Update service is what allow you to run WSUS as you mentioned. This is basically an in house microsoft update site. It acts as a central repository in your network which allows you to synchronize patches and approve updates locally. The idea is that you have one machine grab the updates from the internet and then all of the other computers in your network get them from the WSUS server to speed deployment and conserve bandwidth.