System and method for remotely upgrading insulin pump program based on 4G network and TCP protocol

Abstract

The invention relates to the technical field of medical equipment remote upgrading, and discloses an insulin pump program remote upgrading system and method based on a 4G network and a TCP protocol, and the system comprises a server side which is used for storing and managing a firmware upgrading package, verifying an insulin pump terminal, issuing the firmware upgrading package, and monitoring the online state and upgrading progress of equipment, the upgrading module is used for verifying and upgrading based on an issued firmware upgrading package through a 4G network; the upgrading process control module is used for monitoring a terminal power supply and a transmission breakpoint of the insulin pump in the upgrading process; and a network performance optimization module. By introducing a RaptorQ algorithm, redundancy dynamic adjustment is realized, the problem of a small number of data packets is solved by using a small amount of redundancy in a relatively stable network environment, when the network environment is relatively poor, the redundancy is improved to 20%, a large number of abnormal data packets are recovered by using redundant packets, retransmission is reduced, the influence of network fluctuation on upgrading is reduced, and the reliability and stability of data transmission are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of remote upgrading of medical devices, and specifically to a remote upgrading system and method for insulin pump programs based on 4G network and TCP protocol. Background Art

[0002] With the continuous progress of medical technology, as an important device for diabetic patients to achieve precise insulin infusion, the continuous optimization and update of the functions of insulin pumps are becoming increasingly crucial. In the current trend of digital medicine, patients' requirements for the convenience, functionality, and safety of insulin pumps are increasing day by day. At the same time, 4G network technology has characteristics such as high speed, low latency, and wide coverage, providing a solid network foundation for remote data interaction of medical devices. With the reliability guarantee of the TCP protocol in data transmission, it realizes the efficient and safe remote upgrade of insulin pump programs, improves the device performance, and better serves diabetic patients.

[0003] However, in the current technology, when the network environment is poor, traditional technologies can only frequently retransmit data to upgrade the insulin pump, which not only consumes a large amount of time and network traffic but also increases the risk of upgrade failure, resulting in a decrease in the reliability and stability of data transmission. Summary of the Invention

[0004] Aiming at the deficiencies of the prior art, the present invention provides a remote upgrading system for insulin pump programs based on 4G network and TCP protocol, which solves the problems of frequent retransmission of upgrade data, increased risk of upgrade failure, and decreased reliability and stability of data transmission when the network environment is poor.

[0005] To achieve the above objectives, the present invention is realized through the following technical solutions: A remote upgrading system and method for insulin pump programs based on 4G network and TCP protocol, including:

[0006] A server side, which is used to store and manage firmware upgrade packages, verify the insulin pump terminal and then send the firmware upgrade packages, and monitor the online status and upgrade progress of the device;

[0007] An insulin pump terminal, which is used to verify and upgrade based on the sent firmware upgrade packages through the 4G network;

[0008] An upgrade process control module, which is used to monitor the power supply of the insulin pump terminal and the transmission breakpoint during the upgrade process, and perform automatic rollback based on the transmission breakpoint;

[0009] A network performance optimization module, which is used to select TCP or QUIC protocol to transmit upgrade data according to the 4G network quality assessment result.

[0010] Preferably, the server side includes an upgrade package management module, a two-way authentication module, and a status monitoring module;

[0011] The upgrade package management module is used to store firmware upgrade packages and generate upgrade packages in the form of differential packages using the BSDiff algorithm;

[0012] The two-way authentication module is used to verify the insulin pump terminal through the TLS protocol;

[0013] The status monitoring module is used to record the online status and upgrade progress of the insulin pump device in real time.

[0014] Preferably, the insulin pump terminal includes a dual-partition storage unit, an intelligent network communication unit, and a forward error correction coding unit;

[0015] The dual-partition storage unit includes partition A and partition B, which are used to store the currently running firmware and the firmware to be upgraded. Each partition reserves redundant space with a capacity greater than 512KB, and only one partition is ensured to be in the active state at the same time through hardware interlock logic;

[0016] The intelligent network communication unit integrates a 4G module and supports adaptive switching between TCP and QUIC protocols;

[0017] The forward error correction coding unit is used to add redundant packets to the fragmented data, and the redundancy is dynamically adjusted.

[0018] Preferably, the upgrade process control module includes a power-off protection unit, a breakpoint resume unit, and an automatic rollback unit;

[0019] The power-off protection unit is used to write the currently transmitted fragmented data and metadata into the non-volatile memory when a power interruption is detected;

[0020] The breakpoint resume unit is used to resume the upgrade process according to the recorded data breakpoint position and verification information;

[0021] The automatic rollback unit is used to perform virtual sandbox verification before firmware activation, simulate the operation of the insulin dose calculation function, and if the result exceeds the preset tolerance range, abort the activation and roll back to the original partition.

[0022] Preferably, the network performance optimization module includes a network monitoring unit and a dynamic protocol adaptation unit;

[0023] The network monitoring unit is used to monitor the 4G network status of the server side and the insulin pump terminal in real time, and comprehensively evaluate the network quality based on the RSSI (Received Signal Strength Indicator), CQI (Channel Quality Indicator) reported by the 4G network, and the historical transmission success rate;

[0024] The dynamic protocol adaptation unit is used to configure the selection of TCP or QUIC protocol for transmitting upgrade data based on the network quality assessment result.

[0025] Preferably, the forward error correction coding unit uses the RaptorQ algorithm to add redundant packets to the fragmented data, and the redundancy is dynamically adjusted, including:

[0026] When the network signal strength ≥ -80dBm, the redundancy is 10%;

[0027] When the network signal strength < -80dBm, the redundancy is increased to 20%.

[0028] Preferably, the power-off protection unit includes a super capacitor and a power supply monitoring chip. The super capacitor provides emergency power supply for more than 5 seconds, and the power supply monitoring chip triggers to write the fragmented data and metadata into the non-volatile memory when detecting that the voltage is lower than the threshold.

[0029] Preferably, the dynamic protocol adaptation unit includes:

[0030] When the real-time packet loss rate ≤ 5% and RTT (round-trip time) ≤ 200ms, select the TCP protocol for transmission;

[0031] When the packet loss rate > 5% or RTT > 200ms, switch to the QUIC protocol for transmission.

[0032] A method for remote upgrade of an insulin pump program based on a 4G network and the TCP protocol, the method comprising the following steps:

[0033] S1. Establish a connection between the insulin pump terminal and the server through 4G communication, and authenticate through mutual TLS;

[0034] S2. Real-time monitor network quality parameters through the network performance optimization module, and dynamically select the TCP or QUIC protocol;

[0035] S3. Encode the fragmented data using forward error correction, generate redundant packets and transmit them;

[0036] S4. After the insulin pump terminal receives the data, decode and verify it. If retransmission is required, preferentially request the lost fragments through the QUIC protocol;

[0037] S5. Verify the firmware integrity after the transmission is completed. If it passes, activate the partition, otherwise trigger a rollback.

[0038] Preferably, when decoding fails in S4, preferentially use the multiplexing feature of the QUIC protocol to concurrently request the lost fragments and redundant packets until the decoding condition is met.

[0039] The present invention provides a remote upgrade system and method for an insulin pump program based on a 4G network and the TCP protocol, having the following beneficial effects:

[0040] 1. By introducing the RaptorQ algorithm, the present invention realizes dynamic adjustment of redundancy. In a relatively stable network environment, a small amount of redundancy is used to solve a small number of data packet problems, taking into account both data accuracy and resource savings. When the network environment is poor, the redundancy is increased to 20%, and redundant packets are used to recover a large number of abnormal data packets, reducing retransmission and the impact of network fluctuations on the upgrade, thereby improving the reliability and stability of data transmission.

[0041] 2. By flexibly selecting the network transmission protocol, either the TCP protocol or the QUIC protocol, according to the real-time network condition, when the network condition is good, the TCP protocol is selected to ensure the reliability of data transmission. When the network is unstable, it is switched to the QUIC protocol, taking advantage of its fast connection and low latency characteristics to improve the efficiency of data transmission, effectively reducing the negative impacts of latency and packet loss, so as to ensure that the remote upgrade of the insulin pump can be efficiently and reliably promoted in a complex and changeable network environment.

[0042] 3. By real-time monitoring the device power status and network transmission breakpoints, triggering the data caching and breakpoint resumption mechanism in case of abnormal interruption, and implementing an automatic rollback decision through sandbox pre-verification and hardware interlock logic to ensure the anti-interference ability of the upgrade process.

[0043] 4. When the network transmission is interrupted, the information is saved in the non-volatile memory. After the network is restored, the insulin pump terminal reads the recorded breakpoint position and verification information, and loads the newly upgraded firmware into the virtual sandbox, simulating the operation for insulin dose calculation and comparing it with the preset tolerance range, avoiding the normal operation of the insulin pump being affected by the defective new firmware and ensuring the use safety of patients. BRIEF DESCRIPTION OF THE DRAWINGS

[0044] Figure 1 is the architecture diagram of the remote upgrade system for the insulin pump program based on the 4G network and the TCP protocol of the present invention;

[0045] Figure 2 is the server-side architecture diagram of the remote upgrade system for the insulin pump program based on the 4G network and the TCP protocol of the present invention;

[0046] Figure 3 is the insulin pump terminal architecture diagram of the remote upgrade system for the insulin pump program based on the 4G network and the TCP protocol of the present invention;

[0047] Figure 4 is the upgrade process control module architecture diagram of the remote upgrade system for the insulin pump program based on the 4G network and the TCP protocol of the present invention;

[0048] Figure 5 It is the architecture diagram of the network performance optimization module of the insulin pump program remote upgrade system based on 4G network and TCP protocol of the present invention;

[0049] Figure 6 It is the flow chart of the method for remotely upgrading the insulin pump program based on 4G network and TCP protocol of the present invention. Specific embodiments

[0050] Next, the technical solutions of the present invention will be clearly and completely described in conjunction with the drawings of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0051] Please refer to the attached Figure 1 , the embodiment of the present invention provides a remote upgrade system for insulin pump programs based on 4G network and TCP protocol, including:

[0052] The server side is used to store and manage firmware upgrade packages, verify the insulin pump terminal and then send the firmware upgrade package, and monitor the device online status and upgrade progress;

[0053] The insulin pump terminal is used to verify and upgrade based on the sent firmware upgrade package through the 4G network;

[0054] The upgrade process control module is used to monitor the power supply of the insulin pump terminal and the transmission breakpoint during the upgrade process, and perform automatic rollback based on the transmission breakpoint;

[0055] The network performance optimization module is used to select TCP or QUIC protocol to transmit upgrade data according to the 4G network quality assessment result.

[0056] Specifically, the server side module, as the core center of remote upgrade, uses the large-capacity disk array on the server locally or adopts cloud storage services such as AWS S3 and Alibaba Cloud OSS to realize the safe storage of a large number of firmware upgrade packages. Then, with the help of version management software, a unique version number is assigned to each firmware upgrade package, and relevant version information such as upgrade content and release time is recorded. The server side maintains a database of legal device information, stores information such as the device serial number and hardware identification code of the insulin pump terminal. During the authentication process, the information sent by the terminal is compared with the records in the database to ensure the legality of the device. At the same time, after the server side establishes a connection with the insulin pump terminal, by monitoring the response of the feedback signal of the insulin pump terminal, the upgrade progress information is collected;

[0057] The insulin pump terminal integrates a 4G communication module, thus supporting 4G network bands, having data transceiver functions, achieving communication connection with the server side, and implementing TCP or QUIC protocol stacks in the operating system. Based on the feedback of subsequent network performance optimization modules, it adaptively selects protocols and dynamically optimizes transmission parameters. It verifies the firmware signature through the SecureBoot mechanism during hardware startup, and upgrades the insulin pump program after verification in the virtual sandbox;

[0058] The upgrade process control module monitors the device power status and network transmission breakpoints in real time, triggers data caching (powered by supercapacitors) and breakpoint resumption mechanisms in case of abnormal interruption, and implements automatic rollback decisions through sandbox pre-verification and hardware interlock logic to ensure the anti-interference ability during the upgrade process;

[0059] The network performance optimization module dynamically evaluates the 4G network quality (packet loss rate, RTT, signal strength), optimizes the transmission efficiency through protocol stack adaptive switching (TCP / QUIC) and forward error correction (FEC) technologies. At the same time, redundant sharding and intelligent degradation strategies (such as switching to low-resolution differential packets) are enabled in weak network environments.

[0060] See the appendix Figure 2 The server side includes an upgrade package management module, a two-way authentication module, and a status monitoring module;

[0061] The upgrade package management module is used to store firmware upgrade packages and generate upgrade packages in the form of differential packages using the BSDiff algorithm;

[0062] The two-way authentication module is used to verify the insulin pump terminal through the TLS protocol;

[0063] The status monitoring module is used to record the online status and upgrade progress of the insulin pump device in real time.

[0064] Specifically, through the storage and processing of firmware upgrade packages by the upgrade package management module, on the one hand, it provides a safe and reliable storage space for firmware upgrade packages to ensure that the upgrade packages will not be lost or damaged during storage. On the other hand, it generates upgrade packages in the form of differential packages using the BSDiff algorithm. By comparing the differences between the old and new version firmware files, only differential packages representing these differences are generated. Thus, when performing an upgrade, much smaller differential packages are transmitted instead of the entire new version file, greatly reducing the amount of data transmitted over the network and accelerating the transmission speed of the upgrade package;

[0065] The two-way authentication module verifies the insulin pump terminal based on the TLS protocol to achieve two-way identity confirmation between the server side and the insulin pump terminal. When establishing a connection, the server will verify the legality of the terminal device to ensure that only authorized insulin pump terminals can access the system and obtain upgrade services. At the same time, the terminal will also verify the identity of the server to prevent communication with illegal servers, ensuring the security and integrity of data transmission during the upgrade process;

[0066] The status monitoring module records the online status and upgrade progress of the insulin pump device in real time, and continuously obtains the device status information through the established communication connection with the insulin pump terminal to determine whether the device is online and accurately record the completion of each stage during the upgrade process.

[0067] Refer to the appendix Figure 3 The insulin pump terminal includes a dual-partition storage unit, an intelligent network communication unit, and a forward error correction coding unit;

[0068] The dual-partition storage unit includes partition A and partition B, which are used to store the currently running firmware and the firmware to be upgraded. Each partition reserves redundant space with a capacity greater than 512KB, and hardware interlock logic ensures that only one partition is in the active state at the same time;

[0069] The intelligent network communication unit integrates a 4G module and supports adaptive switching between TCP and QUIC protocols;

[0070] The forward error correction coding unit is used to add redundant packets to the fragmented data, and the redundancy is dynamically adjusted.

[0071] Specifically, the dual-partition storage unit is implemented based on the storage hardware of the insulin pump terminal. The storage area is divided into partition A and partition B. When writing firmware, the currently running firmware will be stored in partition A according to the upgrade process, and the firmware to be upgraded will be stored in partition B. Each partition reserves redundant space greater than 512KB at the hardware level. The hardware interlock logic monitors and controls the activation status of the partitions to ensure that only one partition can be called by the device at the same time, thus isolating the currently running firmware and the firmware to be upgraded. And during the upgrade process, if a problem occurs, it can quickly switch to the normal partition to continue running, avoiding the device from being unable to work due to upgrade failure, and the reserved redundant space can handle unexpected situations that may occur during firmware upgrade, such as storage errors or minor changes in the upgrade package;

[0072] The intelligent network communication unit uses a 4G module to connect to the 4G network, implement the TCP and QUIC protocol stacks between the server side and the insulin pump terminal, and collect various network parameters in real time, such as latency and packet loss rate. According to these parameters, it intelligently switches between the TCP and QUIC protocols. That is, when the network condition is good, the TCP protocol is selected to ensure the reliability of data transmission; when the network is unstable with high latency and high packet loss, it switches to the QUIC protocol to utilize its characteristics of fast connection and low latency to improve the efficiency of data transmission;

[0073] The forward error correction coding unit analyzes the fragmented data, dynamically adjusts the redundancy according to the current network condition, and adds the corresponding number of redundant packets. When the network condition is better, the redundancy can be appropriately reduced; when the network condition is worse, the redundancy is increased to improve the error correction ability of the data. Thus, during the data transmission process, even if a certain number of data packets are lost or damaged, the data can be recovered through the information in the redundant packets, reducing the data retransmission caused by network problems and improving the reliability of data transmission.

[0074] Refer to the appendix Figure 4 , the upgrade process control module includes a power-off protection unit, a resume interrupted transfer unit, and an automatic rollback unit;

[0075] The power-off protection unit is used to write the currently transmitted fragmented data and metadata into the non-volatile memory when detecting a power interruption;

[0076] The resume interrupted transfer unit is used to resume the upgrade process according to the recorded data breakpoint position and verification information;

[0077] The automatic rollback unit is used to perform virtual sandbox verification before firmware activation, simulate the operation of the insulin dose calculation function, and if the result exceeds the preset tolerance range, abort the activation and roll back to the original partition.

[0078] Specifically, when the power-off protection unit detects that the voltage is lower than the set threshold, it quickly writes the currently transmitted fragmented data and metadata into the non-volatile memory, such as NOR Flash, in a specific format, and encrypts the written data to prevent the data from being illegally obtained or tampered with, so as to ensure that the uncompleted upgrade data that has been transmitted is not lost, providing a data basis for resuming the upgrade process later and avoiding the situation of upgrade failure and data loss caused by power-off;

[0079] Through the resume interrupted transfer unit, when the network transmission is interrupted, the information can be saved in the non-volatile memory. After the network is restored, the insulin pump terminal reads the recorded breakpoint position and verification information and sends a resume interrupted transfer request to the server. The server side resends the remaining fragmented data from the breakpoint according to the request;

[0080] A virtual sandbox environment is constructed in the operating system of the insulin pump terminal through an automatic rollback unit. Before the firmware activation, the newly upgraded firmware is loaded into the virtual sandbox, and the insulin dose calculation is simulated and run. Then, it is compared with the preset tolerance range. If the result exceeds the range, it immediately switches back to the original partition through the hardware interlock logic and triggers an alarm, avoiding the normal operation of the insulin pump being affected by the defective new firmware and ensuring the safety of patients during use.

[0081] See the appendix Figure 5 , the network performance optimization module includes a network monitoring unit and a dynamic protocol adaptation unit;

[0082] The network monitoring unit is used to monitor the 4G network status of the server side and the insulin pump terminal in real time, and comprehensively evaluate the network quality based on the RSSI, CQI reported by the 4G network, and the historical transmission success rate;

[0083] The dynamic protocol adaptation unit is used to configure the selection of TCP or QUIC protocol to transmit the upgrade data based on the network quality evaluation result.

[0084] Specifically, the network monitoring unit comprehensively monitors the 4G network status of the server side and the insulin pump terminal in real time, continuously collects key parameters such as RSSI and CQI reported by the 4G network, and combines the historical transmission success rate data to evaluate the network quality from multiple dimensions, providing judgment data for subsequent protocol switching, and thus ensuring the data transmission stability and efficiency during the remote upgrade process of the entire insulin pump program;

[0085] The dynamic protocol adaptation unit selects the TCP protocol when the network condition is good, such as high RSSI value, excellent CQI level, and high historical transmission success rate, and the network is stable, with low latency and low packet loss rate. When the network shows unstable conditions, such as low RSSI, poor CQI, low historical transmission success rate, and problems such as high latency and high packet loss, the dynamic protocol adaptation unit immediately switches to the QUIC protocol, thereby improving the data transmission efficiency and stability, and ensuring that the remote upgrade of the insulin pump can be completed efficiently and reliably under different network conditions.

[0086] The forward error correction coding unit uses the RaptorQ algorithm to add redundant packets to the fragmented data, and the redundancy is dynamically adjusted, including:

[0087] When the network signal strength ≥ -80dBm, the redundancy is 10%;

[0088] When the network signal strength < -80dBm, the redundancy is increased to 20%.

[0089] Specifically, the forward error correction encoding unit uses the RaptorQ algorithm to add redundant packets to the sharded data and dynamically adjusts the redundancy. It flexibly changes the redundancy according to the network signal strength to ensure the reliability of data transmission. When the network signal strength ≥ -80 dBm, a redundancy of 10% can, in a relatively stable network environment, cope with a small number of packet losses or errors at a relatively low redundancy cost, effectively correct transmission errors, and improve data accuracy. When the network signal strength < -80 dBm and the network environment is poor, the redundancy is increased to 20%, which can significantly enhance the error correction ability of the data. Even if many packets have problems, the original data can be restored with the help of the information in the redundant packets, reducing the number of data retransmissions, thereby significantly reducing the risk of upgrade failure caused by network fluctuations and ensuring the smooth progress of the upgrade process under complex network conditions.

[0090] The power-off protection unit includes a super capacitor and a power supply monitoring chip. The super capacitor provides emergency power supply for more than 5 seconds, and the power supply monitoring chip triggers writing the sharded data and metadata into the non-volatile memory when it detects that the voltage is lower than the threshold.

[0091] Specifically, the power supply monitoring chip in the power-off protection unit closely monitors the device voltage at all times. Once it sensitively detects that the voltage is lower than the preset threshold, it immediately activates the response mechanism. At this time, the super capacitor quickly starts to work, providing emergency power supply for more than 5 seconds for the device, ensuring that the currently transmitted sharded data and metadata are completely and accurately written into the non-volatile memory, effectively avoiding the serious consequence of upgrade data loss caused by accidental power-off, and ensuring that after the power is restored, the upgrade process can continue smoothly based on the saved data, guaranteeing the normal upgrade process of the insulin pump device.

[0092] The dynamic protocol adaptation unit includes:

[0093] When the real-time packet loss rate ≤ 5% and RTT ≤ 200 ms, select the TCP protocol for transmission;

[0094] When the packet loss rate > 5% or RTT > 200 ms, switch to the QUIC protocol for transmission.

[0095] Specifically, the dynamic protocol adaptation unit flexibly switches the transmission protocol according to the real-time packet loss rate and RTT (round-trip time). When the real-time packet loss rate ≤ 5% and RTT ≤ 200 ms, the network condition is relatively stable. At this time, select the TCP protocol for transmission, taking advantage of its reliable transmission characteristics to ensure that the upgrade data is delivered accurately without error, ensuring the rigorous and orderly upgrade process. Once the packet loss rate > 5% or RTT > 200 ms, and the network becomes unstable, immediately switch to the QUIC protocol for transmission, leveraging the fast transmission advantage of QUIC based on UDP to reduce the impact of latency and packet loss and improve the transmission efficiency.

[0096] Refer to the appendix Figure 6, a method for remotely upgrading an insulin pump program based on a 4G network and the TCP protocol, the method comprising the following steps:

[0097] S1. Establish a connection between the insulin pump terminal and the server through 4G communication, and perform authentication through two-way TLS;

[0098] S2. Real-time monitor network quality parameters through a network performance optimization module, and dynamically select the TCP or QUIC protocol;

[0099] S3. Encode fragmented data using forward error correction, generate redundant packets and transmit them;

[0100] S4. After the insulin pump terminal receives the data, decode and verify it. If retransmission is required, preferentially request the lost fragments through the QUIC protocol;

[0101] S5. Verify the firmware integrity after the transmission is completed. If it passes, activate the partition, otherwise trigger a rollback.

[0102] Specifically, establish a connection between the insulin pump terminal and the server through 4G communication, and with the help of two-way TLS authentication, ensure the reliability of the identities of both communication parties and the security of data transmission. The network performance optimization module real-time monitors the network quality and dynamically selects the TCP or QUIC protocol to ensure that data transmission adapts to different network conditions, improving transmission efficiency and stability. Then, forward error correction encodes the fragmented data to generate redundant packets for transmission, enhancing the reliability of data transmission and reducing the risk of data loss. After the insulin pump terminal receives the data, it decodes and verifies it, and uses the QUIC protocol to preferentially request the lost fragments to improve the retransmission efficiency. Also, verify the firmware integrity after the transmission is completed. If it passes, activate the partition, otherwise trigger a rollback, ensuring the normal function of the upgraded firmware, thereby realizing the efficient execution of the remote upgrade of the insulin pump program in a 4G network environment, reducing the upgrade failure rate, and providing strong support for the stable operation of the insulin pump and the safe use of the device by patients.

[0103] When decoding fails in S4, preferentially request the lost fragments and redundant packets concurrently through the multiplexing feature of the QUIC protocol until the decoding condition is met.

[0104] Specifically, when decoding fails, use the multiplexing feature of the QUIC protocol to concurrently request the lost fragments and redundant packets, which changes the time-consuming problem caused by the previous single request. Through concurrent requests, quickly obtain the data resources required for decoding, effectively reduce the waiting time, significantly improve the retransmission efficiency, and reduce the risk of upgrade interruption caused by decoding failure, ensuring the successful completion of the remote upgrade of the insulin pump program.

[0105] Although embodiments of the present invention have been shown and described, it will be understood by those of ordinary skill in the art that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. An insulin pump program remote upgrade system based on a 4G network and the TCP protocol, characterized in that Including: Server side, which is used to store and manage firmware upgrade packages, verify the insulin pump terminal and then send the firmware upgrade packages, and monitor the device online status and upgrade progress; Insulin pump terminal, which is used to verify and upgrade based on the sent firmware upgrade package through the 4G network; Upgrade process control module, which is used to monitor the power supply of the insulin pump terminal and transmission breakpoints during the upgrade process, and perform automatic rollback based on the transmission breakpoints; Network performance optimization module, which is used to select TCP or QUIC protocol to transmit upgrade data according to the 4G network quality assessment result.

2. The insulin pump program remote upgrade system based on the 4G network and the TCP protocol according to claim 1, wherein The server side includes an upgrade package management module, a two-way authentication module and a status monitoring module; The upgrade package management module is used to store firmware upgrade packages and generate upgrade packages in the form of differential packages using the BSDiff algorithm; The two-way authentication module is used to verify the device of the insulin pump terminal through the TLS protocol; The status monitoring module is used to record the insulin pump device online status and upgrade progress in real time.

3. The insulin pump program remote upgrade system based on the 4G network and the TCP protocol according to claim 1, wherein The insulin pump terminal includes a dual-partition storage unit, an intelligent network communication unit and a forward error correction coding unit; The dual-partition storage unit includes partition A and partition B, which are used to store the currently running firmware and the firmware to be upgraded. Each partition reserves redundant space with a capacity greater than 512KB, and ensures that only one partition is in the active state at the same time through hardware interlock logic; The intelligent network communication unit integrates a 4G module and supports adaptive switching between TCP and QUIC protocols; The forward error correction coding unit is used to add redundant packets to the fragmented data, and the redundancy is dynamically adjusted.

4. The insulin pump program remote upgrade system based on the 4G network and the TCP protocol according to claim 1, characterized in that, The upgrade process control module includes a power-off protection unit, a breakpoint resumption unit and an automatic rollback unit; The power-off protection unit is used to write the currently transmitted fragmented data and metadata into the non-volatile memory when a power interruption is detected; The breakpoint resumption unit is used to resume the upgrade process according to the recorded data breakpoint position and check information; The automatic rollback unit is used to perform virtual sandbox verification before firmware activation, simulate the operation of the insulin dose calculation function, and if the result exceeds the preset tolerance range, abort the activation and roll back to the original partition.

5. The insulin pump program remote upgrade system based on the 4G network and the TCP protocol according to claim 1, characterized in that, The network performance optimization module includes a network monitoring unit and a dynamic protocol adaptation unit; The network monitoring unit is used to monitor the 4G network status of the server side and the insulin pump terminal in real time, and comprehensively evaluate the network quality based on the RSSI, CQI reported by the 4G network and the historical transmission success rate; The dynamic protocol adaptation unit is used to configure the selection of TCP or QUIC protocol to transmit upgrade data based on the network quality assessment result.

6. The insulin pump program remote upgrade system based on the 4G network and the TCP protocol according to claim 3, wherein The forward error correction coding unit uses the RaptorQ algorithm to add redundant packets to the fragmented data, and the redundancy is dynamically adjusted, including: When the network signal strength ≥ -80dBm, the redundancy is 10%; When the network signal strength < -80dBm, the redundancy is increased to 20%.

7. The insulin pump program remote upgrade system based on the 4G network and the TCP protocol according to claim 4, characterized in that, The power-off protection unit includes a super capacitor and a power monitoring chip. The super capacitor provides emergency power supply for more than 5 seconds, and the power monitoring chip triggers to write the fragmented data and metadata into the non-volatile memory when the detected voltage is lower than the threshold.

8. The insulin pump program remote upgrade system based on the 4G network and the TCP protocol according to claim 5, characterized in that, The dynamic protocol adaptation unit includes: When the real-time packet loss rate ≤ 5% and RTT ≤ 200 ms, select TCP protocol for transmission; When the packet loss rate > 5% or RTT > 200 ms, switch to QUIC protocol for transmission.

9. A method for remotely upgrading an insulin pump program based on a 4G network and the TCP protocol, characterized in that, For the insulin pump program remote upgrade system based on 4G network and TCP protocol according to any one of claims 1-8, the method includes the following steps: S1. Establish a connection between the insulin pump terminal and the server through 4G communication and authenticate through two-way TLS; S2. Real-time monitor network quality parameters through the network performance optimization module and dynamically select TCP or QUIC protocol; S3. Encode the fragmented data using forward error correction to generate redundant packets and transmit them; S4. After the insulin pump terminal receives the data, decode and verify it. If retransmission is required, preferentially request the lost fragments through the QUIC protocol; S5. Verify the firmware integrity after the transmission is completed. If it passes, activate the partition, otherwise trigger a rollback.

10. The method for remotely upgrading the insulin pump program based on the 4G network and the TCP protocol according to claim 9, characterized in that, When decoding fails in S4, preferentially request the lost fragments and redundant packets concurrently through the multiplexing feature of the QUIC protocol until the decoding condition is met.

Images