The server "pushes" the update to the box, or the box "polls" the server at a scheduled time (often in the middle of the night) to see if a new version is available.
This is a technical investigative report regarding the mechanism and observed behavior in the KAON Media AR4010 set-top box (STB). Update Software in KAON Media AR4010