FAULT TOLERANT SYSTEMS AND METHOD OF USING THE SAME

摘要

Systems and methods for resolving fault detection in a control system is provided. The system includes an I/O module operably connected to a first, second, and third microcontroller for transmitting data. The first microcontroller is in an active state, i.e., in control, while the remaining controllers are in an idle state. The system further includes an event generator for generating an event indicative of a fault occurrence, and a means for detecting a fault event. The system also includes a means for reassigning a controller, wherein upon detection of a fault event in both the first and second controllers, the means for reassigning a controller changes the state of the third controller to active, leaving the remaining controllers idle or in a shutdown state, thereby effectively assigning control from the first controller to the third controller.

主权项

1. A non-voting redundant control system comprising:
an I/O module operably connected to a first, second, and third microcontroller for transmitting data, wherein the first microcontroller is in an active state, and the second and third microcontroller is in an idle state; wherein the first and second microcontrollers includes: an event generator for generating an event indicative of a fault occurrence, wherein one of the first, second, and third microcontrollers includes: a means for detecting an event operably connected to the event generator detecting an a fault event from the event generator, and communicating the fault event to a means for reassigning a controller, wherein the third microcontroller includes: the means for reassigning a controller operably connected to one of the event generators and the means for detecting an event, the means for reassigning a controller being operable to change the state of each microcontroller; and wherein upon detection of the fault event in both the first and second microcontrollers, the means for reassigning a controller switches the state of the first microcontroller with the third microcontroller, resulting in the third microcontroller being the active microcontroller.