Software upgrading system for vehicle-mounted equipment

Abstract

The invention provides a vehicle-mounted equipment software upgrading system. The system comprises a server unit, a train data communication unit and a vehicle-mounted equipment unit, the server unit comprises a remote management module and a TFTP storage module; the remote management module is used for issuing a software upgrading strategy to the vehicle-mounted equipment unit through the train data communication unit and monitoring the state of the vehicle-mounted equipment; the TFTP storage module is deployed independent of the remote management module and is used for storing a software upgrading file; and a TFTP client is arranged in the vehicle-mounted equipment unit and is used for carrying out UDP / IP communication with the server unit through the train data communication unit so as to finish software upgrading of the vehicle-mounted equipment. The system is high in architecture stability, excellent in transmission efficiency and reliability, high in equipment compatibility and expansibility, and high in operation and maintenance flexibility and intelligent level.

Description

Technical Field

[0001] This invention relates to the field of rail transit technology, and in particular to an on-board equipment software upgrade system. Background Technology

[0002] As the intelligence level of rail transit continues to improve, onboard equipment needs to be upgraded regularly to optimize functionality and fix software vulnerabilities. Currently, existing onboard equipment upgrade solutions have many limitations, as follows: 1. Server architecture with concentrated load: The single server integrates upgrade management and file storage functions. When upgrading multiple devices at the same time, it is easy to cause high CPU utilization, instruction response delay, or even paralysis of the entire upgrade system due to a single point of failure.

[0003] 2. Narrow equipment coverage: It only supports a limited number of types of vehicle-mounted devices and cannot be adapted to other key devices such as driver display units and vehicle wireless communication units. Multiple upgrade systems need to be deployed, resulting in high operation and maintenance costs.

[0004] 3. Insufficient flexibility in upgrade strategy: It only supports manual-triggered instant full firmware upgrades and lacks functions such as scheduled upgrades and cross-train specific equipment upgrades. Upgrades during peak hours can easily interfere with normal train operation. Furthermore, it cannot upgrade configuration files individually, and even when adjusting parameters, a large-capacity firmware package needs to be transmitted, resulting in a waste of network bandwidth.

[0005] 4. Lack of fault tolerance and feedback mechanisms: There are no functions such as breakpoint resume and anomaly warning, resulting in poor reliability and traceability of the upgrade process.

[0006] Therefore, there is an urgent need in this field for an on-board equipment upgrade system that can overcome the above-mentioned shortcomings and achieve high efficiency, stability, flexibility and comprehensive coverage. Summary of the Invention

[0007] This application provides a vehicle-mounted device software upgrade system to solve problems such as high server load, poor device compatibility, inflexible upgrade strategies, and weak system fault tolerance in the prior art.

[0008] This application provides an on-board equipment software upgrade system, comprising a server unit, a train data communication unit, and an on-board equipment unit. The server unit includes a remote management module and a TFTP storage module. The remote management module is used to issue software upgrade policies to the on-board equipment unit through the train data communication unit and monitor the status of the on-board equipment. The TFTP storage module is deployed independently of the remote management module and is used to store software upgrade files. The on-board equipment unit has a built-in TFTP client for communicating with the server unit via UDP / IP through the train data communication unit to complete the on-board equipment software upgrade.

[0009] In one embodiment, the vehicle-mounted equipment unit includes a vehicle controller, a vehicle data recorder, a driver display module, and a vehicle wireless communication module.

[0010] In one embodiment, the on-board equipment unit is pre-installed with automatic upgrade software; after the on-board equipment unit is powered on, the automatic upgrade software periodically sends communication request messages to the remote management module through the train data communication unit to establish a communication connection between the on-board equipment unit and the remote management module; wherein, the communication request message includes the device identifier and the current software version of the on-board equipment unit.

[0011] In one embodiment, the remote management module periodically sends heartbeat messages to the connected vehicle equipment unit. If no response is received for a preset number of consecutive times, the vehicle equipment unit is determined to have lost communication and is marked as offline. The heartbeat message includes the timestamp of the remote management module.

[0012] In one embodiment, the remote management module is used to issue a software upgrade strategy to the on-board equipment unit through the train data communication unit, including: the remote management module issuing the TFTP path of the software upgrade file and the TFTP path of the corresponding MD5 file to the on-board equipment unit.

[0013] In one embodiment, the software upgrade file includes at least one of a firmware package and a configuration file.

[0014] In one embodiment, the on-board equipment unit has a built-in TFTP client for communicating with the server unit via UDP / IP through the train data communication unit to complete the on-board equipment software upgrade, including: the on-board equipment unit downloading the software upgrade file from the TFTP storage module according to the TFTP path of the software upgrade file; and the automatic upgrade software upgrading the current software version of the on-board equipment unit according to the software upgrade file.

[0015] In one embodiment, the vehicle-mounted device unit downloads the software upgrade file from the TFTP storage module according to the TFTP path of the software upgrade file, including: the vehicle-mounted device unit downloads the MD5 file from the TFTP storage module according to the TFTP path of the MD5 file, and calculates the MD5 value of the software upgrade file; the vehicle-mounted device unit determines whether the MD5 file and the MD5 value are consistent; if they are consistent, the software upgrade file is determined to be a correct file; if they are inconsistent, the upgrade file is determined to be an incorrect file, and the software upgrade file is downloaded again until the maximum number of downloads is reached.

[0016] In one embodiment, in response to an immediate execution command from the user, the remote management module immediately issues a software upgrade strategy to the selected in-vehicle equipment unit.

[0017] In one embodiment, in response to the start time, end time, and timeout rules set by the user, the remote management module automatically sends a software upgrade strategy to the vehicle-mounted equipment unit within a specified time window.

[0018] Compared with the prior art, the present invention has the following significant advantages: 1. High architectural stability: By deploying the remote management module and the TFTP storage module independently, the management load and the storage / transmission load are effectively separated, reducing the risk of single point of failure and avoiding overall system paralysis.

[0019] 2. Excellent transmission efficiency and reliability: Utilizing the TFTP protocol combined with an MD5 file verification mechanism ensures the integrity of upgrade files and reliable transmission. Independent configuration file upgrades are supported, significantly reducing unnecessary bandwidth consumption.

[0020] 3. Strong equipment compatibility and scalability: The system design can simultaneously support four core vehicle-mounted sub-devices, realizing unified platform management and reducing the complexity and cost of system deployment and maintenance.

[0021] 4. High level of operational flexibility and intelligence: The provided functions such as scheduled upgrades and selective upgrades allow for upgrades during off-peak periods or for specific equipment, greatly reducing interference with normal train operations. Attached Figure Description

[0022] To more clearly illustrate the technical solutions of the embodiments of this application, the accompanying drawings used in the embodiments of this application will be briefly described below.

[0023] Figure 1 This is a schematic diagram of an in-vehicle equipment software upgrade system provided in an embodiment of this application; Figure 2 This is a schematic diagram of another vehicle-mounted device software upgrade system provided in an embodiment of this application. Detailed Implementation

[0024] The technical solutions in the embodiments of this application will now be described with reference to the accompanying drawings.

[0025] Similar reference numerals and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be further defined and explained in subsequent figures. Furthermore, in the description of this application, terms such as "first," "second," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0026] This application discloses an in-vehicle equipment software upgrade system, such as... Figure 1 The diagram shown is a schematic of an in-vehicle equipment software upgrade system. Figure 1 The onboard equipment software upgrade system comprises a server unit, a train data communication unit, and onboard equipment units. Both the server unit and the onboard equipment units are connected to the existing train data communication unit (such as the train data communication system network) and use it as the sole data transmission channel. A remote management unit is used for issuing upgrade strategies, monitoring equipment status, and managing logs. A TFTP (Trivial File Transfer Protocol) storage module, deployed independently of the remote management server, stores firmware packages, configuration files, and their corresponding MD5 (Message-Digest Algorithm 5) verification files according to device type and version number, and supports file transfer via the TFTP protocol. The onboard equipment units include an onboard controller, an onboard data recorder, a driver display module, and an onboard wireless communication module. Each onboard device is pre-installed with automatic upgrade software and a built-in TFTP client, used to communicate with the server unit via UDP / IP (User Datagram Protocol / Internet Protocol) through the train data communication unit to download, verify, and install upgrade files.

[0027] A UDP / IP communication and heartbeat monitoring mechanism is established between the remote management module and the on-board equipment unit. After the on-board equipment unit is powered on, it periodically sends communication request messages to the remote management module through the train data communication unit. The remote management module periodically sends heartbeat messages to the on-board equipment units with established connections. If no response is received for a preset number of consecutive times, the communication of the device is determined to be interrupted and it is marked as offline.

[0028] The system employs a data integrity protection mechanism: when the onboard equipment downloads an upgrade file, it simultaneously downloads the corresponding MD5 file from the TFTP storage module via the train data communication unit; after the download is complete, the onboard equipment unit calculates the MD5 value of the downloaded upgrade file and compares it with the content of the MD5 file; if the comparison is inconsistent, the download is restarted until the comparison is consistent or the preset download limit is reached.

[0029] The remote management module supports diverse upgrade strategies, including: Instant Upgrade: Responds to user commands to execute immediately, sending upgrade instructions and file paths to selected target devices. Scheduled Upgrade: Automatically triggers the upgrade process within a specified time window based on user-defined start and end times and timeout rules. Hierarchical Range Control: Supports batch filtering of vehicles by line number and train number, and supports cross-vehicle filtering of specific equipment by equipment type, generating an upgrade list.

[0030] When the on-board equipment unit performs an upgrade, for firmware package upgrades, the on-board controller will back up the core program to an independent partition before the upgrade; after the upgrade is completed, the equipment will automatically restart and report the upgrade results and the current software version number to the remote management module through the train data communication unit.

[0031] The remote management module also provides a visual user interface, which includes: a device status overview module, which displays the online status of vehicles and device version information in real time using color indicators; an upgrade monitoring module, which displays the file download status, upgrade execution status and time taken for each device in real time in the form of progress bars and lists; and a log query and management module, which supports filtering logs by time, event type and device identifier, and supports exporting log data.

[0032] The TFTP storage module supports the TFTP v2 protocol and has a maximum simultaneous connection count of no less than 100 to meet the needs of multiple devices downloading in parallel.

[0033] The core deployment and implementation process of this application embodiment is as follows: 1. Server Deployment: The remote management module and TFTP storage module will be configured as independent physical or virtual servers, each connected to a designated VLAN of the train data communication unit. On the servers, the corresponding protocol libraries will be imported, the file storage directory structure will be built (classified by "device type / version number"), and network communication permissions will be configured.

[0034] 2. Vehicle-mounted equipment adaptation: Integrate TFTP client functionality and automatic upgrade execution module into the software system of the target vehicle-mounted equipment (including vehicle controller, vehicle data recorder, driver display unit, and vehicle wireless communication unit). Configure a unique device identifier for each device and complete address binding with the remote management server to ensure that the device can automatically initiate identification and communication requests after power-on.

[0035] 3. Policy Configuration and Upgrade Execution: The system administrator selects the desired upgrade mode (instant or scheduled) through the web user interface provided by the remote management module. Using the filtering tools provided in the interface, the target upgrade objects are selected according to the hierarchy of "Line -> Train -> Equipment Type". The system generates an upgrade preview list. After confirmation, the remote management server sends upgrade instructions and file paths to the target equipment through the train data communication system network, triggering the file download, verification, and local upgrade process.

[0036] 4. Monitoring and Feedback: During the upgrade process, administrators can view the download progress, MD5 checksum results, and upgrade execution status of each device in real time through the upgrade monitoring dashboard. The system will issue alerts for abnormal situations such as upgrade failures and communication interruptions. After the upgrade is completed, a detailed upgrade report can be exported for verification and archiving.

[0037] This application embodiment realizes intelligent and automated upgrade management of the onboard sub-equipment version of the subway signaling system. The entire process minimizes manual intervention, improves upgrade efficiency and accuracy, and ensures the security and reliability of the upgrade process through strict communication, verification, and monitoring mechanisms.

[0038] Figure 2 This is a schematic diagram of another vehicle-mounted equipment software upgrade system provided in an embodiment of this application. Figure 2 In this system, the existing train data communication system network of the subway serves as the sole data transmission channel, eliminating the need for an additional independent transmission network. It comprises a server unit (including a remote management module and a TFTP storage module) and onboard equipment units (four types of devices: onboard controller, onboard data recorder, driver display module, and onboard wireless communication module). The remote management module (integrating log management functionality) and the TFTP storage module are deployed independently and connected to the train data communication unit separately. The former is responsible for issuing upgrade policies and monitoring equipment status, while the latter stores firmware packages, configuration files, and corresponding MD5 files according to "device type / version number," supporting the TFTP v2 protocol (maximum simultaneous connections ≥ 100). All onboard equipment is pre-installed with automatic upgrade software and a built-in TFTP client, enabling direct UDP / IP communication with the server unit.

[0039] Regarding UDP / IP communication and heartbeat monitoring mechanisms: Periodic communication: After the onboard equipment unit powers on, it sends a "communication request message" (including device identifier and current software version) to the server every minute via the train data communication unit. If a response message is received, communication is considered established. Heartbeat monitoring: The remote management module sends a "heartbeat message" (including server timestamp) to the connected onboard equipment unit every 300ms via the train data communication unit. If there is no response after 5 consecutive attempts, "communication interruption" is determined, and the device is marked as "offline" on the user interface. Data integrity guarantee: Each time an upgrade file (firmware package / configuration file) is downloaded, the onboard equipment unit synchronously downloads the corresponding MD5 file via the train data communication unit. After downloading, it automatically compares the "upgrade file calculated MD5 value - MD5 file content". If they do not match, it re-downloads (default 3 times, configurable) to avoid data loss or corruption.

[0040] Regarding the diversified upgrade strategy system, there are several options: Instant Upgrade: After the user selects the target device in the user interface and clicks "Execute Now," the remote management module immediately sends the upgrade command and TFTP file path to the target device. Scheduled Upgrade: Supports setting "Start Time (accurate to the second) - End Time (upgrade window) - Timeout Rule (Pause / Continue)," and the remote management module automatically triggers the upgrade process at the designated time. Vehicle Filtering: Batch selection is possible by "Line Number - Train Number," and the online status of vehicles (green = online, red = offline) is obtained and displayed in real time through the train data communication system network. Offline vehicles are marked "Waiting to be automatically upgraded after going online." Equipment Filtering: Provides "All Equipment in the Whole Vehicle" and "Specific Equipment Across Vehicles" modes. After selection, the "Number of Vehicles Involved - Number of Equipment Involved" is counted and previewed through the train data communication system network, and the upgrade is executed after confirmation.

[0041] Regarding the TFTP file transfer and onboard automatic upgrade process: Path acquisition: The remote management module sends the "upgrade file TFTP path + MD5 file TFTP path" to the onboard equipment unit via the train data communication unit. File download and verification: The onboard equipment unit simultaneously downloads both types of files via the train data communication unit and performs MD5 comparison (if the comparison succeeds, the upgrade proceeds; otherwise, the file is downloaded again). Local upgrade and feedback: The verified upgrade file is stored in the local flash memory. Before the onboard controller upgrades, the core program is backed up to a separate partition. After the upgrade is complete, it automatically restarts and sends back "upgrade result (success / failure) + current software version" via the train data communication unit.

[0042] Regarding the visual user interface and log management module, the device status overview uses a line map as a background and synchronizes train location and device version in real time via the train data communication unit, with color indicating online status. Upgrade monitoring obtains "file download status, MD5 comparison results, upgrade execution status, and time consumption" through the train data communication system network and displays them as a "progress bar + list". Log query supports multi-dimensional filtering by "time, event type (including upgrade failure, device disconnection, etc.), and device identifier," and log data can be exported to Excel / PDF. Log management records all operations (user configuration, device interaction, file verification, system anomalies), with each log entry containing a millisecond-level timestamp, and automatic backups facilitate fault tracing.

[0043] The above embodiments of this application have the following technical advantages: 1. Improved architecture stability: The dual-server independent deployment splits the "management-storage" load, the remote management server has low CPU utilization, the impact of single point of failure is reduced, and the overall system paralysis is avoided.

[0044] 2. Optimized transmission efficiency: TFTP resume capability reduces the amount of data retransmitted after a 300MB file is interrupted by 20MB, greatly improving transmission efficiency; support for incremental upgrades of configuration files only further reduces the amount of data transmitted.

[0045] 3. Expanded equipment coverage: Supports four types of devices: vehicle controller, vehicle data recorder, driver display module, and vehicle wireless communication module, eliminating the need to deploy multiple additional systems.

[0046] 4. Enhanced operational flexibility: Scheduled upgrades and cross-vehicle specific equipment upgrades greatly reduce operational disruption rates; visual feedback shortens fault location time.

[0047] The apparatus disclosed in the several embodiments provided in this application can also be implemented in other ways. The apparatus embodiments described above are merely illustrative. For example, the flowcharts and block diagrams in the accompanying drawings illustrate the architecture, functionality, and operation of possible implementations of the apparatus according to various embodiments of this application. In this regard, each block in a flowchart or block diagram may represent a module, segment, or portion of code, which contains one or more executable instructions for implementing a specified logical function. In some alternative implementations, the functions marked in the blocks may occur in a different order than those marked in the drawings. For example, two consecutive blocks may actually be executed substantially in parallel, and they may sometimes be executed in reverse order, depending on the functions involved. It should also be noted that each block in the block diagrams and / or flowcharts, and combinations of blocks in the block diagrams and / or flowcharts, can be implemented using a dedicated hardware-based system that performs the specified function or action, or using a combination of dedicated hardware and computer instructions.

[0048] In addition, the functional modules in the various embodiments of this application can be integrated together to form an independent part, or each module can exist independently, or two or more modules can be integrated to form an independent part.

Claims

1. A vehicle-mounted equipment software upgrade system, characterized in that, The system includes a server unit, a train data communication unit, and an on-board equipment unit; The server unit includes a remote management module and a TFTP storage module; The remote management module is used to send software upgrade strategies to the on-board equipment unit through the train data communication unit and monitor the status of the on-board equipment. The TFTP storage module is deployed independently of the remote management module and is used to store software upgrade files; The on-board equipment unit has a built-in TFTP client, which is used to communicate with the server unit via UDP / IP through the train data communication unit to complete the on-board equipment software upgrade.

2. The vehicle-mounted equipment software upgrade system according to claim 1, characterized in that, The vehicle-mounted equipment unit includes a vehicle controller, a vehicle data recorder, a driver display module, and a vehicle wireless communication module.

3. The vehicle-mounted equipment software upgrade system according to claim 1, characterized in that, The on-board equipment unit is pre-installed with automatic upgrade software; After the on-board equipment unit is powered on, the automatic upgrade software periodically sends communication request messages to the remote management module through the train data communication unit so that the on-board equipment unit and the remote management module can establish a communication connection. The communication request message includes the device identifier and current software version of the vehicle-mounted equipment unit.

4. The vehicle-mounted equipment software upgrade system according to claim 3, characterized in that, The remote management module periodically sends heartbeat messages to the connected vehicle equipment units. If no response is received for a preset number of consecutive times, the vehicle equipment unit is determined to be in a communication interruption and marked as offline. The heartbeat message includes the timestamp of the remote management module.

5. The vehicle-mounted equipment software upgrade system according to claim 3, characterized in that, The remote management module is used to send software upgrade strategies to the on-board equipment unit through the train data communication unit, including: The remote management module sends the TFTP path of the software upgrade file and the TFTP path of the corresponding MD5 file to the vehicle-mounted equipment unit.

6. The vehicle-mounted equipment software upgrade system according to claim 5, characterized in that, The software upgrade file includes at least one of firmware packages and configuration files.

7. The vehicle-mounted equipment software upgrade system according to claim 5, characterized in that, The onboard equipment unit has a built-in TFTP client, used to communicate with the server unit via UDP / IP through the train data communication unit to complete onboard equipment software upgrades, including: The on-board equipment unit downloads the software upgrade file from the TFTP storage module according to the TFTP path of the software upgrade file; The automatic upgrade software upgrades the current software version of the vehicle-mounted equipment unit according to the software upgrade file.

8. The vehicle-mounted equipment software upgrade system according to claim 7, characterized in that, The on-board unit downloads the software upgrade file from the TFTP storage module according to the TFTP path of the software upgrade file, including: The vehicle-mounted device unit downloads the MD5 file from the TFTP storage module according to the TFTP path of the MD5 file, and calculates the MD5 value of the software upgrade file; The vehicle-mounted device unit determines whether the MD5 file and MD5 value are consistent. If they are consistent, the software upgrade file is determined to be a correct file; if they are inconsistent, the upgrade file is determined to be an incorrect file, and the software upgrade file is downloaded again until the maximum number of downloads is reached.

9. The vehicle-mounted equipment software upgrade system according to claim 1, characterized in that, In response to the user's immediate execution command, the remote management module immediately issues a software upgrade strategy to the selected vehicle-mounted equipment unit.

10. The vehicle-mounted equipment software upgrade system according to claim 1, characterized in that, In response to the start time, end time, and timeout rules set by the user, the remote management module automatically sends a software upgrade strategy to the vehicle-mounted equipment unit within a specified time window.

Images