Method and device for expanding multi-machine parallel system, electronic equipment, storage medium and program product

Abstract

The embodiment of the application provides a capacity expansion method and device of a multi-machine parallel system, electronic equipment, a storage medium and a program product, the method comprises the following steps: acquiring access state information of a newly added slave machine and real-time running characteristic data of a parallel communication bus; generating a firmware synchronization trigger strategy according to the access state information and the real-time running characteristic data; establishing a secure communication link between the newly added slave machine and a host machine of the multi-machine parallel system according to the firmware synchronization trigger strategy; acquiring a target firmware package and full-amount running parameters of the host machine of the multi-machine parallel system through the secure communication link; performing adaptive firmware upgrading on the newly added slave machine according to the target firmware package to obtain upgraded slave machine firmware; performing multi-dimensional closed-loop verification according to the upgraded slave machine firmware and the full-amount running parameters; and releasing the grid-connection permission of the newly added slave machine when the verification is passed, so as to complete seamless capacity expansion and improve the capacity expansion efficiency of the multi-machine parallel system.

Description

Technical Field

[0001] This application relates to the field of energy storage technology, and in particular to a method, apparatus, electronic device, storage medium and program product for expanding the capacity of a multi-machine parallel system. Background Technology

[0002] In the field of energy storage, expanding the capacity of multi-machine parallel systems is a key means to improve the overall power output capability. When adding a new parallel slave machine, it is necessary to ensure that the firmware version of the new slave machine is consistent with that of the system master.

[0003] In existing technologies, firmware needs to be pre-programmed manually, the corresponding firmware package needs to be downloaded, and the firmware needs to be programmed to the new device through a local debugging interface.

[0004] However, existing capacity expansion methods rely on manual operation and manual review. Manual operation is prone to errors, and the manual review process involves multiple cumbersome steps, resulting in reduced capacity expansion efficiency. Summary of the Invention

[0005] This application provides a method, apparatus, electronic device, storage medium, and program product for expanding the capacity of a multi-machine parallel system, in order to solve the problem of reduced expansion efficiency in the prior art.

[0006] In a first aspect, embodiments of this application provide a method for expanding the capacity of a multi-machine parallel system, including:

[0007] Acquire the access status information of newly added slave devices and the real-time operating characteristic data of the parallel communication bus;

[0008] Based on the access status information and the real-time operation characteristic data, a firmware synchronization triggering strategy is generated;

[0009] Establish a secure communication link between the newly added slave device and the host of the multi-machine parallel system according to the firmware synchronization triggering strategy;

[0010] The target firmware package and full operating parameters of the host of the multi-machine parallel system are obtained through the secure communication link, and the newly added slave machine is subjected to adaptive firmware upgrade according to the target firmware package to obtain the upgraded slave machine firmware.

[0011] Based on the upgraded slave firmware and the full set of operating parameters, a multi-dimensional closed-loop verification is performed, and the network access permission of the newly added slave is released when the verification passes, so as to complete the seamless expansion.

[0012] In one possible implementation, generating the firmware synchronization triggering strategy based on the access status information and the real-time operating characteristic data includes: calculating the bus load rate and communication error rate based on the real-time operating characteristic data to obtain the bus health assessment result; and generating the firmware synchronization triggering strategy based on the access status information and the bus health assessment result.

[0013] In one possible implementation, the step of calculating the bus load rate and communication error rate based on the real-time operating characteristic data to obtain the bus health assessment result includes: collecting the data frame transmission volume and the number of error frames of the parallel communication bus within a preset time window to obtain raw communication data; calculating the bus load rate and the communication error rate based on the raw communication data and the bus rated bandwidth; inputting the bus load rate and the communication error rate into a preset health assessment model, and outputting the bus health assessment result.

[0014] In one possible implementation, generating the firmware synchronization trigger strategy based on the access status information and the bus health assessment result includes: determining whether the bus health assessment result is greater than or equal to a preset health threshold; if the bus health assessment result is greater than or equal to the preset health threshold, generating a synchronization trigger instruction based on the access status information, and establishing the secure communication link based on the synchronization trigger instruction; if the bus health assessment result is less than the preset health threshold, calculating a delay compensation time based on the bus health assessment result, generating a delay synchronization trigger instruction, and establishing the secure communication link when the delay compensation time is reached.

[0015] In one possible implementation, the step of obtaining the target firmware package and full operating parameters of the multi-machine parallel system host through the secure communication link, and performing an adaptive firmware upgrade on the newly added slave device according to the target firmware package to obtain the upgraded slave device firmware includes: dynamically calculating the target packet size based on the real-time bandwidth of the secure communication link and the total data volume of the target firmware package, and splitting the target firmware package into multiple firmware sub-packages according to the target packet size; performing integrity verification on the multiple firmware sub-packages; if the verification fails, recording the breakpoint packet sequence number, and sending a resume request to the multi-machine parallel system host according to the breakpoint packet sequence number after communication is restored; assembling and verifying the received firmware sub-packages, and after the verification passes, performing firmware burning and restarting the newly added slave device to obtain the upgraded slave device firmware.

[0016] In one possible implementation, before performing multi-dimensional closed-loop verification based on the upgraded slave firmware and the full set of operating parameters, the method further includes: acquiring the hardware fingerprint information and power grid environment parameters of the newly added slave; constructing a virtual simulation operation model based on the hardware fingerprint information, the power grid environment parameters, and the full set of operating parameters; inputting preset extreme operating condition test stimuli into the virtual simulation operation model, outputting simulation operation results, and generating parameter adaptation correction coefficients based on the simulation operation results; dynamically correcting the full set of operating parameters based on the parameter adaptation correction coefficients to obtain target operating parameters; performing version consistency verification on the upgraded slave firmware and parameter matching verification on the target operating parameters; and releasing grid connection permissions when both the version consistency verification and the parameter matching verification pass.

[0017] Secondly, embodiments of this application provide a capacity expansion device for a multi-machine parallel system, comprising:

[0018] The first acquisition module is used to acquire the access status information of the newly added slave device and the real-time operating characteristic data of the parallel communication bus;

[0019] The generation module is used to generate a firmware synchronization triggering strategy based on the access status information and the real-time running feature data;

[0020] A module is created to establish a secure communication link between the newly added slave device and the host of the multi-machine parallel system according to the firmware synchronization triggering strategy.

[0021] The upgrade module is used to obtain the target firmware package and full operating parameters of the host of the multi-machine parallel system through the secure communication link, and perform adaptive firmware upgrade on the newly added slave according to the target firmware package to obtain the upgraded slave firmware.

[0022] The first verification module is used to perform multi-dimensional closed-loop verification based on the upgraded slave firmware and the full set of operating parameters, and release the network access permission of the newly added slave when the verification is successful, so as to complete seamless capacity expansion.

[0023] Thirdly, embodiments of this application provide an electronic device, including: a memory and a processor;

[0024] The memory stores computer-executed instructions;

[0025] The processor executes computer execution instructions stored in the memory, causing the processor to perform the first aspect and / or various possible implementations of the first aspect as described above.

[0026] Fourthly, embodiments of this application provide a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the first aspect and / or various possible implementations of the first aspect.

[0027] Fifthly, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the first aspect and / or various possible implementations of the first aspect.

[0028] The expansion method, apparatus, electronic device, storage medium, and program product for multi-machine parallel systems provided in this application obtain the access status information of newly added slave machines and the real-time operating characteristic data of the parallel communication bus, generate a firmware synchronization trigger strategy, establish a secure communication link, obtain the target firmware package and full operating parameters of the host of the multi-machine parallel system, perform adaptive firmware upgrade, and release network access permission to complete the expansion after multi-dimensional closed-loop verification. The trigger strategy driven by real-time operating characteristic data ensures that the synchronization operation is performed in a healthy bus state. The secure communication link and adaptive firmware upgrade avoid the risk of version mismatch, eliminate the need for manual operation review, and improve the expansion efficiency of multi-machine parallel systems. Attached Figure Description

[0029] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0030] Figure 1 A schematic diagram illustrating a scenario for the capacity expansion method of the multi-machine parallel system provided in this application;

[0031] Figure 2 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 1 ;

[0032] Figure 3 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 2 ;

[0033] Figure 4 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 3 ;

[0034] Figure 4 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 6 ;

[0035] Figure 7 A schematic diagram of the expansion device for the multi-machine parallel system provided in this application;

[0036] Figure 1 A schematic diagram of the structure of the electronic device provided in this application.

[0037] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0038] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application.

[0039] In the energy storage field, expanding the capacity of multi-unit parallel systems is a key means to improve overall power output. When adding a new slave unit, it is necessary to ensure that the firmware version of the new slave unit is consistent with that of the master unit in the multi-unit parallel system. Current technology requires manual pre-programming of the firmware, downloading the corresponding firmware package, and then burning the firmware to the new device through a local debugging interface. However, existing expansion methods rely on manual operation and review. Manual operation is prone to errors, and the multiple review steps involved in expansion are cumbersome, leading to reduced expansion efficiency.

[0040] To address the aforementioned technical problems, this application proposes the following technical concept: considering the automatic synchronization of firmware version and operating parameters of newly added slave devices in a multi-machine parallel system through an automated triggering mechanism and closed-loop verification process, thus solving the technical problems of cumbersome manual operation and low capacity expansion efficiency.

[0041] Figure 1 A schematic diagram illustrating a scenario for the capacity expansion method of the multi-machine parallel system provided in this application, as shown below. Figure 2 As shown, the specific application scenarios of this application include a multi-machine parallel system 101 and a newly added slave machine 102.

[0042] Specifically, the multi-machine parallel system 101 acquires the access status information of the newly added slave 102 and the real-time operating characteristic data of the parallel communication bus, generates a firmware synchronization trigger strategy, and establishes a secure communication link between the newly added slave 102 and the host of the multi-machine parallel system 101. Through the secure communication link, it acquires the target firmware package and all operating parameters, and performs an adaptive firmware upgrade on the newly added slave 102 according to the target firmware package. Based on the upgraded slave firmware and all operating parameters, it performs a multi-dimensional closed-loop verification, and releases the network access permission of the newly added slave when the verification passes, so as to complete seamless expansion.

[0043] Figure 1 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 2 ,like Figure 3 As shown, the method includes:

[0044] S201: Obtain the access status information of the newly added slave device and the real-time operating characteristic data of the parallel communication bus.

[0045] In this embodiment, the access status information of the newly added slave device includes, but is not limited to, the physical connection status of the parallel communication interface, the physical connection status of the parallel power interface, the device operation mode configuration status, and the hardware model and serial number information.

[0046] In this embodiment, the real-time operating characteristic data of the parallel communication bus includes, but is not limited to, bus data frame transmission rate, total number of valid data frames, total number of erroneous frames, bus idle time percentage, and signal interference intensity.

[0047] Specifically, the hardware detection module determines whether the physical connection is complete by detecting the level signals and plug-in / plug-out status of the parallel communication interface and power interface, and the mode configuration module reads the local operating mode register value of the device to confirm whether it has been configured as a parallel slave mode.

[0048] S202: Generate firmware synchronization triggering strategy based on access status information and real-time operation characteristic data.

[0049] Specifically, the bus load rate and communication error rate are calculated based on real-time operating characteristic data to obtain the bus health assessment result. Based on the access status information and the bus health assessment result, a firmware synchronization triggering strategy is generated.

[0050] S203: Establish a secure communication link between the newly added slave device and the host of the multi-machine parallel system according to the firmware synchronization triggering strategy.

[0051] In this embodiment, the secure communication link adopts an end-to-end encryption mechanism based on device identity authentication, supporting both symmetric and asymmetric encryption algorithms.

[0052] Specifically, the newly added slave device sends an authentication request frame to the parallel communication bus according to the synchronization trigger command. The master device receives the request frame, verifies the legality of the device certificate, confirms that the newly added slave device is an authorized access device of the system, and verifies the compatibility of the hardware model and firmware version.

[0053] Specifically, after successful verification, the host generates a random session key, encrypts the session key using the public key of the newly added slave device, and returns it. The newly added slave device then decrypts the session key using its own private key to obtain the session key and establishes a secure communication link.

[0054] The content recorded in the authentication request frame includes, but is not limited to, the hardware serial number, device certificate, and public key.

[0055] S204: Obtain the target firmware package and full operating parameters of the host of the multi-machine parallel system through a secure communication link, and perform adaptive firmware upgrade on the newly added slave machine according to the target firmware package to obtain the upgraded slave machine firmware.

[0056] Specifically, based on the real-time bandwidth of the secure communication link and the total data volume of the target firmware package, the target packet size is dynamically calculated, and the target firmware package is split into multiple firmware sub-packages according to the target packet size, and the integrity of the multiple firmware sub-packages is verified.

[0057] Specifically, if the verification fails, the breakpoint packet sequence number is recorded, and after communication is restored, a resume request is sent to the host of the multi-machine parallel system according to the breakpoint packet sequence number. The received firmware sub-packets are assembled and verified as a whole. After the verification is successful, the firmware is burned and the newly added slave is restarted to obtain the upgraded slave firmware.

[0058] S205: Based on the upgraded slave firmware and all operating parameters, perform multi-dimensional closed-loop verification, and release the network access permission of the newly added slave when the verification passes, so as to complete seamless capacity expansion.

[0059] In this embodiment, the multi-dimensional closed-loop verification includes, but is not limited to, firmware version consistency verification, firmware integrity secondary verification, target operating parameter matching verification, and virtual simulation operation validity verification.

[0060] Specifically, if all verification items pass, the newly added slave device will automatically unlock its grid connection permission and send a grid connection access application to the host. After the host receives the application and confirms that the newly added slave device is in normal condition, it will issue a grid connection operation permit. The newly added slave device will increase its power output according to the preset soft start curve and smoothly connect to the parallel system to complete seamless hot expansion.

[0061] Specifically, if any verification fails, the newly added slave device will remain in a locked state for network access, upload alarm information to the host, and automatically re-trigger the verification and synchronization process until all verifications pass.

[0062] As can be seen from the above embodiments, by acquiring the access status information of the newly added slave device and the real-time operating characteristic data of the parallel communication bus, a firmware synchronization trigger strategy is generated. After establishing a secure communication link, the target firmware package and full operating parameters of the system host are obtained, an adaptive firmware upgrade is performed, and the network access permission is released after multi-dimensional closed-loop verification to complete the expansion. The trigger strategy driven by real-time operating characteristic data ensures that the synchronization operation is performed in a healthy bus state. The secure communication link and adaptive firmware upgrade avoid the risk of version mismatch, do not require manual operation and review, and improve the expansion efficiency of multi-machine parallel systems.

[0063] In one embodiment of this application, adding a slave device to a multi-machine parallel system includes the following steps:

[0064] The new slave device acquires its own access status information and real-time operating characteristic data of the parallel communication bus; based on the access status information and real-time operating characteristic data, it generates a firmware synchronization trigger strategy; the new slave device establishes a secure communication link with the host in the multi-machine parallel system according to the firmware synchronization trigger strategy; through the secure communication link, the new slave device acquires the target firmware package and full operating parameters of the host in the multi-machine parallel system, and performs an adaptive firmware upgrade based on the target firmware package to obtain the upgraded slave device firmware; the new slave device performs a multi-dimensional closed-loop verification based on the upgraded slave device firmware and full operating parameters, and releases the network access permission when the verification passes, so as to complete seamless capacity expansion.

[0065] Specifically, the multi-machine parallel system scheme also includes the following: the master obtains the access status information of the newly added slave, the master is responsible for establishing a communication link with the newly added slave, the master sends a firmware synchronization command to the slave, the slave enters the firmware receiving state, the master sends the firmware package to the slave, and the firmware upgrade is performed. However, when the master fails, the slave cannot complete the firmware upgrade, and the synchronization operation cannot be guaranteed to be performed in a healthy bus state. In contrast, this embodiment obtains its own access information through the slave, thus providing higher reliability and security.

[0066] In one embodiment of this application, step S202 includes:

[0067] S2021: Calculate the bus load rate and communication error rate based on real-time operating characteristic data to obtain the bus health assessment results.

[0068] Specifically, the system collects the data frame transmission volume and error frame number of the parallel communication bus within a preset time window, calculates the bus load rate and communication error rate based on the original communication data and the bus rated bandwidth, inputs the bus load rate and communication error rate into a preset health assessment model, and outputs the bus health assessment result.

[0069] S2022: Generate firmware synchronization triggering strategy based on access status information and bus health assessment results.

[0070] Specifically, it determines whether the bus health assessment result is greater than or equal to the preset health threshold.

[0071] Specifically, if the bus health assessment result is greater than or equal to the preset health threshold, a synchronization trigger command is generated based on the access status information, and a secure communication link is established based on the synchronization trigger command.

[0072] Specifically, if the bus health assessment result is less than the preset health threshold, the delay compensation time is calculated based on the bus health assessment result, a delay synchronization trigger command is generated, and a secure communication link is established when the delay compensation time is reached.

[0073] As can be seen from the above embodiments, by calculating the bus load rate and communication error rate through real-time running feature data, the bus health assessment result is obtained. Combined with the access status information, a trigger strategy is generated, and the quantifiable indicators of bus health are introduced into the synchronous trigger decision. This avoids performing firmware upgrades or parameter synchronization when the communication quality is poor, and effectively prevents upgrade failures or data corruption caused by bus congestion and interference.

[0074] Figure 2 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 3 ,like Figure 4 As shown, step S2021 includes:

[0075] S301: Collects the data frame transmission volume and error frame count of the parallel communication bus within a preset time window to obtain the raw communication data.

[0076] In this embodiment, the preset time window can be dynamically adjusted according to the type of parallel communication bus and the real-time requirements of the system.

[0077] Specifically, at the end of each preset time window, the bus monitoring module counts the total number of valid data frames successfully transmitted on the bus within the window, as well as the total number of various error frames, and packages and stores the data in the local cache as raw communication data.

[0078] S302: Calculate the bus load rate and communication error rate based on the original communication data and the bus rated bandwidth.

[0079] In this embodiment, the formula for calculating the bus load rate is:

[0080]

[0081] In this embodiment, the formula for calculating the communication bit error rate is:

[0082]

[0083] In this embodiment, the bus rated bandwidth is the nominal maximum transmission rate of the parallel communication bus.

[0084] S303: Input the bus load rate and communication error rate into the preset health assessment model, and output the bus health assessment result.

[0085] In this embodiment, the preset health assessment model is constructed using a weighted scoring method.

[0086] In this embodiment, the sum of the weights of the bus load rate and the communication error rate is 1.

[0087] As can be seen from the above embodiments, by collecting the data frame transmission volume and the number of error frames within a preset time window, combining the bus load rate and communication error rate with the bus rated bandwidth, and inputting the pre-trained health assessment model to output the assessment results, the load rate and error rate dimensions are integrated, thereby improving the robustness of the assessment results.

[0088] Figure 3 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 4 ,like Figure 5 As shown, step S2022 includes:

[0089] S401: Determine whether the bus health assessment result is greater than or equal to the preset health threshold.

[0090] For example, the preset health threshold is set to 80 points. The health threshold can be adjusted globally through the host according to the system's requirements for synchronization reliability.

[0091] For example, for parallel energy storage converter systems with high real-time requirements, the health threshold can be raised to 85 points; for parallel uninterruptible power supply systems with lower real-time requirements, the health threshold can be lowered to 75 points.

[0092] S402: If the bus health assessment result is greater than or equal to the preset health threshold, a synchronization trigger command is generated based on the access status information, and a secure communication link is established based on the synchronization trigger command.

[0093] Specifically, when the access status information simultaneously meets the three conditions of "parallel communication interface connection completed", "parallel power interface connection completed" and "configured as parallel slave mode", the newly added slave generates an instant synchronization trigger command to start the host identification and communication link establishment process.

[0094] S403: If the bus health assessment result is less than the preset health threshold, the delay compensation time is calculated based on the bus health assessment result, a delay synchronization trigger command is generated, and a secure communication link is established when the delay compensation time is reached.

[0095] In this embodiment, the formula for calculating the delay compensation time is:

[0096]

[0097] In the formula, 10s represents 10 seconds.

[0098] Specifically, after a new slave device generates a delayed synchronization trigger command, it enters a waiting state and continuously monitors the bus health during the waiting period.

[0099] Specifically, when the delay compensation time is reached, the bus health assessment process is re-executed; if the health is still below the health threshold, the delay compensation time is recalculated until the health reaches the target and the synchronization process is triggered.

[0100] As can be seen from the above embodiments, when the bus health is not lower than the preset threshold, a synchronization trigger command is immediately generated and a secure communication link is established; when the health is lower than the threshold, the delay compensation time is calculated, a delay synchronization trigger command is generated, and the link is established after the bus recovers its health. This ensures the efficiency of immediate response in a good communication environment and avoids failure or data corruption caused by forced synchronization in a harsh environment.

[0101] In one embodiment of this application, step S204 includes:

[0102] S2041: Based on the real-time bandwidth of the secure communication link and the total data volume of the target firmware package, dynamically calculate the target sub-packet size, and split the target firmware package into multiple firmware sub-packets according to the target sub-packet size.

[0103] In this embodiment, the real-time bandwidth of the secure communication link is calculated by adding a slave device by counting the amount of valid encrypted data successfully received in the previous second.

[0104] In this embodiment, the formula for calculating the target packet size is:

[0105]

[0106] In the formula, min() represents taking the minimum value.

[0107] In this embodiment, the contents recorded in each firmware sub-packet include, but are not limited to, packet header, sub-packet sequence number, data segment, and checksum.

[0108] In this embodiment, the maximum number of bytes transmitted per frame is determined by the type of communication bus.

[0109] S2042: Perform integrity verification on multiple firmware sub-packages.

[0110] Specifically, each time a new slave device receives a firmware sub-packet, it extracts the checksum from the sub-packet, performs a checksum calculation on the data segment, and compares the calculation result with the checksum in the sub-packet.

[0111] Specifically, if the comparison matches, the sub-packet is confirmed to have been received completely, and the sub-packet is stored in the local cache; if the comparison does not match, the sub-packet is discarded, and a retransmission request containing the sub-packet sequence number is sent to the host, requesting the host to retransmit the firmware sub-packet.

[0112] S2043: If the verification fails, record the breakpoint packet sequence number and send a resume request to the host of the multi-machine parallel system according to the breakpoint packet sequence number after communication is restored.

[0113] Specifically, if a newly added slave device does not receive the next firmware sub-packet within the preset timeout period, or if it fails to verify a sub-packet after three consecutive retransmissions, it is determined that the communication is interrupted.

[0114] Specifically, when a communication interruption is detected, the newly added slave device records the sequence number of the last firmware sub-packet that has been successfully received as the breakpoint packet sequence number, and saves all received firmware sub-packets to local non-volatile memory.

[0115] Specifically, when the bus monitoring module detects that communication has been restored and the bus health meets the standard, the newly added slave device sends a resume request containing the breakpoint packet sequence number to the master device. After receiving the resume request, the master device continues the transmission from the next sub-packet after the breakpoint packet sequence number.

[0116] S2044: Assemble and verify the received firmware sub-packet. After verification, perform firmware burning and restart the newly added slave device to obtain the upgraded slave device firmware.

[0117] Specifically, after the new slave device receives all firmware sub-packets, it concatenates the data segments of all firmware sub-packets sequentially according to the sub-packet sequence number to restore the complete target firmware package. The complete target firmware package is then verified as a whole, and the verification result is compared with the firmware verification code pre-sent by the host.

[0118] Specifically, if the overall verification passes, the target firmware package is burned to the firmware storage area of ​​the slave device. During the burning process, each sector is written and verified. After the burning is completed, the newly added slave device automatically restarts the device. After restarting, the new firmware is automatically loaded, and the upgraded slave firmware is obtained.

[0119] Specifically, if the overall verification fails, all received firmware sub-packages are cleared, and the firmware pull request is re-initiated.

[0120] In this embodiment, after the newly added slave device completes the firmware reboot, it automatically performs a secondary version verification with the host to confirm whether its own firmware version number and firmware check code are completely consistent with those of the host.

[0121] As can be seen from the above embodiments, by dynamically calculating the packet size and splitting the transmission according to the real-time bandwidth of the secure communication link and the total data volume of the target firmware package, the integrity of the received sub-packets is checked. If the check fails, the breakpoint packet sequence number is recorded. After communication is restored, the transmission resumes from the breakpoint. After the overall verification is completed, the firmware is burned and restarted. A dual fault tolerance mechanism of dynamic packet splitting and breakpoint resumption is introduced. Dynamic packet splitting avoids the blockage caused by large packet transmission occupying too long bus time. Breakpoint resumption solves the efficiency problem of having to retransmit the complete firmware after communication interruption.

[0122] Figure 4 Flowchart of the expansion method for the multi-machine parallel system provided in this application Figure 5 ,like Figure 6 As shown, before step S205, the procedure also includes:

[0123] S501: Obtain the hardware fingerprint information and power grid environment parameters of the newly added slave device.

[0124] In this embodiment, the hardware fingerprint information includes, but is not limited to, the slave device's CPU model, power module model, sensor accuracy level, hardware version number, and printed circuit board version number.

[0125] In this embodiment, the grid environment parameters include, but are not limited to, the effective value of the grid voltage on the AC side of the parallel system, the grid frequency, the voltage harmonic distortion rate, the three-phase imbalance, and the grid impedance.

[0126] Specifically, the hardware fingerprint information is pre-stored in the read-only memory by the hardware information reading module of the slave device when the device leaves the factory, and the power grid environment parameters are obtained by the power grid detection module of the slave device through high-precision sampling circuit to collect AC side voltage and current signals, and then calculated after digital signal processing.

[0127] S502: Construct a virtual simulation operation model based on hardware fingerprint information, power grid environment parameters, and full range of operating parameters.

[0128] Specifically, the new slave device matches the pre-stored hardware simulation model parameter library based on the hardware fingerprint information, loads the corresponding power module, sensor and controller simulation models, sets the input boundary conditions of the simulation model according to the power grid environment parameters, and configures the control logic, protection thresholds and operating parameters of the simulation model according to the full amount of operating parameters obtained from the host.

[0129] In this embodiment, the full range of operating parameters includes, but is not limited to, parallel synchronization parameters, rated power parameters, protection threshold parameters, grid adaptation parameters, operation control parameters, and communication configuration parameters.

[0130] S503: Input preset extreme working condition test stimuli into the virtual simulation running model, output the simulation running results, and generate parameter adaptation correction coefficients based on the simulation running results.

[0131] In this embodiment, the preset extreme operating condition test stimuli include grid voltage surge, grid voltage drop, load change, parallel circulating current disturbance, and grid frequency fluctuation.

[0132] Specifically, extreme operating condition test stimuli are sequentially input into the virtual simulation operation model to simulate the operating state of the newly added slave device under extreme operating conditions and obtain the output indicators during the simulation operation.

[0133] In this embodiment, the output indicators include, but are not limited to, voltage deviation, output current deviation, circulating current magnitude, protection action time, and system response time.

[0134] Specifically, the output indicator is compared with a preset standard indicator threshold. If the output indicator exceeds the threshold range, the corresponding parameter adaptation correction coefficient is calculated using a preset parameter correction algorithm. S504: The full set of operating parameters is dynamically corrected based on the parameter adaptation correction coefficient to obtain the target operating parameters.

[0135] Specifically, the control parameters and protection parameters in the full set of operating parameters are multiplied by the corresponding parameter adaptation correction coefficients to obtain the corrected target operating parameters. After the correction is completed, the target operating parameters are written to the parameter storage area of ​​the slave device, and the corrected parameters are synchronized to the host device for backup.

[0136] In this embodiment, the parameter correction range is limited to a preset safety range.

[0137] S505: Performs version consistency verification on the upgraded slave firmware and parameter matching verification on the target operating parameters. Releases network access permission when both version consistency verification and parameter matching verification pass.

[0138] Specifically, the new slave device reads the firmware version number and firmware checksum from the host again, and compares them bit by bit with the upgraded firmware version number and checksum.

[0139] Specifically, the newly added slave device compares its own target operating parameters with the host's standard full operating parameters group by group to confirm that the deviation of all core parameters is within the allowable range.

[0140] Specifically, if both version consistency verification and parameter matching verification pass, the multi-dimensional closed-loop verification process will begin. If any verification fails, the synchronization process starting from firmware version verification will be automatically retried.

[0141] As can be seen from the above embodiments, by acquiring the hardware fingerprint information of the newly added slave device and the power grid environment parameters, a virtual simulation operation model is constructed, extreme operating condition test excitation is input, simulation results are output, parameter adaptation correction coefficients are generated, and all operating parameters are dynamically corrected. When both version consistency verification and parameter matching verification pass, grid connection permission is released. Potential matching problems are discovered in advance and automatically corrected through extreme operating condition simulation, avoiding problems such as circulating current and protection malfunctions caused by theoretical parameter matching but incompatibility with actual operating conditions.

[0142] Figure 6 A schematic diagram of the expansion device for the multi-machine parallel system provided in this application is shown below. Figure 7 As shown, the expansion device 60 for a multi-machine parallel system provided in this embodiment includes: a first acquisition module 601, a generation module 602, a creation module 603, an upgrade module 604, and a first verification module 605.

[0143] The first acquisition module 601 is used to acquire the access status information of the newly added slave device and the real-time operating characteristic data of the parallel communication bus.

[0144] The generation module 602 is used to generate a firmware synchronization triggering strategy based on access status information and real-time running characteristic data.

[0145] Create module 603 to establish a secure communication link between the newly added slave device and the host of the multi-machine parallel system based on the firmware synchronization triggering strategy.

[0146] The upgrade module 604 is used to obtain the target firmware package and full operating parameters of the host of the multi-machine parallel system through a secure communication link, and to perform adaptive firmware upgrade on the newly added slave machine according to the target firmware package to obtain the upgraded slave machine firmware.

[0147] The first verification module 605 is used to perform multi-dimensional closed-loop verification based on the upgraded slave firmware and all operating parameters, and release the network access permission of the newly added slave when the verification is successful, so as to complete seamless capacity expansion.

[0148] In one embodiment of this application, the generation module 602 includes:

[0149] The first calculation unit is used to calculate the bus load rate and communication error rate based on real-time operating characteristic data, and obtain the bus health assessment result.

[0150] The generation unit is used to generate firmware synchronization triggering strategies based on access status information and bus health assessment results.

[0151] In one embodiment of this application, the first computing unit includes:

[0152] The acquisition subunit is used to acquire the amount of data frames transmitted and the number of error frames on the parallel communication bus within a preset time window to obtain the raw communication data.

[0153] The first calculation subunit is used to calculate the bus load rate and communication error rate based on the original communication data and the bus rated bandwidth.

[0154] The output sub-unit is used to input the bus load rate and communication error rate into a preset health assessment model and output the bus health assessment result.

[0155] In one embodiment of this application, the generation unit includes:

[0156] The judgment sub-unit is used to determine whether the bus health assessment result is greater than or equal to the preset health threshold.

[0157] The generation sub-unit is used to generate a synchronization trigger command based on the access status information if the bus health assessment result is greater than or equal to the preset health threshold, and to establish a secure communication link based on the synchronization trigger command.

[0158] The second calculation subunit is used to calculate the delay compensation time based on the bus health assessment result if the bus health assessment result is less than the preset health threshold, generate a delay synchronization trigger instruction, and establish a secure communication link when the delay compensation time is reached.

[0159] In one embodiment of this application, the upgrade module 604 includes:

[0160] The second calculation unit is used to dynamically calculate the target packet size based on the real-time bandwidth of the secure communication link and the total data volume of the target firmware package, and to split the target firmware package into multiple firmware sub-packages according to the target packet size.

[0161] The first verification unit is used to perform integrity verification on multiple firmware sub-packages.

[0162] The recording unit is used to record the breakpoint packet sequence number if the verification fails, and to send a resume request to the host of the multi-machine parallel system according to the breakpoint packet sequence number after communication is restored.

[0163] The second verification unit is used to assemble and verify the received firmware sub-packet. After the verification is successful, the firmware is burned and the newly added slave device is restarted to obtain the upgraded slave device firmware.

[0164] In one embodiment of this application, the capacity expansion device 60 of the multi-machine parallel system includes:

[0165] The second acquisition module is used to acquire the hardware fingerprint information and power grid environment parameters of the newly added slave device.

[0166] The module is used to build a virtual simulation operation model based on hardware fingerprint information, power grid environment parameters, and full range of operating parameters.

[0167] The output module is used to input preset extreme working condition test stimuli into the virtual simulation running model, output the simulation running results, and generate parameter adaptation correction coefficients based on the simulation running results.

[0168] The correction module is used to dynamically correct all operating parameters according to the parameter adaptation correction coefficient to obtain the target operating parameters.

[0169] The second verification module is used to verify the version consistency of the upgraded slave firmware and the parameter matching of the target operating parameters. When both the version consistency verification and the parameter matching verification pass, the network connection permission is released.

[0170] The capacity expansion device for the multi-machine parallel system provided in this embodiment can execute the method provided in the above method embodiment. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0171] Figure 7 A schematic diagram of the structure of the electronic device provided in this application. ​ As shown, the electronic device 70 provided in this embodiment includes at least one processor 701 and a memory 702. Optionally, the electronic device 70 further includes a communication component 703. The processor 701, memory 702, and communication component 703 are connected via a bus.

[0172] In the specific implementation process, at least one processor 701 executes computer execution instructions stored in memory 702, causing at least one processor 701 to execute the above-described expansion method for a multi-machine parallel system.

[0173] The specific implementation process of processor 701 can be found in the above method embodiments, and its implementation principle and technical effect are similar. It will not be repeated here.

[0174] In the above embodiments, it should be understood that the processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. The general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly implemented by a hardware processor, or implemented by a combination of hardware and software modules within the processor.

[0175] The memory may include random access memory (RAM) and may also include non-volatile memory (NVM), such as at least one disk storage device.

[0176] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0177] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the above-described method for expanding the capacity of a multi-machine parallel system.

[0178] This application also provides a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, implement the above-described method for expanding the capacity of a multi-machine parallel system.

[0179] The aforementioned readable storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The readable storage medium can be any available medium accessible to a general-purpose or special-purpose computer.

[0180] An exemplary readable storage medium is coupled to a processor, enabling the processor to read information from and write information to the readable storage medium. Of course, the readable storage medium can also be a component of the processor. The processor and the readable storage medium can reside in an Application Specific Integrated Circuit (ASIC). Alternatively, the processor and the readable storage medium can exist as discrete components in the device.

[0181] The division of units is merely a logical functional division; in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be indirect coupling or communication connection through some interfaces, devices, or units, and may be electrical, mechanical, or other forms.

[0182] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0183] In addition, the functional units in the various embodiments of the present invention can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0184] If a function is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this invention, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of the various embodiments of this invention. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0185] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0186] Finally, it should be noted that other embodiments of the invention will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This invention is intended to cover any variations, uses, or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not disclosed herein, and is not limited to the precise structures described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope.

Claims

1. A method for expanding the capacity of a multi-machine parallel system, characterized in that, include: Acquire the access status information of newly added slave devices and the real-time operating characteristic data of the parallel communication bus; Based on the access status information and the real-time operation characteristic data, a firmware synchronization triggering strategy is generated; Establish a secure communication link between the newly added slave device and the host of the multi-machine parallel system according to the firmware synchronization triggering strategy; The target firmware package and full operating parameters of the host of the multi-machine parallel system are obtained through the secure communication link, and the newly added slave machine is subjected to adaptive firmware upgrade according to the target firmware package to obtain the upgraded slave machine firmware. Based on the upgraded slave firmware and the full set of operating parameters, a multi-dimensional closed-loop verification is performed, and the network access permission of the newly added slave is released when the verification passes, so as to complete the seamless expansion.

2. The method according to claim 1, characterized in that, The step of generating a firmware synchronization trigger strategy based on the access status information and the real-time operating characteristic data includes: The bus load rate and communication error rate are calculated based on the real-time operating characteristic data to obtain the bus health assessment result; Based on the access status information and the bus health assessment results, the firmware synchronization triggering strategy is generated.

3. The method according to claim 2, characterized in that, The step of calculating the bus load rate and communication error rate based on the real-time operating characteristic data to obtain the bus health assessment result includes: The data frame transmission volume and error frame count of the parallel communication bus within a preset time window are collected to obtain the raw communication data. Calculate the bus load rate and the communication error rate based on the original communication data and the bus rated bandwidth; The bus load rate and the communication error rate are input into a preset health assessment model, and the bus health assessment result is output.

4. The method according to claim 2, characterized in that, The step of generating the firmware synchronization triggering strategy based on the access status information and the bus health assessment result includes: Determine whether the bus health assessment result is greater than or equal to a preset health threshold; If the bus health assessment result is greater than or equal to the preset health threshold, a synchronization trigger instruction is generated based on the access status information, and the secure communication link is established based on the synchronization trigger instruction. If the bus health assessment result is less than the preset health threshold, then the delay compensation time is calculated based on the bus health assessment result, a delay synchronization trigger command is generated, and the secure communication link is established when the delay compensation time is reached.

5. The method according to claim 1, characterized in that, The process involves obtaining the target firmware package and full operating parameters of the host machine in the multi-machine parallel system through the secure communication link, and performing an adaptive firmware upgrade on the newly added slave machine based on the target firmware package to obtain the upgraded slave machine firmware, including: Based on the real-time bandwidth of the secure communication link and the total data volume of the target firmware package, the target packet size is dynamically calculated, and the target firmware package is split into multiple firmware sub-packages according to the target packet size. Integrity verification is performed on the multiple firmware sub-packages; If the verification fails, the breakpoint packet sequence number is recorded, and a resume request is sent to the host of the multi-machine parallel system according to the breakpoint packet sequence number after communication is restored. The received firmware sub-package is assembled and verified as a whole. After the verification is successful, the firmware is burned and the newly added slave device is restarted to obtain the upgraded slave device firmware.

6. The method according to any one of claims 1 to 5, characterized in that, Before performing multi-dimensional closed-loop verification based on the upgraded slave firmware and the full set of operating parameters, the process also includes: Obtain the hardware fingerprint information and power grid environment parameters of the newly added slave device; Based on the hardware fingerprint information, the power grid environment parameters, and all operating parameters, a virtual simulation operation model is constructed. Input preset extreme working condition test stimuli into the virtual simulation running model, output simulation running results, and generate parameter adaptation correction coefficients based on the simulation running results; The full set of operating parameters are dynamically corrected based on the parameter adaptation correction coefficient to obtain the target operating parameters; The upgraded slave firmware is subjected to version consistency verification, and the target operating parameters are subjected to parameter matching verification. When both the version consistency verification and the parameter matching verification pass, the network connection permission is released.

7. A capacity expansion device for a multi-machine parallel system, characterized in that, include: The first acquisition module is used to acquire the access status information of the newly added slave device and the real-time operating characteristic data of the parallel communication bus; The generation module is used to generate a firmware synchronization triggering strategy based on the access status information and the real-time running feature data; A module is created to establish a secure communication link between the newly added slave device and the host of the multi-machine parallel system according to the firmware synchronization triggering strategy. The upgrade module is used to obtain the target firmware package and full operating parameters of the host of the multi-machine parallel system through the secure communication link, and perform adaptive firmware upgrade on the newly added slave according to the target firmware package to obtain the upgraded slave firmware. The first verification module is used to perform multi-dimensional closed-loop verification based on the upgraded slave firmware and the full set of operating parameters, and release the network access permission of the newly added slave when the verification is successful, so as to complete seamless capacity expansion.

8. An electronic device, characterized in that, include: Memory, processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory, causing the processor to perform the expansion method for a multi-machine parallel system as described in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the expansion method of a multi-machine parallel system as described in any one of claims 1 to 6.

10. A computer program product, characterized in that, It includes a computer program that, when executed by a processor, implements the expansion method for a multi-machine parallel system as described in any one of claims 1 to 6.

Images