초록 ▼

A fault tolerant computer comprising plural operation controllers is provided, which can judge and separate a damaged element by using a double-redundant structure without using a triple or greater-redundant structure. The computer comprises two judgment sections corresponding to each operation cont

A fault tolerant computer comprising plural operation controllers is provided, which can judge and separate a damaged element by using a double-redundant structure without using a triple or greater-redundant structure. The computer comprises two judgment sections corresponding to each operation controller in the double-redundant structure, and each judgment section compares an output from the operation controller connected to the present judgment section with an output from the operation controller connected to the other judgment section, wherein one judgment section receives a signal indicating a comparison result from the other judgment section, and collates this signal and a comparison result obtained in the present judgment section with reference to additional diagnosis information so as to judge whether the output from the operation controller connected to the present judgment section is correct.

대표청구항 ▼

[ What is claimed is:] [1.]1. A fault tolerant computer comprising plural operations controllers, wherein when one of the operation controllers is damaged, the damaged operation controller is identified and separated from the system of the fault tolerant computer, andthe fault tolerant computer has

[ What is claimed is:] [1.]1. A fault tolerant computer comprising plural operations controllers, wherein when one of the operation controllers is damaged, the damaged operation controller is identified and separated from the system of the fault tolerant computer, andthe fault tolerant computer has a double-redundant structure including two of the operation controllers, and the double-redundant structure has:a diagnosis section, connected to both the operation controllers, for obtaining from each operation controller additional diagnosis information for identifying and separating the damaged operation controller when one of the two operation controllers is damaged; andtwo judgment sections connected to each operation controller and connected to each other, each judgment section forcomparing an output from the operation controller connected to the present judgment section with an output from the operation controller connected to the other judgment section, andreceiving a signal indicating a result of the comparison from the other judgment section, and collating this signal and a result of the comparison obtained in the present section with reference to the diagnosis information so as to judge whether the output from the operation controller connected to the present judgment section is correct.