Aircraft integrated electronic system and wireless upgrading method based on radio frequency communication

Abstract

The invention relates to an aircraft integrated electronic system and a wireless upgrading method based on radio frequency communication, the aircraft integrated electronic system comprises an external upgrading device and an aircraft electronic system, and wireless communication is realized between the external upgrading device and the aircraft electronic system through a radio frequency signal; the aircraft electronic system comprises an intelligent control integrated processing module, a functional single machine module, a multi-source sensing driving module and an external communication electrical interconnection assembly, the intelligent control integrated processing module comprises an intelligent control central computer and a heterogeneous processing collaborative computer, and during wireless upgrading based on radio frequency communication, the functional single machine module comprises a radio frequency functional single machine; according to the wireless upgrading method based on radio frequency communication, an intelligent control center computer establishes communication with a radio frequency function single machine through a heterogeneous processing cooperation computer, and obtains, analyzes and receives data; the external upgrading equipment specifies a to-be-upgraded aircraft electronic system number and a unique identifier of a to-be-upgraded equipment number according to a communication protocol; and the intelligent control center computer software, the heterogeneous processing collaborative computer software and the functional stand-alone software carry out updating processes.

Description

Technical Field

[0001] The present invention relates to an integrated electronic system for an aircraft and a wireless upgrade method based on radio frequency communication, and belongs to the field of aircraft equipment control. Background Art

[0002] Modern and future application scenarios have ever-changing requirements for the functions of aircraft. In order to quickly adapt to the rapidly changing application scenario requirements, the rapid update and upgrade of aircraft software are crucial for continuously improving combat performance and functions.

[0003] The existing aircraft electronic system consists of multiple devices with independent functions, which are combined into a fusion system. The upgrade method of this aircraft electronic system requires removing the target device as a whole and connecting the JTAG interface to use a downloader for upgrading. When the quantity of upgraded products is large, it will consume a lot of manpower, material resources and financial resources. In the newly developed electronic system, the existing products have realized the online upgrade function of the entire aircraft software. The main method is to use the main control computing unit to interact with each device of the electronic system. The main control computing unit establishes a connection with the outside through buses such as 1553B or RS422, obtains various upgrade parameters, and then forwards the data to be upgraded to the target device for upgrading. However, this solution still has certain limitations:

[0004] (1) Physical limitation: The current upgrade method needs to achieve communication between the external upgrade device and the device to be upgraded through a wired connection, and special cables need to be customized according to the characteristics of different types of connectors, which increases additional costs. At the same time, a physical connection needs to be established for each upgrade, and only one set of products can be upgraded at a time. When upgrading a large number of products, the cables need to be plugged and unplugged repeatedly, resulting in a waste of a large amount of manpower and material resources;

[0005] (2) Distance limitation: The distance between the external upgrade device and the product to be upgraded in the current upgrade method is limited by the cable length. When upgrading multiple sets of products, the device position needs to be continuously changed, resulting in low upgrade efficiency, high time cost and complex operation.

[0006] (3) Operation limitation: The current upgrade method has complex operations. It is necessary to manually connect the external interface of the product to the external device, and the operation is complex and cumbersome, prone to problems such as incorrect insertion and damage of the connectors, seriously affecting the efficiency of software upgrade. Summary of the Invention

[0007] The technical problem to be solved by the present invention is: To overcome the deficiencies of the prior art, an integrated electronic system for an aircraft and a wireless upgrade method based on radio frequency communication are provided to meet the technical requirements of rapid update and upgrade of current aircraft software and improve upgrade efficiency.

[0008] The technical solution of the present invention is as follows: In the first aspect, an integrated aircraft electronic system is provided, including: an external upgrade device and an aircraft electronic system, which have no physical contact and achieve wireless communication through radio frequency signals;

[0009] The external upgrade device includes a computer and a radio frequency transceiver circuit. The computer is used to display the entire upgrade process and control the software upgrade process, parse the upgrade file data and encrypt it, and transmit the software content to be upgraded through the radio frequency transceiver circuit. It receives the encrypted feedback sent by the aircraft electronic system, decrypts it, and continues the upgrade process according to the decrypted feedback content;

[0010] The aircraft electronic system receives the software content to be upgraded transmitted by the external upgrade device and sends an encrypted feedback to the external upgrade device. The aircraft electronic system includes an intelligent control integrated processing module, a functional single-machine module, a multi-source sensing and driving module, and an external communication electrical interconnection component, where:

[0011] The intelligent control integrated processing module is used to achieve the integrated control, information processing, and upgrade control of the aircraft electronic system. It can receive data from the functional single-machine module, the multi-source sensing and driving module, and the external communication electrical interconnection component, and send command signals to each module. The intelligent control integrated processing module includes an intelligent control central computer and two heterogeneous processing collaborative computers, and the heterogeneous processing collaborative computers can communicate with the intelligent control central computer;

[0012] The functional single-machine module is composed of multiple single machines that implement specific aircraft functions. Each single machine has its own software, hardware system, and memory, and can independently implement its core function. For a system that performs wireless upgrade through radio frequency communication, the functional single-machine module needs to be configured with a radio frequency functional single machine, which is responsible for establishing wireless communication between the aircraft electronic system and the outside, and realizing data interaction between the external upgrade device and the aircraft electronic system: when the integrated aircraft electronic system sends data to the outside, the intelligent control central computer transmits the data to be sent to the radio frequency functional single machine, and the radio frequency functional single machine converts it into a radio frequency signal and sends it out; when the integrated aircraft electronic system receives external data, the radio frequency functional single machine receives the external radio frequency signal, converts the radio frequency signal into a digital signal, and then transmits it to the intelligent control central computer; The multi-source sensing and driving module is composed of multiple hardware circuits that implement specific aircraft driving or sensing. It does not have independent control capabilities internally, and its input and output are controlled by the heterogeneous processing collaborative computer of the intelligent control integrated processing module;

[0013] The external communication electrical interconnection component is used for the interaction between the aircraft electronic system and the aircraft peripheral equipment.

[0014] Preferably, in the intelligent control integrated processing module:

[0015] The intelligent control center computer is used for the global control of the aircraft electronic system, the operation of advanced algorithms, and upgrade control. It has the ability to carry intelligent algorithms. In the upgrade method, it decrypts the encrypted radio frequency communication protocol channel table received from an external upgrade device and encrypts the radio frequency communication protocol channel table to be sent. The intelligent control center computer is also responsible for parsing and locating the target device to be upgraded: if the parsed update target is the software of the intelligent control center computer, it upgrades the software of the intelligent control center computer; if the parsed update target is the software of the heterogeneous processing collaborative computer, it establishes communication with the heterogeneous processing collaborative computer and upgrades its software; if the parsed update target is a functional single machine, the intelligent control center computer establishes communication with the functional single machine through the heterogeneous processing collaborative computer and upgrades its software.

[0016] During the software upgrade process, the intelligent control center computer is also responsible for verifying the upgrade information to ensure the integrity and reliability of the upgrade data.

[0017] The intelligent control center computer has multiple cores. In addition to the computing resources necessary for program operation, an independent RAM storage area and FLASH memory are additionally allocated for each core. The FLASH storage area of each core stores the software program of the current core. When performing an upgrade operation, the lowest-numbered core works, and the additional RAM of the lowest-numbered core stores the data to be upgraded.

[0018] Preferably, the heterogeneous processing collaborative computer of the intelligent control integration processing module includes a heterogeneous processor and a corresponding memory, where:

[0019] The processor has an intelligent control collaboration function and a collaborative upgrade function. The intelligent control collaboration function is responsible for the communication between the intelligent control center computer and the functional single machine, as well as controlling the multi-source sensing drive module. The collaborative upgrade function is responsible for the software upgrade inside the heterogeneous processing collaborative computer and the software upgrade in the functional single machine.

[0020] The memory is a device for storing the application programs and data of the heterogeneous processing collaborative computer and can be read and written by the heterogeneous processor.

[0021] Preferably, the data transmission between the external upgrade device and the aircraft electronic system uses a wireless communication protocol, including: the radio frequency transmission communication protocol channel table sent by the external upgrade device and the radio frequency feedback communication protocol channel table sent by the aircraft electronic system. Both of the two radio frequency communication protocol channel tables include a status word, data, a frame sequence number, and a checksum, totaling 256 bytes, where: the status word is 8 bytes, each frame of data is 245 bytes, the frame sequence number is 1 byte, and the checksum bit is 2 bytes.

[0022] The status word in the radio frequency communication protocol channel table sent by the external upgrade device is the upgrade status word, and the status word in the radio frequency communication protocol channel table sent by the intelligent control center computer in the aircraft electronic system is the feedback status word. Specifically:

[0023] The 7th byte of the status word represents the current upgrade command in the upgrade status word, that is, the operation instruction that the aircraft electronic system needs to perform. In the feedback status word, it represents the current feedback command, that is, the instruction that the aircraft electronic system has received and performed. The 6th byte is the upgrade system number, which is the ID of the aircraft electronic system currently being upgraded. The 5th byte is the upgrade device number. In the upgrade status word, it represents the specified upgrade target device in the aircraft electronic system to be upgraded. In the feedback status word, it represents the specified upgrade target device currently being upgraded in the aircraft electronic system. The 4th byte is the area to be upgraded, which refers to the core number of the intelligent control center computer or the heterogeneous processing collaborative computer. This byte is invalid for the functional single machine and is the default value 0xFF. The 3rd to 0th bytes of the upgrade status word are status parameters, representing the upgrade parameters of their respective stages in different stages.

[0024] Each frame of data is only enabled in the data transmission stage, and its value is the data content to be uploaded. It is used as a backup in other stages and is default filled with 0xFF.

[0025] The frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps back to 0x0 and starts incrementing again, which is used to check whether the received wireless messages are continuous.

[0026] The check bit adopts CRC check or other check methods with the same error detection ability.

[0027] Preferably, the intelligent control center computer and the heterogeneous processing collaborative computer interact through the hardware communication bus. The intelligent control center computer and the heterogeneous processing collaborative computer perform data transmission according to the set communication protocol. Each packet of data is 254 bytes during data transmission, including: 6 bytes of status word, 245 bytes of data frame, 1 byte of frame sequence number, and 2 bytes of check bit. Among them, the status word in the data packet sent by the intelligent control center computer is the upgrade status word of the heterogeneous processing collaborative computer, and the status word of the feedback data packet sent by the heterogeneous processing collaborative computer is the feedback status word of the heterogeneous processing collaborative computer. The 5th byte of the status word is the current upgrade command in the upgrade status word of the heterogeneous processing collaborative computer, that is, the operation instruction that the heterogeneous processing collaborative computer needs to perform. In the feedback status word of the heterogeneous processing collaborative computer, it is the current feedback command, that is, the instruction that the heterogeneous processing collaborative computer has received and performed. The 4th byte is the area to be upgraded, that is, the core number of the heterogeneous processing collaborative computer. The 3rd to 0th bytes are status parameters, representing the upgrade parameters of their respective stages in different stages.

[0028] The intelligent control center computer and the functional single machine cooperate with the heterogeneous processing computer and interact according to the set communication protocol. The data packet format sent by the intelligent control center computer and each data packet reported back by the functional single machine are both 253 bytes, including a 5-byte status word, a 245-byte data frame, a 1-byte frame sequence number, and 2-byte check bits; among them, the status word in the data packet sent by the intelligent control center computer is the functional single machine upgrade status word, and the status word of the data packet reported back by the functional single machine is the functional single machine report-back status word; the 4th byte of the status word is the current upgrade command in the functional single machine upgrade status word, that is, the operation instruction that the functional single machine needs to perform, and the current report-back command in the functional single machine report-back status word, that is, the instruction upgrade status word that the functional single machine has received and has performed the operation. The 3rd to 0th bytes of the status word are status parameters, representing the upgrade parameters of their respective stages in different stages.

[0029] Preferably, the upgrade process is divided into six stages, including: preparing for upgrade, data transmission, pre-write verification, area erasure, update writing, and post-write verification; the external upgrade device sends corresponding preparation for upgrade instructions, data transmission instructions, pre-write verification instructions, area erasure instructions, update writing instructions, and post-write verification instructions to the intelligent control center computer according to the protocol, and the intelligent control center computer sends report-back information to the external upgrade device according to the protocol.

[0030] In a second aspect, a wireless upgrade method based on radio frequency communication is provided, including:

[0031] The intelligent control center computer of the aircraft electronic system establishes communication with the radio frequency functional single machine through the heterogeneous processing cooperative computer, and the external upgrade device is in a waiting upgrade state;

[0032] The external upgrade device sends an encrypted upgrade preparation instruction through radio frequency wireless communication, and specifies the unique identifier of the aircraft electronic system number to be upgraded and the device number to be upgraded in the instruction according to the communication protocol;

[0033] After the aircraft electronic system receives the encrypted "upgrade preparation" instruction sent by the external upgrade device, the intelligent control center computer parses the content of the instruction, obtains the current upgraded electronic system number, upgrade device number, and the core number to be upgraded, sends an encrypted report-back information to the external upgrade device, and at the same time controls the intelligent control center computer, the heterogeneous processing cooperative computer, and the functional single machine to perform the software upgrade process respectively according to the instruction;

[0034] After each software update is completed, the external upgrade device returns to the waiting upgrade state and ends the process.

[0035] Preferably, the software upgrade process of the intelligent control center computer includes:

[0036] After the intelligent control center computer reports back to the external upgrade device that it can be upgraded, the radio frequency communication module is in the upgrade state and waits for upgrade data;

[0037] After the external upgrade device receives the upgrade feedback from the intelligent control center computer, it sends the content to be upgraded to the intelligent control center computer in frames through data transmission instructions according to the communication protocol between the external upgrade device and the aircraft electronic system. After the intelligent control center computer receives the content to be upgraded and stores it in the RAM area, it gives a feedback; loop the current step until the intelligent control center computer has received all the data;

[0038] After the data upload is completed, the external upgrade device sends a pre-write verification instruction and informs the intelligent control center computer of the length to be verified; after receiving the instruction, the intelligent control center computer verifies the data content of the specified length in the upgrade buffer area and gives a feedback on the verification result according to the communication protocol;

[0039] After the external upgrade device receives the pre-write verification feedback from the intelligent control center computer and determines that the verification value is correct, it sends a regional erasure instruction to the intelligent control center computer and informs the intelligent control center computer of the length to be erased; if the verification value in the pre-write verification feedback of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user decides whether to execute the current step again, stop the upgrade operation or proceed to the next step;

[0040] After the intelligent control center computer receives the regional erasure instruction, it calculates the number of sectors to be erased based on the length to be erased, and erases the data in the application program area of the FLASH to be erased; the starting address of the FLASH area to be erased is resolved by the intelligent control center computer according to the core number to be upgraded; after the erasure is completed, the intelligent control center computer gives a feedback on the erasure result;

[0041] After the external upgrade device receives the regional erasure feedback and determines that the erasure is successful, it sends an update write instruction and informs the intelligent control center computer of the length to be written;

[0042] After the intelligent control center computer receives the update write instruction, it writes the content in the upgrade buffer area into the erased application program area of the FLASH and gives a feedback on the write status;

[0043] After the external upgrade device receives the update write feedback and determines that the write is completed, it sends a post-write verification instruction and informs the intelligent control center computer of the length to be verified;

[0044] After the intelligent control center computer receives the post-write verification instruction, it verifies the data of the specified length in the FLASH application program area and gives a feedback on the verification value;

[0045] If the external upgrade device receives the post-write verification feedback and determines that the verification values are consistent, the current update is completed.

[0046] Preferably, the software upgrade process of the heterogeneous processing cooperation computer includes:

[0047] The intelligent control center computer establishes communication with the heterogeneous processing collaborative computer to be upgraded; after the heterogeneous processing collaborative computer reports back through the intelligent control center computer that it can be upgraded, it waits for the upgrade data;

[0048] After the external upgrade device receives the report back that the intelligent control center computer can be upgraded, it sends the content to be upgraded to the intelligent control center computer in frames through data transmission instructions according to the communication protocol between the external upgrade device and the aircraft electronic system. The intelligent control center computer receives and verifies the upgrade data and forwards it to the heterogeneous processing collaborative computer until the upgrade data is completely received and verified correctly; after the upgrade data is completely received, the external upgrade device sends a pre-write verification instruction to the heterogeneous processing collaborative computer and informs the intelligent control center computer of the length to be verified; after receiving the instruction, the intelligent control center computer forwards the instruction to the heterogeneous processing collaborative computer to make it verify the data content of the specified length in the upgrade buffer area, and reports back the verification result according to the communication protocol; the intelligent control center computer reports back this result to the external upgrade device;

[0049] After the external upgrade device receives the pre-write verification report back from the intelligent control center computer and determines that the verification value is correct, it sends a regional erase instruction to the intelligent control center computer for the heterogeneous processing collaborative computer and informs the intelligent control center computer of the length to be erased; if the verification value in the pre-write verification report back of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user decides whether to execute the current step again, stop the upgrade operation or proceed to the next step;

[0050] After the intelligent control center computer receives the regional erase instruction, it forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer calculates the number of sectors to be erased based on the length to be erased, and erases the data in the application program area of the FLASH to be erased; the starting address of the FLASH area to be erased is calculated by the heterogeneous processing collaborative computer according to the upgrade core number; after the erasure is completed, it reports back the erasure result to the intelligent control center computer, and the intelligent control center computer reports back this erasure result to the external upgrade device;

[0051] After the external upgrade device receives the regional erase report back and determines that the erasure is successful, it sends an update write instruction and informs the intelligent control center computer of the length to be written;

[0052] After the intelligent control center computer receives the update write instruction, it forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer writes the content in the upgrade buffer area into the erased application program area of the FLASH, and reports back the write status to the intelligent control center computer, and the intelligent control center computer reports back the write status to the external upgrade device;

[0053] After the external upgrade device receives the update write report back and determines that the writing is completed, it sends a post-write verification instruction and informs the intelligent control center computer of the length to be verified;

[0054] After receiving the post-write verification instruction, the intelligent control center computer forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer verifies the data of a specified length in the FLASH application area and reports the verification value back to the intelligent control center computer. The intelligent control center computer then reports the verification value back to the external upgrade device;

[0055] If the external upgrade device receives the post-write verification report and determines that the verification values are consistent, the current update has been completed.

[0056] Preferably, the software upgrade process of the functional single machine includes:

[0057] The intelligent control center computer establishes communication with the configuration upgrade processor of the to-be-upgraded functional single machine obtained through the heterogeneous processing collaborative computer; obtains the upgrade report that the to-be-upgraded functional single machine can send to the external upgrade device, and waits for upgrade data;

[0058] The intelligent control center computer starts to receive and verify the to-be-upgraded data, forwards it to the to-be-upgraded functional single machine through the heterogeneous processing collaborative computer. The to-be-upgraded functional single machine saves and reports back to the intelligent control center computer, and the intelligent control center computer reports back to the external upgrade device until the to-be-upgraded data is completely received and verified correctly;

[0059] After the upgrade data is completely received, the external upgrade device sends a pre-write verification instruction for the functional single machine and informs the intelligent control center computer of the length to be verified; after receiving the instruction, the intelligent control center computer forwards the instruction to the functional single machine, instructing it to verify the data content of a specified length at the upgrade buffer area and report the verification result according to the communication protocol; the intelligent control center computer reports this result back to the external upgrade device;

[0060] After the external upgrade device receives the pre-write verification report from the intelligent control center computer and determines that the verification value is correct, it sends a regional erasure instruction for the functional single machine to the intelligent control center computer and informs the intelligent control center computer of the length to be erased; if the verification value in the pre-write verification report of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user decides whether to execute the current step again, stop the upgrade operation or proceed to the next step;

[0061] After receiving the regional erasure instruction, the intelligent control center computer forwards the instruction to the functional single machine. The functional single machine calculates the number of sectors to be erased based on the length to be erased, and erases the data in the application area of the FLASH to be erased; the starting address of the FLASH area to be erased is set by the program; after the erasure is completed, it reports the erasure result back to the intelligent control center computer, and the intelligent control center computer reports this erasure result back to the external upgrade device;

[0062] After the external upgrade device receives the area erasure report and determines that the erasure is successful, it sends an update write instruction and notifies the intelligent control center computer of the length to be written.

[0063] After the intelligent control center computer receives the update write instruction, it forwards the instruction to the functional single machine. The functional single machine writes the content in the upgrade buffer into the erased application program area in the FLASH and reports the write status to the intelligent control center computer, and the intelligent control center computer reports the write status to the external upgrade device.

[0064] After the external upgrade device receives the update write report and determines that the writing is completed, it sends a post-write verification instruction and notifies the intelligent control center computer of the length to be verified.

[0065] After the intelligent control center computer receives the post-write verification instruction, it forwards the instruction to the functional single machine. The functional single machine verifies the data of the specified length in the FLASH application program area and reports the verification value to the intelligent control center computer, and the intelligent control center computer reports the verification value to the external upgrade device.

[0066] If the external upgrade device receives the post-write verification report and determines that the verification values are consistent, the current update is completed.

[0067] The present invention has the following advantages compared with the prior art:

[0068] (1) The present invention is software-defined for upgrade, adapts to multiple types of products, and realizes the upgrade of the aircraft electronic system through radio frequency wireless communication. The upgrade process and signal modulation and demodulation are all carried out by the software in the external upgrade device. Its upgrade protocol content and signal characteristics can all be defined by software, and it can adapt to the software upgrade of multiple models of products without the need to manufacture additional product external cables, and the universality of the upgrade method is significantly improved.

[0069] (2) The present invention can break through the distance limit and realize long-distance upgrade. It realizes the wireless upgrade of the aircraft electronic system through radio frequency wireless communication. Benefiting from the long-distance transmission ability of radio frequency signals, it can realize long-distance upgrade, and the upgrade operation can be carried out on a fixed operation console without being restricted by the upgrade distance anymore, which can improve the upgrade efficiency when a large number of system software updates are required.

[0070] (3) The present invention can reduce the upgrade process and improve the upgrade efficiency. It realizes the upgrade of the aircraft electronic system through radio frequency wireless communication. Switching the system to be upgraded only requires simple settings in the external upgrade device, which greatly shortens the time for software upgrade of the aircraft electronic system. Especially when a large number of system software updates are required, the upgrade efficiency is significantly improved. Description of the Drawings

[0071] Figure 1Schematic diagram of the integrated electronic system of the aircraft and the wireless upgrade method based on RF communication of the present invention;

[0072] Figure 2 Flowchart of the integrated electronic system of the aircraft and the wireless upgrade method based on RF communication of the present invention;

[0073] Figure 3 Signal flow diagram of the upgrade of the intelligent control center computer in the integrated electronic system of the aircraft and the wireless upgrade method based on RF communication of the present invention;

[0074] Figure 4 Signal flow diagram of the upgrade of the heterogeneous processing collaborative computer in the integrated electronic system of the aircraft and the wireless upgrade method based on RF communication of the present invention;

[0075] Figure 5 Signal flow diagram of the upgrade of the functional single machine in the integrated electronic system of the aircraft and the wireless upgrade method based on RF communication of the present invention (taking the RF functional single machine as an example). Detailed implementation manners

[0076] The technical solution of the present invention is an integrated electronic system of an aircraft and a wireless upgrade method based on RF communication, including an external upgrade device, an aircraft electronic system, and a wireless upgrade method. As Figure 1 shown, the aircraft electronic system innovatively integrates various aircraft functions, aiming to provide a highly integrated and intelligent aircraft solution; the present invention proposes a wireless upgrade method for aircraft software based on the RF communication function in the system, realizing remote software update and upgrade of the aircraft without physical contact, ensuring the flexibility and convenient maintenance of the aircraft electronic system.

[0077] The integrated electronic system of the aircraft consists of an external upgrade device and an aircraft electronic system, with no physical contact between the two, and realizing wireless communication through RF signals.

[0078] The external upgrade device includes a computer and an RF transceiver circuit, realizing the display of the entire upgrade process and controlling the software upgrade process through the computer, parsing the upgrade file data and encrypting it, and wirelessly transmitting the software content to be upgraded through the continuous wave of the RF transceiver circuit, and receiving and decrypting the encrypted feedback sent by the aircraft electronic system through the RF transceiver circuit, and continuing the upgrade process according to the content of the decrypted feedback.

[0079] The computer in the external upgrade device is responsible for completing the upgrade process control, reading the upgrade file data, encoding, decoding, modulating, and demodulating the RF signals, and having the control function of multi-band RF signal transceiver.

[0080] The computer in the external upgrade device contains upgrade software and radio frequency processing software. The upgrade software is responsible for controlling the upgrade process and encoding / decoding and encrypting / decrypting the externally interactive data, and its externally interactive data is received and sent through the radio frequency processing software. The radio frequency processing is responsible for converting the information from the upgrade software through modulation into information suitable for radio frequency transmission and transmitting it to the radio frequency transceiver circuit, and is responsible for converting the information from the radio frequency transceiver circuit through demodulation into a digital signal that can be processed by the upgrade software.

[0081] The radio frequency transceiver circuit in the external upgrade device is divided into a radio frequency transmission path and a radio frequency reception path. The radio frequency transmission path is responsible for radiating the modulated signal into the surrounding space in the form of electromagnetic waves after power amplification, and the radio frequency reception path is responsible for receiving the radio frequency signal in space and transmitting it to the information processing module.

[0082] The aircraft electronic system is used to implement all functions and controls of the aircraft, including an intelligent control integrated processing module, a functional single machine module, a multi-source sensing and driving module, and an external communication electrical interconnection component. Among them, the intelligent control integrated processing module consists of an intelligent control central computer and two heterogeneous processing collaborative computers, and is used to implement the comprehensive control, information processing, and upgrade control of the aircraft electronic system. The functional single machine module consists of multiple single machines that implement specific aircraft functions, and each single machine has its own software, hardware system, and related circuits, and can independently implement its core functions, such as a satellite navigation single machine, a radio frequency functional single machine, etc. The multi-source sensing and driving module consists of multiple hardware circuits that implement specific aircraft driving or sensing, and it does not have independent control capabilities inside, and its input and output are controlled by the heterogeneous processing collaborative computer of the intelligent control integrated processing module.

[0083] The intelligent control central computer in the electronic system is used for the global control, operation of high-level algorithms, and upgrade control of the aircraft electronic system, and has the ability to carry intelligent algorithms. In the wireless upgrade method, it can decrypt the encrypted radio frequency signal channel table received from the external upgrade device, encrypt the transmitted radio frequency signal channel table, analyze and locate the target device to be upgraded. If the analyzed update target is the software of the intelligent control central computer, it upgrades the software of the intelligent control central computer. If the analyzed update target is the software of the heterogeneous processing collaborative computer, it establishes communication with the heterogeneous processing collaborative computer and upgrades its software. If the analyzed update target is a functional single machine, the intelligent control central computer establishes communication with the functional single machine through the transparent transmission of the heterogeneous processing collaborative computer and upgrades its software. During the software upgrade process, the intelligent control central computer is also responsible for verifying the upgrade information to ensure the integrity and reliability of the upgrade data.

[0084] The intelligent control center computer has multiple cores. In addition to the computing resources necessary for program operation, an independent RAM storage area and a FLASH memory are additionally allocated for each core; the FLASH storage area of each core stores the software program of the current core; when an upgrade operation is performed, the lowest-numbered core is in operation; when an upgrade operation is performed, the additional RAM of the lowest-numbered core is used to store the data to be upgraded.

[0085] The heterogeneous processing cooperative computer in the electronic system has parallel processing capabilities and certain computing capabilities. It is an auxiliary device of the intelligent control center computer in the intelligent control integrated processing module, used to establish communication between the functional single machine or multi-source sensing drive module and the intelligent control center computer, and is also used to perform software upgrades on the multi-source sensing drive module according to the upgrade information transmitted from the intelligent control center computer. There are two heterogeneous processing cooperative computers in the aircraft integrated electronic system. They are simultaneously connected to the external communication electrical interconnection component and are respectively connected to the multi-source sensing drive module and the functional single machine.

[0086] Furthermore, the heterogeneous processing cooperative computer consists of a heterogeneous processor with intelligent control cooperation functions and cooperative upgrade functions and the corresponding memory (such as FLASH). The intelligent control cooperation function realizes the core business of the functions of the heterogeneous processing cooperative computer, realizes the communication between the intelligent control center computer and the functional single machine, or is responsible for controlling the multi-source sensing drive module. The cooperative upgrade function is responsible for the software upgrade work inside the heterogeneous processing cooperative computer, and can upgrade its own internal software or the software in the functional single machine. The memory is a device for storing the application programs and data of the heterogeneous processing cooperative computer and can be read and written by the heterogeneous processor.

[0087] Furthermore, in the upgrade mode, the heterogeneous processing cooperative computer has two types of communication. One is the communication in the intelligent control cooperation function. When performing this type of communication, the heterogeneous processing cooperative computer only performs data correctness verification and communication data transfer between the intelligent control center computer and other functional single machines, without parsing the content of the data to be transmitted. The other is the communication in the cooperative upgrade function. When performing this type of communication, the heterogeneous processing cooperative computer communicates with the intelligent control center computer and needs to parse and process the interaction data.

[0088] The functional single machine in the electronic system is used to implement a certain core technology of the aircraft (such as satellite navigation or data link) and can perform software upgrades on the functional single machine according to the upgrade information transmitted by the intelligent control center computer through the heterogeneous processing cooperative computer.

[0089] Furthermore, the functional single machine includes two heterogeneous processors, namely a technology implementation processor and a configuration upgrade processor, a corresponding memory (such as FLASH), and functional circuits. The technology implementation processor, as the device for implementing the core business of the functional single machine, exists in the form of an embedded device. The configuration upgrade processor is the device for power-on configuration and memory management of the functional single machine, exists in the form of an embedded device, and is mainly responsible for the configuration control and software upgrade of the functional single machine. The memory is the device for storing the application programs and data of the functional single machine and can be read and written by the two heterogeneous processors. The functional circuits are the peripheral circuits for implementing the core business of the current functional single machine.

[0090] The RF functional single machine in the electronic system belongs to one type of functional single machines and includes an RF transceiver circuit (functional circuit), an RF functional heterogeneous processor (technology implementation processor), a configuration upgrade heterogeneous processor, and a memory (such as FLASH). The RF transceiver circuit is connected to the RF transceiver antenna on the aircraft and is responsible for establishing wireless communication between the aircraft electronic system and the outside, realizing data interaction between the external upgrade device and the aircraft electronic system. To ensure the security and reliability of data transmission, the RF transceiver function of the RF functional single machine adopts a multi-band fusion design, and the receiving band and the transmitting band can be different bands to ensure that the received and transmitted information will not interfere with each other (taking sending in the S band and receiving in the L band as an example).

[0091] Furthermore, when the aircraft integrated electronic system sends data to the outside, the intelligent control center computer transmits the data to be sent to the RF functional single machine, and the RF functional single machine converts it into an RF signal and sends it outwards;

[0092] When the aircraft integrated electronic system receives data from the outside, the RF functional single machine receives the external RF signal, converts the RF signal into a digital signal, and then transmits it to the intelligent control center computer.

[0093] The multi-source sensing and driving module in the electronic system is mainly a hardware circuit and is used to implement the sensing and driving technologies required by the aircraft (such as power supply, inertial measurement, electronic control, etc.) and is used in conjunction with the multi-source sensing and driving module software in the heterogeneous processing collaborative computer, and its control is realized by the heterogeneous processing computer.

[0094] The external communication electrical interconnection component is used for the interaction between the aircraft electronic system and the aircraft peripheral equipment and can realize information interaction with equipment such as servo motors, sensing systems, energy systems, and external interfaces.

[0095] Second aspect, the present invention provides an integrated aircraft electronic system and a radio frequency communication-based wireless upgrade method. In the radio frequency communication-based wireless upgrade method, the aircraft electronic system has no physical contact with the external upgrade device and realizes wireless communication through radio frequency signals. The intelligent control center computer in the aircraft electronic system serves as the overall control for the entire domain, receives and processes wireless upgrade data, and realizes the online upgrade of the software for the entire aircraft (including the software of the intelligent control center computer, the heterogeneous processing collaborative computer, and the functional single machine software), as Figure 2 shown. The upgrade process mainly includes:

[0096] The aircraft electronic system has the function of global upgrade. The intelligent control center computer establishes communication with the radio frequency functional single machine through the heterogeneous processing collaborative computer, continuously obtains and analyzes the received data transmitted by the radio frequency functional single machine.

[0097] The external upgrade device sends an "upgrade preparation" instruction through radio frequency wireless communication, and specifies the unique identifiers of the aircraft electronic system number to be upgraded and the device number to be upgraded in the instruction according to the communication protocol.

[0098] Since software upgrade is required, the intelligent control center computer in the aircraft electronic system needs to have the function of global upgrade in the normal working mode, and the radio frequency functional single machine is in the working state. The intelligent control center computer establishes communication with the radio frequency functional single machine through the heterogeneous processing collaborative computer, continuously obtains and analyzes the received data transmitted by the radio frequency functional single machine. At this time, the sending path of the radio frequency functional single machine is also in the working state, and the currently transmitted default channel table is parsed as default values for continuous wave transmission.

[0099] The external upgrade device sends an "upgrade preparation" instruction through radio frequency wireless communication, and specifies the unique identifiers of the aircraft electronic system number to be upgraded and the device number to be upgraded in the instruction according to the communication protocol. The instructions of the external upgrade device are all continuous wave transmissions.

[0100] 1. The signal flow of the software update process of the intelligent control center computer can refer to Figure 3 , and the update process includes:

[0101] After the integrated aircraft electronic system receives the encrypted "upgrade preparation" phase instruction sent by the external upgrade device, the intelligent control center computer decrypts and analyzes the content of the instruction, obtains the electronic system number to be upgraded, the upgrade device number, and the core number to be upgraded, and identifies the intelligent control center computer software for upgrading the current electronic system.

[0102] The intelligent control center computer of S302 determines the status of the core memory according to the core number to be upgraded. After confirming that it is in the "updatable" state, it encrypts the "can be upgraded" data frame according to the communication protocol between the external upgrade device and the intelligent control center computer and transmits it to the radio frequency function single machine. After modulation by the radio frequency function single machine, it is wirelessly sent to the external upgrade device. The following information interaction processes are all sent and received through the encryption and decryption of the intelligent control center computer and the radio frequency function single machine.

[0103] After receiving the encrypted "can be upgraded" report from the intelligent control center computer, the external upgrade device splits the content to be upgraded into multiple frames in sequence according to the communication protocol between the external upgrade device and the intelligent control center computer, encrypts the instruction composed of the upgrade status word, data, frame sequence number and checksum in the "data transmission" stage and sends it to the intelligent control center computer. The content of each frame is filled into the data part of the data packet, the frame number where the content of each frame is located is filled into the current frame number in the upgrade status word, and the total number of frames is filled into the total frame number in the upgrade status word. After the intelligent control center computer receives a data packet containing the content to be upgraded each time, it stores the received content to be upgraded in the upgrade buffer area and makes a report according to the "data transmission" stage report protocol. If the storage operation is not completed, the operation fails or the "data transmission" instruction is not received, no report will be made. After the external upgrade device receives the "data transmission" report and determines that the currently stored content to be upgraded in the aircraft electronic system is the current frame, it sends a data packet containing the content of the new frame. After receiving the new data packet, the intelligent control center computer stores the content to be upgraded in it behind the content to be upgraded in the previous frame and makes a report. Repeat the current step until the intelligent control center computer has received all the content to be upgraded.

[0104] After the data upload is completed, the external upgrade device sends a "pre-write verification" instruction to the intelligent control center computer and informs the intelligent control center computer of the length to be verified. After receiving this instruction, the intelligent control center computer determines the upgrade buffer area address of the current core to be upgraded according to the core number to be upgraded in the upgrade status word, performs CRC verification or other verifications with equivalent error detection capabilities on the data content of the specified length at the upgrade buffer area, and reports the verification result according to the communication protocol.

[0105] After the external upgrade device receives the "pre-write verification" report sent by the intelligent control center computer and determines that the verification value is correct, it sends a "sector erasure" instruction to the intelligent control center computer and notifies the intelligent control center computer of the length to be erased. If the verification value in the "pre-write verification" report of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will prompt the user, and the user decides whether to execute the current step again, stop the upgrade operation or proceed to the next step. Since the data to be upgraded currently received by the aircraft electronic system is stored in the RAM area, selecting to stop the upgrade in the current step will not affect the original software in the aircraft electronic system. Just restart the aircraft electronic system and the external upgrade device to reset the upgrade process.

[0106] After the intelligent control center computer receives the "sector erasure" instruction sent by the external upgrade device, it calculates the number of sectors to be erased based on the length to be erased, and erases the data in the application program area of the FLASH. The starting address of the FLASH area to be erased is resolved by the intelligent control center computer according to the core number to be upgraded, which is the FLASH area corresponding to this core. After the erasure is completed, the intelligent control center computer reports the erasure result.

[0107] After the external upgrade device receives the "sector erasure" report sent by the intelligent control center computer and determines that the erasure is successful, it sends an "update write" instruction and notifies the intelligent control center computer of the length to be written.

[0108] After the intelligent control center computer receives the "update write" instruction sent by the external upgrade device, it writes the content in the upgrade buffer into the erased application program area of the FLASH and reports the write status.

[0109] After the external upgrade device receives the "update write" report sent by the intelligent control center computer and determines that the write is completed, it sends a "post-write verification" instruction and notifies the intelligent control center computer of the length to be verified.

[0110] After the intelligent control center computer receives the "post-write verification" instruction sent by the external upgrade device, it verifies the data of the specified length in the FLASH application program area and reports the verification value.

[0111] After the external upgrade device receives the "post-write verification" report and determines that the verification values are consistent, the current update is completed.

[0112] The external upgrade device will exit the current upgrade process and enter the waiting upgrade state to prepare for the next upgrade. At this time, the radio frequency channel table sent by the external upgrade device becomes the default value.

[0113] 2. Refer to Figure 2 In steps S1 - S2, S401 - S408, and S6 in Figure 4, after the wireless communication between the external upgrade device and the aircraft electronic system is established, the software upgrade process of the heterogeneous processing collaborative computer includes:

[0114] S401 After the aircraft integrated electronic system receives the "upgrade preparation" instruction sent by the external upgrade device, the intelligent control center computer decrypts and parses the content of the instruction, obtains the electronic system number and upgrade device number to be upgraded currently, and identifies the heterogeneous processing collaborative computer software for upgrading the current electronic system.

[0115] S402 The intelligent control center computer establishes communication with the heterogeneous processing collaborative computer to be upgraded. After the heterogeneous processing collaborative computer reports back through the intelligent control center computer that it can be upgraded, it waits for the upgrade data.

[0116] S403 After the external upgrade device receives the report back from the intelligent control center computer that it can be upgraded, it sends the content to be upgraded to the intelligent control center computer in frames through the data transmission instruction according to the communication protocol between the external upgrade device and the aircraft electronic system. The intelligent control center computer starts to upgrade and receives and verifies the data to be upgraded until the data to be upgraded is received completely and verified correctly.

[0117] To ensure the reliability of the upgrade, the communication protocol between the intelligent control center computer and the heterogeneous processing collaborative computer is different from the communication protocol between the intelligent control center computer and the external upgrade device;

[0118] The intelligent control center computer acts as a data transfer device between the external upgrade device and the heterogeneous processing collaborative computer, coordinating the sending and receiving of data between the two parties:

[0119] If the heterogeneous processing collaborative computer to be upgraded interacts with the multi-source sensing drive module, among the two heterogeneous processing collaborative computers in the aircraft electronic system at this time, the heterogeneous processing collaborative computer that interacts with the functional single machine runs the intelligent control collaboration function, and the heterogeneous processing collaborative computer that interacts with the multi-source sensing drive module runs the collaborative upgrade function;

[0120] If the heterogeneous processing collaborative computer to be upgraded interacts with the functional single machine, the intelligent control collaboration function and the collaborative upgrade function run simultaneously on this heterogeneous processing collaborative computer.

[0121] The intelligent control center computer realizes the packetizing and forwarding of the external upgrade device data to the heterogeneous processing collaborative computer according to the communication protocol between the intelligent control center computer and the heterogeneous processing collaborative computer. At the same time, the intelligent control center computer receives the report back information of the heterogeneous processing collaborative computer, and realizes the packetizing and encrypted forwarding of the heterogeneous processing collaborative computer to the external upgrade device according to the communication protocol between the external upgrade device and the intelligent control center computer.

[0122] After the S404 upgrade data reception is completed, the external upgrade device sends a "pre-write verification" instruction to the heterogeneous processing collaborative computer and informs the intelligent control center computer of the length to be verified. After receiving the instruction, the intelligent control center computer forwards the instruction to the heterogeneous processing collaborative computer to perform CRC verification or other verifications with equivalent error detection capabilities on the data content of the specified length in the upgrade buffer area, and reports the verification result back according to the communication protocol. The intelligent control center computer reports this result back to the external upgrade device.

[0123] After the external upgrade device receives the "pre-write verification" report from the intelligent control center computer and determines that the verification value is correct, it sends a "sector erase" instruction to the intelligent control center computer for the heterogeneous processing collaborative computer and informs the intelligent control center computer of the length to be erased. If the verification value in the "pre-write verification" report of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user decides whether to execute the current step again, stop the upgrade operation, or proceed to the next step. Since the upgrade data currently received by the aircraft electronic system is stored in the upgrade storage area of the heterogeneous processing collaborative computer and has not been written to the FLASH area, choosing to stop the upgrade in the current step will not affect the original software in the aircraft electronic system. Just restart the aircraft electronic system and the external upgrade device to reset the upgrade process.

[0124] In S405, after the intelligent control center computer receives the "sector erase" instruction, it forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer calculates the number of sectors to be erased based on the length to be erased and erases the data in the application program area of the FLASH. The starting address of the FLASH area to be erased is resolved by the heterogeneous processing collaborative computer according to the upgrade core number, which is the FLASH area corresponding to this core. After the erasure is completed, it reports the erasure result back to the intelligent control center computer, and the intelligent control center computer reports this erasure result back to the external upgrade device.

[0125] After the external upgrade device receives the "sector erase" report and determines that the erasure is successful, it sends an "update write" instruction and informs the intelligent control center computer of the length to be written.

[0126] In S406, after the intelligent control center computer receives the "update write" instruction, it forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer writes the content in the upgrade buffer area into the erased application program area of the FLASH and reports the write status back to the intelligent control center computer, and the intelligent control center computer reports the write status back to the external upgrade device.

[0127] After the external upgrade device receives the "update write" report and determines that the write is completed, it sends a "post-write verification" instruction and informs the intelligent control center computer of the length to be verified.

[0128] After the intelligent control center computer S407 receives the "write-after verification" instruction, it forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer verifies the data of the specified length in the FLASH application area and reports the verification value back to the intelligent control center computer. The intelligent control center computer then reports the verification value back to the external upgrade device;

[0129] If the external upgrade device receives the "write-after verification" report and determines that the verification values are consistent, the current update is completed. The external upgrade device exits the current upgrade and prepares for the next upgrade.

[0130] 3. For the specific steps of the single-function machine upgrade method, please refer to Figure 2 Steps S1 - S2, S501 - S503, and S6 in, and the signal flow can be referred to Figure 5 (taking the software upgrade of the radio frequency single-function machine as an example); after the wireless communication between the external upgrade device and the aircraft electronic system is established, the software upgrade process of the single-function machine includes:

[0131] S501 After the aircraft integrated electronic system (intelligent control center computer) receives the "upgrade preparation" instruction sent by the external upgrade device, the intelligent control center computer decrypts and parses the content of the instruction to obtain the electronic system number and upgrade device number of the current upgrade, and identifies a certain single-function machine for upgrading the current electronic system.

[0132] S502 The intelligent control center computer establishes communication with the configuration upgrade processor of the single-function machine to be upgraded through the heterogeneous processing collaborative computer.

[0133] At this time, the heterogeneous processing collaborative computer only runs the intelligent control collaborative function to realize the transfer of information between the single-function machine and the intelligent control center computer.

[0134] To ensure the reliability of the upgrade, the communication protocol between the intelligent control center computer and the single-function machine is different from the communication protocol between the intelligent control center computer and the external upgrade device;

[0135] The intelligent control center computer serves as a data transfer device between the external upgrade device and the single-function machine, coordinating the sending and receiving of data between the two parties.

[0136] S503 The intelligent control center computer starts the upgrade and receives and verifies the data to be upgraded until the data to be upgraded is completely received and verified correctly.

[0137] The heterogeneous processing collaborative computer runs the intelligent control collaborative function to realize the data transfer between the single-function machine and the intelligent control center computer without processing the transmitted content.

[0138] The intelligent control center computer realizes the packetizing and forwarding of data from external upgrade devices to the functional single machines according to the communication protocols of the functional single machines. At the same time, the intelligent control center computer receives the feedback information of the configuration upgrade processor from the heterogeneous processing collaborative computer, and realizes the packetizing and encrypted forwarding of the functional single machines to the external upgrade devices according to the communication protocols of the external upgrade devices. The upgrade process carried out in the functional single machines refers to the upgrade process of the intelligent control center computer.

[0139] After the S504 upgrade data is received, the external upgrade device sends a "pre-write verification" instruction to the functional single machine and informs the intelligent control center computer of the length to be verified. After receiving the instruction, the intelligent control center computer forwards the instruction to the functional single machine to make it perform CRC verification or other verifications with equivalent error detection capabilities on the data content of the specified length at the upgrade buffer area, and reports the verification result according to the communication protocol. The intelligent control center computer reports this result to the external upgrade device.

[0140] After the external upgrade device receives the "pre-write verification" feedback from the intelligent control center computer and determines that the verification value is correct, it sends a "sector erase" instruction to the intelligent control center computer for the functional single machine and informs the intelligent control center computer of the length to be erased. If the verification value in the "pre-write verification" feedback of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user decides whether to execute the current step again, stop the upgrade operation or proceed to the next step. Since the upgrade data currently received by the aircraft electronic system is stored in the upgrade storage area of the functional single machine and has not been written to the FLASH area, selecting to stop the upgrade in the current step will not affect the original software in the aircraft electronic system. Just restart the aircraft electronic system and the external upgrade device to reset the upgrade process;

[0141] After the intelligent control center computer in S505 receives the "sector erase" instruction, it forwards the instruction to the functional single machine. The functional single machine calculates the number of sectors to be erased based on the length to be erased and erases the data in the application program area of the FLASH. The starting address of the FLASH area to be erased is set by the program and is the FLASH area corresponding to the application program of this functional single machine. After the erasure is completed, it reports the erasure result to the intelligent control center computer, and the intelligent control center computer reports this erasure result to the external upgrade device;

[0142] After the external upgrade device receives the "sector erase" feedback and determines that the erasure is successful, it sends an "update write" instruction and informs the intelligent control center computer of the length to be written;

[0143] After the intelligent control center computer in S506 receives the "update write" instruction, it forwards the instruction to the functional single machine. The functional single machine writes the content in the upgrade buffer area into the erased application program area of the FLASH and reports the write status to the intelligent control center computer, and the intelligent control center computer reports the write status to the external upgrade device;

[0144] After the external upgrade device receives the "update write" report and determines that the write is complete, it sends a "post-write verification" instruction and notifies the intelligent control center computer of the length to be verified.

[0145] After the intelligent control center computer of S507 receives the "post-write verification" instruction, it forwards the instruction to the functional single machine. The functional single machine verifies the data of the specified length in the FLASH application program area and reports the verification value to the intelligent control center computer. The intelligent control center computer then reports the verification value to the external upgrade device.

[0146] If the external upgrade device of S508 receives the "post-write verification" report and determines that the verification values are consistent, the current update is completed.

[0147] After completing the above process, the external upgrade device will exit the current upgrade process and enter the waiting upgrade state to prepare for the next upgrade.

[0148] Thirdly, since the external upgrade device and the aircraft electronic system communicate wirelessly through their respective radio frequency transceiver circuits to achieve the interaction of update information, in order to further improve the security and reliability of software wireless upgrade, the present invention provides a wireless communication protocol between the external upgrade device and the aircraft electronic system, namely the request data packet protocol and the response data packet protocol for transmission. The protocol includes the data transmission formats of six software upgrade stages: preparation for upgrade, data transmission, pre-write verification, area erasure, update write, and post-write verification.

[0149] Furthermore, the content of the radio frequency transmission communication protocol channel table sent by the external upgrade device mainly consists of an upgrade status word, data, a frame sequence number, and a checksum, totaling 256 bytes.

[0150] Name Upgrade status word Data Frame sequence number Checksum Byte count 8 245 1 2

[0151] Among them, the upgrade status word consists of 8 bytes. The 7th byte is the current upgrade command, that is, the operation instruction that the aircraft electronic system needs to perform; the 6th byte is the upgrade system number, which is the ID of the aircraft electronic system currently being upgraded to ensure that the correct target can be upgraded when there are multiple aircraft electronic systems waiting for upgrade; the 5th byte is the upgrade device number, that is, the specified upgrade target device among the aircraft electronic systems to be upgraded; the 6th and 5th bytes together form the unique identifier of the device where the software to be upgraded is located; the 4th byte is the area to be upgraded, which refers to the core number of the intelligent control center computer or the heterogeneous processing collaborative computer. This byte is invalid for the functional single machine and is the default value 0xFF; the 3rd to 0th bytes of the upgrade status word are status parameters, representing the upgrade parameters of their respective stages in different stages. See the following table for details:

[0152]

[0153]

[0154] Among them, each frame of data consists of 245 bytes, is only enabled in the data transmission stage, its value is the content of the data to be uploaded, and is used as a backup in other stages, with a default value of 0xFF filled in.

[0155] Among them, the frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps to 0 and starts incrementing again. In the aircraft electronic system, it is possible to check whether the received wireless messages are continuous.

[0156] Among them, the checksum consists of 2 bytes, and CRC checksum or other checksum methods with equivalent error detection capabilities are used to ensure the correctness and reliability of the upgraded data.

[0157] Furthermore, the content of the RF feedback communication protocol channel table sent by the aircraft electronic system mainly consists of a feedback status word, data, a frame sequence number, and a checksum, totaling 256 bytes.

[0158] Name Report-back status word Data frame Frame sequence number Checksum Byte count 8 245 1 2

[0159] Among them, the feedback status word consists of 8 bytes. The 7th byte is the current feedback command, that is, the instruction received and operated on by the aircraft electronic system; the 6th byte is the upgrade system number, which is the ID of the aircraft electronic system currently being upgraded. The aircraft electronic system reports its own ID to the external upgrade device to ensure that the correct target can be upgraded when there are multiple aircraft electronic systems waiting for upgrade; the 5th byte is the upgrade device number, that is, the specified upgrade target device being upgraded in the currently upgraded aircraft electronic system. The combination of bytes 6 and 5 forms the unique identifier of the device where the software to be upgraded is located; the 4th byte is the area to be upgraded, which refers to the core number of the intelligent control center computer or the heterogeneous processing collaborative computer. This byte is invalid for a functional single machine and has a default value of 0xFF; the 3rd to 0th bytes of the upgrade status word are status parameters, representing the upgrade parameters of their respective stages in different stages. For details, see the following table:

[0160]

[0161]

[0162] Among them, each frame of data consists of 245 bytes, is only enabled in the data transmission stage, its value is the latest data content received and stored in the upgrade data buffer of the device to be upgraded, that is, the latest frame content read from the buffer, and is used as a backup in other stages, with a default value of 0xFF filled in.

[0163] The frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps back to 0 and starts incrementing again. In the external upgrade device, it is possible to check whether the received wireless messages are continuous.

[0164] The checksum consists of 2 bytes and uses CRC checksum or other checksum methods with equivalent error detection capabilities to ensure the correctness and reliability of data transmission.

[0165] In the RF communication protocol channel table sent by the external upgrade device, the status word is the upgrade status word. In the RF communication protocol channel table sent by the intelligent control center computer in the aircraft electronic system, the status word is the feedback status word.

[0166] The RF transmission communication protocol channel table sent by the external upgrade device is encrypted when sent by the external upgrade device and decrypted when received by the aircraft electronic system. The RF feedback communication protocol channel table sent by the aircraft electronic system is encrypted when sent by the aircraft electronic system and decrypted when received by the external upgrade device. For the two types of encryption and decryption algorithms, their respective encryption algorithms and decryption algorithms are in a group with each other. The two groups of algorithms can be the same or different.

[0167] In addition, the intelligent control center computer and the heterogeneous processing collaborative computer interact through a hardware communication bus. To further improve the security and reliability of software upgrades, the present invention designs a communication protocol between the intelligent control center computer and the heterogeneous processing collaborative computer's collaborative upgrade functions, namely the data packet format sent by the intelligent control center computer and the data packet format reported back by the heterogeneous processing collaborative computer. The protocol includes the data transmission formats for six software upgrade stages: preparation for upgrade, data transmission, pre-write verification, area erasure, update writing, and post-write verification.

[0168] Furthermore, the content of the data packet sent by the intelligent control center computer mainly consists of an upgrade status word, data, a frame sequence number, and a checksum, totaling 254 bytes.

[0169]

[0170]

[0171] Among them, the upgrade status word consists of 6 bytes. Its 5th byte is the current upgrade command, that is, the operation instruction that the heterogeneous processing collaborative computer needs to perform. The 4th byte is the area to be upgraded, referring to the core number of the heterogeneous processing collaborative computer. The 3rd to 0th bytes of the upgrade status word are status parameters, representing the upgrade parameters of their respective stages in different stages. See the following table for details:

[0172]

[0173] Among them, each frame of data consists of 245 bytes, which is only enabled during the data transmission phase. Its value is the content of the data to be uploaded, and it serves as a backup in other phases, defaulting to filling with 0xFF.

[0174] Among them, the frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps back to 0 and starts incrementing again. In the heterogeneous processing collaborative computer, it is possible to check whether the received messages are continuous.

[0175] Among them, the checksum consists of 2 bytes, and CRC checksum or other checksum methods with equivalent error detection capabilities are used to ensure the correctness and reliability of the upgraded data.

[0176] Furthermore, the content of the feedback data packet sent by the heterogeneous processing collaborative computer mainly consists of a feedback status word, data, a frame sequence number, and a checksum, totaling 254 bytes.

[0177] Name Report-back status word Data frame Frame sequence number Checksum Byte count 6 245 1 2

[0178] Among them, the feedback status word consists of 6 bytes. Its 5th byte is the current feedback command, that is, the instruction received and operated on by the heterogeneous processing collaborative computer; its 4th byte is the current upgrade area, referring to the core number of the heterogeneous processing collaborative computer; the 3rd to 0th bytes of the upgrade status word are status parameters, representing the upgrade parameters of their respective phases at different stages. See the following table for details:

[0179]

[0180]

[0181] Among them, each frame of data consists of 245 bytes, which is only enabled during the data transmission phase. Its value is the latest data content received and stored in the upgrade data buffer of the heterogeneous processing collaborative computer, that is, the latest frame content read from the buffer, and it serves as a backup in other phases, defaulting to filling with 0xFF.

[0182] Among them, the frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps back to 0 and starts incrementing again. In the intelligent control center computer, it is possible to check whether the received messages are continuous.

[0183] Among them, the checksum consists of 2 bytes, and CRC checksum or other checksum methods with equivalent error detection capabilities are used to ensure the correctness and reliability of the data transmission.

[0184] In addition, the intelligent control center computer and the functional single machine interact through the intelligent control cooperation function of the heterogeneous processing cooperation computer. To further improve the security and reliability of software upgrade, the present invention designs a communication protocol between the intelligent control center computer and the functional single machine, that is, the data packet formats sent by the intelligent control center computer and the data packet formats reported back by the functional single machine. The protocol includes the data transmission formats of six software upgrade stages: preparation for upgrade, data transmission, pre-write verification, area erasure, update writing, and post-write verification.

[0185] Furthermore, the content of the data packet sent by the intelligent control center computer mainly consists of an upgrade status word, data, a frame sequence number, and a checksum, totaling 253 bytes.

[0186] Name Upgrade status word Data Frame sequence number Checksum Byte count 5 245 1 2

[0187] Among them, the upgrade status word consists of 5 bytes. Its 4th byte is the current upgrade command, that is, the operation instruction that the functional single machine needs to perform; the 3rd to 0th bytes of the upgrade status word are status parameters, representing the upgrade parameters of their respective stages in different stages. See the following table for details:

[0188]

[0189]

[0190] Among them, each frame of data consists of 245 bytes, and is only enabled in the data transmission stage. Its value is the data content to be uploaded, and is used as a backup in other stages, default filled with 0xFF.

[0191] Among them, the frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps to 0 and starts incrementing again. In the functional single machine, it can be checked whether the received messages are continuous.

[0192] Among them, the checksum consists of 2 bytes, and CRC check or other check methods with the same error detection ability are used to ensure the correctness and reliability of the upgrade data.

[0193] Furthermore, the content of the report-back data packet sent by the functional single machine mainly consists of a report-back status word, data, a frame sequence number, and a checksum, totaling 253 bytes.

[0194] Name Report-back status word Data frame Frame sequence number Checksum Byte count 5 245 1 2

[0195] Among them, the report-back status word consists of 5 bytes. Its 4th byte is the current report-back command, that is, the instruction received and already operated by the functional single machine; the 3rd to 0th bytes of the upgrade status word are status parameters, representing the upgrade parameters of their respective stages in different stages. See the following table for details:

[0196]

[0197] Among them, each frame of data consists of 245 bytes, which is only enabled during the data transmission phase. Its value is the latest data content received and stored in the functional single-machine upgrade data buffer, that is, the latest frame content read from the buffer. During other phases, it is used as a backup and is default filled with 0xFF.

[0198] Among them, the frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps to 0 and starts incrementing again. In the intelligent control center computer, it is possible to check whether the received messages are continuous.

[0199] Among them, the checksum consists of 2 bytes and uses CRC checksum or other checksum methods with equivalent error detection capabilities to ensure the correctness and reliability of data transmission.

[0200] The above solution is a different communication protocol designed to improve the security and reliability of software upgrades. It is not the only embodiment of using different communication protocols. Any way of using different communication protocols to ensure that the three types of communications do not affect each other belongs to the protection scope of the present invention.

[0201] As can be seen from the above, the present invention provides an integrated electronic system for an aircraft and a wireless upgrade method based on radio frequency communication, which can remotely upgrade multiple types of software in the integrated electronic system of the aircraft in an environment without physical contact. The method design can meet the current large-scale, general-purpose, and standardized usage requirements, shorten the online upgrade time of the aircraft's global software during batch production, and improve the reliability of software online upgrade.

[0202] The content not detailedly described in the specification of the present invention belongs to the prior art well-known to those skilled in the art.

Claims

1. An integrated electronic system for an aircraft, characterized in that Including: An external upgrade device and an aircraft electronic system, without physical contact between them, and realizing wireless communication through radio frequency signals; The external upgrade device includes a computer and a radio frequency transceiver circuit, realizes the display of the entire upgrade process through the computer and controls the software upgrade process, analyzes the upgrade file data and encrypts it, and transmits the software content to be upgraded through the radio frequency transceiver circuit, receives the encrypted feedback sent by the aircraft electronic system and decrypts it, and continues the upgrade process according to the decrypted feedback content; The aircraft electronic system receives the software content to be upgraded transmitted by the external upgrade device and sends an encrypted feedback to the external upgrade device; The aircraft electronic system includes an intelligent control integrated processing module, a functional single machine module, a multi-source sensing and driving module, and an external communication electrical interconnection component, where: The intelligent control integrated processing module is used to realize the comprehensive control, information processing and upgrade control of the aircraft electronic system, can receive the data of the functional single machine module, the multi-source sensing and driving module, and the external communication electrical interconnection component, and send command signals to each module; the intelligent control integrated processing module includes an intelligent control central computer and two heterogeneous processing collaborative computers, and the heterogeneous processing collaborative computers can communicate with the intelligent control central computer; The functional single machine module is composed of multiple single machines that realize specific aircraft functions. Each single machine has its own software, hardware system and memory, and can independently realize its core function; for a system that performs wireless upgrade through radio frequency communication, the functional single machine module needs to be configured with a radio frequency functional single machine, which is responsible for establishing wireless communication between the aircraft electronic system and the outside, and realizing the data interaction between the external upgrade device and the aircraft electronic system: when the aircraft integrated electronic system sends data to the outside, the intelligent control central computer transmits the data to be sent to the radio frequency functional single machine, and the radio frequency functional single machine converts it into a radio frequency signal and sends it out; when the aircraft integrated electronic system receives external data, the radio frequency functional single machine receives the external radio frequency signal, converts the radio frequency signal into a digital signal and then transmits it to the intelligent control central computer; the multi-source sensing and driving module is composed of multiple hardware circuits that realize specific aircraft driving or sensing. It does not have independent control ability inside, and its input and output are controlled by the heterogeneous processing collaborative computer of the intelligent control integrated processing module; The external communication electrical interconnection component is used for the interaction between the aircraft electronic system and the aircraft peripheral equipment.

2. The integrated avionics system according to claim 1, wherein: In the intelligent control integrated processing module: The intelligent control center computer is used for the global control of the aircraft electronic system, the operation of high-level algorithms, and the upgrade control. It has the ability to carry intelligent algorithms. In the upgrade method, it decrypts the encrypted radio frequency communication protocol channel table received from an external upgrade device and encrypts the radio frequency communication protocol channel table to be sent. The intelligent control center computer is also responsible for parsing and locating the target device to be upgraded: if the parsed update target is the software of the intelligent control center computer, it upgrades the software of the intelligent control center computer; if the parsed update target is the software of the heterogeneous processing collaborative computer, it establishes communication with the heterogeneous processing collaborative computer and upgrades its software; if the parsed update target is a functional single machine, the intelligent control center computer establishes communication with the functional single machine through the heterogeneous processing collaborative computer and upgrades its software; During the software upgrade process, the intelligent control center computer is also responsible for verifying the upgrade information to ensure the integrity and reliability of the upgrade data; The intelligent control center computer has multiple cores. In addition to the computing resources necessary for program operation, an independent RAM storage area and a FLASH memory are additionally allocated for each core. The FLASH storage area of each core stores the software program of the current core. When performing an upgrade operation, the lowest-numbered core works, and the additional RAM of the lowest-numbered core stores the data to be upgraded.

3. An integrated avionics system according to claim 1, characterized in that: The heterogeneous processing collaborative computer of the intelligent control integration processing module includes a heterogeneous processor and the corresponding memory, where: The processor has an intelligent control collaboration function and a collaborative upgrade function. The intelligent control collaboration function is responsible for the communication between the intelligent control center computer and the functional single machine, and for controlling the multi-source sensing drive module; the collaborative upgrade function is responsible for the software upgrade inside the heterogeneous processing collaborative computer and the software upgrade in the functional single machine; The memory is a device for storing the application programs and data of the heterogeneous processing collaborative computer and can be read and written by the heterogeneous processor.

4. The integrated aircraft electronic system according to claim 1, wherein: The data transmission between the external upgrade device and the aircraft electronic system uses a wireless communication protocol, including: the radio frequency transmission communication protocol channel table sent by the external upgrade device and the radio frequency report communication protocol channel table sent by the aircraft electronic system; both of the two radio frequency communication protocol channel tables include a status word, data, a frame sequence number, and a checksum, with a total of 256 bytes, where: the status word is 8 bytes, each frame of data is 245 bytes, the frame sequence number is 1 byte, and the checksum bit is 2 bytes; The status word in the radio frequency communication protocol channel table sent by the external upgrade device is the upgrade status word, and the status word in the radio frequency communication protocol channel table sent by the intelligent control center computer in the aircraft electronic system is the report status word. Specifically: The 7th byte of the status word represents the current upgrade command in the upgrade status word, that is, the operation instruction that the aircraft electronic system needs to perform. In the feedback status word, it represents the current feedback command, that is, the instruction that the aircraft electronic system has received and has performed the operation; the 6th byte is the upgrade system number, which is the ID of the aircraft electronic system that is currently being upgraded; the 5th byte is the upgrade device number, which represents the specified upgrade target device in the aircraft electronic system to be upgraded in the upgrade status word, and represents the specified upgrade target device that is currently being upgraded in the aircraft electronic system in the feedback status word; the 4th byte is the area to be upgraded, which refers to the core number of the intelligent control center computer or the heterogeneous processing collaborative computer. For a functional single machine, this byte is invalid and is the default value 0xFF; the 3rd to 0th bytes of the upgrade status word are status parameters, which represent the upgrade parameters of their respective stages in different stages; Each frame of data is only enabled in the data transmission stage, and its value is the data content to be uploaded. In other stages, it is used as a backup and is default filled with 0xFF; The frame sequence number starts from 0x0 and increments by 1 for each frame sent. After incrementing to 0xFF, it jumps back to 0x0 and starts incrementing again, which is used to check whether the received wireless messages are continuous; The check bit uses CRC check or other check methods with equivalent error detection capabilities.

5. An integrated aircraft electronic system according to claim 4, wherein: The intelligent control center computer and the heterogeneous processing collaborative computer interact through a hardware communication bus. The intelligent control center computer and the heterogeneous processing collaborative computer perform data transmission according to the set communication protocol. Each packet of data is 254 bytes during data transmission, including: a 6-byte status word, a 245-byte data frame, a 1-byte frame sequence number, and 2-byte check bits; among them, the status word in the data packet sent by the intelligent control center computer is the upgrade status word of the heterogeneous processing collaborative computer, and the status word of the feedback data packet sent by the heterogeneous processing collaborative computer is the feedback status word of the heterogeneous processing collaborative computer; the 5th byte of the status word is the current upgrade command in the upgrade status word of the heterogeneous processing collaborative computer, that is, the operation instruction that the heterogeneous processing collaborative computer needs to perform. In the feedback status word of the heterogeneous processing collaborative computer, it is the current feedback command, that is, the instruction that the heterogeneous processing collaborative computer has received and has performed the operation; the 4th byte is the area to be upgraded, that is, the core number of the heterogeneous processing collaborative computer; the 3rd to 0th bytes are status parameters, which represent the upgrade parameters of their respective stages in different stages; The intelligent control center computer and the functional single machine interact through the heterogeneous processing collaborative computer and in accordance with the set communication protocol. The data packet format sent by the intelligent control center computer and each data packet reported back by the functional single machine are both 253 bytes, including a 5-byte status word, a 245-byte data frame, a 1-byte frame sequence number, and 2-byte check bits. Among them, the status word in the data packet sent by the intelligent control center computer is the functional single machine upgrade status word, and the status word in the data packet reported back by the functional single machine is the functional single machine report-back status word; the 4th byte of the status word is the current upgrade command in the functional single machine upgrade status word, that is, the operation instruction that the functional single machine needs to perform, and in the functional single machine report-back status word is the current report-back command, that is, the instruction upgrade status word that the functional single machine has received and has performed the operation. The 3rd to 0th bytes of the status word are status parameters, representing the upgrade parameters of their respective stages in different stages.

6. The integrated avionics system according to claim 5, characterized in that: The upgrade process is divided into six stages, including: preparing for upgrade, data transmission, pre-write verification, area erasure, update writing, and post-write verification; the external upgrade device sends the corresponding prepare upgrade instruction, data transmission instruction, pre-write verification instruction, area erasure instruction, update writing instruction, and post-write verification instruction to the intelligent control center computer according to the protocol, and the intelligent control center computer sends back the report information to the external upgrade device according to the protocol.

7. A wireless upgrade method based on radio frequency communication, characterized in that, Using the aircraft integrated electronic system according to claims 1-6, including: The intelligent control center computer of the aircraft electronic system establishes communication with the radio frequency functional single machine through the heterogeneous processing collaborative computer, and the external upgrade device is in the waiting upgrade state; The external upgrade device sends an encrypted upgrade preparation instruction through radio frequency wireless communication, and specifies the unique identifier of the aircraft electronic system number to be upgraded and the device number to be upgraded in the instruction according to the communication protocol; After the aircraft electronic system receives the encrypted "upgrade preparation" instruction sent by the external upgrade device, the intelligent control center computer analyzes the content of the instruction, obtains the current electronic system number to be upgraded, the upgrade device number, and the core number to be upgraded, sends an encrypted report-back information to the external upgrade device, and at the same time controls the intelligent control center computer, the heterogeneous processing collaborative computer, and the functional single machine to perform the software upgrade process respectively according to the instruction; After the software update of each device is completed, the external upgrade device returns to the waiting upgrade state and ends the process.

8. The wireless upgrade method based on radio frequency communication according to claim 7, characterized in that: The software upgrade process of the intelligent control center computer includes: After the intelligent control center computer reports back to the external upgrade device that it can be upgraded, the radio frequency communication module is in the upgrade state and waits for upgrade data; After the external upgrade device receives the report-back that the intelligent control center computer can be upgraded, it sends the content to be upgraded to the intelligent control center computer in frames through the data transmission instruction according to the communication protocol between the external upgrade device and the aircraft electronic system. After the intelligent control center computer receives the content to be upgraded and stores it in the RAM area, it reports back; loop the current step until the intelligent control center computer has received all the data; After the data is uploaded, the external upgrade device sends a pre-write verification instruction and informs the intelligent control center computer of the length to be verified; after the intelligent control center computer receives the instruction, it verifies the data content of the specified length at the upgrade buffer area and reports back the verification result according to the communication protocol; After the external upgrade device receives the pre-write verification report from the intelligent control center computer and determines that the verification value is correct, it sends a regional erasure instruction to the intelligent control center computer and informs the intelligent control center computer of the length to be erased. If the verification value in the pre-write verification report of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user will decide whether to execute the current step again, stop the upgrade operation, or proceed to the next step. After the intelligent control center computer receives the regional erasure instruction, it calculates the number of sectors to be erased based on the length to be erased, and erases the data in the application program area of the FLASH to be erased. The starting address of the FLASH area to be erased is calculated by the intelligent control center computer according to the core number to be upgraded. After the erasure is completed, the intelligent control center computer reports the erasure result. After the external upgrade device receives the regional erasure report and determines that the erasure is successful, it sends an update write instruction and informs the intelligent control center computer of the length to be written. After the intelligent control center computer receives the update write instruction, it writes the content in the upgrade buffer into the erased application program area of the FLASH and reports the write status. After the external upgrade device receives the update write report and determines that the write is completed, it sends a post-write verification instruction and informs the intelligent control center computer of the length to be verified. After the intelligent control center computer receives the post-write verification instruction, it verifies the data of the specified length in the FLASH application program area and reports the verification value. After the external upgrade device receives the post-write verification report and determines that the verification values are consistent, the current update is completed.

9. The wireless upgrade method based on radio frequency communication according to claim 7, wherein: The software upgrade process of the heterogeneous processing collaborative computer includes: The intelligent control center computer establishes communication with the heterogeneous processing collaborative computer to be upgraded. After the heterogeneous processing collaborative computer reports through the intelligent control center computer that it can be upgraded, it waits for the upgrade data. After the external upgrade device receives the report from the intelligent control center computer that the device can be upgraded, it sends the content to be upgraded to the intelligent control center computer in frames through the data transmission instruction according to the communication protocol between the external upgrade device and the aircraft electronic system. The intelligent control center computer receives and verifies the data to be upgraded and forwards it to the heterogeneous processing collaborative computer until the data to be upgraded is completely received and verified correctly. After the upgrade data is completely received, the external upgrade device sends a pre-write verification instruction for the heterogeneous processing collaborative computer and informs the intelligent control center computer of the length to be verified. After receiving the instruction, the intelligent control center computer forwards the instruction to the heterogeneous processing collaborative computer to make it verify the data content of the specified length in the upgrade buffer, and reports the verification result according to the communication protocol. The intelligent control center computer reports this result to the external upgrade device. After the external upgrade device receives the pre-write verification report from the intelligent control center computer and determines that the verification value is correct, it sends a regional erasure instruction for the heterogeneous processing collaborative computer to the intelligent control center computer and informs the intelligent control center computer of the length to be erased. If the verification value in the pre-write verification report of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user will decide whether to execute the current step again, stop the upgrade operation, or proceed to the next step. After receiving the area erasure instruction, the intelligent control center computer forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer calculates the number of sectors to be erased based on the length to be erased, and erases the data in the application program area of the FLASH to be erased. The starting address of the FLASH area to be erased is calculated by the heterogeneous processing collaborative computer according to the core number to be upgraded. After the erasure is completed, it reports the erasure result to the intelligent control center computer, and the intelligent control center computer reports the erasure result to the external upgrade device. After receiving the area erasure report and determining that the erasure is successful, the external upgrade device sends an update write instruction and informs the intelligent control center computer of the length to be written. After receiving the update write instruction, the intelligent control center computer forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer writes the content in the upgrade buffer into the erased application program area of the FLASH, and reports the write status to the intelligent control center computer. The intelligent control center computer reports the write status to the external upgrade device. After receiving the update write report and determining that the write is completed, the external upgrade device sends a post-write verification instruction and informs the intelligent control center computer of the length to be verified. After receiving the post-write verification instruction, the intelligent control center computer forwards the instruction to the heterogeneous processing collaborative computer. The heterogeneous processing collaborative computer verifies the data of the specified length in the FLASH application program area and reports the verification value to the intelligent control center computer. The intelligent control center computer reports the verification value to the external upgrade device. After receiving the post-write verification report and determining that the verification values are consistent, the external upgrade device has completed the current update.

10. A wireless upgrade method based on radio frequency communication according to claim 7, characterized in that: The software upgrade process of the functional single machine includes: The intelligent control center computer establishes communication with the configuration upgrade processor of the functional single machine to be upgraded obtained through the heterogeneous processing collaborative computer. Obtain the upgrade report that the functional single machine to be upgraded can send to the external upgrade device and wait for the upgrade data. The intelligent control center computer starts to receive and verify the upgrade data, forwards it to the functional single machine to be upgraded through the heterogeneous processing collaborative computer. The functional single machine to be upgraded saves and reports it to the intelligent control center computer, and the intelligent control center computer reports it to the external upgrade device until the upgrade data is received and verified correctly. After the upgrade data is received, the external upgrade device sends a pre-write verification instruction for the functional single machine and informs the intelligent control center computer of the length to be verified. After receiving the instruction, the intelligent control center computer forwards the instruction to the functional single machine, instructing it to verify the data content of the specified length in the upgrade buffer and report the verification result according to the communication protocol. The intelligent control center computer reports the result to the external upgrade device. After receiving the pre-write verification report from the intelligent control center computer and determining that the verification value is correct, the external upgrade device sends an area erasure instruction for the functional single machine to the intelligent control center computer and informs the intelligent control center computer of the length to be erased. If the verification value in the pre-write verification report of the intelligent control center computer is inconsistent with the correct verification value, the external upgrade device will remind the user, and the user decides whether to execute the current step again, stop the upgrade operation or proceed to the next step. After receiving the area erasure instruction, the intelligent control center computer forwards the instruction to the functional single machine. The functional single machine calculates the number of sectors to be erased based on the length to be erased, and erases the data in the application program area of the FLASH to be erased. The starting address of the FLASH area to be erased is set by the program. After the erasure is completed, it reports the erasure result back to the intelligent control center computer, and the intelligent control center computer reports the erasure result back to the external upgrade device. After receiving the area erasure report and determining that the erasure is successful, the external upgrade device sends an update write instruction and notifies the intelligent control center computer of the length to be written. After receiving the update write instruction, the intelligent control center computer forwards the instruction to the functional single machine. The functional single machine writes the content in the upgrade buffer into the erased application program area of the FLASH, and reports the write status back to the intelligent control center computer. The intelligent control center computer reports the write status back to the external upgrade device. After receiving the update write report and determining that the write is completed, the external upgrade device sends a post-write verification instruction and notifies the intelligent control center computer of the length to be verified. After receiving the post-write verification instruction, the intelligent control center computer forwards the instruction to the functional single machine. The functional single machine verifies the data of the specified length in the FLASH application program area and reports the verification value back to the intelligent control center computer. The intelligent control center computer reports the verification value back to the external upgrade device. After receiving the post-write verification report and determining that the verification values are consistent, the current update is completed.

Images