Remote software upgrading method and system based on HPLC high-speed power line carrier network

Abstract

The invention relates to the technical field of Internet of Things electric power communication, and discloses a remote software upgrading method and system based on an HPLC high-speed power line carrier network. The remote software upgrading method is applied to software upgrading equipment, and specifically comprises the following steps that S101, a master control node of software to be upgraded is obtained, the master control node completes encryption of an upgrading instruction packet through HPLC network broadcasting, if the master control node is in an offline state, a response is triggered through a wake-up pulse signal synchronized with a power line power frequency period, and if the master control node is not in the offline state, the software to be upgraded is upgraded; and it is ensured that the whole network nodes complete instruction synchronization within the preset time. Omnibearing upgrading and optimization are achieved through three core technologies of dynamic fragmentation transmission, millisecond-level service continuity guarantee and resource limit adaptation, the packet loss rate of a high-noise environment is compressed to 0.1% based on a signal-to-noise ratio self-adaptive fragmentation strategy (128KB-512KB), the average transmission time is reduced to 17.4 minutes from 30 minutes in combination with a multi-path concurrent transmission and breakpoint resume protocol, and the transmission efficiency is improved. And 300ms whole-network instruction synchronization is realized with the assistance of a power frequency synchronization wake-up mechanism.

Description

Technical Field

[0001] This invention relates to the technical field of Internet of Things (IoT) power communication, and more specifically, to a remote software upgrade method and system based on HPLC high-speed power line carrier network. Background Technology

[0002] Low-voltage power line carrier communication (LPC) is one of the most basic communication methods in electricity information acquisition systems. It is now widely used in centralized meter reading and is beginning to be applied in smart homes and smart buildings. Currently, the country is vigorously promoting the construction of smart grids, and LPC, as an important technical means to solve the "last mile" problem in smart grids, is playing an increasingly important role in centralized meter reading. However, the routing module on the electricity data acquisition system and the electricity data acquisition terminal cannot communicate directly. If any abnormality occurs in the routing software, it can only be repaired on-site, making software updates and upgrades very troublesome. Traditional power line carrier upgrade solutions have three major bottlenecks: Dynamic fluctuations in channel quality: Power line networks are affected by power frequency harmonics and load switching noise (signal-to-noise ratio fluctuations of up to ±20dB), resulting in a packet loss rate of over 5% for upgrade packet transmission, and the fixed fragmentation strategy is prone to causing transmission timeout failures during high noise periods; Insufficient business continuity assurance: When upgrading equipment, interrupted business processes need to be restarted, and the communication interruption time is >50ms, which cannot meet the millisecond-level response requirements of smart meters for real-time metering and distribution network protection devices; Limited resources and poor device compatibility: The terminal node has small FLASH capacity (usually 1-4MB) and low CPU computing power (<100MHz), which cannot support the verification and storage of the complete upgrade package. The existing solution has an upgrade failure rate of up to 15% due to insufficient hardware resources.

[0003] Based on the above, there is an urgent need to design a remote software upgrade method and system based on HPLC high-speed power line carrier network to make up for the shortcomings of the traditional power line carrier upgrade schemes mentioned above. Summary of the Invention

[0004] The purpose of this invention is to provide a remote software upgrade method and system based on HPLC high-speed power line carrier network, and to build a full life cycle intelligent management system to achieve a triple leap in security, operation and maintenance and energy efficiency. In terms of security, the embedded version dependency tree automatically parses the multi-stage upgrade path to avoid compatibility failures, and the atomic partition switching combined with three-level verification greatly reduces the upgrade failure rate, aiming to solve the problem of resource-constrained terminal upgrades in the existing technology.

[0005] This invention is implemented as follows: a remote software upgrade method based on HPLC high-speed power line carrier network, applied to software upgrade equipment, specifically includes the following steps: S101: Obtain the master control node of the software to be upgraded. The master control node completes the encrypted upgrade instruction package through HPLC network broadcast. If the master control node is offline, it triggers the response through the wake-up pulse signal of the power line frequency period synchronization to ensure that all nodes in the network complete the instruction synchronization within a preset time. S102: The master node dynamically fragments the upgrade command packet into 128KB-512KB segments. Each segment is attached with CRC-32 and SHA-256 double check codes. It transmits the data through multiple paths concurrently, prioritizing the establishment of transmission links with relay nodes whose load is below 60%. When a sudden power line noise is detected, it automatically switches to the backup frequency band. The transmission process adopts a breakpoint resume protocol. When the node restarts after a power outage, it recovers from the offset of the last valid segment. S103: After receiving the switching instruction from the master node, the node completes the partition switching operation within 10ms of the power line voltage crossing zero point. During this period, business data is temporarily stored through a bypass buffer queue. The communication interruption time is <5ms. If the switching fails, it automatically rolls back to the original partition and reports the error log to the master node. S104: Divide the local non-volatile storage area into dual backup partitions. After receiving the complete fragment, the node performs three-level verification. After the verification is successful, the upgrade file is decompressed in the backup partition. At the same time, hardware compatibility is checked. If resources are insufficient, the log cache is automatically cleaned up and safe storage space is reserved. After completion, a ready signal is sent to the master node, and the current business process status snapshot is frozen to the independent storage sector in the dual backup partition. S105: After the independent storage sector starts, it executes a self-test program to verify the operating status of key functional modules. If the heartbeat test is normal for 3 consecutive times, it deletes the old partition files and receives the dynamic fragmentation of the upgrade instruction package. After receiving, it completes the verification of the software upgrade. If the self-test fails or the heartbeat times out, it completes the rollback within 30 seconds and rolls back to the master node via HPLC network broadcast to re-request the remote software upgrade.

[0006] Furthermore, in S101, the master control node broadcasts an encryption upgrade command packet via the HPLC network, including: The instruction package includes the upgrade version number, file hash value, sharding strategy, and target node range; The terminal node that needs to upgrade the software captures instruction packets in low-power listening mode, verifies the digital signature, wakes up the core processor, and generates a hierarchical forwarding path based on the network topology.

[0007] Furthermore, after verifying the digital signature, the core processor is awakened, and a hierarchical forwarding path is generated based on the network topology, including: The master control node, based on the network topology database, divides the terminal nodes into N levels according to physical distance and channel quality; The coverage radius of the first-layer relay node is ≤500 meters. A cross-layer relay selection algorithm is used between each layer to calculate the signal-to-noise ratio gain, historical packet loss rate, and load weight factor between nodes to generate the optimal path tree. When a node failure is detected, a backup relay node is dynamically activated and the path weight is updated to ensure that the broadcast latency fluctuation range is less than ±5%.

[0008] Furthermore, in S102, the master node dynamically fragments the upgrade command packet into 128KB-512KB segments, including: The size of the dynamic fragment is adaptively adjusted according to the real-time channel signal-to-noise ratio. When the HPLC channel utilization is below 40%, a 512KB fragment is used; when the utilization is between 40% and 70%, a 256KB fragment is used; and when the utilization is above 70%, a 128KB fragment is used. The fragmented transmission adopts a priority-based preemptive retransmission mechanism. Critical boot file fragments are given the highest priority and are retransmitted immediately within 20ms after failure. Application layer fragments allow a maximum of 3 retransmissions, with the interval between each retransmission increasing adaptively.

[0009] Furthermore, in S103, after receiving the switching command from the master node, the node completes the partition switching operation within 10ms of the power line voltage zero-crossing point, including: The switching timing is initiated 1ms before the grid voltage crosses zero. The 50Hz power frequency waveform is tracked in real time through the phase-locked loop circuit. When the voltage amplitude is detected to be lower than 5V, a synchronization signal is issued. If a valid zero crossing is not captured for two consecutive cycles, the temperature-compensated crystal oscillator timer is enabled, the FLASH controller write operation is frozen, and the logical address is redirected to the new partition physical address by updating the mapping register in a single cycle through the 32-bit bus. After the address remapping is completed, 128KB of boot code is prefetched from the new partition address into the CPU L1 cache, the memory protection unit is started to isolate the kernel space, and a four-level security verification chain is executed synchronously. The first stage uses CRC-32 to verify the integrity of the boot header structure, the second stage uses SHA-256 to verify the partition image hash value, the third stage uses ECDSA P-256 algorithm to verify the developer certificate, and the final stage uses the national cryptographic SM2 to verify the power grid root certificate chain. After successful verification, the AES-256 encrypted business snapshot is read from the independent encrypted storage area. The LZ77 decompression algorithm is executed to restore the real-time metering data, TCP / IP protocol stack status and security session key. The basic snapshot and difference log are verified by CRC-16 to ensure integrity. Simultaneously, the meter pulse count temporarily stored in SRAM is written directly to the metering ASIC through the DMA channel. The network protocol status is replayed according to the transaction log. Finally, the event record is written in order of timestamp.

[0010] Furthermore, in S104, dual backup partitions are created in the local non-volatile storage area. After receiving the complete fragment, the node performs three-level verification, including: Each received upgrade packet fragment is subjected to a 32-bit CRC check in real time. During the fragment transmission process, the check code is calculated in parallel by a hardware accelerator. After the reception is completed, the CRC value at the end of the fragment is compared with the calculation result. If the check fails, the retransmission mechanism of the fragment is immediately triggered. Once all fragments have been received, the complete upgrade package is reconstructed in memory and the SHA-256 hash engine is started. Memory mapping technology is used to avoid secondary data copying. The calculated 256-bit hash value is compared bit by bit with the target hash value in the instruction packet. If the match fails, the received fragments are deleted and error code 0xF2 is reported. The digital signature of the upgrade package is verified using the power grid root certificate pre-installed on the device. First, the developer's certificate chain is parsed, then the signature validity is verified through elliptic curve dot product operation, and finally the certificate validity period and revocation list are checked. If the verification fails, a safety circuit breaker mechanism is activated to prevent the switching operation.

[0011] Furthermore, in S105, after the independent storage sector starts, a self-test program is executed to verify the operating status of key functional modules, which include: The carrier communication protocol stack is verified by injecting standard test frames to perform bidirectional transmission and reception tests, statistically analyzing packet loss rate and transmission delay, and synchronously monitoring the physical layer signal-to-noise ratio and MAC layer retransmission rate. If any indicator exceeds the limit, error code 0xC1 is recorded. The core metering algorithm is verified by connecting a high-precision standard source and applying a dynamic load, comparing the voltage RMS error, current harmonic analysis accuracy, and energy accumulation error. If the error exceeds the tolerance for three consecutive power frequency cycles, an alarm is triggered. The security encryption engine is verified by performing SM4 / CBC mode encryption and decryption throughput tests, verifying the entropy value of the true random number generator and the write protection status of the key storage area, and simulating encryption consistency under voltage drop. In case of failure, the security subsystem is tripped.

[0012] Furthermore, if the self-test fails or the heartbeat times out, a rollback will be completed within 30 seconds, and the rollback will be broadcast over the HPLC network to the master node to re-request a remote software upgrade, including: Upon detecting an upgrade anomaly, storage access is immediately frozen. The partition mapping table is rolled back to its previous valid state through hardware register operations. Simultaneously, the cached data of the new partition is cleared and the CRC-8 checksum of the mapping table is verified to ensure a lossless switch is completed within 500μs. If the verification fails, the circuit breaker protection mechanism is activated. The watchdog chip is triggered to force a reset signal, and the system cold start is completed within 3ms. The boot program reads the backup boot sector flag and loads the old partition image. At the same time, the power supply voltage fluctuation range is monitored. The reset process is strictly controlled to restore the basic metering function within 50ms. Once the old partition is running stably, an encrypted retransmission request frame is automatically constructed and sent to the master node via the HPLC network according to an exponential backoff strategy. Priority is given to requesting critical fragments, while avoiding repeated upgrades of the same version within 24 hours.

[0013] Compared with existing technologies, the remote software upgrade method and system based on HPLC high-speed power line carrier network provided by this invention has the following advantages: 1. This invention achieves comprehensive upgrades and optimizations through three core technologies: dynamic fragmented transmission, millisecond-level service continuity assurance, and resource limit adaptation. At the transmission layer, an adaptive fragmentation strategy based on signal-to-noise ratio (128KB-512KB) reduces the packet loss rate in high-noise environments to 0.1%. Combined with multi-path concurrent transmission and breakpoint resumption protocols, the average transmission time is reduced from 30 minutes to 17.4 minutes. A power frequency synchronization wake-up mechanism enables 300ms full-network command synchronization. At the service layer, voltage zero-crossing switching technology and bypass buffer queues work together, along with a dual-buffered protocol stack design, to meet the millisecond-level real-time metering requirements of smart meters. At the resource layer, a hardware fingerprint dynamic degradation mechanism reduces FLASH requirements to 0.8MB, covering most older devices. Incremental compression snapshot technology reduces storage usage by 60%, completely solving the problem of upgrading resource-constrained terminals. 2. Building a full lifecycle intelligent management system to achieve a triple leap in security, operation and maintenance, and energy efficiency: In terms of security, the embedded version dependency tree automatically parses multi-stage upgrade paths to avoid compatibility failures, and atomic partition switching combined with three-level verification greatly reduces the upgrade anomaly rate; In terms of operation and maintenance, transaction log replay of encrypted business snapshots ensures 100% data consistency, and the rollback diagnostic engine automatically locates the root causes such as voltage fluctuations / memory overflows, improving operation and maintenance response efficiency by 10 times; In terms of energy efficiency, upgrades based on load forecasting during off-peak hours reduce network congestion by 70%, and the avoidance strategy of automatically suspending transmission when the harmonic distortion rate is >8% avoids power quality deterioration. At the same time, the FLASH wear leveling algorithm extends storage life by 3 times, and the automatic migration partition technology when the bad block rate is >0.5% reduces the hardware failure rate, forming a closed-loop optimization of the entire chain of "transmission-execution-maintenance".

[0014] A remote software upgrade system based on HPLC high-speed power line carrier network is used to execute the above-described remote software upgrade method. The remote software upgrade system includes: The instruction management module, integrated into the FPGA programmable logic unit of the master control node, is used to generate encrypted upgrade instruction packages, broadcast differential instructions through the HPLC physical layer chip, build a hierarchical forwarding path tree in real time, and dynamically select relay nodes. The dynamic fragmentation transmission engine is deployed on the dual-core processors of the master node and relay nodes. It is used to collect the signal-to-noise ratio and network load rate in real time, drive the dynamic adjustment of fragment size, and establish concurrent transmission links based on the routing weight table. It also integrates a 2-12MHz frequency hopping transceiver to switch to a backup frequency band when sudden noise is detected. The dual-partition controller is used to divide the system into two backup partitions and perform three-level verification, as well as parse the hardware description file, dynamically shut down non-core modules, and includes a voltage zero-crossing detection circuit and an address remapping register to achieve atomic switching within 10ms. The rollback management module is used to freeze the process state and perform LZ77 incremental compression, store it in an independent sector, monitor the heartbeat signal of key functional modules, trigger rollback upon timeout, and collect voltage fluctuation waveforms and memory stack images to generate encrypted diagnostic reports. The global scheduling module is used to analyze historical data based on the ARIMA model, lock in the valley period, calculate the current THD value in real time, and decompress the version dependency tree in the upgrade package to initiate a multi-stage upgrade sequence.

[0015] Specifically, the dynamic fragmentation transmission engine includes: The fragmentation decision subunit is an adaptive controller based on SNR sensor and MAC layer statistics. When SNR>15dB and channel utilization<40%, it activates the 512KB fragmentation mode and switches to 128KB fragmentation when SNR<15dB or utilization>70%. The multi-path concurrent subunit integrates a routing table updater and a link quality evaluator. It selects the optimal three paths through a path weighted decision algorithm. When the packet loss rate of a certain path is >5%, its weight is downgraded by 50% and a backup path is activated. It also has three independent HPLC PHY layer transceiver channels, increasing the total throughput to 12Mbps. The anti-interference enhancement subunit is used to store typical power noise spectrum characteristics and perform FFT analysis on the input signal. After matching the noise fingerprint, it triggers frequency hopping and switches between three clean frequency bands of 2MHz / 7MHz / 12MHz. Attached Figure Description

[0016] Figure 1 This is a flowchart illustrating the remote software upgrade method based on HPLC high-speed power line carrier network proposed in this invention. Figure 2 This is a flowchart illustrating the process of the master node dynamically splitting the upgrade instruction packet into 128KB-512KB segments in the remote software upgrade method based on HPLC high-speed power line carrier network proposed in this invention. Figure 3 This is a schematic diagram of the remote software upgrade system based on HPLC high-speed power line carrier network proposed in this invention. Figure 4 This is a schematic diagram of the dynamic fragmentation transmission engine in the remote software upgrade system based on HPLC high-speed power line carrier network proposed in this invention. Detailed Implementation

[0017] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0018] The implementation of the present invention will be described in detail below with reference to specific embodiments.

[0019] In the accompanying drawings of this embodiment, the same or similar reference numerals correspond to the same or similar components. In the description of this invention, it should be understood that if terms such as "upper," "lower," "left," and "right" indicate the orientation or positional relationship based on the orientation or positional relationship shown in the drawings, they are only for the convenience of describing this invention and simplifying the description, and do not indicate or imply that the device or element referred to must have a specific orientation, or be constructed and operated in a specific orientation. Therefore, the terms used to describe positional relationships in the drawings are only for illustrative purposes and should not be construed as limiting this invention. For those skilled in the art, the specific meaning of the above terms can be understood according to the specific circumstances.

[0020] Reference Figure 1-2 As shown, a remote software upgrade method based on HPLC high-speed power line carrier network, applied to software upgrade equipment, specifically includes the following steps: S101: Obtain the master control node of the software to be upgraded. The master control node completes the encrypted upgrade instruction package through HPLC network broadcast. If the master control node is offline, it triggers the response through the wake-up pulse signal of the power line frequency period synchronization to ensure that all nodes in the network complete the instruction synchronization within the preset time. The master node broadcasts the encrypted upgrade command package via the HPLC network, including: The instruction package includes the upgrade version number, file hash value, sharding strategy, and target node range; The terminal node that needs to upgrade the software captures the instruction packet in low-power listening mode, verifies the digital signature, wakes up the core processor, and generates a hierarchical forwarding path based on the network topology. S102: The master node dynamically fragments the upgrade command packet into 128KB-512KB segments. Each segment is attached with CRC-32 and SHA-256 double check codes. It transmits the data through multiple paths concurrently, prioritizing the establishment of transmission links with relay nodes whose load is below 60%. When a sudden power line noise is detected, it automatically switches to the backup frequency band. The transmission process adopts a breakpoint resume protocol. When the node restarts after a power outage, it recovers from the offset of the last valid segment. The master node will dynamically fragment the upgrade command packets into 128KB-512KB segments, including: The size of the dynamic fragment is adaptively adjusted according to the real-time channel signal-to-noise ratio. When the HPLC channel utilization is below 40%, a 512KB fragment is used; when the utilization is between 40% and 70%, a 256KB fragment is used; and when the utilization is above 70%, a 128KB fragment is used. The fragmented transmission adopts a priority-based preemptive retransmission mechanism. The critical boot file fragment is given the highest priority and is retransmitted immediately within 20ms after failure. The application layer fragment allows a maximum of 3 retransmissions, with the interval between each retransmission increasing adaptively. S103: After receiving the switching instruction from the master node, the node completes the partition switching operation within 10ms of the power line voltage crossing zero point. During this period, business data is temporarily stored through a bypass buffer queue. The communication interruption time is <5ms. If the switching fails, it automatically rolls back to the original partition and reports the error log to the master node. Upon receiving the switching command from the master node, the node completes the partition switching operation within 10ms of the power line voltage zero-crossing point, including: The switching timing is initiated 1ms before the grid voltage crosses zero. The 50Hz power frequency waveform is tracked in real time through the phase-locked loop circuit. When the voltage amplitude is detected to be lower than 5V, a synchronization signal is issued. If a valid zero crossing is not captured for two consecutive cycles, the temperature-compensated crystal oscillator timer is enabled, the FLASH controller write operation is frozen, and the logical address is redirected to the new partition physical address by updating the mapping register in a single cycle through the 32-bit bus. After the address remapping is completed, 128KB of boot code is prefetched from the new partition address into the CPU L1 cache, the memory protection unit is started to isolate the kernel space, and a four-level security verification chain is executed synchronously. The first stage uses CRC-32 to verify the integrity of the boot header structure, the second stage uses SHA-256 to verify the partition image hash value, the third stage uses ECDSA P-256 algorithm to verify the developer certificate, and the final stage uses the national cryptographic SM2 to verify the power grid root certificate chain. After successful verification, the AES-256 encrypted business snapshot is read from the independent encrypted storage area. The LZ77 decompression algorithm is executed to restore the real-time metering data, TCP / IP protocol stack status and security session key. The basic snapshot and difference log are verified by CRC-16 to ensure integrity. Simultaneously, the meter pulse count temporarily stored in SRAM is written directly to the metering ASIC through the DMA channel. The network protocol status is replayed according to the transaction log. Finally, the event record is written in order of timestamp. S104: Divide the local non-volatile storage area into dual backup partitions. After receiving the complete fragment, the node performs three-level verification. After the verification is successful, the upgrade file is decompressed in the backup partition. At the same time, hardware compatibility is checked. If resources are insufficient, the log cache is automatically cleaned up and safe storage space is reserved. After completion, a ready signal is sent to the master node, and the current business process status snapshot is frozen to the independent storage sector in the dual backup partition. S105: After the independent storage sector starts, it executes a self-test program to verify the operating status of key functional modules. If the heartbeat test is normal for 3 consecutive times, the old partition file is deleted and the dynamic fragment of the upgrade instruction packet is received. After receiving, the software upgrade is verified. If the self-test fails or the heartbeat times out, the rollback is completed within 30 seconds and the rollback is broadcast to the master node via HPLC network to re-request the remote software upgrade. The independent storage sector executes a self-test program after startup to verify the operational status of key functional modules, which include: The carrier communication protocol stack is verified by injecting standard test frames to perform bidirectional transmission and reception tests, statistically analyzing packet loss rate and transmission delay, and synchronously monitoring the physical layer signal-to-noise ratio and MAC layer retransmission rate. If any indicator exceeds the limit, error code 0xC1 is recorded. The core metering algorithm is verified by connecting a high-precision standard source and applying a dynamic load, comparing the voltage RMS error, current harmonic analysis accuracy, and energy accumulation error. If the error exceeds the tolerance for three consecutive power frequency cycles, an alarm is triggered. The security encryption engine is verified by performing SM4 / CBC mode encryption / decryption throughput tests, verifying the entropy value of the true random number generator and the write protection status of the key storage area, and simulating encryption consistency under voltage drops. In case of failure, the security subsystem is tripped. A full lifecycle intelligent management system is built to achieve a triple leap in security, operation and maintenance, and energy efficiency: In terms of security, the embedded version dependency tree automatically parses multi-stage upgrade paths to avoid compatibility faults, and atomic partition switching combined with three-level verification significantly reduces the upgrade anomaly rate; in terms of operation and maintenance, transaction log replay of encrypted business snapshots ensures 100% data consistency, and the rollback diagnostic engine automatically locates the root causes such as voltage fluctuations / memory overflows, improving operation and maintenance response efficiency by 10 times; in terms of energy efficiency, off-peak upgrades based on load forecasting reduce network congestion by 70%, and the avoidance strategy of automatically suspending transmission when the harmonic distortion rate is >8% avoids power quality deterioration. Meanwhile, the FLASH wear leveling algorithm extends storage life by 3 times, and the automatic migration partition technology when the bad block rate is >0.5% reduces hardware failure rate, forming a closed-loop optimization of the entire "transmission-execution-maintenance" chain.

[0021] In S101 of this embodiment, after verifying the digital signature, the core processor is woken up, and a hierarchical forwarding path is generated based on the network topology, including: The master control node, based on the network topology database, divides the terminal nodes into N levels according to physical distance and channel quality; The coverage radius of the first-layer relay node is ≤500 meters. A cross-layer relay selection algorithm is used between each layer to calculate the signal-to-noise ratio gain, historical packet loss rate, and load weight factor between nodes to generate the optimal path tree. When a node failure is detected, a backup relay node is dynamically activated and the path weight is updated to ensure that the broadcast latency fluctuation range is less than ±5%.

[0022] In S105 of this embodiment, if the self-test fails or the heartbeat times out, the rollback is completed within 30 seconds, and the rollback is broadcast to the master node via the HPLC network to re-request the remote software upgrade, including: Upon detecting an upgrade anomaly, storage access is immediately frozen. The partition mapping table is rolled back to its previous valid state through hardware register operations. Simultaneously, the cached data of the new partition is cleared and the CRC-8 checksum of the mapping table is verified to ensure a lossless switch is completed within 500μs. If the verification fails, the circuit breaker protection mechanism is activated. The watchdog chip is triggered to force a reset signal, and the system cold start is completed within 3ms. The boot program reads the backup boot sector flag and loads the old partition image. At the same time, the power supply voltage fluctuation range is monitored. The reset process is strictly controlled to restore the basic metering function within 50ms. Once the old partition is running stably, an encrypted retransmission request frame is automatically constructed and sent to the master node via the HPLC network according to an exponential backoff strategy. Priority is given to requesting critical fragments, while avoiding repeated upgrades of the same version within 24 hours.

[0023] This invention achieves comprehensive upgrades and optimizations through three core technologies: dynamic fragmented transmission, millisecond-level service continuity assurance, and resource limit adaptation. At the transmission layer, an adaptive fragmentation strategy based on signal-to-noise ratio (128KB-512KB) reduces packet loss in high-noise environments to 0.1%. Combined with multi-path concurrent transmission and breakpoint resume protocol, the average transmission time is reduced from 30 minutes to 17.4 minutes. A power frequency synchronous wake-up mechanism enables 300ms full-network command synchronization. At the service layer, voltage zero-crossing switching technology and bypass buffer queues work together, along with a dual-buffered protocol stack design, to meet the millisecond-level real-time metering requirements of smart meters. At the resource layer, a hardware fingerprint dynamic degradation mechanism reduces FLASH requirements to 0.8MB, covering most older devices. Incremental compression snapshot technology reduces storage usage by 60%, completely solving the problem of upgrading resource-constrained terminals. Reference Figure 3-4As shown, a remote software upgrade system based on HPLC high-speed power line carrier network is used to execute the aforementioned remote software upgrade method. The remote software upgrade system includes: an instruction management module, integrated into the FPGA programmable logic unit of the master node, used to generate encrypted upgrade instruction packets, broadcast differential instructions through the HPLC physical layer chip, construct a hierarchical forwarding path tree in real time, and dynamically select relay nodes; a dynamic fragmentation transmission engine, deployed in the dual-core processors of the master node and relay nodes, used to collect signal-to-noise ratio and network load rate in real time, drive dynamic adjustment of fragment size, and establish concurrent transmission links based on routing weight tables, while integrating a 2-12MHz frequency hopping transceiver, switching to a backup frequency band when sudden noise is detected; a dual-partition controller, used to divide into dual backup partitions and perform three-level verification, as well as parse hardware description files, dynamically shut down non-core modules, and includes voltage zero-crossing detection circuits and address remapping registers, achieving atomic switching within 10ms; and a rollback management module, used to freeze process states and perform LZ77 incremental compression. The system stores data in an independent sector, monitors the heartbeat signals of key functional modules, triggers rollback upon timeout, and collects voltage fluctuation waveforms and memory stack images to generate encrypted diagnostic reports. A global scheduling module analyzes historical data based on the ARIMA model, locks in valley periods, calculates the current THD value in real time, decompresses the version dependency tree within the upgrade package, initiates a multi-stage upgrade sequence, and uses an adaptive fragmentation strategy based on signal-to-noise ratio (128KB-512KB) to compress the packet loss rate in high-noise environments to 0.1%. Combined with multi-path concurrent transmission and breakpoint resumption protocols, the average transmission time is reduced from 30 minutes to 17.4 minutes. A power frequency synchronous wake-up mechanism enables 300ms full-network command synchronization. Voltage zero-crossing switching technology and bypass cache queues work together, along with a dual-buffered protocol stack design, to meet the millisecond-level real-time metering requirements of smart meters. A hardware fingerprint dynamic degradation mechanism reduces FLASH requirements to 0.8MB, covering most older devices, and incremental compression snapshot technology reduces storage usage by 60%, completely solving the problem of upgrading resource-constrained terminals.

[0024] In this city's example, the dynamic fragmentation transmission engine includes: a fragmentation decision subunit, an adaptive controller based on SNR sensor and MAC layer statistics, which activates 512KB fragmentation mode when SNR > 15dB and channel utilization < 40%, and switches to 128KB fragmentation when SNR < 15dB or utilization > 70%; and a multi-path concurrency subunit, integrating a routing table updater and a link quality evaluator, which selects the optimal three paths through a path weighted decision algorithm. When the packet loss rate of a path > 5%, its weight is downgraded by 50% and a backup path is activated, and three independent HPLC paths are used. The PHY layer transceiver channel achieves a total throughput of 12Mbps; the anti-interference enhancement subunit is used to store typical power noise spectrum characteristics and perform FFT analysis on the input signal. After matching the noise fingerprint, frequency hopping is triggered, switching between three clean frequency bands: 2MHz / 7MHz / 12MHz. This technical solution builds a full life cycle intelligent management system to achieve a triple leap in safety, operation and maintenance, and energy efficiency: In terms of safety, the embedded version dependency tree automatically parses multi-stage upgrade paths to avoid compatibility faults, and atomic partition switching combined with three-level verification greatly reduces the upgrade failure rate; In terms of operation and maintenance, this embodiment ensures 100% data consistency through transaction log replay of encrypted service snapshots, and the rollback diagnostic engine automatically locates the root causes such as voltage fluctuations and memory overflows, improving operation and maintenance response efficiency by 10 times. In terms of energy efficiency, peak-hour upgrades based on load forecasting reduce network congestion by 70%, and the avoidance strategy of automatically suspending transmission when the harmonic distortion rate is >8% avoids power quality deterioration. At the same time, the FLASH wear leveling algorithm extends storage life by 3 times, and the automatic migration partitioning technology when the bad block rate is >0.5% reduces hardware failure rate, forming a closed-loop optimization of the entire chain of "transmission-execution-maintenance".

[0025] In this embodiment, the entire operation process can be controlled by a computer to provide signal feedback and implement the steps sequentially. These are all conventional knowledge in current automation control, and will not be elaborated on in this embodiment.

[0026] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, and improvements made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A remote software upgrade method based on HPLC high-speed power line carrier network, characterized in that, Applied to software upgrade equipment, the specific steps include: S101: Obtain the master control node of the software to be upgraded. The master control node completes the encrypted upgrade instruction package through HPLC network broadcast. If the master control node is offline, it triggers the response through the wake-up pulse signal of the power line frequency period synchronization to ensure that all nodes in the network complete the instruction synchronization within a preset time. S102: The master node dynamically fragments the upgrade command packet into 128KB-512KB segments. Each segment is attached with CRC-32 and SHA-256 double check codes. It transmits the data through multiple paths concurrently, prioritizing the establishment of transmission links with relay nodes whose load is below 60%. When a sudden power line noise is detected, it automatically switches to the backup frequency band. The transmission process adopts a breakpoint resume protocol. When the node restarts after a power outage, it recovers from the offset of the last valid segment. S103: After receiving the switching instruction from the master node, the node completes the partition switching operation within 10ms of the power line voltage crossing zero point. During this period, business data is temporarily stored through a bypass buffer queue. The communication interruption time is <5ms. If the switching fails, it automatically rolls back to the original partition and reports the error log to the master node. S104: Divide the local non-volatile storage area into dual backup partitions. After receiving the complete fragment, the node performs three-level verification. After the verification is successful, the upgrade file is decompressed in the backup partition. At the same time, hardware compatibility is checked. If resources are insufficient, the log cache is automatically cleaned up and safe storage space is reserved. After completion, a ready signal is sent to the master node, and the current business process status snapshot is frozen to the independent storage sector in the dual backup partition. S105: After the independent storage sector starts, it executes a self-test program to verify the operating status of key functional modules. If the heartbeat test is normal for 3 consecutive times, it deletes the old partition files and receives the dynamic fragmentation of the upgrade instruction package. After receiving, it completes the verification of the software upgrade. If the self-test fails or the heartbeat times out, it completes the rollback within 30 seconds and rolls back to the master node via HPLC network broadcast to re-request the remote software upgrade.

2. The remote software upgrade method based on HPLC high-speed power line carrier network as described in claim 1, characterized in that, In S101, the master node broadcasts the encryption upgrade command packet via the HPLC network, including: The instruction package includes the upgrade version number, file hash value, sharding strategy, and target node range; The terminal node that needs to upgrade the software captures instruction packets in low-power listening mode, verifies the digital signature, wakes up the core processor, and generates a hierarchical forwarding path based on the network topology.

3. The remote software upgrade method based on HPLC high-speed power line carrier network as described in claim 2, characterized in that, After verifying the digital signature, the core processor is awakened, and a hierarchical forwarding path is generated based on the network topology, including: The master control node, based on the network topology database, divides the terminal nodes into N levels according to physical distance and channel quality; The coverage radius of the first-layer relay node is ≤500 meters. A cross-layer relay selection algorithm is used between each layer to calculate the signal-to-noise ratio gain, historical packet loss rate, and load weight factor between nodes to generate the optimal path tree. When a node failure is detected, a backup relay node is dynamically activated and the path weight is updated to ensure that the broadcast latency fluctuation range is less than ±5%.

4. The remote software upgrade method based on HPLC high-speed power line carrier network as described in claim 3, characterized in that, In S102, the master node dynamically fragments the upgrade command packet into 128KB-512KB segments, including: The size of the dynamic fragment is adaptively adjusted according to the real-time channel signal-to-noise ratio. When the HPLC channel utilization is below 40%, a 512KB fragment is used; when the utilization is between 40% and 70%, a 256KB fragment is used; and when the utilization is above 70%, a 128KB fragment is used. The fragmented transmission adopts a priority-based preemptive retransmission mechanism. Critical boot file fragments are given the highest priority and are retransmitted immediately within 20ms after failure. Application layer fragments allow a maximum of 3 retransmissions, with the interval between each retransmission increasing adaptively.

5. The remote software upgrade method based on HPLC high-speed power line carrier network as described in claim 4, characterized in that, In S103, after receiving the switching command from the master node, the node completes the partition switching operation within 10ms of the power line voltage zero crossing point, including: The switching timing is initiated 1ms before the grid voltage crosses zero. The 50Hz power frequency waveform is tracked in real time through the phase-locked loop circuit. When the voltage amplitude is detected to be lower than 5V, a synchronization signal is issued. If a valid zero crossing is not captured for two consecutive cycles, the temperature-compensated crystal oscillator timer is enabled, the FLASH controller write operation is frozen, and the logical address is redirected to the new partition physical address by updating the mapping register in a single cycle through the 32-bit bus. After the address remapping is completed, 128KB of boot code is prefetched from the new partition address into the CPU L1 cache, the memory protection unit is started to isolate the kernel space, and a four-level security verification chain is executed synchronously. The first stage uses CRC-32 to verify the integrity of the boot header structure, the second stage uses SHA-256 to verify the partition image hash value, the third stage uses ECDSA P-256 algorithm to verify the developer certificate, and the final stage uses the national cryptographic SM2 to verify the power grid root certificate chain. After successful verification, the AES-256 encrypted business snapshot is read from the independent encrypted storage area. The LZ77 decompression algorithm is executed to restore the real-time metering data, TCP / IP protocol stack status and security session key. The basic snapshot and difference log are verified by CRC-16 to ensure integrity. Simultaneously, the meter pulse count temporarily stored in SRAM is written directly to the metering ASIC through the DMA channel. The network protocol status is replayed according to the transaction log. Finally, the event record is written in order of timestamp.

6. The remote software upgrade method based on HPLC high-speed power line carrier network as described in claim 5, characterized in that, In S104, dual backup partitions are created in the local non-volatile storage area. After receiving the complete fragment, the node performs three levels of verification, including: Each received upgrade packet fragment is subjected to a 32-bit CRC check in real time. During the fragment transmission process, the check code is calculated in parallel by a hardware accelerator. After the reception is completed, the CRC value at the end of the fragment is compared with the calculation result. If the check fails, the retransmission mechanism of the fragment is immediately triggered. Once all fragments have been received, the complete upgrade package is reconstructed in memory and the SHA-256 hash engine is started. Memory mapping technology is used to avoid secondary data copying. The calculated 256-bit hash value is compared bit by bit with the target hash value in the instruction packet. If the match fails, the received fragments are deleted and error code 0xF2 is reported. The digital signature of the upgrade package is verified using the power grid root certificate pre-installed on the device. First, the developer's certificate chain is parsed, then the signature validity is verified through elliptic curve dot product operation, and finally the certificate validity period and revocation list are checked. If the verification fails, a safety circuit breaker mechanism is activated to prevent the switching operation.

7. The remote software upgrade method based on HPLC high-speed power line carrier network as described in claim 6, characterized in that, In S105, after the independent storage sector starts, a self-test program is executed to verify the operating status of key functional modules, which include: The carrier communication protocol stack is verified by injecting standard test frames to perform bidirectional transmission and reception tests, statistically analyzing packet loss rate and transmission delay, and synchronously monitoring the physical layer signal-to-noise ratio and MAC layer retransmission rate. If any indicator exceeds the limit, error code 0xC1 is recorded. The core metering algorithm is verified by connecting a high-precision standard source and applying a dynamic load, comparing the voltage RMS error, current harmonic analysis accuracy, and energy accumulation error. If the error exceeds the tolerance for three consecutive power frequency cycles, an alarm is triggered. The security encryption engine is verified by performing SM4 / CBC mode encryption and decryption throughput tests, verifying the entropy value of the true random number generator and the write protection status of the key storage area, and simulating encryption consistency under voltage drop. In case of failure, the security subsystem is tripped.

8. The remote software upgrade method based on HPLC high-speed power line carrier network as described in claim 7, characterized in that, If the self-test fails or the heartbeat times out, a rollback will be completed within 30 seconds, and the rollback will be broadcast over the HPLC network to the master node to re-request a remote software upgrade, including: Upon detecting an upgrade anomaly, storage access is immediately frozen. The partition mapping table is rolled back to its previous valid state through hardware register operations. Simultaneously, the cached data of the new partition is cleared and the CRC-8 checksum of the mapping table is verified to ensure a lossless switch is completed within 500μs. If the verification fails, the circuit breaker protection mechanism is activated. The watchdog chip is triggered to force a reset signal, and the system cold start is completed within 3ms. The boot program reads the backup boot sector flag and loads the old partition image. At the same time, the power supply voltage fluctuation range is monitored. The reset process is strictly controlled to restore the basic metering function within 50ms. Once the old partition is running stably, an encrypted retransmission request frame is automatically constructed and sent to the master node via the HPLC network according to an exponential backoff strategy. Priority is given to requesting critical fragments, while avoiding repeated upgrades of the same version within 24 hours.

9. A remote software upgrade system based on HPLC high-speed power line carrier network, characterized in that, The remote software upgrade system is used to perform the remote software upgrade method according to any one of claims 1-8, and the remote software upgrade system comprises: The instruction management module, integrated into the FPGA programmable logic unit of the master control node, is used to generate encrypted upgrade instruction packages, broadcast differential instructions through the HPLC physical layer chip, build a hierarchical forwarding path tree in real time, and dynamically select relay nodes. The dynamic fragmentation transmission engine is deployed on the dual-core processors of the master node and relay nodes. It is used to collect the signal-to-noise ratio and network load rate in real time, drive the dynamic adjustment of fragment size, and establish concurrent transmission links based on the routing weight table. It also integrates a 2-12MHz frequency hopping transceiver to switch to a backup frequency band when sudden noise is detected. The dual-partition controller is used to divide the system into two backup partitions and perform three-level verification, as well as parse the hardware description file, dynamically shut down non-core modules, and includes a voltage zero-crossing detection circuit and an address remapping register to achieve atomic switching within 10ms. The rollback management module is used to freeze the process state and perform LZ77 incremental compression, store it in an independent sector, monitor the heartbeat signal of key functional modules, trigger rollback upon timeout, and collect voltage fluctuation waveforms and memory stack images to generate encrypted diagnostic reports. The global scheduling module is used to analyze historical data based on the ARIMA model, lock in the valley period, calculate the current THD value in real time, and decompress the version dependency tree in the upgrade package to initiate a multi-stage upgrade sequence.

10. The remote software upgrade system based on HPLC high-speed power line carrier network as described in claim 9, characterized in that, The dynamic fragmentation transmission engine includes: The fragmentation decision subunit is an adaptive controller based on SNR sensor and MAC layer statistics. When SNR>15dB and channel utilization<40%, it activates the 512KB fragmentation mode and switches to 128KB fragmentation when SNR<15dB or utilization>70%. The multi-path concurrent subunit integrates a routing table updater and a link quality evaluator. It selects the optimal three paths through a path weighted decision algorithm. When the packet loss rate of a certain path is >5%, its weight is downgraded by 50% and a backup path is activated. It also has three independent HPLC PHY layer transceiver channels, increasing the total throughput to 12Mbps. The anti-interference enhancement subunit is used to store typical power noise spectrum characteristics and perform FFT analysis on the input signal. After matching the noise fingerprint, it triggers frequency hopping and switches between three clean frequency bands of 2MHz / 7MHz / 12MHz.

Images