Method and system for controlling system upgrading

Abstract

The invention discloses a control system upgrading method and system, and belongs to the technical field of vehicle electronic control systems. Comprising the following steps: a display reads source file data of an update program, executes primary verification and sends a transmission request signal to a controller after the verification is passed; the controller receives a transmission request signal sent by the display, executes data backup and clearing operations, and sends a control signal to the display; the display receives a control signal sent by the controller and transmits source file data of an updating program to the controller; and the controller receives and stores the source file data of the update program, executes secondary verification and runs the source file data of the update program after the verification is passed so as to complete the upgrade of the control system. The controller can be upgraded anytime and anywhere, so that the operation efficiency is improved, the maintenance cost is reduced, and the data security and the system stability in the upgrading process are ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of vehicle electronic control systems, and more specifically, to a method and system for upgrading a control system. Background Art

[0002] The controller plays a vital role in the process of vehicles performing various complex tasks. It is like the "brain" of the vehicle, collecting and processing the operating data from various components of the vehicle in real time. After processing, these data will be quickly transmitted to the display inside the vehicle through the CANBUS bus and presented to the operator in an intuitive and clear manner. The operator can adjust the operating parameters of the vehicle through simple button operations based on the information provided on the display. These adjusted parameters will be immediately fed back to the controller through the CANBUS bus, and the controller will accurately control and tune the vehicle according to the new parameters. Precise control logic is embedded in the controller, which is the core guarantee for the stable operation of the vehicle. This ensures that the vehicle can maintain the best operating state in various operating scenarios.

[0003] However, with the advancement of technology and the continuous changes in operational requirements, the internal control logic of the controller sometimes needs to be updated and iterated. In existing technical solutions, this process usually relies on professional computer equipment and specific connection devices. Technicians need to carefully modify the code of the control logic on the computer, then compile it into a format that the controller can recognize, and use expensive special equipment to flash the updated program to the controller via wired or wireless means. This not only increases the complexity and maintenance difficulty of the system, but also brings high hardware costs.

[0004] In the related art, for example, Chinese patent CN114546446A provides a control system method, device, equipment and storage medium, which connects the host computer, the main controller and at least one slave controller in cascade connection through the first serial port and the second serial port. The host computer sends an upgrade instruction to the main controller. If it is a self-upgrade instruction, the main controller receives the upgrade data packet for self-upgrade; if it is an upgrade instruction of other controllers, the main controller transmits the upgrade data packet to other controllers through the first serial port and the second serial port, and the slave controller is upgraded according to the transparently transmitted upgrade data packet; thereby, the upgrade of all controllers including the main controller is realized. The disadvantage of this solution is that the dedicated connection equipment is not only expensive, but also increases the complexity and maintenance difficulty of the system; at the work site, there is often a lack of a stable 220VAC power supply environment, which makes the computer equipment unable to work continuously. For this reason, users have to equip additional conversion modules, which undoubtedly adds additional costs and inconveniences.

[0005] From the above, it can be seen that the relevant technology does not provide any technical inspiration on how to improve operating efficiency and reduce maintenance costs. Summary of the invention

[0006] 1. Technical issues to be solved

[0007] In response to the problem in the prior art of how to get rid of the dependence on computers and special equipment and realize wireless updating of controller programs, the present invention provides a method and system for controlling system upgrades, which can realize upgrading of controllers anytime and anywhere, thereby improving operating efficiency, reducing maintenance costs, and ensuring data security and system stability during the upgrade process.

[0008] 2. Technical solution

[0009] The purpose of the present invention is achieved through the following technical solutions.

[0010] The content of this application is used to introduce concepts in a brief form, which will be described in detail in the detailed implementation section below. The content of this application is not intended to identify the key features or essential features of the technical solution claimed for protection, nor is it intended to limit the scope of the technical solution claimed for protection.

[0011] Some embodiments of the present application propose a method and system for controlling system upgrade to solve the technical problems mentioned in the above background technology section.

[0012] As a first aspect of the present application, some embodiments of the present application provide a method for upgrading a control system, comprising the following steps: the display reads the source file data of the update program, performs a verification and sends a transmission request signal to the controller after the verification passes; the controller receives the transmission request signal sent by the display, performs data backup and clear operations, and sends a control signal to the display; the display receives the control signal sent by the controller, and transmits the source file data of the update program to the controller; the controller receives and stores the source file data of the update program, performs a secondary verification and runs the source file data of the update program after the verification passes to complete the upgrade of the control system.

[0013] Furthermore, a verification step includes: determining whether the device unique identification code stored inside the display is consistent with the corresponding device unique identification code pre-stored in the controller; if the device unique identification code stored inside the display is consistent with the corresponding device unique identification code pre-stored in the controller, the controller authorizes the execution of the source file data of the update program; if the device unique identification code stored inside the display is inconsistent with the corresponding device unique identification code pre-stored in the controller, the controller refuses to execute the source file data of the update program.

[0014] Furthermore, after receiving the transmission request signal, the controller starts a data backup program to back up the source file data of the currently running original program.

[0015] Furthermore, after the data backup is completed, the controller clears the source file data of the original program in the current running area, and sends a control signal to the display to enable the display to transmit the source file data of the updated program.

[0016] Furthermore, the secondary verification is performed by the controller, and the secondary verification includes verifying the hardware compatibility, data format, file size and verification code of the source file data of the update program.

[0017] Furthermore, the process of performing the secondary verification is: determine whether the source file data of the update program is compatible with the controller hardware and the data is correct; if the source file data of the update program is compatible with the controller hardware and the data is correct, the secondary verification passes; if the source file data of the update program is incompatible with the controller hardware or the data is incorrect, the secondary verification fails.

[0018] Furthermore, after the secondary verification is executed, it is determined whether the secondary verification passes; if the secondary verification passes, the controller uses the source file data of the updated program to overwrite the source file data of the original program, and restarts the system to run the updated program; if the secondary verification fails, the controller restarts and resumes running the original program.

[0019] Furthermore, after the upgrade is completed, the controller automatically or according to instructions performs a system self-check to ensure the operation of the upgraded control system functions.

[0020] As a second aspect of the present application, some embodiments of the present application provide a system for controlling system upgrades, including a reading module: used to enable the display to read source file data of an update program, perform a verification and send a transmission request signal to the controller after the verification is passed; a backup module: used to enable the controller to receive the transmission request signal sent by the display, perform data backup and clear operations, and send a control signal to the display; a transmission module: used for the display to receive the control signal sent by the controller, and transmit the source file data of the update program to the controller; an operation module: used to enable the controller to receive and store the source file data of the update program, perform a secondary verification and run the source file data of the update program after the verification is passed to complete the upgrade of the control system.

[0021] Furthermore, the system for controlling system upgrades also includes a user interaction module for providing the user with system upgrade progress information, error prompt information, and system upgrade completion information during the upgrade process.

[0022] Furthermore, the system for controlling system upgrades also includes a remote update server for storing source file data of at least one version of an update program and sending the update program to the control system according to a request of the controller or a preset update strategy.

[0023] 3. Beneficial effects

[0024] Compared with the prior art, the advantages of the present invention are as follows: the control system upgrade method and system of the present invention realizes convenient wireless or wired upgrades through communication between the display and the controller, greatly shortening the upgrade time; the correctness and integrity of the update program are ensured through a double verification mechanism, reducing the risk of system crash and data loss; the system anomalies caused by data conflicts are avoided through a data backup and clearing mechanism, ensuring the smooth progress of the upgrade process; real-time upgrade progress information and error prompt information are provided through a user interaction module, enhancing the user's sense of participation and trust. The remote update function makes the maintenance and update of the vehicle control system more convenient and efficient. Wireless updates and convenient operations of the controller program are realized, and data security and system stability during the upgrade process are ensured. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 A flowchart of a method for controlling system upgrade in one embodiment of the present invention;

[0026] Figure 2 Another flowchart of a method for controlling system upgrade in one embodiment of the present invention is shown. DETAILED DESCRIPTION

[0027] The present invention is described in detail below in conjunction with the accompanying drawings and specific embodiments.

[0028] With the development of vehicle intelligence and networking, the upgrade of vehicle control systems has become increasingly frequent and important. Traditional vehicle system upgrade methods usually rely on offline services, which are not only time-consuming and labor-intensive, but also subject to geographical and time constraints. In addition, the vehicle system upgrade methods in the prior art often lack a complete data verification and backup mechanism, and there is a risk of data loss and system crash.

[0029] In view of this, the present invention proposes a vehicle control system upgrade method and system, which includes the steps of display reading update program, controller receiving and performing primary verification, data backup and clearing, update program transmission and secondary verification, etc. After the display reads the source file data of the update program, firstly, a primary verification of the device unique identification code is performed to ensure the matching of the update program and the vehicle controller; after the controller receives and stores the source file data of the update program, a secondary verification is performed to perform a comprehensive verification of hardware compatibility, data format, file size and verification code.

[0030] Combination Figure 1 to Figure 2 A method for upgrading a control system of the present invention comprises the following steps:

[0031] The display reads the source file data of the update program, performs a check and sends a transmission request signal to the controller after the check passes;

[0032] The controller receives the transmission request signal sent by the display, performs data backup and clearing operations, and sends a control signal to the display;

[0033] The display receives the control signal sent by the controller and transmits the source file data of the update program to the controller;

[0034] The controller receives and stores the source file data of the update program, performs secondary verification, and runs the source file data of the update program after the verification passes to complete the upgrade of the control system;

[0035] After the upgrade is completed, the controller automatically or according to instructions performs a system self-check to ensure the operation of the upgraded control system functions.

[0036] Specifically, a verification step includes: determining whether the device unique identification code stored in the display is consistent with the corresponding device unique identification code pre-stored in the controller;

[0037] If the device unique identification code stored in the display is consistent with the corresponding device unique identification code pre-stored in the controller, the controller authorizes the execution of the source file data of the update program;

[0038] If the device unique identification code stored inside the display is inconsistent with the corresponding device unique identification code pre-stored in the controller, the controller refuses to execute the source file data of the update program.

[0039] After the display reads the source file data of the update program, it first performs a check on the device's unique identification code to ensure the compatibility of the update program with the vehicle controller, thereby effectively preventing system anomalies caused by misoperation or illegal upgrades.

[0040] In a specific embodiment, after receiving a transmission request signal, the controller starts a data backup program to back up the source file data of the currently running original program; after the data backup is completed, the controller clears the source file data of the original program in the current running area, and sends a control signal to the display to enable the display to transmit the source file data of the updated program.

[0041] During the upgrade process, the controller first performs a data backup operation to save the source file data of the currently running original program to a safe area. Then, the controller clears the source file data of the original program in the current running area to prepare for the installation of the updated program. This step ensures the smooth progress of the upgrade process and avoids system anomalies caused by data conflicts.

[0042] Specifically, the secondary verification is performed by the controller, and the secondary verification includes checking the hardware compatibility, data format, file size, and verification code of the source file data of the update program. The process of performing the secondary verification is as follows:

[0043] Determine whether the source file data of the update program is compatible with the controller hardware and the data is correct;

[0044] If the source file data of the update program is compatible with the controller hardware and the data is correct, the secondary verification passes;

[0045] If the source file data of the update program is incompatible with the controller hardware or the data is incorrect, the secondary verification will fail.

[0046] More specifically, after the secondary verification is performed, determining whether the secondary verification passes;

[0047] If the secondary verification passes, the controller overwrites the source file data of the original program with the source file data of the updated program, and restarts the system to run the updated program;

[0048] If the secondary check fails, the controller restarts and resumes running the original program.

[0049] After the controller receives and stores the source file data of the update program, it performs a secondary check on hardware compatibility, data format, file size, and checksum. The comprehensive secondary check ensures the correctness and integrity of the update program and reduces the risk of system crash and data loss.

[0050] In a specific embodiment, the process of the method for controlling system upgrade specifically includes:

[0051] S100, controller power on and initialization:

[0052] After the controller is powered on, the source file data of the original program in the program storage area is copied to the program running area to complete the initialization operation.

[0053] First, the controller is powered on and the source file data of the original program in the program storage area is copied to the program running area. The source file data is the logic code of the source file. When the vehicle is started or the controller is powered on, the controller will start working, and this process is called "power on". Once the controller is powered on, it will not immediately start to perform complex control tasks, but will first perform some necessary preparations, a process called "initialization". The initialization operation that is first performed after the controller is powered on is crucial for the controller, which ensures that the controller is in a correct and stable internal state before starting to perform complex control tasks. During the initialization process, the controller will perform a series of checks and preparations, the most critical of which is to copy the source file data of the original program currently stored in the program storage area to the program running area. In this way, when the controller starts to perform control tasks, it can quickly and accurately access the latest logic code, thereby ensuring that the vehicle can operate as expected.

[0054] The program storage area is an area dedicated to storing controller logic codes. These logic codes are the basis of the controller's operation. They define how the controller should respond to various input signals and how to control various components of the vehicle.

[0055] The program execution area is the area where the controller actually executes the logic code. During the initialization phase, the controller copies the code in the program storage area to the program execution area so that it can be quickly accessed during execution.

[0056] Therefore, when the controller is powered on and completes the initialization process, it is ready to perform control tasks. At this time, the controller has copied the latest logic code from the program storage area to the program execution area and is ready to respond to various vehicle operations based on these codes.

[0057] S200, data reading and one-time verification:

[0058] The display reads the source file data of the update program and verifies the unique identification code of the device.

[0059] Specifically, by saving the source file data of the update program in a U disk, and inserting the U disk into the USB interface of the display, the display is triggered to read the source file data of the update program stored in the U disk.

[0060] After the display reads the source file data of the update program, the display will perform a verification on the source file data of the update program. The verification content of the first verification is to verify whether the product serial number stored in the display is consistent with the product serial number stored in the controller. The specific process of the first verification is:

[0061] Determine whether the product serial number stored in the display is consistent with the product serial number stored in the controller;

[0062] If they are consistent, the controller agrees to execute the source file data of the update program;

[0063] If not, the controller refuses to execute the source file data of the update program.

[0064] Specifically, the product serial number refers to the serial number of the vehicle.

[0065] To ensure the safety and effectiveness of the upgrade process, before the controller executes the program upgrade, it will verify whether the product serial number stored in the display is exactly the same as the serial number stored in itself. This step is crucial because only when the serial numbers match will the controller accept and execute the updated program source file. If the serial numbers are inconsistent, the controller will refuse to perform the upgrade operation, effectively preventing system abnormalities caused by misoperation or illegal upgrades.

[0066] S300, data backup and clearing:

[0067] After receiving the transmission request signal, the controller performs a data backup operation and clears the source file data of the original program in the current running area; then, the controller sends a control signal to the display to instruct the display to start transmitting the source file data of the updated program.

[0068] Specifically, after the display reads the source file data of the update program in the U disk, it sends a transmission request to the controller according to the CANBUS bus protocol; after receiving the request, the controller performs a data backup operation to ensure that no data is lost during the upgrade process; then, the controller clears the source file data of the original program in the current running area and sends a control signal indicating the clearing is complete to the display.

[0069] CANBUS bus protocol is a communication protocol widely used in the fields of automobile and industrial automation. It allows different devices to communicate efficiently and reliably through serial data lines, thereby realizing real-time data transmission and accurate execution of control instructions.

[0070] After receiving the data transfer request from the display, the controller first performs a data backup operation. This step is critical, as it ensures that the controller does not lose any important data or configuration information during the upgrade process. Data backup involves copying the source file data of the original program currently stored in the controller to a safe storage medium so that it can be quickly restored when needed.

[0071] More specifically, after completing the data backup, the controller will proceed to clear the source file data of the original program in the current running area. Here, "the source file data of the original program in the current running area" refers to the program code that the controller is currently executing or preparing to execute. These program codes are usually stored in a specific memory area of ​​the controller, namely the running area, to ensure that they can be executed quickly and efficiently. Clearing the source file data of the original program in the current running area is to make room for the source file data of the updated program and ensure the smooth progress of the upgrade process.

[0072] When the clearing operation is completed, the controller will immediately send a clearing completion confirmation signal to the display. This signal is part of the communication between the controller and the display, and it tells the display that it has completed the clearing of the source program in the current running area and can now transfer and install the source file data of the updated program.

[0073] Through the above steps, an efficient and reliable communication link is established between the display and the controller, ensuring the smooth progress of the program upgrade process. At the same time, the data backup and clearing process of the source file data of the original program in the current running area also further enhances the security and stability of the upgrade process.

[0074] S400, data transmission and secondary verification:

[0075] The display transmits the source file data of the update program to the controller via the CANBUS bus; after the transmission is completed, the controller performs a secondary check on the received source file data of the update program.

[0076] Specifically, after receiving the control signal from the controller, the display transmits the source file data of the update program to the controller via the CANBUS bus. After receiving and storing the source file data of the update program, the controller performs a comprehensive check on hardware compatibility, data format, file size and checksum.

[0077] If the secondary check passes, the controller overwrites the original source file data with the source file data of the updated program and restarts the system to run the updated program. After the upgrade is completed, the controller automatically or according to instructions performs a system self-check to ensure that the upgraded control system functions normally.

[0078] Secondary verification refers to the controller's hardware matching verification of the source file data of the update program. The specific process of the controller's secondary verification of the source file data of the update program is as follows:

[0079] Determine whether the source file data of the update program matches the controller hardware;

[0080] If the source file data of the update program matches the controller hardware, the source file data of the update program is overwritten with the source file data of the original program, and the controller is restarted and runs the update program;

[0081] If the source file data of the updated program does not match the controller hardware, the controller restarts and reads the source file data of the original program in the program storage area and runs the original program.

[0082] Specifically, if the source file data of the update program matches the controller hardware, the controller will overwrite the source file data of the original program in the original running area with the source file data of the update program, and prepare to restart to run the new program; if the source file data of the update program does not match the controller hardware, the controller will immediately restart and power on, and re-read the source file data of the original program in the program storage area to the running area to ensure that the vehicle can continue to operate normally.

[0083] Once the source file data of the update program is successfully transmitted to the controller, the controller will immediately start the secondary verification. The controller will verify the received source file data of the update program to ensure its compatibility with the controller hardware. The secondary verification process involves verifying the format, size, checksum and other aspects of the source file data to ensure the correctness and integrity of the data.

[0084] If the source file data of the updated program matches the controller hardware, the controller will perform an overwrite operation. This means that the controller will replace the program source file in the original running area with the new updated program source file, preparing for the next restart and program operation. This step ensures that the controller can run the latest program, thereby providing better performance and stability.

[0085] However, if the source file data of the update program does not match the controller hardware, the controller will immediately take emergency measures. It will restart and power on again to ensure the stability of the system. During the restart process, the controller will re-read the logic code in the program storage area and load it into the running area. This step ensures that the vehicle can continue to operate normally even if the update fails, avoiding system paralysis or failure caused by update problems. Through the above steps, the controller demonstrates a high degree of reliability and flexibility in the transmission of the update source file and the hardware matching process. It not only ensures the correctness and integrity of the update program, but also quickly restores the normal operation of the system when the update fails, thereby ensuring the safety and stability of the vehicle.

[0086] like Figure 1 As shown, the control system upgrade method flow is as follows:

[0087] S1. The controller is powered on, reads the source file data of the update program in the storage area and stores it in the running area.

[0088] S2, determining whether to trigger the display to read the USB disk data;

[0089] If triggered, execute S3;

[0090] If not triggered, return to S2.

[0091] S3, judging whether the display has successfully read the USB data;

[0092] If the reading is successful, execute S4;

[0093] If the reading is unsuccessful, the process returns to S2.

[0094] S4, determining whether the display verifies the controller serial number;

[0095] If yes, execute S5;

[0096] If not, return to S3.

[0097] After the monitor receives the signal from the controller, it will perform a verification operation to ensure that the status of the controller is correct. This step helps to ensure the stability and reliability of the upgrade process.

[0098] S5, the display requests to flash the program and write the code of the update program into the running area;

[0099] The controller performs a data backup operation to back up the source file data of the original program before the update.

[0100] S6, determining whether the controller data backup operation has been completed;

[0101] If yes, execute S7;

[0102] If not, return to S5.

[0103] S7. The controller clears the source file data before the update in the current operation area.

[0104] S8, determining whether the source file data before the update has been cleared;

[0105] If yes, the controller replies that the display clearing is completed;

[0106] If not, return to S7.

[0107] S9. The display transmits source file data of the update program to the controller.

[0108] S10, determining whether the process of transmitting the source file data of the update program from the display to the controller is completed;

[0109] If yes, execute S11;

[0110] If not, return to S9.

[0111] S11, determining whether the source file data of the update program matches the controller hardware;

[0112] If yes, execute S12;

[0113] If not, execute S13.

[0114] After receiving the source file data of the update program, the controller will perform a hardware matching check. The purpose of this step is to ensure that the new source code is compatible with the current controller's hardware environment.

[0115] S12: The controller overwrites the updated source file in the running area with the source file data before the update and stores the updated source file in the storage area.

[0116] After the flash program is completed, the controller will overwrite the source file data of the update program in the running area to the storage area. This step ensures that the source file data of the update program is correctly saved and can be executed at the next startup.

[0117] S13, update end:

[0118] When all steps are completed, the controller will send a signal that the update is complete.

[0119] Specifically, the controller is responsible for processing data and instructions and coordinating the smooth progress of each step. At the same time, the display, as an interface for human-computer interaction, provides user interaction and status display functions. The controller consists of two independent areas, namely the program storage area and the program running area. Every time the controller is powered on, it automatically performs an initialization process, that is, copying the logic code of the update program stored in the program storage area to the program running area. Subsequently, the controller starts to execute the code in the running area to drive the vehicle to perform various operations.

[0120] The control system upgrade method of the present invention realizes convenient wireless or wired upgrades through communication between the display and the controller, greatly shortening the upgrade time; the data backup and clearing mechanism avoids system anomalies caused by data conflicts, ensuring the smooth progress of the upgrade process. In addition, the double verification mechanism ensures the correctness and integrity of the update program, reducing the risk of system crash and data loss.

[0121] In a specific embodiment, the system for controlling system upgrade includes:

[0122] Reading module: used to enable the display to read the source file data of the update program, perform a check and send a transmission request signal to the controller after the check passes;

[0123] Backup module: used to enable the controller to receive the transmission request signal sent by the display, perform data backup and clear operations, and send a control signal to the display;

[0124] Transmission module: used for the display to receive the control signal sent by the controller and transmit the source file data of the update program to the controller;

[0125] Running module: used to enable the controller to receive and store the source file data of the update program, perform secondary verification and run the source file data of the update program after the verification passes to complete the upgrade of the control system.

[0126] User interaction module: used to provide users with system upgrade progress information, error prompt information and system upgrade completion information during the upgrade process. The user interaction module provides real-time display of system upgrade progress information, error prompt information and system upgrade completion information, enhancing user participation and trust.

[0127] Remote update server: used to store the source file data of at least one version of the update program, and send the update program to the control system according to the controller's request or the preset update strategy. The remote update server realizes the remote storage and distribution of the update program, so that the maintenance and update of the vehicle control system is no longer restricted by region and time, greatly improving the operation and maintenance efficiency.

[0128] After the display reads the source file data of the update program, the control system upgrade system of this solution first verifies the unique device identification code to ensure the compatibility of the update program with the vehicle controller, effectively preventing system anomalies caused by misoperation or illegal upgrades. After the controller receives and stores the source file data of the update program, it performs a comprehensive verification of hardware compatibility, data format, file size, and verification code to further ensure the correctness and integrity of the update program and reduce the risk of system crashes and data loss. The controller clears the source file data of the original program in the current running area to ensure the smooth progress of the upgrade process and avoid system anomalies caused by data conflicts. The user interaction module also provides real-time upgrade progress information and error prompt information, enhancing user participation and trust. The remote update function makes the maintenance and update of the vehicle control system more convenient and efficient.

[0129] The above schematically describes the invention and its implementation methods, which is not restrictive. Without departing from the spirit or basic features of the invention, the invention can be implemented in other specific forms. What is shown in the accompanying drawings is only one of the implementation methods of the invention. The actual structure is not limited to this, and any figure mark in the claims should not limit the claims involved. Therefore, if a person of ordinary skill in the art is inspired by it, without departing from the purpose of the invention, a structural method and an embodiment similar to the technical solution are designed without creativity, which should all fall within the scope of protection of this patent. In addition, the word "including" does not exclude other elements or steps, and the word "one" before the element does not exclude the inclusion of "multiple" elements. The multiple elements stated in the product claim can also be implemented by one element through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any specific order.

Claims

1. A method for upgrading a control system, comprising the following steps: The display reads the source file data of the update program, performs a check and sends a transmission request signal to the controller after the check passes; The controller receives a transmission request signal sent by the display, performs data backup and clearing operations, and sends a control signal to the display; The display receives a control signal sent by the controller and transmits source file data of the update program to the controller; The controller receives and stores source file data of the update program, performs secondary verification, and runs the source file data of the update program after the verification passes to complete the upgrade of the control system.

2. The method for upgrading a control system according to claim 1, characterized in that: The primary verification step includes: determining whether the device unique identification code stored in the display is consistent with the corresponding device unique identification code pre-stored in the controller; If the device unique identification code stored in the display is consistent with the corresponding device unique identification code pre-stored in the controller, the controller authorizes the execution of the source file data of the update program; If the device unique identification code stored inside the display is inconsistent with the corresponding device unique identification code pre-stored in the controller, the controller refuses to execute the source file data of the update program.

3. The method for upgrading a control system according to claim 1, characterized in that: After receiving the transmission request signal, the controller starts the data backup program to back up the source file data of the currently running original program.

4. The method for upgrading a control system according to claim 3, characterized in that: After the data backup is completed, the controller clears the source file data of the original program in the current running area, and sends a control signal to the display to enable the display to transmit the source file data of the updated program.

5. The method for upgrading a control system according to claim 1, characterized in that: The secondary verification is performed by the controller, and the secondary verification includes verifying the hardware compatibility, data format, file size and verification code of the source file data of the update program.

6. The method for upgrading a control system according to claim 5, characterized in that: The process of performing the secondary verification is as follows: determining whether the source file data of the update program is compatible with the controller hardware and whether the data is correct; If the source file data of the update program is compatible with the controller hardware and the data is correct, the secondary verification passes; If the source file data of the update program is incompatible with the controller hardware or the data is incorrect, the secondary verification will fail.

7. The method for upgrading a control system according to claim 6, characterized in that: After the secondary verification is performed, determining whether the secondary verification passes; If the secondary verification passes, the controller overwrites the source file data of the original program with the source file data of the updated program, and restarts the system to run the updated program; If the secondary check fails, the controller restarts and resumes running the original program.

8. The method for upgrading a control system according to claim 1, characterized in that: It also includes that after the upgrade is completed, the controller automatically or according to instructions performs a system self-check to ensure the operation of the upgraded control system functions.

9. A system for controlling system upgrades, comprising: Reading module: used to enable the display to read the source file data of the update program, perform a check and send a transmission request signal to the controller after the check passes; Backup module: used to enable the controller to receive a transmission request signal sent by the display, perform data backup and clear operations, and send a control signal to the display; Transmission module: used for the display to receive the control signal sent by the controller and transmit the source file data of the update program to the controller; Running module: used to enable the controller to receive and store the source file data of the update program, perform secondary verification and run the source file data of the update program after the verification passes to complete the upgrade of the control system.

10. The system for controlling system upgrade according to claim 9, characterized in that: It also includes a user interaction module, which is used to provide the user with system upgrade progress information, error prompt information and system upgrade completion information during the upgrade process.

11. The system for controlling system upgrade according to claim 9, characterized in that: It also includes a remote update server for storing source file data of at least one version of an update program and sending the update program to the control system according to a request of the controller or a preset update strategy.

Images