An OTA remote upgrading system and method for energy storage system

Abstract

The application relates to the technical field of energy storage systems, and discloses an OTA remote upgrading system and method for an energy storage system, which comprises an energy storage system containing a BMS, a PCS and an EMS; an upgrading package acquisition module that downloads and verifies an upgrading package; a data acquisition module that acquires operation state data of the energy storage system; an upgrading urgency determination module that determines an initial upgrading urgency degree according to the operation state data, determines a task priority according to a current task type, and adjusts the initial upgrading urgency degree based on the task priority to obtain an upgrading urgency degree; and an upgrading control module that performs upgrading control and verification based on the upgrading urgency degree using the upgrading package. The application quantitatively determines the upgrading urgency degree by comprehensively evaluating the real-time operation state and the business priority of the energy storage system, realizes orderly and safe remote upgrading, and improves the upgrading success rate and the system operation reliability.

Description

Technical Field

[0001] This invention relates to the field of energy storage system technology, and more specifically, to an OTA remote upgrade system and method for energy storage systems. Background Technology

[0002] With the popularization of renewable energy and the development of smart grids, energy storage systems are playing an increasingly critical role in the power system. A typical energy storage system integrates multiple core subsystems, including a battery management system (BMS), a power conversion system (PCS), and an energy management system (EMS). These systems run complex firmware and software, responsible for battery status monitoring, power conversion control, and energy dispatch decisions. To fix bugs, improve performance, and add new features, over-the-air (OTA) upgrades of this software / firmware have become a common requirement in the industry.

[0003] However, existing OTA upgrade solutions for energy storage systems are typically simplistic and crude. A common approach is for the cloud platform to distribute upgrade packages, and each energy storage device (BMS, PCS, EMS) to upgrade based on a pre-defined fixed order or simple device type priority (e.g., upgrading EMS first, then BMS). This approach has at least the following drawbacks: Lack of awareness of real-time system status: Existing solutions do not consider the actual operating status of each energy storage system, such as system load rate, duration of continuous operation, and recent failure rate. Forcing an upgrade when the system is under high load or has potential instability factors can easily lead to upgrade failure, system freeze, or even service interruption. Ignoring service priorities: Energy storage systems may simultaneously undertake multiple critical tasks such as grid frequency regulation, peak shaving and valley filling, and backup power. Different tasks have vastly different requirements for system availability and interruption tolerance. Existing solutions cannot dynamically adjust the upgrade strategy according to the urgency of the current task, and may upgrade while performing tasks with extremely high real-time requirements, such as grid frequency regulation, posing a serious threat to grid stability. The upgrade decision-making mechanism is too simplistic: the existing solution lacks a mechanism that can comprehensively assess the urgency of upgrading each subsystem and make fine-grained scheduling and control accordingly, resulting in low upgrade efficiency and high operational risks.

[0004] Therefore, there is an urgent need for a system that can sense the real-time operating status and business priorities of energy storage systems and perform OTA remote upgrades intelligently and securely accordingly. Summary of the Invention

[0005] In view of this, the present invention proposes an OTA remote upgrade system and method for energy storage systems, aiming to solve one or more of the above-mentioned problems.

[0006] On one hand, the present invention proposes an OTA remote upgrade system for energy storage systems, the system comprising: The energy storage system includes a battery management system, an energy storage converter system, and an energy management system, and the energy storage systems are interconnected through communication links; The upgrade package acquisition module is configured to download the upgrade package through the cloud management platform and verify the upgrade package. If the verification passes, the upgrade process will begin. The data acquisition module is configured to acquire the operating status data of the energy storage system when it is determined to enter the upgrade process. The operating status data includes system load rate, system runtime, system failure rate, communication link quality, and current task type. The upgrade urgency determination module is configured to determine the initial upgrade urgency of each energy storage system based on the system load rate, system runtime and system failure rate, determine the task priority based on the current task type, adjust the initial upgrade urgency based on the task priority, and determine the upgrade urgency of each energy storage system. The upgrade control module is configured to upgrade the energy storage system using the upgrade package based on the upgrade urgency, and to verify the energy storage system after the upgrade is completed.

[0007] Preferably, the upgrade package acquisition module verifies the upgrade package, including: The CRC checksum of the upgrade package is obtained through the cloud management platform. The CRC calculated value of the upgrade package is calculated using the CRC algorithm. The CRC checksum and the CRC calculated value are compared. If the CRC checksum and the CRC calculated value are consistent, the verification is deemed to have passed; otherwise, the verification is deemed to have failed.

[0008] Preferably, the upgrade urgency determination module determines the initial upgrade urgency of each energy storage system based on the system load rate, system runtime, and system failure rate, including: The system load rate, system runtime and system failure rate are each preset with weight coefficients, wherein the system load rate weight coefficient is a, the system runtime weight coefficient is b, the system failure rate weight coefficient is c, and a+b+c=1. The system load rate, system runtime, and system failure rate are normalized to obtain the load rate normalized value L, runtime normalized value T, and failure rate normalized value F, where the load rate normalized value L = current system load rate / system maximum load rate, the runtime normalized value T = current system runtime / system preset baseline runtime, and the failure rate normalized value F = current system failure rate / system maximum allowable failure rate. The initial upgrade urgency of each energy storage system is determined by a weighted summation algorithm, where the initial upgrade urgency is a*L+b*T+c*F.

[0009] Preferably, the upgrade urgency determination module determines the task priority based on the current task type, including: The current task types include: power grid frequency regulation tasks, peak shaving and valley filling tasks, backup power supply tasks, and routine energy management tasks; If the current task type is a power grid frequency regulation task, then the task priority is determined to be the first priority; If the current task type is a peak shaving and valley filling task, then the task priority is determined to be the second priority; If the current task type is a backup power task, then the task priority is determined to be the third priority. If the current task type is a regular energy management task, then the task priority is determined to be the fourth priority. The first priority, second priority, third priority, and fourth priority decrease in that order.

[0010] Preferably, the upgrade urgency determination module adjusts the initial upgrade urgency based on the task priority to determine the upgrade urgency of each energy storage system, including: Several preset urgency thresholds are set, and the preset urgency thresholds are compared with the initial upgrade urgency to determine the initial upgrade urgency of each energy storage system. The initial upgrade urgency is adjusted based on the task priority to determine the upgrade urgency of each energy storage system, specifically as follows: The initial upgrade urgency level includes a first upgrade urgency level, a second upgrade urgency level, a third upgrade urgency level, and a fourth upgrade urgency level, which decrease sequentially. If the task priority is the fourth priority, then the initial upgrade urgency will not be adjusted, and the upgrade urgency of the energy storage system will be set to the original initial upgrade urgency. If the task priority is the third priority, then the initial upgrade urgency is adjusted down one level to obtain the upgrade urgency of the energy storage system; If the task priority is the second priority, then the initial upgrade urgency is adjusted down two levels to obtain the upgrade urgency of the energy storage system; If the task priority is the first priority, then the initial upgrade urgency is adjusted down three levels to obtain the upgrade urgency of the energy storage system.

[0011] Preferably, the upgrade control module, based on the upgrade urgency, uses the upgrade package to perform upgrade control on the energy storage system, including: Each energy storage system is ranked according to the urgency of the upgrade. If the urgency of the upgrade is the same, the ranking is as follows: urgency of upgrade of energy storage converter system > urgency of upgrade of battery management system > urgency of upgrade of energy management system. The energy storage system is upgraded and controlled using the upgrade package according to the sorting order.

[0012] Preferably, the upgrade control module performs upgrade control on the energy storage system, including: The upgrade control module is equipped with a temporary takeover mode, which includes: when the battery management system is upgraded, the energy management system temporarily takes over battery status monitoring; when the energy storage converter system is upgraded, the energy management system temporarily takes over power scheduling; and when the energy management system is upgraded, the upgrade control module temporarily takes over energy management decision-making. When upgrading the energy storage system, the corresponding temporary takeover mode is selected according to the energy storage system to be upgraded for temporary takeover upgrade; The energy storage system is upgraded in the following ways: the battery management system is upgraded using an A / B partition hot-switching method, the energy storage converter system is upgraded using an online incremental method, and the energy management system is upgraded using a hot-patch method.

[0013] Preferably, it also includes an upgrade backup module, configured to generate a snapshot of the current state of the energy storage system and perform local storage backup; The current state snapshot includes firmware version and configuration parameters, running status data, and mapping relationships between devices.

[0014] Preferably, the upgrade control module verifies the energy storage system after the upgrade is completed, including: After each energy storage system upgrade is completed, functional verification and performance testing are performed on the energy storage system, including communication connectivity verification, parameter reading verification and business function verification. If the verification is successful, the upgrade completion information of the corresponding energy storage system will be synchronized to the cloud management platform; If the verification fails, the corresponding energy storage system will be restored to the current state snapshot. At the same time, the configuration parameters and operating status data in the current state snapshot will be used to restore normal operation and wait for the next upgrade.

[0015] Compared with existing technologies, the advantages of this invention are as follows: By setting up an upgrade urgency determination module and configuring it to "determine the initial upgrade urgency of each energy storage system based on system load rate, system runtime, and system failure rate," this invention can proactively identify devices in good operating condition (low load, reasonable runtime, low failure rate) suitable for upgrade and assign them a higher upgrade urgency. Conversely, for devices with busy systems or potential failure risks, the upgrade urgency is reduced. This allows the upgrade control module to avoid times when the system is in poor condition, significantly reducing the probability of upgrade failure due to system resource shortages or abnormal conditions, thereby improving the operational stability of the entire energy storage system.

[0016] The upgrade urgency determination module is further configured to "determine task priorities based on the current task type and adjust the initial upgrade urgency based on task priorities," enabling intelligent sensing of the current business nature of the energy storage system. For example, for equipment performing high-priority tasks such as grid frequency regulation, its upgrade urgency will be correspondingly lowered. Ultimately, the upgrade control module performs upgrade control "based on upgrade urgency," ensuring that energy storage systems performing critical tasks are not prioritized for upgrades, effectively avoiding critical business interruptions due to upgrades, thereby guaranteeing the energy storage system's support capability for the grid and power supply reliability.

[0017] By integrating information from two dimensions—system load rate, runtime, and failure rate—and current task type, this application constructs a quantitative "upgrade urgency" assessment model. This model is not a simple priority ranking, but rather a comprehensive score evaluating the necessity and safety of upgrading each energy storage system. Based on this, the upgrade control module can execute the optimal upgrade sequence according to this quantified "upgrade urgency." This intelligent scheduling mechanism maximizes system operational safety while ensuring the smooth progress of upgrade tasks, achieving a balance between safety and efficiency.

[0018] On the other hand, this application also provides an OTA remote upgrade method for an energy storage system, applied to the aforementioned OTA remote upgrade system for an energy storage system. This method is applied to an energy storage system, including a battery management system, an energy storage converter system, and an energy management system, wherein the energy storage systems are interconnected via communication links. The method includes: Download the upgrade package through the cloud management platform and verify the upgrade package. If the verification passes, proceed with the upgrade process. When it is determined that the upgrade process will be initiated, the operating status data of the energy storage system will be obtained. The operating status data includes system load rate, system runtime, system failure rate, communication link quality and current task type. The initial upgrade urgency of each energy storage system is determined based on the system load rate, system runtime, and system failure rate. The task priority is determined based on the current task type. The initial upgrade urgency is adjusted based on the task priority to determine the upgrade urgency of each energy storage system. Based on the urgency of the upgrade, the energy storage system is upgraded using the upgrade package, and the energy storage system is verified after the upgrade is completed.

[0019] It is understood that the methods and systems provided in this application have the same beneficial effects, and will not be described in detail here. Attached Figure Description

[0020] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the drawings used in the embodiments will be briefly described below. Obviously, the drawings described below are only some embodiments of the present invention. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort. In the drawings: Figure 1 A functional block diagram of an OTA remote upgrade system for an energy storage system provided in an embodiment of the present invention; Figure 2 A flowchart of an OTA remote upgrade method for an energy storage system provided in an embodiment of the present invention. Detailed Implementation

[0021] Exemplary embodiments of the present disclosure will now be described in more detail with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be implemented in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided to enable a more thorough understanding of the present disclosure and to fully convey the scope of the disclosure to those skilled in the art. It should be noted that, unless otherwise specified, embodiments and features in the embodiments of the present invention can be combined with each other. The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0022] In some embodiments of this application, see Figure 1 As shown, this embodiment provides an OTA remote upgrade system for energy storage systems, the system comprising: The energy storage system includes a battery management system, an energy storage converter system, and an energy management system, which are interconnected via communication links.

[0023] The upgrade package acquisition module is configured to download the upgrade package through the cloud management platform and verify the upgrade package. If the verification passes, the upgrade process will begin.

[0024] The data acquisition module is configured to acquire the operating status data of the energy storage system when it is determined to enter the upgrade process. The operating status data includes system load rate, system runtime, system failure rate, communication link quality, and current task type.

[0025] The upgrade urgency determination module is configured to determine the initial upgrade urgency of each energy storage system based on the system load rate, system runtime, and system failure rate; determine the task priority based on the current task type; adjust the initial upgrade urgency based on the task priority; and determine the upgrade urgency of each energy storage system.

[0026] The upgrade control module is configured to upgrade the energy storage system using the upgrade package based on the upgrade urgency, and to verify the energy storage system after the upgrade is completed.

[0027] This application calculates and adjusts the urgency of upgrades to arrange the upgrade sequence based on the current actual operating status of the energy storage system. This avoids forcibly upgrading the energy storage system when it is performing critical tasks under high load, reducing the impact of upgrades on the normal power supply of the energy storage system. At the same time, it ensures that faulty energy storage units that require urgent bug fixes can be upgraded first, balancing system stability and upgrade efficiency. By uniformly pushing upgrade packages through the cloud platform and completing verification in advance, the tedious operation of manual on-site upgrades is avoided, adapting to the batch upgrade needs of multiple distributed energy storage units and reducing the maintenance cost of the energy storage system.

[0028] Specifically, the energy storage system provides the specific execution target for OTA upgrades and establishes the data interaction foundation between various subsystems, providing a physical entity for subsequent acquisition of operating status data and execution of upgrade operations.

[0029] An energy storage system comprises a Battery Management System (BMS), a Power Conversion System (PCS), and an Energy Management System (EMS). The BMS monitors the voltage, current, temperature, and state of charge of individual battery cells. The PCS performs power conversion between the battery pack and the grid. The EMS coordinates and schedules the overall operation of the BMS and PCS. The BMS, PCS, and EMS are interconnected via communication links, which can be wired Ethernet, a controller area network (CAN), or a wireless communication network. Through these links, the three systems can exchange operational data, control commands, and upgrade documents in real time, providing communication support for subsequent upgrade urgency assessments and coordinated upgrade control.

[0030] The upgrade package acquisition module is used to securely obtain the firmware or software package required for the upgrade from the cloud management platform, and ensures that the upgrade package has not been tampered with or damaged during transmission through integrity verification, thereby avoiding upgrade failure or device malfunction due to upgrade package errors.

[0031] The upgrade package acquisition module is configured to download upgrade packages via the cloud management platform. This upgrade package contains firmware or software images for updating the battery management system, energy storage converter system, or energy management system. After downloading, the module verifies the upgrade package. One specific verification method is to obtain a pre-calculated CRC checksum for the upgrade package from the cloud management platform, and simultaneously calculate the CRC value for the downloaded upgrade package using the same CRC algorithm. The CRC checksum and the calculated CRC value are then compared. If they match, the verification passes, and the upgrade process is allowed; if they do not match, the verification fails, the upgrade package is discarded, and a request can be made to the cloud management platform to download it again. This verification step ensures the reliability of the upgrade package's source and the integrity of its content.

[0032] The data acquisition module is used to collect real-time operating status data of each subsystem in the energy storage system before the formal upgrade, providing an objective and quantitative basis for decision-making to assess the urgency of upgrading each device.

[0033] The data acquisition module is configured to proactively acquire operational status data from the battery management system, energy storage converter system, and energy management system when an upgrade process is initiated. This operational status data includes system load rate, system runtime, system failure rate, communication link quality, and current task type. Specifically, the system load rate reflects the device's computing resource utilization; system runtime records the continuous operating time of the device since its last restart or power-on; the system failure rate statistics the frequency of anomalies or errors occurring in the device recently; communication link quality measures the stability of the network connection between the device and the cloud management platform or other devices; and the current task type identifies the main business function the device is performing, such as grid frequency regulation, peak shaving and valley filling, backup power, or conventional energy management. This data will be sent to the upgrade urgency determination module.

[0034] The upgrade urgency determination module is used to comprehensively assess the real-time operating status of each energy storage subsystem and the urgency of its business, and quantitatively calculate the upgrade urgency of each device, thereby providing a scientific prioritization basis for the upgrade control module and avoiding upgrades when the system is in poor condition or performing critical tasks.

[0035] The upgrade urgency determination module first determines the initial upgrade urgency for each energy storage system based on the system load rate, system runtime, and system failure rate provided by the data acquisition module. In one specific implementation, weighting coefficients for the system load rate, system runtime, and system failure rate can be preset, denoted as a, b, and c respectively, satisfying a + b + c = 1. Then, these three parameters are normalized: the current system load rate is divided by the maximum system load rate to obtain the normalized load rate value L; the current system runtime is divided by the preset baseline runtime to obtain the normalized runtime value T; and the current system failure rate is divided by the maximum allowable failure rate to obtain the normalized failure rate value F. Finally, the initial upgrade urgency is calculated using a weighted summation algorithm: Initial Upgrade Urgency = aL + bT + c * F.

[0036] This module also determines task priorities based on the current task type. For example, it sets grid frequency regulation tasks as the highest priority (first priority), peak shaving and valley filling tasks as the second highest priority (second priority), backup power tasks as the third priority, and routine energy management tasks as the lowest priority (fourth priority).

[0037] After obtaining the initial upgrade urgency and task priority, this module adjusts the initial upgrade urgency based on the task priority to determine the final upgrade urgency for each energy storage system. One adjustment method is to first divide the initial upgrade urgency into several levels (e.g., first to fourth upgrade urgency levels) according to several preset urgency thresholds, and then adjust these levels downwards based on the task priority. Specifically, if the task priority is the lowest, the fourth priority, the original level remains unchanged; if the task priority is the third priority, the initial level is lowered by one level; if it is the second priority, it is lowered by two levels; and if it is the first priority, it is lowered by three levels. After the above adjustment, devices performing high-priority tasks will be assigned a lower upgrade urgency, thereby preventing them from being upgraded during critical business operations.

[0038] The upgrade control module schedules the upgrade sequence of each energy storage subsystem in an orderly manner based on the calculated upgrade urgency, and adopts appropriate temporary takeover mechanisms and upgrade methods during the upgrade process to minimize the impact of the upgrade on the normal operation of the system. After the upgrade is completed, it is verified to ensure the effectiveness of the upgrade.

[0039] The upgrade control module first prioritizes all subsystems (including BMS, PCS, and EMS) to be upgraded based on the upgrade urgency determination module for each energy storage system. Subsystems with higher upgrade urgency are upgraded first. As an optional prioritization rule, if multiple subsystems have the same upgrade urgency, they are prioritized in the following order: the upgrade urgency of the energy storage converter system is greater than that of the battery management system, which in turn is greater than that of the energy management system. When upgrade urgency is the same, the priority can be set based on the importance of the equipment or the magnitude of the upgrade risk.

[0040] During the upgrade process, the upgrade control module has a temporary takeover mode. Specifically, when the battery management system is upgraded, the energy management system temporarily takes over the battery status monitoring function, including monitoring and protecting parameters such as battery voltage, current, and temperature; when the energy storage converter system is upgraded, the energy management system temporarily takes over the power dispatching function to maintain power output stability; and when the energy management system is upgraded, the upgrade control module itself temporarily takes over energy management decisions and executes a preset backup dispatching strategy. These temporary takeovers ensure that the overall function of the energy storage system remains uninterrupted during the upgrade of a single subsystem.

[0041] Different upgrade methods are adopted to address the characteristics of different subsystems: the battery management system uses an A / B partition hot-switching upgrade method, that is, the system writes the new firmware to the backup partition in the background, and switches to the start partition by restarting after the writing is completed. If the upgrade fails, it can be rolled back to the original partition; the energy storage converter system uses an online incremental upgrade method, which only updates the changed code segments to reduce upgrade time and interruption time; the energy management system uses a hot patch upgrade method, which dynamically updates functional modules without restarting the entire system.

[0042] After the upgrade is completed, the upgrade control module verifies the upgraded energy storage system. Verification includes communication connectivity verification, parameter reading verification, and business function verification. If the verification passes, the upgrade completion information is synchronized to the cloud management platform; if the verification fails, a rollback mechanism is triggered, restoring the corresponding energy storage system to a snapshot of its state before the upgrade, and using the configuration parameters and operational status data from the snapshot to restore normal operation, awaiting the next upgrade opportunity.

[0043] In some embodiments of this application, the upgrade package acquisition module verifies the upgrade package by: obtaining the CRC checksum of the upgrade package through the cloud management platform, calculating the CRC calculated value of the upgrade package using the CRC algorithm, comparing the CRC checksum and the CRC calculated value, and determining that the verification passes if the CRC checksum and the CRC calculated value are consistent; otherwise, determining that the verification fails.

[0044] Specifically, the upgrade package acquisition module verifies the upgrade package to ensure that the upgrade package downloaded from the cloud management platform has not been damaged, tampered with, or had data errors during transmission. This ensures that the upgrade package relied upon by subsequent upgrade programs is complete and reliable, and avoids upgrade failure or abnormal operation of the energy storage system due to problems with the upgrade package itself.

[0045] Specifically, first, the upgrade package acquisition module sends a request to the cloud management platform to obtain the CRC checksum corresponding to the upgrade package to be downloaded. This CRC checksum is pre-calculated on the cloud management platform using the Cyclic Redundancy Check (CRC) algorithm based on the original upgrade package and is stored as an integrity identifier associated with the upgrade package itself. Second, after downloading the upgrade package, the upgrade package acquisition module uses the same CRC algorithm as the cloud management platform to calculate a CRC value for the locally mounted upgrade package. Then, the upgrade package acquisition module compares the CRC checksum obtained from the cloud management platform with the locally calculated CRC value.

[0046] If the comparison results show that the two are identical, it indicates that the downloaded upgrade package is completely identical to the original upgrade package on the cloud management platform, and the data has not been corrupted or tampered with during transmission. In this case, the verification is considered successful, and the upgrade process can proceed. If the comparison results show that the two are inconsistent, it indicates that the downloaded upgrade package contains data errors, is incomplete, or has been tampered with. In this case, the verification is considered failed, and the upgrade process will not proceed. In this situation, the upgrade package acquisition module can discard the current upgrade package and request the cloud management platform to re-download the upgrade package, or record the verification failure log for subsequent troubleshooting.

[0047] In some embodiments of this application, the upgrade urgency determination module determines the initial upgrade urgency of each energy storage system based on the system load rate, system runtime, and system failure rate. This includes: presetting weighting coefficients for each of the system load rate, system runtime, and system failure rate, where the system load rate weighting coefficient is a, the system runtime weighting coefficient is b, and the system failure rate weighting coefficient is c, and a+b+c=1; normalizing the system load rate, system runtime, and system failure rate to obtain a normalized load rate value L, a normalized runtime value T, and a normalized failure rate value F, where the normalized load rate value L = current system load rate / maximum system load rate, the normalized runtime value T = current system runtime / preset baseline runtime, and the normalized failure rate value F = current system failure rate / maximum allowable system failure rate; and determining the initial upgrade urgency of each energy storage system using a weighted summation algorithm, where the initial upgrade urgency = a*L + b*T + c*F.

[0048] The system load rate is determined based on the power load rate, communication load rate, and computing load rate. The equipment failure rate is defined as the average number of recoverable or unrecoverable failures affecting services per unit of operating time, which can be statistically analyzed using a sliding time window to avoid outdated historical data. The criteria for determining valid failures can be set as follows: BMS failures: abnormal battery voltage / temperature sampling, SOC fluctuation exceeding a threshold (e.g., 5%), SOH estimation failure, balancing circuit failure. PCS failures: overcurrent / overvoltage protection activation, IGBT overheating, grid synchronization failure, abnormal efficiency drop exceeding 5%. EMS failures: scheduling command issuance failure, data acquisition interruption exceeding 10 seconds, communication timeout with BMS / PCS. Exclusion criteria: single, occasional failures caused by external grid factors (requires manual marking or filtering via clustering algorithms).

[0049] Understandably, by quantifying, normalizing, and weighting the three parameters that reflect the real-time operational health of the energy storage system—system load rate, system runtime, and system failure rate—a comprehensive initial upgrade urgency value can be calculated, thereby objectively and comparatively assessing the suitability of each energy storage subsystem for upgrades.

[0050] Specifically, the upgrade urgency determination module determines the initial upgrade urgency of each energy storage system based on the system load rate, system runtime, and system failure rate, which is achieved in the following ways.

[0051] First, preset the weighting coefficients for system load rate, system runtime, and system failure rate. The weighting coefficient for system load rate is denoted as 'a', for system runtime as 'b', and for system failure rate as 'c', satisfying a + b + c = 1. The specific values ​​of these weighting coefficients can be set based on actual application scenarios and experience. For example, if more attention is paid to the current resource utilization of the system, 'a' can be set to a larger value; if more attention is paid to the long-term operational stability of the equipment, either 'b' or 'c' can be set to a larger value. The weighting coefficients a, b, and c can be determined using one of the following methods: based on historical upgrade data, obtained through logistic regression or entropy weighting; manually set by maintenance personnel according to the actual operating preferences of the energy storage system; or using a dynamic adjustment strategy: increasing the value of 'c' when the system failure rate rises recently; increasing the value of 'b' when the system has not been restarted for a long time. As a specific, but not limited, embodiment, values ​​a = 0.4, b = 0.3, and c = 0.3 can be used.

[0052] Secondly, the system load rate, system runtime, and system failure rate are normalized to eliminate differences between different units and make them comparable.

[0053] Specifically, the load rate normalization value L is calculated using the following formula: L = Current system load rate / Maximum system load rate. Here, the current system load rate reflects the percentage of computing or communication resources occupied by the energy storage system at the current moment, and the maximum system load rate is the theoretical maximum load value that the system can reach, typically taken as 100%. The value of L ranges from 0 to 1; a larger value indicates a heavier current load. The runtime normalization value T is calculated using the following formula: T = Current system runtime / System preset baseline runtime. Here, the current system runtime represents the length of time the energy storage system has been running continuously since the last restart or power-on, and the system preset baseline runtime is an empirical threshold representing the reference runtime for recommending system maintenance or restart. The value of T typically ranges from 0 to 1; if it exceeds 1, it indicates that the system has exceeded its operating period. In this case, T can be set to 1 or calculated based on the actual exceeded value. A larger value indicates a longer system operating time, and a relatively higher probability of aging or abnormalities. The normalized failure rate F is calculated using the following formula: F = Current system failure rate / Maximum allowable failure rate. Here, the current system failure rate represents the proportion of times the energy storage system experiences failures or anomalies within a recent preset time period (e.g., the last 24 hours or the last 7 days) out of the total number of operations. The maximum allowable failure rate is the upper limit of the failure rate allowed by the system design. Through this calculation, F ranges from 0 to 1. If the current failure rate exceeds the maximum allowable failure rate, F is greater than 1, indicating that the system is in a high-risk failure state. The larger the value, the more frequent the system failures.

[0054] Finally, the initial upgrade urgency of each energy storage system is determined using a weighted summation algorithm. The specific calculation formula is: Initial upgrade urgency = a*L + b*T + c*F. A higher initial upgrade urgency value indicates a heavier load, longer operating time, or higher failure rate for the energy storage system, meaning the system currently requires upgrades, maintenance, or updates. Conversely, a lower value indicates a better current operating condition and a relatively lower upgrade urgency.

[0055] In some embodiments of this application, the upgrade urgency determination module determines the task priority based on the current task type, including: the current task type includes: power grid frequency regulation task, peak shaving and valley filling task, backup power supply task, and conventional energy management task; if the current task type is a power grid frequency regulation task, the task priority is determined to be the first priority; if the current task type is a peak shaving and valley filling task, the task priority is determined to be the second priority; if the current task type is a backup power supply task, the task priority is determined to be the third priority; if the current task type is a conventional energy management task, the task priority is determined to be the fourth priority; wherein, the first priority, second priority, third priority, and fourth priority decrease sequentially.

[0056] Specifically, based on the types of business functions currently being performed by the energy storage system, corresponding task priorities are assigned to it, thereby identifying the different requirements of different businesses for the system's continuous operation capability. This will protect the energy storage system performing critical business during subsequent upgrade scheduling, preventing important business interruptions due to upgrades.

[0057] Specifically, firstly, the types of tasks that the energy storage system may undertake are predefined. In this embodiment, the current task types include grid frequency regulation tasks, peak shaving and valley filling tasks, backup power tasks, and conventional energy management tasks. These task types are categorized according to their different requirements for real-time performance, reliability, and interruption tolerance.

[0058] Secondly, the task priority is determined according to the current task type. The specific correspondence is as follows: If the task type currently being performed by the energy storage system is grid frequency regulation, then the task priority of the energy storage system is determined to be the first priority. Grid frequency regulation tasks require the energy storage system to be able to respond quickly to grid frequency fluctuations, usually completing power output regulation within milliseconds or seconds. It has the highest requirements for the system's real-time performance and reliability. Any interruption may lead to grid frequency instability, therefore it is given the highest priority.

[0059] If the current task type is a peak shaving and valley filling task, then the task priority is determined as the second priority. Peak shaving and valley filling tasks are mainly used to discharge during peak electricity consumption and charge during off-peak hours. Their response time requirements are relatively low compared to grid frequency regulation, usually on the order of minutes or hours, but they still need to be able to execute stably within a preset time period, so they are given the second highest priority.

[0060] If the current task type is a backup power task, then the task priority is determined to be the third priority. Backup power tasks are usually triggered when the power grid fails to provide temporary power to critical loads, and their importance is high. However, during normal power grid operation, the task is in standby mode, and the impact of upgrades on it is relatively controllable. Therefore, it is assigned the third priority.

[0061] If the current task type is a routine energy management task, then the task priority is set to the fourth priority. Routine energy management tasks include daily battery balancing management, data acquisition and reporting, status monitoring, and other routine operations. These tasks have low real-time requirements and allow for appropriate short interruptions, therefore they are assigned the lowest priority.

[0062] In some embodiments of this application, the upgrade urgency determination module adjusts the initial upgrade urgency based on the task priority to determine the upgrade urgency of each energy storage system. This includes: setting several preset urgency thresholds, comparing the preset urgency thresholds with the initial upgrade urgency to determine the initial upgrade urgency of each energy storage system; adjusting the initial upgrade urgency based on the task priority to determine the upgrade urgency of each energy storage system, specifically: the initial upgrade urgency includes a first upgrade urgency, a second upgrade urgency, a third upgrade urgency, and a fourth upgrade urgency, decreasing sequentially; if the task priority is the fourth priority, the initial upgrade urgency is not adjusted, and the upgrade urgency of the energy storage system is set to the original initial upgrade urgency; if the task priority is the third priority, the initial upgrade urgency is adjusted down one level to obtain the upgrade urgency of the energy storage system; if the task priority is the second priority, the initial upgrade urgency is adjusted down two levels to obtain the upgrade urgency of the energy storage system; if the task priority is the first priority, the initial upgrade urgency is adjusted down three levels to obtain the upgrade urgency of the energy storage system.

[0063] Understandably, based on the initial upgrade urgency reflecting the equipment's operational status, task priority is introduced as an adjustment factor to modify the upgrade urgency. Through a downward adjustment mechanism, energy storage systems currently executing high-priority tasks receive a lower final upgrade urgency, thus being prioritized later in the upgrade scheduling. This ensures that critical business operations are not interrupted by upgrade operations, achieving a balance between business continuity and equipment maintenance needs.

[0064] Specifically, firstly, several preset urgency thresholds are set. These thresholds divide the numerical range of the initial upgrade urgency into multiple intervals, each interval corresponding to an initial upgrade urgency level. The calculated initial upgrade urgency is compared with each preset urgency threshold to determine the initial upgrade urgency level of the energy storage system.

[0065] Secondly, the initial upgrade urgency is adjusted based on task priority to obtain the final upgrade urgency. The adjustment rule is as follows: if the task priority of the energy storage system is the fourth priority (i.e., the lowest priority, corresponding to conventional energy management tasks), then no adjustment is made to its initial upgrade urgency, and the final upgrade urgency of the energy storage system is directly set to the original initial upgrade urgency.

[0066] If the task priority is the third priority (corresponding to the backup power task), the initial upgrade urgency will be adjusted down one level. For example, if the initial upgrade urgency is the first priority, it will be adjusted to the second priority; if the initial priority is the second priority, it will be adjusted to the third priority; if the initial priority is the third priority, it will be adjusted to the fourth priority; if the initial priority is already the fourth priority, it will remain unchanged.

[0067] If the task priority is the second priority (corresponding to peak shaving and valley filling tasks), the initial upgrade urgency will be adjusted down two levels. For example, if the initial upgrade urgency is the first priority, it will be adjusted to the third priority; if the initial priority is the second priority, it will be adjusted to the fourth priority; and if the initial priority is the third or fourth priority, it will be adjusted to the fourth priority.

[0068] If the task priority is first priority (i.e., the highest priority, corresponding to the power grid frequency regulation task), the initial upgrade urgency will be adjusted down three levels. For example, if the initial upgrade urgency is first, it will be adjusted to fourth; if the initial priority is second, third, or fourth, it will all be adjusted to fourth.

[0069] Through the above adjustment methods, even if an energy storage system is in a poor operating state (i.e., the initial urgency of upgrading is very high), as long as it is currently performing high-priority tasks such as grid frequency regulation, its final upgrade urgency will be significantly reduced, thus avoiding being prioritized for upgrading during critical business operations. Conversely, for energy storage systems performing low-priority tasks, their final upgrade urgency is basically determined by their own operating state, and they can be upgraded and maintained in a timely manner.

[0070] In some embodiments of this application, the upgrade control module performs upgrade control on the energy storage system using the upgrade package based on the upgrade urgency, including: sorting each energy storage system according to the upgrade urgency; if the upgrade urgency is the same, sorting is performed according to the upgrade urgency of the energy storage converter system > the upgrade urgency of the battery management system > the upgrade urgency of the energy management system; and performing upgrade control on the energy storage system using the upgrade package according to the sorting order.

[0071] Understandably, based on the final upgrade urgency calculated by the upgrade urgency determination module, all energy storage subsystems to be upgraded are uniformly prioritized, and upgrade operations are performed sequentially according to this order. When upgrade urgency is the same, a second prioritization is performed based on the functional role of each subsystem within the energy storage system and the degree of upgrade risk, thereby forming a complete and orderly upgrade scheduling sequence and avoiding system conflicts or functional disorders caused by disordered upgrades.

[0072] Specifically, first, the upgrade control module obtains the final upgrade urgency level of each energy storage system (including the battery management system, energy storage converter system, and energy management system) as determined by the upgrade urgency determination module. Then, all energy storage systems to be upgraded are sorted in descending order of upgrade urgency. The higher the upgrade urgency level, the greater the necessity and urgency of upgrading the system, and therefore, the higher it is in the ranking, and the higher it is prioritized for upgrade execution.

[0073] Secondly, for situations where the urgency of upgrades is the same—that is, when multiple energy storage systems have the same level of urgency for final upgrades—further prioritization is based on a preset subsystem type priority rule. This rule can be set as follows: the priority of the energy storage converter system is higher than that of the battery management system, and the priority of the battery management system is higher than that of the energy management system. In other words, under the condition of equal urgency, the energy storage converter system is upgraded first, followed by the battery management system, and finally the energy management system. The energy storage converter system has the highest upgrade risk due to its firmware updates involving grid connection safety and control algorithm optimization, and should be prioritized to allow sufficient time for verification; the battery management system's stability directly affects battery safety, so it is prioritized second; the energy management system can be temporarily taken over during the upgrade process and has relatively low rollback costs, so it is arranged last.

[0074] The above sorting rules are based on the following considerations: Energy storage converter systems directly participate in power conversion and grid connection control, and their firmware updates may involve control algorithm optimization or security patches, which have a significant impact on the overall performance and safety of the system. Therefore, they are prioritized for upgrades. Battery management systems are responsible for battery status monitoring and protection, and their stability is crucial to battery safety. Therefore, they are ranked second. Energy management systems mainly undertake scheduling and decision-making functions, and can maintain operation through temporary takeover mechanisms during the upgrade process. Therefore, they can be scheduled for the last upgrade.

[0075] Finally, the upgrade control module, according to the sorting order described above, sequentially uses the verified upgrade packages to upgrade each energy storage system. After each energy storage system is upgraded and verified, the upgrade operation for the next energy storage system is initiated, until all systems to be upgraded are completed. This orderly upgrade scheduling minimizes the mutual interference between subsystems during the upgrade process, improving the overall reliability and success rate of the upgrade process.

[0076] In some embodiments of this application, the upgrade control module performs upgrade control on the energy storage system, including: the upgrade control module is equipped with a temporary takeover mode, the temporary takeover mode including: when the battery management system is upgraded, the energy management system temporarily takes over battery status monitoring; when the energy storage converter system is upgraded, the energy management system temporarily takes over power scheduling; when the energy management system is upgraded, the upgrade control module temporarily takes over energy management decision-making; when upgrading the energy storage system, the corresponding temporary takeover mode is selected according to the energy storage system to be upgraded for temporary takeover upgrade; the upgrade method of the energy storage system is: the battery management system is upgraded using an A / B partition hot-switching method, the energy storage converter system is upgraded using an online incremental upgrade method, and the energy management system is upgraded using a hot-patch upgrade method.

[0077] Understandably, during the upgrade of a single energy storage subsystem, a hot upgrade can be implemented by having other systems temporarily take over its core functions, achieving the effect of "upgrade without interrupting business." Simultaneously, differentiated upgrade technologies are adopted based on the hardware architecture and software characteristics of different subsystems to shorten upgrade time, reduce upgrade risks, and provide a reliable rollback mechanism, thereby minimizing the overall impact of the OTA upgrade process on the normal operation of the energy storage system.

[0078] Specifically, the upgrade control module has a pre-set temporary takeover mode. This temporary takeover mode defines a specific plan for another system to temporarily take over the critical functions of an energy storage subsystem during an upgrade. In this embodiment, the temporary takeover mode includes the following three scenarios.

[0079] The first approach involves the energy management system temporarily taking over battery status monitoring when the battery management system is upgraded. Specifically, during the battery management system restart or partition switching process, the energy management system directly reads sensor data such as voltage, current, and temperature from the battery pack via the communication link and makes judgments based on preset protection thresholds. It temporarily takes charge of monitoring and alarming for abnormal conditions such as overvoltage, undervoltage, and overtemperature, ensuring that the battery remains in a safe and controllable state during the upgrade.

[0080] The second approach involves the energy management system temporarily taking over the power dispatch function when the energy storage converter system is upgraded. Specifically, during the brief firmware update process of the energy storage converter system, the energy management system directly sends maintenance power output commands to the power modules of the energy storage converter system based on current grid commands and load demands, or maintains the power state from the previous moment, to avoid power fluctuations or output interruptions caused by the upgrade.

[0081] The third approach involves the upgrade control module temporarily taking over energy management decisions when the energy management system is upgraded. Specifically, before triggering the energy management system upgrade, the upgrade control module obtains the current energy scheduling strategy and key operating parameters in advance. Then, during the energy management system upgrade, it temporarily replaces the energy management system in making decisions according to the preset backup scheduling logic (such as maintaining the current charging and discharging power, executing peak shaving and valley filling strategies, etc.) to ensure the continuity of the system's basic functions.

[0082] When upgrading an energy storage system, the upgrade control module selects the corresponding temporary takeover mode based on the type of energy storage system to be upgraded, performs temporary takeover, and then executes the upgrade operation, thereby achieving a smooth upgrade without interrupting business operations.

[0083] Specifically, different upgrade technology solutions are adopted according to the architectural characteristics of different energy storage subsystems, as follows.

[0084] The battery management system (BMS) employs an A / B partition hot-swap upgrade method. The BMS storage area is divided into two independent partitions, partition A and partition B. The currently running system resides in one partition, while the upgrade package is written to the other, a backup partition. After the backup partition has been written and verified, the system performs a fast reboot, switching the boot pointer to the backup partition to achieve the new system version. If the system malfunctions after the switch, it can be rebooted again to switch back to the original partition, thus achieving a reliable upgrade rollback.

[0085] The energy storage converter system employs an online incremental upgrade method. The upgrade package contains only code or data segments that have changed relative to the current version, without including the complete firmware image. After the upgrade control module sends the incremental upgrade package to the energy storage converter system, the system dynamically merges the incremental content into the existing firmware in the background, updating only the changed parts. This method results in a small data transfer volume, short upgrade time, and the impact on power output is controlled within milliseconds or less.

[0086] The energy management system employs a hot-patching upgrade method. Upgrade packages exist in the form of dynamic link libraries or modular patches. The energy management system dynamically loads these patch modules without restarting the entire system, replacing or correcting the target functions or program logic currently running in memory. This approach achieves seamless upgrades to the energy management system, minimizing the impact on the continuity of scheduling decisions.

[0087] In some embodiments of this application, an upgrade backup module is also included, configured to generate a current state snapshot of the energy storage system and perform local storage backup; the current state snapshot includes firmware version and configuration parameters, operating status data, and mapping relationships between devices.

[0088] In some embodiments of this application, the upgrade control module verifies the energy storage system after the upgrade is completed, including: after each energy storage system is upgraded, performing functional verification and performance testing on the energy storage system, including communication connectivity verification, parameter reading verification, and business function verification; if the verification is successful, the upgrade completion information of the corresponding energy storage system is synchronized to the cloud management platform; if the verification fails, the corresponding energy storage system is restored to the current state snapshot, and the configuration parameters and operating status data in the current state snapshot are used to restore normal operation, and wait for the next upgrade.

[0089] Understandably, by generating a snapshot of the current state and backing it up locally before the upgrade, and by performing multi-dimensional functional verification and performance testing after the upgrade, the effectiveness of the upgrade and the recoverability of the system are ensured. In the event of verification failure, the system can quickly roll back to its stable state before the upgrade, thereby significantly reducing the risk of system unavailability due to upgrade failure and providing a complete upgrade security mechanism.

[0090] Specifically, the upgrade backup module is configured to generate a snapshot of the current state of the energy storage system before each OTA upgrade and perform a local storage backup. The current state snapshot includes at least the following three types of information.

[0091] The first category is firmware version and configuration parameters. This records the firmware or software version number currently running in the energy storage system (including the battery management system, energy storage converter system, and energy management system), as well as all currently effective configuration parameters for each system, such as protection threshold parameters for the battery management system, control parameters for the energy storage converter system, and scheduling strategy parameters for the energy management system.

[0092] The second category is operational status data. This records the key operational indicators of the energy storage system at the current moment, including but not limited to real-time operational data such as battery state of charge, battery health status, current charging and discharging power, system temperature, voltage, and current.

[0093] The third category is the mapping relationship between devices. This records the correspondence between communication addresses, logical hierarchical relationships, and configuration information of data interaction channels between various devices in the energy storage system. For example, the communication identifier mapping between the battery management system and the energy storage converter system, and the control command routing relationship between the energy storage converter system and the energy management system.

[0094] The aforementioned state snapshots are generated and stored in local non-volatile memory for use as a basis for recovery in the event of an upgrade failure.

[0095] Specifically, after the upgrade is completed, the upgrade control module verifies the energy storage system, including the following: After each energy storage system is upgraded, functional verification and performance testing are performed on the system. The functional verification and performance testing specifically include communication connectivity verification, parameter reading verification, and service function verification.

[0096] Communication connectivity verification refers to checking whether the communication link between the energy storage system and other related systems (such as the cloud management platform and other subsystems in the energy storage system) is established normally after the upgrade is completed, and whether it can correctly send and receive heartbeat packets or test messages.

[0097] Parameter reading verification refers to reading the key configuration parameters and operating status data of the energy storage system through a standard interface, comparing them with the preset standard values ​​or the expected values ​​after the upgrade, and confirming that the parameter reading is normal and the values ​​are within a reasonable range.

[0098] Business function verification refers to triggering the core business functions of the energy storage system. For example, for a battery management system, it verifies whether it can correctly report battery status data and accurately execute protection actions; for an energy storage converter system, it verifies whether it can adjust charging and discharging power according to instructions; and for an energy management system, it verifies whether it can normally execute energy dispatching decisions.

[0099] If all the above verifications pass, the upgrade is considered successful. The upgrade control module will synchronize the upgrade completion information of the corresponding energy storage system (including upgrade time, upgraded version number, verification results, etc.) to the cloud management platform, and the cloud management platform will record and update the version status of the device.

[0100] If any of the above verifications fails, the upgrade verification is deemed unsuccessful. In this case, the upgrade control module calls the current state snapshot stored in the upgrade backup module to restore the corresponding energy storage system to its pre-upgrade state. Specifically, this includes: rolling back the firmware version to the version recorded in the snapshot, restoring the configuration parameters stored in the snapshot, reinitializing system operation using the runtime data in the snapshot, and rebuilding the mapping relationship between devices. After restoration, the energy storage system resumes normal operation based on the configuration parameters and runtime data in the snapshot, while awaiting the next upgrade command. Through this rollback mechanism, the energy storage system can quickly recover to a stable state in the event of an upgrade failure, preventing long-term functional abnormalities due to upgrade issues.

[0101] This application proposes a differentiated and integrated upgrade architecture for three types of energy storage system devices—BMS, PCS, and EMS—that meet different real-time requirements, security levels, and business continuity requirements. The architecture adapts to three heterogeneous upgrade methods: A / B partition hot-switching, online incremental upgrade, and hot-patch upgrade. This ensures that the energy storage system remains operational during the upgrade process while minimizing the upgrade risks for each device.

[0102] On the other hand, see Figure 2 As shown, this application also provides an OTA remote upgrade method for an energy storage system, applied to the aforementioned OTA remote upgrade system for an energy storage system. The energy storage system includes a battery management system, an energy storage converter system, and an energy management system, which are interconnected via communication links. The method includes: Download the upgrade package through the cloud management platform and verify the upgrade package. If the verification passes, proceed with the upgrade process. When it is determined to enter the upgrade process, the operating status data of the energy storage system is obtained. The operating status data includes system load rate, system runtime, system failure rate, communication link quality, and current task type. The initial upgrade urgency of each energy storage system is determined based on the system load rate, system runtime, and system failure rate. The task priority is determined based on the current task type. The initial upgrade urgency is adjusted based on the task priority to determine the upgrade urgency of each energy storage system. Based on the urgency of the upgrade, the energy storage system is upgraded using the upgrade package, and the energy storage system is verified after the upgrade is completed.

[0103] By analyzing and calculating the current multi-dimensional operating status of the energy storage system, the urgency of the initial upgrade is determined first, and then the task priority is adjusted accordingly. This allows for accurate judgment of the upgrade priority of different energy storage units, avoiding blind batch upgrades that could interfere with the current operation of the energy storage system. At the same time, the process of verifying the upgrade package in advance and completing the verification after the upgrade through the cloud management platform effectively reduces the risk of upgrade errors and firmware incompatibility, improving the stability and security of OTA upgrades for the energy storage system and adapting to the scenario requirements of multi-unit collaborative operation of the energy storage system.

[0104] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program goods. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program goods embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0105] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program goods according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0106] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and not to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that modifications or equivalent substitutions can still be made to the specific implementation of the present invention. Any modifications or equivalent substitutions that do not depart from the spirit and scope of the present invention should be covered within the scope of protection of the claims of the present invention.

Claims

1. An OTA (Over-The-Air) remote upgrade system for energy storage systems, characterized in that, The system includes: The energy storage system includes a battery management system, an energy storage converter system, and an energy management system, and the energy storage systems are interconnected through communication links; The upgrade package acquisition module is configured to download the upgrade package through the cloud management platform and verify the upgrade package. If the verification passes, the upgrade process will begin. The data acquisition module is configured to acquire the operating status data of the energy storage system when it is determined to enter the upgrade process. The operating status data includes system load rate, system runtime, system failure rate, communication link quality, and current task type. The upgrade urgency determination module is configured to determine the initial upgrade urgency of each energy storage system based on the system load rate, system runtime and system failure rate, determine the task priority based on the current task type, adjust the initial upgrade urgency based on the task priority, and determine the upgrade urgency of each energy storage system. The upgrade control module is configured to upgrade the energy storage system using the upgrade package based on the upgrade urgency, and to verify the energy storage system after the upgrade is completed.

2. The OTA remote upgrade system for energy storage systems according to claim 1, characterized in that, The upgrade package acquisition module verifies the upgrade package, including: The CRC checksum of the upgrade package is obtained through the cloud management platform. The CRC calculated value of the upgrade package is calculated using the CRC algorithm. The CRC checksum and the CRC calculated value are compared. If the CRC checksum and the CRC calculated value are consistent, the verification is deemed to have passed; otherwise, the verification is deemed to have failed.

3. The OTA remote upgrade system for energy storage systems according to claim 1, characterized in that, The upgrade urgency determination module determines the initial upgrade urgency of each energy storage system based on the system load rate, system runtime, and system failure rate, including: The system load rate, system runtime and system failure rate are each preset with weight coefficients, wherein the system load rate weight coefficient is a, the system runtime weight coefficient is b, the system failure rate weight coefficient is c, and a+b+c=1. The system load rate, system runtime, and system failure rate are normalized to obtain the load rate normalized value L, runtime normalized value T, and failure rate normalized value F, where the load rate normalized value L = current system load rate / system maximum load rate, the runtime normalized value T = current system runtime / system preset baseline runtime, and the failure rate normalized value F = current system failure rate / system maximum allowable failure rate. The initial upgrade urgency of each energy storage system is determined by a weighted summation algorithm, where the initial upgrade urgency is a*L+b*T+c*F.

4. The OTA remote upgrade system for energy storage systems according to claim 3, characterized in that, The upgrade urgency determination module determines the task priority based on the current task type, including: The current task types include: power grid frequency regulation tasks, peak shaving and valley filling tasks, backup power supply tasks, and routine energy management tasks; If the current task type is a power grid frequency regulation task, then the task priority is determined to be the first priority; If the current task type is a peak shaving and valley filling task, then the task priority is determined to be the second priority; If the current task type is a backup power task, then the task priority is determined to be the third priority. If the current task type is a regular energy management task, then the task priority is determined to be the fourth priority. The first priority, second priority, third priority, and fourth priority decrease in that order.

5. The OTA remote upgrade system for energy storage systems according to claim 4, characterized in that, The upgrade urgency determination module adjusts the initial upgrade urgency based on the task priority to determine the upgrade urgency of each energy storage system, including: Several preset urgency thresholds are set, and the preset urgency thresholds are compared with the initial upgrade urgency to determine the initial upgrade urgency of each energy storage system. The initial upgrade urgency is adjusted based on the task priority to determine the upgrade urgency of each energy storage system, specifically as follows: The initial upgrade urgency level includes a first upgrade urgency level, a second upgrade urgency level, a third upgrade urgency level, and a fourth upgrade urgency level, which decrease sequentially. If the task priority is the fourth priority, then the initial upgrade urgency will not be adjusted, and the upgrade urgency of the energy storage system will be set to the original initial upgrade urgency. If the task priority is the third priority, then the initial upgrade urgency is adjusted down one level to obtain the upgrade urgency of the energy storage system; If the task priority is the second priority, then the initial upgrade urgency is adjusted down two levels to obtain the upgrade urgency of the energy storage system. If the task priority is the first priority, then the initial upgrade urgency is adjusted down three levels to obtain the upgrade urgency of the energy storage system.

6. The OTA remote upgrade system for energy storage systems according to claim 1, characterized in that, The upgrade control module, based on the urgency of the upgrade, uses the upgrade package to control the upgrade of the energy storage system, including: Each energy storage system is ranked according to the urgency of the upgrade. If the urgency of the upgrade is the same, the ranking is as follows: urgency of upgrade of energy storage converter system > urgency of upgrade of battery management system > urgency of upgrade of energy management system. The energy storage system is upgraded and controlled using the upgrade package according to the sorting order.

7. The OTA remote upgrade system for energy storage systems according to claim 1, characterized in that, The upgrade control module performs upgrade control on the energy storage system, including: The upgrade control module is equipped with a temporary takeover mode, which includes: when the battery management system is upgraded, the energy management system temporarily takes over battery status monitoring; when the energy storage converter system is upgraded, the energy management system temporarily takes over power scheduling; and when the energy management system is upgraded, the upgrade control module temporarily takes over energy management decision-making. When upgrading the energy storage system, the corresponding temporary takeover mode is selected according to the energy storage system to be upgraded for temporary takeover upgrade; The energy storage system is upgraded in the following ways: the battery management system is upgraded using an A / B partition hot-switching method, the energy storage converter system is upgraded using an online incremental method, and the energy management system is upgraded using a hot-patch method.

8. The OTA remote upgrade system for energy storage systems according to claim 1, characterized in that, It also includes an upgrade backup module, which is configured to generate a snapshot of the current state of the energy storage system and perform local storage backup; The current state snapshot includes firmware version and configuration parameters, running status data, and mapping relationships between devices.

9. The OTA remote upgrade system for energy storage systems according to claim 8, characterized in that, The upgrade control module verifies the energy storage system after the upgrade is completed, including: After each energy storage system upgrade is completed, functional verification and performance testing are performed on the energy storage system, including communication connectivity verification, parameter reading verification and business function verification. If the verification is successful, the upgrade completion information of the corresponding energy storage system will be synchronized to the cloud management platform; If the verification fails, the corresponding energy storage system will be restored to the current state snapshot. At the same time, the configuration parameters and operating status data in the current state snapshot will be used to restore normal operation and wait for the next upgrade.

10. An OTA remote upgrade method for an energy storage system, applied to an OTA remote upgrade system for an energy storage system as described in any one of claims 1-9, wherein the energy storage system includes a battery management system, an energy storage converter system, and an energy management system, and the energy storage systems are interconnected via communication links, characterized in that... The method includes: Download the upgrade package through the cloud management platform and verify the upgrade package. If the verification passes, proceed with the upgrade process. When it is determined that the upgrade process will be initiated, the operating status data of the energy storage system will be obtained. The operating status data includes system load rate, system runtime, system failure rate, communication link quality and current task type. The initial upgrade urgency of each energy storage system is determined based on the system load rate, system runtime, and system failure rate. The task priority is determined based on the current task type. The initial upgrade urgency is adjusted based on the task priority to determine the upgrade urgency of each energy storage system. Based on the urgency of the upgrade, the energy storage system is upgraded using the upgrade package, and the energy storage system is verified after the upgrade is completed.

Images