METHOD OF VALIDATING A CONTROL/COMMAND SYSTEM AND CONTROL/COMMAND SYSTEM THAT CAN BE VALIDATED BY THE METHOD

摘要

The system comprises a management module (13), all-or-nothing inputs (11) representative of external events (en) and all-or-nothing outputs (17) controlling external actuators (4, 5), automatic modules (15) for executing predetermined tasks (n) so as, in response to said events (en), to act on said outputs (17), the set of states of the inputs (11) and outputs (17) at a given instant (Ti) constituting an instantaneous overall state (Fi) of the system (3), the set of states of the inputs (11) and outputs (17) that is obtained after executing a task (n) constituting a stabilized overall state (ESj) of the system (3). The management module (13) only permits (20) the execution of a task (n) corresponding to an arbitrary external event (en) if no task (n-1) corresponding to another event (en-1) is currently executing and the action of the automatic modules (15) only leads to a finite number of overall states (Fi).