Unmanned aerial vehicle software dual-backup system and start upgrading method

Abstract

The invention discloses an unmanned aerial vehicle software dual-backup system and a start upgrading method. The unmanned aerial vehicle software dual-backup system comprises a processor minimum system and a memory, the processor establishes connection with the memory through an internal SDIO interface and completes data interaction, and the memory performs dual backup partitioning of the region A and the region B; an application program APPA, a file APPAmd5 and data APPAData are stored in the region A and the region B, an application program APPB, a file APPBmd5 and data APPBData are stored in the region B, and the APPA and the APPB, the file APPAmd5 and the file APPBmd5, and the APPAData and the APPBData are backups for each other. According to the invention, safe and reasonable dual-backup design is carried out from software, a peripheral circuit is simplified, and project cost is saved.

Description

Technical Field

[0001] The present invention relates to the field of aviation electronics technology, and in particular to an unmanned aerial vehicle software double backup system and a startup upgrade method. Background Art

[0002] With the development and innovation of aviation technology, the software of unmanned aerial vehicles has flourished. Its scale has become large and its composition has become complex, which has put forward higher requirements for the security and stability of the software. On the other hand, avionics equipment has redundancy design requirements. Conventional dual redundancy design is basically a dual redundant design from the hardware, which will increase the procurement cost of the equipment and there will be conflicts in the low-cost dimension. Based on the above problems, it is necessary to design a dual backup startup and upgrade method for unmanned aerial vehicle software. Summary of the invention

[0003] The purpose of the present invention is to provide a software dual backup system and startup upgrade method for unmanned aerial vehicles. The present invention performs a safe and reasonable dual backup design from the software, simplifies the peripheral circuit, and saves project costs.

[0004] Technical solution. A software dual backup system for unmanned aerial vehicles, including a processor minimum system and a memory; the processor establishes a connection with the memory through an internal SDIO interface and completes data interaction, and the memory performs dual backup partitions of regionA and regionB; regionA and regionB store application APP_A, file APP_A_md5 and data APP_A_Data, and regionB stores application APP_B, file APP_B_md5 and data APP_B_Data, wherein APP_A and APP_B, file APP_A_md5 and file APP_B_md5, APP_A_Data and APP_B_Data are backed up for each other.

[0005] In the aforementioned UAV software dual backup system, the processor minimum system and the external upgrade device are interconnected via Ethernet to complete the interaction of upgrade data.

[0006] A method for starting the unmanned aerial vehicle software dual backup system as described above comprises the following steps:

[0007] Step 1. Calculate the md5 checksum of the application APP_A in regionA and the md5 checksum of the application APP_B in regionB respectively;

[0008] Step 2. Read the md5 code in the file App_A_md5 in regionA and the md5 code in the file App_B_md5 in regionB;

[0009] Step 3. Compare the calculated verification code md5 of APP_A in steps 1 and 2 with the md5 code read from the file App_A_md5 to see if they are consistent. If they are consistent, record that APP_A verification is complete; if they are inconsistent, record that APP_A verification is wrong. Similarly, compare the calculated verification code md5 of APP_A in steps 1 and 2 with the md5 code read from the file App_A_md5 to see if they are consistent. If they are consistent, record that APP_B verification is complete; if they are inconsistent, record that APP_B verification is wrong.

[0010] In the aforementioned method for starting the unmanned aerial vehicle software dual backup system, in step 3, when the verification of APP_A is complete and the verification of APP_B is also complete, it is recorded that the APP_B program is intact, and the APP_A application is started.

[0011] In the aforementioned method for starting the unmanned aerial vehicle software dual backup system, in step 3, when the verification of APP_A is complete and the verification of APP_B is wrong, the APP_B program verification error is recorded and the APP_A application is started.

[0012] In the aforementioned method for starting the unmanned aerial vehicle software dual backup system, in step 3, when the verification of APP_A is wrong and the verification of APP_B is complete, the APP_B program is recorded as intact and the APP_B application is started.

[0013] In the aforementioned method for starting the unmanned aerial vehicle software dual backup system, in step 3, when the verification error of APP_A and the verification error of APP_B occur, the verification error of the APP_B program is recorded and the program startup abnormal error code is reported.

[0014] An upgrade method for the unmanned aerial vehicle software dual backup system as described above, after the application is verified to be correct, APP_A / APP_B is correctly started, and the currently running program APP_A / APP_B is checked to see if it is consistent with APP_B / APP_A in another backup partition. If they are consistent, the application process is executed normally; if they are inconsistent, the currently running program APP_A / APP_B is copied to another backup partition APP_B / APP_A.

[0015] In the aforementioned upgrade method of the unmanned aerial vehicle software dual backup system, the Ethernet is monitored to send software upgrade instructions, and when the upgrade instructions are received, a handshake is performed to send and receive upgrade data. After the data is received, the received upgrade program is written into the application program in the backup interval, and the backup program is successfully updated.

[0016] In the aforementioned upgrade method of the unmanned aerial vehicle software dual backup system, after the current program completes the backup program update and upgrade, the current process is exited and the backup process is started. After the backup process is started, the dual backup program is upgraded to ensure that the dual backup programs are upgraded at the same time.

[0017] Beneficial effects: The present invention performs a dual-redundancy design of the software of the unmanned aerial vehicle based on the consideration of the safety and stability of the software; the design method is considered from the low-cost dimension, and the redundant design at the hardware level is abandoned, thus realizing a safe and reasonable dual-backup design from the software perspective.

[0018] The present invention uses software strategies to realize dual backup startup and upgrade of unmanned aerial vehicle software under the premise that the unmanned aerial vehicle software does not increase hardware redundancy; verifies the integrity of the program by calculating the form of md5, and updates the backup program by making consistency judgment between the current execution program and the backup program; uses Ethernet communication to interconnect and communicate with the upgrade device, updates the received upgrade data to the backup program storage area, and then starts the backup program, and the backup program updates the previous upgrade program after consistency judgment. The method has achieved the following beneficial effects:

[0019] 1) A method for dual backup startup and upgrade of unmanned aerial vehicle software was designed, which realized the online upgrade and security backup functions of the software and enhanced the security and stability of the system;

[0020] 2) The software-level strategy replaces the dual-backup storage mode of the hardware memory, simplifies the peripheral circuit and saves project costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 It is the system component of the whole method;

[0022] Figure 2 It is composed of a double backup interval structure;

[0023] Figure 3 It is the dual backup startup and upgrade process of the UAV software. DETAILED DESCRIPTION

[0024] Example 1. A software dual backup system and startup upgrade method for unmanned aerial vehicles, see Figure 3 In order to realize the correct startup and rapid upgrade of the dual backup of the UAV software, a system is designed to complete the dual backup startup and upgrade of the software; its components are as follows Figure 1 The system consists of a processor system and a memory. The processor establishes a connection through an internal SDIO interface and completes data interaction. The software in the memory is divided into dual backup partitions of regionA and regionB. The processor system and the external upgrade device are interconnected through Ethernet to complete the interaction of upgrade data.

[0025] After the system is powered on, the processor will read the application program from the memory, copy it to the memory and execute the application program. In order to prevent errors in the program startup process or errors in the program for a long time in the storage medium, resulting in program execution failure, a double backup method is used to prevent program errors and enhance the redundancy and robustness of the system. The application program in the memory is divided into two areas, A and B, which store their own application programs, program md5 checksums and data respectively. The structure is as follows: Figure 2 shown.

[0026] After the system starts running, the startup verification process is implemented through the startup script: 1> Calculate the md5 verification code of the application APP_A in regionA and the md5 verification code of the application APP_B in regionB respectively; 2> Read the md5 code in the App_A_md5 file in regionA and the md5 code in the App_B_md5 file in regionB; 3> Compare the calculated verification md5 of APP_A in 1 and 2 with the md5 code read from the file for consistency. If they are consistent, record that the APP_A verification is complete, and compare the calculated verification md5 of APP_B in 1 and 2 with the md5 code read from the file for consistency; if they are inconsistent, record the APP_A verification error, and compare the calculated verification md5 of APP_B in 1 and 2 with the md5 code read from the file for consistency. 4> If the verification of APP_A is complete and the verification of APP_B is also complete, then record that the APP_B program is intact and start the APP_A application; if the verification of APP_A is complete and the verification of APP_B is wrong, then record that the APP_B program verification error is, and start the APP_A application; if the verification of APP_A is wrong and the verification of APP_B is complete, then record that the APP_B program is intact and start the APP_B application; if the verification of APP_A is wrong and the verification of APP_B is wrong, then record that the APP_B program is intact and start the APP_B application; if the verification of APP_A is wrong and the verification of APP_B is wrong, then record the APP_B program verification error and report the program startup exception error code.

[0027] After the program is started, it will cooperate with the Ethernet instructions to determine whether the program is upgraded, and perform dual backup upgrades at the same time: 1> After the application is verified correctly, APP_A / APP_B is correctly started. Whether the currently running programs APP_A and APP_B are consistent with the APP_B / APP_A in another backup partition, if they are consistent, the application process is executed normally; if they are inconsistent, the currently running program APP_A / APP_B is copied to another backup partition APP_B / APP_A to ensure that the currently normally executed program is protected by dual backup. 2> Monitor Ethernet to send software upgrade instructions. After receiving the upgrade instructions, the handshake of upgrade data is sent and received. After the data is received, the received upgrade program is written to the application in the backup interval, and the backup program is successfully updated (if the current program is APP_A, APP_B is updated, if the current program is APP_B, APP_A is updated); if the program upgrade instruction is not received, the application process is executed normally; 3> After the current program completes the backup program update and upgrade, the current process is exited and the backup process is started. After the backup process is started, the dual backup program upgrade will be performed according to the process of 1> to ensure that the dual backup programs are upgraded at the same time.

Claims

1. A software dual backup system for unmanned aerial vehicles, characterized in that: It includes a processor minimum system and a memory; the processor establishes a connection with the memory through an internal SDIO interface and completes data interaction, and the memory is divided into regionA and regionB for dual backup; regionA and regionB store application APP_A, file APP_A_md5 and data APP_A_Data, and regionB stores application APP_B, file APP_B_md5 and data APP_B_Data, wherein APP_A and APP_B, file APP_A_md5 and file APP_B_md5, APP_A_Data and APP_B_Data are backed up for each other.

2. The unmanned aerial vehicle software dual backup system according to claim 1, characterized in that: The processor minimum system and the external upgrade device are interconnected via Ethernet to complete the interaction of upgrade data.

3. A method for starting the unmanned aerial vehicle software dual backup system as claimed in claim 1 or 2, characterized in that: The steps include: Step 1. Calculate the md5 checksum of the application APP_A in regionA and the md5 checksum of the application APP_B in regionB respectively; Step 2. Read the md5 code in the file App_A_md5 in regionA and the md5 code in the file App_B_md5 in regionB; Step 3. Compare the calculated verification code md5 of APP_A in steps 1 and 2 with the md5 code read from the file App_A_md5 to see if they are consistent. If they are consistent, record that APP_A verification is complete; if they are inconsistent, record that APP_A verification is wrong. Similarly, compare the calculated verification code md5 of APP_A in steps 1 and 2 with the md5 code read from the file App_A_md5 to see if they are consistent. If they are consistent, record that APP_B verification is complete; if they are inconsistent, record that APP_B verification is wrong.

4. The method for starting the unmanned aerial vehicle software dual backup system according to claim 3, characterized in that: In step 3, when the verification of APP_A is complete and the verification of APP_B is also complete, it is recorded that the APP_B program is intact and the APP_A application is started.

5. The method for starting the unmanned aerial vehicle software dual backup system according to claim 3, characterized in that: In step 3, when the verification of APP_A is complete and the verification of APP_B is wrong, the verification error of the APP_B program is recorded and the APP_A application is started.

6. The method for starting the unmanned aerial vehicle software dual backup system according to claim 3, characterized in that: In step 3, when the verification of APP_A is wrong and the verification of APP_B is complete, it is recorded that the APP_B program is intact and the APP_B application is started.

7. The method for starting the unmanned aerial vehicle software dual backup system according to claim 3, characterized in that: In step 3, when the verification error of APP_A and the verification error of APP_B occur, the verification error of APP_B program is recorded and the program startup exception error code is reported.

8. A method for upgrading the unmanned aerial vehicle software dual backup system as claimed in claim 1 or 2, characterized in that: After the application is verified correctly, APP_A / APP_B is correctly started. Whether the currently running program APP_A / APP_B is consistent with APP_B / APP_A in another backup partition, if consistent, the application process is executed normally; if inconsistent, the currently running program APP_A / APP_B is copied to another backup partition APP_B / APP_A.

9. The method for upgrading the unmanned aerial vehicle software dual backup system according to claim 8, characterized in that: The software upgrade command is sent by monitoring Ethernet. After receiving the upgrade command, the upgrade data is sent and received by handshake. After the data is received, the received upgrade program is written into the application program in the backup interval, and the backup program is successfully updated.

10. The method for upgrading the unmanned aerial vehicle software dual backup system according to claim 9, characterized in that: After the current program completes the backup program update and upgrade, the current process is exited and the backup process is started. After the backup process is started, the dual backup programs are upgraded to ensure that the dual backup programs are upgraded at the same time.

Images