A remote network IO module configuration system and method

Abstract

The application provides a remote network IO module configuration system and method, which comprises a secondary boot guiding module, an embedded WEB service module, a cold-hot separated storage strategy, a redundant backup and automatic fault switching, an isolated wide voltage range output and input, dry contact and wet node access support, a domestic architecture, a hardware carrying a domestic self-controllable processor, and a software based on a domestic operating system development, which can realize program remote upgrade, online parameter configuration, running log storage, hardware module redundant backup and fault seamless automatic switching, effectively reduces the field operation difficulty, and greatly simplifies the field management and maintenance work.

Description

Technical Field

[0001] This invention relates to computer communication, and more particularly to a remote network I / O module configuration system and method. Background Technology

[0002] In critical infrastructure sectors such as power systems, rail transit, and GF industries, the security and ease of maintenance of network I / O modules directly impact national security. Existing network I / O modules rely entirely on imported core hardware and software, limiting software upgrades to on-site program reprogramming. They lack log retention mechanisms, making it impossible to trace on-site operating conditions and achieve automatic fault switching. Therefore, this paper proposes a network I / O module capable of remote upgrades, automatic log retention, and automatic fault switching to meet the needs of high-reliability environments such as long-term unattended operation and enclosed spaces.

[0003] Currently, network I / O modules on the market have the following drawbacks: The software and hardware technologies rely on imports: the software uses imported operating systems, which may contain unknown vulnerabilities, allowing overseas entities to remotely control and tamper with I / O control signals, potentially causing security incidents. The hardware uses imported chips, posing export control risks. Poor reliability of program upgrades: The existing network I / O module software upgrades are carried out by on-site disassembly or single-partition overwrite. If an anomaly occurs during the upgrade process and causes the upgrade to fail, it will directly cause the system to crash. Low operational efficiency: Existing network I / O module parameters rely on local modification via serial or Ethernet ports, making remote configuration impossible. Critical information such as channel status and operating parameters lacks logging, making fault tracing difficult and resulting in a heavy workload for on-site maintenance. Lack of redundancy backup mechanism: In critical missions, single point of failure can cause system downtime. Existing redundancy solutions mostly involve cold switching between primary and backup, which cannot achieve seamless fault connection, resulting in temporary business interruption and serious losses. Summary of the Invention

[0004] The purpose of this invention is to address the shortcomings of the prior art by providing a remote network I / O module configuration system and method. This solution addresses the industry pain points of traditional network I / O module hardware and software technology in UUVs, such as reliance on imports, inconvenient on-site maintenance, inability to trace faults, easy failure of single modules, and high risks of software upgrades, thereby improving the self-sufficiency and security of the equipment.

[0005] To achieve the above objectives, the present invention adopts the following technical solution: This invention provides a remote network I / O module configuration system, comprising: Secondary boot module: used to identify the boot process of the FLASH partition and determine the boot area based on the verification flag; An embedded web service module is used for remote parameter configuration, channel status monitoring and log querying, channel control and detection; Hot and cold storage separation strategy: used for efficient storage and log retrieval, and real-time recording of device status; Redundancy backup and automatic fault switching: Used for hot switching between dual modules to ensure seamless connection of business functions; It provides isolated wide voltage range outputs and inputs, supporting both dry and wet contact connections.

[0006] Furthermore, the specific implementation of the secondary boot module includes: The FLASH memory is divided into two partitions, A and B, and the verified upgrade program is placed in the backup partition. The newly upgraded firmware is placed in a non-current running area of ​​the FLASH memory, and the boot flag is updated. If the upgrade fails, the boot flag will not be updated, and the program will roll back to the original partition to start.

[0007] Furthermore, the cold and hot separation storage strategy includes: Nearly an hour's worth of data status is stored in the system cache, supporting real-time log reporting and querying; By comparing the stored logs with the storage area capacity, and using a software algorithm to write them sequentially, the continuity of the logs is ensured.

[0008] Furthermore, a remote network I / O module configuration system is adopted, which also includes: When the system powers on, the secondary bootloader loads the valid partition program and determines where to boot from. Start the web service, open the parameter configuration permissions and status detection interface, and trigger log recording; The dual-module redundant backup sends heartbeats to each other in milliseconds. If no heartbeat is received within a timeout, a failover is triggered.

[0009] Furthermore, the web services specifically include: Whenever the channel status changes, a log is recorded. The log records adopt a cold and hot storage strategy. Nearly one hour of data status is stored in the system cache. When the host computer sends a query request, the log data is reported in real time. Cache data exceeding one hour is written sequentially to the local storage area.

[0010] Furthermore, the web service also includes: When the log storage area is full, the software algorithm compares the size of the current log storage with the size of the storage area. When the storage log exceeds the storage area capacity, write all the latest log data to the storage area according to the storage area size. Excess logs are discarded in descending order of time. When the current log is smaller than the storage area size, the newer logs are moved to the beginning of the storage area, and then the current logs are stored in address order to ensure log continuity.

[0011] Furthermore, the secondary boot loading specifically includes: The software designs the FLASH storage partition as a ping-pong primary and backup partition. Each time the software starts, it uses a secondary boot to identify the new software partition version in the FLASH and enter the system. When the module receives an external software upgrade package, the verified package will be stored in a partition other than the current software partition. After the upgrade is successful, the partition boot flag will be updated. When the module restarts, it will enter the upgraded partition system to update the program. If the upgrade fails, the upgrade package is discarded, the boot flag remains unchanged, and the module restarts and enters the original partition, ensuring the reliability and security of the software operation.

[0012] The beneficial effects of this invention are as follows: it adopts a domestic architecture, the hardware is equipped with a domestically produced and controllable processor, and the software is developed based on a domestic operating system. It can realize remote program upgrades, online parameter configuration, operation log storage, hardware module redundancy backup, and seamless automatic fault switching, which effectively reduces the difficulty of on-site operations and greatly simplifies on-site management and maintenance work. Using domestically produced and controllable chips, a complete control and detection module for the mutual conversion between network data packets and discrete digital quantities is built, providing core functions such as remote program upgrade, log storage, and fault switching. Components: All components are domestically produced, highly controllable, with ample supply channels and good versatility. Remote program upgrade: The software divides the FLASH storage space into primary and backup partitions, with the current program placed in the primary partition and the upgrade data package placed in the backup partition; Log management: The module is embedded in a web server, allowing for remote configuration of parameters, storage of runtime logs, and querying of channel status; Redundancy switching: The primary module sends a heartbeat to the backup module. If the backup module times out of receiving the heartbeat, the primary / backup relationship is switched. Attached Figure Description

[0013] Figure 1 This is a block diagram of the network I / O module. Figure 2 This is a diagram of a network interface; Figure 3 This is a schematic diagram of input signal detection; Figure 4 This is a schematic diagram of the output interface; Figure 5 For the upgrade flowchart; Figure 6 To control the page; Figure 7 This is a page to be collected. Detailed Implementation

[0014] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to the accompanying drawings. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the invention.

[0015] A remote network I / O module configuration system, comprising: Secondary boot module: used to identify the boot process of the FLASH partition and determine the boot area based on the verification flag; An embedded web service module is used for remote parameter configuration, channel status monitoring and log querying, channel control and detection; Hot and cold storage separation strategy: used for efficient storage and log retrieval, and real-time recording of device status; Redundancy backup and automatic fault switching: Used for hot switching between dual modules to ensure seamless connection of business functions; It provides isolated wide voltage range outputs and inputs, supporting both dry and wet contact connections.

[0016] The specific implementation of the secondary boot module includes: The FLASH memory is divided into two partitions, A and B, and the verified upgrade program is placed in the backup partition. The newly upgraded firmware is placed in a non-current running area of ​​the FLASH memory, and the boot flag is updated. If the upgrade fails, the boot flag will not be updated, and the program will roll back to the original partition to start.

[0017] The cold and hot separation storage strategy includes: Nearly an hour's worth of data status is stored in the system cache, supporting real-time log reporting and querying; By comparing the stored logs with the storage area capacity, and using a software algorithm to write them sequentially, the continuity of the logs is ensured.

[0018] This is implemented using a remote network I / O module configuration system, which also includes: When the system powers on, the secondary bootloader loads the valid partition program and determines where to boot from. Start the web service, open the parameter configuration permissions and status detection interface, and trigger log recording; The dual-module redundant backup sends heartbeats to each other in milliseconds. If the supermarket does not receive a heartbeat, a failover is triggered.

[0019] The web services specifically include: like Figures 5 to 7As shown, a log is recorded whenever the channel status changes. The log records adopt a cold and hot storage strategy, storing nearly an hour's worth of data status in the system cache. When the host computer sends a query request, the log data is reported in real time. Cache data exceeding one hour is written sequentially to the local storage area.

[0020] The web services also include: When the log storage area is full, the software algorithm compares the size of the current log storage with the size of the storage area. When the storage log exceeds the storage area capacity, write all the latest log data to the storage area according to the storage area size. Excess logs are discarded in descending order of time. When the current log is smaller than the storage area size, the newer logs are moved to the beginning of the storage area, and then the current logs are stored in address order to ensure log continuity.

[0021] The secondary boot loading is specifically as follows: The software designs the FLASH storage partition as a ping-pong primary and backup partition. Each time the software starts, it uses a secondary boot to identify the new software partition version in the FLASH and enter the system. When the module receives an external software upgrade package, the verified package will be stored in a partition other than the current software partition. After the upgrade is successful, the partition boot flag will be updated. When the module restarts, it will enter the upgraded partition system to update the program. If the upgrade fails, the upgrade package is discarded, the boot flag remains unchanged, and the module restarts and enters the original partition, ensuring the reliability and security of the software operation. Example

[0022] like Figure 1 As shown, the network I / O module has a domestic dual-core 32-bit processor chip on board. The module supports 9~42V power input, and 24V power supply is used here. The voltage is converted to 3.3V for the whole board through the internal isolated power supply and non-isolated power supply modules to supply each unit.

[0023] Network I / O modules can be divided into control units, detection units, storage units, and transmission units according to their functions.

[0024] Network interface design: like Figure 2As shown, the processor integrates two Gigabit Ethernet controllers, supporting data transmission rates of 10 / 100 / 1000Mbps; it supports RMII and RGMII interfaces, with one 100Mbps port brought out via the RGMII interface. The PHY is a domestically produced model, conforming to the 10BASE-Te, 100BASE-TX, and 1000BASE-T IEEE 802.3 standards. It provides all the physical layer functions required for transmitting and receiving Ethernet packets via a CAT.5E UTP cable; MDIO serves as the PHY configuration interface, used for power-on initialization of the PHY registers. The 100BASE-TX connector is isolated by an on-board transformer and led to the connector pins.

[0025] The network interface is used to connect to a remote host to receive Ethernet data packets, parse the instructions within the data packets, detect the input level status using the acquisition pins, and output high or low levels using the control pins, thereby realizing remote data acquisition and control functions.

[0026] Detection interface design: like Figure 3 As shown, the module provides input signal detection, and the detection signal is sent to the processor pin to read its status after being optically isolated and logically reversed. When the detection interface is used as a wet contact, DI_VCC is connected to the external power supply, and DI is connected to the input signal. When the detection interface is used as a dry contact, DI_VCC is connected to the external GND, and DI is connected to the input signal.

[0027] Control interface design: like Figure 4 As shown, the network I / O module outputs isolated control signals. These control signals are then optocoupled and driven by a PMOS to the connector pins. The control voltage is determined by the external DO_VCC.

[0028] Redundancy backup and automatic failover design: The module supports fault detection and automatic failover. An independent fault detection thread is designed within the program. The main module sends heartbeat data to the backup module every 100ms and checks the backup module's heartbeat response. If the backup module does not detect the other module's heartbeat data for more than 2 seconds, it initiates failover. At this time, the backup module takes over the main module's business and maintains the business state unchanged. The application reads and saves the state of the business interfaces and records the failover log to ensure continuous service during critical tasks.

[0029] By adopting a domestically developed operating system, we can completely break free from dependence on imported technology, eliminate supply chain risks at the source, and significantly improve the security and controllability of the modules. Build a highly secure and reliable remote upgrade strategy to effectively avoid the risk of upgrade failure due to environmental fluctuations, prevent system paralysis, and ensure the stability of online module upgrades; To improve the efficiency of remote operation and maintenance, a sound remote parameter configuration system and log recording mechanism should be established to record and trace the operating status of modules, thereby significantly reducing on-site maintenance costs. Designed with millisecond-level response redundancy backup and automatic failover technology to ensure the continuity and availability of critical tasks.

[0030] The embodiments described above are merely illustrative of implementation methods of the present invention, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of the present invention. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the present invention, and these modifications and improvements all fall within the scope of protection of the present invention. Therefore, the scope of protection of this patent should be determined by the appended claims.

Claims

1. A remote network I / O module configuration system, characterized in that, include: Secondary boot module: used to identify the boot process of the FLASH partition and determine the boot area based on the verification flag; An embedded web service module is used for remote parameter configuration, channel status monitoring and log querying, channel control and detection; Hot and cold storage separation strategy: used for efficient storage and log retrieval, and real-time recording of device status; Redundancy backup and automatic fault switching: Used for hot switching between dual modules to ensure seamless connection of business functions; It provides isolated wide voltage range outputs and inputs, supporting both dry and wet contact connections.

2. The remote network I / O module configuration system according to claim 1, characterized in that, The specific implementation of the secondary boot module includes: The FLASH memory is divided into two partitions, A and B, and the verified upgrade program is placed in the backup partition. The newly upgraded firmware is placed in a non-current running area of ​​the FLASH memory, and the boot flag is updated. If the upgrade fails, the boot flag will not be updated, and the program will roll back to the original partition to start.

3. The remote network I / O module configuration system according to claim 1, characterized in that, The cold and hot separation storage strategy includes: Nearly an hour's worth of data status is stored in the system cache, supporting real-time log reporting and querying; By comparing the stored logs with the storage area capacity, and using a software algorithm to write them sequentially, the continuity of the logs is ensured.

4. The remote network I / O module configuration method according to claim 3, characterized in that, This is implemented using a remote network I / O module configuration system as described in any one of claims 1 to 3, and further includes: When the system powers on, the secondary bootloader loads the valid partition program and determines where to boot from. Start the web service, open the parameter configuration permissions and status detection interface, and trigger log recording; The dual-module redundant backup sends heartbeats to each other in milliseconds. If no heartbeat packet is received within a timeout, a failover is triggered.

5. A remote network I / O module configuration method according to claim 4, characterized in that, The web services specifically include: Whenever the channel status changes, a log is recorded. The log records adopt a cold and hot storage strategy. Nearly one hour of data status is stored in the system cache. When the host computer sends a query request, the log data is reported in real time. Cache data exceeding one hour is written sequentially to the local storage area.

6. The remote network I / O module configuration method according to claim 5, characterized in that, The web services also include: When the log storage area is full, the software algorithm compares the size of the current log storage with the size of the storage area. When the storage log exceeds the storage area capacity, write all the latest log data to the storage area according to the storage area size. Excess logs are discarded in descending order of time. When the current log is smaller than the storage area size, the newer logs are moved to the beginning of the storage area, and then the current logs are stored in address order to ensure log continuity.

7. A remote network I / O module configuration method according to claim 6, characterized in that, The secondary boot loading is specifically as follows: The software designs the FLASH storage partition as a ping-pong primary and backup partition. Each time the software starts, it uses a secondary boot to identify the new software partition version in the FLASH and enter the system. When the module receives an external software upgrade package, the verified package will be stored in a partition other than the current software partition. After the upgrade is successful, the partition boot flag will be updated. When the module restarts, it will enter the upgraded partition system to update the program. If the upgrade fails, the upgrade package is discarded, the boot flag remains unchanged, and the module restarts and enters the original partition, ensuring the reliability and security of the software operation.

Images