Remote upgrading method for pure electric wide-body mining dump truck controller

Abstract

The invention discloses a remote upgrading method for a pure electric wide-body mining dump truck controller, and the method comprises the steps: downloading an upgrading program: obtaining a difference packet if the upgrading program exists, and downloading the difference packet at a cloud end; if the upgrading program does not exist, keeping monitoring; upgrading condition judgment and program upgrading: after the whole machine is in a non-working area and the state of the whole machine meets the upgrading condition, an operator confirms upgrading, if upgrading succeeds, upgrading succeeds, and if upgrading fails, a failure processing mode is started; if the T-BOX terminal is in the working area, the T-BOX terminal does not act; if the upgrading condition is not met, after the operator quits program upgrading on the instrument, the state of the whole machine is adjusted according to the prompt information to meet the upgrading condition, and the whole machine is operated again to be powered off and then powered on again for upgrading. According to the invention, the problems of large downloading data volume, poor signal intensity and poor upgrading safety are solved, the safety and reliability are improved, the transmission efficiency and network adaptability are enhanced, and the intelligent operation and maintenance capability is upgraded.

Description

Technical Field

[0001] The present invention relates to a method for remotely upgrading a controller of a pure-electric wide-body mining dump truck, belonging to the technical field of remote upgrading. Background Art

[0002] With the wide application of electric wide-body trucks in complex working conditions such as mines, customers' demands for their performance and functions are becoming increasingly diverse. To meet these demands, the controller programs of electric wide-body trucks need to be frequently upgraded. However, there are many problems with existing program upgrade methods.

[0003] The security of traditional upgrade methods is relatively low. During the upgrade process, due to insufficient consideration of the overall machine state, the program may be forced to be upgraded while the vehicle is running, which may easily lead to vehicle out of control and endanger the safety of personnel and equipment. In addition, the reliability of traditional upgrade methods is also poor. In remote mining areas, especially overseas regions, the signal strength is often insufficient, which may cause the remote upgrade to fail to complete, the upgrade process to fail or be interrupted, seriously affecting the reliability and success rate of the upgrade. And traditional upgrade methods have a large data transmission volume. When the program version is changed or parameters are modified, the entire program needs to be transmitted to the platform, which not only increases the communication volume, but also prolongs the upgrade time and increases the upgrade cost. This large-capacity data transmission is more likely to have problems in case of poor signal, further affecting the upgrade efficiency and reliability.

[0004] In summary, the existing methods for upgrading the controller programs of electric wide-body trucks have obvious deficiencies in terms of security, reliability, and data transmission efficiency. Summary of the Invention

[0005] Object of the Invention: Aiming at the deficiencies in the prior art, the present invention provides a method for remotely upgrading a controller of a pure-electric wide-body mining dump truck. The present invention reduces the data transmission volume by comparing the differential package, and selects to start the upgrade by judging the upgrade conditions, and at the same time solves the upgrade problem caused by poor signal strength in overseas regions.

[0006] Technical Solution: A method for remotely upgrading a controller of a pure-electric wide-body mining dump truck, comprising the following steps: Step 1, Downloading the upgrade program: Real-time monitor through the T-BOX terminal whether there is an upgrade program for the controller in the cloud. If there is an upgrade program, obtain the differential package between the upgrade program and the old version program of the whole machine, and automatically start the whole machine network to download the differential package in the cloud. If the wireless signal strength of the whole machine network is poor, start the standby network mode for downloading; if there is no upgrade program, the T-BOX terminal keeps monitoring the upgrade program; Step 2: Upgrade condition judgment and program upgrade: Determine whether the whole machine is in a non-working area. If it is in a non-working area, the T-BOX terminal sends an upgrade request and upgrade conditions to the whole machine instrument. The operator adjusts the state of the whole machine according to the upgrade conditions. The T-BOX terminal detects whether the current state of the whole machine meets the upgrade conditions. If the upgrade conditions are not met, go to Step 3; After the upgrade conditions are met, send "Upgrade conditions have been met" to the instrument and send the upgrade request again. After the operator confirms the upgrade, the whole machine starts to upgrade and the upgrade progress is displayed on the instrument. If the upgrade is successful, the T-BOX terminal sends a successful upgrade message to the instrument. If the upgrade fails, start the failure handling mode; If it is in the working area, the T-BOX terminal does not act until the whole machine is in the non-working area, and then execute the upgrade process when in the non-working area in Step 2; Step 3: If the upgrade conditions are not met, the T-BOX terminal sends a message to the whole machine instrument. The instrument displays "The upgrade conditions are not met. Please exit the upgrade and power on and upgrade again after checking the upgrade conditions" and prompts the situation where the upgrade conditions are not met. After the operator exits the program upgrade on the instrument, adjust the state of the whole machine according to the prompt information to meet the upgrade conditions, power off the whole machine again and then power it on again, and return to Step 2.

[0007] Optional item. The standby network mode in Step 1 is specifically as follows: Judge whether the wireless signal strength is greater than -30 dBm. If so, download through the whole machine network. If not, automatically start the vehicle group ad-hoc network mode to download the differential package. If it is unable to form an ad-hoc network with surrounding vehicles, automatically start the mobile terminal Bluetooth mode to download the differential package. After the download is complete, transmit the differential package to the whole machine through the Bluetooth signal.

[0008] Optional item. The vehicle group ad-hoc network mode is specifically as follows: The T-BOX terminal of the target vehicle scans the surrounding wireless signals through wireless communication, discovers the T-BOX terminals of other vehicles, establishes a connection with them and establishes a network through multi-hop transmission. The T-BOX terminal of the target vehicle sends whether the differential package has been downloaded to the T-BOX terminals of other vehicles. If the T-BOX terminal of other vehicles replies that the differential package has been downloaded, regard this vehicle as the master vehicle in the network. The T-BOX terminal of the target vehicle requests differential package transmission from it, and synchronizes the node where the master vehicle is located to all vehicles in the network, so that all vehicles in the network can find this node and perform collaborative downloads. After the T-BOX terminal of the master vehicle confirms and agrees, start the transmission; If the T-BOX terminal of other vehicles replies that the differential package has not been downloaded, continue to search for other vehicles that have downloaded the differential package with the target vehicle until a vehicle that has downloaded the differential package is found.

[0009] Preferred option, the Bluetooth mode is specifically as follows: The operator downloads the differential package through the cloud on the mobile terminal. After the download is completed, the operator turns on the Bluetooth of the mobile terminal to pair with the T-BOX terminal. After the pairing is completed, "Bluetooth connection successful" is displayed on the instrument. The operator requests the transmission of the differential package from the T-BOX through the mobile terminal and confirms the transmission on the instrument to complete the download of the upgrade program.

[0010] Preferred option, the failure handling mode in step 2 is specifically as follows: When the program upgrade fails and the whole machine controller does not show abnormal conditions, the T-BOX terminal sends a message to the instrument to inform the operator that the program upgrade has failed, and asks the operator to re-check the upgrade conditions and return to the upgrade condition judgment step; When the program upgrade fails and the whole machine controller has a running fault, the CPU calls the old version program to perform a rollback operation to restore the old version program for use. At the same time, the T-BOX terminal sends a message to the instrument to inform the operator that "the controller upgrade has failed, the device is unavailable, please click to confirm and then power off the whole machine for 30s and then power on again to try to upgrade again", If the upgrade still fails, the T-BOX terminal downloads the repair patch package in the cloud and sends a message to the instrument to request the execution of the repair patch package to repair the controller. After the operator confirms, the instrument displays the controller repair progress. After the repair is completed, it returns to step 2 again. If the upgrade still fails after the repair, the T-BOX terminal uploads the controller status and upgrade failure information to the cloud to request help from after-sales personnel.

[0011] Preferred option, the upgrade conditions are specifically as follows: The battery has been connected and the voltage is good, that is, it is judged whether the battery voltage is between 18V and 30V; The transmission signal is good, that is, the wireless signal strength is greater than -30dBm or the machine group self-organizing network mode has been successfully started or the Bluetooth mode has been started; The power battery is not under high voltage and not charging; The vehicle power supply status is in the ON gear; The handbrake is in the pulled state and the vehicle speed is 0; The whole machine cargo box has been lowered; The horizontal plane inclination angle is less than 5°; The whole machine loading weight is less than 5 tons; The ambient temperature is between -15° and 45°; There is no cliff within 10 meters near the whole machine.

[0012] Preferred option: In step 3, after the operator confirms the upgrade, the T-BOX terminal sends a request for the default automatic upgrade mode to the vehicle instrument panel. If the operator selects to activate the default automatic upgrade mode, when the vehicle is in a non-working area and the upgrade conditions are met next time, the program upgrade will be automatically started, and after the upgrade is completed, the updated content of the vehicle functions will be displayed on the instrument panel.

[0013] Preferred option: During the upgrade process, dynamically monitor the changes in various upgrade conditions of the vehicle. If the upgrade conditions change, set a fault waiting period. If the fault disappears during the fault waiting period, continue the upgrade. If the fault still does not disappear after the fault waiting period, the T-BOX terminal sends a fault message to the instrument panel. If the operator chooses not to operate, the controller continues the upgrade, or chooses to manually interrupt the upgrade, adjusts the upgrade conditions, and then returns to step 2 again; The changes in the upgrade conditions are specifically: Poor transmission signal, that is, the wireless signal strength is less than -30 dBm, or the machine fleet self-organizing network mode has frequent intermittent connections, or the transmission progress of the Bluetooth mode stagnates; The loaded weight of the vehicle is greater than 5 tons; The vehicle has a first-level or second-level non-dangerous fault.

[0014] Preferred option: During the upgrade process, dynamically monitor the changes in various upgrade conditions of the vehicle. If the upgrade conditions change, immediately interrupt the upgrade and forcibly switch the vehicle to the safe mode. The instrument panel displays an alarm and locks the operation permission; The changes in the upgrade conditions are specifically: The vehicle has a third-level fault or a fourth-level dangerous fault; The handbrake is suddenly released or the vehicle speed changes; The vehicle is on high voltage or charging; The horizontal plane inclination angle is greater than 5°.

[0015] Preferred option: It also includes that when the upgrade process is interrupted, the controller writes the received upgrade data block into the Flash memory and records the current progress status in the non-volatile storage unit. After restarting the upgrade program, the T-BOX terminal reads the unfinished upgrade data and progress markers from the Flash memory, loads them into the RAM for verification and processing, and realizes resume from breakpoint.

[0016] Beneficial effects: The safety and reliability of the present invention in the remote upgrade of the controller are comprehensively improved, the transmission efficiency and network adaptability are enhanced, and the intelligent operation and maintenance ability is upgraded: Automatically detect whether the vehicle is in a non-working area before the upgrade, and set the upgrade conditions, and dynamically monitor and block dangerous operations in real time. For the situation of upgrade failure, design a rollback mechanism to automatically restore the old version, and introduce the resume from breakpoint technology to ensure that the upgrade can be continued after an abnormal interruption, avoiding data loss or equipment paralysis.

[0017] Adopt differential package intelligent analysis technology, only transmit the updated part of the program, and significantly reduce the data volume; innovatively construct a three-level network redundancy solution: when the main network signal is insufficient, automatically switch to the cluster ad hoc network mode, and achieve multi-hop transmission through adjacent vehicle nodes; in a completely network-free environment, support Bluetooth near-field transmission, effectively solving the problem of weak signals in remote mining areas.

[0018] Through the deep integration of remote upgrade and T-BOX terminal, realize remote fault prediction and rapid repair, reduce on-site maintenance requirements; real-time evaluate vehicle status and environmental parameters, independently judge the best upgrade timing, and reduce the risk of human operation. The system can also enable the automatic upgrade mode according to user needs, and autonomously complete the program update when the conditions are met, significantly improving the management efficiency of mining equipment. Brief Description of the Drawings

[0019] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, the drawings in the following description are only the embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can also be obtained according to the provided drawings.

[0020] Figure 1 It is a flowchart of the method of the present invention. Detailed Embodiments

[0021] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present invention.

[0022] In the description of the present invention, it should be understood that the orientation or positional relationship indicated by the terms "upper", "lower", "front", "rear", "left", "right", "vertical", "horizontal", "top", "bottom", "inner", "outer", etc. is based on the orientation or positional relationship shown in the drawings, and is only for the convenience of describing the present invention and simplifying the description, rather than indicating or implying that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation of the present invention.

[0023] In the present invention, unless otherwise clearly specified and defined, the first feature being "above" or "below" the second feature may include the first and second features being in direct contact, or may also include the first and second features not being in direct contact but being in contact through additional features therebetween. Moreover, the first feature being "above", "over" and "on top of" the second feature includes the first feature being directly above and obliquely above the second feature, or merely indicating that the horizontal height of the first feature is higher than that of the second feature. The first feature being "below", "beneath" and "underneath" the second feature includes the first feature being directly below and obliquely below the second feature, or merely indicating that the horizontal height of the first feature is less than that of the second feature.

[0024] As Figure 1 shown, a method for remotely upgrading a controller of a pure-electric wide-body mining dump truck includes the following steps: Step 1, upgrade program download: Monitor in real time through the T-BOX terminal whether there is an upgrade program for the controller in the cloud. If there is an upgrade program, obtain the difference package between the upgrade program and the old version program of the whole machine, and automatically start the whole machine network to download the difference package in the cloud. If the wireless signal strength of the whole machine network is poor, start the standby network mode for downloading; if there is no upgrade program, the T-BOX terminal keeps monitoring the upgrade program. Embodiment 1

[0025] The method for obtaining the difference package in this embodiment is as follows: Adopt incremental comparison transmission: When a new controller program is added, the cloud uses the binary differential algorithm to only extract the difference codes between the new version program and the in-vehicle old version program, such as 20 modified function modules, to generate a difference package with a volume reduction of 85%, and transmit it through the wireless network. Embodiment 2

[0026] The method for obtaining the difference package in this embodiment is as follows: When the upgrade program is for patching a vulnerability function, the cloud uses the HDiffPatch tool, i.e., the binary file difference diff and patch functions, to analyze the firmware difference, and only extracts 16 code segments of the affected driver layer, about 200 KB, to generate an encrypted difference package. The vehicle-mounted computer downloads the difference package, and after verifying through the ECC error correction code, directly overwrites the vulnerable code segments of the original firmware, avoiding long downtime caused by full-scale rewriting.

[0027] The specific standby network mode in Step 1 is as follows: Judge whether the wireless signal strength is greater than -30 dBm. If it is, download through the whole machine network. If not, automatically start the vehicle group ad-hoc network mode to download the difference package. If it is impossible to form an ad-hoc network with surrounding vehicles, automatically start the mobile terminal Bluetooth mode to download the difference package, and after downloading, transmit the difference package to the whole machine through the Bluetooth signal.

[0028] The specific self-organizing network mode of the vehicle cluster is as follows: The T-BOX terminal of the target vehicle scans the surrounding wireless signals through wireless communication, discovers the T-BOX terminals of other vehicles, establishes a connection with them, and establishes a network through multi-hop transmission. The T-BOX terminal of the target vehicle sends to the T-BOX terminals of other vehicles whether the differential package has been downloaded. If the T-BOX terminal of other vehicles replies that the differential package has been downloaded, then that vehicle is regarded as the master vehicle in the network. The T-BOX terminal of the target vehicle requests differential package transmission from it, and synchronizes the node where the master vehicle is located to all vehicles in the network, so that all vehicles in the network can find this node and perform collaborative downloading. After the T-BOX terminal of the master vehicle confirms and agrees, the transmission is started; If the T-BOX terminal of other vehicles replies that the differential package has not been downloaded, then it and the target vehicle continue to search for other vehicles that have downloaded the differential package until a vehicle that has downloaded the differential package is found. Embodiment 3

[0029] The self-organizing network structure of the vehicle cluster in this embodiment is: a chain multi-hop relay network, specifically including: Topology construction: The first vehicle A serves as the gateway node, scans backward through the LoRa (Long Range) protocol, and sequentially establishes a chain connection with vehicles B, C, D, and E. Each vehicle is directly connected only to the adjacent front and rear nodes, forming a multi-hop link of A↔B↔C↔D↔E.

[0030] Data transmission: The differential package is initiated from the first vehicle A, fragmented into 5 data blocks, each block being 10 MB, and sequentially transmitted hop by hop through B→C→D→E. After each hop node completes the reception, it broadcasts to the next node and starts local caching to ensure resume from breakpoint.

[0031] Dynamic fault tolerance: If vehicle C goes offline temporarily, the network is automatically reconfigured as A↔B↔D↔E, and B directly establishes a connection with D, skipping the faulty node. Embodiment 4

[0032] The self-organizing network structure of the vehicle cluster in this embodiment can also be: a dynamic clustering and cooperation network, specifically including: Assume there are 12 vehicles in the mining area, then the specific self-organizing network structure is: Clustering mechanism: According to the signal strength and geographical location, the vehicles are dynamically divided into 3 clusters: Cluster 1 (4 vehicles): The central vehicle is the cluster head and is directly connected to the vehicles within the cluster through UWB (Ultra Wide Band) wireless carrier communication; Cluster 2 / 3 (4 vehicles each): Grouped using the same logic as above.

[0033] Cluster heads form a backbone network through Mesh ad-hoc networking, forming a hierarchical structure of Cluster 1 ↔ Cluster 2 ↔ Cluster 3.

[0034] Collaborative transmission: The cloud differential package is received by the cluster head of Edge Cluster 1 and split into three segments: Area A / B / C.

[0035] Synchronous distribution within the backbone network: Cluster 1 transmits Area A to Cluster 2, Cluster 2 transmits Area B to Cluster 3, and Cluster 3 back-transmits Area C to Cluster 1 to form a circular redundancy. Vehicles within the cluster obtain their respective data segments from the cluster head through time slots in the Time Division Multiple Access (TDMA) technology and cross-check and fill in the gaps with each other.

[0036] The specific Bluetooth mode is as follows: The operator downloads the differential package through the cloud on the mobile terminal. After the download is complete, the operator turns on the Bluetooth of the mobile terminal to pair with the T-BOX terminal. After the pairing is completed, "Bluetooth has been successfully connected" is displayed on the instrument. The operator requests the transmission of the differential package from the T-BOX through the mobile terminal and confirms the transmission on the instrument to complete the download of the upgrade program. Embodiment 5

[0037] When downloading the differential package through the whole machine network or the machine cluster ad-hoc networking mode or the Bluetooth mode, if the download is interrupted, the controller stores the downloaded content and marks the download progress in the cloud. When the download is resumed, the download continues from the marked point.

[0038] Step 2: Upgrade condition judgment and program upgrade: Determine whether the whole machine is in a non-working area. If it is in a non-working area, the T-BOX terminal sends an upgrade request and upgrade conditions to the whole machine instrument. The operator adjusts the state of the whole machine according to the upgrade conditions. The T-BOX terminal detects whether the current state of the whole machine meets the upgrade conditions. If the upgrade conditions are not met, go to Step 3; If the upgrade conditions are met, send "Upgrade conditions have been met" to the instrument and send an upgrade request again. After the operator confirms the upgrade, the whole machine starts to upgrade and the upgrade progress is displayed on the instrument. If the upgrade is successful, the T-BOX terminal sends a successful upgrade message to the instrument. If the upgrade fails, start the failure handling mode; If it is in the working area, the T-BOX terminal does not act until the whole machine is in the non-working area, and then executes the upgrade process when in the non-working area in Step 2; The specific upgrade conditions are as follows: The battery has been connected and the voltage is good, that is, judge whether the battery voltage is between 18V and 30V; The transmission signal is good, that is, the wireless signal strength is greater than -30dBm or the machine cluster ad-hoc networking mode has been successfully started or the Bluetooth mode has been started; The power battery is not under high voltage and not charging; The vehicle power supply status is in the ON gear; The handbrake is pulled up and the vehicle speed is 0; The whole machine's cargo box has been lowered; The horizontal plane inclination angle is less than 5°; The loading weight of the whole machine is less than 5 tons; The ambient temperature is between -15°C and 45°C; There is no cliff within 10 meters near the whole machine.

[0039] During the upgrade process, dynamically monitor the changes of each upgrade condition of the whole machine. If the upgrade condition changes, set a fault waiting period. If the fault disappears during the fault waiting period, continue the upgrade. If the fault still does not disappear after the fault waiting period, the T-BOX terminal sends a fault message to the instrument. If the operator chooses not to operate, the controller continues the upgrade, or chooses to manually interrupt the upgrade, adjusts the upgrade conditions, and then returns to step two again; the fault waiting period in this embodiment is 3s.

[0040] The changes in the upgrade conditions are specifically as follows: Poor transmission signal, that is, when the wireless signal strength is less than -30dBm or the machine cluster self-organizing network mode has frequent intermittent connections or the transmission progress of the Bluetooth mode stagnates; The loading weight of the whole machine is greater than 5 tons; The whole machine has a first-level or second-level non-dangerous fault. In this embodiment, the first-level non-dangerous faults specifically include: Intermittent loss of sensor signals, such as fluctuations in tire pressure sensor signals; abnormal dashboard backlight brightness; weak vehicle-mounted communication module signals, such as non-critical communication links; slight oil leakage in the auxiliary hydraulic system, such as no pressure alarm triggered; The second-level non-dangerous faults specifically include: The engine coolant temperature is slightly higher than the normal value, such as not reaching the shutdown threshold; slight vibration of the transmission system, such as not affecting power output; poor contact in non-critical electrical circuits, such as power supply fluctuations of the air conditioner controller.

[0041] During the upgrade process, dynamically monitor the changes of each upgrade condition of the whole machine. If the upgrade condition changes, immediately interrupt the upgrade and force the whole machine to switch to the safe mode. The instrument displays an alarm and locks the operation permission; the changes in the upgrade conditions are specifically as follows: The whole machine has a third-level fault or a fourth-level dangerous fault. In this embodiment, the third-level dangerous faults specifically include: Sharp drop in brake system pressure; high-voltage battery insulation fault, that is, there is a risk of electric shock or short circuit; sharp drop in engine oil pressure; The fourth-level dangerous faults specifically include: The main power supply of the vehicle controller is lost; multiple redundant sensors fail simultaneously, such as the loss of steering angle + vehicle speed signals; the power battery has a thermal runaway; the hydraulic lifting mechanism moves unexpectedly, such as the uncontrolled lifting and lowering of the cargo compartment.

[0042] The handbrake is suddenly released or the speed of the whole machine changes; The whole machine is powered on high voltage or charged; The horizontal plane inclination angle is greater than 5°.

[0043] It also includes that when the upgrade process is interrupted, the controller writes the received upgrade data block into the Flash memory and records the current progress status into the non-volatile storage unit. After restarting the upgrade program, the T-BOX terminal reads the unfinished upgrade data and progress markers from the Flash memory, loads them into the RAM for verification and processing, and realizes resume from breakpoint.

[0044] The failure handling mode in the second step is specifically as follows: When the program upgrade fails and the vehicle controller does not have abnormal conditions, the T-BOX terminal sends a message to the instrument to inform the operator that the program upgrade has failed. Please re-check the upgrade conditions and return to the upgrade condition judgment step; When the program upgrade fails and the vehicle controller has a running fault, the CPU calls the old version program to perform a rollback operation to restore the old version program for use. At the same time, the T-BOX terminal sends a message to the instrument to inform the operator that "the controller upgrade has failed, the device is unavailable. Please click to confirm and then power off the whole machine for 30s and then power on again to try to upgrade again", If the upgrade still fails, the T-BOX terminal downloads a repair patch package from the cloud and sends a message to the instrument to request to execute the repair patch package to repair the controller. After the operator confirms, the instrument shows the repair progress of the controller. After the repair is completed, it returns to step two. If the upgrade still fails after the repair, the T-BOX terminal uploads the controller status and upgrade failure information to the cloud and requests help from the after-sales personnel.

[0045] Step 3: If the upgrade conditions are not met, the T-BOX terminal sends a message to the vehicle instrument. The instrument shows "The upgrade conditions are not met. Please exit the upgrade and power on again after checking the upgrade conditions" and prompts the situation where the upgrade conditions are not met. After the operator exits the program upgrade on the instrument, adjust the status of the whole machine according to the prompt information to meet the upgrade conditions, power off the whole machine again and then power on again, and return to step two.

[0046] The third step also includes that when the operator confirms this upgrade, the T-BOX terminal sends a request for the default automatic upgrade mode to the vehicle instrument. If the operator selects to start the default automatic upgrade mode, when the whole machine is in a non-working area and meets the upgrade conditions next time, the program upgrade will be automatically started, and after the upgrade is completed, the updated content of the whole machine functions will be displayed on the instrument.

[0047] The various embodiments in this specification are described in a progressive manner. Each embodiment focuses on the differences from other embodiments. For the same or similar parts among the various embodiments, reference can be made to each other. For the apparatus disclosed in the embodiments, since it corresponds to the method disclosed in the embodiments, the description is relatively simple. For related parts, reference can be made to the description in the method section.

[0048] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present invention. Various modifications to these embodiments will be obvious to those skilled in the art. The general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to these embodiments shown herein, but rather to the broadest scope consistent with the principles and novel features disclosed herein.

Claims

1. A remote upgrade method for a pure electric wide-body mining dump truck controller, characterized in that: The following steps are involved: Step 1: Download the upgrade program: Monitor the controller upgrade program in the cloud in real time through the T-BOX terminal. If the upgrade program exists, obtain the difference package between the upgrade program and the old version of the whole machine program, and automatically start the whole machine network to download the difference package in the cloud. If the wireless signal strength of the whole machine network is poor, start the backup network mode to download; if the upgrade program does not exist, the T-BOX terminal keeps monitoring the upgrade program; Step 2: Determine the upgrade conditions and upgrade the program: Determine whether the whole machine is in the non-working area. If it is, the T-BOX terminal sends an upgrade request and upgrade conditions to the whole machine instrument. The operator adjusts the whole machine status according to the upgrade conditions. The T-BOX terminal detects whether the current whole machine status meets the upgrade conditions. If not, go to step 3. If the upgrade conditions are met, the instrument will be sent "upgrade conditions met" and the upgrade request will be sent again. After the operator confirms the upgrade, the whole device will start to upgrade and the upgrade progress will be displayed on the instrument. If the upgrade is successful, the T-BOX terminal will send a message of successful upgrade to the instrument. If the upgrade fails, the failure processing mode will be started. If it is in the working area, the T-BOX terminal will not operate until the whole machine is in the non-working area, and then execute the upgrade process in the non-working area in step 2; Step 3: If the upgrade conditions are not met, the T-BOX terminal sends a message to the whole machine instrument. The instrument displays "Upgrade conditions are not met, please exit the upgrade, and re-power on the upgrade after checking the upgrade conditions" and prompts that the upgrade conditions are not met. After the operator exits the program upgrade on the instrument, adjust the whole machine status according to the prompt information to meet the upgrade conditions, re-operate the whole machine and then power it on again, and return to step 2.

2. The remote upgrade method of the controller of a pure electric wide-body mining dump truck according to claim 1 is characterized in that: The backup network mode in step 1 is specifically: Determine whether the wireless signal strength is greater than -30dBm. If so, download it through the entire machine network. If not, automatically start the swarm self-organizing network mode to download the difference package. If it is impossible to form a self-organizing network with surrounding vehicles, automatically start the mobile terminal Bluetooth mode to download the difference package. After the download is complete, the difference package is transmitted to the entire machine via Bluetooth signals.

3. The remote upgrade method of the controller of a pure electric wide-body mining dump truck according to claim 2 is characterized in that: The cluster self-organizing network mode is specifically: The T-BOX terminal of the target vehicle scans the surrounding wireless signals through wireless communication, finds the T-BOX terminals of other vehicle, establishes connections with them, and establishes a network through multi-hop transmission. The T-BOX terminal of the target vehicle sends a message to the T-BOX terminals of other vehicle to ask whether the difference package has been downloaded. If the T-BOX terminals of other vehicle replies that the difference package has been downloaded, the vehicle is regarded as the master vehicle in the network. The T-BOX terminal of the target vehicle requests the difference package to be transmitted, and synchronizes the node where the master vehicle is located to all vehicles in the network, so that all vehicles in the network can find the node and download it collaboratively. After the T-BOX terminal of the master vehicle confirms and agrees, the transmission is started; If the T-BOX terminal of other vehicle computers replies that the difference package has not been downloaded, the target vehicle and the target vehicle continue to search for other vehicle computers that have downloaded the difference package until a vehicle computer that has downloaded the difference package is found.

4. The remote upgrade method of the controller of a pure electric wide-body mining dump truck according to claim 2 is characterized in that: The Bluetooth mode is specifically: The operator downloads the difference package through the cloud on the mobile terminal. After the download is complete, turn on the Bluetooth of the mobile terminal to pair with the T-BOX terminal. After the pairing is completed, the meter displays "Bluetooth has been successfully connected". The operator requests the T-BOX to transmit the difference package through the mobile terminal and confirms the transmission on the meter to complete the download of the upgrade program.

5. The remote upgrade method for the controller of a pure electric wide-body mining dump truck according to claim 1 is characterized in that: The failure handling mode in step 2 is specifically as follows: When the program upgrade fails and the whole machine controller does not have any abnormal situation, the T-BOX terminal sends a message to the instrument to inform the operator that the program upgrade failed and to recheck the upgrade conditions and return to the upgrade condition judgment step; When the program upgrade fails and the whole machine controller has an operation failure, the CPU calls the old version of the program, performs a rollback operation, and restores the old version of the program for use. At the same time, the T-BOX terminal sends a message to the instrument to inform the operator that "the controller upgrade failed and the device is unavailable. Please click OK and power off the whole machine for 30 seconds and then power it on again to try to upgrade again." If the upgrade still fails, the T-BOX terminal will download the repair patch package in the cloud and send a message to the instrument, requesting the execution of the repair patch package to repair the controller. After the operator confirms, the instrument will display the controller repair progress. After the repair is completed, it will return to step 2. If the upgrade still fails after the repair, the T-BOX terminal will upload the controller status and upgrade failure information to the cloud and request help from after-sales personnel.

6. The remote upgrade method for the controller of a pure electric wide-body mining dump truck according to claim 2 is characterized in that: The upgrade conditions are as follows: The battery is connected and the voltage is good, that is, whether the battery voltage is between 18V and 30V; The transmission signal is good, that is, the wireless signal strength is greater than -30dBm or the cluster self-organizing network mode has been successfully started or the Bluetooth mode has been started; The power battery is not at high voltage and is not charged; The vehicle power status is ON; The handbrake is pulled up and the vehicle speed is 0; The whole cargo box has fallen; The horizontal plane inclination is less than 5°; The whole machine loading weight is less than 5 tons; The ambient temperature is between -15° and 45°; There is no cliff within 10 meters of the entire machine.

7. The remote upgrade method for the controller of a pure electric wide-body mining dump truck according to claim 1 is characterized in that: The step three also includes that, after the operator confirms the upgrade, the T-BOX terminal sends a default automatic upgrade mode request to the whole machine instrument. If the operator chooses to start the default automatic upgrade mode, the next time the whole machine is in a non-working area and meets the upgrade conditions, the program upgrade is automatically started, and after the upgrade is completed, the updated content of the whole machine function is displayed on the instrument.

8. The remote upgrade method for the controller of a pure electric wide-body mining dump truck according to claim 6 is characterized in that: During the upgrade process, the changes of various upgrade conditions of the whole machine are dynamically monitored. If the upgrade conditions change, a fault waiting period is set. If the fault disappears during the fault waiting period, the upgrade continues. If the fault still does not disappear after the fault waiting period, the T-BOX terminal sends a fault message to the instrument. If the operator chooses not to operate, the controller continues to upgrade, or chooses to manually interrupt the upgrade, adjust the upgrade conditions, and then return to step 2. The changes in the upgrade conditions are as follows: The transmission signal is poor, that is, the wireless signal strength is less than -30dBm or the cluster ad hoc network mode has frequent disconnections or the transmission progress is stagnant in the Bluetooth mode; The loading weight of the whole machine is greater than 5 tons; The whole machine has a level 1 or level 2 non-dangerous fault.

9. The remote upgrade method for the controller of a pure electric wide-body mining dump truck according to claim 6 is characterized in that: During the upgrade process, the system dynamically monitors changes in the upgrade conditions of the entire machine. If any of the upgrade conditions change, the upgrade is immediately interrupted and the entire machine is forced to switch to safe mode. The instrument displays an alarm and locks the operating authority. The specific changes in the upgrade conditions are: The whole machine has a level 3 fault or a level 4 dangerous fault; The handbrake is suddenly released or the speed of the whole machine changes; High voltage or charging on the whole machine; The inclination angle of the horizontal plane is greater than 5°.

10. The remote upgrade method for the controller of a pure electric wide-body mining dump truck according to claim 8 or 9, characterized in that: It also includes that when the upgrade process is interrupted, the controller writes the received upgrade data blocks into the Flash memory and records the current progress status into the non-volatile storage unit. After restarting the upgrade program, the T-BOX terminal reads the unfinished upgrade data and progress mark from the Flash memory, loads them into the RAM for verification and processing, and realizes breakpoint resumption.

Images