초록 ▼

A multi-channel control system includes at least a primary control microprocessor and a back-up control microprocessor operable to control a device. The primary control microprocessor and the back-up control microprocessor assert control over a controlled device according to a locally stored method

A multi-channel control system includes at least a primary control microprocessor and a back-up control microprocessor operable to control a device. The primary control microprocessor and the back-up control microprocessor assert control over a controlled device according to a locally stored method of controlling a back-up microprocessor assumption of control of a device.

대표청구항 ▼

1. A method of controlling a primary microprocessor assumption of control of a device in a multi-channel control device comprising the steps of: entering a control process in one of two possible control states, wherein said two possible control states are a primary microprocessor in-control state an

1. A method of controlling a primary microprocessor assumption of control of a device in a multi-channel control device comprising the steps of: entering a control process in one of two possible control states, wherein said two possible control states are a primary microprocessor in-control state and a primary microprocessor not in-control state;evaluating a plurality of conditions dependent upon which of said possible control states is true by evaluating a first set of conditions when said control process is in the primary microprocessor in-control state and a second set of conditions when said control process is in the primary microprocessor not in-control state;said second set of conditions includes at least four conditions and corresponds to the primary microprocessor not in-control state;a first condition of the at least four conditions is met when a remote channel is channel-in-control, a remote primary microprocessor controller is in-control, or the primary microprocessor controller has been in-control within a set time period and wherein said first condition of the at least four conditions has a highest priority;a second condition of the at least four conditions is met when a back-up microprocessor controller is in-control and the remote channel is not channel-in-control, wherein the second condition of the at least four conditions has a second highest priority;a third condition of the at least four conditions is met when the primary microprocessor controller has a better health than a latest determined remote primary microprocessor controller health, wherein the third condition of the at least four conditions has a third highest priority;a fourth condition of the at least four conditions is met when each of the first, second, and third condition of the at least four conditions is not met;entering one of a plurality of actions based on said evaluating of said plurality of conditions, wherein said plurality of actions includes an is channel-in-control output signal wrap-around false check, a take/keep control action, and a give-up control action; andperforming an action in response to entering said one of said plurality of actions. 2. The method of claim 1, wherein said method enters the give-up control action when said first, second, or fourth condition of the at least four conditions is met and wherein said method undergoes a delay and enters the take/keep control action when the third condition of the at least four conditions is met. 3. A method of controlling a primary microprocessor assumption of control of a device in a multi-channel control device comprising the steps of: entering a control process in one of two possible control states, wherein said two possible control states are a primary microprocessor in-control state and a primary microprocessor not in-control state;evaluating a plurality of conditions dependent upon which of said possible control states is true;entering one of a plurality of actions based on said evaluating of said plurality of conditions, wherein said plurality of actions includes an is channel-in-control output signal wrap-around false check, a take/keep control action, and a give-up control action; andperforming an action in response to entering said one of said plurality of actions, said action comprising at least one of setting a channel-in-control output wrap-around fault flag as true and setting the primary microprocessor as not in-control in response to said is channel-in-control output signal wrap-around false check returning positive. 4. The method of claim 3, wherein the step of performing an action in response to entering said one of said plurality of actions further comprises setting the primary microprocessor as in-control in response to entering the take/keep control action. 5. The method of claim 3, wherein the step of performing an action in response to entering said one of said plurality of actions further comprises setting the primary microprocessor as not in-control in response to entering the give-up control action. 6. The method of claim 3, further comprising the step of prioritizing each condition within said plurality of conditions such that when a higher priority condition is met, a corresponding action is taken regardless of whether any lower priority conditions are met.