EP-4740090-A1 - METHOD FOR UPDATING ELECTRONIC CIRCUIT BREAKER FIRMWARE TO AVOID LOAD DE-ENERGIZATION

EP4740090A1EP 4740090 A1EP4740090 A1EP 4740090A1EP-4740090-A1

Abstract

Systems and methods are provided for maintaining the functionality of an electronic circuit breaker during a firmware update. The electronic circuit breaker includes at least two microcontrollers. When a first microcontroller of the at least two microcontrollers is updated, a second microcontroller of the at least two microcontrollers remain active and continues to run a safety algorithm allowing the electronic circuit breaker to continuously monitors its load without any disruptions.

Inventors

NAYAK, AMIT
WILLIAMS, Westin

Assignees

Siemens Industry, Inc.

Dates

Publication Date: 20260513
Application Date: 20240812

Claims (20)

1. A method for updating an electronic circuit breaker with new firmware, the method comprising: receiving, by a radio, a firmware update for the electronic circuit breaker; disengaging, by a multiplexor, inputs to and outputs from a first microcontroller while maintaining inputs to and outputs from a second microcontroller, wherein the first microcontroller and second microcontroller are both configured to monitor the electronic circuit breaker and run a safety algorithm based on the respective inputs to and outputs from the multiplexor; updating the first microcontroller with the firmware update, wherein the second microcontroller is configured to continue to monitor the electronic circuit breaker and run the safety algorithm while the first microcontroller is updated; and restarting the first microcontroller, wherein after the restarting, the first microcontroller is configured to monitor the electronic circuit breaker and run the safety algorithm using the new firmware update.
2. The method of claim 1, further comprising: disengaging, by the multiplexor, the inputs to and the outputs from the second microcontroller while maintaining the inputs to and the outputs from the first microcontroller; updating the second microcontroller with the firmware update, wherein the first microcontroller is configured to continue to monitor the electronic circuit breaker and run the safety algorithm while the second microcontroller is updated; and restarting the second microcontroller, wherein after the restarting of the second microcontroller, the second microcontroller is configured to monitor the electronic circuit breaker and run the safety algorithm using the new firmware update.
3. The method of claim 1, wherein receiving the firmware update comprises receiving, by the radio, individual packets comprising the firmware update from a remote device, and wherein the method further comprises receiving, by the radio, a stop packet or an end packet that signifies a completion of a receipt of the firmware update.
4. The method of claim 1, further comprising instructing, by the radio, the multiplexor to disengage the inputs to and the outputs from the first microcontroller.
5. The method of claim 1, further comprising storing the firmware update in each of the first microcontroller and the second microcontroller after the receiving by the radio and prior to updating the first microcontroller.
6. The method of claim 1, further comprising storing the firmware update in a nonvolatile flash memory external to the first microcontroller and the second microcontroller.
7. The method of claim 1, further comprising: receiving an acknowledgement from a trip detection or power cycle detection module prior to the multiplexor disengaging the inputs to and the outputs from the first microcontroller.
8. The method of claim 1, wherein the radio is configured to receive the firmware update wirelessly.
9. A method for updating an electronic circuit breaker with new firmware, the method comprising: receiving, by a radio, a firmware update for the electronic circuit breaker; instructing, by an updatable microcontroller, a backup microcontroller to begin safety monitoring during an update procedure for the updatable microcontroller; updating the updatable microcontroller with the firmware update, wherein the backup microcontroller is configured to continue to monitor the electronic circuit breaker and run a safety algorithm while the updatable microcontroller is updating; and restarting the updatable microcontroller, wherein after the restart the updatable microcontroller is configured to monitor the electronic circuit breaker and run the safety algorithm using the firmware update.
10. The method of claim 9, wherein the backup microcontroller functions as a pass though circuit for signals from the electronic circuit breaker while the updatable microcontroller is active, wherein when the updatable microcontroller is deactivated, the backup microcontroller performs the safety algorithm.
11. The method of claim 9, wherein the backup microcontroller is not updated.
12. The method of claim 9, further comprising: receiving an acknowledgement from a host selection interrupt line prior to the updatable microcontroller instructing the backup microcontroller to begin the safety monitoring.
13. The method of claim 9, wherein receiving the firmware update comprises receiving, by the radio, individual packets comprising the firmware update from a remote device, and wherein the method further comprises receiving, by the radio, a stop packet or an end packet that signifies a completion of a receipt of the firmware update.
14. An electronic circuit breaker comprising: two or more microcontrollers configured to run an algorithm for monitoring and controlling a load of the electronic circuit breaker; and a radio configured to receive new firmware data from a remote device, the new firmware data configured to alter the algorithm; wherein a first microcontroller of the two or more microcontrollers is actively running the algorithm when a second microcontroller of the two or more microcontrollers is deactivated and updated with the new firmware data.
15. The electronic circuit breaker of claim 14, further comprising: a multiplexor configured to provide inputs to and receive outputs from the two or more microcontrollers.
16. The electronic circuit breaker of claim 15, wherein after receiving the new firmware data, the radio instructs the multiplexor to disengage the inputs and outputs of the first microcontroller.
17. The electronic circuit breaker of claim 14, wherein subsequent to the second microcontroller being restarted or rebooted after being updated, the second microcontroller is configured to run the algorithm while the first microcontroller is deactivated and updated with the new firmware data.
18. The electronic circuit breaker of claim 14, wherein the first microcontroller is not updatable, wherein the first microcontroller functions as a backup during a deactivation of the second microcontroller.
19. The electronic circuit breaker of claim 18, the first microcontroller functions as a pass though circuit for signals from the electronic circuit breaker while the second microcontroller is active, wherein when the second microcontroller is deactivated, the first microcontroller performs the algorithm.
20. The electronic circuit breaker of claim 14, further comprising: a nonvolatile flash memory external to the two or more microcontrollers, the nonvolatile flash memory configured to store the received new firmware data.

Description

METHOD FOR UPDATING ELECTRONIC CIRCUIT BREAKER FIRMWARE TO AVOID LOAD DE-ENERGIZATION FIELD [0001] This disclosure relates to maintaining safety protocols while updating an electronic circuit breaker. BACKGROUND [0002] Electronic circuit breakers provide safety against various faults and abnormal conditions to electrical wiring and loads for respective branches that the electronic circuit breakers are monitoring within power distribution panels. These faults and abnormal conditions may cause fire or destruction of property or loads connected to the branches. Damage or injury to humans may occur if monitoring is discontinued for even a brief period of time. [0003] Newer electronic circuit breakers provide new and additional features such as advanced monitoring of loads, setting alarms, and protecting against over and under voltage level, over and under temperature levels, and over and under power levels, among other features. These new electronic circuit breakers may also be configured to be updated over a wireless network. For example, to correct issues and provide additional or improved features, the firmware within the electronic circuit breakers may be securely and remotely updated without having to physically interact with the electronic circuit breaker. At the end of the update process, a microcontroller or microprocessor that is updated in this fashion is to be reset or rebooted for the new firmware to run. A reset/reboot event may cause the load to be briefly de-energized and/or a safety algorithm to be disengaged. The branch monitored by the circuit breaker will end up briefly offline or not safely monitored. [0004] When the electronic circuit breaker is not active (e.g., when an update is in process), there is a possibility of an inconvenience and danger to equipment and residents. A household load the residents of the household want to run may be deactivated or otherwise not safe to use. During these brief unmonitored periods of time, the electrical branch monitored by the respective electronic circuit breaker is vulnerable, which may result in an inconvenience and potential safety hazard. SUMMARY [0005] By way of introduction, the preferred embodiments described below include methods and systems for maintaining the functionality of an electronic circuit breaker during a firmware update. [0006] In an embodiment, a method for updating an electronic circuit breaker with new firmware is provided. The method includes: receiving, by a radio, a firmware update for the electronic circuit breaker; disengaging, by a multiplexor, inputs to and outputs from a first microcontroller while maintaining inputs to and outputs from a second microcontroller, wherein the first microcontroller and second microcontroller are both configured to monitor the electronic circuit breaker and run a safety algorithm based on the respective inputs to and outputs from the multiplexor; updating the first microcontroller with the firmware update, wherein the second microcontroller is configured to continue to monitor the electronic circuit breaker and run the safety algorithm while the first microcontroller is updated; and restarting the first microcontroller, wherein after the restarting, the first microcontroller is configured to monitor the electronic circuit breaker and run the safety algorithm using the new firmware update. [0007] The method may further include disengaging, by the multiplexor, inputs to and the outputs from the second microcontroller while maintaining inputs to and the outputs to the first microcontroller; updating the second microcontroller with the firmware update, wherein the first microcontroller is configured to continue to monitor the electronic circuit breaker and run the safety algorithm while the second microcontroller is updated; and restarting the second microcontroller, wherein after the restart, the second microcontroller is configured to monitor the electronic circuit breaker and run the safety algorithm using the new firmware update. [0008] In an embodiment, the radio receives individual packets from a remote device comprising the firmware update, wherein the radio further receives a stop packet or an end packet to signify a completion of a receipt of the firmware update. Further, after receiving the firmware update, the radio may instruct the multiplexor to disengage inputs to and the outputs from the first microcontroller. The radio may be configured to receive the firmware update wirelessly. [0009] In an embodiment, the firmware update is stored in each of the first microcontroller and the second microcontroller after receipt by the radio and prior to updating the first microcontroller. Alternatively, the firmware update is stored in a nonvolatile flash memory external to the first microcontroller and the second microcontroller. [0010] In an embodiment, the method further includes receiving an acknowledgement from the host selection interrupt line prior to the multiplexor disengaging inp