Program upgrade control method for electrical appliances

Abstract

The present invention relates to the field of electrical appliance technology, and specifically provides a program upgrade control method for electrical appliances, which aims to solve the problem that after the Boot program of the existing electrical appliance verifies the User program, once a problem occurs in the User program, it will lead to the inability to enter the program upgrade mode. To this end, the program upgrade control method of the present invention includes the following steps: during the running of the Boot program, judging whether an upgrade instruction is obtained; and selectively upgrading the User program according to the judgment result of whether the upgrade instruction is obtained. With the above method, the Boot program is always in a running state, and once the upgrade instruction is obtained, the User program can be upgraded immediately, reducing the dependence on the User program. Regardless of whether the User program is verified or not, or whether there is a problem, the program upgrade mode can be entered, thereby improving the user experience.

Description

Technical Field

[0001] The present invention relates to the technical field of electrical appliances, and in particular provides a program upgrade control method for electrical appliances. Background Art

[0002] With the advancement of science and technology, people's living standards are getting higher and higher, and daily housework is gradually replaced by machines from human labor. Electrical appliances, as commonly used electrical equipment in daily life, have brought great convenience to people's lives. Electrical appliances include washing machines, dryers, washer-dryers, air conditioners, televisions, refrigerators and other electrical equipment. In order to meet the diverse usage needs of users, more and more programs are installed on electrical appliances. However, the existing programs are fixed and it is difficult to meet the growing usage needs of users.

[0003] In order to solve the above problems, in the prior art, the computer board of the electrical appliance stores the Boot program and the User program, wherein the Boot program is a program for upgrading services, which is used to receive a new User program, erase the current User program, and write a new User program. The User program is a functional application program of the electrical appliance. After the computer board receives the upgrade instruction, an upgrade flag is set in the memory of the computer board, and the chip of the computer board is reset, and then the computer board enters the program upgrade mode, i.e., the Boot program mode, to complete the User program upgrade. In the above process, when the Boot program verifies the User program, only the User program is executed, and the Boot program no longer runs. Once there is a problem with the User program, it will result in the inability to enter the program upgrade mode, i.e., the inability to enter the Boot program, and thus the inability to upgrade the User program, which reduces the user experience.

[0004] Therefore, the art needs a new program upgrade control method for electrical appliances to solve the above problems. Summary of the invention

[0005] In order to solve the above-mentioned problems in the prior art, that is, to solve the problem that after the Boot program of the existing electrical appliance has verified the User program, once a problem occurs in the User program, it will lead to the inability to enter the program upgrade mode, that is, the inability to enter the Boot program, and thus the inability to upgrade the User program, the present invention provides a program upgrade control method for an electrical appliance, the electrical appliance includes a computer board, and the computer board stores the Boot program and the User program; the program upgrade control method includes the following steps: during the running of the Boot program, determining whether an upgrade instruction is obtained; and selectively upgrading the User program according to the determination result of whether the upgrade instruction is obtained.

[0006] In the preferred technical solution of the above-mentioned program upgrade control method, before the step of "determining whether the upgrade instruction is obtained", the program upgrade control method also includes: determining whether the User program has passed the verification; if the User program verification has not passed, directly executing the judgment operation of whether the upgrade instruction is obtained.

[0007] In the preferred technical solution of the above-mentioned program upgrade control method, before the step of "determining whether the upgrade instruction is obtained", the program upgrade control method also includes: if the User program verification passes, executing the User program and continuing to run the Boot program; obtaining the execution time of the User program; based on the execution time, selectively killing the User program and performing a judgment operation on whether the upgrade instruction is obtained when the Boot program is running.

[0008] In the preferred technical solution of the above-mentioned program upgrade control method, the step of "selectively killing the User program according to the execution time and executing the judgment operation of whether the upgrade instruction is obtained when the Boot program is running" specifically includes: if the execution time exceeds the preset time threshold, killing the User program but continuing to run the Boot program and executing the judgment operation of whether the upgrade instruction is obtained.

[0009] In the preferred technical solution of the above-mentioned program upgrade control method, the step of "selectively killing the User program according to the execution time and executing the judgment operation of whether the upgrade instruction is obtained when the Boot program is running" also includes: if the execution time does not exceed the preset time threshold, the User program is not killed and the Boot program continues to run and the judgment operation of whether the upgrade instruction is obtained is executed.

[0010] In the preferred technical solution of the above-mentioned program upgrade control method, the step of "selectively upgrading the User program according to the judgment result of whether the upgrade instruction is obtained" specifically includes: if the upgrade instruction is obtained, upgrading the User program.

[0011] In the preferred technical solution of the above-mentioned program upgrade control method, when the User program verification fails, the step of "selectively upgrading the User program based on the judgment result of whether the upgrade instruction is obtained" also includes: if the upgrade instruction is not obtained, the User program is not upgraded.

[0012] In the preferred technical solution of the above-mentioned program upgrade control method, when the User program passes the verification and the execution time does not exceed the preset time threshold, the step of "selectively upgrading the User program according to the judgment result of whether the upgrade instruction is obtained" also includes: if the upgrade instruction is not obtained, the User program is not upgraded, and the User program is executed again.

[0013] In the preferred technical solution of the above-mentioned program upgrade control method, when the User program passes the verification but the execution time exceeds the preset time threshold, the step of "selectively upgrading the User program according to the judgment result of whether the upgrade instruction is obtained" also includes: if the upgrade instruction is not obtained, judging whether the number of executions of the User program is less than the preset number threshold; if the number is less than the preset number threshold, the User program is not upgraded, and the User program is executed again.

[0014] In the preferred technical solution of the above-mentioned program upgrade control method, the step of "selectively upgrading the User program based on the judgment result of whether the upgrade instruction is obtained" also includes: if the number of times is greater than or equal to the preset number threshold, the User program is not executed again, and the User program is not upgraded.

[0015] It can be understood by those skilled in the art that in the preferred technical solution of the program upgrade control method of the present invention, during the running of the Boot program, it is determined whether the User program has passed the verification; based on the result of the determination of whether the User program has passed the verification, the determination operation of whether the upgrade instruction has been obtained is selectively and directly executed; based on the result of the determination of whether the upgrade instruction has been obtained, the User program is selectively upgraded. Compared with the technical solution in the prior art that only the User program is executed after the Boot program has passed the verification of the User program, and the Boot program no longer runs, once a problem occurs in the User program, it will lead to the inability to enter the program upgrade mode, that is, the inability to enter the Boot program, the Boot program of the present invention is always in a running state, regardless of whether the User program has passed the verification, the Boot program does not stop running, therefore, once the upgrade instruction is obtained, the User program can be upgraded immediately, which improves the response speed of upgrading the User program, reduces the dependence on the User program, and can enter the program upgrade mode regardless of whether the User program has passed the verification or whether there is a problem, thereby improving the user experience.

[0016] Furthermore, if the User program verification passes, it means that the User program can run correctly, then the User program will be executed and the Boot program will continue to run. The Boot program can monitor the User program in real time. If the execution time of the User program exceeds the preset time threshold, it means that there is a problem with the User program during the execution. In order to avoid abnormal execution of the appliance function, the User program is killed. Regardless of whether there is a problem with the User program during the execution, the Boot program does not stop running. Therefore, once the upgrade instruction is obtained, the User program can be upgraded immediately, which improves the response speed to the upgrade of the User program and further reduces the dependence on the User program.

[0017] Furthermore, if an upgrade instruction is obtained, the User program is upgraded. Compared with the technical solution in the prior art that after the computer board receives the upgrade instruction, an upgrade flag is first set in the memory of the computer board, and then the chip of the computer board is reset, and then the User program is upgraded, the present invention upgrades the User program immediately after the upgrade instruction is obtained, eliminates the operations of setting the upgrade flag and resetting the chip, simplifies the process of upgrading the User program, can upgrade the User program more quickly, and further improves the speed of upgrading the User program. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] The program upgrade control method of the present invention is described below with reference to the accompanying drawings, in which:

[0019] Figure 1 is a flow chart of the program upgrade control method of the present invention;

[0020] Figure 2 It is a flow chart of a program upgrade control method according to an embodiment of the present invention. DETAILED DESCRIPTION

[0021] The preferred embodiments of the present invention are described below with reference to the accompanying drawings. It should be understood by those skilled in the art that these embodiments are only used to explain the technical principles of the present invention and are not intended to limit the scope of protection of the present invention. For example, the program upgrade control method of the present invention can be applied to electrical appliances such as washing machines, dryers, integrated washing and drying machines, air conditioners, televisions, refrigerators, and computers.

[0022] Based on the technical problems raised in the background technology, the present invention provides a program upgrade control method for an electrical appliance, in which the Boot program is always in a running state, and the Boot program does not stop running regardless of whether the User program has passed the verification. Therefore, once the upgrade instruction is obtained, the User program can be upgraded immediately, which improves the response speed for upgrading the User program and reduces the dependence on the User program. Regardless of whether the User program has passed the verification or whether there is a problem, the program upgrade mode can be entered, thereby improving the user experience.

[0023] See also Figure 1 and Figure 2 , Figure 1 is a flow chart of the program upgrade control method of the present invention; Figure 2 It is a flow chart of a program upgrade control method of an embodiment of the present invention. The electrical appliance of the present invention includes a computer board, on which a Boot program and a User program are stored, wherein the Boot program is a program for upgrading services, which is used to receive a new User program, erase the current User program, and write the new User program; the User program is a functional application program of the electrical appliance, such as a washing program, a drying program, a sterilization program, etc. of a washing machine, a cooling program, a heating program, a self-cleaning program, etc. of an air conditioner, which are not listed one by one here.

[0024] like Figure 1 As shown, the program upgrade control method of the present invention comprises the following steps:

[0025] S1. During the running of the Boot program, determine whether an upgrade instruction is obtained;

[0026] S2. Selectively upgrade the User program according to the result of determining whether the upgrade instruction is obtained.

[0027] It should be noted that during the execution of step S1 and step S2, the Boot program is always in running state. Regardless of whether the User program has passed the verification or whether the upgrade instruction has been obtained, the Boot program will not stop running. It can not only monitor the User program in real time, but also upgrade the User program immediately when the upgrade instruction is obtained, avoiding the situation where the program upgrade mode (i.e., Boot program mode) cannot be entered due to problems with the User program.

[0028] In a preferred embodiment, during the running of the Boot program, before step S1 "determining whether an upgrade instruction is obtained", the program upgrade control method further includes:

[0029] S01, determining whether the User program has passed verification;

[0030] S02. If the User program passes the verification, the User program is executed and the Boot program continues to run;

[0031] S03. Get the execution time of the User program

[0032] S04, selectively killing the User program according to the execution time and executing a judgment operation on whether the upgrade instruction is obtained when the Boot program is running;

[0033] S05. If the User program verification fails, directly executing the judgment operation of whether the upgrade instruction is obtained.

[0034] Step S01, during the running of the Boot program, it is determined whether the User program has passed the verification.

[0035] In step S02, if the User program passes the verification, it means that the User program is correct or the version is newer and the User program can run, then the User program is executed and the Boot program continues to run, and the Boot program can monitor the User program in real time.

[0036] In step S04, the User program is selectively killed according to the execution time and a judgment operation is performed on whether an upgrade instruction is obtained while the Boot program is running. This not only kills the abnormal User program in time, thereby avoiding abnormal execution of the appliance's functions, but also enables the User program to be upgraded immediately when an upgrade instruction is obtained.

[0037] In step S05, if the User program verification fails, it means that the User program is incorrect or the version is too low, resulting in the inability to run the current User program. In order to enable the User program to run, while the Boot program continues to run, the judgment operation of whether the upgrade instruction is obtained is directly executed. If the upgrade instruction is obtained, the User program can be upgraded immediately, and return to step S01 to verify the upgraded User program to determine whether the upgraded User program can run.

[0038] Preferably, in step S04, the step of "selectively killing the User program according to the execution time, and performing a judgment operation on whether the upgrade instruction is obtained when the Boot program is running" specifically includes:

[0039] S041, determining whether the execution time exceeds a preset time threshold;

[0040] S042, if the execution time exceeds the preset time threshold, the User program is killed, but the Boot program continues to run and performs a judgment operation on whether an upgrade instruction is obtained;

[0041] S043. If the execution time does not exceed the preset time threshold, the User program is not killed and the Boot program continues to run and a judgment operation is performed to determine whether an upgrade instruction is obtained.

[0042] In step S042, if the execution time of the User program exceeds the preset time threshold, it means that a problem occurs during the execution of the User program. In order to avoid abnormal execution of the functions of the appliance, the User program is killed but the Boot program continues to be executed. When the Boot program is running, a judgment operation is performed to determine whether an upgrade instruction is obtained. If an upgrade instruction is obtained, the User program can be upgraded immediately, and the process returns to step S01 to verify the upgraded User program to determine whether the upgraded User program can run.

[0043] In step S043, if the execution time does not exceed the preset time threshold, it means that there is no problem in the execution of the User program and it can run normally, and the functions of the electrical appliance are executed normally. In this case, the User program will not be killed and the Boot program will continue to run. When the Boot program is running, a judgment operation is performed to determine whether an upgrade instruction is obtained. If an upgrade instruction is obtained, the User program can be upgraded immediately. If no upgrade instruction is obtained, the User program will not be upgraded and the User program can be executed again.

[0044] That is to say, in the above process, no matter whether there is a problem in the execution of the User program, the Boot program will not stop running. Therefore, once the upgrade instruction is obtained, the User program can be upgraded immediately, which improves the response speed of the User program upgrade and further reduces the dependence on the User program.

[0045] In the above process, the preset time threshold may be the longest time for determining that there is no problem in the execution of the User program, such as 1s, 2s, 5s, etc. Of course, the preset time threshold is not limited to the time listed above, and may also be other times, such as experimental time obtained by technicians in this field under specific working conditions based on experiments, or empirical time obtained based on experience, as long as the requirement for determining whether there is a problem in the execution of the User program determined by the preset time threshold is met.

[0046] In a preferred embodiment, when the User program fails to pass the verification, only the Boot program runs, and the Boot program is always in a running state. Since the Boot program is always in a running state, the Uart communication port of the computer board can be monitored in real time, and it can be timely determined whether the upgrade instruction is obtained, ensuring that the User program can be upgraded immediately once the upgrade instruction is obtained, thereby improving the response speed of the User program upgrade. Among them, Uart is a Universal Asynchronous Receiver / Transmitter. In step S2, the step of "selectively upgrading the User program according to the result of the determination of whether the upgrade instruction is obtained" specifically includes:

[0047] S211, if the upgrade instruction is obtained, the User program is upgraded;

[0048] S212: If no upgrade instruction is obtained, the User program is not upgraded.

[0049] In step S211, if an upgrade instruction is obtained, it means that there is a new User program. For example, the version of the new User program is higher than the version of the current User program and the current User program needs to be upgraded. In this case, the User program is upgraded and the process returns to step S01 to verify the upgraded User program to determine whether the upgraded User program can run.

[0050] In step S212, if no upgrade instruction is obtained, it means that there is no new User program. For example, the current version of the User program is the highest version and there is no need to upgrade the current User program, so the User program is not upgraded.

[0051] When the User program passes the verification but the execution time exceeds the preset time threshold, the Boot program is always in the running state. Since the Boot program is always in the running state, it can monitor the Uart communication port of the computer board in real time and can promptly determine whether the upgrade instruction is obtained, ensuring that the User program can be upgraded immediately once the upgrade instruction is obtained, thereby improving the response speed of the User program upgrade. In step S2, the step of "selectively upgrading the User program according to the judgment result of whether the upgrade instruction is obtained" specifically includes:

[0052] S221, if the upgrade instruction is obtained, the User program is upgraded;

[0053] S222: If no upgrade instruction is obtained, determine whether the number of executions of the User program is less than a preset number threshold;

[0054] S223, if the number of times is less than the preset number threshold, the User program is not upgraded and the User program is executed again;

[0055] S224: If the number of times is greater than or equal to the preset number threshold, the User program is not executed again, and the User program is not upgraded.

[0056] In step S221, if an upgrade instruction is obtained, it means that there is a new User program. For example, the version of the new User program is higher than the version of the current User program and the current User program needs to be upgraded. In this case, the User program is upgraded and the process returns to step S01 to verify the upgraded User program to determine whether the upgraded User program can run.

[0057] In step S222, if no upgrade instruction is obtained, it means that there is no new User program. For example, the current version of the User program is the highest version and there is no need to upgrade the current User program. In addition, although it is determined in step S232 that the execution time of the User program exceeds the preset time threshold, it is considered that a problem occurs during the execution of the User program. However, since the User program is verified in step S222, in order to accurately determine whether the User program has an accidental problem during operation, it is necessary to determine whether to execute the User program again based on the number of times the User program is executed, and to determine again whether a problem occurs during the execution of the User program.

[0058] In step S223, if the number of times is less than the preset number threshold, it means that the User program has been executed a small number of times, for example, 1 time, 2 times, etc., and it is impossible to completely rule out whether the User program has problems due to accidental reasons during operation within a small number of times. In order to accurately determine whether the User program has problems accidentally during execution, the User program is not upgraded, and the User program is executed again, and steps S041 to S2 are repeated until an upgrade instruction is obtained or the number of times is greater than or equal to the preset number threshold.

[0059] In step S224, if the number of times is greater than or equal to the preset number threshold, it means that the User program has been executed many times, and the execution time of the User program still exceeds the preset time threshold. It can be determined that a problem occurred during the execution of the User program, and the problem was not caused by accidental reasons. Even if the User program is executed again, the problem still occurs. In this case, the User program will not be executed again, and the User program will not be upgraded.

[0060] It should be noted that the preset number threshold may be 2 times, 3 times, 4 times, 5 times or any number of times, and those skilled in the art may flexibly adjust and set the value of the preset number threshold.

[0061] When the User program passes the verification and the execution time does not exceed the preset time threshold, the Boot program is always in the running state. Since the Boot program is always in the running state, it can monitor the Uart communication port of the computer board in real time and can promptly determine whether the upgrade instruction is obtained, ensuring that the User program can be upgraded immediately once the upgrade instruction is obtained, thereby improving the response speed of the User program upgrade. In step S2, the step of "selectively upgrading the User program according to the result of the determination of whether the upgrade instruction is obtained" specifically includes:

[0062] S231, if the upgrade instruction is obtained, the User program is upgraded;

[0063] S232: If no upgrade instruction is obtained, the User program is not upgraded and the User program is executed again.

[0064] In step S231, if an upgrade instruction is obtained, it means that there is a new User program. For example, the version of the new User program is higher than the version of the current User program, and the current User program needs to be upgraded. In this case, the User program is upgraded and the process returns to step S01 to verify the upgraded User program to determine whether the upgraded User program can run.

[0065] In step S232, if no upgrade instruction is obtained, it means that there is no new User program. For example, the current version of the User program is the highest version and there is no need to upgrade the current User program, so the User program is not upgraded. Since the User program has passed the verification and the execution time does not exceed the preset time threshold, the User program can be executed again.

[0066] It should be further explained that, in the above process, the step of "upgrading the User program" specifically includes: erasing the current User program through the Boot program and writing the new User program, thereby achieving the upgrade of the User program.

[0067] In a preferred embodiment, before step S01 "determining whether the User program has passed verification", the program upgrade control method further includes:

[0068] S001, reset the chip of the computer board;

[0069] S002. Run the Boot program.

[0070] In step S001, preferably, when the computer board is powered on, the chip of the computer board is powered on and reset, for example, reset to the initial state, so as to better enter the Boot program. Although there is also a power-on reset operation in this embodiment, the power-on reset operation is to power on reset the chip before executing the Boot program, and the chip will not be reset after executing the Boot program. In the prior art, after the computer board receives the upgrade instruction, the upgrade flag is first set in the memory of the computer board, and then the chip of the computer board is reset. Therefore, it can be seen that the time for resetting the chip of the computer board is different. The reset operation of this embodiment does not complicate the process of upgrading the User program. With the technical solution of this embodiment, the User program is still upgraded immediately after the upgrade instruction is obtained, and the User program can be upgraded more quickly, which improves the speed of upgrading the User program.

[0071] Refer to the following Figure 2 , Figure 2 It is a flow chart of a program upgrade control method according to an embodiment of the present invention.

[0072] like Figure 2 As shown, in a preferred embodiment, the complete process of the program upgrade control method of the electrical appliance of the present invention can be:

[0073] S001, reset the chip of the computer board;

[0074] S002, run the Boot program;

[0075] S01, determine whether the User program has passed the verification;

[0076] S02, if the User program passes the verification, execute the User program and continue to run the Boot program; otherwise, directly execute step S11;

[0077] S03, obtain the execution time of the User program;

[0078] S041, determining whether the execution time exceeds a preset time threshold;

[0079] S042, if the execution time exceeds the preset time threshold, the User program is killed, but the Boot program continues to be executed and step S12 is executed;

[0080] S043, if the execution time does not exceed the preset time threshold, the User program is not killed and the Boot program continues to run and step S13 is executed;

[0081] S11, determining whether an upgrade instruction is obtained;

[0082] S211, if the upgrade instruction is obtained, the User program is upgraded and step S01 is executed again;

[0083] S212: If no upgrade instruction is obtained, the User program is not upgraded;

[0084] S12, determining whether an upgrade instruction is obtained;

[0085] S221, if the upgrade instruction is obtained, the User program is upgraded and step S01 is executed again;

[0086] S222: If no upgrade instruction is obtained, determine whether the number of executions of the User program is less than a preset number threshold;

[0087] S223, if the number of times is less than the preset number threshold, the User program is not upgraded and the process returns to step S02;

[0088] S224, if the number of times is greater than or equal to the preset number of times threshold, the User program is not executed again, and the User program is not upgraded;

[0089] S13, determining whether an upgrade instruction is obtained;

[0090] S231, if the upgrade instruction is obtained, the User program is upgraded and step S01 is executed again;

[0091] S232: If no upgrade instruction is obtained, the User program is not upgraded and the process returns to step S02.

[0092] It should be pointed out that the above embodiment is only a preferred implementation of the present invention, which is only used to illustrate the principle of the method of the present invention, and is not intended to limit the scope of protection of the present invention. In practical applications, those skilled in the art can allocate the above functions to different steps as needed, that is, decompose or combine the steps in the embodiment of the present invention. For example, the steps of the above embodiment can be combined into one step, or further divided into multiple sub-steps to complete all or part of the functions described above. The names of the steps involved in the embodiments of the present invention are only for distinguishing the steps and are not regarded as limitations of the present invention.

[0093] In addition, although not shown in the figures, the present invention also provides an electrical appliance, which includes a control module, and the control module is used to execute the above-mentioned program upgrade control method.

[0094] Preferably, the control module can be the control module of the appliance itself, or an additional control module or other mobile terminal, which will not be described in detail here. In physical form, the control module can be any type of controller, such as a programmable controller, a combinational logic controller, etc.

[0095] So far, the technical solutions of the present invention have been described in conjunction with the preferred embodiments shown in the accompanying drawings. However, it is easy for those skilled in the art to understand that the protection scope of the present invention is obviously not limited to these specific embodiments. Without departing from the principle of the present invention, those skilled in the art can make equivalent changes or substitutions to the relevant technical features, and the technical solutions after these changes or substitutions will fall within the protection scope of the present invention.

Claims

1. A program upgrade control method for an electrical appliance, characterized in that: The electrical appliance comprises a computer board, on which a Boot program and a User program are stored; The program upgrade control method comprises the following steps: During the running of the Boot program, determining whether the User program has passed the verification; If the User program passes the verification, the User program is executed and the Boot program continues to run; Get the execution time of the User program; According to the execution time, the User program is selectively killed and a judgment operation is performed on whether the upgrade instruction is obtained when the Boot program is running; The User program is selectively upgraded according to a result of determining whether the upgrade instruction is obtained.

2. The program upgrade control method according to claim 1, characterized in that: After the step of "determining whether the User program has passed verification", the program upgrade control method further includes: If the User program verification fails, the judgment operation of whether the upgrade instruction is obtained is directly executed.

3. The program upgrade control method according to claim 1, characterized in that: The step of "selectively killing the User program according to the execution time and performing a judgment operation on whether the upgrade instruction is obtained when the Boot program is running" specifically includes: If the execution time exceeds a preset time threshold, the User program is killed, but the Boot program continues to run and a judgment operation is performed to determine whether the upgrade instruction is obtained.

4. The program upgrade control method according to claim 1, characterized in that: The step of "selectively killing the User program according to the execution time and performing a judgment operation on whether the upgrade instruction is obtained when the Boot program is running" also includes: If the execution time does not exceed the preset time threshold, the User program is not killed and the Boot program continues to run and a judgment operation is performed to determine whether the upgrade instruction is obtained.

5. The program upgrade control method according to claim 3 or 4, characterized in that: The step of "selectively upgrading the User program according to the result of determining whether the upgrade instruction is obtained" specifically includes: If the upgrade instruction is obtained, the User program is upgraded.

6. The program upgrade control method according to claim 5, characterized in that: In the case that the User program verification fails, the step of "selectively upgrading the User program according to the result of the determination of whether the upgrade instruction is obtained" further includes: If the upgrade instruction is not obtained, the User program is not upgraded.

7. The program upgrade control method according to claim 5, characterized in that: In the case where the User program passes verification and the execution time does not exceed the preset time threshold, the step of "selectively upgrading the User program according to the result of the determination of whether the upgrade instruction is obtained" further includes: If the upgrade instruction is not obtained, the User program is not upgraded and the User program is executed again.

8. The program upgrade control method according to claim 5, characterized in that: In the case that the User program passes verification but the execution time exceeds the preset time threshold, the step of "selectively upgrading the User program according to the result of the determination of whether the upgrade instruction is obtained" further includes: If the upgrade instruction is not obtained, determining whether the execution times of the User program is less than a preset times threshold; If the number of times is less than the preset number threshold, the User program is not upgraded and the User program is executed again.

9. The program upgrade control method according to claim 8, characterized in that: The step of "selectively upgrading the User program according to the result of determining whether the upgrade instruction is obtained" also includes: If the number of times is greater than or equal to the preset number threshold, the User program is not executed again, and the User program is not upgraded.

Images