초록 ▼

A dual computer cross-checking system includes a control computer for controlling a process in accordance with input data and a monitoring computer. The two computers are interconnected to exchange check data on a cyclic basis, each computer carrying out a number of processing operations on the rece

A dual computer cross-checking system includes a control computer for controlling a process in accordance with input data and a monitoring computer. The two computers are interconnected to exchange check data on a cyclic basis, each computer carrying out a number of processing operations on the received check data before transmitting the data thus processed to the other computer. In addition, each computer checks the received check data against an expected value. An error condition is detected if the result of at least one of these comparisons is found to be incorrect.

대표청구항 ▼

A dual computer cross-checking system comprising: a control computer; control data supply means for supplying control data to said control computer; means in said computer for processing said control data and producing control output signals; a monitoring computer for checking the operation of the c

A dual computer cross-checking system comprising: a control computer; control data supply means for supplying control data to said control computer; means in said computer for processing said control data and producing control output signals; a monitoring computer for checking the operation of the control computer; means for interchanging check data between the control computer and the monitoring computer on a cyclic basis; means in each computer for carrying out a predetermined calculation on the check data it receives from the other computer whereby to modify that check data in a predetermined manner; means in each computer for checking that the modified check data received from the other computer bears a predetermined relationship to the check data it transmitted to the other computer in the previous cycle; and shut-down means controlled by both computers for shutting down the control system in the event that at least one of said checking operations reveals a discrepancy.