An ECU performs a program including a step of notifying a system main
relay shut-off signal to a high-voltage system using equipment when a
system main relay shut-off demand due to a HV system failure is
generated, a step of shutting off the system main relay when a high
voltage shut-off acknowledging signal from the high-voltage system using
equipment is not unreceived, a step of shutting off the system main relay
when a high voltage shut-off acknowledging signal from the high-voltage
system using equipment is unreceived and a current value in a high
voltage circuit is more than the predetermined threshold, and a step of
shutting off the system main relay when the current value in the high
voltage circuit is not more than the predetermined threshold and the
predetermined period of time has elapsed from the occurrence of a HV
system malfunction.