Low-power-consumption near-field coupling energy supply OTA circuit

Abstract

The invention provides a low-power-consumption near-field coupling energy supply OTA circuit, belongs to a wireless software upgrading technology, aims to solve the wireless upgrading problem of a GNCE control system, and comprises a near-field coupling energy supply module which is used for locally supplying energy to the system, eliminating system placement direction limitation and switching resonant frequency through a self-adaptive resonance matching unit to realize the optimal energy supply efficiency. A primary power supply is output to the power management module, and the energy supply state is monitored in real time; the power management module is used for providing a secondary power supply for the OTA security upgrade verification module and the OTA upgrade task execution module according to a preset power-on time sequence and an enabling sequence; the OTA security upgrading verification module is used for judging the security of a system and a source program, confirming feedback through double channels of a visual signal and a wireless encryption signal, ensuring the security and accuracy of an upgrading process, supporting remote and local double supervision and preventing software burning failure and tampering; and the OTA upgrade task execution module executes the functions of upgrade process control, state monitoring, program receiving, verification, backup, burning, rollback and the like.

Description

A low-power near-field coupled OTA circuit Technical Field

[0001] This invention relates to a low-power near-field coupling powered OTA circuit, and more particularly to a low-power near-field coupling powered OTA circuit with low power consumption, high reliability, and strong security, belonging to the field of wireless software upgrade technology. Background Technology

[0002] Currently, software upgrades for GNCE control equipment in environments without a stable power grid, such as warehouses and field locations, have long faced challenges including deployment difficulties, high energy consumption, and safety risks. Current mainstream upgrade solutions heavily rely on wired connections; upgrading even a single critical software program requires powering the entire GNCE control system, placing high energy demands on the system. Furthermore, in today's increasingly complex electromagnetic environment, the introduction of temporary cables itself poses a significant safety hazard. Existing technologies have failed to resolve the contradictions between "remote upgrades," "ultra-low power consumption," and "operational safety," severely restricting the maintainability of GNCE control equipment.

[0003] Specifically, existing near-field coupling power supply OTA technology suffers from three major technical bottlenecks: First, low energy transmission efficiency and poor reliability. Traditional single-coil efficiency is significantly reduced in metallic environments due to eddy current losses, and the technology is highly sensitive to equipment placement; even slight misalignment can easily cause power interruption, leading to upgrade failure. Second, inefficient system energy management. Traditional software upgrades require waking up and maintaining the entire GNCE control system at full power consumption. The full power consumption of the main processor, coprocessors, and peripherals results in substantial energy consumption, fundamentally conflicting with operational scenarios constrained by environmental limitations, such as the absence of a stable power grid, and reliance on limited energy sources. Third, insufficient security and weak fault tolerance during the upgrade process. Sudden power grid fluctuations or signal interference during the upgrade process can cause software data write errors, requiring manual intervention for fault recovery and lacking a robust safety verification mechanism. Summary of the Invention

[0004] The technical problem solved by this invention is to overcome the shortcomings of the prior art and provide a low-power near-field coupling power supply OTA circuit, thereby improving the efficiency of large-scale distributed upgrade deployment.

[0005] The technical solution of this invention is as follows: This invention discloses a low-power near-field coupling power supply OTA circuit, including: a near-field coupling power supply module, a power management module, an OTA security upgrade verification module, and an OTA upgrade task execution module; wherein, the near-field coupling power supply module outputs primary power to the power management module and monitors the power supply status in real time; the power management module rectifies and regulates the primary power supply and provides secondary power to the OTA upgrade task execution module and the OTA security upgrade verification module according to a preset power-on sequence; the OTA security upgrade verification module receives a signed or encrypted new version program package sent by an external remote server; performs a system self-test and generates a self-test status code; verifies the new version program package and generates verification information; based on the self-test status code and verification information, when it is determined that the system is in a safe state and the source program verification is passed, it sends an encrypted upgrade confirmation signal to the OTA upgrade task execution module; the OTA upgrade task execution module, based on the encrypted upgrade confirmation signal, backs up the old version program, performs integrity verification on the new version program, and then executes program burning or rollback; and monitors the burning status.

[0006] Furthermore, in the above circuit, the near-field coupling power supply module includes an orthogonal coil receiving unit, an adaptive resonant matching unit, and an overload shutdown unit. The orthogonal coil receiving unit comprises two sets of mutually perpendicular planar inductor coils, used to couple the alternating magnetic field generated by the primary power supply under any orientation, outputting an AC induced electromotive force. The adaptive resonant matching unit is connected to the output terminal of the orthogonal coil receiving unit and adaptively adjusts the impedance of the receiving end according to the AC induced electromotive force to achieve optimal power transmission matching between the circuit impedance and the power supply circuit. The overload shutdown unit is connected to the output terminal of the adaptive resonant matching unit, monitors the voltage, current, and power status of the power supply in real time, and cuts off the energy supply to subsequent stages when an overvoltage or overcurrent condition is detected.

[0007] Furthermore, in the above circuit, the adaptive resonant matching unit includes an LRC network. The LRC network adaptively switches the combination of capacitors and resistors in the LRC network array according to the strength of the AC induced electromotive force output by the quadrature coil receiving unit to adjust the matching parameters; and compensates for parameter changes in the capacitors and resistors in the LRC network caused by temperature drift by utilizing the inverse variation characteristic of the inductance value of the temperature-compensating inductor.

[0008] Furthermore, in the above circuit, the power management module includes a rectification and voltage regulation unit and a power-on timing control unit; wherein, the rectification and voltage regulation unit is connected to the output terminal of the near-field coupling power supply module, and is used to convert the induced electromotive force generated by the received primary power supply into a stable DC voltage that meets the working requirements of the back-end circuit; the power-on timing control unit is configured to provide secondary power to the OTA security upgrade verification module and the OTA upgrade task execution module according to a preset delay time and enabling sequence after the output of the rectification and voltage regulation unit is stable.

[0009] Furthermore, in the aforementioned circuit, the OTA security upgrade verification module includes a wireless communication encryption unit, a system security status memory, a security logic control unit, and a status indication unit. The wireless communication encryption unit is used to establish a two-way authentication and encrypted data transmission channel with an external remote server based on digital certificates to receive a signed or encrypted new version program package sent by the external remote server. The system generates a self-test status code during self-testing and verifies the new version program package to obtain verification information. The security status memory stores the self-test status code and the verification information of the new version program package. The security logic control unit is configured to read the self-test status code and verification information stored in the security status memory when the system is powered on or receives an upgrade command. Based on the self-test status code and verification information, it determines whether the system is in a secure state and whether the source program verification has passed. If so, it sends an encrypted upgrade confirmation signal to the OTA upgrade task execution module and the status indication unit; otherwise, it sends an encrypted upgrade failure signal to the status indication unit. The status indication unit, connected to the security logic control unit, issues a visual signal indicating a normal status based on the encrypted upgrade confirmation signal and an abnormal status based on the encrypted upgrade failure signal.

[0010] Furthermore, in the above circuit, the OTA upgrade task execution module includes an upgrade task processing module and a non-volatile storage management unit; wherein, the upgrade task processing module decrypts and verifies the encrypted upgrade confirmation signal, and monitors the process; it issues upgrade authorization and start instructions to the non-volatile storage management unit; the non-volatile storage management unit is used to store the new version program package; according to the upgrade authorization and start instructions, it performs integrity verification of the new version program package, and if the verification passes, it performs program burning; otherwise, it performs program rollback.

[0011] Furthermore, in the aforementioned circuit, the upgrade task processing module includes an interface and enable management unit, a security upgrade condition judgment unit, and a process monitoring unit. The interface and enable management unit determines the interface level state and establishes communication with the OTA security upgrade verification module to obtain an encrypted upgrade confirmation signal. The security upgrade condition judgment unit decrypts and verifies the encrypted upgrade confirmation signal, waking up the process monitoring unit and issuing an upgrade authorization and start command to the non-volatile memory management unit. The process monitoring unit is connected to the security upgrade condition judgment unit, the non-volatile memory management unit, and the OTA security upgrade verification module, respectively. It monitors the burning process, determines whether the burning is successful, and if so, outputs a burning success flag; otherwise, it outputs a burning failure flag.

[0012] Furthermore, in the aforementioned circuit, the non-volatile storage management unit includes a program burning and caching unit, a non-volatile memory, and a program backup management unit. The program burning and caching unit is connected to the wireless communication encryption unit of the OTA security upgrade verification module. After receiving a new version program package, it stores it in the non-volatile memory. Based on the upgrade authorization and startup command, after receiving the complete program package and passing integrity verification, it performs the operation of burning the new program to the system's main program execution area; otherwise, it performs a rollback to restore to a known secure program version. The program backup management unit, before starting the new program burning, completely copies the currently running original system program and stores it in the backup non-volatile memory, forming a protected backup copy to ensure that the original program remains unchanged and recoverable throughout the entire upgrade process.

[0013] The beneficial effects of this invention compared to existing technologies are as follows: (1) This invention proposes a low-power near-field coupling power supply OTA circuit, which adopts selective low-power power supply technology to ensure that during software upgrades, only the minimum safe upgrade system is powered and operates, thus eliminating the power loss of the main control CPU and most peripheral circuits in the traditional solution. This design can reduce the energy consumption of a single upgrade by one to two orders of magnitude compared to the traditional solution. This makes it possible to perform frequent and extensive software upgrades in environments without a stable power grid, such as warehouses and the field, where only near-field coupling power supply is available, thus solving the energy supply problem in equipment maintenance.

[0014] (2) This invention proposes a low-power near-field coupling OTA circuit, which adopts a fully hardware-based security verification link to ensure absolute security and high reliability during the upgrade process. This invention constructs a hardware-level security mechanism throughout the upgrade process: the upgrade security verification module performs security judgment before startup; the OTA upgrade execution module receives data through an encrypted link; the non-volatile storage management unit backs up the original program completely to a physically isolated storage area before performing the burning process. Once a failure occurs during the upgrade process, the system can automatically roll back to the secure original version, avoiding the risk of system upgrade failure and reducing equipment maintenance costs and security risks.

[0015] (3) This invention proposes a low-power near-field coupling power supply OTA circuit, which adopts orthogonal coils and adaptive resonant matching technology, significantly improving the stability and deployment convenience of energy transmission. The near-field coupling power supply module eliminates the directional limitations of equipment placement through omnidirectional power supply of orthogonal coils, eliminating the need for operators to precisely align the equipment. Combined with the adaptive resonant matching unit, it can dynamically compensate for the misalignment caused by changes in temperature, distance, and load, thereby maintaining the energy wireless transmission efficiency at its optimal state. This dual technology ensures that the GNCE control system can still establish a stable and efficient energy transmission channel in complex environments, making upgrade operations simpler and improving the efficiency of large-scale distributed upgrade deployment.

[0016] (4) The circuit of the present invention aims to solve the key technical problems of unreliable power supply, high energy consumption and unsafe process when upgrading the software of the distributed GNCE control system in the absence of a stable power grid. Attached Figure Description

[0017] Figure 1 is a block diagram of a low-power near-field coupling power supply OTA circuit according to the present invention. Detailed Implementation

[0018] The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

[0019] As shown in Figure 1, this invention discloses a low-power near-field coupling power supply OTA circuit, comprising: a near-field coupling power supply module, a power management module, an OTA security upgrade verification module, and an OTA upgrade task execution module; wherein, the near-field coupling power supply module outputs primary power to the power management module and monitors the power supply status in real time; the power management module rectifies and regulates the primary power supply and provides secondary power to the OTA upgrade task execution module and the OTA security upgrade verification module according to a preset power-on sequence; the OTA security upgrade verification module receives a signed or encrypted new version program package sent by an external remote server; performs a system self-test and generates a self-test status code; verifies the new version program package and generates verification information; based on the self-test status code and verification information, when it determines that the system is in a secure state and the source program verification has passed, it sends an encrypted upgrade confirmation signal to the OTA upgrade task execution module; the OTA upgrade task execution module, based on the encrypted upgrade confirmation signal, backs up the old version program, performs integrity verification on the new version program, and then executes program burning or rollback; and monitors the burning status.

[0020] Preferably, the near-field coupling power supply module includes an orthogonal coil receiving unit, an adaptive resonant matching unit, and an overload shutdown unit. The orthogonal coil receiving unit comprises two sets of mutually perpendicular planar inductor coils, used to couple the alternating magnetic field generated by the primary power supply under any orientation, outputting an AC induced electromotive force. The adaptive resonant matching unit is connected to the output terminal of the orthogonal coil receiving unit and adaptively adjusts the impedance of the receiving end according to the AC induced electromotive force to achieve optimal power transmission matching between the circuit impedance and the power supply circuit. The overload shutdown unit is connected to the output terminal of the adaptive resonant matching unit, monitors the voltage, current, and power status of the power supply in real time, and cuts off the energy supply to subsequent stages when an overvoltage or overcurrent condition is detected.

[0021] Preferably, the adaptive resonant matching unit includes an LRC network. The LRC network adaptively switches the combination of capacitors and resistors in the LRC network array according to the strength of the AC induced electromotive force output by the quadrature coil receiving unit to adjust the matching parameters. The inductance value of the temperature-compensating inductor changes inversely with temperature to compensate for the parameter changes of capacitors and resistors in the LRC network caused by temperature drift.

[0022] Preferably, the power management module includes a rectification and voltage regulation unit and a power-on timing control unit; wherein, the rectification and voltage regulation unit is connected to the output terminal of the near-field coupling power supply module, and is used to convert the induced electromotive force generated by the received primary power supply into a stable DC voltage that meets the working requirements of the back-end circuit; the power-on timing control unit is configured to provide secondary power to the OTA security upgrade verification module and the OTA upgrade task execution module according to a preset delay time and enabling sequence after the output of the rectification and voltage regulation unit is stable.

[0023] Preferably, the OTA security upgrade verification module includes a wireless communication encryption unit, a system security status memory, a security logic control unit, and a status indication unit. The wireless communication encryption unit is used to establish a two-way authentication and encrypted data transmission channel with an external remote server based on digital certificates to receive a signed or encrypted new version program package sent by the external remote server. The system generates a self-test status code during self-testing and verifies the new version program package to obtain verification information. The security status memory stores the self-test status code and the verification information of the new version program package. The security logic control unit is configured to read the self-test status code and verification information stored in the security status memory when the system is powered on or receives an upgrade command. Based on the self-test status code and verification information, it determines whether the system is in a secure state and whether the source program verification has passed. If so, it sends an encrypted upgrade confirmation signal to the OTA upgrade task execution module and the status indication unit; otherwise, it sends an encrypted upgrade failure signal to the status indication unit. The status indication unit, connected to the security logic control unit, issues a visual signal indicating a normal status based on the encrypted upgrade confirmation signal and an abnormal status based on the encrypted upgrade failure signal.

[0024] Preferably, the OTA upgrade task execution module includes an upgrade task processing module and a non-volatile storage management unit; wherein, the upgrade task processing module decrypts and verifies the encrypted upgrade confirmation signal and monitors the process; it issues upgrade authorization and start instructions to the non-volatile storage management unit; the non-volatile storage management unit is used to store the new version program package; according to the upgrade authorization and start instructions, it performs integrity verification of the new version program package, and if the verification passes, it performs program burning; otherwise, it performs program rollback.

[0025] Preferably, the upgrade task processing module includes an interface and enable management unit, a security upgrade condition judgment unit, and a process monitoring unit. The interface and enable management unit determines the interface level status and establishes communication with the OTA security upgrade verification module to obtain an encrypted upgrade confirmation signal. The security upgrade condition judgment unit decrypts and verifies the encrypted upgrade confirmation signal, waking up the process monitoring unit and issuing an upgrade authorization and start command to the non-volatile storage management unit. The process monitoring unit is connected to the security upgrade condition judgment unit, the non-volatile storage management unit, and the OTA security upgrade verification module, respectively. It monitors the burning process, determines whether the burning is successful, and if so, outputs a burning success flag; otherwise, it outputs a burning failure flag.

[0026] Preferably, the non-volatile storage management unit includes a program burning and caching unit, a non-volatile memory, and a program backup management unit. The program burning and caching unit is connected to the wireless communication encryption unit of the OTA security upgrade verification module. After receiving a new version program package, it stores it in the non-volatile memory. Based on the upgrade authorization and startup command, after receiving the complete program package and passing the integrity verification, it performs the operation of burning the new program to the system's main program execution area; otherwise, it performs a rollback to restore to a known secure program version. The program backup management unit, before starting the new program burning, completely copies the currently running original system program and stores it in the backup non-volatile memory, forming a protected backup copy to ensure that the original program remains unchanged and recoverable throughout the upgrade process.

[0027] This embodiment provides a low-power near-field coupling powered OTA circuit, including: a near-field coupling powered module, a power management module, an OTA security upgrade verification module, and an OTA upgrade task execution module; wherein, the near-field coupling powered module provides primary power to the power management module in the GNCE control system placed in the warehouse and monitors the power supply status of the GNCE control system in real time; the power management module is connected to the downstream stage of the near-field coupling powered module and provides secondary power to the OTA security upgrade module according to a preset power-on sequence after receiving power; the OTA security upgrade verification module determines the security of system operation and confirms feedback through dual channels of visual signals and wireless encrypted signals to ensure the security and accuracy of the upgrade process, supports remote and local dual supervision, and prevents software burning failure and tampering.

[0028] The OTA upgrade task execution module is powered by the power management module and runs independently, performing functions such as upgrade process control, status monitoring, program reception, verification, backup, burning and rollback.

[0029] The near-field coupling power supply module includes an orthogonal coil receiving unit, an adaptive resonant matching unit, and an overload shutdown unit. The orthogonal coil receiving unit comprises two sets of mutually perpendicular planar inductors, used to couple the alternating magnetic field generated by the primary power supply under arbitrary placement, eliminating the directional limitation of the GNCE control system's power reception and outputting an induced electromotive force. The adaptive resonant matching unit, connected to the output of the orthogonal coil receiving unit, adaptively adjusts the impedance of the receiving end to achieve optimal power transmission matching between the GNCE control system circuit impedance and the power supply circuit. This unit includes an LRC network whose impedance value can be switched programmatically. This network adaptively switches the capacitor and resistor combinations in the LRC network array according to the intensity of the induced electromotive force output by the orthogonal coil receiving unit to adjust the matching parameters. Simultaneously, the inductance of the temperature-compensated inductor changes inversely with temperature, compensating for parameter changes in other components in the LRC network caused by temperature drift, jointly maintaining the stability of the resonant frequency of the resonant circuit formed by the receiving coil and the receiving end impedance network at the optimal power transmission frequency.

[0030] The overload shutdown unit is connected to the back end of the adaptive resonant matching unit. It monitors the voltage, current and power of the power supply in real time, and cuts off the energy supply to the next stage when an overvoltage or overcurrent condition is detected.

[0031] The power management module includes a rectification and voltage regulation unit and a power-on timing control unit. The rectification and voltage regulation unit is connected to the output terminal of the near-field coupling power supply module and is used to convert the received AC induced electromotive force into a stable DC voltage that meets the working requirements of the back-end circuit. The power-on timing control unit is configured to provide secondary power to the OTA security upgrade verification module after the output of the rectification and voltage regulation unit has stabilized, according to a preset delay time and enabling sequence.

[0032] The system includes a wireless communication encryption unit, a system security status memory, a security logic control unit, and a status indication unit. The wireless communication encryption unit supports 4G or other wireless protocols and is used to establish a two-way authentication and encrypted data transmission channel with a remote server based on digital certificates to receive new version packages that have been signed or encrypted.

[0033] The security status memory is used to store self-test status codes that characterize the security of system operation and verification information of new version packages.

[0034] The security logic control unit is configured to read the self-test status code and verification information stored in the security status memory when the system powers on or receives an upgrade command, generate an encrypted upgrade signal, and feed it back to the OTA upgrade task execution module. The wireless communication unit supports 4G or other wireless protocols and is used to establish a two-way authentication and encrypted data transmission channel based on digital certificates with a remote server to receive signed or encrypted new version program packages.

[0035] The status indication unit is connected to the security logic control unit. If the security logic control unit determines that the system is in a secure state and the source program verification passes, the security logic control unit sends an encryption upgrade confirmation signal to the OTA dedicated coprocessor control unit, and the status indication unit issues a visual indication signal indicating that the status is normal. Otherwise, the security logic control unit sends an encryption upgrade failure signal, and the status indication unit issues a visual indication signal indicating that the status is abnormal.

[0036] The OTA upgrade task execution module, as a dedicated hardware system that receives power and runs during the upgrade, includes an upgrade task processing module and a non-volatile storage management unit. The upgrade task processing module, as a control circuit, performs security upgrade judgment, process control, and status monitoring. The non-volatile storage management unit, as a storage circuit, manages the reception, verification, backup, burning, and rollback of the program.

[0037] The upgrade task processing module includes an interface and enable management unit, a security upgrade condition judgment unit, and a process monitoring unit; among which, the interface and enable management unit judges the interface level status and establishes communication with the OTA security upgrade verification module to obtain the encrypted upgrade signal.

[0038] The security upgrade condition judgment unit decrypts and verifies the encrypted status signal. Only after successful verification does it wake up the process monitoring unit and push the task to the subsequent upgrade process. It parses and logically judges the read encrypted upgrade status signal to confirm whether the current system has all the conditions to initiate a firmware security upgrade.

[0039] The process monitoring unit is connected to the security upgrade condition judgment unit, the software receiving and burning module, and the OTA security upgrade module. This unit is configured to: when the upgrade condition judgment unit determines that the upgrade conditions are met, send an upgrade authorization and start command to the non-volatile storage management unit and monitor the burning process; after successful burning, based on the operation result, start the OTA security upgrade module from the new program to execute program rollback.

[0040] The non-volatile storage management unit includes a program burning and caching unit and a program backup management unit. The program burning and caching unit is connected to the wireless communication encryption unit and is configured to: store the received program package in non-volatile memory; and after receiving the complete program package and passing integrity verification, burn the new program to the system's main program runtime area. Otherwise, activate the software rollback program to restore to a known secure program version.

[0041] The program backup management unit is configured to automatically copy and store the original program of the currently running system to a backup non-volatile memory before starting the new program burning process, forming a protected backup copy to ensure that the original program remains unchanged and can be restored at any time during the entire upgrade process.

[0042] Although the present invention has been described in detail through the preferred embodiments above, it should be understood that the above description should not be considered as a limitation of the present invention. Various modifications and substitutions to the present invention will be apparent to those skilled in the art after reading the above description. Therefore, the scope of protection of the present invention should be defined by the appended claims.

[0043] The contents not described in detail in this specification are common knowledge to those skilled in the art.

Claims

1. A low-power near-field coupled OTA circuit, characterized in that, include: The system comprises a near-field coupling power supply module, a power management module, an OTA security upgrade verification module, and an OTA upgrade task execution module. The near-field coupling power supply module outputs primary power to the power management module and monitors the power supply status in real time. The power management module rectifies and regulates the primary power supply, providing secondary power to the OTA upgrade task execution module and the OTA security upgrade verification module according to a preset power-on sequence. The OTA security upgrade verification module receives a signed or encrypted new version program package from an external remote server; performs a system self-test, generating a self-test status code; verifies the new version program package, generating verification information; and, based on the self-test status code and verification information, determines that the system is in a secure state and the source program verification has passed, sends an encrypted upgrade confirmation signal to the OTA upgrade task execution module. The OTA upgrade task execution module backs up the old version of the program based on the encrypted upgrade confirmation signal, performs integrity verification on the new version of the program, and then executes program burning or rollback; it also monitors the burning status.

2. The low-power near-field coupling power supply OTA circuit according to claim 1, characterized in that, The near-field coupling power supply module includes an orthogonal coil receiving unit, an adaptive resonant matching unit, and an overload shutdown unit. The orthogonal coil receiving unit comprises two sets of mutually perpendicular planar inductor coils, used to couple the alternating magnetic field generated by a primary power source under any orientation, outputting an AC induced electromotive force. The adaptive resonant matching unit, connected to the output of the orthogonal coil receiving unit, adaptively adjusts the impedance of the receiving end according to the AC induced electromotive force to achieve optimal power transmission matching between the circuit impedance and the power supply circuit. The overload shutdown unit, connected to the output of the adaptive resonant matching unit, monitors the voltage, current, and power status of the power supply in real time, and cuts off the energy supply to subsequent stages when an overvoltage or overcurrent condition is detected.

3. The low-power near-field coupling power supply OTA circuit according to claim 2, characterized in that, The adaptive resonant matching unit includes an LRC network. The LRC network adaptively switches the combination of capacitors and resistors in the LRC network array according to the strength of the AC induced electromotive force output by the quadrature coil receiving unit to adjust the matching parameters. It also compensates for the parameter changes of capacitors and resistors in the LRC network caused by temperature drift by using the inverse change characteristic of the inductance value of the temperature compensation inductor.

4. The low-power near-field coupling power supply OTA circuit according to claim 1, characterized in that, The power management module includes a rectification and voltage regulation unit and a power-on timing control unit. The rectification and voltage regulation unit is connected to the output terminal of the near-field coupling power supply module and converts the induced electromotive force generated by the received primary power supply into a stable DC voltage that meets the operating requirements of the back-end circuit. The power-on timing control unit is configured to provide secondary power to the OTA security upgrade verification module and the OTA upgrade task execution module according to a preset delay time and enabling sequence after the output of the rectification and voltage regulation unit has stabilized.

5. The low-power near-field coupling power supply OTA circuit according to claim 1, characterized in that, The OTA security upgrade verification module includes a wireless communication encryption unit, a system security status memory, a security logic control unit, and a status indication unit. The wireless communication encryption unit establishes a two-way authentication and encrypted data transmission channel with an external remote server based on digital certificates to receive signed or encrypted new version packages sent by the external remote server. The system generates a self-test status code during self-testing and verifies the new version package to obtain verification information. The security status memory stores the self-test status code and the verification information of the new version package. The security logic control unit is configured to read the self-test status code and verification information stored in the security status memory when the system powers on or receives an upgrade command. Based on the self-test status code and verification information, it determines whether the system is in a secure state and whether the source program verification has passed. If so, it sends an encrypted upgrade confirmation signal to the OTA upgrade task execution module and the status indication unit; otherwise, it sends an encrypted upgrade failure signal to the status indication unit. The status indication unit, connected to the security logic control unit, issues a visual signal indicating a normal status based on the encrypted upgrade confirmation signal and an abnormal status based on the encrypted upgrade failure signal.

6. The low-power near-field coupling power supply OTA circuit according to claim 5, characterized in that, The OTA upgrade task execution module includes an upgrade task processing module and a non-volatile storage management unit. The upgrade task processing module decrypts and verifies the encrypted upgrade confirmation signal and monitors the process. It issues upgrade authorization and start commands to the non-volatile storage management unit. The non-volatile storage management unit stores the new version program package. Based on the upgrade authorization and start commands, it performs an integrity check on the new version program package. If the check passes, the program is burned; otherwise, the program is rolled back.

7. A low-power near-field coupling power supply OTA circuit according to claim 6, characterized in that, The upgrade task processing module includes an interface and enable management unit, a security upgrade condition judgment unit, and a process monitoring unit. The interface and enable management unit determines the interface level status and establishes communication with the OTA security upgrade verification module to obtain an encrypted upgrade confirmation signal. The security upgrade condition judgment unit decrypts and verifies the encrypted upgrade confirmation signal, waking up the process monitoring unit and issuing an upgrade authorization and start command to the non-volatile storage management unit. The process monitoring unit is connected to the security upgrade condition judgment unit, the non-volatile storage management unit, and the OTA security upgrade verification module, respectively. It monitors the burning process, determines whether the burning is successful, and if so, outputs a burning success flag; otherwise, it outputs a burning failure flag.

8. A low-power near-field coupled OTA circuit according to claim 6, characterized in that, The non-volatile storage management unit includes a program burning and caching unit, a non-volatile memory, and a program backup management unit. The program burning and caching unit is connected to the wireless communication encryption unit of the OTA security upgrade verification module. After receiving a new version program package, it stores it in the non-volatile memory. Based on the upgrade authorization and startup command, after receiving the complete program package and passing integrity verification, it performs the operation of burning the new program to the system's main program execution area; otherwise, it performs a rollback to restore to a known secure program version. The program backup management unit, before starting the new program burning, completely copies the currently running original system program and stores it in the backup non-volatile memory, forming a protected backup copy to ensure that the original program remains unchanged and recoverable throughout the upgrade process.

Images