Rail transit signal system upgrading method based on firmware partition redundant storage strategy

Abstract

The invention discloses a rail transit signal system upgrading method based on a firmware partition redundancy storage strategy, which comprises the following steps that: after an upgrading instruction is received, an internal upgrading management unit sends a setting signal to a core unit through hardware IO (Input / Output), after the core unit detects the state of the core unit, the internal upgrading management unit sends confirmation information to a user, and the upgrading is started after the confirmation of the user. The internal upgrade management unit receives and distributes new firmware and a verification file to the core unit, the new firmware and the verification file are written into the main storage area if the verification of the core unit is passed, then the read-back value is compared to ensure that the writing is successful, the new firmware is started from the main storage area, and if the new firmware is abnormal, the new firmware can be upgraded again or the old firmware is started from the standby storage area according to the selection of a user. One-key automatic upgrading can be realized, the safety and reliability of the system are guaranteed, the upgrading efficiency is improved, and the upgrading problem of the rail transit signal system is effectively solved.

Description

Technical Field

[0001] The present invention relates to the field of rail transit signal systems, and particularly to a method for upgrading a rail transit signal system based on a firmware partition redundant storage strategy. Background Art

[0002] The upgrade of urban rail transit signal systems has always been the focus and difficulty in the on-site signal personnel's operations. For conventional systems in other fields, in case of upgrade failure or malfunction, there is relatively sufficient time for repair. However, due to the particularity of rail transit signal systems, the upgrade work needs to be carried out during non-operating periods and it is necessary to ensure that it does not affect the normal operation the next day. Therefore, strict requirements are imposed on the upgrade time and error tolerance rate. Usually, professional staff need to be deployed at each station of the entire line to manually operate the upgrade. This upgrade method not only has a cumbersome upgrade process, low operation consistency, but also requires high professional experience of the upgrade personnel.

[0003] Existing automatic upgrade solutions usually have difficulty meeting the requirements of upgrade failure risks and upgrade fault handling, and cannot be directly applied to urban rail transit signal systems. Therefore, how to perform system upgrade with low risk without affecting rail transit operations is a technical problem that is difficult to solve currently. Summary of the Invention

[0004] Aiming at the problems of high upgrade risks in the existing rail transit signal system upgrade and the easy impact on traffic operations in case of upgrade failure, the present invention provides a method for upgrading a rail transit signal system based on a firmware partition redundant storage strategy. From aspects such as the confirmation mechanism, data transmission mechanism, storage area division, upgrade process, and verification mechanism, it improves the degree of upgrade automation, and avoids problems such as software damage or data loss during the upgrade process, reducing the upgrade risk of the rail transit signal system.

[0005] The following are the technical solutions of the present invention.

[0006] A method for upgrading a rail transit signal system based on a firmware partition redundant storage strategy is applied to a rail transit signal system including a host computer and subsystems. The subsystems include an internal upgrade management unit and a core unit. The main storage area and backup storage area of the core unit store system firmware. The upgrade method includes the following steps: S1. The host computer stores the new firmware and the verification file in a specified directory; S2. After receiving the upgrade instruction, the internal upgrade management unit of the subsystem sends a set signal to the core unit through hardware IO. After receiving the set signal, the core unit detects its own state, and the internal upgrade management unit sends an upgrade confirmation message to the user. After the user confirms, the formal upgrade program is executed; S3. The internal upgrade management unit of the subsystem receives the new firmware and the verification file from the host computer, and distributes the new firmware and the verification file to the core unit under the subsystem through the network interface; S4. After receiving the new firmware and the verification file, the core unit performs verification. If it passes, the new firmware is written into the main storage area; S5. Start the new firmware from the main storage area. If the startup is abnormal, re-upgrade according to the user's selection or start the firmware before the upgrade from the backup storage area. Otherwise, it is considered that the upgrade is completed.

[0007] Preferably, in S1, the host computer stores the new firmware and the verification file in a specified directory, including: Start the TFTP service in the specified directory of the host computer, and place the new firmware to be upgraded and its corresponding MD5 file in this directory. The MD5 file is used as the verification file and is obtained by calculating the new firmware to detect the integrity of the firmware.

[0008] Preferably, in S2, after receiving the set signal, the core unit detects its own status, and the internal upgrade management unit sends an upgrade confirmation message to the user, including: After receiving the set signal, the core unit detects the current system version number, the previous upgrade time, and the current system running status, and sends them to the internal upgrade management unit through the network interface; The internal upgrade management unit presents the current system version number, the previous upgrade time, the current system running status, and the upgrade content as the upgrade confirmation message to the user.

[0009] Preferably, in S3, the internal upgrade management unit of the subsystem receives the new firmware and the verification file from the host computer, and distributes the new firmware and the verification file to the core unit under the subsystem through the network interface, including: The internal upgrade management unit of the subsystem receives the new firmware and the verification file sent by the host computer through the network interface. The new firmware and the verification file are transmitted in binary form; Subsequently, the internal upgrade management unit of the subsystem transmits the new firmware and the verification file to the core unit under the subsystem in binary form through the network interface.

[0010] Preferably, in S4, after receiving the new firmware and the verification file, the core unit performs verification. If it passes, the new firmware is written into the main storage area, including: After receiving the new firmware and the verification file, the core unit calculates the MD5 value of the new firmware and compares it with the MD5 value of the verification file; If it passes, the new firmware is written into the main storage area; Otherwise, the verification fails, prompting the user that the upgrade is abnormal, and re-upgrading according to the user's selection or starting the firmware before the upgrade from the backup storage area.

[0011] Preferably, the step S4 further includes: After writing the new firmware into the main storage area, compare the binary value of the new firmware with the binary value of the firmware read back from the main storage area to determine whether the writing operation is successful; If the judgment result is normal, continue to execute step S5; Otherwise, it is considered that an exception occurs during the writing process, interrupt the writing, prompt the user that the upgrade is abnormal, and re-upgrade according to the user's selection or start the firmware before the upgrade from the backup storage area.

[0012] Preferably, if the user selects to start the firmware before the upgrade from the backup storage area, report the running state of the firmware before the upgrade to the host computer.

[0013] Preferably, in step S5, after it is considered that the upgrade is completed, it further includes: After the new firmware runs for a certain period of time, synchronize the new firmware to the backup storage area so that the system firmware in both the main storage area and the backup storage area is synchronously updated to the new firmware.

[0014] The present invention also provides an electronic device, including a memory and a processor. A computer program is stored in the memory. When the processor calls the computer program in the memory, the steps of the above-mentioned rail transit signal system upgrade method based on the firmware partition redundancy storage strategy are implemented.

[0015] The present invention also provides a storage medium. A computer executable instruction is stored in the storage medium. When the computer executable instruction is loaded and executed by a processor, the steps of the above-mentioned rail transit signal system upgrade method based on the firmware partition redundancy storage strategy are implemented.

[0016] The substantial effects of the present invention include: The present invention realizes one-key automatic upgrade. Through the internal upgrade management unit, the system can automatically execute the upgrade process without the need for professional personnel to manually operate at each site, greatly improving the upgrade efficiency and saving a large amount of labor costs. At the same time, during the upgrade process, the progress and fault reasons can be reported to the user in real time, facilitating the user to timely understand the situation and participate in fault handling, effectively improving the problem of untimely fault handling in the traditional upgrade method.

[0017] From the perspective of system security and reliability, the firmware redundant partition provides a strong guarantee. When encountering software or hardware problems that cause the new software to fail to start or the system to crash, the system can quickly start the system software before the upgrade from the firmware redundant partition, ensuring the continuous normal operation of the rail transit signal system, greatly reducing the risk of system paralysis caused by upgrade failure, and effectively avoiding the hidden danger of software damage or data loss.

[0018] The internal upgrade management unit of the present invention is connected to the core unit through a network interface and hardware IO. Compared with the separate connection method, in terms of the control method of the present invention, the hardware mode signal control has obvious advantages. The internal upgrade management unit controls the hardware mode signal, enabling all modules of the subsystem to enter the diagnostic upgrade state. Compared with the traditional pure software instruction control, the speed is faster, and in the complex rail transit signal system environment, the safety and reliability are higher, enhancing the stability and controllability of the upgrade process.

[0019] In summary, the invention patent effectively solves many pain points in the upgrade process of the urban rail transit signal system, which is of great significance for improving the upgrade efficiency of the rail transit signal system and ensuring the safe and stable operation of the system, and is expected to promote the development and application of the signal system upgrade technology in the rail transit industry. Brief Description of the Drawings

[0020] Figure 1 is the flowchart of the embodiment of the present invention; Figure 2 is the system architecture diagram of the embodiment of the present invention. Detailed Embodiments

[0021] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the following will clearly and completely describe the technical solutions in combination with the embodiments. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0022] It should be understood that in various embodiments of the present invention, the sequence numbers of the processes do not mean the order of execution, and the execution order of the processes should be determined by their functions and internal logics, and should not constitute any limitation to the implementation process of the embodiments of the present invention.

[0023] It should be understood that in the present invention, "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or units does not necessarily have to be limited to those clearly listed steps or units, but may include other steps or units that are not clearly listed or are inherent to these processes, methods, products, or devices.

[0024] It should be understood that in the present invention, "a plurality of" means two or more. " / or" is merely an association relationship describing associated objects, indicating that three relationships can exist. For example, A and / or B can represent: A exists alone, A and B exist simultaneously, and B exists alone. The character " / " generally indicates that the associated objects before and after are in an "or" relationship. "Including A, B, and C" and "including A, B, C" mean that all of A, B, and C are included. "Including A, B, or C" means including one of A, B, and C. "Including A, B, and / or C" means including any one or any two or all three of A, B, and C.

[0025] The technical solution of the present invention will be described in detail below with specific embodiments. The embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments.

[0026] Embodiment: As Figure 1 shown, a method for upgrading a rail transit signal system based on a firmware partition redundant storage strategy is applied to Figure 2 the rail transit signal system shown including a host computer and subsystems. The subsystems include an internal upgrade management unit and a core unit. The main storage area and the backup storage area of the core unit store system firmware. The upgrade method includes the following steps: S1. The host computer stores the new firmware and the verification file in a specified directory.

[0027] Including: Start the TFTP service in the specified directory of the host computer, and place the new firmware to be upgraded and its corresponding MD5 file in this directory. The MD5 file is used as the verification file and is calculated from the new firmware to detect the integrity of the firmware.

[0028] For example, under the folder named "SignalSystemUpgrade", create a new subfolder named after the current date, such as "20231115_upgrade". Then start the TFTP (Trivial File Transfer Protocol) service in this subfolder, which can conveniently achieve file transfer and sharing. The staff place the new firmware file to be upgraded obtained from the device supplier, such as "NewFirmware_V2.0.bin", and the MD5 file "NewFirmware_V2.0.md5" calculated for this new firmware through a specific algorithm in this directory. The MD5 file is like the "ID card" of the new firmware, and its unique hash value can ensure that the integrity and accuracy of the new firmware are verified during subsequent transmission and use. If any minor change occurs to the firmware during transmission, the calculated MD5 value will not match the MD5 value of the original file, thus detecting the problem in a timely manner.

[0029] S2. After receiving the upgrade instruction, the internal upgrade management unit of the subsystem sends a set signal to the core unit through the hardware IO. After receiving the set signal, the core unit detects its own status, and the internal upgrade management unit sends an upgrade confirmation message to the user. After the user confirms, the formal upgrade procedure is executed.

[0030] Including: After receiving the set signal, the core unit detects the current system version number, the previous upgrade time, and the current system operating status, and sends them to the internal upgrade management unit through the network interface; The internal upgrade management unit presents the current system version number, the previous upgrade time, the current system operating status, and the upgrade content as the upgrade confirmation message to the user.

[0031] For example, when the operation and maintenance personnel decide to upgrade the rail transit signal system at an appropriate time (such as during the non - operating hours at night), they will click the "Start Upgrade" button on the operation interface of the host computer, thereby sending an upgrade instruction. After receiving this instruction, the internal upgrade management unit in the subsystem will immediately send a specific setting signal to the core unit through the hardware IO (Input / Output) interface. This signal is like a "start switch", triggering the core unit to start self - detection. The core unit will read the system version number stored in itself. For example, the current version is "1.5.0", record the time of the previous upgrade, such as "May 10, 2023", and check the current system operation status, including whether the working temperatures of each key module, memory usage, data transfer rate, etc. are normal. These information will be quickly transmitted back to the internal upgrade management unit through the network interface. The internal upgrade management unit will integrate these information, plus an overview of the content of this upgrade, such as "Upgrade to firmware version 2.0, optimize the signal processing algorithm, and enhance system stability", and display it to the user in a clear and understandable interface form. After carefully checking this information, if the user confirms that the current system status is suitable for upgrade and the upgrade content meets expectations, they will click the "Confirm Upgrade" button, and then the system will officially enter the upgrade process.

[0032] S3. The internal upgrade management unit of the subsystem receives the new firmware and the verification file from the host computer, and distributes the new firmware and the verification file to the core unit under the subsystem through the network interface.

[0033] Including: The internal upgrade management unit of the subsystem receives the new firmware and the verification file sent by the host computer through the network interface, and the new firmware and the verification file are transmitted in binary form; Subsequently, the internal upgrade management unit of the subsystem transmits the new firmware and the verification file to the core unit under the subsystem in binary form through the network interface.

[0034] The internal upgrade management unit uses its built - in network communication module to establish a stable connection with the host computer according to a pre - set network protocol (such as the TCP / IP protocol). After receiving the upgrade instruction sent by the host computer and obtaining the user's confirmation, it will receive the new firmware and the verification file in the form of a binary data stream. This binary - form data transmission can ensure the efficient transmission and accuracy of data, avoiding data errors or losses caused by problems such as format conversion during the transmission process. After the reception is completed, the internal upgrade management unit will accurately send the new firmware and the verification file to each corresponding core unit through the network interface according to the pre - configured core unit address list. Each core unit has its own independent network address to ensure that the data can be accurately delivered.

[0035] S4. After the core unit receives the new firmware and the verification file, it performs verification. If the verification passes, it writes the new firmware into the main storage area.

[0036] It includes: After the core unit receives the new firmware and the verification file, it calculates the MD5 value of the new firmware and compares it with the MD5 value of the verification file. If the verification passes, it writes the new firmware into the main storage area. Otherwise, the verification fails, it prompts the user that the upgrade is abnormal, and according to the user's selection, it upgrades again or starts the firmware before the upgrade from the backup storage area.

[0037] After the core unit receives the new firmware and the verification file, it will first use a dedicated calculation module to calculate the MD5 value of the new firmware. This calculation process is based on the binary data content of the new firmware and is carried out through a specific hash algorithm. After the calculation is completed, it is strictly compared with the MD5 value in the received verification file. If the two are exactly the same, it means that no data corruption or tampering has occurred during the transmission of the new firmware. At this time, the core unit will start the writing program and write the new firmware into the main storage area. During the writing process, technologies such as data block verification and error correction coding will be used to ensure the integrity and accuracy of the written data. The main storage area is the firmware storage area mainly used by the core unit during normal operation, and the firmware stored in it is directly related to the operation performance and function realization of the system.

[0038] The said S4 further includes: After writing the new firmware into the main storage area, it compares the binary value of the new firmware with the binary value of the firmware read back from the main storage area to determine whether the writing operation is successful. If the judgment result is normal, it continues to execute S5. Otherwise, it is considered that an abnormality has occurred during the writing process, the writing is interrupted, it prompts the user that the upgrade is abnormal, and according to the user's selection, it upgrades again or starts the firmware before the upgrade from the backup storage area.

[0039] In addition, if the user selects to start the firmware before the upgrade from the backup storage area, it reports the running status of the firmware before the upgrade to the host computer.

[0040] After the process of writing the new firmware to the main storage area is completely finished, the core unit will read the newly written new firmware data in the main storage area again and compare it bit by bit with the original new firmware binary value. If the comparison results are exactly the same, it indicates that the writing operation is successful and the system can continue with the next startup verification operation. However, if any inconsistencies are found, it means that an abnormality has occurred during the writing process. At this time, the core unit will immediately interrupt the writing operation and send a detailed upgrade exception prompt message to the user, including the location where the error occurred, possible reasons, etc. The user can choose to perform the upgrade operation again based on this information, or, in an emergency, choose to start the firmware before the upgrade from the backup storage area to ensure that the system can be restored to a normal operating state as soon as possible and avoid affecting the normal operation of rail transit.

[0041] S5. Start the new firmware from the main storage area. If the startup is abnormal, re-upgrade according to the user's selection or start the firmware before the upgrade from the backup storage area; otherwise, consider the upgrade completed.

[0042] After the new firmware is successfully written to the main storage area, the core unit will attempt to start the new firmware from the main storage area. During the startup process, the system will perform a series of initialization operations on the new firmware, including loading necessary driver programs, configuring system parameters, establishing communication connections with other modules, etc. If everything goes smoothly during this process, the new firmware can run normally and the system runs stably for a certain period of time (e.g., 15 minutes) without any abnormal situations, such as crashing, signal interruption, data error, etc., then it is considered that this upgrade is completed. However, if problems occur during the startup process, such as the new firmware being incompatible with the hardware device, resulting in the system being unable to start normally, or serious errors occurring after startup, resulting in the system running unstably, at this time the system will pause the startup process and wait for the user's operation instructions. The user can choose to perform the upgrade operation again according to the actual situation to try to solve the possible problems again, or choose to start the firmware before the upgrade from the backup storage area to restore the system to the stable state before the upgrade and ensure that the normal operation of the rail transit signal system is not affected for a long time.

[0043] In the above S5, after considering the upgrade completed, it further includes: After the new firmware runs for a certain period of time, synchronize the new firmware to the backup storage area so that the system firmware in both the main storage area and the backup storage area is updated to the new firmware synchronously.

[0044] After the new firmware successfully starts and runs stably in the main storage area for a period of time (e.g., 24 hours), the system will automatically start a synchronization program in the background. This synchronization program will copy the new firmware data in the main storage area completely to the backup storage area. During the synchronization process, data checksum and error correction technologies similar to those used for writing to the main storage area will be adopted to ensure that the firmware data in the backup storage area is exactly the same as that in the main storage area. The purpose of doing this is that in future system maintenance or upgrade processes, if there are problems with the firmware in the main storage area, the system can quickly start the same version of the firmware from the backup storage area, ensuring the continuous and stable operation of the system, and improving the fault tolerance and reliability of the system.

[0045] This embodiment also provides an electronic device, including a memory and a processor. A computer program is stored in the memory. When the processor calls the computer program in the memory, the steps of the above-mentioned rail transit signal system upgrade method based on the firmware partition redundant storage strategy are implemented.

[0046] This embodiment also provides a storage medium. Computer-executable instructions are stored in the storage medium. When the computer-executable instructions are loaded and executed by a processor, the steps of the above-mentioned rail transit signal system upgrade method based on the firmware partition redundant storage strategy are implemented.

[0047] The substantial effects of this embodiment include: This embodiment realizes one-key automatic upgrade. Through the internal upgrade management unit, the system can automatically execute the upgrade process without the need for professional personnel to operate manually at each site, greatly improving the upgrade efficiency and saving a large amount of labor costs. At the same time, during the upgrade process, the progress and fault reasons can be reported to the user in real time, facilitating the user to timely grasp the situation and participate in fault handling, effectively improving the problem of untimely fault handling in the traditional upgrade method.

[0048] From the perspective of system security and reliability, the firmware redundant partition provides strong guarantee. When software or hardware problems cause the new software to fail to start or the system to crash, the system can quickly start the system software before the upgrade from the firmware redundant partition, ensuring the continuous normal operation of the rail transit signal system, greatly reducing the risk of system paralysis caused by upgrade failure, and effectively avoiding the hidden dangers of software damage or data loss.

[0049] The internal upgrade management unit of this embodiment is connected to the core unit through a network interface and hardware IO. Compared with the separate connection method, in the control method of this embodiment, the hardware mode signal control has obvious advantages. The internal upgrade management unit controls the hardware mode signal, enabling all modules of the subsystem to enter the diagnostic upgrade state. Compared with the traditional pure software instruction control, the speed is faster, and in the complex rail transit signal system environment, the security and reliability are higher, enhancing the stability and controllability of the upgrade process.

[0050] In summary, the patent of this embodiment effectively solves many pain points in the process of upgrading the urban rail transit signal system, which is of great significance for improving the upgrading efficiency of the rail transit signal system and ensuring the safe and stable operation of the system, and is expected to promote the development and application of the signal system upgrading technology in the rail transit industry.

[0051] Through the description of the above embodiments, those skilled in the art can understand that for the convenience and conciseness of description, only the division of the above functional modules is used as an example. In actual applications, the above functions can be allocated to different functional modules according to needs, that is, the internal structure of the specific device is divided into different functional modules to complete all or part of the functions described above.

[0052] In the embodiments provided in the present application, it should be understood that the disclosed structure and method can be implemented in other ways. For example, the embodiments of the structure described above are only illustrative. For example, the division of modules or units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or integrated into another structure, or some features can be ignored or not executed. Another point is that the displayed or discussed coupling or direct coupling or communication connection between each other can be through some interfaces. The indirect coupling or communication connection of the structure or unit can be in an electrical, mechanical or other form.

[0053] The unit described as a separated component may or may not be physically separated. The component displayed as a unit may be a physical unit or multiple physical units, that is, it may be located in one place, or may be distributed to multiple different places. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0054] In addition, each functional unit in the embodiments of the present application can be integrated into one processing unit, or each unit exists physically alone, or two or more units are integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

[0055] When an integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a readable storage medium. Based on this understanding, the technical solution of the embodiments of the present application, in essence, or the part that contributes to the prior art, or all or part of this technical solution, can be embodied in the form of a software product. This software product is stored in a storage medium and includes several instructions for causing a device (which can be a single-chip microcomputer, a chip, etc.) or a processor to execute all or part of the steps of the methods of the various embodiments of the present application. The aforementioned storage medium includes: various media that can store program codes, such as USB flash drives, mobile hard disks, read only memory (ROM), random access memory (RAM), magnetic disks, or optical discs.

[0056] The above content is only the specific implementation manner of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art within the technical scope disclosed by the present application can easily think of changes or substitutions, which should all be covered by the protection scope of the present application. Therefore, the protection scope of the present application should be subject to the protection scope of the claims.

Claims

1. A rail transit signal system upgrade method based on a firmware partition redundant storage strategy is applied to a rail transit signal system including a host computer and a subsystem, and is characterized in that: The subsystem includes an internal upgrade management unit and a core unit, the main storage area and the backup storage area of ​​the core unit store system firmware, and the upgrade method includes the following steps: S1. The host computer stores the new firmware and verification files in the specified directory; S2. After receiving the upgrade instruction, the internal upgrade management unit of the subsystem sends a set signal to the core unit through the hardware IO. After receiving the set signal, the core unit detects its own state, and the internal upgrade management unit sends an upgrade confirmation message to the user. After the user confirms, the formal upgrade procedure is executed; S3, the internal upgrade management unit of the subsystem receives the new firmware and verification file from the host computer, and distributes the new firmware and verification file to the core unit under the subsystem through the network interface; S4, after receiving the new firmware and the verification file, the core unit performs verification, and if it passes, writes the new firmware into the main storage area; S5. Start the new firmware from the main storage area. If the startup is abnormal, re-upgrade or start the firmware before the upgrade from the backup storage area according to the user's selection. Otherwise, the upgrade is considered completed.

2. The rail transit signal system upgrade method based on firmware partition redundant storage strategy according to claim 1 is characterized in that: The S1, host computer stores the new firmware and verification files in a specified directory, including: Start the TFTP service in the specified directory of the host computer, and place the new firmware to be upgraded and its corresponding MD5 file in the directory. The MD5 file is used as a verification file and is calculated by the new firmware to detect the integrity of the firmware.

3. The rail transit signal system upgrade method based on firmware partition redundant storage strategy according to claim 1 is characterized in that: In S2, the core unit detects its own state after receiving the set signal, and the internal upgrade management unit sends upgrade confirmation information to the user, including: After receiving the set signal, the core unit detects the current system version number, the last upgrade time, and the current system operation status, and sends them to the internal upgrade management unit through the network interface; The internal upgrade management unit presents the current system version number, the last upgrade time, the current system operation status and the upgrade content to the user as upgrade confirmation information.

4. The rail transit signal system upgrade method based on firmware partition redundant storage strategy according to claim 1 is characterized in that: The internal upgrade management unit of the subsystem in S3 receives the new firmware and the verification file from the host computer, and distributes the new firmware and the verification file to the core unit under the subsystem through the network interface, including: The internal upgrade management unit of the subsystem receives the new firmware and verification file sent by the host computer through the network interface, and the new firmware and verification file are transmitted in binary form; Subsequently, the internal upgrade management unit of the subsystem transmits the new firmware and the verification file in binary form to the core unit under the subsystem through the network interface.

5. The rail transit signal system upgrade method based on firmware partition redundant storage strategy according to claim 1 is characterized in that: After receiving the new firmware and the verification file, the core unit performs verification, and if the verification passes, writes the new firmware into the main storage area, including: After receiving the new firmware and the verification file, the core unit calculates the MD5 value of the new firmware and compares it with the MD5 value of the verification file; If it passes, the new firmware is written to the main storage area; Otherwise, the verification fails and the user is prompted with an upgrade exception. The user is prompted to re-upgrade or start the firmware before the upgrade from the backup storage area.

6. The rail transit signal system upgrade method based on firmware partition redundant storage strategy according to claim 1 is characterized in that: The S4 further comprises: After writing the new firmware into the main storage area, comparing the binary value of the new firmware with the binary value of the firmware read back from the main storage area to determine whether the write operation is successful; If the judgment result is normal, continue to execute S5; Otherwise, it is considered that an exception occurs during the writing process, the writing is interrupted, and the user is prompted that the upgrade is abnormal. The firmware is re-upgraded or started from the backup storage area according to the user's choice.

7. The rail transit signal system upgrade method based on firmware partition redundant storage strategy according to claim 1, 5 or 6, characterized in that: If the user chooses to start the firmware before the upgrade from the backup storage area, the running status of the firmware before the upgrade will be reported to the host computer.

8. The rail transit signal system upgrade method based on firmware partition redundant storage strategy according to claim 1 is characterized in that: In the above S5, after the upgrade is completed, it is considered that the following steps are also included: After the new firmware runs for a certain period of time, the new firmware is synchronized to the backup storage area, so that the system firmware in the main storage area and the backup storage area are synchronously updated to the new firmware.

9. An electronic device, characterized in that: It includes a memory and a processor, wherein the memory stores a computer program, and when the processor calls the computer program in the memory, the steps of the rail transit signal system upgrade method based on the firmware partition redundant storage strategy as described in any one of claims 1 to 8 are implemented.

10. A storage medium, characterized in that: The storage medium stores computer executable instructions, and when the computer executable instructions are loaded and executed by the processor, the steps of the rail transit signal system upgrade method based on the firmware partition redundant storage strategy as described in any one of claims 1 to 8 are implemented.

Images