Online loading method suitable for multi-configuration-item software of starting power generation controller

Abstract

The invention belongs to the field of starting power generation controller software application, and relates to an online loading method suitable for starting power generation controller multi-configuration-item software. The method comprises the following steps: S1, determining whether an online loading demand exists or not by a user-defined BOOT region, skipping to a loading operation region when the online loading demand exists, and otherwise, skipping to a current software operation region; and S2, loading the data in the current running area of the software to the old version backup area of the software under the control of the loading running area, and then loading the external target version program data to the current running area of the software. Wherein a FLASH sector of a DSP (Digital Signal Processor) of the starting power generation controller is divided into a user-defined BOOT area, a loading operation area, a software current operation area and a software old version backup area, and an initial address of the user-defined BOOT area is determined by a jump address after a starting program in a CPU (Central Processing Unit) is executed. According to the invention, the software loading mode of the product is simplified, and the reliability and maintainability of the product are improved.

Description

Technical Field

[0001] The present application belongs to the field of software application of a starter generator controller, and specifically relates to an online loading method for multi-configuration item software of a starter generator controller. Background Art

[0002] Modern aircraft use more and more electronic and electrical equipment. With the improvement of the degree of digitalization of equipment, software is increasingly involved in system functions. For example, the F-35 has about 6 million lines of onboard software source code, and more than 80% of the system control functions are implemented by software. The improvement and optimization of later product functions are mostly achieved through software upgrades and maintenance. Therefore, in order to meet the ever-increasing reliability and maintainability requirements of modern aircraft for aviation electrical products, how to load software quickly, easily and effectively is particularly important.

[0003] At present, most starter generator controller products adopt multi-configuration embedded software design based on DSP. The application programs are divided into starter software and generator software. Generally, a dedicated emulator is used to load the product software through the JTAG interface. The traditional application loading method is as follows: Figure 1 This method has high requirements for the upgrade environment and requires a dedicated emulator device. In addition, due to the distance requirement between the JTAG interface and the DSP, it can only be located around the DSP. Therefore, each maintenance and upgrade requires professionals to open the product cover and connect the emulator through the JTAG interface to load and upgrade the product application. The workload required is large, time-consuming and labor-intensive, which greatly increases the maintenance cost of the product.

[0004] There are two existing methods for online loading of DSP applications. One is to add a dedicated function circuit to the product to change the DSP startup boot mode, and the other is to perform software maintenance in situ through communication.

[0005] The action of upgrading the dedicated function circuit needs to be controlled through the product maintenance port, and its control signal and control timing do not meet the requirements of software loading in the product installation state. Therefore, this method belongs to the product offline ground maintenance, the loading of the program needs to change the normal working state of the product, and the special function circuit added inside the product increases the volume and weight of the product on the one hand, and reduces the reliability and maintainability of the product on the other hand.

[0006] Software maintenance via communication is only applicable to single-configuration-item software, and the starter generator controller application belongs to multi-configuration-item software.

[0007] Therefore, the existing online loading method of application software can no longer meet the upgrade requirements of the starter generator controller. Summary of the invention

[0008] In order to solve the above problems, the present application provides an online loading method for multi-configuration item software of a starting generator controller, wherein the FLASH sector of the DSP of the starting generator controller is divided into at least a custom BOOT area, a loading and running area, a software current running area and a software old version backup area, wherein the starting address of the custom BOOT area is determined by the address to which the Boot Loader program inside the CPU jumps after execution, the custom BOOT area records the control logic for jumping to the loading and running area or the software current running area, the loading and running area records the online loading software for changing the software current running area and the software old version backup area according to the target version program data of the external software configuration item, the software current running area stores the current program data of the software, and the software old version backup area stores the old version program data of the software; the online loading method comprises:

[0009] Step S1, determining whether there is an online loading requirement by the control logic of the custom BOOT area, and when there is the online loading requirement, jumping to the loading and running area, and when there is no online loading requirement, jumping to the software current running area;

[0010] Step S2: The online loading software of the loading running area loads the current program data in the current running area of ​​the software into the old version backup area of ​​the software, and then loads the version program data of the external software configuration project into the current running area of ​​the software.

[0011] Preferably, the software currently running area includes at least two, namely the startup software current running area and the power generation software current running area. The startup software current running area is used to store the current program data of the startup software configuration items, and the power generation software current running area is used to store the current program data of the power generation software configuration items. Correspondingly, the software old version backup area includes the startup software old version backup area and the power generation software old version backup area.

[0012] Preferably, before step S2, the method further comprises:

[0013] Step S20: According to the communication protocol requirements between the DSP and the external program, the external output state is set to a safe state, and the software is reset.

[0014] Preferably, in step S2, loading the external software configuration project target version program data into the software current running area further comprises:

[0015] Step S21, distinguishing the download data of different software configuration items by corresponding flag bits and ID numbers, receiving target version programs of different software configuration items according to the communication protocol in the loading mode, and caching them in the RAM area outside the DSP;

[0016] Step S22, verifying the target version program in the RAM area;

[0017] Step S23: After the verification is passed, the Flash API library function provided by the DSP is called to load the target version program data into the current running area of ​​the software.

[0018] Preferably, step S2 further comprises:

[0019] Step S24: reporting the loading progress and status flag of the target version program data.

[0020] Preferably, step S2 further comprises:

[0021] Step S25: When a data verification anomaly occurs during the loading process of the target version program data, the old version program data in the old version backup area is loaded into the software current running area.

[0022] This application simplifies the product software loading method, saves product maintenance costs, and improves product reliability and maintainability. BRIEF DESCRIPTION OF THE DRAWINGS

[0023] Figure 1 This is a schematic diagram of the existing application loading method.

[0024] Figure 2 It is a flow chart of a preferred embodiment of the online loading method of multi-configuration item software of the starting generator controller applicable to the present application. DETAILED DESCRIPTION

[0025] In order to make the purpose, technical scheme and advantages of the implementation of this application clearer, the technical scheme in the implementation of this application will be described in more detail in combination with the drawings in the implementation of this application. In the drawings, the same or similar reference numerals throughout represent the same or similar elements or elements with the same or similar functions. The described implementation is a part of the implementation of this application, not all of the implementations. The implementation described below with reference to the drawings is exemplary and is intended to be used to explain this application, and cannot be understood as a limitation on this application. Based on the implementation in this application, all other implementations obtained by ordinary technicians in this field without making creative work are within the scope of protection of this application. The implementation of this application is described in detail below in combination with the drawings.

[0026] The present application provides an online loading method for multi-configuration item software of a starting generator controller. As shown in Table 1, the FLASH sector of the DSP of the starting generator controller is divided into at least a custom BOOT area, a loading and running area, a software current running area and a software old version backup area, wherein the starting address of the custom BOOT area is determined by the address to which the BootLoader program inside the CPU jumps after execution, the custom BOOT area records the control logic for jumping to the loading and running area or the software current running area, the loading and running area records the online loading software for changing the software current running area and the software old version backup area according to the target version program data of the external software configuration item, the software current running area stores the current program data of the software, and the software old version backup area stores the old version program data of the software.

[0027] In some optional embodiments, the software currently running area includes at least two, namely, a startup software current running area and a power generation software current running area. The startup software current running area is used to store current program data of the startup software configuration items, and the power generation software current running area is used to store current program data of the power generation software configuration items. Correspondingly, the software old version backup area includes a startup software old version backup area and a power generation software old version backup area.

[0028] As shown in Table 1, the FLASH sector of DSP includes at least six areas AF. Area A is a custom BOOT area. After the controller is powered on, the Boot Loader program inside the CPU is executed. It contains function code, Boot version information, program checksum, reset vector address, and standard mathematical function table. Among them, the function code is used to complete some hardware initialization such as program boot mode selection when the processor is powered on. After the Boot Loader is executed, the program jumps to a fixed address, which is open to the user and used for program jump. Based on this, this application uses the fixed address of the program jump after the Boot Loader is executed as the starting address of area A, so that the program automatically jumps to the custom BOOT area after running the built-in Boot Loader program. Then this application burns the control logic in the custom BOOT area in a traditional way. The control logic will determine the subsequent direction of the program, whether to burn the new version of the program through area B, or to directly execute the current program through area C or area E. Area B is the loading and running area, and the program in it is also burned in advance in a traditional way. It is used to make online changes to the data in the CF area when there is a need for software upgrade or configuration update.

[0029] Online modification of CF area data requires the use of DSP's Flash API library function. Therefore, this application is applicable to F28xx series DSPs with Flash API library functions, such as TMS320F28335 DSPs. Through the above method, the product can be loaded with the application program only through the communication interface during normal operation without shifting, special equipment, or manual intervention after normal installation. It has a fault-tolerant design and fully meets the needs of engineering use. Using this technology simplifies the way of loading product software, which not only saves the maintenance cost of the product, but also improves the reliability and maintainability of the product.

[0030] Table 1 Specific allocation of FLASH sectors

[0031]

[0032]

[0033] refer to Figure 2 , the online loading method comprises:

[0034] Step S1, determining whether there is an online loading requirement by the control logic of the custom BOOT area, and when there is the online loading requirement, jumping to the loading and running area, and when there is no online loading requirement, jumping to the software current running area;

[0035] Step S2: The online loading software of the loading running area loads the current program data in the current running area of ​​the software into the old version backup area of ​​the software, and then loads the version program data of the external software configuration project into the current running area of ​​the software.

[0036] In this embodiment, in step S21, after the processor is powered on and the on-chip Boot Loader is run, the control logic of the custom BOOT area is executed. When the software in the custom BOOT area is executed, it is first determined whether there is an online loading requirement. If there is no loading requirement and the status flags are normal, it can jump to the current running area of ​​the software to guide the execution of the startup application software or the power generation application software. When the startup application software or the power generation application software is in normal operation, the controller and the upper device communicate data according to the communication protocol in the normal working mode. When the processor receives and confirms the communication instruction of the upper device requesting online loading, it jumps to the loading and running area and executes the software loader program in the loading and running area.

[0037] In some optional implementations, the step S2 further includes:

[0038] Step S20: According to the communication protocol requirements between the DSP and the external program, the external output state is set to a safe state, and the software is reset.

[0039] In this embodiment, when the processor receives and confirms the communication instruction from the upper-level device requesting online loading, Figure 2 As shown, the software is reset after ensuring the external output status of the product according to the protocol requirements, that is, after the subsequent software restart, it remains in a safe state. When an external device uses or requests communication with the software in the DSP, the current status of loading and upgrading on the DSP is notified to the external device.

[0040] In some optional implementations, in step S2, loading the external software configuration project target version program data into the software current running area further includes:

[0041] Step S21, distinguishing the download data of different software configuration items by corresponding flag bits and ID numbers, receiving target version programs of different software configuration items according to the communication protocol in the loading mode, and caching them in the RAM area outside the DSP;

[0042] Step S22, verifying the target version program in the RAM area;

[0043] Step S23: After the verification is passed, the Flash API library function provided by the DSP is called to load the target version program data into the current running area of ​​the software.

[0044] In some optional implementations, step S2 further includes: step S24, reporting the loading progress and status flag of the target version program data.

[0045] In this embodiment, during the entire loading process, the loading operation area software reports the loading progress and status flag in real time.

[0046] In some optional implementations, step S2 further includes: step S25, when a data verification anomaly occurs during the loading process of the target version program data, the old version program data in the old version backup area is loaded into the current running area of ​​the software.

[0047] In this embodiment, if data verification anomalies or other faults occur during the online loading of the application, the data in the old version backup area can be overwritten by the data in the current running area in the online loading program, and after the online loading program is executed, the version software in the current running area continues to run, thereby improving the fault tolerance of the system.

[0048] Although the present application has been described in detail above with general descriptions and specific implementation schemes, it is obvious to those skilled in the art that some modifications or improvements may be made to the present application. Therefore, these modifications or improvements made without departing from the spirit of the present application all fall within the scope of protection claimed in the present application.

Claims

1. An online loading method for multi-configuration item software of a starter generator controller, characterized in that: Divide the FLASH sector of the DSP of the starter generator controller into at least a custom BOOT area, a loading and running area, a software current running area and a software old version backup area, wherein the starting address of the custom BOOT area is determined by the address to which the Boot Loader program inside the CPU jumps after execution, the custom BOOT area records the control logic for jumping to the loading and running area or the software current running area, the loading and running area records the online loading software for modifying the software current running area and the software old version backup area according to the target version program data of the external software configuration project, the software current running area stores the current program data of the software, and the software old version backup area stores the old version program data of the software; The online loading method comprises: Step S1, determining whether there is an online loading requirement by the control logic of the custom BOOT area, and when there is the online loading requirement, jumping to the loading and running area, and when there is no online loading requirement, jumping to the software current running area; Step S2: The online loading software of the loading running area loads the current program data in the current running area of ​​the software into the old version backup area of ​​the software, and then loads the version program data of the external software configuration project into the current running area of ​​the software.

2. The online loading method for multi-configuration item software of a starter generator controller according to claim 1, characterized in that: The software currently running area includes at least two, namely the startup software current running area and the power generation software current running area. The startup software current running area is used to store the current program data of the startup software configuration items, and the power generation software current running area is used to store the current program data of the power generation software configuration items. Correspondingly, the software old version backup area includes the startup software old version backup area and the power generation software old version backup area.

3. The online loading method for multi-configuration item software of a starter generator controller according to claim 1, characterized in that: Before step S2, the method further comprises: Step S20: According to the communication protocol requirements between the DSP and the external program, the external output state is set to a safe state, and the software is reset.

4. The online loading method for multi-configuration item software of a starter generator controller according to claim 1, characterized in that: In step S2, loading the version program data of the external software configuration project into the current running area of ​​the software further includes: Step S21, distinguishing the download data of different software configuration items by corresponding flag bits and ID numbers, receiving target version programs of different software configuration items according to the communication protocol in the loading mode, and caching them in the RAM area outside the DSP; Step S22, verifying the target version program in the RAM area; Step S23: After the verification is passed, the Flash API library function provided by the DSP is called to load the target version program data into the current running area of ​​the software.

5. The online loading method for multi-configuration item software of a starter generator controller as claimed in claim 4, characterized in that: Step S2 further comprises: Step S24: reporting the loading progress and status flag of the target version program data.

6. The online loading method for multi-configuration item software of a starter generator controller according to claim 4, characterized in that: Step S2 further comprises: Step S25: When a data verification anomaly occurs during the loading process of the target version program data, the old version program data in the old version backup area is loaded into the software current running area.

Images