| 摘要 |
A fail-safe system (Fig.2) used in integrated control of a vehicle includes structural-element control portions. Preset priority degrees are given to the structural-element control portions, respectively. A manager control portion (10) stores one or more substitute programs designed to implement functions of ones among the structural-element control portions which are necessary for travel of the vehicle. A downloading device operates for, when one of the structural-element control portions which is necessary for travel of the vehicle fails, selecting one from non-failed ones of the structural-element control portions as a download destination in accordance with the priority degrees and downloading the substitute program corresponding to the failed structural-element control portion into the selected download-destination structural-element control portion. The selected download-destination structural-element control portion is lower in priority degree than the failed structural-element control portion. The download-destination structural-element control portion serves for the failed structural-element control portion according to the downloaded substitute program. <IMAGE> |
