control device and the other control device, and
• determining whether the first process is executable based on the first signal;
• and
• execute a third process when the CPU receives, from the other control device, a second signal indicating a possibility that software inconsistency has occurred between the control device and the other control device after the CPU has started executing the software, the third process including stopping or forbidding execution of the first process.

A control method for a control device constituting a system of a vehicle and including first software for executing a predetermined process, the predetermined process including a first process for implementing a function of the vehicle in cooperation with another control device constituting the system, the control device and the other control device each being configured to update software at startup when software update is available, the control method comprising:

• receiving information about second software stored in the other control device from the other control device before execution of the first software at the startup of the control device, the information about the second software including a program for executing the first process;
• executing a startup check process including a check process for checking consistency between the first software and the second software;
• and
• executing a third process when the control device receives the information about the second software from the other control device after the control device has started executing the first software, the third process including stopping or forbidding execution of the first process.